How to get rid of hackers on my iPhone

taskinfo file (from /sysdiagnose)

*Duplicated tasks (processes) have different PIDs

*All data other than task names is omitted here


launchd

SpringBoard

UserEventAgent

configd

logd

wifid

remoted

amfid

keybagd

mobiletimerd

locationd

containermanagerd

thermalmonitord

identityservicesd

nfcd

driverkitd

mediaserverd

backboardd

watchdogd

lockdownd

CommCenter

sharingd

fairplayd.H2

timed

rapportd

imagent

AppleCredentialManagerDaemon

notifyd

fseventsd

bluetoothd

distnoted

sleepd

runningboardd

peopled

atc

axassetsd

WirelessRadioManagerd

audioaccessoryd

contextstored

safetyalertsd

OTACrashCopier

familynotificationd

nanoprefsynced

remindd

biomed

ManagedSettingsAgent

passd

navd

dasd

usermanagerd

askpermissiond

misd

accessoryupdaterd

tccd

peakpowermanagerd

healthd

mediaremoted

seld

bluetoothuserd

routined

assistantd

powerd

wcd

softwareupdated

amsaccountsd

cfprefsd

cfprefsd

containermanagerd_system

audiomxd

logd_helper

accountsd

pfd

com.apple.DriverKit-AppleBCMWLAN

accessoryd

PowerUIAgent

nsurlsessiond

biometrickitd

lsd

mobilerepaird

ACCHWComponentAuthService

chronod

apfs_iosd

applecamerad

liveactivitiesd

mobileassetd

nehelper

MobileGestaltHelper

trustd

nanoregistryd

MTLCompilerService

MTLCompilerService

wirelessinsightsd

followupd

CommCenterMobileHelper

apsd

securityd

mobileactivationd

callservicesd

BlueTool

calaccessd

cloudd

networkserviceproxy

nesessionmanager

fontservicesd

syncdefaultsd

misagent

donotdisturbd

profiled

findmydeviced

siriactionsd

pkd

localizationswitcherd

SCHelper

nearbyd

touchsetupd

MTLCompilerService

coreduetd

carkitd

watchlistd

PosterBoard

fmflocatord

coreidvd

appstored

geod

itunescloudd

seserviced

languageassetd

audioanalyticsd

ContextService

audioclocksyncd

corespeechd

siriinferenced

usernotificationsd

siriknowledged

triald

iconservicesagent

transparencyd

symptomsd

assistant_cdmd

announced

PerfPowerTelemetryClientRegistrationService

homed

voiced

akd

PhotosPosterProvider

useractivityd

com.apple.SiriTTSService.TrialProxy

AccessibilityUIServer

familycircled

videocodecd

WiFiCloudAssetsXPCService

searchpartyd

com.apple.NeighborhoodActivityConduitService

contactsd

dmd

ScreenTimeAgent

mDNSResponder

fmfd

linkd

sirittsd

itunesstored

findmylocated

InputUI

wifip2pd

com.apple.siri.embeddedspeech

wifianalyticsd

installcoordinationd

countryd

ThreeBarsXPCService

analyticsd

parsecd

findmybeaconingd

spotlight

aned

StatusKitAgent

searchd

WiFiCloudAssetsXPCService

ctkd

extensionkitservice

ShortcutsTopHitsExtension

deleted

momentsd

amsengagementd

parsec-fbf

fileproviderd

ACCHWComponentAuthService

filecoordinationd

adid

sosd

intelligentroutingd

voicebankingd

appleaccountd

facetimemessagestored

remotepairingdeviced

ind

adprivacyd

mapspushd

IMDPersistenceAgent

com.apple.FaceTime.FTConversationService

vmd

gpsd

Preferences

UARPUpdaterServiceAFU

UARPUpdaterServiceUSBPD

UARPUpdaterServiceHID

UARPUpdaterServiceLegacyAudio

progressd

AppSSODaemon

com.apple.VideoSubscriberAccount.DeveloperService

GSSCred

PerfPowerTelemetryClientRegistrationService

MTLCompilerService

swcd

CategoriesService

CategoriesService

CTParserService

osanalyticshelper

PerfPowerTelemetryClientRegistrationService

MobileSMS

Files

filemanagere

MTLCompilerService

AssetCacheLocatorService

MTLCompilerService

financed

mmaintenanced

suggestd

contactsdonationagent

softwareupdateservicesd

rtcreportingd

eyereliefd

privacyaccountingd

webbookmarksd

assetsd

bookassetd

UsageTrackingAgent

com.apple.sbd

ndoagent

pasted

PhotosFileProvider

promotedcontentd

UserFontManager

fitnesscoachingd

com.apple.MobileSoftwareUpdate.CleanupPreparePathService

medialibraryd

nanoregistrylaunchd

PerfPowerServices

IntelligencePlatformComputeService

cdpd

symptomsd-diag

KonaSynthesizer

Firefox Focus

MauiAUSP

MobileNotes

MacinTalkAUSP

Client

SiriAUSP

FileHub

AlohaBrowserApp

diagnosticextensionsd

photoanalysisd

OTATaskingAgent

coreauthd

fairplaydeviceidentityd

ProtectedCloudKeySyncing

backupd

assistant_service

duetexpertd

CategoriesService

HeuristicInterpreter

remotemanagementd

PasscodeSettingsSubscriber

ManagedAppsSubscriber

managedappdistributiond

ManagementTestSubscriber

InteractiveLegacyProfilesSubscriber

AccountSubscriber

SecuritySubscriber

WatchEnrollmentSubscriber

SoftwareUpdateSubscriber

ASConfigurationSubscriber

LegacyProfilesSubscriber

online-auth-agent

absd

asd

mlruntimed

mediasetupd

healthappd

passwordbreachd

sysdiagnosed

coresymbolicationd

betaenrollmentd

ScreenshotServicesService

MTLCompilerService

mediaanalysisd

tailspind

sysdiagnose_helper

nanotimekitcompaniond

vm_stat

taskinfo


[Re-Titled by Moderator]

iPhone XR

Posted on Apr 16, 2024 6:47 AM

Question marked as Top-ranking reply

Posted on Apr 16, 2024 7:13 AM

You are trying to read Apple Diagnostics, which unless you have access to the software Apple uses to read such logs, are completely unintelligible for us mere mortals. The logs you see are completely normal. They do not validate you have hackers in any way on your iPhone.


If you are not comfortable with the answers we are providing, posting unintelligble logs here won't get you anywhere. Contact Apple directly for help, but you are going to find that we are telling you the truth that these are normal and not something we as users can interpret at all.

Similar questions

10 replies
Question marked as Top-ranking reply

Apr 16, 2024 7:13 AM in response to Community User

You are trying to read Apple Diagnostics, which unless you have access to the software Apple uses to read such logs, are completely unintelligible for us mere mortals. The logs you see are completely normal. They do not validate you have hackers in any way on your iPhone.


If you are not comfortable with the answers we are providing, posting unintelligble logs here won't get you anywhere. Contact Apple directly for help, but you are going to find that we are telling you the truth that these are normal and not something we as users can interpret at all.

Apr 16, 2024 7:15 AM in response to Community User

Everything that you have posted are processes that run on all phones. None of them indicate that your phone has been hacked. You have fell down the rabbit hole of trying to understand that names of these processes that only have significance to the engineers that developed them. Those logs are helpful to the engineers when asked for them from Apple to resolve a problem, but mean nothing to users who are digging through them.

Apr 16, 2024 6:49 AM in response to Community User

security file from sysdiagnose

*some data omitted


security sync -i


SYNCABLE ITEMS: (1)

accc:  <SecAccessControlRef:ck>

acct:  _AppleWi-FiInternetTetheringSSID_

agrp:  apple

desc:  AirPort network password

labl:   _AppleWi-FiInternetTetheringSSID_

svce:  AirPort

sync:  1


**************

swcutil_show file from sysdiagnose

*some data omitted


PID: 261

Storage: /private/var/mobile/Containers/Data/InternalDaemon/EF7ADE0B-116E-444C-A2E0-D0994ECDFC59/com.apple.SharedWebCredentials/swc.db

DATABASE: [blank]

Service: applinks

AppID: KL8N8XSYF4.com.brave.ios.browser

Domain: vpn.brave.com

Service: applinks

AppID: com.apple.CloudKit.ShareBear

Domain: *.icloud.com.cn

Service: applinks

AppID: com.apple.CloudKit.ShareBear

Domain: icloud.com.cn

Service: applinks

AppID: com.apple.CloudKit.ShareBear

Domain: icloud.com

Service: applinks

AppID: com.apple.CloudKit.ShareBear

Domain: *.icloud.com

Service: applinks

AppID: 0000000000.com.apple.NewDeviceOutreachApp

Domain: coverage.apple.com

Service: applinks

AppID: 0000000000.com.apple.AAUIViewService

Domain: setup.icloud.com

Service: applinks

AppID: 0000000000.com.apple.icq

Domain: icq.icloud.com

Service: applinks

AppID: com.apple.FaceTimeLinkTrampoline

Domain: facetime.apple.com

Service: applinks

AppID: 0000000000.com.apple.EventViewService

Domain: *.events.shazam.apple.com

Service: applinks

AppID: 0000000000.com.apple.HealthENLauncher

Domain: g.co

Service: applinks

AppID: 0000000000.com.apple.ClipViewService

Domain: appclip.apple.com

Service: applinks

AppID: com.apple.FinanceStub

Domain: wallet.apple.com

Service: applinks

AppID: com.apple.FinanceStub

Domain: smp-device-qa1.apple.com

Service: applinks

AppID: com.apple.FinanceStub

Domain: a.41abbee5.test

Service: applinks

AppID: com.apple.mobileslideshow

Domain: www.icloud.com

Service: applinks

AppID: 0000000000.com.apple.MBHelperApp

Domain: prepare.icloud.com

Service: applinks

AppID: com.apple.PassbookUIService

Domain: wallet.appme.com

Service: applinks

AppID: com.apple.MobileSMS

Domain: bcrw.apple.com

Service: applinks

AppID: com.apple.news

Domain: apple.news

Service: applinks

AppID: com.apple.news

Domain: c.apple.com

Service: applinks

AppID: com.apple.news

Domain: news.apple.com

Service: applinks

AppID: com.apple.Passbook

Domain: wallet.apple.com

Service: applinks

AppID: com.apple.Health

Domain: health.apple.com

Service: applinks

AppID: com.apple.Health

Domain: *.health.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: c.itunes.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: finance-app.itunes.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: geo.itunes.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: my.itunes.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: new.itunes.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: itunes.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: phobos.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: buy.itunes.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: search.itunes.apple.com

Service: applinks

AppID: 4GG2695MJK.com.apple.iBooks

Domain: books.apple.com

Service: applinks

AppID: com.apple.AppStore

Domain: finance-app.itunes.apple.com

Service: applinks

AppID: com.apple.AppStore

Domain: geo.itunes.apple.com

Service: applinks

AppID: com.apple.AppStore

Domain: apps.apple.com

Service: applinks

AppID: com.apple.AppStore

Domain: itunes.apple.com

Service: applinks

AppID: com.apple.AppStore

Domain: buy.itunes.apple.com

Service: applinks

AppID: com.apple.AppStore

Domain: search.itunes.apple.com

Service: applinks

AppID: com.apple.AppStore

Domain: appsto.re

Service: applinks

AppID: com.apple.AMSEngagementViewService

Domain: one.apple.com

Apr 16, 2024 7:01 AM in response to Community User

remotectl_dumpstate file from sysdiagnose

*some data omitted


Local device


Services:

com.apple.mobile.heartbeat.shim.remote

com.apple.backgroundassets.lockdownservice.shim.remote

com.apple.afc.shim.remote

com.apple.remote.installcoordination_proxy

com.apple.mobile.lockdown.remote.trusted

com.apple.preboardservice_v2.shim.remote

com.apple.mobile.lockdown.remote.untrusted

com.apple.companion_proxy.shim.remote

com.apple.idamd.shim.remote

com.apple.mobile.diagnostics_relay.shim.remote

com.apple.pcapd.shim.remote

com.apple.sysdiagnose.remote

com.apple.carkit.service.shim.remote

com.apple.corecaptured.remoteservice

com.apple.accessibility.axAuditDaemon.remoteserver.shim.remote

com.apple.fusion.remote.service

com.apple.commcenter.mobile-helper-cbupdateservice.shim.remote

com.apple.preboardservice.shim.remote

com.apple.syslog_relay.shim.remote

com.apple.crashreportcopymobile.shim.remote

com.apple.mobilesync.shim.remote

com.apple.misagent.shim.remote

com.apple.springboardservices.shim.remote

com.apple.mobile.assertion_agent.shim.remote

com.apple.mobile.notification_proxy.shim.remote

com.apple.iosdiagnostics.relay.shim.remote

com.apple.os_trace_relay.shim.remote

com.apple.internal.dt.coredevice.untrusted.tunnelservice

com.apple.PurpleReverseProxy.Conn.shim.remote

com.apple.atc.shim.remote

com.apple.dt.remotepairingdeviced.lockdown.shim.remote

com.apple.mobile.notification_proxy.remote

com.apple.internal.devicecompute.CoreDeviceProxy

com.apple.atc2.shim.remote

com.apple.RestoreRemoteServices.restoreserviced

com.apple.amfi.lockdown.shim.remote

com.apple.mobile.house_arrest.shim.remote

com.apple.GPUTools.MobileService.shim.remote

com.apple.streaming_zip_conduit.shim.remote

com.apple.mobile.file_relay.shim.remote

com.apple.mobile.installation_proxy.shim.remote

com.apple.webinspector.shim.remote

com.apple.mobile.insecure_notification_proxy.remote

com.apple.mobile.MCInstall.shim.remote

com.apple.mobile.storage_mounter_proxy.bridge

com.apple.crashreportmover.shim.remote

com.apple.PurpleReverseProxy.Ctrl.shim.remote

com.apple.mobile.mobile_image_mounter.shim.remote

com.apple.dt.remoteFetchSymbols

com.apple.carkit.remote-iap.service

com.apple.mobilebackup2.shim.remote

com.apple.mobile.insecure_notification_proxy.shim.remote

com.apple.mobileactivationd.shim.remote

com.apple.bluetooth.BTPacketLogger.shim.remote

com.apple.osanalytics.logTransfer


**********

com.apple.networkextension.control.plust file from sysdiagnose


Critical Domains:

_cheeserolling.apple.com

_woolyjumper.sd.apple.com

_basejumper.apple.com

_basejumper-vip.sd.apple.com

_basejumper.sd.apple.com

_locksmith.apple.com

_gdmf-staging-int.apple.com

_pallas-uat.rno.apple.com

_$pr2-pallas-staging-int-prz.apple.com

_livability-api.swe.apple.com

Apr 16, 2024 7:00 AM in response to Community User

pcsstatus file from sysdiagnose

*some data omitted


current_identities:

[note: the "Error Domain" for this list is "com.apple.protectedcloudstorage"]

AccessibilityVOPronunciation

AccessibilityVOPronunciation2

BluetoothCloudPairing

BluetoothCloudPairing2

com.apple.Accessibility

com.apple.accessibility.voicebanking

com.apple.amp-ae.metricskit.identifiers

com.apple.appleaccount.beneficiary

com.apple.appleaccount.custodian

com.apple.appleaccount.identity.private

com.apple.applemediaservices.metrics

com.apple.applemediaservices.multiuser

com.apple.Avatar

com.apple.biome.sync

com.apple.bluetooth.services

com.apple.callhistory.cloud-storage

com.apple.classroom.syncing

com.apple.coreidv.idv-data

com.apple.coreidv.service-messages

com.apple.diadem

com.apple.donotdisturbd

com.apple.familycontrols.container

com.apple.findmy

com.apple.FTMessageStoreService

com.apple.groupkit.crypto

com.apple.groupkit.groupaccesskeys

com.apple.groupkit.highsecuritygroupaccesskeys

com.apple.groupkit.metadata

com.apple.health.sync

com.apple.health.sync2

com.apple.homekit

com.apple.iad-cloudkit

com.apple.iCloud.CommCenter

com.apple.icloud.searchparty

com.apple.journal

com.apple.KeyValueService.EndToEndEncrypted.AllPlatforms

com.apple.knowledgestore

com.apple.knowledgestore2

com.apple.KTAccountKey

com.apple.locationd.clx

com.apple.mail.preferences

com.apple.managedassets

com.apple.Maps.Sync.secure

com.apple.mediaservicesbroker.container

com.apple.messages.internal.nicknames

com.apple.news.private.secure

com.apple.news.private.secure2

com.apple.passes.sync.secure

com.apple.pay.finance

com.apple.podcasts.secure

com.apple.private.ids.kt

com.apple.ProactivePredictionsBackup

com.apple.productkit.personalization

com.apple.Research.iCloud

com.apple.routined

com.apple.routined2

com.apple.SafariShared.Bookmarks

com.apple.SafariShared.CloudTabs

com.apple.SafariShared.History

com.apple.SafetyMonitor.SafetyCache

com.apple.security.keychain.shared

com.apple.seymour

com.apple.shazam.secure

com.apple.siri.data

com.apple.siri.knowledge

com.apple.siri.knowledge2

com.apple.siri.profile

com.apple.siri.profile2

com.apple.SocialLayer

com.apple.statuskit

com.apple.stickers.user

com.apple.stocks.private

com.apple.textinput.KeyboardServices.Secure

com.apple.textinput.KeyboardServices.Secure2

com.apple.tipsd

com.apple.transparency.storage

com.apple.tv.federated

com.apple.UsageTracking

com.apple.vo2max

com.apple.wallet.paymentservices

com.apple.wallet.paymentservices2

com.apple.watch.compass

com.apple.watch.setup

CoreSuggestionsPseudoEvents

CoreSuggestionsPseudoEvents2

DigitalHealth

iBooksSecureData

IDServicesEngram

ManateeSharingTesting

Messages

Messages2

Messages3

MessagesDevelopment

Raw (missing)

Rawhide

Rawhide3

SiriActions

[note: the "Error Domain" for this list is "NSOSStatusErrorDomain"]

AccessibilityVOPronunciation3

AccountData

Activities

Backup

BTAnnouncement

BTPairing

BulkMail

CloudKit

CloudKitApple

com.apple.icloud-appleid.privacy

com.apple.reminders

com.apple.VoiceMemosEncryptedContainer

Continuity

Escrow

FDE

Gaming

iAD

iCloudDrive

iMessage

KeyboardServices

Maildrop

MapsSync

MasterKey

News

Notes

Photos

Safari

Sharing

TTYCallHistory


identities:

com.apple.KTAccountKey [14 builds]


status_keychain:

    circle_status:  Error

    view_status:  

      PCS-Backup:  Unknown

      PCS-CloudKit:  Unknown

      PCS-Escrow:  Unknown

      PCS-FDE:  Unknown

      PCS-Feldspar:  Unknown

      PCS-iCloudDrive:  Unknown

      PCS-iMessage:  Unknown

      PCS-Maildrop:  Unknown

      PCS-MasterKey:  Unknown

      PCS-Notes:  Unknown

      PCS-Photos:  Unknown


status_keysync:

    clients: [blank]


status_messages:

    Error Domain:  com.apple.protectedcloudstorage

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to get rid of hackers on my iPhone

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.