EtreCheckPro version: 6.5.3 (6F011) Report generated: 2021-10-29 20:49:58 Download EtreCheckPro from https://etrecheck.com Runtime: 2:08 Performance: Excellent Problem: Other problem Description: After upgrading Big Sur from 10.6 to 10.6.1, the Macintosh HD seemed a bit corrupt. Disk First Aid froze the entire computer during fsroot check. Major Issues: Anything that appears on this list needs immediate attention. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: MacBook Air (M1, 2020) MacBook Air Model: MacBookAir10,1 2.40 GHz Apple M1 (m1) CPU: 8-core 16 GB RAM - Not upgradeable Battery: Health = Normal - Cycle count = 11 Video Information: Apple M1 Color LCD 2880 x 1800 Drives: disk0 - APPLE SSD AP1024Q 1.00 TB (Solid State - TRIM: Yes) Internal Apple Fabric NVM Express disk0s1 [APFS Container] 524 MB disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes) disk1s1 - iSCPreboot (APFS) [APFS Preboot] (Shared - 8 MB used) disk1s2 - xART (APFS) (Shared - 6 MB used) disk1s3 - Hardware (APFS) (Shared - 680 KB used) disk1s4 - Recovery (APFS) [Recovery] (Shared - 20 KB used) disk0s2 [APFS Container] 994.66 GB disk3 [APFS Virtual drive] 994.66 GB (Shared by 6 volumes) disk3s1 (APFS) [APFS Container] (Shared - 15.33 GB used) disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.33 GB used) disk3s2 - Preboot (APFS) [APFS Preboot] (Shared - 543 MB used) disk3s3 - Recovery (APFS) [Recovery] (Shared - 810 MB used) disk3s4 - Update (APFS) (Shared - 12 MB used) disk3s5 - Data (APFS) [APFS Virtual drive] (Shared - 169.07 GB used) disk3s6 - VM (APFS) [APFS VM] (Shared - 20 KB used) disk0s3 [APFS Container] 5.37 GB disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes) disk2s1 - Recovery (APFS) [Recovery] (Shared - 856 MB used) disk2s2 - Update (APFS) (Shared - 299 KB used) Mounted Volumes: disk1s1 - iSCPreboot [APFS Preboot] 524 MB (Shared - 8 MB used, 505 MB free) APFS Mount point: /System/Volumes/iSCPreboot disk1s2 - xART 524 MB (Shared - 6 MB used, 505 MB free) APFS Mount point: /System/Volumes/xarts disk1s3 - Hardware 524 MB (Shared - 680 KB used, 505 MB free) APFS Mount point: /System/Volumes/Hardware disk3s1s1 - Macintosh HD [APFS Snapshot] 994.66 GB (Shared - 15.33 GB used, 825.33 GB available, 808.69 GB free) APFS Mount point: / Read-only: Yes disk3s2 - Preboot [APFS Preboot] 994.66 GB (Shared - 543 MB used, 808.69 GB free) APFS Mount point: /System/Volumes/Preboot disk3s3 - Recovery [Recovery] 994.66 GB (Shared - 810 MB used, 808.69 GB free) APFS Mount point: /Volumes/Recovery disk3s4 - Update 994.66 GB (Shared - 12 MB used, 808.69 GB free) APFS Mount point: /System/Volumes/Update disk3s5 - Data [APFS Virtual drive] 994.66 GB (Shared - 169.07 GB used, 825.33 GB available, 808.69 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk3s6 - VM [APFS VM] 994.66 GB (Shared - 20 KB used, 808.69 GB free) APFS Mount point: /System/Volumes/VM disk5s1 - B**********************************1 911.78 GB (Shared - 177.43 GB used, 492.96 GB free) APFS Disk Image Mount point: /Volumes/B**********************************1 Network: Interface en3: Ethernet Adaptor (en3) Interface en4: Ethernet Adaptor (en4) Interface en0: AirPort 802.11 a/b/g/n/ac/ax Screen sharing: Enabled System Software: macOS Big Sur 11.6.1 (20G224) Time since boot: About 4 hours Notifications: MacUpdater.app 30 notifications Little Snitch Agent.app 3 notifications SuperDuper!.app 3 notifications Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple and ClamXAV Screen sharing: Enabled Unsigned Files: Launchd: /Library/LaunchDaemons/com.microsoft.teams.TeamsUpdaterDaemon.plist Executable: /Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon Details: Restrictive config permissions - possibly adware Launchd: /Library/LaunchDaemons/com.maintain.CocktailScheduler.plist Executable: /usr/bin/osascript -e try -e 'set schedulerOwner to do shell script "defaults read /Library/'Application Support'/Cocktail/Scheduler.plist SchedulerOwner"' -e 'do shell script "users"' -e 'if the result contains schedulerOwner then' -e 'do shell script "/bin/sh /Library/'Application Support'/Cocktail/Scheduler.sh"' -e 'end if' -e 'end try' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.barebones.authd.plist Executable: /Library/PrivilegedHelperTools/com.barebones.authd Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/local.job.plist Executable: /usr/bin/env Details: Domain name invalid - possibly adware Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.maintain.Sleep.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to sleep' -e 'end try' -e 'end ignoring' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.netputing.airprintactivator.plist Executable: ~/Library/Application Support/AirPrintActivator/AirPrintDaemon.app/Contents/MacOS/AirPrintDaemon Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.barebones.bbedit.plist Executable: /Library/PrivilegedHelperTools/com.barebones.bbedit Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/net.whatroute.whatroute2helper.plist Executable: /Library/PrivilegedHelperTools/net.whatroute.whatroute2helper Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.maintain.ShutDown.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to shut down' -e 'end try' -e 'end ignoring' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.maintain.LogOut.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to log out' -e 'end try' -e 'end ignoring' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.maintain.Restart.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to restart' -e 'end try' -e 'end ignoring' Details: Exact match found in the legitimate list - probably OK Plugin: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin Plugin: /Library/Internet Plug-Ins/MeetingJoinPlugin.plugin Plugin: ~/Library/Internet Plug-Ins/WebEx64.plugin Plugin: /Library/Audio/Plug-Ins/HAL/DVCPROHDAudio.plugin Preference Pane: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.prefPane Apps: 6 Old Applications: 8 x86-only apps System Extensions: [Running] Little Snitch Network Extension - version 5.3.1 (Objective Development Software GmbH - 2021-10-14) Application: /Applications/Little Snitch.app - version 5.3.1 (Objective Development Software GmbH - 2021-10-24) Description: This system extension enables Little Snitch to filter network traffic. [Not Loaded] Little Snitch Endpoint Security - version 5.3.1 (Objective Development Software GmbH - 2021-10-14) Application: /Applications/Little Snitch.app - version 5.3.1 (Objective Development Software GmbH - 2021-10-24) Description: Little Snitch Endpoint Security Kernel Extensions: /Library/Extensions [Not Loaded] hp_io_printerclassdriver_enabler.kext - com.hp.hpio.hp-io-printerclassdriver-enabler (19.26.0 - SDK 10.12) [Not Loaded] hp_fax_io.kext - com.hp.kext.hp-fax-io (5.28.0 - SDK 10.12) [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0) [Not Loaded] JMicronATA.kext - com.jmicron.JMicronATA (1.1.6) /Library/StartupItems/BRESINKx86Monitoring [Not Loaded] BRESINKx86Monitoring.kext - com.bresink.driver.BRESINKx86Monitoring (9.0) System Launch Daemons: [Not Loaded] 37 Apple tasks [Loaded] 173 Apple tasks [Running] 152 Apple tasks [Other] 2 Apple tasks System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 174 Apple tasks [Running] 143 Apple tasks Launch Daemons: [Running] at.obdev.littlesnitch.daemon.plist (Objective Development Software GmbH - installed 2021-10-14) [Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc - installed 2019-10-28) [Loaded] com.barebones.authd.plist (? 7d7988a6 - installed 2011-09-15) [Loaded] com.barebones.bbedit.plist (? 76c927a0 - installed 2010-05-07) [Not Loaded] com.maintain.CocktailScheduler.plist (? 300b8a41 - installed 2021-10-02) [Not Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-08-04) [Loaded] com.microsoft.office.licensing.helper.plist (? 834d778 - installed 2020-08-04) [Not Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2020-08-04) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (? 0 - installed 2021-07-28) [Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2020-12-09) [Loaded] com.soma-zone.LaunchControl.Helper.plist (Robby Pahlig - installed 2021-01-22) [Loaded] net.whatroute.whatroute2helper.plist (? d3b0e6b - installed 2017-05-24) [Loaded] org.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2021-04-25) [Running] uk.co.canimaansoftware.ClamXAV.Engine.plist (Mark Allan - installed 2021-09-20) [Running] uk.co.canimaansoftware.ClamXAV.HelperTool.plist (Mark Allan - installed 2021-09-21) [Loaded] uk.co.canimaansoftware.ClamXAV.HelperToolUpdater.plist (Mark Allan - installed 2021-09-21) Launch Agents: [Running] at.obdev.littlesnitch.agent.plist (Objective Development Software GmbH - installed 2021-10-14) [Not Loaded] com.maintain.LogOut.plist (? 1d95663e - installed 2021-10-02) [Not Loaded] com.maintain.PurgeInactiveMemory.plist (Apple - installed 2021-10-02) [Not Loaded] com.maintain.Restart.plist (? 5421a7fd - installed 2021-10-02) [Not Loaded] com.maintain.ShutDown.plist (? 9b7e817c - installed 2021-10-02) [Not Loaded] com.maintain.Sleep.plist (? 94f768ba - installed 2021-10-02) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2020-08-04) [Not Loaded] com.oracle.java.Java-Updater.plist (? c44c69f0 - installed 2020-12-09) [Loaded] local.job.plist (? d729ae2a - installed 2021-01-22) [Loaded] org.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2021-04-25) [Running] uk.co.canimaansoftware.ClamXAV.UI-Helper.plist (Mark Allan - installed 2021-09-20) [Loaded] uk.co.canimaansoftware.ClamXAV.UninstallWatcher.plist (Mark Allan - installed 2021-04-09) User Launch Agents: [Running] com.netputing.airprintactivator.plist (? 0 - installed 2011-05-15) User Login Items: [Running] DashlaneAgent (Dashlane - installed 2021-10-14) Modern Login Item /Applications/Dashlane.app/Contents/Library/LoginItems/DashlaneAgent.app [Not Loaded] DashlaneAutoStartHelper (Dashlane - installed 2021-10-14) Modern Login Item /Applications/Dashlane.app/Contents/Library/LoginItems/DashlaneAutoStartHelper.app [Not Loaded] Find Any File Hotkey (Thomas Tempelmann - installed 2021-07-16) Modern Login Item /Applications/Find Any File.app/Contents/Library/LoginItems/Find Any File Hotkey.app [Not Loaded] JustJoinHelper (App Store - installed 2021-01-22) Modern Login Item /Applications/JustJoin.app/Contents/Library/LoginItems/JustJoinHelper.app [Not Loaded] JobWatch (Robby Pahlig - installed 2021-07-04) Modern Login Item /Applications/LaunchControl/LaunchControl.app/Contents/Library/LoginItems/JobWatch.app [Not Loaded] QuickLaunch (Robby Pahlig - installed 2021-07-04) Modern Login Item /Applications/LaunchControl/LaunchControl.app/Contents/Library/LoginItems/QuickLaunch.app [Loaded] MacUpdaterLaunchHelper (CoreCode Limited - installed 2021-10-26) Modern Login Item /Applications/MacUpdater.app/Contents/Library/LoginItems/MacUpdaterLaunchHelper.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2021-09-29) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app Internet Plug-ins: JavaAppletPlugin: Java 8 Update 281 build 09 (? - installed 2021-04-05) MeetingJoinPlugin: (? - installed 2017-05-24) Audio Plug-ins: DVCPROHDAudio: 1.2 (? - installed 2006-01-17) Safari Extensions: SafariExtensionDMG (Dashlane - installed 2021-10-14) 3rd Party Preference Panes: Java (? - installed 2020-12-09) Backup: Skip System Files: No Mobile backups: Yes Auto backup: Yes Destinations: T****s [Network] (Last used) Total size: 670.55 GB Total number of backups: 15 Oldest backup: 2021-10-11 06:04:30 Last backup: 2021-10-29 19:44:48 5 local snapshots Oldest local snapshot: 2021-10-28 23:34:15 Last local snapshot: 2021-10-29 20:47:15 Performance: System Load: 1.73 (1 min ago) 2.64 (5 min ago) 2.32 (15 min ago) Nominal I/O speed: 0.50 MB/s File system: 24.24 seconds Write speed: 3048 MB/s Read speed: 2178 MB/s CPU Usage Snapshot: Type Overall System: 4 % User: 4 % Idle: 92 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) EtreCheckPro 17.98 % (Etresoft, Inc.) WindowServer 13.04 % (Apple) kernel_task 10.22 % (Apple) diskimages-helper 2.00 % (Apple) backupd 1.62 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) clamd 1.26 GB (Mark Allan) EtreCheckPro 776 MB (Etresoft, Inc.) DashlaneAgent.app 199 MB (Dashlane) Finder 199 MB (Apple) CalendarAgent 156 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) mDNSResponder 3 MB / 2 MB (Apple) apsd 31 KB / 37 KB (Apple) trustd 51 KB / 4 KB (Apple) netbiosd 19 KB / 5 KB (Apple) rapportd 2 KB / 1 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 6 (Apple) diskimages-helper 1 (Apple) backupd 1 (Apple) ControlCenter 1 (Apple) DashlaneAgent.app 0 (Dashlane) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 354 MB Used RAM: 13.93 GB Cached files: 1.73 GB Available RAM: 2.07 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2021-09-14 macOS 11.6 (11.6) 2021-09-25 XProtectPlistConfigData (2151) 2021-09-29 HP Compatibility Printer Software 2021-09-29 Numbers (11.2) 2021-09-29 Pages (11.2) 2021-09-29 Keynote (11.2) 2021-10-24 iMovie (10.3.0) 2021-10-24 GarageBand (10.4.4) 2021-10-24 SuperDuper! (121.5) 2021-10-26 Zoom (5.8.3.2240) 2021-10-28 Safari (15.1) 2021-10-28 macOS 11.6.1 (11.6.1) 2021-10-28 RosettaUpdateAuto (1.0.0.0.1.1634640245) 2021-10-28 Device Support Update (1.0.0.0.1.1632960232) 2021-10-28 MRTConfigData (1.84) Diagnostics Information (past 7-30 days): 2021-10-29 19:42:47 mdsync High CPU Use (3 times) Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdsync 2021-10-28 18:46:27 backupd High CPU Use Executable: /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd End of report