[add_top_banner_mac]
Recently we have received hundreds of malware reportsย from mac users concerning a pop up message with the following text:ย “HPDeviceMonitoring.framework” will damage your computer.
This is related to HP printer drivers that have been detected by MacOS as malicious. Most detections have happened to users who have just updated there MacOS Catalina 10.15.7.ย
In this article we will cover solutions from Apple, HP and what you can do to bypass the message altogether.ย
Expired HP Certificate
HP forums suggest that your driver certificate has expired and may lead to your Mac to notify you that the application, in this instance HPDeviceMonitoring.frame is malicious.ย
HP Forum Solution 1
Update your drivers and software using HP Easy Start
- Download HP Easy Start
- Follow the instructions for setting up your printer.ย You will be notified if your software needs to be updated.ย If it does, the box next to Printer Essentials will be checked by default and you just need to select the Install button.
The following should not be necessary but if you want to be extra diligent andย guarantee a clean new install.
- 1Download HP Easy Start
- Open HP Easy Start and Select the HP Easy Start Menu in the macOS menu bar.ย In this menu select Uninstall HP Software.
- Select Continue to start the Uninstall process
- Once the uninstall completes.ย Select Set Up New Device.
- Go through the new device setup process by following the prompts.
- The software will start to install
- Follow the remaining prompts to finish the process.
Apple Forum Solutionย
Apple has not given any detailed instruction on the issue, However you can find some users on mac forums have resolved HPDeviceMonitoring.frameย malware by removing launch agents and daemons with the following instructions
- Using Finder to go to “Library/LaunchAgents” and moving the most recently added and suspicious looking file to the bin.
- Did the same here “Library/LaunchDemons”
- And here “~Library/LaunchAgents”
- I also went to “Applications” and sorted by most recently added to see if anything suspicious has been added, and removed that.
- Then I restarted my Mac and it’s fixed!
Bypass message – “HPDeviceMonitoring.framework” will damage your computerย
Apple has not officially announce that this is a false positive so we strongly advise you not to take this step unless you are sure what you are doing. For all we know MacOS may have found something malicious or exploits that can jeopardies your machine.
Bypass Solution for Mac
Instead of double clicking on the app, just right click and press Open.
You will get a notice “HPDeviceMonitoring.framework” will damage your computer,ย however you will still get the option to open the programย
Bypass Additional Option
- Openย Finderย and find HPDeviceMonitoring.framework
- Control-Click on the application.
- Access the shortcut menu and clickย Open. After you do this, the app will be whitelisted and you will be able to open it from now on without getting the โmacOS cannot verify that this app is free from malwareโ warning.
- Another way to whitelist an app is to click theย Open Anywayย available inย Security & Privacy Preferences. Note that this button would only be available for an hour after you try to open a blocked app. To reach this button, open theย Apple Menu, go toย System Preferences, click onย Security & Privacy, and selectย General.
Am I safe?
This HP framework is most likely safe and free from any malware. However this can lead to exploits that are used by hackers. We recommend scanning your system for any other files that can cause trouble in the future. ComboCleaner is an anti-malware that scans and removes any hidden threats.ย ย
Leave a Reply