Looking for spyware/keyloggers and am curious if anyone can see any indication of this on my Etrecheck report?

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-07-24 17:17:20

Download EtreCheck from https://etrecheck.com

Runtime: 2:57

Performance: Excellent


Problem: Other problem

Description:

I have concerns that Spyware or a keylooger has been installed on my MacBook Pro


Major Issues:

Anything that appears on this list needs immediate attention.


Time Machine backup out-of-date- The last Time Machine backup is over 10 days old.

More than one antivirus app- This machine has multiple antivirus apps installed.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Low disk space- This machine is running low on free hard drive space.

Unsigned files- There are unsigned software file installed. They appear to be legitimate but should be reviewed.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.


Hardware Information:

MacBook Pro (15-inch, 2017)

MacBook Pro Model: MacBookPro14,3

1 2.8 GHz Intel Core i7 (i7-7700HQ) CPU: 4-core

16 GB RAM - Not upgradeable

BANK 0/DIMM0 - 8 GB LPDDR3 2133 ok

BANK 1/DIMM0 - 8 GB LPDDR3 2133 ok

Battery: Health = Normal - Cycle count = 80


Video Information:

Intel HD Graphics 630 - VRAM: 1536 MB

Color LCD

Radeon Pro 555 - VRAM: 2048 MB


Drives:

disk0 - APPLE SSD SM0256L 251.00 GB (Solid State - TRIM: Yes)

Internal PCI-Express 8.0 GT/s x4 NVM Express

disk0s1 - EFI [EFI] 315 MB

disk0s2 250.69 GB

disk1s1 - Macintosh HD (APFS) 250.69 GB (230.86 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 250.69 GB (23 MB used)

disk1s3 - Recovery (APFS) [Recovery] 250.69 GB (519 MB used)

disk1s4 - VM (APFS) [APFS VM] 250.69 GB (3.22 GB used)


disk2 - Disk Image 35 MB (Disk Image)

External Disk Image

disk2s1 [Partition Map] 32 KB

disk2s2 - M*****n (HFS+) 34 MB


Mounted Volumes:

disk1s1 - Macintosh HD 250.69 GB (15.92 GB free)

APFS

Mount point: /

Encrypted


disk1s4 - VM [APFS VM] 250.69 GB (15.92 GB free)

APFS

Mount point: /private/var/vm


disk2s2 - M*****n 34 MB (13 MB free)

HFS+

Mount point: /Volumes/M*****n


Network:

Interface lpss-serial1: LPSS Serial Adapter (1)

Interface lpss-serial2: LPSS Serial Adapter (2)

Interface en7: USB 10/100/1000 LAN

Interface en9: iPhone

Interface en8: iPad

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en5: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 5.54 GB available


System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 4 days

System Load: 1.98 (1 min ago) 1.59 (5 min ago) 1.47 (15 min ago)


Security:

SystemStatus
GatekeeperMac App Store and identified developers
System Integrity ProtectionEnabled


Unsigned Files:

Launchd: /Library/LaunchDaemons/com.f-secure.orspclient.plist

Executable: /usr/local/f-secure/bin/orspwrapper.sh --daas2-data ./orspclient/etc --http-port 0

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fsmac.fsupdated_guts2.plist

Executable: /usr/local/f-secure/bin/fsupdated_guts2

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fsmac.licensetool.plist

Executable: /usr/local/f-secure/fssp/bin/licensetool --update

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fsavd.plist

Executable: /usr/local/f-secure/bin/fsavdwrapper --nodaemon --logfile=on --oas=incoming --pidfile=/tmp/.com.f-secure.fsav/pidfile

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.urlexceptiond.plist

Executable: /usr/local/f-secure/bin/urlexceptiond.xpc/Contents/MacOS/urlexceptiond

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.divx.agent.postinstall.plist

Executable: /Library/Internet Plug-Ins/DivXBrowserPlugin.plugin/Contents/Resources/extensions-installer install safari DivXHTML5 '/Library/Internet Plug-Ins/DivXBrowserPlugin.plugin/Contents/Resources/DivXHTML5.safariextz'

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fsmac.firewall.plist

Executable: /usr/local/f-secure/bin/fsfwfe /usr/local/f-secure/signal/firewall

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fsavd.dbhelper.plist

Executable: /usr/local/f-secure/fssp/sbin/dbhelper /usr/local/f-secure/fssp/var/reports.noindex /tmp/.com.f-secure.fsav/infections.db

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.hp.help.tocgenerator.plist

Executable: /Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app/Contents/MacOS/TOC Generator

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fsmac.guts2downloader.plist

Executable: /usr/local/f-secure/bin/fsupdated_guts2 --download

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fscsafeadmind.plist

Executable: /usr/local/f-secure/bin/fscsafeadmind.xpc/Contents/MacOS/fscsafeadmind

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.f-secure.fsavd-suppressor.plist

Executable: /usr/local/f-secure/bin/fsavd-suppressor

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.f-secure.relauncher.plist

Executable: /usr/local/f-secure/bin/relaunch

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.f-secure.trasher.plist

Executable: /usr/local/f-secure/bin/trasher

Details: Exact match found in the whitelist - probably OK


32-bit Applications:

47 32-bit apps


Kernel Extensions:

/Library/Extensions

[Loaded] fsauth.kext (F-Secure Corporation, 0.5.0 - SDK 10.9)

[Loaded] MB_MBAM_Protection.kext (Malwarebytes Corporation, 3.3 - SDK 10.13)


/System/Library/Extensions

[Not Loaded] RT73USBWirelessDriver.kext (1.0.5.1)


System Launch Agents:

[Not Loaded]7 Apple tasks
[Loaded]156 Apple tasks
[Running]129 Apple tasks
[Other]2 Apple tasks


System Launch Daemons:

[Not Loaded]39 Apple tasks
[Loaded]157 Apple tasks
[Running]139 Apple tasks


Launch Agents:

[Loaded]com.f-secure.relauncher.plist (? 828eee6e - installed 2016-09-14)
[Loaded]com.f-secure.trasher.plist (? db9f591e - installed 2016-09-14)
[Other]com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Running]com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-05-22)
[Loaded]com.hp.help.tocgenerator.plist (? 11d191c4 - installed 2010-03-12)


Launch Daemons:

[Loaded]com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Other]com.sonos.SonosLibraryServer.plist (Sonos, Inc. - installed 2017-11-02)
[Loaded]com.f-secure.fscsafeadmind.plist (? b265db6a - installed 2016-09-14)
[Running]com.f-secure.orspclient.plist (? 4d2e8df8 - installed 2016-09-14)
[Running]com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-05-22)
[Other]com.f-secure.fsmac.licensetool.plist (? 38629c09 - installed 2016-09-14)
[Loaded]com.f-secure.fsavd.dbhelper.plist (? 4eb45576 - installed 2016-09-14)
[Loaded]com.f-secure.fsmac.fsupdated_guts2.plist (? 9d885777 - installed 2016-09-14)
[Loaded]com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2017-11-17)
[Running]com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-05-22)
[Loaded]com.securemac.MacScanDaemon.plist (? 2f2f5c03 - installed 2018-07-20)
[Loaded]com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-25)
[Loaded]com.f-secure.fsmac.guts2downloader.plist (? bb54cf35 - installed 2016-09-14)
[Loaded]com.macpaw.CleanMyMac3.Agent.plist (? 7f4ba9a8 - installed 2016-10-21)
[Loaded]com.f-secure.fsavd-suppressor.plist (? 8abefaf6 - installed 2016-09-14)
[Loaded]com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-14)
[Other]com.f-secure.fsavd.plist (? 1f81e8aa - installed 2016-09-14)
[Loaded]com.f-secure.fsmac.firewall.plist (? 1bf81563 - installed 2016-09-14)
[Loaded]com.f-secure.urlexceptiond.plist (? 3fab5fbb - installed 2016-09-14)


User Launch Agents:

[Running]com.spotify.webhelper.plist (Spotify - installed 2018-06-05)
[Loaded]com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18)
[Loaded]com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-04-13)
[Running]com.hp.devicemonitor.plist (HP Inc. - installed 2018-07-20)
[Running]com.hp.productresearch.plist (HP Inc. - installed 2018-07-20)
[Loaded]com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-05-05)
[Loaded]com.divx.agent.postinstall.plist (? 0 - installed 2012-05-27)


User Login Items:

Dropbox Application (Dropbox, Inc. - installed 2018-07-13)

(/Applications/Dropbox.app)

HP Product Research SMLoginItem (HP Inc. - installed 2017-10-27)

(/Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app)

com.securemac.MacScanAgent SMLoginItem (? - installed 2017-09-29)

(/Applications/MacScan.app/Contents/Library/LoginItems/com.securemac.MacScanAgen t.app)

HP Device Monitor SMLoginItem (HP Inc. - installed 2017-10-27)

(/Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpe rs/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app)

WunderlistHelper SMLoginItem (Mac App Store - installed 2018-04-10)

(/Applications/Wunderlist.app/Contents/Library/LoginItems/WunderlistHelper.app)


Internet Plug-ins:

OVSHelper: (installed 2017-08-16)

Flip4Mac WMV Plugin: (installed 2017-08-16)

AdobePDFViewerNPAPI: (installed 2018-05-04)

DivXBrowserPlugin: (installed 2017-08-16)

FlashPlayer-10.6: (installed 2018-07-10)

Silverlight: (installed 2017-12-14)

QuickTime Plugin: (installed 2018-07-20)

Flash Player: (installed 2018-07-10)

iPhotoPhotocast: (installed 2017-08-16)

WebClient: (installed 2017-08-16)

AdobePDFViewer: (installed 2018-05-04)

GarminGpsControl: (installed 2017-08-16)


User Internet Plug-ins:

CitrixOnlineWebDeploymentPlugin: (installed 2013-04-26)

WebEx64: (installed 2018-01-24)

Picasa: (installed 2014-01-06)


Audio Plug-ins:

EcammAudioLoader: (installed 2017-08-16)

CallRecorder: (installed 2017-02-02)


Safari Extensions:

Evernote Web Clipper.safariextz - Evernote Corp. - http://evernote.com(installed 2018-01-12)


3rd Party Preference Panes:

DivX (installed 2012-01-17)

Flash Player (installed 2018-06-25)

Flip4Mac WMV (installed 2011-01-13)


Time Machine:

Skip System Files:

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 250.69 GB - Disk used: 234.76 GB

Destinations:

J************p [Local] (Last used)

Total size: 1.00 TB

Total number of backups: 2

Oldest backup: 2017-08-21 13:18:43

Last backup: 2017-08-21 14:12:05


Top Processes by CPU:

Process (count)Source% of CPULocation
sandboxdApple12
WindowServerApple9
launchdApple4
sysmondApple4
kernel_taskApple3


Top Processes by Memory:

Process (count)SourceRAM usageLocation
kernel_taskApple1.50 GB
SafariApple411 MB
MTLCompilerService (29)Apple263 MB
Activity MonitorApple196 MB
SonosSonos, Inc.195 MB


Top Processes by Network Use:

ProcessSourceInputOutputLocation
DropboxDropbox, Inc.53 MB3 MB
mDNSResponderApple11 MB2 MB
SonosSonos, Inc.1 MB7 KB
MailApple716 KB148 KB
athApple130 KB264 KB


Top Processes by Energy Use:

Process (count)SourceEnergy (0-100)Location
HP Device MonitorHP Inc.0
AppleSpellApple0
sysmondApple0
distnoted (3)Apple0
launchservicesdApple0


Virtual Memory Information:

Available RAM7.71 GB
Free RAM3.47 GB
Used RAM8.29 GB
Cached files4.24 GB
Swap Used678 MB


Software Installs (past 30 days):

NameVersionInstall Date
Adobe Flash Player30.0.0.1342018-07-10
iTunes12.82018-07-12
Gatekeeper Configuration Data1482018-07-17


Diagnostics Information (past 7 days):

2018-07-23 20:05:17 Siri.app Crash

/System/Library/CoreServices/Siri.app



End of report

MacBook Pro (15-inch, 2017), iOS 11.4.1

Posted on Jul 24, 2018 9:26 AM

Reply

Similar questions

4 replies

Aug 1, 2018 2:12 PM in response to janelizperry

Uninstall Sophois, f-secure and CleanMyMac as per the developer's instructions. No Anti-Virus software or so-called “cleaning” apps are needed or recommended for Mac OS. They can conflict with Mac's own built-in security. At best they will slow your Mac by using unnecessary resources and at worst will bork your entire system.


Your hard drive is almost full. You need to begin moving larger files off to make space. The OS needs space to operate efficiently.

How to free up storage space on your Mac - Apple Support

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Looking for spyware/keyloggers and am curious if anyone can see any indication of this on my Etrecheck report?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.