How can I address a potential hacking or spying incident on my device?

Acrobat alerted me to something with the reader, and it had me open systems and apps running in the background. I came across a name: Justin . I turned access off, but was floored. Is there any type of action I can take for this?



[Edited by Moderator]

MacBook Pro 16″, macOS 14.6

Posted on Apr 15, 2025 5:21 PM

Reply
Question marked as Top-ranking reply

Posted on Apr 15, 2025 5:38 PM

It is the signed name of a developer for an app you have installed. CleverFiles is the likely culprit with apps such as Disk Drill or one of their many backup/recovery apps.


One way to look for the specific file and location is by posting the free EtreCheck report using the Additional Text option when posting. The report contains no personal information, but will show you the third party apps that you have installed that will run background processes on startup.

How to use the Add Text Feature When Post… - Apple Community


In some cases, removing the app from your Application Folder will also remove the background process. It all depends on if an installer was used to install the file in your launch folders or if the process is contained in the bundle of the App in the Application Folder.

Similar questions

5 replies
Question marked as Top-ranking reply

Apr 15, 2025 5:38 PM in response to doelfr

It is the signed name of a developer for an app you have installed. CleverFiles is the likely culprit with apps such as Disk Drill or one of their many backup/recovery apps.


One way to look for the specific file and location is by posting the free EtreCheck report using the Additional Text option when posting. The report contains no personal information, but will show you the third party apps that you have installed that will run background processes on startup.

How to use the Add Text Feature When Post… - Apple Community


In some cases, removing the app from your Application Folder will also remove the background process. It all depends on if an installer was used to install the file in your launch folders or if the process is contained in the bundle of the App in the Application Folder.

Apr 15, 2025 6:30 PM in response to doelfr

doelfr wrote:

Ah, disk drill, that's it. Weird that it was his name instead of the app name. Thanks


There are several sorts of developer enrollments, with personal and organizational enrollments being probably the most common.


Organizational enrollments involve legal entities, per Apple requirements; companies or corporations of various sorts.


Various of those examples shown above are also missing icons, too.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How can I address a potential hacking or spying incident on my device?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.