Malwarebytes itself does not see these files as malware. These popups started after I upgraded my Mac OS to 10.15.3 and then performed a Malwarebytes update and then performed a malware scan. These files have been on my Mac since 2015 (it's 2020 and we are going through the whole COVID-19 pandemic). A bit of research was performed and I quickly discovered these are files associated with the Citrix Receiver. I was also getting the two incessant pop-ups referenced here. If you're unsure or uncomfortable at the command-line done do this.
That command will delete EVERYTHING from that directory down with a prompt for y/n. Then it will prompt you for your password (as sudo typically does), but will be on the command-line not in a UI. I just decided to remove all three as the third, something mac_auth like isn't something I recalled installing and isn't a service directory. There were three files in there, ServiceRecords and ReceiverHelp being two of them. The files are in /usr/local/libexec (that they're in /usr/local makes sense from a user installed application). That said, I was not comfortable typing my password into he dialog box when trying to move files to the trash via the UI. I'm fairly certain I had Citrix installed at one time and think maybe this was some left over software from that install which may now be indicated as malware (Just a hunch). As others on this thread have reported I too suddenly saw this pop up and was concerned.
0 kommentar(er)
