Here's the results below. I should note that while I was running it the the desktop icons and preview icons in the tray had not loaded as is my problem, then half way through running it they did so I'm not sure it that will skew the results. Also, the two files it claims are adware don't exist and I run a paid for subscriptions to the latest Bitdefender which has caught many little bits of malware so I find it hard to believe it got past it, that said I'll email a screen shot of the two files to them that it identified to get their take.
Thanks for the help.
EtreCheck version: 4.3.4 (4D037)
Report generated: 2018-07-09 12:07:15
Download EtreCheck from https://etrecheck.com
Runtime: 2:50
Performance: Excellent
Problem: Other problem
Description:
Desktop and file icons not loading after restart along with file preview icons and folder preview icons.
Major Issues:
Anything that appears on this list needs immediate attention.
Adware - Adware detected.
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Clean up - There are orphan files that could be removed. (Deleted these)
Small backup drive - Time Machine backup drive is too small.
Unsigned files - There are unsigned software file installed. They appear to be legitimate but should be reviewed.
32-bit Apps - This machine has 32-bits apps that may have problems in the future.
Hardware Information:
iMac (27-inch, Late 2012)
iMac Model: iMac13,2
1 3.4 GHz Intel Core i7 (i7-3770) CPU: 4-core
32 GB RAM - At maximum
BANK 0/DIMM0 - 8 GB DDR3 1600 ok
BANK 1/DIMM0 - 8 GB DDR3 1600 ok
BANK 0/DIMM1 - 8 GB DDR3 1600 ok
BANK 1/DIMM1 - 8 GB DDR3 1600 ok
Video Information:
NVIDIA GeForce GTX 680MX - VRAM: 2048 MB
iMac 2560 x 1440
Drives:
disk0 - APPLE SSD SM768E 751.28 GB (Solid State - TRIM: Yes)
Internal SATA 6 Gigabit Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 751.07 GB
disk1s1 - Macintosh HD (APFS) 751.07 GB (584.82 GB used)
disk1s2 - Preboot (APFS) [APFS Preboot] 751.07 GB (23 MB used)
disk1s3 - Recovery (APFS) [Recovery] 751.07 GB (518 MB used)
disk1s4 - VM (APFS) [APFS VM] 751.07 GB (2.15 GB used)
disk2 - Western Digital My Book 1144 4.00 TB
External USB 5 Gbit/s
disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk2s2 - B******1 (Journaled HFS+) 1.00 TB
disk2s3 - B******2 (Journaled HFS+) 1.00 TB
disk2s4 - T***************c (Journaled HFS+) 1.00 TB
disk2s5 - G*************e (Journaled HFS+) 999.25 GB
Mounted Volumes:
disk1s1 - Macintosh HD 751.07 GB (163.43 GB free)
APFS
Mount point: /
disk1s4 - VM [APFS VM] 751.07 GB (163.38 GB free)
APFS
Mount point: /private/var/vm
disk2s2 - B******1 1.00 TB (117.45 GB free)
Journaled HFS+
Mount point: /Volumes/B******1
disk2s3 - B******2 1.00 TB (771.34 GB free)
Journaled HFS+
Mount point: /Volumes/B******2
disk2s4 - T***************c 1.00 TB (703.57 GB free)
Journaled HFS+
Mount point: /Volumes/T***************c
disk2s5 - G*************e 999.25 GB (955.40 GB free)
Journaled HFS+
Mount point: /Volumes/G*************e
Network:
Interface en0: Ethernet
Interface en7: iPhone 3
Interface en1: Wi-Fi
802.11 a/b/g/n
One IPv4 address
Interface en5: iPhone
Interface en6: iPhone 2
Interface en2: Bluetooth PAN
Interface bridge0: Thunderbolt Bridge
System Software:
macOS High Sierra 10.13.5 (17F77)
Time since boot: Less than an hour
System Load: 2.65 (1 min ago) 3.94 (5 min ago) 3.68 (15 min ago)
Security:
System | Status |
Gatekeeper | Mac App Store and identified developers |
System Integrity Protection | Enabled |
Adware:
Launchd: ~/Library/LaunchAgents/com.updater.watch.mcy.plist
Reason: Adware name match
Executable: /Users/***/Library/Application Support/updater_mcy/updater_mcy -rm watch -uip m6mcZqLRp6FTkDyL3ff4TwMxNN8sbjAqqvE0uxOJ7Glwf0izsUppNDOLsMiG4f75hQF4bVeWW3JvQ96 P0A3tmbrqJyLs8S4qN3t3loaLLoIJsh8M3rDpaeXY/v+2qY746Rkbm07nlG8qW4Dklla3sGD2As3R0HZ THp710c1JrIY8lJM4ogeczpUeW+kRy2ZPaHyswhjgh0LQ1QkGMM94yT4fm8d3kqo8OtnaC7aKBRui1BF MK5fzq28w9N2I2Fn1+CKSBnNm/oyAjjP6qwAGNBEwHGemU6f208O5JGoVoAYPPI+K9IwVok8729AHGpV dijUgLRCiNqGk2a7pw4uZryF83BYYaRsW2R3jPNWtaJ4uSNENpGj7GhUW8h2fzKOPp4qzl6yqvOdVMQc 2OiQdFzU891Ee8osK4K46w+CgIfWUFZg9DPV5WgyhIWQySrINNUrF2/ePqM0XOLM6GMlBss+rmPBAVnz DKXM9dmr5o7ugK9vb3AQKsotgOYDRzDVPF8q63NhIlRhmU6X8R++cpyxhD3hqw7UYAyG1SM0IUFc+Fx5 R6Ium11GYDxUwQmu74YEBvDlZOD4nlDFNFPED1RqT6amJosE76qd2uyRAyBwYfyYPoHMVTjKOuGxV+9p JHanUuVl7vfEQGpC36AJjtgVtV+Hv7mG5L/7QAAXZucrol5+ikVnui7AgO+zHEbXgtJp+6cTgf6IrLpU 0GVFgOVgmbF0nYTsi9QcqM0B2sA650A+tl+3a2Q8eF/sEipBbS+O+O3sECqVVlEcoXX641N93NnYplP+ 5qyCrzZuToZIuFe2PbqslNMgPg4Ao6wMIVp5rcFouVXiKOnpGZjfFgXHBZgD4XLCdARCQZzqIuld0qM0 btOwCqTVGuAkH7z2654mYpNqU2TLeT4QdczKlj9p1efjVmA3Yh24XkUkXgI4=
Launchd: ~/Library/LaunchAgents/com.updater.mcy.plist
Reason: Adware name match
Executable: /Users/***/Library/Application Support/updater_mcy/updater_mcy -rm check -uip m6mcZqLRp6FTkDyL3ff4TwMxNN8sbjAqqvE0uxOJ7Glwf0izsUppNDOLsMiG4f75hQF4bVeWW3JvQ96 P0A3tmbrqJyLs8S4qN3t3loaLLoIJsh8M3rDpaeXY/v+2qY746Rkbm07nlG8qW4Dklla3sGD2As3R0HZ THp710c1JrIY8lJM4ogeczpUeW+kRy2ZPaHyswhjgh0LQ1QkGMM94yT4fm8d3kqo8OtnaC7aKBRui1BF MK5fzq28w9N2I2Fn1+CKSBnNm/oyAjjP6qwAGNBEwHGemU6f208O5JGoVoAYPPI+K9IwVok8729AHGpV dijUgLRCiNqGk2a7pw4uZryF83BYYaRsW2R3jPNWtaJ4uSNENpGj7GhUW8h2fzKOPp4qzl6yqvOdVMQc 2OiQdFzU891Ee8osK4K46w+CgIfWUFZg9DPV5WgyhIWQySrINNUrF2/ePqM0XOLM6GMlBss+rmPBAVnz DKXM9dmr5o7ugK9vb3AQKsotgOYDRzDVPF8q63NhIlRhmU6X8R++cpyxhD3hqw7UYAyG1SM0IUFc+Fx5 R6Ium11GYDxUwQmu74YEBvDlZOD4nlDFNFPED1RqT6amJosE76qd2uyRAyBwYfyYPoHMVTjKOuGxV+9p JHanUuVl7vfEQGpC36AJjtgVtV+Hv7mG5L/7QAAXZucrol5+ikVnui7AgO+zHEbXgtJp+6cTgf6IrLpU 0GVFgOVgmbF0nYTsi9QcqM0B2sA650A+tl+3a2Q8eF/sEipBbS+O+O3sECqVVlEcoXX641N93NnYplP+ 5qyCrzZuToZIuFe2PbqslNMgPg4Ao6wMIVp5rcFouVXiKOnpGZjfFgXHBZgD4XLCdARCQZzqIuld0qM0 btOwCqTVGuAkH7z2654mYpNqU2TLeT4QdczKlj9p1efjVmA3Yh24XkUkXgI4=
Unsigned Files:
Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.bitdefender.antivirusformac.plist
Executable: /Library/Bitdefender/AVP/AntivirusforMac.app/Contents/MacOS/AntivirusforMac
Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist
Executable: /Users/***/Library/Application Support/Steam/SteamApps/steamclean
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/PT.updd.plist
Executable: /Library/PrivilegedHelperTools/PT.updd
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist
Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveUpdaterDaemon.plist
Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/On eDriveUpdaterDaemon
Details: Exact match found in the whitelist - probably OK
32-bit Applications:
42 32-bit apps
Kernel Extensions:
/Library/Extensions
[Loaded] LittleSnitch.kext (Objective Development Software GmbH, 4.1.1 - SDK 10.11)
[Loaded] LogitechHIDDevices.kext (Logitech Inc., 3.9.5 - SDK 10.8)
[Not Loaded] LogitechUnifying.kext (Logitech Inc., 1.3.5 - SDK 10.8)
[Loaded] FileProtect.kext (Bitdefender SRL, 1.1 - SDK 10.12)
[Loaded] SelfProtect.kext (Bitdefender SRL, 1.2.9 - SDK 10.8)
[Loaded] TMProtection.kext (Bitdefender SRL, 5.0.0 - SDK 10.12)
[Loaded] ufsd_NTFS.kext (Paragon Software GmbH, 15.2.319 - SDK 10.10)
System Launch Agents:
[Not Loaded] | 8 Apple tasks |
[Loaded] | 170 Apple tasks |
[Running] | 114 Apple tasks |
[Other] | One Apple task |
System Launch Daemons:
[Not Loaded] | 37 Apple tasks |
[Loaded] | 181 Apple tasks |
[Running] | 117 Apple tasks |
[Other] | One Apple task |
Launch Agents:
[Loaded] | com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2017-12-26) |
[Running] | at.obdev.LittleSnitchUIAgent.plist (Objective Development Software GmbH - installed 2018-06-27) |
[Running] | at.obdev.LittleSnitchHelper.plist (Objective Development Software GmbH - installed 2018-06-27) |
[Loaded] | com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-05-16) |
[Not Loaded] | com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2017-12-26) |
[Running] | com.Logitech.Control Center.Daemon.plist (? 209c949 - installed 2016-10-04) |
[Loaded] | com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-03) |
[Running] | com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2018-04-20) |
[Other] | com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (? ed2af8df - installed 2017-10-22) |
[Running] | com.bitdefender.antivirusformac.plist (? 17d3b6ae - installed 2018-06-09) |
Launch Daemons:
[Loaded] | com.microsoft.OneDriveUpdaterDaemon.plist (? 0 - installed 2018-05-16) |
[Loaded] | com.adobe.ARMDC.SMJobBlessHelper.plist (? 1574c81e - installed 2017-10-22) |
[Loaded] | com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-05-16) |
[Running] | at.obdev.littlesnitchd.plist (Objective Development Software GmbH - installed 2018-06-27) |
[Loaded] | com.apple.installer.osmessagetracing.plist (Apple - installed 2018-05-29) |
[Running] | com.cleverfiles.cfbackd.plist (Justin Johnson - installed 2018-06-18) |
[Loaded] | com.adobe.SwitchBoard.plist (? 68cad67 - installed 2017-02-10) |
[Loaded] | com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2017-12-26) |
[Running] | PT.updd.plist (? 0 - installed 2018-05-24) |
[Loaded] | com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-01) |
[Loaded] | com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25) |
[Loaded] | com.bitdefender.upgrade.plist (Bitdefender SRL - installed 2018-05-25) |
[Running] | com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2017-11-08) |
[Loaded] | com.macpaw.CleanMyMac3.Agent.plist (MacPaw Inc. - installed 2017-10-16) |
[Loaded] | com.adobe.ARMDC.Communicator.plist (? d94017c4 - installed 2017-10-22) |
[Running] | com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2018-04-20) |
[Loaded] | com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-05) |
[Loaded] | com.paragon-software.ntfs.loader.plist (Apple - installed 2018-05-29) |
[Running] | com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-07-02) |
[Running] | com.bitdefender.agent.plist (Bitdefender SRL - installed 2018-06-14) |
[Loaded] | com.bitdefender.AuthHelperTool.plist (Bitdefender SRL - installed 2018-06-09) |
[Loaded] | com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2015-08-15) |
User Launch Agents:
[Loaded] | com.updater.mcy.plist (Adware - installed 2018-07-04) |
[Running] | com.spotify.webhelper.plist (Spotify - installed 2018-07-08) |
[Other] | com.pia.pia_manager.plist (? 0 - installed 2017-02-10) |
[Loaded] | com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-04-12) |
[Loaded] | com.valvesoftware.steamclean.plist (? 0 - installed 2018-05-31) |
[Loaded] | com.updater.watch.mcy.plist (Adware - installed 2018-07-04) |
[Loaded] | com.macpaw.CleanMyMac3.Scheduler.plist (MacPaw Inc. - installed 2017-10-16) |
[Loaded] | com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2018-02-23) |
[Loaded] | com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2017-12-26) |
User Login Items:
CleanMyMac 3 Menu Application (? - installed 2017-09-25)
(/Applications/CleanMyMac 3.app/Contents/MacOS/CleanMyMac 3 Menu.app)
SmartDaemon Application (Justin Johnson - installed 2018-06-18)
(/Library/Application Support/CleverFiles/SmartDaemon.app)
Dropbox Application (Dropbox, Inc. - installed 2018-07-03)
(/Applications/Dropbox.app)
1Password mini SMLoginItem (Mac App Store - installed 2018-03-20)
(/Applications/1Password.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebit s.onepassword-osx-helper.app)
Micro Snitch Open At Login Helper SMLoginItem (Objective Development Software GmbH - installed 2017-10-16)
(/Applications/Micro Snitch.app/Contents/Library/LoginItems/Micro Snitch Open At Login Helper.app)
com.adobe.SwitchBoard.monitor.plist MachInit (?)
(/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist)
Internet Plug-ins:
AdobeAAMDetect: 3.0.0.0 (installed 2017-12-26)
FlashPlayer-10.6: 30.0.0.113 (installed 2018-06-07)
QuickTime Plugin: 7.7.3 (installed 2018-06-17)
AdobePDFViewerNPAPI: 15.007.20033 (installed 2018-03-20)
AdobePDFViewer: 15.007.20033 (installed 2018-03-20)
Flash Player: 30.0.0.113 (installed 2018-06-07)
SharePointBrowserPlugin: 14.0.0 (installed 2010-08-25)
JavaAppletPlugin: 15.0.1 (installed 2017-02-10)
Safari Extensions:
3rd Party Preference Panes:
Flash Player (installed 2018-06-01)
Logitech Control Center (installed 2017-10-16)
NTFS (installed 2018-04-20)
Time Machine:
Skip System Files: No
Mobile backups:
Auto backup: Yes
Volumes being backed up:
Macintosh HD: Disk size: 751.07 GB - Disk used: 587.64 GB
Destinations:
T***************c [Local] (Last used)
Total size: 1.00 TB
Total number of backups: 60
Oldest backup: 2018-03-11 12:46:06
Last backup: 2018-07-09 12:03:57
Top Processes by CPU:
Process (count) | Source | % of CPU | Location |
kernel_task | Apple | 5 |
|
WindowServer | Apple | 4 |
|
launchd | Apple | 2 |
|
BDCoreIssues | Bitdefender SRL | 1 |
|
backupd | Apple | 1 |
|
Top Processes by Memory:
Process (count) | Source | RAM usage | Location |
kernel_task | Apple | 1.69 GB |
|
BDLDaemon | Bitdefender SRL | 473 MB |
|
mds_stores | Apple | 263 MB |
|
QuickLookSatellite (2) | Apple | 245 MB |
|
com.apple.iTunesLibraryService (3) | Apple | 210 MB |
|
Top Processes by Network Use:
Process | Source | Input | Output | Location |
Dropbox | Dropbox, Inc. | 45 KB | 715 KB |
|
mDNSResponder | Apple | 93 KB | 53 KB |
|
apsd | Apple | 16 KB | 15 KB |
|
bdagentd | Bitdefender SRL | 9 KB | 3 KB |
|
BDCoreIssues | Bitdefender SRL | 6 KB | 2 KB |
|
Top Processes by Energy Use:
Process (count) | Source | Energy (0-100) | Location |
BDCoreIssues | Bitdefender SRL | 28 |
|
trustd (4) | Apple | 20 |
|
WindowServer | Apple | 2 |
|
backupd | Apple | 1 |
|
Little Snitch Agent | Objective Development Software GmbH | 0 |
|
Virtual Memory Information:
Available RAM | 25.96 GB |
Free RAM | 21.48 GB |
Used RAM | 6.04 GB |
Cached files | 4.48 GB |
Swap Used | 0 B |
Software Installs (past 30 days):
Name | Version | Install Date |
Photos Exif Editor | 2.3 | 2018-06-14 |
The Unarchiver | 4.0.0 | 2018-06-17 |
Keynote | 8.0 | 2018-06-17 |
FUSE for macOS | 3.7.1 | 2018-06-18 |
Dr. Unarchiver | 1.3.3 | 2018-06-18 |
MRTConfigData | 1.35 | 2018-06-20 |
Remote Mouse | 2.901 | 2018-06-23 |
product | 0 | 2018-07-02 |
Gatekeeper Configuration Data | 146 | 2018-07-04 |
Diagnostics Information (past 7 days):
2018-07-06 14:27:06 Adobe Desktop Service.app Crash
/Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app
End of report