EtreCheck version: 5.6.1 (5217) Report generated: 2020-10-10 22:02:15 Download EtreCheck from https://etrecheck.com Runtime: 1:43 Performance: Excellent Sandbox: Enabled Full drive access: Enabled Problem: Other problem Description: Camera on iMac works only in safe mode Major Issues: Anything that appears on this list needs immediate attention. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. No Time Machine backup - Time Machine backup not found. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. 32-bit Apps - This computer has 32-bits apps will not work on current versions of the operating system. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: iMac (Retina 5K, 27-inch, 2017) iMac Model: iMac18,3 4.2 GHz Quad-Core Intel Core i7 (i7-7700K) CPU: 4-core 16 RAM - Upgradeable BANK 0/DIMM0 - 8 GB DDR4 SO-DIMM 2400 BANK 0/DIMM1 - Empty BANK 1/DIMM0 - 8 GB DDR4 SO-DIMM 2400 BANK 1/DIMM1 - Empty Video Information: Radeon Pro 580 - VRAM: 8 GB iMac (built-in) 5120 x 2880 Drives: disk0 - APPLE SSD SM0128L 121.33 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Fusion Drive] 121.02 GB disk2 [APFS Virtual drive] 2.12 TB (Shared by 5 volumes) disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 94.51 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared) disk2s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk2s5 - Macintosh HD (APFS) (Shared - 11.08 GB used) disk1 - APPLE HDD ST2000DM001 2.00 TB (Mechanical - 7200 RPM) Internal SATA 6 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 [APFS Fusion Drive] 2.00 TB disk2 [APFS Virtual drive] 2.12 TB (Shared by 5 volumes) disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 94.51 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared) disk2s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk2s5 - Macintosh HD (APFS) (Shared - 11.08 GB used) Mounted Volumes: disk2s1 - Macintosh HD - Data [APFS Virtual drive] 2.12 TB (Shared - 94.51 GB used, 2.00 TB free) APFS Mount point: /System/Volumes/Data Encrypted disk2s4 - VM [APFS VM] 2.12 TB (Shared - 2.15 GB used, 2.00 TB free) APFS Mount point: /private/var/vm disk2s5 - Macintosh HD 2.12 TB (Shared - 11.08 GB used, 2.00 TB free) APFS Mount point: / Encrypted Read-only: Yes Network: Interface en0: Ethernet Interface en1: Wi-Fi Interface en4: Bluetooth PAN Interface bridge0: Thunderbolt Bridge Printer sharing: Enabled System Software: macOS Catalina 10.15.7 (19H2) Time since boot: Less than an hour Notifications: EtreCheck.app 2 notifications Security: Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus software: Apple and Kaspersky Printer sharing: Enabled Unsigned Files: Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist Executable: /Library/Application Support/Citrix Receiver/ctxusbd Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.trackoff.Shuffler.plist Executable: /Volumes/T******F/TrackOFF.app/Contents/MacOS/Shuffler Running app: /Library/Printers/Brother/Utilities/Server/USBserver.app/Contents/MacOS/USBserver Running app: /Library/Printers/Brother/Utilities/Server/NETserver.app/Contents/MacOS/NETserver Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin/Contents/PlugIns/FlashPlayer-10.6.plugin Plugin: /Library/Internet Plug-Ins/CitrixICAClientPlugIn.plugin Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin Apps: 15 32-bit Applications: 2 32-bit apps Kernel Extensions: /Library/Application Support/Citrix Receiver CitrixGUSB.kext (12.9.1 - SDK 10.9) /Library/Extensions klif.kext (3.6.15a58) klsat.kext (1.0.1a5) klnke.kext (2.1.0) TrackballWorks.kext (1.5.0 - SDK 10.11) System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 190 Apple tasks [Running] 107 Apple tasks System Launch Daemons: [Not Loaded] 33 Apple tasks [Loaded] 187 Apple tasks [Running] 117 Apple tasks Launch Agents: [Running] com.brother.LOGINserver.plist (? a1772de2 - installed 2018-08-29) [Loaded] com.citrix.AuthManager_Mac.plist (? b095ca60 - installed 2018-04-28) [Running] com.citrix.ReceiverHelper.plist (? 369731a0 - installed 2018-04-28) [Running] com.citrix.ServiceRecords.plist (? 8e6543d - installed 2018-04-28) [Running] com.kaspersky.kav.gui.plist (Kaspersky Lab UK Limited - installed 2020-09-17) Launch Daemons: [Loaded] com.adobe.fpsaud.plist (Adobe Inc. - installed 2020-08-25) [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2020-09-04) [Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2018-04-28) [Running] com.kaspersky.kav.kavd.plist (Kaspersky Lab UK Limited - installed 2020-09-17) [Other] com.kaspersky.kav.plist (? 2b70c5f8 - installed 2019-06-25) [Running] com.kaspersky.sysextctrld.plist (Kaspersky Lab UK Limited - installed 2020-09-17) [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed ) [Loaded] com.trackoff.HelperTool.plist (TrackOFF Inc - installed 2019-04-11) User Launch Agents: [Loaded] com.logmein.GoToMeeting.G2MAIRUploader.plist (LogMeIn, Inc. - installed 2020-09-08) [Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (LogMeIn, Inc. - installed 2020-09-08) [Other] com.techyutils.ummhlpr.plist (? 0 - installed 2019-04-11) [Loaded] com.trackoff.Shuffler.plist (? 0 - installed 2019-04-11) User Login Items: [Not Loaded] Kaspersky Secure Connection Login Item (App Store - installed 2020-07-17) Modern Login Item /Applications/Kaspersky Secure Connection.app/Contents/Library/LoginItems/Kaspersky Secure Connection Login Item.app [Not Loaded] AutoLauncher (TrackOFF Inc - installed 2019-03-05) Modern Login Item /Applications/TrackOFF.app/Contents/Library/LoginItems/AutoLauncher.app [Running] TrackballWorksHelper (Kensington Computer Products Group - installed 2020-05-05) Application /Library/PreferencePanes/TrackballWorks.prefPane/Contents/Resources/TrackballWorksHelper.app Internet Plug-ins: FlashPlayer-10.6: 32.0.0.433 (? - installed 2020-09-08) CitrixICAClientPlugIn: 12.9.1 (? - installed 2020-06-16) Flash Player: 32.0.0.433 (? - installed 2020-09-08) Safari Extensions: ABP (App Store - installed 2020-07-28) ABP Control Panel (App Store - installed 2020-07-28) Kaspersky Security (Kaspersky Lab UK Limited - installed 2020-09-28) 3rd Party Preference Panes: Flash Player (Adobe Inc. - installed 2020-08-25) TrackballWorks (Kensington Computer Products Group - installed 2020-05-05) Backup: Time Machine Not Configured! Performance: System Load: 1.53 (1 min ago) 0.79 (5 min ago) 0.33 (15 min ago) Nominal I/O speed: 17.32 MB/s File system: 24.85 seconds Write speed: 646 MB/s Read speed: 2095 MB/s CPU Usage Snapshot: Type Overall System: 1 % User: 2 % Idle: 97 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) EtreCheck 14.46 % (App Store) Other processes 7.56 % (?) trustd 0.15 % (Apple) kav_agent 0.13 % (Kaspersky Lab UK Limited) USBserver 0.13 % (? - /Library/Printers/Brother/Utilities/Server/USBserver.app) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheck 530 MB (App Store) Dock 166 MB (Apple) accountsd 61 MB (Apple) AppleSpell 59 MB (Apple) AMPLibraryAgent 55 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Other processes 144 KB / 110 KB (?) CommCenter 7 KB / 5 KB (Apple) backgroundtaskmanagementagent 0 B / 0 B (Apple) mediaremoteagent 0 B / 0 B (Apple) cfprefsd 0 B / 0 B (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 10.18 GB Used RAM: 3.55 GB Cached files: 2.27 GB Available RAM: 12.45 GB Swap Used: 0 B Software Installs (past 30 days): Install Date Name (Version) 2020-09-28 saasmacdl (21.0.0.464) 2020-09-28 Kaspersky Security Cloud (21.0.0.464) 2020-09-28 Security Update 2020-005 (10.14.6) 2020-09-28 macOS Catalina (10.15.7) 2020-09-28 Safari (14.0) 2020-09-28 Voice Update - Gordon (1.3.13) 2020-09-29 Keynote (10.0) 2020-09-29 Pages (10.0) 2020-09-29 iMovie (10.1.16) 2020-09-29 Numbers (10.0) 2020-10-02 XProtectPlistConfigData (2132) 2020-10-08 MRTConfigData (1.67) 2020-10-08 Zoom (5.3.52877.0927) 2020-10-10 EtreCheck (5.6.1) Clean up: /Library/LaunchDaemons/com.kaspersky.kav.plist /Library/Application Support/Kaspersky Lab/KAV/Binaries/kav Executable not found ~/Library/LaunchAgents/com.techyutils.ummhlpr.plist ~/Library/Application Support/umm/ummhlpr.app/Contents/MacOS/ummhlpr Executable not found Diagnostics Information (past 7-30 days): End of report