EtreCheck version: 5.0 (5A004) Report generated: 2023-11-26 04:04:15 Download EtreCheck from https://etrecheck.com Runtime: 9:38 Performance: Poor Problem: Beachballing Description: Sticky pointer, wont let go. Major Issues: Anything that appears on this list needs immediate attention. No Time Machine backup - Time Machine backup not found. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Poor performance - EtreCheck report took over 10 minutes to run. This is very unusual. More than one antivirus app - This machine has multiple antivirus apps installed. Minor Issues: These issues do not need immediate attention but they may indicate future problems. Apps crashing - There have been numerous app crashes. Clean up - There are orphan files that could be removed. System modifications - There are a large number of system modifications running in the background. 32-bit Apps - This machine has 32-bits apps that may have problems in the future. Hardware Information: iMac (21.5-inch, Mid 2011) iMac Model: iMac12,1 1 2.7 GHz Intel Core i5 (i5-2500S) CPU: 4-core 8 GB RAM - Upgradeable BANK 0/DIMM0 - 2 GB DDR3 1333 ok BANK 1/DIMM0 - 2 GB DDR3 1333 ok BANK 0/DIMM1 - 2 GB DDR3 1333 ok BANK 1/DIMM1 - 2 GB DDR3 1333 ok Video Information: AMD Radeon HD 6770M - VRAM: 512 MB iMac 1920 x 1080 Drives: disk0 - WDC WD1001FALS-403AA0 1.00 TB (Mechanical - 7200 RPM) Internal SATA 3 Gigabit Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 - Macintosh HD (Journaled HFS+) 999.35 GB (729.12 GB used) disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB disk2 - WD External 1.00 TB External USB 480 Mbit/s USB disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk2s2 - S***y (Journaled HFS+) 999.86 GB (703.38 GB used) disk3 - 2.00 TB External FireWire Up to 800 Mb/sec disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 - S****o (Journaled HFS+) 2.00 TB (1.30 TB used) Mounted Volumes: disk0s2 - Macintosh HD 999.35 GB (270.22 GB free) Journaled HFS+ Mount point: /Volumes/Macintosh HD disk2s2 - S***y 999.86 GB (296.22 GB free) Journaled HFS+ Mount point: / disk3s2 - S****o 2.00 TB (698.42 GB free) Journaled HFS+ Mount point: /Volumes/S****o Network: Interface usbmodemFD140: Љ 2 Interface usbmodemFA120: Љ Interface en0: Ethernet Interface en5: iPad Interface en4: iPhone Interface en6: iPhone 2 Interface en7: iPad 2 Interface fw0: FireWire Interface en1: Wi-Fi 802.11 a/b/g/n Interface en3: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 39.91 GB available System Software: macOS Sierra 10.12.6 (16G2136) Time since boot: About 15 hours Configuration Files: /etc/hosts - Count: 58 Security: System Status Gatekeeper Enabled System Integrity Protection Enabled Unsigned Files: Launchd: /Library/LaunchAgents/com.maintain.LogOut.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to log out' -e 'end try' -e 'end ignoring' Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.maintain.Restart.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to restart' -e 'end try' -e 'end ignoring' Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.maintain.CocktailScheduler.plist Executable: /usr/bin/osascript -e try -e 'set schedulerOwner to do shell script "defaults read /Library/'Application Support'/Cocktail/Scheduler.plist SchedulerOwner"' -e 'do shell script "users"' -e 'if the result contains schedulerOwner then' -e 'do shell script "/bin/sh /Library/'Application Support'/Cocktail/Scheduler.sh"' -e 'end if' -e 'end try' Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.torrents-time.helper.plist Executable: /Library/PrivilegedHelperTools/com.torrents-time.helper Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.bombich.ccchelper.plist Executable: /Library/PrivilegedHelperTools/com.bombich.ccchelper Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.DigiDNA.iMazing2Mac.Mini.plist Executable: /Applications/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/MacOS/iMazing Mini Launchd: ~/Library/LaunchAgents/com.dxo.PhotoLab2LaunchAgent.plist Executable: ~/Library/Application Support/DxO Labs/LaunchAgents/photoLab2LaunchAgent Launchd: /Library/LaunchAgents/com.maintain.Sleep.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to sleep' -e 'end try' -e 'end ignoring' Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/mega.mac.megaupdater.plist Executable: /Applications/MEGAsync.app/Contents/MacOS/MEGAupdater Details: Domain name invalid - possibly adware Launchd: /Library/LaunchAgents/com.maintain.ShutDown.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to shut down' -e 'end try' -e 'end ignoring' Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.linotype.FontExplorerX.securityhelper.plist Executable: /Library/PrivilegedHelperTools/com.linotype.FontExplorerX.securityhelper Details: Exact match found in the whitelist - probably OK 32-bit Applications: 27 32-bit apps Kernel Extensions: /Applications/AirParrot 2.app [Loaded] APExtFramebuffer.kext (Squirrels LLC, 1.7 - SDK 10.11) [Loaded] AirParrotDriver.kext (Squirrels LLC, 1.8 - SDK 10.8) /Applications/Disk Drill.app [Not Loaded] SecureDisk.kext (Justin Johnson, 1.0 - SDK 10.12) /Applications/DiskWarrior.app [Not Loaded] DiskWarriorPreview.kext (Alsoft, Inc, 5.1 - SDK 10.5) /Applications/EaseUS Data Recovery Wizard.app [Not Loaded] EaseUSDriver_m1.kext (CHENGDU Yiwo Tech Development Co., Ltd, 1.13.5 - SDK 10.16) /Applications/TechTool Pro 11.app [Not Loaded] spdKernel.kext (Micromat, Inc., 1.0 - SDK 10.14) /Library/Application Support/Malwarebytes/MBAM/Kext [Loaded] MB_MBAM_Protection.kext (Malwarebytes Corporation, 4.21 - SDK 10.14) /Library/Extensions [Loaded] USBOverdrive.kext (A. Levi Montalcini, 3.3 - SDK 10.9) /Library/Extensions/USBOverdrive.kext/Contents/PlugIns [Not Loaded] USBOverdriveBT.kext (A. Levi Montalcini, 3.3 - SDK 10.9) [Not Loaded] USBOverdriveHID.kext (A. Levi Montalcini, 3.3) Startup Items: TuxeraNTFSUnmountHelper Path: /Library/StartupItems/TuxeraNTFSUnmountHelper System Launch Agents: [Not Loaded] 7 Apple tasks [Loaded] 178 Apple tasks [Running] 50 Apple tasks [Killed] 51 Apple tasks System Launch Daemons: [Not Loaded] 40 Apple tasks [Loaded] 169 Apple tasks [Running] 67 Apple tasks [Killed] 41 Apple tasks [Other] 2 Apple tasks Launch Agents: [Running] com.maintain.SystemEvents.plist (Apple - installed 2020-06-19) [Not Loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2023-08-23) [Not Loaded] com.maintain.PurgeInactiveMemory.plist (Apple - installed 2023-08-14) [Running] com.ecamm.iglasses3agent.plist (Ecamm Network, LLC - installed 2022-06-05) [Other] com.microsoft.update.agent.plist (? 9d1344fb - installed 2022-10-09) [Not Loaded] com.adobe.GC.AGM.plist (? d4db19f7 - installed 2023-05-15) [Not Loaded] com.maintain.Sleep.plist (? 94f768ba - installed 2022-12-02) [Running] com.trusteer.rapport.rapportd.plist (Trusteer LTD - installed 2023-06-14) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2023-09-15) [Not Loaded] com.maintain.LogOut.plist (? 1d95663e - installed 2022-12-02) [Not Loaded] com.maintain.Restart.plist (? 5421a7fd - installed 2020-06-19) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (? b24f8446 - installed 2023-05-15) [Not Loaded] com.maintain.ShutDown.plist (? 9b7e817c - installed 2020-06-19) Launch Daemons: [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2023-09-26) [Other] com.adobe.fpsaud.plist (? 2afb3af7 - installed 2018-12-17) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2023-09-15) [Loaded] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2023-09-23) [Loaded] com.bombich.ccchelper.plist (? bc948f55 - installed 2020-02-14) [Not Loaded] com.maintain.CocktailScheduler.plist (? 300b8a41 - installed 2022-12-02) [Not Loaded] com.maintain.HideSpotlightMenuBarIcon.plist (Apple - installed 2023-08-14) [Other] com.adobe.agsservice.plist (? 141ce5d4 - installed 2023-05-15) [Running] com.cleverfiles.cfbackd.plist (Justin Johnson - installed 2020-02-02) [Running] com.torrents-time.helper.plist (? 0 - installed 2018-07-09) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2022-10-09) [Loaded] com.linotype.FontExplorerX.securityhelper.plist (? a4b09c2d - installed 2018-05-23) [Running] com.crystalidea.macsfancontrol.smcwrite.plist (Ilya Parniuk - installed 2022-04-16) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2019-05-13) [Loaded] com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2018-07-26) [Loaded] com.rogueamoeba.aceagent.plist (Rogue Amoeba Software, LLC - installed 2018-07-21) [Running] com.trusteer.rooks.rooksd.plist (Trusteer LTD - installed 2023-06-14) User Launch Agents: [Loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2019-12-17) [Not Loaded] com.linotype.FontFolderProtector.plist (Linotype GmbH - installed 2023-09-02) [Loaded] com.Box.Box-Edit.launch.plist (Box, Inc. - installed 2023-10-04) [Loaded] com.DigiDNA.iMazing2Mac.Mini.plist (? 0 - installed 2022-10-22) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (? 0 - installed 2019-03-04) [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-10-27) [Running] com.imobie.silentcleanserver.plist (iMobie Inc. - installed 2019-12-01) [Loaded] com.dxo.PhotoLab2LaunchAgent.plist (? 0 - installed 2019-01-13) [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-27) [Not Loaded] mega.mac.megaupdater.plist (? 0 - installed 2022-10-30) User Login Items: Macs Fan Control.app (Ilya Parniuk - installed 2022-10-13) (/Applications/Macs Fan Control.app) USBOverdriveHelper.app (A. Levi Montalcini - installed 2018-04-30) (/Library/PreferencePanes/USB Overdrive.prefPane/Contents/Resources/USBOverdriveHelper.app) Mail.app (Apple - installed 2018-04-07) (/Applications/Mail.app) Calendar.app (Apple - installed 2018-04-07) (/Applications/Calendar.app) Messages.app (Apple - installed 2019-10-17) (/Applications/Messages.app) WhatsApp (old).app (WhatsApp Inc. - installed 2023-11-09) (/Applications/WhatsApp.app) iClock.app (Plum Amazing Software LLC - installed 2021-11-23) (/Applications/iClock.app) USBOverdriveHelper (A. Levi Montalcini - installed 2018-04-30) (/Library/PreferencePanes/USB Overdrive.prefPane/Contents/Resources/USBOverdriveHelper.app/Contents/MacOS/USBOverdriveHelper) iClock (Plum Amazing Software LLC - installed 2021-11-23) (/Applications/iClock.app/Contents/MacOS/iClock) WhatsApp (WhatsApp Inc. - installed 2023-11-09) (/Applications/WhatsApp.app/Contents/MacOS/WhatsApp) Mail (Apple - installed 2018-04-07) (/Applications/Mail.app/Contents/MacOS/Mail) Macs Fan Control (Ilya Parniuk - installed 2022-10-13) (/Applications/Macs Fan Control.app/Contents/MacOS/Macs Fan Control) Messages (Apple - installed 2019-10-17) (/Applications/Messages.app/Contents/MacOS/Messages) Internet Plug-ins: FlashPlayer-10.6: 32.0.0.114 (installed 2019-01-12) Flash Player: 32.0.0.114 (installed 2019-01-12) QuickTime Plugin: 7.7.3 (installed 2019-10-17) PepperFlashPlayer: 32.0.0.114 (installed 2019-01-12) AdobeAAMDetect: 3.0.0.0 (installed 2023-08-23) Safari Extensions: Save to Pocket.safariextz - Read It Later, Inc. - http://getpocket.com/ (installed 2018-04-08) HoverSee.safariextz - SideTree.com - http://SideTree.com/extensions.html#HoverSee (installed 2018-05-30) AdBlock Ultimate.safariextz - Secure Download - https://adblockultimate.net/ (installed 2018-04-08) Ghostery.safariextz - GHOSTERY, Inc. - https://www.ghostery.com/ (installed 2018-04-08) LastPass.safariextz - LastPass - https://lastpass.com/ (installed 2018-12-05) URL Advisor.safariextz - Kaspersky Lab - http://kaspersky.com (installed 2018-04-08) Translate.safariextz - SideTree.com - http://SideTree.com/extensions.html#Translate (installed 2018-07-29) 3rd Party Preference Panes: Flash Player (installed 2018-12-17) Perian (installed 2011-07-23) Trusteer Endpoint Protection (installed 2023-08-14) Tuxera NTFS (installed 2019-11-27) USB Overdrive (installed 2018-04-30) Time Machine: Time Machine Not Configured! Performance: System Load: 1.87 (1 min ago) 1.42 (5 min ago) 1.34 (15 min ago) Nominal I/O speed: 0.03 MB/s File system: 72.42 seconds Write speed: 25 MB/s Read speed: 34 MB/s Top Processes by CPU: Process (count) Source CPU Location EtreCheckPro ? 16.78 % /Applications/EtreCheckPro.app WindowServer Apple 6.84 % kernel_task Apple 3.22 % hidd Apple 2.02 % Microsoft Edge Helper (Renderer) (20) Microsoft Corporation 1.28 % Top Processes by Memory: Process (count) Source RAM usage Location Microsoft Edge Helper (Renderer) (20) Microsoft Corporation 1.71 GB kernel_task Apple 869 MB EtreCheckPro ? 568 MB /Applications/EtreCheckPro.app Microsoft Edge Microsoft Corporation 280 MB mdworker (6) Apple 152 MB Top Processes by Network Use: Process Source Input Output Location mDNSResponder Apple 3 MB 255 KB SilentCleanServer iMobie Inc. 71 KB 81 KB Mail Apple 126 KB 20 KB netbiosd Apple 48 KB 25 KB apsd Apple 8 KB 13 KB Virtual Memory Information: Available RAM 1.10 GB Free RAM 19 MB Used RAM 6.90 GB Cached files 1.08 GB Swap Used 239 MB Software Installs (past 30 days): Name Version Install Date XProtectPlistConfigData 2175 2023-11-22 Clean up: /Library/LaunchAgents/com.adobe.GC.Invoker-1.0.plist /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility Executable not found /Library/LaunchDaemons/com.adobe.fpsaud.plist /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud Executable not found ~/Library/LaunchAgents/com.adobe.GC.Invoker-1.0.plist /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility Executable not found /Library/LaunchAgents/com.microsoft.update.agent.plist /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant Executable not found /Library/LaunchDaemons/com.adobe.agsservice.plist /Library/Application Support/Adobe/AdobeGCClient/AGSService Executable not found /Library/LaunchAgents/com.adobe.GC.AGM.plist /Library/Application Support/Adobe/AdobeGCClient/Adobe Genuine Software Monitor Service Executable not found Diagnostics Information (past 7 days): 2023-11-26 00:21:20 InstallBoxTools.app Crash (24 times) /Users/***/Library/Application Support/Box/*/InstallBoxTools.app dyld: launch, loading dependent libraries 2023-11-25 12:20:03 blued Crash (11 times) /usr/sbin/blued *** Terminating app due to uncaught exception 'NSRangeException', reason: '*** -[_NSInlineData subdataWithRange:]: range {2, 6} exceeds data length 4' abort() called terminating with uncaught exception of type NSException 2023-11-25 06:59:32 Image2Icon.app Crash /Applications/Image2Icon.app abort() called 2023-11-21 23:25:56 quicklookd.app Crash (15 times) /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app qlmanage --diag 6571367.5534604 6571367.5643443 6571367.5643448 last generator in main thread: net.shinyfrog.svgrendeder last threaded generator: com.sub.QLAddict 2023-11-21 04:19:56 Topaz Sharpen AI.app CPU (3 times) /Applications/Topaz Labs LLC/*/Topaz Sharpen AI.app 2023-11-21 03:58:04 com.torrents-time.helper Crash (2 times) /Library/PrivilegedHelperTools/com.torrents-time.helper 2023-11-21 03:56:45 Box Local Com Server.app Crash (5 times) ~/Library/Application Support/Box/Box Edit/Install/4.24.0/InstallBoxTools.app/Contents/Resources/Box Local Com Server.app dyld: launch, loading dependent libraries 2023-11-20 02:28:16 UpdaterStartupUtility Crash (5 times) /Applications/Utilities/Adobe Application Manager/*/UpdaterStartupUtility BUG IN CLIENT OF LIBPLATFORM: os_unfair_lock is corrupt 2023-11-19 16:58:37 Skype.app Crash (2 times) /Applications/Skype.app dyld: launch, loading dependent libraries End of report