"Application is trying to install a new helper tool" Is it safe?

I had the same problem: this message kept coming up about "Application is trying to install a new helper tool. Type your password to allow this." and I finally just did so it would go away because I'm usually too paranoid about these things, and it turns out to be just fine... but of course now I am trying to launch Safari and it crashes on launch every time I try... Clearly something is up. I should not have put in my password. My question now is how concerned do I have to be about it? Should I change all my passwords and worry that whatever I have on this computer is now compromised?

I have had the issue to and i can figure out what application its is that wants to install this helper tool. I cant see anything in the info on it, just says installer.

I also check the console and i can see that a login windows opens up for com.apple.BezelServices.Idletimer. I assume this is for some maintenance update but it still worries me that i dont know what it is.

Anyone knows?

When the Installer disk appears, right-click it and choose Get Info. Then expand the General section and see the "Disk Image" field, where you will see a full path to the location of the disk image. This location will help identify where it is on your system and perhaps where it came from. If you are uncertain about this, then post this information here and we can perhaps help you figure it out.

Depends on what it is, and do you trust the developer it came from. I use Monolingual on my Macs, and when that is run the first time, it asks the same question, requiring the admin password to proceed. I've used it for years and so have no reason to distrust it and allow the installation of the helper tool.

If you're not familiar with the app, email the developer and ask them why this is necessary, and what it does. Doesn't in any way guarantee you'll get a truthful answer, though.

I had the same problem after allowing the installation – Safari kernel panics – and ultimately had to do a clean install then a time machine restoration. The request came again yesterday and I blindly accepted it resulting in more Safari crashes. Luckily, I had a recent time machine backup this time. This morning, I got the request again, but cancelled it and found this thread. Hope someone identifies the issue soon.

If you're having any doubts, please refer to the pdf installation instructions for Malwarebytes, is required to grant access to a higher level of sec access protection, so it's safe.

Link below:https://www.malwarebytes.org/pdf/guides/MBAM-Mac-Guide.pdf

iCuadiko wrote:

If you're having any doubts, please refer to the pdf installation instructions for Malwarebytes, is required to grant access to a higher level of sec access protection, so it's safe.

I'd just like to point out that, although Malwarebytes Anti-Malware for Mac will also install a helper tool which is safe, the other helper tool notices mentioned in this topic are not related to Malwarebytes, and are not safe! They appear to be related to the Genieo malware.

Any time you see a message so generic as to say that "Application" is trying to install a helper tool, that should throw up all kinds of red flags. Instead of "Application," it should show the name of the application making the request. In the case of Genieo, some older variants were known to include an application that was deceptively named just "Application."

Thomas Reed

Director of Mac Offerings, Malwarebytes

I went today to the Apple Store for this problem. All I had to do is type the password I use to sign into my Mac, The same password I use when I walk away from my Mac and I move my mouse and then it prompts me to type my password. What this is, like the young man in the store explained to me. They are FANCY words to ask you to be the administrator of the Apple. That simple. I hope this helps

Same for me...

I just had the same issue. I was in mail when it popped up. The only apps I have open are mail, finder, calendar, and chrome. osx10.10.1

If you don't know what application is prompting for authorization, you absolutely should not grant it.