EtreCheckPro version: 6.8.12 (68084) Report generated: 2025-09-24 10:51:51 Download EtreCheckPro from https://etrecheck.com Runtime: 3:31 Performance: Good Problem: Computer is too slow Major Issues: Anything that appears on this list needs immediate attention. No Time Machine backup - Time Machine backup not found. Low disk space - This computer is running critically low on free hard drive space. Orphan system extension - A system extension has not been properly uninstalled. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Configuration profiles found - This computer may have configuration profiles installed. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Air (15-inch, M2, 2023) Status: Supported MacBook Air Model: Mac14,15 Apple M2 (m2) CPU: 8-core 8 GB RAM - Not upgradeable Battery: Health = Normal - Cycle count = 391 Video Information: Apple M2 Color LCD 3840 x 2486 Drives: disk0 - APPLE SSD AP0256Z 251.00 GB (Solid State - TRIM: Yes) Internal Apple Fabric NVM Express S.M.A.R.T. Details: 3% used, 45.72 TB written, 100% health, 13 unsafe shutdowns disk0s1 [APFS Container] 524 MB disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes) disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used) disk1s2 - xART (APFS) (6 MB used) disk1s3 - Hardware (APFS) (2 MB used) disk1s4 - Recovery (APFS) [Recovery] (20 KB used) disk0s2 [APFS Container] 245.11 GB disk3 [APFS Virtual drive] 245.11 GB (Shared by 6 volumes) disk3s1 (APFS) [APFS Container] (12.73 GB used) disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (12.73 GB used) disk3s2 - Preboot (APFS) [APFS Preboot] (7.90 GB used) disk3s3 - Recovery (APFS) [Recovery] (1.27 GB used) disk3s4 - Update (APFS) (31 MB used) disk3s5 - Macintosh HD - Data (APFS) [APFS Virtual drive] (182.84 GB used) disk3s6 - VM (APFS) [APFS VM] (4.30 GB used) disk0s3 [APFS Container] 5.37 GB disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes) disk2s1 - Recovery (APFS) [Recovery] (2.09 GB used) disk2s2 - Update (APFS) (3 MB used) Mounted Volumes: disk1s1 - iSCPreboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/iSCPreboot Used: 6 MB Shared values Size: 524 MB Free: 505 MB disk1s2 - xART Filesystem: APFS Mount point: /System/Volumes/xarts Used: 6 MB Shared values Size: 524 MB Free: 505 MB disk1s3 - Hardware Filesystem: APFS Mount point: /System/Volumes/Hardware Used: 2 MB Shared values Size: 524 MB Free: 505 MB disk3s1s1 - Macintosh HD [APFS Snapshot] Filesystem: APFS Mount point: / Read-only: Yes Used: 12.73 GB Shared values Size: 245.11 GB Free: 35.92 GB Available: 46.06 GB disk3s2 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Used: 7.90 GB Shared values Size: 245.11 GB Free: 35.92 GB disk3s4 - Update Filesystem: APFS Mount point: /System/Volumes/Update Used: 31 MB Shared values Size: 245.11 GB Free: 35.95 GB disk3s5 - Macintosh HD - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Encrypted Used: 182.84 GB Shared values Size: 245.11 GB Free: 35.92 GB Available: 46.06 GB disk3s6 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Used: 4.30 GB Shared values Size: 245.11 GB Free: 35.92 GB USB: USB 3.1 Bus USB 3.1 Bus Network: Interface en3: Ethernet Adapter (en3) Interface en4: Ethernet Adapter (en4) Interface en6: USB 10/100 LAN Interface bridge0: Thunderbolt Bridge Interface en0: Wi-Fi 802.11 a/b/g/n/ac/ax Interface en5: iPhone iCloud Quota: 1.51 TB available Firewall: Blocked apps: None System Software: macOS Tahoe 26.1 (25B5042k) Installed 2025-09-22 Time since boot: About 2 days Configuration Profiles: com.apple.wifi.managed SSID_STR EAPClientConfiguration/EAPFASTUsePAC EAPClientConfiguration/PayloadCertificateAnchorUUID[0] HIDDEN_NETWORK EAPClientConfiguration/EAPFASTProvisionPAC EAPClientConfiguration/UserName EAPClientConfiguration/EAPFASTProvisionPACAnonymously AutoJoin EAPClientConfiguration/TTLSInnerAuthentication EAPClientConfiguration/TLSTrustedServerNames[0] EncryptionType EAPClientConfiguration/AcceptEAPTypes[0] EAPClientConfiguration/UserPassword com.apple.wifi.managed CaptiveBypass DomainName HIDDEN_NETWORK EAPClientConfiguration/TLSMaximumVersion EAPClientConfiguration/OuterIdentity ProxyType NAIRealmNames[0] IsHotspot DisplayedOperatorName EAPClientConfiguration/UserName ServiceProviderRoamingEnabled EAPClientConfiguration/TLSMinimumVersion AutoJoin EAPClientConfiguration/TLSTrustedServerNames[0] EAPClientConfiguration/AcceptEAPTypes[0] EAPClientConfiguration/TTLSInnerAuthentication EncryptionType EAPClientConfiguration/UserPassword Notifications: WhatsApp.app 46 notifications EtreCheckPro.app 2 notifications ExpressVPN.app 4 notifications (3 scheduled) Arc.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Secure Boot: Full Security Antivirus software: Apple Unsigned Files: Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the legitimate list - probably OK Apps: 1 System Extensions: [Running] NordVPN Threat Protection - version 1.4.5 (Nordvpn S.A. - installed 2024-04-16) Application: Not found! Description: System extension is used to scan files downloaded from the internet for malware. Kernel Extensions: /Applications/ExpressVPN.app [Not Loaded] ExpressVPNSplitTunnel.kext - com.expressvpn.splittunnel (1.0.2 - SDK 15) System Launch Daemons: [Not Loaded] 44 Apple tasks [Loaded] 249 Apple tasks [Running] 132 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 20 Apple tasks [Loaded] 312 Apple tasks [Running] 142 Apple tasks Launch Daemons: [Running] com.expressvpn.expressvpnd.plist (Expressco Services, LLC - installed 2025-09-12) Executable: /Applications/ExpressVPN.app/Contents/MacOS/expressvpnd [Running] com.nordvpn.macos.helper.plist (Nordvpn S.A. - installed 2025-09-05) Executable: /Library/PrivilegedHelperTools/com.nordvpn.macos.helper [Loaded] org.wireshark.ChmodBPF.plist (Wireshark Foundation - installed 2025-07-04) Executable: /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2025-08-26) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Running] com.openai.chat-helper.plist (OpenAI, L.L.C. - installed 2025-09-17) Executable: /Applications/ChatGPT.app/Contents/Resources/ChatGPTHelper Location: /Applications/ChatGPT.app [Not Loaded] com.oracle.java.Java-Updater.plist (Not signed - installed 2025-07-10) Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck [Not Loaded] com.spotify.client-launcher.plist (Spotify - installed 2025-09-08) Executable: /Applications/Spotify.app/Contents/Resources/SpotifyLauncher Location: /Applications/Spotify.app [Loaded] us.zoom.updater.login.check.plist (Zoom Video Communications, Inc. - installed 2025-08-26) Command: /Applications/zoom.us.app/Contents/Library/LaunchAgents/ZoomUpdater.app/Contents/MacOS/ZoomUpdater --login-check [Loaded] us.zoom.updater.plist (Zoom Video Communications, Inc. - installed 2025-08-26) Command: /Applications/zoom.us.app/Contents/Library/LaunchAgents/ZoomUpdater.app/Contents/MacOS/ZoomUpdater --update User Launch Agents: [Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2025-09-21) Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2 [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-06) [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-06) [Other] com.valvesoftware.steamclean.plist (Not signed - installed 2025-06-09) Command: ~/Library/Application Support/Steam/SteamApps/steamclean Public [Other] edu.berkeley.launchboincmanager.plist (Not signed - installed 2025-02-10) Command: /Applications/BOINCManager.app/Contents/MacOS/BOINCManager --autostart [Other] mega.mac.megaupdater.plist (Not signed - installed 2025-06-04) Executable: /Applications/MEGAsync.app/Contents/MacOS/MEGAupdater User Login Items: [Not Loaded] AppCleaner SmartDelete (Julien Ramseier - installed 2023-07-05) Modern Login Item /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app [Not Loaded] LaunchAtLoginHelper (Make The Web Oślizło & Magiera s.c. - installed 2025-09-12) Modern Login Item /Applications/CleanShot X.app/Contents/Library/LoginItems/LaunchAtLoginHelper.app [Not Loaded] ExpressVPN Launcher (Expressco Services, LLC - installed 2025-09-12) Modern Login Item /Applications/ExpressVPN.app/Contents/Library/LoginItems/ExpressVPN Launcher.app [Loaded] LauncherApplication (App Store - installed 2023-11-08) Modern Login Item /Applications/Hidden Bar.app/Contents/Library/LoginItems/LauncherApplication.app [Loaded] com.mathpix.snipping-tool-noappstore.helper (Mathpix, Inc. - installed 2025-09-12) Modern Login Item /Applications/Mathpix Snipping Tool.app/Contents/Library/LoginItems/com.mathpix.snipping-tool-noappstore.helper.app [Running] Paste Helper (App Store - installed 2025-09-12) Modern Login Item /Applications/Paste.app/Contents/Library/LoginItems/Paste Helper.app [Not Loaded] RectangleLauncher (Ryan Hanson - installed 2025-09-05) Modern Login Item /Applications/Rectangle.app/Contents/Library/LoginItems/RectangleLauncher.app [Loaded] StartUpHelper (Spotify - installed 2025-09-11) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Loaded] iwallpaperhelper (App Store - installed 2025-06-28) Modern Login Item /Applications/iwallpaper.app/Contents/Library/LoginItems/iwallpaperhelper.app [Not Loaded] PasswordsMenuBarExtra (Apple - installed 2025-09-19) Modern Login Item /System/Applications/Passwords.app/Contents/Library/LoginItems/PasswordsMenuBarExtra.app [Running] WeatherMenu (Apple - installed 2025-09-19) Modern Login Item /System/Applications/Weather.app/Contents/Library/LoginItems/WeatherMenu.app Applications: 790 Apple apps 75 3rd party apps 6 x86-only apps One unsigned app App Extensions: Widgets: [Loaded] ChatGPT - /Applications/ChatGPT.app [Loaded] RecentShelvesWidget - /Applications/Dropover.app [Loaded] Widgets - /Applications/Usage.app [Loaded] WordWidgetKit - /Applications/Microsoft Word.app Notification providers: [Loaded] ServiceExtension - /Applications/WhatsApp.app Safari extensions: [Loaded] Open in IINA - /Applications/IINA.app Plugins: [Loaded] Intents - /Applications/WhatsApp.app Share services: [Loaded] Add to Dropover - /Applications/Dropover.app [Loaded] Telegram - /Applications/Telegram.app [Loaded] Pin to the Screen - /Applications/CleanShot X.app [Loaded] Blip - /Applications/Blip.app [Loaded] Annotate - /Applications/CleanShot X.app QuickLook Previews: [Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck [Loaded] BlipPreviewProvider - /Applications/Blip.app com.microsoft.internet-shortcut *.url [Loaded] QuickLookExtension - /Applications/CleanShot X.app com.cleanshot.document *.cleanshot QuickLook Thumbnails: [Loaded] QuickLookThumbnailingExtension - /Applications/CleanShot X.app com.cleanshot.document *.cleanshot Internet Plug-ins: JavaAppletPlugin: Java 8 Update 461 build 11 (? - installed 2025-09-24) Audio Plug-ins: ParrotAudioPlugin: 1.0 (Apple - installed 2025-09-19) 3rd Party Preference panels: Java (? - installed 2025-06-27) Backup: Time Machine Not Configured! Performance: System Load: 4.09 (1 min ago) 3.96 (5 min ago) 3.83 (15 min ago) Nominal I/O usage: 24.95 MB/s File system: 10.16 seconds Write speed: 656 MB/s Read speed: 1356 MB/s CPU Usage Snapshot: Type Overall System: 8 % User: 13 % Idle: 79 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) EtreCheckPro 31.40 % (Etresoft, Inc.) Finder 24.46 % (Apple) WindowServer 23.96 % (Apple) Arc 17.60 % (The Browser Company of New York Inc.) Browser Helper (Renderer) (13) 13.50 % (The Browser Company of New York Inc.) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Browser Helper (Renderer) (13) 837 MB (The Browser Company of New York Inc.) Arc 267 MB (The Browser Company of New York Inc.) EtreCheckPro 194 MB (Etresoft, Inc.) AppleSpell 85 MB (Apple) Browser Helper (4) 81 MB (The Browser Company of New York Inc.) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Mail 30 MB / 354 KB (Apple) mDNSResponder 11 MB / 5 MB (Apple) apsd 3 MB / 1 MB (Apple) rapportd 4 MB / 116 KB (Apple) Arc 823 KB / 810 KB (The Browser Company of New York Inc.) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 9 (Apple) Arc 6 (The Browser Company of New York Inc.) Browser Helper (Renderer) (13) 4 (The Browser Company of New York Inc.) Finder 3 (Apple) ChatGPT 3 (OpenAI, L.L.C.) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 59 MB Used RAM: 6.50 GB Cached files: 1.44 GB Available RAM: 1.50 GB Swap Used: 2.50 GB Software Installs (past 60 days): Install Date Name (Version) 2025-08-03 ExpressVPN (11.70.0 (90675)) - Installer 2025-08-05 XProtectPlistConfigData (5309) - Software update 2025-08-05 XProtectPayloads (153) - Software update 2025-08-06 macOS 26.0 (26.0) - Software update 2025-08-06 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-08-07 Command Line Tools for Xcode 26.0 beta 5 (26.0) - Software update 2025-08-11 macOS 26.0 (26.0) - Software update 2025-08-11 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-08-12 XProtectPlistConfigData (5310) - Software update 2025-08-18 Command Line Tools for Xcode 26.0 beta 6 (26.0) - Software update 2025-08-18 macOS 26.0 (26.0) - Software update 2025-08-18 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-08-19 XProtectCloudKitUpdate (5311) - XProtectUpdateService 2025-08-20 XProtectPlistConfigData (5311) - Software update 2025-08-25 ExpressVPN (11.70.0 (90675)) - Installer 2025-08-26 XProtectCloudKitUpdate (5312) - XProtectUpdateService 2025-08-26 XProtectPlistConfigData (5312) - Software update 2025-08-26 macOS 26.0 (26.0) - Software update 2025-08-26 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-08-26 Zoom Workplace (6.5.9.61929) - Installer 2025-08-30 ExpressVPN (11.70.0 (90675)) - Installer 2025-09-02 macOS 26.0 (26.0) - Software update 2025-09-02 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-09-03 XProtectPlistConfigData (5313) - Software update 2025-09-05 ‎WhatsApp (25.23.83) - storedownloadd 2025-09-05 com.nordvpn.macos (9.4.1) - Installer 2025-09-07 R 4.5.1 for macOS (ARM64) (4.5.1) - Installer 2025-09-09 macOS 26.0 (26.0) - Software update 2025-09-09 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-09-10 XProtectPlistConfigData (5314) - Software update 2025-09-12 ‎WhatsApp (25.24.76) - storedownloadd 2025-09-12 Paste (6.0.0) - storedownloadd 2025-09-12 ExpressVPN (11.70.0 (90675)) - Installer 2025-09-16 macOS 26.0 (26.0) - Software update 2025-09-16 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-09-16 Command Line Tools for Xcode 26.0 (26.0) - Software update 2025-09-17 XProtectPlistConfigData (5315) - Software update 2025-09-22 RosettaUpdateAuto (1.0.0.0.1758341309) - Install on demand 2025-09-22 macOS 26.1 (26.1) - Software update 2025-09-23 XProtectPlistConfigData (5316) - Software update Clean up: [Running] NordVPN Threat Protection - version 1.4.5 (Nordvpn S.A. - installed 2024-04-16) Application: Not found! Description: System extension is used to scan files downloaded from the internet for malware. ~/Library/LaunchAgents/edu.berkeley.launchboincmanager.plist /Applications/BOINCManager.app/Contents/MacOS/BOINCManager Executable not found ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist ~/Library/Application Support/Steam/SteamApps/steamclean Executable not found ~/Library/LaunchAgents/mega.mac.megaupdater.plist /Applications/MEGAsync.app/Contents/MacOS/MEGAupdater Executable not found /Library/LaunchAgents/com.oracle.java.Java-Updater.plist /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater Executable not found Diagnostics Information (past 60 days): 2025-09-24 10:41:09 Finder.app High CPU Use Executable: /System/Library/CoreServices/Finder.app 2025-09-24 10:38:50 ESWorkspace Crash (2 times) First occurrence: 2025-09-24 10:35:57 Details: EtreCheckPro 2025-09-23 18:59:44 knowledgeconstructiond High CPU Use (8 times) First occurrence: 2025-09-17 17:41:26 Executable: /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/Versions/A/knowledgeconstructiond 2025-09-23 18:59:27 spotlightknowledged High CPU Use (12 times) First occurrence: 2025-09-17 17:36:18 Executable: /System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged 2025-09-23 11:43:37 FPCKService High CPU Use (2 times) First occurrence: 2025-09-22 13:09:03 Executable: /System/Library/PrivateFrameworks/FileProviderDaemon.framework/XPCServices/FPCKService.xpc/Contents/MacOS/FPCKService 2025-09-23 11:16:00 Mail Crash Executable: /System/Applications/Mail.app 2025-09-23 02:41:34 fileproviderd High CPU Use Executable: /System/Library/Frameworks/FileProvider.framework/Support/fileproviderd 2025-09-21 18:23:48 ANECompilerService High CPU Use (2 times) First occurrence: 2025-09-19 20:06:41 Executable: /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/Contents/MacOS/ANECompilerService 2025-09-18 15:06:11 IMDPersistenceAgent High CPU Use Executable: /System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent End of report