Allen,
Here is the report minus the one piece of malware/adware they found that I selected to remove.
EtreCheck version: 4.1 (4A162)
Report generated: 2018-03-02 14:48:04
Download EtreCheck from https://etrecheck.com
Runtime: 3:36
Performance: Good
Problem: Computer is too slow
Description:
The computer is running slow and I do get the beachball more often.
Major Issues:
Anything that appears on this list needs immediate attention.
Adware - Adware detected.
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
-
Clean up - There are orphan files that could be removed.
Unsigned files - There is unsigned software installed. It appears to be legitimate but should be reviewed.
32-bit Apps - This machine has 32-bits apps that may have problems in the future.
Hardware Information:
MacBook Pro (Retina, 13-inch, Late 2013)
MacBook Pro Model: MacBookPro11,1
1 2.6 GHz Intel Core i5 (i5-4288U) CPU: 2-core
8 RAM Not upgradeable
BANK 0/DIMM0
4 GB DDR3 1600 ok
BANK 1/DIMM0
4 GB DDR3 1600 ok
Battery: Health = Normal - Cycle count = 525
Video Information:
Intel Iris - VRAM: 1536 MB
Color LCD 2560 x 1600
Drives:
disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)
Internal PCI 5.0 GT/s x2 Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 500.07 GB
disk1s1 - Macintosh HD (APFS) 500.07 GB 373.59 GB
disk1s2 - Preboot (APFS) [APFS Preboot] 500.07 GB 22 MB
disk1s3 - Recovery (APFS) [Recovery] 500.07 GB 510 MB
disk1s4 - VM (APFS) [APFS VM] 500.07 GB 3.22 GB
Mounted Volumes:
disk1s1 - Macintosh HD 500.07 GB (122.56 GB free)
APFS
Mount point: /
Encrypted
disk1s4 - VM [APFS VM] 500.07 GB (122.56 GB free)
APFS
Mount point: /private/var/vm
Network:
Interface en0: Wi-Fi
802.11 a/b/g/n/ac
One IPv4 address
Interface en3: Bluetooth PAN
Interface bridge0: Thunderbolt Bridge
iCloud Quota: 26.07 GB available
System Software:
macOS High Sierra 10.13.3 (17D102)
Time since boot: About 8 days
System Load: 1.84 (1 min ago) 2.16 (5 min ago) 2.46 (15 min ago)
Security:
| System | Status |
|---|
| Gatekeeper | Mac App Store and identified developers |
| System Integrity Protection | Enabled |
Adware:
Launchd: ~/Library/LaunchAgents/yeti.notification.plist
Reason: Adware name match
Executable: /Applications/Yeti.app/Contents/MacOS/Yeti -trigger notification -app_key yeti
Unsigned Files:
Launchd: ~/Library/LaunchAgents/com.microsoft.LaunchAgent.SyncServicesAgent.plist
Executable: /Applications/Microsoft Office 2011/Office/SyncServicesAgent.app/Contents/MacOS/SyncServicesAgent
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
Details: Exact match found in the whitelist - probably OK
32-bit Applications:
| Name | Version |
| ReadMe(Image Handling Library) | 2.0.0.1 |
| PhotoStitch Launcher | 1.2.5.26 |
| Microsoft Document Connection | 14.7.2 |
| UploaderForCiG | 1.1.3.11 |
| CameraWindow | 7.11.0.1 |
| DVD Player | 5.8 |
| Microsoft Alerts Daemon | 14.7.2 |
| Falcon_900EX_Rev_5 | 9.0.45.0 |
| GoToMeeting v6 | 6.4.0.1558 |
| Install | 4.3.0.256 |
| InkServer | 10.9 |
| Microsoft Error Reporting | 2.2.9 |
| Movie Uploader for YouTube | 1.4.4.25 |
| GoToMeeting v7.0 | ...1848 |
| MovieBinder | 1.5.0.4 |
| WFTPairing |
| Open XML for Excel | 14.7.2 |
| Microsoft Word | 14.7.2 |
| PhotoStitch | 3.2.6.28 |
| Creative Cloud Desktop App | 4.3.0.256 |
| ReadMe(EOS Utility) | 2.0.0.1 |
| Adobe Application Updater | 4.3.0.256 |
| Uninstall Product | 9.0.0.65 |
| Microsoft Chart Converter | 14.7.2 |
| ColorBrightnessAdjustment Task | 1.2.0.2 |
| EOS Video Snapshot Task | 1.2.0.11 |
| Microsoft Database Utility | 14.7.2 |
| AAM Registration Notifier | 10.0.0.163 |
| GoToMeeting v6.3 | 6.3.1.1468 |
| LevelAdjustment Task | 1.2.0.2 |
| Microsoft Ship Asserts | 1.1.4 |
| SLLauncher | 1.0 |
| ImageBrowser EX | 1.5.1.7 |
| Microsoft Graph | 14.7.2 |
| AdobeIPCBroker | 5.4.0.12 |
| AutoAdjustment Task | 1.2.0.2 |
| EOS Utility | 2.13.20 |
| Microsoft Outlook | 14.7.2 |
| AAMLauncherUtil | 10.0.0.49 |
| Microsoft Query | 12.0.0 |
| Remote Desktop Connection | 2.1.1 |
| Creative Cloud Installer | 4.3.0.256 |
| IndexPrint Task | 1.1.0.3 |
| Viewer | 3.2.6.28 |
| ReadMe(Movie Uploader for YouTube) | 2.0.0.1 |
| AAM Updates Notifier | 9.0.0.281 |
| Equation Editor | 14.2.0 |
| quicklookd32 | 5.0 |
| Adobe Flash Player Install Manager | 28.0.0.161 |
| Microsoft Upload Center | 14.7.2 |
| Trimming Task | 1.2.0.2 |
| MovieFrame Task | 3.3.0.1 |
| ReadMe(AutoUpdateService) | 2.0.0.1 |
| GoToMeeting v6.4 | 6.4.5.1865 |
| ReadMe(ImageBrowser EX) | 2.0.0.1 |
| ReadMe(MovieEdit Task) | 2.0.0.1 |
| Microsoft Office Reminders | 14.7.2 |
| NETGEAR Powerline Utility |
| MyHarmony | 1.0.0.97 |
| Uninstaller | 4.3.0.256 |
| Microsoft Excel | 14.7.2 |
| PreIBXuist | 1.5.0.4 |
| Uploader for Facebook | 1.0.4.25 |
| UpdateChecker | 2.4.2.5 |
| Adobe Desktop Service | 4.3.0.256 |
| Adobe Application Manager | 10.0.0.49 |
| ReadMe(PhotoStitch) | 2.0.0.1 |
| MFManager | 1.5.0.4 |
| OnePagePrint Task | 1.1.0.3 |
| ToneCurveAdjustment Task | 1.2.0.2 |
| GoToMeeting v6.1 | 6.1.2.1312 |
| adobe_licutil | 10.0.0.119 |
| AmWellVideo | 9.3.1.4.20161208.1024 |
| ReadMe(EOS Sample Music) | 2.0.0.1 |
| Microsoft Office Setup Assistant | 14.2.0 |
| Digital Photo Professional Batch | 3.13.20 |
| Creative Cloud Uninstaller | 4.3.0.256 |
| PictureStyleEditor | 1.13.20 |
| Microsoft Database Daemon | 14.7.2 |
| Falcon_900B_Rev_7 | 9.0.45.0 |
| Digital Photo Professional | 3.13.20 |
| Solver | 1.0 |
| Microsoft Messenger | 8.0.1 |
| RedEyeCorrection Task | 1.4.0.2 |
| Setup | 5.0.65.0 |
| MCU | 2.5.0.2 |
| HP Photo Creations | 1.0.0.22192 |
| Microsoft Clip Gallery | 14.7.2 |
| UniversalUninstaller | 2.5.0.2 |
| My Day | 14.7.2 |
| SendEmail Task | 1.2.0.2 |
| SyncServicesAgent | 14.7.2 |
| UniversalInstaller | 2.5.0.4 |
| MovieEdit Task | 4.3.0.4 |
| GarageBand | 6.0.5 |
| SlideShowViewer | 1.5.1.7 |
| Office365Service | 14.7.2 |
| iMovie 9.0 | 9.0.9 |
| Sharpness Task | 1.2.0.2 |
| Microsoft PowerPoint | 14.7.2 |
| Microsoft Language Register | 14.7.2 |
| CitrixOnlineLauncher | 1.0.168 |
| COSY_2_4_4_32 | 4.3.0.256 |
| ReadMe(EOS Video Snapshot Task) | 2.0.0.1 |
| InsertText Task | 1.2.0.2 |
| FLIR Cloud Client |
| GoToMeeting v6.2 | 6.2.1.1350 |
Kernel Extensions:
/System/Library/Extensions
[Not Loaded] Seagate Storage Driver.kext (5.2.4 (26840) - SDK 10.4)
/System/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns
[Not Loaded] SeagateLeafPowSecDriver_10_4.kext (5.2.4 (26840) - SDK 10.4)
[Not Loaded] SeagateLeafPowSecDriver_10_5.kext (5.2.4 (26840) - SDK 10.5)
[Not Loaded] SeagateDriveIcons.kext (5.2.4 (26840) - SDK 10.4)
System Launch Agents:
| [Not Loaded] | 8 Apple tasks |
| [Loaded] | 151 Apple tasks |
| [Running] | 131 Apple tasks |
System Launch Daemons:
| [Not Loaded] | 38 Apple tasks |
| [Loaded] | 178 Apple tasks |
| [Running] | 117 Apple tasks |
Launch Agents:
| [Running] | com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2017-09-27) |
| [Not Loaded] | com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-01-24) |
| [Loaded] | com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-24) |
| [Loaded] | com.oracle.java.Java-Updater.plist (? 952b6798 - installed 2017-12-19) |
| [Other] | com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-13) |
| [Running] | com.canon.MFManager.plist (? 8a8296d7 - installed 2015-01-19) |
Launch Daemons:
| [Loaded] | com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-13) |
| [Loaded] | com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-11) |
| [Loaded] | com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2017-09-27) |
| [Loaded] | com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-01) |
| [Loaded] | com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2012-04-02) |
| [Loaded] | com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2017-12-19) |
| [Running] | com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-01-24) |
| [Running] | com.fitbit.galileod.plist (Fitbit, Inc. - installed 2017-09-25) |
| [Loaded] | com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-13) |
User Launch Agents:
| [Running] | com.hp.devicemonitor.plist (HP Inc. - installed 2017-08-29) |
| [Running] | yeti.notification.plist (? 0 - installed 2015-11-02) |
| [Other] | com.citrixonline.GoToMeeting.G2MUpdate.plist (? 0 - installed ) |
| [Running] | com.microsoft.LaunchAgent.SyncServicesAgent.plist (? 0 - installed 2017-02-28) |
| [Running] | com.hp.productresearch.plist (HP Inc. - installed 2017-08-29) |
| [Loaded] | com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-24) |
| [Other] | com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist (? 0 - installed ) |
User Login Items:
AmWellVideo Application
(~/Applications/AmWellVideo.app)
Garmin Express Service Application (Garmin International - installed 2018-02-22)
(/Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app)
iTunesHelper Application (Apple, Inc. - installed 2018-01-24)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
AdobeResourceSynchronizer Application (Adobe Systems, Inc.
(/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)
Fitbit Connect Menubar Helper Application (Fitbit, Inc. - installed 2017-09-30)
(/Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app)
App Store Application (Apple, Inc.
(/Applications/App Store.app)
FLIR Cloud Client Application
(~/Downloads/FLIR Cloud Client.app)
Seagate Dashboard 2.0 Application
(/Applications/Seagate Dashboard 2.0.app)
HP Product Research SMLoginItem (HP Inc. - installed 2017-10-25)
(/Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app)
HP Device Monitor SMLoginItem (HP Inc. - installed 2017-10-25)
(/Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Help ers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app)
Internet Plug-ins:
Flip4Mac WMV Plugin: 3.3.3.1 (installed 2015-02-02)
nprtAudioVideoPlugin: rtAudioVideoPlugin_x86_64 0.8.878 (installed 2016-09-14)
AdobeAAMDetect: 3.0.0.0 (installed 2017-09-27)
AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-02-22)
FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-06)
Silverlight: 5.1.30514.0 (installed 2015-01-20)
QuickTime Plugin: 7.7.3 (installed 2018-01-31)
Flash Player: 28.0.0.161 (installed 2018-02-06)
PepperFlashPlayer: 28.0.0.161 (installed 2018-02-06)
SharePointBrowserPlugin: 14.7.2 (installed 2017-03-16)
AdobePDFViewer: 18.011.20035 (installed 2018-02-22)
RL Secure Plug-In Layer: Unknown (installed 2016-12-29)
JavaAppletPlugin: Java 8 Update 161 build 12 (installed 2018-01-26)
User Internet Plug-ins:
CitrixOnlineWebDeploymentPlugin: 1.0.105 (installed 2013-04-25)
UploadManager: Unknown (installed 2014-06-30)
ContentManager: Unknown (installed 2014-06-30)
RocketEngine: Unknown (installed 2014-06-30)
Safari Extensions:
3rd Party Preference Panes:
Flash Player (installed 2018-02-01)
Java (installed 2018-01-26)
Paragon NTFS for Mac ® OS X (installed 2013-12-18)
Time Machine:
Skip System Files: No
Mobile backups:
Auto backup: No
Volumes being backed up:
Macintosh HD: Disk size: 500.07 GB - Disk used: 377.50 GB
Destinations:
S***********************e [Local] (Last used)
Total size: 2.00 TB
Total number of backups: 8
Oldest backup: 2016-04-05 00:01:23
Last backup: 2018-03-02 12:39:14
Top Processes by CPU:
| Process (count) | Source | % of CPU |
| WindowServer | Apple | 9 |
| kernel_task | Apple | 5 |
| com.apple.WebKit.WebContent (9) | Apple | 3 |
| AcroCEF | Adobe Systems, Inc. | 2 |
| Fitbit Connect Menubar Helper | Fitbit, Inc. | 2 |
Top Processes by Memory:
| Process (count) | Source | RAM usage |
| com.apple.WebKit.WebContent (9) | Apple | 1.12 GB |
| kernel_task | Apple | 927 MB |
| Safari | Apple | 579 MB |
| mds_stores | Apple | 136 MB |
| Finder | Apple | 102 MB |
Top Processes by Network Use:
| Process | Source | Input | Output |
| mDNSResponder | Apple | 30 MB | 9 MB |
| netbiosd | Apple | 2 MB | 917 KB |
| apsd | Apple | 38 KB | 38 KB |
| com.apple.WebKit.Networking | Apple | 20 KB | 6 KB |
| SystemUIServer | Apple | 0 B | 14 KB |
Top Processes by Energy Use:
| Process (count) | Source | Energy usage (0-100) |
| WindowServer | Apple | 4 |
| com.apple.WebKit.WebContent (9) | Apple | 2 |
| AcroCEF | Adobe Systems, Inc. | 2 |
| HP Device Monitor | HP Inc. | 1 |
| Seagate Dashboard 2.0 | 1 |
Virtual Memory Information:
| Available RAM | 1.50 GB |
| Free RAM | 24 MB |
| Used RAM | 6.50 GB |
| Cached files | 1.48 GB |
| Swap Used | 1020 MB |
Software Installs (past 30 days):
| Name | Version | Install Date |
| Pocket | 1.7.1 | 2018-02-07 |
Clean up:
~/Library/LaunchAgents/com.citrixonline.GoToMeeting.G2MUpdate.plist
~/Library/Application Support/CitrixOnline/GoToMeeting/G2MUpdate
Executable not found
~/Library/LaunchAgents/com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc5 6a8fd83a6f7ae.plist
/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper
Executable not found
Diagnostics Information (past 7 days):
2018-02-26 12:05:23 com.apple.WebKit.Plugin.64 Crash
Terminating app due to uncaught exception NSInternalInconsistencyException reason: UIT_Picture_NSButton 0x7fd8600c8d90 has reached dealloc but still has a super view. Super views strongly reference their children so this is being over-released or has been over-released in the past.terminating with uncaught exception of type NSExceptionabort called |
2018-02-24 05:09:55 loginwindow.app CPU
2018-02-23 17:56:01 com.apple.WebKit.WebContent CPU
End of report