Hacked 6 months ago. Think its happening again, help!

My computer was hacked back in February to some disastrous and criminal consequences. I followed all the necessary procedures with credit reports, banks, authorities and such and then did a full system delete, wiped hard drive clean and reinstalled from scratch, not even bringing old files back to the computer. Strange things have started happening again recently and I just ran an etre check.


Does anyone know how to interpret an Etre Check well enough to advise?


EtreCheck version: 2.9.12 (265)

Report generated 2016-06-17 17:29:22

Download EtreCheck from https://etrecheck.com

Runtime 1:35

Performance: Excellent


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Check Apple signatures: Enabled

Ignore known Apple failures: Disabled

Hide Apple tasks: Disabled


Problem: Apps are crashing


Hardware Information:

MacBook Pro (Retina, Mid 2012)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro10,1

1 2.6 GHz Intel Core i7 CPU: 4-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 641


Video Information:

Intel HD Graphics 4000

Color LCD 2880 x 1800

NVIDIA GeForce GT 650M - VRAM: 1024 MB


System Software:

OS X El Capitan 10.11.5 (15F34) - Time since boot: about 2 hours


Disk Information:

APPLE SSD SM256E disk0 : (251 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Untitled (disk1) / : 249.78 GB (192.25 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 250.14 GB Online


USB Information:

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Gatekeeper:

Mac App Store and identified developers


System Launch Agents:

[loaded] com.apple.AOSHeartbeat.plist

[loaded] com.apple.AOSPushRelay.plist

[loaded] com.apple.AddressBook.AssistantService.plist

[loaded] com.apple.AddressBook.SourceSync.plist

[loaded] com.apple.AddressBook.abd.plist

[running] com.apple.AirPlayUIAgent.plist

[loaded] com.apple.AirPortBaseStationAgent.plist

[not loaded] com.apple.AppleGraphicsWarning.plist

[loaded] com.apple.AskPermissionUI.plist

[loaded] com.apple.AssetCacheLocatorService.plist

[loaded] com.apple.AssistiveControl.plist

[running] com.apple.BezelUI.plist

[running] com.apple.CalendarAgent.plist

[running] com.apple.CallHistoryPluginHelper.plist

[running] com.apple.CallHistorySyncHelper.plist

[running] com.apple.CommCenter-osx.plist

[loaded] com.apple.ContainerRepairAgent.plist

[loaded] com.apple.CoreAuthentication.daemon.plist

[loaded] com.apple.CoreLocationAgent.plist

[loaded] com.apple.CoreRAIDAgent.plist

[loaded] com.apple.DiagnosticReportCleanup.plist

[loaded] com.apple.DictationIM.plist

[loaded] com.apple.DiskArbitrationAgent.plist

[running] com.apple.Dock.plist

[running] com.apple.EscrowSecurityAlert.plist

[loaded] com.apple.FTCleanup.plist

[not loaded] com.apple.FileStatsAgent.plist

[loaded] com.apple.FileSyncAgent.PHD.plist

[loaded] com.apple.FilesystemUI.plist

[running] com.apple.Finder.plist (2016-02-19) - Invalid signature!

[not loaded] com.apple.FirmwareUpdateHelper.plist

[running] com.apple.FolderActionsDispatcher.plist

[loaded] com.apple.FollowUpUI.plist (2016-02-11) - Invalid signature!

[loaded] com.apple.FontRegistryUIAgent.plist

[loaded] com.apple.FontValidator.plist

[loaded] com.apple.FontValidatorConduit.plist

[loaded] com.apple.FontWorker.plist

[loaded] com.apple.IMLoggingAgent.plist

[loaded] com.apple.MRTa.plist (2015-08-01) - Invalid signature!

[loaded] com.apple.ManagedClientAgent.agent.plist

[not loaded] com.apple.ManagedClientAgent.enrollagent.plist

[running] com.apple.Maps.pushdaemon.plist

[loaded] com.apple.NetworkDiagnostics.plist

[loaded] com.apple.PCIESlotCheck.plist

[loaded] com.apple.PackageKit.InstallStatus.plist

[loaded] com.apple.PhotoLibraryMigrationUtility.XPC.plist

[loaded] com.apple.PubSub.Agent.plist

[loaded] com.apple.RemoteDesktop.plist

[loaded] com.apple.ReportCrash.Self.plist

[loaded] com.apple.ReportCrash.plist

[not loaded] com.apple.ReportGPURestart.plist

[loaded] com.apple.ReportPanic.plist

[loaded] com.apple.SSInvitationAgent.plist

[running] com.apple.Safari.SafeBrowsing.Service.plist

[running] com.apple.SafariCloudHistoryPushAgent.plist

[running] com.apple.SafariNotificationAgent.plist

[loaded] com.apple.SafariPlugInUpdateNotifier.plist

[loaded] com.apple.ScreenReaderUIServer.plist (2016-02-16) - Invalid signature!

[running] com.apple.SocialPushAgent.plist

[running] com.apple.Spotlight.plist

[running] com.apple.SystemUIServer.plist

[loaded] com.apple.TMHelperAgent.SetupOffer.plist

[loaded] com.apple.TMHelperAgent.plist

[loaded] com.apple.TrustEvaluationAgent.plist

[loaded] com.apple.USBAgent.plist

[running] com.apple.UserEventAgent-Aqua.plist

[not loaded] com.apple.UserEventAgent-LoginWindow.plist

[not loaded] com.apple.UserNotificationCenterAgent-LoginWindow.plist

[loaded] com.apple.UserNotificationCenterAgent.plist

[loaded] com.apple.VoiceOver.plist

[loaded] com.apple.WebKit.PluginAgent.plist

[loaded] com.apple.ZoomWindow.plist

[running] com.apple.accountsd.plist

[running] com.apple.akd.plist

[loaded] com.apple.alf.useragent.plist

[loaded] com.apple.aos.migrate.plist

[loaded] com.apple.appleseed.seedusaged.plist

[loaded] com.apple.appsleepd.plist

[loaded] com.apple.appstoreupdateagent.plist

[loaded] com.apple.apsctl.plist

[running] com.apple.askpermissiond.plist

[loaded] com.apple.assistant_service.plist

[loaded] com.apple.assistantd.plist

[running] com.apple.bird.plist

[loaded] com.apple.bluetoothUIServer.plist

[loaded] com.apple.btsa.plist

[running] com.apple.cdpd.plist

[loaded] com.apple.cfnetwork.AuthBrokerAgent.plist

[loaded] com.apple.cfnetwork.cfnetworkagent.plist

[running] com.apple.cfprefsd.xpc.agent.plist

[running] com.apple.cloudd.plist

[loaded] com.apple.cloudfamilyrestrictionsd-mac.plist

[running] com.apple.cloudpaird.plist

[running] com.apple.cloudphotosd.plist

[running] com.apple.cmfsyncagent.plist

[loaded] com.apple.coredata.externalrecordswriter.plist

[running] com.apple.coreservices.appleid.authentication.plist

[running] com.apple.coreservices.lsactivity.plist

[running] com.apple.coreservices.sharedfilelistd.plist

[running] com.apple.coreservices.uiagent.plist

[loaded] com.apple.csuseragent.plist

[running] com.apple.ctkd.plist

[loaded] com.apple.cvmsCompAgent3600_i386.plist

[loaded] com.apple.cvmsCompAgent3600_i386_1.plist

[loaded] com.apple.cvmsCompAgent3600_x86_64.plist

[loaded] com.apple.cvmsCompAgent3600_x86_64_1.plist

[loaded] com.apple.cvmsCompAgentLegacy_i386.plist

[loaded] com.apple.cvmsCompAgentLegacy_i386_1.plist

[loaded] com.apple.cvmsCompAgentLegacy_x86_64.plist

[loaded] com.apple.cvmsCompAgentLegacy_x86_64_1.plist

[loaded] com.apple.cvmsCompAgent_i386.plist

[loaded] com.apple.cvmsCompAgent_i386_1.plist

[running] com.apple.cvmsCompAgent_x86_64.plist

[loaded] com.apple.cvmsCompAgent_x86_64_1.plist

[running] com.apple.diagnostics_agent.plist

[running] com.apple.distnoted.xpc.agent.plist

[loaded] com.apple.dt.CommandLineTools.installondemand.plist

[running] com.apple.familycircled.plist

[loaded] com.apple.familycontrols.useragent.plist

[loaded] com.apple.familynotificationd.plist

[loaded] com.apple.findmymacmessenger.plist

[running] com.apple.followupd.plist

[loaded] com.apple.fontd.useragent.plist

[running] com.apple.gamed.plist

[running] com.apple.helpd.plist

[loaded] com.apple.iCloudUserNotifications.plist

[running] com.apple.icdd.plist

[loaded] com.apple.icloud.findmydeviced.findmydevice-user-agent.plist

[running] com.apple.icloud.fmfd.plist

[running] com.apple.iconservices.iconservicesagent.plist

[running] com.apple.identityservicesd.plist

[loaded] com.apple.idsremoteurlconnectionagent.plist

[running] com.apple.imagent.plist

[loaded] com.apple.imavagent.plist

[loaded] com.apple.imklaunchagent.plist

[loaded] com.apple.imtransferagent.plist

[loaded] com.apple.installandsetup.migrationhelper.user.plist

[loaded] com.apple.installd.user.plist

[loaded] com.apple.isst.plist

[loaded] com.apple.java.InstallOnDemand.plist

[loaded] com.apple.java.updateSharing.plist

[running] com.apple.lateragent.plist

[loaded] com.apple.locationmenu.plist

[running] com.apple.lsd.plist

[loaded] com.apple.maspushagent.plist

[loaded] com.apple.mbbackgrounduseragent.plist

[loaded] com.apple.mbfloagent.plist

[loaded] com.apple.mbuseragent.plist

[loaded] com.apple.mdmclient.agent.plist

[loaded] com.apple.mdworker.32bit.plist

[running] com.apple.mdworker.bundles.plist

[loaded] com.apple.mdworker.isolation.plist

[loaded] com.apple.mdworker.lsb.plist

[loaded] com.apple.mdworker.mail.plist

[loaded] com.apple.mdworker.shared.plist

[loaded] com.apple.mdworker.single.plist

[loaded] com.apple.mdworker.sizing.plist

[running] com.apple.metadata.SpotlightNetHelper.plist

[loaded] com.apple.metadata.mdbulkimport.plist

[running] com.apple.metadata.mdflagwriter.plist

[loaded] com.apple.metadata.mdwrite.plist

[loaded] com.apple.midiserver.plist

[loaded] com.apple.navd.plist

[loaded] com.apple.neagent.plist

[loaded] com.apple.netauth.user.auth.plist

[loaded] com.apple.netauth.user.gui.plist

[loaded] com.apple.noticeboard.agent.plist

[running] com.apple.notificationcenterui.plist

[running] com.apple.nsurlsessiond.plist

[running] com.apple.nsurlstoraged.plist

[loaded] com.apple.parentalcontrols.check.plist

[running] com.apple.pboard.plist

[running] com.apple.pbs.plist

[running] com.apple.photolibraryd.plist

[loaded] com.apple.pictd.plist

[running] com.apple.pluginkit.pkd.plist

[loaded] com.apple.pluginkit.pkreporter.plist

[loaded] com.apple.powerchime.plist (2016-02-22) - Invalid signature!

[loaded] com.apple.printtool.agent.plist

[loaded] com.apple.printuitool.agent.plist

[loaded] com.apple.quicklook.32bit.plist (2016-02-04) - Invalid signature!

[loaded] com.apple.quicklook.config.plist

[running] com.apple.quicklook.plist (2016-02-04) - Invalid signature!

[loaded] com.apple.quicklook.ui.helper.plist (2016-02-04) - Invalid signature!

[loaded] com.apple.rcd.plist

[running] com.apple.recentsd.plist

[loaded] com.apple.reversetemplated.plist

[loaded] com.apple.rtcreportingd.plist

[loaded] com.apple.safaridavclient.plist

[running] com.apple.scopedbookmarkagent.xpc.plist

[loaded] com.apple.screensharing.MessagesAgent.plist

[loaded] com.apple.screensharing.agent.plist

[loaded] com.apple.scrod.plist

[running] com.apple.secd.plist

[running] com.apple.secinitd.plist

[loaded] com.apple.security.DiskUnmountWatcher.plist

[loaded] com.apple.security.agent.plist

[running] com.apple.security.cloudkeychainproxy.plist

[loaded] com.apple.security.idskeychainsyncingproxy.plist

[running] com.apple.security.keychain-circle-notification.plist

[running] com.apple.sharingd.plist

[running] com.apple.soagent.plist

[loaded] com.apple.softwareupdate_notify_agent.plist

[loaded] com.apple.speech.speechdatainstallerd.plist

[loaded] com.apple.speech.speechsynthesisd.plist

[loaded] com.apple.speech.synthesisserver.plist

[running] com.apple.spindump_agent.plist

[running] com.apple.spotlight.IndexAgent.plist

[running] com.apple.storeaccountd.plist

[running] com.apple.storeassetd.plist

[running] com.apple.storedownloadd.plist

[loaded] com.apple.storeinappd.plist

[loaded] com.apple.storeinstallagent.plist

[running] com.apple.storelegacy.plist

[loaded] com.apple.storeuid.plist

[running] com.apple.suggestd.plist

[running] com.apple.swcd.plist

[running] com.apple.syncdefaultsd.plist

[loaded] com.apple.syncservices.SyncServer.plist

[loaded] com.apple.syncservices.uihandler.plist

[loaded] com.apple.systemprofiler.plist

[loaded] com.apple.talagent.plist

[running] com.apple.tccd.plist

[running] com.apple.telephonyutilities.callservicesd.plist

[loaded] com.apple.thermaltrap.plist

[loaded] com.apple.tiswitcher.plist

[loaded] com.apple.trustd.agent.plist

[loaded] com.apple.universalaccessAuthWarn.plist

[loaded] com.apple.universalaccesscontrol.plist

[loaded] com.apple.universalaccessd.plist

[loaded] com.apple.unmountassistant.useragent.plist

[running] com.apple.usernoted.plist

[loaded] com.apple.warmd_agent.plist

[loaded] com.apple.webinspectord.plist

[running] com.apple.wifi.WiFiAgent.plist

[loaded] com.apple.xpc.loginitemregisterd.plist

[loaded] com.apple.xpc.otherbsd.plist

[loaded] org.openbsd.ssh-agent.plist


System Launch Daemons:

[not loaded] bootps.plist

[running] com.apple.AirPlayXPCHelper.plist

[loaded] com.apple.AppleFileServer.plist

[loaded] com.apple.AssetCacheLocatorService.plist

[loaded] com.apple.CommCenterRootHelper.plist

[loaded] com.apple.CoreRAID.plist

[running] com.apple.CrashReporterSupportHelper.plist

[loaded] com.apple.DesktopServicesHelper.plist

[loaded] com.apple.DumpGPURestart.plist

[loaded] com.apple.DumpPanic.plist

[running] com.apple.FileCoordination.plist

[not loaded] com.apple.FileSyncAgent.sshd.plist (2015-08-02) - No signature!

[loaded] com.apple.FontWorker.plist

[loaded] com.apple.GSSCred.plist

[loaded] com.apple.GameController.gamecontrollerd.plist

[loaded] com.apple.IFCStart.plist

[loaded] com.apple.IOAccelMemoryInfoCollector.plist

[loaded] com.apple.IOBluetoothUSBDFU.plist

[loaded] com.apple.InstallerDiagnostics.installerdiagd.plist

[not loaded] com.apple.InstallerDiagnostics.installerdiagwatcher.plist

[loaded] com.apple.Kerberos.digest-service.plist

[loaded] com.apple.Kerberos.kadmind.plist

[loaded] com.apple.Kerberos.kcm.plist

[running] com.apple.Kerberos.kdc.plist

[loaded] com.apple.Kerberos.kpasswdd.plist

[running] com.apple.KernelEventAgent.plist

[loaded] com.apple.MRTd.plist (2015-08-01) - Invalid signature!

[loaded] com.apple.ManagedClient.cloudconfigurationd.plist

[loaded] com.apple.ManagedClient.enroll.plist

[loaded] com.apple.ManagedClient.plist

[not loaded] com.apple.ManagedClient.startup.plist

[running] com.apple.MobileFileIntegrity.plist

[not loaded] com.apple.NetBootClientStatus.plist

[loaded] com.apple.NetworkDiagnostics.plist

[loaded] com.apple.NetworkLinkConditioner.plist

[loaded] com.apple.NetworkSharing.plist

[not loaded] com.apple.ODSAgent.plist

[loaded] com.apple.PCIELaneConfigTool.plist

[not loaded] com.apple.PasswordService.plist

[loaded] com.apple.RFBEventHelper.plist

[loaded] com.apple.RemoteDesktop.PrivilegeProxy.plist

[loaded] com.apple.ReportCrash.Root.plist

[loaded] com.apple.ReportPanicService.plist

[loaded] com.apple.SCHelper.plist

[running] com.apple.SubmitDiagInfo.plist

[running] com.apple.TMCacheDelete.plist

[loaded] com.apple.TrustEvaluationAgent.system.plist

[running] com.apple.UserEventAgent-System.plist

[loaded] com.apple.UserNotificationCenter.plist

[running] com.apple.WindowServer.plist

[running] com.apple.WirelessRadioManagerd-osx.plist

[loaded] com.apple.afpfs_afpLoad.plist

[loaded] com.apple.afpfs_checkafp.plist

[loaded] com.apple.airplaydiagnostics.server.mac.plist (2016-02-01) - /AppleInternal/Applications/AirPlayDiagnostics.app/Contents/Resources/AirPlayDi agnosticsServer: Executable not found!

[loaded] com.apple.airport.wps.plist

[running] com.apple.airportd.plist

[running] com.apple.akd.plist

[running] com.apple.alf.agent.plist

[loaded] com.apple.appleseed.fbahelperd.plist

[loaded] com.apple.applessdstatistics.plist

[running] com.apple.apsd.plist

[running] com.apple.aslmanager.plist

[not loaded] com.apple.atrun.plist

[running] com.apple.audio.coreaudiod.plist

[running] com.apple.audio.systemsoundserverd.plist

[loaded] com.apple.auditd.plist

[running] com.apple.autofsd.plist

[loaded] com.apple.automountd.plist

[loaded] com.apple.avbdeviced.plist

[loaded] com.apple.awacsd.plist

[running] com.apple.awdd.plist

[running] com.apple.backupd-auto.plist

[loaded] com.apple.backupd.plist

[running] com.apple.blued.plist

[loaded] com.apple.bluetoothReporter.plist

[loaded] com.apple.bluetoothaudiod.plist

[loaded] com.apple.bnepd.plist

[loaded] com.apple.bsd.dirhelper.plist

[running] com.apple.cache_delete.plist

[running] com.apple.cfprefsd.xpc.daemon.plist

[loaded] com.apple.cloudfamilyrestrictionsd-mac.plist

[loaded] com.apple.cmio.AVCAssistant.plist

[loaded] com.apple.cmio.AppleCameraAssistant.plist

[loaded] com.apple.cmio.IIDCVideoAssistant.plist

[running] com.apple.cmio.VDCAssistant.plist

[loaded] com.apple.cmio.iOSScreenCaptureAssistant.plist

[loaded] com.apple.colorsyncd.plist

[not loaded] com.apple.comsat.plist

[running] com.apple.configd.plist

[loaded] com.apple.configureLocalKDC.plist (2015-08-02) - No signature!

[loaded] com.apple.corecaptured.plist

[running] com.apple.coreduetd.osx.plist

[running] com.apple.coreservices.appleevents.plist

[loaded] com.apple.coreservices.appleid.passwordcheck.plist

[running] com.apple.coreservices.launchservicesd.plist

[running] com.apple.coreservices.sharedfilelistd.plist

[running] com.apple.coreservicesd.plist

[running] com.apple.corestorage.corestoraged.plist

[loaded] com.apple.corestorage.corestoragehelperd.plist

[running] com.apple.coresymbolicationd.plist

[loaded] com.apple.csrutil.report.plist

[running] com.apple.ctkd.plist

[running] com.apple.cvmsServ.plist

[loaded] com.apple.diagnostic.uuidpathd.plist

[running] com.apple.diagnosticd.plist

[running] com.apple.diskarbitrationd.plist

[loaded] com.apple.diskmanagementd.plist

[not loaded] com.apple.diskmanagementstartup.plist

[loaded] com.apple.displaypolicyd.plist

[running] com.apple.distnoted.xpc.daemon.plist

[not loaded] com.apple.dnsextd.plist

[loaded] com.apple.dpaudiothru.plist

[loaded] com.apple.dpd.plist

[loaded] com.apple.dspluginhelperd.plist

[loaded] com.apple.dvdplayback.setregion.plist

[loaded] com.apple.dynamic_pager.plist

[loaded] com.apple.eapolcfg_auth.plist

[not loaded] com.apple.efax.plist (2015-08-01) - No signature!

[loaded] com.apple.efilogin-helper.plist

[not loaded] com.apple.emlog.plist (2015-08-02) - No signature!

[loaded] com.apple.emond.aslmanager.plist

[loaded] com.apple.emond.plist

[not loaded] com.apple.eppc.plist

[loaded] com.apple.familycontrols.plist

[loaded] com.apple.findmymac.plist

[loaded] com.apple.findmymacmessenger.plist

[not loaded] com.apple.firmwaresyncd.plist

[loaded] com.apple.fontd.plist

[loaded] com.apple.fontmover.plist

[running] com.apple.fseventsd.plist

[not loaded] com.apple.ftp-proxy.plist

[not loaded] com.apple.getty.plist

[loaded] com.apple.gkreport.plist (2016-03-06) - No signature!

[loaded] com.apple.gssd.plist

[loaded] com.apple.hdiejectd.plist

[running] com.apple.hidd.plist

[loaded] com.apple.hidfud.plist

[running] com.apple.icloud.findmydeviced.plist

[running] com.apple.iconservices.iconservicesagent.plist

[running] com.apple.iconservices.iconservicesd.plist

[running] com.apple.ifdreader.plist

[loaded] com.apple.installandsetup.systemmigrationd.plist

[running] com.apple.installd.plist

[loaded] com.apple.kcproxy.plist

[not loaded] com.apple.kdumpd.plist

[running] com.apple.kextd.plist

[loaded] com.apple.kuncd.plist

[not loaded] com.apple.locate.plist (2015-08-01) - No signature!

[running] com.apple.locationd.plist

[loaded] com.apple.lockd.plist

[failed] com.apple.logd.plist

[running] com.apple.logind.plist

[loaded] com.apple.loginwindow.LFVTracer.plist

[running] com.apple.loginwindow.plist

[loaded] com.apple.logkextloadsd.plist

[running] com.apple.lsd.plist

[running] com.apple.mDNSResponder.plist

[loaded] com.apple.mDNSResponderHelper.plist

[loaded] com.apple.mbsystemadministration.plist

[loaded] com.apple.mbusertrampoline.plist

[loaded] com.apple.mdmclient.daemon.plist

[not loaded] com.apple.mdmclient.daemon.runatboot.plist

[running] com.apple.metadata.mds.index.plist

[running] com.apple.metadata.mds.plist

[loaded] com.apple.metadata.mds.scan.plist

[loaded] com.apple.metadata.mds.spindump.plist

[not loaded] com.apple.msrpc.echosvc.plist

[loaded] com.apple.msrpc.lsarpc.plist

[loaded] com.apple.msrpc.mdssvc.plist

[loaded] com.apple.msrpc.netlogon.plist

[loaded] com.apple.msrpc.srvsvc.plist

[loaded] com.apple.msrpc.wkssvc.plist

[running] com.apple.mtmd.plist

[running] com.apple.mtmfs.plist

[running] com.apple.nehelper.plist

[loaded] com.apple.nesessionmanager.plist

[loaded] com.apple.netauth.sys.auth.plist

[loaded] com.apple.netauth.sys.gui.plist

[running] com.apple.netbiosd.plist

[running] com.apple.networkd.plist

[running] com.apple.networkd_privileged.plist

[loaded] com.apple.newsyslog.plist

[loaded] com.apple.nfsconf.plist

[loaded] com.apple.nfsd.plist

[loaded] com.apple.nis.ypbind.plist

[loaded] com.apple.noticeboard.state.plist

[running] com.apple.notifyd.plist

[running] com.apple.nsurlsessiond.plist

[running] com.apple.nsurlstoraged.plist

[running] com.apple.ocspd.plist

[not loaded] com.apple.odproxyd.plist

[running] com.apple.opendirectoryd.plist

[loaded] com.apple.periodic-daily.plist

[loaded] com.apple.periodic-monthly.plist

[loaded] com.apple.periodic-weekly.plist

[loaded] com.apple.pfctl.plist

[loaded] com.apple.pfd.plist

[loaded] com.apple.platform.ptmd.plist

[running] com.apple.powerd.plist

[loaded] com.apple.powerd.swd.plist

[loaded] com.apple.preferences.timezone.admintool.plist

[loaded] com.apple.preferences.timezone.auto.plist

[loaded] com.apple.printtool.daemon.plist

[loaded] com.apple.racoon.plist

[loaded] com.apple.remotepairtool.plist

[running] com.apple.revisiond.plist

[loaded] com.apple.rootless.init.plist

[loaded] com.apple.rpcbind.plist

[running] com.apple.sandboxd.plist

[not loaded] com.apple.screensharing.plist

[loaded] com.apple.scsid.plist

[running] com.apple.secinitd.plist

[not loaded] com.apple.security.FDERecoveryAgent.plist

[loaded] com.apple.security.agent.login.plist

[loaded] com.apple.security.authhost.plist

[running] com.apple.security.syspolicy.plist

[running] com.apple.securityd.plist

[running] com.apple.securityd_service.plist

[loaded] com.apple.sessionlogoutd.plist

[loaded] com.apple.smb.preferences.plist

[loaded] com.apple.smbd.plist

[loaded] com.apple.softwareupdate_download_service.plist

[loaded] com.apple.softwareupdate_firstrun_tasks.plist

[running] com.apple.softwareupdated.plist

[loaded] com.apple.speech.speechsynthesisd.plist

[running] com.apple.spindump.plist

[loaded] com.apple.startupdiskhelper.plist

[loaded] com.apple.statd.notify.plist

[loaded] com.apple.storagekitd.plist

[loaded] com.apple.storeaccountd.daemon.plist

[loaded] com.apple.storeagent.daemon.plist

[loaded] com.apple.storeassetd.daemon.plist

[loaded] com.apple.storedownloadd.daemon.plist

[running] com.apple.storeinstalld.plist

[loaded] com.apple.storereceiptinstaller.plist

[running] com.apple.suhelperd.plist

[running] com.apple.symptomsd.plist

[loaded] com.apple.sysdiagnose.plist

[running] com.apple.syslogd.plist

[running] com.apple.sysmond.plist

[loaded] com.apple.system_installd.plist

[loaded] com.apple.systemkeychain.plist

[loaded] com.apple.systempreferences.installer.plist

[running] com.apple.systemstats.analysis.plist

[loaded] com.apple.systemstats.daily.plist

[running] com.apple.systemstatsd.plist

[loaded] com.apple.taskgated-helper.plist

[running] com.apple.taskgated.plist

[running] com.apple.tccd.system.plist

[loaded] com.apple.thermald.plist

[loaded] com.apple.trustd.plist

[loaded] com.apple.ucupdate.plist

[loaded] com.apple.uninstalld.plist

[loaded] com.apple.unmountassistant.sysagent.plist

[loaded] com.apple.updateEFIDesktopPicture.plist

[running] com.apple.usbd.plist

[running] com.apple.usbmuxd.plist

[not loaded] com.apple.uucp.plist

[loaded] com.apple.var-db-dslocal-backup.plist

[loaded] com.apple.vsdbutil.plist

[running] com.apple.warmd.plist

[running] com.apple.watchdogd.plist

[running] com.apple.wdhelper.plist

[loaded] com.apple.wifid.plist

[running] com.apple.wirelessproxd.plist

[loaded] com.apple.wwand.plist

[running] com.apple.xpc.smd.plist

[loaded] com.apple.xpc.uscwoap.plist

[not loaded] com.apple.xsan.plist

[not loaded] com.apple.xsandaily.plist

[not loaded] com.apple.xscertadmin.plist

[not loaded] com.apple.xscertd-helper.plist

[not loaded] com.apple.xscertd.plist

[loaded] com.vix.cron.plist

[not loaded] exec.plist

[not loaded] finger.plist

[not loaded] ftp.plist

[not loaded] login.plist

[not loaded] ntalk.plist

[not loaded] org.apache.httpd.plist (2016-02-20) - No signature!

[not loaded] org.cups.cups-lpd.plist

[loaded] org.cups.cupsd.plist (2016-03-22) - Invalid signature!

[not loaded] org.net-snmp.snmpd.plist (2015-10-23) - No signature!

[running] org.ntp.ntpd.plist (2015-10-26) - No signature!

[not loaded] org.openldap.slapd.plist

[loaded] org.postfix.master.plist

[loaded] org.postfix.newaliases.plist (2015-08-02) - No signature!

[not loaded] shell.plist

[not loaded] ssh.plist (2016-01-21) - No signature!

[not loaded] telnet.plist

[not loaded] tftp.plist


Launch Agents:

[not loaded] com.adobe.AAM.Updater-1.0.plist (2016-06-16) [Support]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a...plist (2016-05-14) [Support]

[running] com.adobe.AdobeCreativeCloud.plist (2016-04-26) [Support]

[loaded] com.google.keystone.agent.plist (2016-05-24) [Support]


Launch Daemons:

[loaded] com.adobe.ARMDC.Communicator.plist (2016-05-14) [Support]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (2016-05-14) [Support]

[running] com.adobe.adobeupdatedaemon.plist (2016-06-14) [Support]

[loaded] com.adobe.agsservice.plist (2016-04-26) [Support]

[loaded] com.adobe.fpsaud.plist (2016-06-13) [Support]

[loaded] com.google.keystone.daemon.plist (2016-05-24) [Support]


User Launch Agents:

[loaded] com.adobe.AAM.Updater-1.0.plist (2016-04-27) [Support]


User Login Items:

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

AdobeResourceSynchronizer Application Hidden (/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)


Other Apps:

[running] com.adobe.CCXProcess.189792

[running] com.adobe.acc.AdobeDesktopService.65952.61739FE9-C2CC-4500-AE9D-701C438E66A2

[running] com.adobe.accmac.177632

[running] com.apple.AccountPolicyHelper

[running] com.apple.ActivityMonitor.12192

[running] com.apple.AddressBook.192352

[running] com.apple.AddressBook.ContactsAccountsService

[running] com.apple.AmbientDisplayAgent

[loaded] com.apple.BKAgentService

[loaded] com.apple.CharacterPicker.FileService

[running] com.apple.CloudPhotosConfiguration

[running] com.apple.CodeSigningHelper

[running] com.apple.DataDetectorsDynamicData

[loaded] com.apple.DesktopServicesHelper.67CAE267-9502-40ED-9381-D308B8DD2BD7

[loaded] com.apple.DesktopServicesHelper.85A2E500-9E4A-4BF0-89FE-468CADB7FD5F

[loaded] com.apple.DictionaryServiceHelper

[loaded] com.apple.FCiCloudPrefUpdater

[loaded] com.apple.IASUtilities.IASCloudConfigHelper

[running] com.apple.InputMethodKit.TextReplacementService

[loaded] com.apple.Localization.SetDefaultsService

[loaded] com.apple.MailServiceAgent

[running] com.apple.PerformanceAnalysis.animationperfd

[running] com.apple.Safari.10592

[loaded] com.apple.SpeechRecognitionCore.brokerd

[running] com.apple.ViewBridgeAuxiliary

[loaded] com.apple.accounts.dom

[loaded] com.apple.appkit.xpc.sandboxedServiceRunner

[running] com.apple.authd

[running] com.apple.cmio.registerassistantservice

[loaded] com.apple.facebook.xpc

[running] com.apple.geod

[running] com.apple.hiservices-xpcservice

[loaded] com.apple.iBooksX-SecureUserDefaults

[running] com.apple.iCloudHelper

[running] com.apple.iTunesHelper.85472

[running] com.apple.imdpersistence.IMDPersistenceAgent

[loaded] com.apple.iokit.IOServiceAuthorizeAgent

[loaded] com.apple.iokit.ioserviceauthorized

[running] com.apple.lakitu

[loaded] com.apple.linkedin.xpc

[running] com.apple.mdworker.shared.00000000-0000-0000-0000-000000000000

[running] com.apple.mdworker.shared.01000000-0000-0000-0000-000000000000

[running] com.apple.mdworker.shared.02000000-0000-0000-0000-000000000000

[running] com.apple.mdworker.shared.03000000-0000-0000-0000-000000000000

[running] com.apple.mdworker.shared.04000000-0000-0000-0000-000000000000

[loaded] com.apple.mdworker.single.01000000-0000-0000-0000-000000000000

[loaded] com.apple.mdworker.single.02000000-0000-0000-0000-000000000000

[loaded] com.apple.mdworker.single.03000000-0000-0000-0000-000000000000

[loaded] com.apple.mdworker.single.04000000-0000-0000-0000-000000000000

[running] com.apple.mdworker.single.05000000-0000-0000-0000-000000000000

[running] com.apple.mdworker.single.06000000-0000-0000-0000-000000000000

[running] com.apple.mdworker.single.07000000-0000-0000-0000-000000000000

[loaded] com.apple.mdworker.single.08000000-0000-0000-0000-000000000000

[loaded] com.apple.messages.BuddyPictureService

[running] com.apple.sbd

[loaded] com.apple.security.XPCKeychainSandboxCheck

[loaded] com.apple.security.XPCTimeStampingService

[loaded] com.apple.security.agent.login.00000000-0000-0000-0000-0000000186A8

[loaded] com.apple.security.authhost.00000000-0000-0000-0000-0000000186A8

[loaded] com.apple.sharekit.EntitlementsHelper

[loaded] com.apple.systemadministration.writeconfig

[loaded] com.apple.tencentweibo.xpc

[running] com.apple.tonelibraryd

[loaded] com.apple.twitter.xpc

[loaded] com.apple.weibo.xpc

[running] com.apple.xpc.launchd.oneshot.0x10000001.AppleSpell

[running] com.apple.xpc.launchd.oneshot.0x10000003.EtreCheck


Internet Plug-ins:

AdobeAAMDetect: 3.0.0.0 - SDK 10.9 (2016-06-14) [Support]

FlashPlayer-10.6: 22.0.0.192 - SDK 10.9 (2016-06-16) [Support]

QuickTime Plugin: 7.7.3 (2016-05-28)

AdobePDFViewerNPAPI: 15.016.20045 - SDK 10.11 (2016-06-16) [Support]

AdobePDFViewer: 15.016.20045 - SDK 10.11 (2016-06-16) [Support]

Flash Player: 22.0.0.192 - SDK 10.9 (2016-06-16) [Support]

Default Browser: 601 - SDK 10.11 (2016-05-28)

PepperFlashPlayer: 22.0.0.192 - SDK 10.6 (2016-06-17) [Support]


3rd Party Preference Panes:

Flash Player (2016-06-13) [Support]


Time Machine:

Skip System Files: NO

Auto backup: YES

Volumes being backed up:

Untitled: Disk size: 249.78 GB Disk used: 57.53 GB

Destinations:

HAL [Local]

Total size: 1.00 TB

Total number of backups: 3

Oldest backup: 4/26/16, 2:26 PM

Last backup: 4/28/16, 2:57 PM

Size of backup disk: Excellent

Backup size 1.00 TB > (Disk size 249.78 GB X 3)


Top Processes by CPU:

6% WindowServer

3% com.apple.WebKit.WebContent(2)

3% mdworker(12)

2% kernel_task

2% fontd


Top Processes by Memory:

849 MB kernel_task

377 MB com.apple.WebKit.WebContent(2)

279 MB Safari

270 MB soagent

262 MB callservicesd


Virtual Memory Information:

515 MB Free RAM

7.49 GB Used RAM (1.53 GB Cached)

0 B Swap Used


Diagnostics Information:

Jun 17, 2016, 02:30:04 PM Self test - passed


Standard users cannot read /Library/Logs/DiagnosticReports.

Run as an administrator account to see more information.

MacBook Pro with Retina display, OS X El Capitan (10.11.5)

Posted on Jun 17, 2016 2:59 PM

Reply
7 replies

Jun 17, 2016 3:37 PM in response to missyed1975

You definitely show a lot of extraneous stuff under "System Launch Agents" above.


If I had a machine like that, I would erase my hard drive and reinstall OS X from scratch. I would then very carefully and selectively restore only the least possible applications and files I needed to continue (next to nothing, hopefully).


If you choose to do this, see "Erase your drive and install OS X" here:

How to reinstall OS X on your Mac - Apple Support

Jun 17, 2016 4:06 PM in response to missyed1975

I see nothing to in the report that would indicate hacking. Without knowing what you use your Mac for, and what Apps you use, its hard to say if anything at all there is extraneous or not.


Perhaps if you explain what these strange things that are happening actually are, we may be able to offer some advice.


What happened last time that led you to believe your were hacked?


Was is happening now, that makes you thinks this again?

Jun 17, 2016 7:51 PM in response to missyed1975

missyed1975 wrote:


... Strange things have started happening again recently and I just ran an etre check.


Does anyone know how to interpret an Etre Check well enough to advise?


The only authority regarding that program is its author, for whom you can find contact information on his website. Having said that, I believe even he would tell you using that program to confirm the absence of malicious interference would be an inappropriate use of it.


You ought to explain exactly what those "strange things" are. For all anyone knows from the information you provided, those events could be completely unrelated to your Mac or anything you do with it.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Hacked 6 months ago. Think its happening again, help!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.