Macbook Pro trying to call a suspicious address at boot. Please help.

My wifi equipment sent me warnings below immediately after I booted my MacBook Pro. I have no idea what this address/domain is about, and searching the 'net has not really been helpful.


Can anyone:

  • Identify these domain/addresses and their purpose or associations?
  • Suggest what apps or start-up processes might be making a call to that address?
  • Suggest a process to find the culprit that is trying to reach that address?

As I was trying to post this, I went back and noticed my wifi also blocked access to the following addresses:


cart.roadlakeescape.xyz

wp-admin.shopmirrorless.xyz

MacBook Pro 16″, macOS 26.1

Posted on Jan 2, 2026 9:11 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 2, 2026 9:26 AM

Download Etrecheck https://etrecheck.com/en/index.html


run it and post the report it generates here.


This will give us information on what processes are running that might be generating this traffic.


I'm guessing you may have downloaded and installed something that's causing this. It is not being caused by the base macOS installation.

Similar questions

12 replies
Question marked as Top-ranking reply

Jan 2, 2026 9:26 AM in response to Michael Battenfield

Download Etrecheck https://etrecheck.com/en/index.html


run it and post the report it generates here.


This will give us information on what processes are running that might be generating this traffic.


I'm guessing you may have downloaded and installed something that's causing this. It is not being caused by the base macOS installation.

Jan 6, 2026 9:50 AM in response to KiltedTim

EtreCheckPro version: 6.8.12 (68084)

Report generated: 2026-01-06 11:42:59

Download EtreCheckPro from https://etrecheck.com

Runtime: 3:49


Performance: Good


Problem: Other problem

Description: 

making calls to dangerous URLs


Major Issues:

    Anything that appears on this list needs immediate attention. 


    Time Machine backup out-of-date - The last Time Machine backup is over 10 days old.


Minor Issues:

    These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 


    Time Machine auto backup disabled - Time Machine auto backups are disabled.

    Configuration profiles found - This computer may have configuration profiles installed.

    Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

    Clean up - There are orphan files that could be removed.

    Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.

    System modifications - There are a large number of system modifications running in the background.

    Kernel extensions present - This computer has kernel extensions that may not work in the future.

    Sharing enabled - This computer has sharing services enabled that could be a security risk.


Hardware Information:

    MacBook Pro (16-inch, 2021)

        Status: Supported

    MacBook Pro Model: MacBookPro18,1

    Apple M1 Pro (m1 pro) CPU: 10-core

    16 GB RAM - Not upgradeable

    Battery: Health = Normal - Cycle count = 212


Video Information:

    Apple M1 Pro

        Color LCD 3456 x 2234

        C27F390 1920 x 1080


Drives:

    disk0 - APPLE SSD AP1024R 1.00 TB (Solid State - TRIM: Yes)

    Internal Apple Fabric NVM Express

    S.M.A.R.T. Details: 4% used, 93.30 TB written, 100% health, 18 unsafe shutdowns

        disk0s1 [APFS Container] 524 MB

            disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes)

                disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used)

                disk1s2 - xART (APFS) (6 MB used)

                disk1s3 - Hardware (APFS) (3 MB used)

                disk1s4 - Recovery (APFS) [Recovery] (20 KB used)

        disk0s2 [APFS Container] 994.66 GB

            disk3 [APFS Virtual drive] 994.66 GB (Shared by 6 volumes)

                disk3s1 (APFS) [APFS Container] (12.19 GB used)

                    disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (12.19 GB used)

                disk3s2 - Preboot (APFS) [APFS Preboot] (8.10 GB used)

                disk3s3 - Recovery (APFS) [Recovery] (1.23 GB used)

                disk3s4 - Update (APFS) (32 MB used)

                disk3s5 - Data (APFS) [APFS Virtual drive] (671.00 GB used)

                disk3s6 - VM (APFS) [APFS VM] (2.15 GB used)

        disk0s3 [APFS Container] 5.37 GB

            disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes)

                disk2s1 - Recovery (APFS) [Recovery] (2.10 GB used)

                disk2s2 - Update (APFS) (2 MB used)


Mounted Volumes:

    disk1s1 - iSCPreboot [APFS Preboot]

        Filesystem: APFS

        Mount point: /System/Volumes/iSCPreboot

        Used: 6 MB

        Shared values

            Size: 524 MB

            Free: 504 MB


    disk1s2 - xART

        Filesystem: APFS

        Mount point: /System/Volumes/xarts

        Used: 6 MB

        Shared values

            Size: 524 MB

            Free: 504 MB


    disk1s3 - Hardware

        Filesystem: APFS

        Mount point: /System/Volumes/Hardware

        Used: 3 MB

        Shared values

            Size: 524 MB

            Free: 504 MB


    disk3s1s1 - Macintosh HD [APFS Snapshot]

        Filesystem: APFS

        Mount point: /

        Read-only: Yes

        Used: 12.19 GB

        Shared values

            Size: 994.66 GB

            Free: 299.76 GB

            Available: 481.91 GB


    disk3s2 - Preboot [APFS Preboot]

        Filesystem: APFS

        Mount point: /System/Volumes/Preboot

        Used: 8.10 GB

        Shared values

            Size: 994.66 GB

            Free: 299.76 GB


    disk3s4 - Update

        Filesystem: APFS

        Mount point: /System/Volumes/Update

        Used: 32 MB

        Shared values

            Size: 994.66 GB

            Free: 299.76 GB


    disk3s5 - Data [APFS Virtual drive]

        Filesystem: APFS

        Mount point: /System/Volumes/Data

        Encrypted

        Used: 671.00 GB

        Shared values

            Size: 994.66 GB

            Free: 299.76 GB

            Available: 481.91 GB


    disk3s6 - VM [APFS VM]

        Filesystem: APFS

        Mount point: /System/Volumes/VM

        Used: 2.15 GB

        Shared values

            Size: 994.66 GB

            Free: 299.76 GB

Jan 6, 2026 9:52 AM in response to Michael Battenfield

  [Not Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2025-12-12)

        Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper

        Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app


    [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2025-12-12)

        Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper


    [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2023-10-19)

        Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper


    [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2023-10-10)

        Executable: /Applications/Microsoft Teams classic.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon


    [Loaded] com.mingjie.mjrecorder.agent.plist (AnvSoft Inc. - installed 2020-04-25)

        Executable: /Library/Audio/Plug-Ins/HAL/MJRecorderDevice.driver/Contents/MacOS/MJRecorder-agent


    [Running] com.muse.museservice.plist (Musecy SM Ltd - installed 2023-11-24)

        Executable: /Library/PrivilegedHelperTools/com.muse.museservice


    [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2025-12-28)

        Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon


Launch Agents:

    [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2025-10-19)

        Command: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud --showwindow=false --onOSstartup=true


    [Running] com.adobe.CCLibrary.plist (Adobe Inc. - installed 2025-12-11)

        Executable: /Library/Application Support/Adobe/Creative Cloud Libraries/CCLibrary.app/Contents/MacOS/CCLibraryXPCListener

        Location: /Library/Application Support/Adobe/Creative Cloud Libraries/CCLibrary.app


    [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2025-12-18)

        Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=logon


    [Loaded] com.adobe.ccxprocess.plist (Adobe Inc. - installed 2025-11-07)

        Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot


    [Running] com.amazon.sendtokindle.launcher.plist (Not signed - installed 2022-05-01)

        Executable: /usr/local/bin/stkLaunchAgent.sh


    [Loaded] com.audiojinglex.soundtree.agent.plist (Shuxun Liao - installed 2020-04-25)

        Executable: /Library/Audio/Plug-Ins/HAL/Audiojingle.driver/Contents/Resources/Audiojingleagent.xpc/Contents/MacOS/Audiojingleagent


    [Other] com.avid.ApplicationManager.plist (Not signed - installed 2016-11-14)

        Command: /Applications/Avid/Application Manager/AvidApplicationManager.app/Contents/MacOS/AvidApplicationManager --trayonly


    [Running] com.dymo.dcd.webservice.plist (Sanford, L.P. - installed 2025-12-04)

        Executable: /Applications/DYMO.WebApi.Mac.Host.app/Contents/MacOS/DYMO.WebApi.Mac.Host


    [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-06)

        <Empty>


    [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-06)

        <Empty>


    [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2025-11-21)

        Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent


    [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2025-11-20)

        Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater


    [Loaded] com.microsoft.SyncReporter.plist (Microsoft Corporation - installed 2025-12-16)

        Executable: /Applications/OneDrive.app/Contents/SyncReporter.app/Contents/MacOS/SyncReporter


    [Not Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2025-12-11)

        Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent

        Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app


    [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2025-12-12)

        Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent


    [Running] com.openai.chat-helper.plist (OpenAI, L.L.C. - installed 2025-12-29)

        Executable: /Applications/ChatGPT.app/Contents/Resources/ChatGPTHelper

        Location: /Applications/ChatGPT.app

Jan 6, 2026 9:56 AM in response to Michael Battenfield

Applications:

    805 Apple apps

    373 3rd party apps

    95 x86-only apps

    7 unsigned apps


App Extensions:

    Widgets:

        [Loaded] RadarScope-Widget - /Applications/RadarScope.app

        [Loaded] WordWidgetKit - /Applications/Microsoft Word.app

        [Loaded] Goodnotes - /Applications/Goodnotes.app

        [Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app

        [Loaded] NowPlayingWidget - /Applications/Audible.app

        [Loaded] ChatGPT - /Applications/ChatGPT.app

        [Loaded] PowerPointWidgetKit - /Applications/Microsoft PowerPoint.app

        [Loaded] CalendarWidgetExtension - /Applications/Microsoft Outlook.app

        [Loaded] WidgetExtension Production - /Applications/X.app


    Plugins:

        [Loaded] Siri Extension - /Applications/Audible.app

        [Loaded] Intents - /Applications/WhatsApp.app

        [Loaded] RadarScope-Intents - /Applications/RadarScope.app


    VPNs:

        [Loaded] PacketTunnel - /Applications/VPN Unlimited.app

        [Loaded] WireguardPacketTunnel - /Applications/VPN Unlimited.app


    Finder sync extensions:

        [Not Loaded] Dropbox Finder Extension - /Applications/Dropbox.app

        [Loaded] GraphicConverter 12 Finder Integration - /Applications/GraphicConverter 12.app

        [Loaded] Adobe Content Synchronizer Finder Extension - /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app

        [Not Loaded] OneDrive Finder Integration - /Applications/OneDrive.app


    Notification providers:

        [Loaded] ServiceExtension - /Applications/WhatsApp.app

        [Loaded] MediaNotificationService - /Applications/Lorex Classic.app

        [Loaded] TwitterNotificationServiceExtension - /Applications/X.app

        [Loaded] TwitterNotificationContentExtension - /Applications/X.app

        [Loaded] AudibleNotificationServiceExtension - /Applications/Audible.app

        [Loaded] BlinkNotificationService - /Applications/Blink.app

        [Loaded] ImageNotification - /Applications/Fortis+.app

        [Loaded] AnimatedSnapshotContent - /Applications/Blink.app


    Photo editing extensions:

        [Loaded] Edit with GraphicConverter 12 - /Applications/GraphicConverter 12.app

        [Loaded] Skitch Markup - /Applications/Skitch.app

        [Loaded] GraphicConverter 12 Xe8472 - /Applications/GraphicConverter 12.app


    File providers:

        [Loaded] Dropbox - /Applications/Dropbox.app

        [Loaded] OneDrive File Provider - /Applications/OneDrive.app


    Share services:

        [Loaded] Gifski - /Applications/Gifski.app

        [Loaded] X - /Applications/X.app

        [Loaded] Spark - /Applications/Spark.app

        [Loaded] Send to Kindle - /Applications/Amazon Kindle.app

        [Loaded] Open with GraphicConverter - /Applications/GraphicConverter 12.app

        [Loaded] Telegram - /Applications/Telegram.app

        [Loaded] Dropbox Transfer - /Applications/Dropbox.app


    Action services:

        [Loaded] Skitch Markup - /Applications/Skitch.app


    Ad-blockers:

        [Loaded] Trend Micro Ad Blocker Engine - /Applications/Ad Block One.app


    Safari extensions:

        [Loaded] Minimal Twitter Extension - /Applications/Minimal Twitter.app

        [Loaded] PayPal Honey - /Applications/PayPal Honey.app

        [Not Loaded] Coupert for Safari - /Applications/Coupert For Safari.app

        [Loaded] Grammarly for Safari Extension - /Applications/Grammarly for Safari.app

        [Loaded] Capital One Shopping - /Applications/Capital One Shopping.app

        [Loaded] Trend Micro Ad Blocker Dashboard - /Applications/Ad Block One.app

        [Loaded] Cultivate Extension - /Applications/Cultivate.app

        [Loaded] safari-extension - /Applications/Capital One Shopping.app


    QuickLook Previews:

        [Loaded] EtreCheckQuickLook - /Applications/EtreCheckPro-2.app

            com.etresoft.etrecheck4 *.etrecheck


Internet Plug-ins:

    Flip4Mac WMV Plugin: 3.1.0.24 (? - installed 2013-04-10)


Audio Plug-ins:

    MAmp: (Vojtech Meluzin - installed 2022-12-15)

    MXXX: (Vojtech Meluzin - installed 2022-12-15)

    MFreeformAnalogEq: (Vojtech Meluzin - installed 2022-12-15)

    MSuperLooper: (Vojtech Meluzin - installed 2022-12-15)

    MStereoExpander: (Vojtech Meluzin - installed 2022-12-15)

    MAutoPitch: (Vojtech Meluzin - installed 2022-12-15)

    MVibratoMB: (Vojtech Meluzin - installed 2022-12-15)

    MTremoloMB: (Vojtech Meluzin - installed 2022-12-15)

    MTuner: (Vojtech Meluzin - installed 2022-12-15)

    MSaturator: (Vojtech Meluzin - installed 2022-12-15)

    ...and 124 more.



Jan 6, 2026 9:57 AM in response to Michael Battenfield

CoreMediaIO Plug-ins:

    EpocCamPlugIn: 1.1 (? - installed 2020-04-08)


Backup:

    Skip System Files: No

    Destinations: 

        T***************7 [Local] (Last used)

            Total size: 2.00 TB

            Total number of backups: 27

            Oldest backup: 2017-02-11 03:20:08

            Last backup: 2019-04-11 02:09:37


    3rd party backup: Carbon Copy Cloner


Performance:

    System Load: 8.59 (1 min ago) 10.45 (5 min ago) 9.12 (15 min ago)

    Nominal I/O usage: 2.11 MB/s

    File system: 10.92 seconds

    Write speed: 1478 MB/s

    Read speed: 5678 MB/s


CPU Usage Snapshot:

    Type Overall

    System: 7 %

    User: 17 %

    Idle: 75 %


Top Processes Snapshot by CPU:

    Process (count) CPU (Source - Location)

    DrCleanerProPlus 40.42 % (App Store)

    WindowServer 23.54 % (Apple)

    Mail 20.48 % (Apple)

    suggestd 14.98 % (Apple)

    ControlCenter 13.40 % (Apple)


Top Processes Snapshot by Memory:

    Process (count) RAM usage (Source - Location)

    com.apple.WebKit.WebContent (13) 1.23 GB (Apple)

    EtreCheckPro 896 MB (Etresoft, Inc.)

    Brave Browser Helper (Renderer) (4) 553 MB (Brave Software, Inc.)

    Mail 327 MB (Apple)

    com.apple.appkit.xpc.openAndSavePanelService (6) 255 MB (Apple)


Top Processes Snapshot by Network Use:

    Process Input / Output (Source - Location)

    mDNSResponder 41 MB / 29 MB (Apple)

    Mail 35 MB / 13 MB (Apple)

    rapportd 343 KB / 11 MB (Apple)

    Stocks 11 MB / 246 KB (Apple)

    apsd 807 KB / 2 MB (Apple)


Top Processes Snapshot by Energy Use:

    Process (count) Energy (0-100) (Source - Location)

    Passwords 17 (Apple)

    DrCleanerProPlus 12 (App Store)

    WindowServer 10 (Apple)

    com.apple.WebKit.WebContent (13) 10 (Apple)

    secd 7 (Apple)


Virtual Memory Information:

    Physical RAM: 16 GB


    Free RAM: 104 MB

    Used RAM: 12.72 GB

    Cached files: 3.18 GB


    Available RAM: 3.28 GB

    Swap Used: 301 MB

Jan 6, 2026 9:50 AM in response to Michael Battenfield

USB:

    USB 3.1 Bus

        <Empty>


    USB 3.1 Bus

        <Empty>


    USB 3.1 Bus

        <Empty>


Network:

    Interface en4: Ethernet Adapter (en4)

    Interface en5: Ethernet Adapter (en5)

    Interface en6: Ethernet Adapter (en6)

    Interface en0: Wi-Fi

        802.11 a/b/g/n/ac/ax

    Interface en7: iPhone

    Interface bridge0: Thunderbolt Bridge

    Interface en8: iPad


    iCloud Quota: 619.60 GB available


    Printer sharing: Enabled


    Firewall:

        Blocked apps: None

        Stealth mode: Enabled


System Software:

    macOS Tahoe 26.1 (25B78) 

    Installed 2025-11-12

    Time since boot: About 3 days


Configuration Files:

    /etc/hosts - Count: 9


Configuration Profiles:

    com.apple.mail.managed

        SMIMEEnabled

        OutgoingMailServerUseSSL

        OutgoingPassword

        PreventAppSheet

        EmailAccountName

        EmailAddress

        IncomingMailServerUseSSL

        EmailAccountType

        EmailAccountDescription

        OutgoingMailServerPortNumber

        IncomingMailServerHostName

        IncomingPassword

        IncomingMailServerAuthentication

        OutgoingMailServerHostName

        IncomingMailServerUsername

        PreventMove

        OutgoingMailServerAuthentication

        IncomingMailServerPortNumber

        OutgoingMailServerUsername


    com.apple.mail.managed

        SMIMEEnabled

        OutgoingMailServerUseSSL

        OutgoingPassword

        PreventAppSheet

        EmailAccountName

        EmailAddress

        IncomingMailServerUseSSL

        EmailAccountType

        EmailAccountDescription

        OutgoingMailServerPortNumber

        IncomingMailServerHostName

        IncomingPassword

        IncomingMailServerAuthentication

        OutgoingMailServerHostName

        IncomingMailServerUsername

        PreventMove

        OutgoingMailServerAuthentication

        IncomingMailServerPortNumber

        OutgoingMailServerUsername


    com.apple.mail.managed

        SMIMEEnabled

        OutgoingMailServerUseSSL

        PreventAppSheet

        EmailAccountName

        EmailAddress

        IncomingMailServerUseSSL

        EmailAccountType

        EmailAccountDescription

        OutgoingMailServerPortNumber

        IncomingMailServerHostName

        IncomingPassword

        IncomingMailServerAuthentication

        OutgoingPasswordSameAsIncomingPassword

        OutgoingMailServerHostName

        IncomingMailServerUsername

        PreventMove

        OutgoingMailServerAuthentication

        IncomingMailServerPortNumber

        OutgoingMailServerUsername


    com.apple.mail.managed

        SMIMEEnabled

        OutgoingMailServerUseSSL

        PreventAppSheet

        EmailAccountName

        EmailAddress

        IncomingMailServerUseSSL

        EmailAccountType

        EmailAccountDescription

        OutgoingMailServerPortNumber

        IncomingMailServerHostName

        IncomingPassword

        IncomingMailServerAuthentication

        OutgoingPasswordSameAsIncomingPassword

        OutgoingMailServerHostName

        IncomingMailServerUsername

        PreventMove

        OutgoingMailServerAuthentication

        IncomingMailServerPortNumber

        OutgoingMailServerUsername


    com.apple.mail.managed

        SMIMEEnabled

        OutgoingMailServerUseSSL

        OutgoingPassword

        PreventAppSheet

        EmailAccountName

        EmailAddress

        IncomingMailServerUseSSL

        EmailAccountType

        EmailAccountDescription

        OutgoingMailServerPortNumber

        IncomingMailServerHostName

        IncomingPassword

        IncomingMailServerAuthentication

        OutgoingMailServerHostName

        IncomingMailServerUsername

        PreventMove

        OutgoingMailServerAuthentication

        IncomingMailServerPortNumber

        OutgoingMailServerUsername


Notifications:

    Creative Cloud.app

        3 notifications


Security:

    Gatekeeper: App Store and identified developers

    System Integrity Protection: Enabled

    Secure Boot: Reduced Security


    Antivirus software: Apple and Malwarebytes


    Printer sharing: Enabled


Unsigned Files:

    Launchd: /Library/LaunchAgents/com.amazon.sendtokindle.launcher.plist

        Executable: /usr/local/bin/stkLaunchAgent.sh

        Details: Exact match found in the legitimate list - probably OK


    Launchd: ~/Library/LaunchAgents/com.cisco.videoguard6.uninstall.plist

        Command: /bin/sh /tmp/cisco_videoguard6/condUninstall.sh

        Details: Exact match found in the legitimate list - probably OK



Jan 6, 2026 9:51 AM in response to Michael Battenfield

System Extensions:

    [Not Loaded] Malwarebytes Engine - version 5.19.0 (Malwarebytes Corporation - installed 2025-11-21)

        Application: /Applications/Malwarebytes.app - version 5.19.0 (Malwarebytes Corporation - installed 2025-11-21)

        Description: The Malwarebytes Engine extension manages your connection to the Malwarebytes VPN service.


    [Running] NetworkFilterExtension - version 2.2 (App Store - installed 2024-10-12)

        Application: /Applications/Firewall.app - version 0.1.7 (App Store - installed 2024-10-12)


Kernel Extensions:

    /Applications/Disk Drill.app

        [Not Loaded] SecureDisk.kext - com.cleverfiles.SecureDisk (Justin Johnson, 1.0 - SDK 10.14)

        [Not Loaded] SecureDisk_11.kext - com.cleverfiles.SecureDisk-11 (Justin Johnson, 1.0 - SDK 13)


    /Applications/Recoverit.app

        [Not Loaded] WondershareDriver.kext - com.wondershare.driver (Wondershare Technology Group Co.,LTD, 3.0.0 - SDK 10.14)


    /Library/Extensions

        [Not Loaded] LeawoAudioDevice.kext - com.Leawo.driver.AudioDevice (shanghai oxfold network Co., Ltd, 1.0.0d1 - SDK 10.11)

        [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (HP Inc., 3.4.0)

        [Not Loaded] SamsungMagicianPSSDDriver.kext - com.samsung.magicianpssd.driver (Samsung Electronics Co., Ltd., 9.0.0 - SDK 12)

        [Not Loaded] SamsungMagicianPSSDDriverX.kext - com.samsung.magicianpssd.driverX (Samsung Electronics Co., Ltd., 9.0.0 - SDK 12)

        [Not Loaded] CIJUSBLoad.kext - jp.co.canon.ij.print.CIJUSBLoad (Canon Inc., 21.4.10 - SDK 10.9)


System Launch Daemons:

    [Not Loaded] 43 Apple tasks

    [Loaded] 200 Apple tasks

    [Running] 181 Apple tasks

    [Other] One Apple task


System Launch Agents:

    [Not Loaded] 20 Apple tasks

    [Loaded] 215 Apple tasks

    [Running] 238 Apple tasks

    [Other] One Apple task


Launch Daemons:

    [Running] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2025-10-19)

        Executable: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2


    [Running] com.adobe.agsservice.plist (Adobe Inc. - installed 2025-12-18)

        Executable: /Library/Application Support/Adobe/AdobeGCClient/AGSService


    [Loaded] com.audiojinglex.soundtree.agent.plist (Shuxun Liao - installed 2020-04-25)

        Executable: /Library/Audio/Plug-Ins/HAL/Audiojingle.driver/Contents/Resources/Audiojingleagent.xpc/Contents/MacOS/Audiojingleagent


    [Running] com.bombich.ccc.helper.plist (Bombich Software, Inc. - installed 2025-12-09)

        Executable: /Applications/Carbon Copy Cloner.app/Contents/XPCServices/com.bombich.ccc.helper.xpc/Contents/MacOS/com.bombich.ccc.helper

        Location: /Applications/Carbon Copy Cloner.app


    [Running] com.cleverfiles.BackService_11.plist (Justin Johnson - installed 2025-11-17)

        Executable: /Applications/Disk Drill.app/Contents/Resources/BackService_11.app/Contents/MacOS/cfbackd

        Location: /Applications/Disk Drill.app


    [Loaded] com.dymo.dymo-connect.helper.plist (Sanford, L.P. - installed 2025-12-04)

        Executable: /Library/PrivilegedHelperTools/com.dymo.dymo-connect.helper


    [Running] com.dymo.pnpd.plist (Sanford, L.P. - installed 2025-03-05)

        Executable: /Library/Printers/DYMO/Utilities/pnpd


    [Loaded] com.google.GoogleUpdater.wake.system.plist (Google LLC - installed 2025-12-03)

        Command: /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2 --system


    [Not Loaded] com.google.keystone.daemon.plist (Not signed - installed 2023-12-06)

        <Empty>


    [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2025-11-21)

        Command: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon -i Malwarebytes-Mac-5.19.0.3531.pkg


    [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2025-11-21)

        Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon


    [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2025-11-20)

        Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon


    

Jan 6, 2026 9:54 AM in response to Michael Battenfield

 [Running] com.owc.DockEjector.plist (Other World Computing - installed 2025-02-14)

        Executable: /Applications/OWC Dock Ejector.app/Contents/MacOS/OWC Dock Ejector


    [Running] ins.check.check-ins-printing.plist (QZ INDUSTRIES LLC - installed 2024-12-20)

        Command: /Applications/Check-Ins Printing.app/Contents/MacOS/Check-Ins Printing --honorautostart


    [Running] jp.co.canon.ScanGearMF.appl.Canon-MF-Scan-Agent.plist (Canon Inc. - installed 2020-10-14)

        Executable: /Library/Printers/Canon/MFScanner/Utilities/Canon MF Scan Agent.app/Contents/MacOS/Canon MF Scan Agent


    [Running] jp.co.canon.ScanGearMF.appl.Canon-MFSU-Agent.plist (Canon Inc. - installed 2020-10-14)

        Executable: /Library/Printers/Canon/MFScanner/Utilities/Canon MFSU Agent.app/Contents/MacOS/Canon MFSU Agent


    [Loaded] us.zoom.updater.login.check.plist (Zoom Video Communications, Inc. - installed 2025-12-28)

        Command: /Applications/zoom.us.app/Contents/Library/LaunchAgents/ZoomUpdater.app/Contents/MacOS/ZoomUpdater --login-check


    [Loaded] us.zoom.updater.plist (Zoom Video Communications, Inc. - installed 2025-12-28)

        Command: /Applications/zoom.us.app/Contents/Library/LaunchAgents/ZoomUpdater.app/Contents/MacOS/ZoomUpdater --update


User Launch Agents:

    [Running] Proton Mail Bridge.plist (Proton AG - installed 2025-07-21)

        Command: /Applications/Proton Mail Bridge.app/Contents/MacOS/Proton Mail Bridge --no-window


    [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2025-12-18)

        Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=scheduled


    [Not Loaded] com.adobe.ccxprocess.plist (Adobe Inc. - installed 2025-11-07)

        Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot


    [Loaded] com.cisco.videoguard6.plist (Cisco Video Technologies Israel Ltd - installed 2025-10-28)

        Command: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard6/VideoGuard6.bundle/Contents/Resources/setupServer.sh


    [Loaded] com.cisco.videoguard6.uninstall.plist (Not signed - installed 2025-10-28)

        Command: /bin/sh /tmp/cisco_videoguard6/condUninstall.sh


    [Other] com.cisco.videoguardmonitor.plist (Cisco Video Technologies Israel Ltd - installed 2025-10-28)

        Command: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuardMonitor/VideoGuardMonitor.bundle/Contents/Resources/launch.sh


    [Loaded] com.dropbox.DropboxUpdater.wake.plist (Dropbox, Inc. - installed 2026-01-05)

        Command: ~/Library/Application Support/Dropbox/DropboxUpdater/Current/DropboxUpdater.app/Contents/MacOS/DropboxUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2


    [Not Loaded] com.dropbox.dropboxmacupdate.agent.plist (Not signed - installed 2025-03-07)

        <Empty>


    [Not Loaded] com.dropbox.dropboxmacupdate.xpcservice.plist (Not signed - installed 2025-03-07)

        <Empty>



Jan 6, 2026 9:55 AM in response to Michael Battenfield

  [Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2025-12-03)

        Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2


    [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2024-08-16)

        <Empty>


    [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2024-08-16)

        <Empty>


    [Running] com.grammarly.ProjectLlama.Shepherd.plist (Grammarly, Inc - installed 2024-01-17)

        Executable: /Applications/Grammarly Desktop.app/Contents/Library/LaunchAgents/Grammarly Desktop Helper.app/Contents/MacOS/Grammarly Desktop Helper


    [Running] com.imobie.AnyTransToolHelpers.plist (iMobie Inc. - installed 2024-08-12)

        Executable: ~/Library/Application Support/com.imobie.AnyTrans/AnyTransToolHelpers.app/Contents/MacOS/AnyTransToolHelpers


    [Other] com.lminhtm.tempmonitor.helper.plist (Not signed - installed 2019-08-07)

        Executable: /Applications/Temp Monitor.app/Contents/Components/Temp Monitor Helper.app/Contents/MacOS/Temp Monitor Helper


    [Other] com.lminhtm.tempmonitor.menu.plist (Not signed - installed 2019-08-07)

        Executable: /Applications/Temp Monitor.app/Contents/Components/Temp Monitor Menu.app/Contents/MacOS/Temp Monitor Menu


    [Loaded] com.logos.LogosIndexer.plist (Faithlife Corporation - installed 2021-01-04)

        Executable: /Applications/Logos.app/Contents/MacOS/LogosIndexer.app/Contents/MacOS/LogosIndexer


    [Not Loaded] com.movavi.converteragent.startup.plist (Not signed - installed 2021-02-03)

        Command: /usr/bin/open '/Applications/Movavi Video Converter 21 Premium.app/Contents/MacOS/ConverterAgent.app'


    [Not Loaded] com.movavi.maccleaner2.rammonitor.plist (Not signed - installed 2020-10-09)

        Command: /usr/bin/open -F -g '/Applications/Movavi Mac Cleaner 2.app/Contents/MacOS/Agent.app' --args --ram-monitor


    [Not Loaded] com.movavi.maccleaner2.scheduler.plist (Not signed - installed 2020-10-09)

        Command: /usr/bin/open -F -g '/Applications/Movavi Mac Cleaner 2.app/Contents/MacOS/Agent.app' --args --scheduler


    [Not Loaded] com.movavi.maccleaner2.trashmonitor.plist (Not signed - installed 2020-10-09)

        Command: /usr/bin/open -F -g '/Applications/Movavi Mac Cleaner 2.app/Contents/MacOS/Agent.app' --args --trash-monitor


    [Other] com.movavi.maccleaner2.trayagent.plist (Not signed - installed 2020-10-09)

        Command: /Applications/Movavi Mac Cleaner 2.app/Contents/MacOS/TrayAgent.app/Contents/MacOS/TrayAgent --tray-agent


    [Running] com.samsung.magicianapp.plist (Samsung Electronics Co., Ltd. - installed 2025-12-02)

        Executable: ~/Library/Application Support/Samsung/Samsung Magician/SamsungMagician.app/Contents/Resources/StartSamsungMagician


    [Running] com.samsung.magiciansvc.plist (Samsung Electronics Co., Ltd. - installed 2025-12-02)

        Executable: ~/Library/Application Support/Samsung/Samsung Magician/SamsungMagician.app/Contents/Service/SamsungMagicianSVC.app/Contents/MacOS/SamsungMagicianSVC


    [Loaded] com.valvesoftware.steamclean.plist (Valve Corporation - installed 2024-09-20)

        Command: ~/Library/Application Support/Steam/SteamApps/steamclean Public



Jan 6, 2026 9:55 AM in response to Michael Battenfield

User Login Items:

    [Not Loaded] AppCleaner SmartDelete (Julien Ramseier - installed 2019-04-27)

        Modern Login Item

        /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app


    [Running] CCC Dashboard (Bombich Software, Inc. - installed 2025-12-29)

        Modern Login Item

        /Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC Dashboard.app


    [Not Loaded] SmartDaemon (Justin Johnson - installed 2025-12-13)

        Modern Login Item

        /Applications/Disk Drill.app/Contents/Library/LoginItems/SmartDaemon.app


    [Loaded] TCLoginItemHelperProPlus (App Store - installed 2025-12-14)

        Modern Login Item

        /Applications/DrCleanerProPlus.app/Contents/Library/LoginItems/TCLoginItemHelperProPlus.app


    [Running] Dropbox (Dropbox, Inc. - installed 2025-12-31)

        Application

        /Applications/Dropbox.app


    [Not Loaded] Friendly Social Launcher (App Store - installed 2024-07-08)

        Modern Login Item

        /Applications/Friendly Social.app/Contents/Library/LoginItems/Friendly Social Launcher.app


    [Not Loaded] GRLoginHelper (Grammarly, Inc - installed 2024-01-17)

        Modern Login Item

        /Applications/Grammarly Desktop.app/Contents/Library/LoginItems/GRLoginHelper.app


    [Loaded] LauncherApplication (App Store - installed 2023-03-03)

        Modern Login Item

        /Applications/Hidden Bar.app/Contents/Library/LoginItems/LauncherApplication.app


    [Not Loaded] LoginLauncher (Musecy SM Ltd - installed 2023-01-06)

        Modern Login Item

        /Applications/Muse Hub.app/Contents/Library/LoginItems/LoginLauncher.app


    [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2025-12-16)

        Modern Login Item

        /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app


    [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2025-12-16)

        Modern Login Item

        /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app


    [Not Loaded] PDFgearHelper (App Store - installed 2025-12-10)

        Modern Login Item

        /Applications/PDFgear.app/Contents/Library/LoginItems/PDFgearHelper.app


    [Not Loaded] Skitch Helper (Skitch Inc - installed 2019-04-27)

        Modern Login Item

        /Applications/Skitch.app/Contents/Library/LoginItems/J8RPQ294UB.com.skitch.SkitchHelper.app


    [Not Loaded] SpeedTestHelper (App Store - installed 2023-03-12)

        Modern Login Item

        /Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app


    [Not Loaded] StartUpHelper (Spotify - installed 2023-11-24)

        Modern Login Item

        /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app


    [Loaded] Launcher (App Store - installed 2025-12-10)

        Modern Login Item

        /Applications/VPN Unlimited.app/Contents/Library/LoginItems/Launcher.app


    [Running] Weather Widget (App Store - installed 2024-09-29)

        Application

        /Applications/Weather Widget.app


    [Not Loaded] WeatherWidgetHelper (App Store - installed 2024-09-29)

        Modern Login Item

        /Applications/Weather Widget.app/Contents/Library/LoginItems/WeatherWidgetHelper.app


    [Not Loaded] LaunchAtLoginHelper (App Store - installed 2024-10-12)

        Modern Login Item

        /Applications/scaler.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app


    [Not Loaded] HP Device Monitor (HP Inc. - installed 2023-11-24)

        Modern Login Item

        /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app


    [Running] PasswordsMenuBarExtra (Apple - installed 2025-10-28)

        Modern Login Item

        /System/Applications/Passwords.app/Contents/Library/LoginItems/PasswordsMenuBarExtra.app


    [Not Loaded] WeatherMenu (Apple - installed 2025-10-28)

        Modern Login Item

        /System/Applications/Weather.app/Contents/Library/LoginItems/WeatherMenu.app



This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Macbook Pro trying to call a suspicious address at boot. Please help.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.