Here is the etrecheck report. I don't see any malware installations in the recent past, but the report goes only for the past 30 days.
EtreCheck version: 4.3.6 (4D041)
Report generated: 2018-08-26 09:34:20
Download EtreCheck from https://etrecheck.com
Runtime: 5:40
Performance: Below Average
Problem:Beachballing
Description:
MacBook Pro running very slow
Major Issues:
Anything that appears on this list needs immediate attention.
No Time Machine backup - Time Machine backup not found.
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Heavy RAM usage - This machine is using a large amount of RAM.
Apps crashing - There have been numerous app crashes.
Clean up - There are orphan files that could be removed.
Unsigned files - There are unsigned software file installed. They appear to be legitimate but should be reviewed.
Low performance - EtreCheck report took over 5 minutes to run. This is unusual.
32-bit Apps - This machine has 32-bits apps that may have problems in the future.
Abnormal shutdown - Your machine shut down abnormally.
Hardware Information:
MacBook Pro (Retina, 15-inch, Mid 2015)
MacBook Pro Model: MacBookPro11,4
1 2.2 GHz Intel Core i7 (i7-4770HQ) CPU: 4-core
16 GB RAM - Not upgradeable
BANK 0/DIMM0 - 8 GB DDR3 1600 ok
BANK 1/DIMM0 - 8 GB DDR3 1600 ok
Battery: Health = Normal - Cycle count = 418
Video Information:
Intel Iris Pro - VRAM: 1536 MB
Color LCD
Drives:
disk0 - APPLE SSD SM0256G 251.00 GB (Solid State - TRIM: Yes)
Internal PCI 8.0 GT/s x4 Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 250.79 GB
disk1s1 - Macintosh HD (APFS) 250.79 GB (180.94 GB used)
disk1s2 - Preboot (APFS) [APFS Preboot] 250.79 GB (21 MB used)
disk1s3 - Recovery (APFS) [Recovery] 250.79 GB (519 MB used)
disk1s4 - VM (APFS) [APFS VM] 250.79 GB (2.15 GB used)
Mounted Volumes:
disk1s1 - Macintosh HD 250.79 GB (67.02 GB free)
APFS
Mount point: /
disk1s4 - VM [APFS VM] 250.79 GB (67.02 GB free)
APFS
Mount point: /private/var/vm
Network:
Interface en0: Wi-Fi
802.11 a/b/g/n/ac
One IPv4 address
2 IPv6 addresses
Interface en4: iPhone
Interface en3: Bluetooth PAN
Interface bridge0: Thunderbolt Bridge
iCloud Quota: 92.62 GB available
System Software:
macOS High Sierra 10.13.6 (17G65)
Time since boot: About 2 days
System Load: 2.68 (1 min ago) 2.82 (5 min ago) 3.14 (15 min ago)
Security:
System | Status |
Gatekeeper | Mac App Store and identified developers |
System Integrity Protection | Enabled |
Unsigned Files:
Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist
Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.adobe.fpsaud.plist
Executable: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud
Details: Exact match found in the whitelist - probably OK
32-bit Applications:
14 32-bit apps
Kernel Extensions:
/Library/Application Support/VirtualBox
[Loaded] VBoxDrv.kext (Oracle America, Inc., 5.1.14)
[Loaded] VBoxNetAdp.kext (Oracle America, Inc., 5.1.14)
[Loaded] VBoxNetFlt.kext (Oracle America, Inc., 5.1.14)
[Loaded] VBoxUSB.kext (Oracle America, Inc., 5.1.14)
/Library/Extensions
[Loaded] G13Joystick.kext (Logitech Inc., 2.0 - SDK 10.8)
[Not Loaded] LogiGamingMouseFilter.kext (Logitech Inc., 1.0 - SDK 10.8)
System Launch Agents:
[Not Loaded] | 8 Apple tasks |
[Loaded] | 169 Apple tasks |
[Running] | 115 Apple tasks |
[Other] | 2 Apple tasks |
System Launch Daemons:
[Not Loaded] | 36 Apple tasks |
[Loaded] | 173 Apple tasks |
[Running] | 126 Apple tasks |
[Other] | One Apple task |
Launch Agents:
[Running] | com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2018-07-09) |
[Other] | com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-17) |
[Loaded] | com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-29) |
Launch Daemons:
[Loaded] | com.microsoft.autoupdate.helper.plist (? c2a01ca - installed 2016-11-25) |
[Not Loaded] | org.virtualbox.startup.plist (? 700b9385 - installed 2017-02-21) |
[Loaded] | com.adobe.fpsaud.plist (? 2afb3af7 - installed 2016-12-10) |
[Loaded] | com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-05-29) |
[Running] | com.adobe.agmservice.plist (Adobe Systems, Inc. - installed 2018-05-29) |
[Loaded] | com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-17) |
[Loaded] | com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2016-08-17) |
[Running] | com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2018-07-09) |
User Launch Agents:
[Other] | com.lastpass.LastPassHelper.plist (? 0 - installed 2016-07-22) |
[Loaded] | com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-29) |
[Loaded] | com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2017-10-29) |
User Login Items:
iTunesHelper Application (Apple - installed 2018-07-10)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Google Chrome Application (Google, Inc. - installed 2018-08-07)
(/Applications/Google Chrome.app)
Backup and Sync Application (Google, Inc. - installed 2018-05-30)
(/Applications/Backup and Sync.app)
WunderlistHelper SMLoginItem (Mac App Store - installed 2018-04-06)
(/Applications/Wunderlist.app/Contents/Library/LoginItems/WunderlistHelper.app)
Internet Plug-ins:
FlashPlayer-10.6: (installed 2016-12-30)
QuickTime Plugin: (installed 2018-07-24)
nplastpass: (installed 2016-07-22)
Flash Player: (installed 2016-12-30)
AdobeAAMDetect: (installed 2018-07-09)
JavaAppletPlugin: (installed 2016-12-19)
User Internet Plug-ins:
WebEx64: (installed 2016-07-15)
Safari Extensions:
3rd Party Preference Panes:
Flash Player (installed 2016-12-10)
Time Machine:
Time Machine Not Configured!
Top Processes by CPU:
Process (count) | Source | % of CPU | Location |
WindowServer | Apple | 10 |
Google Chrome Helper (42) | Google, Inc. | 8 |
mdworker (6) | Apple | 7 |
diagnosticd | Apple | 6 |
Console | Apple | 6 |
Top Processes by Memory:
Process (count) | Source | RAM usage | Location |
Google Chrome Helper (42) | Google, Inc. | 4.47 GB |
kernel_task | Apple | 1.30 GB |
Google Chrome (3) | Google, Inc. | 626 MB |
Adobe CEF Helper (8) | Adobe Systems, Inc. | 447 MB |
Adobe Desktop Service (3) | Adobe Systems, Inc. | 354 MB |
Top Processes by Network Use:
Process | Source | Input | Output | Location |
mDNSResponder | Apple | 1 MB | 316 KB |
netbiosd | Apple | 21 KB | 14 KB |
apsd | Apple | 5 KB | 8 KB |
SystemUIServer | Apple | 0 B | 560 B |
SystemUIServer | Apple | 0 B | 348 B |
Top Processes by Energy Use:
Process (count) | Source | Energy (0-100) | Location |
diagnosticd | Apple | 16 |
syncdefaultsd (2) | ? | 13 |
Console | Apple | 9 |
Google Chrome Helper (42) | Google, Inc. | 8 |
secd (3) | Apple | 4 |
Virtual Memory Information:
Available RAM | 3.27 GB |
Free RAM | 116 MB |
Used RAM | 12.73 GB |
Cached files | 3.16 GB |
Swap Used | 196 MB |
Software Installs (past 30 days):
Name | Version | Install Date |
OneDrive | 18.131.0701 | 2018-08-17 |
Gatekeeper Configuration Data | 152 | 2018-08-21 |
Clean up:
~/Library/LaunchAgents/com.lastpass.LastPassHelper.plist
~/Library/Application Support/LastPass/LastPassHelper.app/Contents/MacOS/LastPassHelper
Executable not found
Diagnostics Information (past 7 days):
2018-08-23 18:48:46 Last Shutdown Cause: 3 - Hard shutdown
2018-08-23 18:34:55 cloudd Crash (2 times)
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
*** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Path /Users/*/Library/Caches/*/MMCS deleted/renamed, crashing.' terminating with uncaught exception of type NSException abort() called |
2018-08-23 13:50:22 SecurityAgent Crash (2 times)
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAg ent.bundle/Contents/MacOS/SecurityAgent
*** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[_NSImageAuxiliary setResult:]: unrecognized selector sent to instance 0x7ff654edddc0' terminating with uncaught exception of type NSException abort() called |
2018-08-20 21:52:10 Backup and Sync.app Crash
/Applications/Backup and Sync.app
objc_msgSend() selector name: updatePath:withStatus: |
2018-08-19 10:21:30 webfilterproxyd Crash (2 times)
/System/Library/PrivateFrameworks/WebContentAnalysis.framework/Versions/A/Resour ces/webfilterproxyd
*** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[__NSCFString containsURLString:]: unrecognized selector sent to instance 0x7f95f352fa40' terminating with uncaught exception of type NSException abort() called |
End of report