Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

“ConnectionCachefld” will damage your computer.



Good day, i seem to be having an issue with a pop up dialog on my macbook, seems to be a virus or Malware as it keeps poping up on my screen
. I am unable to send or receive emails due to this pop up







Posted on Nov 20, 2023 1:00 AM

Reply
Question marked as Best reply

Posted on Dec 20, 2023 10:21 AM

First, start your Mac in "Safe Mode": How to use safe mode on your Mac - Apple Support. Starting in Safe Mode takes longer than usual so let it finish.


While in that mode, drag the following file to the Trash:


PT.updd.plist


Then, restart your Mac normally and confirm the alert messages cease to appear.


Note: Like all non-Apple "anti-virus" products, "Kaspersky" is worthless. You can see for yourself it did nothing to prevent the problematic "ConnectionCachefld" message. Uninstall it according to its instructions. Rule 1 of Macs is don't install junk.

32 replies
Question marked as Best reply

Dec 20, 2023 10:21 AM in response to SuetHo

First, start your Mac in "Safe Mode": How to use safe mode on your Mac - Apple Support. Starting in Safe Mode takes longer than usual so let it finish.


While in that mode, drag the following file to the Trash:


PT.updd.plist


Then, restart your Mac normally and confirm the alert messages cease to appear.


Note: Like all non-Apple "anti-virus" products, "Kaspersky" is worthless. You can see for yourself it did nothing to prevent the problematic "ConnectionCachefld" message. Uninstall it according to its instructions. Rule 1 of Macs is don't install junk.

Nov 22, 2023 7:45 AM in response to vagh96

vagh96, please follow the instructions below.



First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: How to use safe mode on your Mac - Apple Support. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".


The following files and / or folders need to be deleted while using your Mac in "Safe Mode":


First screenshot:



Second screenshot:



Nothing needs to be deleted from the folder in the third screenshot.


Drag those selections of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.


Next: open Safari and select the Safari menu > Preferences (or Settings) > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Then, select the Search pane and confirm your desired Search Engine. Repeat those equivalent actions for any other browser you may use (Brave, Firefox, or Opera for example).



There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences (or Settings) > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.


Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:



If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.


Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.


You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Nov 28, 2023 12:49 PM in response to alice_pozhidaeva

alice_pozhidaeva, please be advised that if you are unable to start your Mac in "Safe Mode" you will either not be able to delete the required files, or the problem will return even after you delete them. With the understanding "Safe Mode" is a prerequisite for fixing the problem, follow the instructions below.



First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: How to use safe mode on your Mac - Apple Support. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".


The following files and / or folders need to be deleted while using your Mac in "Safe Mode":


First screenshot:



Second screenshot (which is a continuation of the first):



Nothing needs to be deleted from the folder in the third screenshot.


Last screenshot:



Drag those selections of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.


Next: open Safari and select the Safari menu > Preferences (or Settings) > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Then, select the Search pane and confirm your desired Search Engine. Repeat those equivalent actions for any other browser you may use (Brave, Firefox, or Opera for example).



There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences (or Settings) > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.


Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:



If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.


Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.


You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Nov 27, 2023 2:26 PM in response to alice_pozhidaeva

alice_pozhidaeva restarting your Mac in "Safe Mode" is a prerequisite. Follow these instructions: Use safe mode on your Mac - Apple Support. If they are not successful, please describe the step that does not work, or that does not result in what you expect.


And, you need to inspect three separate folders.


The missing folder is either /Library/LaunchAgents or ~/Library/LaunchAgents. The last screenshot you posted is one of them, but you need to post the missing one.


All three are important.


For detailed instructions please read About those "<app> will damage your computer" messages - Apple Community.

Dec 3, 2023 1:36 PM in response to Naya345

Naya345 you first need to inspect three different folders. Erasing items in the folder in your screenshot will have no effect unless you follow my instructions from the beginning.


For updated instructions please read About those "<app> will damage your computer" messages - Apple Community.


It would be best if you were to post a brand new question, using the Ask the Community link above. That way, your question will get the attention you deserve.

Dec 20, 2023 9:27 AM in response to SuetHo

SuetHo three different folders need to be inspected. One of them is missing from your reply. If it is empty there is no need to post a screenshot of it, but please confirm that it is empty.


For updated instructions please read About those "<app> will damage your computer" messages - Apple Community.


It would be best if you were to post a brand new question, using the Ask the Community link above. That way, your question will get the attention you deserve.

Nov 28, 2023 3:32 PM in response to chanhee1023

If the message is still reappearing, then one or more files that should have been deleted still exist. They have to be deleted in "Safe Mode" because they will be inactive in that mode.


"Safe Mode" is a common computing expression, and is not strictly limited to Macs. Its opposite is not "unsafe mode"; it's just way to prevent system-modifying processes from loading when you start a computer in that mode.

“ConnectionCachefld” will damage your computer.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.