For some reason webroot secure anywhere is detecting the following file as a threat but only when there is a USB power cable connected to the back of my imac. here is the file it says is a threat. System/library/frameworks/coreservices.framework/versions/a/frameworks/metadata.framework/versions/a/support/mds
i did a little research and it seems that file has something to do with spotlight search. is it safe to mark that as allow in the block allow page and why would webroot only say it is a threat when a cable is connected.
thank you
Answer
Webroot Detecting Threat System/Framework...../support/MDS
Best answer by ProTruckDriver
Hello @medusanyc , Welcome to the Webroot Community Forum.
I have never seen this detection before on a Mac. The file may have to be whitelisted. To be on the safe side, Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
HTH,
Dave.
I have never seen this detection before on a Mac. The file may have to be whitelisted. To be on the safe side, Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
HTH,
Dave.
Hello @medusanyc , Welcome to the Webroot Community Forum.
I have never seen this detection before on a Mac. The file may have to be whitelisted. To be on the safe side, Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
HTH,
Dave.
I have never seen this detection before on a Mac. The file may have to be whitelisted. To be on the safe side, Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
HTH,
Dave.
Mac Mini, M-4, 24 GB Memory, 1 TB SSD, macOS Sequoia 15.7.2 ~ Backup with: Time Machine & iCloud. PWM: RoboForm. 👁¿👁 Spam Annihilater 👁¿👁
this is not happening on my own PC but on a iMac belonging to one of my clients. i manually entered that file to be allowed so that the user does not get a warning about it being a threat when it runs any scans.
after creating that exception we ran a scan which came up clean. shortly after that the following message popped up. i told the user to click ignore in response to the message.
if you don't think we should have ignored this message, let me know how to reverse that choice.
I can get in touch with the user but what exactly would you like to have them do? please let me know so that we don't have to waste too much more time with this issue.
after creating that exception we ran a scan which came up clean. shortly after that the following message popped up. i told the user to click ignore in response to the message.
if you don't think we should have ignored this message, let me know how to reverse that choice.
I can get in touch with the user but what exactly would you like to have them do? please let me know so that we don't have to waste too much more time with this issue.
Hello @medusanyc The fast way to get a correct answer on this question is to Contact Webroot Support Call them directly and talk to a Webroot Support Employee. They would know the answer.
Mac Mini, M-4, 24 GB Memory, 1 TB SSD, macOS Sequoia 15.7.2 ~ Backup with: Time Machine & iCloud. PWM: RoboForm. 👁¿👁 Spam Annihilater 👁¿👁
Contacting Webroot support is not as simple as you say. The machine is not in my office and the client is not near the computer in question during business hours. I am pretty sure that the machine is clean since it scans clean even without the exception if there are no power cables connected to the machine. Not sure why an iPhone power cable connected to system would cause SecureAnywhere to flag that file as a threat but not a threat when it not connected.
That being said. I did submit a Support Ticket and will await a reply to see what they think is necessary or what they would like me to do.
Found this post on apple's support forum
https://discussions.apple.com/thread/7787922
which seems to indicate that the file in question is not a threat so based on that I set SecureAnywhere to allow that file. If you feel that was premature I can connect to system and change the settings back, re-run scan and re-submit a ticket.
That being said. I did submit a Support Ticket and will await a reply to see what they think is necessary or what they would like me to do.
Found this post on apple's support forum
https://discussions.apple.com/thread/7787922
which seems to indicate that the file in question is not a threat so based on that I set SecureAnywhere to allow that file. If you feel that was premature I can connect to system and change the settings back, re-run scan and re-submit a ticket.
Please post the response from Support. I will be very interested to see what they have to say about this.
The link you posted from the Apple Forum I see that Thomas Reed posted a reply in that thread. I know Thomas Reed and he is a Mac Expert. His response is very interesting.
https://discussions.apple.com/thread/7787922?answerId=31109928022#31109928022
The link you posted from the Apple Forum I see that Thomas Reed posted a reply in that thread. I know Thomas Reed and he is a Mac Expert. His response is very interesting.
https://discussions.apple.com/thread/7787922?answerId=31109928022#31109928022
Mac Mini, M-4, 24 GB Memory, 1 TB SSD, macOS Sequoia 15.7.2 ~ Backup with: Time Machine & iCloud. PWM: RoboForm. 👁¿👁 Spam Annihilater 👁¿👁
+63Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 for Workstations 22H2 on my Alienware 17R2 and Windows 11 Pro x64 for Workstations on my Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Samsung Galaxy A16 5G OS 16.
Interesting. I didn't know that, thanks Daniel. Learned something new today. ☺️
Mac Mini, M-4, 24 GB Memory, 1 TB SSD, macOS Sequoia 15.7.2 ~ Backup with: Time Machine & iCloud. PWM: RoboForm. 👁¿👁 Spam Annihilater 👁¿👁
+63Yes I seen
Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 for Workstations 22H2 on my Alienware 17R2 and Windows 11 Pro x64 for Workstations on my Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Samsung Galaxy A16 5G OS 16.
Thank you TripleHelix for that information. Can get keycode from user and will use it when requested. That makes things very easy.
I saw all the replies in that apple support thread. If you say Thomas Reed is an expert and he says the file is fine then I would say case closed.
thank you all for your assistance 🙂
I saw all the replies in that apple support thread. If you say Thomas Reed is an expert and he says the file is fine then I would say case closed.
thank you all for your assistance 🙂
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.