What is TypicalProcessfld on Mac?

Why the message keeps coming back

The warning comes from XProtect, the malware check built into macOS. It appears each time something tries to run TypicalProcessfld. Adware of this kind installs a small launch file that starts it again at every login, so moving the one program to the Trash is often not the end of it. The message stops when the launch file is gone too.

How to remove it

1. Choose Move to Trash in the message, then empty the Trash. Do not choose to open it.
2. Check background items. System Settings → General → Login Items & Extensions. Under Allow in the Background, turn off anything you do not recognise, especially items with no developer name.
3. Check the launch folders for files you did not put there, newest first:

   ls -lt ~/Library/LaunchAgents /Library/LaunchAgents /Library/LaunchDaemons

   Apple's own launch files are not in these folders, so an unfamiliar name with a recent date is worth a closer look. Move it to the Trash, along with the program it points to, then restart.
4. Check your browsers. Remove extensions you did not add, and reset the home page and search engine if they have changed.
5. Leave automatic security updates on. macOS includes a remediator for the AdLoad family that removes known versions in the background. See what XProtect Remediator is.

Where it comes from

Adware like this usually arrives bundled with something else: a free download from a site that is not the developer's own, or a fake "update your Flash Player" or "update your browser" prompt. If you remember installing something just before the message started, that is the first thing to remove.

Do I need to buy a scanner?

Not to get rid of this. Many pages about TypicalProcessfld end by selling one, but macOS has already found it, and the steps above are free. A second opinion from a reputable scanner is reasonable if the message survives all of them.

Where the app comes in

RefreshYourMac is not a malware scanner and will not remove TypicalProcessfld for you. What it does is read your Mac's own protection, so you can see that XProtect's definitions are current and Gatekeeper is on. See what it reports, and whether a Mac needs an antivirus.