EtreCheckPro version: 6.7.3 (67033) Report generated: 2022-11-17 17:19:29 Download EtreCheckPro from https://etrecheck.com Runtime: 2:54 Performance: Excellent Problem: Other problem Description: Canâ t disable proxy settings Major Issues: Anything that appears on this list needs immediate attention. Proxies - Network proxies detected. This could be evidence of malware. Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure. Heavy CPU usage - Some processes are using an unusually high amount of CPU. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. More than one antivirus app - This computer has multiple antivirus apps installed. No Time Machine backup - Time Machine backup not found. High battery cycle count - Your battery may be losing capacity. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Runaway user process - A user process is using a large percentage of your CPU. x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system. Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (15-inch, 2017) Status: Supported MacBook Pro Model: MacBookPro14,3 2.9 GHz Quad-Core Intel Core i7 (i7-7820HQ) CPU: 4-core 16 GB RAM - Not upgradeable BANK 0/DIMM0 - 8 GB LPDDR3 2133 BANK 1/DIMM0 - 8 GB LPDDR3 2133 Battery: Health = Normal - Cycle count = 1018 Video Information: Intel HD Graphics 630 - VRAM: 1536 MB Color LCD (built-in) 3360 x 2100 Radeon Pro 560 - VRAM: 4 GB Drives: disk0 - APPLE SSD SM0512L 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.83 GB disk1 [APFS Virtual drive] 499.83 GB (Shared by 6 volumes) disk1s1 - A********* - Data (APFS) [APFS Virtual drive] (304.53 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (2.00 GB used) disk1s3 - Recovery (APFS) [Recovery] (1.12 GB used) disk1s4 - VM (APFS) [APFS VM] (1.07 GB used) disk1s5 (APFS) [APFS Container] (8.83 GB used) disk1s5s1 - A*******D (APFS) [APFS Snapshot] (8.83 GB used) disk1s6 - Update (APFS) (13 MB used) Mounted Volumes: disk1s1 - A********* - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Encrypted Used: 304.53 GB Shared values Size: 499.83 GB Free: 182.10 GB Available: 183.01 GB disk1s2 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Used: 2.00 GB Shared values Size: 499.83 GB Free: 182.10 GB disk1s4 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Used: 1.07 GB Shared values Size: 499.83 GB Free: 182.10 GB disk1s5s1 - A*******D [APFS Snapshot] Filesystem: APFS Mount point: / Read-only: Yes Used: 8.83 GB Shared values Size: 499.83 GB Free: 182.10 GB Available: 183.01 GB disk1s6 - Update Filesystem: APFS Mount point: /System/Volumes/Update Used: 13 MB Shared values Size: 499.83 GB Free: 182.10 GB Network: Interface en0: Wi-Fi 802.11 a/b/g/n/ac Proxies: HTTP, HTTPS Interface bridge0: Thunderbolt Bridge Proxies: HTTP, HTTPS System Software: macOS Ventura 13.0.1 (22A400) Time since boot: Less than an hour Notifications: Transmission.app 2 notifications ExpressVPN.app 7 notifications (6 scheduled) Be Focused.app one notification Freedom.app 17 notifications Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple, SafeNet, and Malwarebytes Unsigned Files: Launchd: /Library/LaunchAgents/com.avid.interplay.editortranscode.plist Executable: /Applications/Avid/EditorTranscode/TranscodeService/EditorTranscode.app/Contents/MacOS/RunEditorTranscode.bash Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.avid.interplay.dmfservice.plist Executable: /Applications/Avid Media Composer/DMFService.app/Contents/MacOS/DMFService Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.teams.TeamsUpdaterDaemon.plist Executable: /Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon Details: Restrictive config permissions - possibly malware Launchd: /Library/LaunchAgents/com.avid.dmfsupportsvc.plist Executable: /Applications/Avid Media Composer/AvidMediaComposer.app/Contents/MacOS/AvidDMFSupportSvc.app/Contents/MacOS/AvidDMFSupportSvc Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.avid.transcodeserviceworker.plist Executable: /Applications/Avid/EditorTranscode/TranscodeService/TranscodeServiceWorker.app/Contents/MacOS/TranscodeServiceWorker /Applications/Avid/EditorTranscode/TranscodeService Details: Exact match found in the legitimate list - probably OK Old Applications: 11 x86-only apps Kernel Extensions: /Applications/ExpressVPN.app [Not Loaded] ExpressVPNSplitTunnel.kext - com.expressvpn.splittunnel (1.0.2 - SDK 10.14) /Applications/Recoverit.app [Not Loaded] WondershareDriver.kext - com.wondershare.driver (2.1.3 - SDK 10.14) /Library/Extensions [Not Loaded] Sentinel.kext - com.SafeNet.driver.Sentinel (7.5.4 - SDK 10.6) System Launch Daemons: [Not Loaded] 40 Apple tasks [Loaded] 186 Apple tasks [Running] 158 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 19 Apple tasks [Loaded] 216 Apple tasks [Running] 155 Apple tasks Launch Daemons: [Running] com.80pct.FreedomHelper.plist (Eighty Percent Solutions Corporation - installed 2020-11-15) [Running] com.avid.hub.service.plist (Avid Technology Inc - installed 2020-12-06) [Other] com.avid.interplay.editorbroker.plist (Not signed - installed 2020-12-06) [Other] com.avid.interplay.editortranscodestatus.plist (Not signed - installed 2020-12-06) [Running] com.avid.transport.client.plist (Avid Technology Inc - installed 2020-12-06) [Other] com.easeus.dataprotectbackup.plist (Not signed - installed 2020-12-29) [Running] com.expressvpn.expressvpnd.plist (ExprsVPN LLC - installed 2021-09-10) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2022-11-17) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2022-11-17) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Not signed - installed 2020-11-19) [Running] com.paceap.eden.licensed.plist (PACE Anti-Piracy, Inc. - installed 2019-11-04) [Other] com.safenet.sentinel.kext.plist (Apple - installed 2022-10-28) [Running] com.windscribe.helper.macos.plist (Windscribe Limited - installed 2021-04-26) Launch Agents: [Other] com.avid.backgroundservicesmanager.plist (Not signed - installed 2020-10-27) [Loaded] com.avid.dmfsupportsvc.plist (Not signed - installed 2020-04-17) [Loaded] com.avid.interplay.dmfservice.plist (Not signed - installed 2020-04-17) [Loaded] com.avid.interplay.editortranscode.plist (Not signed - installed 2020-12-06) [Loaded] com.avid.transcodeserviceworker.plist (Not signed - installed 2020-12-06) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2022-11-17) [Loaded] com.paceap.eden.licensed.agent.plist (PACE Anti-Piracy, Inc. - installed 2020-12-06) User Launch Agents: [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-10-27) [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-27) User Login Items: [Not Loaded] LaunchAtLoginHelperApp (App Store - installed 2022-10-09) Modern Login Item /Applications/Be Focused.app/Contents/Library/LoginItems/LaunchAtLoginHelperApp.app [Loaded] ExpressVPN (ExprsVPN LLC - installed 2021-09-10) Application /Applications/ExpressVPN.app/Contents/Library/LoginItems/ExpressVPN Launcher.app [Not Loaded] ExpressVPN Launcher (ExprsVPN LLC - installed 2021-09-10) Modern Login Item /Applications/ExpressVPN.app/Contents/Library/LoginItems/ExpressVPN Launcher.app [Running] Freedom (Eighty Percent Solutions Corporation - installed 2021-10-05) Application /Applications/Freedom.app [Not Loaded] Alarm Helper (App Store - installed 2022-07-11) Modern Login Item /Applications/Sleep Alarm Clock.app/Contents/Library/LoginItems/Alarm Helper.app [Loaded] StartUpHelper (Spotify - installed 2022-11-03) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app Backup: Time Machine Not Configured! Performance: System Load: 3.93 (1 min ago) 6.37 (5 min ago) 3.70 (15 min ago) Nominal I/O usage: 0.01 MB/s File system: 28.08 seconds Write speed: 1027 MB/s Read speed: 2128 MB/s CPU Usage Snapshot: Type Overall System: 3 % User: 5 % Idle: 93 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) efilogin-helper 207.20 % (Apple) RTProtectionDaemon 20.08 % (Malwarebytes Corporation) EtreCheckPro 13.16 % (Etresoft, Inc.) WindowServer 7.84 % (Apple) VTDecoderXPCService (3) 3.38 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (11) 1.18 GB (Google LLC) EtreCheckPro 744 MB (Etresoft, Inc.) MTLCompilerService (15) 551 MB (Apple) efilogin-helper 428 MB (Apple) Google Chrome 272 MB (Google LLC) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Spotify 107 KB / 11 KB (Spotify) biometrickitd 10 KB / 99 KB (Apple) Freedom 45 KB / 5 KB (Eighty Percent Solutions Corporation) mDNSResponder 26 KB / 17 KB (Apple) trustd 31 KB / 2 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) RTProtectionDaemon 5 (Malwarebytes Corporation) WindowServer 4 (Apple) syspolicyd 2 (Apple) trustd (4) 2 (Apple) tccd (2) 1 (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 4.34 GB Used RAM: 6.27 GB Cached files: 5.40 GB Available RAM: 9.73 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2022-09-21 Safari (16.0) 2022-09-21 macOS 12.6 (12.6) 2022-10-09 Be Focused (2.2.1) 2022-10-25 Numbers (12.1) 2022-10-25 Pages (12.1) 2022-10-25 Keynote (12.1) 2022-11-10 XProtectPlistConfigData (2165) 2022-11-15 macOS 13.0.1 (13.0.1) 2022-11-16 MRTConfigData (1.93) 2022-11-16 XProtectPayloads (84) 2022-11-16 Pro Video Formats (2.2.4) 2022-11-17 Malwarebytes for Mac (1.0) 2022-11-17 DaVinci Resolve Panels Installer v2.0.5 2022-11-17 DaVinci Keyboards Installer v2.0.5 2022-11-17 Fairlight Panels Installer v2.0.5 2022-11-17 BlackmagicRaw_common 2022-11-17 DaVinci Resolve (18.1) Clean up: /Library/LaunchDaemons/com.avid.interplay.editorbroker.plist ./RunAvidEditorBroker.bash Executable not found /Library/LaunchDaemons/com.easeus.dataprotectbackup.plist /Applications/EaseUS Data Recovery Wizard.app/Contents/MacOS/EaseUS Data Recovery Wizard.app/Contents/Resources/EUDataDaemon.app/Contents/MacOS/eudataback Executable not found /Library/LaunchAgents/com.avid.backgroundservicesmanager.plist /Applications/Avid Media Composer/AvidMediaComposer.app/Contents/MacOS/AvidBackgroundServicesManager.app/Contents/MacOS/AvidBackgroundServicesManager Executable not found /Library/LaunchDaemons/com.avid.interplay.editortranscodestatus.plist ./AvidEditorTranscodeStatusMac.bash Executable not found Diagnostics Information (past 7-30 days): 2022-11-17 16:04:03 AvidMediaComposer.app Hang Executable: /Applications/Avid Media Composer/AvidMediaComposer.app 2022-11-17 15:53:45 RTProtectionDaemon.app High CPU Use Executable: /Library/Application Support/Malwarebytes/*/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app 2022-11-17 14:34:40 Bridge Kernel Panic 2022-11-17 12:16:07 Freedom.app High CPU Use (2 times) Executable: /Applications/Freedom.app 2022-11-14 09:02:38 triald High CPU Use Executable: /usr/libexec/triald End of report