For some reason webroot secure anywhere is detecting the following file as a threat but only when there is a USB power cable connected to the back of my imac. here is the file it says is a threat. System/library/frameworks/coreservices.framework/versions/a/frameworks/metadata.framework/versions/a/support/mds
i did a little research and it seems that file has something to do with spotlight search. is it safe to mark that as allow in the block allow page and why would webroot only say it is a threat when a cable is connected.
Best answer by ProTruckDriver 21 June 2019, 00:25
Yes I seen
I have never seen this detection before on a Mac. The file may have to be whitelisted. To be on the safe side, Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
The link you posted from the Apple Forum I see that Thomas Reed posted a reply in that thread. I know Thomas Reed and he is a Mac Expert. His response is very interesting.
Interesting. I didn't know that, thanks Daniel. Learned something new today. ☺️
I saw all the replies in that apple support thread. If you say Thomas Reed is an expert and he says the file is fine then I would say case closed.
thank you all for your assistance 🙂
That being said. I did submit a Support Ticket and will await a reply to see what they think is necessary or what they would like me to do.
Found this post on apple's support forum
which seems to indicate that the file in question is not a threat so based on that I set SecureAnywhere to allow that file. If you feel that was premature I can connect to system and change the settings back, re-run scan and re-submit a ticket.
after creating that exception we ran a scan which came up clean. shortly after that the following message popped up. i told the user to click ignore in response to the message.
if you don't think we should have ignored this message, let me know how to reverse that choice.
I can get in touch with the user but what exactly would you like to have them do? please let me know so that we don't have to waste too much more time with this issue.