EtreCheck version: 5.6.2 (5220) Report generated: 2020-10-28 14:11:21 Download EtreCheck from https://etrecheck.com Runtime: 3:36 Performance: Good Sandbox: Enabled Full drive access: Disabled Problem: Apps are crashing Description: Finder frequently hangs Major Issues: Anything that appears on this list needs immediate attention. Runaway process - A process is using a large percentage of your CPU. Adware - Adware detected. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. SSD too slow - SSD is showing poor performance. Configuration profiles found - This computer may have configuration profiles installed. These are sometimes used by adware and malware. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Vintage hardware - This computer may be considered vintage. 32-bit Apps - This computer has 32-bits apps will not work on current versions of the operating system. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: iMac (27-inch, Late 2012) - Vintage! iMac Model: iMac13,2 3.2 GHz Quad-Core Intel Core i5 (i5-3470) CPU: 4-core 24 RAM - Upgradeable BANK 0/DIMM0 - 8 GB DDR3 1333 BANK 1/DIMM0 - Empty BANK 0/DIMM1 - 8 GB DDR3 1333 BANK 1/DIMM1 - 8 GB DDR3 1333 Video Information: NVIDIA GeForce GTX 675MX - VRAM: 1 GB iMac 2560 x 1440 Drives: disk0 - APPLE SSD SM128E 121.33 GB (Solid State - TRIM: Yes) Internal SATA 6 Gigabit Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Fusion Drive] 121.12 GB disk2 [APFS Virtual drive] 1.12 TB (Shared by 5 volumes) disk2s1 - M************ - Data (APFS) [APFS Virtual drive] (Shared - 991.59 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared - 526 MB used) disk2s4 - VM (APFS) [APFS VM] (Shared - 1 MB used) disk2s5 - M**********D (APFS) (Shared - 11.37 GB used) disk1 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM) Internal SATA 3 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 [APFS Fusion Drive] 1000.00 GB disk2 [APFS Virtual drive] 1.12 TB (Shared by 5 volumes) disk2s1 - M************ - Data (APFS) [APFS Virtual drive] (Shared - 991.59 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared - 526 MB used) disk2s4 - VM (APFS) [APFS VM] (Shared - 1 MB used) disk2s5 - M**********D (APFS) (Shared - 11.37 GB used) disk3 - LaCie P9223 2.00 TB External USB 5 Gbit/s USB disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 - i*************b (Mac OS Extended (Case-sensitive, Journaled)) 2.00 TB (1.90 TB used) Mounted Volumes: disk2s1 - M************ - Data [APFS Virtual drive] 1.12 TB (Shared - 991.59 GB used, 166.67 GB available, 108.63 GB free) APFS Mount point: /System/Volumes/Data disk2s3 - Recovery [Recovery] 1.12 TB (Shared - 526 MB used, 108.63 GB free) APFS Mount point: /Volumes/Recovery disk2s4 - VM [APFS VM] 1.12 TB (Shared - 1 MB used, 108.63 GB free) APFS Mount point: /private/var/vm disk2s5 - M**********D 1.12 TB (Shared - 11.37 GB used, 166.67 GB available, 108.63 GB free) APFS Mount point: / Read-only: Yes disk3s2 - i*************b 2.00 TB (1.90 TB used, 102.36 GB available, 102.30 GB free) Mac OS Extended (Case-sensitive, Journaled) Mount point: /Volumes/i*************b Network: Interface usbmodem1411: Andy's Piano Pedals 2 Interface usbmodemMID1: Andy's Piano Pedals Interface wchusbserial1410: USB2.0-Serial Interface usbserial-A9EDAE1Z: FT232R USB UART Interface wchusbserial1420: USB2.0-Serial 2 Interface usbmodem14100: MT65xx Preloader Interface en0: Ethernet Interface en1: Wi-Fi Interface en4: Bluetooth PAN Interface bridge0: Thunderbolt Bridge System Software: macOS Catalina 10.15.7 (19H2) Time since boot: About 2 hours Configuration Profiles: This computer may have configuration profiles installed. Notifications: Notifications not available without Full Drive Access. Security: Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus software: Apple and Sophos Adware: Launchd: /Library/LaunchDaemons/com.apple.dandan.plist Executable: /Library/dandan Reason: Adware pattern match Launchd: /Library/LaunchDaemons/com.apple.rothl.plist Executable: /Library/rothl Reason: Adware pattern match Launchd: /Library/LaunchDaemons/com.apple.builing.plist Executable: /Library/builing Reason: Adware pattern match Launchd: /Library/LaunchDaemons/com.apple.pertino.plist Executable: /Library/pertino Reason: Adware pattern match Launchd: /Library/LaunchDaemons/com.apple.yerrack.plist Executable: /Library/yerrack Reason: Adware pattern match Launchd: /Library/LaunchDaemons/com.apple.etiao.plist Executable: /Library/etiao Reason: Adware pattern match Unsigned Files: Launchd: /Library/LaunchDaemons/com.skype.skypeinstaller.plist Executable: /Library/PrivilegedHelperTools/com.skype.skypeinstaller Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.mysql.server.plist Executable: /bin/sh /usr/local/mysql/support-files/mmv-start.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.oracle.oss.mysql.mysqld.plist Executable: /usr/local/mysql/bin/mysqld --user=_mysql --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data --plugin-dir=/usr/local/mysql/lib/plugin --log-error=/usr/local/mysql/data/mysqld.local.err --pid-file=/usr/local/mysql/data/mysqld.local.pid Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/phonostarTimer.plist Executable: /Library/PrivilegedHelperTools/phonostarTimer Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.intego.commonservices.taskmanager.plist Executable: /Library/Intego/TaskManager/TM_Notifier.app/Contents/MacOS/TM_Notifier Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.intego.commonservices.icalserver.plist Executable: /Library/Intego/IntegoiCalServer Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MAIRUploader.plist Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpload Details: Executable file is not accessible without Full Drive Access Launchd: ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MUpdate.plist Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/ed.is.XeroxWatchman.plist Executable: /Library/MacMDP/Scripts/XeroxWatchman.sh Details: Exact match found in the legitimate list - probably OK Running app: /Library/yklytoilehyy/yklytoilehyy Running app: /Library/shrillish/dZvQeyOD/nLMUpauU/TmzUPYNt/wdtCwAEi/ropewalker-Alpen Running app: /Library/wvhrgxvudzyr/wvhrgxvudzyr Running app: /Library/aqoddyqhbspy/aqoddyqhbspy Running app: /Library/zHFXuxec/zHFXuxec.app/Contents/MacOS/zHFXuxec Running app: /Library/uwlnpkgjgjne/uwlnpkgjgjne Running app: /Library/erwwegewusar/erwwegewusar Login Item: /Applications/SyncMate.app/Contents/Library/LoginItems/SyncMateService.app Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin Plugin: /Library/Internet Plug-Ins/Flash Player.plugin/Flash Player.plugin/Contents/PlugIns/FlashPlayer-10.6.plugin Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin Preference Pane: /Library/PreferencePanes/MySQL.prefPane Apps: 21 32-bit Applications: 37 32-bit apps Kernel Extensions: /Applications/Wondershare Free Video Converter.app SystemAudioRecorder.kext (1.1.0 - SDK 10.6) /Library/Extensions Soundflower.kext (2.0b2 - SDK 10.10) SophosFileProtection.kext (9.9.4 - SDK 10.14) SophosWebProtection.kext (9.9.4 - SDK 10.14) usbserial.kext (1.1.1 - SDK 10.9) System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 171 Apple tasks [Running] 125 Apple tasks System Launch Daemons: [Not Loaded] 33 Apple tasks [Loaded] 180 Apple tasks [Running] 124 Apple tasks [Other] One Apple task Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2020-08-28) [Other] com.archhumbug.io.plist (? 6692a0d1 - installed 2017-11-04) [Running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (Seiko Epson Corporation - installed 2019-09-25) [Loaded] com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2019-07-24) [Running] com.epson.eventmanager.agent.plist (Seiko Epson Corporation - installed 2019-10-03) [Running] com.epson.scannermonitor.plist (Seiko Epson Corporation - installed 2019-08-18) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-10-14) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-10-14) [Other] com.intego.commonservices.integomenu.plist (? 65446fbf - installed 2013-12-13) [Loaded] com.intego.commonservices.taskmanager.plist (? f6ef294 - installed 2013-11-12) [Other] com.intego.commonservices.uninstaller.plist (? 98ad168c - installed 2013-12-04) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2020-10-19) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2020-10-14) [Not Loaded] com.ropewalker-Alpen.plist (? 0 - installed 2017-05-06) [Running] com.sophos.agent.plist (Sophos - installed 2019-09-19) [Running] com.sophos.home.ui.plist (Sophos - installed 2020-10-16) Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2020-07-15) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2020-07-15) [Loaded] com.adobe.fpsaud.plist (Adobe Inc. - installed 2020-09-26) [Other] com.apple.builing.plist (Adware - installed 2017-05-04) [Other] com.apple.dandan.plist (Adware - installed 2017-05-04) [Other] com.apple.etiao.plist (Adware - installed 2017-05-03) [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-09-19) [Other] com.apple.pertino.plist (Adware - installed 2017-11-02) [Other] com.apple.rothl.plist (Adware - installed 2017-05-03) [Other] com.apple.yerrack.plist (Adware - installed 2017-11-02) [Not Loaded] com.aqoddyqhbspy.plist (? 0 - installed 2017-05-03) [Running] com.backblaze.bzserv.plist (Backblaze - installed 2020-08-31) [Not Loaded] com.erwwegewusar.plist (? 0 - installed 2017-05-04) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2020-10-14) [Other] com.intego.commonservices.daemon.integod.plist (? db610625 - installed 2013-11-12) [Other] com.intego.commonservices.daemon.taskmanager.plist (? 1cb4eccf - installed 2013-11-12) [Loaded] com.intego.commonservices.icalserver.plist (? d4ed509f - installed 2013-11-12) [Other] com.intego.commonservices.metrics.kschecker.plist (? 738eb69 - installed 2013-11-12) [Not Loaded] com.lwzcvnfgoltm.plist (? 0 - installed 2017-05-04) [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2020-10-19) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-10-14) [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2012-04-02) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-01-17) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2020-07-28) [Not Loaded] com.mysql.server.plist (? 5df0b120 - installed 2020-09-22) [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed ) [Loaded] com.oracle.oss.mysql.mysqld.plist (? 84348a6e - installed 2016-05-21) [Loaded] com.skype.skypeinstaller.plist (? a81aef1d - installed 2018-11-05) [Running] com.sophos.common.servicemanager.plist (Sophos - installed 2019-12-09) [Not Loaded] com.uwlnpkgjgjne.plist (? 0 - installed 2017-11-02) [Not Loaded] com.wvhrgxvudzyr.plist (? 0 - installed 2017-11-02) [Not Loaded] com.yklytoilehyy.plist (? 0 - installed 2017-05-03) [Not Loaded] com.zHFXuxec.plist (? 0 - installed 2017-05-03) [Loaded] ed.is.XeroxWatchman.plist (? 7ee00b99 - installed 2016-09-22) [Loaded] phonostarTimer.plist (? 3dc6f215 - installed 2016-12-23) User Launch Agents: [Running] com.backblaze.bzbmenu.plist (Backblaze - installed 2020-10-28) [Running] com.hp.devicemonitor.plist (HP Inc. - installed 2020-10-28) [Running] com.hp.productresearch.plist (HP Inc. - installed 2020-10-28) [Loaded] com.logmein.GoToMeeting.G2MAIRUploader.plist (? 0 - installed 2020-07-30) [Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (? 0 - installed 2020-07-30) User Login Items: [Not Loaded] AlarmClockHelper (App Store - installed 2016-02-11) Modern Login Item /Applications/Alarm Clock.app/Contents/Library/LoginItems/AlarmClockHelper.app [Running] Evernote Helper (Evernote - installed 2019-12-10) Modern Login Item /Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app [Not Loaded] EvernoteLauncher (Evernote - installed 2019-12-10) Modern Login Item /Applications/Evernote.app/Contents/Library/LoginItems/EvernoteLauncher.app [Not Loaded] LoginHelper (App Store - installed 2020-02-15) Modern Login Item /Applications/Go for Instagram.app/Contents/Library/LoginItems/LoginHelper.app [Not Loaded] Messenger Login Helper (App Store - installed 2020-10-20) Modern Login Item /Applications/Messenger.app/Contents/Library/LoginItems/Messenger Login Helper.app [Not Loaded] Launcher (App Store - installed 2020-10-09) Modern Login Item /Applications/Notebook.app/Contents/Library/LoginItems/Launcher.app [Not Loaded] NotebookHelper (App Store - installed 2020-10-09) Modern Login Item /Applications/Notebook.app/Contents/Library/LoginItems/NotebookHelper.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2020-10-18) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2020-10-18) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] Pushbullet Notifications (App Store - installed 2015-04-07) Modern Login Item /Applications/Pushbullet.app/Contents/Library/LoginItems/Pushbullet Notifications.app [Not Loaded] Slack Login Helper (App Store - installed 2020-10-25) Modern Login Item /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app [Not Loaded] SyncFoldersProStartAtLogin (App Store - installed 2020-09-17) Modern Login Item /Applications/Sync Folders.app/Contents/Library/LoginItems/SyncFoldersProStartAtLogin.app [Not Loaded] SyncMateService (? - installed 2014-12-23) Modern Login Item /Applications/SyncMate.app/Contents/Library/LoginItems/SyncMateService.app [Not Loaded] WhatsApp Login Helper (App Store - installed 2020-10-23) Modern Login Item /Applications/WhatsApp.localized/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app [Not Loaded] dooLoginHelper (App Store - installed 2014-02-10) Modern Login Item /Applications/doo.app/Contents/Library/LoginItems/dooLoginHelper.app [Not Loaded] PhotoStreamAgent (App Store - installed 2015-10-23) Modern Login Item /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2020-02-05) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Not Loaded] HP Product Research (HP Inc. - installed 2020-02-05) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app Internet Plug-ins: Silverlight: 5.1.50709.0 (? - installed 2016-09-21) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2017-12-07) AdobePDFViewer: 18.009.20050 (Adobe Systems, Inc. - installed 2017-12-07) Flash Player: 32.0.0.445 (? - installed 2020-10-13) FlashPlayer-10.6: 32.0.0.445 (? - installed 2020-10-13) SharePointBrowserPlugin: 14.7.7 (? - installed 2017-11-10) User Internet Plug-ins: User Internet Plug-ins need Full Drive Access User Audio Plug-ins: User Audio Plug-ins need Full Drive Access User iTunes Plug-ins: User iTunes Plug-ins need Full Drive Access Safari Extensions: Notebook Web Clipper (App Store - installed 2020-10-09) 3rd Party Preference Panes: Backblaze Backup (Backblaze - installed 2020-08-31) Flash Player (Adobe Inc. - installed 2020-09-26) MySQL (? - installed 2016-02-02) Backup: Time Machine information not available without Full Drive Access. 7 local snapshots Oldest local snapshot: 2020-10-25 13:57:05 Last local snapshot: 2020-10-28 11:57:05 Performance: System Load: 4.33 (1 min ago) 3.34 (5 min ago) 2.82 (15 min ago) Nominal I/O speed: 5.46 MB/s File system: 34.31 seconds Write speed: 99 MB/s Read speed: 267 MB/s CPU Usage Snapshot: Type Overall System: 12 % User: 29 % Idle: 59 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Other processes 112.08 % (?) Mail 17.84 % (Apple) trustd 17.66 % (Apple) firefox 7.95 % (Mozilla Corporation) EtreCheck 6.52 % (App Store) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheck 601 MB (App Store) firefox 450 MB (Mozilla Corporation) Photos 325 MB (Apple) Mail 325 MB (Apple) Microsoft Word 237 MB (Microsoft Corporation) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Mail 3 MB / 847 KB (Apple) Other processes 2 MB / 576 KB (?) OneDrive 34 KB / 9 KB (Microsoft Corporation) rapportd 2 KB / 1 KB (Apple) spindump_agent 0 B / 0 B (Apple) Virtual Memory Information: Physical RAM: 24 GB Free RAM: 2.07 GB Used RAM: 9.60 GB Cached files: 12.33 GB Available RAM: 14.40 GB Swap Used: 0 B Software Installs (past 30 days): Install Date Name (Version) 2020-10-07 Paint S (5.7.18) 2020-10-07 Valentina Studio (10.5.2) 2020-10-07 iMovie (10.1.16) 2020-10-08 Simplenote (2.2) 2020-10-09 Notebook (4.3.11) 2020-10-13 Adobe Flash Player 2020-10-13 Microsoft Outlook 2020-10-13 Microsoft OneNote 2020-10-13 Microsoft PowerPoint 2020-10-13 Microsoft Excel 2020-10-14 Microsoft AutoUpdate 2020-10-14 Microsoft Word 2020-10-15 macOS Catalina 10.15.7 Update 2020-10-15 Gatekeeper Compatibility Data (1.0) 2020-10-16 AudioNote 2 LITE- Notepad and Voice Recorder (6.5) 2020-10-18 Microsoft OneDrive 2020-10-20 XProtectPlistConfigData (2133) 2020-10-20 MRTConfigData (1.68) 2020-10-20 Messenger (73.2.121) 2020-10-21 Duplicate File Finder (6.9) 2020-10-21 Xcode (12.1) 2020-10-23 Kindle (1.30.0) 2020-10-23 WhatsApp (2.2041.7) 2020-10-23 Fotor Photo Editor (3.6.1) 2020-10-25 Photos Duplicate Cleaner (2.3) 2020-10-25 Slack (4.10.3) 2020-10-27 Duplicate Photos Fixer Pro (2.18) 2020-10-27 Red Hot Timer (2.3) 2020-10-28 EtreCheck (5.6.2) Clean up: /Library/LaunchDaemons/com.intego.commonservices.daemon.integod.plist /Library/Intego/integod Executable not found /Library/LaunchDaemons/com.intego.commonservices.daemon.taskmanager.plist /Library/Intego/TaskManager/TaskManagerDaemon Executable not found /Library/LaunchAgents/com.archhumbug.io.plist /Library/archhumbug.io/archhumbug.io.app/Contents/MacOS/archhumbug.io Executable not found /Library/LaunchAgents/com.intego.commonservices.uninstaller.plist /Library/Intego/Intego Uninstaller.app/Contents/MacOS/Intego Uninstaller Executable not found /Library/LaunchAgents/com.intego.commonservices.integomenu.plist /Library/Intego/commonservices.bundle/Contents/MacOS/IntegoMenu.app/Contents/MacOS/IntegoMenu Executable not found /Library/LaunchDaemons/com.intego.commonservices.metrics.kschecker.plist /Library/Intego/im_ks_tool Executable not found Diagnostics Information (past 7-30 days): Directory /Library/Logs/DiagnosticReports is not accessible. Enable Full Drive Access to see more information. End of report