EtreCheck version: 5.2 (5C006) Report generated: 2019-06-13 11:11:19 Download EtreCheck from https://etrecheck.com Runtime: 5:35 Performance: Good Problem: Computer is restarting Description: Shutting down inelegantly overnight while open but idle other than TM backup Major Issues: Anything that appears on this list needs immediate attention. Kernel panics - This system has experienced kernel panics that could be related to 3rd party software. More than one antivirus app - This machine has multiple antivirus apps installed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Heavy RAM usage - This machine is using a large amount of RAM. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed. System modifications - There are a large number of system modifications running in the background. Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance. 32-bit Apps - This machine has 32-bits apps will not work after macOS 10.14 “Mojave”. Hardware Information: MacBook Pro (Retina, 15-inch, Late 2013) MacBook Pro Model: MacBookPro11,3 1 2.3 GHz Intel Core i7 (i7-4850HQ) CPU: 4-core 16 RAM - Not upgradeable BANK 0/DIMM0 - 8 GB DDR3 1600  ok BANK 1/DIMM0 - 8 GB DDR3 1600  ok Battery: Health = Normal - Cycle count = 16 Video Information: Intel Iris Pro - VRAM: 1536 MB NVIDIA GeForce GT 750M - VRAM: 2 GB Color LCD 2880 x 1800 SyncMaster 1280 x 1024 VA2431 Series 1920 x 1080 Drives: disk0 - APPLE SSD SM1024F 1.00 TB (Solid State - TRIM: Yes) Internal PCI 5.0 GT/s x4 Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Container] 1.00 TB disk1 [APFS Virtual drive] 1.00 TB (Shared by 4 volumes) disk1s1 - Macintosh HD (APFS) (Shared - 867.04 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 49 MB used) disk1s3 - Recovery (APFS) [Recovery] (Shared - 510 MB used) disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk2 - BUFFALO HD-LXU3 2.00 TB External USB 480 Mbit/s USB disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk2s2 - 2*****p (Journaled HFS+) 2.00 TB (234.09 GB used) disk3 - WD My Book 25EE 8.00 TB External USB 480 Mbit/s USB disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 [Core Storage Container] 8.00 TB disk4 - 8*****P (Journaled HFS+) 8.00 TB (3.68 TB used) disk3s3 - B*******X (Journaled HFS+) 134 MB Mounted Volumes: disk1s1 - Macintosh HD 1.00 TB (130.40 GB free) APFS Mount point: / Encrypted disk1s4 - VM [APFS VM] (Shared - 2.15 GB used) APFS Mount point: /private/var/vm disk2s2 - 2*****p 2.00 TB (1.77 TB free) Journaled HFS+ Mount point: /Volumes/2*****p Owners enabled: No disk4 - 8*****P 8.00 TB (4.32 TB free) Journaled HFS+ Mount point: /Volumes/8*****P Encrypted Owners enabled: No disk5s2 - T******************s 8.00 TB (4.32 TB free) Mac OS Extended (Case-sensitive, Journaled) Disk Image Mount point: /Volumes/T******************s Network: Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en5: iPhone Interface en3: Bluetooth PAN Interface bridge0: Thunderbolt Bridge Interface en4: Thunderbolt Ethernet Interface en7: iPad Interface en6: Apple USB Ethernet Adapter iCloud Quota: 97.07 GB available System Software: macOS Mojave 10.14.5 (18F132) Time since boot: About an hour Configuration Files: /etc/hosts - Count: 1 Notifications: 9 notifications /Applications/Parallels Desktop.app one notification /Applications/EtreCheck.app 2 notifications /Applications/Airmail 3.app 100 notifications Security: System Status Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus apps: Avast, Trusteer, and MalwareBytes Unsigned Files: Launchd: /Library/LaunchDaemons/com.avast.init.plist Executable: /Applications/Avast.app/Contents/Backend/hub/init.sh Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.avast.update.plist Executable: /Applications/Avast.app/Contents/Backend/scripts/update/update.sh Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.avast.uninstall.plist Executable: /Library/Application Support/Avast/autouninstall/autouninstall.sh Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.shutdown-gpg-agent.plist Executable: /usr/local/MacGPG2/libexec/shutdown-gpg-agent Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.amazon.music.startup.plist Executable: /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.amazon.music.plist Executable: /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.fix.plist Executable: /usr/local/MacGPG2/libexec/fixGpgHome Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.avast.userinit.plist Executable: /Applications/Avast.app/Contents/Backend/hub/userinit.sh Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/homebrew.mxcl.redis.plist Executable: /usr/local/opt/redis/bin/redis-server /usr/local/etc/redis.conf Details: Exact match found in the whitelist - probably OK 32-bit Applications: 43 32-bit apps Kernel Extensions: /Applications/Acronis True Image.app [Loaded] fileprotector.kext (2.1.0 - SDK 10.13) /Applications/Avast.app [Loaded] AvastFileShield.kext (4.0.0 - SDK 10.12) [Loaded] AvastPacketForwarder.kext (2.1 - SDK 10.12) /Applications/Google Drive File Stream.app [Not Loaded] dfsfuse.kext (31.0 - SDK 10.14) /Applications/Parallels Desktop.app [Loaded] prl_hypervisor.kext (14.1.3 45485 - SDK 10.9) [Loaded] prl_netbridge.kext (14.1.3 45485 - SDK 10.9) [Not Loaded] prl_usb_connect.kext (14.1.3 45485 - SDK 10.9) [Loaded] prl_vnic.kext (14.1.3 45485 - SDK 10.9) /Library/Application Support/Paragon Software/com.paragon-software.spbackup [Not Loaded] com.paragon-software.kernelio.kext (1.0 - SDK 10.12) /Library/Extensions [Loaded] ufsd_NTFS.kext (15.5.41 - SDK 10.10) [Loaded] VDMounter.kext (1370.2 - SDK 10.8) [Not Loaded] SteerMouse.kext (4.1.9 - SDK 10.6) /System/Library/Extensions [Not Loaded] speedit.kext (0.32) [Not Loaded] MissingSyncBlackBerry.kext (2.0.2) [Not Loaded] NovatelWireless3G.kext (2.1) [Not Loaded] NovatelWirelessFilter.kext (1.0.1) [Not Loaded] HotSync Classic Seize.kext (3.2.1) [Loaded] RIMBBUSB.kext (0.0.67) [Not Loaded] RIMBBVSP.kext (0.0.67) [Not Loaded] SierraSupport.kext (1.4.0) [Not Loaded] SierraSupportKicker.kext (1.4.0) [Not Loaded] SMSIWirelessModem.kext (3.2.6) [Loaded] ZoomAudioDevice.kext (1.2 - SDK 10.9) /System/Library/Extensions/NovatelWireless3G.kext/Contents/Plugins [Not Loaded] NovatelWireless3GData.kext (2.1) /System/Library/Extensions/SMSIWirelessModem.kext/Contents/PlugIns [Not Loaded] SMSIWirelessCDC.kext (3.2.6) [Not Loaded] SMSIWirelessSerial.kext (3.2.6) Startup Items: ParallelsTransporter Path: /Library/StartupItems/ParallelsTransporter System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 163 Apple tasks [Running] 121 Apple tasks System Launch Daemons: [Not Loaded] 31 Apple tasks [Loaded] 183 Apple tasks [Running] 123 Apple tasks Launch Agents: [Loaded] app.letteropener.agent.plist (Atlan Creative GmbH - installed 2018-10-08) [Loaded] app.letteropener.softwareupdate.agent.plist (Atlan Creative GmbH - installed 2018-10-08) [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2018-10-05) [Other] com.avast.secureline.update-agent.plist (? 4f732c42 - installed 2015-06-16) [Loaded] com.avast.userinit.plist (? 4b9d47d7 - installed 2019-05-08) [Other] com.brother.LOGINserver.plist (? a1772de2 - installed 2011-09-22) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-05-10) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-05-10) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2019-05-10) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-06-04) [Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2019-04-26) [Running] com.trusteer.rapport.rapportd.plist (Trusteer LTD - installed 2018-12-24) [Loaded] org.gpgtools.Libmacgpg.xpc.plist (Lukas Pitschl - installed 2018-10-22) [Loaded] org.gpgtools.macgpg2.fix.plist (? d7ac5146 - installed 2018-09-20) [Running] org.gpgtools.macgpg2.shutdown-gpg-agent.plist (? df7bd0cf - installed 2018-09-20) [Loaded] org.gpgtools.updater.plist (Lukas Pitschl - installed 2018-10-22) Launch Daemons: [Running] com.acronis.active_protection.plist (Acronis International GmbH - installed 2019-04-16) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-10-05) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-10-05) [Loaded] com.avast.init.plist (? fe750b9b - installed 2019-05-08) [Loaded] com.avast.uninstall.plist (? 1d68eef4 - installed 2019-05-08) [Loaded] com.avast.update.plist (? f4a2548f - installed 2019-05-08) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2019-05-10) [Running] com.lobotomo.IPSecuritasDaemon.plist (Christoph Nadig - installed 2017-07-11) [Loaded] com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2017-10-26) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2019-05-28) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2019-05-10) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-06-04) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2016-05-06) [Running] com.nordvpn.osx.helper.plist (? e0112837 - installed 2019-04-15) [Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2019-04-26) [Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2019-05-04) [Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2019-04-26) [Loaded] com.paragon-software.spbackup.helper.plist (Paragon Software GmbH - installed 2019-04-26) [Other] com.paragon-software.vdmounter.plist (Apple - installed 2019-05-04) [Loaded] com.parallels.toolbox.UninstallAppsHelper.plist (Parallels International GmbH - installed 2019-05-20) [Running] com.trusteer.rooks.rooksd.plist (Trusteer LTD - installed 2018-12-24) [Loaded] com.tunnelbear.mac.tbeard.plist (TunnelBear, Inc. - installed 2019-06-07) User Launch Agents: [Other] com.adobe.ARM.***.plist (? 0 - installed 2010-02-25) [Running] com.amazon.music.plist (? 0 - installed 2018-04-27) [Not Loaded] com.amazon.music.startup.plist (? 0 - installed 2018-04-27) [Running] com.c-command.SpamSieve.LaunchAgent.plist (C-Command Software, LLC - installed 2019-05-23) [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-02-13) [Loaded] com.google.Chrome.framework.plist (Google, Inc. - installed 2019-06-13) [Loaded] com.skype.skype.shareagent.plist (? 0 - installed 2017-11-27) [Running] com.tunnelbear.mac.tbeara.plist (TunnelBear, Inc. - installed 2019-02-04) [Running] homebrew.mxcl.redis.plist (? 0 - installed 2014-09-15) [Running] net.optimum.iptv.optimumapp.agent.v3.plist (CSC Holdings, Inc. - installed 2017-03-24) [Running] ws.agile.1PasswordAgent.plist (? 0 - installed 2014-05-29) User Login Items: 1Password mini (AgileBits Inc. - installed 2019-04-22) (Modern Login Item - /Applications/1Password 6.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebits.onepassword4-helper.app) Dropbox.app (Dropbox, Inc. - installed 2019-06-04) (Application - /Applications/Dropbox.app) Evernote.app (Evernote - installed 2019-05-28) (Application - /Applications/Evernote.app) EvernoteHelper.app (Evernote - installed 2019-05-28) (Application - /Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app) FSMenuAppLoginItemHelper (Paragon Software GmbH - installed 2019-04-26) (Modern Login Item - /Applications/NTFS for Mac.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app) NoCrashMBP.app (? - installed 2019-05-17) (Application - /Applications/NoCrashMBP.app) Parallels Toolbox.app (Parallels International GmbH - installed 2019-05-20) (Application - /Applications/Parallels Toolbox.app) ZoomOpener.app (Zoom Video Communications, Inc. - installed 2018-11-05) (Application - ~/.zoomus/ZoomOpener.app) Internet Plug-ins: WebVideoPlugin: 3.0.5.26 (? - installed 2015-09-22) o1dbrowserplugin: 5.41.3.0 (? - installed 2015-12-16) JavaAppletPlugin: 15.0.1 (Apple - installed 2014-05-15) Flip4Mac WMV Plugin: 2.4.1.4 (? - installed 2012-03-18) CouponPrinter-FireFox: Version 1.1.5 (? - installed 2010-02-01) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-05-14) WidevineMediaOptimizer: 6.0.0.12757 (? - installed 2014-06-09) PanasonicDrmPlugin_1: 1.2.1.0 (Gurmukh Khabrani - installed 2014-02-06) PDF Browser Plugin: 2.4.4 (? - installed 2012-04-01) Silverlight: 5.1.50901.0 (? - installed 2017-03-06) iPhotoPhotocast: 7.0 (Apple - installed 2010-03-30) googletalkbrowserplugin: 5.41.3.0 (? - installed 2015-12-11) AdobePDFViewer: 19.012.20034 (Adobe Systems, Inc. - installed 2019-05-14) GarminGpsControl: 4.0.3.0 Release (? - installed 2014-01-03) USSCWebVideoPlugin: 3.0.5.26 (? - installed 2015-09-22) DirectorShockwave: 12.0.7r148 (? - installed 2013-12-05) User Internet Plug-ins: ZoomUsPlugIn: 4.1.35374.1217 (Zoom Video Communications, Inc. - installed 2019-01-18) WebEx64: 1.0 (? - installed 2015-10-18) WebEx: 1.0 (? - installed 2011-02-15) Move_Media_Player: npmnqmp 071303000004 (? - installed 2009-02-12) Picasa: 1.0 (? - installed 2010-12-02) CWSAssistantPlugin: 100 (? - installed 2018-04-25) FreeConferenceCallPlugin: FreeConferenceCallPlugin_x86_64 1.3.0 (? - installed 2019-04-08) PanasonicDrmPlugin_3: 3.0.1.1 (Gurmukh Khabrani - installed 2015-07-22) Audio Plug-ins: AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-05-20) BluetoothAudioPlugIn: 6.0.12 (Apple - installed 2019-05-20) AirPlay: 2.0 (Apple - installed 2019-05-20) AppleAVBAudio: 740.1 (Apple - installed 2019-05-20) BridgeAudioSP: 5.46 (Apple - installed 2019-05-20) iSightAudio: 7.7.3 (Apple - installed 2019-05-20) Safari Extensions: "Open In" button for Internet Explorer.safariextz - Parallels - http://www.parallels.com (installed 2018-09-18) 1Password.safariextz - AgileBits - https://agilebits.com/onepassword (installed 2014-10-26) 1Password Safari Extension Companion - App Store (installed 2018-05-18) AdBlock.safariextz - BetaFish, Inc. - https://getadblock.com (installed 2018-10-08) wrc.safariextz - AVAST Software - http://www.avast.com (installed 2015-03-20) Download Video - App Store (installed 2019-02-07) Open in Internet Explorer - App Store (installed 2019-03-12) Screenshot Page - App Store (installed 2019-02-07) 3rd Party Preference Panes: Flip4Mac WMV (installed 2011-11-22) FUSE (installed 2017-09-21) GPG Suite (installed 2018-10-22) Launchpad-Control (installed 2012-05-03) MacFUSE (installed 2010-09-15) MySQL (installed 2011-07-13) NTFS (installed 2019-04-26) Perian (installed 2011-07-23) SharePoints (installed 2006-04-15) SteerMouse (installed 2014-05-26) Trusteer Endpoint Protection (installed 2019-05-06) Xmarks for Safari (installed 2015-06-03) Time Machine: Skip System Files: No Mobile backups: Yes Auto backup: Yes Volumes being backed up: Macintosh HD: Disk size: 1.00 TB - Disk used: 869.95 GB Destinations: 8*****P [Local] (Last used) Total size: 8.00 TB Total number of backups: 67 Oldest backup: 2018-08-17 09:01:25 Last backup: 2019-06-12 10:55:33 2 local snapshots Oldest local snapshot: 2019-06-12 10:21:47 Last local snapshot: 2019-06-13 09:47:18 Performance: System Load: 1.39 (1 min ago) 2.14 (5 min ago) 3.15 (15 min ago) Nominal I/O speed: 11.77 MB/s File system: 22.30 seconds Write speed: 776 MB/s Read speed: 929 MB/s CPU Usage Snapshot: Type Overall System 7 % User 11 % Idle 82 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) WindowServer 17.48 % (Apple) python 15.42 % (? - /usr/bin) Console 13.22 % (Apple) diagnosticd 11.08 % (Apple) Google Chrome Helper (19) 9.98 % (Google, Inc.) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Parallels (5) 2.36 GB (? - /Applications) Google Chrome Helper (19) 1.45 GB (Google, Inc.) EtreCheckPro 668 MB (Etresoft, Inc.) Airmail 3 453 MB (App Store) mdworker_shared (19) 312 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) com.avast.proxy 9 MB / 245 KB (AVAST Software a.s.) Dropbox 744 KB / 2 MB (Dropbox, Inc.) mDNSResponder 2 MB / 248 KB (Apple) Slack 269 KB / 103 KB (App Store) ath 66 KB / 90 KB (Apple) Top Processes Snapshot by Energy Use: Energy (0-100) ( - ) python 274 (? - /usr/bin) WindowServer 10 (Apple) Airmail 3 5 (App Store) diagnosticd 4 (Apple) backupd 4 (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 15 MB Used RAM: 12.81 GB Cached files: 3.17 GB Available RAM: 3.19 GB Swap Used: 195 MB Software Installs (past 30 days): Install Date Name (Version) 2019-05-16 Kindle (1.26.1) 2019-06-04 Microsoft AutoUpdate (4.11.19051201) 2019-06-04 Microsoft Excel (16.25.19051201) 2019-06-04 Microsoft OneNote (16.25.19051201) 2019-06-04 Microsoft Outlook (16.25.19051201) 2019-06-04 Microsoft Word (16.25.19051201) 2019-06-04 Microsoft PowerPoint (16.25.19051201) 2019-06-04 Gatekeeper Configuration Data (167) 2019-06-10 OneDrive (19.070.0410) 2019-06-10 Slack (3.4.2) 2019-06-11 NordVPN IKE (4.13.5) 2019-06-12 Google Drive File Stream (1.2.13.35) 2019-06-13 EtreCheck (5.2) Clean up: /Applications/Avast.app/Contents/Backend/launch/com.avast.account-sync.plist @AV_BASE_DIR/utils/com.avast.account-sync Executable not found ~/Library/LaunchAgents/com.adobe.ARM.***.plist /Applications/Adobe Reader 9/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper Executable not found /Library/LaunchAgents/com.brother.LOGINserver.plist /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver Executable not found /Library/LaunchAgents/com.avast.secureline.update-agent.plist /Library/Application Support/AvastSecureLine/components/update/com.avast.secureline.update-agent Executable not found Diagnostics Information (past 7 days): 2019-06-12 08:51:00 backupd CPU Executable: /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd 2019-06-11 16:08:29 rapporthelper.app Crash Executable: /Library/Rapport/*/rapporthelper.app 2019-06-10 20:28:46 soagent.app CPU Executable: /System/Library/PrivateFrameworks/MessagesKit.framework/Versions/A/Resources/soagent.app 2019-06-07 13:29:03 signpost_reporter CPU Executable: /usr/libexec/signpost_reporter 2019-06-07 09:47:37 Airmail 3.app CPU Executable: /Applications/Airmail 3.app 2019-05-24 09:45:17 Kernel Panic 3rd party kernel extensions: com.acronis.fileprotector com.avast.FileShield com.avast.PacketForwarder com.lobotomo.IPSecuritasFilter com.paragon-software.filesystems.ntfs com.paragon-software.kext.VDMounter com.parallels.kext.hypervisor com.parallels.kext.netbridge com.parallels.kext.vnic com.rim.driver.BlackBerryUSBDriverInt zoom.us.ZoomAudioDevice End of report