Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

etre check

Hi, I have one problem with my Mac. safari opens pages mckeeper and this is my etre check report, where is the problem?


EtreCheck version: 4.2.1 (4C020)

Report generated: 2018-06-17 17:50:27

Download EtreCheck from https://etrecheck.com

Runtime: 4:13

Performance: Good


Problem: Other problem


Major Issues:

Anything that appears on this list needs immediate attention.


Time Machine backup out-of-date - The last Time Machine backup is over 10 days old.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Small backup drive - Time Machine backup drive is too small.

Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.


Hardware Information:

MacBook Pro (Retina, 13-inch, Early 2015)

MacBook Pro Model: MacBookPro12,1

1 2,7 GHz Intel Core i5 (i5-5257U) CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1867 ok

BANK 1/DIMM0 - 4 GB DDR3 1867 ok

Battery: Health = Normal - Cycle count = 442


Video Information:

Intel Iris Graphics 6100 - VRAM: 1536 MB

Color LCD 2560 x 1600


Drives:

disk0 - APPLE SSD SM0128G 121.33 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 () 121.12 GB

disk1s1 - M***********D (APFS) 121.12 GB (93.19 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 121.12 GB (66 MB used)

disk1s3 - Recovery (APFS) [Recovery] 121.12 GB (1.54 GB used)

disk1s4 - VM (APFS) [APFS VM] 121.12 GB (1.07 GB used)


Mounted Volumes:

disk1s1 - M***********D 121.12 GB (25.13 GB free)

APFS

Mount point: /


disk1s4 - VM [APFS VM] 121.12 GB (25.13 GB free)

APFS

Mount point: /private/var/vm


Network:

Interface SAMSUNG_MDM: SAMSUNG Modem

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 23.54 GB available


System Software:

macOS High Sierra 10.13.3 (17D47)

Time since boot: About 10 hours

System Load: 3.26 (1 min ago) 3.41 (5 min ago) 3.24 (15 min ago)


Security:

SystemStatus
GatekeeperMac App Store
System Integrity ProtectionEnabled


Unsigned Files:

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.trapped.tm.plist

Executable: /Library/trapped.tm/trapped.tm.app/Contents/MacOS/trapped.tm

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.sexually.plist

Executable: /Users/***/Library/tartlet/hyuYJfkP/sexually

Launchd: ~/Library/LaunchAgents/com.Safe Surf Finder.plist

Executable: /Users/***/Library/Application Support/com.Safe Surf Finder/Safe Surf Finder r

Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist

Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareag ent.bundle/Contents/MacOS/com.skype.skype.shareagent

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.prologuizer.plist

Executable: /Users/***/Library/UpdateMac/prologuizer/prologuizer

Launchd: ~/Library/LaunchAgents/com.pyrheliophor.xb.plist

Executable: /Users/***/Library/pyrheliophor.xb/pyrheliophor.xb.app/Contents/MacOS/pyrheliop hor.xb


32-bit Applications:

44 32-bit apps


Kernel Extensions:

/Applications/Smart Switch/SmartSwitch.app

[Not Loaded] ssudmdmcontrol.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)

[Not Loaded] ssudmdmdata.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)

[Not Loaded] ssuddrv.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)

[Not Loaded] ssudmtp.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.5)

[Not Loaded] ssudserial.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)


System Launch Agents:

[Not Loaded] 7 Apple tasks
[Loaded] 161 Apple tasks
[Running] 122 Apple tasks


System Launch Daemons:

[Not Loaded] 37 Apple tasks
[Loaded] 172 Apple tasks
[Running] 123 Apple tasks


Launch Agents:

[Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2018-02-19)
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-04-25)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)
[Loaded] com.oracle.java.Java-Updater.plist (? 123dc320 - installed 2018-05-06)
[Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Loaded] com.trapped.tm.plist (? 89b471ab - installed 2018-05-04)


Launch Daemons:

[Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Loaded] com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2018-02-19)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-02)
[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-09-23)
[Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-05-06)
[Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-05-31)
[Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Running] com.adobe.agmservice.plist (Adobe Systems, Inc. - installed 2018-05-31)


User Launch Agents:

[Loaded] com.Safe Surf Finder.plist (? 0 - installed 2018-06-16)
[Running] com.spotify.webhelper.plist (Spotify - installed 2018-06-17)
[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-06-10)
[Loaded] com.sexually.plist (? 0 - installed 2018-05-06)
[Loaded] com.prologuizer.plist (? 0 - installed 2018-05-06)
[Loaded] com.pyrheliophor.xb.plist (? 0 - installed 2018-05-06)
[Running] com.hp.devicemonitor.plist (HP Inc. - installed 2018-06-17)
[Running] com.hp.productresearch.plist (HP Inc. - installed 2018-06-17)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)
[Loaded] com.skype.skype.shareagent.plist (? 0 - installed 2017-11-27)
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2017-09-10)
[Loaded] com.bittorrent.uTorrent.plist (BitTorrent, Inc - installed 2017-03-22)


User Login Items:

Dropbox Applicazione (Dropbox, Inc.

(/Applications/Dropbox.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

Spotify Applicazione (Spotify

(/Applications/Spotify.app)

iTunesHelper Applicazione (Apple - installed 2018-05-31)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)


Internet Plug-ins:

AdobeAAMDetect: 3.0.0.0 (installed 2018-02-19)

FlashPlayer-10.6: 30.0.0.113 (installed 2018-06-08)

QuickTime Plugin: 7.7.3 (installed 2018-03-02)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-02-24)

AdobePDFViewer: 18.011.20038 (installed 2018-02-24)

Flash Player: 30.0.0.113 (installed 2018-06-08)

SharePointBrowserPlugin: 14.0.0 (installed 2010-09-23)

JavaAppletPlugin: Java 8 Update 171 build 11 (installed 2018-05-06)


3rd Party Preference Panes:

Flash Player (installed 2018-06-02)

Java (installed 2018-03-28)


Time Machine:

Skip System Files:

Mobile backups:

Auto backup: Yes

Volumes being backed up:

M***********D: Disk size: 121.12 GB - Disk used: 95.99 GB

Destinations:

V***D [Local] (Last used)

Total size: 0 B

Total number of backups: 2

Oldest backup: 2018-01-07 11:50:07

Last backup: 2018-05-20 08:17:35


Top Processes by CPU:

Process (count)Source% of CPU
osascript (6)31
loginwindowApple15
launchservicesdApple12
WindowServerApple9
System EventsApple4


Top Processes by Memory:

Process (count)SourceRAM usage
com.apple.WebKit.WebContent (2)Apple756 MB
kernel_taskApple740 MB
WhatsApp Helper (2)WhatsApp Inc.346 MB
pboardApple337 MB
mdworker (14)Apple307 MB


Top Processes by Network Use:

ProcessSourceInputOutput
DropboxDropbox, Inc.722 KB371 KB
mDNSResponderApple368 KB152 KB
WhatsAppWhatsApp Inc.226 KB34 KB
SpotifySpotify131 KB104 KB
apsdApple141 KB58 KB


Top Processes by Energy Use:

Process (count)SourceEnergy usage (0-100)
loginwindowApple8
launchservicesdApple7
WindowServerApple4
launchdApple2
System EventsApple2


Virtual Memory Information:

Available RAM1.98 GB
Free RAM22 MB
Used RAM6.02 GB
Cached files1.96 GB
Swap Used7 MB


End of report

Posted on Jun 17, 2018 9:53 AM

Reply
Question marked as Best reply

Posted on Jun 17, 2018 12:54 PM

Download Malwarebytes! This will always get rid of any crap that gets installed. You can also manually delete these files from Macintosh HD/Library/LaunchAgents. You will need to enter your password each time you modify anything in those directories as a precaution. Do not be alarmed! Just be careful that you only delete those files that shouldn't be there. Removing other files could corrupt your High Sierra OS installation.

Similar questions

5 replies
Question marked as Best reply

Jun 17, 2018 12:54 PM in response to annalisafromferentino

Download Malwarebytes! This will always get rid of any crap that gets installed. You can also manually delete these files from Macintosh HD/Library/LaunchAgents. You will need to enter your password each time you modify anything in those directories as a precaution. Do not be alarmed! Just be careful that you only delete those files that shouldn't be there. Removing other files could corrupt your High Sierra OS installation.

Jun 17, 2018 10:04 AM in response to annalisafromferentino

Hi,



"com.bittorrent.uTorrent.plist" < from your report.


Uninstall the BitTorrent.



"safari opens pages mckeeper"


And download and run Malwarebytes > Free Antivirus Replacement & Anti-Malware Tool | Malwarebytes



Remove one user login to test.


Update High Sierra to 10.13.5. (System Preferences > App Store > Check Now)



Following are problematic.


Loaded] com.sexually.plist (? 0 - installed 2018-05-06)
[Loaded] com.prologuizer.plist (? 0 - installed 2018-05-06)
[Loaded] com.pyrheliophor.xb.plist (? 0 - installed 2018-05-06)

etre check

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.