EtreCheck version: 6.1.9 (6B057) Report generated: 2020-02-21 08:50:15 Download EtreCheck from https://etrecheck.com Runtime: 3:27 Performance: Excellent Problem: Computer is restarting Major Issues: Anything that appears on this list needs immediate attention. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Kernel panics - This system has experienced kernel panics that could be related to 3rd party software. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. High battery cycle count - Your battery may be losing capacity. Clean up - There are orphan files that could be removed. Runaway user process - A user process is using a large percentage of your CPU. 32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 “Catalina”. Limited drive access - More information may be available with Full Drive Access. Hardware Information: MacBook Air (13-inch, 2013 - 2014) / MacBook Air (13-inch, Mid 2013) MacBook Air Model: MacBookAir6,2 1 1.7 GHz Dual-Core Intel Core i7 (i7-4650U) CPU: 2-core 8 GB RAM - Not upgradeable BANK 0/DIMM0 - 4 GB DDR3 1600 BANK 1/DIMM0 - 4 GB DDR3 1600 Battery: Health = Normal - Cycle count = 1151 Video Information: Intel HD Graphics 5000 - VRAM: 1536 MB Color LCD 1440 x 900 Drives: disk0 - APPLE SSD SD0256F 251.00 GB (Solid State - TRIM: Yes) Internal PCI 5.0 GT/s x2 Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Container] 250.79 GB disk1 [APFS Virtual drive] 250.79 GB (Shared by 5 volumes) disk1s1 - M************ Data (APFS) [APFS Virtual drive] (Shared - 134.54 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 84 MB used) disk1s3 - Recovery (APFS) [Recovery] (Shared - 527 MB used) disk1s4 - VM (APFS) [APFS VM] (Shared - 1.07 GB used) disk1s5 - Macintosh HD (APFS) (Shared - 11.04 GB used) Mounted Volumes: disk1s1 - M************ Data [APFS Virtual drive] 250.79 GB (Shared - 134.54 GB used, 105.84 GB available, 103.39 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s4 - VM [APFS VM] 250.79 GB (Shared - 1.07 GB used, 103.39 GB free) APFS Mount point: /private/var/vm disk1s5 - Macintosh HD 250.79 GB (Shared - 11.04 GB used, 105.84 GB available, 103.39 GB free) APFS Mount point: / Encrypted Read-only: Yes Network: Interface en2: Thunderbolt Ethernet Interface en4: iPhone Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en3: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 32.33 GB available System Software: macOS Catalina 10.15.3 (19D76) Time since boot: About an hour Notifications: Norton.app one notification (one scheduled) CleanMyMac X.app one notification (one scheduled) Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple and CleanMyMac Unsigned Files: Launchd: /Library/LaunchDaemons/com.livescribe.PenCommService.plist Executable: /Library/Application Support/Livescribe/PenComm/PenCommService --daemon Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist Executable: /Library/Application Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd Details: Restrictive app permissions - possibly adware Login Item: /Applications/Echo Desktop.app/Contents/MacOS/Pen Auto Launcher.app 32-bit Applications: 5 32-bit apps Kernel Extensions: /Library/Extensions [Not Loaded] Soundflower.kext (MATT INGALLS, 2.0b2 - SDK 10.10) [Not Loaded] LivescribeSmartpen.kext (1.0) [Loaded] SymXIPS.kext (Symantec, 9.0.1 - SDK 10.10) [Loaded] SymInternetSecurity.kext (Symantec, 9.0.2 - SDK 10.10) [Loaded] SymIPS.kext (Symantec, 9.0.1 - SDK 10.10) [Loaded] NortonForMac.kext (Symantec, 9.0.0 - SDK 10.10) Startup Items: TiVoDesktop Path: /Library/StartupItems/TiVoDesktop System Launch Agents: [Not Loaded] 18 Apple tasks [Loaded] 174 Apple tasks [Running] 119 Apple tasks System Launch Daemons: [Not Loaded] 35 Apple tasks [Loaded] 183 Apple tasks [Running] 118 Apple tasks Launch Agents: [Running] com.iDrive.IDSyncUtil.plist (IDrive Incorporated - installed 2020-02-14) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2020-02-20) [Running] com.symantec.uiagent.application.MES.plist (Symantec - installed 2019-12-17) Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2019-02-09) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2019-02-09) [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2020-01-27) [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-10-28) [Other] com.livescribe.PenCommService.plist (? ce8953a9 - installed 2017-08-25) [Loaded] com.macpaw.CleanMyMac4.Agent.plist (MacPaw Inc. - installed 2019-12-08) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-02-20) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-05-15) [Running] com.prosoftnet.idrivedaemon.plist (IDrive Incorporated - installed 2020-02-14) [Loaded] com.prosoftnet.idsyncdaemon.plist (IDrive Incorporated - installed 2020-02-14) [Running] com.prosoftnet.idwifimanager.plist (IDrive Incorporated - installed 2020-02-14) [Loaded] com.symantec.SymLUHelper.MES.plist (Symantec - installed 2019-12-17) [Loaded] com.symantec.UninstallerToolHelper.MES.plist (Symantec - installed 2019-12-17) [Loaded] com.symantec.deepsightdownload.MES.plist (Symantec - installed 2019-12-17) [Loaded] com.symantec.dsp.nortonaggregatord.MES.plist (Symantec - installed 2019-12-17) [Running] com.symantec.kexthelper.MES.plist (Symantec - installed 2019-12-17) [Other] com.symantec.liveupdate.daemon.MES.plist (Symantec - installed 2019-12-17) [Other] com.symantec.mes.patcher.postreboot.plist (? 9e73ae72 - installed 2020-01-27) [Running] com.symantec.sharedsettings.MES.plist (? 84ffa067 - installed 2019-09-21) [Running] com.symantec.symdaemon.MES.plist (Symantec - installed 2019-12-17) [Loaded] com.symantec.symqual.detail.MES.plist (Symantec - installed 2019-12-17) [Loaded] com.symantec.symqual.panicreporter.MES.plist (Symantec - installed 2019-12-17) [Loaded] com.symantec.symqual.submit.MES.plist (Symantec - installed 2019-12-17) User Launch Agents: [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-08-21) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-02-06) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-02-06) [Loaded] com.macpaw.CleanMyMac4.Updater.plist (MacPaw Inc. - installed 2019-08-18) [Loaded] com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-05-02) User Login Items: [Running] AdobeResourceSynchronizer (Adobe Systems, Inc. - installed 2019-10-07) Application /Applications/Adobe Acrobat Reader DC.app/Contents/Helpers/AdobeResourceSynchronizer.app [Running] CleanMyMac X Menu (MacPaw Inc. - installed 2020-02-06) Modern Login Item /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app [Running] CleanMyMac X HealthMonitor (MacPaw Inc. - installed 2020-02-06) Modern Login Item /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app/Contents/Library/LoginItems/CleanMyMac X HealthMonitor.app [Running] Dropbox (Dropbox, Inc. - installed 2020-02-19) Application /Applications/Dropbox.app [Loaded] Pen Auto Launcher (? - installed 2019-08-04) Application /Applications/Echo Desktop.app/Contents/MacOS/Pen Auto Launcher.app [Loaded] Google Chrome (Google, Inc. - installed 2020-02-20) Application /Applications/Google Chrome.app [Running] IDriveMonitor (IDrive Incorporated - installed 2020-02-17) Application /Library/Application Support/IDriveforMac/IDriveHelperTools/IDriveMonitor.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2017-10-24) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-10-07) FlashPlayer-10.6: 32.0.0.330 (Adobe Systems, Inc. - installed 2020-02-11) Flash Player: 32.0.0.330 (Adobe Systems, Inc. - installed 2020-02-11) AdobePDFViewer: 19.012.20040 (Adobe Systems, Inc. - installed 2019-10-07) JavaAppletPlugin: 15.0.1 (Apple - installed 2017-06-04) PepperFlashPlayer: 32.0.0.330 (Adobe Systems, Inc. - installed 2020-02-11) User Internet Plug-ins: ZoomUsPlugIn: 4.5.2 (3370.0908) (Zoom Video Communications, Inc. - installed 2019-09-10) 3rd Party Preference Panes: Flash Player (installed 2020-01-27) TiVo Desktop (installed 2009-11-23) Time Machine: Time Machine information not available without Full Drive Access. Performance: System Load: 3.52 (1 min ago) 3.47 (5 min ago) 2.89 (15 min ago) Nominal I/O speed: 1.45 MB/s File system: 38.51 seconds Write speed: 327 MB/s Read speed: 517 MB/s CPU Usage Snapshot: Type Overall System 7 % User 36 % Idle 57 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) com.symantec.mes.systemextension 96.64 % (?) trustd (4) 49.22 % (Apple) WindowServer 7.12 % (Apple) EtreCheckPro 4.14 % (Etresoft, Inc.) sandboxd 4.08 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheckPro 537 MB (Etresoft, Inc.) mdworker_shared (27) 395 MB (Apple) Microsoft Word 242 MB (Microsoft Corporation) Dropbox (3) 228 MB (Dropbox, Inc.) MTLCompilerService (4) 209 MB (Apple) Top Processes Snapshot by Network Use: Process Input / Output (Source - Location) Mail 3 MB / 3 MB (Apple) mDNSResponder 516 KB / 96 KB (Apple) Dropbox 95 KB / 121 KB (Dropbox, Inc.) apsd 15 KB / 72 KB (Apple) com.symantec.mes.systemextension 23 KB / 35 KB (?) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) com.symantec.mes.systemextension 19 (?) WindowServer 3 (Apple) Mail 1 (Apple) hidd 0 (Apple) launchd 0 (Apple) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 138 MB Used RAM: 6.00 GB Cached files: 1.86 GB Available RAM: 2.00 GB Swap Used: 0 B Software Installs (past 30 days): Install Date Name (Version) 2020-01-27 Norton For Mac (8.5.3.115.115) 2020-01-27 Norton Security SKU (8.5.3.115.115) 2020-02-11 Adobe Flash Player (32.0.0.330) 2020-02-11 Adobe Pepper Flash Player (32.0.0.330) 2020-02-11 Norton For Mac.Universal (8.5.3.115.115) 2020-02-11 NIS_SKU.NS_ESD_8_0_MRF_19462_NS (8.5.3.115.115) 2020-02-11 Microsoft Excel (16.34.20020900) 2020-02-11 Microsoft OneNote (16.34.20020900) 2020-02-11 Microsoft Outlook (16.34.20020900) 2020-02-13 Microsoft PowerPoint (16.34.20020900) 2020-02-15 Microsoft Word (16.34.20020900) 2020-02-17 IDrive (1.0) 2020-02-20 Microsoft AutoUpdate (4.20.20021800) 2020-02-20 XProtectPlistConfigData (2114) 2020-02-20 MRTConfigData (1.55) Clean up: /Library/LaunchDaemons/com.symantec.mes.patcher.postreboot.plist /private/var/tmp/com.symantec.mes.patcher.postreboot/postreboot.sh Executable not found Diagnostics Information (past 7-30 days): 2020-02-21 07:24:08 Kernel Panic (4 times) Details: panic(cpu 0 caller 0xffffff801eb94a88): "a freed zone element has been modified in zone kalloc.128: expected 0xdeadbeefdeadbeef but found 0x ffffff8044574550, bits changed 0x2152416f9afafbbf, at offset 88 of 128 in element 0xffffff80310ed900, cookies 0x3f00114eedc1403a 0x53521f652 0cbd5d"@/BuildRoot/Library/Caches/com.apple.xbs/Sources/xnu/xnu-6153.8 1.5/osfmk/kern/zalloc.c:1229 3rd party kernel extensions: com.symantec.SymXIPS com.symantec.internetSecurity.kext com.symantec.ips.kext com.symantec.nfm.kext 2020-02-17 09:43:27 Norton Security.app - Crash Executable: /Applications/Norton Security.app