EtreCheckPro version: 6.4.4 (6E015) Report generated: 2021-05-24 12:02:31 Download EtreCheckPro from https://etrecheck.com Runtime: 3:31 Performance: Good Problem: Computer is restarting Description: macbook pro fans start running high and shut down Major Issues: Anything that appears on this list needs immediate attention. Stuck iCloud - This computer has a large number of pending iCloud transfers. Heavy CPU usage - Some processes are using an unusually high amount of CPU. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Configuration profiles found - This computer may have configuration profiles installed. These are sometimes used by adware and malware. Apps crashing - There have been numerous app crashes. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Runaway user process - A user process is using a large percentage of your CPU. Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (16-inch, 2019) MacBook Pro Model: MacBookPro16,1 2,6 GHz 6-Core Intel Core i7 (i7-9750H) CPU: 6-core 16 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 8 GB DDR4 2667 BANK 2/ChannelB-DIMM0 - 8 GB DDR4 2667 Battery: Health = Normal - Cycle count = 29 Video Information: Intel UHD Graphics 630 - VRAM: 1536 MB Color LCD (built-in) 3584 x 2240 AMD Radeon Pro 5300M - VRAM: 4 GB Drives: disk0 - APPLE SSD AP0512N 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes) disk1s1 (APFS) [APFS Container] (Shared - 15.35 GB used) disk1s1s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.35 GB used) disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 389.45 GB used) disk1s3 - Preboot (APFS) [APFS Preboot] (Shared - 361 MB used) disk1s4 - Recovery (APFS) [Recovery] (Shared - 622 MB used) disk1s5 - VM (APFS) [APFS VM] (Shared - 20 KB used) disk1s6 - Update (APFS) (Shared - 1 MB used) Mounted Volumes: disk1s1s1 - Macintosh HD [APFS Snapshot] 499.96 GB (Shared - 15.35 GB used, 109.79 GB available, 94.03 GB free) APFS Mount point: / Read-only: Yes disk1s2 - Macintosh HD - Data [APFS Virtual drive] 499.96 GB (Shared - 389.45 GB used, 109.79 GB available, 94.03 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s3 - Preboot [APFS Preboot] 499.96 GB (Shared - 361 MB used, 94.03 GB free) APFS Mount point: /System/Volumes/Preboot disk1s5 - VM [APFS VM] 499.96 GB (Shared - 20 KB used, 94.03 GB free) APFS Mount point: /System/Volumes/VM disk1s6 - Update 499.96 GB (Shared - 1 MB used, 94.03 GB free) APFS Mount point: /System/Volumes/Update Network: Interface en7: USB 10/100/1000 LAN Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 107.01 GB available iCloud Status: 32551 pending files System Software: macOS Big Sur 11.3.1 (20E241) Time since boot: Less than an hour Configuration Files: /etc/hosts - Count: 2 Configuration Profiles: This computer may have configuration profiles installed. Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple and Symantec Unsigned Files: Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist Executable: /Library/Application Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.intel.haxm.plist Executable: /Library/Extensions/intelhaxm.kext/Contents/Resources/haxm_start.sh Details: Exact match found in the legitimate list - probably OK Apps: 3 System Extensions: [Running] SymantecEndpointSecurity - version 9.0.5 (Symantec - 2021-05-18) Application: /Applications/Norton 360.app - version 9.0.5 (Symantec - 2021-05-18) Description: [placeholder]Symantec Endpoint Security system extension[placeholder] [Running] Cisco AnyConnect Socket Filter Extension - version 4.9.05042 (Cisco - 2020-12-10) Application: /Applications/Cisco/Cisco AnyConnect Socket Filter.app - version 4.9.05042 (Cisco - 2021-05-06) Description: This system extension provides socket filter capabilities. Kernel Extensions: /Library/Application Support/Cisco/AnyConnect Secure Mobility Client [Not Loaded] acsock.kext - com.cisco.kext.acsock (4.9.40 - SDK 10.14) /Library/Application Support/CleverFiles/BackService.app [Not Loaded] SecureDisk_11.kext - com.cleverfiles.SecureDisk-11 (1.0 - SDK 10.16) /Library/Application Support/Logitech.localized/Logitech Options.localized [Not Loaded] LogiMgrDriver.kext - com.logitech.manager.kernel.driver (8.36.1 - SDK 10.13) /Library/Extensions [Not Loaded] intelhaxm.kext - com.intel.kext.intelhaxm (7.5.1 - SDK 10.9) System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 190 Apple tasks [Running] 128 Apple tasks System Launch Daemons: [Not Loaded] 34 Apple tasks [Loaded] 198 Apple tasks [Running] 129 Apple tasks [Other] One Apple task Launch Agents: [Loaded] com.cisco.anyconnect.gui.plist (Cisco - installed 2021-05-06) [Loaded] com.cisco.anyconnect.notification.plist (Cisco - installed 2021-05-06) [Running] com.logitech.manager.daemon.plist (Logitech Inc. - installed 2020-11-21) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2021-03-05) [Running] com.microsoft.intuneMDMAgent.plist (Microsoft Corporation - installed 2021-04-22) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-05-23) [Running] com.symantec.uiagent.application.MES.plist (Symantec - installed 2021-04-19) [Loaded] org.pqrs.karabiner.agent.karabiner_grabber.plist (Fumihiko Takayama - installed 2021-01-29) [Loaded] org.pqrs.karabiner.agent.karabiner_observer.plist (Fumihiko Takayama - installed 2021-01-29) [Not Loaded] org.pqrs.karabiner.karabiner_console_user_server.plist (Fumihiko Takayama - installed 2021-01-29) [Running] org.pqrs.karabiner.karabiner_session_monitor.plist (Fumihiko Takayama - installed 2021-01-29) Launch Daemons: [Running] com.cisco.anyconnect.vpnagentd.plist (Cisco - installed 2020-12-10) [Running] com.cleverfiles.cfbackd.plist (Justin Johnson - installed 2021-03-24) [Running] com.crystalidea.macsfancontrol.smcwrite.plist (Ilya Parniuk - installed 2021-05-24) [Other] com.easeus.dataprotectbackup.plist (? 2511cb8c - installed 2021-05-18) [Other] com.hasleo.NTFS4MacMounterService.plist (? dae5e35d - installed 2020-11-19) [Loaded] com.intel.haxm.plist (? 42f307e7 - installed 2019-05-27) [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2021-03-05) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2021-03-05) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-05-23) [Running] com.microsoft.intuneMDMAgent.daemon.plist (Microsoft Corporation - installed 2021-04-22) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2020-07-13) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2021-05-20) [Running] com.symantec.SymLUHelper.MES.plist (Symantec - installed 2021-04-19) [Loaded] com.symantec.UninstallerToolHelper.MES.plist (Symantec - installed 2021-04-19) [Running] com.symantec.VPNService.plist (Symantec - installed 2020-10-06) [Running] com.symantec.dsp.nortonaggregatord.MES.plist (Symantec - installed 2021-04-19) [Other] com.symantec.liveupdate.daemon.MES.plist (Symantec - installed 2021-04-19) [Running] com.symantec.sharedsettings.MES.plist (? 84ffa067 - installed 2021-04-19) [Running] com.symantec.symdaemon.MES.plist (Symantec - installed 2021-04-19) [Loaded] com.symantec.symqual.detail.MES.plist (Symantec - installed 2021-04-19) [Loaded] com.symantec.symqual.panicreporter.MES.plist (Symantec - installed 2021-04-19) [Loaded] com.symantec.symqual.submit.MES.plist (Symantec - installed 2021-04-19) [Running] org.pqrs.Karabiner-DriverKit-VirtualHIDDeviceClient.plist (Fumihiko Takayama - installed 2020-12-26) [Running] org.pqrs.karabiner.karabiner_grabber.plist (Fumihiko Takayama - installed 2021-01-29) [Running] org.pqrs.karabiner.karabiner_observer.plist (Fumihiko Takayama - installed 2021-01-29) User Login Items: [Running] Macs Fan Control (Ilya Parniuk - installed 2021-05-24) Application /Applications/Macs Fan Control.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2021-03-05) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2021-03-05) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] StartUpHelper (Spotify - installed 2021-04-01) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app 3rd Party Preference Panes: macFUSE (Benjamin Fleischer - installed 2020-11-18) Backup: Auto backup: Yes Destinations: S********3 [Local] (Last used) Total size: 299.70 GB Total number of backups: 17 Oldest backup: 2021-03-24 16:22:14 Last backup: 2021-05-20 11:20:05 4 local snapshots Oldest local snapshot: 2021-05-20 11:15:36 Last local snapshot: 2021-05-24 10:08:48 Performance: System Load: 5.37 (1 min ago) 3.37 (5 min ago) 1.45 (15 min ago) Nominal I/O speed: 41.99 MB/s File system: 17.30 seconds Write speed: 1716 MB/s Read speed: 2829 MB/s CPU Usage Snapshot: Type Overall System: 6 % User: 20 % Idle: 74 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) mdworker_shared (14) 144.50 % (Apple) installd 99.64 % (Apple) com.symantec.mes.systemextension 34.88 % (Symantec) bird 28.84 % (Apple) mdsync 22.08 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) com.apple.WebKit.WebContent (9) 704 MB (Apple) EtreCheckPro 552 MB (Etresoft, Inc.) mdworker_shared (44) 538 MB (Apple) appstoreagent 458 MB (Apple) installd 415 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) corespeechd 2 KB / 9 MB (Apple) com.apple.WebKit.Networking 2 MB / 81 KB (Apple) nsurlsessiond 1 MB / 13 KB (Apple) SubmitDiagInfo 610 KB / 902 B (Apple) cloudd 23 KB / 265 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) installd 46 (Apple) com.symantec.mes.systemextension 19 (Symantec) nsurlsessiond (2) 15 (Apple) cloudd 11 (Apple) mds 9 (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 126 MB Used RAM: 12.54 GB Cached files: 3.34 GB Available RAM: 3.46 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2021-03-30 Keynote (11.0) 2021-04-07 GarageBand (10.4.3) 2021-05-06 AnyConnect Secure Mobility Client (4.9.05042) 2021-05-06 Microsoft Remote Desktop (10.6.6) 2021-05-07 Command Line Tools for Xcode (12.5) 2021-05-07 macOS 11.3.1 (11.3.1) 2021-05-07 MRTConfigData (1.78) 2021-05-11 Microsoft Excel (16.49.21050901) 2021-05-11 Microsoft OneNote (16.49.21050901) 2021-05-11 Microsoft Outlook (16.49.21050901) 2021-05-11 Microsoft PowerPoint (16.49.21050901) 2021-05-11 Microsoft Word (16.49.21050901) 2021-05-14 Microsoft AutoUpdate (4.20.20021103) 2021-05-16 XProtectPlistConfigData (2146) 2021-05-18 Norton For Mac (8.6.3.61.61) 2021-05-18 Norton 360 SKU (8.6.3.61.61) 2021-05-18 Norton Secure VPN (2.12.0.463) 2021-05-19 Hasleo NTFS For Mac (4.0) 2021-05-19 macFUSE (4.0.3) 2021-05-20 Microsoft Teams (1.00.411161) 2021-05-23 Intune Company Portal (4.20.20021103) Clean up: /Library/LaunchDaemons/com.hasleo.NTFS4MacMounterService.plist /Applications/Hasleo NTFS for Mac.app/Contents/MacOS/MounterService Executable not found /Library/LaunchDaemons/com.easeus.dataprotectbackup.plist /Volumes/E*************************d/EaseUS Data Recovery Wizard.app/Contents/MacOS/EaseUS Data Recovery Wizard.app/Contents/Resources/EUDataDaemon.app/Contents/MacOS/eudataback Executable not found Diagnostics Information (past 7-30 days): 2021-05-24 11:44:18 SymDaemon Crash (2 times) Executable: /Library/Application Support/Symantec/*/SymDaemon Details: dyld: in dlopen() 2021-05-24 10:23:05 installd High CPU Use (5 times) Executable: /System/Library/PrivateFrameworks/PackageKit.framework/Versions/A/Resources/installd 2021-05-20 14:06:38 iconservicesagent High CPU Use (2 times) Executable: /System/Library/CoreServices/iconservicesagent 2021-05-20 08:07:41 mds_stores Crash (3 times) Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mds_stores Details: dyld3 mode [0x70000f144000] FileTree.c:937: failed assertion 'getNum16(page->dept h)==(unsigned)depth' /System/Volumes/Data/Volumes/My Book/.Spotlight-V 100/Store-V2/FAE4985D-50CD-4D51-B7CF-59C7A65FA766/reverseDirectoryStor e (exfat, t: 0x1d, st: 0x0, f: 0x201218) Expected depth 2; page has 0 [0x70000f24a000] *warn* time stamp should be more recent new:162144332 9, old:1621443332 [0x70000eb20000] *warn* time stamp should be more recent new:162144332 9, old:1621443332 [0x70000eb20000] *warn* time stamp should be more recent new:162144332 0, old:1621443321 [0x70000f1c7000] *warn* time stamp should be more recent new:162144331 5, old:1621443319 [0x70000f1c7000] *warn* time stamp should be more recent new:162144331 0, old:1621443315 [0x70000ec26000] *warn* time stamp should be more recent new:162144330 1, old:1621443303 [0x70000edaf000] *warn* time stamp should be more recent new:162144329 9, old:1621443300 [0x70000f03e000] *warn* time stamp should be more recent new:162144328 8, old:1621443294 [0x70000eca9000] *warn* time stamp should be more recent new:162144328 6, old:1621443288 [0x70000eb20000] *warn* time stamp should be more recent new:162144328 6, old:1621443288 [0x70000f0c1000] *warn* time stamp should be more recent new:162144325 7, old:1621443267 [0x70000eb20000] *warn* time stamp should be more recent new:162144305 5, old:1621443257 [0x70000ed2c000] *warn* time stamp should be more recent new:162144304 0, old:1621443047 [0x70000f2cd000] *warn* time stamp should be more recent new:162144304 0, old:1621443047 [0x70000f24a000] *warn* time stamp should be more recent new:162144304 0, old:1621443047 [0x70000edaf000] *warn* time stamp should be more recent new:162144304 0, old:1621443047 [0x70000f1c7000] *warn* time stamp should be more recent new:162144304 0, old:1621443047 [0x70000eca9000] *warn* Finished duplicate oid check for /System/Volum es/Data/Volumes/My Book/.Spotlight-V100/Store-V2/FAE4985D-50CD-4D51-B7 CF-59C7A65FA766. Missing deletes:2157 [0x70000eca9000] *warn* Starting duplicate oid check for /System/Volum es/Data/Volumes/My Book 2021-05-19 23:44:52 com.symantec.mes.systemextension High CPU Use (2 times) Executable: /Library/SystemExtensions/*/com.symantec.mes.systemextension 2021-05-19 23:25:24 Norton Secure VPN.app High CPU Use Executable: /Library/Application Support/Symantec/Norton Secure VPN.app 2021-05-19 22:05:06 lsd Crash Executable: /usr/libexec/lsd Details: dyld3 mode savedDB WAS seeded, newDB WAS NOT seeded. Failed attempting to remap d atabase, abort to trigger seeding. Error: Error Domain=NSOSStatusError Domain Code=-9496 "kCSStoreBadDataErr" UserInfo={Line=204, Checksum=2, ZeroedRanges=( "0x470000-0x48FFFF (131 KB)" ), NSDebugDescription=kCSStoreBadDataErr, NSURL=file:/var/folders/zz/z yxvpxvq6csfxvn_n0000000000000/0/com.apple.LaunchServices.dv/com.apple. LaunchServices-2547-v2.csstore} abort() called 2021-05-19 17:45:43 trustd High CPU Use Executable: /usr/libexec/trustd 2021-05-17 20:20:37 com.apple.WebKit.WebContent High CPU Use (2 times) Executable: /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent End of report