EtreCheckPro version: 6.4.4 (6E015) Report generated: 2021-05-04 18:41:23 Download EtreCheckPro from https://etrecheck.com Runtime: 3:08 Performance: Excellent Problem: Computer is restarting Description: The iMac crashes within a few minutes of being left idling. It has to be re-started each time. A report is produced for Apple automatically. Major Issues: Anything that appears on this list needs immediate attention. Adware - Adware detected. Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Apps crashing - There have been numerous app crashes. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: iMac (Retina 5K, 27-inch, Late 2015) iMac Model: iMac17,1 3.2 GHz Quad-Core Intel Core i5 (i5-6500) CPU: 4-core 8 GB RAM - Upgradeable BANK 0/DIMM0 - 4 GB DDR3 1867 BANK 0/DIMM1 - Empty BANK 1/DIMM0 - 4 GB DDR3 1867 BANK 1/DIMM1 - Empty Video Information: AMD Radeon R9 M390 - VRAM: 2 GB iMac (built-in) 5120 x 2880 Drives: disk0 - APPLE SSD AP0032H 24.00 GB (Solid State - TRIM: Yes) Internal PCI-Express 5.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Fusion Drive] 23.69 GB disk2 [APFS Virtual drive] 1.02 TB (Shared by 6 volumes) disk2s1 - M*****************a (APFS) [APFS Virtual drive] (Shared - 851.96 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared - 454 MB used) disk2s3 - Recovery (APFS) [Recovery] (Shared - 622 MB used) disk2s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk2s5 (APFS) [APFS Container] (Shared - 15.35 GB used) disk2s5s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.35 GB used) disk2s6 - Update (APFS) (Shared - 2 MB used) disk1 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM) Internal SATA 3 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 [APFS Fusion Drive] 1000.00 GB disk2 [APFS Virtual drive] 1.02 TB (Shared by 6 volumes) disk2s1 - M*****************a (APFS) [APFS Virtual drive] (Shared - 851.96 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared - 454 MB used) disk2s3 - Recovery (APFS) [Recovery] (Shared - 622 MB used) disk2s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk2s5 (APFS) [APFS Container] (Shared - 15.35 GB used) disk2s5s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.35 GB used) disk2s6 - Update (APFS) (Shared - 2 MB used) disk3 - LaCie P9227 Slim 1.00 TB (Mechanical) External USB 5 Gbit/s USB disk3s1 - B******2 (Journaled HFS+) 1.00 TB (299.00 GB used) disk4 - Seagate Desktop 500.11 GB External USB 480 Mbit/s USB disk4s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk4s2 - 2************e (Mac OS Extended (Case-sensitive, Journaled)) 499.76 GB (204.15 GB used) Mounted Volumes: disk2s1 - M*****************a [APFS Virtual drive] 1.02 TB (Shared - 851.96 GB used, 214.37 GB available, 148.63 GB free) APFS Mount point: /System/Volumes/Data disk2s2 - Preboot [APFS Preboot] 1.02 TB (Shared - 454 MB used, 148.63 GB free) APFS Mount point: /System/Volumes/Preboot disk2s4 - VM [APFS VM] 1.02 TB (Shared - 2.15 GB used, 148.63 GB free) APFS Mount point: /System/Volumes/VM disk2s5s1 - Macintosh HD [APFS Snapshot] 1.02 TB (Shared - 15.35 GB used, 214.37 GB available, 148.63 GB free) APFS Mount point: / Read-only: Yes disk2s6 - Update 1.02 TB (Shared - 2 MB used, 148.63 GB free) APFS Mount point: /System/Volumes/Update disk3s1 - B******2 1.00 TB (299.00 GB used, 701.29 GB available, 701.20 GB free) Journaled HFS+ Mount point: /Volumes/B******2 disk4s2 - 2************e 499.76 GB (204.15 GB used, 295.75 GB available, 295.62 GB free) Mac OS Extended (Case-sensitive, Journaled) Mount point: /Volumes/2************e Owners enabled: No Network: Interface en0: Ethernet Interface en1: Wi-Fi 802.11 a/b/g/n/ac Interface en4: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 143.51 GB available Printer sharing: Enabled Remote Apple Events: Enabled System Software: macOS Big Sur 11.3.1 (20E241) Time since boot: About 3 hours Notifications: EtreCheckPro.app one notification FrontendAgent.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple and Malwarebytes Printer sharing: Enabled Remote Apple Events: Enabled Adware: Launchd: ~/Library/LaunchAgents/zrUpdater.plist Executable: /Applications/ZipRar.app/Contents/Resources/appUpdater zr 1000 Reason: Adware name match Unsigned Files: Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.apple.installer.osmessagetracing.plist Executable: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer Details: Exact match found in the legitimate list - probably OK System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 176 Apple tasks [Running] 141 Apple tasks System Launch Daemons: [Not Loaded] 33 Apple tasks [Loaded] 184 Apple tasks [Running] 142 Apple tasks [Other] 2 Apple tasks Launch Agents: [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2021-03-25) Launch Daemons: [Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc - installed 2020-06-03) [Loaded] com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2019-02-06) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2021-04-02) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2021-03-25) User Launch Agents: [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2021-03-16) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-03-16) [Loaded] com.skype.skype.shareagent.plist (? 0 - installed 2017-11-05) [Loaded] zrUpdater.plist (Adware - installed 2018-05-15) User Login Items: [Not Loaded] LoginHelper (FIPLAB Ltd - installed 2019-02-02) Modern Login Item /Volumes/2************e/D*****k/D*******s/Memory Clean 3.app/Contents/Library/LoginItems/LoginHelper.app Audio Plug-ins: ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2020-09-13) Backup: Skip System Files: No Mobile backups: No Auto backup: Yes Destinations: B******2 [Local] (Last used) Total size: 1.00 TB Total number of backups: 62 Oldest backup: 2020-08-20 19:54:01 Last backup: 2021-05-03 19:17:49 M*****************c [Local] Total size: 2.00 TB Total number of backups: 186 Oldest backup: 2016-09-08 11:00:51 Last backup: 2021-04-15 17:01:16 12 local snapshots Oldest local snapshot: 2021-04-15 16:30:01 Last local snapshot: 2021-05-04 17:45:51 Performance: System Load: 1.29 (1 min ago) 1.45 (5 min ago) 1.61 (15 min ago) Nominal I/O speed: 1.30 MB/s File system: 21.64 seconds Write speed: 320 MB/s Read speed: 862 MB/s CPU Usage Snapshot: Type Overall System: 2 % User: 4 % Idle: 94 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) EtreCheckPro 14.02 % (Etresoft, Inc.) kernel_task 6.54 % (Apple) WindowServer 4.48 % (Apple) backupd 0.30 % (Apple) Activity Monitor 0.16 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheckPro 578 MB (Etresoft, Inc.) Mail 213 MB (Apple) Skype Helper (Renderer) 211 MB (Skype Communications S.a.r.l) com.apple.WebKit.WebContent (7) 193 MB (Apple) Dock 182 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Mail 19 MB / 309 KB (Apple) mDNSResponder 1 MB / 841 KB (Apple) apsd 19 KB / 45 KB (Apple) netbiosd 40 KB / 24 KB (Apple) trustd 35 KB / 3 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 4 (Apple) RTProtectionDaemon 0 (Malwarebytes Corporation) launchd 0 (Apple) sysmond 0 (Apple) backupd 0 (Apple) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 28 MB Used RAM: 4.98 GB Cached files: 3.00 GB Available RAM: 3.02 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2021-03-17 iMovie (10.2.3) 2021-03-24 Pages (11.0) 2021-03-24 Numbers (11.0) 2021-03-24 macOS 11.2.3 (11.2.3) 2021-03-30 Keynote (11.0) 2021-04-02 Malwarebytes for Mac (1.0) 2021-04-16 Mimeo Photos (4.3.2) 2021-04-28 macOS 11.3 (11.3) 2021-04-30 XProtectPlistConfigData (2145) 2021-05-04 macOS 11.3.1 (11.3.1) 2021-05-04 MRTConfigData (1.78) 2021-05-04 PhotoSweeper Lite (4.0.0) Diagnostics Information (past 7-30 days): 2021-05-04 17:48:47 ZipRar.app Crash (25 times) Executable: /Applications/ZipRar.app Details: *** Terminating app due to uncaught exception 'NSInvalidArgumentExcept ion', reason: '-[__NSCFBoolean isEqualToString:]: unrecognized selecto r sent to instance 0x7fff806f3230' terminating with uncaught exception of type NSException abort() called 2021-05-04 14:41:35 Kernel Panic Details: panic(cpu 3 caller 0xffffff80111eb9b8): watchdog timeout: no checkins from watchdogd in 98 seconds (537 total checkins since monitoring last enabled) 2021-05-04 14:14:08 WindowServer Crash (2 times) Executable: /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer Details: StartTime:2021-05-04 13:10:10 GPU:AMD MetalDevice for accelerator(0x8b43): 0x7fbc1bd3c538 (MTLDevice: 0x7fbc 1eb19000) IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/PEG0@1/IOPP/GFX 0@0/ATY,Tako@0/AMDFramebufferSI boot-args: End of report