KnockKnock shows you what’s persistently installed on your Mac.

Malware installs itself persistently, to ensure it is automatically executed each time a computer is restarted. KnockKnock (UI) uncovers persistently installed software in order to generically reveal such malware. If the item is an executable binary, KnockKnock automatically queries VirusTotal with a hash of the binary in order to retrieve any information.