Mac's Grab keeps opening my screenshots & dragged desktop images in Grab instead of Preview. PLEASE HELP

Good News!

I have been in a same situation for many months but I tried this and seemed the problem is solved.

1. From "About this Mac" go to "Storage" then "Manage"

2. "Application"

3. Delete old unused apps

I had deleted many old apps such as Final Cut Pro 7, DVD Studio Pro, Soundtrack Pro, Live Type, Microsoft Office 2011 and many more that I haven't been accessed for like five years.

I can't specify which exact app is suspect, but this worked and now any screenshots I double click instantly open "Preview" like before.

Hope this works for you too.

Best,

Mat

cryptovos wrote:

I can't be the only one having this issue. Would really appreciate if anyone can help me fix this. Thanks

Yes, I believe this is a glitch if not a bug in High Sierra. I have seen it before so do not feel alone.

I know of no permanent solution at this point. Frustrating yes—keep doing what you are doing in the info pane and "change all."

Rebuilding the Launch Services Data Base via third party or Terminal.app has no lasting effect.

Apple Feedback http://www.apple.com/feedback/

With your same Apple ID you can sign up for a free Developers Account and start a conversation with Apple engineers

Bug Reporter https://bugreport.apple.com/

Since it worked in the Safe Mode, try running this program in your normal user account, then copy and paste the output in a reply. The program was created by etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy Report” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

You are welcome. Click the last line in my previous post. It is a link to a website where you can download Etrecheck. Run the program and then use the above instructions to post the report in a reply. The purpose behind doing this is to see if you have 3rd party software installed that might be causing the problem.

I have the exact same problem – recently I'm getting Grap app setting itself as a default app for all images instead of Preview. After manually changing it back to Preview, it's working good for some time, then suddenly it's starting to use Grab again. ***?!

EtreCheck report does not seems suspicios yet I'm not sure about some files...

EtreCheck version: 4.0.2 (4A133) Report generated: 2018-02-18 12:40:35 Runtime: 3:40 Performance: Good Problem: No problem - just checking Major Issues: None Minor Issues: These issues do not need immediate attention but they may indicate future problems. Clean up - There are orphan files that could be removed. Unsigned files - There is unsigned software installed. It appears to be legitimate but should be reviewed. System modifications - There are a large number of system modifications running in the background. Hardware Information: MacBook Pro (Retina, 13-inch, Early 2015) MacBook Pro Model: MacBookPro12,1 1 3,1 GHz Intel Core i7 (i7-5557U) CPU: 2-core 16 RAM Not upgradeable BANK 0/DIMM0 8 GB DDR3 1867 ok BANK 1/DIMM0 8 GB DDR3 1867 ok Battery: Health = Normal - Cycle count = 123 Video Information: Intel Iris Graphics 6100 - VRAM: 1536 MB Color LCD 2560 x 1600 Drives: disk0 - APPLE SSD SM1024G 1.00 TB (Solid State - TRIM: Yes) Internal PCI 5.0 GT/s x4 Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 999.70 GB disk1s1 - Macintosh HD (APFS) 999.70 GB 943.74 GB disk1s2 - Preboot (APFS) [APFS Preboot] 999.70 GB 21 MB disk1s3 - Recovery (APFS) [Recovery] 999.70 GB 510 MB disk1s4 - VM (APFS) [APFS VM] 999.70 GB 4.30 GB Mounted Volumes: disk1s1 - Macintosh HD 999.70 GB (50.92 GB free) APFS Mount point: / Encrypted disk1s4 - VM [APFS VM] 999.70 GB (50.92 GB free) APFS Mount point: /private/var/vm Network: Interface en0: Wi-Fi 802.11 a/b/g/n/ac One IPv4 address Interface en3: Bluetooth PAN Interface bridge0: Thunderbolt Bridge Interface en4: iPhone Interface vnic0: Parallels Shared #0 One IPv4 address Interface vnic1: Parallels Host-Only #1 One IPv4 address iCloud Quota: 145.41 GB available System Software: macOS High Sierra 10.13.3 (17D47) Time since boot: About 12 days System Load: 2.48 (1 min ago) 3.05 (5 min ago) 3.06 (15 min ago) Security: Versions System Latest Installed Status Gatekeeper 135 135 Mac App Store and identified developers XProtect 2098 2098 Malware Removal Tool 1.29 1.29 System Integrity Protection Enabled Unsigned Files: Launchd: ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist Executable: ~/Library/Application Support/Steam/SteamApps/steamclean Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.intel.haxm.plist Executable: /Library/Extensions/intelhaxm.kext/Contents/Resources/haxm_start.sh Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/org.macports.nginx.plist Executable: /opt/local/bin/daemondo --label=nginx --start-cmd /opt/local/sbin/nginx ; --pid=fileauto --pidfile /opt/local/var/run/nginx/nginx.pid Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/org.freedesktop.dbus-session.plist Executable: /opt/local/bin/dbus-daemon --nofork --session Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/org.macports.rsyncd.plist Executable: /opt/local/bin/daemondo --label=rsyncd --start-cmd /opt/local/etc/LaunchDaemons/org.macports.rsyncd/rsyncd.wrapper start ; --stop-cmd /opt/local/etc/LaunchDaemons/org.macports.rsyncd/rsyncd.wrapper stop ; --restart-cmd /opt/local/etc/LaunchDaemons/org.macports.rsyncd/rsyncd.wrapper restart ; --pid=fileauto --pidfile /opt/local/var/run/rsyncd.pid Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/org.serviio.server.plist Executable: /bin/bash /Library/Application Support/Serviio/bin/serviio.sh Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/JavaUpdater.app/Contents/MacOS/JavaUpdater -bgcheck Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/org.chromium.chromoting.plist Executable: /Library/PrivilegedHelperTools/org.chromium.chromoting.me2me.sh --run-from-launchd Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/org.freedesktop.dbus-system.plist Executable: /opt/local/bin/dbus-daemon --system --nofork Details: Exact match found in the whitelist - probably OK Kernel Extensions: /Applications/Parallels Desktop.app [Not Loaded] prl_hypervisor.kext (12.2.1 41615 - SDK 10.9) [Not Loaded] prl_netbridge.kext (12.2.1 41615 - SDK 10.9) [Not Loaded] prl_usb_connect.kext (12.2.1 41615 - SDK 10.9) [Not Loaded] prl_vnic.kext (12.2.1 41615 - SDK 10.9) /Applications/Tunnelblick.app [Not Loaded] tap-signed.kext (20141104 (Tunnelblick build 4921)) [Not Loaded] tun-20111101.kext (20111101 (Tunnelblick build 4921)) /Applications/zoom.us.app [Not Loaded] ZoomAudioDevice.kext (1.1 - SDK 10.8) /Library/Application Support/Roxio [Not Loaded] TDIXController.kext (1.7) /Library/Extensions [Loaded] intelhaxm.kext (6.2.1 - SDK 10.9) [Not Loaded] ext2fs.kext (1.4d4) /System/Library/Extensions [Not Loaded] MegaFon1KYDriver.kext (1.0.3) [Not Loaded] Quanta_QDL_Driver.kext (1.0.3) [Not Loaded] Yota1KYDriver.kext (1.0.3) [Not Loaded] CiscoVPN.kext (2.0.1) [Not Loaded] iavkfs.kext (1.0.1) [Not Loaded] SATSMARTDriver.kext (0.6 - SDK 10.6) System Launch Agents: [Not Loaded] 8 Apple tasks [Loaded] 150 Apple tasks [Running] 132 Apple tasks System Launch Daemons: [Not Loaded] 36 Apple tasks [Loaded] 164 Apple tasks [Running] 133 Apple tasks Launch Agents: [Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2016-05-02) [Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2016-05-02) [Other] com.tvmobili.artwork.plist (? 5da12c3e - installed 2012-11-17) [Loaded] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-05-05) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-29) [Other] jp.co.canon.CUPSPS2.BG.plist (? e5dfc242 - installed 2011-09-30) [Not Loaded] org.freedesktop.dbus-session.plist (? d4103e65 - installed 2013-11-23) [Other] jp.co.canon.UFR2.BG.plist (? 827e1214 - installed 2011-03-12) [Loaded] com.oracle.java.Java-Updater.plist (? cf11c248 - installed 2017-09-28) [Loaded] org.chromium.chromoting.plist (? 81572da9 - installed 2017-10-24) [Loaded] ee.ria.id-updater.plist (Riigi Infosüsteemi Amet - installed 2015-11-30) Launch Daemons: [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2016-05-13) [Loaded] com.intel.haxm.plist (? 42f307e7 - installed 2017-08-21) [Not Loaded] org.macports.rsyncd.plist (? 99f2454f - installed 2014-11-21) [Not Loaded] org.macports.nginx.plist (? eca55055 - installed 2014-11-21) [Loaded] com.daisydiskapp.DaisyDiskAdminHelper.plist (Software Ambience Corp. - installed 2017-04-17) [Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2016-05-02) [Not Loaded] org.freedesktop.dbus-system.plist (? e1cd8f49 - installed 2013-11-23) [Running] com.adobe.adobeupdatedaemon.plist (Adobe Systems, Inc. - installed 2016-09-27) [Loaded] com.privax.hmaprovpn.helper.plist (Privax LTD - installed 2016-12-29) [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2016-05-02) [Running] com.cleverfiles.cfbackd.plist (Justin Johnson - installed 2013-09-28) [Loaded] com.adobe.SwitchBoard.plist (? 856489a3 - installed 2012-03-13) [Other] com.tvmobili.tvmobilisvcd.plist (? 3abda99a - installed 2012-11-17) [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2017-11-28) [Loaded] com.oracle.java.Helper-Tool.plist (? fa56dec8 - installed 2017-09-28) [Loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-05-05) [Running] org.serviio.server.plist (? 16e32f40 - installed 2017-09-21) [Running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-01-29) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2016-05-13) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-10-13) [Loaded] com.nullvision.noatime.plist (Apple, Inc. - installed 2017-09-21) [Loaded] org.wireshark.ChmodBPF.plist (? d4207e05 - installed 2017-03-13) [Loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (Jonathan Bullard - installed 2017-12-12) User Launch Agents: [Loaded] com.parallels.mobile.startgui.launchagent.plist (? 0 - installed ) [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-10) [Loaded] com.valvesoftware.steamclean.plist (? 0 - installed 2017-12-21) [Running] com.hp.devicemonitor.plist (HP Inc. - installed 2017-09-18) [Other] com.apple.CSConfigDotMacCert-myxaxaxa@me.com-SharedServices.Agent.plist (? 0 - installed ) [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-29) [Loaded] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (Jonathan Bullard - installed 2017-12-07) User Login Items: Alfred 3 Application (Running with Crayons Ltd (/Applications/Alfred 3.app) iTerm Application (GEORGE NACHMAN (/Applications/iTerm.app) Backup and sync from Google Application (Google, Inc. (/Applications/Backup and Sync.app) Dropbox Application (Dropbox, Inc. (/Applications/Dropbox.app) Internet Plug-ins: o1dbrowserplugin: 5.41.3.0 (installed 2015-12-16) Unity Web Player: UnityPlayer version 5.3.4f1 (installed 2016-03-11) OfficeLiveBrowserPlugin: 12.2.6 (installed 2010-07-20) AdobeAAMDetect: 3.0.0.0 (installed 2016-09-27) FlashPlayer-10.6: 28.0.0.126 (installed 2017-12-15) AdobePDFViewerNPAPI: 15.010.20056 (installed 2015-12-18) DivXBrowserPlugin: 1.4 (installed 2008-03-27) QuickTime Plugin: 7.7.3 (installed 2018-01-25) Flash Player: 28.0.0.126 (installed 2017-12-15) googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-11) Silverlight: 5.1.50428.0 (installed 2016-06-24) AdobePDFViewer: 9.3.3 (installed 2016-02-07) jdk: Unknown (installed 2017-12-13) iPhotoPhotocast: 7.0 (installed 2009-02-02) JavaAppletPlugin: Java 9.0.1 build 11 (installed 2017-12-13) User Internet Plug-ins: ZoomUsPlugIn: 4.0.38982.0714 (installed 2017-07-25) Safari Extensions: OpenIE.safariextz - Parallels - http://www.parallels.com (installed 2012-09-04) 3rd Party Preference Panes: Flash Player (installed 2017-11-28) FUSE for OS X (OSXFUSE) (installed 2013-11-13) fuse-ext2 (installed 2009-12-24) ID-updater (installed 2015-08-24) Java (installed 2017-12-13) MacFUSE (installed 2012-11-17) NTFS-3G (installed 2010-10-11) Time Machine: Skip System Files: No Mobile backups: Auto backup: Yes Volumes being backed up: Macintosh HD: Disk size: 999.70 GB - Disk used: 948.77 GB Destinations: M*******M [Local] (Last used) Total size: 2.00 TB Total number of backups: 45 Oldest backup: 2017-12-02 00:55:12 Last backup: 2017-12-29 19:16:50 Top Processes by CPU: Process (count) Source % of CPU WindowServer Apple 13 spindump Apple 8 EpicGamesLauncher-Mac-Shipping 7 kernel_task Apple 7 firefox Mozilla Corporation 4 Top Processes by Memory: Process (count) Source RAM usage plugin-container (4) Mozilla Corporation 1.47 GB kernel_task Apple 1.41 GB firefox Mozilla Corporation 1.13 GB EpicGamesLauncher-Mac-Shipping 350 MB mdworker (18) Apple 350 MB Top Processes by Network Use: Process Source Input Output mDNSResponder Apple 27 MB 11 MB firefox Mozilla Corporation 18 MB 774 KB Dropbox Dropbox, Inc. 6 MB 6 MB netbiosd Apple 1 MB 1 MB java Oracle America, Inc. 2 MB 0 B Top Processes by Energy Use: Process (count) Source Energy usage (0-100) WindowServer Apple 7 plugin-container (4) Mozilla Corporation 6 firefox Mozilla Corporation 5 EpicGamesLauncher-Mac-Shipping 3 hidd Apple 2 Virtual Memory Information: Available RAM 6.80 GB Free RAM 2.28 GB Used RAM 9.20 GB Cached files 4.52 GB Swap Used 1.69 GB Software Installs (past 30 days): Name Version Install Date Slack 3.0.5 2018-01-20 Telegram 3.7.5 2018-01-30 Pocket 1.7.1 2018-02-08 IP Scanner 3.65 2018-02-09 Clean up: /Library/LaunchDaemons/com.tvmobili.tvmobilisvcd.plist /Applications/TVMOBiLi.app/Contents/MacOS/tvmobilisvcd Executable not found /Library/LaunchAgents/jp.co.canon.UFR2.BG.plist /Library/Printers/Canon/UFR2/Utilities/UFR II BackGrounder.app/Contents/MacOS/UFR II BackGrounder Executable not found /Library/LaunchAgents/jp.co.canon.CUPSPS2.BG.plist /Library/Printers/Canon/CUPSPS2/BackGrounder/Canon PS2 BackGrounder.app/Contents/MacOS/Canon PS2 BackGrounder Executable not found /Library/LaunchAgents/com.tvmobili.artwork.plist /Applications/TVMOBiLi.app/Contents/MacOS/tvmobiliqlhandler Executable not found ~/Library/LaunchAgents/com.apple.CSConfigDotMacCert-myxaxaxa@me.com-SharedServices.Agent.plist /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framework/Versions/A/Support/CSConfigDotMacCert Executable not found /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF Executable not found ~/Library/LaunchAgents/com.parallels.mobile.startgui.launchagent.plist /Applications/Parallels Access.app/Contents/MacOS/prl_deskctl_wizard Executable not found Diagnostics Information (past 7 days): 2018-02-11 21:20:11 Backup and Sync.app Crash objc_msgSend() selector name: updatePath:withStatus: 2018-01-21 17:47:41 Kernel Kernel Panic 3rd Party Kernel Extensions: com.parallels.kext.vnic 12.2.1 41615 com.parallels.kext.hypervisor 12.2.1 41615 com.parallels.kext.usbconnect 12.2.1 41615 com.parallels.kext.netbridge 12.2.1 41615 com.intel.kext.intelhaxm 6.2.1 End of report

I'm having the same issue and it's been driving me crazy. After some time, Grab suddenly takes over as the default program for opening JPG files. I set it back to Preview, to always open in Preview, but a few days later, Grab takes over again. Horrible! Come on Apple, fix your OS.

发自我的 iPad

在 2018年3月8日，下午8:59，Apple Support Communities Updates <discussions-updates@apple.com> 写道：

Apple Support Communities

dialabrain has posted in the macOS Sierra community.

Mac's Grab keeps opening my screenshots & dragged desktop images in Grab instead of Preview. PLEASE HELP

Another way to rebuild Launch Services is to use Onyx and run the maintenance script.

To post a reply, go to the discussion in Communities.

You are receiving this email from Communities. You can change your email preferences in your Communities Profile. Please expect a slight delay in visibility of points awarded.

TM and copyright © 2018 Apple Inc. One Apple Park Way, Cupertino, CA 95014.

All Rights Reserved | Privacy Policy | Terms of Use | Apple Support

I've been struggling with this exact same issue. Grab is a useless piece of nothing software we never needed and now it's messing with every single image file I have. Honestly, it would be ok if when it opened an image it fit it to screen, but it's all zoomed in and useless, and there is no way to change preferences to fix this. The preferences menu in Grab basically gives you a choices of pointers; ridiculous. I just want to delete it altogether, but being a system file it would probably muck up the machine. FIX THIS APPLE. Stop breaking what isn't broken.

I'm having this same problem too, with High Sierra, 10.13.3. It's extremely frustrating.

It starting happening after I installed an OS upgrade some months ago, and then it eventually just seemed to fix itself. But in the past day or two, it has started happening again.

It is not only Grab that preempts Preview for images, Adobe Acrobat preempts Preview for pdf documents in the same way (if you have Acrobat). I would guess there are other related problems as well. The best you can do file a bug report with Apple as this is clearly a bug. And, why they are dragging their feet with a fix is beyond me.

An AirDrop image from my iPhone opened in Grab today and I had the same problem of Preview not being an option in the "open with" list in Get Info.

I opened it in Preview by dragging the image icon onto Preview in the dock and then saved it...subsequently it then opened with Preview and showed Preview as its default in Get Info.

A second Airdropped image a few minutes later defaulted to Preview.

A week or two ago I had something similar with a jpg defaulting to Grab. Again, no option for Preview in "open with" and when I tried to open it with Preview a dialogue said corrupted file or similar. I think I then opened it with one of the options given in "open with" and then having saved it subsequent jpgs all opened with Preview by default again until today.

matkimura wrote:

I tried this and seemed the problem is solved.

3. Delete old unused apps

Well I appreciate your optimism.

However, my conversation with Apple engineers states that is a known bug and still considered [33863336 | OPEN ]

I have discovered that I can trigger the bug by dragging a image (jpg) from a browser window to the Desktop.

Now the image has been hijacked by Grab.app and shows an xattr of:

com.apple.quarantine.

Any subsequent screenshots are also hijacked by Grab.app with an xattr of:

com.apple.FinderInfo

com.apple.lastuseddate#PS

com.apple.metadata:kMDItemIsScreenCapture

com.apple.metadata:kMDItemScreenCaptureGlobalRect

com.apple.metadata:kMDItemScreenCaptureType

It is a an ongoing, frustrating bug, severely interrupting a normal work flow.

YMMV

For what it's worth, I suffered from this problem for about a month. It was, indeed, very frustrating and time-consuming. None of the solutions that I tried fixed the problem. Then, a few days ago, it suddenly went away on its own. I double-clicked a .jpg, expecting the usual Grab hassle, but it opened with Preview.

Thank you Matt! I did this and I just uninstalled the apps that were no longer supported by apple, the old Final cut studio apps, Media composer 5 and a few third party apps including DIVX. My images are opening in Preview just fine.