Go to the “Security” page in your EtreCheck report and remove the following files:
Adware:
Launchd: /Library/LaunchDaemons/com.fluviatic.plist
Executable: /etc/fluviatic.sh
Reason: Adware pattern match
Launchd: /Library/LaunchDaemons/com.apple.nomaro.plist
Executable: /Library/nomaro
Reason: Adware pattern match
Launchd: /Library/LaunchDaemons/com.brothelry.net-preferences.plist
Executable: /etc/change_net_settings.sh
Reason: Adware pattern match
Launchd: /Library/LaunchDaemons/com.cytoid.plist
Executable: /etc/cytoid.sh
Reason: Adware pattern match
Launchd: /Library/LaunchDaemons/com.apple.ightem.plist
Executable: /Library/ightem
Reason: Adware pattern match
Launchd: /Library/LaunchDaemons/com.handily.service.plist
Executable: /etc/run_app.sh
Reason: Adware pattern match
Launchd: /Library/LaunchDaemons/com.embraceor.service.plist
Executable: /etc/run_app.sh
Reason: Adware pattern match
Unsigned Files:
Launchd: ~/Library/LaunchAgents/com.JMGti.plist
Executable: ~/Library/qeSGc/0iGb1
Details: Domain name invalid - possibly adware
Launchd: /Library/LaunchAgents/com.Ben.plist
Executable: /Library/laciniated/FpvUIfsO/BezAOVjO/Ben
Launchd: ~/Library/LaunchAgents/com.ReplayInfo.plist
Executable: ~/Library/Application Support/com.ReplayInfo/ReplayInfo
Details: Domain name invalid - possibly adware
Launchd: ~/Library/LaunchAgents/com.outsting-nanomelus.plist
Executable: ~/Library/caphar/CvjZdHjk/PFaVhNLb/jYKnVsvw/outsting-nanomelus
Details: Domain name invalid - possibly adware
Running app: /Library/unbenignant/unbenignant
Running app: /Library/udandan/udandan.app/Contents/MacOS/udandan
Running app: /Library/bagel-snatchable/sgHbeBUR/QBbJfEMQ/tyRvfkGJ/apsis
Running app: /Library/wlaghmyrnqvj/wlaghmyrnqvj
Running app: /Library/mPGDlnMj/mPGDlnMj
Login Item: ~/bin/helper_update
You may get some error messages. If you get an error dialog with two buttons to delete the file and or executable, click them and keep going. Then restart. After restarting, generate a new EtreCheck report and look for any new adware or possible adware files. Repeat until they are all gone.