How to get rid of the popup warning "'InitialProgramfld' will damage your computer"?

cladow wrote:

I went to Finder > Go > Go to Folder, and copy and paste ~/Library/LaunchAgentsinto that text box, and this is what I found:

https://discussions.apple.com/content/attachment/bb718e9a-5bcb-46f1-8664-b2009aa2e953

There you go. Start up in Safe Mode as described already and delete all files there except those that contain these names:

• yahoo
• logmein
• intego
• dropbox
• divx
• adobe

You will also now want to delete the other 2 files described previously.

After the files have been deleted in both locations, restart and your problem should be gone. I left the intego file in the list, but that does not mean VirusBarrier is recommended to be installed. It is never recommended to use virus software on a Mac and not only is it ineffective since it did not stop the problem you had, it also consumes valuable resources and conflicts with the normal operation of your OS.

It may be the case that you do not have anything in the ~/Library/LaunchAgents folder, but normally this Malware also stores files there as well. You should check this location by going to Finder > Go > Go to Folder, and copy and paste ~/Library/LaunchAgents into that text box. If there are files in there post that screen shot first, so all the problem files can be deleted at the same time.

The process will start by starting in Safe Mode

Start up your Mac in safe mode - Apple Support

In your LaunchDaemons folder, these 2 files will need to be deleted and the other folder is fine:

• com.InitialProgram.system.plist
• com.InitialProgramd.plist

Again, verify the other folder first and post that if there are files there, so we can delete all the bad ones at the same time.

Just to note, you can see how useless AV software is as it didn't prevent this adware, or whatever it is from getting installed.

Delete the Intego software. Never install it, or anything like it again. All it's doing is slowing down your Mac while doing absolutely nothing useful in return.

Try this: Stop unwanted scam notifications:

Safari > Settings > Websites > Notifications, and remove everything there. Turn off "Allow websites to ask permission to send notifications".

Stop unwanted Notifications - Apple Community

cladow wrote:

I got rid of suspicious files at the following locations as suggested, emptied the trash, and restarted my MacBook Pro, but the warning sign continues to popup.

/Library/LaunchDaemons

/Library/LaunchAgents

~/Library/LaunchAgents

You need to inspect the contents of each one of those three folders. Unless all three are completely empty, consider posting their contents in a reply.

For an explanation please read About those "<app> will damage your computer" messages - Apple Community.

If there is no ~/Library/LaunchAgents folder, then the following will be the result of attempting to open it:

Confirm that's what happened before assuming it's empty.

The folder may not exist, in which case that's ok too.

Did you start up in safe mode before removing the files at those locations? If not they may reappear since they would still be running after you delete them. If stopping the Safari Notifications does not work, then post the files at those locations.

cladow wrote:

Thank you for the feedback. Unfortunately, I didn't start up in safe mode before removing the files, so now I am unable to locate them. It didn't work after I stopped the Safari Notifications. Now, I'm stuck with not knowing what to do next.

Just post a screenshot of those 3 folders and we will be able to help you remove that popup.