I see people mentioning ~/Library/LaunchAgents to look for suspicious apps. I should mention there are at least 4 other places where a launch agent could start

I see people mentioning ~/Library/LaunchAgents to look for suspicious apps. I should mention there are at least 4 other places where a launch agent could start on OSX: ~/Library/LaunchDaemons ~/Library/LaunchAgents /Library/LaunchDaemons /Library/LaunchAgents Not to mention Login Items under System Settings. Finally, I hope it's obvious if you're infected for all you know all your legitimate looking launch agents could be infected and secretly run the malware in a background process upon execution.