Malware Blocked alert won't go away from my MacBook Pro

An aside to your issue

The get a better experience on their forums

You may consider  Track responses to your question via email. Visit Preferences to change when you’re notified.

Then >> " Edit Profile and Preferences "

Scroll down to " Other Preferences "

Change the Sort Order to maybe Oldest

This way, you will see posting this this question from Oldest at the Top and Newest at the Bottom

Could you please assist me with removing the Malware Blocked alert. I have just recently set up my new MacBook Air with Sequoia 15.2.

I’ve followed @JohnGalt instructions and taken screenshots of the three windows in Finder. What do I need to do as next steps. Thanking you in advance.

Please post a screen capture of the “will damage” error.

These plist files look like some other issue, or the usual mess here has been changed.

Two of the Adobe files are unusually old, or maybe suspicious, but not with the usual file-naming patterns form this thread.

Accordingly, I’d remove the Adobe and Citrix apps, and check these three directories again, and re-install the current versions of those two apps if and as necessary. These are very old versions shown here.

Hello everyone, I'm having the same issue too with the persistent "Malware blocked" message and have followed @John Galt's instructions and have taken the following three screenshots. Is anyone able to help me please? I backed up my new mac in Jan 2025 from an old time machine back up, and then this message started popping up after I downloaded zoom this evening (25/2/25).

Do I need to go into safe mode to remove the files once I know which ones to remove? TIA!

I am having the same problem, just updated my computer this evening and the 'malware blocked' messages for 'receiverhelper' and 'servicerecords' aren't going away.

These are my screenshots. Any tips please? Thank you!

Thanks a lot for your fast replies. Yeah, i read it and began reading the Expanded instructions for everyone. I missed that i should be in safe mode unfortunately.

But since i already deleted the files whilst not in safe mode, did i mess up?

SylvesterB wrote:

Thanks a lot for your fast replies. Yeah, i read it and began reading the Expanded instructions for everyone. I missed that i should be in safe mode unfortunately.

But since i already deleted the files whilst not in safe mode, did i mess up?

Please follow the instructions, and post the three images requested.

Please also post the requested Etrecheck data.

If something does go wrong here, you can restore your backups.

Well the screeshot with the folders /Library/LaunchDaemons /Library/LaunchAgents~/Library/LaunchAgents i already posted. That's all there is.

(But i will repeat the steps in safe mode regardless).

I just posted the report aswell.

Update: I have been using my mac for hours without getting the malware alert message (i hope it's fixed). However i still get it when i restart my mac..

My login startup apps are these like you mentioned:

I am having the same problem. The 'malware blocked' messages for “PT.updd” was not opened because it contains malware. This action did not harm your Mac.' aren't going away.

These are my screenshots. Any tips please? Thank you!

Adriaan86 wrote:

I am experiencing the same problem. I have a "PT.updd" error. Below my screenshots. Can you help what I need to delete?…

Please post the three screenshots listed in: About those "<app> will damage your computer" messages

One of the three images looks to be what was requested, the other two are searches and are not the requested directory listings.

Boot into Safe Mode and remove the red files.

I’m unsure about the yellow “real info”-related details, as that doesn’t seem to be an actual entity.

And when y’all post, the error message helps too, as it shows one more potential candidate problem.

I keep getting this message spamming on my laptop and it won’t go away. What do I do?

Having the same issue! I followed John Galt's instructions (thank you!!!) Here are my screenshots. Any suggestions? TIA!