Can Mail get infected with malware?

Question

Level 1

6 points

Can Mail get infected with malware?

A few days ago I had a strange episode while trying to send email via the Mail app on my macbook. While typing a message the New Message window went black and unresponsive (couldn't close it or type in it) although the main Mail window underneath was visible. I clicked on an old message in my inbox which opened but it was also black, likewise other messages I opened - the message windows opened but were black. Tried to close mail using Force Quit but this didn't work. Had to shut down laptop using the power button. On re-start Mail was working normally.

A few days after this incident I sent mail from a different mail account and using the gmail.com site (i.e. not using the Mail application). This email was apparently intercepted by a scammer and the information contained used to scam the intended recipient of the email. Although I don't have this second email account set up in Mail, it is linked to my other gmail account, the one I was using when everything went black.

Worried I might have been infected by malware or spyware. I NEVER open unsolicited attachments and the black-out occurred when I was attempting to write an email, not trying to open email.

Am using a Macbook Air running iOS Sierra 10.12.6 and Mail version 10.3 (3273)

Anyone else experience this "black-out" in Mail and/or have any idea what it could mean?

Thanks in advance.

Posted on Jun 1, 2018 12:48 PM

Reply

Answer 1

Eric Root

Level 10

685,245 points

Jun 9, 2018 2:04 PM in response to joanmurray

If it works in the Safe Mode, try running this program when booted normally and then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

Reply

Answer 2

Barney-15E

Level 10

122,210 points

Jun 12, 2018 10:16 AM in response to Eric Root

There is one crash in the report that indicates a disk i/o (input/output) problem.

Boot into Recovery and perform First Aid on your startup disk.

Reply

Answer 3

Barney-15E

Level 10

122,210 points

Jun 2, 2018 6:29 AM in response to joanmurray

There is no known malware that can affect your Mac, and I can't recall any that affected Mail.

There is also no known reason malware would identify itself by making your windows go black. The intent of malware is to steal information surreptitiously. Making your windows go black wouldn't be very effective at hiding itself.

I don't know what would cause that. While I don't know that it will have any affect, try booting into Safe Mode then restart normally. That will clear some system caches which might resolve the problem.

Use safe mode to isolate issues with your Mac - Apple Support

Reply

Answer 4

Old Toad

Level 10

215,670 points

Jun 13, 2018 10:23 AM in response to susanfrompearland

That tells you how effect Norton is. It's a waste of money and system resources. Uninstall it. There are only two 3rd party apps that I trust to look for and help remove adware and malware: Etrecheck and Malwarebytes. Both were created by longtime and highly respected members of the ASC.

This user tip is an excellent treatise on protecting your Mac: Effective defenses against malware and other threats

Reply

Answer 5

Eric Root

Level 10

685,245 points

Jun 9, 2018 5:47 PM in response to joanmurray

I don't see any antivirus programs.

I agree with Barney. Get rid of Trusteer. It doesn’t work well under Mac OS.

Trusteer Rapport Uninstall

Reply

Answer 6

Barney-15E

Level 10

122,210 points

Jun 10, 2018 3:12 AM in response to joanmurray

Uninstall Trusteer. It is useless garbage foisted upon you by your bank.

While it is not doing anything, your tap/tun (tunneling software) is horribly out of date. StartupItems were deprecated years ago.

Reply

Answer 7

Old Toad

Level 10

215,670 points

Jun 12, 2018 4:20 PM in response to joanmurray

You have ClamX A/V installed. It's really not needed and can only use up system resources. Uninstall it according to these instructions: Uninstall ClamXav | Office of Information Technology

Also the following is from this ClamX FAQ page: ClamXAV | FAQs

How do I uninstall ClamXAV completely?

First of all, quit ClamXAV Sentry (if you use it) and make sure it’s not set to launch at log in. Then simply drag ClamXAV.app to the trash; after a few seconds you’ll see a message asking if you would also like to uninstall the scanning engine. If this doesn’t happen, you can download the uninstallerand run it manually. The uninstaller will remove the scanning engine and any schedules you’ve got set up. But we’ll be sorry to see you go.

Reply

Answer 8

joanmurray Author

Level 1

6 points

Jun 11, 2018 3:14 AM in response to Eric Root

I ran another EtreCheck system scan after uninstalling Trusteer but Trusteer is (apparently) still installed on a disk image. How do I get rid of it completely? Couldn't do a screen shot of the Storage sub-report so have manually recorded details below. Also, EtreCheck crashed while I was reviewing the first scan report - the crash report is noted in the current EtreCheck report. Cloudd also crashed due to an uncaught exception - don't remember what I was doing at the time, would have been using Safar or Mail but I didn't notice any crash.

J

Storage - Trusteer Rapport

Device : disk3s1

File System : HFS+

Mount Point : /volumes/Trusteer Rapport

Size : 33mb

Free Space : 10mb .. 70% used

EtreCheck version: 4.3.2 (4D034)

Report generated: 2018-06-10 22:33:44

Download EtreCheck from https://etrecheck.com

Runtime: 2:44

Performance: Excellent

Problem: No problem - just checking

Major Issues:

Anything that appears on this list needs immediate attention.

Time Machine backup out-of-date - The last Time Machine backup is over 10 days old.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Hardware Information:

MacBook Air (13-inch, Early 2015)

MacBook Air Model: MacBookAir7,2

1 1.6 GHz Intel Core i5 (i5-5250U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 130

Video Information:

Intel HD Graphics 6000 - VRAM: 1536 MB

Color LCD 1440 x 900

Drives:

disk0 - APPLE SSD SM0256G 251.00 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 250.14 GB

disk1 - Macintosh HD (Journaled HFS+) 249.78 GB

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB

disk2 - Disk Image 24 MB (Disk Image)

External Disk Image

disk2s1 [Partition Map] 32 KB

disk2s2 - Flash Player (HFS+) 24 MB

disk3 - Disk Image 33 MB (Disk Image)

External Disk Image

disk3s1 - T**************t (HFS+) 33 MB

Mounted Volumes:

disk1 - Macintosh HD 249.78 GB (91.54 GB free)

Journaled HFS+

Mount point: /

disk3s1 - T**************t 33 MB (10 MB free)

HFS+

Mount point: /Volumes/T**************t

Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 4.97 GB available

System Software:

macOS Sierra 10.12.6 (16G29)

Time since boot: About 4 days

System Load: 0.87 (1 min ago) 0.90 (5 min ago) 0.95 (15 min ago)

Security:

System	Status
Gatekeeper	Mac App Store and identified developers
System Integrity Protection	Enabled

Unsigned Files:

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/uk.co.canimaansoftware.clamxav.UninstallWatcher.plist

Executable: /usr/local/clamXav/bin/UninstallClamXav.app /usr/local/clamXav/bin/UninstallClamXav.app

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.vmware.launchd.vmware.plist

Executable: /Library/Application Support/VMware Fusion/boot.sh --start

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

5 32-bit apps

Kernel Extensions:

/Library/Application Support/VMware Fusion/kexts

[Not Loaded] vmci64.kext (3.0.0)

[Not Loaded] vmioplug64.kext (3.0.0)

[Not Loaded] vmnet64.kext (3.0.0)

[Not Loaded] vmmon64.kext (3.0.0)

/Library/Extensions

[Not Loaded] tap.kext (20111101)

[Not Loaded] tun.kext (20111101)

Startup Items:

tap Path: /Library/StartupItems/tap

tun Path: /Library/StartupItems/tun

System Launch Agents:

[Not Loaded]	6 Apple tasks
[Loaded]	168 Apple tasks
[Running]	111 Apple tasks

System Launch Daemons:

[Not Loaded]	39 Apple tasks
[Loaded]	162 Apple tasks
[Running]	116 Apple tasks
[Other]	2 Apple tasks

Launch Agents:

[Loaded]	org.macosforge.xquartz.startx.plist (? d225a7da - installed 2013-11-11)
[Loaded]	com.oracle.java.Java-Updater.plist (? 26f81350 - installed 2018-03-28)
[Loaded]	com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2017-11-07)
[Other]	com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-15)

Launch Daemons:

[Loaded]	com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15)
[Loaded]	com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-02)
[Loaded]	com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-03-28)
[Loaded]	org.macosforge.xquartz.privileged_startx.plist (? 65395f14 - installed 2013-11-11)
[Loaded]	com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15)
[Running]	com.adobe.ARM.***.plist (? ce3c8c7a - installed 2016-01-28)
[Other]	com.vmware.launchd.vmware.plist (? 40d1be26 - installed 2012-04-13)

User Launch Agents:

[Loaded]	com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-04)
[Loaded]	com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-04-13)
[Loaded]	uk.co.canimaansoftware.clamxav.UninstallWatcher.plist (? 0 - installed 2017-09-15)
[Loaded]	com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-09-04)

User Login Items:

Dropbox Application (Dropbox, Inc. - installed 2018-06-07)

(/Applications/Dropbox.app)

Internet Plug-ins:

Flip4Mac WMV Plugin: 2.4.4.2 (installed 2013-05-16)

FlashPlayer-10.6: 30.0.0.113 (installed 2018-06-07)

QuickTime Plugin: 7.7.3 (installed 2017-09-24)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-05-14)

AdobePDFViewer: 18.011.20040 (installed 2018-05-14)

Flash Player: 30.0.0.113 (installed 2018-06-07)

NP_2020Player_IKEA: 5.0.94.1 (installed 2012-09-28)

WidevineMediaOptimizer: 6.0.0.12757 (installed 2014-06-09)

Silverlight: 5.1.50901.0 (installed 2016-11-12)

JavaAppletPlugin: Java 8 Update 171 build 11 (installed 2018-05-20)

Safari Extensions:

Adblock Plus.safariextz - Eyeo GmbH - https://adblockplus.org/ (installed 2017-03-16)

DuckDuckGo Privacy Essentials.safariextz - DuckDuckGo - http://duckduckgo.com (installed 2018-05-21)

Google Analytics Opt-out Browser Add-on.safariextz - Google, Inc. - http://tools.google.com/dlpage/gaoptout (installed 2018-04-01)

3rd Party Preference Panes:

Flash Player (installed 2018-06-02)

Flip4Mac WMV (installed 2012-05-16)

Java (installed 2018-05-20)

Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 249.78 GB - Disk used: 158.24 GB

Destinations:

T******************s [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 61

Oldest backup: 2014-04-11 13:37:25

Last backup: 2018-04-11 12:28:00

Top Processes by CPU:

Process (count)	Source	% of CPU	Location
WindowServer	Apple	8
kernel_task	Apple	3
launchd	Apple	0
com.apple.WebKit.WebContent (12)	Apple	0
PrinterProxy	?	0	/Users/***/Library/Printers/EPSON41EA22 (Epson Stylus Office BX320FW).app

Top Processes by Memory:

Process (count)	Source	RAM usage	Location
com.apple.WebKit.WebContent (12)	Apple	1.72 GB
kernel_task	Apple	760 MB
Safari (2)	Apple	440 MB
MTLCompilerService (23)	Apple	179 MB
Pages	Mac App Store	159 MB

Top Processes by Network Use:

Process	Source	Input	Output	Location
Dropbox	Dropbox, Inc.	1 MB	1 MB
com.apple.WebKit.Networking	Apple	1 MB	115 KB
mDNSResponder	Apple	759 KB	663 KB
Mail	Apple	876 KB	144 KB
com.apple.WebKit.Networking	Apple	76 KB	41 KB

Top Processes by Energy Use:

Process (count)	Source	Energy (0-100)	Location
WindowServer	Apple	4
Dropbox (3)	Dropbox, Inc.	0
CleanGenius	?	0	/Applications/CleanGenius.app
com.apple.WebKit.Networking (2)	Apple	0
Safari (2)	Apple	0

Virtual Memory Information:

Available RAM	1.62 GB
Free RAM	21 MB
Used RAM	6.38 GB
Cached files	1.60 GB
Swap Used	94 MB

Software Installs (past 30 days):

Name	Version	Install Date
Adobe Acrobat Reader DC (18.011.20040)	18.011.20040	2018-05-14
Java 8 Update 171	1.0	2018-05-20
Adobe Flash Player	30.0.0.113	2018-06-07

Diagnostics Information (past 7 days):

2018-06-10 11:09:55 EtreCheck.app Crash

/Applications/EtreCheck.app

2018-06-10 00:02:25 cloudd Crash

/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd

*** Terminating app due to uncaught exception 'NSGenericException', reason: 'Failed to step (6922): "select apsEnvironment, isApplication, isCKSystemService, canMasquerade, canSetEnvironment, allowCustomAccounts, canAccessProtectionData, canSetDeviceIdentifier, hasAccessDuringBuddy, hasLightweightPCS, hasTCCAuthorization, allowsPowerNapScheduling, isOOPUI, allowsParticipantPII, displaysSystemAcceptPrompt, appIdentifier, clientPrefix from AppBundle where appBundleIdentifier = ? AND sourceAppBundleIdentifier = ?" - errcode:1b0a, msg:"disk I/O error", size: (null), path:/Users/***/Library/Caches/*/CloudKitMetadata, fs:(null)/(null)'

abort() called

terminating with uncaught exception of type NSException

2018-06-09 23:18:17 CleanGenius.app CPU

/Applications/CleanGenius.app

End of report

Reply

Answer 9

Jun 12, 2018 4:51 PM in response to Barney-15E

I just spent several hours online with Apple support trying to figure out why my Mac-mini wasn't working properly.

It turned out my Norton security system had allowed malware onto my system and totally mucked it up. I'm not a guru when it comes to computers and do not understand fully how these things work, but this was a nightmare and while looking for airline tickets to a funeral, I was dead in the water. I have heard the Apple systems do not get infected, but this was a rude awakening with a huge headache as well.

Reply

Answer 10

Barney-15E

Level 10

122,210 points

Jun 13, 2018 10:28 AM in response to susanfrompearland

It turned out my Norton security system had allowed malware onto my system and totally mucked it up.

Norton didn't allow anything. You did. It was probably Adware which isn't considered Malware at this time. There is no other Malware that can affect a Mac.

Norton is completely useless and detrimental to a Mac.

Take a look at this to help you not install Adware in the future:

How to install adware

Reply

Answer 11

Eric Root

Level 10

685,245 points

Jun 10, 2018 9:01 AM in response to joanmurray

I would remove it or see if there is an update for it.

Reply

Answer 12

Eric Root

Level 10

685,245 points

Jun 12, 2018 8:20 AM in response to joanmurray

I would uninstall CleanGenius. If you downloaded it from the App Store, drag it to the Trash. Most posters recommend not using cleaning programs. They can destroy normal computer operations.

Reply

Answer 13

joanmurray Author

Level 1

6 points

Jun 12, 2018 5:00 PM in response to Old Toad

No idea when or how Clamx was installed but have removed it now, thanks.

J

Reply

Answer 14

joanmurray Author

Level 1

6 points

Jun 9, 2018 3:05 PM in response to Eric Root

Hi Eric.

Here is the result of the EtreCheck scan. Nothing untoward, although I have no idea why I have multiple anti-virus apps installed, as I have not installed any additional anti-virus software (to my knowledge). How do I find what anti-virus apps are running on my computer and remove any unnecessary or conflicting software?

Thanks

Joan

EtreCheck version: 4.3.2 (4D034)

Report generated: 2018-06-09 22:10:43

Download EtreCheck from https://etrecheck.com

Runtime: 2:52

Performance: Excellent

Problem: Apps are crashing

Description:

mail freeze

Major Issues:

Anything that appears on this list needs immediate attention.

Time Machine backup out-of-date - The last Time Machine backup is over 10 days old.

More than one antivirus app - This machine has multiple antivirus apps installed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Clean up - There are orphan files that could be removed.

Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Hardware Information:

MacBook Air (13-inch, Early 2015)

MacBook Air Model: MacBookAir7,2

1 1.6 GHz Intel Core i5 (i5-5250U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 130

Video Information:

Intel HD Graphics 6000 - VRAM: 1536 MB

Color LCD 1440 x 900

Drives:

disk0 - APPLE SSD SM0256G 251.00 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 250.14 GB

disk1 - Macintosh HD (Journaled HFS+) 249.78 GB

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB

disk2 - Disk Image 24 MB (Disk Image)

External Disk Image

disk2s1 [Partition Map] 32 KB

disk2s2 - Flash Player (HFS+) 24 MB

Mounted Volumes:

disk1 - Macintosh HD 249.78 GB (91.58 GB free)

Journaled HFS+

Mount point: /

Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 4.97 GB available

System Software:

macOS Sierra 10.12.6 (16G29)

Time since boot: About 3 days

System Load: 0.98 (1 min ago) 1.63 (5 min ago) 2.11 (15 min ago)

Security:

System	Status
Gatekeeper	Mac App Store and identified developers
System Integrity Protection	Enabled

Unsigned Files:

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.vmware.launchd.vmware.plist

Executable: /Library/Application Support/VMware Fusion/boot.sh --start

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/uk.co.canimaansoftware.clamxav.UninstallWatcher.plist

Executable: /usr/local/clamXav/bin/UninstallClamXav.app /usr/local/clamXav/bin/UninstallClamXav.app

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

7 32-bit apps

Kernel Extensions:

/Library/Application Support/VMware Fusion/kexts

[Not Loaded] vmci64.kext (3.0.0)

[Not Loaded] vmioplug64.kext (3.0.0)

[Not Loaded] vmnet64.kext (3.0.0)

[Not Loaded] vmmon64.kext (3.0.0)

/Library/Extensions

[Not Loaded] tap.kext (20111101)

[Not Loaded] tun.kext (20111101)

Startup Items:

tap Path: /Library/StartupItems/tap

tun Path: /Library/StartupItems/tun

System Launch Agents:

[Not Loaded]	6 Apple tasks
[Loaded]	169 Apple tasks
[Running]	110 Apple tasks

System Launch Daemons:

[Not Loaded]	39 Apple tasks
[Loaded]	165 Apple tasks
[Running]	113 Apple tasks
[Other]	2 Apple tasks

Launch Agents:

[Running]	com.trusteer.rapport.rapportd.plist (Trusteer LTD - installed 2018-02-21)
[Loaded]	org.macosforge.xquartz.startx.plist (? d225a7da - installed 2013-11-11)
[Loaded]	com.oracle.java.Java-Updater.plist (? 26f81350 - installed 2018-03-28)
[Loaded]	com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2017-11-07)
[Other]	com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-15)

Launch Daemons:

[Loaded]	com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15)
[Running]	com.trusteer.rooks.rooksd.plist (Trusteer LTD - installed 2018-02-21)
[Loaded]	com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-02)
[Loaded]	com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-03-28)
[Loaded]	org.macosforge.xquartz.privileged_startx.plist (? 65395f14 - installed 2013-11-11)
[Loaded]	com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15)
[Running]	com.adobe.ARM.***.plist (? ce3c8c7a - installed 2016-01-28)
[Other]	com.vmware.launchd.vmware.plist (? 40d1be26 - installed 2012-04-13)

User Launch Agents:

[Loaded]	com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-04)
[Loaded]	com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-04-13)
[Loaded]	uk.co.canimaansoftware.clamxav.UninstallWatcher.plist (? 0 - installed 2017-09-15)
[Loaded]	com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-09-04)
[Other]	com.adobe.ARM.***.plist (? 0 - installed 2014-03-06)

User Login Items:

iTunesHelper Application (Apple - installed 2017-09-24)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Dropbox Application (Dropbox, Inc. - installed 2018-06-07)

(/Applications/Dropbox.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-05-14)

(/Applications/Adobe Acrobat Reader DC.app/Contents/Helpers/AdobeResourceSynchronizer.app)

Internet Plug-ins:

Flip4Mac WMV Plugin: 2.4.4.2 (installed 2013-05-16)

FlashPlayer-10.6: 30.0.0.113 (installed 2018-06-07)

QuickTime Plugin: 7.7.3 (installed 2017-09-24)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-05-14)

AdobePDFViewer: 18.011.20040 (installed 2018-05-14)

Flash Player: 30.0.0.113 (installed 2018-06-07)

NP_2020Player_IKEA: 5.0.94.1 (installed 2012-09-28)

WidevineMediaOptimizer: 6.0.0.12757 (installed 2014-06-09)

Silverlight: 5.1.50901.0 (installed 2016-11-12)

JavaAppletPlugin: Java 8 Update 171 build 11 (installed 2018-05-20)

Safari Extensions:

Adblock Plus.safariextz - Eyeo GmbH - https://adblockplus.org/ (installed 2017-03-16)

DuckDuckGo Privacy Essentials.safariextz - DuckDuckGo - http://duckduckgo.com (installed 2018-05-21)

Google Analytics Opt-out Browser Add-on.safariextz - Google, Inc. - http://tools.google.com/dlpage/gaoptout (installed 2018-04-01)

3rd Party Preference Panes:

Flash Player (installed 2018-06-02)

Flip4Mac WMV (installed 2012-05-16)

Java (installed 2018-05-20)

Trusteer Endpoint Protection (installed 2018-03-14)

Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 249.78 GB - Disk used: 158.20 GB

Destinations:

T******************s [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 61

Oldest backup: 2014-04-11 13:37:25

Last backup: 2018-04-11 12:28:00

Top Processes by CPU:

Process (count)	Source	% of CPU	Location
WindowServer	Apple	8
kernel_task	Apple	3
com.apple.WebKit.Networking	Apple	1
com.apple.WebKit.WebContent (6)	Apple	1
nsurlstoraged (2)	Apple	0

Top Processes by Memory:

Process (count)	Source	RAM usage	Location
com.apple.WebKit.WebContent (6)	Apple	1.75 GB
kernel_task	Apple	794 MB
Safari	Apple	345 MB
MTLCompilerService (18)	Apple	204 MB
mdworker (14)	Apple	160 MB

Top Processes by Network Use:

Process	Source	Input	Output	Location
Dropbox	Dropbox, Inc.	697 KB	485 KB
mDNSResponder	Apple	516 KB	453 KB
com.apple.WebKit.Networking	Apple	230 KB	171 KB
Mail	Apple	186 KB	13 KB
netbiosd	Apple	20 KB	12 KB

Top Processes by Energy Use:

Process (count)	Source	Energy (0-100)	Location
WindowServer	Apple	4
coreduetd	Apple	1
com.apple.WebKit.Networking	Apple	0
com.apple.WebKit.WebContent (6)	Apple	0
Spotlight	Apple	0

Virtual Memory Information:

Available RAM	1.81 GB
Free RAM	29 MB
Used RAM	6.19 GB
Cached files	1.78 GB
Swap Used	4 MB

Software Installs (past 30 days):

Name	Version	Install Date
Adobe Acrobat Reader DC (18.011.20040)	18.011.20040	2018-05-14
Java 8 Update 171	1.0	2018-05-20
Adobe Flash Player	30.0.0.113	2018-06-07

Clean up:

~/Library/LaunchAgents/com.adobe.ARM.***.plist

/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

Executable not found

End of report

Reply

Answer 15

joanmurray Author

Level 1

6 points

Jun 10, 2018 3:26 AM in response to Barney-15E

Should I remove tap/tun from Startup in that case? The software shouldn't be more than 18 months old as I am bought a reconditioned Macbook last year (from Apple) with the latest OS, although I did re-install data from my old Macbook.

Have removed Trusteer (and done a general clean-up using CleanGenius)

Thanks for all the suggestions.

J

Reply

Can Mail get infected with malware?

Similar questions