Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Check for presence of malware/adware/spyware

I am currently looking if I have any adware/malware/spyware on my computer. I have followed the steps on other discussions like removing the .agent.plist and other daemon.plist. Right now I'm not seeing any symptoms (like force redirect to website or just completely frozen screen) but I'm not sure if there's anything else left. Could anyone please check it for me? Thank you!


EtreCheck version: 2.9.11 (264)

Report generated 2016-04-25 00:02:30

Download EtreCheck from https://etrecheck.com

Runtime 3:13

Performance: Good


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Problem: No problem - just checking


Hardware Information:

MacBook Pro (13-inch, Mid 2012)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro9,2

1 2.5 GHz Intel Core i5 CPU: 2-core

4 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

2 GB DDR3 1600 MHz ok

BANK 1/DIMM0

2 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en1: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 548


Video Information:

Intel HD Graphics 4000

Color LCD 1280 x 800


System Software:

OS X Yosemite 10.10 (14A389) - Time since boot: less than an hour


Disk Information:

APPLE HDD HTS547550A9E384 disk0 : (500.11 GB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Media (disk0s4) /Volumes/Media : 160.00 GB (152.46 GB free)

Macintosh HD 2 (disk0s5) /Volumes/Macintosh HD 2 : 114.62 GB (114.40 GB free)

Macintosh HD 3 (disk0s6) /Volumes/Macintosh HD 3 : 114.22 GB (16.80 GB free)

Macintosh HD (disk1) / : 109.63 GB (34.57 GB free)

Core Storage: disk0s2 110.00 GB Online


MATSHITADVD-R UJ-8A8 disk2 : (196.8 MB) ()


USB Information:

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Computer, Inc. IR Receiver

Apple Inc. Apple Internal Keyboard / Trackpad


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Gatekeeper:

Mac App Store


Kernel Extensions:

/System/Library/Extensions

[not loaded] com.devguru.driver.SamsungComposite (1.4.18 - SDK 10.6 - 2016-03-22) [Support]


/System/Library/Extensions/ssuddrv.kext/Contents/PlugIns

[not loaded] com.devguru.driver.SamsungACMControl (1.4.18 - SDK 10.6 - 2014-01-27) [Support]

[not loaded] com.devguru.driver.SamsungACMData (1.4.18 - SDK 10.6 - 2014-01-27) [Support]

[not loaded] com.devguru.driver.SamsungMTP (1.4.18 - SDK 10.5 - 2014-01-27) [Support]

[not loaded] com.devguru.driver.SamsungSerial (1.4.18 - SDK 10.6 - 2014-01-27) [Support]


System Launch Agents:

[not loaded] 5 Apple tasks

[loaded] 142 Apple tasks

[running] 56 Apple tasks


System Launch Daemons:

[not loaded] 45 Apple tasks

[loaded] 137 Apple tasks

[running] 80 Apple tasks


Launch Daemons:

[loaded] com.adobe.SwitchBoard.plist (2012-08-11) [Support]

[loaded] com.adobe.fpsaud.plist (2016-04-05) [Support]

[loaded] com.malwarebytes.MBAMHelperTool.plist (2016-04-11) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2014-09-20) [Support]


User Launch Agents:

[failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist

[failed] com.facebook.videochat.[redacted].plist (2014-08-13) [Support]

[loaded] com.google.keystone.agent.plist (2016-03-02) [Support]

[running] com.spotify.webhelper.plist (2016-04-24) [Support]


User Login Items:

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Android File Transfer Agent Application (~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Spotify Application Hidden (/Applications/Spotify.app)


Other Apps:

[running] com.google.Chrome.5996

[running] com.google.android.mtpagent.98864

[running] com.spotify.client.49448

[loaded] 357 Apple tasks

[running] 163 Apple tasks


Internet Plug-ins:

FlashPlayer-10.6: 21.0.0.213 - SDK 10.6 (2016-04-08) [Support]

QuickTime Plugin: 7.7.3 (2014-11-06)

Flash Player: 21.0.0.213 - SDK 10.6 (2016-04-08) Outdated! Update

EPPEX Plugin: 4.1.0.0 (2011-07-26) [Support]

Default Browser: 600 - SDK 10.10 (2014-11-06)

SharePointBrowserPlugin: 14.3.4 - SDK 10.6 (2013-05-19) [Support]

Silverlight: 5.1.30317.0 - SDK 10.6 (2014-05-20) [Support]

JavaAppletPlugin: Java 8 Update 65 build 17 (2015-11-09) Check version


3rd Party Preference Panes:

Flash Player (2016-04-05) [Support]

Java (2015-11-09) [Support]


Time Machine:

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 109.63 GB Disk used: 75.06 GB

Destinations:

Macintosh HD 3 [Local]

Total size: 114.22 GB

Total number of backups: 60

Oldest backup: 7/1/15, 4:44 PM

Last backup: 4/24/16, 6:40 PM

Size of backup disk: Too small

Backup size 114.22 GB < (Disk used 75.06 GB X 3)


Top Processes by CPU:

5% mdworker(9)

3% kernel_task

3% Google Chrome

2% Google Chrome Helper(6)

2% fontd


Top Processes by Memory:

766 MB Google Chrome Helper(6)

447 MB kernel_task

209 MB Google Chrome

147 MB mdworker(9)

119 MB imagent


Virtual Memory Information:

320 MB Free RAM

3.69 GB Used RAM (1.02 GB Cached)

0 B Swap Used


Diagnostics Information:

Apr 24, 2016, 11:19:51 PM Self test - passed

Apr 24, 2016, 07:05:27 PM /Library/Logs/DiagnosticReports/storedownloadd_2016-04-24-190527_[redacted].cpu _resource.diag [Details]

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/st oredownloadd

Apr 23, 2016, 11:14:57 PM ~/Library/Logs/DiagnosticReports/VTDecoderXPCService_2016-04-23-231457_[redacte d].crash

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDeco derXPCService.xpc/Contents/MacOS/VTDecoderXPCService

MacBook Pro, Mac OS X (10.0.x)

Posted on Apr 25, 2016 9:33 AM

Reply
Question marked as Best reply

Posted on Apr 27, 2016 4:03 PM

if you're not seeing evidence of malware (and I'm not seeing evidence of it in the etrecheck report) you can read these post for further insight.

Viruses, Trojans, Malware - and other aspects of Internet Security


Apple security updates - Apple Support


http://www.reedcorner.net/mmg/


http://www.thexlab.com/faqs/malspyware.html

8 replies
Question marked as Best reply

Apr 27, 2016 4:03 PM in response to _LittlePanda_

if you're not seeing evidence of malware (and I'm not seeing evidence of it in the etrecheck report) you can read these post for further insight.

Viruses, Trojans, Malware - and other aspects of Internet Security


Apple security updates - Apple Support


http://www.reedcorner.net/mmg/


http://www.thexlab.com/faqs/malspyware.html

May 5, 2016 8:42 AM in response to macjack

Hi everyone,


I have a similar problem. My Macbook Pro is installed with Avast Free Mac Security. I scanned my download folder from time to time.


Recently, my MBP occasionally has humming sound, probably the CPU fan, out of nowhere. The room is cool and well ventilated, I have no program running except word, excel, and google chrome. It happens 3, 4 times a day.


My questions are: 1) Is this because of malware/spyware, and how to eliminate the noise. 2) Which antivirus/anti-malware/anti-spyware will protect my MBP.


Thank you for any advices.

Check for presence of malware/adware/spyware

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.