Odd$ GuardWho can get into this Mac? A check by Favorable Odds Tech Solutions

2 things could let someone into this computer right now.

Sample MacBook Air, macOS 15.1, scanned Thursday, October 8, 2026 at 10:58 PM.

2 need attention now, 4 are worth a look, 15 checks came back clear.

Needs attention now 2 items

AnyDesk can accept connections at any time

It is set to start on its own in the background, so anyone with its password can take control, even while nobody is at the computer.

What to do: If you do not use it on purpose, uninstall it (use its own uninstaller, or drag it from Applications to the Trash), then change your email and bank passwords from a different device.

Technical details

Area	Remote access
Type	Remote-control app
Installed at	/Applications/AnyDesk.app (version 9.0.6)
Background item	com.philandro.anydesk.service (All users, at startup, starts by itself)
Online right now	Yes, connected to the internet

Gatekeeper is turned off

This Mac no longer checks that apps come from identified developers before opening them, so anything you download can run. Scammers often walk people through turning this off.

What to do: Turn it back on: open Terminal, run "sudo spctl --master-enable", then check System Settings > Privacy & Security.

Technical details

Area	Security

Worth a look 4 items

"support01" is another administrator on this Mac

Administrators can install software and change any setting, so every admin account is a full key to this computer.

What to do: Make sure you know who uses this account. If you do not recognize it, remove it in System Settings > Users & Groups.

Technical details

Area	Accounts
Account	support01
Administrator	Yes

1 configuration profile is installed

Profiles can set a proxy, add trusted certificates, force browser settings or install apps. Workplaces use them on purpose, and so do scams and adware.

What to do: Open System Settings > General > Device Management (Profiles on older macOS) and remove any profile you do not recognize.

Technical details

Area	Device management
Profiles	com.secure-browsing.helper

Web traffic is routed through a proxy

All browsing passes through another server first. Workplaces use this, and attackers use it to watch or change what you see.

What to do: If this is not a work Mac, turn it off in System Settings > Network > (your network) > Details > Proxies. If it comes back, look for a configuration profile.

Technical details

Area	Network
Proxy server	HTTPS 203.0.113.24:8080

The Mac firewall is off

It is off on a new Mac. The firewall stops other computers on the network from reaching apps on this Mac that you did not mean to share.

What to do: Turn it on in System Settings > Network > Firewall. Apps you use keep working; macOS asks if one needs incoming connections.

Technical details

Area	Security

What was checked 21 checks

FlaggedRemote-control programs1 found (searched for 30 known tools)
ClearScreen Sharing / Remote ManagementOff
ClearRemote Login (SSH)Off
ClearRemote Apple EventsOff
FlaggedAdministrator accounts2 active
ClearHidden accountsNone
ClearPrograms that start with this Mac3 found, 3 look normal
ClearScheduled jobs (cron)None
FlaggedApp protection (Gatekeeper)Off
ClearSystem Integrity ProtectionOn
ClearBuilt-in malware protection (XProtect)On, version 5297
FlaggedFirewallOff
ClearDisk encryption (FileVault)On
ClearAdmin password prompts (sudo)On
ClearDevice management (MDM)Not enrolled
FlaggedConfiguration profiles1 found
ClearForced extensionsNone
ClearBrowser extensions (Chrome, Edge, Brave)2 listed, 0 flagged
ClearWebsite redirects (hosts file)None
FlaggedProxy settingsIn use
ClearOpen remote-access portsNone (Mac sharing is listed above)

Everything we found For a technician

User accounts (2)

Account	Enabled	Administrator	Hidden from sign-in	User ID
martha	Yes	Yes	No	501
support01	Yes	Yes	No	502

Programs that start with this Mac (3)

Name	Starts	Command	Publisher
com.philandro.anydesk.service	All users, at startup	/Applications/AnyDesk.app/Contents/MacOS/AnyDesk --service	Signed by philandro Software GmbH
com.google.keystone.agent	This user, at login	/Users/martha/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake	Signed by Google LLC
us.zoom.ZoomDaemon	All users, at startup	/Library/PrivilegedHelperTools/us.zoom.ZoomDaemon	Signed by Zoom Video Communications, Inc.

Scheduled jobs (cron) (0)

Nothing found.

Browser extensions (2)

Browser	Mac user	Profile	Extension	ID
Chrome	martha	Default	Google Docs Offline	ghbmnnjooekpmoecnnnilnnbdlolhkhi
Chrome	martha	Default	Secure Browsing Helper	aamfmnhcipnbjjnbfmaoooiohikifefk

Configuration profiles (1)

Profile	Scope
com.secure-browsing.helper	This user