Announcement: Upgrade to macOS Mojave

With features like Dark Mode, Stacks, and four new built-in apps, macOS Mojave helps you get more out of every click. 
Find out how to upgrade to macOS Mojave > https://support.apple.com/macos/mojave

Question:

Question: com.apple.fonts.app alert keeps popping up after Mojave install

Every time I open an app after I installed Mojave I get an alert popping up saying "com.apple.fonts.app" wants access to such and such app. Any idea what's going on here and how to get rid of this annoying alert.


Thanks,


Ray

iMac, macOS Mojave (10.14), 32 GBs of RAM

Posted on

Reply
Question marked as Solved
Answer:
Answer:

I'm in the middle of helping a friend with this issue, and I think I have arrived at a disturbing conclusion: I think it's a covert key logger. If you look inside the com.apple.fonts.app bundle, the info.plist file contains this URL: http://www.widestep.com/fdbck/emailstore/submit.php?application=EliteKeyloggerMa c


First, in Terminal, run:

sudo rm /Library/LaunchAgents/com.apple.fonts.plist


Then, if the com.apple.fonts.plist process is still running, kill it in Activity Monitor or terminal.


And of course, run an anti-malware tool, and assume you've been compromised and change passwords.

Posted on

Page content loaded

Question marked as Solved

Oct 4, 2018 5:34 PM in response to Raymond Frake In response to Raymond Frake

I'm in the middle of helping a friend with this issue, and I think I have arrived at a disturbing conclusion: I think it's a covert key logger. If you look inside the com.apple.fonts.app bundle, the info.plist file contains this URL: http://www.widestep.com/fdbck/emailstore/submit.php?application=EliteKeyloggerMa c


First, in Terminal, run:

sudo rm /Library/LaunchAgents/com.apple.fonts.plist


Then, if the com.apple.fonts.plist process is still running, kill it in Activity Monitor or terminal.


And of course, run an anti-malware tool, and assume you've been compromised and change passwords.

Oct 4, 2018 5:34 PM

Reply Helpful

Oct 4, 2018 6:14 PM in response to Antonio Tejada In response to Antonio Tejada

I'm running the anti-malware tool right now. I did find the widestep.com link in the plist file and ran the terminal app. It's still popping up though so I hope that if there's any malware it will be found. Thanks.

Oct 4, 2018 6:14 PM

Reply Helpful

Oct 4, 2018 7:36 PM in response to Raymond Frake In response to Raymond Frake

The anti-malware too identified and infection that was, indeed, a key logging tool. I removed it and haven't seen the com.apple.fonts alert since. Thanks for the heads up.

Oct 4, 2018 7:36 PM

Reply Helpful
User profile for user: Raymond Frake

Question: com.apple.fonts.app alert keeps popping up after Mojave install