EtreCheckPro version: 6.8.0 (68018) Report generated: 2023-03-01 19:13:08 Download EtreCheckPro from https://etrecheck.com Runtime: 3:34 Performance: Good Problem: Computer is restarting Description: Kernel error Major Issues: Anything that appears on this list needs immediate attention. Unsigned files - There are unsigned software files installed that could be malicious and should be reviewed. Automatic updates disabled - Automatic updates are disabled. This computer is at risk of malware infection. Security updates disabled - Security updates are disabled. This computer is at risk of malware infection. Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure. Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection. Adobe Flash Player installed - Adobe Flash Player is installed on this computer. This is a security risk and no longer supported. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. No Time Machine backup - Time Machine backup not found. Configuration profiles found - This computer may have configuration profiles installed. These are sometimes used by malware. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Runaway user process - A user process is using a large percentage of your CPU. Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (15-inch, 2017) Status: Supported MacBook Pro Model: MacBookPro14,3 3.1 GHz Quad-Core Intel Core i7 (i7-7920HQ) CPU: 4-core 16 GB RAM - Not upgradeable BANK 0/DIMM0 - 8 GB LPDDR3 2133 BANK 1/DIMM0 - 8 GB LPDDR3 2133 Battery: Health = Normal - Cycle count = 527 Video Information: Intel HD Graphics 630 - VRAM: 1536 MB Color LCD (built-in) 3360 x 2100 Radeon Pro 560 - VRAM: 4 GB Drives: disk0 - APPLE SSD SM1024L 1.00 TB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 1.00 TB disk1 [APFS Virtual drive] 1.00 TB (Shared by 5 volumes) disk1s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (645.84 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (82 MB used) disk1s3 - Recovery (APFS) [Recovery] (529 MB used) disk1s4 - VM (APFS) [APFS VM] (2.15 GB used) disk1s5 - Macintosh HD (APFS) (11.28 GB used) Mounted Volumes: disk1s1 - Macintosh HD - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Used: 645.84 GB Shared values Size: 1.00 TB Free: 340.15 GB Available: 350.55 GB disk1s4 - VM [APFS VM] Filesystem: APFS Mount point: /private/var/vm Used: 2.15 GB Shared values Size: 1.00 TB Free: 340.15 GB disk1s5 - Macintosh HD Filesystem: APFS Mount point: / Read-only: Yes Used: 11.28 GB Shared values Size: 1.00 TB Free: 340.15 GB Available: 350.55 GB disk2s2 - S************t Filesystem: Mac OS Extended Disk Image Mount point: /Volumes/S************t Read-only: Yes Used: 12.58 GB Size: 12.95 GB Free: 366 MB Network: Interface lpss-serial1: LPSS Serial Adapter (1) Interface lpss-serial2: LPSS Serial Adapter (2) Interface en8: Belkin USB-C LAN Interface en9: AX88179A Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en10: iPhone Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 16 KB available System Software: macOS Catalina 10.15.7 (19H1030) Time since boot: Less than an hour Configuration Profiles: com.apple.wifi.managed SSID_STR EAPClientConfiguration/EAPFASTUsePAC EAPClientConfiguration/PayloadCertificateAnchorUUID[0] HIDDEN_NETWORK EAPClientConfiguration/EAPFASTProvisionPAC EAPClientConfiguration/UserName EAPClientConfiguration/EAPFASTProvisionPACAnonymously AutoJoin EAPClientConfiguration/TTLSInnerAuthentication EAPClientConfiguration/TLSTrustedServerNames[0] EncryptionType EAPClientConfiguration/AcceptEAPTypes[0] EAPClientConfiguration/UserPassword Notifications: Google Chrome.app 33 notifications VPN Unlimited.app one notification (one scheduled) WhatsApp.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Automatic Updates: Disabled Security Updates: Disabled Antivirus software: Malwarebytes Security Risk! - Adobe Flash Player installed! Unsigned Files: Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/PT.updd.plist Executable: /Library/PrivilegedHelperTools/PT.updd Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.staticz.soundsiphon.inputagent.plist Executable: /Applications/Sound Siphon.app/Contents/XPCServices/Sound Siphon Microphone Input.app/Contents/MacOS/Sound Siphon Microphone Input Launchd: ~/Library/LaunchAgents/com.BlueStacks.AppPlayer.Service.plist Command: /Applications/BlueStacks.app/Contents/MacOS/bstservice Android Details: Exact match found in the legitimate list - probably OK Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin/Contents/PlugIns/FlashPlayer-10.6.plugin Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin Apps: 34 Applications: 467 apps 441 x86-only apps 26 unsigned apps System Extensions: [Not Loaded] Surfshark Antivirus - version 4.4.0 (SURFSHARK LTD - 2022-08-16) Application: /Applications/Surfshark.app - version 4.4.0 (SURFSHARK LTD - 2022-09-28) Description: System Extension enables Surfshark app to provide antivirus features. [Running] Surfshark. WireGuard - version 4.4.0 (SURFSHARK LTD - 2022-08-16) Application: /Applications/Surfshark.app - version 4.4.0 (SURFSHARK LTD - 2022-09-28) Description: System Extension enables Surfshark app to connect using WireGuard protocol. Kernel Extensions: /Library/Application Support/VirtualBox [Not Loaded] VBoxDrv.kext - org.virtualbox.kext.VBoxDrv (6.1.16) [Not Loaded] VBoxNetAdp.kext - org.virtualbox.kext.VBoxNetAdp (6.1.16) [Not Loaded] VBoxNetFlt.kext - org.virtualbox.kext.VBoxNetFlt (6.1.16) [Not Loaded] VBoxUSB.kext - org.virtualbox.kext.VBoxUSB (6.1.16) /Library/Extensions [Loaded] G13Joystick.kext - com.driver.LogJoystick (2.0 - SDK 10.10) [Not Loaded] LogiWheelForceFeedback.kext - com.logitech.LogiWheelForceFeedback (1.0 - SDK 10.10) [Not Loaded] LogiGamingMouseFilter.kext - com.logitech.driver.LogiGamingMouseFilter (1.0 - SDK 10.10) [Not Loaded] LogiWheelDriver.kext - com.logitech.driver.LogiWheelDriver (1.0 - SDK 10.10) System Launch Daemons: [Not Loaded] 34 Apple tasks [Loaded] 168 Apple tasks [Running] 135 Apple tasks System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 172 Apple tasks [Running] 125 Apple tasks Launch Daemons: [Running] PT.updd.plist (Not signed - installed 2020-05-06) Executable: /Library/PrivilegedHelperTools/PT.updd [Loaded] com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - installed 2022-09-28) Executable: /Library/PrivilegedHelperTools/com.BlueStacks.AppPlayer.bstservice_helper [Loaded] com.adobe.fpsaud.plist (Adobe Inc. - installed 2021-05-07) Executable: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud [Loaded] com.google.keystone.daemon.plist (Google LLC - installed 2022-10-27) Executable: /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateDaemon [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2021-05-07) Command: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon -i 96AD6874-B3E4-4E7F-ADE6-B8943E580C93.pkg [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2021-05-07) Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2023-02-09) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2023-02-09) Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2023-02-14) Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2022-06-05) Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2021-01-25) Executable: /Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon [Loaded] com.starstechnologies.updater.plist (Rational Intellectual Holdings Limited - installed 2022-09-28) Executable: /Library/PrivilegedHelperTools/com.starstechnologies.updater [Running] com.staticz.soundsiphon.bridgedaemon.plist (Dominic Feira - installed 2022-04-02) Executable: /Library/Audio/Plug-Ins/HAL/_SoundSiphon.driver/Contents/XPCServices/com.staticz.soundsiphon.bridgedaemon [Loaded] com.teamviewer.Helper.plist (TeamViewer Germany GmbH - installed 2022-09-14) Executable: /Library/PrivilegedHelperTools/com.teamviewer.Helper [Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer Germany GmbH - installed 2022-09-14) Command: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service -Module Full [Running] com.tunnelbear.mac.tbeard.plist (TunnelBear, Inc. - installed 2021-05-07) Executable: /Library/PrivilegedHelperTools/com.tunnelbear.mac.tbeard [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2022-12-29) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-10-27) Command: /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-27) Command: /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2021-05-07) Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2023-02-09) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2023-02-14) Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent [Loaded] com.staticz.soundsiphon.inputagent.plist (Not signed - installed 2022-04-02) Executable: /Applications/Sound Siphon.app/Contents/XPCServices/Sound Siphon Microphone Input.app/Contents/MacOS/Sound Siphon Microphone Input [Running] com.staticz.soundsiphon.playeragent.plist (Dominic Feira - installed 2022-04-02) Executable: /Library/Audio/Plug-Ins/HAL/_SoundSiphon.driver/Contents/Helpers/com.staticz.soundsiphon.playeragent [Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer Germany GmbH - installed 2022-09-14) Command: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer -RunAsAgent YES [Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer Germany GmbH - installed 2022-09-14) Command: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Desktop_Proxy -RunAsAgent YES -Module Full [Running] org.chromium.chromoting.plist (Google LLC - installed 2023-02-21) Command: /Library/PrivilegedHelperTools/ChromeRemoteDesktopHost.app/Contents/MacOS/remoting_me2me_host_service --run-from-launchd User Launch Agents: [Not Loaded] com.BlueStacks.AppPlayer.Service.plist (Not signed - installed 2022-09-28) Command: /Applications/BlueStacks.app/Contents/MacOS/bstservice Android [Loaded] com.BlueStacks.AppPlayer.UninstallWatcher.plist (Apple - installed 2022-09-28) Command: /bin/sh /Users/fernando/Library/BlueStacks/UninstallWatcher [Loaded] com.BlueStacks.AppPlayer.Updater.plist (BlueStack Systems, Inc. - installed 2022-09-28) Command: /Applications/BlueStacks.app/Contents/MacOS/bstupdater pull [Loaded] com.riot.riotclient.checkinstalls.plist (Riot Games - installed 2023-01-28) Command: /Users/Shared/Riot Games/Riot Client.app/Contents/MacOS/RiotClientServices --agent --agent-check-installs [Loaded] com.skype.skype.shareagent.plist (Not signed - installed 2018-10-10) Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent [Running] com.tunnelbear.mac.tbeara.plist (TunnelBear, Inc. - installed 2017-08-05) Executable: ~/Library/Application Support/TunnelBear/com.tunnelbear.mac.tbeara [Loaded] com.valvesoftware.steamclean.plist (Valve Corporation - installed 2023-02-28) Command: ~/Library/Application Support/Steam/SteamApps/steamclean Public User Login Items: [Not Loaded] NordVPNLauncher (App Store - installed 2021-05-07) Modern Login Item /Applications/NordVPN IKE.app/Contents/Library/LoginItems/NordVPNLauncher.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2023-02-09) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2023-02-09) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Loaded] SoundControlLauncher (Dominic Feira - installed 2022-04-02) Modern Login Item /Applications/Sound Control.app/Contents/Library/LoginItems/SoundControlLauncher.app [Loaded] StartUpHelper (Spotify - installed 2021-05-07) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Loaded] Surfshark (SURFSHARK LTD - installed 2022-09-28) Modern Login Item /Applications/Surfshark.app/Contents/Library/LoginItems/LaunchAgent.app [Not Loaded] Launcher (App Store - installed 2021-05-07) Modern Login Item /Applications/VPN Unlimited.app/Contents/Library/LoginItems/Launcher.app App Extensions: Finder sync extensions: Surfshark Finder Extension - /Applications/Surfshark.app OneDrive Finder Integration - /Applications/OneDrive.app VPNs: tunnelExtension - /Applications/NordVPN IKE.app WireguardPacketTunnel - /Applications/VPN Unlimited.app PacketTunnel - /Applications/VPN Unlimited.app Share services: OneNote - /Applications/Microsoft OneNote.app Safari extensions: Grammarly for Safari - /Applications/Grammarly for Safari.app Honey - /Applications/Honey.app Internet Plug-ins: FlashPlayer-10.6: 32.0.0.465 (? - installed 2020-12-15) Flash Player: 32.0.0.465 (? - installed 2020-12-15) Audio Plug-ins: _SoundSiphon: 3.3.6 (Dominic Feira - installed 2022-02-07) TVRemoteAudio: 1.0.1 (TeamViewer GmbH - installed 2022-08-14) ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2022-12-03) ZSoundSiphon: 3.3.6 (Dominic Feira - installed 2022-04-02) Safari Extensions: Grammarly for Safari (App Store - installed 2021-05-07) Honey (App Store - installed 2021-05-07) 3rd Party Preference panels: Flash Player (Adobe Inc. - installed 2021-05-07) Backup: Time Machine Not Configured! Performance: System Load: 15.11 (1 min ago) 17.37 (5 min ago) 8.18 (15 min ago) Nominal I/O usage: 14.01 MB/s File system: 20.19 seconds Write speed: 1876 MB/s Read speed: 2473 MB/s CPU Usage Snapshot: Type Overall System: 3 % User: 17 % Idle: 80 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) osinstallersetupd 93.92 % (Apple) EtreCheckPro 24.22 % (Etresoft, Inc.) WindowServer 6.34 % (Apple) Google Chrome Helper (Renderer) (29) 6.34 % (Google LLC) kernel_task 3.45 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (29) 1.45 GB (Google LLC) EtreCheckPro 637 MB (Etresoft, Inc.) osinstallersetupd 566 MB (Apple) Google Chrome 209 MB (Google LLC) kernel_task 189 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) biometrickitd 17 KB / 139 KB (Apple) mDNSResponder 85 KB / 43 KB (Apple) apsd 5 KB / 21 KB (Apple) RTProtectionDaemon 22 KB / 3 KB (Malwarebytes Corporation) exchangesyncd 15 KB / 8 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) osinstallersetupd 26 (Apple) routined 5 (Apple) Google Chrome Helper (Renderer) (29) 3 (Google LLC) WindowServer 3 (Apple) EmbeddedOSInstallService 2 (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 17 MB Used RAM: 5.02 GB Cached files: 10.96 GB Available RAM: 10.98 GB Swap Used: 64 MB Software Installs (past 60 days): Install Date Name (Version) 2023-02-14 Microsoft AutoUpdate (4.56.23021201) 2023-02-21 Chrome Remote Desktop Host (111.0.5563) 2023-03-01 macOS Ventura (13.2.1) Clean up: ~/Library/LaunchAgents/com.BlueStacks.AppPlayer.Service.plist /Applications/BlueStacks.app/Contents/MacOS/bstservice Executable not found Diagnostics Information (past 7-30 days): 2023-03-01 19:07:05 Kernel Panic (7 times) Details: panic(cpu 0 caller 0xffffff8016843a5a): Kernel trap at 0xffffff7f987a4 0da, type 14=page fault, registers: 2023-03-01 11:35:41 photoanalysisd High CPU Use Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd 2023-03-01 01:11:35 Kernel Panic Details: panic(cpu 0 caller 0xffffff7f9692fecd): "scbinfo corrupted: magic: 0x8 804a9dc hn: 0x5e21a94fe572819f hnc: 0x5e21a94fe574cb7f n: 0x5e21a94fe5 67f17f nc: 0x5e21a94fe59e7c7f 2023-02-25 23:38:35 com.surfshark.vpnclient.macos.direct.PacketTunnel-WireGuard Crash (2 times) Executable: /Library/SystemExtensions/*/com.surfshark.vpnclient.macos.direct.PacketTunnel-WireGuard Details: BUG IN CLIENT OF LIBDISPATCH: dispatch_sync called on queue already ow ned by current thread End of report