EtreCheck version: 5.6.2 (5220) Report generated: 2020-10-28 15:37:57 Download EtreCheck from https://etrecheck.com Runtime: 3:57 Performance: Good Sandbox: Enabled Full drive access: Disabled Problem: No problem - just checking Description: Followed instructions to remove Sophos and run Malware bytes. Rebooted and then ran this report Major Issues: Anything that appears on this list needs immediate attention. Runaway process - A process is using a large percentage of your CPU. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. SSD too slow - SSD is showing poor performance. Configuration profiles found - This computer may have configuration profiles installed. These are sometimes used by adware and malware. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Vintage hardware - This computer may be considered vintage. 32-bit Apps - This computer has 32-bits apps will not work on current versions of the operating system. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: iMac (27-inch, Late 2012) - Vintage! iMac Model: iMac13,2 3.2 GHz Quad-Core Intel Core i5 (i5-3470) CPU: 4-core 24 RAM - Upgradeable BANK 0/DIMM0 - 8 GB DDR3 1333 BANK 1/DIMM0 - Empty BANK 0/DIMM1 - 8 GB DDR3 1333 BANK 1/DIMM1 - 8 GB DDR3 1333 Video Information: NVIDIA GeForce GTX 675MX - VRAM: 1 GB iMac 2560 x 1440 Drives: disk0 - APPLE SSD SM128E 121.33 GB (Solid State - TRIM: Yes) Internal SATA 6 Gigabit Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Fusion Drive] 121.12 GB disk2 [APFS Virtual drive] 1.12 TB (Shared by 5 volumes) disk2s1 - M************ - Data (APFS) [APFS Virtual drive] (Shared - 992.41 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared) disk2s4 - VM (APFS) [APFS VM] (Shared - 1 MB used) disk2s5 - M**********D (APFS) (Shared - 11.37 GB used) disk1 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM) Internal SATA 3 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 [APFS Fusion Drive] 1000.00 GB disk2 [APFS Virtual drive] 1.12 TB (Shared by 5 volumes) disk2s1 - M************ - Data (APFS) [APFS Virtual drive] (Shared - 992.41 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared) disk2s4 - VM (APFS) [APFS VM] (Shared - 1 MB used) disk2s5 - M**********D (APFS) (Shared - 11.37 GB used) disk3 - LaCie P9223 2.00 TB External USB 5 Gbit/s USB disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 - i*************b (Mac OS Extended (Case-sensitive, Journaled)) 2.00 TB (1.70 TB used) Mounted Volumes: disk2s1 - M************ - Data [APFS Virtual drive] 1.12 TB (Shared - 992.41 GB used, 167.00 GB available, 107.81 GB free) APFS Mount point: /System/Volumes/Data disk2s4 - VM [APFS VM] 1.12 TB (Shared - 1 MB used, 107.81 GB free) APFS Mount point: /private/var/vm disk2s5 - M**********D 1.12 TB (Shared - 11.37 GB used, 167.00 GB available, 107.81 GB free) APFS Mount point: / Read-only: Yes disk3s2 - i*************b 2.00 TB (1.70 TB used, 296.78 GB available, 296.72 GB free) Mac OS Extended (Case-sensitive, Journaled) Mount point: /Volumes/i*************b Network: Interface usbmodem1411: Andy's Piano Pedals 2 Interface usbmodemMID1: Andy's Piano Pedals Interface wchusbserial1410: USB2.0-Serial Interface usbserial-A9EDAE1Z: FT232R USB UART Interface wchusbserial1420: USB2.0-Serial 2 Interface usbmodem14100: MT65xx Preloader Interface en0: Ethernet Interface en1: Wi-Fi Interface en4: Bluetooth PAN Interface bridge0: Thunderbolt Bridge System Software: macOS Catalina 10.15.7 (19H2) Time since boot: Less than an hour Configuration Profiles: This computer may have configuration profiles installed. Notifications: Notifications not available without Full Drive Access. Security: Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus software: Apple and Malwarebytes Unsigned Files: Launchd: /Library/LaunchDaemons/com.skype.skypeinstaller.plist Executable: /Library/PrivilegedHelperTools/com.skype.skypeinstaller Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.intego.commonservices.icalserver.plist Executable: /Library/Intego/IntegoiCalServer Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.intego.commonservices.uninstaller.plist Executable: /Library/Intego/Intego Uninstaller.app/Contents/MacOS/Intego Uninstaller Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MUpdate.plist Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.oracle.oss.mysql.mysqld.plist Executable: /usr/local/mysql/bin/mysqld --user=_mysql --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data --plugin-dir=/usr/local/mysql/lib/plugin --log-error=/usr/local/mysql/data/mysqld.local.err --pid-file=/usr/local/mysql/data/mysqld.local.pid Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/ed.is.XeroxWatchman.plist Executable: /Library/MacMDP/Scripts/XeroxWatchman.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.intego.commonservices.taskmanager.plist Executable: /Library/Intego/TaskManager/TM_Notifier.app/Contents/MacOS/TM_Notifier Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/phonostarTimer.plist Executable: /Library/PrivilegedHelperTools/phonostarTimer Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MAIRUploader.plist Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpload Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchDaemons/com.mysql.server.plist Executable: /bin/sh /usr/local/mysql/support-files/mmv-start.sh Details: Exact match found in the legitimate list - probably OK Login Item: /Applications/SyncMate.app/Contents/Library/LoginItems/SyncMateService.app Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin/Contents/PlugIns/FlashPlayer-10.6.plugin Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin Preference Pane: /Library/PreferencePanes/MySQL.prefPane Apps: 21 32-bit Applications: 36 32-bit apps Kernel Extensions: /Applications/Wondershare Free Video Converter.app SystemAudioRecorder.kext (1.1.0 - SDK 10.6) /Library/Extensions Soundflower.kext (2.0b2 - SDK 10.10) usbserial.kext (1.1.1 - SDK 10.9) System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 180 Apple tasks [Running] 116 Apple tasks System Launch Daemons: [Not Loaded] 33 Apple tasks [Loaded] 178 Apple tasks [Running] 125 Apple tasks [Other] 2 Apple tasks Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2020-08-28) [Running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (Seiko Epson Corporation - installed 2019-09-25) [Loaded] com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2019-07-24) [Running] com.epson.eventmanager.agent.plist (Seiko Epson Corporation - installed 2019-10-03) [Running] com.epson.scannermonitor.plist (Seiko Epson Corporation - installed 2019-08-18) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-10-14) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-10-14) [Other] com.intego.commonservices.integomenu.plist (? 65446fbf - installed 2013-12-13) [Loaded] com.intego.commonservices.taskmanager.plist (? f6ef294 - installed 2013-11-12) [Loaded] com.intego.commonservices.uninstaller.plist (? 98ad168c - installed 2013-12-04) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2020-10-15) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2020-10-19) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2020-10-14) Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2020-07-15) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2020-07-15) [Loaded] com.adobe.fpsaud.plist (Adobe Inc. - installed 2020-09-26) [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-09-19) [Running] com.backblaze.bzserv.plist (Backblaze - installed 2020-08-31) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2020-10-14) [Other] com.intego.commonservices.daemon.integod.plist (? db610625 - installed 2013-11-12) [Other] com.intego.commonservices.daemon.taskmanager.plist (? 1cb4eccf - installed 2013-11-12) [Loaded] com.intego.commonservices.icalserver.plist (? d4ed509f - installed 2013-11-12) [Other] com.intego.commonservices.metrics.kschecker.plist (? 738eb69 - installed 2013-11-12) [Not Loaded] com.lwzcvnfgoltm.plist (? 0 - installed 2017-05-04) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2020-10-28) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2020-10-15) [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2020-10-19) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-10-14) [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2012-04-02) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-01-17) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2020-07-28) [Not Loaded] com.mysql.server.plist (? 5df0b120 - installed 2020-09-22) [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed ) [Loaded] com.oracle.oss.mysql.mysqld.plist (? 84348a6e - installed 2016-05-21) [Loaded] com.skype.skypeinstaller.plist (? a81aef1d - installed 2018-11-05) [Loaded] ed.is.XeroxWatchman.plist (? 7ee00b99 - installed 2016-09-22) [Loaded] phonostarTimer.plist (? 3dc6f215 - installed 2016-12-23) User Launch Agents: [Running] com.backblaze.bzbmenu.plist (Backblaze - installed 2020-10-28) [Running] com.hp.devicemonitor.plist (HP Inc. - installed 2020-10-28) [Running] com.hp.productresearch.plist (HP Inc. - installed 2020-10-28) [Loaded] com.logmein.GoToMeeting.G2MAIRUploader.plist (? 0 - installed 2020-07-30) [Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (? 0 - installed 2020-07-30) User Login Items: [Not Loaded] AlarmClockHelper (App Store - installed 2016-02-11) Modern Login Item /Applications/Alarm Clock.app/Contents/Library/LoginItems/AlarmClockHelper.app [Not Loaded] CleanMyMac X Menu (MacPaw Inc. - installed 2020-10-22) Modern Login Item /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app [Not Loaded] Problem Reporter (MacPaw Inc. - installed 2020-10-22) Modern Login Item /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app/Contents/Frameworks/DevMateKit.framework/Versions/A/Resources/Problem Reporter Sandboxed.app [Not Loaded] CleanMyMac X HealthMonitor (MacPaw Inc. - installed 2020-10-22) Modern Login Item /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app/Contents/Library/LoginItems/CleanMyMac X HealthMonitor.app [Not Loaded] Autoupdate (Electronic Team, Inc. - installed 2020-10-23) Modern Login Item /Applications/Commander One.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app [Running] Evernote Helper (Evernote - installed 2019-12-10) Modern Login Item /Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app [Not Loaded] EvernoteLauncher (Evernote - installed 2019-12-10) Modern Login Item /Applications/Evernote.app/Contents/Library/LoginItems/EvernoteLauncher.app [Not Loaded] LoginHelper (App Store - installed 2020-02-15) Modern Login Item /Applications/Go for Instagram.app/Contents/Library/LoginItems/LoginHelper.app [Not Loaded] Messenger Login Helper (App Store - installed 2020-10-20) Modern Login Item /Applications/Messenger.app/Contents/Library/LoginItems/Messenger Login Helper.app [Not Loaded] Launcher (App Store - installed 2020-10-09) Modern Login Item /Applications/Notebook.app/Contents/Library/LoginItems/Launcher.app [Not Loaded] NotebookHelper (App Store - installed 2020-10-09) Modern Login Item /Applications/Notebook.app/Contents/Library/LoginItems/NotebookHelper.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2020-10-18) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2020-10-18) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] Pushbullet Notifications (App Store - installed 2015-04-07) Modern Login Item /Applications/Pushbullet.app/Contents/Library/LoginItems/Pushbullet Notifications.app [Not Loaded] Slack Login Helper (App Store - installed 2020-10-25) Modern Login Item /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app [Not Loaded] SyncFoldersProStartAtLogin (App Store - installed 2020-09-17) Modern Login Item /Applications/Sync Folders.app/Contents/Library/LoginItems/SyncFoldersProStartAtLogin.app [Not Loaded] SyncMateService (? - installed 2014-12-23) Modern Login Item /Applications/SyncMate.app/Contents/Library/LoginItems/SyncMateService.app [Not Loaded] WhatsApp Login Helper (App Store - installed 2020-10-23) Modern Login Item /Applications/WhatsApp.localized/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app [Not Loaded] dooLoginHelper (App Store - installed 2014-02-10) Modern Login Item /Applications/doo.app/Contents/Library/LoginItems/dooLoginHelper.app [Not Loaded] PhotoStreamAgent (App Store - installed 2015-10-23) Modern Login Item /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2020-02-05) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Not Loaded] HP Product Research (HP Inc. - installed 2020-02-05) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app Internet Plug-ins: Silverlight: 5.1.50709.0 (? - installed 2016-09-21) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2017-12-07) AdobePDFViewer: 18.009.20050 (Adobe Systems, Inc. - installed 2017-12-07) Flash Player: 32.0.0.445 (? - installed 2020-10-13) FlashPlayer-10.6: 32.0.0.445 (? - installed 2020-10-13) SharePointBrowserPlugin: 14.7.7 (? - installed 2017-11-10) User Internet Plug-ins: User Internet Plug-ins need Full Drive Access User Audio Plug-ins: User Audio Plug-ins need Full Drive Access User iTunes Plug-ins: User iTunes Plug-ins need Full Drive Access Safari Extensions: Notebook Web Clipper (App Store - installed 2020-10-09) 3rd Party Preference Panes: Backblaze Backup (Backblaze - installed 2020-08-31) Flash Player (Adobe Inc. - installed 2020-09-26) MySQL (? - installed 2016-02-02) Backup: Time Machine information not available without Full Drive Access. 7 local snapshots Oldest local snapshot: 2020-10-25 13:57:05 Last local snapshot: 2020-10-28 11:57:05 Performance: System Load: 5.13 (1 min ago) 3.97 (5 min ago) 1.81 (15 min ago) Nominal I/O speed: 18.56 MB/s File system: 29.60 seconds Write speed: 43 MB/s Read speed: 270 MB/s CPU Usage Snapshot: Type Overall System: 16 % User: 18 % Idle: 67 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Other processes 126.67 % (?) EtreCheck 5.95 % (App Store) FrontendAgent 0.51 % (Malwarebytes Corporation) FrontendApplication 0.40 % (Malwarebytes Corporation) sync-taskbar.exe 0.24 % (Sync.com Inc.) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheck 582 MB (App Store) firefox 345 MB (Mozilla Corporation) Finder 230 MB (Apple) Microsoft Word 139 MB (Microsoft Corporation) Dock 84 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Other processes 216 KB / 166 KB (?) firefox 69 KB / 80 KB (Mozilla Corporation) OneDrive 7 KB / 3 KB (Microsoft Corporation) spindump_agent 0 B / 0 B (Apple) backgroundtaskmanagementagent 0 B / 0 B (Apple) Virtual Memory Information: Physical RAM: 24 GB Free RAM: 15.10 GB Used RAM: 4.61 GB Cached files: 4.29 GB Available RAM: 19.39 GB Swap Used: 0 B Software Installs (past 30 days): Install Date Name (Version) 2020-10-07 Paint S (5.7.18) 2020-10-07 Valentina Studio (10.5.2) 2020-10-07 iMovie (10.1.16) 2020-10-08 Simplenote (2.2) 2020-10-09 Notebook (4.3.11) 2020-10-13 Adobe Flash Player 2020-10-13 Microsoft Outlook 2020-10-13 Microsoft OneNote 2020-10-13 Microsoft PowerPoint 2020-10-13 Microsoft Excel 2020-10-14 Microsoft AutoUpdate 2020-10-14 Microsoft Word 2020-10-15 macOS Catalina 10.15.7 Update 2020-10-15 Gatekeeper Compatibility Data (1.0) 2020-10-16 AudioNote 2 LITE- Notepad and Voice Recorder (6.5) 2020-10-18 Microsoft OneDrive 2020-10-20 XProtectPlistConfigData (2133) 2020-10-20 MRTConfigData (1.68) 2020-10-20 Messenger (73.2.121) 2020-10-21 Duplicate File Finder (6.9) 2020-10-21 Xcode (12.1) 2020-10-23 Kindle (1.30.0) 2020-10-23 WhatsApp (2.2041.7) 2020-10-23 Fotor Photo Editor (3.6.1) 2020-10-25 Photos Duplicate Cleaner (2.3) 2020-10-25 Slack (4.10.3) 2020-10-27 Duplicate Photos Fixer Pro (2.18) 2020-10-27 Red Hot Timer (2.3) 2020-10-28 EtreCheck (5.6.2) 2020-10-28 Malwarebytes for Mac Clean up: /Library/LaunchDaemons/com.intego.commonservices.daemon.integod.plist /Library/Intego/integod Executable not found /Library/LaunchDaemons/com.intego.commonservices.metrics.kschecker.plist /Library/Intego/im_ks_tool Executable not found /Library/LaunchDaemons/com.intego.commonservices.daemon.taskmanager.plist /Library/Intego/TaskManager/TaskManagerDaemon Executable not found /Library/LaunchAgents/com.intego.commonservices.integomenu.plist /Library/Intego/commonservices.bundle/Contents/MacOS/IntegoMenu.app/Contents/MacOS/IntegoMenu Executable not found Diagnostics Information (past 7-30 days): Directory /Library/Logs/DiagnosticReports is not accessible. Enable Full Drive Access to see more information. End of report