How do I check for viruses on Macbook Pro running 10.12.5. When I check netstat it seems like too many connections are open after a restart.

Question

Level 1

8 points

How do I check for viruses on Macbook Pro running 10.12.5. When I check netstat it seems like too many connections are open after a restart.

I recently had my Word app compromised - it asked for a license and I call what i thought was Apple support. Turns out is was a scam. I restarted my computer and Word works again but now my system is slow and way too many connections open. Does this indicate I have a virus. Here is the result of netstat not long after restarting:

$ netstat

Active Internet connections

Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp6 0 0 2602:306:3712:15.50593 sfo07s13-in-x0e..https ESTABLISHED

tcp6 0 0 2602:306:3712:15.50592 sfo03s08-in-x0e..https ESTABLISHED

tcp4 0 0 jerrys-mbp.attlo.50567 a23-72-201-202.d.https ESTABLISHED

tcp4 31 0 jerrys-mbp.attlo.50414 162.125.32.5.https CLOSE_WAIT

tcp4 0 0 jerrys-mbp.attlo.50033 ec2-54-175-64-13.https CLOSE_WAIT

tcp4 0 0 jerrys-mbp.attlo.49511 ec2-35-160-19-19.https ESTABLISHED

tcp4 0 0 jerrys-mbp.attlo.49492 162.125.18.133.https ESTABLISHED

tcp6 0 0 2602:306:3712:15.49491 dfw28s02-in-x0d..https CLOSE_WAIT

tcp6 0 0 2602:306:3712:15.49490 sfo07s16-in-x0a..https CLOSE_WAIT

tcp4 0 0 jerrys-mbp.attlo.49488 17.249.60.10.5223 ESTABLISHED

tcp4 0 0 jerrys-mbp.attlo.49479 17.188.166.17.5223 ESTABLISHED

tcp4 0 0 jerrys-mbp.attlo.49478 ok-in-f125.1e100.jabbe ESTABLISHED

tcp4 0 0 jerrys-mbp.attlo.49477 ok-in-f125.1e100.jabbe ESTABLISHED

tcp4 0 0 jerrys-mbp.attlo.49476 162.125.18.133.https ESTABLISHED

tcp4 0 0 jerrys-mbp.attlo.49473 ok-in-f125.1e100.jabbe ESTABLISHED

tcp4 31 0 jerrys-mbp.attlo.49378 162.125.3.5.https CLOSE_WAIT

tcp4 31 0 jerrys-mbp.attlo.49368 162.125.3.3.https CLOSE_WAIT

tcp4 31 0 jerrys-mbp.attlo.49366 162.125.3.3.https CLOSE_WAIT

tcp4 31 0 jerrys-mbp.attlo.49365 162.125.3.3.https CLOSE_WAIT

tcp6 0 0 2602:306:3712:15.49363 sfo07s17-in-x0a..https CLOSE_WAIT

tcp6 0 0 2602:306:3712:15.49361 sfo07s17-in-x0a..https CLOSE_WAIT

tcp4 31 0 jerrys-mbp.attlo.49359 162.125.3.3.https CLOSE_WAIT

udp6 0 0 2602:306:3712:15.ntp *.*

udp4 0 0 *.52284 *.*

udp6 0 0 *.65048 *.*

udp4 0 0 *.65048 *.*

udp6 0 0 *.52066 *.*

udp4 0 0 *.52066 *.*

udp6 0 0 *.54847 *.*

udp4 0 0 *.54847 *.*

udp6 0 0 *.50625 *.*

udp4 0 0 *.50625 *.*

udp6 0 0 *.53106 *.*

udp4 0 0 *.53106 *.*

udp6 0 0 *.51752 *.*

udp4 0 0 *.51752 *.*

udp4 0 0 jerrys-mbp.attlo.ntp *.*

udp6 0 0 fe80::862:bdfd:b.ntp *.*

udp4 0 0 *.* *.*

udp4 0 0 *.17500 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.63650 *.*

udp4 0 0 *.* *.*

udp4 0 0 *.enpp *.*

udp4 0 0 *.* *.*

udp6 0 0 fe80::d235:a9b7:.ntp *.*

udp4 0 0 *.* *.*

udp6 0 0 fe80::d052:5cff:.ntp *.*

udp6 0 0 localhost.ntp *.*

udp4 0 0 localhost.ntp *.*

udp4 0 0 *.ntp *.*

udp6 0 0 *.ntp *.*

udp4 0 0 *.* *.*

udp46 0 0 *.* *.*

udp6 0 0 *.mdns *.*

udp4 0 0 *.mdns *.*

udp4 0 0 *.* *.*

udp4 0 0 *.netbios-ns *.*

udp4 0 0 *.netbios-dgm *.*

Active Multipath Internet connections

Proto/ID Flags Local Address Foreign Address (state)

Active LOCAL (UNIX) domain sockets

Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr

2759ef6a340be2b5 stream 0 0 0 2759ef6a340bd24d 0 0 /var/run/mDNSResponder

2759ef6a340bd24d stream 0 0 0 2759ef6a340be2b5 0 0

2759ef6a340bfaed stream 0 0 0 2759ef6a340bf895 0 0 /var/run/mDNSResponder

2759ef6a340bf895 stream 0 0 0 2759ef6a340bfaed 0 0

2759ef6a340bf18d stream 0 0 0 2759ef6a340bfa25 0 0

2759ef6a340bfa25 stream 0 0 0 2759ef6a340bf18d 0 0

2759ef6a340bdd3d stream 0 0 0 2759ef6a340bd56d 0 0

2759ef6a340bd56d stream 0 0 0 2759ef6a340bdd3d 0 0

2759ef6a340bec15 stream 0 0 0 2759ef6a340bcff5 0 0

2759ef6a340bcff5 stream 0 0 0 2759ef6a340bec15 0 0

2759ef6a340bda1d stream 0 0 0 2759ef6a340bcf2d 0 0 /var/run/mDNSResponder

2759ef6a340bcf2d stream 0 0 0 2759ef6a340bda1d 0 0

2759ef6a340bf3e5 stream 0 0 0 2759ef6a340bd3dd 0 0

2759ef6a340bd3dd stream 0 0 0 2759ef6a340bf3e5 0 0

2759ef6a340bdae5 stream 0 0 0 0 0 0

2759ef6a340bfd45 stream 0 0 0 2759ef6a340bf705 0 0

2759ef6a340bf705 stream 0 0 0 2759ef6a340bfd45 0 0

2759ef6a340be37d stream 0 0 0 2759ef6a340be445 0 0

2759ef6a340be445 stream 0 0 0 2759ef6a340be37d 0 0

2759ef6a331d6e0d stream 0 0 0 2759ef6a331d6aed 0 0 /.dbfseventsd

2759ef6a331d6bb5 stream 0 0 2759ef6a25781f2d 0 0 0 /.dbfseventsd

2759ef6a331d6aed stream 0 0 0 2759ef6a331d6e0d 0 0

2759ef6a331d424d stream 0 0 0 2759ef6a331d4315 0 0

2759ef6a331d4315 stream 0 0 0 2759ef6a331d424d 0 0

2759ef6a331d43dd stream 0 0 0 2759ef6a331d6a25 0 0

2759ef6a331d6a25 stream 0 0 0 2759ef6a331d43dd 0 0

2759ef6a331d44a5 stream 0 0 0 2759ef6a331d695d 0 0

2759ef6a331d695d stream 0 0 0 2759ef6a331d44a5 0 0

2759ef6a331d6895 stream 0 0 0 2759ef6a331d67cd 0 0

2759ef6a331d67cd stream 0 0 0 2759ef6a331d6895 0 0

2759ef6a331d456d stream 0 0 0 2759ef6a331d4635 0 0

2759ef6a331d4635 stream 0 0 0 2759ef6a331d456d 0 0

2759ef6a331d6705 stream 0 0 0 2759ef6a331d663d 0 0

2759ef6a331d663d stream 0 0 0 2759ef6a331d6705 0 0

2759ef6a331d46fd stream 0 0 0 2759ef6a331d6575 0 0

2759ef6a331d6575 stream 0 0 0 2759ef6a331d46fd 0 0

2759ef6a331d47c5 stream 0 0 0 2759ef6a331d64ad 0 0

2759ef6a331d64ad stream 0 0 0 2759ef6a331d47c5 0 0

2759ef6a331d63e5 stream 0 0 0 2759ef6a331d631d 0 0

2759ef6a331d631d stream 0 0 0 2759ef6a331d63e5 0 0

2759ef6a331d4955 stream 0 0 0 2759ef6a331d488d 0 0

2759ef6a331d488d stream 0 0 0 2759ef6a331d4955 0 0

2759ef6a331d4ae5 stream 0 0 0 2759ef6a331d4a1d 0 0 /var/run/mDNSResponder

2759ef6a331d4a1d stream 0 0 0 2759ef6a331d4ae5 0 0

2759ef6a331d4bad stream 0 0 0 2759ef6a331d4c75 0 0

2759ef6a331d4c75 stream 0 0 0 2759ef6a331d4bad 0 0

2759ef6a331d6255 stream 0 0 0 2759ef6a331d4d3d 0 0

2759ef6a331d4d3d stream 0 0 0 2759ef6a331d6255 0 0

2759ef6a331d618d stream 0 0 0 2759ef6a331d60c5 0 0

2759ef6a331d60c5 stream 0 0 0 2759ef6a331d618d 0 0

2759ef6a331d5ffd stream 0 0 0 2759ef6a331d4e05 0 0

2759ef6a331d4e05 stream 0 0 0 2759ef6a331d5ffd 0 0

2759ef6a331d4ecd stream 0 0 0 2759ef6a331d4f95 0 0

2759ef6a331d4f95 stream 0 0 0 2759ef6a331d4ecd 0 0

2759ef6a331d505d stream 0 0 0 2759ef6a331d5f35 0 0

2759ef6a331d5f35 stream 0 0 0 2759ef6a331d505d 0 0

2759ef6a331d5e6d stream 0 0 0 2759ef6a331d59bd 0 0

2759ef6a331d59bd stream 0 0 0 2759ef6a331d5e6d 0 0

2759ef6a331d5b4d stream 0 0 0 2759ef6a331d58f5 0 0

2759ef6a331d58f5 stream 0 0 0 2759ef6a331d5b4d 0 0

2759ef6a331d5a85 stream 0 0 0 2759ef6a331d5cdd 0 0 /var/run/mDNSResponder

2759ef6a331d5cdd stream 0 0 0 2759ef6a331d5a85 0 0

2759ef6a331d5da5 stream 0 0 2759ef6a25d0ed35 0 0 0 /Users/jmurray1/Library/Group Containers/google_drive/tmphEEpQw

2759ef6a331d5765 stream 0 0 0 2759ef6a331d51ed 0 0 /var/run/mDNSResponder

2759ef6a331d51ed stream 0 0 0 2759ef6a331d5765 0 0

2759ef6a331d569d stream 0 0 0 2759ef6a331d537d 0 0 /var/run/mDNSResponder

2759ef6a331d537d stream 0 0 0 2759ef6a331d569d 0 0

2759ef6a331d55d5 stream 0 0 0 2759ef6a331d5445 0 0 /var/run/mDNSResponder

2759ef6a331d5445 stream 0 0 0 2759ef6a331d55d5 0 0

2759ef6a331d550d stream 0 0 0 2759ef6a2e713f2d 0 0 /var/run/mDNSResponder

2759ef6a2e713f2d stream 0 0 0 2759ef6a331d550d 0 0

2759ef6a2e71695d stream 0 0 0 2759ef6a2e7143dd 0 0 /var/run/mDNSResponder

2759ef6a2e7143dd stream 0 0 0 2759ef6a2e71695d 0 0

2759ef6a2e716a25 stream 0 0 0 2759ef6a1c2fbd45 0 0 /var/run/mDNSResponder

2759ef6a1c2fbd45 stream 0 0 0 2759ef6a2e716a25 0 0

2759ef6a1c2fbaed stream 0 0 0 2759ef6a1c2fb63d 0 0 /var/run/mDNSResponder

2759ef6a1c2fb63d stream 0 0 0 2759ef6a1c2fbaed 0 0

2759ef6a1c2f9ae5 stream 0 0 0 2759ef6a30e0d9bd 0 0 /var/run/mDNSResponder

2759ef6a30e0d9bd stream 0 0 0 2759ef6a1c2f9ae5 0 0

2759ef6a30e0dcdd stream 0 0 0 2759ef6a30e0c955 0 0 /var/run/mDNSResponder

2759ef6a30e0c955 stream 0 0 0 2759ef6a30e0dcdd 0 0

2759ef6a30e0d2b5 stream 0 0 0 2759ef6a30e0ebb5 0 0 /var/run/mDNSResponder

2759ef6a30e0ebb5 stream 0 0 0 2759ef6a30e0d2b5 0 0

2759ef6a30e0c24d stream 0 0 0 2759ef6a30e0ed45 0 0 /var/run/mDNSResponder

2759ef6a30e0ed45 stream 0 0 0 2759ef6a30e0c24d 0 0

2759ef6a30e0c315 stream 0 0 0 2759ef6a30e0e4ad 0 0 /var/run/usbmuxd

2759ef6a30e0e4ad stream 0 0 0 2759ef6a30e0c315 0 0

2759ef6a30e0cecd stream 0 0 0 2759ef6a30e0ce05 0 0 /var/run/usbmuxd

2759ef6a30e0ce05 stream 0 0 0 2759ef6a30e0cecd 0 0

2759ef6a30e0cae5 stream 0 0 0 2759ef6a30e0e95d 0 0 /var/run/mDNSResponder

2759ef6a30e0e95d stream 0 0 0 2759ef6a30e0cae5 0 0

2759ef6a30e0cf95 stream 0 0 0 2759ef6a30e0e705 0 0 /var/run/mDNSResponder

2759ef6a30e0e705 stream 0 0 0 2759ef6a30e0cf95 0 0

2759ef6a30e0c56d stream 0 0 0 2759ef6a30e0e255 0 0 /var/run/mDNSResponder

2759ef6a30e0e255 stream 0 0 0 2759ef6a30e0c56d 0 0

2759ef6a30e0c6fd stream 0 0 0 2759ef6a30e0e7cd 0 0 /var/run/mDNSResponder

2759ef6a30e0e7cd stream 0 0 0 2759ef6a30e0c6fd 0 0

2759ef6a30e0c7c5 stream 0 0 0 2759ef6a30e0c88d 0 0 /var/run/mDNSResponder

2759ef6a30e0c88d stream 0 0 0 2759ef6a30e0c7c5 0 0

2759ef6a30e0c635 stream 0 0 0 2759ef6a30e0ee0d 0 0 /var/run/mDNSResponder

2759ef6a30e0ee0d stream 0 0 0 2759ef6a30e0c635 0 0

2759ef6a30e0c3dd stream 0 0 0 2759ef6a30e0c0bd 0 0 /var/run/mDNSResponder

2759ef6a30e0c0bd stream 0 0 0 2759ef6a30e0c3dd 0 0

2759ef6a2e716895 stream 0 0 0 2759ef6a2e7144a5 0 0 /var/run/mDNSResponder

2759ef6a2e7144a5 stream 0 0 0 2759ef6a2e716895 0 0

2759ef6a2e716575 stream 0 0 0 2759ef6a2e71663d 0 0 /var/run/mDNSResponder

2759ef6a2e71663d stream 0 0 0 2759ef6a2e716575 0 0

2759ef6a2e7146fd stream 0 0 0 2759ef6a2e7147c5 0 0 /var/run/mDNSResponder

2759ef6a2e7147c5 stream 0 0 0 2759ef6a2e7146fd 0 0

2759ef6a2e714c75 stream 0 0 0 2759ef6a2e7163e5 0 0 /var/tmp/com.livescribe.PenCommService/DataSocket

2759ef6a2e7163e5 stream 0 0 0 2759ef6a2e714c75 0 0

2759ef6a2e714bad stream 0 0 0 2759ef6a2e714ae5 0 0 /var/run/mDNSResponder

2759ef6a2e714ae5 stream 0 0 0 2759ef6a2e714bad 0 0

2759ef6a2e714e05 stream 0 0 0 2759ef6a2e71618d 0 0 /var/run/mDNSResponder

2759ef6a2e71618d stream 0 0 0 2759ef6a2e714e05 0 0

2759ef6a2e714f95 stream 0 0 0 2759ef6a2e7152b5 0 0

2759ef6a2e7152b5 stream 0 0 0 2759ef6a2e714f95 0 0

2759ef6a2e71505d stream 0 0 0 2759ef6a2e715125 0 0

2759ef6a2e715125 stream 0 0 0 2759ef6a2e71505d 0 0

2759ef6a2e7151ed stream 0 0 0 2759ef6a2e716255 0 0

2759ef6a2e716255 stream 0 0 0 2759ef6a2e7151ed 0 0

2759ef6a2e71537d stream 0 0 0 2759ef6a2e7160c5 0 0

2759ef6a2e7160c5 stream 0 0 0 2759ef6a2e71537d 0 0

2759ef6a2e715445 stream 0 0 2759ef6a1be12405 0 0 0 /private/tmp/com.apple.launchd.1ZOp1haw9o/org.macosforge.xquartz:0

2759ef6a2e71550d stream 0 0 2759ef6a1be13385 0 0 0 /private/tmp/com.apple.launchd.Lp1AAqf3NT/Listeners

2759ef6a2e7155d5 stream 0 0 2759ef6a1be12acd 0 0 0 /private/tmp/com.apple.launchd.8RfR9wQzEV/Render

2759ef6a2e715f35 stream 0 0 2759ef6a1be12ead 0 0 0 /var/tmp/filesystemui.socket

2759ef6a2e715da5 stream 0 0 0 2759ef6a2e715e6d 0 0 /var/run/mDNSResponder

2759ef6a2e715e6d stream 0 0 0 2759ef6a2e715da5 0 0

2759ef6a2e71569d stream 0 0 0 2759ef6a2e715c15 0 0 /var/tmp/com.livescribe.PenCommService/EventSocket

2759ef6a2e715c15 stream 0 0 0 2759ef6a2e71569d 0 0

2759ef6a2e715b4d stream 0 0 2759ef6a2b5db85d 0 0 0 /var/tmp/com.livescribe.PenCommService/DataSocket

2759ef6a2e715765 stream 0 0 2759ef6a2b5db66d 0 0 0 /var/tmp/com.livescribe.PenCommService/EventSocket

2759ef6a2e7158f5 stream 0 0 0 2759ef6a2e7159bd 0 0

2759ef6a2e7159bd stream 0 0 0 2759ef6a2e7158f5 0 0

2759ef6a1c2f924d stream 0 0 0 2759ef6a1c2f9185 0 0

2759ef6a1c2f9185 stream 0 0 0 2759ef6a1c2f924d 0 0

2759ef6a1c2f956d stream 0 0 2759ef6a2b5db47d 0 0 0 /var/tmp/com.WD.WDDMService/Socket

2759ef6a1c2f9315 stream 0 0 0 2759ef6a1c2f96fd 0 0

2759ef6a1c2f96fd stream 0 0 0 2759ef6a1c2f9315 0 0

2759ef6a1c2f90bd stream 0 0 0 2759ef6a1c2fbbb5 0 0 /var/run/mDNSResponder

2759ef6a1c2fbbb5 stream 0 0 0 2759ef6a1c2f90bd 0 0

2759ef6a1c2f9955 stream 0 0 0 2759ef6a1c2f9a1d 0 0

2759ef6a1c2f9a1d stream 0 0 0 2759ef6a1c2f9955 0 0

2759ef6a1c2faf35 stream 0 0 2759ef6a28d0730d 0 0 0 /var/run/pppconfd

2759ef6a1c2fada5 stream 0 0 2759ef6a28a3dbc5 0 0 0 /var/tmp/com.livescribe.PenCommService/DataSocket

2759ef6a1c2facdd stream 0 0 2759ef6a28a3dfa5 0 0 0 /var/tmp/com.livescribe.PenCommService/EventSocket

2759ef6a1c2f9e05 stream 0 0 2759ef6a28a3e385 0 0 0 /var/run/scxfsmond

2759ef6a1c2f9ecd stream 0 0 2759ef6a28a27f2d 0 0 0 /var/run/com.macpaw.CleanMyMac3.Agent.socket

2759ef6a1c2f9f95 stream 0 0 2759ef6a28a16d35 0 0 0 /private/var/run/cupsd

2759ef6a1c2fac15 stream 0 0 2759ef6a28a16195 0 0 0 /var/run/usbmuxd

2759ef6a1c2fab4d stream 0 0 2759ef6a28a0166d 0 0 0 /var/run/systemkeychaincheck.socket

2759ef6a1c2fa05d stream 0 0 2759ef6a289ea6ed 0 0 0 /var/run/portmap.socket

2759ef6a1c2faa85 stream 0 0 2759ef6a289ea9d5 0 0 0 /var/run/vpncontrol.sock

2759ef6a1c2fa125 stream 0 0 2759ef6a289d509d 0 0 0 /var/rpc/ncacn_np/srvsvc

2759ef6a1c2fa9bd stream 0 0 2759ef6a289bd025 0 0 0 /var/rpc/ncalrpc/srvsvc

2759ef6a1c2fa1ed stream 0 0 2759ef6a289bed35 0 0 0 /var/rpc/ncalrpc/NETLOGON

2759ef6a1c2fa2b5 stream 0 0 2759ef6a289bd11d 0 0 0 /var/rpc/ncacn_np/wkssvc

2759ef6a1c2fa8f5 stream 0 0 2759ef6a289beb45 0 0 0 /var/rpc/ncalrpc/wkssvc

2759ef6a1c2fa82d stream 0 0 2759ef6a289be955 0 0 0 /var/rpc/ncacn_np/mdssvc

2759ef6a1c2fa37d stream 0 0 2759ef6a289be765 0 0 0 /var/rpc/ncacn_np/lsarpc

2759ef6a1c2fa445 stream 0 0 2759ef6a289be66d 0 0 0 /var/rpc/ncalrpc/lsarpc

2759ef6a1c2fa765 stream 0 0 2759ef6a289acd35 0 0 0 /var/run/mDNSResponder

2759ef6a1c2fa50d stream 0 0 2759ef6a28987385 0 0 0 /private/var/run/.sim_diagnosticd_socket

2759ef6a340beb4d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a340bde05

2759ef6a340bde05 dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e716bb5

2759ef6a2e716bb5 dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a340bf575

2759ef6a340bf575 dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a340bf63d

2759ef6a340bf63d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a30e0e895

2759ef6a30e0ea25 dgram 0 0 0 2759ef6a30e0ec7d 2759ef6a30e0ec7d 0

2759ef6a30e0ec7d dgram 0 0 0 2759ef6a30e0ea25 2759ef6a30e0ea25 0

2759ef6a30e0cc75 dgram 0 0 0 2759ef6a30e0bf2d 2759ef6a30e0bf2d 0

2759ef6a30e0bf2d dgram 0 0 0 2759ef6a30e0cc75 2759ef6a30e0cc75 0

2759ef6a30e0e575 dgram 0 0 0 2759ef6a30e0df35 2759ef6a30e0df35 0

2759ef6a30e0df35 dgram 0 0 0 2759ef6a30e0e575 2759ef6a30e0e575 0

2759ef6a30e0e895 dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a30e0c185

2759ef6a30e0eaed dgram 0 0 0 2759ef6a30e0bff5 2759ef6a30e0bff5 0

2759ef6a30e0bff5 dgram 0 0 0 2759ef6a30e0eaed 2759ef6a30e0eaed 0

2759ef6a30e0c185 dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a30e0d05d

2759ef6a1c2fbc7d dgram 0 0 0 2759ef6a1c2fbe0d 2759ef6a1c2fbe0d 0

2759ef6a1c2fbe0d dgram 0 0 0 2759ef6a1c2fbc7d 2759ef6a1c2fbc7d 0

2759ef6a30e0d05d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a30e0cd3d

2759ef6a30e0cd3d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a30e0e31d

2759ef6a30e0e0c5 dgram 0 0 0 2759ef6a30e0e18d 2759ef6a30e0e18d 0

2759ef6a30e0e18d dgram 0 0 0 2759ef6a30e0e0c5 2759ef6a30e0e0c5 0

2759ef6a30e0e31d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a30e0d8f5

2759ef6a30e0d8f5 dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e716aed

2759ef6a2e716aed dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e71488d

2759ef6a2e71488d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e7164ad

2759ef6a2e71456d dgram 0 0 0 2759ef6a2e714635 2759ef6a2e714635 0

2759ef6a2e714635 dgram 0 0 0 2759ef6a2e71456d 2759ef6a2e71456d 0

2759ef6a2e7164ad dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e714955

2759ef6a2e714955 dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e714a1d

2759ef6a2e714a1d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e714d3d

2759ef6a2e714d3d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e715ffd

2759ef6a2e714ecd dgram 0 0 0 2759ef6a2e71631d 2759ef6a2e71631d 0

2759ef6a2e71631d dgram 0 0 0 2759ef6a2e714ecd 2759ef6a2e714ecd 0

2759ef6a2e715ffd dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a2e715cdd

2759ef6a2e715cdd dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a1c2fb18d

2759ef6a2e715a85 dgram 0 0 0 2759ef6a2e71582d 2759ef6a2e71582d 0

2759ef6a2e71582d dgram 0 0 0 2759ef6a2e715a85 2759ef6a2e715a85 0

2759ef6a1c2f9635 dgram 0 0 0 2759ef6a1c2fba25 2759ef6a1c2fba25 0

2759ef6a1c2fba25 dgram 0 0 0 2759ef6a1c2f9635 2759ef6a1c2f9635 0

2759ef6a1c2f8f2d dgram 0 0 0 2759ef6a1c2f8ff5 2759ef6a1c2f8ff5 0

2759ef6a1c2f8ff5 dgram 0 0 0 2759ef6a1c2f8f2d 2759ef6a1c2f8f2d 0

2759ef6a1c2f94a5 dgram 0 0 0 2759ef6a1c2f93dd 2759ef6a1c2f93dd 0

2759ef6a1c2f93dd dgram 0 0 0 2759ef6a1c2f94a5 2759ef6a1c2f94a5 0

2759ef6a1c2fb895 dgram 0 0 0 2759ef6a1c2fb95d 2759ef6a1c2fb95d 0

2759ef6a1c2fb95d dgram 0 0 0 2759ef6a1c2fb895 2759ef6a1c2fb895 0

2759ef6a1c2fb18d dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a1c2f9bad

2759ef6a1c2f9bad dgram 0 0 0 2759ef6a1c2fa69d 0 2759ef6a1c2fa5d5

2759ef6a1c2fb575 dgram 0 0 0 2759ef6a1c2fb0c5 2759ef6a1c2fb0c5 0

2759ef6a1c2fb0c5 dgram 0 0 0 2759ef6a1c2fb575 2759ef6a1c2fb575 0

2759ef6a1c2fb4ad dgram 0 0 0 2759ef6a1c2fb3e5 2759ef6a1c2fb3e5 0

2759ef6a1c2fb3e5 dgram 0 0 0 2759ef6a1c2fb4ad 2759ef6a1c2fb4ad 0

2759ef6a1c2fb31d dgram 0 0 0 2759ef6a1c2fb255 2759ef6a1c2fb255 0

2759ef6a1c2fb255 dgram 0 0 0 2759ef6a1c2fb31d 2759ef6a1c2fb31d 0

2759ef6a1c2faffd dgram 0 0 0 2759ef6a1c2f9c75 2759ef6a1c2f9c75 0

2759ef6a1c2f9c75 dgram 0 0 0 2759ef6a1c2faffd 2759ef6a1c2faffd 0

2759ef6a1c2fae6d dgram 0 0 0 2759ef6a1c2f9d3d 2759ef6a1c2f9d3d 0

2759ef6a1c2f9d3d dgram 0 0 0 2759ef6a1c2fae6d 2759ef6a1c2fae6d 0

2759ef6a1c2fa5d5 dgram 0 0 0 2759ef6a1c2fa69d 0 0

2759ef6a1c2fa69d dgram 0 0 2759ef6a1c2f185d 0 2759ef6a340beb4d 0 /private//var/run/syslog

Registered kernel control modules

id flags pcbcount rcvbuf sndbuf name

1 9 0 131072 131072 com.apple.flow-divert

2 1 1 16384 2048 com.apple.nke.sockwall

3 9 0 524288 524288 com.apple.content-filter

4 9 0 8192 2048 com.apple.packet-mangler

5 1 5 65536 65536 com.apple.net.necp_control

6 1 12 65536 65536 com.apple.net.netagent

7 9 1 524288 524288 com.apple.net.utun_control

8 1 0 65536 65536 com.apple.net.ipsec_control

9 0 33 8192 2048 com.apple.netsrc

a 18 4 8192 2048 com.apple.network.statistics

b 5 0 8192 2048 com.apple.network.tcp_ccdebug

c 1 1 8192 2048 com.apple.network.advisory

Active kernel event sockets

Proto Recv-Q Send-Q vendor class subcla

kevt 0 0 1 6 1

kevt 0 0 1 1 2

kevt 0 0 1 6 1

kevt 0 0 1 1 11

kevt 0 0 1 1 10

kevt 0 0 1001 5 11

kevt 0 0 1 1 7

kevt 0 0 1 1 1

kevt 0 0 1 6 1

kevt 0 0 1 1 2

kevt 0 0 1 6 1

kevt 0 0 1 1 0

Active kernel control sockets

Proto Recv-Q Send-Q unit id name

kctl 0 0 1 2 com.apple.nke.sockwall

kctl 0 0 1 5 com.apple.net.necp_control

kctl 0 0 2 5 com.apple.net.necp_control

kctl 0 0 3 5 com.apple.net.necp_control

kctl 0 0 4 5 com.apple.net.necp_control

kctl 0 0 5 5 com.apple.net.necp_control

kctl 0 0 1 6 com.apple.net.netagent

kctl 0 0 2 6 com.apple.net.netagent

kctl 0 0 3 6 com.apple.net.netagent

kctl 0 0 4 6 com.apple.net.netagent

kctl 0 0 5 6 com.apple.net.netagent

kctl 0 0 6 6 com.apple.net.netagent

kctl 0 0 7 6 com.apple.net.netagent

kctl 0 0 8 6 com.apple.net.netagent

kctl 0 0 9 6 com.apple.net.netagent

kctl 0 0 10 6 com.apple.net.netagent

kctl 0 0 11 6 com.apple.net.netagent

kctl 0 0 12 6 com.apple.net.netagent

kctl 0 0 1 7 com.apple.net.utun_control

kctl 0 0 1 9 com.apple.netsrc

kctl 0 0 2 9 com.apple.netsrc

kctl 0 0 3 9 com.apple.netsrc

kctl 0 0 4 9 com.apple.netsrc

kctl 0 0 5 9 com.apple.netsrc

kctl 0 0 6 9 com.apple.netsrc

kctl 0 0 7 9 com.apple.netsrc

kctl 0 0 9 9 com.apple.netsrc

kctl 0 0 10 9 com.apple.netsrc

kctl 0 0 11 9 com.apple.netsrc

kctl 0 0 12 9 com.apple.netsrc

kctl 0 0 13 9 com.apple.netsrc

kctl 0 0 14 9 com.apple.netsrc

kctl 0 0 15 9 com.apple.netsrc

kctl 0 0 16 9 com.apple.netsrc

kctl 0 0 17 9 com.apple.netsrc

kctl 0 0 18 9 com.apple.netsrc

kctl 0 0 19 9 com.apple.netsrc

kctl 0 0 20 9 com.apple.netsrc

kctl 0 0 21 9 com.apple.netsrc

kctl 0 0 22 9 com.apple.netsrc

kctl 0 0 23 9 com.apple.netsrc

kctl 0 0 24 9 com.apple.netsrc

kctl 0 0 26 9 com.apple.netsrc

kctl 0 0 27 9 com.apple.netsrc

kctl 0 0 28 9 com.apple.netsrc

kctl 0 0 29 9 com.apple.netsrc

kctl 0 0 30 9 com.apple.netsrc

kctl 0 0 31 9 com.apple.netsrc

kctl 0 0 33 9 com.apple.netsrc

kctl 0 0 34 9 com.apple.netsrc

kctl 0 0 36 9 com.apple.netsrc

kctl 0 0 37 9 com.apple.netsrc

kctl 0 0 1 10 com.apple.network.statistics

kctl 0 0 2 10 com.apple.network.statistics

kctl 0 0 3 10 com.apple.network.statistics

kctl 0 0 4 10 com.apple.network.statistics

kctl 0 0 1 12 com.apple.network.advisory

MacBook Pro with Retina display, 10.12.5

Posted on Jun 5, 2017 8:57 AM

Reply

Answer 1

Jun 5, 2017 9:50 AM in response to norcal300

That certainly is an interesting report, but most Readers have no idea what is a good number of connections and what they should be.

Please download and run this non-invasive Utility, share and paste its pre-sanitized report into reply on the forums:

Using Etrecheck

.

Reply

Answer 2

norcal300 Author

Level 1

8 points

Jun 5, 2017 11:01 AM in response to Grant Bennet-Alder

Thank you for the information about Etrecheck (I found some unrelated things I needed to correct already). Here is the report:

EtreCheck version: 3.3.3 (397)

Report generated 2017-06-05 10:53:22

Download EtreCheck from https://etrecheck.com

Runtime: 2:21

Performance: Excellent

Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Problem: No problem - just checking

Hardware Information: ⓘ

MacBook Pro (Retina, 13-inch, Early 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro10,2

1 2.6 GHz Intel Core i5 (i5-3230M) CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 154

Video Information: ⓘ

Intel HD Graphics 4000 - VRAM: 1536 MB

Color LCD 2560 x 1600

Acer S230HL 1920 x 1080 @ 60 Hz

System Software: ⓘ

macOS Sierra 10.12.5 (16F73) - Time since boot: less than an hour

Disk Information: ⓘ

APPLE SSD SM256E disk0 : (251 GB) (Solid State - TRIM: Yes)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> : 210 MB

Recovery HD (disk0s3 - Journaled HFS+) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1 - Journaled HFS+) / [Startup]: 249.77 GB (40.90 GB free)

Core Storage: disk0s2 250.14 GB Online

USB Information: ⓘ

USB20Bus

hub_device

Apple Inc. FaceTime HD Camera (Built-in)

USB20Bus

hub_device

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple, Inc. Keyboard Hub

Apple Inc. Apple Keyboard

USB30Bus

PixArt ICEMOUSE2 USB Optical Mouse

Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus

Gatekeeper: ⓘ

Mac App Store and identified developers

Kernel Extensions: ⓘ

/Library/Extensions

[loaded] com.Cycling74.driver.Soundflower (2.0b2 - SDK 10.10) [Lookup]

/System/Library/Extensions

[not loaded] com.livescribe.kext.LivescribeSmartpen (1.0) [Lookup]

[not loaded] com.wdc.driver.1394.64.10.9 (1.0.1 - SDK 10.9) [Lookup]

[not loaded] com.wdc.driver.USB.64.10.9 (1.0.1 - SDK 10.9) [Lookup]

System Launch Agents: ⓘ

[not loaded] 6 Apple tasks

[loaded] 182 Apple tasks

[running] 94 Apple tasks

System Launch Daemons: ⓘ

[not loaded] 42 Apple tasks

[loaded] 178 Apple tasks

[running] 98 Apple tasks

Launch Agents: ⓘ

[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (EPSON - installed 2017-05-12) [Lookup]

[loaded] com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2017-05-12) [Lookup]

[running] com.epson.eventmanager.agent.plist (EPSON - installed 2017-05-12) [Lookup]

[running] com.epson.scannermonitor.plist (? d676d40 b7c58655 - installed 2017-05-12) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-03-28) [Lookup]

[loaded] com.oracle.java.Java-Updater.plist (? d17269ab be93c7fb - installed 2017-06-05) [Lookup]

[loaded] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-05-05) [Lookup]

Launch Daemons: ⓘ

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 77ec3a65 - installed 2017-04-26) [Lookup]

[not loaded] com.barebones.textwrangler.plist (? ? ? - installed 2011-07-15) [Lookup]

[loaded] com.github.GitHub.GHInstallCLI.plist (GitHub - installed 2013-07-07) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-04-17) [Lookup]

[not loaded] com.gopro.stereomodestatus.plist (? ab93fe2f 980e8174 - installed 2014-02-13) [Lookup]

[running] com.livescribe.PenCommService.plist (? ce8953a9 aeebb45a - installed 2017-04-06) [Lookup]

[loaded] com.macpaw.CleanMyMac3.Agent.plist (MacPaw Inc. - installed 2017-06-05) [Lookup]

[loaded] com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2017-06-05) [Lookup]

[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e fa937570 - installed 2013-06-13) [Lookup]

[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-03-15) [Lookup]

[loaded] com.sharpcast.xfsmond.plist (? aff40924 0 - installed 2012-07-21) [Lookup]

[running] com.wdc.SmartwareDriveService.plist (? b71286b 38882639 - installed 2013-12-04) [Lookup]

[running] com.wdc.WDSmartWareService.plist (? dbb7e753 5d40f1ba - installed 2015-02-04) [Lookup]

[not loaded] com.westerndigital.WD-Drive-Manager-Installer.plist (? b8f7fa94 389a0de3 - installed 2014-11-16) [Lookup]

[loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-05-05) [Lookup]

User Launch Agents: ⓘ

[loaded] com.adobe.ARM.[...].plist (? c8cc50de 9a4ba8ca - installed 2017-05-10) [Lookup]

[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-05-31) [Lookup]

[loaded] com.macpaw.CleanMyMac3.Scheduler.plist (MacPaw Inc. - installed 2017-06-05) [Lookup]

User Login Items: ⓘ

Flux Application

(/Applications/Flux.app)

iTunesHelper Application (Apple, Inc. - installed 2017-06-05)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Dropbox Application - Hidden

(/Applications/Dropbox.app)

Google Drive Application

(/Applications/Google Drive.app)

handyPrintDaemon Application

(~/Library/PreferencePanes/handyPrint.prefPane/Contents/Library/LoginItems/hand yPrintDaemon.app)

AdobeResourceSynchronizer Application - Hidden

(/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app)

CleanMyMac 3 Menu Application (MacPaw Inc. - installed 2017-06-05)

(/Applications/CleanMyMac 3.app/Contents/MacOS/CleanMyMac 3 Menu.app)

CleanMyMac 3 Menu Application (MacPaw Inc. - installed 2017-06-05)

(/Applications/CleanMyMac 3.app/Contents/MacOS/CleanMyMac 3 Menu.app)

Livescribe AutoLaunch Application (? 0 - installed 2017-04-08)

(/Applications/Echo Desktop.app/Contents/MacOS/Pen Auto Launcher.app)

WDQuickView Application

(/Library/Application Support/WDSmartWare/WDQuickView.app)

Internet Plug-ins: ⓘ

DirectorShockwave: 12.1.0r150 (installed 2014-03-10) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2016-11-27) [Lookup]

Unity Web Player: UnityPlayer version 4.1.5f1 (installed 2013-11-10) [Lookup]

Flip4Mac WMV Plugin: 2.3.8.1 (installed 2013-06-02) [Lookup]

Autodesk123DCatchPlugIn64: Autodesk123DCatchPlugIn64 1.1.65 (installed 2013-07-03) [Lookup]

AdobePDFViewerNPAPI: 11.0.20 (installed 2017-06-05) [Lookup]

FlashPlayer-10.6: 25.0.0.171 (installed 2017-06-05) [Lookup]

Silverlight: 5.1.30514.0 (installed 2016-11-27) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-06-05)

Flash Player: 25.0.0.171 (installed 2017-06-05) [Lookup]

iPhotoPhotocast: 7.0 (installed 2013-06-02)

SharePointBrowserPlugin: 14.3.8 (installed 2013-11-01) [Lookup]

AdobePDFViewer: 11.0.20 (installed 2017-05-10) [Lookup]

JavaAppletPlugin: Java 8 Update 131 build 11 (installed 2017-06-05) Check version

User internet Plug-ins: ⓘ

WebEx64: 1.0 (installed 2014-06-28) [Lookup]

BrowserPlus_2.9.8: 2.9.8 (installed 2011-04-25) [Lookup]

npUplayer.1.0.2.7: mydlink services plugin_x86_64 1.0.2.7 (installed 2015-12-11) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2016-11-27) [Lookup]

Picasa: 1.0 (installed 2012-04-24) [Lookup]

Safari Extensions: ⓘ

[not loaded] iTube Studio - iSkysoft Studio - http://www.iskysoft.com (installed 2015-12-25)

[not loaded] iMedia Converter Deluxe - iSkysoft Studio - http://www.iskysoft.com (installed 2013-10-14)

3rd Party Preference Panes: ⓘ

3ivx MPEG-4 (installed 2012-07-26) [Lookup]

BrowserPlus (installed 2011-04-25) [Lookup]

Flash Player (installed 2017-04-26) [Lookup]

Flip4Mac WMV (installed 2013-06-02) [Lookup]

GoPro (installed 2014-02-13) [Lookup]

handyPrint (installed 2012-09-29) [Lookup]

Java (installed 2017-06-05) [Lookup]

MySQL (installed 2016-11-27) [Lookup]

WDQuickView (installed 2016-11-27) [Lookup]

Time Machine: ⓘ

Mobile backups: OFF

Auto backup: NO - Auto backup turned off

Volumes being backed up:

Macintosh HD: Disk size: 249.77 GB Disk used: 208.87 GB

Destinations:

My Book [Local]

Total size: 2.00 TB

Total number of backups: 1

Oldest backup: 11/4/15, 12:03 PM

Last backup: 11/4/15, 12:03 PM

Size of backup disk: Excellent

Backup size 2.00 TB > (Disk size 249.77 GB X 3)

Top Processes by CPU: ⓘ

6% WindowServer -daemon

3% kernel_task

2% Epson Scanner Monitor

0% Dropbox

0% fontd

Top Processes by Memory: ⓘ

899 MB kernel_task

303 MB Finder

229 MB Google Drive

229 MB Dropbox

139 MB assistant_service

Top Processes by Network Use: ⓘ

Input Output Process name

76 KB 181 KB Dropbox

83 KB 14 KB mDNSResponder

34 KB 42 KB apsd

8 KB 3 KB netbiosd

8 KB 1 KB WDQuickView

Top Processes by Energy Use: ⓘ

8.70 helpd

7.06 WindowServer -daemon

2.10 Epson Scanner Monitor

1.52 nsurlsessiond --privileged

Virtual Memory Information: ⓘ

3.63 GB Available RAM

1.79 GB Free RAM

4.37 GB Used RAM

1.85 GB Cached files

0 B Swap Used

Diagnostics Information: ⓘ

2017-06-05 05:45:37 /Library/Logs/DiagnosticReports/firefox_2017-06-05-054537_[redacted].cpu_resour ce.diag [Details]

/Applications/Firefox.app/Contents/MacOS/firefox

Reply

Answer 3

Allan Jones

Level 9

78,350 points

Jun 5, 2017 11:50 AM in response to norcal300

I've had Western Digital's software slow down and cause stalls and overheating in two different Macs, one an older PowerPC and the other a current Intel iMac. When I deleted all the WD stuff with extreme prejudice, performance returned to normal. You do not need third party disk drive software to use a drive for Time Machine. Several people have posted here that they called WD support about performance issues with their software and the WD techs told them to uninstall it!

Reply

Answer 4

Jun 5, 2017 1:54 PM in response to norcal300

Consider yourself extremely lucky for CMM3 has not caused problems on your Mac yet. It is notorious for deleting parts of the operating system that it consider unnecessary. So far all of the Macs I have found it were all suffering problems. Some of them had there operating system so corrupted that the only solution for them was reformed and reinstall everything from scratch.

Reply

Answer 5

Jun 5, 2017 2:08 PM in response to norcal300

norcal300 wrote:

What is the problem with CleanMyMac3? It seems to work fine.

So you are now saying you don't have problems? If you are still having problems uninstall CleanMyMac3. If you are not having problems do not uninstall CleanMyMac3. The decision is yours. All we can do is offer advice.

Reply

Answer 6

Jun 5, 2017 2:32 PM in response to norcal300

The Mac does not accumulate filth, and therefore does not have to be cleaned.

Third-party Utilities that purport to clean cannot possibly have the same insider information as Apple's own developers, and Apple's own developers do everything they possibly can to make your Mac run fast and trouble-free.

With 10.9 and later, the philosophy with memory has completely changed. Now it is, "Unused memory is wasted memory" and MacOS has been completely changed to keep as much as possible in memory, and keeping some items in compressed form. When additional memory is called for, MacOS knows exactly what can be released with impunity, to gain maximum speed. Third-party cleaners just mess that up.

Reply

Answer 7

norcal300 Author

Level 1

8 points

Jun 5, 2017 2:55 PM in response to BobTheFisherman

I'll uninstall CleanMyMac since there seems to be agreement that it can cause problems deleting files but that seems unrelated to why netstat is showing so many connections. I recognize everyone that responded has much more Mac experience than I do but no one answer my original question: does the number of connections I have seem reasonable. Clearly I had a problem because Word would not open without entering a licensing key (after using it for years) - Microsoft support said it was suspicious. I left the computer industry just after 9/11/2001 (went back to flying helicopters for the military) but I have enough experience to react to your last comments of "So you are now saying you don't have problems? If you are still having problems uninstall CleanMyMac3. If you are not having problems do not uninstall CleanMyMac3. The decision is yours." No one ever answered if the number of connections I have are normal. If they are, then I probably do not have a problem. But I have worked with many other operating systems where there are unwanted processes present that a user is unaware of. I suspect CleanMYMac issues would not result in unwanted process but rather things not working correctly. My issue is the load all the process maybe imposing.

Reply

Answer 8

Jun 5, 2017 3:02 PM in response to norcal300

When troubleshooting it is best to start from a known condition. We know that CleanMyMac3 causes problems. Let's remove that variable before delving deeper into your apparent additional problem. Surely a helicopter mechanic would eliminate known possible contributing problems when troubleshooting a vibration for example.

Reply

Answer 9

norcal300 Author

Level 1

8 points

Jun 5, 2017 3:34 PM in response to BobTheFisherman

Sorry if I sound frustrated (which I am). I deleted CleanMyMac and restarted but now notice there is still a socket open for it (/var/run/com.macpaw.CleanMyMac3.Agent.socket). I still have the same very long results from netstat.

Reply

Answer 10

Jun 5, 2017 4:00 PM in response to norcal300

You have to follow the developer's instructions to remove CleanMyMac completely.

Did you give anyone remote access to your computer when you were dealing with Word or at any time?

Why do you have Western Digital apps running?

Try starting up your computer in safe mode to see if there is an impact on running apps.

But first, completely remove CleanMyMac.

Reply

Answer 11

norcal300 Author

Level 1

8 points

Jun 5, 2017 4:46 PM in response to BobTheFisherman

Now my shame has to be admitted - I did let someone remotely connect (I know, I know). When Word would not open like it always had, I got careless and googled for a Microsoft support line and didn't catch that it was an ad and not really a Microsoft official page. They used the same software, LogMEIN123.com that Microsoft later said they also used (not sure that is true). Shortly after giving access the person said something that didn't make sense so I closed the connection, shutdown the machine, restarted, deleted any references to LogMeIn123, check processes to make sure nothing was running as LogMEIN123. But I am still worried so that is why I am asking about the processes and network connections. I did delete according to the instructions which were simply to use their own program uninstall. I have many more connections on netstat than my son's MacBook Pro although I have more software installed. I have an external WD drive that I used for backup.

Reply

Answer 12

Jun 5, 2017 5:01 PM in response to norcal300

If I inadvertently gave some unknown entity/scammer remote access to my computer I would save off all my data, not apps, then reinstall the operating system.

You are using Time Machine for backup. Time Machine does not need third party apps like the WD apps to do its backup function.

Reply

Answer 13

Kurt Lang

Level 9

68,726 points

Jun 5, 2017 5:15 PM in response to norcal300

There's no telling what the scam support site did, and there's no possible way to absolutely ensure you can find and undo/remove whatever they may have done. Your best option at this point is to erase the drive and reinstall the OS and your third party apps from scratch. Do not use the TM backup as part of the restore. It will only restore the garbage, too.

Many of those connections could be a backdoor connection left behind by the scammer. Or, they simply may have turned on remote access in the Sharing settings of the System Preferences. Who knows how long they may have been watching your activity.

Also, all Google apps are tremendous resource hogs. Not only do they eat up a lot of RAM, but they all spend enormous amounts of system time silently collecting marketing data and sending it back to them. The apps are free for a reason, and it's not out of the goodness of Google's heart. Seriously, no one anywhere should ever install or use any app produced by Google. That means, do not reinstall Chrome, Google Earth, or any of their other junk.

Reply

Answer 14

Jun 5, 2017 11:41 AM in response to norcal300

Start by uninstalling CleanMyMac3.

Reply

Answer 15

norcal300 Author

Level 1

8 points

Jun 5, 2017 11:54 AM in response to Allan Jones

Thank you, I will try that

Reply