EtreCheckPro version: 6.8.1 (68024)
Report generated: 2023-08-01 08:26:13
Download EtreCheckPro from https://etrecheck.com
Runtime: 3:22
Performance: Excellent

Problem: Other problem
Description: 
computer is freezing. There is also a Malwarebytes protection that has
 been on the past few months. Not sure how that got here.

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  System modifications - There are a large number of system modifications running in the background.
  Limited permissions - More information may be available with Full Disk Access.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.
  Sharing enabled - This computer has sharing services enabled that could be a security risk.

Hardware Information:
  iMac (Retina 5K, 27-inch, 2019)
    Status: Supported
  iMac Model: iMac19,1
  3.1 GHz 6-Core Intel Core i5 (i5-8600) CPU: 6-core
  8 GB RAM - Upgradeable
    BANK 0/ChannelA-DIMM0 - 4 GB DDR4 2667  
    BANK 1/ChannelA-DIMM1 - Empty   
    BANK 2/ChannelB-DIMM0 - 4 GB DDR4 2667  
    BANK 3/ChannelB-DIMM1 - Empty   

Video Information:
  Radeon Pro 575X - VRAM: 4 GB
    iMac (built-in) 3200 x 1800

Drives:
  disk0 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM) 
  Internal SATA 6 Gigabit Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Fusion Drive] 1000.00 GB
      disk2 [APFS Virtual drive] 1.03 TB (Shared by 6 volumes)
        disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (522.32 GB used)
        disk2s2 - Preboot (APFS) [APFS Preboot] (1.87 GB used)
        disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used)
        disk2s4 - VM (APFS) [APFS VM] (2.15 GB used)
        disk2s5 (APFS) [APFS Container] (9.17 GB used)
          disk2s5s1 - Macintosh HD (APFS) [APFS Snapshot] (9.17 GB used)
        disk2s6 - Update (APFS) (11 MB used)

  disk1 - APPLE SSD SM0032L 28.00 GB (Solid State - TRIM: Yes) 
  Internal PCI-Express 8.0 GT/s x2 NVM Express
    disk1s1 - EFI [EFI] 315 MB
    disk1s2 [APFS Fusion Drive] 27.55 GB
      disk2 [APFS Virtual drive] 1.03 TB (Shared by 6 volumes)
        disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (522.32 GB used)
        disk2s2 - Preboot (APFS) [APFS Preboot] (1.87 GB used)
        disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used)
        disk2s4 - VM (APFS) [APFS VM] (2.15 GB used)
        disk2s5 (APFS) [APFS Container] (9.17 GB used)
          disk2s5s1 - Macintosh HD (APFS) [APFS Snapshot] (9.17 GB used)
        disk2s6 - Update (APFS) (11 MB used)

  disk3 - Seagate BUP Slim Mac SL 1.00 TB
  External USB 5 Gbit/s USB
    disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk3s2 - R********************e (Journaled HFS+) 999.86 GB (834.64 GB used)

Mounted Volumes:
  disk2s1 - Macintosh HD - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Fusion drive
    Used: 522.32 GB
    Shared values
      Size: 1.03 TB
      Free: 486.33 GB
      Available: 523.07 GB

  disk2s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Fusion drive
    Used: 1.87 GB
    Shared values
      Size: 1.03 TB
      Free: 486.33 GB

  disk2s4 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Fusion drive
    Used: 2.15 GB
    Shared values
      Size: 1.03 TB
      Free: 486.33 GB

  disk2s5s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Fusion drive
    Read-only: Yes
    Used: 9.17 GB
    Shared values
      Size: 1.03 TB
      Free: 486.33 GB
      Available: 523.07 GB

  disk2s6 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Fusion drive
    Used: 11 MB
    Shared values
      Size: 1.03 TB
      Free: 486.33 GB

  disk3s2 - R********************e
    Filesystem: Journaled HFS+
    Mount point: /Volumes/R********************e
    Used: 834.64 GB
    Size: 999.86 GB
    Free: 165.22 GB
    Available: 165.37 GB

Network:
  Interface en0: Ethernet
  Interface en1: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en5: iPhone
  Interface bridge0: Thunderbolt Bridge

  Screen sharing: Enabled
  Remote login: Enabled

System Software:
  macOS Ventura 13.5 (22G74) 
  Time since boot: Less than an hour

Notifications:
  Quicken 2019.app
    one notification

  Day One Helper.app
    one notification

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple and Malwarebytes

  Screen sharing: Enabled
  Remote login: Enabled

Unsigned Files:
  Launchd: ~/Library/LaunchAgents/com.myheritage.familytreebuilder.checkupdates.plist
    Command: /usr/bin/open -b com.myheritage.familytreebuilder.checkupdates
    Details: Exact match found in the legitimate list - probably OK

  Apps: 1

Applications:
  508 apps
  72 x86-only apps
  3 unsigned apps

Kernel Extensions:
  /Applications/Toolkit.app
    [Not Loaded] SeagateDiskService.kext - com.seagate.IOSED01 (51.0 - SDK 10.10)

  /Library/Extensions
    [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0)

  /Users/Shared/Apowersoft/Mac Online Launcher/Mac Online Launcher.app
    [Not Loaded] Apowersoft_AudioDevice.kext - com.Apowersoft.driver.AudioDevice (1.6.7 - SDK 10.11)
    [Not Loaded] SystemSound.kext - com.Cycling74.driver.Soundflower (1.0.0 - SDK 10.8)

System Launch Daemons:
  [Not Loaded]  37 Apple tasks
  [Loaded]  199 Apple tasks
  [Running]  151 Apple tasks
  [Other]  3 Apple tasks

System Launch Agents:
  [Not Loaded]  22 Apple tasks
  [Loaded]  205 Apple tasks
  [Running]  170 Apple tasks

Launch Daemons:
  [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2023-07-11)
    Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator

  [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2023-07-11)
    Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper

  [Not Loaded] com.fitbit.galileod.plist (Fitbit, Inc. - installed 2021-01-13)
    Executable: /Library/Application Support/Fitbit Connect/galileod

  [Loaded] com.google.keystone.daemon.plist (Google LLC - installed 2022-10-26)
    Executable: /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateDaemon

  [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2023-06-24)
    Command: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon -i 42AA1898-1687-4FE6-A3D9-CFDAA2A70CB4.pkg

  [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2023-06-21)
    Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon

  [Not Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-01-11)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper

  [Not Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2020-01-11)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper

  [Loaded] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2020-01-11)
    Executable: /Library/PrivilegedHelperTools/com.paragon-software.installer

  [Other] com.paragon-software.ntfs.loader.plist (Not signed - installed 2017-09-15)
    Command: /sbin/kextload /Library/Extensions/ufsd_NTFS.kext

  [Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2020-01-11)
    Executable: /Library/Application Support/Paragon Software/com.paragon-software.ntfsd

  [Not Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2023-06-29)
    Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon

Launch Agents:
  [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2023-07-11)
    Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper

  [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-10-26)
    Command: /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded

  [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-26)
    Command: /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost

  [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2023-06-21)
    Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent

  [Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-09-15)
    Executable: /Library/Application Support/Paragon Software/com.paragon-software.ntfs.notification-agent.app/Contents/MacOS/NotificationAgent

User Launch Agents:
  [Not Loaded] com.logmein.GoToMeeting.G2MAIRUploader.plist (LogMeIn, Inc. - installed 2022-03-23)
    Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpload

  [Not Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (LogMeIn, Inc. - installed 2022-03-23)
    Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate

  [Loaded] com.myheritage.familytreebuilder.checkupdates.plist (Not signed - installed 2018-07-25)
    Command: /usr/bin/open -b com.myheritage.familytreebuilder.checkupdates

  [Running] com.seagate.toolkit.plist (Seagate Technologies LLC - installed 2023-06-15)
    Command: /Applications/Toolkit.app/Contents/MacOS/Toolkit -runMode autoLaunched

User Login Items:
  [Not Loaded] LoginHelper (App Store - installed 2020-01-11)
    Modern Login Item
    /Applications/Apps/App for Facebook.app/Contents/Library/LoginItems/LoginHelper.app

  [Running] Day One Helper (App Store - installed 2023-07-19)
    Modern Login Item
    /Applications/Day One.app/Contents/Library/LoginItems/Day One Helper.app

  [Not Loaded] DesktopClockFreeHelper (App Store - installed 2019-02-23)
    Modern Login Item
    /Applications/Desktop Clock free.app/Contents/Library/LoginItems/DesktopClockFreeHelper.app

  [Loaded] Fitbit Connect Menubar Helper (Fitbit, Inc. - installed 2021-01-13)
    Application
    /Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app

  [Loaded] Launch Nikon Message Center 2 (NIKON CORPORATION - installed 2021-04-24)
    Application
    /Applications/Nikon Software/Nikon Message Center 2/Nikon Message Center 2.app/Contents/SharedSupport/Launch Nikon Message Center 2.app

  [Not Loaded] appflixprohelper (App Store - installed 2017-11-25)
    Modern Login Item
    /Applications/Streaming.app/Contents/Library/LoginItems/appflixprohelper.app

  [Not Loaded] HP Device Monitor (HP Inc. - installed 2020-01-11)
    Modern Login Item
    /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app

  [Loaded] Mail (Apple - installed 2023-07-11)
    Application
    /System/Applications/Mail.app

App Extensions:
  Safari extensions:
    LastPass - /Applications/LastPass.app
    Day One - /Applications/Day One.app
    Capital One Shopping - /Applications/Capital One Shopping.app

  Plugins:
    DOIntents - /Applications/Day One.app

  Share services:
    Day One - /Applications/Day One.app

  Widgets:
    DOWidgets - /Applications/Day One.app

  QuickLook Previews:
    EtreCheckQuickLook - ~/Applications/EtreCheckPro.app
      com.etresoft.etrecheck4 *.etrecheck

  QuickLook Previews (legacy):
    QuickLookGenerator - /Applications/Swift Publisher 5.app
      com.belightsoft.swiftpublisherdocument *.spub
    AlbumWALK - /Applications/Family Tree Maker 2019.app
      com.mackiev.alpha.story *.tap
    EtreCheckProQL - /Applications/EtreCheckPro.app
      com.etresoft.etrecheck4 *.etrecheck

Internet Plug-ins:
  AdobePDFViewer: 20.006.20042 (Adobe Systems, Inc. - installed 2020-03-12)
  AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2020-03-12)

Audio Plug-ins:
  ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2022-02-16)

3rd Party Preference panels:
  NTFS (Paragon Software GmbH - installed 2017-09-15)
  Toolkit (Seagate Technologies LLC - installed 2023-07-05)

Backup:
  Time Machine information is limited without Full Disk Access
  Destinations: 
    R********************e [Local] (Last used)
  2 local snapshots
  Oldest local snapshot: 2023-07-30 12:02:07
  Last local snapshot: 2023-07-31 18:33:51

Performance:
  System Load: 2.17 (1 min ago) 1.57 (5 min ago) 0.85 (15 min ago)
  Nominal I/O usage: 6.95 MB/s
  File system: 18.49 seconds
  Write speed: 738 MB/s
  Read speed: 1482 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 3 %
  User: 3 %
  Idle: 94 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  Activity Monitor 11.60 % (Apple)
  mdbulkimport (2) 11.52 % (Apple)
  WindowServer 10.00 % (Apple)
  EtreCheckPro 6.38 % (Etresoft, Inc.)
  kernel_task 3.45 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheckPro 857 MB (Etresoft, Inc.)
  Safari 172 MB (Apple)
  Finder 137 MB (Apple)
  WindowServer 127 MB (Apple)
  Spotlight 118 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 215 KB / 117 KB (Apple)
  trustd 111 KB / 17 KB (Apple)
  apsd 14 KB / 91 KB (Apple)
  rapportd 10 KB / 21 KB (Apple)
  Notes 10 KB / 5 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  WindowServer 5 (Apple)
  Activity Monitor 1 (Apple)
  mds_stores 1 (Apple)
  bluetoothd 0 (Apple)
  RTProtectionDaemon 0 (Malwarebytes Corporation)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 33 MB
  Used RAM: 4.63 GB
  Cached files: 3.34 GB

  Available RAM: 3.37 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2023-06-14 Pages (13.1)
  2023-06-14 Keynote (13.1)
  2023-06-14 Numbers (13.1)
  2023-06-22 1Password for Safari (2.12.0)
  2023-06-22 macOS 13.4.1 (13.4.1)
  2023-06-24 Malwarebytes for Mac (1.0)
  2023-06-26 Mimeo Photos (5.3.1)
  2023-06-27 Adobe Acrobat Reader (23.003.20215) (23.003.20215)
  2023-06-29 Zoom (5.14.10.19202)
  2023-07-03 Capital One Shopping (1.0.45)
  2023-07-07 XProtectPlistConfigData (2169)
  2023-07-11 ARMDC Agent Installer (1.0.0)
  2023-07-13 macOS Rapid Security Response 13.4.1 (c) (13.4.1 (c))
  2023-07-13 Adobe Acrobat Reader (23.003.20244) (23.003.20244)
  2023-07-19 Day One (2023.14)
  2023-07-21 XProtectPayloads (105)
  2023-07-25 macOS 13.5 (13.5)

Clean up:
  /Library/LaunchDaemons/com.paragon-software.ntfs.loader.plist
    /Library/Extensions/ufsd_NTFS.kext
    Executable not found

Diagnostics Information (past 7-30 days):
  2023-07-31 20:47:37 knowledge-agent High CPU Use (6 times)
    Executable: /usr/libexec/knowledge-agent

  2023-07-30 19:31:19 intelligenceplatformd High CPU Use (2 times)
    Executable: /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/Versions/A/intelligenceplatformd

  2023-07-30 18:27:27 Preview.app Hang
    Executable: /System/Applications/Preview.app

  2023-07-30 13:38:44 com.apple.WebKit.Networking High CPU Use
    Executable: /Volumes/VOLUME/*/W**************k/V******s/A/X*********s/c*****************************c/C******s/M***S/c*************************g

  2023-07-28 10:38:59 signpost_reporter High CPU Use (4 times)
    Executable: /usr/libexec/signpost_reporter

  2023-07-28 02:04:23 com.apple.WebKit.WebContent High CPU Use (2 times)
    Executable: /Volumes/VOLUME/*/W**************k/V******s/A/X*********s/c*****************************c/C******s/M***S/c*************************t


End of report