crwdns2934243:0crwdne2934243:0 Dan

crwdns2934249:0crwdne2934249:0:

crwdns2915684:0crwdne2915684:0:

open

crwdns2934245:0crwdne2934245:0 Sam Goldheart crwdns2934247:0crwdne2934247:0

crwdns2934249:0crwdne2934249:0:

I am having the same problem. I downloaded ETRECheck. Following is the report generated. I appreciate any guidance you can provide as to how I can remedy this problem.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-07-27 09:40:57

Download EtreCheck from https://etrecheck.com

Runtime: 4:42

Performance: Good

Problem: Other problem

Description:

Fan doesn’t stop running

Major Issues:

Anything that appears on this list needs immediate attention.

Adware - Adware detected.

Unsigned files - There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Heavy RAM usage - This machine is using a large amount of RAM.

Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

Clean up - There are orphan files that could be removed.

System modifications - There are a large number of system modifications running in the background.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.

Hardware Information:

MacBook Air (13-inch, 2013 - 2014) / MacBook Air (13-inch, Mid 2013)

MacBook Air Model: MacBookAir6,2

1 1.7 GHz Intel Core i7 (i7-4650U) CPU: 2-core

8 RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600  ok

BANK 1/DIMM0 - 4 GB DDR3 1600  ok

Battery: Health = Normal - Cycle count = 683

Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900

Thunderbolt Display 2560 x 1440

Drives:

disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 500.07 GB

disk1s1 - Macintosh HD (APFS) 500.07 GB (376.10 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 500.07 GB (21 MB used)

disk1s3 - Recovery (APFS) [Recovery] 500.07 GB (518 MB used)

disk1s4 - VM (APFS) [APFS VM] 500.07 GB (1.07 GB used)

disk2 - Disk Image 41 MB (Disk Image)

External Disk Image

Mounted Volumes:

disk1s1 - Macintosh HD 500.07 GB (122.20 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM]  500.07 GB (122.20 GB free)

APFS

Mount point: /private/var/vm

Network:

Interface usbmodem317B32: KanziSWD

Interface en7: iPad

Interface en0: Wi-Fi Scotland

802.11 a/b/g/n/ac

One IPv4 address

Interface en4: iPhone

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 118.82 GB available

System Software:

macOS High Sierra 10.13.5 (17F77)

Time since boot: Less than an hour

System Load: 3.81 (1 min ago) 14.95 (5 min ago) 9.34 (15 min ago)

Configuration Files:

/etc/hosts - Count: 6

Security:

System                       Status

Gatekeeper                   Mac App Store and identified developers

System Integrity Protection  Enabled

Adware:

Launchd: ~/Library/LaunchAgents/Kuklorest.dolnwoad.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger download -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -sig YAIR_SIGNATURE -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.uadpte.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger update -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest -sig YAIR_SIGNATURE -agentUpdate 0

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.disable.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger disable -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Manroling.isengard.plist

Executable: ~/Library/Application Support/Manroling/Manroling.app/Contents/MacOS/AppNOS -trigger update -isDev 0 -installVersion 1099 -firstAppId 1434976216979282 -identity Manroling -sig NOSIGNATURE_SIGNATURE -agentUpdate 2

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.AppVemoral.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger AppRemoval -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.btvlit.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger ltvbit -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Unsigned Files:

Launchd: /Library/LaunchAgents/com.paragon-software.facebook.agent.plist

Executable: /Library/Application Support/Paragon Software/Paragon Software Facebook Agent.app/Contents/MacOS/Paragon Software Facebook Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.seagate.TBDecorator.plist

Executable: /Library/Application Support/Seagate/TBLoopDriveParams

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist

Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.Nokia.NokiaInternetModem_icera-zerocd.plist

Executable: /Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem_icera-zerocd '/Applications/Nokia/Nokia Internet Modem.app/Contents/SharedSupport/config/icera-zerocd.dat'

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist

Executable: /Library/Sierra/SierraDevSupport

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist

Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist

Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist

Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.Nokia.NokiaInternetModem_AppStart.plist

Executable: /Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem_AppStart.app/Contents/MacOS/NokiaInternetModem_AppStart -start '/Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem'

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/mg.update.plist

Executable: ~/Library/Application Support/mg/MG.app/Contents/MacOS/MG

Details: Domain name invalid - possibly adware

Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

Executable: '/Users/***/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' -F -g -n '/Users/***/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' --args -scheduled

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

39 32-bit apps

Kernel Extensions:

/Library/Extensions

[Not Loaded] CitrixGUSB.kext (1.0)

[Loaded]     ufsd_NTFS.kext (15.0.23 - SDK 10.10)

[Not Loaded] Seagate Storage Driver.kext (5.2.7 (26995) - SDK 10.4)

/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns

[Not Loaded] SeagateLeafPowSecDriver_10_4.kext (5.2.7 (26995) - SDK 10.4)

[Not Loaded] SeagateLeafPowSecDriver_10_5.kext (5.2.7 (26995) - SDK 10.5)

[Not Loaded] SeagateDriveIcons.kext (5.2.7 (26995) - SDK 10.4)

/System/Library/Extensions

[Not Loaded] SierraDIPSupport.kext (1.0.0.7)

[Not Loaded] SierraFSRSupport.kext (3.0.0.3)

[Not Loaded] SierraHSRSupport.kext (3.0.0.17 - SDK 10.6)

[Not Loaded] SierraIPDirect.kext (1.1.5)

System Launch Agents:

[Not Loaded]  8 Apple tasks

[Loaded]      180 Apple tasks

[Running]     101 Apple tasks

[Killed]      4 Apple tasks

[Other]       One Apple task

System Launch Daemons:

[Not Loaded]  37 Apple tasks

[Loaded]      185 Apple tasks

[Running]     113 Apple tasks

[Killed]      One Apple task

Launch Agents:

[Running]    com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-09-15)

[Running]    com.Nokia.NokiaInternetModem_icera-zerocd.plist (? a094f421  - installed 2010-05-06)

[Loaded]     com.paragon-software.facebook.agent.plist (? 95fb0bd4  - installed 2016-08-29)

[Loaded]     com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-07-09)

[Other]      edu.mit.appinventor.aiStarter.plist (? e33457f0  - installed 2016-09-17)

[Running]    com.sierrawireless.SwitchTool.plist (? f4fe8c02  - installed 2011-11-16)

[Running]    com.citrix.ServiceRecords.plist (? 8e6543d  - installed 2016-01-26)

[Running]    com.citrix.ReceiverHelper.plist (? 75b63b97  - installed 2016-01-26)

[Other]      com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Loaded]     com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18)

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062  - installed 2018-02-24)

[Loaded]     com.citrix.AuthManager_Mac.plist (? 1ce99fae  - installed 2016-01-26)

[Running]    com.Nokia.NokiaInternetModem_AppStart.plist (? 86da4ce  - installed 2010-05-06)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)

Launch Daemons:

[Loaded]     com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-25)

[Loaded]     com.microsoft.office.licensing.helper.plist (? 6d8cb30e  - installed 2014-02-26)

[Loaded]     com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Loaded]     com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-18)

[Running]    com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-05-31)

[Running]    com.seagate.TBDecorator.plist (? 595582c  - installed 2015-11-02)

[Loaded]     com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - installed 2018-02-18)

[Running]    com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2017-09-15)

[Loaded]     com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-07-09)

[Loaded]     com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-02-18)

[Loaded]     com.paragon-software.ntfs.loader.plist (Apple - installed 2018-05-29)

[Loaded]     com.apple.installer.osmessagetracing.plist (Apple - installed 2018-05-29)

[Loaded]     com.macpaw.CleanMyMac3.Agent.plist (? 7f4ba9a8  - installed 2015-09-26)

[Loaded]     com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Running]    com.adobe.agmservice.plist (Adobe Systems, Inc. - installed 2018-05-31)

User Launch Agents:

[Loaded]     Kuklorest.AppVemoral.plist (Adware - installed 2018-05-16)

[Loaded]     Kuklorest.btvlit.plist (Adware - installed 2018-05-16)

[Loaded]     com.adobe.AAM.Updater-1.0.plist (? 0  - installed 2018-02-24)

[Running]    com.hp.devicemonitor.plist (HP Inc. - installed 2018-07-27)

[Loaded]     com.logmein.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-03-27)

[Loaded]     Kuklorest.disable.plist (Adware - installed 2018-05-16)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)

[Running]    com.seagate.dashboard.plist (? 0  - installed 2017-07-10)

[Loaded]     com.macpaw.CleanMyMac3.Scheduler.plist (? 0  - installed 2016-01-27)

[Loaded]     mg.update.plist (? 0  - installed 2016-03-03)

[Loaded]     com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-03-27)

[Loaded]     Kuklorest.dolnwoad.plist (Adware - installed 2018-05-16)

[Running]    com.spotify.webhelper.plist (Spotify - installed 2018-07-27)

[Loaded]     Kuklorest.uadpte.plist (Adware - installed 2018-05-16)

[Loaded]     com.skype.skype.shareagent.plist (? 0  - installed 2017-11-22)

[Loaded]     Manroling.isengard.plist (Adware - installed 2018-05-08)

User Login Items:

Android File Transfer Agent Application (? - installed 2012-10-15)

(~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Backup and Sync Application (Google, Inc. - installed 2018-05-30)

(/Applications/Backup and Sync.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-07-13)

(/Applications/Adobe Acrobat Reader DC.app/Contents/Helpers/AdobeResourceSynchronizer.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-07-13)

(/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)

iTunesHelper Application (Apple - installed 2018-07-11)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

FSMenuAppLoginItemHelper SMLoginItem (Paragon Software GmbH - installed 2018-02-18)

(/Applications/Paragon NTFS for Mac 15.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app)

StartUpHelper SMLoginItem (Spotify - installed 2018-06-29)

(/Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app)

HP Device Monitor SMLoginItem (HP Inc. - installed 2017-10-24)

(/Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app)

Internet Plug-ins:

o1dbrowserplugin:  (installed 2015-12-16)

AdobeAAMDetect:  (installed 2017-08-09)

FlashPlayer-10.6:  (installed 2018-07-10)

AdobePDFViewerNPAPI:  (installed 2018-07-13)

Silverlight:  (installed 2014-08-02)

QuickTime Plugin:  (installed 2018-06-30)

Flash Player:  (installed 2018-07-10)

PepperFlashPlayer:  (installed 2018-07-10)

SharePointBrowserPlugin:  (installed 2017-09-13)

AdobePDFViewer:  (installed 2018-07-13)

googletalkbrowserplugin:  (installed 2015-12-11)

CitrixICAClientPlugIn:  (installed 2016-01-26)

DirectorShockwave:  (installed 2016-02-23)

User Internet Plug-ins:

ZoomUsPlugIn:  (installed 2018-04-02)

WebEx64:  (installed 2017-07-13)

Safari Extensions:

Pin It Button.safariextz - Pinterest, Inc. - http://www.pinterest.com/ (installed 2018-03-04)

Ebates Cash Back.safariextz - Ebates Performance Marketing, Inc. - http://ebates.com/ (installed 2018-06-30)

TD Rewards.safariextz - TD Rewards - http://tdrewards.com (installed 2018-02-28)

3rd Party Preference Panes:

Flash Player (installed 2018-06-25)

NTFS (installed 2017-09-15)

Seagate Dashboard for Mac OSX (installed 2017-10-17)

Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 500.07 GB - Disk used: 377.87 GB

Destinations:

P************************1 [Local]

Total size: 2.00 TB

Total number of backups: 3

Oldest backup: 2017-01-01 13:46:23

Last backup: 2017-01-25 18:20:07

T**********e [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 2

Oldest backup: 2018-01-13 13:39:42

Last backup: 2018-01-13 15:28:48

S***********************e [Local]

Total size: 0 B

Total number of backups: 0

Oldest backup:

Last backup:

Top Processes by CPU:

Process (count)                  Source    % of CPU  Location

AppYM                            ?              92   /Volumes/I*******r/I***********p

kernel_task                      Apple          21

WindowServer                     Apple           7

AppleSpell                       Apple           4

com.apple.WebKit.WebContent (2)  Apple           1

Top Processes by Memory:

Process (count)                  Source    RAM usage  Location

kernel_task                      Apple       4.85 GB

com.apple.WebKit.WebContent (3)  Apple        530 MB

AppYM                            ?            292 MB  /Volumes/I*******r/I***********p

mdworker (16)                    Apple        184 MB

Safari                           Apple        166 MB

Top Processes by Network Use:

Process                      Source    Input  Output  Location

com.apple.WebKit.Networking  Apple      6 MB   64 KB

mDNSResponder                Apple     44 KB   12 KB

Safari                       Apple     36 KB    2 KB

apsd                         Apple      9 KB   11 KB

netbiosd                     Apple      2 KB   802 B

Top Processes by Energy Use:

Process (count)                  Source    Energy (0-100)  Location

AppYM                            ?                     28  /Volumes/I*******r/I***********p

WindowServer                     Apple                  5

Safari                           Apple                  2

com.apple.WebKit.WebContent (3)  Apple                  2

hidd                             Apple                  1

Virtual Memory Information:

Available RAM    1023 MB

Free RAM          201 MB

Used RAM         7.00 GB

Cached files      822 MB

Swap Used         968 MB

Software Installs (past 30 days):

Name                                    Version       Install Date

Microsoft AutoUpdate                    4.1.18070503  2018-07-09

Adobe Flash Player                      30.0.0.134    2018-07-10

Adobe Pepper Flash Player               30.0.0.134    2018-07-10

iTunes                                  12.8          2018-07-11

Google Earth                            1.2.10.105    2018-07-12

Adobe Acrobat DC (18.011.20055)         18.011.20055  2018-07-13

Adobe Acrobat Reader DC (18.011.20055)  18.011.20055  2018-07-13

Gatekeeper Configuration Data           148           2018-07-16

Clean up:

/Library/LaunchAgents/edu.mit.appinventor.aiStarter.plist

/Applications/AppInventor/commands-for-Appinventor/aiStarter

Executable not found

Diagnostics Information (past 7 days):

2018-07-27 09:31:21 Last Shutdown Cause: 0 - Power loss

2018-07-25 21:44:12 Installer.app CPU

/Volumes/*/I***********p

End of report

crwdns2915684:0crwdne2915684:0:

crwdns2934245:0crwdne2934245:0 iRobot

crwdns2934249:0crwdne2934249:0:

I am having the same problem. I downloaded ETRECheck. Following is the report generated. I appreciate any guidance you can provide as to how I can remedy this problem.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-07-27 09:40:57

Download EtreCheck from https://etrecheck.com

Runtime: 4:42

Performance: Good

Problem: Other problem

Description:

Fan doesn’t stop running

Major Issues:

Anything that appears on this list needs immediate attention.

Adware - Adware detected.

Unsigned files - There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Heavy RAM usage - This machine is using a large amount of RAM.

Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

Clean up - There are orphan files that could be removed.

System modifications - There are a large number of system modifications running in the background.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.

Hardware Information:

MacBook Air (13-inch, 2013 - 2014) / MacBook Air (13-inch, Mid 2013)

MacBook Air Model: MacBookAir6,2

1 1.7 GHz Intel Core i7 (i7-4650U) CPU: 2-core

8 RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600  ok

BANK 1/DIMM0 - 4 GB DDR3 1600  ok

Battery: Health = Normal - Cycle count = 683

Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900

Thunderbolt Display 2560 x 1440

Drives:

disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 500.07 GB

disk1s1 - Macintosh HD (APFS) 500.07 GB (376.10 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 500.07 GB (21 MB used)

disk1s3 - Recovery (APFS) [Recovery] 500.07 GB (518 MB used)

disk1s4 - VM (APFS) [APFS VM] 500.07 GB (1.07 GB used)

disk2 - Disk Image 41 MB (Disk Image)

External Disk Image

Mounted Volumes:

disk1s1 - Macintosh HD 500.07 GB (122.20 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM]  500.07 GB (122.20 GB free)

APFS

Mount point: /private/var/vm

Network:

Interface usbmodem317B32: KanziSWD

Interface en7: iPad

Interface en0: Wi-Fi Scotland

802.11 a/b/g/n/ac

One IPv4 address

Interface en4: iPhone

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 118.82 GB available

System Software:

macOS High Sierra 10.13.5 (17F77)

Time since boot: Less than an hour

System Load: 3.81 (1 min ago) 14.95 (5 min ago) 9.34 (15 min ago)

Configuration Files:

/etc/hosts - Count: 6

Security:

System                       Status

Gatekeeper                   Mac App Store and identified developers

System Integrity Protection  Enabled

Adware:

Launchd: ~/Library/LaunchAgents/Kuklorest.dolnwoad.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger download -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -sig YAIR_SIGNATURE -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.uadpte.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger update -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest -sig YAIR_SIGNATURE -agentUpdate 0

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.disable.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger disable -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Manroling.isengard.plist

Executable: ~/Library/Application Support/Manroling/Manroling.app/Contents/MacOS/AppNOS -trigger update -isDev 0 -installVersion 1099 -firstAppId 1434976216979282 -identity Manroling -sig NOSIGNATURE_SIGNATURE -agentUpdate 2

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.AppVemoral.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger AppRemoval -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.btvlit.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger ltvbit -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Unsigned Files:

Launchd: /Library/LaunchAgents/com.paragon-software.facebook.agent.plist

Executable: /Library/Application Support/Paragon Software/Paragon Software Facebook Agent.app/Contents/MacOS/Paragon Software Facebook Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.seagate.TBDecorator.plist

Executable: /Library/Application Support/Seagate/TBLoopDriveParams

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist

Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.Nokia.NokiaInternetModem_icera-zerocd.plist

Executable: /Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem_icera-zerocd '/Applications/Nokia/Nokia Internet Modem.app/Contents/SharedSupport/config/icera-zerocd.dat'

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist

Executable: /Library/Sierra/SierraDevSupport

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist

Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist

Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist

Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.Nokia.NokiaInternetModem_AppStart.plist

Executable: /Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem_AppStart.app/Contents/MacOS/NokiaInternetModem_AppStart -start '/Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem'

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/mg.update.plist

Executable: ~/Library/Application Support/mg/MG.app/Contents/MacOS/MG

Details: Domain name invalid - possibly adware

Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

Executable: '/Users/***/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' -F -g -n '/Users/***/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' --args -scheduled

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

39 32-bit apps

Kernel Extensions:

/Library/Extensions

[Not Loaded] CitrixGUSB.kext (1.0)

[Loaded]     ufsd_NTFS.kext (15.0.23 - SDK 10.10)

[Not Loaded] Seagate Storage Driver.kext (5.2.7 (26995) - SDK 10.4)

/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns

[Not Loaded] SeagateLeafPowSecDriver_10_4.kext (5.2.7 (26995) - SDK 10.4)

[Not Loaded] SeagateLeafPowSecDriver_10_5.kext (5.2.7 (26995) - SDK 10.5)

[Not Loaded] SeagateDriveIcons.kext (5.2.7 (26995) - SDK 10.4)

/System/Library/Extensions

[Not Loaded] SierraDIPSupport.kext (1.0.0.7)

[Not Loaded] SierraFSRSupport.kext (3.0.0.3)

[Not Loaded] SierraHSRSupport.kext (3.0.0.17 - SDK 10.6)

[Not Loaded] SierraIPDirect.kext (1.1.5)

System Launch Agents:

[Not Loaded]  8 Apple tasks

[Loaded]      180 Apple tasks

[Running]     101 Apple tasks

[Killed]      4 Apple tasks

[Other]       One Apple task

System Launch Daemons:

[Not Loaded]  37 Apple tasks

[Loaded]      185 Apple tasks

[Running]     113 Apple tasks

[Killed]      One Apple task

Launch Agents:

[Running]    com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-09-15)

[Running]    com.Nokia.NokiaInternetModem_icera-zerocd.plist (? a094f421  - installed 2010-05-06)

[Loaded]     com.paragon-software.facebook.agent.plist (? 95fb0bd4  - installed 2016-08-29)

[Loaded]     com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-07-09)

[Other]      edu.mit.appinventor.aiStarter.plist (? e33457f0  - installed 2016-09-17)

[Running]    com.sierrawireless.SwitchTool.plist (? f4fe8c02  - installed 2011-11-16)

[Running]    com.citrix.ServiceRecords.plist (? 8e6543d  - installed 2016-01-26)

[Running]    com.citrix.ReceiverHelper.plist (? 75b63b97  - installed 2016-01-26)

[Other]      com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Loaded]     com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18)

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062  - installed 2018-02-24)

[Loaded]     com.citrix.AuthManager_Mac.plist (? 1ce99fae  - installed 2016-01-26)

[Running]    com.Nokia.NokiaInternetModem_AppStart.plist (? 86da4ce  - installed 2010-05-06)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)

Launch Daemons:

[Loaded]     com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-25)

[Loaded]     com.microsoft.office.licensing.helper.plist (? 6d8cb30e  - installed 2014-02-26)

[Loaded]     com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Loaded]     com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-18)

[Running]    com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-05-31)

[Running]    com.seagate.TBDecorator.plist (? 595582c  - installed 2015-11-02)

[Loaded]     com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - installed 2018-02-18)

[Running]    com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2017-09-15)

[Loaded]     com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-07-09)

[Loaded]     com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-02-18)

[Loaded]     com.paragon-software.ntfs.loader.plist (Apple - installed 2018-05-29)

[Loaded]     com.apple.installer.osmessagetracing.plist (Apple - installed 2018-05-29)

[Loaded]     com.macpaw.CleanMyMac3.Agent.plist (? 7f4ba9a8  - installed 2015-09-26)

[Loaded]     com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Running]    com.adobe.agmservice.plist (Adobe Systems, Inc. - installed 2018-05-31)

User Launch Agents:

[Loaded]     Kuklorest.AppVemoral.plist (Adware - installed 2018-05-16)

[Loaded]     Kuklorest.btvlit.plist (Adware - installed 2018-05-16)

[Loaded]     com.adobe.AAM.Updater-1.0.plist (? 0  - installed 2018-02-24)

[Running]    com.hp.devicemonitor.plist (HP Inc. - installed 2018-07-27)

[Loaded]     com.logmein.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-03-27)

[Loaded]     Kuklorest.disable.plist (Adware - installed 2018-05-16)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)

[Running]    com.seagate.dashboard.plist (? 0  - installed 2017-07-10)

[Loaded]     com.macpaw.CleanMyMac3.Scheduler.plist (? 0  - installed 2016-01-27)

[Loaded]     mg.update.plist (? 0  - installed 2016-03-03)

[Loaded]     com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-03-27)

[Loaded]     Kuklorest.dolnwoad.plist (Adware - installed 2018-05-16)

[Running]    com.spotify.webhelper.plist (Spotify - installed 2018-07-27)

[Loaded]     Kuklorest.uadpte.plist (Adware - installed 2018-05-16)

[Loaded]     com.skype.skype.shareagent.plist (? 0  - installed 2017-11-22)

[Loaded]     Manroling.isengard.plist (Adware - installed 2018-05-08)

User Login Items:

Android File Transfer Agent Application (? - installed 2012-10-15)

(~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Backup and Sync Application (Google, Inc. - installed 2018-05-30)

(/Applications/Backup and Sync.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-07-13)

(/Applications/Adobe Acrobat Reader DC.app/Contents/Helpers/AdobeResourceSynchronizer.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-07-13)

(/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)

iTunesHelper Application (Apple - installed 2018-07-11)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

FSMenuAppLoginItemHelper SMLoginItem (Paragon Software GmbH - installed 2018-02-18)

(/Applications/Paragon NTFS for Mac 15.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app)

StartUpHelper SMLoginItem (Spotify - installed 2018-06-29)

(/Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app)

HP Device Monitor SMLoginItem (HP Inc. - installed 2017-10-24)

(/Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app)

Internet Plug-ins:

o1dbrowserplugin:  (installed 2015-12-16)

AdobeAAMDetect:  (installed 2017-08-09)

FlashPlayer-10.6:  (installed 2018-07-10)

AdobePDFViewerNPAPI:  (installed 2018-07-13)

Silverlight:  (installed 2014-08-02)

QuickTime Plugin:  (installed 2018-06-30)

Flash Player:  (installed 2018-07-10)

PepperFlashPlayer:  (installed 2018-07-10)

SharePointBrowserPlugin:  (installed 2017-09-13)

AdobePDFViewer:  (installed 2018-07-13)

googletalkbrowserplugin:  (installed 2015-12-11)

CitrixICAClientPlugIn:  (installed 2016-01-26)

DirectorShockwave:  (installed 2016-02-23)

User Internet Plug-ins:

ZoomUsPlugIn:  (installed 2018-04-02)

WebEx64:  (installed 2017-07-13)

Safari Extensions:

Pin It Button.safariextz - Pinterest, Inc. - http://www.pinterest.com/ (installed 2018-03-04)

Ebates Cash Back.safariextz - Ebates Performance Marketing, Inc. - http://ebates.com/ (installed 2018-06-30)

TD Rewards.safariextz - TD Rewards - http://tdrewards.com (installed 2018-02-28)

3rd Party Preference Panes:

Flash Player (installed 2018-06-25)

NTFS (installed 2017-09-15)

Seagate Dashboard for Mac OSX (installed 2017-10-17)

Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 500.07 GB - Disk used: 377.87 GB

Destinations:

P************************1 [Local]

Total size: 2.00 TB

Total number of backups: 3

Oldest backup: 2017-01-01 13:46:23

Last backup: 2017-01-25 18:20:07

T**********e [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 2

Oldest backup: 2018-01-13 13:39:42

Last backup: 2018-01-13 15:28:48

S***********************e [Local]

Total size: 0 B

Total number of backups: 0

Oldest backup:

Last backup:

Top Processes by CPU:

Process (count)                  Source    % of CPU  Location

AppYM                            ?              92   /Volumes/I*******r/I***********p

kernel_task                      Apple          21

WindowServer                     Apple           7

AppleSpell                       Apple           4

com.apple.WebKit.WebContent (2)  Apple           1

Top Processes by Memory:

Process (count)                  Source    RAM usage  Location

kernel_task                      Apple       4.85 GB

com.apple.WebKit.WebContent (3)  Apple        530 MB

AppYM                            ?            292 MB  /Volumes/I*******r/I***********p

mdworker (16)                    Apple        184 MB

Safari                           Apple        166 MB

Top Processes by Network Use:

Process                      Source    Input  Output  Location

com.apple.WebKit.Networking  Apple      6 MB   64 KB

mDNSResponder                Apple     44 KB   12 KB

Safari                       Apple     36 KB    2 KB

apsd                         Apple      9 KB   11 KB

netbiosd                     Apple      2 KB   802 B

Top Processes by Energy Use:

Process (count)                  Source    Energy (0-100)  Location

AppYM                            ?                     28  /Volumes/I*******r/I***********p

WindowServer                     Apple                  5

Safari                           Apple                  2

com.apple.WebKit.WebContent (3)  Apple                  2

hidd                             Apple                  1

Virtual Memory Information:

Available RAM    1023 MB

Free RAM          201 MB

Used RAM         7.00 GB

Cached files      822 MB

Swap Used         968 MB

Software Installs (past 30 days):

Name                                    Version       Install Date

Microsoft AutoUpdate                    4.1.18070503  2018-07-09

Adobe Flash Player                      30.0.0.134    2018-07-10

Adobe Pepper Flash Player               30.0.0.134    2018-07-10

iTunes                                  12.8          2018-07-11

Google Earth                            1.2.10.105    2018-07-12

Adobe Acrobat DC (18.011.20055)         18.011.20055  2018-07-13

Adobe Acrobat Reader DC (18.011.20055)  18.011.20055  2018-07-13

Gatekeeper Configuration Data           148           2018-07-16

Clean up:

/Library/LaunchAgents/edu.mit.appinventor.aiStarter.plist

/Applications/AppInventor/commands-for-Appinventor/aiStarter

Executable not found

Diagnostics Information (past 7 days):

2018-07-27 09:31:21 Last Shutdown Cause: 0 - Power loss

2018-07-25 21:44:12 Installer.app CPU

/Volumes/*/I***********p

End of report

crwdns2915684:0crwdne2915684:0:

crwdns2934241:0crwdne2934241:0 jordan_himel

crwdns2934249:0crwdne2934249:0:

I am having the same problem. I downloaded ETRECheck. Following is the report generated. I appreciate any guidance you can provide as to how I can remedy this problem.

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-07-27 09:40:57

Download EtreCheck from https://etrecheck.com

Runtime: 4:42

Performance: Good

Problem: Other problem

Description:

Fan doesn’t stop running

Major Issues:

Anything that appears on this list needs immediate attention.

Adware - Adware detected.

Unsigned files - There are unsigned software installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Heavy RAM usage - This machine is using a large amount of RAM.

Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

Clean up - There are orphan files that could be removed.

System modifications - There are a large number of system modifications running in the background.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.

Hardware Information:

MacBook Air (13-inch, 2013 - 2014) / MacBook Air (13-inch, Mid 2013)

MacBook Air Model: MacBookAir6,2

1 1.7 GHz Intel Core i7 (i7-4650U) CPU: 2-core

8 RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1600  ok

BANK 1/DIMM0 - 4 GB DDR3 1600  ok

Battery: Health = Normal - Cycle count = 683

Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900

Thunderbolt Display 2560 x 1440

Drives:

disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 500.07 GB

disk1s1 - Macintosh HD (APFS) 500.07 GB (376.10 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 500.07 GB (21 MB used)

disk1s3 - Recovery (APFS) [Recovery] 500.07 GB (518 MB used)

disk1s4 - VM (APFS) [APFS VM] 500.07 GB (1.07 GB used)

disk2 - Disk Image 41 MB (Disk Image)

External Disk Image

Mounted Volumes:

disk1s1 - Macintosh HD 500.07 GB (122.20 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM]  500.07 GB (122.20 GB free)

APFS

Mount point: /private/var/vm

Network:

Interface usbmodem317B32: KanziSWD

Interface en7: iPad

Interface en0: Wi-Fi Scotland

802.11 a/b/g/n/ac

One IPv4 address

Interface en4: iPhone

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 118.82 GB available

System Software:

macOS High Sierra 10.13.5 (17F77)

Time since boot: Less than an hour

System Load: 3.81 (1 min ago) 14.95 (5 min ago) 9.34 (15 min ago)

Configuration Files:

/etc/hosts - Count: 6

Security:

System                       Status

Gatekeeper                   Mac App Store and identified developers

System Integrity Protection  Enabled

Adware:

Launchd: ~/Library/LaunchAgents/Kuklorest.dolnwoad.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger download -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -sig YAIR_SIGNATURE -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.uadpte.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger update -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest -sig YAIR_SIGNATURE -agentUpdate 0

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.disable.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger disable -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Manroling.isengard.plist

Executable: ~/Library/Application Support/Manroling/Manroling.app/Contents/MacOS/AppNOS -trigger update -isDev 0 -installVersion 1099 -firstAppId 1434976216979282 -identity Manroling -sig NOSIGNATURE_SIGNATURE -agentUpdate 2

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.AppVemoral.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger AppRemoval -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/Kuklorest.btvlit.plist

Executable: ~/Library/Application Support/Kuklorest/Kuklorest.app/Contents/MacOS/AppYM -trigger ltvbit -isDev 0 -installVersion 1175 -firstAppId 1438184180372129 -identity Kuklorest

Reason: Adware name match

Unsigned Files:

Launchd: /Library/LaunchAgents/com.paragon-software.facebook.agent.plist

Executable: /Library/Application Support/Paragon Software/Paragon Software Facebook Agent.app/Contents/MacOS/Paragon Software Facebook Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.seagate.TBDecorator.plist

Executable: /Library/Application Support/Seagate/TBLoopDriveParams

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist

Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.Nokia.NokiaInternetModem_icera-zerocd.plist

Executable: /Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem_icera-zerocd '/Applications/Nokia/Nokia Internet Modem.app/Contents/SharedSupport/config/icera-zerocd.dat'

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist

Executable: /Library/Sierra/SierraDevSupport

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist

Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist

Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist

Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.Nokia.NokiaInternetModem_AppStart.plist

Executable: /Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem_AppStart.app/Contents/MacOS/NokiaInternetModem_AppStart -start '/Applications/Nokia/Nokia Internet Modem.app/Contents/MacOS/NokiaInternetModem'

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/mg.update.plist

Executable: ~/Library/Application Support/mg/MG.app/Contents/MacOS/MG

Details: Domain name invalid - possibly adware

Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

Executable: '/Users/***/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' -F -g -n '/Users/***/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' --args -scheduled

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

39 32-bit apps

Kernel Extensions:

/Library/Extensions

[Not Loaded] CitrixGUSB.kext (1.0)

[Loaded]     ufsd_NTFS.kext (15.0.23 - SDK 10.10)

[Not Loaded] Seagate Storage Driver.kext (5.2.7 (26995) - SDK 10.4)

/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns

[Not Loaded] SeagateLeafPowSecDriver_10_4.kext (5.2.7 (26995) - SDK 10.4)

[Not Loaded] SeagateLeafPowSecDriver_10_5.kext (5.2.7 (26995) - SDK 10.5)

[Not Loaded] SeagateDriveIcons.kext (5.2.7 (26995) - SDK 10.4)

/System/Library/Extensions

[Not Loaded] SierraDIPSupport.kext (1.0.0.7)

[Not Loaded] SierraFSRSupport.kext (3.0.0.3)

[Not Loaded] SierraHSRSupport.kext (3.0.0.17 - SDK 10.6)

[Not Loaded] SierraIPDirect.kext (1.1.5)

System Launch Agents:

[Not Loaded]  8 Apple tasks

[Loaded]      180 Apple tasks

[Running]     101 Apple tasks

[Killed]      4 Apple tasks

[Other]       One Apple task

System Launch Daemons:

[Not Loaded]  37 Apple tasks

[Loaded]      185 Apple tasks

[Running]     113 Apple tasks

[Killed]      One Apple task

Launch Agents:

[Running]    com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-09-15)

[Running]    com.Nokia.NokiaInternetModem_icera-zerocd.plist (? a094f421  - installed 2010-05-06)

[Loaded]     com.paragon-software.facebook.agent.plist (? 95fb0bd4  - installed 2016-08-29)

[Loaded]     com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-07-09)

[Other]      edu.mit.appinventor.aiStarter.plist (? e33457f0  - installed 2016-09-17)

[Running]    com.sierrawireless.SwitchTool.plist (? f4fe8c02  - installed 2011-11-16)

[Running]    com.citrix.ServiceRecords.plist (? 8e6543d  - installed 2016-01-26)

[Running]    com.citrix.ReceiverHelper.plist (? 75b63b97  - installed 2016-01-26)

[Other]      com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Loaded]     com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18)

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062  - installed 2018-02-24)

[Loaded]     com.citrix.AuthManager_Mac.plist (? 1ce99fae  - installed 2016-01-26)

[Running]    com.Nokia.NokiaInternetModem_AppStart.plist (? 86da4ce  - installed 2010-05-06)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)

Launch Daemons:

[Loaded]     com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-06-25)

[Loaded]     com.microsoft.office.licensing.helper.plist (? 6d8cb30e  - installed 2014-02-26)

[Loaded]     com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Loaded]     com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-18)

[Running]    com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-05-31)

[Running]    com.seagate.TBDecorator.plist (? 595582c  - installed 2015-11-02)

[Loaded]     com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - installed 2018-02-18)

[Running]    com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2017-09-15)

[Loaded]     com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-07-09)

[Loaded]     com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-02-18)

[Loaded]     com.paragon-software.ntfs.loader.plist (Apple - installed 2018-05-29)

[Loaded]     com.apple.installer.osmessagetracing.plist (Apple - installed 2018-05-29)

[Loaded]     com.macpaw.CleanMyMac3.Agent.plist (? 7f4ba9a8  - installed 2015-09-26)

[Loaded]     com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15)

[Running]    com.adobe.agmservice.plist (Adobe Systems, Inc. - installed 2018-05-31)

User Launch Agents:

[Loaded]     Kuklorest.AppVemoral.plist (Adware - installed 2018-05-16)

[Loaded]     Kuklorest.btvlit.plist (Adware - installed 2018-05-16)

[Loaded]     com.adobe.AAM.Updater-1.0.plist (? 0  - installed 2018-02-24)

[Running]    com.hp.devicemonitor.plist (HP Inc. - installed 2018-07-27)

[Loaded]     com.logmein.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-03-27)

[Loaded]     Kuklorest.disable.plist (Adware - installed 2018-05-16)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-31)

[Running]    com.seagate.dashboard.plist (? 0  - installed 2017-07-10)

[Loaded]     com.macpaw.CleanMyMac3.Scheduler.plist (? 0  - installed 2016-01-27)

[Loaded]     mg.update.plist (? 0  - installed 2016-03-03)

[Loaded]     com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-03-27)

[Loaded]     Kuklorest.dolnwoad.plist (Adware - installed 2018-05-16)

[Running]    com.spotify.webhelper.plist (Spotify - installed 2018-07-27)

[Loaded]     Kuklorest.uadpte.plist (Adware - installed 2018-05-16)

[Loaded]     com.skype.skype.shareagent.plist (? 0  - installed 2017-11-22)

[Loaded]     Manroling.isengard.plist (Adware - installed 2018-05-08)

User Login Items:

Android File Transfer Agent Application (? - installed 2012-10-15)

(~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Backup and Sync Application (Google, Inc. - installed 2018-05-30)

(/Applications/Backup and Sync.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-07-13)

(/Applications/Adobe Acrobat Reader DC.app/Contents/Helpers/AdobeResourceSynchronizer.app)

AdobeResourceSynchronizer Application (Adobe Systems, Inc. - installed 2018-07-13)

(/Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app)

iTunesHelper Application (Apple - installed 2018-07-11)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

FSMenuAppLoginItemHelper SMLoginItem (Paragon Software GmbH - installed 2018-02-18)

(/Applications/Paragon NTFS for Mac 15.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app)

StartUpHelper SMLoginItem (Spotify - installed 2018-06-29)

(/Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app)

HP Device Monitor SMLoginItem (HP Inc. - installed 2017-10-24)

(/Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app)

Internet Plug-ins:

o1dbrowserplugin:  (installed 2015-12-16)

AdobeAAMDetect:  (installed 2017-08-09)

FlashPlayer-10.6:  (installed 2018-07-10)

AdobePDFViewerNPAPI:  (installed 2018-07-13)

Silverlight:  (installed 2014-08-02)

QuickTime Plugin:  (installed 2018-06-30)

Flash Player:  (installed 2018-07-10)

PepperFlashPlayer:  (installed 2018-07-10)

SharePointBrowserPlugin:  (installed 2017-09-13)

AdobePDFViewer:  (installed 2018-07-13)

googletalkbrowserplugin:  (installed 2015-12-11)

CitrixICAClientPlugIn:  (installed 2016-01-26)

DirectorShockwave:  (installed 2016-02-23)

User Internet Plug-ins:

ZoomUsPlugIn:  (installed 2018-04-02)

WebEx64:  (installed 2017-07-13)

Safari Extensions:

Pin It Button.safariextz - Pinterest, Inc. - http://www.pinterest.com/ (installed 2018-03-04)

Ebates Cash Back.safariextz - Ebates Performance Marketing, Inc. - http://ebates.com/ (installed 2018-06-30)

TD Rewards.safariextz - TD Rewards - http://tdrewards.com (installed 2018-02-28)

3rd Party Preference Panes:

Flash Player (installed 2018-06-25)

NTFS (installed 2017-09-15)

Seagate Dashboard for Mac OSX (installed 2017-10-17)

Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 500.07 GB - Disk used: 377.87 GB

Destinations:

P************************1 [Local]

Total size: 2.00 TB

Total number of backups: 3

Oldest backup: 2017-01-01 13:46:23

Last backup: 2017-01-25 18:20:07

T**********e [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 2

Oldest backup: 2018-01-13 13:39:42

Last backup: 2018-01-13 15:28:48

S***********************e [Local]

Total size: 0 B

Total number of backups: 0

Oldest backup:

Last backup:

Top Processes by CPU:

Process (count)                  Source    % of CPU  Location

AppYM                            ?              92   /Volumes/I*******r/I***********p

kernel_task                      Apple          21

WindowServer                     Apple           7

AppleSpell                       Apple           4

com.apple.WebKit.WebContent (2)  Apple           1

Top Processes by Memory:

Process (count)                  Source    RAM usage  Location

kernel_task                      Apple       4.85 GB

com.apple.WebKit.WebContent (3)  Apple        530 MB

AppYM                            ?            292 MB  /Volumes/I*******r/I***********p

mdworker (16)                    Apple        184 MB

Safari                           Apple        166 MB

Top Processes by Network Use:

Process                      Source    Input  Output  Location

com.apple.WebKit.Networking  Apple      6 MB   64 KB

mDNSResponder                Apple     44 KB   12 KB

Safari                       Apple     36 KB    2 KB

apsd                         Apple      9 KB   11 KB

netbiosd                     Apple      2 KB   802 B

Top Processes by Energy Use:

Process (count)                  Source    Energy (0-100)  Location

AppYM                            ?                     28  /Volumes/I*******r/I***********p

WindowServer                     Apple                  5

Safari                           Apple                  2

com.apple.WebKit.WebContent (3)  Apple                  2

hidd                             Apple                  1

Virtual Memory Information:

Available RAM    1023 MB

Free RAM          201 MB

Used RAM         7.00 GB

Cached files      822 MB

Swap Used         968 MB

Software Installs (past 30 days):

Name                                    Version       Install Date

Microsoft AutoUpdate                    4.1.18070503  2018-07-09

Adobe Flash Player                      30.0.0.134    2018-07-10

Adobe Pepper Flash Player               30.0.0.134    2018-07-10

iTunes                                  12.8          2018-07-11

Google Earth                            1.2.10.105    2018-07-12

Adobe Acrobat DC (18.011.20055)         18.011.20055  2018-07-13

Adobe Acrobat Reader DC (18.011.20055)  18.011.20055  2018-07-13

Gatekeeper Configuration Data           148           2018-07-16

Clean up:

/Library/LaunchAgents/edu.mit.appinventor.aiStarter.plist

/Applications/AppInventor/commands-for-Appinventor/aiStarter

Executable not found

Diagnostics Information (past 7 days):

2018-07-27 09:31:21 Last Shutdown Cause: 0 - Power loss

2018-07-25 21:44:12 Installer.app CPU

/Volumes/*/I***********p

End of report

crwdns2915684:0crwdne2915684:0:

open