I keep getting a "Malware Blocked" alert window. After selecting "Done" is goes away momentarily and then reappears. It is the same file name each time. I tried to search for the file name to trash it but I cannot find it.
How do I make it close...or just plain go away?
[Re-Titled by Moderator]
MacBook Pro 16″, macOS 15.1
Remove Webroot, and PulseSecure, and MalwareBytes, all per the vendors’ instructions, restart, and check again.
Probably these:
I was having the same issue, in my case; it was improperly detecting docker as Malware.
Don't really need it at the moment so I decided to get rid of it as It's been busy weeks but it kept popping, even after restarting the computer. I clicked the "Move to Trash" action button.
TL;DR
The modal kept popping;
It was detecting the app IN THE TRASH CAN AND STILL ASKING FOR ME TO PUT IT THERE ON THE MODAL.
✅ → Cleared the trash and it went away.
In addition to the information provided by MrHoffman, the other file you will want to remove is:
loadaccessini.dat
It is true any third party antivirus/security program should be avoided. They obviously did not help with the Malware that is currently being blocked by MacOS and are only consuming valuable resources on startup and continue to run to slow your machine down.
It is best to remove the above file in Safe Mode to prevent any problems when deleting.
Start up your Mac in safe mode - Apple Support
After you have ran the uninstallers and removed this file in Safe Mode, restart again normally to exit Safe Mode and check these same folders to make sure they have been successfully removed and that there is no longer a warning.
FabioSalguero wrote:
https://discussions.apple.com/content/attachment/693c7de8-2cd7-4704-9d47-ea68bcf68fbf
https://discussions.apple.com/content/attachment/1c9509ad-c9f7-4d25-907b-73162d52f7b5
https://discussions.apple.com/content/attachment/04546e66-92cf-49cf-89fb-c072e4bf1249
https://discussions.apple.com/content/attachment/5cc3756c-5dcb-4789-8562-156eb812d796
There it is in your LaunchDaemons folder. Follow the instructions provided to start up in Safe Mode and remove the file you see there. After restarting again normally, the problem should be gone.
Start up your Mac in safe mode - Apple Support
Thank you Mr Hoffman!
I had to install the “newest” Citrix Receiver and I was given the option to either proceed with installing the application or immediately delete the existing application. I chose the latter and it solved the problem. Thank you again.
FabioSalguero wrote:
https://discussions.apple.com/content/attachment/e1f951ab-e670-4e4f-a564-fd839af7cd88
https://discussions.apple.com/content/attachment/ba7513b2-6215-41c1-ad8c-874cab6fc857
https://discussions.apple.com/content/attachment/28fcf0b5-e09e-457c-8e57-817f02e71a67
You forgot the LaunchDaemons folder at:
/Library/LaunchDaemons
Remove Norton. This is not 2000-era Windows.
Add-on anti-malware tends to be unnecessarily noisy, can sap performance, can cause stability problems, and too often badly duplicates the built-in anti-malware scanning and removal tools.
Try to use the free Malwarebytes application to remove it.
Bergvos-12 wrote:
Anyone who can help? I have the PT.updd message. Thank you in advance!
https://discussions.apple.com/content/attachment/c8037aee-71c4-4445-a144-5d93022c88c7
https://discussions.apple.com/content/attachment/5f6a9f9a-f1c2-42f2-8e48-ab37673adeb1
https://discussions.apple.com/content/attachment/73135ab2-e3a2-4d21-a02c-18e8f2de94ab
https://discussions.apple.com/content/attachment/6552c40e-82cf-4534-84a5-a9f347e7b7a4
First start up in Safe Mode:
Start up your Mac in safe mode - Apple Support
Then remove the PT.updd.plist file you see in the LaunchDaemons screenshot.
Restart normally and it should be gone.
jiraiya103 wrote:
I was having the same issue, in my case; it was improperly detecting docker as Malware.
If deleting Docker isn’t an option, update Docker to current snd check again, and failing that then check with the folks maintaining Docker.
That PT.updd.plist file can reportedly be associated with various of the Popcorntime app variants; with torrent clients.
Whether any particular variant of the Popcorntime app is benign or adware or malware is unclear — not without further rummaging.
If a Popcorntime torrent app is installed here, consider removing it, and check again for the plist.
Failing that plist removal with app removal, delete the plist manually when booted in Safe Mode.
Torrents can be sources of malware as well, and cracked apps and keygen apps can target those that load them.
harveyspecter wrote:
https://discussions.apple.com/content/attachment/abfb8b95-12c0-4282-a4d0-0741cec7d822
https://discussions.apple.com/content/attachment/73acbe82-e6d7-4e0f-892b-7534218499ec
https://discussions.apple.com/content/attachment/4d3be1a8-256f-46d2-9693-30fa6fb26a6f
Annoying and persistent messages that say: Malware blocked:
https://discussions.apple.com/content/attachment/381a726f-d4b1-4173-8e23-95c11a004074
Start up in Safe Mode:
Start up your Mac in safe mode - Apple Support
Restart your computer again and the problem should be gone. You might have installed Popcorn Time, which is a bitTorrent file app and that is what the file is used for. You will likely also want to delete that app.
Malware Blocked alert won't go away from my MacBook Pro
