EtreCheck version: 4.2.1 (4C020) Report generated: 2020-03-08 16:39:39 Download EtreCheck from https://etrecheck.com Runtime: 10:20 Performance: Poor Problem: Other problem Description: Twice a message has appeared saying files are being copied from the Mac Pro to the Mac Mini when I did not initiate the copy and in fact had sharing features turned off. Major Issues: Anything that appears on this list needs immediate attention. Poor performance - EtreCheck report took over 10 minutes to run. This is very unusual. Heavy CPU usage - Some processes are using an unusually high amount of CPU. Minor Issues: These issues do not need immediate attention but they may indicate future problems. Heavy RAM usage - This machine is using a large amount of RAM. Apps crashing - There have been numerous app crashes. Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed. System modifications - There are a large number of system modifications running in the background. Hardware Information: Mac mini (Late 2014) Mac mini Model: Macmini7,1 1 3 GHz Intel Core i7 (i7-4578U) CPU: 2-core 16 RAM Not upgradeable BANK 0/DIMM0 - 8 GB DDR3 1600 ok BANK 1/DIMM0 - 8 GB DDR3 1600 ok Video Information: Intel Iris - VRAM: 1536 MB Thunderbolt Display 2560 x 1440 Drives: disk0 - APPLE SSD SM0128F 121.33 GB (Solid State - TRIM: Yes) Internal PCI 5.0 GT/s x2 Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 () [Core Storage Container] 120.99 GB disk2 - Macintosh HD (Journaled HFS+) [Fusion Drive] 1.49 TB disk0s3 - B*******X () [Recovery] 134 MB disk1 - APPLE HDD ST2000LM003 2.00 TB (Mechanical) Internal SATA 3 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 () [Core Storage Container] 1.38 TB disk2 - Macintosh HD (Journaled HFS+) [Fusion Drive] 1.49 TB disk1s3 - Recovery HD () [Recovery] 650 MB disk1s4 (HFS+) 619.93 GB disk4 - Seagate Backup+ Hub WH 8.00 TB (Unknown) External USB 5 Gbit/s disk4s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk4s2 - S***********************e (Journaled HFS+) 2.00 TB disk4s3 () [Core Storage Container] 6.00 TB disk5 - T***************************e (Journaled HFS+) 6.00 TB disk4s4 - B*******X (Journaled HFS+) [Recovery] 134 MB Mounted Volumes: disk2 - Macintosh HD [Fusion Drive] 1.49 TB (399.56 GB free) Journaled HFS+ Mount point: / disk3 - T************a 619.93 GB (35.54 GB free) Journaled HFS+ Mount point: /Volumes/TrueCrypt Data disk4s2 - S***********************e 2.00 TB (1.04 TB free) Journaled HFS+ Mount point: /Volumes/Seagate Backup Plus Drive disk5 - T***************************e 6.00 TB (322.25 GB free) Journaled HFS+ Mount point: /Volumes/Time Machine Mac Mini Seagate Encrypted Network: Interface Bluetooth-Modem: Bluetooth DUN Interface en0: Ethernet One IPv4 address Interface en5: Display Ethernet Interface fw0: Display FireWire Interface en1: Wi-Fi 802.11 a/b/g/n/ac One IPv4 address Interface en4: Bluetooth PAN Interface bridge0: Thunderbolt Bridge Interface en6: AX88772 Interface en8: iPad Interface en7: iPhone System Software: macOS High Sierra 10.13.6 (17G11023) Time since boot: About 14 days System Load: 9.73 (1 min ago) 5.12 (5 min ago) 4.02 (15 min ago) Configuration Files: /etc/hosts - Count: 1 Security: System Status Gatekeeper Mac App Store and identified developers System Integrity Protection Enabled Unsigned Files: Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.shutdown-gpg-agent.plist Executable: /usr/local/MacGPG2/libexec/shutdown-gpg-agent Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.cpsww.ppupsd.plist Executable: /Library/Services/ppupsd Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.fix.plist Executable: /usr/local/MacGPG2/libexec/fixGpgHome Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the whitelist - probably OK Kernel Extensions: /Library/Application Support/Malwarebytes/MBAM/Kext [Loaded] MB_MBAM_Protection.kext (4.1 - SDK 10.11) /Library/Extensions [Loaded] SophosFileProtection.kext (9.9.4 - SDK 10.14) [Loaded] SophosWebProtection.kext (9.9.4 - SDK 10.14) System Launch Agents: [Not Loaded] 9 Apple tasks [Loaded] 166 Apple tasks [Running] 119 Apple tasks System Launch Daemons: [Not Loaded] 36 Apple tasks [Loaded] 173 Apple tasks [Running] 128 Apple tasks Launch Agents: [Loaded] org.gpgtools.Libmacgpg.xpc.plist (Lukas Pitschl - installed 2018-09-20) [Running] org.gpgtools.macgpg2.shutdown-gpg-agent.plist (? df7bd0cf - installed 2018-09-20) [Running] com.iDrive.IDSyncUtil.plist (IDrive Incorporated - installed 2020-02-14) [Running] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Running] com.sophos.home.ui.plist (Sophos - installed 2020-03-02) [Running] com.oracle.java.Java-Updater.plist (? aa11746 - installed 2019-10-05) [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2020-02-10) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2020-02-05) [Running] com.sophos.agent.plist (Sophos - installed 2020-02-08) [Running] com.brother.LOGINserver.plist (? a1772de2 - installed 2016-03-10) [Loaded] org.gpgtools.macgpg2.fix.plist (? d7ac5146 - installed 2018-09-20) [Loaded] org.gpgtools.updater.plist (Lukas Pitschl - installed 2018-09-21) Launch Daemons: [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2020-02-07) [Running] com.sonos.SonosLibraryServer.plist (Sonos, Inc. - installed 2019-09-08) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2020-02-05) [Running] com.prosoftnet.idrivedaemon.plist (IDrive Incorporated - installed 2020-02-14) [Loaded] com.bombich.ccchelper.plist (? c6624472 - installed 2016-04-20) [Not Loaded] com.wdc.WDPrivilegedHelper.plist (Western Digital Corporation Branded Products Group - installed 2018-07-03) [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2020-01-24) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2020-02-16) [Loaded] com.prosoftnet.idsyncdaemon.plist (IDrive Incorporated - installed 2020-02-14) [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2020-01-27) [Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2019-10-05) [Loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2020-02-07) [Running] com.crashplan.engine.plist (Code 42 Software - installed 2020-02-11) [Loaded] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2017-12-07) [Running] com.oracle.oss.mysql.mysqld.plist (? e0fee968 - installed 2015-07-14) [Running] com.cpsww.ppupsd.plist (? d1c774db - installed 2016-12-08) [Running] com.prosoftnet.idwifimanager.plist (IDrive Incorporated - installed 2020-02-14) [Running] com.sophos.common.servicemanager.plist (Sophos - installed 2020-02-08) User Launch Agents: [Running] com.spotify.webhelper.plist (Spotify - installed 2018-07-07) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-01-30) [Loaded] com.skype.skype.shareagent.plist (? 0 - installed 2018-06-16) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-01-30) [Loaded] com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist (Adobe Systems, Inc. - installed 2017-11-01) [Loaded] com.code42.menubar.plist (Code 42 Software - installed 2020-03-08) User Login Items: iTunesHelper Application (Apple - installed 2019-02-02) (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app) AdobeResourceSynchronizer Application (Adobe Systems, Inc. (/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app) Parallels Toolbox Application (Parallels International GmbH (/Applications/Parallels Toolbox.app) IDriveMonitor Application (IDrive Incorporated (/Library/Application Support/IDriveforMac/IDriveHelperTools/IDriveMonitor.app) DiskWarriorStarter Application (Alsoft, Inc (/Applications/DiskWarrior.app/Contents/Helpers/DiskWarriorStarter.app) Activity Monitor Application (Apple (/Applications/Utilities/Activity Monitor.app) TrueCrypt Application (? (/Applications/TrueCrypt.app) Internet Plug-ins: FlashPlayer-10.6: 32.0.0.330 (installed 2020-02-11) QuickTime Plugin: 7.7.3 (installed 2020-01-30) AdobePDFViewerNPAPI: 15.016.20039 (installed 2016-07-13) AdobePDFViewer: 15.016.20039 (installed 2016-07-13) Flash Player: 32.0.0.330 (installed 2020-02-11) Default Browser: (installed 2019-10-18) Silverlight: 5.1.50901.0 (installed 2016-11-10) JavaAppletPlugin: Java 8 Update 231 build 11 (installed 2020-01-07) User Internet Plug-ins: WebEx64: 1.1.0 (installed 2016-05-13) ZoomUsPlugIn: 4.1.28165.0716 (installed 2018-07-19) Safari Extensions: Ghostery.safariextz - GHOSTERY, Inc. - https://www.ghostery.com/ (installed 2018-03-31) LastPass - Mac App Store - (installed 2020-01-09) OpenIE.safariextz - Parallels - http://www.parallels.com (installed 2018-11-24) Open in Internet Explorer - Mac App Store - (installed 2019-03-12) Screenshot Page - Mac App Store - (installed 2020-01-31) Download Video - Mac App Store - (installed 2020-01-31) 3rd Party Preference Panes: Flash Player (installed 2020-01-27) GPG Suite (installed 2018-09-21) Java (installed 2020-01-07) MacFUSE (installed 2008-12-19) MySQL (installed 2015-07-14) Time Machine: Skip System Files: No Mobile backups: No Auto backup: Yes Volumes being backed up: Macintosh HD: Disk size: 1.49 TB - Disk used: 1.10 TB Destinations: T***************************e [Local] (Last used) Total size: 6.00 TB Total number of backups: 115 Oldest backup: 2018-08-08 00:52:01 Last backup: 2020-03-08 15:51:47 Top Processes by CPU: Process (count) Source % of CPU Console Apple 50 prl_vm_app Parallels International GmbH 44 WindowServer Apple 28 kernel_task Apple 22 RTProtectionDaemon Malwarebytes Corporation 17 Top Processes by Memory: Process (count) Source RAM usage prl_vm_app Parallels International GmbH 3.89 GB com.apple.WebKit.WebContent (17) Apple 2.07 GB kernel_task Apple 1.42 GB plugin-container (9) 1.35 GB Console Apple 415 MB Top Processes by Network Use: Process Source Input Output mDNSResponder Apple 8.45 GB 7.53 GB kernel_task Apple 2.11 GB 17 MB SophosWebIntelligence 8 MB 2 MB SophosMcsAgentD 1 MB 2 MB netbiosd Apple 931 KB 13 KB Top Processes by Energy Use: Process (count) Source Energy usage (0-100) prl_vm_app Parallels International GmbH 23 RTProtectionDaemon Malwarebytes Corporation 11 Console Apple 5 backupd Apple 3 mds_stores Apple 1 Virtual Memory Information: Available RAM 2.71 GB Free RAM 18 MB Used RAM 13.29 GB Cached files 2.69 GB Swap Used 3.85 GB Diagnostics Information (past 7 days): 2020-03-07 18:55:45 AppleVNCServer Crash (once) 2020-03-05 11:39:37 LastPass.app Crash (once) Crashing on exception: Invalid number value (infinite) in JSON write 2020-02-23 17:35:38 Last Shutdown Cause: 0 - Power loss (once) End of report