EtreCheck version: 5.3.3 (5036) Report generated: 2019-08-15 15:27:11 Download EtreCheck from https://etrecheck.com Runtime: 1:50 Performance: Excellent Sandbox: Enabled Full drive access: Disabled Problem: Computer is restarting Description: Computer crashes (shuts off) every time Im on a video call of any kind : Zoom, FaceTime, Slack Video Call Major Issues: Anything that appears on this list needs immediate attention. Runaway process - A process is using a large percentage of your CPU. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. More than one antivirus app - This machine has multiple antivirus apps installed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware. Heavy RAM usage - This machine is using a large amount of RAM. Clean up - There are orphan files that could be removed. System modifications - There are a large number of system modifications running in the background. 32-bit Apps - This machine has 32-bits apps will not work after macOS 10.14 “Mojave”. Limited drive access - More information may be available with Full Drive Access. Hardware Information: MacBook Pro (15-inch, 2018-2019) MacBook Pro Model: MacBookPro15,1 1 2.9 GHz Intel Core i9 (i9-8950HK) CPU: 6-core 32 RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 16 GB DDR4 2400  ok BANK 2/ChannelB-DIMM0 - 16 GB DDR4 2400  ok Battery: Health = Normal - Cycle count = 106 Video Information: Intel UHD Graphics 630 - VRAM: 1536 MB Radeon Pro 560X - VRAM: 4 GB Color LCD 3360 x 2100 Drives: disk0 - APPLE SSD AP0512M 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 4 volumes) disk1s1 - Macintosh HD (APFS) (Shared - 142.97 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared) disk1s3 - Recovery (APFS) [Recovery] (Shared) disk1s4 - VM (APFS) [APFS VM] (Shared - 1.07 GB used) Mounted Volumes: disk1s1 - Macintosh HD 499.96 GB (Shared - 142.97 GB used - 355.20 GB free) APFS Mount point: / Encrypted disk1s4 - VM [APFS VM] 499.96 GB (Shared - 1.07 GB used - 355.20 GB free) APFS Mount point: /private/var/vm Encrypted Network: Interface en8: Display Ethernet Proxy Auto Config Interface en10: iPad Proxy Auto Config Interface fw0: Display FireWire Proxy Auto Config Interface en0: Wi-Fi 802.11 a/b/g/n/ac Proxy Auto Config Interface en6: Bluetooth PAN Proxy Auto Config Interface bridge0: Thunderbolt Bridge Proxy Auto Config System Software: macOS Mojave 10.14.6 (18G87) Time since boot: Less than an hour Configuration Files: /etc/hosts - Count: 1 Configuration Profiles: This computer has configuration profiles installed. Notifications: Notifications not available without Full Drive Access. Security: System Status Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus apps: Symantec and McAfee Unsigned Files: Launchd: /Library/LaunchDaemons/com.mcafee.virusscan.fmpd.plist Executable: /usr/local/McAfee/fmp/bin64/fmpd Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.sheagcraig.yo.login_once.plist Executable: /usr/local/bin/yo_scheduler --cached Details: Executable file is not accessible without Full Disk Access Launchd: /Library/LaunchAgents/com.jamfsoftware.jamf.agent.plist Executable: /usr/local/jamf/bin/jamfAgent Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.cisco.anyconnect.notification.plist Executable: '/opt/cisco/anyconnect/bin/Cisco AnyConnect Secure Mobility Client Notification.app' Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.walmart.globalace.migrateAndConvert.plist Executable: /Library/Walmart/Scripts/migrationReEnrollmentLaunchDAction.bash Launchd: /Library/LaunchDaemons/com.jamfsoftware.task.1.plist Executable: /usr/local/jamf/bin/jamf policy -randomDelaySeconds 300 Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.jamfsoftware.startupItem.plist Executable: /Library/Application Support/JAMF/ManagementFrameworkScripts/StartupScript.sh Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.tanium.taniumclient.plist Executable: /Library/Tanium/TaniumClient/TaniumClient -d Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.walmart.globalace.rebind.plist Executable: /bin/bash -c 'internalResources=$(host -t SRV _ldap._tcp.wal-mart.com | grep "record") domain=$(dsconfigad -show | grep "Active Directory Domain"| awk {'print $5'} | sed 's/\..*//') jssconnection=$(/usr/local/bin/jamf checkjssconnection | awk {'print $4'} | grep "available"); if [ "$domain" != "" ] || [ "$internalResources" = "" ] || [ "$jssconnection" = "" ]; then exit 0; else /usr/local/bin/jamf policy -trigger rebind; fi' Launchd: /Library/LaunchAgents/com.cisco.anyconnect.gui.plist Executable: '/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app' Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.sheagcraig.yo.on_demand.plist Executable: /usr/local/bin/yo_scheduler --cached Details: Executable file is not accessible without Full Disk Access Launchd: /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist Executable: /opt/cisco/anyconnect/bin/vpnagentd -execv_instance Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings2.NFM.plist Executable: /Library/Application Support/Symantec/Silo/NFM/DomainSettings/SymSharedSettingsd Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchDaemons/com.walmart.gto.appleengineering.removewalmartwifi.plist Executable: /Library/Walmart/Scripts/removeSsidFromPreferredList.bash Details: Restrictive config permissions - possibly adware Launchd: /Library/LaunchDaemons/com.jamfsoftware.jamf.daemon.plist Executable: /usr/local/jamf/bin/jamf launchDaemon -monitorUsage -monitorBeacons -enforceRestrictions Details: Exact match found in the whitelist - probably OK Login Item: /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app Login Item: ~/Library/Application Support/Things Sandbox Helper/ThingsMacSandboxHelper.app 32-bit Applications: 7 32-bit apps Kernel Extensions: /Applications/duet.app DuetDisplay.kext (2.1.4 - SDK 10.9) /Library/Application Support/Symantec/Silo/NFM/IntrusionPrevention/SavedNDCEngine/10.11 SymXIPS.kext (8.1 - SDK 10.10) /Library/Extensions acsock.kext (4.6.4 - SDK 10.13) SymInternetSecurity.kext (14.2.1 - SDK 10.11) SymIPS.kext (14.2.1 - SDK 10.11) NortonForMac.kext (14.2.1 - SDK 10.11) System Launch Agents: [Not Loaded] 18 Apple tasks [Loaded] 163 Apple tasks [Running] 119 Apple tasks System Launch Daemons: [Not Loaded] 31 Apple tasks [Loaded] 172 Apple tasks [Running] 132 Apple tasks Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2019-08-09) [Loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2019-07-26) [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-05-15) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-05-15) [Loaded] com.cisco.anyconnect.gui.plist (? e1a9d14d - installed 2019-02-05) [Loaded] com.cisco.anyconnect.notification.plist (? 8b01cb06 - installed 2019-02-05) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-05-29) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-05-29) [Running] com.jamfsoftware.jamf.agent.plist (? 897e7d0b - installed 2019-08-09) [Running] com.mcafee.menulet.plist (McAfee, Inc. - installed 2018-09-04) [Running] com.mcafee.reporter.plist (McAfee, Inc. - installed 2018-09-04) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-08-15) [Loaded] com.sheagcraig.yo.login_once.plist (? acdebf55 - installed 2019-02-19) [Loaded] com.sheagcraig.yo.on_demand.plist (? 1ba44d88 - installed 2019-02-19) [Running] com.symantec.uiagent.application.NFM.plist (Symantec - installed 2018-09-17) [Running] jp.co.canon.CUPSiPF.BackGrounder.plist (Canon Inc. - installed 2018-11-11) [Running] jp.co.canon.CUPSiPF.PreviewDaemon.plist (Canon Inc. - installed 2018-11-11) [Running] us.zoom.pluginagent.plist (Zoom Video Communications, Inc. - installed 2019-07-18) Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2019-08-09) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2019-08-09) [Running] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2019-07-26) [Running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-05-15) [Running] com.cisco.anyconnect.vpnagentd.plist (? f363637f - installed 2019-02-05) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2019-05-29) [Running] com.jamf.management.daemon.plist (JAMF Software - installed 2019-06-05) [Running] com.jamfsoftware.jamf.daemon.plist (? b709f177 - installed 2019-08-09) [Not Loaded] com.jamfsoftware.startupItem.plist (? 44b5eabd - installed 2019-08-09) [Loaded] com.jamfsoftware.task.1.plist (? dcee0d9c - installed 2019-08-09) [Not Loaded] com.mcafee.aac.plist (? 0 - installed 2018-08-30) [Running] com.mcafee.agent.ma.plist (McAfee, Inc. - installed 2018-08-05) [Running] com.mcafee.agent.macmn.plist (McAfee, Inc. - installed 2018-08-05) [Not Loaded] com.mcafee.agent.macompat.plist (? 0 - installed 2018-08-05) [Running] com.mcafee.virusscan.fmpd.plist (? 0 - installed 2018-08-30) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-08-15) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2019-02-11) [Other] com.symantec.SymLUHelper.NFM.plist (Symantec - installed 2018-09-26) [Loaded] com.symantec.UninstallerToolHelper.NFM.plist (Symantec - installed 2018-09-26) [Other] com.symantec.liveupdate.daemon.NFM.plist (Symantec - installed 2018-09-26) [Not Loaded] com.symantec.manufacturer.agent.plist (? 0 - installed 2018-10-19) [Other] com.symantec.sep.Migration.NFM.plist (? a635c32 - installed 2018-09-26) [Loaded] com.symantec.sharedsettings.NFM.plist (Symantec - installed 2018-09-26) [Running] com.symantec.sharedsettings2.NFM.plist (? 7786c96 - installed 2018-09-26) [Running] com.symantec.symdaemon.NFM.plist (Symantec - installed 2018-09-26) [Loaded] com.symantec.symqual.detail.NFM.plist (Symantec - installed 2018-09-26) [Loaded] com.symantec.symqual.panicreporter.NFM.plist (Symantec - installed 2018-09-26) [Loaded] com.symantec.symqual.submit.NFM.plist (Symantec - installed 2018-09-26) [Running] com.tanium.taniumclient.plist (? 0 - installed 2018-10-30) [Running] com.tenablesecurity.nessusagent.plist (Tenable Network Security, Inc. - installed 2018-08-05) [Not Loaded] com.walmart.globalace.migrateAndConvert.plist (? 4f53780d - installed 2019-05-22) [Loaded] com.walmart.globalace.rebind.plist (? f8cd8d9f - installed 2019-05-04) [Loaded] com.walmart.gto.appleengineering.removewalmartwifi.plist (? 0 - installed 2016-03-13) User Launch Agents: [Loaded] com.cisco.proximity.plist (Cisco - installed 2019-08-15) User Login Items: 1Password Extension Helper (AgileBits Inc. - installed 2019-08-06) (Modern Login Item - /Applications/1Password 7.app/Contents/Library/LoginItems/1Password Extension Helper.app) 1Password Launcher (AgileBits Inc. - installed 2019-08-06) (Modern Login Item - /Applications/1Password 7.app/Contents/Library/LoginItems/1Password Launcher.app) Cisco AnyConnect Secure Mobility Client.app (? - installed 2019-02-28) (Application - /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app) CraftManagerHelper (Tomas Hanacek - installed 2019-07-29) (Modern Login Item - /Applications/CraftManager.app/Contents/Library/LoginItems/CraftManagerHelper.app) Enterprise Connect.app (Apple - installed 2019-02-14) (Application - /Applications/Enterprise Connect.app) FastScripts.app (App Store - installed 2019-06-29) (Application - /Applications/FastScripts.app) OneDrive Launcher (App Store - installed 2019-08-10) (Modern Login Item - /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app) TextExpander.app (SmileOnMyMac, LLC - installed 2019-07-30) (Application - /Applications/TextExpander.app) ThingsMacSandboxHelper.app (? - installed 2019-05-06) (Application - ~/Library/Application Support/Things Sandbox Helper/ThingsMacSandboxHelper.app) Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-05-02) AdobeAAMDetect: 3.0.0.0 (Adobe Systems, Inc. - installed 2019-07-26) AdobePDFViewer: 19.012.20034 (Adobe Systems, Inc. - installed 2019-05-02) Audio Plug-ins: AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-05-16) BluetoothAudioPlugIn: 6.0.14 (Apple - installed 2019-07-30) AirPlay: 2.0 (Apple - installed 2019-07-30) AppleAVBAudio: 760.6 (Apple - installed 2019-07-30) BridgeAudioSP: 5.52 (Apple - installed 2019-07-30) iSightAudio: 7.7.3 (Apple - installed 2019-07-30) Safari Extensions: 1Password - App Store (installed 2019-08-06) Better - App Store (installed 2019-03-18) Symantec Extension - App Store (installed 2019-08-15) 3rd Party Preference Panes: NessusAgent.Preferences (installed 2018-08-05) PrintOptionPane (installed 2019-08-09) Time Machine: Time Machine information not available without Full Drive Access. Performance: System Load: 1.86 (1 min ago) 1.84 (5 min ago) 1.90 (15 min ago) Nominal I/O speed: 4.26 MB/s File system: 29.02 seconds Write speed: 1797 MB/s Read speed: 2872 MB/s CPU Usage Snapshot: Type Overall System 1 % User 7 % Idle 92 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Other processes 82.48 % (?) EtreCheck 5.13 % (App Store) Google Chrome 0.77 % (Google, Inc.) Adobe Desktop Service 0.57 % (Adobe Systems, Inc.) Microsoft Outlook 0.44 % (Microsoft Corporation) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Sketch 2.14 GB (Bohemian Coding) Microsoft Outlook 1.05 GB (Microsoft Corporation) EtreCheck 730 MB (App Store) Adobe Desktop Service 523 MB (Adobe Systems, Inc.) OneDrive 388 MB (App Store) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Other processes 68 MB / 5 MB (?) OneDrive 27 KB / 23 KB (App Store) Console 1 KB / 2 KB (Apple) PowerChime 284 B / 289 B (Apple) SystemUIServer 0 B / 64 B (Apple) Virtual Memory Information: Physical RAM: 32 GB Free RAM: 10.73 GB Used RAM: 15.29 GB Cached files: 5.99 GB Available RAM: 16.71 GB Swap Used: 0 B Software Installs (past 30 days): Install Date Name (Version) 2019-07-17 Microsoft Excel 2019-07-17 Microsoft PowerPoint 2019-07-18 Zoom Outlook Plugin 2019-07-18 MRTConfigData (1.47) 2019-07-20 Microsoft Word 2019-07-20 Microsoft Outlook 2019-07-31 Gatekeeper Configuration Data (175) 2019-08-09 ARMDC Agent Installer 2019-08-09 QuickAdd 2019-08-09 Kyocera Macintosh 2019-08-09 Pages (8.0) 2019-08-09 Keynote (9.0) 2019-08-09 CS725_Series_Print 2019-08-09 CX725_Series_Print_Scan 2019-08-09 C4100_Series_Print 2019-08-09 XC4100_Series_Print_Scan 2019-08-09 Numbers (6.0) 2019-08-09 CS920_Series_Print 2019-08-09 CX920_Series_Print_Scan 2019-08-09 com.walmart.globalace.rebind.plist 2019-08-09 TaniumClient-7.2.314.3476-prod 2019-08-09 lockScreenSaver.saver 2019-08-09 Canon imagePROGRAF Printer Driver (5.02) 2019-08-09 Canon UFR II/UFRII LT/LIPSLX Printer Driver (10.17.0) 2019-08-10 OneDrive (19.123.0624) 2019-08-15 Microsoft AutoUpdate 2019-08-15 DLP Endpoint Agent (15.1.0100.01074) 2019-08-15 EtreCheck (5.3.3) Clean up: /Library/LaunchDaemons/com.symantec.sep.Migration.NFM.plist /Library/Application Support/Symantec/Silo/NFM/Migration/RestoreSettings Executable not found Diagnostics Information (past 7 days): Directory /Library/Logs/DiagnosticReports is not accessible. Enable Full Drive Access to see more information. End of report