Safari advertisement popup

I have removed all the cleaners now, except for Sophos. It's asking for a password to uninstall, which I will have to figure out. I will get it removed, but I'm guessing it isn't the cause of this problem as I've been using it for past 3 years now. The pop up happen just a day ago.

Restarted the notebook, and yes, it still pops up. Etrecheck report after uninstallation of cleaners:

EtreCheck version: 3.4 (420)

Report generated 2017-07-18 21:41:14

Download EtreCheck from https://etrecheck.com

Runtime: 1:56

Performance: Excellent

Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Problem: No problem - just checking

Hardware Information: ⓘ

MacBook Air

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Air - model: MacBookAir6,2

1 1.7 GHz Intel Core i7 (i7-4650U) CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 383

iCloud Quota: 200 MB available (Low!)

Video Information: ⓘ

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1680 x 1050

Disk Information: ⓘ

APPLE SSD SD0256F disk0: (251 GB) (Solid State - TRIM: Yes)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

(disk0s2) <not mounted> [CoreStorage Container]: 249.84 GB

Recovery HD (disk0s3 - Journaled HFS+) <not mounted> [Recovery]: 814 MB

USB Information: ⓘ

USB30Bus

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus

Virtual disks: ⓘ

Macintosh HD (disk1 - Journaled HFS+) / [Startup]: 249.51 GB (51.42 GB free)

Encrypted AES-XTS Unlocked

Physical disk: disk0s2 249.84 GB Online

System Software: ⓘ

macOS Sierra 10.12.5 (16F73) - Time since boot: less than an hour

Configuration files: ⓘ

/etc/hosts - Count: 30

System Integrity Protection status: disabled

Gatekeeper: ⓘ

Mac App Store and identified developers

Kernel Extensions: ⓘ

/Applications/Plantronics Hub.app

[loaded] com.plantronics.driver.PlantronicsDriverShield (4.3 - SDK 10.8) [Lookup]

/Applications/VMware Fusion.app

[not loaded] com.vmware.kext.vmci (7.1.3) [Lookup]

[not loaded] com.vmware.kext.vmioplug.14.1.5 (7.1.3) [Lookup]

[not loaded] com.vmware.kext.vmnet (7.1.3) [Lookup]

[not loaded] com.vmware.kext.vmx86 (7.1.3) [Lookup]

[not loaded] com.vmware.kext.vsockets (7.1.3) [Lookup]

/Library/Extensions

[not loaded] com.ZTE.driver.ZTEUSBCDCACMData (ZTEDriver_MacV1.6.6 - SDK 10.9) [Lookup]

[not loaded] com.ZTE.driver.ZTEUSBMassStorageFilter (ZTEDriver_MacV1.6.6 - SDK 10.9) [Lookup]

[loaded] com.sophos.driver.devctrl (9.6.52 - SDK 10.6) [Lookup]

[loaded] com.sophos.kext.oas (9.6.52 - SDK 10.11) [Lookup]

[loaded] com.sophos.nke.swi (9.6.52 - SDK 10.11) [Lookup]

[not loaded] com.zte.driver.cdc_ecm_qmi (1.2.4) [Lookup]

[not loaded] com.zte.driver.cdc_usb_bus (1.2.4) [Lookup]

[loaded] net.sf.tuntaposx.tap (20150118) [Lookup]

[loaded] net.sf.tuntaposx.tun (20150118) [Lookup]

/Library/Extensions/HuaweiDataCardDriver_10_9.kext/Contents/PlugIns

[not loaded] com.MBB.driver.MBBACMData (5.01.03.00 - SDK 10.8) [Lookup]

[not loaded] com.MBB.driver.MBBActivateDriver (5.01.03 - SDK 10.8) [Lookup]

[not loaded] com.MBB.driver.MBBEthernetData (5.01.03.00 - SDK 10.8) [Lookup]

/System/Library/Extensions

[not loaded] com.FTDI.driver.FTDIUSBSerialDriver (2.2.18 - SDK 10.6) [Lookup]

Startup Items: ⓘ

HWNetMgr: Path: /Library/StartupItems/HWNetMgr

Startup items no longer function in OS X Yosemite or later

System Launch Agents: ⓘ

[not loaded] 8 Apple tasks

[loaded] 180 Apple tasks

[running] 94 Apple tasks

System Launch Daemons: ⓘ

[not loaded] 39 Apple tasks

[loaded] 176 Apple tasks

[running] 103 Apple tasks

Launch Agents: ⓘ

[running] HWPortCfg.plist (? 799429ac 8e92685a - installed 2016-05-19) [Lookup]

[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2016-08-19) [Lookup]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2016-08-19) [Lookup]

[loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2016-07-01) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-03-29) [Lookup]

[loaded] com.oracle.java.Java-Updater.plist (? b1c75e6a be93c7fb - installed 2017-05-20) [Lookup]

[running] com.sophos.agent.plist (Sophos - installed 2017-04-17) [Lookup]

[running] com.sophos.uiserver.plist (Sophos - installed 2017-04-17) [Lookup]

[running] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2017-07-18) [Lookup]

[running] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2017-07-18) [Lookup]

[not loaded] net.juniper.pulsetray.plist (? b3b8c25a 844050f8 - installed 2016-12-09) [Lookup]

[loaded] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Lookup]

[loaded] ouc.plist (Shell Script 95eaf36e - installed 2016-05-19) [Lookup]

Launch Daemons: ⓘ

[running] com.absolute.abtsvcd.plist (Shell Script 2495b64d - installed 2017-04-29)

[running] com.absolute.rpcgeo.plist (? ? ? - installed 2015-08-05) [Lookup]

[running] com.absolute.rpcnet.plist (Shell Script 39b4241e - installed 2017-04-29)

[loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2016-08-19) [Lookup]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2016-08-19) [Lookup]

[running] com.adobe.adobeupdatedaemon.plist (Adobe Systems, Inc. - installed 2016-07-01) [Lookup]

[loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2016-06-27) [Lookup]

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 18a4fa69 - installed 2017-06-24) [Lookup]

[running] com.cisco.anyconnect.ciscod.plist (? d78c2ec9 e9a59331 - installed 2014-11-19) [Lookup]

[running] com.cisco.anyconnect.vpnagentd.plist (? a7cbca7 4103b5b - installed 2014-11-19) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-04-18) [Lookup]

[loaded] com.macpaw.CleanMyMac3.Agent.plist (? 7f4ba9a8 65c2b9e6 - installed 2016-12-09) [Lookup]

[loaded] com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2017-07-18) [Lookup]

[loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-07-12) [Lookup]

[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e afb3bef0 - installed 2010-08-25) [Lookup]

[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-03-15) [Lookup]

[running] com.sophos.common.servicemanager.plist (Sophos - installed 2017-04-17) [Lookup]

[loaded] com.surteesstudios.Bartender.BartenderInstallHelper.plist (Surtees Studios Limited - installed 2016-09-15) [Lookup]

[loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2017-05-23) [Lookup]

[running] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2017-07-18) [Lookup]

[running] net.juniper.AccessService.plist (? 992eb637 bd925ab6 - installed 2015-01-14) [Lookup]

[not loaded] net.juniper.UninstallPulse.plist (? 98f05815 bc50d62f - installed 2015-01-14) [Lookup]

[loaded] net.sf.tuntaposx.tap.plist (Apple, Inc. - installed 2017-04-29)

[loaded] net.sf.tuntaposx.tun.plist (Apple, Inc. - installed 2017-04-29)

[loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Lookup]

User Launch Agents: ⓘ

[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2016-06-27) [Lookup]

[not loaded] com.macpaw.CleanMyMac3.Scheduler.plist (MacPaw Inc. - installed 2017-07-18) [Lookup]

User Login Items: ⓘ

Magnet Application

(/Applications/Magnet.app)

iTunesHelper Application (Apple, Inc. - installed 2017-05-20)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Caffeine Application

(/Applications/Caffeine.app)

AdobeResourceSynchronizer Application - Hidden

(/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)

SwitchResX Daemon Application - Hidden

(~/Library/PreferencePanes/SwitchResX.prefPane/Contents/MacOS/SwitchResX Daemon.app)

Internet Plug-ins: ⓘ

AdobeAAMDetect: 3.0.0.0 (installed 2016-07-01) [Lookup]

FlashPlayer-10.6: 26.0.0.137 (installed 2017-07-18) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-05-17)

AdobePDFViewerNPAPI: 15.017.20050 (installed 2016-12-09) [Lookup]

AdobePDFViewer: 15.017.20050 (installed 2016-12-09) [Lookup]

Flash Player: 26.0.0.137 (installed 2017-07-18) [Lookup]

SharePointBrowserPlugin: 14.7.1 (installed 2016-12-15) [Lookup]

Silverlight: 5.1.50901.0 (installed 2017-05-20) [Lookup]

MeetingJoinPlugin: 1.0 (installed 2017-06-27) [Lookup]

JavaAppletPlugin: Java 8 Update 131 build 11 (installed 2017-05-20) Check version

User internet Plug-ins: ⓘ

WebEx64: 1.1.0 (installed 2016-10-20) [Lookup]

npUplayer.1.0.2.7: mydlink services plugin_x86_64 1.0.2.7 (installed 2015-12-11) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2016-12-09) [Lookup]

Safari Extensions: ⓘ

[not loaded] igTranslator for Google - Mike Avilov - http://add0n.com/google-translator.html (installed 2015-02-12)

[enabled] Okta Secure Web Authentication Plug-in - Okta - http://www.okta.com (installed 2016-10-24)

[not loaded] Ultimate Status Bar - Karl Dearden - http://ultimatestatusbar.com/ (installed 2015-02-12)

[not loaded] Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (installed 2016-12-24)

[not loaded] 1Password - AgileBits - https://agilebits.com/onepassword (installed 2016-12-24)

[enabled] AdBlock - BetaFish, Inc. - https://getadblock.com (installed 2017-07-18)

[enabled] Translate - SideTree.com - Apps for Mac and Web - http://SideTree.com/extensions.html#Translate (installed 2016-12-11)

[not loaded] Evernote Web Clipper - Evernote Corp. - http://evernote.com (installed 2016-12-24)

Audio Plug-ins: ⓘ

BartenderAudioPlugIn: 1.0.0 (installed 2016-08-01) [Lookup]

3rd Party Preference Panes: ⓘ

Flash Player (installed 2017-06-24) [Lookup]

FUSE for OS X (OSXFUSE) (installed 2015-02-07) [Lookup]

Java (installed 2017-05-20) [Lookup]

MacFUSE (installed 2008-12-20) [Lookup]

NTFS-3G (installed 2010-10-11) [Lookup]

SwitchResX (installed 2016-12-09) [Lookup]

Time Machine: ⓘ

Time Machine not configured!

Top Processes by CPU: ⓘ

7% WindowServer

2% kernel_task

2% Box Sync Monitor

1% Box Sync

1% com.apple.WebKit.WebContent

Top Processes by Memory: ⓘ

786 MB kernel_task

382 MB Safari

372 MB com.apple.WebKit.WebContent

333 MB SophosScanD

136 MB mds_stores

Top Processes by Network Use: ⓘ

Input Output Process name

28 KB 158 KB TeamViewer_Service

149 KB 31 KB mDNSResponder

21 KB 27 KB SophosWebIntelligence

8 KB 7 KB apsd

5 KB 5 KB assistantd

Top Processes by Energy Use: ⓘ

11.84 WindowServer

5.34 com.apple.WebKit.WebContent

3.58 Box Sync

3.00 Safari

Virtual Memory Information: ⓘ

4.14 GB Available RAM

750 MB Free RAM

3.86 GB Used RAM

3.41 GB Cached files

0 B Swap Used

Software installs: ⓘ

Skype for Business: (installed 2017-06-21)

Project Viewer 365: 17.20.731 (installed 2017-06-23)

Skype for Business: (installed 2017-06-27)

TeamViewer: 12.0.78517 (installed 2017-06-27)

Adobe Flash Player: (installed 2017-07-12)

Microsoft AutoUpdate: (installed 2017-07-12)

Microsoft Outlook for Mac: (installed 2017-07-13)

Microsoft PowerPoint for Mac: (installed 2017-07-13)

Microsoft Excel for Mac: (installed 2017-07-13)

Microsoft Word for Mac: (installed 2017-07-14)

Combo Cleaner: 1.1.1 (installed 2017-07-18)

App Cleaner & Uninstaller: 4.1 (installed 2017-07-18)

TeamViewer: 12.0.78517 (installed 2017-07-18)

TeamViewer: 12.0.78517 (installed 2017-07-18)

Install information may not be complete.

Files deleted by EtreCheck: ⓘ

2017-07-18 17:37:10 - /Library/LaunchAgents/com.cisco.anyconnect.gui.plist - Unknown

I ran out of ideas, thus had installed numerous cleaners and removers, but no luck.

Sorry I failed to mention that clicking on Safari does not trigger the ads. It was booting up the notebook that triggers the ad from Safari automatically. The random intervals popup was automatic too, even when Safari is not in use and quit from running in background. Some of the ads were related to Mackeeper, so I'm guessing it's a malware from Mackeeper?

Did both Soft and Hard reset with restarts after each step - still pops up.

But the pop up URL is different this time - http://app5.letmacwork.world/landings/17.216/?affid=mzb_248.7351133.1500390636.3 0.mzb&utm_source=adcsh&utm_medium=cpi&ut…

Inspector view output:

Timestamp (5):

18 Jul, 2017 23:15:46 PM

Malaysia Time

MODEL: MacBookAir6,2

RAM: 8.192 GB

DISK SPACE: 20.63%

OS X: 10.12.5

BUILD: 16F73

Login Items:

"Magnet"

"iTunesHelper"

"Caffeine"

"AdobeResourceSynchronizer"

"SwitchResX Daemon"

Home folder: hidden & invisibles

(path: ~/)

.account

.android

.anyconnect

.bash_sessions

.cache

.CFUserTextEncoding

.cisco

.config

.cups

.DS_Store

.fishBMC-data

.kdiff3rc

.kodi

.mailcap

.mime.types

.oracle_jre_usage

.pdfsam

.putty

.rnd

.RSA

.sh_history

.ssh

.subversion

.swfinfo

.swt

Trash

.viminfo

.Xauthority

Library

User Library:

(path: ~/Library/)

.DS_Store

.localized

Accounts

Address Book Plug-Ins

Application

Application Scripts

Application Support

Assistant

Assistants

Audio

Autosave Information

Backups

Caches

Calendars

CallServices

ColorPickers

Colors

ColorSync

com.apple.nsurlsessiond

Compositions

Containers

Cookies

CoreData

CoreFollowUp

Data

Developer

Dictionaries

Dropbox

Favorites

Filters

FontCollections

Fonts

Fonts Disabled

GameKit

Google

Group Containers

IdentityServices

iMovie

Input Methods

Internet Plug-Ins

iTunes

Keyboard

Keyboard Layouts

KeyboardServices

Keychains

LanguageModeling

LaunchAgents

LinkedIn

Logs

Mail

Maps

Messages

Metadata

Mobile Documents

MobileDevice

Passes

PhotoshopCrashes

PreferencePanes

Preferences

Printers

PubSub

Receipts

Safari

Saved Application State

Saved Searches

Screen Savers

Services

Sharing

Sounds

Spelling

StickiesDatabase

Suggestions

SyncedPreferences

Voices

WebKit

Widgets

User Launch Agents:

(path: ~/Library/LaunchAgents/)

.DS_Store

com.adobe.AAM.Updater-1.0.plist

User Internet Plug-Ins:

(path: ~/Library/Internet Plug-Ins/)

Google Earth Web Plug-in.plugin

LWAPlugin15.8.bundle

npUplayer.1.0.2.7.plugin

WebEx64.plugin

User Application Support:

(path: ~/Library/Application Support/)

.ACCC_Lock

.ADCS_Lock

AddressBook

Adobe

AirDroid

App Store

Box

CallHistoryDB

CallHistoryTransactions

CEF

CloudDocs

com.apple.ProtectedCloudStorage

com.apple.QuickLook

com.apple.sbd

com.apple.sharedfilelist

com.apple.spotlight

com.apple.spotlight.Shortcuts

com.apple.TCC

com.iMobie.PhoneClean

com.iMobie.SilentCleanServer

com.sqwarq.DetectX

Console

CrashReporter

CrushFTP

DiskImages

Dock

Dropbox

EtreCheck

Find Any File

Firefox

GIMP

Google

Google Earth

Helper

icdd

iCloud

iLifeMediaBrowser

iskysoft

iTerm

Java

JREInstaller

Juniper Networks

Kodi

Malwarebytes

Microsoft

MobileSync

Mozilla

NotificationCenter

Oracle

org.videolan.vlc

Plantronics

PlistEdit Pro

PPHelper

Preview

Quick Look

Rdio

Skype

Sony Ericsson Bridge for Mac

Sublime Text 2

SyncServices

T

TeamViewer

Ubiquity

uTorrent

UUBackup

videosubscriptionsd

VLC

VMware Fusion

WebEx Folder

X11

µTorrent

Safari Extensions:

(path: ~/Library/Safari/Extensions/)

Applications folder:

.DS_Store

.localized

1Password.app

Adobe Acrobat DC

Adobe Creative Cloud

Adobe Photoshop CC 2015.5

App Store.app

Automator.app

Box Sync.app

Caffeine.app

Calculator.app

Calendar.app

ChartNexus.app

Chess.app

Cisco

Contacts.app

CrushFTP.log

Dashboard.app

Dictionary.app

DVD Player.app

Evernote.app

FaceTime.app

FileZilla.app

Firefox.app

Font Book.app

Gemini 2.app

GNS3.app

Google Chrome.app

Google Earth.app

Headset Updater.app

iBooks.app

Image Capture.app

iOS App Signer.app

iTunes.app

jobs

Junos Pulse.app

kdiff3.app

Kodi.app

Launchpad.app

logs

Magnet.app

Mail.app

MAMP

MAMP PRO

Maps.app

Messages.app

Microsoft Communicator.app

Microsoft Excel.app

Microsoft OneNote.app

Microsoft Outlook.app

Microsoft PowerPoint.app

Microsoft Silverlight

Microsoft Word.app

Mission Control.app

MusicBrainz Picard.app

Notes.app

PCClient.app

PDFsam Basic 2.2.4.app

Photo Booth.app

Photos.app

Plantronics Hub.app

prefs.XML

Preview.app

ProjectViewer365.app

QuickTime Player.app

Reminders.app

Remote Desktop Connection.app

Remove Sophos Endpoint.app

Safari.app

SDFormatter.app

SecurID.app

Self Service.app

sessions.obj

Siri.app

Skype for Business.app

Skype.app

Sophos Anti-Virus.app

ssh_host_dsa_key

ssh_host_dsa_key.pub

ssh_host_rsa_key

ssh_host_rsa_key.pub

statsDB

Stickies.app

Sublime Text 2.app

syncsDB

System Preferences.app

TeamViewer.app

TextEdit.app

The Clock.app

The Unarchiver.app

Time Machine.app

users

Utilities

uTorrent.app

VLC.app

VMware Fusion.app

Wireshark.app

Xcode.app

Users Shared Folder:

(path: /Users/Shared:)

.DS_Store

.localized

.rpc

adi

Adobe

Infected

SC Info

Local Domain Library Folder

(path: /Library/)

.localized

.rpcnet

Application Support

Audio

Automator

Caches

ColorPickers

ColorSync

Components

Compositions

Contextual Menu Items

CoreMediaIO

Desktop Pictures

Developer

DirectoryServices

Documentation

DropboxHelperTools

Extensions

Filesystems

Fonts

Fonts Disabled

Frameworks

Google

Graphics

Image Capture

Input Methods

Internet Plug-Ins

iTunes

Java

Keyboard Layouts

Keychains

LaunchAgents

LaunchDaemons

Logs

Managed Preferences

Messages

Modem Scripts

OpenDirectory

PDF Services

Perl

PreferencePanes

Preferences

Printers

PrivilegedHelperTools

Python

QuickLook

QuickTime

Raft

Receipts

Ruby

Sandbox

Screen Savers

ScriptingAdditions

Scripts

Security

Sophos Anti-Virus

Speech

Spotlight

StartupItems

SystemMigration

SystemProfiler

Updates

User Pictures

Video

WebServer

Widgets

Local Domain Library Application Support

(path: /Library/Application Support/)

.d9+g6ZzmhS

Adobe

App Store

Apple

ApplePushService

com.apple.TCC

CrashReporter

CrushFTP

GarageBand

iLifeMediaBrowser

JAMF

Juniper Networks

Logic

Macromedia

Microsoft

Mozilla

MozyPro

Oracle

ProApps

regid.1986-12.com.adobe

Script Editor

SecurID

Sophos

VMware

Wireshark

Local Domain Library Extensions

(path: /Library/Extensions/)

ACS6x.kext

ArcMSR.kext

ATTOCelerityFC8.kext

ATTOExpressSASHBA2.kext

ATTOExpressSASRAID2.kext

BJUSBLoad.kext

CalDigitHDProDrv.kext

cdc.kext

cdc_ecm_qmi.kext

CIJUSBLoad.kext

FTDIUSBSerialDriver.kext

HighPointIOP.kext

HighPointRR.kext

hp_io_enabler_compound.kext

HuaweiDataCardDriver_10_9.kext

PromiseSTEX.kext

SoftRAID.kext

SophosFileProtection.kext

SophosPortInterceptor.kext

SophosWebProtection.kext

tap.kext

tun.kext

ZTEUSBCDCACMData.kext

ZTEUSBMassStorageFilter.kext

Local Domain Library Launch Agents

(path: /Library/LaunchAgents/)

com.adobe.AAM.Updater-1.0.plist

com.adobe.AdobeCreativeCloud.plist

com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist

com.google.keystone.agent.plist

com.oracle.java.Java-Updater.plist

com.sophos.agent.plist

com.sophos.uiserver.plist

com.teamviewer.teamviewer.plist

com.teamviewer.teamviewer_desktop.plist

HWPortCfg.plist

net.juniper.pulsetray.plist

org.macosforge.xquartz.startx.plist

ouc.plist

Local Domain Library Launch Daemons

(path: /Library/LaunchDaemons/)

com.absolute.abtsvcd.plist

com.absolute.rpcgeo.plist

com.absolute.rpcnet.plist

com.adobe.adobeupdatedaemon.plist

com.adobe.agsservice.plist

com.adobe.ARMDC.Communicator.plist

com.adobe.ARMDC.SMJobBlessHelper.plist

com.adobe.fpsaud.plist

com.cisco.anyconnect.ciscod.plist

com.cisco.anyconnect.vpnagentd.plist

com.google.keystone.daemon.plist

com.microsoft.autoupdate.helper.plist

com.microsoft.office.licensing.helper.plist

com.oracle.java.Helper-Tool.plist

com.sophos.common.servicemanager.plist

com.surteesstudios.Bartender.BartenderInstallHelper.plist

com.teamviewer.Helper.plist

com.teamviewer.teamviewer_service.plist

net.juniper.AccessService.plist

net.juniper.UninstallPulse.plist

net.sf.tuntaposx.tap.plist

net.sf.tuntaposx.tun.plist

org.macosforge.xquartz.privileged_startx.plist

Local Domain Library Internet Plug-Ins

(path: /Library/Internet Plug-Ins/)

AdobeAAMDetect.plugin

AdobePDFViewer.plugin

AdobePDFViewerNPAPI.plugin

Disabled Plug-Ins

Flash Player.plugin

flashplayer.xpt

H264Plugin.bundle

JavaAppletPlugin.plugin

MeetingJoinPlugin.plugin

Quartz Composer.webplugin

SharePointBrowserPlugin.plugin

SharePointWebKitPlugin.webplugin

Silverlight.plugin

Local Domain Library PrivilegedHelperTools

(path: /Library/PrivilegedHelperTools/)

com.adobe.ARMDC.Communicator

com.adobe.ARMDC.SMJobBlessHelper

com.box.sync.bootstrapper

com.malwarebytes.HelperTool

com.microsoft.autoupdate.helper

com.microsoft.office.licensing.helper

com.surteesstudios.Bartender.BartenderInstallHelper

com.teamviewer.Helper

Local Domain Library Scripting Additions

(path: /Library/ScriptingAdditions)

Adobe Unit Types.osax

BartenderHelper.osax

Local Domain Library StartupItems

(path: /Library/StartupItems)

HWNetMgr

HWPortDetect

StartOuc

Sudo Permissions File:

(path: /etc/sudoers)

/etc/sudoers was created on 2015-08-02 11:07:24 +0800 and does not appear to have been modified since.

------------------------- ▼ -------------------------

Installer History

(path: /Library/Receipts/InstallHistory.plist)

Recent items:

Gatekeeper Configuration Data installed on 2017-07-08 02:13:23 +0000

Canon Inkjet Printer Software Update installed on 2017-07-10 03:09:48 +0000

Chinese Word List Update installed on 2017-07-12 01:35:38 +0000

Adobe Flash Player installed on 2017-07-12 04:31:28 +0000

Microsoft AutoUpdate installed on 2017-07-12 12:28:13 +0000

Microsoft Outlook for Mac installed on 2017-07-13 00:59:26 +0000

Microsoft PowerPoint for Mac installed on 2017-07-13 01:01:00 +0000

Microsoft Excel for Mac installed on 2017-07-13 01:03:10 +0000

Microsoft Word for Mac installed on 2017-07-14 01:15:15 +0000

Gatekeeper Configuration Data installed on 2017-07-16 06:08:55 +0000

installed on 2017-07-18 02:11:52 +0000

Combo Cleaner installed on 2017-07-18 06:21:43 +0000

App Cleaner & Uninstaller installed on 2017-07-18 08:26:57 +0000

TeamViewer installed on 2017-07-18 09:51:55 +0000

TeamViewer installed on 2017-07-18 10:19:58 +0000

System Launch Agents:

(path:/System/Library/LaunchAgents/)

com.apple.accessibility.dfrhud.plist

com.apple.accountsd.plist

com.apple.AddressBook.abd.plist

com.apple.AddressBook.AssistantService.plist

com.apple.AddressBook.ContactsAccountsService.plist

com.apple.AddressBook.SourceSync.plist

com.apple.AirPlayUIAgent.plist

com.apple.AirPortBaseStationAgent.plist

com.apple.akd.plist

com.apple.alf.useragent.plist

com.apple.AOSHeartbeat.plist

com.apple.AOSPushRelay.plist

com.apple.AppleGraphicsWarning.plist

com.apple.appleseed.seedusaged.plist

com.apple.applespell.plist

com.apple.appsleepd.plist

com.apple.appstoreupdateagent.plist

com.apple.apsctl.plist

com.apple.askpermissiond.plist

com.apple.AskPermissionUI.plist

com.apple.AssetCacheLocatorService.plist

com.apple.assistant_service.plist

com.apple.assistantd.plist

com.apple.AssistiveControl.plist

com.apple.avconferenced.plist

com.apple.bird.plist

com.apple.bluetooth.PacketLogger.plist

com.apple.bluetoothUIServer.plist

com.apple.btsa.plist

com.apple.cache_delete.plist

com.apple.CalendarAgent.plist

com.apple.CallHistoryPluginHelper.plist

com.apple.CallHistorySyncHelper.plist

com.apple.cdpd.plist

com.apple.cfnetwork.AuthBrokerAgent.plist

com.apple.cfnetwork.cfnetworkagent.plist

com.apple.cfprefsd.xpc.agent.plist

com.apple.cloudd.plist

com.apple.cloudfamilyrestrictionsd-mac.plist

com.apple.cloudpaird.plist

com.apple.cloudphotosd.plist

com.apple.cmfsyncagent.plist

com.apple.CommCenter-osx.plist

com.apple.ContactsAgent.plist

com.apple.ContainerRepairAgent.plist

com.apple.controlstrip.plist

com.apple.CoreAuthentication.agent.plist

com.apple.CoreLocationAgent.plist

com.apple.CoreRAIDAgent.plist

com.apple.coreservices.appleid.authentication.plist

com.apple.coreservices.lsactivity.plist

com.apple.coreservices.sharedfilelistd.plist

com.apple.coreservices.UASharedPasteboardProgressUI.plist

com.apple.coreservices.uiagent.plist

com.apple.CryptoTokenKit.ahp.agent.plist

com.apple.csuseragent.plist

com.apple.ctkbind.plist

com.apple.ctkd.plist

com.apple.cvmsCompAgent3425AMD_i386.plist

com.apple.cvmsCompAgent3425AMD_i386_1.plist

com.apple.cvmsCompAgent3425AMD_x86_64.plist

com.apple.cvmsCompAgent3425AMD_x86_64_1.plist

com.apple.cvmsCompAgent3600_i386.plist

com.apple.cvmsCompAgent3600_i386_1.plist

com.apple.cvmsCompAgent3600_x86_64.plist

com.apple.cvmsCompAgent3600_x86_64_1.plist

com.apple.cvmsCompAgent_i386.plist

com.apple.cvmsCompAgent_i386_1.plist

com.apple.cvmsCompAgent_x86_64.plist

com.apple.cvmsCompAgent_x86_64_1.plist

com.apple.cvmsCompAgentLegacy_i386.plist

com.apple.cvmsCompAgentLegacy_i386_1.plist

com.apple.cvmsCompAgentLegacy_x86_64.plist

com.apple.cvmsCompAgentLegacy_x86_64_1.plist

com.apple.DataDetectorsLocalSources.plist

com.apple.DiagnosticReportCleanup.plist

com.apple.diagnostics_agent.plist

com.apple.DictationIM.plist

com.apple.DiskArbitrationAgent.plist

com.apple.diskspaced.plist

com.apple.distnoted.xpc.agent.plist

com.apple.Dock.plist

com.apple.dt.CommandLineTools.installondemand.plist

com.apple.DwellControl.plist

com.apple.eosauthagent.plist

com.apple.eospreflightagent.plist

com.apple.EscrowSecurityAlert.plist

com.apple.familycircled.plist

com.apple.familycontrols.useragent.plist

com.apple.familynotificationd.plist

com.apple.FileStatsAgent.plist

com.apple.FilesystemUI.plist

com.apple.Finder.plist

com.apple.findmymacmessenger.plist

com.apple.FirmwareUpdateHelper.plist

com.apple.FolderActionsDispatcher.plist

com.apple.followupd.plist

com.apple.FollowUpUI.plist

com.apple.fontd.useragent.plist

com.apple.FontRegistryUIAgent.plist

com.apple.FontValidator.plist

com.apple.FontValidatorConduit.plist

com.apple.FontWorker.plist

com.apple.FTCleanup.plist

com.apple.gamed.plist

com.apple.geodMachServiceBridge.plist

com.apple.helpd.plist

com.apple.icdd.plist

com.apple.icloud.findmydeviced.findmydevice-user-agent.plist

com.apple.icloud.fmfd.plist

com.apple.iCloudUserNotifications.plist

com.apple.iconservices.iconservicesagent.plist

com.apple.identityservicesd.plist

com.apple.idsremoteurlconnectionagent.plist

com.apple.imagent.plist

com.apple.imautomatichistorydeletionagent.plist

com.apple.imavagent.plist

com.apple.imklaunchagent.plist

com.apple.IMLoggingAgent.plist

com.apple.imtransferagent.plist

com.apple.installandsetup.migrationhelper.user.plist

com.apple.installd.user.plist

com.apple.InstallerProgress.la.plist

com.apple.isst.plist

com.apple.java.InstallOnDemand.plist

com.apple.java.updateSharing.plist

com.apple.keyboardservicesd.plist

com.apple.languageassetd.plist

com.apple.lateragent.plist

com.apple.LocalAuthentication.UIAgent.plist

com.apple.locationmenu.plist

com.apple.loginwindow.LWWeeklyMessageTracer.plist

com.apple.lsd.plist

com.apple.ManagedClientAgent.agent.plist

com.apple.ManagedClientAgent.enrollagent.plist

com.apple.Maps.pushdaemon.plist

com.apple.maspushagent.plist

com.apple.mbbackgrounduseragent.plist

com.apple.mbfloagent.plist

com.apple.mbuseragent.plist

com.apple.mdmclient.agent.plist

com.apple.mdworker.32bit.plist

com.apple.mdworker.bundles.plist

com.apple.mdworker.isolation.plist

com.apple.mdworker.lsb.plist

com.apple.mdworker.mail.plist

com.apple.mdworker.shared.plist

com.apple.mdworker.single.plist

com.apple.mdworker.sizing.plist

com.apple.mediaanalysisd.plist

com.apple.mediaremoteagent.plist

com.apple.metadata.mdbulkimport.plist

com.apple.metadata.mdflagwriter.plist

com.apple.metadata.mdwrite.plist

com.apple.midiserver.plist

com.apple.MRTa.plist

com.apple.navd.plist

com.apple.neagent.plist

com.apple.netauth.user.auth.plist

com.apple.netauth.user.gui.plist

com.apple.NetworkDiagnostics.plist

com.apple.networkserviceproxy-osx.plist

com.apple.noticeboard.agent.plist

com.apple.notificationcenterui.plist

com.apple.NowPlayingTouchUI.plist

com.apple.nsurlsessiond.plist

com.apple.nsurlstoraged.plist

com.apple.OSDUIHelper.plist

com.apple.PackageKit.InstallStatus.plist

com.apple.parentalcontrols.check.plist

com.apple.parsecd.plist

com.apple.passd.plist

com.apple.pboard.plist

com.apple.pbs.plist

com.apple.PCIESlotCheck.plist

com.apple.personad.plist

com.apple.photoanalysisd.plist

com.apple.photolibraryd.plist

com.apple.PhotoLibraryMigrationUtility.XPC.plist

com.apple.pictd.plist

com.apple.PIPAgent.plist

com.apple.pluginkit.pkd.plist

com.apple.pluginkit.pkreporter.plist

com.apple.powerchime.plist

com.apple.printtool.agent.plist

com.apple.printuitool.agent.plist

com.apple.protectedcloudstorage.protectedcloudkeysyncing.plist

com.apple.PubSub.Agent.plist

com.apple.quicklook.32bit.plist

com.apple.quicklook.config.plist

com.apple.quicklook.plist

com.apple.quicklook.ThumbnailsAgent.plist

com.apple.quicklook.ui.helper.plist

com.apple.RapportUIAgent.plist

com.apple.rcd.plist

com.apple.recentsd.plist

com.apple.RemoteDesktop.plist

com.apple.ReportCrash.plist

com.apple.ReportCrash.Self.plist

com.apple.ReportGPURestart.plist

com.apple.ReportPanic.plist

com.apple.reversetemplated.plist

com.apple.Safari.SafeBrowsing.Service.plist

com.apple.SafariCloudHistoryPushAgent.plist

com.apple.safaridavclient.plist

com.apple.SafariNotificationAgent.plist

com.apple.SafariPlugInUpdateNotifier.plist

com.apple.scopedbookmarkagent.xpc.plist

com.apple.screencapturetb.plist

com.apple.ScreenReaderUIServer.plist

com.apple.screensharing.agent.plist

com.apple.screensharing.MessagesAgent.plist

com.apple.scrod.plist

com.apple.secd.plist

com.apple.secinitd.plist

com.apple.security.agent.plist

com.apple.security.cloudkeychainproxy3.plist

com.apple.security.DiskUnmountWatcher.plist

com.apple.security.keychain-circle-notification.plist

com.apple.security.keychainsyncingoveridsproxy.plist

com.apple.sharingd.plist

com.apple.Siri.plist

com.apple.soagent.plist

com.apple.SocialPushAgent.plist

com.apple.softwareupdate_notify_agent.plist

com.apple.speech.speechdatainstallerd.plist

com.apple.speech.speechsynthesisd.plist

com.apple.speech.synthesisserver.plist

com.apple.spindump_agent.plist

com.apple.spotlight.IndexAgent.plist

com.apple.Spotlight.plist

com.apple.SSInvitationAgent.plist

com.apple.StorageManagementUIHelper.plist

com.apple.storeaccountd.plist

com.apple.storeassetd.plist

com.apple.storedownloadd.plist

com.apple.storeinappd.plist

com.apple.storeinstallagent.plist

com.apple.storelegacy.plist

com.apple.storeuid.plist

com.apple.suggestd.plist

com.apple.sulogoutmonitor.plist

com.apple.swcd.plist

com.apple.syncdefaultsd.plist

com.apple.syncservices.SyncServer.plist

com.apple.syncservices.uihandler.plist

com.apple.sysdiagnose_agent.plist

com.apple.systemprofiler.plist

com.apple.SystemUIServer.plist

com.apple.talagent.plist

com.apple.tccd.plist

com.apple.telephonyutilities.callservicesd.plist

com.apple.thermaltrap.plist

com.apple.tiswitcher.plist

com.apple.TMHelperAgent.plist

com.apple.TMHelperAgent.SetupOffer.plist

com.apple.touchbar.agent.plist

com.apple.touristd.plist

com.apple.trustd.agent.plist

com.apple.TrustEvaluationAgent.plist

com.apple.universalaccessAuthWarn.plist

com.apple.universalaccesscontrol.plist

com.apple.universalaccessd.plist

com.apple.universalaccessHUD.plist

com.apple.unmountassistant.useragent.plist

com.apple.USBAgent.plist

com.apple.UserEventAgent-Aqua.plist

com.apple.UserEventAgent-LoginWindow.plist

com.apple.usernoted.plist

com.apple.UserNotificationCenterAgent-LoginWindow.plist

com.apple.UserNotificationCenterAgent.plist

com.apple.videosubscriptionsd.plist

com.apple.VoiceOver.plist

com.apple.warmd_agent.plist

com.apple.webinspectord.plist

com.apple.WebKit.PluginAgent.plist

com.apple.wifi.WiFiAgent.plist

com.apple.WiFiVelocityAgent.plist

com.apple.xpc.loginitemregisterd.plist

com.apple.xpc.otherbsd.plist

com.apple.ZoomWindow.plist

com.openssh.ssh-agent.plist

System Launch Daemons:

(path:/System/Library/LaunchDaemons/)

bootps.plist

com.apple.afpfs_afpLoad.plist

com.apple.afpfs_checkafp.plist

com.apple.airplaydiagnostics.server.mac.plist

com.apple.AirPlayXPCHelper.plist

com.apple.airport.wps.plist

com.apple.airportd.plist

com.apple.akd.plist

com.apple.alf.agent.plist

com.apple.AppleFileServer.plist

com.apple.appleseed.fbahelperd.plist

com.apple.applessdstatistics.plist

com.apple.apsd.plist

com.apple.aslmanager.plist

com.apple.AssetCache.builtin.plist

com.apple.AssetCacheActivatorService.plist

com.apple.AssetCacheLocatorService.plist

com.apple.AssetCacheTetheratorService.plist

com.apple.atrun.plist

com.apple.audio.coreaudiod.plist

com.apple.audio.systemsoundserverd.plist

com.apple.auditd.plist

com.apple.autofsd.plist

com.apple.automountd.plist

com.apple.avbdeviced.plist

com.apple.awacsd.plist

com.apple.awdd.plist

com.apple.backupd-auto.plist

com.apple.backupd.plist

com.apple.biokitaggdd.plist

com.apple.biometrickitd.plist

com.apple.blued.plist

com.apple.bluetoothaudiod.plist

com.apple.bluetoothReporter.plist

com.apple.bnepd.plist

com.apple.bsd.dirhelper.plist

com.apple.captiveagent.plist

com.apple.cfprefsd.xpc.daemon.plist

com.apple.cloudfamilyrestrictionsd-mac.plist

com.apple.cmio.AppleCameraAssistant.plist

com.apple.cmio.AVCAssistant.plist

com.apple.cmio.IIDCVideoAssistant.plist

com.apple.cmio.iOSScreenCaptureAssistant.plist

com.apple.cmio.VDCAssistant.plist

com.apple.colorsyncd.plist

com.apple.CommCenterRootHelper.plist

com.apple.comsat.plist

com.apple.configd.plist

com.apple.configureLocalKDC.plist

com.apple.CoreAuthentication.daemon.plist

com.apple.corebrightnessd.plist

com.apple.corecaptured.plist

com.apple.coreduetd.osx.plist

com.apple.CoreRAID.plist

com.apple.coreservices.appleevents.plist

com.apple.coreservices.appleid.passwordcheck.plist

com.apple.coreservices.launchservicesd.plist

com.apple.coreservices.sharedfilelistd.plist

com.apple.coreservicesd.plist

com.apple.corestorage.corestoraged.plist

com.apple.corestorage.corestoragehelperd.plist

com.apple.coresymbolicationd.plist

com.apple.CrashReporterSupportHelper.plist

com.apple.CryptoTokenKit.ahp.plist

com.apple.csrutil.report.plist

com.apple.ctkd.plist

com.apple.cvmsServ.plist

com.apple.DataDetectorsSourceAccess.plist

com.apple.defragx.plist

com.apple.DesktopServicesHelper.plist

com.apple.diagnosticd.plist

com.apple.diagnosticextensions.osx.bluetooth.helper.plist

com.apple.diagnosticextensions.osx.getmobilityinfo.helper.plist

com.apple.diagnosticextensions.osx.spotlight.helper.plist

com.apple.diagnosticextensions.osx.timemachine.helper.plist

com.apple.diagnosticextensions.osx.wifi.helper.plist

com.apple.diskarbitrationd.plist

com.apple.diskmanagementd.plist

com.apple.diskmanagementstartup.plist

com.apple.displaypolicyd.plist

com.apple.distnoted.xpc.daemon.plist

com.apple.dnsextd.plist

com.apple.dpaudiothru.plist

com.apple.dpd.plist

com.apple.dprivacyd.plist

com.apple.driver.ethcheck.plist

com.apple.driver.ethcheckthunderbolt.plist

com.apple.dspluginhelperd.plist

com.apple.DuetHeuristic-BM-OSX.plist

com.apple.DumpGPURestart.plist

com.apple.DumpPanic.plist

com.apple.dvdplayback.setregion.plist

com.apple.dynamic_pager.plist

com.apple.dz.dznd.plist

com.apple.eapolcfg_auth.plist

com.apple.efilogin-helper.plist

com.apple.emlog.plist

com.apple.emond.aslmanager.plist

com.apple.emond.plist

com.apple.eoshostd.plist

com.apple.eppc.plist

com.apple.familycontrols.plist

com.apple.FileCoordination.plist

com.apple.findmymac.plist

com.apple.findmymacmessenger.plist

com.apple.firmwaresyncd.plist

com.apple.fontd.plist

com.apple.fontmover.plist

com.apple.FontWorker.plist

com.apple.fseventsd.plist

com.apple.ftp-proxy.plist

com.apple.GameController.gamecontrollerd.plist

com.apple.getty.plist

com.apple.gkreport.plist

com.apple.GSSCred.plist

com.apple.gssd.plist

com.apple.hdiejectd.plist

com.apple.hidd.plist

com.apple.icloud.findmydeviced.plist

com.apple.iconservices.iconservicesagent.plist

com.apple.iconservices.iconservicesd.plist

com.apple.IFCStart.plist

com.apple.ifdreader.plist

com.apple.installandsetup.systemmigrationd.plist

com.apple.installd.plist

com.apple.InstallerDiagnostics.installerdiagd.plist

com.apple.InstallerDiagnostics.installerdiagwatcher.plist

com.apple.InstallerProgress.plist

com.apple.IOAccelMemoryInfoCollector.plist

com.apple.IOBluetoothUSBDFU.plist

com.apple.ionodecache.plist

com.apple.jetsamproperties.Mac.plist

com.apple.kcproxy.plist

com.apple.kdumpd.plist

com.apple.Kerberos.digest-service.plist

com.apple.Kerberos.kadmind.plist

com.apple.Kerberos.kcm.plist

com.apple.Kerberos.kdc.plist

com.apple.Kerberos.kpasswdd.plist

com.apple.KernelEventAgent.plist

com.apple.kextd.plist

com.apple.kuncd.plist

com.apple.locate.plist

com.apple.locationd.plist

com.apple.lockd.plist

com.apple.logd.plist

com.apple.logind.plist

com.apple.loginwindow.LFVTracer.plist

com.apple.loginwindow.plist

com.apple.logkextloadsd.plist

com.apple.lsd.plist

com.apple.ManagedClient.cloudconfigurationd.plist

com.apple.ManagedClient.enroll.plist

com.apple.ManagedClient.plist

com.apple.ManagedClient.startup.plist

com.apple.mbsystemadministration.plist

com.apple.mbusertrampoline.plist

com.apple.mdmclient.daemon.plist

com.apple.mdmclient.daemon.runatboot.plist

com.apple.mDNSResponder.plist

com.apple.mDNSResponderHelper.plist

com.apple.mediaremoted.plist

com.apple.metadata.mds.index.plist

com.apple.metadata.mds.plist

com.apple.metadata.mds.scan.plist

com.apple.metadata.mds.spindump.plist

com.apple.mobile.keybagd.plist

com.apple.MobileAccessoryUpdater.plist

com.apple.mobileassetd.plist

com.apple.MobileFileIntegrity.plist

com.apple.MRTd.plist

com.apple.msrpc.echosvc.plist

com.apple.msrpc.lsarpc.plist

com.apple.msrpc.mdssvc.plist

com.apple.msrpc.netlogon.plist

com.apple.msrpc.srvsvc.plist

com.apple.msrpc.wkssvc.plist

com.apple.mtmd.plist

com.apple.mtmfs.plist

com.apple.mtmhelper.plist

com.apple.nehelper.plist

com.apple.nesessionmanager.plist

com.apple.netauth.sys.auth.plist

com.apple.netauth.sys.gui.plist

com.apple.netbiosd.plist

com.apple.NetBootClientStatus.plist

com.apple.NetworkDiagnostics.plist

com.apple.NetworkLinkConditioner.plist

com.apple.NetworkSharing.plist

com.apple.newsyslog.plist

com.apple.nfcd.plist

com.apple.nfrestore.plist

com.apple.nfsconf.plist

com.apple.nfsd.plist

com.apple.nis.ypbind.plist

com.apple.noticeboard.state.plist

com.apple.notifyd.plist

com.apple.nsurlsessiond.plist

com.apple.nsurlstoraged.plist

com.apple.ocspd.plist

com.apple.odproxyd.plist

com.apple.ODSAgent.plist

com.apple.opendirectoryd.plist

com.apple.PasswordService.plist

com.apple.PCIELaneConfigTool.plist

com.apple.periodic-daily.plist

com.apple.periodic-monthly.plist

com.apple.periodic-weekly.plist

com.apple.pfctl.plist

com.apple.pfd.plist

com.apple.platform.ptmd.plist

com.apple.postfix.master.plist

com.apple.postfix.newaliases.plist

com.apple.powerd.plist

com.apple.powerd.swd.plist

com.apple.preferences.timezone.admintool.plist

com.apple.preferences.timezone.auto.plist

com.apple.printtool.daemon.plist

com.apple.racoon.plist

com.apple.rapportd.plist

com.apple.RemoteDesktop.PrivilegeProxy.plist

com.apple.remotepairtool.plist

com.apple.ReportCrash.Root.plist

com.apple.ReportPanicService.plist

com.apple.revisiond.plist

com.apple.RFBEventHelper.plist

com.apple.rootless.init.plist

com.apple.rpcbind.plist

com.apple.rpmuxd.plist

com.apple.rtcreportingd.plist

com.apple.sandboxd.plist

com.apple.SCHelper.plist

com.apple.screensharing.plist

com.apple.scsid.plist

com.apple.secinitd.plist

com.apple.security.agent.login.plist

com.apple.security.authhost.plist

com.apple.security.FDERecoveryAgent.plist

com.apple.security.syspolicy.plist

com.apple.securityd.plist

com.apple.securityd_service.plist

com.apple.seld.plist

com.apple.sessionlogoutd.plist

com.apple.smb.preferences.plist

com.apple.smbd.plist

com.apple.softwareupdate_download_service.plist

com.apple.softwareupdate_firstrun_tasks.plist

com.apple.softwareupdated.plist

com.apple.speech.speechsynthesisd.plist

com.apple.spindump.plist

com.apple.startupdiskhelper.plist

com.apple.statd.notify.plist

com.apple.storagekitd.plist

com.apple.storeaccountd.daemon.plist

com.apple.storeagent.daemon.plist

com.apple.storeassetd.daemon.plist

com.apple.storedownloadd.daemon.plist

com.apple.storeinstalld.plist

com.apple.storereceiptinstaller.plist

com.apple.SubmitDiagInfo.plist

com.apple.suhelperd.plist

com.apple.symptomsd.plist

com.apple.sysdiagnose.plist

com.apple.syslogd.plist

com.apple.sysmond.plist

com.apple.system_installd.plist

com.apple.systemkeychain.plist

com.apple.systemstats.analysis.plist

com.apple.systemstats.daily.plist

com.apple.tailspind.plist

com.apple.taskgated-helper.plist

com.apple.taskgated.plist

com.apple.tccd.system.plist

com.apple.thermald.plist

com.apple.TMCacheDelete.plist

com.apple.touchbar.user-device.plist

com.apple.trustd.plist

com.apple.TrustEvaluationAgent.system.plist

com.apple.ucupdate.plist

com.apple.uninstalld.plist

com.apple.unmountassistant.sysagent.plist

com.apple.updateEFIDesktopPicture.plist

com.apple.usbd.plist

com.apple.usbmuxd.plist

com.apple.UserEventAgent-System.plist

com.apple.UserNotificationCenter.plist

com.apple.uucp.plist

com.apple.var-db-dslocal-backup.plist

com.apple.vsdbutil.plist

com.apple.warmd.plist

com.apple.watchdogd.plist

com.apple.wdhelper.plist

com.apple.wifid.plist

com.apple.wifivelocityd.plist

com.apple.WindowServer.plist

com.apple.wirelessproxd.plist

com.apple.WirelessRadioManagerd-osx.plist

com.apple.wwand.plist

com.apple.xartstorageremoted.plist

com.apple.xpc.smd.plist

com.apple.xpc.uscwoap.plist

com.apple.xsan.plist

com.apple.xsandaily.plist

com.apple.xscertadmin.plist

com.apple.xscertd-helper.plist

com.apple.xscertd.plist

com.vix.cron.plist

finger.plist

ftp.plist

ntalk.plist

org.apache.httpd.plist

org.cups.cups-lpd.plist

org.cups.cupsd.plist

org.net-snmp.snmpd.plist

org.ntp.ntpd.plist

org.openldap.slapd.plist

org.postfix.master.plist

ssh.plist

telnet.plist

tftp.plist

------------------------- ▼ -------------------------

Bluetooth Hardware Info:

Bluetooth Low Energy Supported: Yes

Handoff Supported: Yes

Instant Hot Spot Supported: Yes

Bluetooth Power: Off

Auto Seek Pointing: On

Remote wake: On

Network Info:

/etc/hosts -count: 40

Network:

Wi-Fi:

Type: AirPort

Hardware: AirPort

BSD Device Name: en0

IPv4 Addresses: 192.168.1.171

IPv4:

AdditionalRoutes:

DestinationAddress: 192.168.1.171

SubnetMask: 255.255.255.255

DestinationAddress: 169.254.0.0

SubnetMask: 255.255.0.0

Addresses: 192.168.1.171

ARPResolvedHardwareAddress: 30:91:8f:4a:32:be

ARPResolvedIPAddress: 192.168.1.254

Configuration Method: DHCP

ConfirmedInterfaceName: en0

Interface Name: en0

Network Signature: IPv4.Router=192.168.1.254;IPv4.RouterHardwareAddress=30:91:8f:4a:32:be

Router: 192.168.1.254

Subnet Masks: 255.255.255.0

IPv6:

Configuration Method: Automatic

DNS:

Server Addresses: 192.168.1.254

DHCP Server Responses:

Domain Name Servers: 192.168.1.254

Lease Duration (seconds): 0

DHCP Message Type: 0x05

Routers: 192.168.1.254

Server Identifier: 192.168.1.254

Subnet Mask: 255.255.255.0

Ethernet:

MAC Address: 64:76:ba:b2:4a:5c

Media Options:

Media Subtype: Auto Select

Service Order: 0

Bluetooth PAN:

Type: Ethernet

Hardware: Ethernet

BSD Device Name: en3

IPv4:

Configuration Method: DHCP

IPv6:

Configuration Method: Automatic

Proxies:

Exceptions List: *.local, 169.254/16

FTP Passive Mode: Yes

Service Order: 1

Thunderbolt Bridge:

Type: Ethernet

Hardware: Ethernet

BSD Device Name: bridge0

IPv4 Addresses: 192.168.4.58

IPv4:

Addresses: 192.168.4.58

Configuration Method: Manual

Router: 192.168.4.30

Subnet Masks: 255.255.255.0

IPv6:

Configuration Method: Automatic

Proxies:

Exceptions List: *.local, 169.254/16

FTP Passive Mode: Yes

Service Order: 2

Huawei Modem:

Type: PPP (PPPSerial)

Hardware: Modem

BSD Device Name: HUAWEIMobile-Modem

IPv4:

Configuration Method: PPP

IPv6:

Configuration Method: Automatic

Proxies:

Exclude Simple Hostnames: 0

FTP Passive Mode: Yes

Auto Discovery Enabled: No

Service Order: 3

iPhone:

Type: Ethernet

Hardware: Ethernet

BSD Device Name: en5

IPv4:

Configuration Method: DHCP

IPv6:

Configuration Method: Automatic

Proxies:

Exceptions List: *.local, 169.254/16

FTP Passive Mode: Yes

Service Order: 4

ZTE CDMA Tech:

Type: Ethernet

Hardware: Ethernet

BSD Device Name: en6

IPv4:

Configuration Method: DHCP

IPv6:

Configuration Method: Automatic

Proxies:

Exceptions List: *.local, 169.254/16

FTP Passive Mode: Yes

Service Order: 5

Apple USB Ethernet Adapter:

Type: Ethernet

Hardware: Ethernet

BSD Device Name: en4

IPv4 Addresses: 192.168.1.4

IPv4:

Addresses: 192.168.1.4

Configuration Method: Manual

Subnet Masks: 255.255.255.0

IPv6:

Configuration Method: Automatic

Proxies:

Exceptions List: *.local, 169.254/16

FTP Passive Mode: Yes

Service Order: 6

iPad:

Type: Ethernet

Hardware: Ethernet

BSD Device Name: en9

IPv4:

Configuration Method: DHCP

IPv6:

Configuration Method: Automatic

Proxies:

Exceptions List: *.local, 169.254/16

FTP Passive Mode: Yes

Service Order: 7

------------------------- ▼ -------------------------

Disk Information:

Storage:

Macintosh HD:

Available: 51.47 GB (51,470,680,064 bytes)

Capacity: 249.51 GB (249,506,234,368 bytes)

Mount Point: /

File System: Journaled HFS+

Writable: Yes

Ignore Ownership: No

BSD Name: disk1

Volume UUID: 407A8218-7C0F-33C6-B7A2-C223C971D533

Logical Volume:

Revertible: Yes (unlock and decryption required)

Encrypted: Yes

Encryption Type: AES-XTS

Locked: No

LV UUID: 12621B7E-F38A-482F-BEB1-50206CE3C5AB

Logical Volume Group:

Name: Macintosh HD

Size: 249.84 GB (249,841,782,784 bytes)

Free Space: 4 KB (4,096 bytes)

LVG UUID: FDE77C78-6D33-493A-A39A-3C4E1293164C

Physical Volumes:

disk0s2:

Device Name: APPLE SSD SD0256F

Media Name: APPLE SSD SD0256F Media

Size: 249.84 GB (249,841,782,784 bytes)

Medium Type: SSD

Protocol: PCI

Internal: Yes

Partition Map Type: GPT (GUID Partition Table)

Status: Online

S.M.A.R.T. Status: Verified

PV UUID: 49F8EA6B-AD1D-4D0C-B662-EE01B2F81DC5

History view output:

✎ Changes to essential parts of your mac that can affect its stability will appear here. This includes most (but not all) of the areas displayed in the Inspector tab.

DetectX will signal that there are changes to view by displaying an ⚠ alert triangle next to the Selector bar.

You can clear the alert triangle either by clicking on the triangle or choosing 'Clear Alert' from the View menu.

For more information see the Help files.

CHANGES:

Location$ Login Items:

"UNKNOWN"

--removed on or before 18 Jul, 2017 23:05:12 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/LaunchAgents/

com.macpaw.CleanMyMac3.Scheduler.plist

--removed on or before 18 Jul, 2017 23:05:12 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Application Support/

CleanMyMac 3

--removed on or before 18 Jul, 2017 23:05:12 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Application Support/

CleanMyMac 3 Menu

--removed on or before 18 Jul, 2017 23:05:12 PM (Malaysia Time)

-------------------------------------

Location$ /Library/PrivilegedHelperTools/

com.macpaw.CleanMyMac3.Agent

--removed on or before 18 Jul, 2017 23:05:12 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

1Password-2.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Adblock Plus.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

AdBlock.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Evernote Web Clipper.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Extensions.plist

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

igTranslator for Google.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Okta Secure Web Authentication Plug-in-3.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Okta Secure Web Authentication Plug-in.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Translate-2.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Translate.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Location$ /Users/song/Library/Safari/Extensions/

Ultimate Status Bar.safariextz

--removed on or before 18 Jul, 2017 23:11:42 PM (Malaysia Time)

-------------------------------------

Did I capture it right?

I have no answers to your question. Perhaps I should first uninstall Sophos. But it just feels odd why would Sophos trigger www.tradeadexchange.com

Yes, I've already tried that, before i resort to this forum for help.

The ouc.plist is for Huawei Wifi dongle.

Is there any other tool I should use to capture additional information?