EtreCheckPro version: 6.8.9 (68074) Report generated: 2025-03-28 18:08:32 Download EtreCheckPro from https://etrecheck.com Runtime: 4:10 Performance: Good Problem: Other problem Description: malware Major Issues: Anything that appears on this list needs immediate attention. Unsigned files - There are unsigned software files installed that could be malicious and should be reviewed. Automatic updates disabled - Automatic updates are disabled. This computer is at risk of malware infection. Security updates disabled - Security updates are disabled. This computer is at risk of malware infection. Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Configuration profiles found - This computer may have configuration profiles installed. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. System modifications - There are a large number of system modifications running in the background. Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: MacBook Pro (16-inch, 2019) Status: Supported MacBook Pro Model: MacBookPro16,1 2.3 GHz 8-Core Intel Core i9 (i9-9880H) CPU: 8-core 32 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 16 GB DDR4 2667 BANK 2/ChannelB-DIMM0 - 16 GB DDR4 2667 Battery: Health = Normal - Cycle count = 61 Video Information: Intel UHD Graphics 630 - VRAM: 1536 MB AMD Radeon Pro 5500M - VRAM: 8 GB LED Cinema Display 2560 x 1440 Drives: disk0 - APPLE SSD AP4096N 4.00 TB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express S.M.A.R.T. Details: 1% used, 22.25 TB written, 100% health, 22 unsafe shutdowns disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 4.00 TB disk1 [APFS Virtual drive] 4.00 TB (Shared by 6 volumes) disk1s1 (APFS) [APFS Container] (9.35 GB used) disk1s1s1 - K**************o (APFS) [APFS Snapshot] (9.35 GB used) disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (1.59 TB used) disk1s3 - Preboot (APFS) [APFS Preboot] (2.49 GB used) disk1s4 - Recovery (APFS) [Recovery] (1.16 GB used) disk1s5 - VM (APFS) [APFS VM] (20 KB used) disk1s6 - Update (APFS) (6 MB used) disk2 - G-DRIVE USB 6.00 TB External USB Up to 5 Gb/s USB disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk2s2 - 6*************k (Journaled HFS+) 6.00 TB (5.80 TB used) disk2s3 - G*********S (MS-DOS FAT32) 4.08 GB (938 KB used) Mounted Volumes: disk1s1s1 - K**************o [APFS Snapshot] Filesystem: APFS Mount point: / Read-only: Yes Used: 9.35 GB Shared values Size: 4.00 TB Free: 2.40 TB disk1s2 - Macintosh HD - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Encrypted Used: 1.59 TB Shared values Size: 4.00 TB Free: 2.40 TB disk1s3 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Used: 2.49 GB Shared values Size: 4.00 TB Free: 2.40 TB disk1s5 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Used: 20 KB Shared values Size: 4.00 TB Free: 2.40 TB disk1s6 - Update Filesystem: APFS Mount point: /System/Volumes/Update Used: 6 MB Shared values Size: 4.00 TB Free: 2.40 TB disk2s2 - 6*************k Filesystem: Journaled HFS+ Mount point: /Volumes/6*************k Used: 5.80 TB Size: 6.00 TB Free: 196.12 GB Available: 196.13 GB disk2s3 - G*********S Filesystem: MS-DOS FAT32 Mount point: /Volumes/G*********S Used: 938 KB Size: 4.08 GB Free: 4.08 GB USB: USB 3.1 bus VIA Labs, Inc. - USB3.0 Hub VIA Labs, Inc. - USB3.0 Hub HGST - G-DRIVE USB Realtek - USB 10/100/1000 LAN USB 3.1 bus USB 3.1 bus Brother - MFC-J5720DW VLI Inc. - USB 2.0 BILLBOARD VIA Labs, Inc. - USB2.0 Hub VIA Labs, Inc. - USB2.0 Hub VIA Labs, Inc. - USB Billboard Device T2Bus Apple - composite_device Apple Inc. - Touch Bar Backlight Apple Inc. - Touch Bar Display Apple Inc. - Apple Internal Keyboard / Trackpad Apple - Headset Apple Inc. - Ambient Light Sensor Apple Inc. - FaceTime HD Camera (Built-in) Apple Inc. - Apple T2 Controller Network: Interface en7: Ethernet Adaptor (en4) Interface en8: Ethernet Adaptor (en5) Interface en13: USB 10/100/1000 LAN Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en6: Thunderbolt Ethernet Slot 1, Port 1 Interface bridge0: Thunderbolt Bridge Interface bridge0: Thunderbolt Bridge 2 Interface en10: iPhone Printer sharing: Enabled Remote Management: Enabled Remote login: Enabled Firewall: Blocked apps: com.masi.ddpp.serverapp System Software: macOS Ventura 13.7.5 (22H527) Installed 2025-03-28 Time since boot: Less than an hour Configuration Profiles: com.apple.extensiblesso ExtensionData/useSiteAutoDiscovery TeamIdentifier Type URLs[0] ExtensionIdentifier Notifications: EtreCheck.app 2 notifications Creative Cloud.app 3 notifications Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Automatic Updates: Disabled Security Updates: Disabled Antivirus software: None! Printer sharing: Enabled Remote Management: Enabled Remote login: Enabled Unsigned Files: Launchd: ~/Library/LaunchAgents/com.nchsoftware.videopadpaid.schedule.CacheDeleteAll.plist Command: /Applications/VideoPad.app/Contents/MacOS/VideoPad -scheduled_launch '-bgtask delcache' Apps: 19 Kernel Extensions: /Applications/Toast 14 Titanium/Toast Audio Assistant.app [Not Loaded] Soundflower.kext - com.Cycling74.driver.Soundflower (1.6.7 - SDK 10.7) System Launch Daemons: [Not Loaded] 37 Apple tasks [Loaded] 181 Apple tasks [Running] 171 Apple tasks [Other] 2 Apple tasks System Launch Agents: [Not Loaded] 21 Apple tasks [Loaded] 198 Apple tasks [Running] 179 Apple tasks Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2024-12-07) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2024-12-07) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper [Not Loaded] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2025-01-20) Executable: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2 [Not Loaded] com.adobe.agsservice.plist (Adobe Inc. - installed 2025-02-19) Executable: /Library/Application Support/Adobe/AdobeGCClient/AGSService [Loaded] com.apple.ist.ds.appleconnect.appleconnectuninstall.plist (Apple - installed 2024-01-08) Executable: /Library/PrivilegedHelperTools/com.apple.ist.ds.appleconnect.appleconnectuninstall [Not Loaded] com.apple.ist.ds.appleconnect.firstaidd.plist (Apple - installed 2022-10-20) Executable: /Library/Application Support/AppleConnect/AppleConnectAgent.app/Contents/Helpers/com.apple.ist.ds.appleconnect.firstaidd [Not Loaded] com.apple.ist.ds.appleconnect.kdctunnel.plist (Apple - installed 2022-10-20) Executable: /Library/Frameworks/AppleConnectServices.framework/Helpers/com.apple.ist.ds.appleconnect.kdctunnel [Running] com.apple.ist.ds.appleconnect.plist (Apple - installed 2024-01-08) Executable: /Library/PrivilegedHelperTools/com.apple.ist.ds.appleconnect [Not Loaded] com.apple.ist.ds.rlogd.plist (Apple - installed 2022-10-20) Executable: /Library/Frameworks/RemoteLogger.framework/Helpers/com.apple.ist.ds.rlogd [Running] com.apple.ist.feedbackkit.FKDaemonService.plist (Apple - installed 2024-01-08) Executable: /Library/PrivilegedHelperTools/com.apple.ist.feedbackkit.FKDaemonService [Loaded] com.prosofteng.DRInstaller.plist (PROSOFT Engineering, Inc. - installed 2024-03-18) Executable: /Library/PrivilegedHelperTools/com.prosofteng.DRInstaller [Loaded] com.quark.QXPHelper.plist (Quark - installed 2024-01-08) Executable: /Library/PrivilegedHelperTools/com.quark.QXPHelper [Loaded] com.quark.quarkupdate.quhelper.plist (Quark Inc. - installed 2024-01-08) Executable: /Library/PrivilegedHelperTools/com.quark.quarkupdate.quhelper [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2024-11-07) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2024-12-07) Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper [Not Loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2025-01-20) Command: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud --showwindow=false --onOSstartup=true [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2025-02-19) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=logon [Not Loaded] com.adobe.ccxprocess.plist (Adobe Inc. - installed 2025-02-20) Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot [Not Loaded] com.apple.ist.ds.appleconnect.AppleConnectAgent.plist (Apple - installed 2022-10-20) Executable: /Library/Application Support/AppleConnect/AppleConnectAgent.app/Contents/MacOS/AppleConnectAgent [Running] com.brother.LOGINserver.plist (Brother Industries, LTD. - installed 2024-07-22) Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver User Launch Agents: [Loaded] com.DigiDNA.iMazing2Mac.Mini.plist (DigiDNA SARL - installed 2020-03-28) Executable: /Applications/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/MacOS/iMazing Mini [Other] com.adobe.ARM.***.plist (Not signed - installed 2015-06-09) Executable: /Volumes/F***B/A**********s/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper [Other] com.adobe.ARM.***.plist (Not signed - installed 2020-11-16) Executable: /Volumes/F***B/A**********s/A*****************o/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper [Other] com.adobe.ARM.***.plist (Not signed - installed 2010-09-15) Executable: /Applications/Adobe Acrobat 9 Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2025-02-19) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=scheduled [Loaded] com.nchsoftware.videopadpaid.schedule.CacheDeleteAll.plist (Not signed - installed 2020-11-23) Command: /Applications/VideoPad.app/Contents/MacOS/VideoPad -scheduled_launch '-bgtask delcache' User Login Items: [Loaded] Adobe Acrobat (Adobe Inc. - installed 2025-03-21) Application /Applications/Adobe Acrobat DC/Adobe Acrobat.app [Running] AdobeResourceSynchronizer (Adobe Inc. - installed 2025-03-21) Application /Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app [Running] Default Folder X (St. Clair Software - installed 2022-10-28) Application /Applications/Default Folder X.app [Not Loaded] WhatsApp Login Helper (App Store - installed 2024-10-24) Modern Login Item /Applications/WhatsApp.localized/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app [Not Loaded] AppleConnectMenu (Apple - installed 2022-10-20) Modern Login Item /Library/Application Support/AppleConnect/AppleConnectAgent.app/Contents/Library/LoginItems/AppleConnectMenu.app [Running] System Information (Apple - installed 2025-03-19) Application /System/Applications/Utilities/System Information.app [Running] System Events (Apple - installed 2025-03-19) Application /System/Library/CoreServices/System Events.app Applications: 547 Apple apps 205 3rd party apps 124 x86-only apps 19 unsigned apps App Extensions: Plugins: [Loaded] Intents - /Applications/WhatsApp-1.localized/WhatsApp.app Widgets: [Loaded] WordWidgetKit - /Applications/Microsoft Word.app [Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app Notification providers: [Loaded] ServiceExtension - /Applications/WhatsApp-1.localized/WhatsApp.app Share services: [Loaded] OneNote - /Applications/Microsoft OneNote.app Finder sync extensions: [Loaded] Adobe Content Synchronizer Finder Extension - /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app Action services: [Loaded] Word Counter Pro - /Applications/Word Counter Pro.app QuickLook Previews: [Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck [Loaded] InDesign QuickLook Extension - /Applications/Adobe InDesign 2024/Adobe InDesign 2024.app com.adobe.indesign-document *.indd com.adobe.indesign-template *.indt QuickLook Previews (legacy): QuarkXPress - /Applications/QuarkXPress 2023.app com.quark.xpress.doc *.qxd com.quark.xpress.v6 *.qxp com.quark.copydesk.doc *.qct EtreCheckProQL - /Applications/Utilities/EtreCheckPro-3.app com.etresoft.etrecheck4 *.etrecheck EtreCheckQL - /Applications/EtreCheck.app com.etresoft.etrecheckmas *.etrecheck Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2024-01-08) AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2025-01-20) AdobePDFViewer: 21.005.20058 (Adobe Systems, Inc. - installed 2024-01-08) 3rd Party Preference panels: Quark Update Preferences (Quark Inc. - installed 2023-07-21) Backup: Time Machine information is limited without Full Disk Access Destinations: 6*************k [Local] (Last used) 22 local snapshots Oldest local snapshot: 2025-03-27 18:29:48 Last local snapshot: 2025-03-28 17:50:40 One other local snapshot Performance: System Load: 2.01 (1 min ago) 2.38 (5 min ago) 2.32 (15 min ago) Nominal I/O usage: 1.19 MB/s File system: 24.38 seconds Write speed: 2772 MB/s Read speed: 3058 MB/s CPU Usage Snapshot: Type Overall System: 2 % User: 2 % Idle: 96 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) WindowServer 20.82 % (Apple) firefox 14.84 % (Mozilla Corporation) plugin-container (9) 12.48 % (Mozilla Corporation) kernel_task 11.67 % (Apple) backupd 6.72 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheckPro 1003 MB (Etresoft, Inc.) plugin-container (9) 640 MB (Mozilla Corporation) firefox 460 MB (Mozilla Corporation) MTLCompilerService (10) 433 MB (Apple) mds_stores 342 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) corespeechd 3 KB / 15 MB (Apple) firefox 5 MB / 378 KB (Mozilla Corporation) mDNSResponder 564 KB / 369 KB (Apple) SubmitDiagInfo 487 KB / 1 KB (Apple) trustd 151 KB / 129 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 7 (Apple) firefox 3 (Mozilla Corporation) backupd 2 (Apple) mds 2 (Apple) bluetoothd 1 (Apple) Virtual Memory Information: Physical RAM: 32 GB Free RAM: 15.99 GB Used RAM: 8.61 GB Cached files: 7.40 GB Available RAM: 23.39 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2025-02-09 Adobe Acrobat (24.005.20400) (24.005.20400) - Installer 2025-02-24 Adobe Acrobat (24.005.20421) (24.005.20421) - Installer 2025-02-26 ‎WhatsApp (25.2.79) - App Store 2025-02-26 Brother iPrint&Scan (12.1.0) - App Store 2025-02-26 Duplicate File Finder (8.4) - App Store 2025-03-12 Adobe Acrobat (25.001.20432) (25.001.20432) - Installer 2025-03-21 Adobe Acrobat (25.001.20438) (25.001.20438) - Installer 2025-03-28 Safari (18.3.1) - Software update 2025-03-28 macOS 13.7.5 (13.7.5) - Software update Clean up: ~/Library/LaunchAgents/com.adobe.ARM.***.plist /Applications/Adobe Acrobat 9 Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper Executable not found ~/Library/LaunchAgents/com.adobe.ARM.***.plist /Volumes/F***B/A**********s/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper Executable not found ~/Library/LaunchAgents/com.adobe.ARM.***.plist /Volumes/F***B/A**********s/A*****************o/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper Executable not found Diagnostics Information (past 60 days): 2025-03-28 21:43:05 /Library/Logs/DiagnosticReports/ProxiedDevice-Bridge/recoverylogd-2025-03-28-214144.ips Crash (10 times) First occurrence: 2025-03-28 21:41:44 2025-03-28 17:50:56 mdworker Crash (4 times) First occurrence: 2025-03-28 17:50:55 Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdworker 2025-03-28 17:35:22 accountsd Crash Executable: /System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd 2025-03-27 21:21:04 signpost_reporter High CPU Use (4 times) First occurrence: 2025-03-22 21:14:14 Executable: /usr/libexec/signpost_reporter 2025-03-27 13:45:07 Adobe Acrobat.app High CPU Use (3 times) First occurrence: 2025-03-26 16:07:43 Executable: /Applications/Adobe Acrobat DC/Adobe Acrobat.app 2025-03-26 00:52:52 photoanalysisd High CPU Use Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd 2025-03-21 12:49:19 Finder.app High CPU Use Executable: /System/Library/CoreServices/Finder.app End of report