Forums
New posts
Articles
Product Reviews
Policies
FAQ
Log in
Register
What's new
Search
Search
Search titles only
By:
New posts
Menu
Log in
Register
Install the app
Install
Forums
Apple Computing Products:
macOS - Operating System
Tracking network traffic
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Reply to thread
Message
<blockquote data-quote="peter21" data-source="post: 1806055" data-attributes="member: 401040"><p>Thank you for your help. I have checked login items...cannot see anything to do with aphrodite there. I have attached etrecheck report file.</p><p></p><p>EtreCheck version: 5.0.2 (5015)</p><p>Report generated: 2018-11-18 07:49:55</p><p>Download EtreCheck from <a href="https://etrecheck.com" target="_blank">https://etrecheck.com</a></p><p>Runtime: 3:26</p><p>Performance: Excellent</p><p>Sandbox: Enabled</p><p>Full drive access: Disabled</p><p></p><p>Problem: Other problem</p><p>Description: </p><p>Large data uploads and downloads are happening..I am not sure why.</p><p></p><p>Major Issues:</p><p>Anything that appears on this list needs immediate attention. </p><p></p><p><strong>Runaway process - A process is using a large percentage of your CPU.</strong></p><p><strong>Adware - Adware detected.</strong></p><p>Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.</p><p>More than one antivirus app - This machine has multiple antivirus apps installed.</p><p></p><p>Minor Issues:</p><p>These issues do not need immediate attention but they may indicate future problems. </p><p></p><p>32-bit Apps - This machine has 32-bits apps that may have problems in the future.</p><p></p><p>Hardware Information:</p><p>MacBook Pro (Retina, 13-inch, Early 2015)</p><p>MacBook Pro Model: MacBookPro12,1</p><p>1 2,9 GHz Intel Core i5 (i5-5287U) CPU: 2-core</p><p>8 GB RAM - Not upgradeable</p><p>BANK 0/DIMM0 - 4 GB DDR3 1867 ok</p><p>BANK 1/DIMM0 - 4 GB DDR3 1867 ok</p><p>Battery: Health = Normal - Cycle count = 197</p><p></p><p>Video Information:</p><p>Intel Iris Graphics 6100 - VRAM: 1536 MB</p><p>Color LCD 2560 x 1600</p><p></p><p>Drives:</p><p>disk0 - APPLE SSD SM0512G 500.28 GB (Solid State - TRIM: Yes)</p><p>Internal PCI 5.0 GT/s x4 Serial ATA</p><p>disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB</p><p>disk0s2 [APFS Container] 500.07 GB</p><p>disk1 [APFS Virtual drive] 500.07 GB (Shared by 4 volumes)</p><p>disk1s1 - Macintosh HD (APFS) (Shared - 426.57 GB used)</p><p>disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)</p><p>disk1s3 - Recovery (APFS) [Recovery] (Shared)</p><p>disk1s4 - VM (APFS) [APFS VM] (Shared - 3.22 GB used)</p><p></p><p>Mounted Volumes:</p><p>disk1s1 - Macintosh HD 500.07 GB (69.56 GB free)</p><p>APFS</p><p>Mount point: /</p><p></p><p>disk1s4 - VM [APFS VM] (Shared - 3.22 GB used)</p><p>APFS</p><p>Mount point: /private/var/vm</p><p></p><p>Network:</p><p>Interface usbmodem1411: DJI CONTROLLER</p><p>Proxies: SOCKS</p><p>Interface en5: Thunderbolt Ethernet</p><p>Proxies: SOCKS</p><p>Interface en6: iPad</p><p>Proxies: SOCKS</p><p>Interface en0: Wi-Fi</p><p>802.11 a/b/g/n/ac</p><p>Proxies: SOCKS</p><p>Interface en3: Bluetooth PAN</p><p>Proxies: SOCKS</p><p>Interface bridge0: Thunderbolt Bridge</p><p>Proxies: SOCKS</p><p></p><p>System Software:</p><p>macOS Mojave 10.14.1 (18B75) </p><p>Time since boot: About 11 hours</p><p></p><p>Security:</p><p></p><p></p><p><strong>Adware:</strong></p><p><strong>Launchd: ~/Library/LaunchAgents/com.AphroditeResults.plist</strong></p><p><strong>Reason: Adware pattern match</strong></p><p><strong>Executable: ~/Library/Application Support/com.AphroditeResults/AphroditeResults r</strong></p><p><strong>Launchd: ~/Library/LaunchAgents/com.spigot.ApplicationManager.plist</strong></p><p><strong>Reason: Adware name match</strong></p><p><strong>Executable: ~/Library/Application Support/Spigot/ApplicationManager --protect</strong></p><p><strong>Launchd: /Library/LaunchDaemons/com.AphroditeResultsDaemon.plist</strong></p><p><strong>Reason: Adware pattern match</strong></p><p><strong>Executable: /Library/Application Support/com.AphroditeResultsDaemon/AphroditeResults r</strong></p><p></p><p>Unsigned Files:</p><p>Launchd: /Library/LaunchDaemons/ch.tripmode.nke.TripMode.plist</p><p>Executable: /Library/Application Support/TripMode/TripModeNKE.kext/Contents/Resources/loadkext.sh '/Library/Application Support/TripMode/TripModeNKE.kext'</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: ~/Library/LaunchAgents/com.dropbox.DropboxMacUpdate.agent.plist</p><p>Executable: ~/Library/Dropbox/DropboxMacUpdate.app/Contents/MacOS/DropboxMacUpdate -check periodic</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac4.Updater.plist</p><p>Executable: ~/Library/Application Support/CleanMyMac X/CleanMyMac X Updater.app/Contents/MacOS/CleanMyMac X Updater</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist</p><p>Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist</p><p>Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac4.HealthMonitor.plist</p><p>Executable: ~/Library/Application Support/CleanMyMac X/CleanMyMac X HealthMonitor.app/Contents/MacOS/CleanMyMac X HealthMonitor</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist</p><p>Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist</p><p>Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: ~/Library/LaunchAgents/com.amazon.music.plist</p><p>Executable: /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist</p><p>Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist</p><p>Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: ~/Library/LaunchAgents/com.akamai.single-user-client.plist</p><p>Executable: ~/Applications/Akamai/netsession_mac</p><p>Details: Exact match found in the whitelist - probably OK</p><p>Launchd: /Library/LaunchDaemons/com.AphroditeResultsP.plist</p><p>Executable: /var/root/.AphroditeResults/AphroditeResultsDaemon</p><p>Details: Restrictive app permissions - possibly adware</p><p>Launchd: /Library/LaunchAgents/com.dymo.dls.webservice.plist</p><p>Executable: /Library/Frameworks/DYMO/SDK/DYMO.DLS.Printing.Host.app/Contents/MacOS/DYMO.DLS.Printing.Host</p><p>Details: Exact match found in the whitelist - probably OK</p><p></p><p>32-bit Applications:</p><p>38 32-bit apps</p><p></p><p>Kernel Extensions:</p><p>/Applications/TripMode.app</p><p>TripModeNKE.kext (Ludovic LEGER, 2.0.2 - SDK 10.10)</p><p></p><p>/Applications/duet.app</p><p>DuetDisplay.kext (Rahul Dewan, 2.1.4 - SDK 10.9)</p><p></p><p>/System/Library/Extensions</p><p>DymoUsbPrinterClassDriver.kext (1.1 - SDK 10.11)</p><p>HoRNDIS.kext (8 - SDK 10.6)</p><p></p><p>System Launch Agents:</p><p></p><p></p><p>System Launch Daemons:</p><p></p><p></p><p>Launch Agents:</p><p></p><p></p><p>Launch Daemons:</p><p></p><p></p><p>User Launch Agents:</p><p></p><p></p><p>User Login Items:</p><p>Android File Transfer Agent.app (? - installed 2017-10-28)</p><p>(/private/var/folders/dq/zjzsdydj3cvcmh34blfhnscm0000gn/T/AppTranslocation/44CB2FBA-CF95-4736-B300-301A55906FDC/d/Android File Transfer Agent.app)</p><p>Backup and Sync.app (Google, Inc. - installed 2018-10-05)</p><p>(/Applications/Backup and Sync.app)</p><p>Bandwidth+.app (App Store - installed 2018-04-11)</p><p>(/Applications/Bandwidth+.app)</p><p>Dropbox.app (Dropbox, Inc. - installed 2018-11-08)</p><p>(/Applications/Dropbox.app)</p><p>Keenai.app (Eye-Fi, Inc - installed 2017-05-22)</p><p>(/Applications/Keenai.app)</p><p>TripMode.app (Ludovic LEGER - installed 2018-10-30)</p><p>(/Applications/TripMode.app)</p><p>WeatherCat.app (Stuart Ball - installed 2018-10-25)</p><p>(/Applications/WeatherCat.app)</p><p>duet.app (Rahul Dewan - installed 2018-07-19)</p><p>(/Applications/duet.app)</p><p></p><p>Internet Plug-ins:</p><p>FlashPlayer-10.6: 31.0.0.148 (installed 2018-11-14)</p><p>QuickTime Plugin: 7.7.3 (installed 2018-11-11)</p><p>AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-09-20)</p><p>AdobePDFViewer: 19.008.20071 (installed 2018-09-20)</p><p>DYMO NPAPI Addin: 1.0 (installed 2017-01-28)</p><p>Flash Player: 31.0.0.148 (installed 2018-11-14)</p><p>SharePointBrowserPlugin: 14.7.7 (installed 2017-10-18)</p><p>PepperFlashPlayer: 31.0.0.148 (installed 2018-11-14)</p><p>DYMO Safari Addin: (installed 2017-01-28)</p><p>Silverlight: 5.1.41212.0 (installed 2016-01-28)</p><p>JavaAppletPlugin: Java 8 Update 191 build 12 (installed 2018-11-10)</p><p></p><p>3rd Party Preference Panes:</p><p>Flash Player (installed 2018-10-30)</p><p>Java (installed 2018-11-10)</p><p>Trusteer Endpoint Protection (installed 2018-03-20)</p><p></p><p>Time Machine:</p><p>Time Machine information not available without Full Drive Access.</p><p></p><p>Performance:</p><p>System Load: 7.48 (1 min ago) 5.56 (5 min ago) 3.33 (15 min ago)</p><p>Nominal I/O speed: 2.45 MB/s</p><p>File system: 63.17 seconds</p><p>Write speed: 361 MB/s</p><p>Read speed: 1317 MB/s</p><p></p><p>CPU Usage:</p><p></p><p></p><p>Top Processes by CPU:</p><p></p><p></p><p>Top Processes by Memory:</p><p></p><p></p><p>Top Processes by Network Use:</p><p></p><p></p><p>Virtual Memory Information:</p><p></p><p></p><p>Software Installs (past 30 days):</p><p></p><p></p><p>Diagnostics Information (past 7 days):</p><p>Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.</p><p></p><p>End of report</p></blockquote><p></p>
[QUOTE="peter21, post: 1806055, member: 401040"] Thank you for your help. I have checked login items...cannot see anything to do with aphrodite there. I have attached etrecheck report file. EtreCheck version: 5.0.2 (5015) Report generated: 2018-11-18 07:49:55 Download EtreCheck from [url]https://etrecheck.com[/url] Runtime: 3:26 Performance: Excellent Sandbox: Enabled Full drive access: Disabled Problem: Other problem Description: Large data uploads and downloads are happening..I am not sure why. Major Issues: Anything that appears on this list needs immediate attention. [B]Runaway process - A process is using a large percentage of your CPU. Adware - Adware detected.[/B] Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. More than one antivirus app - This machine has multiple antivirus apps installed. Minor Issues: These issues do not need immediate attention but they may indicate future problems. 32-bit Apps - This machine has 32-bits apps that may have problems in the future. Hardware Information: MacBook Pro (Retina, 13-inch, Early 2015) MacBook Pro Model: MacBookPro12,1 1 2,9 GHz Intel Core i5 (i5-5287U) CPU: 2-core 8 GB RAM - Not upgradeable BANK 0/DIMM0 - 4 GB DDR3 1867 ok BANK 1/DIMM0 - 4 GB DDR3 1867 ok Battery: Health = Normal - Cycle count = 197 Video Information: Intel Iris Graphics 6100 - VRAM: 1536 MB Color LCD 2560 x 1600 Drives: disk0 - APPLE SSD SM0512G 500.28 GB (Solid State - TRIM: Yes) Internal PCI 5.0 GT/s x4 Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Container] 500.07 GB disk1 [APFS Virtual drive] 500.07 GB (Shared by 4 volumes) disk1s1 - Macintosh HD (APFS) (Shared - 426.57 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared) disk1s3 - Recovery (APFS) [Recovery] (Shared) disk1s4 - VM (APFS) [APFS VM] (Shared - 3.22 GB used) Mounted Volumes: disk1s1 - Macintosh HD 500.07 GB (69.56 GB free) APFS Mount point: / disk1s4 - VM [APFS VM] (Shared - 3.22 GB used) APFS Mount point: /private/var/vm Network: Interface usbmodem1411: DJI CONTROLLER Proxies: SOCKS Interface en5: Thunderbolt Ethernet Proxies: SOCKS Interface en6: iPad Proxies: SOCKS Interface en0: Wi-Fi 802.11 a/b/g/n/ac Proxies: SOCKS Interface en3: Bluetooth PAN Proxies: SOCKS Interface bridge0: Thunderbolt Bridge Proxies: SOCKS System Software: macOS Mojave 10.14.1 (18B75) Time since boot: About 11 hours Security: [B]Adware: Launchd: ~/Library/LaunchAgents/com.AphroditeResults.plist Reason: Adware pattern match Executable: ~/Library/Application Support/com.AphroditeResults/AphroditeResults r Launchd: ~/Library/LaunchAgents/com.spigot.ApplicationManager.plist Reason: Adware name match Executable: ~/Library/Application Support/Spigot/ApplicationManager --protect Launchd: /Library/LaunchDaemons/com.AphroditeResultsDaemon.plist Reason: Adware pattern match Executable: /Library/Application Support/com.AphroditeResultsDaemon/AphroditeResults r[/B] Unsigned Files: Launchd: /Library/LaunchDaemons/ch.tripmode.nke.TripMode.plist Executable: /Library/Application Support/TripMode/TripModeNKE.kext/Contents/Resources/loadkext.sh '/Library/Application Support/TripMode/TripModeNKE.kext' Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.dropbox.DropboxMacUpdate.agent.plist Executable: ~/Library/Dropbox/DropboxMacUpdate.app/Contents/MacOS/DropboxMacUpdate -check periodic Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac4.Updater.plist Executable: ~/Library/Application Support/CleanMyMac X/CleanMyMac X Updater.app/Contents/MacOS/CleanMyMac X Updater Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac4.HealthMonitor.plist Executable: ~/Library/Application Support/CleanMyMac X/CleanMyMac X HealthMonitor.app/Contents/MacOS/CleanMyMac X HealthMonitor Details: Exact match found in the whitelist - probably OK Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.amazon.music.plist Executable: /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper Details: Exact match found in the whitelist - probably OK Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.akamai.single-user-client.plist Executable: ~/Applications/Akamai/netsession_mac Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.AphroditeResultsP.plist Executable: /var/root/.AphroditeResults/AphroditeResultsDaemon Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchAgents/com.dymo.dls.webservice.plist Executable: /Library/Frameworks/DYMO/SDK/DYMO.DLS.Printing.Host.app/Contents/MacOS/DYMO.DLS.Printing.Host Details: Exact match found in the whitelist - probably OK 32-bit Applications: 38 32-bit apps Kernel Extensions: /Applications/TripMode.app TripModeNKE.kext (Ludovic LEGER, 2.0.2 - SDK 10.10) /Applications/duet.app DuetDisplay.kext (Rahul Dewan, 2.1.4 - SDK 10.9) /System/Library/Extensions DymoUsbPrinterClassDriver.kext (1.1 - SDK 10.11) HoRNDIS.kext (8 - SDK 10.6) System Launch Agents: System Launch Daemons: Launch Agents: Launch Daemons: User Launch Agents: User Login Items: Android File Transfer Agent.app (? - installed 2017-10-28) (/private/var/folders/dq/zjzsdydj3cvcmh34blfhnscm0000gn/T/AppTranslocation/44CB2FBA-CF95-4736-B300-301A55906FDC/d/Android File Transfer Agent.app) Backup and Sync.app (Google, Inc. - installed 2018-10-05) (/Applications/Backup and Sync.app) Bandwidth+.app (App Store - installed 2018-04-11) (/Applications/Bandwidth+.app) Dropbox.app (Dropbox, Inc. - installed 2018-11-08) (/Applications/Dropbox.app) Keenai.app (Eye-Fi, Inc - installed 2017-05-22) (/Applications/Keenai.app) TripMode.app (Ludovic LEGER - installed 2018-10-30) (/Applications/TripMode.app) WeatherCat.app (Stuart Ball - installed 2018-10-25) (/Applications/WeatherCat.app) duet.app (Rahul Dewan - installed 2018-07-19) (/Applications/duet.app) Internet Plug-ins: FlashPlayer-10.6: 31.0.0.148 (installed 2018-11-14) QuickTime Plugin: 7.7.3 (installed 2018-11-11) AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-09-20) AdobePDFViewer: 19.008.20071 (installed 2018-09-20) DYMO NPAPI Addin: 1.0 (installed 2017-01-28) Flash Player: 31.0.0.148 (installed 2018-11-14) SharePointBrowserPlugin: 14.7.7 (installed 2017-10-18) PepperFlashPlayer: 31.0.0.148 (installed 2018-11-14) DYMO Safari Addin: (installed 2017-01-28) Silverlight: 5.1.41212.0 (installed 2016-01-28) JavaAppletPlugin: Java 8 Update 191 build 12 (installed 2018-11-10) 3rd Party Preference Panes: Flash Player (installed 2018-10-30) Java (installed 2018-11-10) Trusteer Endpoint Protection (installed 2018-03-20) Time Machine: Time Machine information not available without Full Drive Access. Performance: System Load: 7.48 (1 min ago) 5.56 (5 min ago) 3.33 (15 min ago) Nominal I/O speed: 2.45 MB/s File system: 63.17 seconds Write speed: 361 MB/s Read speed: 1317 MB/s CPU Usage: Top Processes by CPU: Top Processes by Memory: Top Processes by Network Use: Virtual Memory Information: Software Installs (past 30 days): Diagnostics Information (past 7 days): Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access. End of report [/QUOTE]
Verification
Name this item 🌈
Post reply
Forums
Apple Computing Products:
macOS - Operating System
Tracking network traffic
Top
