etre check

Hi, I have one problem with my Mac. safari opens pages mckeeper and this is my etre check report, where is the problem?


EtreCheck version: 4.2.1 (4C020)

Report generated: 2018-06-17 17:50:27

Download EtreCheck from https://etrecheck.com

Runtime: 4:13

Performance: Good


Problem: Other problem


Major Issues:

Anything that appears on this list needs immediate attention.


Time Machine backup out-of-date - The last Time Machine backup is over 10 days old.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Small backup drive - Time Machine backup drive is too small.

Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.


Hardware Information:

MacBook Pro (Retina, 13-inch, Early 2015)

MacBook Pro Model: MacBookPro12,1

1 2,7 GHz Intel Core i5 (i5-5257U) CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1867 ok

BANK 1/DIMM0 - 4 GB DDR3 1867 ok

Battery: Health = Normal - Cycle count = 442


Video Information:

Intel Iris Graphics 6100 - VRAM: 1536 MB

Color LCD 2560 x 1600


Drives:

disk0 - APPLE SSD SM0128G 121.33 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 () 121.12 GB

disk1s1 - M***********D (APFS) 121.12 GB (93.19 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 121.12 GB (66 MB used)

disk1s3 - Recovery (APFS) [Recovery] 121.12 GB (1.54 GB used)

disk1s4 - VM (APFS) [APFS VM] 121.12 GB (1.07 GB used)


Mounted Volumes:

disk1s1 - M***********D 121.12 GB (25.13 GB free)

APFS

Mount point: /


disk1s4 - VM [APFS VM] 121.12 GB (25.13 GB free)

APFS

Mount point: /private/var/vm


Network:

Interface SAMSUNG_MDM: SAMSUNG Modem

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 23.54 GB available


System Software:

macOS High Sierra 10.13.3 (17D47)

Time since boot: About 10 hours

System Load: 3.26 (1 min ago) 3.41 (5 min ago) 3.24 (15 min ago)


Security:

SystemStatus
GatekeeperMac App Store
System Integrity ProtectionEnabled


Unsigned Files:

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.trapped.tm.plist

Executable: /Library/trapped.tm/trapped.tm.app/Contents/MacOS/trapped.tm

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.sexually.plist

Executable: /Users/***/Library/tartlet/hyuYJfkP/sexually

Launchd: ~/Library/LaunchAgents/com.Safe Surf Finder.plist

Executable: /Users/***/Library/Application Support/com.Safe Surf Finder/Safe Surf Finder r

Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist

Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareag ent.bundle/Contents/MacOS/com.skype.skype.shareagent

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.prologuizer.plist

Executable: /Users/***/Library/UpdateMac/prologuizer/prologuizer

Launchd: ~/Library/LaunchAgents/com.pyrheliophor.xb.plist

Executable: /Users/***/Library/pyrheliophor.xb/pyrheliophor.xb.app/Contents/MacOS/pyrheliop hor.xb


32-bit Applications:

44 32-bit apps


Kernel Extensions:

/Applications/Smart Switch/SmartSwitch.app

[Not Loaded] ssudmdmcontrol.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)

[Not Loaded] ssudmdmdata.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)

[Not Loaded] ssuddrv.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)

[Not Loaded] ssudmtp.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.5)

[Not Loaded] ssudserial.kext (DEVGURU Co., Ltd., 1.4.42 - SDK 10.6)


System Launch Agents:

[Not Loaded] 7 Apple tasks
[Loaded] 161 Apple tasks
[Running] 122 Apple tasks


System Launch Daemons:

[Not Loaded] 37 Apple tasks
[Loaded] 172 Apple tasks
[Running] 123 Apple tasks


Launch Agents:

[Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2018-02-19)
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-04-25)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)
[Loaded] com.oracle.java.Java-Updater.plist (? 123dc320 - installed 2018-05-06)
[Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Loaded] com.trapped.tm.plist (? 89b471ab - installed 2018-05-04)


Launch Daemons:

[Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Loaded] com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2018-02-19)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-02)
[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-09-23)
[Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-05-06)
[Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-05-31)
[Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Running] com.adobe.agmservice.plist (Adobe Systems, Inc. - installed 2018-05-31)


User Launch Agents:

[Loaded] com.Safe Surf Finder.plist (? 0 - installed 2018-06-16)
[Running] com.spotify.webhelper.plist (Spotify - installed 2018-06-17)
[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-06-10)
[Loaded] com.sexually.plist (? 0 - installed 2018-05-06)
[Loaded] com.prologuizer.plist (? 0 - installed 2018-05-06)
[Loaded] com.pyrheliophor.xb.plist (? 0 - installed 2018-05-06)
[Running] com.hp.devicemonitor.plist (HP Inc. - installed 2018-06-17)
[Running] com.hp.productresearch.plist (HP Inc. - installed 2018-06-17)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)
[Loaded] com.skype.skype.shareagent.plist (? 0 - installed 2017-11-27)
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2017-09-10)
[Loaded] com.bittorrent.uTorrent.plist (BitTorrent, Inc - installed 2017-03-22)


User Login Items:

Dropbox Applicazione (Dropbox, Inc.

(/Applications/Dropbox.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

Spotify Applicazione (Spotify

(/Applications/Spotify.app)

iTunesHelper Applicazione (Apple - installed 2018-05-31)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)

fuspredownloader Applicazione (?

(/Users/***/Library/Application Support/.FUS/fuspredownloader.app)


Internet Plug-ins:

AdobeAAMDetect: 3.0.0.0 (installed 2018-02-19)

FlashPlayer-10.6: 30.0.0.113 (installed 2018-06-08)

QuickTime Plugin: 7.7.3 (installed 2018-03-02)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-02-24)

AdobePDFViewer: 18.011.20038 (installed 2018-02-24)

Flash Player: 30.0.0.113 (installed 2018-06-08)

SharePointBrowserPlugin: 14.0.0 (installed 2010-09-23)

JavaAppletPlugin: Java 8 Update 171 build 11 (installed 2018-05-06)


3rd Party Preference Panes:

Flash Player (installed 2018-06-02)

Java (installed 2018-03-28)


Time Machine:

Skip System Files:

Mobile backups:

Auto backup: Yes

Volumes being backed up:

M***********D: Disk size: 121.12 GB - Disk used: 95.99 GB

Destinations:

V***D [Local] (Last used)

Total size: 0 B

Total number of backups: 2

Oldest backup: 2018-01-07 11:50:07

Last backup: 2018-05-20 08:17:35


Top Processes by CPU:

Process (count)Source% of CPU
osascript (6)31
loginwindowApple15
launchservicesdApple12
WindowServerApple9
System EventsApple4


Top Processes by Memory:

Process (count)SourceRAM usage
com.apple.WebKit.WebContent (2)Apple756 MB
kernel_taskApple740 MB
WhatsApp Helper (2)WhatsApp Inc.346 MB
pboardApple337 MB
mdworker (14)Apple307 MB


Top Processes by Network Use:

ProcessSourceInputOutput
DropboxDropbox, Inc.722 KB371 KB
mDNSResponderApple368 KB152 KB
WhatsAppWhatsApp Inc.226 KB34 KB
SpotifySpotify131 KB104 KB
apsdApple141 KB58 KB


Top Processes by Energy Use:

Process (count)SourceEnergy usage (0-100)
loginwindowApple8
launchservicesdApple7
WindowServerApple4
launchdApple2
System EventsApple2


Virtual Memory Information:

Available RAM1.98 GB
Free RAM22 MB
Used RAM6.02 GB
Cached files1.96 GB
Swap Used7 MB


End of report

Posted on Jun 17, 2018 9:53 AM

Reply
Question marked as Top-ranking reply

Posted on Jun 17, 2018 12:54 PM

Download Malwarebytes! This will always get rid of any crap that gets installed. You can also manually delete these files from Macintosh HD/Library/LaunchAgents. You will need to enter your password each time you modify anything in those directories as a precaution. Do not be alarmed! Just be careful that you only delete those files that shouldn't be there. Removing other files could corrupt your High Sierra OS installation.

Similar questions

5 replies
Question marked as Top-ranking reply

Jun 17, 2018 12:54 PM in response to annalisafromferentino

Download Malwarebytes! This will always get rid of any crap that gets installed. You can also manually delete these files from Macintosh HD/Library/LaunchAgents. You will need to enter your password each time you modify anything in those directories as a precaution. Do not be alarmed! Just be careful that you only delete those files that shouldn't be there. Removing other files could corrupt your High Sierra OS installation.

Jun 17, 2018 10:04 AM in response to annalisafromferentino

Hi,



"com.bittorrent.uTorrent.plist" < from your report.


Uninstall the BitTorrent.



"safari opens pages mckeeper"


And download and run Malwarebytes > Free Antivirus Replacement & Anti-Malware Tool | Malwarebytes



Remove one user login to test.


Update High Sierra to 10.13.5. (System Preferences > App Store > Check Now)



Following are problematic.


Loaded] com.sexually.plist (? 0 - installed 2018-05-06)
[Loaded] com.prologuizer.plist (? 0 - installed 2018-05-06)
[Loaded] com.pyrheliophor.xb.plist (? 0 - installed 2018-05-06)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

etre check

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.