Malware Blocked alert won't go away from my MacBook Pro

AJCM1997 wrote:

There are 2 LaunchAgents folder that need to be posted. Not sure which one you have included here, but the 2 locations are:

/Library/LaunchAgents

~/Library/LaunchAgents

Note the "~" character in the last one to signify your user folder. You can go to Finder > Go > Go to Folder and paste the locations in there to bring up the folder if you wish and post the missing one.

This does not have the usual patterns for the malware block discussed in the thread.

What app was the dialog about?

In general…

Torrents are one of the better ways to acquire malware, as the cracked apps can be well more than just license-cracked and can contain added malware. Torrents when working as expected can also utilize all available resources, including network bandwidth. And much of the add-on anti-malware won’t fare well against this stuff.

Remove Norton, and remove or update Valve Steam, VirtualBox, uTorrent, and Java, restart, and test again.

Okay, I’m assuming you intentionally have Citrix installed, and haven’t updated it in many years, and that Citrix app is now triggering the error; that this is not actually malware, but a really old app (and probably unsigned) doing something that some really old apps did back then.

Look around in your Downloads folder or elsewhere (use Spotlight search) for a file named CitrixReceiver.dmg or CitrixReceiverWeb.dmg. If you find that, double-click on it to mount that DMG, and then run the removal tool included in the mounted volume and follow its instructions.

If you don’t find that removal DMG and tool in your Downloads or elsewhere, download and install the “newest” Citrix Receiver, install it, and then look for the removal tool mentioned previously, and run the provided removal tool: https://www.citrix.com/downloads/citrix-receiver/mac/receiver-for-mac-latest.html

juniordrumkit wrote:

Hello everyone, I'm having the same issue too with the persistent "Malware blocked" message…

Installed Citrix is very old. Either update it to current, or remove the app per vendor instructions.

Seems the com.active file is still present in that image?

Re-posted the same image?

Are you booted in Safe Mode when you delete the plist files?

Anything related in your login items?

Please post the (free) EtreCheck data, too. Download and run that tool and when the run completes share the report to the clipboard. Then open a new reply here, and press the additional-text button that looks like a printed page to get a text input box big enough to paste the hardware and software configuration report here, and paste and post that report here.

AJCM1997 wrote:

Hi all-

Here is a screenshot of my launch folders as well as the malware notification. It only started after I updated to Sequoia 15.4.1, Thanks in advance for your help!

Please post a Finder listing view of the three folders, and not an icon view. We need to see the full filenames.

Here are the instructions, and example of the listing views: About those "<app> will damage your computer" messages

You’re welcome. Your Adobe install is equally ancient, and probably also needs to be removed, or to be updated.

Check with Adobe, as they know their apps and setup best.

I'm not sure if this is just reader, or if there are parts of other Adobe apps potentially involved.

I do know that Adobe apps from 2012 aren't all that current, and undoubtedly have issues.

Here is the Adobe community: https://community.adobe.com/

Installed Citrix is old. Either update it to current, or remove the app per vendor instructions.

Here are the instructions, and yes, Safe Mode is needed:

• About those “will damage your computer" … - Apple Community

The first photo is ~/Library/LaunchAgents

Remove what is in red. You don’t want that.

I’d also remove the apps in yellow; the add-on anti-malware app, the add-on cleaner app, and (temporarily at least) the ad blocker. The add-on anti-malware didn't do very well here — the built-in anti-malware caught this and is (incompletely) blocking the mess — and unfortunately some of the various add-on cleaner apps can add on problems and for little or no benefit.

Hey I am having the same problem. I just got my Mac book pro and transferred everything from my old (12 years old) Mac book and keep getting the same popup. My list of the 2 folders below are really small but I still have them below. Am I missing anything else?

Thanks so much for the quick response. I don't know exactly what app the dialog is about. After I finished my transfer from my old computer I looked though the apps and one looked like a folder icon so I tried to open it to see what was inside and that was when the box started popping up. I instantly deleted that and any other weird/unfamiliar/unneeded apps.

I did what you asked and just deleted everything. Except Norton, I bought that yesterday to try to diagnose this problem (didn't find anything) so i don't want to delete it but I can if i really need to. I am still seeing the popup when I boot it up normally.

Also I don't know if this tells anything but when I boot it up in safe mode the popup box does not popup?