Some Mac users being warned that Amazon Music app and HP drivers are malware [u]
Some users are reporting that they can no longer print to HP printers, or can't continue playing Amazon Music through the dedicated app, because of a macOS error that claims the software is malware. Update: HP is reportedly working with Apple to fix the problem.
Some users of HP printers or the Amazon Music app are reporting error messages like this
AppleInsider has been contacted by users reporting that their Macs are suddenly claiming their HP printers contain malware and "will damage your computer." Separately, other users are reporting the same issue, but to do with the Amazon Music app.
In each case, attempting to launch the app or to just use the Mac, brings up a dialog box. It reports that there is malware, says it will damage the Mac, and advises users to move a particular file to the trash.
That file can be the Amazon Music app, or it can be the HP printer driver called "HP Device Monitoring.framework." Users have the option to click Move to Trash or Cancel, but if they cancel, the error keeps reoccurring.
The problem originally appeared to be related to Apple's XProtect. This is part of Gatekeeper, Apple's security system that exists to identify and disable malware on Macs.
Most reported incidents are from consumers, but AppleInsider can now confirm that the issue is affecting printing in enterprise as well. It appears to still be possible to successfully AirPrint from Mac to an affected HP printer, however.
Most users affected report that they have not recently updated either their HP printer drivers, or the Amazon Music app. The presumption is that it's therefore to do with a behind-the-scenes macOS malware definitions update, but has not been confirmed.
Update: the issue does appear to be related to XProtect, but was specifically caused by HP asking Apple to revoke its printer drivers. It's not known why HP requested this, but the company reportedly told The Register that it wasn't intended to cause these problems.
"We unintentionally revoked credentials on some older versions of Mac drivers," said a HP spokesperson. " This caused a temporary disruption for those customers and we are working with Apple to restore the drivers. In the meantime, we recommend users experiencing this problem to uninstall the HP driver and use the native AirPrint driver to print to their printer."
There is also now a workaround that should fix the issue. It involves removing the old HP printer driver and getting the Mac to download a new version.
Some users of HP printers or the Amazon Music app are reporting error messages like this
AppleInsider has been contacted by users reporting that their Macs are suddenly claiming their HP printers contain malware and "will damage your computer." Separately, other users are reporting the same issue, but to do with the Amazon Music app.
In each case, attempting to launch the app or to just use the Mac, brings up a dialog box. It reports that there is malware, says it will damage the Mac, and advises users to move a particular file to the trash.
That file can be the Amazon Music app, or it can be the HP printer driver called "HP Device Monitoring.framework." Users have the option to click Move to Trash or Cancel, but if they cancel, the error keeps reoccurring.
Computer Question: I didn't update my drivers or OS or anything... but all of a sudden, my (old HP Laserjet) printer stopped working yesterday.
When I check the logs it says the legacy driver no longer works. HP doesn't have a new driver...
Any ideas?? pic.twitter.com/zGC4dxDluI-- Still Jim (@CrazyJimP)
The problem originally appeared to be related to Apple's XProtect. This is part of Gatekeeper, Apple's security system that exists to identify and disable malware on Macs.
Most reported incidents are from consumers, but AppleInsider can now confirm that the issue is affecting printing in enterprise as well. It appears to still be possible to successfully AirPrint from Mac to an affected HP printer, however.
Most users affected report that they have not recently updated either their HP printer drivers, or the Amazon Music app. The presumption is that it's therefore to do with a behind-the-scenes macOS malware definitions update, but has not been confirmed.
Update: the issue does appear to be related to XProtect, but was specifically caused by HP asking Apple to revoke its printer drivers. It's not known why HP requested this, but the company reportedly told The Register that it wasn't intended to cause these problems.
"We unintentionally revoked credentials on some older versions of Mac drivers," said a HP spokesperson. " This caused a temporary disruption for those customers and we are working with Apple to restore the drivers. In the meantime, we recommend users experiencing this problem to uninstall the HP driver and use the native AirPrint driver to print to their printer."
There is also now a workaround that should fix the issue. It involves removing the old HP printer driver and getting the Mac to download a new version.
Comments
Seriously though, HP needs to update their drivers.
located my printer by following the steps, ensured my printer was connected to my network, then I was able to download the software/drivers. Basically started fresh. Everything is happy and working now. It’s always something lol.
For Apple users:
Solution from a user:
I've just got rid of it by:
It won't go away, and it is quite frustrating. I realize deleting "com.hp.devicemonitor.plist"(etc) has fixed the problem for some, but are there any unwanted side effects?
I didn't verify this, but it sounds like a code signing issue to me.
Apps that were code signed with a provisioning profile that use advanced capabilities before February 22, 2017 will work for 5 years before showing this error. Apps signed after that will work for 18 years. These apps probably have not been updated in the last 5 years so they are now expired.
From Apple docs:
"For apps that utilize advanced capabilities with a Developer ID provisioning profile Gatekeeper will evaluate the validity of your Developer ID certificate when your application is installed and will evaluate the validity of your Developer ID provisioning profile at every app launch. As long as your Developer ID certificate was valid when you compiled your app, then users can download and run your app, even after the expiration date of the certificate. However, if your Developer ID provisioning profile expires, the app will no longer launch."