Hi guys,
Thanks for all of your responses.
Yesterday I reformatted and reinstalled, making sure I didn't visit any websites which could be of a suspect nature (although this doesn't rule out legitimate sites which have experienced code injection attacks...), with everything going well up until about an hour ago.
I was using Chromium with only 1Password and
AdBlock installed. No extensions installed in Safari yet.
Login items all look good. My launchctl looks pretty clean to me but I'll paste it below just in case.
I also tried switching to OpenDNS (locally, my router doesn't give me the option, Sky are morons).
The only apps I've installed besides those which are very well known (Adobe CC, Coda, Transmit, Evernote, Twitter, Google Drive, 1Password, VLC, Skype, Spotify) are as follows:
Strangely enough, the first time I noticed the problem today was just after installing Spotify, but that was downloaded from them directly and I couldn't imagine them adding malicious code. On the off chance, I uninstalled it to no avail.
Here's my launchctl:
Code:
PID Status Label
- 0 com.apple.CoreAuthentication.daemon
4500 0 com.apple.quicklook
- 0 com.apple.parentalcontrols.check
227 0 com.apple.Finder
- 0 com.apple.PackageKit.InstallStatus
- 0 com.apple.FontWorker
1477 0 com.alfredapp.Alfred.70180
243 0 com.apple.bird
- 0 com.apple.familycontrols.useragent
- 0 com.apple.aos.migrate
602 0 com.apple.universalaccessAuthWarn
302 0 com.apple.nsurlsessiond
321 0 com.adobe.acc.AdobeDesktopService.55128.81E359CA-4F31-4642-A0D1-825DE863A14C
- 0 com.apple.syncservices.uihandler
276 0 com.apple.iconservices.iconservicesagent
- 0 com.apple.ManagedClientAgent.agent
- 0 com.apple.screensharing.agent
- 0 com.apple.TMHelperAgent.SetupOffer
- 0 com.apple.AddressBook.SourceSync
- 0 com.apple.familynotificationd
408 0 com.apple.photolibraryd
- 0 com.apple.cfnetwork.cfnetworkagent
- 0 com.apple.xpc.otherbsd
- 0 com.apple.bluetoothUIServer
- 0 com.apple.assistant_service
- 0 com.apple.mdworker.mail.03000000-0000-0000-0000-000000000000
- 0 com.apple.NotesMigratorService
2909 0 com.apple.MailServiceAgent
- 0 com.apple.appkit.xpc.sandboxedServiceRunner
- 0 com.apple.mdworker.mail
4326 0 com.apple.mdworker.shared.04000000-0000-0000-0000-000000000000
822 0 com.apple.DataDetectorsDynamicData
2673 0 com.apple.cfprefsd.xpc.agent
- 0 com.apple.unmountassistant.useragent
- 0 com.apple.csuseragent
- 0 com.apple.CoreRAIDAgent
- 0 com.apple.AOSPushRelay
270 0 com.apple.SocialPushAgent
3454 0 com.apple.xpc.launchd.oneshot.0x10000011.Google Drive
- 0 org.openbsd.ssh-agent
- 0 com.apple.apsctl
1468 0 com.apple.xpc.loginitemregisterd
- 0 com.apple.warmd_agent
- 0 com.apple.PubSub.Agent
- 0 com.apple.pictd
- 0 com.apple.universalaccesscontrol
- 0 com.apple.findmymacmessenger
- 0 com.apple.FilesystemUI
- 0 com.apple.pluginkit.pkreporter
- 0 com.apple.systemprofiler
340 0 com.apple.lateragent
281 0 com.adobe.AdobeCreativeCloud
- 0 com.apple.UserNotificationCenterAgent
- 0 com.apple.noticeboard.agent
- 0 com.apple.dt.CommandLineTools.installondemand
290 0 com.apple.cmfsyncagent
298 0 com.apple.cloudd
- 0 com.apple.ATS.FontValidator
285 0 com.apple.diagnostics_agent
- 0 com.apple.appleseed.seedusaged
- 0 com.apple.PhotoLibraryMigrationUtility.XPC
3172 0 com.apple.tonelibraryd
406 0 com.apple.CloudPhotosConfiguration
- 0 com.apple.mdworker.bundles
- 0 com.apple.mdworker.lsb.02000000-0000-0000-0000-000000000000
2825 0 com.apple.sbd
244 0 com.apple.secinitd
2834 0 com.apple.facebook.xpc
- 0 com.apple.cvmsCompAgentLegacy_i386
405 0 com.apple.cloudphotosd
- 0 com.apple.alf.useragent
3563 0 com.apple.coreservices.uiagent
- 0 com.apple.installd.user
- 0 com.apple.ContainerRepairAgent
297 0 com.apple.CallHistoryPluginHelper
- 0 com.apple.NetworkDiagnostics
4588 0 com.apple.Terminal.13948
306 0 com.apple.storeaccountd
- 0 com.apple.PCIESlotCheck
- 0 com.apple.AddressBook.AssistantService
- 0 com.apple.quicklook.32bit
3239 0 com.apple.printtool.agent
- 0 com.apple.IMLoggingAgent
2799 0 com.apple.USBAgent
256 0 com.apple.nsurlstoraged
279 0 com.apple.askpermissiond
- 0 com.apple.webinspectord
- 0 com.apple.ssinvitationagent
- 0 com.apple.WebKit.PluginAgent
- 0 com.apple.speech.synthesisserver
- 0 com.apple.DiagnosticReportCleanup.plist
396 0 com.apple.storeuid
- 0 com.apple.BezelUIServer
- 0 com.apple.speech.speechdatainstallerd
- 0 com.apple.rcd
- 0 com.apple.quicklook.config
- 0 com.apple.printuitool.agent
- 0 com.apple.AOSHeartbeat
2437 0 com.apple.SafariNotificationAgent
- 0 com.apple.appsleep
- 0 com.apple.FileStatsAgent
- 0 com.apple.ichat.BuddyPictureService
240 0 com.apple.tccd
3997 0 com.apple.netauth.user.auth
- 0 com.apple.cvmsCompAgent_x86_64
2828 0 com.apple.sharekit.EntitlementsHelper
- 0 com.apple.weibo.xpc
239 0 com.apple.pluginkit.pkd
- 0 com.apple.cvmsCompAgentLegacy_x86_64
- 0 com.apple.mdworker.mail.04000000-0000-0000-0000-000000000000
- 0 com.apple.security.XPCTimeStampingService
4344 0 com.apple.mdworker.single.08000000-0000-0000-0000-000000000000
- 0 com.apple.maspushagent
294 0 com.apple.CallHistorySyncHelper
618 0 com.divisiblebyzero.Spectacle.67908
224 0 com.apple.Dock.agent
218 0 com.apple.UserEventAgent-Aqua
- 0 com.apple.ReportPanic
250 0 com.apple.telephonyutilities.callservicesd
245 0 com.apple.identityservicesd
571 0 com.apple.security.DiskUnmountWatcher
- 0 com.apple.security.agentStub
- 0 com.apple.CoreLocationAgent
- 0 com.apple.cfnetwork.AuthBrokerAgent
341 0 com.apple.storedownloadd
- 0 com.apple.rtcreportingd
280 0 com.apple.cloudpaird
4521 0 org.chromium.Chromium.85232
236 0 com.apple.pboard
- 0 com.fiplab.MemoryCleanHelper
- 0 com.apple.thermaltrap
2436 0 com.apple.SafariCloudHistoryPushAgent
- 0 com.apple.AskPermissionUI
4330 0 com.apple.mdworker.shared.02000000-0000-0000-0000-000000000000
- 0 com.apple.accounts.dom
- 0 com.apple.lakitu
303 0 com.apple.security.cloudkeychainproxy3
353 0 com.apple.metadata.mdflagwriter
- 0 com.apple.DictionaryServiceHelper
4237 0 com.apple.speech.speechsynthesisd
- 0 com.apple.mdworker.mail.01000000-0000-0000-0000-000000000000
318 0 com.apple.InputMethodKit.UserDictionary
- 0 com.apple.mdworker.shared
- 0 com.apple.mbpluginhost.user
- 0 com.apple.mdworker.isolation
252 0 com.apple.imdpersistence.IMDPersistenceAgent
- 0 com.apple.TrustEvaluationAgent
- 0 com.apple.tiswitcher
259 0 com.apple.accountsd
- 0 com.adobe.AAM.Scheduler-1.0
338 0 com.apple.storelegacy
- 0 com.apple.coredata.externalrecordswriter
- 0 com.apple.locationmenu
311 0 com.apple.pbs
274 0 com.apple.notificationcenterui.agent
- 0 com.apple.imklaunchagent
- 0 com.apple.imcore.imtransferagent
- 0 com.apple.FTCleanup
- 0 com.apple.btsa
3791 0 com.apple.EscrowSecurityAlert
255 0 com.apple.coreservices.appleid.authentication
- 0 com.apple.metadata.mdwrite
263 0 com.apple.coreservices.lsactivity
242 0 com.apple.CalendarAgent
- 0 com.apple.powerchime
238 0 com.apple.sharingd
339 0 com.apple.storeassetd
- 0 com.apple.iCloudUserNotificationsd
- 0 com.apple.familycircled
- 0 com.apple.ReportCrash.Self
251 0 com.apple.imagent
- 0 com.apple.FontRegistryUIAgent
- 0 com.apple.lookupd
- 0 com.apple.syncservices.SyncServer
- 0 com.apple.ZoomWindow
- 0 com.apple.talagent
226 0 com.apple.SystemUIServer.agent
1466 0 com.apple.storeinappd
- 0 com.apple.icbaccountsd
- 0 com.apple.ATS.FontValidatorConduit
- 0 com.apple.VoiceOver
- 0 com.apple.RemoteDesktop.agent
- 0 com.apple.cloudfamilyrestrictionsd
257 0 com.apple.icloud.fmfd
- 0 com.apple.AssistiveControl
301 0 com.apple.internetaccounts
4567 0 com.apple.mdworker.shared.00000000-0000-0000-0000-000000000000
- 0 com.apple.FileSyncAgent.PHD
- 0 com.apple.mdworker.32bit
246 0 com.apple.secd
400 0 com.apple.appstore.PluginXPCService
4261 0 com.apple.BKAgentService
4508 0 com.apple.cvmsCompAgent_x86_64_1
- 0 com.apple.tencentweibo.xpc
- 0 com.apple.mbloginhelper.user
- 0 com.apple.cvmsCompAgent_i386_1
- 0 com.apple.cvmsCompAgentLegacy_i386_1
- 0 com.apple.mdworker.lsb
304 0 com.apple.metadata.SpotlightNetHelper
- 0 com.apple.assistantd
- 0 com.apple.mdmclient.cloudconfig.agent
2352 0 com.apple.xpc.launchd.oneshot.0x10000008.iTunesHelper
- 0 com.apple.isst
- 0 com.apple.DiskArbitrationAgent
- 0 com.apple.reclaimspace
3233 0 com.apple.scopedbookmarksagent.xpc
- 0 com.apple.ReportCrash
248 0 com.apple.fontd
323 0 com.adobe.accmac.59672
- 0 com.apple.Maps.mapspushd
1456 0 com.fiplab.memoryclean.69328
292 0 com.apple.gamed
- 0 com.spotify.webhelper
- 0 com.apple.java.updateSharing
- 0 com.apple.midiserver
- 0 com.apple.quicklook.ui.helper
2974 0 com.apple.helpd
284 0 com.apple.wifi.WiFiAgent
- 0 com.apple.screensharing.MessagesAgent
- 0 com.apple.java.InstallOnDemandAgent
- 0 com.apple.DictationIM
- 0 com.apple.mdmclient.agent
4241 0 com.apple.iCloudHelper
4346 0 com.apple.mdworker.single.07000000-0000-0000-0000-000000000000
- 0 com.apple.mdworker.mail.02000000-0000-0000-0000-000000000000
2841 0 com.apple.linkedin.xpc
- 0 com.apple.ichat.TranscriptRenderingService
- 0 com.apple.security.XPCKeychainSandboxCheck
- 0 com.apple.mdworker.single
4325 0 com.apple.mdworker.shared.03000000-0000-0000-0000-000000000000
- 0 com.apple.twitter.xpc
- 0 com.apple.cvmsCompAgentLegacy_x86_64_1
- 0 com.apple.scrod
2879 0 com.apple.mail.6564
268 0 com.apple.spindump_agent
- 0 com.apple.softwareupdate_notify_agent
272 0 com.apple.security.keychain-circle-notification
- 0 com.google.keystone.user.agent
- 0 com.apple.universalaccessd
- 0 com.apple.AirPortBaseStationAgent
- 0 com.apple.appstoreupdateagent
2906 0 com.apple.recentsd
- 0 com.apple.neagent
- 0 com.apple.idsfoundation.IDSRemoteURLConnectionAgent
241 0 com.apple.usernoted
- 0 com.apple.AddressBook.abd
- 0 com.apple.ScreenReaderUIServer
3193 0 com.apple.AirPlayUIAgent
- 0 com.apple.safaridavclient
312 0 com.apple.xpc.launchd.oneshot.0x10000002.AppleSpell
- 0 com.apple.netauth.user.gui
334 0 com.apple.xpc.launchd.oneshot.0x10000003.CCLibrary
- 0 com.apple.TMHelperAgent
266 0 com.apple.Spotlight
288 0 com.apple.soagent
- 0 com.apple.mdworker.32bit.02000000-0000-0000-0000-000000000000
- 0 com.apple.syncdefaultsd
2630 0 com.apple.mdworker.sizing
- 0 com.apple.SpeechRecognitionCore.brokerd
4324 0 com.apple.mdworker.shared.01000000-0000-0000-0000-000000000000
- 0 com.apple.iokit.IOServiceAuthorizeAgent
- 0 com.apple.xmigrationhelper.user
220 0 com.apple.distnoted.xpc.agent
- 0 com.apple.cvmsCompAgent_i386
378 0 com.apple.geod
This really is an insidious bugger!