EtreCheck version: 5.7 (5242) Report generated: 2021-02-13 14:37:27 Download EtreCheck from https://etrecheck.com Runtime: 2:01 Performance: Excellent Sandbox: Enabled Full drive access: Disabled Problem: Other problem Major Issues: Anything that appears on this list needs immediate attention. Adware - Adware detected. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. No Time Machine backup - Time Machine backup not found. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (16-inch, 2019) MacBook Pro Model: MacBookPro16,1 2,6 GHz 6-Core Intel Core i7 (i7-9750H) CPU: 6-core 16 RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 8 GB DDR4 2667 BANK 2/ChannelB-DIMM0 - 8 GB DDR4 2667 Battery: Health = Normal - Cycle count = 105 Video Information: Intel UHD Graphics 630 - VRAM: 1536 MB Color LCD (built-in) 3584 x 2240 AMD Radeon Pro 5300M - VRAM: 4 GB Drives: disk0 - APPLE SSD AP0512N 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes) disk1s1 (APFS) [APFS Container] (Shared) disk1s1s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.05 GB used) disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 41.86 GB used) disk1s3 - Preboot (APFS) [APFS Preboot] (Shared - 401 MB used) disk1s4 - Recovery (APFS) [Recovery] (Shared) disk1s5 - VM (APFS) [APFS VM] (Shared - 3.22 GB used) disk1s6 - Update (APFS) (Shared - 2 MB used) Mounted Volumes: disk1s1s1 - Macintosh HD [APFS Snapshot] 499.96 GB (Shared - 15.05 GB used, 439.62 GB available, 438.66 GB free) APFS Mount point: / Read-only: Yes disk1s2 - Macintosh HD - Data [APFS Virtual drive] 499.96 GB (Shared - 41.86 GB used, 439.62 GB available, 438.66 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s3 - Preboot [APFS Preboot] 499.96 GB (Shared - 401 MB used, 438.66 GB free) APFS Mount point: /System/Volumes/Preboot disk1s5 - VM [APFS VM] 499.96 GB (Shared - 3.22 GB used, 438.66 GB free) APFS Mount point: /System/Volumes/VM disk1s6 - Update 499.96 GB (Shared - 2 MB used, 438.66 GB free) APFS Mount point: /System/Volumes/Update Network: Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge System Software: macOS Big Sur 11.2.1 (20D74) Time since boot: About 3 days Notifications: Notifications not available without Full Drive Access. Security: Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus software: Apple Adware: Launchd: /Library/LaunchDaemons/com.viewinstd.plist Executable: /Library/viewinstd/viewinstd Reason: Adware pattern match Unsigned Files: Launchd: ~/Library/LaunchAgents/com.pbN7n.plist Executable: ~/Library/Px1Lx/2XNBr Details: Domain name invalid - possibly adware Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.spearwort.pg.plist Executable: ~/Library/spearwort.pg/spearwort.pg.app/Contents/MacOS/spearwort.pg Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.brassidic.plist Executable: ~/Library/brassidic/brassidic.app/Contents/MacOS/brassidic Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.QuicklookPI.plist Executable: ~/Library/FileFinder/QuicklookPI/QuicklookPI Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.Sung.plist Executable: ~/Library/Sung/Sung.app/Contents/MacOS/Sung Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchDaemons/com.29YMb.plist Executable: /Library/9fIGA/M70pa Details: Domain name invalid - possibly adware Launchd: /Library/LaunchAgents/com.singultous.jc.plist Executable: /Library/singultous.jc/singultous.jc.app/Contents/MacOS/singultous.jc Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.google.keystone.xpcservice.plist Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.DateTest.plist Executable: ~/Library/DateTest/DateTest.app/Contents/MacOS/DateTest Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchDaemons/com.ragabrash.plist Executable: /Library/ragabrash/ragabrash.app/Contents/MacOS/ragabrash Details: Domain name invalid - possibly adware Launchd: /Library/LaunchDaemons/com.kerio.kvpncsvc.plist Executable: /usr/local/kerio/vpnclient/kvpncsvc /usr/local/kerio/vpnclient Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.QuickLayout.plist Executable: ~/Library/Application Support/com.QuickLayout/QuickLayout Details: Executable file is not accessible without Full Drive Access Launchd: ~/Library/LaunchAgents/com.viewinst.plist Executable: ~/Library/viewinst/viewinst Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.aperient.plist Executable: ~/Library/aperient/aperient.app/Contents/MacOS/aperient Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded Details: Exact match found in the legitimate list - probably OK Running app: /Library/scypha-Ophrys/eJrPMrme/ChlEooJz/fumage-girse Running app: /Users/fazliddinshamsiddinov/Library/dioicous/OFxRQJkb/RgoQRJUf/pVWgHstI/calycozoan Apps: 8 Kernel Extensions: /Library/Application Support/VirtualBox VBoxDrv.kext - org.virtualbox.kext.VBoxDrv (6.1.16) VBoxNetAdp.kext - org.virtualbox.kext.VBoxNetAdp (6.1.16) VBoxNetFlt.kext - org.virtualbox.kext.VBoxNetFlt (6.1.16) VBoxUSB.kext - org.virtualbox.kext.VBoxUSB (6.1.16) /Library/Extensions kvnet.kext - com.kerio.kext.kvnetnew (9.2.8.3061 - SDK 10.9) System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 163 Apple tasks [Running] 151 Apple tasks System Launch Daemons: [Not Loaded] 38 Apple tasks [Loaded] 164 Apple tasks [Running] 157 Apple tasks [Other] One Apple task Launch Agents: [Not Loaded] com.fumage-girse.plist (? 0 - installed 2021-02-01) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2020-10-05) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-01-14) [Loaded] com.singultous.jc.plist (? c61adf8e - installed 2021-02-01) [Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2020-10-09) [Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2020-10-09) Launch Daemons: [Loaded] com.29YMb.plist (? 3e7c5026 - installed 2021-02-01) [Running] com.kerio.kvpncsvc.plist (? d763d19f - installed 2018-04-20) [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2020-10-05) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2020-10-05) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-01-14) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-08-04) [Loaded] com.ragabrash.plist (? 6cd2e5f7 - installed 2021-01-29) [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2020-09-17) [Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2020-10-09) [Loaded] com.viewinstd.plist (Adware - installed 2021-01-28) [Not Loaded] org.virtualbox.startup.plist (? 700b9385 - installed 2020-11-19) User Launch Agents: [Loaded] com.DateTest.plist (? 0 - installed 2021-02-02) [Other] com.Hepatica.plist (? 0 - installed 2021-02-02) [Loaded] com.QuickLayout.plist (? 0 - installed 2021-01-28) [Running] com.QuicklookPI.plist (? 0 - installed 2021-01-28) [Loaded] com.Sung.plist (? 0 - installed 2021-01-29) [Loaded] com.aperient.plist (? 0 - installed 2021-02-02) [Loaded] com.brassidic.plist (? 0 - installed 2021-01-28) [Loaded] com.google.keystone.agent.plist (? 0 - installed 2020-11-23) [Loaded] com.google.keystone.xpcservice.plist (? 0 - installed 2020-11-23) [Loaded] com.pbN7n.plist (? 0 - installed 2021-02-01) [Loaded] com.spearwort.pg.plist (? 0 - installed 2021-02-01) [Loaded] com.viewinst.plist (? 0 - installed 2021-01-28) User Login Items: [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2020-10-05) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2020-10-05) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app User Internet Plug-ins: User Internet Plug-ins need Full Drive Access User Audio Plug-ins: User Audio Plug-ins need Full Drive Access User iTunes Plug-ins: User iTunes Plug-ins need Full Drive Access Safari Extensions: MKPlayer (App Store - installed 2020-12-01) 3rd Party Preference Panes: Kerio Control VPN Client (Kerio Technologies - installed 2018-04-20) Backup: Time Machine Not Configured! Performance: System Load: 1.05 (1 min ago) 1.00 (5 min ago) 1.01 (15 min ago) Nominal I/O speed: 1.33 MB/s File system: 19.35 seconds Write speed: 2666 MB/s Read speed: 2598 MB/s CPU Usage Snapshot: Type Overall System: 1 % User: 2 % Idle: 97 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Other processes 16.50 % (?) EtreCheck 15.21 % (App Store) QuicklookPI 0.70 % (? - ~/Library/FileFinder/QuicklookPI) ControlCenter 0.16 % (Apple) Safari 0.13 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheck 595 MB (App Store) Microsoft Excel 229 MB (Microsoft Corporation) QuicklookPI 167 MB (? - ~/Library/FileFinder/QuicklookPI) Safari 129 MB (Apple) Finder 82 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Other processes 57 MB / 12 MB (?) com.apple.WebKit.Networking.xpc 86 KB / 103 KB (Apple) PowerChime 317 B / 355 B (Apple) routined 0 B / 0 B (Apple) NotificationCenter 0 B / 0 B (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 4.98 GB Used RAM: 6.95 GB Cached files: 4.07 GB Available RAM: 9.05 GB Swap Used: 1.54 GB Software Installs (past 30 days): Install Date Name (Version) 2021-01-28 Adobe Pepper Flash Player 2021-02-02 macOS 11.2 (11.2) 2021-02-05 EtreCheck (5.7) 2021-02-05 XProtectPlistConfigData (2139) 2021-02-10 macOS 11.2.1 (11.2.1) 2021-02-10 MRTConfigData (1.73) Clean up: ~/Library/LaunchAgents/com.Hepatica.plist ~/Library/Hepatica/Hepatica.app/Contents/MacOS/Hepatica Executable not found Diagnostics Information (past 7-30 days): Directory /Library/Logs/DiagnosticReports is not accessible. Enable Full Drive Access to see more information. End of report