Report generated: 2021-04-22 21:02:13 Download EtreCheckPro from https://etrecheck.com Runtime: 5:30 Performance: Good Problem: Other problem Description: Norton screwed my VPN. Uninstalled Norton but the problem persisted. Trying to figure out why. Major Issues: Anything that appears on this list needs immediate attention. No Time Machine backup - Time Machine backup not found. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Apps crashing - There have been numerous app crashes. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (13-inch, 2018-2019, Four Thunderbolt 3 ports) MacBook Pro Model: MacBookPro15,2 2.4 GHz Quad-Core Intel Core i5 (i5-8279U) CPU: 4-core 8 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 4 GB LPDDR3 2133 BANK 2/ChannelB-DIMM0 - 4 GB LPDDR3 2133 Battery: Health = Normal - Cycle count = 370 Video Information: Intel Iris Plus Graphics 655 - VRAM: 1536 MB Color LCD (built-in) 2880 x 1800 Drives: disk0 - APPLE SSD AP0512M 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes) disk1s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 239.60 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 432 MB used) disk1s3 - Recovery (APFS) [Recovery] (Shared - 611 MB used) disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk1s5 (APFS) [APFS Container] (Shared - 15.05 GB used) disk1s5s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.05 GB used) disk1s6 - Update (APFS) (Shared - 2 MB used) disk3 - Samsung PSSD T7 Touch 1.00 TB External USB 480 Mbit/s USB disk3s1 - T******h 1.00 TB (128.88 GB used) Mounted Volumes: disk1s1 - Macintosh HD - Data [APFS Virtual drive] 499.96 GB (Shared - 239.60 GB used, 258.48 GB available, 241.96 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s2 - Preboot [APFS Preboot] 499.96 GB (Shared - 432 MB used, 241.96 GB free) APFS Mount point: /System/Volumes/Preboot disk1s4 - VM [APFS VM] 499.96 GB (Shared - 2.15 GB used, 241.96 GB free) APFS Mount point: /System/Volumes/VM disk1s5s1 - Macintosh HD [APFS Snapshot] 499.96 GB (Shared - 15.05 GB used, 258.48 GB available, 241.96 GB free) APFS Mount point: / Read-only: Yes disk1s6 - Update 499.96 GB (Shared - 2 MB used, 241.96 GB free) APFS Mount point: /System/Volumes/Update disk2s1 - P************l 87 MB (59 MB used, 28 MB free) Mac OS Extended Disk Image Mount point: /Volumes/P************l Owners enabled: No Read-only: Yes disk3s1 - T******h 1.00 TB (128.88 GB used, 871.29 GB free) Mount point: /Volumes/T******h Network: Interface en7: USB 10/100/1000 LAN Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 40.94 GB available System Software: macOS Big Sur 11.2.3 (20D91) Time since boot: About 8 hours Notifications: Airy.app 100 notifications Gemini 2.app one notification (one scheduled) Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple and Sophos Unsigned Files: Launchd: /Library/LaunchDaemons/com.apple.installer.osmessagetracing.plist Executable: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer Details: Exact match found in the legitimate list - probably OK Apps: 2 System Extensions: [Removed after restart] networkextension - version 10.0.4 (Sophos - 2021-04-22) Application: /Applications/Sophos/SophosWebNetworkExtension.app - version 1.0 [Running] com.sophos.endpoint.scanextension - version 10.0.4 (Sophos - 2021-04-22) Application: /Applications/Sophos/Sophos Scan.app - version 10.0.4 (Sophos - 2021-04-22) Description: Scanning Services Kernel Extensions: /Library/Extensions [Not Loaded] fabio.kext - com.dvdfab.kext.fabio (1.0) [Loaded] ufsd_NTFS.kext - com.paragon-software.filesystems.ntfs (15.8.105 - SDK 10.10) [Loaded] SamsungPortableSSDDriver.kext - com.samsung.portablessd.driver (1.5.05 - SDK 10.10) [Not Loaded] SophosFileProtection.kext - com.sophos.kext.oas (10.0.4 - SDK 10.15) [Not Loaded] SophosFileMonitor.kext - com.sophos.kext.sfm (10.0.4 - SDK 10.15) [Not Loaded] SophosWebProtection.kext - com.sophos.nke.swi (10.0.4 - SDK 10.15) System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 155 Apple tasks [Running] 159 Apple tasks System Launch Daemons: [Not Loaded] 36 Apple tasks [Loaded] 176 Apple tasks [Running] 146 Apple tasks [Other] 2 Apple tasks Launch Agents: [Running] com.brother.LOGINserver.plist (Brother Industries, LTD. - installed 2019-09-02) [Running] com.fujitsu.pfu.ScanSnap.AOUMonitor.plist (PFU LIMITED - installed 2020-11-19) [Other] com.fujitsu.pfu.SshRegister.plist (? 47feba09 - installed 2020-03-22) [Other] com.fujitsu.pfu.SshResident.plist (? 4d52cfab - installed 2020-03-22) [Other] com.fujitsu.pfu.SshSCloudWatch.plist (? 97d585df - installed 2020-03-22) [Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2020-12-08) [Running] com.sophos.agent.plist (Sophos - installed 2021-04-22) [Running] com.sophos.home.ui.plist (Sophos - installed 2021-04-22) Launch Daemons: [Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc - installed 2019-10-28) [Loaded] com.bourgeoisbits.cloak.cloakd.plist (Cloak Holdings LLC - installed 2019-12-23) [Loaded] com.bourgeoisbits.cloak.cloakproxyd.plist (Cloak Holdings LLC - installed 2019-12-23) [Other] com.ghostery.proxy.plist (? 3f68088f - installed 2020-02-20) [Other] com.kaspersky.sysextctrld.plist (? ac5f7f8f - installed 2021-03-18) [Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2020-12-08) [Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2020-12-08) [Running] com.sophos.common.servicemanager.plist (Sophos - installed 2021-04-22) [Not Loaded] com.sophos.sophoscbr.plist (Sophos - installed 2021-04-22) [Loaded] com.tunnelbear.mac.tbeard.plist (TunnelBear, Inc. - installed 2020-06-21) [Loaded] org.cindori.SenseiTool.plist (Oskar Groth - installed 2021-04-04) [Running] org.openvpn.client.plist (OPENVPN TECHNOLOGIES, INC. - installed 2020-11-04) [Running] org.openvpn.helper.plist (OPENVPN TECHNOLOGIES, INC. - installed 2020-11-04) [Running] org.openvpn.privatetunnel.plist (OPENVPN TECHNOLOGIES, INC. - installed 2021-03-15) User Launch Agents: [Running] com.c-command.SpamSieve.LaunchAgent.plist (C-Command Software, LLC - installed 2021-02-21) [Other] com.expressvpn.ExpressVPN.agent.plist (? 0 - installed 2019-12-08) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2021-03-05) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-03-05) [Running] com.samsung.portablessdplus.mon.plist (Samsung Electronics - installed 2021-04-16) [Running] com.srib.pssddaemon.plist (Samsung Electronics - installed 2020-08-23) [Running] com.tunnelbear.mac.tbeara.plist (TunnelBear, Inc. - installed 2019-10-08) User Login Items: [Running] Alfred 4 (Running with Crayons Ltd - installed 2021-02-16) Application /Applications/Alfred 4.app [Loaded] Alfred Preferences (Running with Crayons Ltd - installed 2021-02-16) Application /Applications/Alfred 4.app/Contents/Preferences/Alfred Preferences.app [Not Loaded] LoginHelper (App Store - installed 2020-04-05) Modern Login Item /Applications/Audio Recorder.app/Contents/Library/LoginItems/LoginHelper.app [Not Loaded] Better Mac Launch Helper (App Store - installed 2020-03-08) Modern Login Item /Applications/Better.app/Contents/Library/LoginItems/Better Mac Launch Helper.app [Loaded] DeepL (Linguee GmbH - installed 2021-04-12) Application /Applications/DeepL.app [Loaded] DeepL Launcher (Linguee GmbH - installed 2021-04-12) Modern Login Item /Applications/DeepL.app/Contents/Library/LoginItems/DeepL Launcher.app [Not Loaded] Folx GO+ Schedule Helper (App Store - installed 2021-02-09) Modern Login Item /Applications/Folx GO+.app/Contents/Library/LoginItems/FolxScheduleHelper.app [Not Loaded] Gemini Menu Launcher AppStore (App Store - installed 2021-03-06) Modern Login Item /Applications/Gemini 2.app/Contents/Library/LoginItems/Gemini Menu Launcher AppStore.app [Not Loaded] LPLaunchAtLoginHelperApp (App Store - installed 2019-09-23) Modern Login Item /Applications/LastPass.localized/LastPass.app/Contents/Library/LoginItems/LPLaunchAtLoginHelperApp.app [Loaded] NTFS for Mac (Paragon Software GmbH - installed 2021-02-13) Application /Applications/NTFS for Mac.app [Loaded] FSMenuAppLoginItemHelper (Paragon Software GmbH - installed 2021-02-13) Modern Login Item /Applications/NTFS for Mac.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app [Not Loaded] NordVPNLauncher (App Store - installed 2021-04-22) Modern Login Item /Applications/NordVPN IKE.app/Contents/Library/LoginItems/NordVPNLauncher.app [Running] OneDrive (App Store - installed 2021-04-13) Application /Applications/OneDrive.app [Not Loaded] Launcher Disabler (App Store - installed 2021-04-13) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Loaded] OneDrive Launcher (App Store - installed 2021-04-13) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Loaded] Plex Media Server (Plex Inc. - installed 2021-04-22) Application /Applications/Plex Media Server.app [Not Loaded] Surfshark (App Store - installed 2021-04-22) Modern Login Item /Applications/Surfshark.app/Contents/Library/LoginItems/LaunchAgent.app [Not Loaded] SyncFoldersProStartAtLogin (App Store - installed 2021-02-10) Modern Login Item /Applications/Sync Folders Pro.app/Contents/Library/LoginItems/SyncFoldersProStartAtLogin.app [Running] Wipr (App Store - installed 2021-03-16) Application /Applications/Wipr.app [Running] 4449XA862Y.com.giorgiocalderolla.Wipr-Mac.Wipr-Refresher (App Store - installed 2021-03-16) Modern Login Item /Applications/Wipr.app/Contents/Library/LoginItems/4449XA862Y.com.giorgiocalderolla.Wipr-Mac.Wipr-Refresher.app [Not Loaded] CCC User Agent (Bombich Software, Inc. - installed 2021-04-10) Modern Login Item ~/Downloads/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app [Not Loaded] App Uninstaller Helper (Sergiy Savenko - installed 2019-10-09) Modern Login Item ~/Library/Mobile Documents/com~apple~CloudDocs/Software/App Uninstaller.app/Contents/Library/LoginItems/App Uninstaller Helper.app [Not Loaded] coconutBattery Helper (Christoph Sinai - installed 2019-09-22) Modern Login Item ~/Library/Mobile Documents/com~apple~CloudDocs/Software/coconutBattery.app/Contents/Library/LoginItems/coconutBattery Helper.app Safari Extensions: Better (App Store - installed 2020-03-08) Folx GO+ (App Store - installed 2021-02-09) Ghostery Lite Content Blocker - Cosmetic Filters (App Store - installed 2021-02-18) Ghostery Lite Content Blocker - Network Filters (App Store - installed 2021-02-18) Ghostery Lite Content Blocker - Privacy Filters (App Store - installed 2021-02-18) Ghostery Lite Safari Extension (App Store - installed 2021-02-18) LastPass (Marvasol, Inc DBA LastPass - installed 2021-02-27) Wipr Part 1 (App Store - installed 2021-03-16) Wipr Part 2 (App Store - installed 2021-03-16) Wipr Part 3 (App Store - installed 2021-03-16) 3rd Party Preference Panes: ParagonNTFS (Paragon Software GmbH - installed 2020-12-08) Backup: Time Machine Not Configured! Performance: System Load: 3.46 (1 min ago) 6.63 (5 min ago) 5.15 (15 min ago) Nominal I/O speed: 12.10 MB/s File system: 47.96 seconds Write speed: 1467 MB/s Read speed: 1746 MB/s CPU Usage Snapshot: Type Overall System: 5 % User: 7 % Idle: 88 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) mdworker_shared (24) 35.69 % (Apple) WindowServer 23.44 % (Apple) EtreCheckPro 16.88 % (Etresoft, Inc.) Safari 15.12 % (Apple) mds_stores 12.08 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) com.apple.WebKit.WebContent (25) 1.42 GB (Apple) kernel_task 260 MB (Apple) EtreCheckPro 221 MB (Etresoft, Inc.) mdworker_shared (29) 203 MB (Apple) SophosScanD 119 MB (?) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) com.apple.WebKit.Networking 3 MB / 35 KB (Apple) SophosWebIntelligence 3 MB / 34 KB (?) mDNSResponder 850 KB / 497 KB (Apple) com.sophos.endpoint.networkextension 838 KB / 411 KB (Sophos) biometrickitd 833 KB / 219 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 4 (Apple) Safari 4 (Apple) com.apple.WebKit.WebContent (25) 4 (Apple) com.apple.WebKit.Networking (3) 3 (Apple) com.sophos.endpoint.scanextension 2 (Sophos) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 16 MB Used RAM: 5.99 GB Cached files: 2.00 GB Available RAM: 2.01 GB Swap Used: 314 MB Software Installs (past 60 days): Install Date Name (Version) 2021-02-27 macOS 11.2.2 (11.2.2) 2021-03-04 Notability (4.4.4) 2021-03-05 iMovie (10.2.3) 2021-03-06 Gemini 2 (2.8.6) 2021-03-14 Converter (1.30) 2021-03-14 Convert It (1.6.1) 2021-03-16 Wipr (1.21) 2021-03-18 Voice Update - Riya (1.14.4) 2021-03-23 Pages (11.0) 2021-03-23 Numbers (11.0) 2021-03-31 Brother iPrint&Scan (9.0.0) 2021-03-31 Keynote (11.0) 2021-03-31 macOS 11.2.3 (11.2.3) 2021-04-04 Dashlane for Safari (6.2112.0) 2021-04-04 ivwizard (1.4) 2021-04-07 GarageBand (10.4.3) 2021-04-13 OneDrive (21.052.0314) 2021-04-13 Pixelmator Pro (2.0.7) 2021-04-15 WhatsApp (2.2112.10) 2021-04-16 MRTConfigData (1.77) 2021-04-16 XProtectPlistConfigData (2144) 2021-04-16 Samsung Portable SSD Software 1.0 (1.7.2.4) 2021-04-19 Magnet (2.6.0) 2021-04-19 Doc Scanner (2.0.3) 2021-04-20 DVDFab (1.0) 2021-04-20 Honey (12.8.6) 2021-04-20 The Unarchiver (4.3.0) 2021-04-20 Norton For Mac 2021-04-20 Norton Security SKU 2021-04-20 Norton Safe Web Plus (1.1.243) 2021-04-22 Kaspersky Internet Security 2021-04-22 Malwarebytes for Mac 2021-04-22 "Malwarebytes for Mac Uninstaller" 2021-04-22 Private Tunnel (3.0.2-3242) 2021-04-22 NordVPN IKE (6.2.0) 2021-04-22 Surfshark (3.2.2) Clean up: /Library/LaunchAgents/com.fujitsu.pfu.SshRegister.plist /Applications/ScanSnapHomeMain.app/Contents/Helpers/SshRegister.app/Contents/MacOS/SshRegister Executable not found /Library/LaunchAgents/com.fujitsu.pfu.SshResident.plist /Applications/ScanSnapHomeMain.app/Contents/Helpers/SshResident.app/Contents/MacOS/SshResident Executable not found ~/Library/LaunchAgents/com.expressvpn.ExpressVPN.agent.plist /Applications/ExpressVPN.app/Contents/MacOS/expressvpnd Executable not found /Library/LaunchAgents/com.fujitsu.pfu.SshSCloudWatch.plist /Applications/ScanSnapHomeMain.app/Contents/Helpers/SCloudWatch.app/Contents/MacOS/SCloudWatch Executable not found /Library/LaunchDaemons/com.kaspersky.sysextctrld.plist /Applications/Kaspersky Anti-Virus For Mac.app/Contents/MacOS/sysextctrld.app/Contents/MacOS/sysextctrld Executable not found /Library/LaunchDaemons/com.ghostery.proxy.plist /Applications/Ghostery Midnight.app/Contents/Resources/./Ghostery Midnight Proxy Executable not found Diagnostics Information (past 7-30 days): 2021-04-22 20:57:39 SophosCryptoGuard.app Crash (5 times) Executable: /Library/Sophos Anti-Virus/SophosCryptoGuard.app 2021-04-22 18:56:35 LastPass.app Crash (7 times) Executable: /Applications/LastPass.app 2021-04-22 15:42:28 Sophos Scan.app High CPU Use Executable: /Applications/Sophos/Sophos Scan.app 2021-04-22 00:11:09 com.symantec.mes.systemextension Crash Executable: /Library/SystemExtensions/*/com.symantec.mes.systemextension 2021-04-21 18:39:30 iconservicesagent High CPU Use Executable: /System/Library/CoreServices/iconservicesagent 2021-04-21 10:57:22 mobileactivationd Crash Executable: /usr/libexec/mobileactivationd Details: dyld3 mode Error Domain=com.apple.MobileActivation.ErrorDomain Code=-1 "Data migr ation failed." UserInfo={NSLocalizedDescription=Data migration failed. , NSUnderlyingError=0x7f8fbb805170 {Error Domain=com.apple.MobileActiv ation.ErrorDomain Code=-1 "Failed to retrieve bridgeOS buildVersion." UserInfo={NSLocalizedDescription=Failed to retrieve bridgeOS buildVers ion., NSUnderlyingError=0x7f8fbb804e70 {Error Domain=com.apple.MobileA ctivation.ErrorDomain Code=-1 "Remote device not connected yet." UserI nfo={NSLocalizedDescription=Remote device not connected yet.}}}}} 2021-04-20 23:57:05 tccd Crash Executable: /System/Library/PrivateFrameworks/TCC.framework/Versions/A/Resources/tccd Details: dyld3 mode *** Terminating app due to uncaught exception 'NSInvalidArgumentExcept ion', reason: '*** -[NSBundle initWithURL:]: nil URL argument' terminating with uncaught exception of type NSException abort() called 2021-04-20 23:51:59 RTProtectionDaemon.app High CPU Use Executable: /Library/Application Support/Malwarebytes/*/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app 2021-04-19 00:33:44 Finder.app Hang Executable: /System/Library/CoreServices/Finder.app 2021-04-18 23:27:58 com.apple.WebKit.WebContent High CPU Use (4 times) Executable: /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent 2021-04-18 16:49:03 Gemini 2.app High CPU Use Executable: /Applications/Gemini 2.app 2021-04-16 09:58:28 syspolicyd High CPU Use Executable: /usr/libexec/syspolicyd End of report