Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

cchess123gb

macrumors newbie
Original poster
Mar 24, 2022
2
0
Screenshot 2022-03-22 at 4.06.35 PM.png










 
This Mac has "RansomWhere?" installed. If it observes unusual file activity, particularly processes interacting with Apple-signed files, it'll prompt you like this.

A few programs (Acrobat Reader is really bad about it) will touch Apple-signed files for whatever reason, causing this prompt to come up.
okay so my Mac is not infected
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.