Peculiar dialog PASSWORD_ALERT...

I just received this very same message today. My firewall is also reporting a virus on my network for the last month perhaps related, maybe not. I've run Sophos Anti-Virus (for Mac) scans which produced no alerts/results of bad software or apps loaded on my machine, but I also don't trust anti-virus software packages very much either for results. The scan flagged some other files which I know for certain are false positives.

I suggest each of you who has experienced this warning to start your own topic. Then download and run Etrecheck. Copy and paste the results into your reply. Etrecheck is a diagnostic tool that was developed by one of the most respected users here in the ASC and recommended by Apple Support to provide a snapshot of the system and help identify the more obvious culprits that can adversely affect a Mac's performance.

On reading your advice and having the same problem, I'm pasting the output of Etrecheck below. Note that I have already clicked the clean up link then clicked Remove to remove the orphaned file- I have no idea if this has any bearing on the cause of the PASSWORD_ALERT message.

Any other suggestions, comments?

EtreCheck version: 3.4.6 (460)

Report generated 2017-10-28 08:43:57

Download EtreCheck from https://etrecheck.com

Runtime: 5:37

Performance: Below Average

Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Clean up] link to delete unused files.

Problem: Other problem

Description:

Password_alert_title_with_username_OSX

Hardware Information: ⓘ

iMac (21.5-inch, Mid 2011)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac12,1

1 2.5 GHz Intel Core i5 (i5-2400S) CPU: 4-core

12 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

2 GB DDR3 1067 MHz ok

BANK 1/DIMM0

2 GB DDR3 1067 MHz ok

BANK 0/DIMM1

4 GB DDR3 1067 MHz ok

BANK 1/DIMM1

4 GB DDR3 1067 MHz ok

Handoff/Airdrop2: not supported

Wireless: en1: 802.11 a/b/g/n

iCloud Quota: 1.31 GB available

Video Information: ⓘ

AMD Radeon HD 6750M - VRAM: 512 MB

iMac 1920 x 1080

Disk Information: ⓘ

ST3500418AS disk0: (500.11 GB) (Rotational)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 499.25 GB (109.98 GB free)

Recovery HD (disk0s3 - Journaled HFS+) <not mounted> [Recovery]: 650 MB

OPTIARC DVD RW AD-5690H ()

USB Information: ⓘ

USB20Bus

hub_device

Apple Computer, Inc. IR Receiver

Apple Card Reader

USB20Bus

Apple Inc. FaceTime HD Camera (Built-in)

hub_device

Western Digital Elements 1023

Elements 1023 disk1: (1 TB)

EFI (disk1s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

Epacris Backup (disk1s2 - Case-sensitive Journaled HFS+) /Volumes/Epacris Backup : 999.86 GB (17.47 GB free)

Energizer Usb Charger www.Energizer.com/UsbCharger(Free Software)

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus

System Software: ⓘ

macOS Sierra 10.12.6 (16G29) - Time since boot: about 41 days

Gatekeeper: ⓘ

Mac App Store and identified developers

Clean up: ⓘ

~/Library/LaunchAgents/com.apple.CSConfigDotMacCert-[redacted]@me.com-SharedServices.Agent.plist

/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framework/Versions/A/Support/CSConfigDotMacCert -l ~/Library/Logs/CSConfigDotMacCert.log -u [redacted]@me.com -t SharedServices -s

Executable not found!

One orphan file found. [Clean up]

Kernel Extensions: ⓘ

/Library/Application Support/org.pqrs/Karabiner

[loaded] org.pqrs.driver.Karabiner (10.21.0 - SDK 10.11) [Lookup]

System Launch Agents: ⓘ

[failed] com.apple.SafariNotificationAgent.plist (Apple, Inc. - installed 2017-08-15)

[not loaded] 10 Apple tasks

[loaded] 167 Apple tasks

[running] 94 Apple tasks

[killed] 13 Apple tasks

13 processes killed due to insufficient RAM

System Launch Daemons: ⓘ

[not loaded] 38 Apple tasks

[loaded] 167 Apple tasks

[running] 104 Apple tasks

[killed] 9 Apple tasks

9 processes killed due to insufficient RAM

Launch Agents: ⓘ

[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2013-08-02) [Lookup]

[loaded] com.adobe.AdobeCreativeCloud.plist (? faec172d 6b747375 - installed 2013-07-28) [Lookup]

[running] com.oracle.java.Java-Updater.plist (? 49fd8b21 be93c7fb - installed 2017-07-31) [Lookup]

Launch Daemons: ⓘ

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 564efddb - installed 2017-10-21) [Lookup]

[loaded] com.cocoatech.pathfinder.SMFHelper7.plist (? 33d8e47d 320ee49 - installed 2013-12-24) [Lookup]

[loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-19) [Lookup]

[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e 442fdde9 - installed 2011-03-10) [Lookup]

[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-07-12) [Lookup]

[not loaded] org.pqrs.Karabiner.load.plist (Shell Script 44439558 - installed 2016-07-06) [Lookup]

[failed] org.pqrs.NoEjectDelay.load.plist (Shell Script 7b764c88 - installed 2012-08-06) [Lookup]

User Launch Agents: ⓘ

[loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2013-07-28) [Lookup]

[loaded] com.adobe.ARM.[...].plist (? 560d19c8 ac8ed034 - installed 2017-08-24) [Lookup]

[failed] com.apple.CSConfigDotMacCert-[redacted]@me.com-SharedServices.Agent.plist (? ? ? - installed 2012-09-30) - /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framework/Versions/A/Support/CSConfigDotMacCert: Executable not found!

[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-11) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Lookup]

User Login Items: ⓘ

Alfred Application

(/Applications/Alfred.app)

iTunesHelper Application - Hidden (Apple, Inc. - installed 2017-09-16)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Skype Application

(/Applications/Skype.app)

Backup and Sync from Google Application

(/Applications/Backup and Sync.app)

Dropbox Application

(/Applications/Dropbox.app)

Google Chrome Application - Hidden

(/Applications/Google Chrome.app)

Karabiner Application

(/Applications/Karabiner.app)

EvernoteHelper Application (Evernote - installed 2017-09-20)

(/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app)

Evernote Application

(/Applications/Evernote.app)

MEGAsync Application

(/Applications/MEGAsync.app)

Backup and sync from Google Application

(/Applications/Backup and Sync.app)

EvernoteHelper SMLoginItem - Hidden (Evernote - installed 2017-01-26)

(~/.Trash/Evernote (454267).app/Contents/Library/LoginItems/EvernoteHelper.app)

EvernoteHelper SMLoginItem - Hidden (Evernote - installed 2017-09-20)

(/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app)

EvernoteHelper SMLoginItem - Hidden (Evernote - installed 2016-09-21)

(~/.Trash/Evernote (453991).app/Contents/Library/LoginItems/EvernoteHelper.app)

EvernoteHelper SMLoginItem - Hidden (Evernote - installed 2016-06-18)

(~/.Trash/Evernote (453574).app/Contents/Library/LoginItems/EvernoteHelper.app)

EvernoteHelper SMLoginItem - Hidden (Evernote - installed 2016-11-07)

(~/.Trash/Evernote (454158).app/Contents/Library/LoginItems/EvernoteHelper.app)

Internet Plug-ins: ⓘ

AdobeAAMDetect: AdobeAAMDetect 2.0.0.0 (installed 2013-07-28) [Lookup]

FlashPlayer-10.6: 27.0.0.183 (installed 2017-10-26) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-08-15)

Flash Player: 27.0.0.183 (installed 2017-10-26) [Lookup]

AdobePDFViewer: 11.0.04 (installed 2013-09-18) [Lookup]

AdobePDFViewerNPAPI: 11.0.04 (installed 2013-09-18) [Lookup]

SharePointBrowserPlugin: 14.7.2 (installed 2017-03-15) [Lookup]

JavaAppletPlugin: Java 8 Update 141 build 15 (installed 2017-08-15) Check version

User internet Plug-ins: ⓘ

WebEx64: 1.0 (installed 2014-01-17) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2013-10-08) [Lookup]

Safari Extensions: ⓘ

[enabled] Evernote Web Clipper - Evernote Corp. - http://evernote.com (installed 2015-10-25)

[disabled] Thumb Sites - Wojtek Surówka - http://www.muchuseful.com/thumbsites (installed 2012-04-16)

[enabled] AnySearch - Matt Swain - http://matt-swain.com/extensions (installed 2015-10-06)

3rd Party Preference Panes: ⓘ

Flash Player (installed 2017-10-21) [Lookup]

Java (installed 2017-07-31) [Lookup]

Launchpad-Control (installed 2012-05-04) [Lookup]

Time Machine: ⓘ

Skip System Files: NO

Mobile backups: OFF

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 499.25 GB Disk used: 389.27 GB

Destinations:

Epacris Backup [Local]

Total size: 999.86 GB

Total number of backups: 100

Oldest backup: 13/4/16, 12:50 am

Last backup: 27/10/17, 2:05 pm

Size of backup disk: Too small

Backup size 999.86 GB < (Disk used 389.27 GB X 3)

Top Processes by CPU: ⓘ

10% Backup and Sync

6% kernel_task

6% backupd

5% mdworker

5% mdworker

Top Processes by Memory: ⓘ

1.13 GB kernel_task

559 MB com.apple.WebKit.WebContent

553 MB thunderbird

470 MB com.apple.WebKit.WebContent

438 MB com.apple.WebKit.WebContent

Top Processes by Network Use: ⓘ

Input Output Process name

40 KB 102 KB Dropbox

4 KB 2 KB apsd

3 KB 1 KB 3

0 B 355 B mDNSResponder

Top Processes by Energy Use: ⓘ

35.18 Backup and Sync

6.32 backupd

5.74 WindowServer

1.94 Microsoft Word

Virtual Memory Information: ⓘ

2.13 GB Available RAM

81 MB Free RAM

9.87 GB Used RAM

2.06 GB Cached files

1.49 GB Swap Used

Software installs (last 30 days): ⓘ

Adobe Flash Player: (installed 2017-10-11)

Adobe Flash Player: (installed 2017-10-17)

Adobe Flash Player: (installed 2017-10-26)

Install information may not be complete.

Diagnostics Events (last 3 days for minor events): ⓘ

2017-10-28 02:23:50 Google Chrome.app Crash [Open]

BTW- I did not see anything strange in activity monitor that lead me to believe this was malicious. However, I still did not want to trust this.

Did a further google search and a comment on Reddit indicated it was possibly Malware or Ransomeware:

"""""

runway0530 2 points 9 months ago

EtreCheck version: 3.4.6 (460)

Report generated 2017-11-15 15:47:21

Download EtreCheck from https://etrecheck.com

Runtime: 2:34

Performance: Excellent

Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Clean up] link to delete unused files.

Problem: Other problem

Description:

passowrd_alert_title_with_username_osx

Hardware Information: ⓘ

MacBook Air

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Air - model: MacBookAir6,2

1 1.7 GHz Intel Core i7 (i7-4650U) CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 298

Video Information: ⓘ

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900

Disk Information: ⓘ

APPLE SSD SM0512F disk0: (500.28 GB) (Solid State - TRIM: Yes)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

(disk0s2) <not mounted> [APFS Container]: 500.07 GB

USB Information: ⓘ

USB30Bus

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Nikon LS-40 ED

Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus

Virtual disks: ⓘ

Macintosh HD (disk1s1 - APFS) / [Startup]: 500.07 GB (244.60 GB free)

Physical disk: disk0s2 500.07 GB (244.60 GB free)

(disk1s2) <not mounted> [Preboot]: 500.07 GB

Physical disk: disk0s2 500.07 GB

(disk1s3) <not mounted> [Recovery]: 500.07 GB

Physical disk: disk0s2 500.07 GB

(disk1s4) /private/var/vm [VM]: 500.07 GB

Physical disk: disk0s2 500.07 GB

System Software: ⓘ

macOS High Sierra 10.13.1 (17B48) - Time since boot: about one day

Gatekeeper: ⓘ

Mac App Store and identified developers

Clean up: ⓘ

~/Library/LaunchAgents/.dat.nosync042a.FU3GPi (hidden)

/Applications/SpamSieve.app/Contents/Frameworks/SpamSieveFramework.framework/Re sources/SpamSieveLaunchAgent /Applications/SpamSieve.app

Executable not found!

~/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

/Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=scheduled

Executable not found!

com.adobe.ARM.[...].plist

/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper semi-auto

Executable not found!

~/Library/LaunchAgents/com.amazon.music.plist

/Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper

Executable not found!

~/Library/LaunchAgents/jp.co.pfu.ScanSnap.SearchablePDFConverter.plist

/Applications/ScanSnap/SearchablePDFConverter.app/Contents/Resources/Searchable PDFConverterOCR.app/Contents/MacOS/SearchablePDFConverterOCR os

Executable not found!

~/Library/LaunchAgents/uk.co.canimaansoftware.clamxav.UninstallWatcher.plist

/usr/bin/open /usr/local/clamXav/bin/UninstallClamXav.app

Executable not found!

6 orphan files found. [Clean up]

Kernel Extensions: ⓘ

/Library/Extensions

[not loaded] com.FTDI.driver.FTDIUSBSerialDriver (2.3 - SDK 10.9) [Lookup]

[not loaded] com.wch.usbserial (1.1.1 - SDK 10.9) [Lookup]

~/Library/Application Support/WDufu/4381/PLXDevicePlugin.app

[not loaded] com.wdc.driver.WdDeviceType00 (1.1) [Lookup]

[not loaded] com.wdc.driver.WdDeviceType05 (1.1) [Lookup]

System Launch Agents: ⓘ

[failed] com.apple.EscrowSecurityAlert.plist (Apple, Inc. - installed 2017-10-25)

[failed] com.apple.cloudd.plist (Apple, Inc. - installed 2017-10-25)

[not loaded] 8 Apple tasks

[loaded] 160 Apple tasks

[running] 118 Apple tasks

System Launch Daemons: ⓘ

[not loaded] 37 Apple tasks

[loaded] 170 Apple tasks

[running] 123 Apple tasks

Launch Agents: ⓘ

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-27) [Lookup]

[loaded] com.oracle.java.Java-Updater.plist (? 4b5a045d 35278573 - installed 2017-02-08) [Lookup]

Launch Daemons: ⓘ

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 defea098 - installed 2017-10-25) [Lookup]

[loaded] com.apple.aelwriter.plist (Apple, Inc. - installed 2011-01-29)

[not loaded] com.apple.installer.cleanupinstaller.plist (? 1963bf56 0 - installed 2017-11-14)

[loaded] com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2017-10-25)

[not loaded] com.crashplan.engine.plist (? 0 ? - installed 2017-06-13) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-10-13) [Lookup]

[loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-15) [Lookup]

[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e afb3bef0 - installed 2010-08-25) [Lookup]

[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-02-08) [Lookup]

[loaded] com.oracle.java.JavaUpdateHelper.plist (Oracle America, Inc. - installed 2015-04-20) [Lookup]

[loaded] net.sourceforge.MonolingualHelper.plist (ti und m AG - installed 2012-08-21) [Lookup]

User Launch Agents: ⓘ

[not loaded] .dat.nosync042a.FU3GPi (hidden) (? 1d7db46a 0 - installed 2016-06-05) [Lookup]

/Applications/SpamSieve.app/Contents/Frameworks/SpamSieveFramework.framework/Re sources/SpamSieveLaunchAgent /Applications/SpamSieve.app - /Applications/SpamSieve.app/Contents/Frameworks/SpamSieveFramework.framework/Re sources/SpamSieveLaunchAgent: Executable not found!

[running] ArduinoCreateAgent.plist (? cd62e813 5766c75a - installed 2017-10-28) [Lookup]

[not loaded] com.adobe.AAM.Updater-1.0.plist (? 6a3cceca 0 - installed 2014-04-11) [Lookup] - /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility: Executable not found!

[not loaded] com.adobe.ARM.[...].plist (? 560d19c8 0 - installed 2014-03-21) [Lookup] - /Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper: Executable not found!

[not loaded] com.amazon.music.plist (? 7c73c27a 0 - installed 2016-03-03) [Lookup] - /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper: Executable not found!

[not loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-11) [Lookup]

[not loaded] com.google.keystone.agent.plist (Google Inc. - installed 2017-02-09) [Lookup]

[not loaded] com.lastpass.LastPassHelper.plist (Joseph Siegrist - installed 2016-01-18) [Lookup]

[not loaded] jp.co.pfu.ScanSnap.SearchablePDFConverter.plist (? 377be5ab 0 - installed 2016-08-21) [Lookup] - /Applications/ScanSnap/SearchablePDFConverter.app/Contents/Resources/Searchable PDFConverterOCR.app/Contents/MacOS/SearchablePDFConverterOCR: Executable not found!

[not loaded] uk.co.canimaansoftware.clamxav.UninstallWatcher.plist (? e6df4a71 0 - installed 2016-11-30) [Lookup] - /usr/local/clamXav/bin/UninstallClamXav.app: Executable not found!

User Login Items: ⓘ

Dropbox Application

(/Applications/Dropbox.app)

CrashPlan menu bar Application

(/Applications/CrashPlan.app/Contents/Helpers/CrashPlan menu bar.app)

HazelHelper Application

(~/Library/PreferencePanes/Hazel.prefPane/Contents/MacOS/HazelHelper.app)

iTunesHelper Application (Apple, Inc. - installed 2017-10-31)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Internet Plug-ins: ⓘ

nplastpass: 4.1.2 (installed 2017-01-18) [Lookup]

Google Earth Web Plug-in: 6.1 (installed 2017-02-08) [Lookup]

OfficeLiveBrowserPlugin: 12.3.0 (installed 2017-02-08) [Lookup]

Flip4Mac WMV Plugin: 2.3.6.5 (installed 2017-02-08) [Lookup]

RealPlayer Plugin: Unknown

Silverlight: 5.1.50901.0 (installed 2017-02-08) [Lookup]

FlashPlayer-10.6: 27.0.0.187 (installed 2017-11-14) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-10-25)

Flash Player: 27.0.0.187 (installed 2017-11-14) [Lookup]

iPhotoPhotocast: 7.0 (installed 2017-02-08)

SharePointBrowserPlugin: 14.7.3 (installed 2017-04-15) [Lookup]

AdobePDFViewer: 9.5.5 (installed 2017-02-08) [Lookup]

GarminGpsControl: 2.9.3.0 Release (installed 2017-02-09) [Lookup]

JavaAppletPlugin: Java 8 Update 45 (installed 2017-02-08) Check version

User internet Plug-ins: ⓘ

UploadManager: Unknown

Google Earth Web Plug-in: 7.1 (installed 2013-10-07) [Lookup]

ContentManager: Unknown

RocketEngine: Unknown

Safari Extensions: ⓘ

[not loaded] Translate - SideTree.com - Apps for Mac and Web - http://SideTree.com/extensions.html#Translate (installed 2016-10-25)

[not loaded] DuckDuckGo - DuckDuckGo - http://duckduckgo.com (installed 2014-11-13)

[enabled] Shortly - Zhusee (ZZHC Studio) - http://zzhc.org/shortly/ (installed 2015-04-20)

[not loaded] Adamant - Cocoa App - http://cocoaapp.com/adamant (installed 2016-10-25)

[not loaded] Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (installed 2016-10-17)

[enabled] HD quality for YouTube™ - James Fray - http://add0n.com/youtube-hd.html (installed 2014-12-29)

[not loaded] Pin It Button - Pinterest, Inc. - http://www.pinterest.com/ (installed 2016-10-25)

[enabled] AdBlock - Michael Gundlach - http://safariadblock.com (installed 2012-07-09)

[not loaded] The Camelizer - Price Tracker - Cosmic Shovel, Inc. - http://camelcamelcamel.com (installed 2016-01-31)

[enabled] LastPass - LastPass - https://lastpass.com/ (installed 2016-10-25)

3rd Party Preference Panes: ⓘ

Flash Player (installed 2017-10-25) [Lookup]

Flip4Mac WMV (installed 2012-08-21) [Lookup]

Hazel (installed 2017-06-04) [Lookup]

Java (installed 2015-04-20) [Lookup]

Time Machine: ⓘ

Skip System Files: NO

Mobile backups: OFF

Auto backup: NO - Auto backup turned off

Volumes being backed up:

Destinations:

[redacted]MillerTimeMachine [Local]

Total size: 3.00 TB

Total number of backups: 46

Oldest backup: 11/15/16, 12:02 AM

Last backup: 2/8/17, 10:25 PM

Size of backup disk: Excellent

Backup size 3.00 TB > (Disk size 0 B X 3)

Top Processes by CPU: ⓘ

7% WindowServer

2% kernel_task

1% ps

0% fontd

0% SystemUIServer

Top Processes by Memory: ⓘ

759 MB kernel_task

242 MB Safari

231 MB mds_stores

188 MB CrashPlanService

177 MB smbd

Top Processes by Network Use: ⓘ

Input Output Process name

26 MB 2.39 GB smbd

20 KB 57 MB CrashPlanService

2 MB 227 KB mDNSResponder

217 KB 217 KB Dropbox

41 KB 48 KB apsd

Top Processes by Energy Use: ⓘ

7.86 WindowServer

6.70 mds

0.82 launchd

0.80 trustd

Virtual Memory Information: ⓘ

3.32 GB Available RAM

865 MB Free RAM

4.68 GB Used RAM

2.47 GB Cached files

126 MB Swap Used

Software installs (last 30 days): ⓘ

Paint 2: 5.6.2 (installed 2017-10-22)

Adobe Flash Player: (installed 2017-10-25)

Paint 2: 5.6.3 (installed 2017-10-26)

CH34x_Install: (installed 2017-10-28)

CH34x_Install: (installed 2017-10-28)

CH34x_Install: (installed 2017-10-28)

CH34x_Install: (installed 2017-10-28)

Compare Folders: 1.2.2 (installed 2017-11-10)

Adobe Flash Player: (installed 2017-11-14)

Paint 2: 5.6.4 (installed 2017-11-14)

Install information may not be complete.

Diagnostics Events (last 3 days for minor events): ⓘ

2017-11-15 15:38:47 com.apple.WebKit.WebContent Crash [Open]

Cause: Bundle controller class:

BrowserBundleController

2017-11-15 15:38:26 cloudd Crash [Open]

Cause: *** Terminating app due to uncaught exception 'NSGenericException', reason: 'Error executing SQL: "pragma journal_mode = WAL" (14) - errcode:000e, msg:"unable to open database file", size: 36864, path:/Users/USER/Library/Caches/*/CloudKitOperationInfo, fs:244620673024/500068036608'

abort() called

terminating with uncaught exception of type NSException

2017-11-14 16:45:28 Last shutdown cause: 3 - Hard shutdown

This happened to me for the first time this AM from running overnight. Same as other comments with additional observations. Desktop clear of all icons except Macintosh HD icon. When I tried a restart then a shutdown, it hung on Contacts. Contacts not only was not responding but it also would not do a force quit. Finally had to do a hard shutdown via the power button.

My suspicion is that whatever it is was attempting to raid my Contacts. Hopefully that didn't happen as I did not touch either choice.

Try running this program in your normal account, then copy and paste the output in a reply. The program was created by etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy Report” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

I just got the same dialog.

This happened after updating some software, though I also had the system under load when updating, so it may very well be an internal issue with OSX. The software I was updating does some pretty low level in regards to virtualisation. I've run two sets of scans across the system to make sure it wasn't anything malicious. Probably worth asking if Apple have the text somewhere in their codebase, as it maybe a subsystem/keychain thing.

BTW- I did not see anything strange in activity monitor that lead me to believe this was malicious. However, I still did not want to trust this. I shut down applications that were running one by one to see what might be the cause. No change. It still could be some crapware I have running in background though. The reboot gets rid of it.

Google Chrome has a Password Alert extension. However, I have Google Chrome but I did not have that extension loaded. Moreover, I was not using Google Chrome. Nor does the reviews indicate that this Password Alert extension uses that alert window.

I forgot to mention, I know I received a Phishing email for MS one drive this morning in Apple mail.

Perhaps it was just a coincidence that the notice popped up and the email was received.

I guess someone has to be a guinea pig and select one of the buttons to let us know what happens to gain a better understanding of what this i.

I don't recommend doing that, unless you've got some layers of advanced threat protection, including URL reputation filtering, payload sandboxing and end-point (process + memory) monitoring (not storage/hdd/ssd scanning).

Keep in mind, simply "viewing" an email can allow embedded malicious scripts to run. For this reason, I have hidden my "viewing window" in Apple Mail.

Keep in mind, simply "viewing" an email can allow embedded malicious scripts to run. For this reason, I have hidden my "viewing window" in Apple Mail.

Viewing an email will download any html content which will notify the sender that you contacted their website. That will validate your email address to the spammer.

No other "malicious scripts" can be run when viewing an email.

I got the dialog just now for the first time on my Mac Air on High Sierra. It could be associated with the fact that I changed my Apple password recently. After changing that password, all my Mac devices seemingly went nuts, constantly requiring me to enter my new password and enter 6 digit codes sent to me. I ran and saved the results of EtreCheck. Then I shutdown all programs and requested the system to shutdown. It didn't seem to shutdown completely, though the screen was completely dark (no little circle rotating wheel thing). I finally held the power button down for 15 seconds, then released, then pressed it again. System came up, but said a couple of things indicating some kind of OS upgrade: "setting up analytics" (or something like that) and asking me if it's OK to send diagnostic reports to Apple. It's not unusual for my laptop not to shutdown. I haven't bothered to check into it, but so far it's always worked to forcibly power it off and on. Below are the results from EtreCheck:

Problem description:

Received a weird popup, PASSWORD_ALERT_TITLE_WITH_USERNAME_OSX.

EtreCheck version: 2.2 (132)

Report generated 12/3/17, 10:45 AM

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: ℹ

MacBook Air (11-inch, Early 2014) (Technical Specifications)

MacBook Air - model: MacBookAir6,1

1 1.7 GHz Intel Core i7 CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless:
en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 105 - SN = D86441401BDF90CAV

Video Information: ℹ

Intel HD Graphics 5000

Color LCD 1280 x 720

System Software: ℹ

macOS 10.13.1 (17B1003) - Time since boot: 3 days 17:25:47

Disk Information: ℹ

APPLE SSD SM0512F disk0 : (500.28 GB)

EFI (disk0s1) <not mounted> : 210 MB

disk0s2 (disk0s2) <not mounted> : 500.07 GB

USB Information: ℹ

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: ℹ

Apple Inc. thunderbolt_bus

Configuration files: ℹ

/etc/hosts - Count: 38

Gatekeeper: ℹ

Mac App Store and identified developers

Kernel Extensions: ℹ

/Applications/NoMachine.app

[not loaded] com.nomachine.driver.nxtun (4.1.b4) [Click for support]

[not loaded] com.nomachine.driver.nxusb (4.3.b1 - SDK 10.7) [Click for support]

[not loaded] com.nomachine.kext.nxfs (4.1.b1 - SDK 10.6) [Click for support]

/Applications/ScreenFlow.app

[not loaded] com.vara.driver.VaraAudio (1.0.2) [Click for support]

/Applications/TorGuard.app

[not loaded] net.tunnelblick.tap (1.0) [Click for support]

[not loaded] net.tunnelblick.tun (1.0) [Click for support]

/Applications/VMware Fusion.app

[not loaded] com.vmware.kext.vmci (90.8.1) [Click for support]

[not loaded] com.vmware.kext.vmioplug.15.2.1 (15.2.1) [Click for support]

[not loaded] com.vmware.kext.vmnet (0582.40.40) [Click for support]

[not loaded] com.vmware.kext.vmx86 (0582.40.40) [Click for support]

/Library/Extensions

[loaded] com.sophos.kext.oas (9.6.53 - SDK 10.11) [Click for support]

[loaded] com.sophos.nke.swi (9.6.52 - SDK 10.11) [Click for support]

/System/Library/Extensions

[loaded] com.digidesign.iokit.DigiDal (8.0.3d1) [Click for support]

[loaded] com.digidesign.iokit.DigiIO (8.0.3d1) [Click for support]

[loaded] com.nomachine.driver.nxau (4.1.b2 - SDK 10.8) [Click for support]

[not loaded] com.paceap.kext.pacesupport.master (5.7.2) [Click for support]

/System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns

[not loaded] com.paceap.kext.pacesupport.leopard (5.7.2) [Click for support]

[not loaded] com.paceap.kext.pacesupport.panther (5.7.2) [Click for support]

[loaded] com.paceap.kext.pacesupport.snowleopard (5.7.2) [Click for support]

[not loaded] com.paceap.kext.pacesupport.tiger (5.7.2) [Click for support]

Startup Items: ℹ

PACESupport: Path: /Library/StartupItems/PACESupport

FanControlDaemon: Path: /Library/StartupItems/FanControlDaemon

Startup items are obsolete in OS X Yosemite

Problem System Launch Agents: ℹ

[killed] com.apple.CallHistorySyncHelper.plist

[killed] com.apple.apfsuseragent.plist

[killed] com.apple.SafariNotificationAgent.plist

[running] com.openssh.ssh-agent.plist [Click for support]

[killed] com.apple.audio.AudioComponentRegistrar.plist

[killed] com.apple.protectedcloudstorage.protectedcloudkeysyncing.plist

[killed] com.apple.CoreLocationAgent.plist

[killed] com.apple.cmfsyncagent.plist

[killed] com.apple.xpc.loginitemregisterd.plist

[killed] com.apple.talagent.plist

[killed] com.apple.icloud.fmfd.plist

[killed] com.apple.printuitool.agent.plist

[killed] com.apple.printtool.agent.plist

[killed] com.apple.OSDUIHelper.plist

[killed] com.apple.CallHistoryPluginHelper.plist

[killed] com.apple.navd.plist

[killed] com.apple.SafariCloudHistoryPushAgent.plist

16 processes killed due to memory pressure

Problem System Launch Daemons: ℹ

[killed] com.apple.periodic-weekly.plist

[killed] com.apple.audio.AudioComponentRegistrar.daemon.plist

[killed] com.apple.colorsync.displayservices.plist

[killed] com.apple.icloud.findmydeviced.plist

[killed] com.apple.bootinstalld.plist

[killed] com.apple.tailspind.plist

[not loaded] org.ntp.ntpd-legacy.plist [Click for support]

[killed] com.apple.emond.aslmanager.plist

[killed] com.apple.driver.ethcheck.plist

[killed] com.apple.nfcd.plist

[killed] com.apple.captiveagent.plist

10 processes killed due to memory pressure

Launch Agents: ℹ

[loaded] com.google.keystone.agent.plist [Click for support]

[running] com.motive.alertDetectorHost.plist [Click for support]

[loaded] com.adobe.CS5ServiceManager.plist [Click for support]

[running] com.sophos.agent.plist [Click for support]

[loaded] org.macosforge.xquartz.startx.plist [Click for support]

[failed] com.motive.userAgent.plist [Click for support]

[loaded] com.parallels.mobile.prl_deskctl_agent.launchagent.plist [Click for support]

[not loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[failed] org.chromium.chromoting.plist [Click for support]

[running] com.sophos.uiserver.plist [Click for support]

[running] com.nomachine.localnxserver.plist [Click for support]

Launch Daemons: ℹ

[failed] com.parallels.mobile.dispatcher.launchdaemon.plist [Click for support]

[running] com.adobe.agsservice.plist [Click for support]

[loaded] org.wireshark.ChmodBPF.plist [Click for support]

[running] com.sophos.common.servicemanager.plist [Click for support]

[loaded] org.macosforge.xquartz.privileged_startx.plist [Click for support]

[loaded] com.google.keystone.daemon.plist [Click for support]

[failed] com.parallels.mobile.kextloader.launchdaemon.plist [Click for support]

[running] com.nomachine.server.plist [Click for support]

[running] com.oracle.oss.mysql.mysqld.plist [Click for support]

[loaded] PACESupport.plist [Click for support]

[loaded] com.nomachine.uninstall.plist [Click for support]

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.adobe.SwitchBoard.plist [Click for support]

[loaded] com.microsoft.office.licensingV2.helper.plist [Click for support]

[failed] com.motive.systemDaemon.plist [Click for support]

User Launch Agents: ℹ

[loaded] com.adobe.ARM.[...].plist [Click for support]

[loaded] com.skype.skype.shareagent.plist [Click for support]

User Login Items: ℹ

ShareFile Desktop Application
(/Applications/ShareFile Desktop.app)

Google Drive Application
(/Applications/Google Drive.app)

VMware Fusion Start Menu Application
(/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)

Sophos Anti-Virus Application
(/Applications/Sophos Anti-Virus.app)

Google Chrome Application
(/Applications/Google Chrome.app)

iTunesHelper Application
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Internet Plug-ins: ℹ

o1dbrowserplugin: Version: 5.41.3.0 - SDK 10.8 [Click for support]

Flip4Mac WMV Plugin: Version: 2.3.6.5 [Click for support]

npMotive: Version: 1.0.0 - SDK 10.7 [Click for support]

Silverlight: Version: 5.1.20913.0 - SDK 10.6 [Click for support]

FlashPlayer-10.6: Version: 27.0.0.187 - SDK 10.12 [Click for support]

SmartCamFinder: Version: SmartCamFinder 1.0.0.0 - SDK 10.7 [Click for support]

QuickTime Plugin: Version: 7.7.3

Flash Player: Version: 27.0.0.187 - SDK 10.12 [Click for support]

npwViewer_turn: Version: Unknown - SDK 10.8 [Click for support]

googletalkbrowserplugin: Version: 5.41.3.0 - SDK 10.8 [Click for support]

AdobePDFViewer: Version: 9.5.5 [Click for support]

GarminGpsControl: Version: 4.0.2.6 Beta - SDK 10.6 [Click for support]

npwViewer: Version: Unknown - SDK 10.8 [Click for support]

iPhotoPhotocast: Version: 7.0

JavaAppletPlugin: Version: 15.0.1 - SDK 10.13 Check version

Safari Extensions: ℹ

Open in Internet Explorer

3rd Party Preference Panes: ℹ

Flash Player
[Click for support]

Flip4Mac WMV
[Click for support]

MacFUSE
[Click for support]

MySQL
[Click for support]

SwitchResX
[Click for support]

Time Machine: ℹ

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Destinations:

Seagate4Tb [Network]

Total size: 4.00 TB

Total number of backups: 22

Oldest backup: 2017-10-06 00:14:39 +0000

Last backup: 2017-12-02 21:24:31 +0000

Size of backup disk: Excellent

Backup size 4.00 TB > (Disk size 0 B X 3)

Top Processes by CPU: ℹ

10% WindowServer

1% SophosScanD

1% apsd

0% fontd

0% SystemUIServer

Top Processes by Memory: ℹ

974 MB kernel_task

573 MB mdworker(19)

483 MB SophosScanD

115 MB Finder

115 MB mds_stores

Virtual Memory Information: ℹ

2.76 GB Free RAM

5.24 GB Used RAM

688 MB Swap Used

Diagnostics Information: ℹ

Dec 2, 2017, 10:26:22 AM /Library/Logs/DiagnosticReports/backupd_2017-12-02-102622_[redacted].cpu_resourc e.diag [Click for details]

Dec 2, 2017, 08:47:04 AM /Users/[redacted]/Library/Logs/DiagnosticReports/Preview_2017-12-02-084704_[reda cted].crash

Dec 1, 2017, 01:52:06 PM /Library/Logs/DiagnosticReports/backupd_2017-12-01-135206_[redacted].cpu_resourc e.diag [Click for details]

Dec 1, 2017, 10:25:34 AM /Library/Logs/DiagnosticReports/backupd_2017-12-01-102534_[redacted].cpu_resourc e.diag [Click for details]

I have now run into this on two Macs, the second replaced the first one when I couldn't stop it happening, and now a month later the second one is doing it too. Both are older machines with spinning HDs, and running High Sierra. That means they're slow, but it doesn't matter as all they do is curate a daisy chain of firewire disks used to store photographs, and run daily backups of one disk to another. In neither case did EtreCheck, Malwarebytes or Detect X show any malware, and Clam XAV says they're clean. EtreCheck did say I was having crashes of a process com.aladdin.hasplmd.plist in /Library/LaunchDaemons (this is some digital rights management process that could have got there from an installation of X-Plane with a USB key to confirm the app is registered, or more likely from X-Rite i1 software for a screen calibration device (though why that should need it isn't clear to me) and noted errors related to 'too many files open'. I see others have noticed that as well. I've deleted the files related to the HASP software and I'll see if makes a difference. The first mac to be affected by this had been doing that job without complaint for several years, and this began after it was 'upgraded' to 10.13. I see others have been getting this on older versions of the OS so that's probably not relevant. I'm thinking Garrett Davidson might be on the right track with his suggestion that some rogue app or process that crashes repeatedly is causing the error related to too may open files. Until we know for sure, simply restarting once a day might be a temporary fix.