How can I remove this warning saying that a file will damage my MacBook Pro?

Running Sonoma on M1. Trying to help a friend get rid of the following popup that appears on boot up. ..."DeployPlatformfld" will damage your computer.

It's clearly the remanent of malware that has since been removed. Clicking 'show in finder' reveals nothing.

I ran FAF (Find any File) and it couldn't find it, but searching for 'DeployPlatform' found the following:

These two are in private/var/db/// and I don't have permissions for the folder!

Document: deplyplatform.gqa.aot

These are zero bytes and are in private/var/db/// I can delete them.

property list: deplyplatform.system.plist

property list: deplyplatform.service.plist

property list: deplyplatform.plist

Any idea's on how to resolve the pesky popup please?

[Re-titled by Moderator]

MacBook Pro 15″, OS X 10.10

Posted on Dec 10, 2023 4:26 AM

31 replies

Dec 10, 2023 10:52 AM in response to John Galt

Thanks, but I've been there and it hasn't helped. You are correct, this is way out of my area, it started off with me trying to undelete some files for her, she sent me her Macbook and I booted up to find the warning pop-up.

Having tried to recover her files and realised it's not possible on an SSD internal on an Mi Mac (see my other post (Data recovery woes on M1 MacBook Pro - Apple Community) I at least tried to remove the pesky popup, and here I am 2 days later :-(

Dec 10, 2023 11:43 AM in response to John Galt

All good advice John, thanks. I'm not as green as my friend. I spent years restoring systems for many friends and clients, mainly through the use of Carbon Copy Cloner and Migration assistant. But now with M1 security, booting from an external drive is no longer an option (as far as I know), so I suppose Time Machine is the only way to go.

I really shouldn't have got invloved to help the lady, but it's in my nature :-)

John Galt

Level 10

155,576 points

Dec 10, 2023 11:52 AM in response to CatpainScarlet

I completely understand your desire to help. I'm sure she appreciates it. Hopefully you can impress upon her the need to back up her Mac. Unless the user understands and agrees the information it contains has literally no value and is totally expendable, it's a non-negotiable prerequisite.

Dec 10, 2023 12:01 PM in response to Mac Jim ID

Tried Activity Monitor, searched and scrolled to find nothing relevant.

I updated the system to 14.1.2 but that made no difference.

I'll do a TimeMachine backup and reinstall system, but I have a suspicion that won't help.

Dec 10, 2023 12:24 PM in response to John Galt

I did think of impressing on her the need to back up, but decided it's not the right time to be telling her what she should have done. She lost 2 months translation work (gulp!) and is distraught and in tears. In all honesty the pop-up fades in to insignificance, but I thought I'd at least try to fix it for her.

I will impress the need for backup by setting up a Time Machine drive and sending it back with her Mac .. and relating the funny story of me losing the only copy of a functionality document I spent six months working on. Ah no, actually it wasn't funny at all :-(

John Galt

Level 10

155,576 points

Dec 10, 2023 12:42 PM in response to CatpainScarlet

Since the dialog itself is decidedly unhelpful Apple really ought to address it in a macOS update. I'm not holding my breath. The reason for its appearance began a long time ago as I alluded to in the User Tip, but these complaints have only been accelerating recently.

dialabrain

Level 10

136,079 points

Dec 10, 2023 6:14 AM in response to CatpainScarlet

Since I don't know what they are I can't tell you to remove them.

Dec 10, 2023 6:14 AM in response to CatpainScarlet

I deleted:

property list: deplyplatform.system.plist

property list: deplyplatform.service.plist

property list: deplyplatform.plist

Rebooted and made no difference.

Dec 10, 2023 6:17 AM in response to dialabrain

But if I wanted to, how would I go about it please?

dialabrain

Level 10

136,079 points

Dec 10, 2023 6:19 AM in response to CatpainScarlet

I thought you just stated you already did.

Dec 10, 2023 6:36 AM in response to dialabrain

I deleted the plists, I dont have permission to delete deplyplatform.gqa.aot

Dec 10, 2023 6:40 AM in response to Mac Jim ID

They have indeed been removed

Dec 10, 2023 8:57 AM in response to Mac Jim ID

Tried in Safe Mode, located the folder, get info, unlock,

whatever I try this pops up.

Thanks for your help, any other ideas?

Dec 10, 2023 9:00 AM in response to Owl-53

Thanks but not sure what all that means.

Dec 10, 2023 10:46 AM in response to Owl-53

All correct.

Get info reveals 'Open with' Text edit (default), dropdown reveals: Archive Utillity, Notes, Skype.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How can I remove this warning saying that a file will damage my MacBook Pro?