This happened to me too. It added itself without any action on my part, and without any Google crud open, to my knowledge. How can I determine what added it, so that I can remove it with prejudice?
Update:
Ran `sfltool dumpbtm`
#3:
UUID: E3C582DB-F60F-43FA-9A38-2325000511D8
Name: GoogleUpdater
Developer Name: Google LLC
Team Identifier: EQHXZ8M8AV
Type: legacy agent (0x10008)
Disposition: [enabled, disallowed, visible, notified] (9)
Identifier: com.google.GoogleUpdater.wake
URL: file:///Users/<snip>/Library/LaunchAgents/com.google.GoogleUpdater.wake.plist
Executable Path: /Users/<snip>/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
Generation: 2
Parent Identifier: Google LLC
Update 2:
Contents of `com.google.GoogleUpdater.wake.plist` show it's Google Chrome related:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>AbandonProcessGroup</key>
<true/>
<key>Label</key>
<string>com.google.GoogleUpdater.wake</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/<snip>/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater</string>
<string>--wake-all</string>
<string>--enable-logging</string>
<string>--vmodule=*/components/update_client/*=2,*/chrome/updater/*=2</string>
</array>
<key>StartInterval</key>
<integer>3600</integer>
</dict>
</plist>
Still not sure how it got installed when I've got Google background services disabled.
If you delete the files, Google will just replace them and automatically enable them, not unlike malware. I've removed read/write permissions to the files. Untested in the long run, but should render them inoperable and unreplaceable:
chmod 000 ~/Library/LaunchAgents/com.google.*
