iPhone 13 compromised

[tratra]

I have been dealing with this since 2021. as I begin my 4th year im on my 7th phone (first iphone) 3rd laptop, 4th dvd player, 3rd tv etc etc blah blah,
i have boxes of notes, i have all the harddrives of infected computers, i also dont have anywhere to take them as no one cares or wants to be bothered!
im sick of apple, google, windstream, etc telling me to change useless passwords and useless resets! Nothing resets!!!
nothing!! i gave my son my so called smart tv and he was able to factory reset it away from my home and of course me!
i bought a laptop told NOONE went to a friends house to set it up and guess what?.... taken over in minutes!
bought a android phone no knew i had it and after the 3rd time it said data corrupt and forced a reset it had the same old keep alive that is on every device i touch!
i watched on my 3 rd phone as my voicemail password was changed without me touching it before the setup was even complete!
i found proof on my windstream router and the guy they sent would not even look at it!!!!
when i changed to spectrum i never even got a chance i was locked out and have not once been able to log into my own router yet. everyone acts as if i should just get over it!!
i can prove only my phone is on a loopback!
every other device can access web normally.
i also have an unknown netgear that every device but mine can or has logged into and yet when i ask i get "i dont know" or "i dont understand it"
i have no idea who it belongs to.
i have a digicert ca root certificate that i did not enable and cant change as im locked out.
also having iot used against me. help help help

 

[tratra]

Lockdown mode was built for this. Last I heard it actually notifies you of all intrusions in iOS. So turn it on like yesterday.

lockdown mode does not work
been there tried that

 

[tratra]

No sad to say either they don’t believe you or they say paranoid

same here and I know its managed, i know every device i own is compromised.
i feel like things are being hidden from me on everything. im locked out of so many settings.

 

[tratra]

Are you using Lockdown mode on your Mac and iOS devices? Also turn on icloud data protection / encryption.

It's easy to misinterpret logs as malicious when you don't fully understand what's going on. I can't be specific but Lockdown mode has stopped at least one person's issue that I know of.

There is a lot of Apple telemetry and various services which you can completely shut off on a Mac that don't affect operation. Not so easy on iOS. Also Apple had a bug (or still has) where a client-side VPN won't funnel all system traffic through it. If you suspect you're actually infected or have an issue on your network I suggest you get a network protection device, put it at the edge of your LAN, and monitor traffic there, it's the only way to be sure – device logs are wiped or modified with more advanced malware.

If you are a high-value target or work a job that makes you one I doubly recommend you get something to block / refuse incoming traffic at the actual WAN endpoint. I've seen cases where literally thousands of hits a day were being handled, and most people have no idea those are happening. It's nuts.

That said, I think being specific about the errors and particularly device problems would be beneficial. It may be that there is nothing actually wrong, a framework is unfortunately named, and you are having a paranoid episode. I would lean even more in this direction if you do not work for something like a defense contractor or government agency – no random individual is worth sustained time and effort. If your friends & family are worried I'd suggest this might be an indicator that it isn't a malware issue, and I mean that with compassion.

Still, endpoint protection (by which I mean something like a hardware firewall) that sits between your WAN and LAN is useful regardless, and might help assuage the anxiety (or confirm an actual issue).


Edit because I re-read this and there's some really foolish stuff going on: don't use 8+ year old devices connected to the internet with Operating Systems that no longer receive security updates. Once they age-out you need to upgrade to stay secure. This is an unfortunate fact of modern computing life. Any iPhone more than a few generations old is trivial to hack and you should never plug it into any unknown port, or IMO any port except a power charger that you own. Turn off handoff and airdrop also, and probably bluetooth too on those devices. Even handing them over at border security in a less than scrupulous country for a few minutes can get them totally invaded.

There are older 0-days that have been fixed but if you are running modern hardware and modern Operating Systems, and especially if you're using Lockdown Mode you should be OK. Don't restore from icloud backup when you set up a new phone and get rid of the old ones – save off any data you need and scan it using thorough malware tools. If you have older devices for ****'s sake don't use them on your primary icloud account and make sure to turn on encryption – there's a reason Apple won't let you enable this unless everything in your account is updated, because it makes it vulnerable otherwise.

You don't lose any media etc. this way, it's ridiculous to be so concerned about security and also walk around with totally vulnerable devices. Log-files are way too in depth and pointless when you're roaming around with hardware that invites easy attack. Unless you are a forensics security person studying attack surfaces knock that off. It's the same way that you can plug a Windows XP computer directly into a Cable Modem and you'll have a virus within a few hours, there are automated scanners that rapidly search for and infect vulnerable older systems and repurpose them for botnets etc.

yes tried all that and no lockdown does not work! i have never used a backup from anywhere! i dont backup anymore total waste of time for me. i am totally updated for all the good it does which is zip zero use. iphone 11 17.3 and it will not wipe that digicert root certificate that i did not enable and cant turn off!

 

[tratra]

Lockdown mode was built for this. Last I heard it actually notifies you of all intrusions in iOS. So turn it on like yesterday.

I hav

I have factory rest my phones my camera turns on my settings change my Lock Screen code changed find my phone turns back on my Share turns back on iPhone gets super hot buttons won’t work I would agree maybe a hardware issue but every single iPhone I have iPhone 7 iPhone 11 Pro and my iPhone 13 are all doing the exact same thing and the factory reset does not work because after that I still have numbers in my phone that shouldn’t be there. I don’t know what logs I can. Send that someone could tell I truly believe my device is being managed. My Internet searches are limited I know that for a fact I go to the library I get a ton of information where my phone says no available results all of my passwords stored in my phone. We’re gone my password to get changed. I have two Google security titan keys. I am under two factor authentication on every phone. I tried to change my password and if video comes through. It gives me a big error and I can’t change my password or I change my password and it invalid password I’ve literally seen my email dates change before my eyes. I’ve had calls in the middle of the night. Answer phone goes dead comes back on. I’ve had pictures sent back to me text messages from my family members. I sent prior come back to me months later I’ve had pictures for evidence altered I’ve had videos for evidence that were three minutes long for one second and looped around. They took over every social media account. Every Google account I made so if someone could help me with what logs I need to upload that would be really appreciated because this is been going on since 2020. Also my phone calls were be monitored I heard loud sound coming from my phone like a fax machine but other party could not here

i feel your pain been doing this for 4 years and no one will help.

 

[tratra]

You need to do a factory reset.

The screenshot you posted of schelper.exe clearly relates to Windows. Schelper may be an iOS thing too (I don't know) but that screenshot is talking about Windows.

i have a insider version of windows on my laptop that i did not enable, i dont even have a microsoft acct

 

[Feek]

Paranoid rubbish.

 

[tratra]

Paranoid rubbish.

you say that after reading story after story of the same issues?
I can prove it!
It is easier for some people not to question too closely to maintain the illusion of control.

 

[novagamer]

you say that after reading story after story of the same issues?
I can prove it!
It is easier for some people not to question too closely to maintain the illusion of control.

What are you talking about?

Read my earlier post in this thread, the information is still valid.

Factory reset your iOS device. If you bought it used or second-hand and it is managed and you can’t wipe it, that doesn’t mean you’re a target, that means you made a bad purchasing decision and should get a new device. I don’t know what you’re going on about with regard to Windows or DVD players or what. Get a network edge device to watch traffic if you’re concerned, but that isn’t causing your iPhone issue.

Lockdown mode does work, I have literally seen it in action. Lockdown mode isn’t something you “try” either, you need to turn it on and leave it on… on ALL of your Apple devices that can use it including Macs, if you feel that your security is at risk.

edit: since you say you are locked out of some settings, which ones specifically? And that’s AFTER factory reset, turning on icloud encryption for your account, and enabling Lockdown mode? If not, do that first. Make sure you store that password on paper in multiple places because you’ll lose all your data if you misplace it. I bet anything you didn’t enable that cloud encryption yet and it’s an important step, but only do it once you’ve wiped your device just in case there actually is some infiltration in your OS.

Wipe it first, before anything else, then proceed and follow the steps I outlined and post again with specifics about the errors if any occur. If you have older devices that prevent you from turning on cloud encryption, log out of them and consider them obsolete. If you care about the data security you need to take it seriously and half-measures don’t work, you have to follow all of the steps and leverage the tools Apple provides.

 

[JoeMoe1]

Logs attached...

88","timestamp":"2023-04-14 01:19:21.00 -0400","os_version":"iPhone OS 16.4.1 (20E252)","roots_installed":0,"incident_id":"6A3F02A9-0884-4803-95DE-81B0909890EA"}
{
  "build" : "iPhone OS 16.4.1 (20E252)",
  "product" : "iPhone14,5",
  "kernel" : "Darwin Kernel Version 22.4.0: Mon Mar  6 20:43:00 PST 2023; root:xnu-8796.102.5~1\/RELEASE_ARM64_T8110",
  "tuning" : {

  },
  "incident" : "6A3F02A9-0884-4803-95DE-81B0909890EA",
  "crashReporterKey" : "5d001500cf54e35edd8ecb6b2ce5cff6084ac78c",
  "date" : "2023-04-14 01:19:21.86 -0400",
  "reason" : "sysdiagnose (stackshot only) trigger: Power + Volume Up",
  "frontmostPids" : [
    32
  ],
  "exception" : "0xbaaaaaad",
  "absoluteTime" : 593608376984,
  "roots_installed" : 0,
  "bug_type" : "288",
  "memoryStatus" : {"compressorSize":17349,"compressions":1708219,"decompressions":1097098,"busyBufferCount":0,"memoryPressureDetails":{"pagesWanted":0,"pagesReclaimed":0},"pageSize":16384,"memoryPressure":false,"memoryPages":{"active":80715,"throttled":0,"fileBacked":63456,"wired":48952,"purgeable":2544,"inactive":79113,"free":6206,"speculative":371}},
  "processByPid" : {
    "0" : {
  "timesThrottled" : 0,
  "pageIns" : 0,
  "rawFlags" : "0x20800001",
  "timesDidThrottle" : 0,
  "procname" : "kernel_task",
  "jetsamCoalition" : 3,
  "copyOnWriteFaults" : 0,
  "pageFaults" : 14858,
  "threadById" : {
    "441" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 4.0829999999999997e-06,
      "id" : 441,
      "basePriority" : 81,
      "name" : "AppleMCA2Cluster_T8110",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 4,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745793123
      ]
    },
    "774" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 1.125e-06,
      "id" : 774,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 1,
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745805923
      ]
    },
    "330" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 3.4580000000000002e-06,
      "id" : 330,
      "basePriority" : 81,
      "name" : "InterruptEventSourceBridge",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 3,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745802963
      ]
    },
    "919" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 0.016446583000000001,
      "id" : 919,
      "basePriority" : 81,
      "name" : "RTBuddyV2",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 16446,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745737427
      ]
    },
    "2939" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 2.3329999999999999e-06,
      "id" : 2939,
      "basePriority" : 81,
      "name" : "IOSkywalkNetworkBSDClient",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 2,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745723763
      ]
    },
    "2974" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 3.7079999999999999e-06,
      "id" : 2974,
      "basePriority" : 81,
      "name" : "IOSlowAdaptiveClockingDomain",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 3,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745719123
      ]
    },
    "2983" : {
      "continuation" : [
        0,
        86033130276
      ],
      "userTime" : 0,
      "systemTime" : 1.6249999999999999e-05,
      "id" : 2983,
      "basePriority" : 82,
      "name" : "ifnet_start_utun1",
      "user_usec" : 0,
      "schedPriority" : 82,
      "system_usec" : 16,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843317251043
      ]
    },
    "331" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 2.666e-06,
      "id" : 331,
      "basePriority" : 81,
      "name" : "AppleT8110DART",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 2,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745792243
      ]
    },
    "1403" : {
      "userTime" : 0,
      "systemTime" : 4.583e-06,
      "system_usec" : 4,
      "id" : 1403,
      "basePriority" : 81,
      "user_usec" : 0,
      "kernelFrames" : [
        [
          0,
          86031389212
        ],
        [
          0,
          86031382392
        ],
        [
          0,
          86051641136
        ],
        [
          0,
          86051610440
        ],
        [
          0,
          86037374004
        ],
        [
          0,
          86051610008
        ],
        [
          0,
          86060933608
        ],
        [
          0,
          86030994360
        ]
      ],
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT"
      ],
      "waitEvent" : [
        1,
        10833992835612058387
      ]
    },
    "1891" : {
      "continuation" : [
        0,
        86033130276
      ],
      "userTime" : 0,
      "systemTime" : 1.8833000000000001e-05,
      "id" : 1891,
      "basePriority" : 82,
      "name" : "ifnet_start_utun0",
      "user_usec" : 0,
      "schedPriority" : 82,
      "system_usec" : 18,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843332213923
      ]
    },
    "776" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 1.291e-06,
      "id" : 776,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 1,
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745806003
      ]
    },
    "2718" : {
      "continuation" : [
        0,
        86033094532
      ],
      "userTime" : 0,
      "systemTime" : 4.8331489579999998,
      "id" : 2718,
      "basePriority" : 81,
      "name" : "dlil_input_en2",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 4833148,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843332186283
      ]
    },
    "2975" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 2.0829999999999998e-06,
      "id" : 2975,
      "basePriority" : 81,
      "name" : "IOSlowAdaptiveClockingDomain",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 2,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745723043
      ]
    },
    "1430" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 1.6500000000000001e-05,
      "id" : 1430,
      "basePriority" : 81,
      "name" : "AppleSEPManager",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 16,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745739987
      ]
    },
    "888" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 3.143916333,
      "id" : 888,
      "basePriority" : 81,
      "name" : "AppleSPU",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 3143916,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745726867
      ]
    },
    "111" : {
      "id" : 111,
      "schedPriority" : 81,
      "system_usec" : 10014908,
      "kernelFrames" : [
        [
          0,
          86031389212
        ],
        [
          0,
          86031382392
        ],
        [
          0,
          86031315760
        ],
        [
          0,
          86037184160
        ],
        [
          0,
          86030994360
        ]
      ],
      "schedFlags" : [
        "TH_SFLAG_UNKNOWN_0x80000"
      ],
      "user_usec" : 0,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "basePriority" : 81,
      "userTime" : 0,
      "waitEvent" : [
        0,
        86072310160
      ],
      "systemTime" : 10.014908,
      "name" : "IOServiceTerminateThread"
    },
    "1977" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 3.7079999999999999e-06,
      "id" : 1977,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 3,
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745740307
      ]
    },
    "778" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 3.7500000000000001e-06,
      "id" : 778,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 3,
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745794163
      ]
    },
    "334" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 2.6249999999999999e-06,
      "id" : 334,
      "basePriority" : 81,
      "name" : "AppleT8110DART",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 2,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745792643
      ]
    },
    "2310" : {
      "continuation" : [
        0,
        86033130276
      ],
      "userTime" : 0,
      "systemTime" : 2.2500000000000001e-06,
      "id" : 2310,
      "basePriority" : 82,
      "name" : "ifnet_start_en0",
      "user_usec" : 0,
      "schedPriority" : 82,
      "system_usec" : 2,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843332230307
      ]
    },
    "2719" : {
      "continuation" : [
        0,
        86033130276
      ],
      "userTime" : 0,
      "systemTime" : 3.3344144579999999,
      "id" : 2719,
      "basePriority" : 82,
      "name" : "skywalk_doorbell_en2_tx",
      "user_usec" : 0,
      "schedPriority" : 82,
      "system_usec" : 3334414,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843332184179
      ]
    },
    "2728" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 9.16e-07,
      "id" : 2728,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 0,
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745714163
      ]
    },
    "2754" : {
      "continuation" : [
        0,
        86036305280
      ],
      "userTime" : 0,
      "systemTime" : 1.225688208,
      "id" : 2754,
      "basePriority" : 81,
      "name" : "skywalk_fsw_reap_en2",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 1225688,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992839472163739
      ]
    },
    "2985" : {
      "continuation" : [
        0,
        86036029572
      ],
      "userTime" : 0,
      "systemTime" : 0.031872540999999997,
      "id" : 2985,
      "basePriority" : 81,
      "name" : "SOFLOW_GC",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 31872,
      "state" : [
        "TH_WAIT"
      ],
      "waitEvent" : [
        0,
        86072305916
      ]
    },
    "3727" : {
      "id" : 3727,
      "schedPriority" : 31,
      "system_usec" : 1689165,
      "state" : [
        "TH_WAIT"
      ],
      "schedFlags" : [
        "TH_SFLAG_EAGERPREEMPT"
      ],
      "user_usec" : 0,
      "basePriority" : 31,
      "userTime" : 0,
      "waitEvent" : [
        0,
        86071660416
      ],
      "continuation" : [
        0,
        86031549016
      ],
      "systemTime" : 1.689165083,
      "name" : "thread call user #2"
    },
    "3762" : {
      "continuation" : [
        0,
        86036305280
      ],
      "userTime" : 0,
      "systemTime" : 0.73605933300000004,
      "id" : 3762,
      "basePriority" : 81,
      "name" : "skywalk_fsw_reap_pdp_ip0",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 736059,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992839472173723
      ]
    },
    "779" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 6.9987429160000003,
      "id" : 779,
      "basePriority" : 81,
      "name" : "AppleSMC",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 6998742,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745795363
      ]
    },
    "1414" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 0.00022883300000000001,
      "id" : 1414,
      "basePriority" : 81,
      "name" : "AppleCS42L7xMikeyBus",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 228,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745737587
      ]
    },
    "2746" : {
      "continuation" : [
        0,
        86036305280
      ],
      "userTime" : 0,
      "systemTime" : 0.57968029099999996,
      "id" : 2746,
      "basePriority" : 81,
      "name" : "skywalk_fsw_reap_en0",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 579680,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992839472160411
      ]
    },
    "2729" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 1.4160000000000001e-06,
      "id" : 2729,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 1,
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745714243
      ]
    },
    "920" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 0.0078640410000000004,
      "id" : 920,
      "basePriority" : 81,
      "name" : "AppleSPU",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 7864,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745728547
      ]
    },
    "115" : {
      "continuation" : [
        0,
        86032034092
      ],
      "userTime" : 0,
      "systemTime" : 0.61258929100000004,
      "id" : 115,
      "basePriority" : 31,
      "name" : "VM_pageout_garbage_collect",
      "user_usec" : 0,
      "schedPriority" : 31,
      "system_usec" : 612589,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        0,
        86032034092
      ]
    },
    "2747" : {
      "continuation" : [
        0,
        86036305280
      ],
      "userTime" : 0,
      "systemTime" : 0.56319229100000001,
      "id" : 2747,
      "basePriority" : 81,
      "name" : "skywalk_fsw_reap_en1",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 563192,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992839472162075
      ]
    },
    "921" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 0.0055272910000000001,
      "id" : 921,
      "basePriority" : 81,
      "name" : "AppleSPU",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 5527,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745729267
      ]
    },
    "1979" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 1.4580000000000001e-06,
      "id" : 1979,
      "basePriority" : 81,
      "name" : "IOSkywalkNetworkBSDClient",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 1,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745732547
      ]
    },
    "2312" : {
      "continuation" : [
        0,
        86033094532
      ],
      "userTime" : 0,
      "systemTime" : 2.5830000000000001e-06,
      "id" : 2312,
      "basePriority" : 81,
      "name" : "dlil_input_en1",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 2,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843332189307
      ]
    },
    "116" : {
      "continuation" : [
        0,
        86031337184
      ],
      "userTime" : 0,
      "systemTime" : 0.005630833,
      "id" : 116,
      "basePriority" : 63,
      "name" : "daemon.core-analytics-events",
      "user_usec" : 0,
      "schedPriority" : 63,
      "system_usec" : 5630,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        0,
        86072124920
      ]
    },
    "338" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 2.666e-06,
      "id" : 338,
      "basePriority" : 81,
      "name" : "AppleT8110DART",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 2,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745797603
      ]
    },
    "3755" : {
      "continuation" : [
        0,
        86036305280
      ],
      "userTime" : 0,
      "systemTime" : 0.60670124999999997,
      "id" : 3755,
      "basePriority" : 81,
      "name" : "skywalk_fsw_reap_pdp_ip2",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 606701,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992839472170395
      ]
    },
    "700" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 0.090764625000000002,
      "id" : 700,
      "basePriority" : 81,
      "name" : "DCPEndpoint9",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 90764,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745793363
      ]
    },
    "117" : {
      "continuation" : [
        0,
        86032101832
      ],
      "userTime" : 0,
      "systemTime" : 5.9580000000000004e-06,
      "id" : 117,
      "basePriority" : 91,
      "name" : "VM_reclaim",
      "user_usec" : 0,
      "schedPriority" : 91,
      "system_usec" : 5,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        0,
        86026124968
      ]
    },
    "1460" : {
      "userTime" : 0,
      "systemTime" : 0.075470541000000002,
      "system_usec" : 75470,
      "id" : 1460,
      "basePriority" : 81,
      "schedFlags" : [
        "TH_SFLAG_UNKNOWN_0x80000"
      ],
      "user_usec" : 0,
      "schedPriority" : 81,
      "kernelFrames" : [
        [
          0,
          86031389212
        ],
        [
          0,
          86031382392
        ],
        [
          0,
          86031315760
        ],
        [
          0,
          86037357048
        ],
        [
          0,
          86047702308
        ],
        [
          0,
          86037374004
        ],
        [
          0,
          86030994360
        ]
      ],
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992839480267035
      ]
    },
    "2313" : {
      "continuation" : [
        0,
        86033130276
      ],
      "userTime" : 0,
      "systemTime" : 3.7079999999999999e-06,
      "id" : 2313,
      "basePriority" : 82,
      "name" : "ifnet_start_en1",
      "user_usec" : 0,
      "schedPriority" : 82,
      "system_usec" : 3,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843332187203
      ]
    },
    "923" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 0.0077948749999999997,
      "id" : 923,
      "basePriority" : 81,
      "name" : "AppleSPU",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 7794,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745737027
      ]
    },
    "701" : {
      "userTime" : 0,
      "systemTime" : 0.213077291,
      "name" : "RTBuddyV2(MTP)",
      "id" : 701,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 213077,
      "schedPriority" : 81,
      "kernelFrames" : [
        [
          0,
          86031389212
        ],
        [
          0,
          86031382392
        ],
        [
          0,
          86037359072
        ],
        [
          0,
          86030994360
        ]
      ],
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745799603
      ]
    },
    "118" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 1.6274051249999999,
      "id" : 118,
      "basePriority" : 81,
      "name" : "ASIOKit",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 1627405,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745799923
      ]
    },
    "813" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 1.5829999999999999e-06,
      "id" : 813,
      "basePriority" : 81,
      "user_usec" : 0,
      "system_usec" : 1,
      "schedPriority" : 81,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745731747
      ]
    },
    "2305" : {
      "continuation" : [
        0,
        86033094532
      ],
      "userTime" : 0,
      "systemTime" : 5.9159999999999998e-06,
      "id" : 2305,
      "basePriority" : 81,
      "name" : "dlil_input_anpi0",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 5,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992843332244507
      ]
    },
    "703" : {
      "continuation" : [
        0,
        86037358784
      ],
      "userTime" : 0,
      "systemTime" : 4.3958000000000002e-05,
      "id" : 703,
      "basePriority" : 81,
      "name" : "AppleSEPManager",
      "user_usec" : 0,
      "schedPriority" : 81,
      "system_usec" : 43,
      "state" : [
        "TH_WAIT",
        "TH_UNINT"
      ],
      "waitEvent" : [
        1,
        10833992831745800243
      ]
    },
    "1470" : {
      "userTime" : 0,
      "systemTime" : 3.9291e-05,
      "system_usec" : 39,
      "id" : 1470,
      "basePriority" : 81,
      "user_usec" : 0,
      "kernelFrames" : [
        [
          0,
          86031389212
        ],
        [
          0,
          86031382392
        ],
        [
          0,
          86037009348
        ],
        [
          0,
          86052431800
        ],
        [
          0,
          86030994360
        ]
      ],

Hey! First post here. So Zoe, I’m guessing there isn’t a fix for this? I have had many of the same files and issues as what everyone is saying here, for the last two or more years it seemed to come with COVID. MAYBE it’s the GOVERNMENTS way of watching US?! There’s a lot of very weird stuff going on all over the world with governments breaking laws and trying to make very disturbing laws on our privacy! The program gets around all spyware manufacturers and providers!! It’s mind blowing! Just last night I found +GAX, searched it and found Genesis Engage. The screen front says they’re a call Center company, but last night I seen a link in my search that said something about having trouble activating remote screen share. It went on about this person moving and the “clients” (yes multiple peoples screens) screens could no be recorded or monitored. The admin of the forum replied and was going on the the iso could have found out they were connected and went over things for this hacker to check!! I looked for it today and I can’t find it. I think they have me in a virtual box and I can only see what they will let me see on the internet 😡 but yeah I’ll try to attach some files and screen shots!! Oh and tonight I noticed my iCloud files being encrypted. At first it was a couple that was when I contacted Apple for the 100th time and told them my files were being encrypted as I type this! They simply said have you changed your password and reset your iPhone to factory? I replied yes countless times. They said to go to the police. I was like I’ve done that before and they told me that’s what antivirus programs and service providers are for, they (the police) don’t have the equipment to look into hackers 🙄 Apple told me to go anyway lol so I’m going today! Oh and I found the red circle odd in the last shot