EtreCheckPro version: 6.8.1 (68024) Report generated: 2023-05-11 21:23:26 Download EtreCheckPro from https://etrecheck.com Runtime: 3:51 Performance: Good Problem: Other problem Description: Proxy automatically turns on and stops me from accessing the internet. When I manually turn it off in settings, it automatically turns on ag ain after ~10 seconds. Major Issues: Anything that appears on this list needs immediate attention. Proxies - Network proxies detected. This could be evidence of malware. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. No Time Machine backup - Time Machine backup not found. Apps crashing - There have been numerous app crashes. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance. Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (13-inch, 2020, Two Thunderbolt 3 ports) Status: Supported MacBook Pro Model: MacBookPro16,3 1.4 GHz Quad-Core Intel Core i5 (i5-8257U) CPU: 4-core 8 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 4 GB LPDDR3 2133 BANK 2/ChannelB-DIMM0 - 4 GB LPDDR3 2133 Battery: Health = Normal - Cycle count = 273 Video Information: Intel Iris Plus Graphics 645 - VRAM: 1536 MB Color LCD (built-in) 2880 x 1800 Drives: disk0 - APPLE SSD AP0512N 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes) disk1s1 (APFS) [APFS Container] (9.07 GB used) disk1s1s1 - Macintosh HD (APFS) [APFS Snapshot] (9.07 GB used) disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (295.34 GB used) disk1s3 - Preboot (APFS) [APFS Preboot] (2.31 GB used) disk1s4 - Recovery (APFS) [Recovery] (1.15 GB used) disk1s5 - VM (APFS) [APFS VM] (4.30 GB used) disk1s6 - Update (APFS) (14 MB used) Mounted Volumes: disk1s1s1 - Macintosh HD [APFS Snapshot] Filesystem: APFS Mount point: / Read-only: Yes Used: 9.07 GB Shared values Size: 499.96 GB Free: 186.54 GB disk1s2 - Macintosh HD - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Encrypted Used: 295.34 GB Shared values Size: 499.96 GB Free: 186.54 GB disk1s3 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Used: 2.31 GB Shared values Size: 499.96 GB Free: 186.54 GB disk1s5 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Used: 4.30 GB Shared values Size: 499.96 GB Free: 186.54 GB disk1s6 - Update Filesystem: APFS Mount point: /System/Volumes/Update Used: 14 MB Shared values Size: 499.96 GB Free: 186.54 GB Network: Interface en0: Wi-Fi 802.11 a/b/g/n/ac Proxies: HTTP, HTTPS Interface en5: iPhone Proxies: HTTP, HTTPS Interface bridge0: Thunderbolt Bridge Proxies: HTTP, HTTPS Interface en4: Bluetooth PAN Proxies: HTTP, HTTPS System Software: macOS Ventura 13.3.1 (22E772610a) Time since boot: About 5 days Notifications: Slack.app 4 notifications Creative Cloud.app 2 notifications Freedom.app 21 notifications Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple and Malwarebytes Unsigned Files: Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveStandaloneUpdaterDaemon.plist Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveUpdaterDaemon.plist Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon Details: Exact match found in the legitimate list - probably OK Apps: 4 Applications: 551 apps 81 x86-only apps 10 unsigned apps Kernel Extensions: /Library/Extensions [Not Loaded] Callnote.kext - com.kandasoft.driver.Callnote (1.0.5 - SDK 10.9) System Launch Daemons: [Not Loaded] 40 Apple tasks [Loaded] 175 Apple tasks [Running] 172 Apple tasks [Other] 2 Apple tasks System Launch Agents: [Not Loaded] 22 Apple tasks [Loaded] 199 Apple tasks [Running] 175 Apple tasks Launch Daemons: [Running] com.80pct.FreedomHelper.plist (Eighty Percent Solutions Corporation - installed 2023-01-24) Executable: /Library/PrivilegedHelperTools/com.80pct.FreedomHelper [Running] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2023-01-24) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator [Running] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2023-01-24) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper [Running] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2023-03-03) Executable: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2 [Loaded] com.adobe.agsservice.plist (Adobe Inc. - installed 2023-03-18) Executable: /Library/Application Support/Adobe/AdobeGCClient/AGSService [Running] com.logi.optionsplus.updater.plist (Logitech Inc. - installed 2023-02-01) Executable: /Library/Application Support/Logitech.localized/LogiOptionsPlus/logioptionsplus_agent.app/Contents/Frameworks/logioptionsplus_updater.app/Contents/MacOS/logioptionsplus_updater [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2023-05-11) Command: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon -i 'Malwarebytes-Mac-4.18.11.4873 (1).pkg' [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2023-05-11) Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Not signed - installed 2023-01-24) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Not signed - installed 2023-01-24) Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon [Not Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2023-04-13) Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2023-04-13) Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2023-04-10) Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2023-03-25) Executable: /Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2023-03-20) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2023-01-24) Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2023-03-03) Command: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud --showwindow=false --onOSstartup=true [Running] com.adobe.GC.AGM.plist (Adobe Inc. - installed 2023-03-18) Command: /Library/Application Support/Adobe/AdobeGCClient/Adobe Genuine Software Monitor Service -mode=logon [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2023-03-18) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=logon [Loaded] com.adobe.ccxprocess.plist (Adobe Inc. - installed 2023-05-06) Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot [Running] com.kinoni.epoccam.daemon.plist (Corsair Memory, Inc. - installed 2023-01-24) Executable: /Library/CoreMediaIO/Plug-Ins/DAL/EpocCamPlugin.plugIn/Contents/Resources/EpocCam.app/Contents/MacOS/EpocCam [Running] com.logi.optionsplus.plist (Logitech Inc. - installed 2023-02-01) Command: /Library/Application Support/Logitech.localized/LogiOptionsPlus/logioptionsplus_agent.app/Contents/MacOS/logioptionsplus_agent --launchd [Running] com.logitech.vc.LogiVCCoreService.plist (Logitech Inc. - installed 2023-01-24) Executable: /Library/Application Support/Logitech/com.logitech.vc.LogiVCCoreService/LogiVCCoreService.app/Contents/MacOS/LogiVCCoreService [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2023-05-11) Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent [Other] com.microsoft.OneDriveStandaloneUpdater.plist (Not signed - installed 2023-01-24) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater [Not Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2023-04-10) Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2023-04-13) Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent User Launch Agents: [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2023-03-18) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=scheduled [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-10-29) Command: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-29) Command: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost User Login Items: [Running] Freedom (Eighty Percent Solutions Corporation - installed 2023-05-02) Application /Applications/Freedom.app [Not Loaded] MessengerHelper (App Store - installed 2023-05-02) Modern Login Item /Applications/Messenger.app/Contents/Library/LoginItems/MessengerHelper.app [Not Loaded] MessengerLoginHelper (App Store - installed 2023-05-02) Modern Login Item /Applications/Messenger.app/Contents/Library/LoginItems/MessengerLoginHelper.app [Not Loaded] Slack Login Helper (App Store - installed 2023-05-02) Modern Login Item /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app [Not Loaded] StartUpHelper (Spotify - installed 2023-05-02) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Not Loaded] WhatsApp Login Helper (App Store - installed 2023-05-02) Modern Login Item /Applications/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app App Extensions: Finder sync extensions: Adobe Content Synchronizer Finder Extension - /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app Share services: OneNote - /Applications/Microsoft OneNote.app LINE - /Applications/LINE.app Safari extensions: Notion Web Clipper Extension - /Applications/Notion Web Clipper.app QuickLook Previews: EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2023-01-24) AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2023-03-03) AdobePDFViewer: 21.005.20048 (Adobe Systems, Inc. - installed 2023-01-24) Audio Plug-ins: MSTeamsAudioDevice: 2020.42.00.9 (Microsoft Corporation - installed 2020-10-13) ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2022-11-12) VirtualMic: 1.0 (Corsair Memory, Inc. - installed 2022-02-08) CoreMediaIO Plug-ins: EpocCamPlugIn: 3.4.1rc2 (Corsair Memory, Inc. - installed 2023-01-24) Backup: Time Machine Not Configured! Performance: System Load: 8.88 (1 min ago) 8.69 (5 min ago) 10.82 (15 min ago) Nominal I/O usage: 21.07 MB/s File system: 21.58 seconds Write speed: 1737 MB/s Read speed: 2382 MB/s CPU Usage Snapshot: Type Overall System: 6 % User: 11 % Idle: 83 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) efilogin-helper 69.85 % (Apple) EtreCheckPro 19.68 % (Etresoft, Inc.) WindowServer 9.70 % (Apple) coreaudiod 7.58 % (Apple) syspolicyd 4.48 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (26) 1.36 GB (Google LLC) Arc Helper (Renderer) (23) 1.25 GB (The Browser Company of New York Inc.) efilogin-helper 644 MB (Apple) EtreCheckPro 572 MB (Etresoft, Inc.) kernel_task 572 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) corespeechd 5 KB / 31 MB (Apple) mDNSResponder 6 MB / 4 MB (Apple) remoted 202 KB / 276 KB (Apple) biometrickitd 379 KB / 45 KB (Apple) mobileactivationd 115 KB / 36 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 4 (Apple) syspolicyd 2 (Apple) com.apple.siri.embeddedspeech (2) 1 (Apple) itunescloudd 1 (Apple) mobileassetd 1 (Apple) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 16 MB Used RAM: 6.43 GB Cached files: 1.56 GB Available RAM: 1.57 GB Swap Used: 3.13 GB Software Installs (past 60 days): Install Date Name (Version) 2023-03-20 Zoom (5.13.11.16405) 2023-03-25 Microsoft Teams (1.00.604464) 2023-03-30 Kindle (1.40.1) 2023-03-31 Adobe Acrobat (23.001.20093) (23.001.20093) 2023-03-31 Adobe Acrobat Reader (23.001.20093) (23.001.20093) 2023-04-01 XProtectPlistConfigData (2167) 2023-04-10 Slack (4.31.155) 2023-04-10 Microsoft 365 and Office for Mac (16.72.23040900) 2023-04-13 Microsoft AutoUpdate (4.58.23040900) 2023-04-13 Microsoft Excel (16.72.23040900) 2023-04-13 Microsoft OneNote (16.72.23040900) 2023-04-13 Microsoft PowerPoint (16.72.23040900) 2023-04-13 Microsoft Word (16.72.23040900) 2023-04-13 Adobe Acrobat (23.001.20143) (23.001.20143) 2023-04-14 Adobe Acrobat Reader (23.001.20143) (23.001.20143) 2023-04-24 Messenger (184.0) 2023-05-02 macOS Ventura (13.3.1) 2023-05-02 macOS 13.3.1 (13.3.1) 2023-05-02 WhatsApp (2.2318.11) 2023-05-02 LINE (7.17.0) 2023-05-02 Keynote (13.0) 2023-05-02 Pages (13.0) 2023-05-03 MRTConfigData (1.93) 2023-05-03 Microsoft Outlook (16.72.23043001) 2023-05-04 XProtectPayloads (97) 2023-05-04 macOS Rapid Security Response 13.3.1 (a) (13.3.1 (a)) 2023-05-10 Adobe Acrobat (23.001.20177) (23.001.20177) 2023-05-11 Malwarebytes for Mac (1.0) Clean up: /Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater Executable not found Diagnostics Information (past 7-30 days): 2023-05-11 21:20:02 FreedomProxy Crash (1508 times) Executable: /Applications/Freedom.app 2023-05-11 21:08:29 RTProtectionDaemon.app High CPU Use (2 times) Executable: /Library/Application Support/Malwarebytes/*/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app 2023-05-07 21:39:56 logioptionsplus_agent.app High CPU Use Executable: /Library/Application Support/Logitech.localized/*/logioptionsplus_agent.app 2023-05-06 08:50:17 intelligenceplatformd High CPU Use Executable: /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/Versions/A/intelligenceplatformd End of report