How do I rid of this persisting alert? I've removed the application that gave me the alert. I've tried pasting ; sudo xattr -r -d com.apple.quarantine ~/Downloads
and sudo xattr -r -d com.apple.quarantine ~/.Trash
but it won't work. I'm not sure what I can do
The application is probably Citrix and if you just moved it to the trash without using an uninstaller, then you left behind the problem files in your Launch folders. You can go to the Finder, then choose the Go menu, then Go to Folder. Copy/Paste each of these locations there and delete any of the Citrix files. There are usually about 5 different files and along with the ReceiverHelper you should also see ServiceRecords and AuthManager. Don't forget the "~" character at the start of the last one:
/Library/LaunchDaemons
/Library/LaunchAgents
~/Library/LaunchAgents
These files will show up in the EtreCheck report too.
The application is probably Citrix and if you just moved it to the trash without using an uninstaller, then you left behind the problem files in your Launch folders. You can go to the Finder, then choose the Go menu, then Go to Folder. Copy/Paste each of these locations there and delete any of the Citrix files. There are usually about 5 different files and along with the ReceiverHelper you should also see ServiceRecords and AuthManager. Don't forget the "~" character at the start of the last one:
/Library/LaunchDaemons
/Library/LaunchAgents
~/Library/LaunchAgents
These files will show up in the EtreCheck report too.
Mac Jim ID is correct. That’s almost certainly a very old version of Citrix.
Update Citrix, or remove it.
I would not suggest using either of the following-two quarantine-removal commands here, nor generally:
sudo xattr -r -d com.apple.quarantine ~/Downloads
sudo xattr -r -d com.apple.quarantine ~/.Trash
Those commands remove a flag intended to warn about running downloaded apps, unrelated to the shenanigans Citrix was doing here.
teleigha240 wrote:
How do I rid of this persisting alert? I've removed the application that gave me the alert. I've tried pasting ; sudo xattr -r -d com.apple.quarantine ~/Downloads
and sudo xattr -r -d com.apple.quarantine ~/.Trash
but it won't work. I'm not sure what I can do
Official Apple Support Community
You should not be using those commands to remove the quarantine flag associated with files downloaded from the Internet (includes cloud storage & email attachments). The system has already flagged something as containing malware, you don't want to do anything to allow it to possibly get past the system scans.
Yes, there may be times to use this command for certain reasons, but those conditions & reasons do not exist here.
Do you actually know which app has this "ReceiverHelper" item associated with it?
Run the third party app EtreCheck and post the complete report here so we can examine it for clues.
How to use the Add Text Feature When Posting an EtreCheck Report - Apple Community
Issues with Malware Alert
