Elementary Info Search alert will not delete

Mac OS Monterey 12.7 start up screen warning delete button is not accessible. Moving the warning to Trash results in the warning sliding under the Trash bucket.


iMac 24″, macOS 12.7

Posted on Oct 2, 2023 4:56 AM

Reply

Similar questions

14 replies

Oct 4, 2023 11:15 AM in response to John Galt

Elementary Info Search


1. The Symantec instructions I linked are just a starting

point. You need to search their website for Mac-specific uninstallation

instructions. 


The instructions I linked in my earlier reply should work.

They were updated recently.

"exe" files won't work, so I think you went off in

the wrong direction there. 


2. Symantec Mac-specific uninstallation instructions.  


3. Uninstall

Norton device security

no file found


 


4. Norton Ultimate Help Desk


Remove

all Norton programs for Mac using the RemoveNortonMacFiles tool


Download and run

RemoveNortonMacFiles as an administrator 


Last login: Wed Oct  4 17:09:23 on ttys000


You have new mail.


/Users/richard**********/Downloads/RemoveNortonMacFiles/RemoveNortonMacFiles.command

; exit;


The default interactive shell is now

zsh.


To update your account to use zsh,

please run `chsh -s /bin/zsh`.


For more details, please visit https://support.apple.com/kb/HT208050.


iMac:~ richard*******$

/Users/richard*********/Downloads/RemoveNortonMacFiles/RemoveNortonMacFiles.command

; exit; 


********* RemoveNortonMacFiles.command

8.0.12 *********

You must be an admin user to run this

script.


Please enter your admin password: 


********* RemoveNortonMacFiles.command

8.0.12 *********


WARNING: This script will remove all

files and folders created by Norton

        

OS X products (except Symantec Adminstration Console for Macintosh

        

files) and any files within those folders. Therefore, you will

        

lose ALL files that reside in those folders, including any that        

you have created. 


1 - Remove all Norton files/folders.


2 - Quit. Do not remove any files.


Enter choice (1 or 2): 1

Removing Norton files...


Norton crontab entries were deleted

from the current boot volume.


There are no Symantec Scheduler launchd

plists to delete from the current boot


volume.


Removing Norton login items from:

  

"/Library/Preferences/loginwindow.plist"

Locating invisible Norton files in: /

Looking for predelete scripts in Norton

uninstaller's Receipts folder

Looking for predelete scripts in

/Library/Receipts

Removing system profile if it exists:

com.symc.enroll

*** There are no Norton processes in

memory

Locating visible Norton files in:   /

  

Removing: "/etc/liveupdate.conf"  

Removing: "/etc/Symantec.conf"  

Removing: "/Library/Application Support/NAV.history"  

Removing: "/Library/PrivateFrameworks/NPF.framework"  

Removing: "/Library/PrivateFrameworks/NPFDataSource.framework"  

Removing:

"/Library/PrivateFrameworks/SymAppKitAdditions.framework"  

Removing: "/Library/PrivateFrameworks/SymBase.framework"  

Removing: "/Library/PrivateFrameworks/SymNetworking.framework"  

Removing: "/Library/PrivateFrameworks/SymSystem.framework"  

Removing: "/opt"  

Removing: "/Library/Preferences/com.symantec.NPF.plist"  

Removing:

"/Library/Preferences/Network/com.Symantec.LiveUpdate.plist"  

Removing: "/Library/Preferences/Network"

Looking for Norton login keychain items 


Norton files/folders not removed:  

/Users/richard***********/Applications 


NOTE: Not all folders/files were

removed.     

Perhaps a file or folder listed above is in use or a folder     

listed above is not empty. 


Some Norton product files have been

removed from the boot volume. 


NOTE: You should now restart the

computer to get Norton processes

     

and kexts out of memory and/or to remove login items.


Do you wish to restart the computer now (y/n)?


and

/opt    = item not found  

the other items listed have not been found in Finder Go

Elementary info search remains after shutdown.





This appeared when i pushed the link button in the email, looked it up but did not see any answer so I logged into Apple community, returned to the email and pushed the button which worked .


The pop up remains warning me but not permitting removal.



What next please John?


One must have sneaked thru.

When I retired 19 years ago it was from a head office that used microsoft world wide and I had to use the HO technical development team to keep my work machine running. On my own without Technical support upstairs I purchased an Apple. I have never downloaded Norton because I rely on Mac to work. Had a dispute with my ISP and took them to the adjudicator and later advised the adjudicator that since my dispute went live I had received 14 - 20 phishing emails each day. The ISP denied any connection and since that denial phishing has dropped to 2/3 per week. All reported to National Cyber Security Centre. One must have sneaked thru.

 


 


 


 


 


 


 




 



 


 



 


 


 


 






Oct 2, 2023 12:25 PM in response to yeoman160

Good so far. In an effort to find the offending file, please consider downloading and running EtreCheck and posting its report in a reply. Instructions and a download link are here: How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community.


Normally, one would search for a file with that name so that it can be dragged to the Trash (Bin) as the dialog suggests, but certain malicious or simply ill-conceived or poorly implemented software will obscure it. So, it's unlikely you will find a file by that name on your Mac. EtreCheck may help identify the suspicious file or files. Eradicating it would be the next step.

Oct 3, 2023 9:35 AM in response to yeoman160

Thanks, that is helpful information, although it may fall short of a complete solution.


One obvious culprit is "Symantec" also known as "Norton" which falls into a category of products that must never be installed on Macs. The EtreCheck report indicates that its kernel extension is "not loaded" which is a good thing in that macOS is protecting itself from its effects.


That leaves you with the unwelcome "will damage your Mac" annoyance, which will continue until all of its components are thoroughly and permanently eradicated from that Mac. The question is how to do that. By way of unsolicited comments please be advised that as a rule I do permit those kinds of modifications on my Macs, but moreover I do not know how to remove them. So I can't tell you exactly what to do, other than to direct you toward Symantec's uninstallation instructions, here:



Either one (or both) may help, but if they do not then all I can suggest is to contact Symantec and ask for their assistance.


Other than that, Microsoft Silverlight and Shockwave are both outdated products (and as such, potential security threats) that should be removed, but I do not have reason to believe they are the cause of the problem at hand. Refer to their respective uninstallation instructions in the same manner as "Symantec" / "Norton".


I believe that this will fall short of a complete solution, but please let me know if you don't get anywhere. The next step might be to contact Apple.

Oct 3, 2023 10:08 AM in response to yeoman160

The free Malwarebytes may take care of it...

https://www.malwarebytes.com/mac/


Delete these files & restart...


/Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist


~/Library/LaunchAgents/com.adobe.ARM.***.plist

~ tilde indicates your user library folder

Apple hid the Users' Library folders...


Method 1:

1 From the Finder, select the Go menu at top of the screen, and choose Go to Folder.

2 In the window that opens, enter ~/Library, and click Go.

Oct 6, 2023 9:56 AM in response to John Galt

Hello John


Problem resolved


I made another etrecheck and prepared a report for Apple and thought the only thing I have not done is empty trash after deleting the recommended files. I have rebooted twice to confirm the popup has gone.


Thank you very much for the time and trouble you took to advise me.


The following were not cleared by the Norton uninstall tool

/Library/Extensions

        [Not Loaded] KTUM.kext - com.Symantec.kext.KTUM (9.0.3)

        [Not Loaded] SymEvent.kext - com.Symantec.kext.SymEvent (1.0.4)

       [NotLoaded] SymOSXKernelUtilities.kext - com.Symantec.kext.SymOSXKernelUtilities(2.0.1)


I suspect they are not a problem.


Thank you very much for your help and support

Elementary Info Search alert will not delete

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.