I am more than happy to share the report :
1. When I'm trying to sign in to icloud, there was no report, I fill in my id & pass, click enter, circling sign for a while, then just back to initial stage asking for id & pass.
2. I also notice that this user is un-capable of storing any password. In no. 1 & 3 cases, password always gone. another case is in safari, I web check in i-cloud, pop mail and keep on click the save password or update password, but nothing is stored and I have to re-enter the password. This might be the root problem? But my gmail & yahoo mail is just fine
3. In my POP mail. in the server setting, password always missing. I re-entered, click save, verifying for a while, then Unable to store credential due to error -25308 Requested By: Mail or Unable to verify. the password just gone again.
Below is from etrecheck 4:
EtreCheck version: 4.2.1 (4C015)
Report generated: 2018-04-14 10:02:39
Download EtreCheck from https://etrecheck.com
Runtime: 3:48
Performance: Good
Problem: Other problem
Description:
Unable to Sign in to Icloud, POP mail using mail
Major Issues:
Anything that appears on this list needs immediate attention.
Battery failure- Your battery is reporting that it needs to be serviced.
Adware- Adware detected.
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Heavy RAM usage- This machine is using a large amount of RAM.
Apps crashing- There have been numerous app crashes.
Apps with heavy CPU usage- There have been numerous cases of apps with heavy CPU usage.
Clean up- There are orphan files that could be removed.
Unsigned files- There is unsigned software installed. They appear to be legitimate but should be reviewed.
32-bit Apps- This machine has 32-bits apps that may have problems in the future.
Hardware Information:
MacBook Pro (Retina, 15-inch, Mid 2014)
MacBook Pro Model: MacBookPro11,3
1 2.5 GHz Intel Core i7 (i7-4870HQ) CPU: 4-core
16 GB RAMNot upgradeable
BANK 0/DIMM0 - 8 GB DDR3 1600 ok
BANK 1/DIMM0 - 8 GB DDR3 1600 ok
Battery: Health = Service Battery - Cycle count = 354
Video Information:
Intel Iris Pro - VRAM: 1536 MB
Color LCD
NVIDIA GeForce GT 750M - VRAM: 2048 MB
Drives:
disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)
Internal PCI 5.0 GT/s x2 Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 () 500.07 GB
disk1s1 - Macintosh HD (APFS) 500.07 GB (442.06 GB used)
disk1s2 - Preboot (APFS) [APFS Preboot] 500.07 GB (21 MB used)
disk1s3 - Recovery (APFS) [Recovery] 500.07 GB (518 MB used)
disk1s4 - VM (APFS) [APFS VM] 500.07 GB (1.07 GB used)
Mounted Volumes:
disk1s1 - Macintosh HD 500.07 GB (56.23 GB free)
APFS
Mount point: /
disk1s4 - VM [APFS VM] 500.07 GB (56.23 GB free)
APFS
Mount point: /private/var/vm
Network:
Interface Bluetooth-Modem: Bluetooth DUN
Interface en3: USB Ethernet
Interface fw0: Thunderbolt FireWire
Interface en0: Wi-Fi
802.11 a/b/g/n/ac
One IPv4 address
Interface en5: iPhone
Interface en4: Bluetooth PAN
Interface bridge0: Thunderbolt Bridge
System Software:
macOS High Sierra 10.13.4 (17E199)
Time since boot: About an hour
System Load: 1.59 (1 min ago) 1.86 (5 min ago) 1.96 (15 min ago)
Configuration Files:
/etc/hosts - Count: 1
Security:
| System | Status |
|---|
| Gatekeeper | Mac App Store and identified developers |
| System Integrity Protection | Enabled |
Adware:
Launchd: ~/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
Reason: Adware name match
Executable: /Applications/JustCloud.app/Contents/Resources/Utility.app /Applications/JustCloud.app/Contents/Resources/Utility.app --args 7 1
Launchd: ~/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
Reason: Adware name match
Executable: /Applications/JustCloud.app/Contents/Resources/Utility.app /Applications/JustCloud.app/Contents/Resources/Utility.app -n --args 9 -l
Unsigned Files:
Launchd: /Library/LaunchDaemons/com.kaspersky.kav.plist
Executable: /Library/Application Support/Kaspersky Lab/KAV/Binaries/kav -r -bl
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.mackeeper.Cerberus.plist
Executable: /Library/PrivilegedHelperTools/com.mackeeper.Cerberus --monitoringPath /Applications/MacKeeper.app --affid 770.20503080.1497497631.28.mzb --bundleId 29_314511156 --prodId 29 --trtId FF2B241D-9456-4D5E-A4D5-50B67C3F0715 --trtVersion 11
32-bit Applications:
94 32-bit apps
Kernel Extensions:
/Applications/Parallels Access.app
[Loaded] prl_virtual_hid.kext (Parallels, Inc., 1.0.3 - SDK 10.9)
[Loaded] prl_virtual_sound.kext (Parallels, Inc., 1.0.36 - SDK 10.6)
/Applications/Parallels Desktop.app
[Not Loaded] prl_hypervisor.kext (Parallels International GmbH, 13.2.0 43213 - SDK 10.9)
[Not Loaded] prl_netbridge.kext (Parallels International GmbH, 13.2.0 43213 - SDK 10.9)
[Not Loaded] prl_usb_connect.kext (Parallels International GmbH, 13.2.0 43213 - SDK 10.9)
[Not Loaded] prl_vnic.kext (Parallels International GmbH, 13.2.0 43213 - SDK 10.9)
/Library/Application Support/MacKeeper/AntiVirus.app
[Not Loaded] ZBAVKauth.kext (KROMTECH ALLIANCE CORP., 2.15 - SDK 10.10)
[Not Loaded] ZBAVKauthLegacy.kext (KROMTECH ALLIANCE CORP., 2.15 - SDK 10.10)
[Loaded] ZBFirewall.kext (KROMTECH ALLIANCE CORP., 2.15 - SDK 10.10)
[Not Loaded] ZBFirewallLegacy.kext (KROMTECH ALLIANCE CORP., 2.15 - SDK 10.10)
/System/Library/Extensions
[Not Loaded] HuaweiDataCardDriver.kext (4.0.6)
[Not Loaded] ModemDriverMac.kext (1.0.0d1)
[Not Loaded] ZTEUSBCDCACMData.kext (ZTEDriver_MacV1.3.17)
[Not Loaded] ZTEUSBMassStorageFilter.kext (ZTEDriver_MacV1.3.17)
[Not Loaded] cdc_ecm_qmi.kext (1.0.14)
[Not Loaded] cdc.kext (1.0.14)
[Not Loaded] LJAMassStrorageDriver.kext (1.0.0)
[Not Loaded] LJAUSBModemCDC78.kext (1.0.0)
[Not Loaded] LJAUSBModemData78.kext (1.0.0)
Startup Items:
HWNetMgr Path: /Library/StartupItems/HWNetMgr
HWPortDetect Path: /Library/StartupItems/HWPortDetect
System Launch Agents:
| [Not Loaded] | 8 Apple tasks |
| [Loaded] | 171 Apple tasks |
| [Running] | 113 Apple tasks |
| [Other] | One Apple task |
System Launch Daemons:
| [Not Loaded] | 35 Apple tasks |
| [Loaded] | 186 Apple tasks |
| [Running] | 114 Apple tasks |
Launch Agents:
| [Loaded] | com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-04-12) |
| [Other] | com.kaspersky.kav.gui.plist (? 5542b905 - installed 2014-10-27) |
| [Loaded] | com.parallels.mobile.prl_deskctl_agent.launchagent.plist (Parallels, Inc. - installed 2017-08-28) |
| [Not Loaded] | Swapper.plist (? 90dacb52 - installed 2011-02-24) |
| [Other] | com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-15) |
Launch Daemons:
| [Loaded] | com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15) |
| [Running] | com.parallels.mobile.dispatcher.launchdaemon.plist (Parallels, Inc. - installed 2017-08-28) |
| [Loaded] | com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-04-12) |
| [Loaded] | com.parallels.mobile.kextloader.launchdaemon.plist (Apple - installed 2018-03-28) |
| [Loaded] | com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper.plist (KROMTECH ALLIANCE CORP. - installed 2018-02-23) |
| [Not Loaded] | PPPMonitord.plist (? a94c92f4 - installed 2011-02-24) |
| [Loaded] | com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-03-27) |
| [Loaded] | com.mackeeper.MacKeeper.MacKeeperPrivilegedHelper.plist (KROMTECH ALLIANCE CORP. - installed 2018-04-02) |
| [Loaded] | com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15) |
| [Running] | com.mackeeper.Cerberus.plist (? a1b99cd2 - installed 2018-04-14) |
| [Running] | com.mackeeper.AntiVirus.plist (KROMTECH ALLIANCE CORP. - installed 2017-10-11) |
| [Other] | com.kaspersky.kav.plist (? 47c0a457 - installed 2014-10-27) |
| [Running] | com.mackeeper.MacKeeper.plugin.AntiTheft.daemon.plist (KROMTECH ALLIANCE CORP. - installed 2018-03-06) |
| [Loaded] | com.megabackup.MegaBackup.PrivilegedHelper.plist (MegaBackup Corp. - installed 2017-11-01) |
User Launch Agents:
| [Running] | com.parallels.mobile.startgui.launchagent.plist (Parallels, Inc. - installed 2018-04-14) |
| [Loaded] | com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-04) |
| [Other] | com.jdibackup.JustCloud.autostart.plist (Adware - installed 2017-06-15) |
| [Running] | com.mackeeper.MacKeeper.Helper.plist (KROMTECH ALLIANCE CORP. - installed 2018-03-06) |
| [Running] | com.hp.devicemonitor.plist (HP Inc. - installed 2018-04-14) |
| [Running] | com.mackeeper.AdwareAnalyzer.plist (KROMTECH ALLIANCE CORP. - installed 2018-03-06) |
| [Running] | com.hp.productresearch.plist (HP Inc. - installed 2018-04-14) |
| [Running] | MegaBackupAgent.plist (MegaBackup Corp. - installed 2017-08-03) |
| [Other] | com.adobe.ARM.***.plist (? 0 - installed 2011-11-18) |
| [Other] | com.jdibackup.JustCloud.notify.plist (Adware - installed 2017-06-15) |
User Login Items:
Parallels Toolbox Application (?
(/Applications/Parallels Toolbox.app)
RealPlayer Downloader Agent Application (?
(/Users/***/Library/Application Support/RealNetworks/RealPlayer Downloader Agent.app)
iTunesHelper Application (Apple - installed 2018-04-02)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
AdobeResourceSynchronizer Application (Adobe Systems, Inc.
(/Applications/Adobe Acrobat Reader DC.app/Contents/Helpers/AdobeResourceSynchronizer.app)
HP Product Research SMLoginItem (HP Inc. - installed 2017-10-26)
(/Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app)
MegaBackupAgent SMLoginItem (MegaBackup Corp. - installed 2017-12-11)
(/Applications/MegaBackup.app/Contents/Library/LoginItems/MegaBackupAgent.app)
HP Device Monitor SMLoginItem (HP Inc. - installed 2017-10-26)
(/Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpe rs/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app)
LaunchHelper SMLoginItem (Mac App Store - installed 2017-02-01)
(/Applications/FreeChat.app/Contents/Library/LoginItems/LaunchHelper.app)
Internet Plug-ins:
FlashPlayer-10.6: 29.0.0.140 (installed 2018-04-10)
QuickTime Plugin: 7.7.3 (installed 2018-03-28)
AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-03-20)
AdobePDFViewer: 18.011.20038 (installed 2018-03-20)
Flash Player: 29.0.0.140 (installed 2018-04-10)
OfficeLiveBrowserPlugin: 12.3.6 (installed 2014-10-29)
Google Earth Web Plug-in: 6.0 (installed 2014-10-29)
RealPlayer Plugin: (installed 2014-10-29)
PepperFlashPlayer: 29.0.0.140 (installed 2018-04-10)
iPhotoPhotocast: 7.0 (installed 2014-10-29)
Safari Extensions:
3rd Party Preference Panes:
Flash Player (installed 2018-03-27)
MacFUSE (installed 2014-10-29)
Time Machine:
Skip System Files: No
Mobile backups: Yes
Auto backup: Yes
Volumes being backed up:
Macintosh HD: Disk size: 500.07 GB - Disk used: 443.84 GB
Destinations:
A**************p [Local] (Last used)
Total size: 2.00 TB
Total number of backups: 55
Oldest backup: 2016-09-04 01:30:42
Last backup: 2018-04-06 15:22:18
Top Processes by CPU:
| Process (count) | Source | % of CPU |
| WindowServer | Apple | 9 |
| RealPlayer Downloader Agent | 6 |
| kernel_task | Apple | 3 |
| RdrCEF | Adobe Systems, Inc. | 2 |
| sysmond | Apple | 1 |
Top Processes by Memory:
| Process (count) | Source | RAM usage |
| com.apple.WebKit.WebContent (23) | Apple | 2.21 GB |
| kernel_task | Apple | 1.35 GB |
| MTLCompilerService (38) | Apple | 816 MB |
| AntiVirus | KROMTECH ALLIANCE CORP. | 519 MB |
| soagent (2) | Apple | 395 MB |
Top Processes by Network Use:
| Process | Source | Input | Output |
| mDNSResponder | Apple | 117 KB | 63 KB |
| Mail | Apple | 54 KB | 22 KB |
| CalendarAgent | Apple | 43 KB | 26 KB |
| apsd | Apple | 25 KB | 43 KB |
| Mail | Apple | 23 KB | 6 KB |
Top Processes by Energy Use:
| Process (count) | Source | Energy usage (0-100) |
| AddressBookSourceSync (2) | Apple | 9 |
| callservicesd (2) | Apple | 7 |
| Mail (2) | Apple | 7 |
| com.apple.WebKit.WebContent (23) | Apple | 5 |
| CalendarAgent (2) | Apple | 5 |
Virtual Memory Information:
| Available RAM | 5.23 GB |
| Free RAM | 2.30 GB |
| Used RAM | 10.77 GB |
| Cached files | 2.93 GB |
| Swap Used | 0 B |
Clean up:
/Library/LaunchAgents/com.kaspersky.kav.gui.plist
Kaspersky Anti-Virus For Mac.app
Executable not found
~/Library/LaunchAgents/com.adobe.ARM.***.plist
/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper
Executable not found
Diagnostics Information (past 7 days):
2018-04-14 08:28:03 WindowServer Crash (2 times)
StartTime:2018-04-14 08:25:35 GPU:IG&NV MetalDevice for accelerator(0x0): 0x7feb915459b8 (MTLDevice: 0x0) IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/P0P2@1/IOPP/GFX0@0/NVDA,D isplay-A@0/NVDA Assertion failed: (x_list_nth(active_managed_displays, 0) == PKGDisplayGetSpaceData(pkg_display)), function session_data_handle_display_config_change_block_invoke, file /BuildRoot/Library/Caches/com.apple.xbs/Sources/SkyLight/SkyLight-312.50/SkyLig ht/Server/Packages/PKGSpace.c, line 8717. |
2018-04-13 21:52:31 MacKeeper.app CPU (3 times)
2018-04-13 21:44:19 Notes.app Crash (once)
2018-04-13 14:04:03 mdworker Crash (once)
import fstype:apfs fsflag:480D000 flags:240000005E diag:0 isXCode:0 uti:com.apple.addressbook.person plugin:/Library/Spotlight/vCard.mdimporter - find suspect file using: sudo mdutil -t 8597435682 |
2018-04-13 13:26:26 com.apple.WebKit.Storage CPU (4 times)
2018-04-13 13:14:55 kav Crash (11 times)
dyld: launch, loading dependent libraries |
2018-04-13 10:21:41 DesktopServicesHelper CPU (2 times)
2018-04-12 20:17:06 Mail.app Crash (once)
*** Terminating app due to uncaught exception 'NSFileHandleOperationException', reason: '*** -[NSConcreteFileHandle writeData:]: Input/output error' terminating with uncaught exception of type NSException abort() called |
2018-04-11 21:51:31 AntiVirus.app CPU (once)
2018-04-11 21:44:27 cloudd Crash (once)
*** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Path /Users/***/Library/Caches/*/MMCS deleted/renamed, crashing.' terminating with uncaught exception of type NSException abort() called |
End of report