Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Etrecheck report feedback, please...

I'm not sure how to determine what files should be Kept/Removed or what other actions to take. Any and all advice appreciated...


EtreCheck version: 3.4.6 (460)

Report generated 2017-11-18 08:56:36

Download EtreCheck from https://etrecheck.com

Runtime: 3:22

Performance: Good


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.


Problem: No problem - just checking


Hardware Information:

MacBook Air (13-inch, Early 2014)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Air - model: MacBookAir6,2

1 1.4 GHz Intel Core i5 (i5-4260U) CPU: 2-core

4 GB RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1600 MHz ok

BANK 1/DIMM0

2 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 86


Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900


Disk Information:

APPLE SSD SD0128F disk0: (121.33 GB) (Solid State - TRIM: Yes)

[Show SMART report]

(disk0s1) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 120.00 GB (44.19 GB free)

(disk0s3) <not mounted> [Recovery]: 990 MB


USB Information:

XHCI Root Hub SS Simulation

Apple Internal Memory Card Reader

XHCI Root Hub USB 2.0 Simulation

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Microsoft Microsoft® Nano Transceiver v2.0


Thunderbolt Information:

Apple Inc. thunderbolt_bus


System Software:

OS X Yosemite 10.10.5 (14F2511) - Time since boot: about 8 days


Gatekeeper:

Mac App Store and identified developers


Possible adware:

Unknown file: ~/Library/LaunchAgents/com.QuickLookSearches.plist

~/Library/Application Support/com.QuickLookSearches/QuickLookSearches r

Adware: ~/Library/LaunchAgents/com.pcv.hlpramcn.plist

Unknown file: ~/Library/Safari/Extensions/2DDCEA3C20DA42D9B8D2921360822D4B.safariextz

3 possible adware files found. [Remove/Report]


System Launch Agents:

[not loaded] 5 Apple tasks

[loaded] 138 Apple tasks

[running] 49 Apple tasks

[killed] 20 Apple tasks

20 processes killed due to insufficient RAM


System Launch Daemons:

[not loaded] 47 Apple tasks

[loaded] 132 Apple tasks

[running] 65 Apple tasks

[killed] 18 Apple tasks

18 processes killed due to insufficient RAM


Launch Daemons:

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 a56d5fc2 - installed 2017-10-25) [Lookup]


User Launch Agents:

[loaded] com.QuickLookSearches.plist (? a9dae437 2b2636ba - installed 2017-11-05) [Lookup]

[running] com.dtv.vgconnect.plist (Shell Script aaab42d2 - installed 2014-10-27)

[loaded] com.dtv.vgconnect.uninstall.plist (Shell Script f4b6657c - installed 2015-01-19)

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-10-26) [Lookup]

[running] com.pcv.hlpramcn.plist (Techyutils Software Private Limited - installed 2017-11-14) Adware! [Remove/Report]

~/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

[running] com.spotify.webhelper.plist (Spotify - installed 2017-11-09) [Lookup]


User Login Items:

iTunesHelper Application (Apple, Inc. - installed 2017-11-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

EvernoteHelper Application (Evernote - installed 2014-12-16)

(/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app)

Octoshape Application

(~/Library/Octoshape/Octoshape.app)

Dropbox Application

(/Applications/Dropbox.app)

Spotify Application - Hidden

(/Applications/Spotify.app)


Internet Plug-ins:

FlashPlayer-10.6: 27.0.0.187 (installed 2017-11-14) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-10-27)

Flash Player: 27.0.0.187 (installed 2017-11-14) [Lookup]

iPhotoPhotocast: 7.0 (installed 2015-02-14)

PepperFlashPlayer: 27.0.0.187 (installed 2017-11-14) [Lookup]

Default Browser: 600 (installed 2017-10-26)


User internet Plug-ins:

OctoshapeWeb: 1.0 (installed 2017-10-26) [Lookup]


Safari Extensions:

Evernote Web Clipper - Evernote Corp. - http://evernote.com (installed 2017-10-26)

Any Search DS (installed 2017-11-05)


3rd Party Preference Panes:

Flash Player (installed 2017-10-25) [Lookup]


Time Machine:

Skip System Files: NO

Mobile backups: OFF

Auto backup: NO - Auto backup turned off

Volumes being backed up:

Macintosh HD: Disk size: 120.00 GB Disk used: 75.81 GB

Destinations:

Time Machine [Local]

Total size: 166.84 GB

Total number of backups: 6

Oldest backup: 1/25/15, 11:58 AM

Last backup: 10/27/17, 1:19 AM

Size of backup disk: Too small

Backup size 166.84 GB < (Disk used 75.81 GB X 3)


Top Processes by CPU:

23% com.apple.WebKit.WebContent

9% WindowServer

7% kernel_task

3% mds

3% Safari


Top Processes by Memory:

600 MB kernel_task

479 MB com.apple.WebKit.WebContent

223 MB com.apple.WebKit.WebContent

119 MB Safari

104 MB com.apple.WebKit.WebContent


Top Processes by Energy Use:

24.04 com.apple.WebKit.WebContent

12.26 WindowServer

9.08 Safari

3.30 NDSPCShowServer

1.86 mds


Virtual Memory Information:

355 MB Available RAM

22 MB Free RAM

3.65 GB Used RAM

333 MB Cached files

1.63 GB Swap Used


Software installs (last 30 days):

Adobe Flash Player: (installed 2017-10-26)

Adobe Pepper Flash Player: (installed 2017-10-26)

Adobe Flash Player: (installed 2017-10-26)

Twitter: 4.3.2 (installed 2017-10-26)

Adobe Flash Player: (installed 2017-11-14)

Adobe Pepper Flash Player: (installed 2017-11-14)


Install information may not be complete.


Diagnostics Events (last 3 days for minor events):

2017-11-18 07:09:40 NDSPCShowServer Crash [Open]

2017-11-09 19:05:13 Last shutdown cause: 3 - Hard shutdown

MacBook Air (13-inch, Early 2014), OS X Yosemite (10.10.1)

Posted on Nov 18, 2017 6:34 AM

Reply
3 replies

Nov 18, 2017 7:02 AM in response to macjack

Done.

EtreCheck version: 3.4.6 (460)

Report generated 2017-11-18 10:02:02

Download EtreCheck from https://etrecheck.com

Runtime: 2:23

Performance: Excellent


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.


Problem: No problem - just checking


Hardware Information:

MacBook Air (13-inch, Early 2014)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Air - model: MacBookAir6,2

1 1.4 GHz Intel Core i5 (i5-4260U) CPU: 2-core

4 GB RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1600 MHz ok

BANK 1/DIMM0

2 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 86


Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900


Disk Information:

APPLE SSD SD0128F disk0: (121.33 GB) (Solid State - TRIM: Yes)

[Show SMART report]

(disk0s1) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 120.00 GB (44.14 GB free)

(disk0s3) <not mounted> [Recovery]: 990 MB


USB Information:

XHCI Root Hub SS Simulation

Apple Internal Memory Card Reader

XHCI Root Hub USB 2.0 Simulation

USB DISK 2.0 32.09 GB

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Microsoft Microsoft® Nano Transceiver v2.0


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Virtual disks:

USB DISK (disk1s1 - MS-DOS FAT32) /Volumes/USB DISK : 32.07 GB (30.65 GB free)

Physical disk: (null) 32.07 GB (30.65 GB free)


System Software:

OS X Yosemite 10.10.5 (14F2511) - Time since boot: about 8 days


Gatekeeper:

Mac App Store and identified developers


System Launch Agents:

[not loaded] 5 Apple tasks

[loaded] 139 Apple tasks

[running] 47 Apple tasks

[killed] 21 Apple tasks

21 processes killed due to insufficient RAM


System Launch Daemons:

[not loaded] 47 Apple tasks

[loaded] 132 Apple tasks

[running] 61 Apple tasks

[killed] 22 Apple tasks

22 processes killed due to insufficient RAM


Launch Daemons:

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 a56d5fc2 - installed 2017-10-25) [Lookup]


User Launch Agents:

[running] com.dtv.vgconnect.plist (Shell Script aaab42d2 - installed 2014-10-27)

[loaded] com.dtv.vgconnect.uninstall.plist (Shell Script f4b6657c - installed 2015-01-19)

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-10-26) [Lookup]

[running] com.spotify.webhelper.plist (Spotify - installed 2017-11-09) [Lookup]


User Login Items:

iTunesHelper Application (Apple, Inc. - installed 2017-11-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

EvernoteHelper Application (Evernote - installed 2014-12-16)

(/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app)

Octoshape Application

(~/Library/Octoshape/Octoshape.app)

Dropbox Application

(/Applications/Dropbox.app)

Spotify Application - Hidden

(/Applications/Spotify.app)


Internet Plug-ins:

FlashPlayer-10.6: 27.0.0.187 (installed 2017-11-14) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-10-27)

Flash Player: 27.0.0.187 (installed 2017-11-14) [Lookup]

iPhotoPhotocast: 7.0 (installed 2015-02-14)

PepperFlashPlayer: 27.0.0.187 (installed 2017-11-14) [Lookup]

Default Browser: 600 (installed 2017-10-26)


User internet Plug-ins:

OctoshapeWeb: 1.0 (installed 2017-10-26) [Lookup]


Safari Extensions:

Evernote Web Clipper - Evernote Corp. - http://evernote.com (installed 2017-10-26)


3rd Party Preference Panes:

Flash Player (installed 2017-10-25) [Lookup]


Time Machine:

Skip System Files: NO

Mobile backups: OFF

Auto backup: NO - Auto backup turned off

Volumes being backed up:

Macintosh HD: Disk size: 120.00 GB Disk used: 75.86 GB

Destinations:

Time Machine [Local]

Total size: 166.84 GB

Total number of backups: 6

Oldest backup: 1/25/15, 11:58 AM

Last backup: 10/27/17, 1:19 AM

Size of backup disk: Too small

Backup size 166.84 GB < (Disk used 75.86 GB X 3)


Top Processes by CPU:

18% kernel_task

12% mdworker

12% mdworker

8% com.apple.WebKit.WebContent

8% WindowServer


Top Processes by Memory:

640 MB kernel_task

353 MB com.apple.WebKit.WebContent

178 MB com.apple.WebKit.WebContent

131 MB Safari

103 MB com.apple.WebKit.WebContent


Top Processes by Energy Use:

61.53 com.apple.WebKit

17.60 WindowServer

12.20 Safari

11.02 com.apple.WebKit.WebContent

6.08 com.apple.WebKit.Networking


Virtual Memory Information:

522 MB Available RAM

179 MB Free RAM

3.49 GB Used RAM

342 MB Cached files

2.01 GB Swap Used


Software installs (last 30 days):

Adobe Flash Player: (installed 2017-10-26)

Adobe Pepper Flash Player: (installed 2017-10-26)

Adobe Flash Player: (installed 2017-10-26)

Twitter: 4.3.2 (installed 2017-10-26)

Adobe Flash Player: (installed 2017-11-14)

Adobe Pepper Flash Player: (installed 2017-11-14)


Install information may not be complete.


Diagnostics Events (last 3 days for minor events):

2017-11-18 07:09:40 NDSPCShowServer Crash [Open]

2017-11-09 19:05:13 Last shutdown cause: 3 - Hard shutdown


Files deleted by EtreCheck:

2017-11-18 09:58:40 - ~/Library/LaunchAgents/com.QuickLookSearches.plist - Unknown

2017-11-18 09:58:40 - ~/Library/LaunchAgents/com.pcv.hlpramcn.plist - Unknown

2017-11-18 09:58:40 - ~/Library/Safari/Extensions/2DDCEA3C20DA42D9B8D2921360822D4B.safariextz - Unknown

Nov 18, 2017 8:16 AM in response to jsbsvb123

Looks a lot better, how is it running now?

A couple of points:

You need to keep timely backups, your last backup was almost a month ago. Suggest you use your Time Machine more or some other backup method. Anything can happen at any time, hard drives fail, so does hardware. Not saying it will happen but if it does you don't want all your data lost.

Also, since you are running only 4GB RAM and it is not upgradeable, you may want to restart more regularly to clear RAM. Your report shows many processes killed due to insufficient RAM.

Etrecheck report feedback, please...

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.