EtreCheckPro version: 6.8.0 (68018) Report generated: 2023-01-30 09:19:37 Download EtreCheckPro from https://etrecheck.com Runtime: 2:27 Performance: Excellent Problem: Apps are crashing Major Issues: Anything that appears on this list needs immediate attention. Proxies - Network proxies detected. This could be evidence of malware. Unsigned files - There are unsigned software files installed that could be malicious and should be reviewed. Gatekeeper disabled - Gatekeeper security protection is disabled. This computer is at risk of malware infection. Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. No Time Machine backup - Time Machine backup not found. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: iMac (Retina 5K, 27-inch, 2020) Status: Supported iMac Model: iMac20,1 3.8 GHz 8-Core Intel Core i7 (i7-10700K) CPU: 8-core 16 GB RAM - Upgradeable Video Information: AMD Radeon Pro 5500 XT - VRAM: 8 GB iMac (built-in) 5120 x 2880 Drives: disk0 - APPLE SSD AP1024N 1.00 TB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 1.00 TB disk1 [APFS Virtual drive] 1.00 TB (Shared by 6 volumes) disk1s1 (APFS) [APFS Container] (8.94 GB used) disk1s1s1 - Macintosh HD (APFS) [APFS Snapshot] (8.94 GB used) disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (671.46 GB used) disk1s3 - Preboot (APFS) [APFS Preboot] (2.21 GB used) disk1s4 - Recovery (APFS) [Recovery] (1.13 GB used) disk1s5 - VM (APFS) [APFS VM] (25 KB used) disk1s6 - Update (APFS) (12 MB used) Mounted Volumes: disk1s1s1 - Macintosh HD [APFS Snapshot] Filesystem: APFS Mount point: / Read-only: Yes Used: 8.94 GB Shared values Size: 1.00 TB Free: 316.27 GB Available: 317.80 GB disk1s2 - Macintosh HD - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Encrypted Used: 671.46 GB Shared values Size: 1.00 TB Free: 316.27 GB Available: 317.80 GB disk1s3 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Used: 2.21 GB Shared values Size: 1.00 TB Free: 316.27 GB disk1s5 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Used: 25 KB Shared values Size: 1.00 TB Free: 316.27 GB disk1s6 - Update Filesystem: APFS Mount point: /System/Volumes/Update Used: 12 MB Shared values Size: 1.00 TB Free: 316.27 GB Network: Interface en0: Ethernet Proxy Auto Discovery Interface en1: Wi-Fi 802.11 a/b/g/n/ac Proxy Auto Discovery Interface en6: iPhone Proxies: HTTP, HTTPS, SOCKS Interface bridge0: Thunderbolt Bridge Proxies: HTTP, HTTPS, SOCKS Screen sharing: Enabled System Software: macOS Ventura 13.2 (22D49) Time since boot: Less than an hour Notifications: NTFSTool.app 11 notifications Security: Gatekeeper: Anywhere System Integrity Protection: Enabled Antivirus software: None! Screen sharing: Enabled Unsigned Files: Launchd: /Library/LaunchDaemons/com.lbyczf.cfw.helper.plist Executable: ~/.config/clash/service/clash-core-service Details: Executable file is hidden - possibly malware Running app: /Applications/Magnet.app/Contents/MacOS/Magnet Running app: /Applications/NTFSTool.app/Contents/MacOS/NTFSTool Login Item: /Applications/Magnet.app Login Item: /Applications/CrossOver.app/Contents/Resources/CrossOver CD Helper.app Login Item: /Applications/qv2ray.app Login Item: ~/Documents/NAS.app Login Item: /Applications/NTFSTool.app Apps: 34 Applications: 587 apps 137 x86-only apps 32 unsigned apps System Extensions: [Running] Extension - version 2.4.2 (Objective-See, LLC - 2022-06-28) Application: /Applications/LuLu.app - version 2.4.2 (Objective-See, LLC - 2022-06-28) Kernel Extensions: /Library/Extensions [Loaded] Soundflower.kext - com.Cycling74.driver.Soundflower (2.0b2 - SDK 10.10) [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0) System Launch Daemons: [Not Loaded] 37 Apple tasks [Loaded] 180 Apple tasks [Running] 167 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 20 Apple tasks [Loaded] 196 Apple tasks [Running] 175 Apple tasks Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2022-03-03) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2022-03-03) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper [Loaded] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2022-03-03) Executable: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2 [Loaded] com.fxfactory.FxFactory.helper.plist (Noise Industries, LLC - installed 2021-07-09) Executable: /Library/PrivilegedHelperTools/com.fxfactory.FxFactory.helper [Running] com.lbyczf.cfw.helper.plist (Not signed - installed 2022-10-17) Executable: ~/.config/clash/service/clash-core-service [Running] com.redgiant.service.plist (Red Giant Software - installed 2020-12-05) Executable: /Library/Application Support/Red Giant/Services/Red Giant Service.app/Contents/MacOS/Red Giant Service [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2021-07-28) Executable: /Library/PrivilegedHelperTools/com.teamviewer.Helper [Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2021-06-23) Command: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service -Module Full [Loaded] com.tencent.Lemon.listen.plist (Tencent Technology (Shenzhen) Company Limited - installed 2022-09-29) Command: /Library/Application Support/Lemon/LemonDaemon startup [Running] com.tencent.Lemon.plist (Tencent Technology (Shenzhen) Company Limited - installed 2022-09-29) Command: /Library/Application Support/Lemon/LemonDaemon loadBySystem [Loaded] com.tencent.Lemon.uninstall.plist (Tencent Technology (Shenzhen) Company Limited - installed 2022-09-29) Command: /Library/Application Support/Lemon/LemonDaemon UninstallLemon [Loaded] com.west2online.ClashX.ProxyConfigHelper.plist (Fuzhou West2Online Internet Inc. - installed 2022-10-18) Executable: /Library/PrivilegedHelperTools/com.west2online.ClashX.ProxyConfigHelper [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2022-02-08) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2021-06-23) Command: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer -RunAsAgent YES [Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2021-06-23) Command: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Desktop -RunAsAgent YES -Module Full [Running] com.tencent.LemonMonitor.plist (Tencent Technology (Shenzhen) Company Limited - installed 2022-08-12) Command: /Applications/Tencent Lemon.app/Contents/Library/LoginItems/LemonMonitor.app/Contents/MacOS/LemonMonitor 1023 User Launch Agents: [Other] com.epicgames.launcher.plist (Not signed - installed 2022-01-01) Command: open '/Applications/Epic Games Launcher.app' --args -silent [Other] com.google.keystone.agent.plist (Google LLC - installed 2022-10-27) Command: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-27) Command: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost [Loaded] com.redgiantsoftware.updater.plist (Red Giant Software - installed 2022-09-21) Command: /usr/bin/open '/Applications/Red Giant Link.app' --args --silent [Loaded] com.tencent.Lemon.trash.plist (Tencent Technology (Shenzhen) Company Limited - installed 2023-01-17) Command: /Applications/Tencent Lemon.app/Contents/Library/LoginItems/LemonMonitor.app/Contents/MacOS/LemonMonitor trashChanged User Login Items: [Loaded] CrossOver CD Helper (Not signed - installed 2022-03-18) Application /Applications/CrossOver.app/Contents/Resources/CrossOver CD Helper.app [Loaded] DeepLLauncher (Linguee GmbH - installed 2022-09-29) Modern Login Item /Applications/DeepL.app/Contents/Library/LoginItems/DeepLLauncher.app [Running] LuLu (Objective-See, LLC - installed 2022-06-28) Application /Applications/LuLu.app [Running] Magnet (Not signed - installed 2021-07-06) Application /Applications/Magnet.app [Running] NTFSTool (Not signed - installed 2022-01-24) Application /Applications/NTFSTool.app [Not Loaded] Launcher Disabler (App Store - installed 2023-01-13) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (App Store - installed 2023-01-13) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] QQ Login Helper (App Store - installed 2023-01-18) Modern Login Item /Applications/QQ.app/Contents/Library/LoginItems/QQ Login Helper.app [Not Loaded] StartUpHelper (Spotify - installed 2023-01-28) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Not Loaded] TeamViewerMeetingLoginItem (TeamViewer GmbH - installed 2022-01-24) Modern Login Item /Applications/TeamViewer.app/Contents/Library/LoginItems/TeamViewerMeetingLoginItem.app [Running] LemonMonitor (Tencent Technology (Shenzhen) Company Limited - installed 2022-09-29) Modern Login Item /Applications/Tencent Lemon.app/Contents/Library/LoginItems/LemonMonitor.app [Running] ThunderHelper (Xunlei Computer LTD - installed 2022-11-16) Modern Login Item /Applications/Thunder.app/Contents/Library/LoginItems/ThunderHelper.app [Not Loaded] 5A4RE8SF68.com.tencent.xinWeChat.IPCHelper (App Store - installed 2023-01-17) Modern Login Item /Applications/WeChat.app/Contents/Library/LoginItems/5A4RE8SF68.com.tencent.xinWeChat.IPCHelper.app [Loaded] qv2ray (Not signed - installed 2021-08-17) Application /Applications/qv2ray.app [Not Loaded] 88L2Q4487U.com.tencent.WeWorkMac.IPCHelper (App Store - installed 2023-01-17) Modern Login Item /Applications/ä¼ ä¸ å¾®ä¿¡.app/Contents/Library/LoginItems/88L2Q4487U.com.tencent.WeWorkMac.IPCHelper.app [Not Loaded] WeWork Helper (App Store - installed 2023-01-17) Modern Login Item /Applications/ä¼ ä¸ å¾®ä¿¡.app/Contents/Library/LoginItems/WeWork Helper.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2021-08-26) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Loaded] NAS (Not signed - installed 2022-02-23) Application ~/Documents/NAS.app App Extensions: Plugins: BluRayH264Encoder - /Applications/Compressor.app DolbyDigitalEncoder - /Applications/Compressor.app FxAnalyzer - /Applications/Final Cut Pro.app Safari extensions: Thunder Extension - /Applications/Thunder.app Open in IINA - /Applications/IINA.app Downie Safari Extension - /Applications/Downie 4.app File providers: OneDrive File Provider - /Applications/OneDrive.app Share services: Send to Chat - /Applications/WeChat.app OneNote - /Applications/Microsoft OneNote.app Finder sync extensions: DeepL Finder Integration - /Applications/DeepL.app OneDrive Finder Integration - /Applications/OneDrive.app Core Sync Helper - /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app baiduNetdiskSync - /Applications/BaiduNetdisk_mac.app QuickLook Previews: EtreCheckQuickLook - /Applications/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck QuickLook Previews (legacy): Cinema 4D - /Applications/Maxon Cinema 4D R22/Cinema 4D.app net.maxon.cinema4d.c4d *.c4d Internet Plug-ins: AdobePDFViewer: 21.001.20145 (Adobe Systems, Inc. - installed 2021-03-06) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2021-03-06) Audio Plug-ins: TVRemoteAudio: 1.0.1 (TeamViewer GmbH - installed 2021-06-23) 3rd Party Preference panels: macFUSE (Benjamin Fleischer - installed 2022-08-19) Backup: Time Machine Not Configured! Performance: System Load: 2.00 (1 min ago) 2.32 (5 min ago) 1.37 (15 min ago) Nominal I/O usage: 5.59 MB/s File system: 11.01 seconds Write speed: 2246 MB/s Read speed: 2838 MB/s CPU Usage Snapshot: Type Overall System: 1 % User: 1 % Idle: 98 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) syspolicyd 11.46 % (Apple) EtreCheckPro 9.68 % (Etresoft, Inc.) mobileassetd 5.66 % (Apple) WindowServer 5.20 % (Apple) axassetsd 4.52 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (16) 1.78 GB (Google LLC) EtreCheckPro 804 MB (Etresoft, Inc.) NTFSTool Helper (Renderer) (5) 598 MB (Not signed - /Applications/NTFSTool.app) Final Cut Pro 339 MB (Apple) Google Chrome 315 MB (Google LLC) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) corespeechd 2 KB / 12 MB (Apple) mDNSResponder 2 MB / 243 KB (Apple) cloudd 51 KB / 182 KB (Apple) apsd 88 KB / 101 KB (Apple) trustd 149 KB / 18 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 4 (Apple) coreduetd 2 (Apple) Red Giant Service 1 (Red Giant Software) syspolicyd 1 (Apple) Google Chrome Helper (Renderer) (16) 1 (Google LLC) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 1.26 GB Used RAM: 7.70 GB Cached files: 7.04 GB Available RAM: 8.30 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2022-12-26 微信 (3.6.2) 2022-12-26 WeCom (4.0.20) 2023-01-13 OneDrive (22.248.1127) 2023-01-17 macOS 13.1 (13.1) 2023-01-18 QQ (6.9.5) 2023-01-21 XProtectPayloads (87) 2023-01-28 macOS 13.2 (13.2) Clean up: ~/Library/LaunchAgents/com.epicgames.launcher.plist /Applications/Epic Games Launcher.app Executable not found Diagnostics Information (past 7-30 days): 2023-01-28 07:59:09 installd High CPU Use Executable: /System/Library/PrivateFrameworks/PackageKit.framework/Versions/A/Resources/installd 2023-01-28 00:26:47 /Library/Logs/DiagnosticReports/ProxiedDevice-Bridge/Retired/recoverylogd-2023-01-28-002647.ips Crash (2 times) 2023-01-28 00:26:18 /Library/Logs/DiagnosticReports/ProxiedDevice-Bridge/Retired/recoverylogd-2023-01-28-002618.ips Crash (2 times) 2023-01-28 00:26:06 /Library/Logs/DiagnosticReports/ProxiedDevice-Bridge/Retired/recoverylogd-2023-01-28-002606.ips Crash (2 times) End of report