EtreCheckPro version: 6.8.7 (68068) Report generated: 2024-12-22 13:05:42 Download EtreCheckPro from https://etrecheck.com Runtime: 3:45 Performance: Good Problem: Beachballing Major Issues: Anything that appears on this list needs immediate attention. Security updates disabled - Security updates are disabled. This computer is at risk of malware infection. Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. System extensions installed - This computer has system extensions installed. System extensions can be difficult to uninstall. Heavy RAM usage - Apps are using a large amount of RAM. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Vintage hardware - This computer may be considered vintage. Limited permissions - More information may be available with Full Disk Access. Hardware Information: iMac (Retina 5K, 27-inch, 2017) Status: Vintage iMac Model: iMac18,3 3.4 GHz Quad-Core Intel Core i5 (i5-7500) CPU: 4-core 40 GB RAM - Upgradeable BANK 0/DIMM0 - 16 GB DDR4 SO-DIMM 2400 BANK 0/DIMM1 - 16 GB DDR4 SO-DIMM 2400 BANK 1/DIMM0 - 4 GB DDR4 SO-DIMM 2400 BANK 1/DIMM1 - 4 GB DDR4 SO-DIMM 2400 Video Information: Radeon Pro 570 - VRAM: 4 GB iMac (built-in) 4096 x 2304 Drives: disk0 - APPLE SSD SM0032L 28.00 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x2 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Fusion Drive] 27.69 GB disk2 [APFS Virtual drive] 1.03 TB (Shared by 6 volumes) disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (353.71 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (2.09 GB used) disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used) disk2s4 - VM (APFS) [APFS VM] (2.15 GB used) disk2s5 (APFS) [APFS Container] (9.35 GB used) disk2s5s1 - Macintosh HD (APFS) [APFS Snapshot] (9.35 GB used) disk2s6 - Update (APFS) (3 MB used) disk1 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM) Internal SATA 6 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 [APFS Fusion Drive] 1000.00 GB disk2 [APFS Virtual drive] 1.03 TB (Shared by 6 volumes) disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (353.71 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (2.09 GB used) disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used) disk2s4 - VM (APFS) [APFS VM] (2.15 GB used) disk2s5 (APFS) [APFS Container] (9.35 GB used) disk2s5s1 - Macintosh HD (APFS) [APFS Snapshot] (9.35 GB used) disk2s6 - Update (APFS) (3 MB used) disk3 - Seagate Backup+ Hub BK 4.00 TB External USB Up to 5 Gb/s USB disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 - C*****e 1.33 TB (22.54 GB used) disk3s3 - T******k 666.96 GB (163.73 GB used) disk3s4 - B*****p (Journaled HFS+) 2.00 TB (1.89 TB used) Mounted Volumes: disk2s1 - Macintosh HD - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Fusion drive Used: 353.71 GB Shared values Size: 1.03 TB Free: 654.70 GB Available: 673.53 GB disk2s2 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Fusion drive Used: 2.09 GB Shared values Size: 1.03 TB Free: 654.70 GB disk2s4 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Fusion drive Used: 2.15 GB Shared values Size: 1.03 TB Free: 654.70 GB disk2s5s1 - Macintosh HD [APFS Snapshot] Filesystem: APFS Mount point: / Fusion drive Read-only: Yes Used: 9.35 GB Shared values Size: 1.03 TB Free: 654.70 GB Available: 673.53 GB disk2s6 - Update Filesystem: APFS Mount point: /System/Volumes/Update Fusion drive Used: 3 MB Shared values Size: 1.03 TB Free: 654.70 GB disk3s2 - C*****e Mount point: /Volumes/C*****e Used: 22.54 GB Size: 1.33 TB Free: 1.31 TB disk3s3 - T******k Mount point: /Volumes/T******k Used: 163.73 GB Size: 666.96 GB Free: 503.21 GB Available: 503.84 GB disk3s4 - B*****p Filesystem: Journaled HFS+ Mount point: /Volumes/B*****p Used: 1.89 TB Size: 2.00 TB Free: 108.33 GB Available: 108.96 GB USB: USB 3.0 bus Seagate - Backup+ Hub Seagate - Backup+ Hub BK Broadcom Corp. - Bluetooth USB Host Controller Apple Inc. - FaceTime HD Camera (Built-in) Seagate - Backup+ Hub USB 3.1 bus Network: Interface en0: Ethernet Interface en1: Wi-Fi 802.11 a/b/g/n/ac Interface bridge0: Thunderbolt Bridge System Software: macOS Ventura 13.6.9 (22G830) Time since boot: About a day Notifications: Garmin Express Service.app 3 notifications Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Security Updates: Disabled Antivirus software: None! Unsigned Files: Launchd: /Library/LaunchDaemons/com.privax.osx.provpn.update.plist Executable: /Library/Application Support/HmaProVpn/components/update/update.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/Application Support/HmaProVpn/hub/launchd/com.privax.osx.provpn.racoonrun.plist Command: /Library/Application Support/HmaProVpn/hub/modules/030_racoonrun.sh backup Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.privax.osx.provpn.init.plist Executable: /Library/Application Support/HmaProVpn/hub/init.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.privax.osx.provpn.uninstall.plist Executable: /Library/Application Support/HmaProVpn/hub/autouninstall.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/jp.co.canon.MasterInstaller.plist Executable: /Library/PrivilegedHelperTools/jp.co.canon.MasterInstaller Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.privax.osx.provpn.userinit.plist Executable: /Library/Application Support/HmaProVpn/hub/userinit.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.teams.TeamsUpdaterDaemon.plist Executable: /Applications/Microsoft Teams classic.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon Details: Restrictive config permissions - possibly malware Launchd: ~/Library/LaunchAgents/com.privax.osx.provpn.home.userinit.plist Executable: ~/Library/Application Support/HmaProVpn/hub/userinit.sh Details: Exact match found in the legitimate list - probably OK System Extensions: [Running] StrongWGSystemExtension - version 2.2.2 (Strong Technology, LLC - installed 2020-04-16) Application: /Applications/StrongVPN.app - version 2.2.2 (Strong Technology, LLC - installed 2020-04-16) Description: Provides access to the WireGuard protocol System Launch Daemons: [Not Loaded] 37 Apple tasks [Loaded] 182 Apple tasks [Running] 167 Apple tasks [Other] 3 Apple tasks System Launch Agents: [Not Loaded] 19 Apple tasks [Loaded] 175 Apple tasks [Running] 202 Apple tasks Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2024-12-08) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2024-12-08) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper [Loaded] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2024-09-18) Executable: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2 [Running] com.adobe.agsservice.plist (Adobe Inc. - installed 2024-10-05) Executable: /Library/Application Support/Adobe/AdobeGCClient/AGSService [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2022-12-31) Executable: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2024-12-07) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2024-12-07) Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2024-10-16) Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2023-10-20) Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Not signed - installed 2024-05-31) Executable: /Applications/Microsoft Teams classic.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon [Loaded] com.privax.osx.provpn.init.plist (Not signed - installed 2024-12-04) Executable: /Library/Application Support/HmaProVpn/hub/init.sh [Loaded] com.privax.osx.provpn.uninstall.plist (Not signed - installed 2024-12-04) Executable: /Library/Application Support/HmaProVpn/hub/autouninstall.sh [Loaded] com.privax.osx.provpn.update.plist (Not signed - installed 2024-12-04) Executable: /Library/Application Support/HmaProVpn/components/update/update.sh [Loaded] jp.co.canon.MasterInstaller.plist (Not signed - installed 2022-12-31) Executable: /Library/PrivilegedHelperTools/jp.co.canon.MasterInstaller [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2022-12-31) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2024-12-08) Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2024-09-18) Command: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud --showwindow=false --onOSstartup=true [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2024-10-05) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=logon [Loaded] com.adobe.ccxprocess.plist (Adobe Inc. - installed 2024-12-05) Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2024-12-07) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater [Loaded] com.microsoft.SyncReporter.plist (Microsoft Corporation - installed 2024-12-15) Executable: /Applications/OneDrive.app/Contents/SyncReporter.app/Contents/MacOS/SyncReporter [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2024-10-16) Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent [Running] com.privax.osx.provpn.update-agent.plist (Privax LTD - installed 2024-12-04) Executable: /Library/Application Support/HmaProVpn/components/update/com.privax.osx.provpn.update-agent [Loaded] com.privax.osx.provpn.userinit.plist (Not signed - installed 2024-12-04) Executable: /Library/Application Support/HmaProVpn/hub/userinit.sh User Launch Agents: [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2024-10-05) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=scheduled [Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2024-11-21) Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2 [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-07) [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-07) [Loaded] com.privax.osx.provpn.home.userinit.plist (Not signed - installed 2024-12-04) Executable: ~/Library/Application Support/HmaProVpn/hub/userinit.sh User Login Items: [Running] Garmin Express Service (Garmin International - installed 2021-09-24) Modern Login Item /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app [Running] 96HLSU34RN.com.privax.osx.provpn.helper (Privax LTD - installed 2024-12-04) Modern Login Item /Applications/HMA VPN.app/Contents/Library/LoginItems/96HLSU34RN.com.privax.osx.provpn.helper.app [Not Loaded] Keeper Password Manager Login Helper (App Store - installed 2024-11-24) Modern Login Item /Applications/Keeper Password Manager.app/Contents/Library/LoginItems/Keeper Password Manager Login Helper.app [Not Loaded] NordVPNLauncher (App Store - installed 2024-11-24) Modern Login Item /Applications/NordVPN.app/Contents/Library/LoginItems/NordVPNLauncher.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2024-12-15) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2024-12-15) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] SpeedTestHelper (App Store - installed 2023-03-17) Modern Login Item /Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app [Not Loaded] StrongVPN2-Launcher (Strong Technology, LLC - installed 2020-04-16) Modern Login Item /Applications/StrongVPN.app/Contents/Library/LoginItems/StrongVPN2-Launcher.app [Not Loaded] Surfshark (App Store - installed 2024-11-24) Modern Login Item /Applications/Surfshark.app/Contents/Library/LoginItems/LaunchAgent.app [Not Loaded] WireGuardLoginItemHelper (App Store - installed 2023-03-06) Modern Login Item /Applications/WireGuard.app/Contents/Library/LoginItems/WireGuardLoginItemHelper.app [Not Loaded] 抖音 Login Helper (App Store - installed 2024-04-14) Modern Login Item /Applications/抖音.app/Contents/Library/LoginItems/抖音 Login Helper.app [Not Loaded] DriveDxLoginItemHelper (Kirill Luzanov - installed 2024-12-22) Modern Login Item ~/Downloads/DriveDx.app/Contents/Library/LoginItems/DriveDxLoginItemHelper.app Applications: 528 Apple apps 181 3rd party apps 67 x86-only apps No unsigned apps App Extensions: Plugins: [Loaded] Intents - /Applications/WhatsApp.localized/WhatsApp.app Widgets: [Loaded] PowerPointWidgetKit - /Applications/Microsoft PowerPoint.app [Loaded] CalendarWidgetExtension - /Applications/Microsoft Outlook.app [Loaded] WordWidgetKit - /Applications/Microsoft Word.app [Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app Notification providers: [Loaded] ServiceExtension - /Applications/WhatsApp.localized/WhatsApp.app File providers: [Loaded] OneDrive File Provider - /Applications/OneDrive.localized/OneDrive.app [Loaded] OneDrive File Provider - /Applications/OneDrive.app Share services: [Loaded] Send to Chat - /Applications/WeChat.app [Loaded] OneNote - /Applications/Microsoft OneNote.app VPNs: [Not Loaded] NordLynx - /Applications/NordVPN.app [Loaded] WireGuardNetworkExtension - /Applications/WireGuard.app [Loaded] OpenVPNTunnel - /Applications/NordVPN.app [Loaded] Surfshark. WireGuard - /Applications/Surfshark.app [Loaded] Surfshark. OpenVPN - /Applications/Surfshark.app Finder sync extensions: [Not Loaded] OneDrive Finder Integration - /Applications/OneDrive.app [Not Loaded] OneDrive Finder Integration - /Applications/OneDrive.localized/OneDrive.app [Loaded] Adobe Content Synchronizer Finder Extension - /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app QuickLook Previews: [Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2022-12-31) AdobePDFViewer: 21.001.20149 (Adobe Systems, Inc. - installed 2022-12-31) npSecEditCtl.MAC.BOC: 5.0.1.1 (? - installed 2022-12-31) AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2024-09-18) Audio Plug-ins: MSTeamsAudioDevice: 2024.45.00.6 (Microsoft Corporation - installed 2024-10-28) Backup: Time Machine information is limited without Full Disk Access Destinations: B*****p [Local] (Last used) 5 local snapshots Oldest local snapshot: 2024-12-21 17:35:32 Last local snapshot: 2024-12-22 12:52:45 Performance: System Load: 1.57 (1 min ago) 1.80 (5 min ago) 2.37 (15 min ago) Nominal I/O usage: 0.03 MB/s File system: 26.29 seconds Write speed: 763 MB/s Read speed: 1148 MB/s CPU Usage Snapshot: Type Overall System: 3 % User: 7 % Idle: 90 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) EtreCheckPro 14.48 % (Etresoft, Inc.) mds 11.40 % (Apple) mdbulkimport (3) 7.92 % (Apple) WindowServer 4.80 % (Apple) bluetoothd 4.68 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (32) 4.33 GB (Google LLC) EtreCheckPro 1022 MB (Etresoft, Inc.) Google Chrome 447 MB (Google LLC) RdrCEF Helper (Renderer) (8) 445 MB (Adobe Inc.) Mail 376 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) mDNSResponder 3 MB / 2 MB (Apple) rapportd 3 MB / 24 KB (Apple) apsd 63 KB / 171 KB (Apple) Mail 36 KB / 16 KB (Apple) trustd 46 KB / 6 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 3 (Apple) bluetoothd 3 (Apple) Google Chrome 2 (Google LLC) logd 0 (Apple) RdrCEF Helper (GPU) 0 (Adobe Inc.) Virtual Memory Information: Physical RAM: 40 GB Free RAM: 15.45 GB Used RAM: 14.91 GB Cached files: 9.64 GB Available RAM: 25.09 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2024-11-17 Adobe Acrobat Reader (24.004.20272) (24.004.20272) 2024-11-24 NordVPN (8.30.0) 2024-11-24 OneDrive (24.216.1027) 2024-11-24 Surfshark (4.16.0) 2024-11-24 ‎WhatsApp (24.22.78) 2024-11-24 Keeper Password Manager (16.11.3) 2024-11-26 微信 (3.8.9) 2024-12-08 ARMDCAgentInstaller (1.0.0) 2024-12-11 Adobe Acrobat Reader (24.005.20320) (24.005.20320) 2024-12-12 Microsoft Outlook (16.92.24120731) 2024-12-15 Microsoft OneDrive (24.226.1110) 2024-12-21 Microsoft Teams (24335.204.3298.2649) Clean up: /Library/Application Support/HmaProVpn/hub/launchd/com.privax.osx.provpn.mimicagent.plist /Applications/HMA VPN.app/Contents/Applications/HMA Mimic Agent.app/Contents/MacOS/HMA Mimic Agent Executable not found Diagnostics Information (past 60 days): 2024-12-21 17:31:13 Creative Cloud.app High CPU Use 2024-12-20 20:30:46 bluetoothd Crash (2 times) Executable: /usr/sbin/bluetoothd Details: libsystem_c.dylib: abort() called 2024-12-18 20:46:38 signpost_reporter High CPU Use Executable: /usr/libexec/signpost_reporter 2024-12-16 20:31:36 photoanalysisd High CPU Use Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd End of report