What is this "Pipiade" pop up on my MacBook Air?

I manage to solve by waiting it to pop up back and tracing it through Activity Monitor.

Apparently the process name was also " Pipidae " and the kind is intel.

Try double click on it and another pop up will appear.

Try click on ( Parent Process : bash ) until it appear ( Parent Process : carlings_porbeagle ) and Force Quit all of them.

Next try open System Settings > General > Login Items. Find ( carlings_porbeagle ) under " Allow in the background list " and disable it.

Also, click on (i) information on the app ( carlings_porbeagle ) and it will lead to folder for this file, and delete/remove entire folder.

Last one, try Go to Folder > ~/Library/ApplicationSupport & ~/Library/LaunchAgents, clear all items in both this folder.

Go back to " Allow in the background list " and wait for this ( carlings_porbeagle ) to disappear.

Hope this could help :)

** Sorry I couldn't attach the image because i've done it spontaneously.

Please read Removing "Search Marquis" / "Search Baron" / etc on your own - Apple Community, and post the three screenshots it describes in a reply to this Discussion.

Don't download anything in an effort to get rid of it.

jeannb are you aware that remote management software is installed on that Mac, or was installed at one time and was not completely uninstalled?

If you are not sure what that means, "remote management software" is a tool for someone else to remotely monitor and / or control your Mac. It is not something that spontaneously appears; it is something that you must willingly approve of installing by providing your Admin credentials (usually, your login name and password). Sometimes, people are deceived into doing that. Often, that occurs as a result of performing a Google search for "Apple support". Most of its search results will be scams.

Given that your troubles are likely to have resulted from that action there are two ways for you to proceed.

• If you are aware of having installed that remote management software, uninstall it in accordance with its instructions.
• If you are not aware of having installed it, the only way to resecure your Mac and guarantee you are the only one authorized to use it, and that no one else is remotely monitoring and (perhaps) controlling it without your consent is to erase it completely.

Let me know how you would like to proceed.

mrutyunjays wrote:

Is there any solution for it?

Yes: About those "<app> will damage your computer" messages - Apple Community

Here is what is happening and how to resolve it. I received no benefit for the suggested tools they recommend using.

https://howtoremove.guide/pipidae-mac/

I would personally recommend malware bytes scanner. A trial is free and it is a trusted source.

http://malwarbytes.com

Nanotron19 wrote:

Hello! Thanks for the information. Unfortunately Pipidae is still running rampant whenever I download something. I have deleted relevant files in Launch Daemons and Launch Agents.

There is one more folder you need to examine. It is either

~/Library/LaunchAgents

or

/Library/LaunchAgents

Please review my instructions (excerpted below) and try again.

John Galt wrote:

In the end, you will have captured the contents of the following three separate folders:

~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents

jeannb yes but it would really help if you were to follow the instructions to capture screenshots of those three folders showing complete files names. Since the file names in your screenshots are truncated, I am not comfortable identifying all the files that need to be deleted, while leaving the ones you might need untouched.

Instead, I suggest you read the following newer User Tip addressing this specific subject: About those "<app> will damage your computer" messages - Apple Community. If you still need help though, by all means please write back.

paoleditor wrote:

Same issue here

I  tend to keep my Mac as clean as I can, so maybe I could spot the files to delete by myself (com.ryderd.plist, com.laser, com.trip, and com.nbp for sure), but I have some doubt about com.immemorially.plist, so can you help me?

Yes. All those files should be removed. You need to start your Mac in "Safe Mode" to delete them, and be sure to back up your Mac before changing anything (which just goes without saying).

Updated instructions are here: About those "<app> will damage your computer" messages - Apple Community

... but I don’t have Avast installed on my Mac! I may have installed some demo version some year ago, then uninstalled, and those files have, for some reason, remained.

Assuming its uninstallation instructions didn't work you can remove that file as well. The same goes for "Malwarebytes". You can see for yourself it did nothing to prevent that "Pipiade" dialog from appearing, nor is it helping you to remove it. As with "Avast" it's your decision whether to keep it installed or not, but no product can provide absolute protection from becoming deceived into willfully installing junk. Recognition and avoidance is the only effective defense: Effective defenses against malware and other threats - Apple Community.

hassannnnnn, please follow the instructions below.

First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.

• A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.

Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: How to use safe mode on your Mac - Apple Support. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".

The following files and / or folders need to be deleted while using your Mac in "Safe Mode":

First screenshot:

Second screenshot:

Third screenshot:

Drag those selections of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.

Next: open Safari and select the Safari menu > Preferences (or Settings) > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Then, select the Search pane and confirm your desired Search Engine. Repeat those equivalent actions for any other browser you may use (Brave, Firefox, or Opera for example).

There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.

Next: In an abundance of caution, examine System Preferences (or Settings) > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.

Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:

If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.

Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.

You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.

Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:

~/Library/Application Support

It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.

Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

sariasola2023, those are not the folders that need to be examined. Please review my instructions and try again.

Excerpted from About those "<app> will damage your computer" messages - Apple Community:

Begin with inspecting the contents of the following three separate folders:

/Library/LaunchDaemons

/Library/LaunchAgents

~/Library/LaunchAgents

A new Mac ships with those folders — mostly — empty. ...

You're welcome hassannnnnn. Glad to help.

Revised and simplified instructions are here: About those "<app> will damage your computer" messages - Apple Community

Here is what is happening and how to resolve it. I received no benefit for the suggested tools they recommend using.

https://howtoremove.guide/pipidae-mac/

I would personally recommend malware bytes scanner. A trial is free and it is a trusted source.

http://malwarbytes.com

Here is what is happening and how to resolve it. I received no benefit for the suggested tools they recommend using.

https://howtoremove.guide/pipidae-mac/

I would personally recommend malware bytes scanner. A trial is free and it is a trusted source.

http://malwarbytes.com

look at other post.Here is what is happening and how to resolve it. I received no benefit for the suggested tools they recommend using.

https://howtoremove.guide/pipidae-mac/

I would personally recommend malware bytes scanner. A trial is free and it is a trusted source.

http://malwarbytes.com

kaiascott97, If you value the information on your Mac, a backup is just a fundamental requirement.

If you do not value the information on your Mac, then you do not need a backup, but that just means the prospect of permanently losing all the information it contains does not trouble you in the least.

None of that is strictly related to eliminating the "Pipidae" nag, and no you don't need a backup to get rid of it. Its appearance is the consequence of something you installed, perhaps a long time ago. macOS is just catching up to the need to inform you of that fact. For more information on that subject, please read Effective defenses against malware and other threats - Apple Community.

The bottom line is that nothing can prevent you from deliberately installing something on a Mac. macOS protects itself, but only you can protect you from deliberately installing junk. Should you manage to do that though, knowledgeable helpers on this site can help you fix it. But please consider the need to back up your Mac. Any device can fail at any time for any reason, or for no apparent reason at all.

With that understanding and with your concurrence, please follow the instructions in my next post.