missyed1975

Q: Hacked 6 months ago. Think its happening again, help!

My computer was hacked back in February to some disastrous and criminal consequences. I followed all the necessary procedures with credit reports, banks, authorities and such and then did a full system delete, wiped hard drive clean and reinstalled from scratch, not even bringing old files back to the computer. Strange things have started happening again recently and I just ran an etre check.

 

Does anyone know how to interpret an Etre Check well enough to advise?

 

EtreCheck version: 2.9.12 (265)

Report generated 2016-06-17 17:29:22

Download EtreCheck from https://etrecheck.com

Runtime 1:35

Performance: Excellent

 

Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

 

Check Apple signatures: Enabled

Ignore known Apple failures: Disabled

Hide Apple tasks: Disabled

 

Problem: Apps are crashing

 

Hardware Information:

    MacBook Pro (Retina, Mid 2012)

    [Technical Specifications] - [User Guide] - [Warranty & Service]

    MacBook Pro - model: MacBookPro10,1

    1 2.6 GHz Intel Core i7 CPU: 4-core

    8 GB RAM Not upgradeable

        BANK 0/DIMM0

            4 GB DDR3 1600 MHz ok

        BANK 1/DIMM0

            4 GB DDR3 1600 MHz ok

    Bluetooth: Good - Handoff/Airdrop2 supported

    Wireless:  en0: 802.11 a/b/g/n

    Battery: Health = Normal - Cycle count = 641

 

Video Information:

    Intel HD Graphics 4000

        Color LCD 2880 x 1800

    NVIDIA GeForce GT 650M - VRAM: 1024 MB

 

System Software:

    OS X El Capitan 10.11.5 (15F34) - Time since boot: about 2 hours

 

Disk Information:

    APPLE SSD SM256E disk0 : (251 GB) (Solid State - TRIM: Yes)

        EFI (disk0s1) <not mounted> : 210 MB

        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB

        Untitled (disk1) / : 249.78 GB (192.25 GB free)

            Encrypted AES-XTS Unlocked

            Core Storage: disk0s2 250.14 GB Online

 

USB Information:

    Apple Inc. FaceTime HD Camera (Built-in)

    Apple Inc. Apple Internal Keyboard / Trackpad

    Apple Inc. BRCM20702 Hub

        Apple Inc. Bluetooth USB Host Controller

 

Thunderbolt Information:

    Apple Inc. thunderbolt_bus

 

Gatekeeper:

    Mac App Store and identified developers

 

System Launch Agents:

    [loaded]    com.apple.AOSHeartbeat.plist

    [loaded]    com.apple.AOSPushRelay.plist

    [loaded]    com.apple.AddressBook.AssistantService.plist

    [loaded]    com.apple.AddressBook.SourceSync.plist

    [loaded]    com.apple.AddressBook.abd.plist

    [running]    com.apple.AirPlayUIAgent.plist

    [loaded]    com.apple.AirPortBaseStationAgent.plist

    [not loaded]    com.apple.AppleGraphicsWarning.plist

    [loaded]    com.apple.AskPermissionUI.plist

    [loaded]    com.apple.AssetCacheLocatorService.plist

    [loaded]    com.apple.AssistiveControl.plist

    [running]    com.apple.BezelUI.plist

    [running]    com.apple.CalendarAgent.plist

    [running]    com.apple.CallHistoryPluginHelper.plist

    [running]    com.apple.CallHistorySyncHelper.plist

    [running]    com.apple.CommCenter-osx.plist

    [loaded]    com.apple.ContainerRepairAgent.plist

    [loaded]    com.apple.CoreAuthentication.daemon.plist

    [loaded]    com.apple.CoreLocationAgent.plist

    [loaded]    com.apple.CoreRAIDAgent.plist

    [loaded]    com.apple.DiagnosticReportCleanup.plist

    [loaded]    com.apple.DictationIM.plist

    [loaded]    com.apple.DiskArbitrationAgent.plist

    [running]    com.apple.Dock.plist

    [running]    com.apple.EscrowSecurityAlert.plist

    [loaded]    com.apple.FTCleanup.plist

    [not loaded]    com.apple.FileStatsAgent.plist

    [loaded]    com.apple.FileSyncAgent.PHD.plist

    [loaded]    com.apple.FilesystemUI.plist

    [running]    com.apple.Finder.plist (2016-02-19) - Invalid signature!

    [not loaded]    com.apple.FirmwareUpdateHelper.plist

    [running]    com.apple.FolderActionsDispatcher.plist

    [loaded]    com.apple.FollowUpUI.plist (2016-02-11) - Invalid signature!

    [loaded]    com.apple.FontRegistryUIAgent.plist

    [loaded]    com.apple.FontValidator.plist

    [loaded]    com.apple.FontValidatorConduit.plist

    [loaded]    com.apple.FontWorker.plist

    [loaded]    com.apple.IMLoggingAgent.plist

    [loaded]    com.apple.MRTa.plist (2015-08-01) - Invalid signature!

    [loaded]    com.apple.ManagedClientAgent.agent.plist

    [not loaded]    com.apple.ManagedClientAgent.enrollagent.plist

    [running]    com.apple.Maps.pushdaemon.plist

    [loaded]    com.apple.NetworkDiagnostics.plist

    [loaded]    com.apple.PCIESlotCheck.plist

    [loaded]    com.apple.PackageKit.InstallStatus.plist

    [loaded]    com.apple.PhotoLibraryMigrationUtility.XPC.plist

    [loaded]    com.apple.PubSub.Agent.plist

    [loaded]    com.apple.RemoteDesktop.plist

    [loaded]    com.apple.ReportCrash.Self.plist

    [loaded]    com.apple.ReportCrash.plist

    [not loaded]    com.apple.ReportGPURestart.plist

    [loaded]    com.apple.ReportPanic.plist

    [loaded]    com.apple.SSInvitationAgent.plist

    [running]    com.apple.Safari.SafeBrowsing.Service.plist

    [running]    com.apple.SafariCloudHistoryPushAgent.plist

    [running]    com.apple.SafariNotificationAgent.plist

    [loaded]    com.apple.SafariPlugInUpdateNotifier.plist

    [loaded]    com.apple.ScreenReaderUIServer.plist (2016-02-16) - Invalid signature!

    [running]    com.apple.SocialPushAgent.plist

    [running]    com.apple.Spotlight.plist

    [running]    com.apple.SystemUIServer.plist

    [loaded]    com.apple.TMHelperAgent.SetupOffer.plist

    [loaded]    com.apple.TMHelperAgent.plist

    [loaded]    com.apple.TrustEvaluationAgent.plist

    [loaded]    com.apple.USBAgent.plist

    [running]    com.apple.UserEventAgent-Aqua.plist

    [not loaded]    com.apple.UserEventAgent-LoginWindow.plist

    [not loaded]    com.apple.UserNotificationCenterAgent-LoginWindow.plist

    [loaded]    com.apple.UserNotificationCenterAgent.plist

    [loaded]    com.apple.VoiceOver.plist

    [loaded]    com.apple.WebKit.PluginAgent.plist

    [loaded]    com.apple.ZoomWindow.plist

    [running]    com.apple.accountsd.plist

    [running]    com.apple.akd.plist

    [loaded]    com.apple.alf.useragent.plist

    [loaded]    com.apple.aos.migrate.plist

    [loaded]    com.apple.appleseed.seedusaged.plist

    [loaded]    com.apple.appsleepd.plist

    [loaded]    com.apple.appstoreupdateagent.plist

    [loaded]    com.apple.apsctl.plist

    [running]    com.apple.askpermissiond.plist

    [loaded]    com.apple.assistant_service.plist

    [loaded]    com.apple.assistantd.plist

    [running]    com.apple.bird.plist

    [loaded]    com.apple.bluetoothUIServer.plist

    [loaded]    com.apple.btsa.plist

    [running]    com.apple.cdpd.plist

    [loaded]    com.apple.cfnetwork.AuthBrokerAgent.plist

    [loaded]    com.apple.cfnetwork.cfnetworkagent.plist

    [running]    com.apple.cfprefsd.xpc.agent.plist

    [running]    com.apple.cloudd.plist

    [loaded]    com.apple.cloudfamilyrestrictionsd-mac.plist

    [running]    com.apple.cloudpaird.plist

    [running]    com.apple.cloudphotosd.plist

    [running]    com.apple.cmfsyncagent.plist

    [loaded]    com.apple.coredata.externalrecordswriter.plist

    [running]    com.apple.coreservices.appleid.authentication.plist

    [running]    com.apple.coreservices.lsactivity.plist

    [running]    com.apple.coreservices.sharedfilelistd.plist

    [running]    com.apple.coreservices.uiagent.plist

    [loaded]    com.apple.csuseragent.plist

    [running]    com.apple.ctkd.plist

    [loaded]    com.apple.cvmsCompAgent3600_i386.plist

    [loaded]    com.apple.cvmsCompAgent3600_i386_1.plist

    [loaded]    com.apple.cvmsCompAgent3600_x86_64.plist

    [loaded]    com.apple.cvmsCompAgent3600_x86_64_1.plist

    [loaded]    com.apple.cvmsCompAgentLegacy_i386.plist

    [loaded]    com.apple.cvmsCompAgentLegacy_i386_1.plist

    [loaded]    com.apple.cvmsCompAgentLegacy_x86_64.plist

    [loaded]    com.apple.cvmsCompAgentLegacy_x86_64_1.plist

    [loaded]    com.apple.cvmsCompAgent_i386.plist

    [loaded]    com.apple.cvmsCompAgent_i386_1.plist

    [running]    com.apple.cvmsCompAgent_x86_64.plist

    [loaded]    com.apple.cvmsCompAgent_x86_64_1.plist

    [running]    com.apple.diagnostics_agent.plist

    [running]    com.apple.distnoted.xpc.agent.plist

    [loaded]    com.apple.dt.CommandLineTools.installondemand.plist

    [running]    com.apple.familycircled.plist

    [loaded]    com.apple.familycontrols.useragent.plist

    [loaded]    com.apple.familynotificationd.plist

    [loaded]    com.apple.findmymacmessenger.plist

    [running]    com.apple.followupd.plist

    [loaded]    com.apple.fontd.useragent.plist

    [running]    com.apple.gamed.plist

    [running]    com.apple.helpd.plist

    [loaded]    com.apple.iCloudUserNotifications.plist

    [running]    com.apple.icdd.plist

    [loaded]    com.apple.icloud.findmydeviced.findmydevice-user-agent.plist

    [running]    com.apple.icloud.fmfd.plist

    [running]    com.apple.iconservices.iconservicesagent.plist

    [running]    com.apple.identityservicesd.plist

    [loaded]    com.apple.idsremoteurlconnectionagent.plist

    [running]    com.apple.imagent.plist

    [loaded]    com.apple.imavagent.plist

    [loaded]    com.apple.imklaunchagent.plist

    [loaded]    com.apple.imtransferagent.plist

    [loaded]    com.apple.installandsetup.migrationhelper.user.plist

    [loaded]    com.apple.installd.user.plist

    [loaded]    com.apple.isst.plist

    [loaded]    com.apple.java.InstallOnDemand.plist

    [loaded]    com.apple.java.updateSharing.plist

    [running]    com.apple.lateragent.plist

    [loaded]    com.apple.locationmenu.plist

    [running]    com.apple.lsd.plist

    [loaded]    com.apple.maspushagent.plist

    [loaded]    com.apple.mbbackgrounduseragent.plist

    [loaded]    com.apple.mbfloagent.plist

    [loaded]    com.apple.mbuseragent.plist

    [loaded]    com.apple.mdmclient.agent.plist

    [loaded]    com.apple.mdworker.32bit.plist

    [running]    com.apple.mdworker.bundles.plist

    [loaded]    com.apple.mdworker.isolation.plist

    [loaded]    com.apple.mdworker.lsb.plist

    [loaded]    com.apple.mdworker.mail.plist

    [loaded]    com.apple.mdworker.shared.plist

    [loaded]    com.apple.mdworker.single.plist

    [loaded]    com.apple.mdworker.sizing.plist

    [running]    com.apple.metadata.SpotlightNetHelper.plist

    [loaded]    com.apple.metadata.mdbulkimport.plist

    [running]    com.apple.metadata.mdflagwriter.plist

    [loaded]    com.apple.metadata.mdwrite.plist

    [loaded]    com.apple.midiserver.plist

    [loaded]    com.apple.navd.plist

    [loaded]    com.apple.neagent.plist

    [loaded]    com.apple.netauth.user.auth.plist

    [loaded]    com.apple.netauth.user.gui.plist

    [loaded]    com.apple.noticeboard.agent.plist

    [running]    com.apple.notificationcenterui.plist

    [running]    com.apple.nsurlsessiond.plist

    [running]    com.apple.nsurlstoraged.plist

    [loaded]    com.apple.parentalcontrols.check.plist

    [running]    com.apple.pboard.plist

    [running]    com.apple.pbs.plist

    [running]    com.apple.photolibraryd.plist

    [loaded]    com.apple.pictd.plist

    [running]    com.apple.pluginkit.pkd.plist

    [loaded]    com.apple.pluginkit.pkreporter.plist

    [loaded]    com.apple.powerchime.plist (2016-02-22) - Invalid signature!

    [loaded]    com.apple.printtool.agent.plist

    [loaded]    com.apple.printuitool.agent.plist

    [loaded]    com.apple.quicklook.32bit.plist (2016-02-04) - Invalid signature!

    [loaded]    com.apple.quicklook.config.plist

    [running]    com.apple.quicklook.plist (2016-02-04) - Invalid signature!

    [loaded]    com.apple.quicklook.ui.helper.plist (2016-02-04) - Invalid signature!

    [loaded]    com.apple.rcd.plist

    [running]    com.apple.recentsd.plist

    [loaded]    com.apple.reversetemplated.plist

    [loaded]    com.apple.rtcreportingd.plist

    [loaded]    com.apple.safaridavclient.plist

    [running]    com.apple.scopedbookmarkagent.xpc.plist

    [loaded]    com.apple.screensharing.MessagesAgent.plist

    [loaded]    com.apple.screensharing.agent.plist

    [loaded]    com.apple.scrod.plist

    [running]    com.apple.secd.plist

    [running]    com.apple.secinitd.plist

    [loaded]    com.apple.security.DiskUnmountWatcher.plist

    [loaded]    com.apple.security.agent.plist

    [running]    com.apple.security.cloudkeychainproxy.plist

    [loaded]    com.apple.security.idskeychainsyncingproxy.plist

    [running]    com.apple.security.keychain-circle-notification.plist

    [running]    com.apple.sharingd.plist

    [running]    com.apple.soagent.plist

    [loaded]    com.apple.softwareupdate_notify_agent.plist

    [loaded]    com.apple.speech.speechdatainstallerd.plist

    [loaded]    com.apple.speech.speechsynthesisd.plist

    [loaded]    com.apple.speech.synthesisserver.plist

    [running]    com.apple.spindump_agent.plist

    [running]    com.apple.spotlight.IndexAgent.plist

    [running]    com.apple.storeaccountd.plist

    [running]    com.apple.storeassetd.plist

    [running]    com.apple.storedownloadd.plist

    [loaded]    com.apple.storeinappd.plist

    [loaded]    com.apple.storeinstallagent.plist

    [running]    com.apple.storelegacy.plist

    [loaded]    com.apple.storeuid.plist

    [running]    com.apple.suggestd.plist

    [running]    com.apple.swcd.plist

    [running]    com.apple.syncdefaultsd.plist

    [loaded]    com.apple.syncservices.SyncServer.plist

    [loaded]    com.apple.syncservices.uihandler.plist

    [loaded]    com.apple.systemprofiler.plist

    [loaded]    com.apple.talagent.plist

    [running]    com.apple.tccd.plist

    [running]    com.apple.telephonyutilities.callservicesd.plist

    [loaded]    com.apple.thermaltrap.plist

    [loaded]    com.apple.tiswitcher.plist

    [loaded]    com.apple.trustd.agent.plist

    [loaded]    com.apple.universalaccessAuthWarn.plist

    [loaded]    com.apple.universalaccesscontrol.plist

    [loaded]    com.apple.universalaccessd.plist

    [loaded]    com.apple.unmountassistant.useragent.plist

    [running]    com.apple.usernoted.plist

    [loaded]    com.apple.warmd_agent.plist

    [loaded]    com.apple.webinspectord.plist

    [running]    com.apple.wifi.WiFiAgent.plist

    [loaded]    com.apple.xpc.loginitemregisterd.plist

    [loaded]    com.apple.xpc.otherbsd.plist

    [loaded]    org.openbsd.ssh-agent.plist

 

System Launch Daemons:

    [not loaded]    bootps.plist

    [running]    com.apple.AirPlayXPCHelper.plist

    [loaded]    com.apple.AppleFileServer.plist

    [loaded]    com.apple.AssetCacheLocatorService.plist

    [loaded]    com.apple.CommCenterRootHelper.plist

    [loaded]    com.apple.CoreRAID.plist

    [running]    com.apple.CrashReporterSupportHelper.plist

    [loaded]    com.apple.DesktopServicesHelper.plist

    [loaded]    com.apple.DumpGPURestart.plist

    [loaded]    com.apple.DumpPanic.plist

    [running]    com.apple.FileCoordination.plist

    [not loaded]    com.apple.FileSyncAgent.sshd.plist (2015-08-02) - No signature!

    [loaded]    com.apple.FontWorker.plist

    [loaded]    com.apple.GSSCred.plist

    [loaded]    com.apple.GameController.gamecontrollerd.plist

    [loaded]    com.apple.IFCStart.plist

    [loaded]    com.apple.IOAccelMemoryInfoCollector.plist

    [loaded]    com.apple.IOBluetoothUSBDFU.plist

    [loaded]    com.apple.InstallerDiagnostics.installerdiagd.plist

    [not loaded]    com.apple.InstallerDiagnostics.installerdiagwatcher.plist

    [loaded]    com.apple.Kerberos.digest-service.plist

    [loaded]    com.apple.Kerberos.kadmind.plist

    [loaded]    com.apple.Kerberos.kcm.plist

    [running]    com.apple.Kerberos.kdc.plist

    [loaded]    com.apple.Kerberos.kpasswdd.plist

    [running]    com.apple.KernelEventAgent.plist

    [loaded]    com.apple.MRTd.plist (2015-08-01) - Invalid signature!

    [loaded]    com.apple.ManagedClient.cloudconfigurationd.plist

    [loaded]    com.apple.ManagedClient.enroll.plist

    [loaded]    com.apple.ManagedClient.plist

    [not loaded]    com.apple.ManagedClient.startup.plist

    [running]    com.apple.MobileFileIntegrity.plist

    [not loaded]    com.apple.NetBootClientStatus.plist

    [loaded]    com.apple.NetworkDiagnostics.plist

    [loaded]    com.apple.NetworkLinkConditioner.plist

    [loaded]    com.apple.NetworkSharing.plist

    [not loaded]    com.apple.ODSAgent.plist

    [loaded]    com.apple.PCIELaneConfigTool.plist

    [not loaded]    com.apple.PasswordService.plist

    [loaded]    com.apple.RFBEventHelper.plist

    [loaded]    com.apple.RemoteDesktop.PrivilegeProxy.plist

    [loaded]    com.apple.ReportCrash.Root.plist

    [loaded]    com.apple.ReportPanicService.plist

    [loaded]    com.apple.SCHelper.plist

    [running]    com.apple.SubmitDiagInfo.plist

    [running]    com.apple.TMCacheDelete.plist

    [loaded]    com.apple.TrustEvaluationAgent.system.plist

    [running]    com.apple.UserEventAgent-System.plist

    [loaded]    com.apple.UserNotificationCenter.plist

    [running]    com.apple.WindowServer.plist

    [running]    com.apple.WirelessRadioManagerd-osx.plist

    [loaded]    com.apple.afpfs_afpLoad.plist

    [loaded]    com.apple.afpfs_checkafp.plist

    [loaded]    com.apple.airplaydiagnostics.server.mac.plist (2016-02-01) - /AppleInternal/Applications/AirPlayDiagnostics.app/Contents/Resources/AirPlayDi agnosticsServer: Executable not found!

    [loaded]    com.apple.airport.wps.plist

    [running]    com.apple.airportd.plist

    [running]    com.apple.akd.plist

    [running]    com.apple.alf.agent.plist

    [loaded]    com.apple.appleseed.fbahelperd.plist

    [loaded]    com.apple.applessdstatistics.plist

    [running]    com.apple.apsd.plist

    [running]    com.apple.aslmanager.plist

    [not loaded]    com.apple.atrun.plist

    [running]    com.apple.audio.coreaudiod.plist

    [running]    com.apple.audio.systemsoundserverd.plist

    [loaded]    com.apple.auditd.plist

    [running]    com.apple.autofsd.plist

    [loaded]    com.apple.automountd.plist

    [loaded]    com.apple.avbdeviced.plist

    [loaded]    com.apple.awacsd.plist

    [running]    com.apple.awdd.plist

    [running]    com.apple.backupd-auto.plist

    [loaded]    com.apple.backupd.plist

    [running]    com.apple.blued.plist

    [loaded]    com.apple.bluetoothReporter.plist

    [loaded]    com.apple.bluetoothaudiod.plist

    [loaded]    com.apple.bnepd.plist

    [loaded]    com.apple.bsd.dirhelper.plist

    [running]    com.apple.cache_delete.plist

    [running]    com.apple.cfprefsd.xpc.daemon.plist

    [loaded]    com.apple.cloudfamilyrestrictionsd-mac.plist

    [loaded]    com.apple.cmio.AVCAssistant.plist

    [loaded]    com.apple.cmio.AppleCameraAssistant.plist

    [loaded]    com.apple.cmio.IIDCVideoAssistant.plist

    [running]    com.apple.cmio.VDCAssistant.plist

    [loaded]    com.apple.cmio.iOSScreenCaptureAssistant.plist

    [loaded]    com.apple.colorsyncd.plist

    [not loaded]    com.apple.comsat.plist

    [running]    com.apple.configd.plist

    [loaded]    com.apple.configureLocalKDC.plist (2015-08-02) - No signature!

    [loaded]    com.apple.corecaptured.plist

    [running]    com.apple.coreduetd.osx.plist

    [running]    com.apple.coreservices.appleevents.plist

    [loaded]    com.apple.coreservices.appleid.passwordcheck.plist

    [running]    com.apple.coreservices.launchservicesd.plist

    [running]    com.apple.coreservices.sharedfilelistd.plist

    [running]    com.apple.coreservicesd.plist

    [running]    com.apple.corestorage.corestoraged.plist

    [loaded]    com.apple.corestorage.corestoragehelperd.plist

    [running]    com.apple.coresymbolicationd.plist

    [loaded]    com.apple.csrutil.report.plist

    [running]    com.apple.ctkd.plist

    [running]    com.apple.cvmsServ.plist

    [loaded]    com.apple.diagnostic.uuidpathd.plist

    [running]    com.apple.diagnosticd.plist

    [running]    com.apple.diskarbitrationd.plist

    [loaded]    com.apple.diskmanagementd.plist

    [not loaded]    com.apple.diskmanagementstartup.plist

    [loaded]    com.apple.displaypolicyd.plist

    [running]    com.apple.distnoted.xpc.daemon.plist

    [not loaded]    com.apple.dnsextd.plist

    [loaded]    com.apple.dpaudiothru.plist

    [loaded]    com.apple.dpd.plist

    [loaded]    com.apple.dspluginhelperd.plist

    [loaded]    com.apple.dvdplayback.setregion.plist

    [loaded]    com.apple.dynamic_pager.plist

    [loaded]    com.apple.eapolcfg_auth.plist

    [not loaded]    com.apple.efax.plist (2015-08-01) - No signature!

    [loaded]    com.apple.efilogin-helper.plist

    [not loaded]    com.apple.emlog.plist (2015-08-02) - No signature!

    [loaded]    com.apple.emond.aslmanager.plist

    [loaded]    com.apple.emond.plist

    [not loaded]    com.apple.eppc.plist

    [loaded]    com.apple.familycontrols.plist

    [loaded]    com.apple.findmymac.plist

    [loaded]    com.apple.findmymacmessenger.plist

    [not loaded]    com.apple.firmwaresyncd.plist

    [loaded]    com.apple.fontd.plist

    [loaded]    com.apple.fontmover.plist

    [running]    com.apple.fseventsd.plist

    [not loaded]    com.apple.ftp-proxy.plist

    [not loaded]    com.apple.getty.plist

    [loaded]    com.apple.gkreport.plist (2016-03-06) - No signature!

    [loaded]    com.apple.gssd.plist

    [loaded]    com.apple.hdiejectd.plist

    [running]    com.apple.hidd.plist

    [loaded]    com.apple.hidfud.plist

    [running]    com.apple.icloud.findmydeviced.plist

    [running]    com.apple.iconservices.iconservicesagent.plist

    [running]    com.apple.iconservices.iconservicesd.plist

    [running]    com.apple.ifdreader.plist

    [loaded]    com.apple.installandsetup.systemmigrationd.plist

    [running]    com.apple.installd.plist

    [loaded]    com.apple.kcproxy.plist

    [not loaded]    com.apple.kdumpd.plist

    [running]    com.apple.kextd.plist

    [loaded]    com.apple.kuncd.plist

    [not loaded]    com.apple.locate.plist (2015-08-01) - No signature!

    [running]    com.apple.locationd.plist

    [loaded]    com.apple.lockd.plist

    [failed]    com.apple.logd.plist

    [running]    com.apple.logind.plist

    [loaded]    com.apple.loginwindow.LFVTracer.plist

    [running]    com.apple.loginwindow.plist

    [loaded]    com.apple.logkextloadsd.plist

    [running]    com.apple.lsd.plist

    [running]    com.apple.mDNSResponder.plist

    [loaded]    com.apple.mDNSResponderHelper.plist

    [loaded]    com.apple.mbsystemadministration.plist

    [loaded]    com.apple.mbusertrampoline.plist

    [loaded]    com.apple.mdmclient.daemon.plist

    [not loaded]    com.apple.mdmclient.daemon.runatboot.plist

    [running]    com.apple.metadata.mds.index.plist

    [running]    com.apple.metadata.mds.plist

    [loaded]    com.apple.metadata.mds.scan.plist

    [loaded]    com.apple.metadata.mds.spindump.plist

    [not loaded]    com.apple.msrpc.echosvc.plist

    [loaded]    com.apple.msrpc.lsarpc.plist

    [loaded]    com.apple.msrpc.mdssvc.plist

    [loaded]    com.apple.msrpc.netlogon.plist

    [loaded]    com.apple.msrpc.srvsvc.plist

    [loaded]    com.apple.msrpc.wkssvc.plist

    [running]    com.apple.mtmd.plist

    [running]    com.apple.mtmfs.plist

    [running]    com.apple.nehelper.plist

    [loaded]    com.apple.nesessionmanager.plist

    [loaded]    com.apple.netauth.sys.auth.plist

    [loaded]    com.apple.netauth.sys.gui.plist

    [running]    com.apple.netbiosd.plist

    [running]    com.apple.networkd.plist

    [running]    com.apple.networkd_privileged.plist

    [loaded]    com.apple.newsyslog.plist

    [loaded]    com.apple.nfsconf.plist

    [loaded]    com.apple.nfsd.plist

    [loaded]    com.apple.nis.ypbind.plist

    [loaded]    com.apple.noticeboard.state.plist

    [running]    com.apple.notifyd.plist

    [running]    com.apple.nsurlsessiond.plist

    [running]    com.apple.nsurlstoraged.plist

    [running]    com.apple.ocspd.plist

    [not loaded]    com.apple.odproxyd.plist

    [running]    com.apple.opendirectoryd.plist

    [loaded]    com.apple.periodic-daily.plist

    [loaded]    com.apple.periodic-monthly.plist

    [loaded]    com.apple.periodic-weekly.plist

    [loaded]    com.apple.pfctl.plist

    [loaded]    com.apple.pfd.plist

    [loaded]    com.apple.platform.ptmd.plist

    [running]    com.apple.powerd.plist

    [loaded]    com.apple.powerd.swd.plist

    [loaded]    com.apple.preferences.timezone.admintool.plist

    [loaded]    com.apple.preferences.timezone.auto.plist

    [loaded]    com.apple.printtool.daemon.plist

    [loaded]    com.apple.racoon.plist

    [loaded]    com.apple.remotepairtool.plist

    [running]    com.apple.revisiond.plist

    [loaded]    com.apple.rootless.init.plist

    [loaded]    com.apple.rpcbind.plist

    [running]    com.apple.sandboxd.plist

    [not loaded]    com.apple.screensharing.plist

    [loaded]    com.apple.scsid.plist

    [running]    com.apple.secinitd.plist

    [not loaded]    com.apple.security.FDERecoveryAgent.plist

    [loaded]    com.apple.security.agent.login.plist

    [loaded]    com.apple.security.authhost.plist

    [running]    com.apple.security.syspolicy.plist

    [running]    com.apple.securityd.plist

    [running]    com.apple.securityd_service.plist

    [loaded]    com.apple.sessionlogoutd.plist

    [loaded]    com.apple.smb.preferences.plist

    [loaded]    com.apple.smbd.plist

    [loaded]    com.apple.softwareupdate_download_service.plist

    [loaded]    com.apple.softwareupdate_firstrun_tasks.plist

    [running]    com.apple.softwareupdated.plist

    [loaded]    com.apple.speech.speechsynthesisd.plist

    [running]    com.apple.spindump.plist

    [loaded]    com.apple.startupdiskhelper.plist

    [loaded]    com.apple.statd.notify.plist

    [loaded]    com.apple.storagekitd.plist

    [loaded]    com.apple.storeaccountd.daemon.plist

    [loaded]    com.apple.storeagent.daemon.plist

    [loaded]    com.apple.storeassetd.daemon.plist

    [loaded]    com.apple.storedownloadd.daemon.plist

    [running]    com.apple.storeinstalld.plist

    [loaded]    com.apple.storereceiptinstaller.plist

    [running]    com.apple.suhelperd.plist

    [running]    com.apple.symptomsd.plist

    [loaded]    com.apple.sysdiagnose.plist

    [running]    com.apple.syslogd.plist

    [running]    com.apple.sysmond.plist

    [loaded]    com.apple.system_installd.plist

    [loaded]    com.apple.systemkeychain.plist

    [loaded]    com.apple.systempreferences.installer.plist

    [running]    com.apple.systemstats.analysis.plist

    [loaded]    com.apple.systemstats.daily.plist

    [running]    com.apple.systemstatsd.plist

    [loaded]    com.apple.taskgated-helper.plist

    [running]    com.apple.taskgated.plist

    [running]    com.apple.tccd.system.plist

    [loaded]    com.apple.thermald.plist

    [loaded]    com.apple.trustd.plist

    [loaded]    com.apple.ucupdate.plist

    [loaded]    com.apple.uninstalld.plist

    [loaded]    com.apple.unmountassistant.sysagent.plist

    [loaded]    com.apple.updateEFIDesktopPicture.plist

    [running]    com.apple.usbd.plist

    [running]    com.apple.usbmuxd.plist

    [not loaded]    com.apple.uucp.plist

    [loaded]    com.apple.var-db-dslocal-backup.plist

    [loaded]    com.apple.vsdbutil.plist

    [running]    com.apple.warmd.plist

    [running]    com.apple.watchdogd.plist

    [running]    com.apple.wdhelper.plist

    [loaded]    com.apple.wifid.plist

    [running]    com.apple.wirelessproxd.plist

    [loaded]    com.apple.wwand.plist

    [running]    com.apple.xpc.smd.plist

    [loaded]    com.apple.xpc.uscwoap.plist

    [not loaded]    com.apple.xsan.plist

    [not loaded]    com.apple.xsandaily.plist

    [not loaded]    com.apple.xscertadmin.plist

    [not loaded]    com.apple.xscertd-helper.plist

    [not loaded]    com.apple.xscertd.plist

    [loaded]    com.vix.cron.plist

    [not loaded]    exec.plist

    [not loaded]    finger.plist

    [not loaded]    ftp.plist

    [not loaded]    login.plist

    [not loaded]    ntalk.plist

    [not loaded]    org.apache.httpd.plist (2016-02-20) - No signature!

    [not loaded]    org.cups.cups-lpd.plist

    [loaded]    org.cups.cupsd.plist (2016-03-22) - Invalid signature!

    [not loaded]    org.net-snmp.snmpd.plist (2015-10-23) - No signature!

    [running]    org.ntp.ntpd.plist (2015-10-26) - No signature!

    [not loaded]    org.openldap.slapd.plist

    [loaded]    org.postfix.master.plist

    [loaded]    org.postfix.newaliases.plist (2015-08-02) - No signature!

    [not loaded]    shell.plist

    [not loaded]    ssh.plist (2016-01-21) - No signature!

    [not loaded]    telnet.plist

    [not loaded]    tftp.plist

 

Launch Agents:

    [not loaded]    com.adobe.AAM.Updater-1.0.plist (2016-06-16) [Support]

    [failed]    com.adobe.ARMDCHelper.cc24aef4a1b90ed56a...plist (2016-05-14) [Support]

    [running]    com.adobe.AdobeCreativeCloud.plist (2016-04-26) [Support]

    [loaded]    com.google.keystone.agent.plist (2016-05-24) [Support]

 

Launch Daemons:

    [loaded]    com.adobe.ARMDC.Communicator.plist (2016-05-14) [Support]

    [loaded]    com.adobe.ARMDC.SMJobBlessHelper.plist (2016-05-14) [Support]

    [running]    com.adobe.adobeupdatedaemon.plist (2016-06-14) [Support]

    [loaded]    com.adobe.agsservice.plist (2016-04-26) [Support]

    [loaded]    com.adobe.fpsaud.plist (2016-06-13) [Support]

    [loaded]    com.google.keystone.daemon.plist (2016-05-24) [Support]

 

User Launch Agents:

    [loaded]    com.adobe.AAM.Updater-1.0.plist (2016-04-27) [Support]

 

User Login Items:

    iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

    AdobeResourceSynchronizer    Application Hidden (/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)

 

Other Apps:

    [running]    com.adobe.CCXProcess.189792

    [running]    com.adobe.acc.AdobeDesktopService.65952.61739FE9-C2CC-4500-AE9D-701C438E66A2

    [running]    com.adobe.accmac.177632

    [running]    com.apple.AccountPolicyHelper

    [running]    com.apple.ActivityMonitor.12192

    [running]    com.apple.AddressBook.192352

    [running]    com.apple.AddressBook.ContactsAccountsService

    [running]    com.apple.AmbientDisplayAgent

    [loaded]    com.apple.BKAgentService

    [loaded]    com.apple.CharacterPicker.FileService

    [running]    com.apple.CloudPhotosConfiguration

    [running]    com.apple.CodeSigningHelper

    [running]    com.apple.DataDetectorsDynamicData

    [loaded]    com.apple.DesktopServicesHelper.67CAE267-9502-40ED-9381-D308B8DD2BD7

    [loaded]    com.apple.DesktopServicesHelper.85A2E500-9E4A-4BF0-89FE-468CADB7FD5F

    [loaded]    com.apple.DictionaryServiceHelper

    [loaded]    com.apple.FCiCloudPrefUpdater

    [loaded]    com.apple.IASUtilities.IASCloudConfigHelper

    [running]    com.apple.InputMethodKit.TextReplacementService

    [loaded]    com.apple.Localization.SetDefaultsService

    [loaded]    com.apple.MailServiceAgent

    [running]    com.apple.PerformanceAnalysis.animationperfd

    [running]    com.apple.Safari.10592

    [loaded]    com.apple.SpeechRecognitionCore.brokerd

    [running]    com.apple.ViewBridgeAuxiliary

    [loaded]    com.apple.accounts.dom

    [loaded]    com.apple.appkit.xpc.sandboxedServiceRunner

    [running]    com.apple.authd

    [running]    com.apple.cmio.registerassistantservice

    [loaded]    com.apple.facebook.xpc

    [running]    com.apple.geod

    [running]    com.apple.hiservices-xpcservice

    [loaded]    com.apple.iBooksX-SecureUserDefaults

    [running]    com.apple.iCloudHelper

    [running]    com.apple.iTunesHelper.85472

    [running]    com.apple.imdpersistence.IMDPersistenceAgent

    [loaded]    com.apple.iokit.IOServiceAuthorizeAgent

    [loaded]    com.apple.iokit.ioserviceauthorized

    [running]    com.apple.lakitu

    [loaded]    com.apple.linkedin.xpc

    [running]    com.apple.mdworker.shared.00000000-0000-0000-0000-000000000000

    [running]    com.apple.mdworker.shared.01000000-0000-0000-0000-000000000000

    [running]    com.apple.mdworker.shared.02000000-0000-0000-0000-000000000000

    [running]    com.apple.mdworker.shared.03000000-0000-0000-0000-000000000000

    [running]    com.apple.mdworker.shared.04000000-0000-0000-0000-000000000000

    [loaded]    com.apple.mdworker.single.01000000-0000-0000-0000-000000000000

    [loaded]    com.apple.mdworker.single.02000000-0000-0000-0000-000000000000

    [loaded]    com.apple.mdworker.single.03000000-0000-0000-0000-000000000000

    [loaded]    com.apple.mdworker.single.04000000-0000-0000-0000-000000000000

    [running]    com.apple.mdworker.single.05000000-0000-0000-0000-000000000000

    [running]    com.apple.mdworker.single.06000000-0000-0000-0000-000000000000

    [running]    com.apple.mdworker.single.07000000-0000-0000-0000-000000000000

    [loaded]    com.apple.mdworker.single.08000000-0000-0000-0000-000000000000

    [loaded]    com.apple.messages.BuddyPictureService

    [running]    com.apple.sbd

    [loaded]    com.apple.security.XPCKeychainSandboxCheck

    [loaded]    com.apple.security.XPCTimeStampingService

    [loaded]    com.apple.security.agent.login.00000000-0000-0000-0000-0000000186A8

    [loaded]    com.apple.security.authhost.00000000-0000-0000-0000-0000000186A8

    [loaded]    com.apple.sharekit.EntitlementsHelper

    [loaded]    com.apple.systemadministration.writeconfig

    [loaded]    com.apple.tencentweibo.xpc

    [running]    com.apple.tonelibraryd

    [loaded]    com.apple.twitter.xpc

    [loaded]    com.apple.weibo.xpc

    [running]    com.apple.xpc.launchd.oneshot.0x10000001.AppleSpell

    [running]    com.apple.xpc.launchd.oneshot.0x10000003.EtreCheck

 

Internet Plug-ins:

    AdobeAAMDetect: 3.0.0.0 - SDK 10.9 (2016-06-14) [Support]

    FlashPlayer-10.6: 22.0.0.192 - SDK 10.9 (2016-06-16) [Support]

    QuickTime Plugin: 7.7.3 (2016-05-28)

    AdobePDFViewerNPAPI: 15.016.20045 - SDK 10.11 (2016-06-16) [Support]

    AdobePDFViewer: 15.016.20045 - SDK 10.11 (2016-06-16) [Support]

    Flash Player: 22.0.0.192 - SDK 10.9 (2016-06-16) [Support]

    Default Browser: 601 - SDK 10.11 (2016-05-28)

    PepperFlashPlayer: 22.0.0.192 - SDK 10.6 (2016-06-17) [Support]

 

3rd Party Preference Panes:

    Flash Player (2016-06-13) [Support]

 

Time Machine:

    Skip System Files: NO

    Auto backup: YES

    Volumes being backed up:

        Untitled: Disk size: 249.78 GB Disk used: 57.53 GB

    Destinations:

        HAL [Local]

        Total size: 1.00 TB

        Total number of backups: 3

        Oldest backup: 4/26/16, 2:26 PM

        Last backup: 4/28/16, 2:57 PM

        Size of backup disk: Excellent

            Backup size 1.00 TB > (Disk size 249.78 GB X 3)

 

Top Processes by CPU:

         6%    WindowServer

         3%    com.apple.WebKit.WebContent(2)

         3%    mdworker(12)

         2%    kernel_task

         2%    fontd

 

Top Processes by Memory:

    849 MB    kernel_task

    377 MB    com.apple.WebKit.WebContent(2)

    279 MB    Safari

    270 MB    soagent

    262 MB    callservicesd

 

Virtual Memory Information:

    515 MB    Free RAM

    7.49 GB    Used RAM (1.53 GB Cached)

    0 B    Swap Used

 

Diagnostics Information:

    Jun 17, 2016, 02:30:04 PM    Self test - passed

 

    Standard users cannot read /Library/Logs/DiagnosticReports.

    Run as an administrator account to see more information.

MacBook Pro with Retina display, OS X El Capitan (10.11.5)

Posted on Jun 17, 2016 2:59 PM

Close

Q: Hacked 6 months ago. Think its happening again, help!

  • All replies
  • Helpful answers

  • by sberman,

    sberman sberman Jun 17, 2016 3:37 PM in response to missyed1975
    Level 8 (40,107 points)
    Jun 17, 2016 3:37 PM in response to missyed1975

    You definitely show a lot of extraneous stuff under "System Launch Agents" above.

     

    If I had a machine like that, I would erase my hard drive and reinstall OS X from scratch.  I would then very carefully and selectively restore only the least possible applications and files I needed to continue (next to nothing, hopefully).

     

    If you choose to do this, see "Erase your drive and install OS X" here:

    How to reinstall OS X on your Mac - Apple Support

  • by Linc Davis,

    Linc Davis Linc Davis Jun 17, 2016 3:55 PM in response to missyed1975
    Level 10 (207,995 points)
    Applications
    Jun 17, 2016 3:55 PM in response to missyed1975

    First, there is not a shred of evidence here either that you have or have not been "hacked."


    It's best to describe the problem, if you have one, in as much relevant detail as possible, rather than to post the output of some random app that you downloaded.

  • by askmrmac,

    askmrmac askmrmac Jun 17, 2016 4:02 PM in response to missyed1975
    Level 1 (57 points)
    Jun 17, 2016 4:02 PM in response to missyed1975

    That report shows no obvious signs that "your computer was hacked".

    Might your previous "hack" been that someone stole your username and password to your financial account logins,

    like maybe you were "phished", and they drained your accounts? That carelessness would be disastrous, I agree.

  • by Phil0124,

    Phil0124 Phil0124 Jun 17, 2016 4:06 PM in response to missyed1975
    Level 7 (27,609 points)
    iPhone
    Jun 17, 2016 4:06 PM in response to missyed1975

    I see nothing to in the report that would indicate hacking.  Without knowing what you use your Mac for, and what Apps you use, its hard to say if anything at all there is extraneous or not.

     

    Perhaps if you explain what these strange things that are happening actually are, we may be able to offer some advice.

     

    What happened last time that led you to believe your were hacked?

     

    Was is happening now, that makes you thinks this again?

  • by John Galt,

    John Galt John Galt Jun 17, 2016 7:51 PM in response to missyed1975
    Level 8 (49,485 points)
    Mac OS X
    Jun 17, 2016 7:51 PM in response to missyed1975

    missyed1975 wrote:

     

    ... Strange things have started happening again recently and I just ran an etre check.

     

    Does anyone know how to interpret an Etre Check well enough to advise?

     

    The only authority regarding that program is its author, for whom you can find contact information on his website. Having said that, I believe even he would tell you using that program to confirm the absence of malicious interference would be an inappropriate use of it.

     

    You ought to explain exactly what those "strange things" are. For all anyone knows from the information you provided, those events could be completely unrelated to your Mac or anything you do with it.

  • by etresoft,

    etresoft etresoft Jun 17, 2016 8:30 PM in response to missyed1975
    Level 7 (29,298 points)
    Mac OS X
    Jun 17, 2016 8:30 PM in response to missyed1975

    Hello missyed1975,

    You have turned on all of EtreCheck's most pedantic reporting. Normally it hides all of those Apple tasks and ignores the known failures. Taking that into consideration, your EtreCheck report is just about as clean as is humanly possible. There is no evidence of any apps crashing and virtually no 3rd party software.

  • by ~Bee,

    ~Bee ~Bee Jun 18, 2016 8:09 AM in response to etresoft
    Level 7 (31,792 points)
    Mac OS X
    Jun 18, 2016 8:09 AM in response to etresoft

    And, the OP here has used EtreCheck in the standard mode, rather than the adminstrator's account.