Report 2: EtreCheckPro version: 6.8.7 (68068) Report generated: 2025-01-14 19:14:01 Download EtreCheckPro from https://etrecheck.com Runtime: 7:48 Performance: Below Average Problem: Beachballing Description: iMac extremely slow on startup; very slow during regular use. Major Issues: None Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. More than one antivirus app - This computer has multiple antivirus apps installed. System extensions installed - This computer has system extensions installed. System extensions can be difficult to uninstall. No Time Machine backup - Time Machine backup not found. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Low performance - EtreCheck report took an unusually long time to run. Vintage hardware - This computer may be considered vintage. Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: iMac (Retina 5K, 27-inch, 2017) Status: Vintage iMac Model: iMac18,3 3.4 GHz Quad-Core Intel Core i5 (i5-7500) CPU: 4-core 40 GB RAM - Upgradeable BANK 0/DIMM0 - 4 GB DDR4 SO-DIMM 2400 BANK 0/DIMM1 - 16 GB DDR4 SO-DIMM 2400 BANK 1/DIMM0 - 4 GB DDR4 SO-DIMM 2400 BANK 1/DIMM1 - 16 GB DDR4 SO-DIMM 2400 Video Information: Radeon Pro 570 - VRAM: 4 GB iMac (built-in) 5120 x 2880 Thunderbolt Display 2560 x 1440 Drives: disk0 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM) Internal SATA 6 Gigabit Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Fusion Drive] 1000.00 GB disk2 [APFS Virtual drive] 1.03 TB (Shared by 6 volumes) disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (307.85 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (2.13 GB used) disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used) disk2s4 (APFS) [APFS Container] (9.35 GB used) disk2s4s1 - Macintosh HD (APFS) [APFS Snapshot] (9.35 GB used) disk2s5 - VM (APFS) [APFS VM] (1 MB used) disk2s6 - Update (APFS) (5 MB used) disk1 - APPLE SSD SM0032L 28.00 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x2 NVM Express disk1s1 - EFI [EFI] 315 MB disk1s2 [APFS Fusion Drive] 27.69 GB disk2 [APFS Virtual drive] 1.03 TB (Shared by 6 volumes) disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (307.85 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (2.13 GB used) disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used) disk2s4 (APFS) [APFS Container] (9.35 GB used) disk2s4s1 - Macintosh HD (APFS) [APFS Snapshot] (9.35 GB used) disk2s5 - VM (APFS) [APFS VM] (1 MB used) disk2s6 - Update (APFS) (5 MB used) disk3 - WD Elements 25A3 4.00 TB External USB Up to 5 Gb/s USB disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 [APFS Container] 3.92 TB disk4 [APFS Virtual drive] 3.92 TB disk4s1 - B*******D (APFS) (766.84 GB used) disk3s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB disk3s4 - H****T (Journaled HFS+) 62.70 GB (15.98 GB used) disk3s5 - Recovery HD (Journaled HFS+) [Recovery] 16.65 GB Mounted Volumes: disk2s1 - Macintosh HD - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Fusion drive Used: 307.85 GB Shared values Size: 1.03 TB Free: 702.68 GB Available: 713.29 GB disk2s2 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Fusion drive Used: 2.13 GB Shared values Size: 1.03 TB Free: 702.68 GB disk2s4s1 - Macintosh HD [APFS Snapshot] Filesystem: APFS Mount point: / Fusion drive Read-only: Yes Used: 9.35 GB Shared values Size: 1.03 TB Free: 702.68 GB Available: 713.29 GB disk2s5 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Fusion drive Used: 1 MB Shared values Size: 1.03 TB Free: 702.68 GB disk2s6 - Update Filesystem: APFS Mount point: /System/Volumes/Update Fusion drive Used: 5 MB Shared values Size: 1.03 TB Free: 702.68 GB disk3s4 - H****T Filesystem: Journaled HFS+ Mount point: /Volumes/H****T Owners enabled: No Used: 15.98 GB Size: 62.70 GB Free: 46.72 GB disk4s1 - B*******D Filesystem: APFS Mount point: /Volumes/B*******D Owners enabled: No Used: 766.84 GB Shared values Size: 3.92 TB Free: 3.15 TB USB: USB 3.0 bus Western Digital - Elements 25A3 VIA Labs, Inc. - USB3.0 Hub VIA Labs, Inc. - USB2.0 Hub Broadcom Corp. - Bluetooth USB Host Controller Apple Inc. - FaceTime HD Camera (Built-in) USB 3.1 bus USB 2.0 bus hub_device Apple Inc. - Apple Thunderbolt Display Apple Inc. - FaceTime HD Camera (Display) Apple Inc. - Display Audio Network: Interface en0: Ethernet Interface en7: Display Ethernet Interface fw0: Thunderbolt FireWire Interface en1: Wi-Fi 802.11 a/b/g/n/ac Interface bridge0: Thunderbolt Bridge Interface en6: iPhone Firewall: Blocked apps: System Software: macOS Ventura 13.7.2 (22H313) Time since boot: Less than an hour Notifications: EtreCheckPro.app one notification Creative Cloud.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple, Surfshark, and CrowdStrike Unsigned Files: Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist Command: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart Details: Exact match found in the legitimate list - probably OK Apps: 5 System Extensions: [Running] Surfshark Antivirus - version 4.16.2 (SURFSHARK LTD - installed 2024-12-30) Application: /Applications/Surfshark.app - version 4.16.2 (SURFSHARK LTD - installed 2024-12-30) Description: System Extension enables Surfshark app to provide antivirus features. [Running] Falcon Sensor - version 7.20 (CrowdStrike Inc. - installed 2025-01-14) Application: /Applications/Falcon.app - version 7.20 (CrowdStrike Inc. - installed 2025-01-14) Description: CrowdStrike Falcon sensor requires the use of a SystemExtension [Running] Surfshark. WireGuard - version 4.16.2 (SURFSHARK LTD - installed 2024-12-30) Application: /Applications/Surfshark.app - version 4.9.5 (SURFSHARK LTD - installed 2024-12-30) Description: System Extension enables Surfshark app to connect using WireGuard protocol. Kernel Extensions: /Applications/Tunnelblick.app [Not Loaded] tap-notarized.kext - net.tunnelblick.tap (20141104 (Tunnelblick tap kext version 5.0; Tunnelblick build 5622)) [Not Loaded] tun-notarized.kext - net.tunnelblick.tun (20141104 (Tunnelblick tun kext version 5.0; Tunnelblick build 5622)) /Library/Application Support/VirtualBox [Not Loaded] VBoxDrv.kext - org.virtualbox.kext.VBoxDrv (6.1.30) [Not Loaded] VBoxNetAdp.kext - org.virtualbox.kext.VBoxNetAdp (6.1.30) [Not Loaded] VBoxNetFlt.kext - org.virtualbox.kext.VBoxNetFlt (6.1.30) [Not Loaded] VBoxUSB.kext - org.virtualbox.kext.VBoxUSB (6.1.30) System Launch Daemons: [Not Loaded] 38 Apple tasks [Loaded] 192 Apple tasks [Running] 159 Apple tasks [Other] 2 Apple tasks System Launch Agents: [Not Loaded] 20 Apple tasks [Loaded] 200 Apple tasks [Running] 178 Apple tasks Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2024-12-10) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2024-12-10) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper [Loaded] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2024-09-22) Executable: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2 [Running] com.adobe.agsservice.plist (Adobe Inc. - installed 2025-01-14) Executable: /Library/Application Support/Adobe/AdobeGCClient/AGSService [Not Loaded] com.apple.installer.cleanupinstaller.plist (Not signed - installed 2023-01-06) Executable: /macOS Install Data/Locked Files/cleanup_installer [Running] com.backblaze.bzserv.plist (Backblaze - installed 2024-03-25) Executable: /Applications/Backblaze.app/Contents/MacOS/bzserv [Running] com.bitgapp.eqmac.helper.plist (Bitgapp Ltd. - installed 2023-12-14) Executable: /Library/PrivilegedHelperTools/com.bitgapp.eqmac.helper/Contents/MacOS/com.bitgapp.eqmac.helper [Loaded] com.duosecurity.duoappupdater.plist (Duo Security LLC - installed 2024-12-03) Executable: /Applications/Duo Desktop.app/Contents/Resources/duoappupdater [Running] com.duosecurity.trustedpeermessagebroker.plist (Duo Security LLC - installed 2024-12-03) Executable: /Applications/Duo Desktop.app/Contents/Resources/trustedpeermessagebroker [Loaded] com.google.GoogleUpdater.wake.system.plist (Google LLC - installed 2024-11-20) Command: /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2 --system [Not Loaded] com.google.keystone.daemon.plist (Not signed - installed 2023-12-06) [Loaded] com.teamviewer.Helper.plist (TeamViewer Germany GmbH - installed 2024-05-26) Executable: /Library/PrivilegedHelperTools/com.teamviewer.Helper [Loaded] com.teamviewer.UninstallerHelper.plist (TeamViewer Germany GmbH - installed 2024-05-26) Executable: /Library/PrivilegedHelperTools/com.teamviewer.UninstallerHelper [Loaded] com.teamviewer.UninstallerWatcher.plist (TeamViewer Germany GmbH - installed 2024-05-26) Command: /Library/Application Support/TeamViewer/TeamViewerUninstaller.app/Contents/Helpers/com.teamviewer.UninstallerStarter --module Full [Loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (Jonathan Bullard - installed 2024-05-19) Executable: /Applications/Tunnelblick.app/Contents/Resources/tunnelblickd [Not Loaded] org.virtualbox.startup.plist (Not signed - installed 2024-07-23) Command: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2024-11-13) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2024-12-10) Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2024-09-20) Command: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud --showwindow=false --onOSstartup=true [Running] com.adobe.GC.AGM.plist (Adobe Inc. - installed 2025-01-14) Command: /Library/Application Support/Adobe/AdobeGCClient/Adobe Genuine Software Monitor Service -mode=logon [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2024-10-04) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=logon [Loaded] com.adobe.ccxprocess.plist (Adobe Inc. - installed 2025-01-05) Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot [Running] com.crowdstrike.falcon.UserAgent.plist (CrowdStrike Inc. - installed 2025-01-14) Executable: /Applications/Falcon.app/Contents/Library/LaunchServices/Falcon Notifications.app/Contents/MacOS/Falcon Notifications [Loaded] com.duosecurity.LaunchDuoDesktop.plist (Duo Security LLC - installed 2024-12-03) Executable: /Applications/Duo Desktop.app/Contents/MacOS/LaunchDuoDesktop [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-06) [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-06) User Launch Agents: [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2024-10-04) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=scheduled [Running] com.backblaze.bzbmenu.plist (Backblaze - installed 2025-01-14) Executable: /Library/Backblaze.bzpkg/bzbmenu.app/Contents/MacOS/bzbmenu [Loaded] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (Jonathan Bullard - installed 2024-03-12) Executable: /Applications/Tunnelblick.app/Contents/Resources/Tunnelblick-LaunchAtLogin [Not Loaded] org.virtualbox.vboxwebsrv.plist (Oracle America, Inc. - installed 2024-07-23) Executable: /Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv User Login Items: [Running] 1Password Browser Helper (AgileBits Inc. - installed 2024-12-18) Modern Login Item /Applications/1Password.app/Contents/Library/LoginItems/1Password Browser Helper.app [Running] 1Password Launcher (AgileBits Inc. - installed 2024-12-18) Modern Login Item /Applications/1Password.app/Contents/Library/LoginItems/1Password Launcher.app [Not Loaded] Bitwarden Login Helper (App Store - installed 2024-08-28) Modern Login Item /Applications/Bitwarden.app/Contents/Library/LoginItems/Bitwarden Login Helper.app [Not Loaded] LauncherApplication (Duo Security LLC - installed 2024-12-03) Modern Login Item /Applications/Duo Desktop.app/Contents/Library/LoginItems/LauncherApplication.app [Not Loaded] MWDLauncher (Wanpath LLC - installed 2024-08-24) Modern Login Item /Applications/MyWorkDrive.app/Contents/Library/LoginItems/MWDLauncher.app [Not Loaded] Slack Login Helper (App Store - installed 2024-08-28) Modern Login Item /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app [Not Loaded] SpeedTestHelper (App Store - installed 2024-06-09) Modern Login Item /Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app [Loaded] Surfshark (SURFSHARK LTD - installed 2024-12-30) Modern Login Item /Applications/Surfshark.app/Contents/Library/LoginItems/LaunchAgent.app [Not Loaded] LaunchAtLoginHelper (Bitgapp Ltd. - installed 2023-03-01) Modern Login Item /Applications/eqMac.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app Applications: 531 Apple apps 179 3rd party apps 48 x86-only apps 4 unsigned apps App Extensions: Finder sync extensions: [Not Loaded] Surfshark Finder Extension - /Applications/Surfshark.app [Loaded] FinderSyncExtension - /Applications/Google Drive.app/Contents/Applications/FinderHelper.app [Loaded] Adobe Content Synchronizer Finder Extension - /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app Audio units: [Loaded] SK-51AU - /Applications/SK-51.app Safari extensions: [Loaded] Safari Extension - /Applications/1Password for Safari.app [Loaded] Bitwarden - /Applications/Bitwarden.app File providers: [Loaded] Google Drive - /Applications/Google Drive.app [Loaded] MWDFileProvider - /Applications/MyWorkDrive.app QuickLook Previews: [Loaded] InDesign QuickLook Extension - /Applications/Adobe InDesign 2025/Adobe InDesign 2025.app com.adobe.indesign-document *.indd com.adobe.indesign-template *.indt [Loaded] EtreCheckQuickLook - /Applications/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck QuickLook Previews (legacy): QuickLookPlugin - /Applications/Transmission.app com.bittorrent.torrent org.bittorrent.torrent *.torrent OsiriXQuickLookPlugin - /Applications/OsiriX Lite.app public.img public.zip public.dcm public.data org.nema.dicom *.dcm public.lsm Internet Plug-ins: AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2024-09-20) Audio Plug-ins: eqMac: 2.4.3 (Bitgapp Ltd. - installed 2023-12-14) TVRemoteAudio: 1.0.1 (TeamViewer Germany GmbH - installed 2024-05-26) 3rd Party Preference panels: Backblaze Settings Launcher (Backblaze - installed 2024-02-09) Backup: Time Machine information is limited without Full Disk Access Performance: System Load: 2.59 (1 min ago) 3.30 (5 min ago) 3.77 (15 min ago) Nominal I/O usage: 1.86 MB/s File system: 33.33 seconds Write speed: 772 MB/s Read speed: 1444 MB/s CPU Usage Snapshot: Type Overall System: 11 % User: 13 % Idle: 76 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) bztransmit 17.88 % (Backblaze) EtreCheckPro 14.20 % (Etresoft, Inc.) bzfilelist 6.82 % (Backblaze) WindowServer 6.36 % (Apple) fseventsd 4.98 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheckPro 1014 MB (Etresoft, Inc.) bztransmit 863 MB (Backblaze) Dock 288 MB (Apple) mds_stores 240 MB (Apple) Google Drive (2) 238 MB (Google LLC) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) com.crowdstrike.falcon.Agent 729 KB / 7 MB (CrowdStrike Inc.) mDNSResponder 528 KB / 243 KB (Apple) apsd 116 KB / 217 KB (Apple) rapportd 237 KB / 10 KB (Apple) netbiosd 20 KB / 3 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) bztransmit 7 (Backblaze) WindowServer 4 (Apple) fseventsd 3 (Apple) mds_stores 2 (Apple) dataaccessd 2 (Apple) Virtual Memory Information: Physical RAM: 40 GB Free RAM: 16.00 GB Used RAM: 9.47 GB Cached files: 14.53 GB Available RAM: 30.53 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2024-12-03 Duo Desktop (7.2.0.0) 2024-12-10 ARMDCAgentInstaller (1.0.0) 2024-12-16 Google Drive (101.0.3.0) 2024-12-18 XProtectPlistConfigData (5284) 2024-12-18 XProtectPayloads (149) 2025-01-05 macOS 13.7.2 (13.7.2) 2025-01-05 MRTConfigData (1.93) 2025-01-07 Safari (18.2) 2025-01-14 CrowdStrike Falcon Sensor (7.20.18904.0) Clean up: /Library/LaunchDaemons/com.apple.installer.cleanupinstaller.plist /macOS Install Data/Locked Files/cleanup_installer Executable not found Diagnostics Information (past 60 days): 2025-01-14 10:25:34 Adobe Acrobat.app High CPU Use (2 times) First occurrence: 2025-01-14 10:20:50 Executable: /Applications/Adobe Acrobat DC/Adobe Acrobat.app 2025-01-12 16:22:37 fseventsd High CPU Use Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd 2025-01-11 14:31:18 Adobe Desktop Service Crash Executable: /Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app Details: libsystem_c.dylib: abort() called 2025-01-08 19:22:10 accountsd Crash Executable: /System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd 2025-01-08 16:39:53 Adobe Illustrator.app High CPU Use Executable: /Applications/Adobe Illustrator 2025/Adobe Illustrator.app End of report 2