MACBOOK 2015
ETRE REPORT
EtreCheck version: 5.5.4 (5106)
Report generated: 2020-04-13 15:27:12
Download EtreCheck from https://etrecheck.com
Runtime: 3:06
Performance: Excellent
Sandbox: Enabled
Full drive access: Disabled

Problem: Other problem
Description: 
Keylogger

Major Issues:
    Anything that appears on this list needs immediate attention. 

    No Time Machine backup - Time Machine backup not found.
    Runaway process - A process is using a large percentage of your CPU.

Minor Issues:
    These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 

    Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.
    32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 "Catalina".
    Limited drive access - More information may be available with Full Drive Access.
    Kernel extensions present - This machine has kernel extensions that may not work in the future.

Hardware Information:
    MacBook (Retina, 12-inch, Early 2015)
    MacBook Model: MacBook8,1
    1.1 GHz Intel Core M (M-5Y31) CPU: 2-core
    8 GB RAM - Not upgradeable
        BANK 0/DIMM0 - 4 GB DDR3 1600 
        BANK 1/DIMM0 - 4 GB DDR3 1600 
    Battery: Health = Normal - Cycle count = 104

Video Information:
    Intel HD Graphics 5300 - VRAM: 1536 MB
        Color LCD (built-in) 2560 x 1600

Drives:
    disk0 - APPLE SSD AP0256H 251.00 GB (Solid State - TRIM: Yes)
    Internal PCI-Express 5.0 GT/s x4 NVM Express
        disk0s1 - EFI [EFI] 315 MB
        disk0s2 [APFS Container] 250.69 GB
            disk1 [APFS Virtual drive] 250.69 GB (Shared by 4 volumes)
                disk1s1 - Macintosh HD (APFS) (Shared - 122.28 GB used)
                disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)
                disk1s3 - Recovery (APFS) [Recovery] (Shared)
                disk1s4 - VM (APFS) [APFS VM] (Shared - 1.07 GB used)

Mounted Volumes:
    disk1s1 - Macintosh HD
        250.69 GB (Shared - 122.28 GB used, 131.11 GB available, 126.63 GB free)
        APFS
        Mount point: /
        Encrypted

    disk1s4 - VM [APFS VM]
        250.69 GB (Shared - 1.07 GB used, 126.63 GB free)
        APFS
        Mount point: /private/var/vm

Network:
    Interface en0: Wi-Fi
        802.11 a/b/g/n/ac
    Interface en1: Bluetooth PAN

System Software:
    macOS High Sierra 10.13.6 (17G10021) 
    Time since boot: Less than an hour

Notifications:
    Notifications not available without Full Drive Access.

Security:
    Gatekeeper: Enabled
    System Integrity Protection: Enabled
⠨    Antivirus software: Apple

Unsigned Files:
    Launchd: ~/Library/LaunchAgents/com.google.keystone.xpcservice.plist
        Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost
        Details: Exact match found in the whitelist - probably OK

    Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist
        Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper
        Details: Exact match found in the whitelist - probably OK

    Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist
        Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac
        Details: Exact match found in the whitelist - probably OK

    Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist
        Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords
        Details: Exact match found in the whitelist - probably OK

    Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist
        Executable: /Library/Application Support/Citrix Receiver/ctxusbd
        Details: Exact match found in the whitelist - probably OK

    Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
        Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper
        Details: Exact match found in the whitelist - probably OK

    Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist
        Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper
        Details: Exact match found in the whitelist - probably OK

    Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist
        Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded
        Details: Exact match found in the whitelist - probably OK

    Running app: /Applications/Datacolor/Spyder5Pro/Support/SpyderUtility.app/Contents/MacOS/SpyderUtility

    Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
    Plugin: /Library/Internet Plug-Ins/Default Browser.plugin
    Plugin: /Library/Internet Plug-Ins/CitrixICAClientPlugIn.plugin

    Apps: 10

32-bit Applications:
    33 32-bit apps

Kernel Extensions:
    /Library/Application Support/Citrix Receiver
        CitrixGUSB.kext (Citrix Systems, Inc., 12.9.0 - SDK 10.9)

System Launch Agents:
    [Not Loaded] 16 Apple tasks
    [Loaded] 170 Apple tasks
    [Running] 108 Apple tasks

System Launch Daemons:
    [Not Loaded] 38 Apple tasks
    [Loaded] 183 Apple tasks
    [Running] 115 Apple tasks

Launch Agents:
    [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-11-08)
    [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-11-08)
    [Loaded] com.citrix.AuthManager_Mac.plist (? b095ca60 - installed 2018-03-16)
    [Running] com.citrix.ReceiverHelper.plist (? 369731a0 - installed 2018-03-16)
    [Running] com.citrix.ServiceRecords.plist (? 8e6543d - installed 2018-03-16)
    [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-02-20)

Launch Daemons:
    [Running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-11-08)
    [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-12-04)
    [Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2018-03-16)
    [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-02-20)
    [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2015-06-04)
    [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2016-07-09)

User Launch Agents:
    [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-10-14)
    [Loaded] com.google.keystone.agent.plist (? 0 - installed 2020-03-08)
    [Loaded] com.google.keystone.xpcservice.plist (? 0 - installed 2020-03-08)
    [Loaded] com.spotify.webhelper.plist (? 0 - installed 2020-02-05)

Internet Plug-ins:
    SharePointBrowserPlugin: 14.5.2 (? - installed 2016-03-21)
    Default Browser: (? - installed 2019-10-15)
    CitrixICAClientPlugIn: 12.9.0 (? - installed 2018-03-29)

User Internet Plug-ins:
    User Internet Plug-ins need Full Drive Access

Audio Plug-ins:
    AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-12-21)
    BluetoothAudioPlugIn: 6.0.7 (Apple - installed 2019-12-21)
    AirPlay: 2.0 (Apple - installed 2019-12-21)
    AppleAVBAudio: 683.1 (Apple - installed 2019-12-21)
    BridgeAudioSP: 4.69.2 (Apple - installed 2019-12-21)
    iSightAudio: 7.7.3 (Apple - installed 2019-12-21)

User Audio Plug-ins:
    User Audio Plug-ins need Full Drive Access

User iTunes Plug-ins:
    User iTunes Plug-ins need Full Drive Access

Time Machine:
    Time Machine Not Configured!

Performance:
    System Load: 3.33 (1 min ago) 13.83 (5 min ago) 9.44 (15 min ago)
    Nominal I/O speed: 10.05 MB/s
    File system: 54.92 seconds
    Write speed: 471 MB/s
    Read speed: 568 MB/s

CPU Usage Snapshot:
    Type Overall
    System: 14 %
    User: 29 %
    Idle: 56 %

Top Processes Snapshot by CPU:
    Process (count) CPU (Source - Location)
    Other processes 81.35 % (?)
    helpd 39.42 % (Apple)
    bird 24.91 % (Apple)
    EtreCheck 7.13 % (App Store)
    CalendarAgent 5.37 % (Apple)

Top Processes Snapshot by Memory:
    Process (count) RAM usage (Source - Location)
    EtreCheck 488 MB (App Store)
    Google Chrome 246 MB (Google, Inc.)
    Finder 80 MB (Apple)
    accountsd 76 MB (Apple)
    Dock 72 MB (Apple)

Top Processes Snapshot by Network Use:
    Process Input / Output (Source - Location)
    Other processes 111 KB / 56 KB (?)
    Pages 7 KB / 687 B (App Store)
    SystemUIServer 0 B / 120 B (Apple)
    spindump_agent 0 B / 0 B (Apple)
    backgroundtaskmanagementagent 0 B / 0 B (Apple)

Virtual Memory Information:
    Physical RAM: 8 GB

    Free RAM: 17 MB
    Used RAM: 4.37 GB
    Cached files: 3.62 GB

    Available RAM: 3.63 GB
    Swap Used: 0 B

Software Installs (past 30 days):
    Install Date Name (Version)
    2020-03-24 XProtectPlistConfigData (2116)
    2020-03-24 MRTConfigData (1.57)
    2020-04-13 EtreCheck (5.5.4)

Diagnostics Information (past 7-30 days):
    Directory /Library/Logs/DiagnosticReports is not accessible.
    Enable Full Drive Access to see more information.

End of report




MAC PROCESSES
 accountsd
 Activity Monitor
 AddressBookSourceSync
 adid
 AGMService
 AGSService
 AirPlayUIAgent
 AirPlayXPCHelper
 airportd
 akd
 akd
 AlertNotificationService
 amfid
 analyticsd
 apfsd
 APFSUserAgent
 AppleCameraAssistant
 appleeventsd
 AppleSpell
 apsd
 aslmanager
 AssetCache
 AssetCacheLocatorService
 AssetCacheManagerService
 AssetCacheTetheratorService
 assistant_service
 assistantd
 AudioComponentRegistrar
 AudioComponentRegistrar
 authd
 autofsd
 awdd
 backgroundtaskmanagementagent
 backupd
 backupd-helper
 bird
 bluetoothd
 bootinstalld
 CalendarAgent
 CallHistoryPluginHelper
 callservicesd
 CalNCService
 captiveagent
 cdpd
 cfprefsd
 cfprefsd
 cfprefsd
 chrome_crashpad_handler
 Citrix Receiver Helper
 Citrix Service Record Application
 ckkeyrolld
 cloudd
 CloudKeychainProxy
 cloudpaird
 colorsync.displayservices
 colorsyncd
 com.apple.AccountPolicyHelper
 com.apple.AmbientDisplayAgent
 com.apple.appstore.PluginXPCService
 com.apple.audio.DriverHelper
 com.apple.audio.SandboxHelper
 com.apple.audio.SandboxHelper
 com.apple.audio.SandboxHelper
 com.apple.CloudPhotosConfiguration
 com.apple.cmio.registerassistantservice
 com.apple.CodeSigningHelper
 com.apple.CommerceKit.TransactionService
 com.apple.ctkpcscd
 com.apple.dock.extra
 com.apple.geod
 com.apple.geod
 com.apple.hiservices-xpcservice
 com.apple.iCloudHelper
 com.apple.iTunesLibraryService
 com.apple.iTunesLibraryService
 com.apple.Notes.datastore
 com.apple.notificationcenterui.WeatherSummary
 com.apple.PerformanceAnalysis.animationperfd
 com.apple.photomoments
 com.apple.quicklook.ThumbnailsAgent
 com.apple.sbd
 com.apple.speech.speechsynthesisd
 CommCenter
 commerce
 configd
 ContactsAccountsService
 ContactsAgent
 contactsdonationagent
 ContainerMetadataExtractor
 coreaudiod
 coreauthd
 coreauthd
 corebrightnessd
 coreduetd
 CoreLocationAgent
 coreservicesd
 CoreServicesUIAgent
 corespeechd
 corespotlightd
 coresymbolicationd
 CrashReporterSupportHelper
 ctkahp
 ctkahp
 ctkd
 ctkd
 cupsd
 CVMCompiler
 CVMServer
 dasd
 DataDetectorsSourceAccess
 deleted
 diagnostics_agent
 diskarbitrationd
 diskmanagementd
 diskspaced
 DiskUnmountWatcher
 displaypolicyd
 distnoted
 distnoted
 distnoted
 distnoted
 dmd
 dmd
 Dock
 EscrowSecurityAlert
 EtreCheck
 familycircled
 filecoordinationd
 fileproviderd
 Finder
 findmydeviced
 fmfd
 followupd
 fontd
 fpsd
 fseventsd
 gamecontrollerd
 Google Chrome
 Google Chrome Helper
 Google Chrome Helper (GPU)
 Google Chrome Helper (Renderer)
 Google Chrome Helper (Renderer)
 Google Chrome Helper (Renderer)
 Google Chrome Helper (Renderer)
 Google Chrome Helper (Renderer)
 Google Chrome Helper (Renderer)
 GSSCred
 helpd
 hidd
 icdd
 iconservicesagent
 iconservicesagent
 iconservicesd
 identityservicesd
 imagent
 IMAutomaticHistoryDeletionAgent
 IMDPersistenceAgent
 imklaunchagent
 IMRemoteURLConnectionAgent
 IMRemoteURLConnectionAgent
 installd
 iTunes Helper
 kernel_task
 KernelEventAgent
 kextd
 keybagd
 keyboardservicesd
 Keychain Circle Notification
 knowledge-agent
 launchd
 launchservicesd
 locationd
 logd
 logind
 loginwindow
 lsd
 lsd
 mDNSResponder
 mDNSResponderHelper
 mds
 mds_stores
 mdworker
 mdworker
 mdworker
 mdworker
 mdworker
 mdworker
 mdworker
 mdworker
 mdworker
 mdworker
 mdwrite
 media-indexer
 mediaremoted
 mobileassetd
 MTLCompilerService
 MTLCompilerService
 MTLCompilerService
 nbagent
 nbstated
 nehelper
 netbiosd
 networkserviceproxy
 nfcd
 Notification Center
 notifyd
 nsurlsessiond
 nsurlsessiond
 nsurlstoraged
 nsurlstoraged
 ocspd
 opendirectoryd
 parsecd
 passd
 pboard
 pbs
 photoanalysisd
 photolibraryd
 Photos Agent
 pkd
 powerd
 powerlogd
 printtool
 ProtectedCloudKeySyncing
 rapportd
 recentsd
 revisiond
 routined
 rpcsvchost
 rtcreportingd
 SafariBookmarksSyncAgent
 SafeEjectGPUAgent
 SafeEjectGPUService
 sandboxd
 ScopedBookmarkAgent
 secd
 secinitd
 secinitd
 secinitd
 securityd
 securityd_service
 sharedfilelistd
 sharedfilelistd
 sharingd
 signpost_notificationd
 siriknowledged
 smd
 soagent
 SocialPushAgent
 softwareupdated
 spindump
 spindump_agent
 Spotlight
 SpyderUtility
 storeaccountd
 storeassetd
 storedownloadd
 storeuid
 SubmitDiagInfo
 suggestd
 suhelperd
 swcd
 symptomsd
 syslogd
 sysmond
 syspolicyd
 system_installd
 system_profiler
 system_profiler
 systemsoundserverd
 systemstats
 systemstats
 SystemUIServer
 talagent
 taskgated
 tccd
 tccd
 thermald
 timed
 trustd
 trustd
 trustd
 trustd
 uninstalld
 universalaccessd
 usbd
 usbmuxd
 useractivityd
 UserEventAgent
 UserEventAgent
 usernoted
 videosubscriptionsd
 ViewBridgeAuxiliary
 VTDecoderXPCService
 warmd
 watchdogd
 Wi-Fi
 WiFiProxy
 WindowServer
 wirelessproxd
 WirelessRadioManagerd
 writeconfig