EtreCheck Report ( Check for Spyware/Any unusual activity )

I know that I might sound a bit paranoid, but I feel that I am being spied on by someone I know personally, and who had physical access to my laptop. That person always seems to know what I am doing, although I didn't share it with anyone ( my online activities, what I've been watching on Netflix etc. ).

I read that EtreCheck can help you to determine whether there is any active spyware on your Mac. I would appreciate it a lot if you could review my EtreCheck report and/or give me any other device to determine any corruption of my MacBook.


Thank you very much!


Posted on Feb 15, 2021 10:08 AM

Reply
Question marked as Top-ranking reply

Posted on Feb 16, 2021 2:44 PM

NarutoLpn wrote:

Is that what you mentioned proof that someone is spying on me or could it just be coincidence or something I did?

There is no proof of anything. Those settings were not changed by coincidence. I would think that if you had changed them, you would know it. This isn't something that can happen by accident. From what I can tell, these changes are suggested on the internet as ways to install low-level hacks for breaking copyright protection both for Apple software, 3rd party software, and other media. That is a more likely explanation than any sort of spying.


EtreCheck cannot undo those changes. The best EtreCheck can do is point you to Apple Developer documents showing how to enable or disable System Integrity Protection. And these are developer documents meant for programmers. The consumer-level Apple Support documents provide no help for this. No one other than developers should ever disable System Integrity Protection. The changes on this computer go beyond even those.


Also is there any way to contact you privately?

EtreCheck is my software and I don't hide or post anonymously. You can track me down if you want - pretty easily if you already have EtreCheck, but this is not something I would be able to help with. All EtreCheck does is point out problems or anomalies. In many (most?) cases, I have no idea how they got that way or how to fix them.


The day you opened that computer for the first time was the day it was running at optimum performance, reliability, and security. Any changes you can make will only reduce one or more of those factors. So if you find yourself with sub-optimum performance, reliability, or security, you will need to identify the software you've installed and the configuration changes that you've made and undo them. In some cases, you may have to wipe the entire machine and start over with a factory-fresh configuration. In your case, even that is problematic. You have quite a few kernel boot arguments and I don't know which ones you've added and which ones came from Apple. Only you and Apple know that. That's why I recommended you contact Apple.


Ideally, take it in to an Apple Store or Authorized Apple Service provider and have them reset it all. You will need to make a backup before doing that. And when you restore, I strongly urge you to restore only your user account. Do not restore any apps or other settings. You can manually reinstall any software that you absolutely must have.

4 replies
Question marked as Top-ranking reply

Feb 16, 2021 2:44 PM in response to NarutoLpn

NarutoLpn wrote:

Is that what you mentioned proof that someone is spying on me or could it just be coincidence or something I did?

There is no proof of anything. Those settings were not changed by coincidence. I would think that if you had changed them, you would know it. This isn't something that can happen by accident. From what I can tell, these changes are suggested on the internet as ways to install low-level hacks for breaking copyright protection both for Apple software, 3rd party software, and other media. That is a more likely explanation than any sort of spying.


EtreCheck cannot undo those changes. The best EtreCheck can do is point you to Apple Developer documents showing how to enable or disable System Integrity Protection. And these are developer documents meant for programmers. The consumer-level Apple Support documents provide no help for this. No one other than developers should ever disable System Integrity Protection. The changes on this computer go beyond even those.


Also is there any way to contact you privately?

EtreCheck is my software and I don't hide or post anonymously. You can track me down if you want - pretty easily if you already have EtreCheck, but this is not something I would be able to help with. All EtreCheck does is point out problems or anomalies. In many (most?) cases, I have no idea how they got that way or how to fix them.


The day you opened that computer for the first time was the day it was running at optimum performance, reliability, and security. Any changes you can make will only reduce one or more of those factors. So if you find yourself with sub-optimum performance, reliability, or security, you will need to identify the software you've installed and the configuration changes that you've made and undo them. In some cases, you may have to wipe the entire machine and start over with a factory-fresh configuration. In your case, even that is problematic. You have quite a few kernel boot arguments and I don't know which ones you've added and which ones came from Apple. Only you and Apple know that. That's why I recommended you contact Apple.


Ideally, take it in to an Apple Store or Authorized Apple Service provider and have them reset it all. You will need to make a backup before doing that. And when you restore, I strongly urge you to restore only your user account. Do not restore any apps or other settings. You can manually reinstall any software that you absolutely must have.

Feb 16, 2021 11:25 AM in response to etresoft

First of all, thank you very much for your prompt answer.

I have some further questions. Is that what you mentioned proof that someone is spying on me or could it just be coincidence or something I did? I would be really interested in that, because that person I am talking about is very close to me and I don't want to accuse that person of something he/she didn't do potentially.

And how do I undo these system changes? Is that possible through the EtreCheck software?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

EtreCheck Report ( Check for Spyware/Any unusual activity )

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.