Reply to thread

Message

<blockquote data-quote="Juliasand" data-source="post: 850296" data-attributes="member: 84783">I&#039;ve had different vague signs of remote monitoring. Can you have a look at the EtreCheck and see if something is up?FYI: I suddenly had TWO different Onedrive applications, so I deleted them both. But Onedrive is still showing up in the EtreCheck report as the only unsigned file not found on the white list.EtreCheck version: 5.4.8 (5091)Report generated: 2019-12-23 22:24:44Download EtreCheck from <a href="https://etrecheck.com" target="_blank">EtreCheck</a>Runtime: 2:32Performance: ExcellentSandbox: EnabledFull drive access: DisabledProblem: Other problemMajor Issues:&nbsp; &nbsp; Anything that appears on this list needs immediate attention.&nbsp; &nbsp; No Time Machine backup - Time Machine backup not found.&nbsp; &nbsp; Runaway process - A process is using a large percentage of your CPU.&nbsp; &nbsp; Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.&nbsp; &nbsp; System Integrity Protection disabled - System Integrity Protection is disabled. This computer is at risk of malware infection.&nbsp; &nbsp; Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection.&nbsp; &nbsp; More than one antivirus app - This machine has multiple antivirus apps installed.Minor Issues:&nbsp; &nbsp; These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.&nbsp; &nbsp; System modifications - There are a large number of system modifications running in the background.&nbsp; &nbsp; 32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 “Catalina”.&nbsp; &nbsp; Limited drive access - More information may be available with Full Drive Access.Hardware Information:&nbsp; &nbsp; MacBook Pro (13-inch, 2018-2019, Four Thunderbolt 3 ports)&nbsp; &nbsp; MacBook Pro Model: MacBookPro15,2&nbsp; &nbsp; 1 2,3 GHz Quad-Core Intel Core i5 (i5-8259U) CPU: 4-core&nbsp; &nbsp; 8 GB RAM - Not upgradeable&nbsp; &nbsp; &nbsp; &nbsp; BANK 0/ChannelA-DIMM0 - 4 GB LPDDR3 2133 &nbsp; &nbsp; &nbsp; &nbsp; BANK 2/ChannelB-DIMM0 - 4 GB LPDDR3 2133 &nbsp; &nbsp; Battery: Health = Normal - Cycle count = 187Video Information:&nbsp; &nbsp; Intel Iris Plus Graphics 655 - VRAM: 1536 MB&nbsp; &nbsp; &nbsp; &nbsp; Color LCD (built-in) 2880 x 1800Drives:&nbsp; &nbsp; disk0 - APPLE SSD AP0256M 251.00 GB (Solid State - TRIM: Yes)&nbsp; &nbsp; Internal PCI-Express 8.0 GT/s x4 NVM Express&nbsp; &nbsp; &nbsp; &nbsp; disk0s1 - EFI [EFI] 315 MB&nbsp; &nbsp; &nbsp; &nbsp; disk0s2 [APFS Container] 250.69 GB&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; disk1 [APFS Virtual drive] 250.69 GB (Shared by 5 volumes)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; disk1s1 - M*****************a (APFS) [APFS Virtual drive] (Shared - 99.03 GB used)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; disk1s3 - Recovery (APFS) [Recovery] (Shared)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; disk1s4 - VM (APFS) [APFS VM] (Shared - 5.37 GB used)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; disk1s5 - Macintosh HD (APFS) (Shared - 10.71 GB used)Mounted Volumes:&nbsp; &nbsp; disk1s1 - M*****************a [APFS Virtual drive]&nbsp; &nbsp; &nbsp; &nbsp; 250.69 GB (Shared - 99.03 GB used, 144.40 GB available, 134.29 GB free)&nbsp; &nbsp; &nbsp; &nbsp; APFS&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /System/Volumes/Data&nbsp; &nbsp; &nbsp; &nbsp; Encrypted&nbsp; &nbsp; disk1s4 - VM [APFS VM]&nbsp; &nbsp; &nbsp; &nbsp; 250.69 GB (Shared - 5.37 GB used, 134.29 GB free)&nbsp; &nbsp; &nbsp; &nbsp; APFS&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /private/var/vm&nbsp; &nbsp; &nbsp; &nbsp; Encrypted&nbsp; &nbsp; disk1s5 - Macintosh HD&nbsp; &nbsp; &nbsp; &nbsp; 250.69 GB (Shared - 10.71 GB used, 144.40 GB available, 134.29 GB free)&nbsp; &nbsp; &nbsp; &nbsp; APFS&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /&nbsp; &nbsp; &nbsp; &nbsp; Encrypted&nbsp; &nbsp; &nbsp; &nbsp; Read-only: Yes&nbsp; &nbsp; disk2s1 - S************1&nbsp; &nbsp; &nbsp; &nbsp; 409 MB (405 MB used, 3 MB free)&nbsp; &nbsp; &nbsp; &nbsp; Mac OS Extended&nbsp; &nbsp; &nbsp; &nbsp; Disk Image&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /Volumes/S************1&nbsp; &nbsp; &nbsp; &nbsp; Owners enabled: No&nbsp; &nbsp; &nbsp; &nbsp; Read-only: Yes&nbsp; &nbsp; disk3s1 - A***********s&nbsp; &nbsp; &nbsp; &nbsp; 25 MB (21 MB used, 4 MB free)&nbsp; &nbsp; &nbsp; &nbsp; Mac OS Extended&nbsp; &nbsp; &nbsp; &nbsp; Disk Image&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /Volumes/A***********s&nbsp; &nbsp; &nbsp; &nbsp; Owners enabled: No&nbsp; &nbsp; &nbsp; &nbsp; Read-only: Yes&nbsp; &nbsp; disk4s2 - Flash Player&nbsp; &nbsp; &nbsp; &nbsp; 24 MB (24 MB used)&nbsp; &nbsp; &nbsp; &nbsp; Mac OS Extended&nbsp; &nbsp; &nbsp; &nbsp; Disk Image&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /Volumes/Flash Player&nbsp; &nbsp; &nbsp; &nbsp; Owners enabled: No&nbsp; &nbsp; &nbsp; &nbsp; Read-only: Yes&nbsp; &nbsp; disk5s2 - M*****n&nbsp; &nbsp; &nbsp; &nbsp; 34 MB (21 MB used, 13 MB free)&nbsp; &nbsp; &nbsp; &nbsp; Mac OS Extended&nbsp; &nbsp; &nbsp; &nbsp; Disk Image&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /Volumes/M*****n&nbsp; &nbsp; &nbsp; &nbsp; Owners enabled: No&nbsp; &nbsp; &nbsp; &nbsp; Read-only: Yes&nbsp; &nbsp; disk6s2 - M*********b&nbsp; &nbsp; &nbsp; &nbsp; 100 MB (100 MB used)&nbsp; &nbsp; &nbsp; &nbsp; Mac OS Extended&nbsp; &nbsp; &nbsp; &nbsp; Disk Image&nbsp; &nbsp; &nbsp; &nbsp; Mount point: /Volumes/M*********b&nbsp; &nbsp; &nbsp; &nbsp; Owners enabled: No&nbsp; &nbsp; &nbsp; &nbsp; Read-only: YesNetwork:&nbsp; &nbsp; Interface en7: USB-C Dock Ethernet&nbsp; &nbsp; Interface en8: ThinkPad TBT3 LAN&nbsp; &nbsp; Interface en11: USB 10/100/1000 LAN&nbsp; &nbsp; Interface en0: Wi-Fi&nbsp; &nbsp; &nbsp; &nbsp; 802.11 a/b/g/n/ac&nbsp; &nbsp; Interface en10: iPhone&nbsp; &nbsp; Interface en6: Bluetooth PAN&nbsp; &nbsp; Interface bridge0: Thunderbolt Bridge&nbsp; &nbsp; Interface en9: Apple USB Ethernet Adapter&nbsp; &nbsp; Interface en12: iPhone 2System Software:&nbsp; &nbsp; macOS Catalina 10.15.1 (19B88)&nbsp; &nbsp; Time since boot: About 20 daysNotifications:&nbsp; &nbsp; Notifications not available without Full Drive Access.Security:&nbsp; &nbsp; Gatekeeper: Enabled&nbsp; &nbsp; System Integrity Protection: Disabled&nbsp; &nbsp; Antivirus software: AVG, SecureMac,&nbsp; and MalwarebytesUnsigned Files:&nbsp; &nbsp; Launchd: /Library/LaunchDaemons/com.avg.uninstall.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Library/Application Support/AVGAntivirus/autouninstall/autouninstall.sh&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: ~/Library/LaunchAgents/com.google.keystone.xpcservice.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveStandaloneUpdaterDaemon.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon&nbsp; &nbsp; Launchd: /Library/LaunchDaemons/com.avg.update.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Applications/AVGAntivirus.app/Contents/Backend/scripts/update/update.sh&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: /Library/LaunchDaemons/com.avg.hub.schedule.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Library/Application Support/AVGHUB/com.avg.hub.app/Contents/scripts/schedule.sh --ttl 14400&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: /Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: /Library/LaunchAgents/com.avg.userinit.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Applications/AVGAntivirus.app/Contents/Backend/hub/userinit.sh&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveUpdaterDaemon.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: /Library/Application Support/AVGHUB/com.avg.hub.app/Contents/scripts/com.avg.hub.schedule.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Library/Application Support/AVGHUB/com.avg.hub.app/Contents/scripts/schedule.sh --ttl 14400&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Launchd: /Library/LaunchDaemons/com.avg.init.plist&nbsp; &nbsp; &nbsp; &nbsp; Executable: /Applications/AVGAntivirus.app/Contents/Backend/hub/init.sh&nbsp; &nbsp; &nbsp; &nbsp; Details: Exact match found in the whitelist - probably OK&nbsp; &nbsp; Login Item: /Applications/MacScan.app/Contents/Library/LoginItems/com.securemac.MacScanAgent.app32-bit Applications:&nbsp; &nbsp; 5 32-bit appsKernel Extensions:&nbsp; &nbsp; /Applications/AVGAntivirus.app&nbsp; &nbsp; &nbsp; &nbsp; AVGFileShield.kext (AVG Technologies CZ, s.r.o., 4.0.0 - SDK 10.12)&nbsp; &nbsp; &nbsp; &nbsp; AVGPacketForwarder.kext (AVG Technologies CZ, s.r.o., 2.1 - SDK 10.12)&nbsp; &nbsp; /Library/Extensions&nbsp; &nbsp; &nbsp; &nbsp; Dropbox.kext (Dropbox, Inc., 1.10.3 - SDK 10.14)System Launch Agents:&nbsp; &nbsp; [Not Loaded] 18 Apple tasks&nbsp; &nbsp; [Loaded] 147 Apple tasks&nbsp; &nbsp; [Running] 144 Apple tasks&nbsp; &nbsp; [Other] One Apple taskSystem Launch Daemons:&nbsp; &nbsp; [Not Loaded] 36 Apple tasks&nbsp; &nbsp; [Loaded] 165 Apple tasks&nbsp; &nbsp; [Running] 134 Apple tasks&nbsp; &nbsp; [Other] One Apple taskLaunch Agents:&nbsp; &nbsp; &nbsp; &nbsp; [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2019-08-22)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2019-09-30)&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-10-25)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-10-25)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.avg.hub.plist (AVG Technologies CZ, s.r.o. - installed 2019-12-20)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.avg.userinit.plist (? 3ed33f6f&nbsp; - installed 2019-12-20)&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2019-11-18)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (? b97e8726&nbsp; - installed 2019-07-23)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-11-14)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2019-07-25)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2019-07-25)&nbsp; Launch Daemons:&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2019-08-22)&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2019-08-22)&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2019-09-30)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-10-25)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2019-11-22)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.avg.hub.schedule.plist (? a81c8beb&nbsp; - installed 2019-12-20)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.avg.hub.xpc.plist (AVG Technologies CZ, s.r.o. - installed 2019-12-20)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.avg.init.plist (? b7d61217&nbsp; - installed 2019-12-20)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.avg.uninstall.plist (? 70fb3cd&nbsp; - installed 2019-12-20)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.avg.update.plist (? 3d634b49&nbsp; - installed 2019-12-20)&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2019-12-19)&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2019-11-18)&nbsp; &nbsp; &nbsp; &nbsp; [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (? 1a4f628&nbsp; - installed 2019-07-25)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (? a510a00&nbsp; - installed 2019-07-23)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-11-14)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2019-07-15)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (? 0&nbsp; - installed 2019-11-08)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.securemac.MacScanDaemon.plist (? 2f2f5c03&nbsp; - installed 2019-12-23)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2019-07-03)&nbsp; &nbsp; &nbsp; &nbsp; [Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2019-07-25)&nbsp; User Launch Agents:&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-07-26)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.adobe.ccxprocess.plist (Apple - installed 2019-08-21)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-10-14)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.google.keystone.agent.plist (? 0&nbsp; - installed 2019-12-04)&nbsp; &nbsp; &nbsp; &nbsp; [Loaded] com.google.keystone.xpcservice.plist (? 0&nbsp; - installed 2019-12-04)&nbsp; User Login Items:&nbsp; &nbsp; [Not Loaded] Any.do Login Helper (App Store - installed 2019-10-28)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Applications/Any.do.app/Contents/Library/LoginItems/Any.do Login Helper.app&nbsp; &nbsp; [Not Loaded] Day One Helper (App Store - installed 2019-12-03)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Applications/Day One.app/Contents/Library/LoginItems/Day One Helper.app&nbsp; &nbsp; [Not Loaded] LoginHelper (App Store - installed 2019-10-16)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Applications/Go for Instagram.app/Contents/Library/LoginItems/LoginHelper.app&nbsp; &nbsp; [Running] com.securemac.MacScanAgent (? - installed 2016-01-13)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Applications/MacScan.app/Contents/Library/LoginItems/com.securemac.MacScanAgent.app&nbsp; &nbsp; [Not Loaded] LaunchHelper (App Store - installed 2019-10-15)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Applications/Mail for Gmail.app/Contents/Library/LoginItems/LaunchHelper.app&nbsp; &nbsp; [Loaded] StartUpHelper (Spotify - installed 2019-11-28)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app&nbsp; &nbsp; [Running] WunderlistHelper (App Store - installed 2019-11-01)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Applications/Wunderlist.app/Contents/Library/LoginItems/WunderlistHelper.app&nbsp; &nbsp; [Not Loaded] HP Device Monitor (HP Inc. - installed 2019-04-30)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app&nbsp; &nbsp; [Not Loaded] HP Product Research (HP Inc. - installed 2019-04-30)&nbsp; &nbsp; &nbsp; &nbsp; Modern Login Item&nbsp; &nbsp; &nbsp; &nbsp; /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.appInternet Plug-ins:&nbsp; &nbsp; AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-12-19)&nbsp; &nbsp; AdobePDFViewer: 19.021.20061 (Adobe Systems, Inc. - installed 2019-12-19)&nbsp; &nbsp; PepperFlashPlayer: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-21)&nbsp; &nbsp; AdobeAAMDetect: 3.0.0.0 (Adobe Systems, Inc. - installed 2019-09-30)3rd Party Preference Panes:&nbsp; &nbsp; Flash Player (installed 2019-11-22)Time Machine:&nbsp; &nbsp; Time Machine Not Configured!Performance:&nbsp; &nbsp; System Load: 9.89 (1 min ago) 4.81 (5 min ago) 3.82 (15 min ago)&nbsp; &nbsp; Nominal I/O speed: 1.16 MB/s&nbsp; &nbsp; File system: 26.43 seconds&nbsp; &nbsp; Write speed:&nbsp; 1077 MB/s&nbsp; &nbsp; Read speed:&nbsp; 2922 MB/sCPU Usage Snapshot:&nbsp; &nbsp; Type Overall&nbsp; &nbsp; System 11 %&nbsp; &nbsp; User 21 %&nbsp; &nbsp; Idle 68 %Top Processes Snapshot by CPU:&nbsp; &nbsp; Process (count) CPU (Source - Location)&nbsp; &nbsp; Other processes 149.21 % (?)&nbsp; &nbsp; Console 38.54 % (Apple)&nbsp; &nbsp; Google Chrome 18.56 % (Google, Inc.)&nbsp; &nbsp; Google Chrome Helper (GPU).app 17.86 % (Google, Inc.)&nbsp; &nbsp; Activity Monitor 7.17 % (Apple)Top Processes Snapshot by Memory:&nbsp; &nbsp; Process (count) RAM usage (Source - Location)&nbsp; &nbsp; EtreCheck 534 MB (App Store)&nbsp; &nbsp; Console 284 MB (Apple)&nbsp; &nbsp; Google Chrome 275 MB (Google, Inc.)&nbsp; &nbsp; Activity Monitor 175 MB (Apple)&nbsp; &nbsp; Google Chrome Helper (GPU).app 137 MB (Google, Inc.)Top Processes Snapshot by Network Use:&nbsp; &nbsp; Process Input / Output (Source - Location)&nbsp; &nbsp; Other processes 161 MB / 20 MB (?)&nbsp; &nbsp; rapportd 10 KB / 17 KB (Apple)&nbsp; &nbsp; SystemUIServer 0 B / 7 KB (Apple)&nbsp; &nbsp; PowerChime 634 B / 2 KB (Apple)&nbsp; &nbsp; homed 0 B / 0 B (Apple)Virtual Memory Information:&nbsp; &nbsp; Physical RAM: 8 GB&nbsp; &nbsp; Free RAM: 20 MB&nbsp; &nbsp; Used RAM: 6.63 GB&nbsp; &nbsp; Cached files: 1.35 GB&nbsp; &nbsp; Available RAM: 1.37 GB&nbsp; &nbsp; Swap Used: 2.75 GBSoftware Installs (past 30 days):&nbsp; &nbsp; Install Date Name (Version)&nbsp; &nbsp; 2019-12-03 Day One (4.3.1)&nbsp; &nbsp; 2019-12-08 OneDrive (19.192.0926)&nbsp; &nbsp; 2019-12-11 Microsoft Excel&nbsp; &nbsp; 2019-12-11 Microsoft OneNote&nbsp; &nbsp; 2019-12-11 Microsoft Outlook&nbsp; &nbsp; 2019-12-12 Adobe Acrobat DC (19.021.20058)&nbsp; &nbsp; 2019-12-13 XProtectPlistConfigData (2110)&nbsp; &nbsp; 2019-12-13 MRTConfigData (1.51)&nbsp; &nbsp; 2019-12-15 Microsoft Word&nbsp; &nbsp; 2019-12-15 Microsoft PowerPoint&nbsp; &nbsp; 2019-12-19 Adobe Acrobat DC (19.021.20061)&nbsp; &nbsp; 2019-12-19 Malwarebytes for Mac&nbsp; &nbsp; 2019-12-20 AVG AntiVirus (19.4)&nbsp; &nbsp; 2019-12-20 AVGHUB&nbsp; &nbsp; 2019-12-20 Bitdefender Virus Scanner (3.15)&nbsp; &nbsp; 2019-12-21 Adobe Pepper Flash Player&nbsp; &nbsp; 2019-12-23 EtreCheck (5.4.8)Diagnostics Information (past 7-30 days):&nbsp; &nbsp; Directory /Library/Logs/DiagnosticReports is not accessible.&nbsp; &nbsp; Enable Full Drive Access to see more information.End of report</blockquote>

[QUOTE="Juliasand, post: 850296, member: 84783"] I've had different vague signs of remote monitoring. Can you have a look at the EtreCheck and see if something is up? FYI: I suddenly had TWO different Onedrive applications, so I deleted them both. But Onedrive is still showing up in the EtreCheck report as the only unsigned file not found on the white list. [B]EtreCheck version: 5.4.8 (5091) Report generated: 2019-12-23 22:24:44 Download EtreCheck from [URL="https://etrecheck.com"]EtreCheck[/URL] Runtime: 2:32 Performance: Excellent Sandbox: Enabled Full drive access: Disabled Problem: [/B]Other problem [B]Major Issues:[/B] Anything that appears on this list needs immediate attention. [B]No Time Machine backup[/B] - Time Machine backup not found. [B]Runaway process[/B] - A process is using a large percentage of your CPU. [B]Unsigned files[/B] - There are unsigned software files installed that could be adware and should be reviewed. [B]System Integrity Protection disabled[/B] - System Integrity Protection is disabled. This computer is at risk of malware infection. [B]Apple security disabled[/B] - Apple security software is disabled. This computer is at risk of malware infection. [B]More than one antivirus app[/B] - This machine has multiple antivirus apps installed. [B]Minor Issues:[/B] These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. [B]System modifications[/B] - There are a large number of system modifications running in the background. [B]32-bit Apps[/B] - This machine has 32-bits apps will not work on macOS 10.15 “Catalina”. [B]Limited drive access[/B] - More information may be available with Full Drive Access. [B]Hardware Information:[/B] MacBook Pro (13-inch, 2018-2019, Four Thunderbolt 3 ports) MacBook Pro Model: MacBookPro15,2 1 2,3 GHz Quad-Core Intel Core i5 (i5-8259U) CPU: 4-core 8 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 4 GB LPDDR3 2133 BANK 2/ChannelB-DIMM0 - 4 GB LPDDR3 2133 Battery: Health = Normal - Cycle count = 187 [B]Video Information:[/B] Intel Iris Plus Graphics 655 - VRAM: 1536 MB Color LCD (built-in) 2880 x 1800 [B]Drives:[/B] disk0 - APPLE SSD AP0256M 251.00 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 250.69 GB disk1 [APFS Virtual drive] 250.69 GB (Shared by 5 volumes) disk1s1 - M*****************a (APFS) [APFS Virtual drive] (Shared - 99.03 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared) disk1s3 - Recovery (APFS) [Recovery] (Shared) disk1s4 - VM (APFS) [APFS VM] (Shared - 5.37 GB used) disk1s5 - Macintosh HD (APFS) (Shared - 10.71 GB used) [B]Mounted Volumes:[/B] disk1s1 - M*****************a [APFS Virtual drive] 250.69 GB (Shared - 99.03 GB used, 144.40 GB available, 134.29 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s4 - VM [APFS VM] 250.69 GB (Shared - 5.37 GB used, 134.29 GB free) APFS Mount point: /private/var/vm Encrypted disk1s5 - Macintosh HD 250.69 GB (Shared - 10.71 GB used, 144.40 GB available, 134.29 GB free) APFS Mount point: / Encrypted Read-only: Yes disk2s1 - S************1 409 MB (405 MB used, 3 MB free) Mac OS Extended Disk Image Mount point: /Volumes/S************1 Owners enabled: No Read-only: Yes disk3s1 - A***********s 25 MB (21 MB used, 4 MB free) Mac OS Extended Disk Image Mount point: /Volumes/A***********s Owners enabled: No Read-only: Yes disk4s2 - Flash Player 24 MB (24 MB used) Mac OS Extended Disk Image Mount point: /Volumes/Flash Player Owners enabled: No Read-only: Yes disk5s2 - M*****n 34 MB (21 MB used, 13 MB free) Mac OS Extended Disk Image Mount point: /Volumes/M*****n Owners enabled: No Read-only: Yes disk6s2 - M*********b 100 MB (100 MB used) Mac OS Extended Disk Image Mount point: /Volumes/M*********b Owners enabled: No Read-only: Yes [B]Network:[/B] Interface en7: USB-C Dock Ethernet Interface en8: ThinkPad TBT3 LAN Interface en11: USB 10/100/1000 LAN Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en10: iPhone Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge Interface en9: Apple USB Ethernet Adapter Interface en12: iPhone 2 [B]System Software:[/B] macOS Catalina 10.15.1 (19B88) Time since boot: About 20 days [B]Notifications:[/B] [B]Notifications not available without Full Drive Access. Security:[/B] Gatekeeper: Enabled System Integrity Protection: Disabled Antivirus software: AVG, SecureMac, and Malwarebytes [B]Unsigned Files:[/B] Launchd: /Library/LaunchDaemons/com.avg.uninstall.plist Executable: /Library/Application Support/AVGAntivirus/autouninstall/autouninstall.sh Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.google.keystone.xpcservice.plist Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost Details: Exact match found in the whitelist - probably OK Launchd: [B]/Library/LaunchDaemons/com.microsoft.OneDriveStandaloneUpdaterDaemon.plist[/B] Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon Launchd: /Library/LaunchDaemons/com.avg.update.plist Executable: /Applications/AVGAntivirus.app/Contents/Backend/scripts/update/update.sh Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.avg.hub.schedule.plist Executable: /Library/Application Support/AVGHUB/com.avg.hub.app/Contents/scripts/schedule.sh --ttl 14400 Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.avg.userinit.plist Executable: /Applications/AVGAntivirus.app/Contents/Backend/hub/userinit.sh Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveUpdaterDaemon.plist Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon Details: Exact match found in the whitelist - probably OK Launchd: /Library/Application Support/AVGHUB/com.avg.hub.app/Contents/scripts/com.avg.hub.schedule.plist Executable: /Library/Application Support/AVGHUB/com.avg.hub.app/Contents/scripts/schedule.sh --ttl 14400 Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.avg.init.plist Executable: /Applications/AVGAntivirus.app/Contents/Backend/hub/init.sh Details: Exact match found in the whitelist - probably OK Login Item: /Applications/MacScan.app/Contents/Library/LoginItems/com.securemac.MacScanAgent.app [B]32-bit Applications:[/B] 5 32-bit apps [B]Kernel Extensions:[/B] /Applications/AVGAntivirus.app AVGFileShield.kext (AVG Technologies CZ, s.r.o., 4.0.0 - SDK 10.12) AVGPacketForwarder.kext (AVG Technologies CZ, s.r.o., 2.1 - SDK 10.12) /Library/Extensions Dropbox.kext (Dropbox, Inc., 1.10.3 - SDK 10.14) [B]System Launch Agents:[/B] [Not Loaded] 18 Apple tasks [Loaded] 147 Apple tasks [Running] 144 Apple tasks [Other] One Apple task [B]System Launch Daemons:[/B] [Not Loaded] 36 Apple tasks [Loaded] 165 Apple tasks [Running] 134 Apple tasks [Other] One Apple task [B]Launch Agents:[/B] [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2019-08-22) [Loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2019-09-30) [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-10-25) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-10-25) [Not Loaded] com.avg.hub.plist (AVG Technologies CZ, s.r.o. - installed 2019-12-20) [Loaded] com.avg.userinit.plist (? 3ed33f6f - installed 2019-12-20) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2019-11-18) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (? b97e8726 - installed 2019-07-23) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-11-14) [Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2019-07-25) [Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2019-07-25) [B]Launch Daemons:[/B] [Running] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2019-08-22) [Running] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2019-08-22) [Running] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2019-09-30) [Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-10-25) [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2019-11-22) [Not Loaded] com.avg.hub.schedule.plist (? a81c8beb - installed 2019-12-20) [Not Loaded] com.avg.hub.xpc.plist (AVG Technologies CZ, s.r.o. - installed 2019-12-20) [Loaded] com.avg.init.plist (? b7d61217 - installed 2019-12-20) [Loaded] com.avg.uninstall.plist (? 70fb3cd - installed 2019-12-20) [Loaded] com.avg.update.plist (? 3d634b49 - installed 2019-12-20) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2019-12-19) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2019-11-18) [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (? 1a4f628 - installed 2019-07-25) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (? a510a00 - installed 2019-07-23) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-11-14) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2019-07-15) [Not Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (? 0 - installed 2019-11-08) [Loaded] com.securemac.MacScanDaemon.plist (? 2f2f5c03 - installed 2019-12-23) [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2019-07-03) [Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2019-07-25) [B]User Launch Agents:[/B] [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-07-26) [Loaded] com.adobe.ccxprocess.plist (Apple - installed 2019-08-21) [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-10-14) [Loaded] com.google.keystone.agent.plist (? 0 - installed 2019-12-04) [Loaded] com.google.keystone.xpcservice.plist (? 0 - installed 2019-12-04) [B]User Login Items:[/B] [Not Loaded] Any.do Login Helper (App Store - installed 2019-10-28) Modern Login Item /Applications/Any.do.app/Contents/Library/LoginItems/Any.do Login Helper.app [Not Loaded] Day One Helper (App Store - installed 2019-12-03) Modern Login Item /Applications/Day One.app/Contents/Library/LoginItems/Day One Helper.app [Not Loaded] LoginHelper (App Store - installed 2019-10-16) Modern Login Item /Applications/Go for Instagram.app/Contents/Library/LoginItems/LoginHelper.app [Running] com.securemac.MacScanAgent (? - installed 2016-01-13) Modern Login Item /Applications/MacScan.app/Contents/Library/LoginItems/com.securemac.MacScanAgent.app [Not Loaded] LaunchHelper (App Store - installed 2019-10-15) Modern Login Item /Applications/Mail for Gmail.app/Contents/Library/LoginItems/LaunchHelper.app [Loaded] StartUpHelper (Spotify - installed 2019-11-28) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Running] WunderlistHelper (App Store - installed 2019-11-01) Modern Login Item /Applications/Wunderlist.app/Contents/Library/LoginItems/WunderlistHelper.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2019-04-30) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Not Loaded] HP Product Research (HP Inc. - installed 2019-04-30) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app [B]Internet Plug-ins:[/B] AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-12-19) AdobePDFViewer: 19.021.20061 (Adobe Systems, Inc. - installed 2019-12-19) PepperFlashPlayer: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-21) AdobeAAMDetect: 3.0.0.0 (Adobe Systems, Inc. - installed 2019-09-30) [B]3rd Party Preference Panes:[/B] Flash Player (installed 2019-11-22) [B]Time Machine:[/B] [B]Time Machine Not Configured! Performance:[/B] System Load: 9.89 (1 min ago) 4.81 (5 min ago) 3.82 (15 min ago) Nominal I/O speed: 1.16 MB/s File system: 26.43 seconds Write speed: 1077 MB/s Read speed: 2922 MB/s [B]CPU Usage Snapshot:[/B] [B]Type[/B] [B]Overall[/B] System 11 % User 21 % Idle 68 % [B]Top Processes Snapshot by CPU:[/B] [B]Process (count)[/B] [B]CPU[/B] ([B]Source[/B] - [B]Location[/B]) Other processes 149.21 % (?) Console 38.54 % (Apple) Google Chrome 18.56 % (Google, Inc.) Google Chrome Helper (GPU).app 17.86 % (Google, Inc.) Activity Monitor 7.17 % (Apple) [B]Top Processes Snapshot by Memory:[/B] [B]Process (count)[/B] [B]RAM usage[/B] ([B]Source[/B] - [B]Location[/B]) EtreCheck 534 MB (App Store) Console 284 MB (Apple) Google Chrome 275 MB (Google, Inc.) Activity Monitor 175 MB (Apple) Google Chrome Helper (GPU).app 137 MB (Google, Inc.) [B]Top Processes Snapshot by Network Use:[/B] [B]Process[/B] [B]Input[/B] / [B]Output[/B] ([B]Source[/B] - [B]Location[/B]) Other processes 161 MB / 20 MB (?) rapportd 10 KB / 17 KB (Apple) SystemUIServer 0 B / 7 KB (Apple) PowerChime 634 B / 2 KB (Apple) homed 0 B / 0 B (Apple) [B]Virtual Memory Information:[/B] Physical RAM: 8 GB Free RAM: 20 MB Used RAM: 6.63 GB Cached files: 1.35 GB Available RAM: 1.37 GB Swap Used: 2.75 GB [B]Software Installs (past 30 days):[/B] [B]Install Date[/B] [B]Name[/B] ([B]Version[/B]) 2019-12-03 Day One (4.3.1) 2019-12-08 OneDrive (19.192.0926) 2019-12-11 Microsoft Excel 2019-12-11 Microsoft OneNote 2019-12-11 Microsoft Outlook 2019-12-12 Adobe Acrobat DC (19.021.20058) 2019-12-13 XProtectPlistConfigData (2110) 2019-12-13 MRTConfigData (1.51) 2019-12-15 Microsoft Word 2019-12-15 Microsoft PowerPoint 2019-12-19 Adobe Acrobat DC (19.021.20061) 2019-12-19 Malwarebytes for Mac 2019-12-20 AVG AntiVirus (19.4) 2019-12-20 AVGHUB 2019-12-20 Bitdefender Virus Scanner (3.15) 2019-12-21 Adobe Pepper Flash Player 2019-12-23 EtreCheck (5.4.8) [B]Diagnostics Information (past 7-30 days):[/B] [B]Directory /Library/Logs/DiagnosticReports is not accessible.[/B] [B]Enable Full Drive Access to see more information. End of report[/B] [/QUOTE]

Verification