cyoung570
Level 1 (8 points)
Mac OS X

Q: What is this notification?

Screen Shot 2016-10-11 at 12.06.46 am.png

 

Hey, just wondering if this is a legitimate notification because it seems kind of suspicious i.e capitalisation and spelling.

 

Therefore is this a virus?

Mac Pro, OS X Yosemite (10.10.5)

Posted on Oct 10, 2016 6:40 AM

by MadMacs0,Solvedanswer
MadMacs0 MadMacs0
Level 5 (4,806 points)
A:

Looks like that is coming from Casper Suite Management software which would seem to indicate your computer is being enterprise managed by some Company IT department. Assuming you know who that is, contact them to have your hard drive replaced and recover as much data as they are able to.

Posted on Oct 11, 2016 12:31 AM

Close
cyoung570

Q: What is this notification?

  • All replies
  • Helpful answers

  • by stedman1,

    stedman1 stedman1 Oct 10, 2016 6:45 AM in response to cyoung570
    Level 9 (74,352 points)
    Apple Watch
    Oct 10, 2016 6:45 AM in response to cyoung570

    If this occurred while you were accessing the Internet, I would consider it, and any such popup as a scam. Do not interact with such messages if you not familiar with the source of such messages.

  • by cyoung570,

    cyoung570 cyoung570 Oct 10, 2016 6:52 AM in response to stedman1
    Level 1 (8 points)
    Mac OS X
    Oct 10, 2016 6:52 AM in response to stedman1

    Alright thanks. However it is not really a pop-up because it is in my notification manager.

  • by stedman1,

    stedman1 stedman1 Oct 10, 2016 6:54 AM in response to cyoung570
    Level 9 (74,352 points)
    Apple Watch
    Oct 10, 2016 6:54 AM in response to cyoung570

    Then it is possible that you at one time allowed a web site to send you notifications. Check your notification settings for unfamiliar entries.

  • by cyoung570,

    cyoung570 cyoung570 Oct 10, 2016 6:57 AM in response to stedman1
    Level 1 (8 points)
    Mac OS X
    Oct 10, 2016 6:57 AM in response to stedman1

    Screen Shot 2016-10-11 at 12.25.42 am.png

    If I delete it will it solve the problem or just hide it though?

  • by stedman1,

    stedman1 stedman1 Oct 10, 2016 7:04 AM in response to cyoung570
    Level 9 (74,352 points)
    Apple Watch
    Oct 10, 2016 7:04 AM in response to cyoung570

    I'm not familiar with that item, or the associated icon, so can't advise. Hopefully, someone else will drop by this discussion to offer advice. However, I am confident it is not a stock part of the Mac OS install, which would indicate it is something you have installed. Does the multi-coloured icon look familiar?

  • by cyoung570,

    cyoung570 cyoung570 Oct 10, 2016 7:08 AM in response to stedman1
    Level 1 (8 points)
    Mac OS X
    Oct 10, 2016 7:08 AM in response to stedman1

    Thanks for the help.

    No I'm not sure what it is, I've looked the app up online but nothing comes up.

  • by Eric Root,

    Eric Root Eric Root Oct 10, 2016 9:58 AM in response to cyoung570
    Level 9 (74,535 points)
    iTunes
    Oct 10, 2016 9:58 AM in response to cyoung570

    Do you remember downloading an application named Management Action? Have you checked your Applications folder?

     

    Try running this program in your normal account , then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor.  Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.
      

    Etrecheck – System Information

  • by cyoung570,

    cyoung570 cyoung570 Oct 10, 2016 6:06 PM in response to Eric Root
    Level 1 (8 points)
    Mac OS X
    Oct 10, 2016 6:06 PM in response to Eric Root

    I found the app in application folder but its named Self Service (Its a computer software from my school allowing for installation of printers and other software related to education) but Management Action has the same image.

     

    Report:

    EtreCheck version: 3.0.6 (315)

    Report generated 2016-10-11 11:34:10

    Download EtreCheck from https://etrecheck.com

    Runtime 6:04

    Performance: Below Average

     

    Click the [Support] links for help with non-Apple products.

    Click the [Details] links for more information about that line.

     

    Problem: Other problem

    Description:

    Weird application, “Management Action”

     

    Hardware Information: ⓘ

        MacBook Pro (13-inch, Mid 2012)

        [Technical Specifications] - [User Guide] - [Warranty & Service]

        MacBook Pro - model: MacBookPro9,2

        1 2.5 GHz Intel Core i5 CPU: 2-core

        4 GB RAM Upgradeable - [Instructions]

            BANK 0/DIMM0

                2 GB DDR3 1600 MHz ok

            BANK 1/DIMM0

                2 GB DDR3 1600 MHz ok

        Bluetooth: Good - Handoff/Airdrop2 supported

        Wireless:  en1: 802.11 a/b/g/n

        Battery: Health = Normal - Cycle count = 262

     

    Video Information: ⓘ

        Intel HD Graphics 4000

            Color LCD 1280 x 800

     

    System Software: ⓘ

        OS X Yosemite 10.10.5 (14F27) - Time since boot: about 3 days

     

    Disk Information: ⓘ

        APPLE HDD HTS545050A7E362 disk0 : (500.11 GB) (Rotational)

        S.M.A.R.T. Status: Failing

            EFI (disk0s1) <not mounted> : 210 MB

            Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB

            Macintosh HD (disk1) /  [Startup]: 498.89 GB (456.89 GB free)

                Core Storage: disk0s2 499.25 GB Online

     

        HL-DT-ST DVDRW  GS41N   ()

     

    USB Information: ⓘ

        Apple Inc. FaceTime HD Camera (Built-in)

        Apple Inc. BRCM20702 Hub

            Apple Inc. Bluetooth USB Host Controller

        Apple Computer, Inc. IR Receiver

        Apple Inc. Apple Internal Keyboard / Trackpad

     

    Thunderbolt Information: ⓘ

        Apple Inc. thunderbolt_bus

     

    Gatekeeper: ⓘ

        Mac App Store and identified developers

     

    System Launch Agents: ⓘ

        [not loaded]    5 Apple tasks

        [loaded]    148 Apple tasks

        [running]    47 Apple tasks

        [killed]    12 Apple tasks

        12 processes killed due to insufficient RAM

     

    System Launch Daemons: ⓘ

        [not loaded]    45 Apple tasks

        [loaded]    135 Apple tasks

        [running]    74 Apple tasks

        [killed]    7 Apple tasks

        7 processes killed due to insufficient RAM

     

    Launch Agents: ⓘ

        [running]    com.jamfsoftware.jamf.agent.plist (2016-10-06) [Support]

     

    Launch Daemons: ⓘ

        [loaded]    com.adobe.fpsaud.plist (2016-08-30) [Support]

        [running]    com.jamfsoftware.jamf.daemon.plist (2016-10-06) [Support]

        [not loaded]    com.jamfsoftware.startupItem.plist (2016-10-06) [Support]

        [loaded]    com.jamfsoftware.task.1.plist (2016-10-06) [Support]

        [loaded]    com.microsoft.office.licensing.helper.plist (2012-11-05) [Support]

        [loaded]    uk.co.canimaansoftware.ClamXavHelper.plist (2016-10-11) [Support]

        [loaded]    uk.co.canimaansoftware.ClamXavHelperUpdater.plist (2016-10-11) [Support]

     

    User Launch Agents: ⓘ

        [loaded]    com.google.keystone.agent.plist (2016-07-12) [Support]

        [running]    com.spotify.webhelper.plist (2016-10-10) [Support]

        [loaded]    com.valvesoftware.steamclean.plist (2016-02-01) [Support]

        [loaded]    uk.co.canimaansoftware.clamxav.UninstallWatcher.plist (2016-10-11)

     

    User Login Items: ⓘ

        iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

        Spotify    Application Hidden (/Applications/Spotify.app)

        Google Drive    Application  (/Applications/Google Drive.app)

     

    Internet Plug-ins: ⓘ

        MeetingJoinPlugin: Unknown - SDK 10.6 (2015-12-27) [Support]

        FlashPlayer-10.6: 23.0.0.162 - SDK 10.9 (2016-09-14) [Support]

        Flash Player: 23.0.0.162 - SDK 10.9 (2016-09-14) [Support]

        QuickTime Plugin: 7.7.3 (2015-08-05)

        SharePointBrowserPlugin: 14.3.6 - SDK 10.6 (2015-12-27) [Support]

        Default Browser: 600 - SDK 10.10 (2015-07-17)

     

    3rd Party Preference Panes: ⓘ

        Flash Player (2016-08-30) [Support]

     

    Time Machine: ⓘ

        Time Machine not configured!

     

    Top Processes by CPU: ⓘ

            77%    clamscan

             4%    WindowServer

             4%    com.apple.WebKit.WebContent(5)

             3%    ClamXav

             2%    kernel_task

     

    Top Processes by Memory: ⓘ

        770 MB    com.apple.WebKit.WebContent(5)

        474 MB    kernel_task

        147 MB    clamscan

        127 MB    Safari

        102 MB    mdworker(8)

     

    Virtual Memory Information: ⓘ

        79 MB    Free RAM

        3.92 GB    Used RAM (887 MB Cached)

        26 MB    Swap Used

     

    Diagnostics Information: ⓘ

        Oct 8, 2016, 03:34:35 PM    /Library/Logs/DiagnosticReports/loginwindow_2016-10-08-153435_[redacted].crash

            /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow

        Oct 8, 2016, 02:48:41 PM    Self test - passed

  • by stedman1,

    stedman1 stedman1 Oct 10, 2016 6:17 PM in response to cyoung570
    Level 9 (74,352 points)
    Apple Watch
    Oct 10, 2016 6:17 PM in response to cyoung570

    You appear to have a couple issues. The smart status indicates that your drive is failing (be certain your backup is current). This may account for the Management Action message, but I've not seen it presented in that way.

     

    ClamScan appears to be using a high percentage of the CPU. This may be due to an active scan you are running.

  • by cyoung570,

    cyoung570 cyoung570 Oct 10, 2016 7:06 PM in response to stedman1
    Level 1 (8 points)
    Mac OS X
    Oct 10, 2016 7:06 PM in response to stedman1

    Yeah I've backed up, yeah I'm running the scan at the moment I got a couple of infections are they related to this issue?

     

    Screen Shot 2016-10-11 at 12.06.05 pm.png

  • by MadMacs0,

    MadMacs0 MadMacs0 Oct 10, 2016 10:28 PM in response to cyoung570
    Level 5 (4,806 points)
    Oct 10, 2016 10:28 PM in response to cyoung570

    cyoung570 wrote:

     

    I got a couple of infections are they related to this issue?

     

    Screen Shot 2016-10-11 at 12.06.05 pm.png

    That one is a False Positive that was eliminated earlier today. "Update Virus Definitions" to prevent it from happening again.

  • by MadMacs0,Solvedanswer

    MadMacs0 MadMacs0 Oct 11, 2016 12:31 AM in response to cyoung570
    Level 5 (4,806 points)
    Oct 11, 2016 12:31 AM in response to cyoung570

    Looks like that is coming from Casper Suite Management software which would seem to indicate your computer is being enterprise managed by some Company IT department. Assuming you know who that is, contact them to have your hard drive replaced and recover as much data as they are able to.

  • by cyoung570,

    cyoung570 cyoung570 Oct 11, 2016 12:30 AM in response to MadMacs0
    Level 1 (8 points)
    Mac OS X
    Oct 11, 2016 12:30 AM in response to MadMacs0

    Alright thank you for the help!