EtreCheckPro version: 6.5.6 (6F041) Report generated: 2022-02-07 19:47:20 Download EtreCheckPro from https://etrecheck.com Runtime: 1:37 Performance: Excellent Problem: Other problem Description: virus Major Issues: Anything that appears on this list needs immediate attention. Proxies - Network proxies detected. This could be evidence of malware. Adware - Adware detected. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. No Time Machine backup - Time Machine backup not found. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Air (M1, 2020) MacBook Air Model: MacBookAir10,1 2.40 GHz Apple M1 (m1) CPU: 8-core 8 GB RAM - Not upgradeable Battery: Health = Normal - Cycle count = 18 Video Information: Apple M1 Color LCD (built-in) 2880 x 1800 Drives: disk0 - APPLE SSD AP0256Q 251.00 GB (Solid State - TRIM: Yes) Internal Apple Fabric NVM Express disk0s1 [APFS Container] 524 MB disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes) disk1s1 - iSCPreboot (APFS) [APFS Preboot] (Shared - 8 MB used) disk1s2 - xART (APFS) (Shared - 6 MB used) disk1s3 - Hardware (APFS) (Shared - 340 KB used) disk1s4 - Recovery (APFS) [Recovery] (Shared - 20 KB used) disk0s2 [APFS Container] 245.11 GB disk3 [APFS Virtual drive] 245.11 GB (Shared by 6 volumes) disk3s1 (APFS) [APFS Container] (Shared - 23.95 GB used) disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 23.95 GB used) disk3s2 - Preboot (APFS) [APFS Preboot] (Shared - 696 MB used) disk3s3 - Recovery (APFS) [Recovery] (Shared - 1.69 GB used) disk3s4 - Update (APFS) (Shared - 615 MB used) disk3s5 - Data (APFS) [APFS Virtual drive] (Shared - 100.35 GB used) disk3s6 - VM (APFS) [APFS VM] (Shared - 20 KB used) disk0s3 [APFS Container] 5.37 GB disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes) disk2s1 - Recovery (APFS) [Recovery] (Shared - 1.71 GB used) disk2s2 - Update (APFS) (Shared - 29 KB used) Mounted Volumes: disk1s1 - iSCPreboot [APFS Preboot] 524 MB (Shared - 8 MB used, 505 MB free) APFS Mount point: /System/Volumes/iSCPreboot disk1s2 - xART 524 MB (Shared - 6 MB used, 505 MB free) APFS Mount point: /System/Volumes/xarts disk1s3 - Hardware 524 MB (Shared - 340 KB used, 505 MB free) APFS Mount point: /System/Volumes/Hardware disk3s1 [APFS Container] 245.11 GB (Shared - 23.95 GB used, 117.67 GB free) APFS Mount point: /System/Volumes/Update/mnt1 Encrypted Partitions: disk3s1s1 disk3s1s1 - Macintosh HD [APFS Snapshot] 245.11 GB (Shared - 23.95 GB used, 134.59 GB available, 117.67 GB free) APFS Mount point: / Read-only: Yes disk3s2 - Preboot [APFS Preboot] 245.11 GB (Shared - 696 MB used, 117.67 GB free) APFS Mount point: /System/Volumes/Preboot disk3s4 - Update 245.11 GB (Shared - 615 MB used, 117.67 GB free) APFS Mount point: /System/Volumes/Update disk3s5 - Data [APFS Virtual drive] 245.11 GB (Shared - 100.35 GB used, 134.59 GB available, 117.67 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk3s6 - VM [APFS VM] 245.11 GB (Shared - 20 KB used, 117.67 GB free) APFS Mount point: /System/Volumes/VM Network: Interface en3: Ethernet Adaptor (en3) Interface en4: Ethernet Adaptor (en4) Interface en6: Ethernet Adapter (en3) Interface en7: Ethernet Adapter (en4) Interface bridge0: Thunderbolt Bridge Proxies: HTTP, HTTPS Interface en0: Wi-Fi 802.11 a/b/g/n/ac/ax Proxies: HTTP, HTTPS System Software: macOS Monterey 12.0.1 (21A559) Time since boot: About an hour Notifications: Safari.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple Adware: Launchd: /Library/LaunchDaemons/com.TypeCharacter.system.plist Executable: /Library/Application Support/.15139767737508209271/System/com.TypeCharacter.system/TypeCharacter.system r Reason: Adware pattern match Unsigned Files: Launchd: ~/Library/LaunchAgents/com.8489313846807000742.plist Executable: ~/Library/Application Support/com.6985386993138073261/5034157545964574116 9C10A91D-C6DA-5E36-97EF-FD8A3DFB7190 1137 Details: Domain name invalid - possibly adware Launchd: /Library/LaunchDaemons/org.2608017282355670131.DFDA67BC-A320-439D-A1F5-2509DB848A07.plist Executable: /Library/Application Support/4884468935697603863/org.4884468935697603863_.4884468935697603863/_4864452064989186322_ Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.TypeCharacter.service.plist Executable: ~/Library/Application Support/.15139767737508209271/Services/com.TypeCharacter.service/TypeCharacter.service -s 6600 Details: Executable file is hidden - possibly adware Launchd: /Library/LaunchDaemons/com.microsoft.teams.TeamsUpdaterDaemon.plist Executable: /Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon Details: Restrictive config permissions - possibly adware Launchd: /Library/LaunchDaemons/net.7300142387242365454.245FD6F1-4726-42DE-BD16-1E24EF279D70.plist Executable: /Library/Application Support/com.2348003683948563034.ABCDD4A8-8E7D-448B-BA5C-497DC224738F/_8691745839793802798 Details: Domain name invalid - possibly adware Launchd: /Library/LaunchDaemons/com.TypeCharacterd.plist Executable: /var/root/Library/Application Support/.SeoDBgUNAAIFAwWJATYwPx47BA==/TypeCharacter.gqa/TypeCharacterfld pd Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.6C0B4D62.EA9D.4CF3.AD50.6CCC0864648A.plist Executable: ~/Library/Application Support/.7BDC8E97-3CFE-4FFB-9604-78E15ECAB639/.EF0FAD10-0A45-418C-BC73-752DD6ABAB2F h Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.1AD6ACB6.394C.4584.9DE0.D523B3CFE1A5.plist Executable: ~/Library/Application Support/.1DCFB937-5785-4958-972B-9AE1B6FEB41D/.C48BF448-0C00-4E78-A100-53D2E0B53BD3 h Details: Domain name invalid - possibly adware Launchd: /Library/LaunchDaemons/com.1120260404885677108.44C48D04EBE202B46DFC2A18899AA8B60A9C0CB16F699BBF06D378166E9A5AC2.plist Executable: /Library/Application Support/com.14732840809783728526/16531623151476191994 '/Library/Application Support/com.14732840809783728526/11613335837775801839' oicdfpfhbfaidianjncabpcbmefemlae Default '/Library/Application Support/com.14732840809783728526/8002079420327809338' 9C10A91D-C6DA-5E36-97EF-FD8A3DFB7190 Details: Domain name invalid - possibly adware Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Old Applications: One x86-only app Kernel Extensions: /Library/Extensions [Not Loaded] EPSONUSBPrintClass.kext - com.epson.print.kext.USBPrintClass (2.2.7) [Not Loaded] hp_fax_io.kext - com.hp.kext.hp-fax-io (5.11.0 - SDK 10.8) [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0) [Not Loaded] hp_Inkjet4_io_enabler.kext - com.hp.print.hpio.Inkjet4.kext (4.1.2 - SDK 10.8) [Not Loaded] IOVideoVidyoCamera.kext - com.vidyo.driver.VidyoCamera (1.0.0d1 - SDK 10.11) System Launch Daemons: [Not Loaded] 40 Apple tasks [Loaded] 191 Apple tasks [Running] 144 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 186 Apple tasks [Running] 146 Apple tasks [Other] 2 Apple tasks Launch Daemons: [Loaded] com.1120260404885677108.44C48D04EBE202B46DFC2A18899AA8B60A9C0CB16F699BBF06D378166E9A5AC2.plist (? 8e3e494 - installed 2021-10-19) [Loaded] com.TypeCharacter.system.plist (Adware - installed 2021-10-12) [Running] com.TypeCharacterd.plist (? bc0232f9 - installed 2021-09-26) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2021-10-19) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2021-10-19) [Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc - installed 2019-09-19) [Loaded] com.leapfrog.connect.authdaemon.plist (LeapFrog Enterprises, Inc. - installed 2021-10-19) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (? 0 - installed 2022-02-07) [Loaded] com.vidyo.DPA.VidyoCamera.plist (Vidyo, Inc. - installed 2018-12-14) [Other] net.7300142387242365454.245FD6F1-4726-42DE-BD16-1E24EF279D70.plist (? a56469ba - installed 2021-10-19) [Loaded] org.2608017282355670131.DFDA67BC-A320-439D-A1F5-2509DB848A07.plist (? f57a78c - installed 2021-10-19) User Launch Agents: [Loaded] com.1AD6ACB6.394C.4584.9DE0.D523B3CFE1A5.plist (? 0 - installed 2021-09-30) [Loaded] com.6C0B4D62.EA9D.4CF3.AD50.6CCC0864648A.plist (? 0 - installed 2021-09-30) [Loaded] com.8489313846807000742.plist (? 0 - installed 2021-10-19) [Loaded] com.TypeCharacter.service.plist (? 0 - installed 2021-10-13) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2022-02-07) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2022-02-07) [Running] com.leapfrog.connect.monitor.plist (LeapFrog Enterprises, Inc. - installed 2019-07-02) [Loaded] com.spotify.webhelper.plist (Spotify - installed 2021-10-19) User Login Items: [Not Loaded] HP Device Monitor (HP Inc. - installed 2021-10-19) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Not Loaded] HP Product Research (HP Inc. - installed 2017-11-06) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-02-21) AdobePDFViewer: 19.010.20098 (Adobe Systems, Inc. - installed 2019-02-21) Silverlight: 5.1.41212.0 (? - installed 2016-02-10) Audio Plug-ins: ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2021-09-08) CoreMediaIO Plug-ins: VidyoCamera: 7.0 (Vidyo, Inc. - installed 2018-12-14) Backup: Time Machine information not available without Full Drive Access. Performance: System Load: 2.17 (1 min ago) 1.91 (5 min ago) 1.99 (15 min ago) Nominal I/O speed: 0.11 MB/s File system: 6.98 seconds Write speed: 1846 MB/s Read speed: 1749 MB/s CPU Usage Snapshot: Type Overall System: 2 % User: 4 % Idle: 94 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) EtreCheckPro 22.66 % (Etresoft, Inc.) WindowServer 9.18 % (Apple) networksetup 4.30 % (Apple) kernel_task 3.70 % (Apple) TypeCharacterfld pd 1.08 % (? - /var/root/Library/Application Support/.SeoDBgUNAAIFAwWJATYwPx47BA==/TypeCharacter.gqa) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) com.apple.WebKit.WebContent (16) 1.25 GB (Apple) EtreCheckPro 422 MB (Etresoft, Inc.) Safari 231 MB (Apple) Google Chrome 99 MB (Google, Inc.) com.apple.appkit.xpc.openAndSavePanelService (2) 80 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) XFwpXFxzKlteXFwpXSsoPzooPzwhQ2hyb21lKS9bMC05XFwuXSsgU2FmYXJpLyhbMC05XFwuXSspKSQiDQogIF0sDQogICJub3B2cyI6IFtdLA0KICAibWFjaGluZUlEIjogIjlDMTBBOTFELUM2REEtNUUzNi05N0VGLUZEOEEzREZCNzE5MCIsDQogICJwYWdldmlzaXRFbmFibGVkIjogdHJ1ZSwNCiAgImxvZ1VSTCI6ICJodHRwOi8vc2VhcmNoLnQ1dG4wLmNvbS9hL28vcmVwIiwNCiAgInB2VXJsIjogImh0dHA6Ly9zZWFyY2gudDV0bjAuY29tL3AvdiIsDQogICJwdlNlcCI6ICJ8LHwiLA0KICAiYnJhbmRJZCI6ICIxMDAyNDkiDQp9 19 MB / 375 KB (? - /var/root/Library/Application Support/.SeoDBgUNAAIFAwWJATYwPx47BA==/TypeCharacter.gqa/TypeCharacter.gqa -cf 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) mDNSResponder 580 KB / 406 KB (Apple) apsd 79 KB / 58 KB (Apple) com.apple.WebKit.Networking 16 KB / 21 KB (Apple) netbiosd 27 KB / 8 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 6 (Apple) TypeCharacterfld pd 0 (? - /var/root/Library/Application Support/.SeoDBgUNAAIFAwWJATYwPx47BA==/TypeCharacter.gqa) XFwpXFxzKlteXFwpXSsoPzooPzwhQ2hyb21lKS9bMC05XFwuXSsgU2FmYXJpLyhbMC05XFwuXSspKSQiDQogIF0sDQogICJub3B2cyI6IFtdLA0KICAibWFjaGluZUlEIjogIjlDMTBBOTFELUM2REEtNUUzNi05N0VGLUZEOEEzREZCNzE5MCIsDQogICJwYWdldmlzaXRFbmFibGVkIjogdHJ1ZSwNCiAgImxvZ1VSTCI6ICJodHRwOi8vc2VhcmNoLnQ1dG4wLmNvbS9hL28vcmVwIiwNCiAgInB2VXJsIjogImh0dHA6Ly9zZWFyY2gudDV0bjAuY29tL3AvdiIsDQogICJwdlNlcCI6ICJ8LHwiLA0KICAiYnJhbmRJZCI6ICIxMDAyNDkiDQp9 0 (? - /var/root/Library/Application Support/.SeoDBgUNAAIFAwWJATYwPx47BA==/TypeCharacter.gqa/TypeCharacter.gqa -cf ew0KICAiY29uZmlncyI6IFsNCiAgICB7DQogICAgICAiZG9tYWluIjogIlxcLmdvb2dsZVxcLiIsDQogICAgICAiZG9tYWluaWQiOiAiMTAwMDAwIiwNCiAgICAgICJ1cmwiOiAiaHR0cHM/OlxcL1xcLyhbXlxcL10rKVxcL3NlYXJjaFxcPyg/OnE9fC4qPyZxPSkoKD8hc3RhcnQ9fGFmZj10ZXN0MTIzKS4pKiQiLA0KICAgICAgInBhcmFtcyI6IFsNCiAgICAgICAgInEiDQogICAgICBdLA0KICAgICAgIm5yZWYiOiBmYWxzZQ0KICAgIH0sDQogICAgew0KICAgICAgImRvbWFpbiI6ICJcXC55YWhvb1xcLiIsDQogICAgICAiZG9tYWluaWQiOiAiMTAwMDAxIiwNCiAgICAgICJ1cmwiOiAiXmh0dHBzPzpcXC9cXC9bXlxcL10qKFxcL3locyk/XFwvc2VhcmNoXFw/KCg/IUFOWVN8VGFycnZffF9fYWx0X19kZGNfc3JjaF9zZWFyY2hwdWxzZV9uZXR8aHNwYXJ0PXN6Ji4qPyZ0eXBlPXR5cGU4MDFbXiZdKnx0eXBlPWFudHNfODk0NV98dHlwZT1zeXlzXzg5NDVffHR5cGU9cTMwMDB8aHNwYXJ0PWltYXx0eXBlPWZjX0FFQ0ZCQkQzQTMxX3M1OHx0eXBlPUJJWk1fKS4pKnA9W14mXSooKD8hQU5ZU3xUYXJydl98X19hbHRfX2RkY19zcmNoX3NlYXJjaHB1bHNlX25ldHxoc3BhcnQ9c3omLio/JnR5cGU9dHlwZTgwMVteJl0qfHR5cGU9YW50c184OTQ1X3x0eXBlPXN5eXNfODk0NV98dHlwZT1xMzAwMHxoc3BhcnQ9aW1h) com.apple.WebKit.WebContent (16) 0 (Apple) com.apple.WebKit.Networking 0 (Apple) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 16 MB Used RAM: 7.30 GB Cached files: 705 MB Available RAM: 721 MB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2021-12-10 GarageBand (10.4.5) 2021-12-18 Core Services Application Configuration Data 12.0 (120.73) 2022-02-07 RosettaUpdateAuto (1.0.0.0.1.1634530217) 2022-02-07 Microsoft Teams (1.00.435562) 2022-02-07 XProtectPlistConfigData (2155) 2022-02-07 MRTConfigData (1.88) Diagnostics Information (past 7-30 days): 2022-02-07 14:07:44 Microsoft Teams Helper (Renderer) Crash Executable: /Applications/Microsoft Teams.app Details: libsystem_c.dylib: assertion failure: Schedule failed queue: %p runLoo p: %p 2022-02-01 08:50:53 com.apple.WebKit.WebContent High CPU Use Executable: /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent