EtreCheck version: 5.6.5 (5229) Report generated: 2021-01-30 11:52:26 Download EtreCheck from https://etrecheck.com Runtime: 2:30 Performance: Excellent Sandbox: Enabled Full drive access: Disabled Problem: Computer is restarting Major Issues: Anything that appears on this list needs immediate attention. Adware - Adware detected. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. More than one antivirus app - This computer has multiple antivirus apps installed. No Time Machine backup - Time Machine backup not found. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. 32-bit Apps - This computer has 32-bits apps will not work on current versions of the operating system. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: iMac (Retina 5K, 27-inch, Late 2015) iMac Model: iMac17,1 3.3 GHz Quad-Core Intel Core i5 (i5-6600) CPU: 4-core 16 GB RAM - Upgradeable BANK 0/DIMM0 - 8 GB DDR3 1867 BANK 0/DIMM1 - Empty BANK 1/DIMM0 - 8 GB DDR3 1867 BANK 1/DIMM1 - Empty Video Information: AMD Radeon R9 M395 - VRAM: 2 GB iMac (built-in) 4096 x 2304 Thunderbolt Display 2048 x 1152 Drives: disk0 - APPLE SSD SM0128G 121.33 GB (Solid State - TRIM: Yes) Internal PCI 8.0 GT/s x4 Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Fusion Drive] 121.12 GB disk5 [APFS Virtual drive] 2.12 TB (Shared by 6 volumes) disk5s1 - i******* - Data (APFS) [APFS Virtual drive] (Shared - 1.73 TB used) disk5s2 - Preboot (APFS) [APFS Preboot] (Shared - 326 MB used) disk5s3 - Recovery (APFS) [Recovery] (Shared) disk5s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk5s5 (APFS) [APFS Container] (Shared) disk5s5s1 - i*****D (APFS) [APFS Snapshot] (Shared - 15.05 GB used) disk5s6 - Update (APFS) (Shared - 19 MB used) disk1 - WD My Passport 25E4 4.00 TB External USB 5 Gbit/s USB disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 - 4*************8 (Journaled HFS+) 4.00 TB (2.01 TB used) disk2 - Seagate Backup+ BL 1.00 TB External USB 5 Gbit/s USB disk2s1 - F*********s (Journaled HFS+) 1.00 TB (753.19 GB used) disk3 - WD My Passport 0829 2.00 TB External USB 5 Gbit/s USB disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 - M****************k (Journaled HFS+) 2.00 TB (802.59 GB used) disk4 - APPLE HDD ST2000DM001 2.00 TB (Mechanical - 7200 RPM) Internal SATA 6 Gigabit Serial ATA disk4s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk4s2 [APFS Fusion Drive] 2.00 TB disk5 [APFS Virtual drive] 2.12 TB (Shared by 6 volumes) disk5s1 - i******* - Data (APFS) [APFS Virtual drive] (Shared - 1.73 TB used) disk5s2 - Preboot (APFS) [APFS Preboot] (Shared - 326 MB used) disk5s3 - Recovery (APFS) [Recovery] (Shared) disk5s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk5s5 (APFS) [APFS Container] (Shared) disk5s5s1 - i*****D (APFS) [APFS Snapshot] (Shared - 15.05 GB used) disk5s6 - Update (APFS) (Shared - 19 MB used) Mounted Volumes: disk1s2 - 4*************8 4.00 TB (2.01 TB used, 1.99 TB free) Journaled HFS+ Mount point: /Volumes/4*************8 disk2s1 - F*********s 1.00 TB (753.19 GB used, 247.55 GB available, 247.01 GB free) Journaled HFS+ Mount point: /Volumes/F*********s Owners enabled: No disk3s2 - M****************k 2.00 TB (802.59 GB used, 1.20 TB free) Journaled HFS+ Mount point: /Volumes/M****************k Owners enabled: No disk5s1 - i******* - Data [APFS Virtual drive] 2.12 TB (Shared - 1.73 TB used, 422.17 GB available, 365.00 GB free) APFS Mount point: /System/Volumes/Data disk5s2 - Preboot [APFS Preboot] 2.12 TB (Shared - 326 MB used, 365.00 GB free) APFS Mount point: /System/Volumes/Preboot disk5s4 - VM [APFS VM] 2.12 TB (Shared - 2.15 GB used, 365.00 GB free) APFS Mount point: /System/Volumes/VM disk5s5s1 - i*****D [APFS Snapshot] 2.12 TB (Shared - 15.05 GB used, 422.17 GB available, 365.00 GB free) APFS Mount point: / Read-only: Yes disk5s6 - Update 2.12 TB (Shared - 19 MB used, 365.00 GB free) APFS Mount point: /System/Volumes/Update Network: Interface en0: Ethernet Interface en6: Display Ethernet Interface en1: Wi-Fi 802.11 a/b/g/n/ac Interface en4: Bluetooth PAN Interface bridge0: Thunderbolt Bridge Interface fw0: FireWire Interface en5: iPhone Screen sharing: Enabled System Software: macOS Big Sur 11.1 (20C69) Time since boot: Less than an hour Notifications: Notifications not available without Full Drive Access. Security: Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus software: Apple, CleanMyMac, and Malwarebytes Screen sharing: Enabled Adware: Launchd: /Library/LaunchDaemons/com.Software-Updater.agent.plist Reason: Adware name match Executable: /Applications/Software-Updater/Software-Updater -guid 8239290963025274 -source zp-1642 Unsigned Files: Launchd: /Library/LaunchAgents/com.divx.uninstall.converter.plist Executable: /bin/bash -c 'if [[ ! -e "/Applications/DivX Converter.app" ]] ; then open "/Library/Application Support/DivX/Uninstall DivX for Mac.app"; fi' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.macpaw.CleanMyMac2.Agent.plist Executable: /Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.divx.dms.agent.plist Executable: /Library/Application Support/DivX/DivXMediaServer.app/Contents/MacOS/DivXMediaServer Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/org.macosforge.xquartz.startx.plist Executable: /opt/X11/lib/X11/xinit/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.cisco.anyconnect.gui.plist Executable: /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MUpdate.plist Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MAIRUploader.plist Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpload Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchAgents/com.divx.uninstall.player.plist Executable: /bin/bash -c 'if [[ ! -e "/Applications/DivX Player.app" ]] ; then open "/Library/Application Support/DivX/Uninstall DivX for Mac.app"; fi' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.wacom.wacomtablet.plist Executable: /Library/Application Support/Tablet/WacomTabletSpringboard Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.ovh.hubiCFinderPlugin.Installer.plist Executable: /Library/PrivilegedHelperTools/com.ovh.hubiCFinderPlugin.Installer Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.handler.keynote.plist Executable: ~/Library/Application Support/Handler/HandlerKeynoteAgent Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist Executable: /opt/X11/lib/X11/xinit/privileged_startx -d /opt/X11/lib/X11/xinit/privileged_startx.d Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.divx.update.agent.plist Executable: /Library/Application Support/DivX/DivXUpdate.app/Contents/MacOS/DivXUpdate Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.launcher.setup.plist Executable: ~/Library/Application Support/LauncherSetup/LauncherSetup Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist Executable: /Library/Sierra/SierraDevSupport Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.divx.uninstall.preferences.plist Executable: /bin/bash -c 'if [[ ! -e "/Applications/DivX/DivX Preferences.app" ]] ; then open "/Library/Application Support/DivX/Uninstall DivX for Mac.app"; fi' Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.helper.service.plist Executable: ~/Library/Application Support/HelperService/HelperService Details: Executable file is not accessible without Full Drive Access Launchd: ~/Library/LaunchAgents/com.ManagerAnalog.service.plist Executable: ~/Library/Application Support/.18030769995553521747/Services/com.ManagerAnalog.service/ManagerAnalog.service -s 6600 Details: Executable file is hidden - possibly adware Launchd: /Library/LaunchDaemons/com.paceap.eden.licensed.plist Executable: /Library/PrivilegedHelperTools/licenseDaemon.app/Contents/MacOS/licenseDaemon --backurl https://activation.paceap.com/InitiateActivation Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.protocol.port.plist Executable: ~/Library/Application Support/ProtocolPort/ProtocolPort Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchDaemons/com.apple.installer.osmessagetracing.plist Executable: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer Details: Exact match found in the legitimate list - probably OK Running app: /Library/Application Support/Tablet/WacomTabletDriver.app/Contents/Resources/TabletDriver.app/Contents/MacOS/TabletDriver Running app: /Library/Application Support/Tablet/WacomTabletDriver.app/Contents/Resources/WacomTouchDriver.app/Contents/MacOS/WacomTouchDriver Safari Extension: Webex Meetings Plugin: /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin Plugin: /Library/Internet Plug-Ins/WacomNetscape.plugin Plugin: /Library/Internet Plug-Ins/DivX Web Player.plugin Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Plugin: /Library/Internet Plug-Ins/WacomTabletPlugin.plugin Apps: 128 32-bit Applications: 118 32-bit apps Kernel Extensions: /Applications/RingCentral Meetings.app ZoomAudioDevice.kext (1.1 - SDK 10.8) /Library/Extensions AvidDX.kext (5.9.0 - SDK 10.6) AVFrameBuffer.kext (Avatron Software, Inc., 1.7 - SDK 10.9) AVVideoCard.kext (Avatron Software, Inc., 1.7 - SDK 10.9) DigiDal.kext (Avid Technology Inc, 12.3.1.260 - SDK 10.8) Dropbox.kext (Dropbox, Inc., 1.11.1 - SDK 10.14) PACESupportFamily.kext (5.9.1 - SDK 10.6) TACC.kext (TechSmith Corporation, 1.0.3 - SDK 10.10) Startup Items: ChmodBPF Path: /Library/StartupItems/ChmodBPF System Launch Agents: [Not Loaded] 18 Apple tasks [Loaded] 169 Apple tasks [Running] 144 Apple tasks System Launch Daemons: [Not Loaded] 35 Apple tasks [Loaded] 187 Apple tasks [Running] 137 Apple tasks [Other] One Apple task Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2020-11-05) [Running] com.avid.ApplicationManager.plist (Avid Technology Inc - installed 2018-09-27) [Not Loaded] com.avid.ApplicationManagerHelper.plist (Avid Technology Inc - installed 2018-09-27) [Running] com.box.desktop.helper.plist (Box, Inc. - installed 2020-04-02) [Loaded] com.cisco.anyconnect.gui.plist (? 40bd3462 - installed 2013-07-19) [Other] com.divx.dms.agent.plist (? bf9bdaf7 - installed 2017-11-17) [Loaded] com.divx.uninstall.converter.plist (? 9e90dee7 - installed 2020-01-01) [Loaded] com.divx.uninstall.player.plist (? 664f994d - installed 2020-01-01) [Loaded] com.divx.uninstall.preferences.plist (? 1cd1d81c - installed 2020-01-01) [Loaded] com.divx.update.agent.plist (? a041d049 - installed 2017-08-02) [Running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (Seiko Epson Corporation - installed 2020-09-13) [Running] com.epson.ecrp.launcher.plist (Seiko Epson Corporation - installed 2018-08-02) [Loaded] com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2020-12-10) [Running] com.epson.eventmanager.agent.plist (Seiko Epson Corporation - installed 2019-10-03) [Running] com.epson.pma.launcher.plist (Seiko Epson Corporation - installed 2017-10-19) [Running] com.epson.scannermonitor.plist (Seiko Epson Corporation - installed 2019-08-18) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-10-19) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-10-19) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-01-13) [Running] com.sierrawireless.SwitchTool.plist (? f4fe8c02 - installed 2012-09-10) [Running] com.wacom.wacomtablet.plist (? 9e9edb5e - installed 2012-09-21) [Loaded] org.macosforge.xquartz.startx.plist (? d225a7da - installed 2013-11-10) Launch Daemons: [Other] PACESupport.plist (? ab6b5614 - installed 2013-02-01) [Other] com.Software-Updater.agent.plist (Adware - installed 2016-10-20) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2020-09-25) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2020-09-25) [Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc - installed 2019-08-20) [Loaded] com.avid.bsd.shoetoolv120.plist (Avid Technology Inc - installed 2016-01-04) [Running] com.box.desktop.autoupdater.plist (Box, Inc. - installed 2020-04-02) [Other] com.cisco.anyconnect.vpnagentd.plist (? a7cbca7 - installed 2013-07-19) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2020-10-19) [Loaded] com.macpaw.CleanMyMac2.Agent.plist (? 753d8be6 - installed 2015-05-25) [Loaded] com.malwarebytes.MBAMHelperTool.plist (Malwarebytes Corporation - installed 2016-02-28) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-01-13) [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2015-10-05) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-12-05) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2020-10-08) [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed ) [Loaded] com.ovh.hubiCFinderPlugin.Installer.plist (? 3ada4205 - installed 2014-02-07) [Running] com.paceap.eden.licensed.plist (? b8fa6e6c - installed 2015-08-10) [Loaded] org.macosforge.xquartz.privileged_startx.plist (? 65395f14 - installed 2013-11-10) User Launch Agents: [Loaded] com.ManagerAnalog.service.plist (? 0 - installed 2021-01-28) [Other] com.box.desktop.launch.plist (? 0 - installed 2020-04-28) [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2020-11-14) [Loaded] com.handler.keynote.plist (? 0 - installed 2021-01-15) [Loaded] com.helper.service.plist (? 0 - installed 2021-01-19) [Other] com.hp.devicemonitor.plist (? 0 - installed 2020-10-26) [Running] com.imobie.AnyTransToolHelpers.plist (iMobie Inc. - installed 2020-06-08) [Loaded] com.launcher.setup.plist (? 0 - installed 2021-01-16) [Loaded] com.logmein.GoToMeeting.G2MAIRUploader.plist (? 0 - installed 2020-08-25) [Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (? 0 - installed 2020-08-25) [Loaded] com.protocol.port.plist (? 0 - installed 2021-01-28) User Login Items: [Not Loaded] ATLoginItemHelper (App Store - installed 2018-08-14) Modern Login Item /Applications/DrCleaner.app/Contents/Library/LoginItems/ATLoginItemHelper.app [Not Loaded] MemoryCleanHelper (App Store - installed 2018-08-02) Modern Login Item /Applications/Memory Clean.app/Contents/Library/LoginItems/MemoryCleanHelper.app [Not Loaded] SnagitLaunchAtLogin (TechSmith Corporation - installed 2017-02-28) Modern Login Item /Applications/Snagit.app/Contents/Library/LoginItems/SnagitLaunchAtLogin.app [Not Loaded] U4MRT5KL8R.com.globaldelight.Voila.MovieTrimHelper (App Store - installed 2015-11-04) Modern Login Item /Applications/Voila.app/Contents/Library/LoginItems/U4MRT5KL8R.com.globaldelight.Voila.MovieTrimHelper.app [Not Loaded] VoilaHelper (App Store - installed 2015-11-04) Modern Login Item /Applications/Voila.app/Contents/Library/LoginItems/VoilaHelper.app [Not Loaded] PhotoStreamAgent (App Store - installed 2015-10-16) Modern Login Item /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app Internet Plug-ins: Flip4Mac WMV Plugin: 3.2.0.16 (? - installed 2015-10-16) WacomNetscape: 2.1.0-1 (? - installed 2015-10-16) DivX Web Player: 3.8.6.14 (? - installed 2018-01-18) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2020-12-09) AdobePDFViewer: 20.013.20074 (Adobe Systems, Inc. - installed 2020-12-09) SharePointBrowserPlugin: 14.6.2 (? - installed 2016-03-30) Silverlight: 5.1.30514.0 (? - installed 2015-10-16) WacomTabletPlugin: WacomTabletPlugin 2.1.0.2 (? - installed 2015-10-16) User Internet Plug-ins: User Internet Plug-ins need Full Drive Access User Audio Plug-ins: User Audio Plug-ins need Full Drive Access User iTunes Plug-ins: User iTunes Plug-ins need Full Drive Access Safari Extensions: Webex Meetings (? - installed 2020-07-30) Backup: Time Machine information not available without Full Drive Access. 16 local snapshots Oldest local snapshot: 2021-01-29 11:54:03 Last local snapshot: 2021-01-30 11:32:54 Performance: System Load: 2.30 (1 min ago) 1.97 (5 min ago) 2.22 (15 min ago) Nominal I/O speed: 0.27 MB/s File system: 25.22 seconds Write speed: 232 MB/s Read speed: 1609 MB/s CPU Usage Snapshot: Type Overall System: 4 % User: 7 % Idle: 89 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Other processes 23.14 % (?) EtreCheck 12.39 % (App Store) Notes 1.70 % (Apple) AvidApplicationManager 1.47 % (Avid Technology Inc) firefox 1.24 % (Mozilla Corporation) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) firefox 691 MB (Mozilla Corporation) EtreCheck 596 MB (App Store) App Store 343 MB (Apple) AvidAppManHelper 264 MB (Avid Technology Inc) Mail 194 MB (Apple) Top Processes Snapshot by Network Use: Process Input / Output (Source - Location) Mail 12 MB / 47 KB (Apple) Other processes 2 MB / 234 KB (?) firefox 213 KB / 116 KB (Mozilla Corporation) CalendarAgent 41 KB / 15 KB (Apple) AMPDevicesAgent 3 KB / 3 KB (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 2.92 GB Used RAM: 7.19 GB Cached files: 5.89 GB Available RAM: 8.81 GB Swap Used: 0 B Software Installs (past 30 days): Install Date Name (Version) 2021-01-07 macOS 11.1 (11.1) 2021-01-07 MRTConfigData (1.72) 2021-01-08 FlashPVideo 2021-01-12 Zoom (5.4.59931.0110) 2021-01-13 Microsoft AutoUpdate 2021-01-15 Keynote (10.0) 2021-01-15 Pages (10.0) 2021-01-15 Numbers (10.0) 2021-01-28 XProtectPlistConfigData (2138) 2021-01-28 EOBD-Facile (3.03) 2021-01-30 EtreCheck (5.6.5) Clean up: ~/Library/LaunchAgents/com.hp.devicemonitor.plist /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app/Contents/MacOS/HP Device Monitor Executable not found ~/Library/LaunchAgents/com.box.desktop.launch.plist com.box.desktop Executable not found /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist /opt/cisco/anyconnect/bin/vpnagentd Executable not found /Library/LaunchDaemons/PACESupport.plist /System/Library/Extensions/PACESupportFamily.kext/Contents/Resources/paceload Executable not found Diagnostics Information (past 7-30 days): Directory /Library/Logs/DiagnosticReports is not accessible. Enable Full Drive Access to see more information. End of report