EtreCheckPro version: 6.7 (67009)
Report generated: 2022-08-17 01:57:41
Download EtreCheckPro from https://etrecheck.com
Runtime: 4:23
Performance: Good

Problem: No problem - just checking

Major Issues:
  Anything that appears on this list needs immediate attention. 
  Unsigned files - There are unsigned software files installed that could be malicious and should be reviewed.
  Heavy CPU usage - Some processes are using an unusually high amount of CPU.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Low disk space - This computer is running low on free hard drive space.
  Apps crashing - There have been numerous app crashes.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  Runaway user process - A user process is using a large percentage of your CPU.
  x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system.
  Limited permissions - More information may be available with Full Disk Access.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  MacBook Air (13-inch, 2017)
  MacBook Air Model: MacBookAir7,2
  1.8 GHz Dual-Core Intel Core i5 (i5-5350U) CPU: 2-core
  8 GB RAM - Not upgradeable
    BANK 0/DIMM0 - 4 GB DDR3 1600  
    BANK 1/DIMM0 - 4 GB DDR3 1600  
  Battery: Health = Normal - Cycle count = 348

Video Information:
  Intel HD Graphics 6000 - VRAM: 1536 MB
    Color LCD 1440 x 900

Drives:
  disk0 - APPLE SSD SM0128G 121.33 GB (Solid State - TRIM: Yes) 
  Internal PCI 5.0 GT/s x4 Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 121.12 GB
      disk1 [APFS Virtual drive] 121.12 GB (Shared by 6 volumes)
        disk1s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (75.29 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (573 MB used)
        disk1s3 - Recovery (APFS) [Recovery] (1.12 GB used)
        disk1s4 - VM (APFS) [APFS VM] (1.07 GB used)
        disk1s5 (APFS) [APFS Container] (15.42 GB used)
          disk1s5s1 - Macintosh HD (APFS) [APFS Snapshot] (15.42 GB used)
        disk1s6 - Update (APFS) (8 MB used)

Mounted Volumes:
  disk1s1 - Macintosh HD - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Used: 75.29 GB
    Shared values
      Size: 121.12 GB
      Free: 27.52 GB
      Available: 28.17 GB

  disk1s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Used: 573 MB
    Shared values
      Size: 121.12 GB
      Free: 27.52 GB

  disk1s4 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Used: 1.07 GB
    Shared values
      Size: 121.12 GB
      Free: 27.52 GB

  disk1s5s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Read-only: Yes
    Used: 15.42 GB
    Shared values
      Size: 121.12 GB
      Free: 27.52 GB
      Available: 28.17 GB

  disk1s6 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Used: 8 MB
    Shared values
      Size: 121.12 GB
      Free: 27.52 GB

Network:
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac
  Interface bridge0: Thunderbolt Bridge
  iCloud Status: one pending file

System Software:
  macOS Monterey 12.5 (21G72) 
  Time since boot: Less than an hour

Notifications:
  EtreCheckPro.app
    4 notifications

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple

Unsigned Files:
  Launchd: /Library/LaunchAgents/com.paragon-software.NTFS.fsnotifyagent.plist
    Executable: /Library/PreferencePanes/NTFSforMacOSX.prefPane/Contents/Resources/fsnotifyagent.app/Contents/MacOS/fsnotifyagent
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist
    Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/com.ConnectionCache.service.plist
    Executable: ~/Library/Application Support/.2717498762591348536/Services/com.ConnectionCache.service/ConnectionCache.service -s 6600
    Details: Executable file is hidden - possibly malware

  Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

  Preference panel: /Library/PreferencePanes/NTFSforMacOSX.prefPane

  Apps: 9

Old Applications:
  8 x86-only apps

Kernel Extensions:
  /Applications/VMware Fusion.app
    [Not Loaded] vmioplug.kext - com.vmware.kext.vmioplug.20.5.0 (20.5.0)
    [Not Loaded] vmnet.kext - com.vmware.kext.vmnet (12.2.3)
    [Not Loaded] vmmon.kext - com.vmware.kext.vmx86 (12.2.3)

  /Library/Application Support/VirtualBox
    [Loaded] VBoxDrv.kext - org.virtualbox.kext.VBoxDrv (6.1.34)
    [Loaded] VBoxNetAdp.kext - org.virtualbox.kext.VBoxNetAdp (6.1.34)
    [Loaded] VBoxNetFlt.kext - org.virtualbox.kext.VBoxNetFlt (6.1.34)
    [Loaded] VBoxUSB.kext - org.virtualbox.kext.VBoxUSB (6.1.34)

  /Library/Extensions
    [Not Loaded] ssuddrv.kext - com.devguru.driver.SamsungComposite (1.4.32 - SDK 10.6)
    [Not Loaded] fabio.kext - com.dvdfab.kext.fabio (1.0)
    [Loaded] ufsd_NTFS.kext - com.paragon-software.filesystems.ntfs (14.1.45 - SDK 10.5)

System Launch Daemons:
  [Not Loaded]  34 Apple tasks
  [Loaded]  211 Apple tasks
  [Running]  135 Apple tasks
  [Other]  One Apple task

System Launch Agents:
  [Not Loaded]  15 Apple tasks
  [Loaded]  209 Apple tasks
  [Running]  132 Apple tasks

Launch Daemons:
  [Not Loaded] com.oracle.java.Helper-Tool.plist (Not signed - installed )
  [Loaded] com.paragon.NTFS.launch.plist (Apple - installed 2022-07-14)
  [Not Loaded] org.virtualbox.startup.plist (Not signed - installed 2022-05-28)

Launch Agents:
  [Other] com.paragon-software.NTFS.fsnotifyagent.plist (Not signed - installed 2015-12-14)
  [Other] com.ugee.Pentablet2.0.plist (Not signed - installed 2022-01-25)

User Launch Agents:
  [Loaded] com.ConnectionCache.service.plist (Not signed - installed 2022-08-13)
  [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-04-19)
  [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-04-19)
  [Not Loaded] org.virtualbox.vboxwebsrv.plist (Not signed - installed 2022-05-28)

User Login Items:
  [Loaded] BetternetAutorun (App Store - installed 2022-02-21)
    Modern Login Item
    /Applications/Betternet VPN.app/Contents/Library/LoginItems/BetternetAutorun.app

  [Not Loaded] MountyHelper (Uwe Hollatz - installed 2021-12-20)
    Modern Login Item
    /Applications/Mounty.app/Contents/Library/LoginItems/MountyHelper.app

Internet Plug-ins:
  SharePointBrowserPlugin: 14.0.0 (? - installed 2010-08-25)

3rd Party Preference panels:
  Paragon NTFS for Mac  OS X (? - installed 2018-01-26)

Backup:
  Time Machine information is limited without Full Disk Access
  Destinations: 
    G****v [Local] (Last used)

Performance:
  System Load: 37.06 (1 min ago) 21.60 (5 min ago) 9.05 (15 min ago)
  Nominal I/O usage: 0.22 MB/s
  File system: 67.62 seconds
  Write speed: 509 MB/s
  Read speed: 1383 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 14 %
  User: 54 %
  Idle: 32 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  mds_stores 228.44 % (Apple)
  WindowServer 7.86 % (Apple)
  EtreCheckPro 4.36 % (Etresoft, Inc.)
  mds 2.02 % (Apple)
  kernel_task 1.32 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheckPro 607 MB (Etresoft, Inc.)
  Finder 105 MB (Apple)
  mds_stores 95 MB (Apple)
  MTLCompilerService (4) 82 MB (Apple)
  WindowServer 78 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 56 KB / 37 KB (Apple)
  apsd 10 KB / 26 KB (Apple)
  netbiosd 3 KB / 3 KB (Apple)
  AssetCache 0 B / 517 B (Apple)
  ThumbnailExtension_macOS 0 B / 0 B (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  mds_stores 83 (Apple)
  CalendarAgent 6 (Apple)
  WindowServer 5 (Apple)
  opendirectoryd 4 (Apple)
  appstoreagent 3 (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 2.24 GB
  Used RAM: 2.68 GB
  Cached files: 3.08 GB

  Available RAM: 5.32 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2022-06-22 Numbers (12.1)
  2022-06-22 Pages (12.1)
  2022-06-22 Keynote (12.1)
  2022-07-01 XProtectPlistConfigData (2161)
  2022-07-04 PDF Professional (2.9.1)
  2022-07-09 Grammarly for Safari (9.59)
  2022-08-04 Notability (11.4.1)
  2022-08-06 macOS 12.5 (12.5)
  2022-08-06 XProtectPayloads (68)

Clean up:
  ~/Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist
    /Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv
    Executable not found
  /Library/LaunchAgents/com.ugee.Pentablet2.0.plist
    /Applications/XP-PenPenTabletPro/PenTablet.app/Contents/MacOS/PenTablet
    Executable not found

Diagnostics Information (past 7-30 days):
  2022-08-17 01:48:40 apevthlp Crash
    Executable: /tmp/*/apevthlp.app
    Details:
      libsystem_c.dylib: abort() called

  2022-08-13 15:34:30 3511776244862875643 Crash (4 times)
    Executable: /Users/***/Library/Application Support/com.13374311640335583586/3511776244862875643
    Details:
      libsystem_c.dylib: abort() called

  2022-08-12 22:45:01 triald High CPU Use (2 times)
    Executable: /usr/libexec/triald

  2022-08-11 19:11:18 com.apple.MobileSoftwareUpdate.CleanupPreparePathService Crash
    Executable: /System/Library/PrivateFrameworks/MobileSoftwareUpdate.framework/Versions/A/XPCServices/com.apple.MobileSoftwareUpdate.CleanupPreparePathService.xpc/Contents/MacOS/com.apple.MobileSoftwareUpdate.CleanupPreparePathService


End of report