"apple wants to make changes" prompt

OT:

I hit your link for How to Uninstall CleanMyMac 2? Complete Removal of Mac Apps. I get the CleanMyMac website! Nowhere any instruction to uninstall, only to buy software. These people should be strung up.

Hi there - I've been having this same problem! Here were my notes from the recommended etrecheck.... Any help would be greatly appreciated!!

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-09-20 16:17:48

Download EtreCheck from https://etrecheck.com

Runtime: 4:01

Performance: Good

Problem: Other problem

Description:

Apple needs to make a change - prompt window requesting password information. Pops up 3 times in a row…. Then may or may not crash safari in the process…

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup- Time Machine backup not found.

Unsigned files- There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Apps with heavy CPU usage- There have been numerous cases of apps with heavy CPU usage.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown- Your machine shut down abnormally.

Hardware Information:

Mac mini (Late 2014)

Mac mini Model: Macmini7,1

1 2.6 GHz Intel Core i5 (i5-4278U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Video Information:

Intel Iris - VRAM: 1536 MB

HP 27es 1920 x 1080 @ 60 Hz

Drives:

disk0 - APPLE HDD HTS541010A9E662 1.00 TB (Mechanical)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 999.35 GB

disk1 - Macintosh HD (Journaled HFS+) 998.98 GB

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB

Mounted Volumes:

disk1 - Macintosh HD 998.98 GB (858.64 GB free)

Journaled HFS+

Mount point: /

Network:

Interface en0: Ethernet

Interface en6: iPad

Interface en5: iPhone

One IPv4 address

Interface en1: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS High Sierra 10.13.5 (17F77)

Time since boot: About 5 hours

System Load: 1.58 (1 min ago) 1.80 (5 min ago) 1.79 (15 min ago)

Security:

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.NetLookupSearch.plist

Executable: ~/Library/Application Support/com.NetLookupSearch/NetLookupSearch r

Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist

Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGIN server

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

10 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

Dropbox Application (Dropbox, Inc. - installed 2018-09-11)

(/Applications/Dropbox.app)

iTunesHelper Application (Apple - installed 2018-06-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-09-20)

(/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)

Internet Plug-ins:

AdobePDFViewerNPAPI: (installed 2018-09-20)

FlashPlayer-10.6: (installed 2018-04-18)

AdobePDFViewer: (installed 2018-09-20)

QuickTime Plugin: (installed 2018-07-03)

Flash Player: (installed 2018-04-18)

AdobeAAMDetect: (installed 2018-07-09)

User Internet Plug-ins:

WebEx64: (installed 2018-04-06)

ZoomUsPlugIn: (installed 2018-04-18)

3rd Party Preference Panes:

Flash Player (installed 2018-02-23)

Time Machine:

Time Machine Not Configured!

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-09-20 10:30:48 Last Shutdown Cause: 3 - Hard shutdown

2018-09-20 08:06:10 com.apple.WebKit.WebContent CPU (7 times)

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

End of report

Hi,

I have been having the same problem. I ran the Etrecheck and have posted my report here. Any help would be greatly appreciated! Thanks.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-09-20 19:54:31

Download EtreCheck from https://etrecheck.com

Runtime: 3:09

Performance: Good

Problem: Other problem

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup - Time Machine backup not found.

Unsigned files - There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Heavy RAM usage - This machine is using a large amount of RAM.

Corrupt filesystem - This machine shut down due to a corrupt filesystem.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.

Hardware Information:

MacBook Pro (13-inch, 2017, Four Thunderbolt 3 ports)

MacBook Pro Model: MacBookPro14,2

1 3.1 GHz Intel Core i5 (i5-7267U) CPU: 2-core

16 GB RAM - Not upgradeable

BANK 0/DIMM0 - 8 GB LPDDR3 2133 ok

BANK 1/DIMM0 - 8 GB LPDDR3 2133 ok

Battery: Health = Normal - Cycle count = 137

Video Information:

Intel Iris Plus Graphics 650 - VRAM: 1536 MB

Color LCD

Drives:

disk0 - APPLE SSD AP1024J 1.00 TB (Solid State - TRIM: Yes)

Internal PCI-Express 8.0 GT/s x4 NVM Express

disk0s1 - EFI [EFI] 315 MB

disk0s2 1.00 TB

disk1s1 - Macintosh HD (APFS) 1.00 TB (108.89 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 1.00 TB (22 MB used)

disk1s3 - Recovery (APFS) [Recovery] 1.00 TB (519 MB used)

disk1s4 - VM (APFS) [APFS VM] 1.00 TB (8.59 GB used)

disk3 - Disk Image 205 MB (Disk Image)

External Disk Image

disk3s1 [Partition Map] 32 KB

disk3s2 - D*************************n (HFS+) 205 MB

Mounted Volumes:

disk1s1 - Macintosh HD 1.00 TB (882.01 GB free)

APFS

Mount point: /

disk1s4 - VM [APFS VM] 1.00 TB (882.01 GB free)

APFS

Mount point: /private/var/vm

Network:

Interface en7: iPhone

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

3 IPv6 addresses

Interface en6: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 66 days

System Load: 1.46 (1 min ago) 1.47 (5 min ago) 1.42 (15 min ago)

Security:

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.SearchQuest.plist

Executable: ~/Library/Application Support/com.SearchQuest/SearchQuest r

32-bit Applications:

24 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Daemons:

User Launch Agents:

User Login Items:

DISHAnywherePlayer_Launcher Application (? - installed 2018-07-29)

(/Applications/DISHAnywherePlayer_Launcher.app)

iTunesHelper Application (Apple - installed 2018-07-11)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

StartUpHelper SMLoginItem (Spotify - installed 2018-08-15)

(/Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app)

Internet Plug-ins:

OfficeLiveBrowserPlugin: (installed 2009-08-17)

FlashPlayer-10.6: (installed 2018-06-19)

QuickTime Plugin: (installed 2018-07-17)

Flash Player: (installed 2018-06-19)

User Internet Plug-ins:

ZoomUsPlugIn: (installed 2018-01-16)

DISH Anywhere Player: (installed 2018-07-29)

3rd Party Preference Panes:

Flash Player (installed 2018-06-01)

Time Machine:

Time Machine Not Configured!

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-09-17 21:55:13 Microsoft PowerPoint.app Hang

/Applications/Microsoft Office 2008/Microsoft PowerPoint.app

2018-09-17 19:23:18 com.apple.WebKit.WebContent CPU (3 times)

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

2018-07-16 23:40:57 Last Shutdown Cause: -60 - Corrupt filesystem

End of report

Hello Old Toad,

I am having the same problem as everyone else here. Here is my etrecheck report. Any help would be great, thank you!

EtreCheck version: 5.0 (5008)

Report generated: 2018-09-25 11:12:21

Download EtreCheck from https://etrecheck.com

Runtime: 2:49

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled

Problem: Apps are crashing

Description:

My safari keeps quitting unexpectedly and then I get a pop up window saying Apple would like to make changes and wants me to input my password. My user name is already there.

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup - Time Machine backup not found.

Adware - Adware detected.

Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Corrupt filesystem - This machine shut down due to a corrupt filesystem.

Clean up - There are orphan files that could be removed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.

Hardware Information:

MacBook Air (13-inch, 2017)

MacBook Air Model: MacBookAir7,2

1 1.8 GHz Intel Core i5 (i5-5350U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 78

Video Information:

Intel HD Graphics 6000 - VRAM: 1536 MB

Color LCD 1440 x 900

Drives:

disk0 - APPLE SSD SM0128G 121.33 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 121.12 GB

disk1 [APFS Virtual drive] 121.12 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 51.66 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 3.22 GB used)

Mounted Volumes:

disk1s1 - Macintosh HD 121.12 GB (65.57 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM] (Shared - 3.22 GB used)

APFS

Mount point: /private/var/vm

Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

Interface en3: iPhone

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS High Sierra 10.13.2 (17C88)

Time since boot: About 7 days

Configuration Profiles:

Information not available

Security:

Adware:

Launchd: /Library/LaunchAgents/com.MyMacUpdater.agent.plist

Reason: Adware name match

Executable: /Applications/MyMacUpdater/MyMacUpdater -guid 16008265029221919 -source picpm-1814 -url http://request.macmymacupdater.com/macCheckForUpdates/ -brand MyMacUpdater -current_version 1000

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MUpdate.plist

Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.citrixonline.GoToMeeting.G2MUpdate.plist

Executable: ~/Library/Application Support/CitrixOnline/GoToMeeting/G2MUpdate

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.NetLookupSearch.plist

Executable: ~/Library/Application Support/com.NetLookupSearch/NetLookupSearch r

Details: Domain name invalid - possibly adware

32-bit Applications:

One 32-bit app

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

iTunesHelper (Apple - installed 2017-12-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunes Helper)

Internet Plug-ins:

googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-11)

FlashPlayer-10.6: 31.0.0.108 (installed 2018-09-11)

QuickTime Plugin: 7.7.3 (installed 2017-12-01)

Flash Player: 31.0.0.108 (installed 2018-09-11)

o1dbrowserplugin: 5.41.3.0 (installed 2018-04-09)

3rd Party Preference Panes:

Flash Player (installed 2018-08-27)

Time Machine:

Time Machine Not Configured!

Performance:

System Load: 1.27 (1 min ago) 1.39 (5 min ago) 1.64 (15 min ago)

Nominal I/O speed: 0.10 MB/s

File system: 75.22 seconds

Write speed: 691 MB/s

Read speed: 1181 MB/s

CPU Usage:

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Virtual Memory Information:

Software Installs (past 30 days):

Clean up:

/Library/LaunchAgents/com.MyShopcoupon.agent.plist

/Applications/MyShopcoupon/MyShopcoupon

Executable not found

Diagnostics Information (past 7 days):

2018-09-18 13:40:39 Last Shutdown Cause: -60 - Corrupt filesystem

End of report

I have this same problem. Prompt keeps coming up "Apple wants to make changes". Here is my Etrecheck report. Can someone help me? Thank you!

EtreCheck version: 5.0 (5008)

Report generated: 2018-09-27 08:18:26

Download EtreCheck from https://etrecheck.com

Runtime: 2:03

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled

Problem: Other problem

Description:

Reoccurring prompt that reads Apple wants to make changes, user name is filled in, and password is blank. By selecting cancel, it pops up again 2-3 times. It started a few days ago, primarily when I am in Safari. However, today it pops up every time I open an application or finder.

Major Issues:

Anything that appears on this list needs immediate attention.

Unsigned files- There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Corrupt filesystem- This machine shut down due to a corrupt filesystem.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown- Your machine shut down abnormally.

Hardware Information:

MacBook Pro (Retina, 13-inch, Late 2013)

MacBook Pro Model: MacBookPro11,1

1 2.6 GHz Intel Core i5 (i5-4288U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 253

Video Information:

Intel Iris - VRAM: 1536 MB

Color LCD 2560 x 1600

Drives:

disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 500.07 GB

disk1 [APFS Virtual drive] 500.07 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 432.91 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used)

Mounted Volumes:

disk1s1 - Macintosh HD 500.07 GB (64.29 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM] (Shared - 2.15 GB used)

APFS

Mount point: /private/var/vm

Network:

Interface Bluetooth-Modem: Bluetooth DUN

Interface en4: iPhone

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

System Software:

macOS Mojave 10.14 (18A391)

Time since boot: About 2 hours

Configuration Profiles:

Information not available

Security:

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.TechResultsSearch.plist

Executable: ~/Library/Application Support/com.TechResultsSearch/TechResultsSearch r

Details: Restrictive app permissions - possibly adware

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

27 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Daemons:

User Launch Agents:

User Login Items:

Dropbox (Dropbox, Inc. - installed 2018-09-26)

(/Applications/Dropbox.app/Contents/MacOS/Dropbox)

EvernoteHelper (? - installed 2014-12-16)

(/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app/Conte nts/MacOS/EvernoteHelper)

iTunesHelper (Apple - installed 2018-09-21)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesH elper)

Internet Plug-ins:

FlashPlayer-10.6: 30.0.0.134 (installed 2018-07-16)

QuickTime Plugin: 7.7.3 (installed 2018-09-21)

Flash Player: 30.0.0.134 (installed 2018-07-16)

SharePointBrowserPlugin: 14.3.9 (installed 2014-03-25)

3rd Party Preference Panes:

Flash Player (installed 2018-06-25)

Time Machine:

Time Machine information not available

Performance:

System Load: 2.20 (1 min ago) 3.03 (5 min ago) 4.00 (15 min ago)

Nominal I/O speed: 3.00 MB/s

File system: 32.31 seconds

Write speed: 656 MB/s

Read speed: 770 MB/s

CPU Usage:

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-09-27 06:14:30 Last Shutdown Cause: -60 - Corrupt filesystem

End of report

Thanks for your helpful information in this thread. I was having this problem and EtreCheck showed several adware occurrences (all looked similar). I used Malwarebytes to remove, but now Malware bytes shows a clean scan, and EtreCheck still shows one occurrence. How do I remove this? This is what Etrecheck shows:

Adware:

Launchd: /Library/LaunchDaemons/com.SearchLettersDaemon.plist

Reason: Adware pattern match

Executable: /Library/Application Support/com.SearchLettersDaemon/SearchLetters r

You can check to see if you've removed all of the files by downloading and running Find Any File to search for any files with the application's name in the file name. For SearchLettersDaemon you'd do the following search:

1 - Name contains SearchLettersDaemon

Any files that are found can be dragged from the search results window to the Desktop for deletion.

FAF can search areas that Spotlight can't like invisible folders, system folders and packages.

Hello,

Can you, please, also help me??? I have the same issue and am not a computer savvy. I know I am running low on hard drive space. I ran the EthreCheck and I am about to restart after running Malwarebytes. But, here is the report from EthreCheck. Thanks so much!

So I originally began scanning this page because Safari would shut down without warning and an "Apple would like to make changes" box would appear prompting me for my password. People began posting their etrecheck reports to identify any adware that may be causing the problem so I ran etrecheck and I not only have some adware that I need help removing, but I have some hard drive and battery issues I need help with as well. Below is my report... do I need to replace the battery and hard drive or just get a new computer all together?? Help! Real amateur here!

EtreCheck version: 5.0.2 (5A012)

Report generated: 2018-10-02 14:50:44

Download EtreCheck from https://etrecheck.com

Runtime: 7:42

Performance: Poor

Problem: No problem - just checking

Major Issues:

Anything that appears on this list needs immediate attention.

Time Machine backup out-of-date- The last Time Machine backup is over 10 days old.

Battery failure- Your battery is reporting that it needs to be serviced.

Failing hard drive- This machine has an older, mechanical hard disk that appears to be failing.

Adware- Adware detected.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Low disk space- This machine is running low on free hard drive space.

Upgradeable hard drive- This machine’s hard drive could be replaced with an SSD. This would dramatically improve your machine’s performance.

Killed launchd tasks- This machine is running short on RAM and has a mechanical hard drive, reducing the speed of the virtual memory system.

Small backup drive- Time Machine backup drive is too small.

High battery cycle count- Your battery may be losing capacity.

Unsigned files- There are unsigned software files installed. They appear to be legitimate but should be reviewed.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Hardware Information:

MacBook Pro (13-inch, Mid 2012)

MacBook Pro Model: MacBookPro9,2

1 2.9 GHz Intel Core i7 (i7-3520M) CPU: 2-core

8 GB RAM - At maximum

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Service Battery - Cycle count = 932

Video Information:

Intel HD Graphics 4000 - VRAM: 1536 MB

Color LCD 1280 x 800

Drives:

disk0 - APPLE HDD HTS541075A9E662 750.16 GB (Mechanical - 5400 RPM)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 749.30 GB

disk1 - Macintosh HD (Journaled HFS+) 748.93 GB (733.41 GB used)

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB

Mounted Volumes:

disk1 - Macintosh HD 748.93 GB (15.26 GB free)

Journaled HFS+

Mount point: /

Network:

Interface usbmodem3ea23a12: SGH-T989D

Interface Bluetooth-Modem: Bluetooth DUN

Interface en0: Ethernet

Interface en4: iPhone

Interface fw0: FireWire

Interface en1: Wi-Fi

802.11 a/b/g/n

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 133.23 GB available

System Software:

macOS Sierra 10.12.6 (16G1314)

Time since boot: About 5 days

Security:

Adware:

Launchd: ~/Library/LaunchAgents/com.unionsoftwareonline.AppMonitor.plist

Reason: Adware name match

Executable: ~/Library/Application Support/AppCommon/AppMonitor --protect

Launchd: ~/Library/LaunchAgents/com.appbox.AppBox.plist

Reason: Adware pattern match

Executable: ~/Library/Application Support/AppPolicy/AppBox -i -c 748931 -isn D8F00421-B8E4-498F-9467-BBED9D05665E

Launchd: /Library/LaunchDaemons/com.perion.searchprotectd.plist

Reason: Adware name match

Executable: /Applications/SearchProtect/SearchProtect.app/Contents/MacOS/SearchProtect -execv_instance

Launchd: ~/Library/LaunchAgents/com.BasicSearchPlatform.plist

Reason: Adware pattern match

Executable: ~/Library/Application Support/com.BasicSearchPlatform/BasicSearchPlatform r

Unsigned Files:

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Update r.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.pia.pia_manager.plist

Executable: /Applications/Private Internet Access.app/Contents/MacOS/startup.sh

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist

Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareag ent.bundle/Contents/MacOS/com.skype.skype.shareagent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.nchsoftware.switch.schedule.LikeSurvey.plist

Executable: /Applications/Switch.app/Contents/MacOS/Switch -surveysched

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool .plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

18 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

iTunesHelper (Apple - installed 2018-04-03)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Skype (Skype Communications S.a.r.l - installed 2018-09-17)

(/Applications/Skype.app)

Spotify (Spotify - installed 2016-11-15)

(/Applications/Spotify.app)

Spotify (Spotify - installed 2016-11-15)

(/Applications/Spotify.app/Contents/MacOS/Spotify)

iTunesHelper (Apple - installed 2018-04-03)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesH elper)

Internet Plug-ins:

Silverlight: 5.1.50901.0 (installed 2017-03-01)

FlashPlayer-10.6: 31.0.0.108 (installed 2018-09-11)

Flash Player: 31.0.0.108 (installed 2018-09-11)

QuickTime Plugin: 7.7.3 (installed 2018-05-21)

JavaAppletPlugin: Java 8 Update 171 build 11 (installed 2018-04-29)

AdobeAAMDetect: 3.0.0.0 (installed 2016-10-26)

User Internet Plug-ins:

TroviNPAPIPlugin: 1.0 (installed 2014-09-23)

Safari Extensions:

3rd Party Preference Panes:

Flash Player (installed 2018-08-27)

Java (installed 2018-04-29)

Time Machine:

Skip System Files:

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 748.93 GB - Disk used: 733.67 GB

Destinations:

T*********T [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 24

Oldest backup: 2016-01-23 19:01:41

Last backup: 2018-02-01 22:16:20

Performance:

System Load: 1.94 (1 min ago) 2.05 (5 min ago) 2.26 (15 min ago)

Nominal I/O speed: 0.16 MB/s

File system: 36.33 seconds

Write speed: 23 MB/s

Read speed: 19 MB/s

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

End of report

I've had this same issue as well! I've run Etrecheck and my report is below. Would someone kindly help me with what I should do?

EtreCheck version: 5.0.3 (5A014)

Report generated: 2018-10-05 09:31:00

Download EtreCheck from https://etrecheck.com

Runtime: 3:40

Performance: Good

Problem: Other problem

Description:

When using Safari, I randomly receive a pop-up prompt that says Apple wants to make changes. Enter your password to allow this. It has a box for User Name, which displays my first and last name, and a box for me to enter my password. There is an OK button and a Cancel button. If I push the Cancel button enough times, the box goes away.

Major Issues:

Anything that appears on this list needs immediate attention.

No Time Machine backup- Time Machine backup not found.

Adware- Adware detected.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Apps with heavy CPU usage- There have been numerous cases of apps with heavy CPU usage.

Unsigned files- There are unsigned software files installed. They appear to be legitimate but should be reviewed.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Hardware Information:

MacBook (Retina, 12-inch, Early 2015)

MacBook Model: MacBook8,1

1 1.1 GHz Intel Core M (M-5Y31) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 231

Video Information:

Intel HD Graphics 5300 - VRAM: 1536 MB

Color LCD 2560 x 1600

Drives:

disk0 - APPLE SSD AP0256H 251.00 GB (Solid State - TRIM: Yes)

Internal PCI-Express 5.0 GT/s x4 NVM Express

disk0s1 - EFI [EFI] 315 MB

disk0s2 [APFS Container] 250.69 GB

disk1 [APFS Virtual drive] 250.69 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 116.71 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 40 MB used)

disk1s3 - Recovery (APFS) [Recovery] (Shared - 519 MB used)

disk1s4 - VM (APFS) [APFS VM] (Shared - 3.22 GB used)

Mounted Volumes:

disk1s1 - Macintosh HD 250.69 GB (130.06 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM] (Shared - 3.22 GB used)

APFS

Mount point: /private/var/vm

Network:

Interface Bluetooth-Modem: Bluetooth DUN

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

Interface en1: Bluetooth PAN

System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 11 days

Security:

Adware:

Launchd: ~/Library/LaunchAgents/com.ExploreSearchResults.plist

Reason: Adware pattern match

Executable: ~/Library/Application Support/com.ExploreSearchResults/ExploreSearchResults r

Unsigned Files:

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Update r.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool .plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Safari Extension: Search Pref

32-bit Applications:

44 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

Dropbox.app (Dropbox, Inc. - installed 2018-09-26)

(/Applications/Dropbox.app)

iTunesHelper.app (Apple - installed 2018-07-10)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Garmin Express Service.app (? - installed 2015-09-19)

(/Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app)

Backup and Sync.app (Google, Inc. - installed 2018-05-30)

(/Applications/Backup and Sync.app)

Backup and Sync (Google, Inc. - installed 2018-05-30)

(/Applications/Backup and Sync.app/Contents/MacOS/Backup and Sync)

iTunesHelper (Apple - installed 2018-07-10)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesH elper)

Garmin Express Service (? - installed 2015-09-19)

(/Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app/Contents/MacOS/Garmin Express Service)

Internet Plug-ins:

AdobeAAMDetect: 3.0.0.0 (installed 2017-03-27)

FlashPlayer-10.6: 31.0.0.108 (installed 2018-09-11)

QuickTime Plugin: 7.7.3 (installed 2018-08-01)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-09-20)

AdobePDFViewer: 18.011.20063 (installed 2018-09-20)

Flash Player: 31.0.0.108 (installed 2018-09-11)

SharePointBrowserPlugin: 14.7.3 (installed 2017-04-15)

JavaAppletPlugin: Java 8 Update 60 build 27 (installed 2015-10-05)

User Internet Plug-ins:

WebEx64: 1.1.0 (installed 2017-12-02)

Safari Extensions:

3rd Party Preference Panes:

Flash Player (installed 2018-08-27)

Java (installed 2015-10-05)

Time Machine:

Time Machine Not Configured!

Performance:

System Load: 1.56 (1 min ago) 3.05 (5 min ago) 3.62 (15 min ago)

Nominal I/O speed: 0.23 MB/s

File system: 45.94 seconds

Write speed: 161 MB/s

Read speed: 599 MB/s

CPU Usage:

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-10-04 18:15:14 WindowServer CPU (2 times)

/System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/Window Server

2018-10-03 10:30:19 com.apple.WebKit.Networking CPU (2 times)

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking

2018-10-01 09:29:28 com.apple.WebKit.WebContent CPU (5 times)

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

End of report

What are the access permissions on your home folder?

Many thanks. I have moved many files onto an external hard drive now, and removed the suggested adware.

Thank you so much for your help! It looks like it worked! If it didn't I'll be back!

Thanks again,

Krista

Thanks for the quick response!

When I hold down Command + R key it is just refreshing the page or nothing happens. Is there another way to access that Disk Utility?