"apple wants to make changes" prompt

Boot into Safe Mode, Mac OS X: Starting up in Safe Mode, and run there for a while to see if it occurs. Then reboot normally and test again.

Download and run Etrecheck. Copy and paste the results into your reply. Etrecheck is a diagnostic tool that was developed by one of the most respected users here in the ASC and recommended by Apple Support to provide a snapshot of the system and help identify the more obvious culprits that can adversely affect a Mac's performance.

First uninstall CleanMyMac2. It is considered akin to malware by many around here. How To Uninstall CleanMyMac 2? Complete Removal of Mac Apps

After uninstalling, rerun Etrecheck to make sure all cleanmymac and symantec files have been removed.

Next, go to your User/Home/Library/Launch Agents folder and delete the com.Tituricsec.plist file.

Lastly remove the Seagate and Western Digital software. You Mac does not need any 3rd party software to manage external hard drive. It only interferes with the system's performance.

I've had the same problem. It seems to be related to an app named Tituricsec which is listed as unsigned on the enclosed etrecheck report.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-08-23 14:12:56

Download EtreCheck from https://etrecheck.com

Runtime: 2:42

Performance: Excellent

Problem: Other problem

Description:

Suspected malware: Popup window appears with this message: “Apple wants to make changes. Enter your password to allow this.”

Major Issues:

Anything that appears on this list needs immediate attention.

Unsigned files - There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Heavy RAM usage - This machine is using a large amount of RAM.

Clean up - There are orphan files that could be removed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Hardware Information:

Mac Pro (Late 2013)

Mac Pro Model: MacPro6,1

1 3.7 GHz Quad-Core Intel Xeon E5 (Xeon(R)) CPU: 4-core

32 GB RAM - Upgradeable

DIMM1 - 8 GB DDR3 ECC 1866 ok

DIMM2 - 8 GB DDR3 ECC 1866 ok

DIMM3 - 8 GB DDR3 ECC 1866 ok

DIMM4 - 8 GB DDR3 ECC 1866 ok

Video Information:

AMD FirePro D500 - VRAM: 3072 MB

AMD FirePro D500 - VRAM: 3072 MB

Cinema HD 2560 x 1600

Drives:

disk0 - APPLE SSD SM1024F 1.00 TB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 249.96 GB

disk1s1 - m**********t (APFS) 249.96 GB (103.17 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 249.96 GB (20 MB used)

disk1s3 - Recovery (APFS) [Recovery] 249.96 GB (519 MB used)

disk1s4 - VM (APFS) [APFS VM] 249.96 GB (2.15 GB used)

disk0s3 - m***********e (Journaled HFS+) 750.25 GB

disk2 - Seagate Backup+ Hub BK 6.00 TB

External USB 5 Gbit/s

disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk2s2 - m************p (Journaled HFS+) 3.00 TB

disk2s3 3.00 TB

disk3s1 - m***********a (APFS) 3.00 TB (2.11 TB used)

disk4 - Disk Image 24 MB (Disk Image)

External Disk Image

disk4s1 [Partition Map] 32 KB

disk4s2 - Flash Player (HFS+) 24 MB

Mounted Volumes:

disk0s3 - m***********e 750.25 GB (241.79 GB free)

Journaled HFS+

Mount point: /Volumes/m***********e

disk1s1 - m**********t 249.96 GB (143.97 GB free)

APFS

Mount point: /

disk1s4 - VM [APFS VM] 249.96 GB (143.97 GB free)

APFS

Mount point: /private/var/vm

disk2s2 - m************p 3.00 TB (1.35 TB free)

Journaled HFS+

Mount point: /Volumes/m************p

disk3s1 - m***********a 3.00 TB (888.51 GB free)

APFS

Mount point: /Volumes/m***********a

Network:

Interface en0: Ethernet 1

One IPv4 address

Interface en1: Ethernet 2

One IPv4 address

Interface en11: iPad

Interface en10: iPhone

Interface en2: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en9: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 43.59 GB available

System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 14 days

System Load: 2.01 (1 min ago) 2.08 (5 min ago) 2.12 (15 min ago)

Security:

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.cisco.videoguardmonitor.plist

Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuardMonitor/VideoGuardMonitor.bundle /Contents/Resources/launch.sh

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/net.langui.FTPServer.plist

Executable: /Applications/Utilities/FTPServer.app/Contents/Resources/ftpserver.py -p 2121 -f ~/Library/Containers/net.langui.FTPServer/Data/ftpusers.db -d /Volumes/m***********e/k****e/F******e -s ~`2$!@#&^%&)*&(HGDASDasdf=';p-=()#$%&^!@#$FASDqrweJ<G!@1208^& --pid_file ~/Library/Containers/net.langui.FTPServer/Data/ftpserver.pid -a 0 --current_uid 501 --stop_script /Applications/Utilities/FTPServer.app/Contents/Resources/stop-ftp.sh --log_file ~/Library/Containers/net.langui.FTPServer/Data/ftpserver.log

Launchd: ~/Library/LaunchAgents/com.cisco.videoguard6.uninstall.plist

Executable: /bin/sh /tmp/cisco_videoguard6/condUninstall.sh

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.Tituricsec.plist

Executable: ~/Library/Application Support/com.Tituricsec/Tituricsec r

Launchd: ~/Library/LaunchAgents/com.cisco.videoguard6.plist

Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard6/VideoGuard6.bundle/Contents/Re sources/setupServer.sh

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

41 32-bit apps

Kernel Extensions:

/System/Library/Extensions

[Not Loaded] EyeTVAfaTechHidBlock.kext (1.1)

[Not Loaded] EyeTVCinergy450AudioBlock.kext (1.1)

[Not Loaded] EyeTVCinergyXSAudioBlock.kext (1.1)

[Not Loaded] EyeTVEmpiaAudioBlock.kext (1.1)

[Not Loaded] EyeTVVoyagerAudioBlock.kext (1.1)

[Not Loaded] IndigoOverrides.kext (1.0.0d1)

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

EyeTV Helper Application (SHENZHEN GENIATECH INC.,LTD - installed 2016-10-31)

(/Library/Application Support/EyeTV/EyeTV Helper.app)

Activity Monitor Application (Apple - installed 2018-06-09)

(/Applications/Utilities/Activity Monitor.app)

1Password mini SMLoginItem (Mac App Store - installed 2018-05-19)

(/Applications/1Password.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebit s.onepassword-osx-helper.app)

FTPServerHelper SMLoginItem (Mac App Store - installed 2018-07-02)

(/Applications/Utilities/FTPServer.app/Contents/Library/LoginItems/FTPServerHelp er.app)

Internet Plug-ins:

FlashPlayer-10.6: (installed 2018-08-14)

QuickTime Plugin: (installed 2018-07-13)

Flash Player: (installed 2018-08-14)

WebVideoPlugin: (installed 2016-11-23)

SharePointBrowserPlugin: (installed 2017-04-26)

Silverlight: (installed 2018-05-11)

Mathematica: (installed 2017-05-03)

Safari Extensions:

3rd Party Preference Panes:

Flash Player (installed 2018-07-27)

Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

m**********t: Disk size: 249.96 GB - Disk used: 105.99 GB

Destinations:

m************p [Local] (Last used)

Total size: 3.00 TB

Total number of backups: 54

Oldest backup: 2018-04-23 21:26:43

Last backup: 2018-08-23 14:09:07

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Clean up:

~/Library/LaunchAgents/com.macpaw.CleanMyMac2Helper.diskSpaceWatcher.plist

'/Users/***/Library/Application Support/CleanMyMac 2/CleanMyMac 2 Helper.app'

Executable not found

~/Library/LaunchAgents/com.perceptiveautomation.IndigoServer2.plist

'/Library/Application Support/Perceptive Automation/Indigo 7/IndigoServer.app'

Executable not found

~/Library/LaunchAgents/com.macpaw.CleanMyMac2Helper.trashWatcher.plist

'/Users/***/Library/Application Support/CleanMyMac 2/CleanMyMac 2 Helper.app'

Executable not found

~/Library/LaunchAgents/com.macpaw.CleanMyMac2Helper.scheduledScan.plist

'/Users/***/Library/Application Support/CleanMyMac 2/CleanMyMac 2 Helper.app'

Executable not found

Diagnostics Information (past 7 days):

2018-08-19 17:07:57 Indigo 7.app CPU

/Applications/Indigo 7.app

End of report

I purchased McAfee and ran it's virus scan. It identified Tituricsec as malware and removed it. I have now had a recurrence of the problem since.

Hello,

Can you, please, also help me??? I have the same issue and am not a computer savvy. I know I am running low on hard drive space. I ran the EthreCheck and I am about to restart after running Malwarebytes. But, here is the report from EthreCheck. Thanks so much!

I have now had a recurrence of the problem since.

Is that supposed to read "not had a reoccurrence"?

Tituricse may be been part of the problem but you still have some nasty software installed - cleanmymac2. Rerun Etrecheck and use its Clean Up feature to remove the files listed under Clean Up. It's consider to be akin to malware by most of us here. Uninstall according to the developer's instructions: How To Uninstall CleanMyMac 2? Complete Removal of Mac Apps.

As far a McAfee is concerned it is totally unnecessary on a Mac. There are no know viruses for Mac and its got a history of false positives. Also it's a system resource hog. You would be better off uninstalling it and following the recommendations in this user tip: Effective defenses against malware and other threats

I am having the same problem and it started a few weeks ago. Mine always prompts when I'm using Safari. I am including my report from Etrecheck below in case it can be of help.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-08-17 13:20:16

Download EtreCheck from https://etrecheck.com

Runtime: 3:60

Performance: Good

Problem: Other problem

Description:

Keep getting “Apple would like to make changes” message and wants me to input my password. My user name is already there.

Major Issues:

Anything that appears on this list needs immediate attention.

Unsigned files - There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Hardware Information:

iMac (21.5-inch, Late 2012)

iMac Model: iMac13,1

1 2.7 GHz Intel Core i5 (i5-3330S) CPU: 4-core

8 GB RAM - Upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Video Information:

NVIDIA GeForce GT 640M - VRAM: 512 MB

iMac 1920 x 1080

Drives:

disk0 - APPLE HDD HTS541010A9E662 1.00 TB (Mechanical)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 - Macintosh HD (Journaled HFS+) 999.35 GB

disk0s3 - Recovery HD (HFS+) [Recovery] 650 MB

disk1 - Seagate Desktop 2.00 TB

External USB 480 Mbit/s

disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk1s2 - T**********e (Journaled HFS+) 2.00 TB

disk2 - Western Digital easystore 25FB 4.00 TB

External USB 5 Gbit/s

disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk2s2 - W**************B (Journaled HFS+) 4.00 TB

Mounted Volumes:

disk0s2 - Macintosh HD 999.35 GB (813.61 GB free)

Journaled HFS+

Mount point: /

disk1s2 - T**********e 2.00 TB (1.62 TB free)

Journaled HFS+

Mount point: /Volumes/T**********e

disk2s2 - W**************B 4.00 TB (2.39 TB free)

Journaled HFS+

Mount point: /Volumes/W**************B

Network:

Interface en0: Ethernet

Interface en5: iPhone

Interface en1: Wi-Fi

802.11 a/b/g/n

One IPv4 address

2 IPv6 addresses

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 32.71 GB available

System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 2 hours

System Load: 1.75 (1 min ago) 1.57 (5 min ago) 1.58 (15 min ago)

Configuration Files:

/etc/hosts - Count: 1

Security:

Unsigned Files:

Launchd: /Library/LaunchDaemons/com.starfield.backupservice.plist

Executable: /Applications/Workspace/BackupService/offSyncService

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist

Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGIN server

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.dymo.pnpd.plist

Executable: /Library/Printers/DYMO/Utilities/pnpd

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.symantec.nis.uninstall.English.plist

Executable: /usr/bin/ruby '/Library/Application Support/nis_EnglishTrial_postuninstall.rb'

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.VTechLLNService.plist

Executable: /Library/Preferences/VTech/DA/LLNServices/System/VTechLLNService.app/Contents/M acOS/VTechLLNService

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.Tituricsec.plist

Executable: ~/Library/Application Support/com.Tituricsec/Tituricsec r

Launchd: ~/Library/LaunchAgents/com.nds.pcshow.uninstall.plist

Executable: /bin/sh -c /tmp/vgconnect/condUninstall.sh

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.nds.pcshow.plist

Executable: /bin/sh -c $HOME/Library/NDSPCShowServer/NDSPCShowServer.bundle/Contents/Resources/launch. sh

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

78 32-bit apps

Kernel Extensions:

/Library/Application Support/Roxio

[Not Loaded] TDIXController.kext (2.0)

/Library/Extensions

[Not Loaded] CanonCUPSFAXUSBClassDriver.kext (Canon Inc., 4.8.1 - SDK 10.10)

/System/Library/Extensions

[Not Loaded] DymoUsbPrinterClassDriver.kext (1.1 - SDK 10.5)

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

Dropbox Application (Dropbox, Inc. - installed 2018-08-15)

(/Applications/Dropbox.app)

iTunesHelper Application (Apple - installed 2018-07-13)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

WorkspaceUpdate Application (? - installed 2013-05-24)

(/Applications/Workspace/WorkspaceUpdate.app)

WBE Desktop Notifier.App Application (?)

(/Applications/WBE Desktop Notifier.App)

WDDriveUtilityHelper Application (Western Digital Corporation Branded Products Group - installed 2017-10-20)

(/Applications/WD Drive Utilities.app/Contents/WDDriveUtilityHelper.app)

Internet Plug-ins:

DYMO NPAPI Addin: (installed 2014-08-04)

Google Earth Web Plug-in: (installed 2016-09-19)

DYMO Safari Addin: (installed 2014-08-04)

AdobePDFViewerNPAPI: (installed 2015-12-18)

FlashPlayer-10.6: (installed 2018-02-07)

Silverlight: (installed 2015-07-11)

QuickTime Plugin: (installed 2018-07-17)

Flash Player: (installed 2018-02-07)

AdobePDFViewer: (installed 2015-12-18)

CANONiMAGEGATEWAYDL: (installed 2006-04-20)

CANONiMAGEGATEWAYLI: (installed 2006-04-20)

EPPEX Plugin: (installed 2016-09-07)

JavaAppletPlugin: (installed 2017-11-02)

User Internet Plug-ins:

CitrixOnlineWebDeploymentPlugin: (installed 2013-04-25)

WbeTools64_14: (installed 2013-05-24)

fileEditTool64_15: (installed 2013-05-24)

Safari Extensions:

3rd Party Preference Panes:

Flash Player (installed 2018-02-01)

Java (installed 2017-11-02)

Time Machine:

Skip System Files: No

Mobile backups: No

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 999.35 GB - Disk used: 185.73 GB

Destinations:

T**********e [Local] (Last used)

Total size: 2.00 TB

Total number of backups: 89

Oldest backup: 2017-05-30 12:38:23

Last backup: 2018-08-17 13:03:02

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-08-17 11:05:50 Dropbox.app Crash

/Applications/Dropbox.app

2018-08-17 11:05:50 WD Discovery.app Crash (2 times)

/Applications/WD Discovery/WD Discovery.app

2018-08-16 14:58:59 com.apple.WebKit.WebContent CPU (8 times)

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

End of report

You are correct, that was a typo, or a typo augmented by spell check. I have not had a recurrence of the problem, but it was only happening every 3-4 days. We'll have to wait and see. I'll work on more cleanup with Etrecheck. Thanks.

David Krause

OT:

I hit your link for How to Uninstall CleanMyMac 2? Complete Removal of Mac Apps. I get the CleanMyMac website! Nowhere any instruction to uninstall, only to buy software. These people should be strung up.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-09-20 16:57:30

Download EtreCheck from https://etrecheck.com

Runtime: 3:49

Performance: Good

Problem: Other problem

Description:

“Apple wants to make changes” prompt

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup- Time Machine backup not found.

Adware- Adware detected.

Unsigned files- There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Low disk space- This machine is running low on free hard drive space.

High battery cycle count- Your battery may be losing capacity.

Apps with heavy CPU usage- There have been numerous cases of apps with heavy CPU usage.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Hardware Information:

MacBook Air (13-inch, 2013 - 2014)

MacBook Air Model: MacBookAir6,2

1 1.4 GHz Intel Core i5 (i5-4260U) CPU: 2-core

4 GB RAM - Not upgradeable

BANK 0/DIMM0 - 2 GB DDR3 1600 ok

BANK 1/DIMM0 - 2 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 991

Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900

Drives:

disk0 - APPLE SSD SD0128F 121.33 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 120.47 GB

disk1 - Macintosh HD (Journaled HFS+) 120.10 GB

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB

Mounted Volumes:

disk1 - Macintosh HD 120.10 GB (12.04 GB free)

Journaled HFS+

Mount point: /

Network:

Interface usbmodem1422: SAMSUNG_Android 2

Interface usbmodem1412: SAMSUNG_Android

Interface usbmodemc8b03002: SGH-T989D

Interface Bluetooth-Modem: Bluetooth DUN

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

4 IPv6 addresses

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS Sierra 10.12.6 (16G1510)

Time since boot: About 5 days

System Load: 1.67 (1 min ago) 1.76 (5 min ago) 1.71 (15 min ago)

Security:

Adware:

Launchd: ~/Library/LaunchAgents/Worthut.disable.plist

Reason: Adware name match

Executable: ~/Library/Application Support/Worthut/Worthut.app/Contents/MacOS/AppRC -trigger disable -isDev 0 -installVersion 1292 -firstAppId 1479039917680292 -identity Worthut

Launchd: ~/Library/LaunchAgents/Worthut.dolnwoad.plist

Reason: Adware name match

Executable: ~/Library/Application Support/Worthut/Worthut.app/Contents/MacOS/AppRC -trigger download -isDev 0 -installVersion 1292 -firstAppId 1479039917680292 -sig RAFICOLMAN_SIGNATURE -identity Worthut

Launchd: ~/Library/LaunchAgents/pronto.update.plist

Reason: Adware name match

Executable: ~/Library/Application Support/ProntoApp/ProntoApp.app/Contents/MacOS/ProntoApp -trigger update -app_name ProntoApp

Launchd: ~/Library/LaunchAgents/Smokyashan.isengard.plist

Reason: Adware name match

Executable: ~/Library/Application Support/Smokyashan/Smokyashan.app/Contents/MacOS/AppNOS -trigger update -isDev 0 -installVersion 1175 -firstAppId 1434976216979282 -identity Smokyashan -sig NOSIGNATURE_SIGNATURE -agentUpdate 2

Launchd: ~/Library/LaunchAgents/Worthut.AppVemoral.plist

Reason: Adware name match

Executable: ~/Library/Application Support/Worthut/Worthut.app/Contents/MacOS/AppRC -trigger AppRemoval -isDev 0 -installVersion 1292 -firstAppId 1479039917680292 -identity Worthut

Launchd: ~/Library/LaunchAgents/pronto.notification.plist

Reason: Adware name match

Executable: ~/Library/Application Support/ProntoApp/ProntoApp.app/Contents/MacOS/ProntoApp -trigger notification -app_name ProntoApp -emid 39e1b618758f529fa2cc02d5e984b911

Launchd: ~/Library/LaunchAgents/Worthut.btvlit.plist

Reason: Adware name match

Executable: ~/Library/Application Support/Worthut/Worthut.app/Contents/MacOS/AppRC -trigger ltvbit -isDev 0 -installVersion 1292 -firstAppId 1479039917680292 -identity Worthut

Launchd: ~/Library/LaunchAgents/Worthut.uadpte.plist

Reason: Adware name match

Executable: ~/Library/Application Support/Worthut/Worthut.app/Contents/MacOS/AppRC -trigger update -isDev 0 -installVersion 1292 -firstAppId 1479039917680292 -identity Worthut -sig RAFICOLMAN_SIGNATURE -agentUpdate 0

Safari Extension: Worthut

Reason: Adware name match

Unsigned Files:

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.WebAssistSearch.plist

Executable: ~/Library/Application Support/com.WebAssistSearch/WebAssistSearch r

Details: Domain name invalid - possibly adware

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

Executable: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=scheduled

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

Executable: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=logon

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.coupons.coupond.plist

Executable: /Library/Application Support/Coupons/coupond launchd

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

55 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

iTunesHelper Application (Apple - installed 2017-09-16)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Dropbox Application (Dropbox, Inc. - installed 2018-09-14)

(/Applications/Dropbox.app)

Android File Transfer Agent Application (? - installed 2012-10-15)

(~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Garmin Express Service Application (Garmin International - installed 2018-06-15)

(/Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app)

com.adobe.SwitchBoard.monitor.plist MachInit (?)

(/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist)

Internet Plug-ins:

FlashPlayer-10.6: (installed 2018-09-11)

QuickTime Plugin: (installed 2018-09-15)

Flash Player: (installed 2018-09-11)

CouponPrinter-FireFox_v2: (installed 2014-12-04)

PepperFlashPlayer: (installed 2018-09-12)

GarminGpsControl: (installed 2014-03-31)

Silverlight: (installed 2016-05-24)

JavaAppletPlugin: (installed 2018-07-21)

Safari Extensions:

3rd Party Preference Panes:

Flash Player (installed 2018-08-27)

Java (installed 2018-07-21)

Time Machine:

Time Machine Not Configured!

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-09-20 16:24:59 com.apple.WebKit.WebContent CPU (7 times)

/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/ com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

2018-09-19 16:09:00 com.apple.WebKit.Plugin.64 CPU (4 times)

/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/ com.apple.WebKit.Plugin.64.xpc/Contents/MacOS/com.apple.WebKit.Plugin.64

2018-09-19 14:05:04 Software Update.app CPU

/System/Library/CoreServices/Software Update.app

2018-09-15 14:41:40 Google Earth Pro.app CPU (6 times)

/Applications/Google Earth Pro.app

2018-09-14 10:10:08 Mail.app Crash

/Applications/Mail.app

2018-09-14 08:47:23 CharacterPalette.app Crash

/System/Library/Input Methods/CharacterPalette.app

End of report

Several things stand out;

1 - you are dangerously low on free space on your HD. It's recommended that a minimum of 15-20 GB of free space be available for optimal system and application performance. Since your MacBook can't upgrade it's memory you need to keep plenty of free space open for swapping and caches.

2 - you have a lot of adware installed. Rerun Etrecheck and use it to remove the adware. Or you can download and use Malwarebytes to remove the adware. Worthut is one of them and should be removed from Safari's extensions. It was developed by a longtime contributor to these forums and a recognized computer security expert.

3 - you should reboot frequently so as to clear out temporary cache and swap files. That will help keep your MBP at optimum performance.

Hi there - I've been having this same problem! Here were my notes from the recommended etrecheck.... Any help would be greatly appreciated!!

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-09-20 16:17:48

Download EtreCheck from https://etrecheck.com

Runtime: 4:01

Performance: Good

Problem: Other problem

Description:

Apple needs to make a change - prompt window requesting password information. Pops up 3 times in a row…. Then may or may not crash safari in the process…

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup- Time Machine backup not found.

Unsigned files- There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Apps with heavy CPU usage- There have been numerous cases of apps with heavy CPU usage.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown- Your machine shut down abnormally.

Hardware Information:

Mac mini (Late 2014)

Mac mini Model: Macmini7,1

1 2.6 GHz Intel Core i5 (i5-4278U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Video Information:

Intel Iris - VRAM: 1536 MB

HP 27es 1920 x 1080 @ 60 Hz

Drives:

disk0 - APPLE HDD HTS541010A9E662 1.00 TB (Mechanical)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 999.35 GB

disk1 - Macintosh HD (Journaled HFS+) 998.98 GB

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB

Mounted Volumes:

disk1 - Macintosh HD 998.98 GB (858.64 GB free)

Journaled HFS+

Mount point: /

Network:

Interface en0: Ethernet

Interface en6: iPad

Interface en5: iPhone

One IPv4 address

Interface en1: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS High Sierra 10.13.5 (17F77)

Time since boot: About 5 hours

System Load: 1.58 (1 min ago) 1.80 (5 min ago) 1.79 (15 min ago)

Security:

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.NetLookupSearch.plist

Executable: ~/Library/Application Support/com.NetLookupSearch/NetLookupSearch r

Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist

Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGIN server

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

10 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

Dropbox Application (Dropbox, Inc. - installed 2018-09-11)

(/Applications/Dropbox.app)

iTunesHelper Application (Apple - installed 2018-06-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-09-20)

(/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)

Internet Plug-ins:

AdobePDFViewerNPAPI: (installed 2018-09-20)

FlashPlayer-10.6: (installed 2018-04-18)

AdobePDFViewer: (installed 2018-09-20)

QuickTime Plugin: (installed 2018-07-03)

Flash Player: (installed 2018-04-18)

AdobeAAMDetect: (installed 2018-07-09)

User Internet Plug-ins:

WebEx64: (installed 2018-04-06)

ZoomUsPlugIn: (installed 2018-04-18)

3rd Party Preference Panes:

Flash Player (installed 2018-02-23)

Time Machine:

Time Machine Not Configured!

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-09-20 10:30:48 Last Shutdown Cause: 3 - Hard shutdown

2018-09-20 08:06:10 com.apple.WebKit.WebContent CPU (7 times)

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

End of report

Hi,

I have been having the same problem. I ran the Etrecheck and have posted my report here. Any help would be greatly appreciated! Thanks.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-09-20 19:54:31

Download EtreCheck from https://etrecheck.com

Runtime: 3:09

Performance: Good

Problem: Other problem

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup - Time Machine backup not found.

Unsigned files - There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Heavy RAM usage - This machine is using a large amount of RAM.

Corrupt filesystem - This machine shut down due to a corrupt filesystem.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.

Hardware Information:

MacBook Pro (13-inch, 2017, Four Thunderbolt 3 ports)

MacBook Pro Model: MacBookPro14,2

1 3.1 GHz Intel Core i5 (i5-7267U) CPU: 2-core

16 GB RAM - Not upgradeable

BANK 0/DIMM0 - 8 GB LPDDR3 2133 ok

BANK 1/DIMM0 - 8 GB LPDDR3 2133 ok

Battery: Health = Normal - Cycle count = 137

Video Information:

Intel Iris Plus Graphics 650 - VRAM: 1536 MB

Color LCD

Drives:

disk0 - APPLE SSD AP1024J 1.00 TB (Solid State - TRIM: Yes)

Internal PCI-Express 8.0 GT/s x4 NVM Express

disk0s1 - EFI [EFI] 315 MB

disk0s2 1.00 TB

disk1s1 - Macintosh HD (APFS) 1.00 TB (108.89 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 1.00 TB (22 MB used)

disk1s3 - Recovery (APFS) [Recovery] 1.00 TB (519 MB used)

disk1s4 - VM (APFS) [APFS VM] 1.00 TB (8.59 GB used)

disk3 - Disk Image 205 MB (Disk Image)

External Disk Image

disk3s1 [Partition Map] 32 KB

disk3s2 - D*************************n (HFS+) 205 MB

Mounted Volumes:

disk1s1 - Macintosh HD 1.00 TB (882.01 GB free)

APFS

Mount point: /

disk1s4 - VM [APFS VM] 1.00 TB (882.01 GB free)

APFS

Mount point: /private/var/vm

Network:

Interface en7: iPhone

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

3 IPv6 addresses

Interface en6: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 66 days

System Load: 1.46 (1 min ago) 1.47 (5 min ago) 1.42 (15 min ago)

Security:

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.SearchQuest.plist

Executable: ~/Library/Application Support/com.SearchQuest/SearchQuest r

32-bit Applications:

24 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Daemons:

User Launch Agents:

User Login Items:

DISHAnywherePlayer_Launcher Application (? - installed 2018-07-29)

(/Applications/DISHAnywherePlayer_Launcher.app)

iTunesHelper Application (Apple - installed 2018-07-11)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

StartUpHelper SMLoginItem (Spotify - installed 2018-08-15)

(/Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app)

Internet Plug-ins:

OfficeLiveBrowserPlugin: (installed 2009-08-17)

FlashPlayer-10.6: (installed 2018-06-19)

QuickTime Plugin: (installed 2018-07-17)

Flash Player: (installed 2018-06-19)

User Internet Plug-ins:

ZoomUsPlugIn: (installed 2018-01-16)

DISH Anywhere Player: (installed 2018-07-29)

3rd Party Preference Panes:

Flash Player (installed 2018-06-01)

Time Machine:

Time Machine Not Configured!

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-09-17 21:55:13 Microsoft PowerPoint.app Hang

/Applications/Microsoft Office 2008/Microsoft PowerPoint.app

2018-09-17 19:23:18 com.apple.WebKit.WebContent CPU (3 times)

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

2018-07-16 23:40:57 Last Shutdown Cause: -60 - Corrupt filesystem

End of report

Hello Old Toad,

I am having the same problem as everyone else here. Here is my etrecheck report. Any help would be great, thank you!

EtreCheck version: 5.0 (5008)

Report generated: 2018-09-25 11:12:21

Download EtreCheck from https://etrecheck.com

Runtime: 2:49

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled

Problem: Apps are crashing

Description:

My safari keeps quitting unexpectedly and then I get a pop up window saying Apple would like to make changes and wants me to input my password. My user name is already there.

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup - Time Machine backup not found.

Adware - Adware detected.

Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Corrupt filesystem - This machine shut down due to a corrupt filesystem.

Clean up - There are orphan files that could be removed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.

Hardware Information:

MacBook Air (13-inch, 2017)

MacBook Air Model: MacBookAir7,2

1 1.8 GHz Intel Core i5 (i5-5350U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 78

Video Information:

Intel HD Graphics 6000 - VRAM: 1536 MB

Color LCD 1440 x 900

Drives:

disk0 - APPLE SSD SM0128G 121.33 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 121.12 GB

disk1 [APFS Virtual drive] 121.12 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 51.66 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 3.22 GB used)

Mounted Volumes:

disk1s1 - Macintosh HD 121.12 GB (65.57 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM] (Shared - 3.22 GB used)

APFS

Mount point: /private/var/vm

Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

Interface en3: iPhone

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS High Sierra 10.13.2 (17C88)

Time since boot: About 7 days

Configuration Profiles:

Information not available

Security:

Adware:

Launchd: /Library/LaunchAgents/com.MyMacUpdater.agent.plist

Reason: Adware name match

Executable: /Applications/MyMacUpdater/MyMacUpdater -guid 16008265029221919 -source picpm-1814 -url http://request.macmymacupdater.com/macCheckForUpdates/ -brand MyMacUpdater -current_version 1000

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MUpdate.plist

Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.citrixonline.GoToMeeting.G2MUpdate.plist

Executable: ~/Library/Application Support/CitrixOnline/GoToMeeting/G2MUpdate

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.NetLookupSearch.plist

Executable: ~/Library/Application Support/com.NetLookupSearch/NetLookupSearch r

Details: Domain name invalid - possibly adware

32-bit Applications:

One 32-bit app

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

iTunesHelper (Apple - installed 2017-12-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunes Helper)

Internet Plug-ins:

googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-11)

FlashPlayer-10.6: 31.0.0.108 (installed 2018-09-11)

QuickTime Plugin: 7.7.3 (installed 2017-12-01)

Flash Player: 31.0.0.108 (installed 2018-09-11)

o1dbrowserplugin: 5.41.3.0 (installed 2018-04-09)

3rd Party Preference Panes:

Flash Player (installed 2018-08-27)

Time Machine:

Time Machine Not Configured!

Performance:

System Load: 1.27 (1 min ago) 1.39 (5 min ago) 1.64 (15 min ago)

Nominal I/O speed: 0.10 MB/s

File system: 75.22 seconds

Write speed: 691 MB/s

Read speed: 1181 MB/s

CPU Usage:

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Virtual Memory Information:

Software Installs (past 30 days):

Clean up:

/Library/LaunchAgents/com.MyShopcoupon.agent.plist

/Applications/MyShopcoupon/MyShopcoupon

Executable not found

Diagnostics Information (past 7 days):

2018-09-18 13:40:39 Last Shutdown Cause: -60 - Corrupt filesystem

End of report

You have a couple of issues that need addressing:

1 - Corrupt filesystem - This machine shut down due to a corrupt filesystem.

Boot into the Recovery volume (boot with the Command + R keys held down), select Disk Utility and run First Aid on your hard drive.

2 - you have adware installed. Rerun Etrecheck and remove the adware and the Clean Up items.

Be sure you have a current backup of your hard derive before doing anything else.