EtreCheck version: 5.1 (5020) Report generated: 2018-12-30 11:42:12 Download EtreCheck from https://etrecheck.com Runtime: 2:30 Performance: Excellent Sandbox: Enabled Full drive access: Disabled Problem: Computer is restarting Major Issues: Anything that appears on this list needs immediate attention. Runaway process - A process is using a large percentage of your CPU. More than one antivirus app - This machine has multiple antivirus apps installed. Minor Issues: These issues do not need immediate attention but they may indicate future problems. Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed. System modifications - There are a large number of system modifications running in the background. Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance. 32-bit Apps - This machine has 32-bits apps that may have problems in the future. Abnormal shutdown - Your machine shut down abnormally. Limited drive access - More information may be available with Full Drive Access. Hardware Information: iMac (27-inch, Mid 2011) iMac Model: iMac12,2 1 3.4 GHz Intel Core i7 (i7-2600) CPU: 4-core 32 RAM - At maximum BANK 0/DIMM0 - 8 GB DDR3 1333 ok BANK 1/DIMM0 - 8 GB DDR3 1333 ok BANK 0/DIMM1 - 8 GB DDR3 1333 ok BANK 1/DIMM1 - 8 GB DDR3 1333 ok Video Information: AMD Radeon HD 6970M - VRAM: 2048 MB iMac 2560 x 1440 LCD-MONITOR 1680 x 1050 Drives: disk0 - Samsung SSD 850 EVO 1TB 1.00 TB (Solid State - TRIM: Yes) Internal SATA 6 Gigabit Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Container] 1000.00 GB disk2 [APFS Virtual drive] 1000.00 GB (Shared by 4 volumes) disk2s1 - M**********W (APFS) (Shared - 245.06 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared) disk2s4 - VM (APFS) [APFS VM] (Shared - 20 KB used) disk1 - ST6000NM0024-1HT17Z 6.00 TB (Mechanical - 7200 RPM) Internal SATA 6 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 - U***s (Journaled HFS+) 6.00 TB (5.22 TB used) disk4 - APPLE SD Card Reader 63.86 GB (SD Card) Internal USB 480 Mbit/s USB disk4s1 - C******C 63.85 GB (21.05 GB used) Mounted Volumes: disk1s2 - U***s 6.00 TB (780.48 GB free) Journaled HFS+ Mount point: /Volumes/U***s disk2s1 - M**********W 1000.00 GB (754.20 GB free) APFS Mount point: / disk2s4 - VM [APFS VM] (Shared - 20 KB used) APFS Mount point: /private/var/vm disk4s1 - C******C 63.85 GB (42.78 GB free) Mount point: /Volumes/C******C Network: Interface en0: Ethernet Proxy Auto Discovery Interface en5: iPhone Interface en6: iPad Interface en1: Wi-Fi 802.11 a/b/g/n Interface en4: Bluetooth PAN System Software: macOS High Sierra 10.13.6 (17G4015) Time since boot: Less than an hour Configuration Files: File /etc/sysctl.conf exists but not expected /etc/hosts - Count: 14 Security: System Status Gatekeeper Enabled System Integrity Protection Enabled Unsigned Files: Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper Details: Exact match found in the whitelist - probably OK Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist Executable: '~/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' --args -scheduled Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist Executable: /Library/Application Support/Citrix Receiver/ctxusbd Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.synology.SynoSIMBL.plist Executable: /Library/ScriptingAdditions/SynoCxtMenuSIMBL.osax/Contents/Resources/SynoCxtMenuSIMBL Agent.app/Contents/MacOS/SynoCxtMenuSIMBL Agent Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.amazon.music.plist Executable: /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist Executable: /Volumes/U***s/U***s/C***s/L*****y/A*****************t/S*****y/S**************r Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.divx.dms.agent.plist Executable: /Library/Application Support/DivX/DivXMediaServer.app/Contents/MacOS/DivXMediaServer Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.dropbox.DropboxMacUpdate.agent.plist Executable: /Volumes/U***s/U***s/C***s/L*****y/D*****x/D******************p/C******s/M***S/D**************e -check periodic Details: Exact match found in the whitelist - probably OK 32-bit Applications: 87 32-bit apps Kernel Extensions: /Applications/Hotspot Shield.app tun.kext (1.0) /Applications/Toast 11 Titanium/Spin Doctor.app Terminus.kext (4) /Applications/Toast 11 Titanium/Toast Titanium.app RoxioBluRaySupport.kext (1.1.6) TDIXController.kext (2.0) /Applications/VMware Fusion.app VMwareVMCI.kext (10.1.0) vmioplug.kext (10.1.0) vmnet.kext (10.1.0) vmmon.kext (10.1.0) /Library/Application Support/Citrix Receiver CitrixGUSB.kext (12.5.0 - SDK 10.9) /Library/Application Support/Malwarebytes/MBAM/Kext MB_MBAM_Protection.kext (3.6 - SDK 10.14) /Library/Extensions LittleSnitch.kext (4.2.4 - SDK 10.11) klif.kext (3.0.4a41) klnke.kext (1.6) usbserial.kext (1.1.1 - SDK 10.9) /System/Library/Extensions ComputerAudioCapture.kext (1.0.0 - SDK 10.8) System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 168 Apple tasks [Running] 110 Apple tasks System Launch Daemons: [Not Loaded] 36 Apple tasks [Loaded] 187 Apple tasks [Running] 113 Apple tasks Launch Agents: [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2018-11-10) [Loaded] com.divx.update.agent.plist (? a041d049 - installed 2016-04-13) [Running] com.brother.LOGINserver.plist (? a1772de2 - installed 2016-10-17) [Running] com.synology.SynoSIMBL.plist (? bba1eb5c - installed 2015-11-24) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-12-13) [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2018-12-19) [Running] com.citrix.ServiceRecords.plist (? 8e6543d - installed 2017-02-01) [Running] com.citrix.ReceiverHelper.plist (? bbfad3f1 - installed 2017-02-01) [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2018-10-19) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18) [Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-12-12) [Loaded] com.divx.dms.agent.plist (? bf9bdaf7 - installed 2016-05-31) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-12-07) [Running] com.citrix.AuthManager_Mac.plist (? 1ce99fae - installed 2017-02-01) [Running] at.obdev.LittleSnitchHelper.plist (Objective Development Software GmbH - installed 2018-12-12) [Running] at.obdev.LittleSnitchUIAgent.plist (Objective Development Software GmbH - installed 2018-12-12) [Loaded] com.synology.SynoSIMBL_RefreshFinder.plist (Apple - installed 2017-10-03) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-12-19) Launch Daemons: [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-12-11) [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-11-29) [Loaded] com.cyberghostsrl.CyberghostPrivilegedHelper.plist (Cyberghost SRL - installed 2017-09-17) [Loaded] com.apple.aelwriter.plist (Apple - installed 2012-06-30) [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25) [Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2017-02-01) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-12-07) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-10-19) [Loaded] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2018-11-10) [Loaded] com.bombich.ccchelper.plist (? c6624472 - installed 2016-06-19) [Loaded] com.nordvpn.NordVPN.Helper.plist (TEFINKOM