Adware/Malware Issue ?

Discussion in 'Mac Apps and Mac App Store' started by Washac, Jun 3, 2016.

  1. Washac, Jun 3, 2016
    Last edited: Jun 3, 2016

    Washac macrumors 68020

    Washac

    Joined:
    Jul 2, 2006
    #1
    The last few days have seen me getting a Adware/Malware program wanting me to allow access at bootup.

    I use Malwarebytes to remove said program/programs.

    Reboot and up pops another one.

    I have run ClamXav which found a few suspicious items which I removed but still the problem persists.

    EDIT: Just tried using Safari and Chrome and I get the Bing bar and Trovi search thing in both, I was getting this this Firefox also but thought I had removed it, seems there is a browser virus issue going on and recent checks and removels have NOT solved the issue.

    Can anybody recommend any other programs that will clean and stop this from happening ?


    Thanks
     
  2. robert05au macrumors regular

    robert05au

    Joined:
    May 19, 2005
    Location:
    Dubbo, NSW
    #2
    for firefox and chrome check what extensios are showing as being used and also with firefox check the pliugins.
    For firefox they can be found under the toolsd menu and addons.

    Not really sure about safari.

    I will do some more digging and post any further locations to check

    I personally use Intego Internet Security X8 and don't seem to see these type of things.
     
  3. Washac thread starter macrumors 68020

    Washac

    Joined:
    Jul 2, 2006
    #3
    Yes I just did all the things to all three browsers that cure the issues but I just got yet another piece of adware/malware wanting connections, going to try your Intego program, or rather was until I see you pay per year :(
     
  4. beachmusic macrumors regular

    beachmusic

    Joined:
    Jan 12, 2013
    Location:
    St. George Island
  5. Washac thread starter macrumors 68020

    Washac

    Joined:
    Jul 2, 2006
    #5
    I was using ClamXav but that does not seem to deal with Adware/Malware, so I will try Avira as long asthere is no yearly charge and it deals with Adware/Malware.

    Thanks
     
  6. Old Muley macrumors 6502a

    Old Muley

    Joined:
    Jan 6, 2009
    Location:
    Titletown USA
    #6
  7. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #7
    Download and run the app Etrecheck. It will create an anonymized report showing all launch items. Post the report here and we can take a look for you to help find what is causing this.
     
  8. Washac thread starter macrumors 68020

    Washac

    Joined:
    Jul 2, 2006
    #8
    There you go.......

    EtreCheck version: 2.9.12 (265)
    Report generated 2016-06-03 16:21:59
    Download EtreCheck from https://etrecheck.com
    Runtime 2:51
    Performance: Excellent

    Click the [Support] links for help with non-Apple products.
    Click the [Details] links for more information about that line.
    Click the [Check files] link for help with unknown files.

    Problem: Other problem

    Hardware Information: ⓘ
    Mac Pro (Early 2009)
    [Technical Specifications] - [User Guide] - [Warranty & Service]
    Mac Pro - model: MacPro4,1
    1 2.66 GHz Quad-Core Intel Xeon CPU: 4-core
    12 GB RAM Upgradeable - [Instructions]
    DIMM 1
    4 GB DDR3 ECC 1066 MHz ok
    DIMM 2
    4 GB DDR3 ECC 1066 MHz ok
    DIMM 3
    2 GB DDR3 ECC 1066 MHz ok
    DIMM 4
    2 GB DDR3 ECC 1066 MHz ok
    Bluetooth: Old - Handoff/Airdrop2 not supported

    Video Information: ⓘ
    AMD Radeon HD 7950 - VRAM: 3072 MB
    iMac 1920 x 1200

    System Software: ⓘ
    OS X Mavericks 10.9.5 (13F1808) - Time since boot: about 5 hours

    Disk Information: ⓘ
    HL-DT-ST DVD-RW GH41N ()

    HL-DT-ST DVD-RW GH41N ()

    Hitachi HDE721064SLA360 disk0 : (640.14 GB) (Rotational)
    EFI (disk0s1) <not mounted> : 210 MB
    MacHD (disk0s2) /Volumes/ MacHD : 238.42 GB (178.99 GB free)
    Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
    BOOTCAMP (disk0s4) /Volumes/BOOTCAMP : 400.85 GB (146.89 GB free)

    WDC WD20EZRX-00D8PB0 disk2 : (2 TB) (Rotational)
    EFI (disk2s1) <not mounted> : 210 MB
    Storage (disk2s2) /Volumes/Storage : 2.00 TB (437.38 GB free)

    WDC WD10EARX-00PASB0 disk1 : (1 TB) (Rotational)
    EFI (disk1s1) <not mounted> : 210 MB
    MavericksHD (disk1s2) / : 999.21 GB (216.61 GB free)
    Recovery HD (disk1s3) <not mounted> [Recovery]: 784 MB

    USB Information: ⓘ
    Apple, Inc. Keyboard Hub
    Corsair Corsair M65 Gaming Mouse
    Apple, Inc Apple Keyboard
    Apple Inc. Display Audio
    Apple Inc. Apple LED Cinema Display
    Apple Inc. Display iSight
    ©Microsoft Xbox 360 Wireless Receiver for Windows
    Apple Inc. BRCM2046 Hub
    Apple Inc. Bluetooth USB Host Controller

    Firewire Information: ⓘ
    WD My Book 111D 800mbit - 800mbit max
    EFI (disk3s1) <not mounted> : 210 MB
    MavericksHD BackUp (disk3s2) /Volumes/MavericksHD BackUp : 999.18 GB (55.55 GB free)
    Recovery HD (disk3s3) <not mounted> [Recovery]: 784 MB

    Gatekeeper: ⓘ
    Anywhere

    Unknown Files: ⓘ
    /Library/LaunchDaemons/com.abstemiousness.plist
    /etc/abstemiousness.sh
    /Library/LaunchDaemons/com.anapeiratic.plist
    /etc/anapeiratic.sh
    /Library/LaunchDaemons/com.bratling.plist
    /etc/bratling.sh
    /Library/LaunchDaemons/com.chestful.plist
    /etc/chestful.sh
    /Library/LaunchDaemons/com.ckb.daemon.plist
    /Applications/ckb.app/Contents/Resources/ckb-daemon
    /Library/LaunchDaemons/com.clinoprism.plist
    /etc/clinoprism.sh
    /Library/LaunchDaemons/com.ferrotitanium.plist
    /etc/ferrotitanium.sh
    /Library/LaunchDaemons/com.nonsharing.plist
    /etc/nonsharing.sh
    /Library/LaunchDaemons/com.pole.plist
    /etc/pole.sh
    /Library/LaunchDaemons/com.spongioplasm.plist
    /etc/spongioplasm.sh
    /Library/LaunchDaemons/com.urethritis.plist
    /etc/urethritis.sh
    /Library/LaunchDaemons/com.vajrasana.plist
    /etc/vajrasana.sh
    ~/Library/LaunchAgents/com.ckb.ckb.plist
    /Applications/ckb.app/Contents/MacOS/ckb --background
    13 unknown files found. [Check files]

    Kernel Extensions: ⓘ
    /Library/Extensions
    [loaded] com.avira.kext.FileAccessControl (1.2.2 - SDK 10.9 - 2016-06-03) [Support]
    [loaded] com.squirrels.driver.AirParrotSpeakers (1.8 - SDK 10.8 - 2016-06-03) [Support]

    /System/Library/Extensions
    [not loaded] com.mice.driver.Xbox360Controller (1.0.0d13 - SDK 10.8 - 2016-06-03) [Support]
    [loaded] com.orderedbytes.driver.ControllerMateFamily (4.4 - 2016-06-03) [Support]
    [loaded] com.squirrels.airparrot.framebuffer (1.6 - SDK 10.8 - 2016-06-03) [Support]
    [loaded] org.dungeon.driver.SATSMARTDriver (0.6 - SDK 10.6 - 2016-06-03) [Support]

    /System/Library/Extensions/360Controller.kext/Contents/PlugIns
    [not loaded] com.mice.driver.Wireless360Controller (1.0.0d13 - SDK 10.8 - 2013-10-11) [Support]
    [loaded] com.mice.driver.WirelessGamingReceiver (1.0.0d13 - SDK 10.8 - 2013-10-11) [Support]

    /System/Library/Extensions/ControllerMate.kext/Contents/PlugIns
    [not loaded] com.orderedbytes.driver.CMADBDevices (4.3.10 - 2014-04-28) [Support]
    [loaded] com.orderedbytes.driver.CMUSBDevices (4.4 - 2014-04-28) [Support]
    [not loaded] com.orderedbytes.driver.CMUSBKeyboard (1.0 - 2014-04-28) [Support]
    [not loaded] com.orderedbytes.driver.CMUSBPointer (1.0 - 2014-04-28) [Support]

    /Volumes/ MacHD/Applications/TemperatureMonitor.app
    [loaded] com.bresink.driver.BRESINKx86Monitoring (9.0 - 2012-07-30) [Support]

    /Volumes/ MacHD/Applications/Toast 10 Titanium/Toast Titanium.app
    [not loaded] com.roxio.BluRaySupport (1.1.6 - 2014-05-31) [Support]

    /Volumes/ MacHD/Users/[redacted]/Library/Services/ToastIt.service/Contents/MacOS
    [not loaded] com.roxio.TDIXController (2.0 - 2014-04-25) [Support]

    /Volumes/MavericksHD BackUp/Applications/Parallels Desktop.app
    [not loaded] com.parallels.kext.hidhook (9.0 24251.1052177 - 2016-02-19) [Support]
    [not loaded] com.parallels.kext.hypervisor (9.0 24251.1052177 - 2016-02-19) [Support]
    [not loaded] com.parallels.kext.netbridge (9.0 24251.1052177 - 2016-02-19) [Support]
    [not loaded] com.parallels.kext.usbconnect (9.0 24251.1052177 - 2016-02-19) [Support]
    [not loaded] com.parallels.kext.vnic (9.0 24251.1052177 - 2016-02-19) [Support]

    System Launch Agents: ⓘ
    [not loaded] 4 Apple tasks
    [loaded] 140 Apple tasks
    [running] 40 Apple tasks

    System Launch Daemons: ⓘ
    [not loaded] 47 Apple tasks
    [loaded] 140 Apple tasks
    [running] 62 Apple tasks

    Launch Agents: ⓘ
    [not loaded] com.adobe.AAM.Updater-1.0.plist (2014-04-26) [Support]
    [loaded] com.avira.antivirus.general.agent.plist (2016-01-21) [Support]
    [loaded] com.avira.antivirus.ipm.ui.plist (2016-01-21) [Support]
    [loaded] com.avira.antivirus.notifications.agent.plist (2016-01-21) [Support]
    [loaded] com.avira.antivirus.odscan.default.plist (2016-06-03) [Support]
    [loaded] com.avira.antivirus.scheduler.agent.plist (2016-01-21) [Support]
    [running] com.avira.antivirus.systray.plist (2016-01-21) [Support]
    [loaded] com.avira.antivirus.telemetry.agent.plist (2016-01-21) [Support]
    [failed] com.avira.antivirus.update.default.plist (2016-01-21) [Support]
    [running] com.avira.helper.avstats.plist (2016-01-21) [Support]
    [loaded] com.gog.galaxy.commservice.plist (2016-05-26) [Support]
    [loaded] com.oracle.java.Java-Updater.plist (2014-05-06) [Support]
    [running] com.orderedbytes.ControllerMateHelper.plist (2014-04-28) [Support]
    [loaded] org.macosforge.xquartz.startx.plist (2015-10-16) [Support]

    Launch Daemons: ⓘ
    [failed] com.abstemiousness.plist (2016-06-03) [Support]
    [failed] com.adobe.fpsaud.plist (2016-05-09) [Support]
    [failed] com.anapeiratic.plist (2016-06-03) [Support]
    [loaded] com.avira.antivirus.dbcleaner.plist (2016-01-21) [Support]
    [loaded] com.avira.antivirus.ipm.loader.plist (2016-01-21) [Support]
    [running] com.avira.helper.watchdox.plist (2016-01-21) [Support]
    [loaded] com.bombich.ccc.plist (2014-04-26) [Support]
    [running] com.bombich.ccchelper.plist (2016-05-25) [Support]
    [failed] com.bratling.plist (2016-06-01) [Support]
    [failed] com.chestful.plist (2016-06-02) [Support]
    [failed] com.ckb.daemon.plist (2015-08-26) [Support]
    [running] com.cleverfiles.cfbackd.plist (2016-01-03) [Support]
    [failed] com.clinoprism.plist (2016-06-03) [Support]
    [loaded] com.ea.origin.ESHelper.plist (2014-06-25) [Support]
    [failed] com.ferrotitanium.plist (2016-06-01) [Support]
    [loaded] com.gog.galaxy.clientservice.plist (2016-05-26) [Support]
    [loaded] com.malwarebytes.MBAMHelperTool.plist (2016-01-09) [Support]
    [running] com.mice.360Daemon.plist (2013-10-08) [Support]
    [failed] com.nonsharing.plist (2016-06-03) [Support]
    [loaded] com.oracle.java.Helper-Tool.plist (2014-05-06) [Support]
    [loaded] com.paragon-software.camptunex.helper.plist (2016-02-16) [Support]
    [loaded] com.paragon-software.camptunex.installer.plist (2016-02-16) [Support]
    [failed] com.pole.plist (2016-06-03) [Support]
    [failed] com.spongioplasm.plist (2016-06-03) [Support]
    [failed] com.urethritis.plist (2016-06-01) [Support]
    [loaded] com.vajrasana.plist (2016-06-03) [Support]
    [loaded] org.macosforge.xquartz.privileged_startx.plist (2015-10-16) [Support]

    User Launch Agents: ⓘ
    [running] com.amazon.music.plist (2015-10-05) [Support]
    [failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist
    [failed] com.ckb.ckb.plist (2015-10-17) [Support]
    [loaded] com.google.keystone.agent.plist (2016-03-03) [Support]

    User Login Items: ⓘ
    Temperature Monitor Application (/Applications/TemperatureMonitor.app)
    BootChamp Application (/Applications/BootChamp.app)
    Brightness Slider Application (/Applications/Brightness Slider.app)
    Android File Transfer Agent Application (~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
    MacGameStore Helper Application (~/Library/Application Support/MacGameStore.com/Helper/MacGameStore Helper.app)
    CCC User Agent Application (/Applications/Utilities/Carbon Copy Cloner/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app)

    Other Apps: ⓘ
    [loaded] 0x7fc695100ff0.mach_init.Inspector
    [running] anabrosisUpd.plist
    [running] com.bombich.cccuseragent.1483360
    [running] com.bresink.system.tempmonitor.695760
    [running] com.etresoft.EtreCheck.1641056
    [running] com.google.android.mtpagent.1413488
    [running] com.kainjow.BootChamp.891472
    [running] com.macgamestore.helper.836736
    [running] com.malwarebytes.Malwarebytes-Anti-Malware-Service
    [running] com.malwarebytes.antimalware.1414192
    [running] net.ACT-Productions.Brightness-Control.1345376
    [running] org.mozilla.firefox.10944
    [loaded] 450 Apple tasks
    [running] 320 Apple tasks

    Internet Plug-ins: ⓘ
    Silverlight: 5.1.30514.0 - SDK 10.6 (2015-02-13) [Support]
    FlashPlayer-10.6: 21.0.0.242 - SDK 10.6 (2016-05-18) [Support]
    QuickTime Plugin: 7.7.3 (2016-06-01)
    Flash Player: 21.0.0.242 - SDK 10.6 (2016-05-18) [Support]
    JavaAppletPlugin: Java 8 Update 91 build 14 (2016-04-24) Check version
    Default Browser: 537 - SDK 10.9 (2014-09-18)

    Safari Extensions: ⓘ
    OpenIE - Parallels - http://www.parallels.com (2014-10-27)

    3rd Party Preference Panes: ⓘ
    Flash Player (2016-05-09) [Support]
    Java (2016-04-24) [Support]
    XBox 360 Controllers (2013-10-11) [Support]

    Time Machine: ⓘ
    Time Machine not configured!

    Top Processes by CPU: ⓘ
    29% com.malwarebytes.Malwarebytes-Anti-Malware-Service
    4% WindowServer
    4% fontd
    3% TemperatureMonitor
    1% Dock

    Top Processes by Memory: ⓘ
    907 MB kernel_task
    651 MB firefox
    442 MB savapi
    221 MB avguard.bin
    197 MB com.apple.IconServicesAgent(3)

    Virtual Memory Information: ⓘ
    4.50 GB Free RAM
    6.73 GB Used RAM (3.69 GB Cached)
    0 B Swap Used

    Diagnostics Information: ⓘ
    Jun 3, 2016, 10:23:02 AM Self test - passed
     
  9. Weaselboy, Jun 3, 2016
    Last edited: Jun 4, 2016

    Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #9
    I think this is your issue here. Read over an earlier thread here on this issue. Pay attention to posts #18 and #19. Also see my post #8 there to determine if you have the hidden user account mentioned in that thread.

    This looks like the same adware mentioned in that thread, but I think you already got rid of the underlying adware with MalwareBytes, and these plists are the leftovers. What that adware does is make these random plists to launch the script files in /etc/ on the list. The plists names are completely random and this explains why Google turns up nothing for "com.clinoprism.plist" for example.

    Here is what I would do now. Boot while holding the shift key to do a safe mode boot. That will stop all this stuff from launching at boot.

    Then follow the instructions in my post #8 in the other thread to look for and delete the hidden user account if it is there.

    Then go to these folders and delete the files in the list above.

    Code:
    /Library/LaunchDaemons/
    
    ~/Library/LaunchDaemons/
    
    /etc/
    Note the ~ is your users folder.

    Once you are all done, reboot normally and do another Etrecheck report to make sure you got everything.
     
  10. Washac thread starter macrumors 68020

    Washac

    Joined:
    Jul 2, 2006
    #10
    How it looks now :)

    EtreCheck version: 2.9.12 (265)
    Report generated 2016-06-03 19:26:22
    Download EtreCheck from https://etrecheck.com
    Runtime 5:27
    Performance: Below Average

    Click the [Support] links for help with non-Apple products.
    Click the [Details] links for more information about that line.

    Problem: Other problem

    Hardware Information: ⓘ
    Mac Pro (Early 2009)
    [Technical Specifications] - [User Guide] - [Warranty & Service]
    Mac Pro - model: MacPro4,1
    1 2.66 GHz Quad-Core Intel Xeon CPU: 4-core
    12 GB RAM Upgradeable - [Instructions]
    DIMM 1
    4 GB DDR3 ECC 1066 MHz ok
    DIMM 2
    4 GB DDR3 ECC 1066 MHz ok
    DIMM 3
    2 GB DDR3 ECC 1066 MHz ok
    DIMM 4
    2 GB DDR3 ECC 1066 MHz ok
    Bluetooth: Old - Handoff/Airdrop2 not supported

    Video Information: ⓘ
    AMD Radeon HD 7950 - VRAM: 3072 MB
    iMac 1920 x 1200

    System Software: ⓘ
    OS X Mavericks 10.9.5 (13F1808) - Time since boot: less than an hour

    Disk Information: ⓘ
    HL-DT-ST DVD-RW GH41N ()

    HL-DT-ST DVD-RW GH41N ()

    Hitachi HDE721064SLA360 disk0 : (640.14 GB) (Rotational)
    EFI (disk0s1) <not mounted> : 210 MB
    MacHD (disk0s2) /Volumes/ MacHD : 238.42 GB (178.99 GB free)
    Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
    BOOTCAMP (disk0s4) /Volumes/BOOTCAMP : 400.85 GB (146.89 GB free)

    WDC WD20EZRX-00D8PB0 disk2 : (2 TB) (Rotational)
    EFI (disk2s1) <not mounted> : 210 MB
    Storage (disk2s2) /Volumes/Storage : 2.00 TB (437.38 GB free)

    WDC WD10EARX-00PASB0 disk1 : (1 TB) (Rotational)
    EFI (disk1s1) <not mounted> : 210 MB
    MavericksHD (disk1s2) / : 999.21 GB (227.87 GB free)
    Recovery HD (disk1s3) <not mounted> [Recovery]: 784 MB

    USB Information: ⓘ
    Apple, Inc. Keyboard Hub
    Corsair Corsair M65 Gaming Mouse
    Apple, Inc Apple Keyboard
    Apple Inc. Display iSight
    Apple Inc. Apple LED Cinema Display
    Apple Inc. Display Audio
    Apple Inc. BRCM2046 Hub
    Apple Inc. Bluetooth USB Host Controller
    ©Microsoft Xbox 360 Wireless Receiver for Windows

    Firewire Information: ⓘ
    WD My Book 111D 800mbit - 800mbit max
    EFI (disk3s1) <not mounted> : 210 MB
    MavericksHD BackUp (disk3s2) /Volumes/MavericksHD BackUp : 999.18 GB (51.14 GB free)
    Recovery HD (disk3s3) <not mounted> [Recovery]: 784 MB

    Gatekeeper: ⓘ
    Anywhere

    Kernel Extensions: ⓘ
    /Library/Application Support/Avast/components/fileshield/unsigned
    [loaded] com.avast.AvastFileShield (3.0.0 - SDK 10.10 - 2016-05-24) [Support]

    /Library/Application Support/Avast/components/proxy/unsigned
    [loaded] com.avast.PacketForwarder (2.1 - SDK 10.10 - 2016-05-24) [Support]

    /Library/Application Support/Roxio
    [not loaded] com.roxio.TDIXController (2.0 - 2015-04-18) [Support]

    /Library/Extensions
    [loaded] com.squirrels.driver.AirParrotSpeakers (1.8 - SDK 10.8 - 2016-06-03) [Support]

    /Library/StartupItems/BRESINKx86Monitoring
    [loaded] com.bresink.driver.BRESINKx86Monitoring (9.0 - 2014-04-26) [Support]

    /System/Library/Extensions
    [not loaded] com.mice.driver.Xbox360Controller (1.0.0d13 - SDK 10.8 - 2016-06-03) [Support]
    [loaded] com.orderedbytes.driver.ControllerMateFamily (4.4 - 2016-06-03) [Support]
    [loaded] com.squirrels.airparrot.framebuffer (1.6 - SDK 10.8 - 2016-06-03) [Support]
    [loaded] org.dungeon.driver.SATSMARTDriver (0.6 - SDK 10.6 - 2016-06-03) [Support]

    /System/Library/Extensions/360Controller.kext/Contents/PlugIns
    [not loaded] com.mice.driver.Wireless360Controller (1.0.0d13 - SDK 10.8 - 2013-10-11) [Support]
    [loaded] com.mice.driver.WirelessGamingReceiver (1.0.0d13 - SDK 10.8 - 2013-10-11) [Support]

    /System/Library/Extensions/ControllerMate.kext/Contents/PlugIns
    [not loaded] com.orderedbytes.driver.CMADBDevices (4.3.10 - 2014-04-28) [Support]
    [loaded] com.orderedbytes.driver.CMUSBDevices (4.4 - 2014-04-28) [Support]
    [not loaded] com.orderedbytes.driver.CMUSBKeyboard (1.0 - 2014-04-28) [Support]
    [not loaded] com.orderedbytes.driver.CMUSBPointer (1.0 - 2014-04-28) [Support]

    System Launch Agents: ⓘ
    [not loaded] 4 Apple tasks
    [loaded] 148 Apple tasks
    [running] 32 Apple tasks

    System Launch Daemons: ⓘ
    [not loaded] 47 Apple tasks
    [loaded] 143 Apple tasks
    [running] 59 Apple tasks

    Launch Agents: ⓘ
    [not loaded] com.adobe.AAM.Updater-1.0.plist (2014-04-26) [Support]
    [running] com.avast.update-agent.plist (2016-06-03) [Support]
    [loaded] com.avast.userinit.plist (2016-06-03) [Support]
    [loaded] com.gog.galaxy.commservice.plist (2016-05-26) [Support]
    [loaded] com.oracle.java.Java-Updater.plist (2014-05-06) [Support]
    [running] com.orderedbytes.ControllerMateHelper.plist (2014-04-28) [Support]
    [loaded] org.macosforge.xquartz.startx.plist (2015-10-16) [Support]

    Launch Daemons: ⓘ
    [loaded] com.adobe.fpsaud.plist (2016-05-09) [Support]
    [loaded] com.avast.init.plist (2016-06-03) [Support]
    [loaded] com.avast.uninstall.plist (2016-06-03) [Support]
    [loaded] com.avast.update.plist (2016-06-03) [Support]
    [loaded] com.bombich.ccc.plist (2014-04-26) [Support]
    [running] com.bombich.ccchelper.plist (2016-05-25) [Support]
    [running] com.cleverfiles.cfbackd.plist (2016-01-03) [Support]
    [loaded] com.ea.origin.ESHelper.plist (2014-06-25) [Support]
    [loaded] com.gog.galaxy.clientservice.plist (2016-05-26) [Support]
    [loaded] com.malwarebytes.MBAMHelperTool.plist (2016-01-09) [Support]
    [running] com.mice.360Daemon.plist (2013-10-08) [Support]
    [loaded] com.oracle.java.Helper-Tool.plist (2014-05-06) [Support]
    [loaded] com.paragon-software.camptunex.helper.plist (2016-02-16) [Support]
    [loaded] com.paragon-software.camptunex.installer.plist (2016-02-16) [Support]
    [loaded] org.macosforge.xquartz.privileged_startx.plist (2015-10-16) [Support]

    User Launch Agents: ⓘ
    [running] com.amazon.music.plist (2015-10-05) [Support]
    [failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist
    [loaded] com.avast.home.userinit.plist (2016-06-03) [Support]
    [loaded] com.google.keystone.agent.plist (2016-03-03) [Support]

    User Login Items: ⓘ
    Temperature Monitor Application (/Applications/TemperatureMonitor.app)
    BootChamp Application (/Applications/BootChamp.app)
    Brightness Slider Application (/Applications/Brightness Slider.app)
    Android File Transfer Agent Application (~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
    MacGameStore Helper Application (~/Library/Application Support/MacGameStore.com/Helper/MacGameStore Helper.app)
    CCC User Agent Application (/Applications/Utilities/Carbon Copy Cloner/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app)

    Other Apps: ⓘ
    [loaded] 0x7fb7fb501b60.mach_init.Inspector
    [loaded] com.avast.account
    [running] com.avast.daemon
    [running] com.avast.fileshield
    [running] com.avast.helper
    [running] com.avast.proxy
    [running] com.avast.service
    [running] com.bombich.cccuseragent.26960
    [running] com.bresink.system.tempmonitor.10944
    [running] com.etresoft.EtreCheck.47728
    [running] com.google.android.mtpagent.8832
    [running] com.kainjow.BootChamp.27312
    [running] com.macgamestore.helper.47904
    [running] net.ACT-Productions.Brightness-Control.27840
    [loaded] 451 Apple tasks
    [running] 270 Apple tasks

    Internet Plug-ins: ⓘ
    Silverlight: 5.1.30514.0 - SDK 10.6 (2015-02-13) [Support]
    FlashPlayer-10.6: 21.0.0.242 - SDK 10.6 (2016-05-18) [Support]
    QuickTime Plugin: 7.7.3 (2016-06-01)
    Flash Player: 21.0.0.242 - SDK 10.6 (2016-05-18) [Support]
    JavaAppletPlugin: Java 8 Update 91 build 14 (2016-04-24) Check version
    Default Browser: 537 - SDK 10.9 (2014-09-18)

    Safari Extensions: ⓘ
    OpenIE - Parallels - http://www.parallels.com (2014-10-27)

    3rd Party Preference Panes: ⓘ
    Flash Player (2016-05-09) [Support]
    Java (2016-04-24) [Support]
    XBox 360 Controllers (2013-10-11) [Support]

    Time Machine: ⓘ
    Time Machine not configured!

    Top Processes by CPU: ⓘ
    5% fontd
    0% WindowServer
    0% kernel_task
    0% aosnotifyd

    Top Processes by Memory: ⓘ
    707 MB kernel_task
    639 MB com.apple.IconServicesAgent
    172 MB mds_stores
    160 MB com.avast.daemon
    111 MB Finder

    Virtual Memory Information: ⓘ
    3.26 GB Free RAM
    8.73 GB Used RAM (6.87 GB Cached)
    0 B Swap Used

    Diagnostics Information: ⓘ
    Jun 3, 2016, 07:19:57 PM ~/Library/Logs/DiagnosticReports/Finder_2016-06-03-191957_[redacted].crash
    com.apple.finder - /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
    Jun 3, 2016, 07:17:25 PM Self test - passed
     
  11. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #11
    Much better! Looks like you got rid of it all. Everything seem back to normal now?
     
  12. Washac thread starter macrumors 68020

    Washac

    Joined:
    Jul 2, 2006
    #12
    Thanks for your assistance :)
     
  13. Bigg_Erok macrumors newbie

    Bigg_Erok

    Joined:
    Jun 3, 2016
    #13
    Trovi is the culprit. I saw that add-on all the time when I was working the Genius Bar. You also need to check the Applications folder for any apps you didn't install. Things like MegaBackup and ZipCloud. They are installed at the same time and while they're pretty harmless on the whole, if you didn't install it, it shouldn't be there.
     
  14. Washac thread starter macrumors 68020

    Washac

    Joined:
    Jul 2, 2006
    #14
    I have looked and can see nothing in applications that should not be there.

    Thanks for the information.
     

Share This Page