EtreCheckPro version: 6.8.3 (68032)
Report generated: 2023-11-13 20:26:35
Download EtreCheckPro from https://etrecheck.com
Runtime: 1:53
Performance: Excellent

Problem: Other problem
Description: 
backups to time machine fail. Error message says antivirus software ma
y be preventing time machine from writing to the backup disk.

Major Issues:
  Anything that appears on this list needs immediate attention. 
  Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure.
  Heavy CPU usage - Some processes are using an unusually high amount of CPU.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  Runaway user process - A user process is using a large percentage of your CPU.
  Limited permissions - More information may be available with Full Disk Access.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  Mac mini (M1, 2020)
    Status: Supported
  Mac mini Model: Macmini9,1
  2.40 GHz Apple M1 (m1) CPU: 8-core
  8 GB RAM - Not upgradeable

Video Information:
  Apple M1
    ASUS VA24E 1920 x 1080

Drives:
  disk0 - APPLE SSD AP0256Q 251.00 GB (Solid State - TRIM: Yes) 
  Internal Apple Fabric NVM Express
    disk0s1 [APFS Container] 524 MB
      disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes)
        disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used)
        disk1s2 - xART (APFS) (6 MB used)
        disk1s3 - Hardware (APFS) (3 MB used)
        disk1s4 - Recovery (APFS) [Recovery] (20 KB used)
    disk0s2 [APFS Container] 245.11 GB
      disk3 [APFS Virtual drive] 245.11 GB (Shared by 6 volumes)
        disk3s1 (APFS) [APFS Container] (9.90 GB used)
          disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (9.90 GB used)
        disk3s2 - Preboot (APFS) [APFS Preboot] (5.73 GB used)
        disk3s3 - Recovery (APFS) [Recovery] (870 MB used)
        disk3s4 - Update (APFS) (60 MB used)
        disk3s5 - Data (APFS) [APFS Virtual drive] (119.96 GB used)
        disk3s6 - VM (APFS) [APFS VM] (20 KB used)
    disk0s3 [APFS Container] 5.37 GB
      disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes)
        disk2s1 - Recovery (APFS) [Recovery] (1.57 GB used)
        disk2s2 - Update (APFS) (4 MB used)

  disk6 - Seagate BUP Slim 1.00 TB
  External USB 480 Mbit/s USB
    disk6s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk6s2 [APFS Container] 999.86 GB
      disk7 [APFS Virtual drive] 999.86 GB (Shared by 1 volumes)
        disk7s2 - D********************p (APFS) (572.22 GB used)

Mounted Volumes:
  disk1s1 - iSCPreboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/iSCPreboot
    Used: 6 MB
    Shared values
      Size: 524 MB
      Free: 504 MB

  disk1s2 - xART
    Filesystem: APFS
    Mount point: /System/Volumes/xarts
    Used: 6 MB
    Shared values
      Size: 524 MB
      Free: 504 MB

  disk1s3 - Hardware
    Filesystem: APFS
    Mount point: /System/Volumes/Hardware
    Used: 3 MB
    Shared values
      Size: 524 MB
      Free: 504 MB

  disk3s1s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Read-only: Yes
    Used: 9.90 GB
    Shared values
      Size: 245.11 GB
      Free: 108.45 GB
      Available: 125.41 GB

  disk3s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Used: 5.73 GB
    Shared values
      Size: 245.11 GB
      Free: 108.45 GB

  disk3s4 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Used: 60 MB
    Shared values
      Size: 245.11 GB
      Free: 108.45 GB

  disk3s5 - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Encrypted
    Used: 119.96 GB
    Shared values
      Size: 245.11 GB
      Free: 108.45 GB
      Available: 125.41 GB

  disk3s6 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Used: 20 KB
    Shared values
      Size: 245.11 GB
      Free: 108.45 GB

  disk7s2 - D********************p
    Filesystem: APFS
    Mount point: /Volumes/D********************p
    Encrypting: 3% done
    Used: 572.22 GB
    Shared values
      Size: 999.86 GB
      Free: 427.44 GB

Network:
  Interface en0: Ethernet
  Interface en5: Ethernet Adapter (en5)
  Interface en4: Ethernet Adapter (en4)
  Interface bridge0: Thunderbolt Bridge 2
  Interface en1: AirPort
  Interface bridge0: Thunderbolt Bridge
  Interface en7: iPhone

System Software:
  macOS Sonoma 14.1 (23B74) 
  Time since boot: Less than an hour

Configuration Files:
  File /etc/launchd.conf exists but not expected

Notifications:
  EtreCheckPro.app
    one notification

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple

Unsigned Files:
  Launchd: /Library/LaunchAgents/com.hp.help.tocgenerator.plist
    Executable: /Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app/Contents/MacOS/TOCGenerator
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.google.GoogleML.plist
    Executable: /Library/Google/GoogleML/GoogleML.bundle/Contents/MacOS/googleml-modwatch
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.vmware.launchd.vmware.plist
    Command: /Library/Application Support/VMware Fusion/boot.sh --start
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/com.lastpass.LastPassHelper.plist
    Executable: ~/Library/Application Support/LastPass/LastPassHelper.app/Contents/MacOS/LastPassHelper
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.ciscosystems.ciscoconnect.daemon.plist
    Executable: /Library/PrivilegedHelperTools/com.ciscosystems.ciscoconnect.daemon
    Details: Exact match found in the legitimate list - probably OK

  Plugin: /Library/Internet Plug-Ins/nplastpass.plugin
  Plugin: /Library/Internet Plug-Ins/PDF Browser Plugin.plugin
  Plugin: ~/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin
  Plugin: ~/Library/Internet Plug-Ins/StartMeetingPlugin.plugin
  Plugin: ~/Library/Internet Plug-Ins/Picasa.plugin

  Apps: 3

Applications:
  560 apps
  26 x86-only apps
  8 unsigned apps

Kernel Extensions:
  /Library/Extensions
    [Not Loaded] EPSONUSBPrintClass.kext - com.epson.print.kext.USBPrintClass (1.2.4)
    [Not Loaded] hp_fax_io.kext - com.hp.kext.hp-fax-io (5.20.0 - SDK 10.9)
    [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.2.0)
    [Not Loaded] hp_Inkjet1_io_enabler.kext - com.hp.print.hpio.Inkjet1.kext (3.5.0 - SDK 10.9)
    [Not Loaded] JMicronATA.kext - com.jmicron.JMicronATA (1.0.0)
    [Not Loaded] BJUSBMP.kext - jp.co.canon.bj.kext.BJUSBMP (2.5.0)

System Launch Daemons:
  [Not Loaded]  39 Apple tasks
  [Loaded]  196 Apple tasks
  [Running]  163 Apple tasks
  [Other]  2 Apple tasks

System Launch Agents:
  [Not Loaded]  19 Apple tasks
  [Loaded]  220 Apple tasks
  [Running]  182 Apple tasks

Launch Daemons:
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2020-01-27)
    Executable: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer

  [Loaded] com.ciscosystems.ciscoconnect.daemon.plist (Not signed - installed 2020-12-26)
    Executable: /Library/PrivilegedHelperTools/com.ciscosystems.ciscoconnect.daemon

  [Other] com.google.GoogleML.plist (Not signed - installed 2008-03-24)
    Executable: /Library/Google/GoogleML/GoogleML.bundle/Contents/MacOS/googleml-modwatch

  [Not Loaded] com.google.GoogleUpdater.wake.system.plist (Google LLC - installed 2023-10-06)
    Command: /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2 --system

  [Not Loaded] com.google.keystone.daemon.plist (Not signed - installed 2023-10-06)
    

  [Not Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Not signed - installed 2023-06-07)
    

  [Other] com.vmware.launchd.vmware.plist (Not signed - installed 2020-12-26)
    Command: /Library/Application Support/VMware Fusion/boot.sh --start

  [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2023-11-04)
    Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon

Launch Agents:
  [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-10-06)
    

  [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-10-06)
    

  [Other] com.hp.help.tocgenerator.plist (Not signed - installed 2009-08-04)
    Executable: /Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app/Contents/MacOS/TOCGenerator

User Launch Agents:
  [Other] Proton Mail Bridge.plist (Not signed - installed 2023-02-18)
    Command: /Applications/Proton Mail Bridge.app/Contents/MacOS/Proton Mail Bridge --no-window

  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2023-09-12)
    Command: ~/Library/Dropbox/DropboxMacUpdate.app/Contents/MacOS/DropboxMacUpdate -check periodic

  [Not Loaded] com.lastpass.LastPassHelper.plist (Not signed - installed 2015-08-12)
    Executable: ~/Library/Application Support/LastPass/LastPassHelper.app/Contents/MacOS/LastPassHelper

User Login Items:
  [Not Loaded] Bitwarden Login Helper (App Store - installed 2023-10-22)
    Modern Login Item
    /Applications/Bitwarden.app/Contents/Library/LoginItems/Bitwarden Login Helper.app

  [Running] Dropbox (Dropbox, Inc. - installed 2023-11-01)
    Application
    /Applications/Dropbox.app

  [Loaded] Firefox (Mozilla Corporation - installed 2023-11-13)
    Application
    /Applications/Firefox.app

  [Running] Flux (Michael Herf - installed 2023-06-05)
    Application
    /Applications/Flux.app

  [Not Loaded] Slack Login Helper (App Store - installed 2023-10-22)
    Modern Login Item
    /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app

  [Loaded] Thunderbird (Mozilla Corporation - installed 2023-11-13)
    Application
    /Applications/Thunderbird.app

  [Not Loaded] HP Device Monitor (Hewlett Packard - installed 2020-12-26)
    Modern Login Item
    /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app

  [Not Loaded] HP Product Research (Hewlett Packard - installed 2016-11-20)
    Modern Login Item
    /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app

  [Running] Software Update (Apple - installed 2023-10-20)
    Application
    /System/Library/CoreServices/Software Update.app

App Extensions:
  Finder sync extensions:
    Dropbox Finder Extension - /Applications/Dropbox.app

  Safari extensions:
    Bitwarden - /Applications/Bitwarden.app

  Share services:
    Dropbox Transfer - /Applications/Dropbox.app

  File providers:
    Dropbox - /Applications/Dropbox.app

  QuickLook Previews:
    EtreCheckQuickLook - /Applications/EtreCheckPro.app
      com.etresoft.etrecheck4 *.etrecheck

Internet Plug-ins:
  iPhotoPhotocast: 7.0 (Apple - installed 2008-12-07)
  nplastpass: 3.2.11 (? - installed 2015-08-12)
  PDF Browser Plugin: 2.3.2 (? - installed 2009-09-02)

Backup:
  Time Machine information is limited without Full Disk Access
  Destinations: 
    D********************p [Local] (Last used)
  3 local snapshots
  Oldest local snapshot: 2023-10-29 18:50:30
  Last local snapshot: 2023-11-13 20:21:45

Performance:
  System Load: 5.60 (1 min ago) 14.68 (5 min ago) 8.82 (15 min ago)
  Nominal I/O usage: 6.19 MB/s
  File system: 14.52 seconds
  Write speed: 2504 MB/s
  Read speed: 2503 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 7 %
  User: 40 %
  Idle: 53 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  AddressBookSourceSync 97.60 % (Apple)
  AddressBookManager 49.15 % (Apple)
  contactsd 41.30 % (Apple)
  mdworker_shared (31) 28.37 % (Apple)
  WindowServer 10.46 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheckPro 1.18 GB (Etresoft, Inc.)
  mdworker_shared (33) 694 MB (Apple)
  AppleSpell 217 MB (Apple)
  nsattributedstringagent (4) 184 MB (Apple)
  Finder 156 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 162 KB / 101 KB (Apple)
  apsd 6 KB / 63 KB (Apple)
  trustd 47 KB / 4 KB (Apple)
  AddressBookSourceSync 29 KB / 3 KB (Apple)
  assistantd 5 KB / 14 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  com.apple.siri.embeddedspeech (2) 43 (Apple)
  AddressBookSourceSync 43 (Apple)
  WindowServer 5 (Apple)
  suggestd 4 (Apple)
  mds 3 (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 50 MB
  Used RAM: 5.39 GB
  Cached files: 2.57 GB

  Available RAM: 2.61 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2023-09-27 macOS 14.0 (14.0)
  2023-09-27 MRTConfigData (1.93)
  2023-10-22 Slack (4.34.121)
  2023-10-22 iMovie (10.3.10)
  2023-10-22 Bitwarden (2023.9.3)
  2023-10-22 Pages (13.2)
  2023-10-22 Numbers (13.2)
  2023-10-22 Keynote (13.2)
  2023-10-26 XProtectPayloads (118)
  2023-10-29 macOS 14.1 (14.1)
  2023-10-29 RosettaUpdateAuto (1.0.0.0.1.1697802180)
  2023-11-04 Zoom (5.16.2.23409)
  2023-11-12 XProtectPlistConfigData (2175)

Clean up:
  ~/Library/LaunchAgents/Proton Mail Bridge.plist
    /Applications/Proton Mail Bridge.app/Contents/MacOS/Proton Mail Bridge
    Executable not found

Diagnostics Information (past 7-30 days):
  2023-11-13 20:20:06 Kernel Panic
    Details:
      panic(cpu 3 caller 0xfffffe0016ea0f30): kern_apfs_reflock: over releas
      ing reflock 0xfffffe29aa66c3c0 thread 0xfffffe24d4332020 @kern_apfs_re
      flock.c:246
      Panicked task 0xfffffe1b420a2be8: 0 pages, 475 threads: pid 0: kernel_
      task


  2023-11-13 19:42:48 AddressBookSourceSync.app High CPU Use (20 times)
    Executable: /System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookSourceSync.app

  2023-11-13 18:17:34 spotlightknowledged High CPU Use (2 times)
    Executable: /System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged

  2023-11-07 18:49:15 Thunderbird.app High CPU Use
    Executable: /Applications/Thunderbird.app


End of report