Malware - Malware detected.!!!
Malware:
Launchd: ~/Library/LaunchAgents/.plist
Executable: /Applications/OneDrive.app/Contents/MacOS/OneDrive
Reason: Malware name match
~ tilde indicates your user library folder
Apple hid the Users' Library folders...
Method 1:
- From the Finder, select the Go menu at top of the screen, and choose Go to Folder.
- In the window that opens, enter ~/Library, and click Go.
See if you have unknown Profiles.
To remove a configuration profile in macOS:
- From the Apple menu, select System Preferences....
- From the View menu in System Preferences, select Profiles.Note:
- Profiles won't be visible until you have at least one profile installed.
- Select the profile you want to remove, and then press the - (minus) button. Click Remove to remove the profile.
Delete these files & restart...
/Library/LaunchAgents/com.sangfor.ECAgentProxy.plist
/Library/LaunchAgents/com.s2.uk.AppsAnywhere.plist
/Library/LaunchDaemons/com.microsoft.OneDriveStandaloneUpdaterDaemon.plist
/Library/LaunchDaemons/com.sangfor.EasyMonitor.plist
/Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist
/Library/LaunchDaemons/com.microsoft.OneDriveUpdaterDaemon.plist
~/Library/LaunchAgents/com.aviatainc.powerengage.XRTK.plist
~/Library/LaunchAgents/com.expressvpn.ExpressVPN.agent.plist
~/Library/LaunchAgents/com.qiuyuzhou.shadowsocksX-NG.local.plist
~/Library/LaunchAgents/com.aviatainc.powerengage.helper.XRTK.plist
~/Library/LaunchAgents/com.qiuyuzhou.shadowsocksX-NG.http.plist
~ tilde indicates your home folder
Apple hid the Users' Library folders...
Method 1:
1 From the Finder, select the Go menu at top of the screen, and choose Go to Folder.
2 In the window that opens, enter ~/Library, and click Go.
Run etrecheck again to see if we missed anything! :)