EtreCheck has detected infected adware, should I delete files?
EtreCheck has detected infected adware, should I delete files? How do I know they are right?
It is almost impossible to use either safari or Chrome as 'loadages' just keeps popping up.
I have a 13" mac book pro mid 2009 running Yesomite 10.10.5
Here is the report:
EtreCheck version: 3.4.2 (436)
Report generated 2017-08-03 15:53:15
Download EtreCheck from https://etrecheck.com
Runtime: 6:08
Performance: Below Average
Click the [Lookup] links for more information from Apple Support Communities.
Click the [Details] links for more information about that line.
Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.
Click the [Clean up] link to delete unused files.
Problem: Beachballing
Description:
adware virus keeps popping up disbabling proper use of web searching
Hardware Information: ⓘ
MacBook Pro (13-inch, Mid 2009)
[Technical Specifications] - [User Guide] - [Warranty & Service]
MacBook Pro - model: MacBookPro5,5
1 2.26 GHz Intel Core 2 Duo (Duo) CPU: 2-core
8 GB RAM Upgradeable - [Instructions]
BANK 0/DIMM0
4 GB DDR3 1067 MHz ok
BANK 1/DIMM0
4 GB DDR3 1067 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Battery: Health = Normal - Cycle count = 356
Video Information: ⓘ
NVIDIA GeForce 9400M - VRAM: 256 MB
Color LCD 1280 x 800
Disk Information: ⓘ
HGST HTS545050A7E380 disk0: (500.11 GB) (Rotational)
[Show SMART report]
(disk0s1) <not mounted> [EFI]: 210 MB
Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 499.25 GB (84.23 GB free)
(disk0s3) <not mounted> [Recovery]: 650 MB
HL-DT-ST DVDRW GS23N ()
USB Information: ⓘ
EHCI Root Hub Simulation
Apple Inc. Built-in iSight
EHCI Root Hub Simulation
Apple Internal Memory Card Reader
OHCI Root Hub Simulation
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Computer, Inc. IR Receiver
OHCI Root Hub Simulation
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
System Software: ⓘ
OS X Yosemite 10.10.5 (14F2315) - Time since boot: about 4 hours
Configuration files: ⓘ
/etc/hosts - Count: 15
Gatekeeper: ⓘ
Mac App Store and identified developers
Possible adware: ⓘ
Adware: /Library/LaunchDaemons/com.Cartilaginei.service.plist
Adware: /Library/LaunchDaemons/com.Catha.service.plist
Adware: /Library/LaunchDaemons/com.Kohathite.service.plist
Adware: /Library/LaunchDaemons/com.Lak.service.plist
Adware: /Library/LaunchDaemons/com.Phytotomidae.service.plist
Adware: /Library/LaunchDaemons/com.antiphlogistian.service.plist
Unknown file: /Library/LaunchDaemons/com.apple.ertur.plist
Unknown file: /Library/LaunchDaemons/com.apple.kimathen.plist
Adware: /Library/LaunchDaemons/com.brachypinacoidal.service.plist
Adware: /Library/LaunchDaemons/com.bryogenin.service.plist
Adware: /Library/LaunchDaemons/com.burp.service.plist
Adware: /Library/LaunchDaemons/com.cantref.service.plist
Adware: /Library/LaunchDaemons/com.chaffiness.service.plist
Unknown file: /Library/LaunchDaemons/com.craw.plist
Adware: /Library/LaunchDaemons/com.disaccustom.service.plist
Adware: /Library/LaunchDaemons/com.excursionary.service.plist
Adware: /Library/LaunchDaemons/com.fastidiously.service.plist
Adware: /Library/LaunchDaemons/com.intrabronchial.service.plist
Adware: /Library/LaunchDaemons/com.kilterUpd.plist
Adware: /Library/LaunchDaemons/com.millistere.service.plist
Adware: /Library/LaunchDaemons/com.muff.service.plist
Adware: /Library/LaunchDaemons/com.pentine.service.plist
Adware: /Library/LaunchDaemons/com.posthippocampal.service.plist
Adware: /Library/LaunchDaemons/com.ritornello.service.plist
Adware: /Library/LaunchDaemons/com.sceuophorion.service.plist
Adware: /Library/LaunchDaemons/com.sectionize.service.plist
Adware: /Library/LaunchDaemons/com.semiatheist.service.plist
Adware: /Library/LaunchDaemons/com.stockkeeper.service.plist
Adware: /Library/LaunchDaemons/com.strigous.service.plist
Adware: /Library/LaunchDaemons/com.unmailed.service.plist
Adware: /Library/LaunchDaemons/com.unprofited.service.plist
Adware: /Library/LaunchDaemons/com.vitrifiable.service.plist
Unknown file: /Library/LaunchDaemons/com.vqfvknqlbtfh.plist
33 possible adware files found. [Remove/Report]
Clean up: ⓘ
~/Library/LaunchAgents/com.mackeeper.MacKeeper.Helper.plist
/Applications/MacKeeper.app/Contents/Services/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper
Executable not found!
One orphan file found. [Clean up]
Kernel Extensions: ⓘ
/Library/Application Support/Roxio
[not loaded] com.roxio.TDIXController (2.0) [Lookup]
/System/Library/Extensions
[not loaded] com.roxio.BluRaySupport (1.1.6) [Lookup]
[not loaded] com.seagate.driver.PowSecDriverCore (5.2.3 (26704) - SDK 10.4) [Lookup]
/System/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns
[not loaded] com.seagate.driver.PowSecLeafDriver_10_4 (5.2.3 (26704) - SDK 10.4) [Lookup]
[not loaded] com.seagate.driver.PowSecLeafDriver_10_5 (5.2.3 (26704) - SDK 10.5) [Lookup]
[not loaded] com.seagate.driver.SeagateDriveIcons (5.2.3 (26704) - SDK 10.4) [Lookup]
Startup Items: ⓘ
MobileBrServ: Path: /Library/StartupItems/MobileBrServ
Startup items no longer function in OS X Yosemite or later
System Launch Agents: ⓘ
[not loaded] 6 Apple tasks
[loaded] 146 Apple tasks
[running] 60 Apple tasks
System Launch Daemons: ⓘ
[not loaded] 42 Apple tasks
[loaded] 141 Apple tasks
[running] 80 Apple tasks
Launch Agents: ⓘ
[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-07-21) [Lookup]
[loaded] com.adobe.CS5ServiceManager.plist (? 40cdc1ff dd391a6f - installed 2013-04-21) [Lookup]
[running] com.trusteer.rapport.rapportd.plist (Trusteer LTD - installed 2017-07-07) [Lookup]
[running] jp.co.canon.CUPSCAPT.BG.plist (? 33904f9c 9c018b65 - installed 2017-01-09) [Lookup]
Launch Daemons: ⓘ
[loaded] com.Cartilaginei.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.Catha.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.Kohathite.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.Lak.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.Phytotomidae.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.adobe.SwitchBoard.plist (? 856489a3 0 - installed 2013-04-21) [Lookup]
[running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2017-05-29) [Lookup]
[loaded] com.adobe.fpsaud.plist (? 2afb3af7 18a4fa69 - installed 2017-06-23) [Lookup]
[loaded] com.antiphlogistian.service.plist (Shell Script 10a0ea5e - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[not loaded] com.apple.ertur.plist (? 0 ? - installed 2016-07-06)
[not loaded] com.apple.kimathen.plist (? 0 ? - installed 2016-11-24)
[loaded] com.brachypinacoidal.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.bryogenin.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.burp.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.cantref.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.chaffiness.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[not loaded] com.craw.plist (? 0 ? - installed 2016-12-07) [Lookup]
[loaded] com.disaccustom.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.excursionary.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.fastidiously.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[running] com.huawei.mbbservice.plist (? d59902d6 af1157fb - installed 2015-09-05) [Lookup]
[loaded] com.intrabronchial.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[not loaded] com.kilterUpd.plist (? 0 ? - installed 2016-07-06) Adware! [Remove/Report]
[loaded] com.millistere.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.muff.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.pentine.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.posthippocampal.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.ritornello.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.rockysandstudio.WUHelper.plist (Rocky Sand Studio Ltd. - installed 2017-05-30) [Lookup]
[loaded] com.sceuophorion.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.sectionize.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.semiatheist.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.stockkeeper.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.strigous.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[running] com.trusteer.rooks.rooksd.plist (Trusteer LTD - installed 2017-06-22) [Lookup]
[loaded] com.unmailed.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.unprofited.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[loaded] com.vitrifiable.service.plist (? 10a0ea5e 6e7829fd - installed 2016-11-23) Adware! [Remove/Report]
/etc/run_app.sh
[not loaded] com.vqfvknqlbtfh.plist (? 0 ? - installed 2016-11-24) [Lookup]
User Launch Agents: ⓘ
[loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-07-21) [Lookup]
[loaded] com.adobe.ARM.[...].plist (Adobe Systems, Inc. - installed 2017-07-21) [Lookup]
[running] com.akamai.single-user-client.plist (? 8f2c69f 6a3689c4 - installed 2017-01-23) [Lookup]
[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-07-10) [Lookup]
[failed] com.mackeeper.MacKeeper.Helper.plist (? e65cf578 0 - installed 2016-07-06) [Lookup] - /Applications/MacKeeper.app/Contents/Services/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper: Executable not found!
User Login Items: ⓘ
iTunesHelper Application (Apple, Inc. - installed 2017-05-25)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
AdobeResourceSynchronizer Application - Hidden
(/Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/Support/AdobeResourceSynchronizer.app)
Internet Plug-ins: ⓘ
AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (installed 2017-07-21) [Lookup]
FlashPlayer-10.6: 26.0.0.137 (installed 2017-07-14) [Lookup]
QuickTime Plugin: 7.7.3 (installed 2017-04-22)
AdobePDFViewerNPAPI: 11.0.09 (installed 2014-10-09) [Lookup]
AdobePDFViewer: 11.0.09 (installed 2014-10-09) [Lookup]
Flash Player: 26.0.0.137 (installed 2017-07-14) [Lookup]
Default Browser: 600 (installed 2015-12-06)
JavaAppletPlugin: 15.0.0 (installed 2014-08-29) Check version
NP_2020Player_IKEA: 5.0.94.1 (installed 2012-09-28) [Lookup]
Silverlight: 5.1.41212.0 (installed 2016-03-20) [Lookup]
iPhotoPhotocast: 7.0 (installed 2013-05-06)
User internet Plug-ins: ⓘ
Aspera Web 3.5.2.95060: Unknown (installed 2014-10-28) [Lookup]
SigniantTransfer v5.4.3.70626: SigniantTransfer 5.4.3.70626 (installed 2015-07-30) [Lookup]
3rd Party Preference Panes: ⓘ
Akamai NetSession Preferences (installed 2017-01-23) [Lookup]
Flash Player (installed 2017-06-23) [Lookup]
Growl (installed 2013-04-21) [Lookup]
Paragon NTFS for Mac ® OS X (installed 2013-04-21) [Lookup]
Trusteer Endpoint Protection (installed 2017-07-07) [Lookup]
Time Machine: ⓘ
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 499.25 GB Disk used: 415.02 GB
Destinations:
Seagate Backup Plus Drive [Local]
Total size: 0 B
Total number of backups: 0
Oldest backup: -
Last backup: -
Size of backup disk: Too small
Backup size 0 B < (Disk used 415.02 GB X 3)
Top Processes by CPU: ⓘ
12% WindowServer
11% osascript
3% launchservicesd
2% kernel_task
2% taskgated
Top Processes by Memory: ⓘ
685 MB kernel_task
330 MB Mail
293 MB com.apple.WebKit.WebContent
242 MB Safari
239 MB com.apple.WebKit.WebContent
Top Processes by Energy Use: ⓘ
8.98 WindowServer
4.08 Safari
3.34 launchservicesd
1.72 taskgated
Virtual Memory Information: ⓘ
4.16 GB Available RAM
37 MB Free RAM
3.84 GB Used RAM
4.12 GB Cached files
0 B Swap Used
Software installs: ⓘ
IBM Security Trusteer Endpoint Protection: (installed 2017-07-07)
Adobe Flash Player: (installed 2017-07-14)
Adobe Acrobat XI Pro (11.0.20): (installed 2017-07-21)
Install information may not be complete.
Diagnostics Information: ⓘ
2017-08-01 19:59:13 Safari.app Hang [Open]
Thanks for any advice to a firs timer on this site!
MacBook Pro (13-inch Mid 2009), OS X Yosemite (10.10.5)