EtreCheckPro version: 6.4.4 (6E015) Report generated: 2021-06-22 22:52:36 Download EtreCheckPro from https://etrecheck.com Runtime: 2:21 Performance: Excellent Problem: Other problem Description: After deleting the Apps, cleaning up orphan files, and scanning for ma lware, startup in Safe Mode: How to use safe mode on your Mac - Apple Support, login, and restart into normal mode. Generate and post a new EtreCheck report. Major Issues: None Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. More than one antivirus app - This computer has multiple antivirus apps installed. Small backup drive - Time Machine backup drive is too small. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Insufficient permissions - EtreCheck running under a standard user. Diagnostic information may not be available. 32-bit Apps - This computer has 32-bits apps will not work on current versions of the operating system. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: iMac (Retina 4K, 21.5-inch, 2017) iMac Model: iMac18,2 3.4 GHz Intel Core i5 (i5-7500) CPU: 4-core 16 GB RAM - Upgradeable by an Apple Authorized Service Provider BANK 0/DIMM0 - 8 GB DDR4 2400 BANK 1/DIMM0 - 8 GB DDR4 2400 Video Information: Radeon Pro 560 - VRAM: 4 GB iMac (built-in) 4096 x 2304 Drives: disk0 - APPLE HDD HTS541010A9E632 1.00 TB (Mechanical - 5400 RPM) Internal SATA 3 Gigabit Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Fusion Drive] 1000.00 GB disk2 [APFS Virtual drive] 1.03 TB (Shared by 7 volumes) disk2s1 - Macintosh HD - Data (APFS) (Shared - 2 MB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared - 49 MB used) disk2s3 - Recovery (APFS) [Recovery] (Shared - 511 MB used) disk2s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk2s5 - U********** - Data (APFS) (Shared - 3 MB used) disk2s6 - Update (APFS) (Shared - 5 MB used) disk2s7 - Macintosh HD (APFS) (Shared - 766.19 GB used) disk1 - APPLE SSD SM0032L 28.00 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x2 NVM Express disk1s1 - EFI [EFI] 315 MB disk1s2 [APFS Fusion Drive] 27.69 GB disk2 [APFS Virtual drive] 1.03 TB (Shared by 7 volumes) disk2s1 - Macintosh HD - Data (APFS) (Shared - 2 MB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared - 49 MB used) disk2s3 - Recovery (APFS) [Recovery] (Shared - 511 MB used) disk2s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk2s5 - U********** - Data (APFS) (Shared - 3 MB used) disk2s6 - Update (APFS) (Shared - 5 MB used) disk2s7 - Macintosh HD (APFS) (Shared - 766.19 GB used) disk3 - 1.00 TB External FireWire disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 999.86 GB disk3s3 - Boot OS X (Journaled HFS+) 134 MB disk4 - 500.11 GB External FireWire Up to 800 Mb/sec disk4s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk4s2 499.76 GB disk4s3 - Boot OS X (Journaled HFS+) 134 MB disk5 - OWC Mercury Elite Pro Quad USB 3 1.50 TB External FireWire Up to 800 Mb/sec Mounted Volumes: disk2s1 - Macintosh HD - Data 1.03 TB (Shared - 2 MB used, 254.26 GB free) APFS Mount point: /Volumes/Macintosh HD - Data disk2s4 - VM [APFS VM] 1.03 TB (Shared - 2.15 GB used, 254.26 GB free) APFS Mount point: /private/var/vm disk2s5 - U********** - Data 1.03 TB (Shared - 3 MB used, 254.26 GB free) APFS Mount point: /Volumes/U********** - Data disk2s6 - Update 1.03 TB (Shared - 5 MB used, 254.26 GB free) APFS Mount point: /Volumes/Update disk2s7 - Macintosh HD 1.03 TB (Shared - 766.19 GB used, 266.90 GB available, 254.26 GB free) APFS Mount point: / Network: Interface en0: Ethernet Interface fw0: Thunderbolt FireWire Interface en1: Wi-Fi 802.11 a/b/g/n/ac Interface en4: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 2.98 GB available Printer sharing: Enabled System Software: macOS Mojave 10.14.6 (18G9216) Time since boot: Less than an hour Notifications: EtreCheckPro.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple, TotalAV, and Malwarebytes Printer sharing: Enabled Unsigned Files: Launchd: ~/Library/LaunchAgents/ws.agile.1PasswordAgent.plist Executable: ~/Library/Application Support/1Password/Agent/1PasswordAgent.app/Contents/MacOS/1PasswordAgent Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.maintain.ShutDown.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to shut down' -e 'end try' -e 'end ignoring' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.macupdate.desktop5.scanner.plist Executable: /Applications/MacUpdate Desktop.app/Contents/Resources/MU App Search.app/Contents/MacOS/MU App Search Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist Executable: /Library/Application Support/Citrix Receiver/ctxusbd Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.maintain.Restart.plist Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to restart' -e 'end try' -e 'end ignoring' Details: Exact match found in the legitimate list - probably OK Running app: /Library/Printers/Brother/Utilities/Server/NETserver.app/Contents/MacOS/NETserver Running app: /Library/Printers/Brother/Utilities/Server/USBserver.app/Contents/MacOS/USBserver Plugin: /Library/Internet Plug-Ins/CitrixICAClientPlugIn.plugin Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin Plugin: /Library/Internet Plug-Ins/GarminGpsControl.plugin Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Plugin: ~/Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin Apps: 164 32-bit Applications: 3 32-bit apps Kernel Extensions: /Applications/DiskWarrior.app [Not Loaded] DiskWarriorPreview.kext - com.alsoft.Preview (5.2 - SDK 10.5) /Applications/Toast 18 Titanium/MultiCam Capture and Editing.app [Not Loaded] Soundflower.kext - com.Cycling74.driver.Soundflower (1.6.7 - SDK 10.7) /Applications/Utilities/Disk Drill.app [Not Loaded] SecureDisk.kext - com.cleverfiles.SecureDisk (1.0 - SDK 10.14) [Not Loaded] SecureDisk_11.kext - com.cleverfiles.SecureDisk-11 (1.0 - SDK 10.16) /Library/Application Support/Citrix Receiver [Not Loaded] CitrixGUSB.kext - com.citrix.kext.gusb (12.4.0 - SDK 10.9) /Library/Application Support/Malwarebytes/MBAM/Kext [Not Loaded] MB_MBAM_Protection.kext - com.malwarebytes.mbam.rtprotection (4.10 - SDK 10.12) /Library/Extensions [Not Loaded] hp_fax_io.kext - com.hp.kext.hp-fax-io (5.32.0 - SDK 10.15) [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0) [Not Loaded] hp_Deskjet_io_enabler.kext - com.hp.print.hpio.Deskjet.kext (4.0.4 - SDK 10.8) [Not Loaded] hp_Inkjet9_io_enabler.kext - com.hp.print.hpio.Inkjet9.kext (2.16.0 - SDK 10.15) [Not Loaded] speedit.kext - com.increw.kext.speedit (0.32) [Not Loaded] JMicronATA.kext - com.jmicron.JMicronATA (1.1.6) [Not Loaded] Lexmark X422.kext - com.lexmark.iokit.x422scanner (1.0) [Not Loaded] MissingSyncBlackBerry.kext - com.markspace.driver.MissingSyncBlackBerry (2.0.3) [Not Loaded] HotSync Classic Seize.kext - com.palm.ClassicNotSeizeDriver (3.2.1) [Not Loaded] RIMBBVSP.kext - com.rim.driver.BlackBerryUSBDriverVSP (0.0.45) [Not Loaded] RoxioBluRaySupport.kext - com.roxio.BluRaySupport (1.1.6) [Loaded] SSIODriver.kext - com.ss.SSIODriver (1.0 - SDK 10.6) [Not Loaded] BJUSBLoad.kext - jp.co.canon.bj.print.BJUSBLoad (10.58.0 - SDK 10.6) /Library/StagedExtensions/Applications/Parallels Desktop.app [Not Loaded] prl_hypervisor.kext - com.parallels.kext.hypervisor (16.5.0 49183 - SDK 10.11) [Not Loaded] prl_netbridge.kext - com.parallels.kext.netbridge (16.5.0 49183 - SDK 10.9) [Not Loaded] prl_usb_connect.kext - com.parallels.kext.usbconnect (16.5.0 49183 - SDK 10.9) [Not Loaded] prl_vnic.kext - com.parallels.kext.vnic (16.5.0 49183 - SDK 10.9) /Library/StartupItems/ArcanaStartupSound/Resources [Not Loaded] ArcanaPRAM.kext - arcana.PRAM (1.1b1) ~/Library/Services/ToastIt.service/Contents/MacOS [Not Loaded] TDIXController64.kext - com.roxio.TDIXController (2.0) Startup Items: ArcanaStartupSound Path: /Library/StartupItems/ArcanaStartupSound CoreDuoTemp Path: /Library/StartupItems/CoreDuoTemp ParallelsTransporter Path: /Library/StartupItems/ParallelsTransporter System Launch Agents: [Not Loaded] 15 Apple tasks [Loaded] 182 Apple tasks [Running] 103 Apple tasks System Launch Daemons: [Not Loaded] 37 Apple tasks [Loaded] 180 Apple tasks [Running] 117 Apple tasks Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2021-02-11) [Running] com.brother.LOGINserver.plist (? a1772de2 - installed 2018-09-13) [Loaded] com.citrix.AuthManager_Mac.plist (? 1ce99fae - installed 2016-11-09) [Not Loaded] com.maintain.PurgeInactiveMemory.plist (Apple - installed 2021-05-19) [Not Loaded] com.maintain.Restart.plist (? 5421a7fd - installed 2019-09-20) [Not Loaded] com.maintain.ShutDown.plist (? 9b7e817c - installed 2019-09-20) [Running] com.maintain.SystemEvents.plist (Apple - installed 2019-09-20) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2021-05-28) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-06-17) Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2021-01-09) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2021-01-09) [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2021-05-19) [Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2016-11-09) [Running] com.cleverfiles.cfbackd.plist (Justin Johnson - installed 2021-03-08) [Not Loaded] com.maintain.HideSpotlightMenuBarIcon.plist (Apple - installed 2019-09-20) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2021-06-22) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2021-05-28) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-06-17) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-08-04) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2020-11-12) [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed ) [Loaded] com.parallels.toolbox.CleanDriveHelper.plist (Parallels International GmbH - installed 2020-11-23) User Launch Agents: [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2021-06-22) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2021-03-04) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-03-04) [Running] com.hp.devicemonitor.plist (HP Inc. - installed 2021-06-22) [Running] com.hp.productresearch.plist (HP Inc. - installed 2021-06-22) [Loaded] com.logmein.GoToMeeting.G2MAIRUploader.plist (LogMeIn, Inc. - installed 2021-01-19) [Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (LogMeIn, Inc. - installed 2021-01-19) [Loaded] com.macupdate.desktop5.scanner.plist (? 0 - installed 2011-11-13) [Loaded] com.maintain.ShowUserLibraryDirectory.plist (Apple - installed 2019-09-20) [Running] ws.agile.1PasswordAgent.plist (? 0 - installed 2013-11-17) User Login Items: [Running] 1Password 6 (AgileBits Inc. - installed 2020-07-21) Application /Applications/1Password 6.app [Running] 2BUA8C4S2C.com.agilebits.onepassword4-helper (AgileBits Inc. - installed 2020-07-21) Modern Login Item /Applications/1Password 6.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebits.onepassword4-helper.app [Not Loaded] ClassicWeather (App Store - installed 2021-04-06) Modern Login Item /Applications/ClassicWeather.app/Contents/Library/LoginItems/CW LaunchHelperApp.app [Running] Dropbox (Dropbox, Inc. - installed 2021-06-16) Application /Applications/Dropbox.app [Not Loaded] Garmin Express Service (Garmin International - installed 2020-12-19) Modern Login Item /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app [Not Loaded] HPPSDrMonitorHelper (App Store - installed 2021-06-22) Modern Login Item /Applications/HP Smart.app/Contents/Frameworks/HPDiagnosticKit.framework/Versions/A/Resources/Addons/HPPSDrMonitor.app/Contents/Library/LoginItems/HPPSDrMonitorHelper.app [Not Loaded] LaunchAtLoginHelper (App Store - installed 2020-06-10) Modern Login Item /Applications/Utilities/CleanMyDrive 2.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app [Running] HP Device Monitor (HP Inc. - installed 2020-12-17) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Running] HP Product Research (HP Inc. - installed 2020-12-17) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app [Not Loaded] HP Data Uploader (HP Inc. - installed 2020-12-17) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app/Contents/Resources/HP Data Uploader.app [Not Loaded] App Cleaner Helper (Nektony Limited - installed 2021-03-13) Modern Login Item ~/Library/Application Support/Memory Cleaner/Applications/App Cleaner 7.app/Contents/Library/LoginItems/App Cleaner Helper.app Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2021-06-16) AdobePDFViewer: 21.005.20048 (Adobe Systems, Inc. - installed 2021-06-16) CitrixICAClientPlugIn: 12.4.0 (? - installed 2017-02-04) SharePointBrowserPlugin: 14.7.7 (? - installed 2017-10-23) GarminGpsControl: 4.2.0.0 (? - installed 2014-03-31) Silverlight: 5.1.50901.0 (? - installed 2018-03-07) iPhotoPhotocast: 7.0 (Apple - installed 2013-01-05) Audio Plug-ins: AirPlay: 2.0 (Apple - installed 2021-06-20) BridgeAudioSP: 5.52 (Apple - installed 2021-06-20) iSightAudio: 7.7.3 (Apple - installed 2019-09-20) AppleAVBAudio: 760.6 (Apple - installed 2019-09-20) ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2020-04-18) BluetoothAudioPlugIn: 6.0.14 (Apple - installed 2021-06-20) AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-09-20) Safari Extensions: "Open In" button for Internet Explorer (Parallels International GmbH - installed 2021-04-02) 1Password Safari Extension Companion (AgileBits Inc. - installed 2020-07-21) Download Video (Parallels International GmbH - installed 2020-10-20) Open in IINA (HeChen LI - installed 2020-11-09) Screenshot Page (Parallels International GmbH - installed 2020-10-20) Backup: Skip System Files: No Mobile backups: No Auto backup: Yes Volumes being backed up: Macintosh HD: Disk size: 1.03 TB - Disk used: 773.43 GB Destinations: i************p [Local] (Last used) Total size: 1.50 TB Total number of backups: 13 Oldest backup: 2021-06-16 12:51:15 Last backup: 2021-06-22 22:25:46 3 local snapshots Oldest local snapshot: 2021-06-22 14:23:51 Last local snapshot: 2021-06-22 22:22:56 Performance: System Load: 3.07 (1 min ago) 3.31 (5 min ago) 1.58 (15 min ago) Nominal I/O speed: 0.17 MB/s File system: 14.60 seconds Write speed: 575 MB/s Read speed: 1475 MB/s CPU Usage Snapshot: Type Overall System: 2 % User: 3 % Idle: 96 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) EtreCheckPro 6.62 % (Etresoft, Inc.) WindowServer 2.38 % (Apple) HP Device Monitor 1.80 % (HP Inc.) kernel_task 1.44 % (Apple) kextd 0.92 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheckPro 711 MB (Etresoft, Inc.) Dropbox (3) 376 MB (Dropbox, Inc.) Dropbox Web Helper (4) 362 MB (Dropbox, Inc.) com.apple.WebKit.WebContent (2) 182 MB (Apple) mds_stores 162 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Dropbox 13 KB / 84 KB (Dropbox, Inc.) mDNSResponder 67 KB / 25 KB (Apple) RTProtectionDaemon 34 KB / 5 KB (Malwarebytes Corporation) apsd 5 KB / 20 KB (Apple) rapportd 8 KB / 3 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 2 (Apple) Dropbox Web Helper (4) 1 (Dropbox, Inc.) HP Device Monitor 1 (HP Inc.) kextd 0 (Apple) RTProtectionDaemon 0 (Malwarebytes Corporation) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 7.89 GB Used RAM: 4.91 GB Cached files: 3.20 GB Available RAM: 11.09 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2021-06-16 Adobe Acrobat Reader DC (21.005.20048) (21.005.20048) 2021-06-17 XProtectPlistConfigData (2148) 2021-06-17 Microsoft AutoUpdate (4.36.21061301) 2021-06-17 Microsoft Excel (16.50.21061301) 2021-06-17 Microsoft PowerPoint (16.50.21061301) 2021-06-17 Microsoft Word (16.50.21061301) 2021-06-17 macOS Catalina (10.15.7) 2021-06-18 macOS Mojave (10.14.6) 2021-06-20 Star VPN (2.8.2) 2021-06-20 Toast 18 Titanium (16.0) 2021-06-20 SU_TITLE (10.14.6.1.1.1569030045) 2021-06-20 CompatibilityNotificationData (1.0.6) 2021-06-20 MRTConfigData (1.79) 2021-06-20 iMovie (10.1.14) 2021-06-20 macOS Supplemental Update (10.14.6) 2021-06-20 Safari (14.1.1) 2021-06-20 macOS Mojave Security Update 2021-004 (10.14.6) 2021-06-22 HP Smart (12.8.0.1462) 2021-06-22 Malwarebytes for Mac (1.0) Diagnostics Information (past 7-30 days): 2021-06-18 20:20:25 Dropbox.app Crash Executable: /Applications/Dropbox.app 2021-06-18 18:13:44 iMovie.app Crash Executable: /Applications/iMovie.app Details: dyld: launch, loading dependent libraries 2021-06-18 18:12:48 TinkerTool.app Crash Executable: /Applications/Utilities/TinkerTool.app Details: dyld: launch, loading dependent libraries Directory /Library/Logs/DiagnosticReports is not accessible. Run as an administrator account to see more information. End of report