Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

monitony

macrumors newbie
Original poster
Feb 12, 2024
6
0
Hello I've bought a fresh Macbook and after Sonoma installation I faced a problem – a small window pops up at different times. I have no idea what is it but it looks like spam window without any content.
 

Attachments

  • Screenshot 2024-02-12 at 10.27.24.png
    Screenshot 2024-02-12 at 10.27.24.png
    99.4 KB · Views: 195

monitony

macrumors newbie
Original poster
Feb 12, 2024
6
0
So I've got it again. Seems like it's Mail thing 🤨
 

Attachments

  • Screenshot 2024-02-14 at 16.46.07.png
    Screenshot 2024-02-14 at 16.46.07.png
    64 KB · Views: 68

monitony

macrumors newbie
Original poster
Feb 12, 2024
6
0
Okay it seems that this window doesn't belong to Mail or any other app. It's just a random ahh window that appear at random times. My wife has the same problem after updating to Sonoma
 

diego.caraballo

macrumors 6502a
Oct 18, 2013
702
1,814
Hello I've bought a fresh Macbook and after Sonoma installation I faced a problem – a small window pops up at different times. I have no idea what is it but it looks like spam window without any content.
Hi!
Check for malware on both machines: https://www.malwarebytes.com/

Also, check the DNS information of your network: Apple logo > System preferences > "DNS" on search box > click on "DNS servers" result. A list should appear (repeat if not)
Normally you should find your router IP address here (and a second entry for the IPV6 version of it).
Any other random IP could signal a compromised router.
 
  • Like
Reactions: ignatius345

monitony

macrumors newbie
Original poster
Feb 12, 2024
6
0
Hi!
Check for malware on both machines: https://www.malwarebytes.com/

Also, check the DNS information of your network: Apple logo > System preferences > "DNS" on search box > click on "DNS servers" result. A list should appear (repeat if not)
Normally you should find your router IP address here (and a second entry for the IPV6 version of it).
Any other random IP could signal a compromised router.
Thanks for the suggestion. I did a scan and checked DNS. No luck nothing suspicious there
 

diego.caraballo

macrumors 6502a
Oct 18, 2013
702
1,814
Thanks for the suggestion. I did a scan and checked DNS. No luck nothing suspicious there
Right-click on the message shows something?

Also, try to open Activity Monitor when the window appears.
You will need two occurrences, the first one to identify the process name (you will know after killing the process and the message disappears).
In the second occurrence, click on the process name, then Info, then Open Files and Ports.
A list of files will open and then you can pinpoint something out of place.

If the affected process is Safari, then check Safari Extensions and also enable the Developer Mode (in Safari Settings), and click "Empty Caches" on the Developer menu.
 

monitony

macrumors newbie
Original poster
Feb 12, 2024
6
0
Right-click on the message shows something?

Also, try to open Activity Monitor when the window appears.
You will need two occurrences, the first one to identify the process name (you will know after killing the process and the message disappears).
In the second occurrence, click on the process name, then Info, then Open Files and Ports.
A list of files will open and then you can pinpoint something out of place.

If the affected process is Safari, then check Safari Extensions and also enable the Developer Mode (in Safari Settings), and click "Empty Caches" on the Developer menu.

Yes here's the right click popup. When I hit it nothing happens. Also identifying the right process is difficult in my case because Activity monitor contains lots and lost of processes.
 

Attachments

  • Screenshot 2024-02-23 at 15.14.59.png
    Screenshot 2024-02-23 at 15.14.59.png
    554.6 KB · Views: 40
  • Screenshot 2024-02-23 at 15.17.04.png
    Screenshot 2024-02-23 at 15.17.04.png
    138.2 KB · Views: 38
  • Screenshot 2024-02-23 at 15.16.43.png
    Screenshot 2024-02-23 at 15.16.43.png
    144.3 KB · Views: 42
  • Screenshot 2024-02-23 at 15.17.19.png
    Screenshot 2024-02-23 at 15.17.19.png
    139 KB · Views: 44

diego.caraballo

macrumors 6502a
Oct 18, 2013
702
1,814
Yes here's the right click popup. When I hit it nothing happens. Also identifying the right process is difficult in my case because Activity monitor contains lots and lost of processes.
If you can, install XCode. Then open the Accessibility Inspector, use the crosshair and select the offending window.

Other options are mentioned here:

Also, check if you have Adobe Air and/or Flash Player installed.
Finder > Applications > Utilities.
Uninstall both. If they are too old, you will need to download an uninstaller from the Adobe web.
 
  • Like
Reactions: frou
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.