I think my Pro has a bespoke key logger/spyware installed

Hi,
I think my macbook has either a key logger and/or some form of spyware installed. I doubt it will be an off the shelf application - the person suspected is a developer and has a high level of skills. I am okay using terminal with instructions, and have followed the steps to look for the known programmes. Can anyone suggest how I can look to determine if there is some form of bespoke programme installed?
Many thanks

This would be highly unlikely, but given your concern see the following:
Helpful Links Regarding Malware Protection
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
          Mac OS X Snow Leopard and malware detection
          OS X Lion- Protect your Mac from malware
          OS X Mountain Lion- Protect your Mac from malware
          About file quarantine in OS X
If you require anti-virus protection I recommend using VirusBarrier Express 1.1.6 or Dr.Web Light both from the App Store. They're both free, and since they're from the App Store, they won't destabilize the system. (Thank you to Thomas Reed for these recommendations.)

Similar Messages

New mac pro has not enough disk space to install from old mac pro

So, I bought the new shiny black cylinder Mac pro, but it comes with just 250gb flash memory, not enough to install the 600gb+ I have on my older MacPro hard drive. I backed up with time machine to my G-RAID, but during install it could not find the backup. (At least I think it couldn't. It said it found one on the G-Raid but that it was last backed up in 2010!) So I attached my older MacPro in terminal mode and tried to install from there. Not enough space to install my User folder. So now I am installing Applications only. This is going to be a major pain in the neck, I fear. Why did Apple do this to us? Don't they realize there have been folks like me who have bought just about every machine since the Apple II+ and have accumulated a ton of data? Sure, a 250gb flash memory drive is going to be faster and easier for Apple to manage, but why not give us a way to downsize without having to manually figure out what to do with our iphoto and macmail libraries? Has anyone else gone through this and come up with a good solution?

OSX Tips: Setting-up a new Mac from an old one or its Backups
Transferring Home Folders not on a Startup volume

My MacBook Pro has been very slow after I install Mavericks OS

Hardware Information:
          MacBook Pro (13-inch, Mid 2010)
          MacBook Pro - model: MacBookPro7,1
          1 2.4 GHz Intel Core 2 Duo CPU: 2 cores
          4 GB RAM
Video Information:
          NVIDIA GeForce 320M - VRAM: 256 MB
Audio Plug-ins:
          BluetoothAudioPlugIn: Version: 1.0
          AirPlay: Version: 1.9
          AppleAVBAudio: Version: 2.0.0
          iSightAudio: Version: 7.7.3
System Software:
          OS X 10.9 (13A603) - Uptime: 0 days 0:25:46
Disk Information:
          Hitachi HTS545032B9SA02 disk0 : (320,07 GB)
                    EFI (disk0s1) <not mounted>: 209,7 MB
                    Macintosh HD (disk0s2) /: 319,21 GB (132,44 GB free)
                    Recovery HD (disk0s3) <not mounted>: 650 MB
          MATSHITADVD-R   UJ-898
USB Information:
          Apple Inc. Built-in iSight
          Apple Internal Memory Card Reader
          Apple Inc. BRCM2046 Hub
                    Apple Inc. Bluetooth USB Host Controller
          Apple Computer, Inc. IR Receiver
          Apple Inc. Apple Internal Keyboard / Trackpad
FireWire Information:
Thunderbolt Information:
Kernel Extensions:
          net.kromtech.kext.Firewall          (2.3.5)
Problem System Launch Daemons:
Problem System Launch Agents:
Launch Daemons:
          [loaded] com.adobe.fpsaud.plist
          [loaded] com.google.keystone.daemon.plist
          [loaded] com.microsoft.office.licensing.helper.plist
          [loaded] com.rim.BBDaemon.plist
          [failed] com.trusteer.rooks.rooksd.plist
          [loaded] com.zeobit.MacKeeper.AntiVirus.plist
Launch Agents:
          [loaded] com.divx.dms.agent.plist
          [loaded] com.divx.update.agent.plist
          [loaded] com.google.keystone.agent.plist
          [loaded] com.hp.help.tocgenerator.plist
          [loaded] com.rim.BBLaunchAgent.plist
          [not loaded] com.trusteer.rapport.rapportd.plist
User Launch Agents:
          [failed] com.apple.CSConfigDotMacCert-[redacted]@me.com-SharedServices.Agent.plist
          [failed] com.facebook.videochat.[redacted].plist
          [loaded] com.microsoft.LaunchAgent.SyncServicesAgent.plist
          [loaded] com.zeobit.MacKeeper.Helper.plist
User Login Items:
          CrossOver CD Helper
          iTunesHelper
          Microsoft Database Daemon
          TomTomHOMERunner
3rd Party Preference Panes:
          Flash Player
          Java
          MacFUSE
          Perian
Internet Plug-ins:
          Default Browser.plugin
          DivX Web Player.plugin
          Flash Player.plugin
          FlashPlayer-10.6.plugin
          Flip4Mac WMV Plugin.plugin
          iPhotoPhotocast.plugin
          JavaAppletPlugin.plugin
          OfficeLiveBrowserPlugin.plugin
          OVSHelper.plugin
          QuickTime Plugin.plugin
          SharePointBrowserPlugin.plugin
          Silverlight.plugin
User Internet Plug-ins:
          WebEx64.plugin
Bad Fonts:
          None
Time Machine:
          Skip System Files: NO
          Mobile backups: ON
          Auto backup: YES
          Volumes being backed up:
                    Macintosh HD: Disk size: 319,21 GB Disk used: 186,77 GB
          Destinations:
                    Time Machine - Backup [Local] (Last used)
                    Total size: 490,11 GB
                    Total number of backups: 9
                    Oldest backup: 2013-09-23 11:46:42 +0000
                    Last backup: 2013-11-18 11:02:42 +0000
                    Size of backup disk: Too small
                              Backup size 490,11 GB < (Disk used 186,77 GB X 3)
          Time Machine details may not be accurate.
          All volumes being backed up may not be listed.
Top Processes by CPU:
               4%          WindowServer
               2%          EtreCheck
               2%          Mail
               0%          sysmond
               0%          BBLaunchAgent
               0%          ocspd
               0%          Dock
               0%          fontd
               0%          Activity Monitor
               0%          opendirectoryd
Top Processes by Memory:
          205 MB             AntiVirus
          160 MB             Mail
          131 MB             com.apple.IconServicesAgent
          127 MB             MacKeeper Helper
          123 MB             mds_stores
          98 MB              Finder
          98 MB              Dock
          66 MB              Google Chrome
          57 MB              WindowServer
          49 MB              com.apple.WebKit.WebContent
Virtual Memory Statistics:
          1.04 GB            Free RAM
          1.66 GB            Active RAM
          632 MB             Inactive RAM
          448 MB             Wired RAM
          471 MB             Page-ins
          0 B                Page-outs
What I can do to rescue my MacBook?

If you enabled FileVault when you upgraded, it will take a few hours for the conversion process to finish, and during that time performance will be reduced. Otherwise see below.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
The title of the Console window should be All Messages. If it isn't, select
          SYSTEM LOG QUERIES ▹ All Messages
from the log list on the left. If you don't see that list, select
          View ▹ Show Log List
from the menu bar at the top of the screen. Click the Clear Display icon in the toolbar. Then take one of the actions that you're having trouble with. Select any messages that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
Please don't indiscriminately dump thousands of lines from the log into this discussion.
Please don't post screenshots of log messages—post the text.
Some private information, such as your name, may appear in the log. Anonymize before posting.

Macbook pro has no sound feedback after yosemite install

Got Yosemite installed and for some reason there was no sound when increasing/decreasing the volume through the keys or the slider. I tried to hear a youtube video but it was not working, I am using chrome so could see that there was sound on the video as there was an icon on the web page tab. I re-started and went to the system preferences>sound and found that by default in the general section, the sound feedback is disabled. I did not test the sound after the re-start so i dont know if there were two issues, but enabled the sound feedback and now I can hear the volume when moving the slider, also the music is playing fine through the internal speakers.

1. System Preference > Sound > Output
   Internal Speakers selected?
2. Try Reset SMC. http://support.apple.com/kb/HT3964
   Choose the method for:
"Resetting SMC on portables with a battery you should not remove on your own".
3. If there is red light visible in the headphone port plug the head phone into and out of the port
    couple of times to flip the microswitch inside. Sound may be stuck in digital mode.
4. Reinstalling iTunes may help sometimes.
Best.

I believe that I may have key logger software installed on my MBP

Below are the results of a test that I ran. I saw the instruction in another discussion..
Step 1 results
-bash: $: command not found
Jonathans-MBP:~ jonathan$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
com.Logitech.Control Center.HID
com.Logitech.Unifying.HID Driver
Step 2 results
com.adobe.fpsaud
Step 3 results
Jonathans-MBP:~ jonathan$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
Step 4 results
Jonathans-MBP:~ jonathan$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}' ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null
Step 5 results
Jonathans-MBP:~ jonathan$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}' ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
Jonathans-MBP:~ jonathan$

rbrylawski,
I agree with everything you said so far, my fault for trusting someone that initially gave me the iPad and then later asked for a few hundred dollars for doing me this 'favor.'
I guess I will have to change all of my passwords to all of my banking, credit card, and other financial accounts, and my emails. I never thought about it before, but he has made comments, in passing, and has led me to believe that he has read some of my emails and knows stuff about my personal and financial information that he shouldnt know.
My fault for not knowing enough to wipe it clean before I used it. Thanks for your help.

Perfect Key Logger on Macbook pro?

Hi,
I have reason to believe my boyfriend has downloaded a key logger onto my computer. I started noticing weird programs being downloaded that had to do with unarchiving files and unencrypting text and I looked into it and found an icon that said "PKL.app". So I googled it and perfect key logger came up. I tried to download it myself and when I did, it would download and never open. I know they are supposed to open the first time but then otherwise run in the background and only open with hot keys. I have tried a couple of variations with no luck. When I click the PKL.app icon (I saved it to my desktop after I found it) and press "open" nothing happens. If I press "get info" it says the date it was downloaded, last time it was opened ect. Also, within the "get info" area on the app icon there is a option to click that says "hide extensions" which is clicked and I am unable to unclick it. He has open access to my computer and I haven't had any credit card theft or anything like that which leads me to believe it is someone that doesn't have a desire to do anything other than on my personal level. Can someone take a look at what the terminal showed and give me any insight? If nothing shows up does anyone know what this PKL app that I can't open is? Also I tried removing the app and it wouldn't let me. Here are my terminal results:
Last login: Thu Feb 12 20:41:34 on ttys000
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
com.zeobit.kext.Firewall (2.3.4)
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'
com.zeobit.MacKeeper.AntiVirus
com.microsoft.office.licensing.helper
com.adobe.fpsaud
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
com.zeobit.MacKeeper.Helper
com.spotify.webhelper
com.google.keystone.user.agent
com.BT.PKL
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null
/Library/Components:
/Library/Extensions:
hp_io_enabler_compound.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
Adobe AIR.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
flashplayer.xpt
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
/Library/LaunchDaemons:
com.adobe.fpsaud.plist
com.apple.remotepairtool.plist
com.microsoft.office.licensing.helper.plist
com.zeobit.MacKeeper.AntiVirus.plist
/Library/PreferencePanes:
Flash Player.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LaunchAgents:
com.BT.PKL.plist
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.45B48A27-9871-4335-99D8-FA1 FA534FCE0.plist
com.apple.CSConfigDotMacCert-(email deleted for privacy)SharedServices.Agent.plist
com.google.keystone.agent.plist
com.spotify.webhelper.plist
com.zeobit.MacKeeper.Helper.plist
Library/PreferencePanes:
(name deleted for privacy)-MacBook-Pro-2:~(name deleted for privacy)$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
iTunesHelper, Dropbox, AdobeResourceSynchronizer, Google Drive
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$

Yes, a keylogger is installed. What you should do next depends on the circumstances.
If you're an adult, and the keylogger was installed on your personal computer without your permission, then the computer may be evidence of a crime or a civil wrong. Consider the legal implications before you do anything. Assume that everything you've done with the computer is known to the party who installed the keylogger.
If you just want to clean up the machine, see below.
The only way you can be sure that the computer is not compromised is to erase at least the startup volume and restore it to something like the status quo ante. The easiest approach is to recover the entire system from a backup that predates the attack. Obviously, that's only practical if you know when the attack took place, and it was recent, and you have such a backup. You will lose all changes to data, such as email, that were made after the time of the snapshot. Some of those changes can be restored from a later backup.
If you don't know when the attack happened, or if it was too long ago for a complete rollback to be feasible, then you should erase and install OS X. If you don't already have at least two complete, independent backups of all data, then you must make them first. One backup is not enough to be safe.
When you restart after the installation, you'll be prompted to go through the initial setup process for a new computer. That’s when you transfer the data from a backup in Setup Assistant.
Select only users in the Setup Assistant dialog—not Applications, Other files and folders, or Computer & Network Settings. Don't transfer the Guest account, if it was enabled.
Reinstall third-party software from original media or fresh downloads—not from a backup, which may be contaminated. Don't reinstall "MacKeeper," which is a scam.
Unless you were the target of an improbably sophisticated attack, this procedure will leave you with a clean system. If you have reason to think that you were the target of a sophisticated attack, then you need expert help.
That being done, change all Internet passwords and check all financial accounts for unauthorized transactions. Do this after the system has been secured, not before.

How can I tell if I have key logger on my Mac

I am not computer savy but I have reason to believe that someone has loaded a key logger program on my computer. Can someone walk me, very patiently, through the steps to find out?

Hi, this is very difficult to find out, but some old info to get you started.
See these for a list of some key loggers...
http://forums.macosxhints.com/archive/index.php/t-41204.html
http://www.keylogger-mac.com/mac-keylogger-perfect-keylogger-for-mac-os-x.html
http://uglypufferfish.com/2008/10/31/mac-keyloggers/

My Macbook Pro has a black screen when running in Bootcamp Windows 7. Since I updated the mac side my windows side now starts up with completely black screen - no prompt, nothing, Cap keys still light up as does mouse and DVD drive seems to run.

My Macbook Pro has a black screen when running in Bootcamp Windows 7. Since I updated the mac side my windows side now starts up with completely black screen - no prompt, nothing, Cap keys still light up as does mouse and DVD drive seems to run.
Will not show up in safe mode, will not show when started from Windows 7 DVD.
I suspect the Mac update wiped out my PC video drivers but can not think of a way to re-install?
Can see the PC volume from Mac side with files.
I've looked at all the online solutions so far and have tried most of them without success. Please help!
Specs:
2009 Macbook Pro, 3.06 GHz Intel 2 core, Max 10.6.8.
Model Name:          MacBook Pro
Model Identifier:          MacBookPro5,2
Processor Name:          Intel Core 2 Duo
Processor Speed:          3.06 GHz
Number Of Processors:          1
Total Number Of Cores:          2
L2 Cache:          6 MB
Memory:          4 GB
Bus Speed:          1.07 GHz
Boot ROM Version:          MBP52.008E.B05
SMC Version (system):          1.42f4
Serial Number (system):          7302300GANE
Hardware UUID:          B2D4B4B4-CD92-5C7A-BDC2-527D30DD8DF3
Sudden Motion Sensor:
State:          Enabled

EDIT: RESOLVED
For anyone else who finds their way here like I did, this link did it for me: https://forums.geforce.com/default/topic/527599/windows-8-issues-solved-please-r ead-if-you-39-re-having-black-screen-and-or-flickering-/
Specifically, the posts by Dunsany and valkyr did the trick. I booted in safe mode, uninstalled and deleted the Nvidia driver, disabled automatic driver installation, and restarted normally. I then manually downloaded and installed the previous Nvidia driver for my graphics card (which at the time of this writing was 335.23, rather than the latest which was 337.88), and everything is now bueno!
Two hiccoughs along the way: First, when I tried to uninstall the Nvidia driver the first time, when I restarted I got the login screen (which was a good sign), but it quickly went black again. I powered down, restarted in safe mode again, and repeated the uninstallation process, and it worked the second time. Second, when I started the manual install of the 335.23 driver, the computer played a sound similar to the one for disconnecting a USB device, and the screen went black. I'd seen a lot about trying to increase the brightness (though it hadn't worked up to this point; but if you haven't tried it yet, might as well); I tried it, and it worked! So far I'm back up and running. [/fingers crossed]
Hope this helps someone else!

A clean install on my MacBook Pro has left my icons stuck on the right side of the desktop. I want to move them but there is no 'None' option which I think would free them to move where I wish. Suggestions?

A clean install on my MacBook Pro has left me with my icons stuck in the grid on the right side of my desktop. I had the ability to move them and have them stay put in various sectors of the desktop, which I found very useful. The clean install upgraded the OS to 10.6.8 from 10.5.8. I want to move them again but there I see no 'None' option which I think would free them to move where I wish. Has the upgrade deleted that option? Suggestions? I am new to this community and if not new to Mac, I often feel that way. This is one of those times.
Julz11 in NYC

I have the same problem on the latest iTunes software and Windows 7. My window is maximzed and I do not see any tab for photos. Seems related to a recent update (IOS7?) as this was there - at least before the very big change to the interface.

I think that my Macbook Pro has been hacked. What do I do/Who do I talk to?

I think that my Macbook Pro has been hacked. What do I do/Who do I talk to?

clemons wrote:
My gmail and yahoo email accounts show activity from Iowa. My gmail inbox had a facebook account that I never created linked to it. My yahoo account always says that my location is in Iowa.
I take it you have, nor have never had, any connections with Iowa?
To start, I would change passwords on all your accounts.

My Macbook pro has the message on a black screen need the reboot disc then press any key to continue. Any Ideas, because I have no discs.

My Macbook pro has the message on a black screen need the reboot disc then press any key to continue. Any Ideas, because I have no discs.I am running Lion OS

Was this a dark gray screen that appeared with the message to restart the computer in five different languages? If so that's a kernel panic. It would help if you can post the panic log: Mac OS X- How to log a kernel panic. Also visit The XLab FAQs and read the FAQ on diagnosing kernel panics.

Hi recently my MacBook pro has stopped connecting to our office Synology server automatically. I now have to Go Connect to Server etc in order to browse the file server. Clearing key chain and then readding everything hasnt made any difference. HELP

Hi recently my MacBook pro has stopped connecting to our office Synology server automatically. I now have to Go > Connect to Server > etc in order to browse the file server. Clearing key chain and then readding everything hasnt made any difference. HELP

Not sure what other tests they could run for me. I've pretty much run all the tests I can using Drive Genius and Tech Tool Pro 5. Is there anything they use that I don't know about??

I think my mac book pro has a virus - is that possible and what can I do?

I think my mac book pro has a virus. Is that possible and what can I do?
I opened an attachment on an email claiming to be an order confirmation from Amazon. I now have several copies of it on my desktop and can't delete them.

theforgebridget wrote:
I opened an attachment on an email claiming to be an order confirmation from Amazon. I now have several copies of it on my desktop and can't delete them.
It is highly likely that this attachment is malware. It's also highly likely that it is Windows malware. So you're probably not infected with anything. What is the exact name of the attachment you opened? Please be sure to include whatever extension the filename has (such as .exe, .pdf, .doc, etc).
What happens when you try deleting the attachment files from your desktop? Is there an error message of some kind? If so, what is the exact error message you're seeing? (Please don't try to paraphrase it... tell us the precise wording of the message.)

I have interface M Audio firewire 400 new Mac Pro has firewire 800 Do you think an adaptor will provide the same quality? Will the M audio 400 work with lion and new system? Thanks so much

I have interface M Audio 400 with 400 firewire new Mac Pro has firewire 800 Do you think an adaptor will provide the same quality? Will the M audio 400 work with lion and new system or do I need new software? Thanks so much

If you have a little Firewire adaptor, everything should work fine. It does on my system.

My MacBook Pro has been incredibly slow and laggy

So my MacBook Pro has been pretty much inoperable for a couple of months. The computer crashed and afterwards it would constantly lag. I did a fresh install thinking it would solve the problem, but it did not do anything. I took the computer to the Genius Bar, and they claimed that it was because I was running too many apps and that the computer was slowing down (doesnt make too much sense considering its a mid 2012 and on a fresh install) and then promptly sent me home. When you flash the memory in the beginning, sometimes it will be less laggy for a second, but then start lagging a couple minutes after computer use (this is still on a virtually clean install). I took their suggestion and added a SDD thinking it might help. Nope. So the hardware tests/diagnostics are all normal and I have no idea whats going on. It literally took me 10-15 minutes to run the EtreCheck and copy into mail so I could post these results from another computer. I will love anyone forever if they could explain to me how to fix this.
EtreCheck version: 1.9.15 (52)
Report generated September 17, 2014 1:44:57 AM EDT
Hardware Information: ?
MacBook Pro (13-inch, Mid 2012) (Verified)
MacBook Pro - model: MacBookPro9,2
1 2.5 GHz Intel Core i5 CPU: 2 cores
4 GB RAM
Video Information: ?
Intel HD Graphics 4000 - VRAM: 512 MB
Color LCD 1280 x 800
System Software: ?
OS X 10.8.5 (12F45) - Uptime: 0 days 0:14:30
Disk Information: ?
APPLE HDD TOSHIBA MK5065GSXF disk0 : (500.11 GB)
S.M.A.R.T. Status: Verified
disk0s1 (disk0s1) <not mounted>: 209.7 MB
Untitled (disk0s2) / [Startup]: 499.25 GB (479.83 GB free)
Recovery HD (disk0s3) <not mounted>: 650 MB
MATSHITADVD-R   UJ-8A8
USB Information: ?
Apple Inc. FaceTime HD Camera (Built-in)
Apple Computer, Inc. IR Receiver
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. Apple Internal Keyboard / Trackpad
Thunderbolt Information: ?
Apple Inc. thunderbolt_bus
Gatekeeper: ?
Mac App Store and identified developers
Launch Daemons: ?
[loaded] com.adobe.fpsaud.plist Support
[loaded] com.bombich.ccc.plist Support
User Login Items: ?
None
Internet Plug-ins: ?
FlashPlayer-10.6: Version: 15.0.0.152 - SDK 10.6 Support
Flash Player: Version: 15.0.0.152 - SDK 10.6 Support
QuickTime Plugin: Version: 7.7.1
JavaAppletPlugin: Version: 14.6.0 - SDK 10.8 Check version
Safari Extensions: ?
Adblock Plus
Audio Plug-ins: ?
AirPlay: Version: 1.7 - SDK 10.8
iSightAudio: Version: 7.7.1 - SDK 10.8
iTunes Plug-ins: ?
Quartz Composer Visualizer: Version: 1.4 - SDK 10.8
3rd Party Preference Panes: ?
Flash Player Support
Time Machine: ?
Time Machine not configured!
Top Processes by CPU: ?
     2% WindowServer
     1% Activity Monitor
     0% activitymonitord
     0% blued
Top Processes by Memory: ?
57 MB mds
37 MB Dock
33 MB WindowServer
25 MB ocspd
20 MB SystemUIServer
Virtual Memory Information: ?
1.91 GB Free RAM
578 MB Active RAM
401 MB Inactive RAM
1.13 GB Wired RAM
194 MB Page-ins
0 B Page-outs

I don't see anything significant.
Things You Can Do To Resolve Slow Downs
If your computer seems to be running slower here are some things you can do:
Start with visits to:     OS X Maintenance - MacAttorney;
                                  The X Lab: The X-FAQs;
                                  The Safe Mac » Mac Performance Guide;
                                  The Safe Mac » The myth of the dirty Mac;
                                  Mac maintenance Quick Assist.
Boot into Safe Mode then repair your hard drive and permissions:
Repair the Hard Drive and Permissions Pre-Lion
Boot from your OS X Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Utilities menu. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer.
Repair the Hard Drive - Lion/Mountain Lion/Mavericks
Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the Utilites Menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD disk icon and click on the arrow button below.
When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported, then click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu. Select Restart from the Apple menu.
Restart your computer normally and see if this has helped any. Next do some maintenance:
For situations Disk Utility cannot handle the best third-party utility is Disk Warrior; DW only fixes problems with the disk directory, but most disk problems are caused by directory corruption; Disk Warrior 4.x is now Intel Mac compatible.
Note: Alsoft ships DW on a bootable DVD that will startup Macs running Snow Leopard or earlier. It cannot start Macs that came with Lion or later pre-installed, however, DW will work on those models.
Suggestions for OS X Maintenance
OS X performs certain maintenance functions that are scheduled to occur on a daily, weekly, or monthly period. The maintenance scripts run in the early AM only if the computer is turned on 24/7 (no sleep.) If this isn't the case, then an excellent solution is to download and install a shareware utility such as Macaroni, JAW PseudoAnacron, or Anacron that will automate the maintenance activity regardless of whether the computer is turned off or asleep. Dependence upon third-party utilities to run the periodic maintenance scripts was significantly reduced since Tiger. These utilities have limited or no functionality with Snow Leopard or later and should not be installed.
OS X automatically defragments files less than 20 MBs in size, so unless you have a disk full of very large files there's little need for defragmenting the hard drive.
Helpful Links Regarding Malware Protection
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
Mac OS X Snow Leopard and malware detection
OS X Lion- Protect your Mac from malware
OS X Mountain Lion- Protect your Mac from malware
About file quarantine in OS X
If you require anti-virus protection I recommend using VirusBarrier Express 1.1.6 or Dr.Web Light both from the App Store. They're both free, and since they're from the App Store, they won't destabilize the system. (Thank you to Thomas Reed for these recommendations.)
Troubleshooting Applications
I recommend downloading a utility such as TinkerTool System, OnyX, Mavericks Cache Cleaner, or Cocktail that you can use for removing old log files and archives, clearing caches, etc. Corrupted cache, log, or temporary files can cause application or OS X crashes as well as kernel panics.
If you have Snow Leopard or Leopard, then for similar repairs install the freeware utility Applejack. If you cannot start up in OS X, you may be able to start in single-user mode from which you can run Applejack to do a whole set of repair and maintenance routines from the command line. Note that AppleJack 1.5 is required for Leopard. AppleJack 1.6 is compatible with Snow Leopard. Applejack does not work with Lion and later.
Basic Backup
For some people Time Machine will be more than adequate. Time Machine is part of OS X. There are two components:
1. A Time Machine preferences panel as part of System Preferences;
2. A Time Machine application located in the Applications folder. It is
    used to manage backups and to restore backups. Time Machine
    requires a backup drive that is at least twice the capacity of the
    drive being backed up.
Alternatively, get an external drive at least equal in size to the internal hard drive and make (and maintain) a bootable clone/backup. You can make a bootable clone using the Restore option of Disk Utility. You can also make and maintain clones with good backup software. My personal recommendations are (order is not significant):
1. Carbon Copy Cloner
2. Get Backup
3. Deja Vu
4. SuperDuper!
5. Synk Pro
6. Tri-Backup
Visit The XLab FAQs and read the FAQ on backup and restore. Also read How to Back Up and Restore Your Files. For help with using Time Machine visit Pondini's Time Machine FAQ for help with all things Time Machine.
Referenced software can be found at MacUpdate.
Additional Hints
Be sure you have an adequate amount of RAM installed for the number of applications you run concurrently. Be sure you leave a minimum of 10% of the hard drive's capacity as free space.
Add more RAM. If your computer has less than 2 GBs of RAM and you are using OS X Leopard or later, then you can do with more RAM. Snow Leopard and Lion work much better with 4 GBs of RAM than their system minimums. The more concurrent applications you tend to use the more RAM you should have.
Always maintain at least 15 GBs or 10% of your hard drive's capacity as free space, whichever is greater. OS X is frequently accessing your hard drive, so providing adequate free space will keep things from slowing down.
Check for applications that may be hogging the CPU:
Pre-Mavericks
Open Activity Monitor in the Utilities folder. Select All Processes from the Processes dropdown menu. Click twice on the CPU% column header to display in descending order. If you find a process using a large amount of CPU time (>=70,) then select the process and click on the Quit icon in the toolbar. Click on the Force Quit button to kill the process. See if that helps. Be sure to note the name of the runaway process so you can track down the cause of the problem.
Mavericks and later
Open Activity Monitor in the Utilities folder. Select All Processes from the View menu. Click on the CPU tab in the toolbar. Click twice on the CPU% column header to display in descending order. If you find a process using a large amount of CPU time (>=70,) then select the process and click on the Quit icon in the toolbar. Click on the Force Quit button to kill the process. See if that helps. Be sure to note the name of the runaway process so you can track down the cause of the problem.
Often this problem occurs because of a corrupted cache or preferences file or an attempt to write to a corrupted log file.

I think my Pro has a bespoke key logger/spyware installed

Similar Messages

Maybe you are looking for