Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Warning on macOS Catalina ... udandan.app

Hello! I just installed the new update "Catalina" and all the time I have a push up which says: -"udandan.app" cannot be opened because the developer cannot be verified. macOS cannot verify that this app is free from malware. This file was downloaded on an unknown date.- Then it gives me the option of "move to trash" or "cancel", but if I choose "move to trash" another push up appears and says -"udandan.app" could not be moved to Trash, Please move this item to the trash manually-.


I searched in all my apps and files and I don't have anything with the name "undandan"... somebody has the same issue or you know how could I fix it?


Thank you so much for your support.

Posted on Aug 5, 2020 12:02 PM

Reply
Question marked as Best reply

Posted on Aug 8, 2020 4:41 PM

From what you describe an app by that name may not exist on your Mac.



To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


Similar questions

9 replies
Question marked as Best reply

Aug 8, 2020 4:41 PM in response to Gal13_3

From what you describe an app by that name may not exist on your Mac.



To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


Aug 11, 2020 5:31 PM in response to Gal13_3

Thanks. This is Part 1 of 2 replies so be sure to read the next one.



First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".


The following files and / or folders need to be deleted while using your Mac in "Safe Mode":


Picture #1:



Picture #2:



Pictures #3 and #4:


Those two screenshots are identical, which you probably did not intend. Please reexamine that folder and confirm you captured all its contents. Scroll up or down as necessary. It will be easier to capture everything after you delete those files anyway. Post a new screenshot if needed.


Be sure to include the first partially visible file in the list. Enough of its name is legible for me to be to be certain it needs to go.




Drag those selections of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.


Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use.


There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.


Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:



If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.


Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.


You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.

Aug 8, 2020 4:03 PM in response to Gal13_3

Hello Gal13_3,


Thanks for using the Apple Support Communities. We understand you're having issues after updating your macOS, with a specific app not having the verification needed to run on your Mac and you're unable to locate it to move it to your Trash. We'll be happy to assist.


Please check out the following article for information on Security & Privacy for your Mac and instruction on how to remove apps that are unable to be verified.


Safely open apps on your Mac


We hope you find this information helpful.


Best wishes.

Aug 12, 2020 5:22 AM in response to Gal13_3

Yes. In addition to the ones I already indicated every one of those files needs to be deleted as well.


You probably already surmised that those three folders normally contain very few items, if any. When you're finished the only ones left will be from Adobe, Google and Microsoft, plus one from Apple and one from XQuartz (which may no longer be active anyway, but can be left alone).


Adware creates all those randomly named files in a pathetic attempt to obscure itself: How to install adware - Apple Community. When you're finished deleting go back and examine those three folders to make sure you didn't overlook anything.

Aug 11, 2020 3:33 PM in response to John Galt

Hello John,


Thank you very much for your time and explanations to help me with my issue. I've done what you asked me and I post the corresponding screenshots:


Picture #1: ~/Library/LaunchAgents



Picture #2: / Library/LaunchDaemons 1



Picture #3: / Library/LaunchDaemons 2



Picture #4: / Library/LaunchDaemons 3



By the way, I have to tell you that in this folder (/ Library/LaunchDaemons) I've found a file called "com.undandan.plist" with date 2016 , but I moved to the trash immediately, for that it doesn't appear in the list :( ... But the push up of advertising is still in my computer... I show you a screen shot also.


Picture #5: /Library/LaunchAgents



Pictures of Advertising:





I'll be pending to your feedback and thank you very much for your support.


Regards.



Aug 11, 2020 5:31 PM in response to Gal13_3

Reply Part 2 of 2 follows below.



Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Next: The execrable "MacKeeper" is installed, or was installed at one time and not completely uninstalled. Uninstall it according to its instructions, and return to the folders you examined above to be sure none of its remnants reappear. If they do you will need additional instructions.


Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Warning on macOS Catalina ... udandan.app

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.