EtreCheckPro version: 6.8.3 (68032)
Report generated: 2023-11-25 16:19:20
Download EtreCheckPro from https://etrecheck.com
Runtime: 3:60
Performance: Good

Problem: Apps are crashing
Description: 
Thunderbird has crashed a number of times this week.

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  System extensions installed - This computer has system extensions installed. System extensions can be difficult to uninstall.
  Heavy RAM usage - Apps are using a large amount of RAM.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Limited permissions - More information may be available with Full Disk Access.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  iMac (Retina 5K, 27-inch, 2017)
    Status: Supported
  iMac Model: iMac18,3
  3.8 GHz Quad-Core Intel Core i5 (i5-7600K) CPU: 4-core
  24 GB RAM - Upgradeable
    BANK 0/DIMM0 - 4 GB DDR4 SO-DIMM 2400  
    BANK 0/DIMM1 - 8 GB DDR4 SO-DIMM 2400  
    BANK 1/DIMM0 - 4 GB DDR4 SO-DIMM 2400  
    BANK 1/DIMM1 - 8 GB DDR4 SO-DIMM 2400  

Video Information:
  Radeon Pro 580 - VRAM: 8 GB
    iMac (built-in) 4096 x 2304

Drives:
  disk0 - APPLE SSD SM0128L 121.33 GB (Solid State - TRIM: Yes) 
  Internal PCI-Express 8.0 GT/s x4 NVM Express
    disk0s1 - EFI [EFI] 315 MB
    disk0s2 [APFS Fusion Drive] 121.02 GB
      disk2 [APFS Virtual drive] 2.12 TB (Shared by 6 volumes)
        disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (335.33 GB used)
        disk2s2 - Preboot (APFS) [APFS Preboot] (2.10 GB used)
        disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used)
        disk2s4 (APFS) [APFS Container] (9.16 GB used)
          disk2s4s1 - Macintosh HD (APFS) [APFS Snapshot] (9.16 GB used)
        disk2s5 - Update (APFS) (8 MB used)
        disk2s6 - VM (APFS) [APFS VM] (1.08 GB used)

  disk1 - APPLE HDD ST2000DM001 2.00 TB (Mechanical - 7200 RPM) 
  Internal SATA 6 Gigabit Serial ATA
    disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk1s2 [APFS Fusion Drive] 2.00 TB
      disk2 [APFS Virtual drive] 2.12 TB (Shared by 6 volumes)
        disk2s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (335.33 GB used)
        disk2s2 - Preboot (APFS) [APFS Preboot] (2.10 GB used)
        disk2s3 - Recovery (APFS) [Recovery] (1.15 GB used)
        disk2s4 (APFS) [APFS Container] (9.16 GB used)
          disk2s4s1 - Macintosh HD (APFS) [APFS Snapshot] (9.16 GB used)
        disk2s5 - Update (APFS) (8 MB used)
        disk2s6 - VM (APFS) [APFS VM] (1.08 GB used)

  disk3 - WD My Book 1112 2.00 TB
  External USB 480 Mbit/s USB
    disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk3s2 [APFS Container] 2.00 TB
      disk5 [APFS Virtual drive] 2.00 TB (Shared by 1 volumes)
        disk5s2 - M*****k (APFS) (1.69 TB used)

Mounted Volumes:
  disk2s1 - Macintosh HD - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Fusion drive
    Used: 335.33 GB
    Shared values
      Size: 2.12 TB
      Free: 1.76 TB
      Available: 1.89 TB

  disk2s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Fusion drive
    Used: 2.10 GB
    Shared values
      Size: 2.12 TB
      Free: 1.76 TB

  disk2s4s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Fusion drive
    Read-only: Yes
    Used: 9.16 GB
    Shared values
      Size: 2.12 TB
      Free: 1.76 TB
      Available: 1.89 TB

  disk2s5 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Fusion drive
    Used: 8 MB
    Shared values
      Size: 2.12 TB
      Free: 1.76 TB

  disk2s6 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Fusion drive
    Used: 1.08 GB
    Shared values
      Size: 2.12 TB
      Free: 1.76 TB

  disk5s2 - M*****k
    Filesystem: APFS
    Mount point: /Volumes/M*******1
    Used: 1.69 TB
    Shared values
      Size: 2.00 TB
      Free: 311.15 GB

Network:
  Interface en0: Ethernet
  Interface bridge0: Thunderbolt Bridge
  Interface en1: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en4: iPhone

System Software:
  macOS Ventura 13.6.1 (22G313) 
  Time since boot: About 4 days

Notifications:
  Firefox.app
    one notification

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple and Malwarebytes

Applications:
  543 apps
  18 x86-only apps
  4 unsigned apps

System Extensions:
  [Running] ProtonVPN OpenVPN - version 4.0.1 (ProtonVPN AG - 2023-11-08)
    Application: /Applications/ProtonVPN.app - version 4.0.1 (ProtonVPN AG - 2023-11-25)

  [Removed after restart] ProtonVPN WireGuard - version 4.0.1 (ProtonVPN AG - 2023-11-08)
    Application: /Applications/ProtonVPN.app - version 4.0.0 (ProtonVPN AG - 2023-11-25)

Kernel Extensions:
  /Applications/Disk Drill.app
    [Not Loaded] SecureDisk.kext - com.cleverfiles.SecureDisk (1.0 - SDK 10.14)
    [Not Loaded] SecureDisk_11.kext - com.cleverfiles.SecureDisk-11 (1.0 - SDK 13)

System Launch Daemons:
  [Not Loaded]  38 Apple tasks
  [Loaded]  178 Apple tasks
  [Running]  171 Apple tasks
  [Other]  3 Apple tasks

System Launch Agents:
  [Not Loaded]  20 Apple tasks
  [Loaded]  162 Apple tasks
  [Running]  215 Apple tasks

Launch Daemons:
  [Not Loaded] com.cleverfiles.cfbackd.plist (Justin Johnson - installed 2023-10-25)
    Executable: /Library/Application Support/CleverFiles/BackService.app/Contents/MacOS/cfbackd

  [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2023-10-25)
    Command: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon -i 2CDE6D80-80DC-472F-9685-5C24538C5581.pkg

  [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2023-10-25)
    Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon

  [Loaded] com.objective-see.blockblock.plist (Objective-See, LLC - installed 2023-10-25)
    Executable: /Library/Objective-See/BlockBlock/BlockBlock.app/Contents/MacOS/BlockBlock

  [Loaded] com.teamviewer.Helper.plist (TeamViewer Germany GmbH - installed 2023-10-25)
    Executable: /Library/PrivilegedHelperTools/com.teamviewer.Helper

  [Loaded] com.teamviewer.UninstallerHelper.plist (TeamViewer Germany GmbH - installed 2023-10-25)
    Executable: /Library/PrivilegedHelperTools/com.teamviewer.UninstallerHelper

  [Loaded] com.teamviewer.UninstallerWatcher.plist (TeamViewer Germany GmbH - installed 2023-10-25)
    Command: /Library/Application Support/TeamViewer/TeamViewerUninstaller.app/Contents/Resources/com.teamviewer.UninstallerStarter --module Full

  [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2023-10-25)
    Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon

Launch Agents:
  [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2023-10-25)
    Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent

User Launch Agents:
  [Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2023-11-13)
    Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2

  [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-11-06)
    

  [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-11-06)
    

  [Not Loaded] com.sqwarq.DetectX-Swift.observer.plist (Not signed - installed 2023-10-16)
    Command: /private/var/folders/jk/2jw43h_13fv3d0q7_srm0x3c0000gn/T/AppTranslocation/3D52A127-032D-4AEC-BF66-8918DE49BD90/d/DetectX Swift.app/Contents/MacOS/DetectX Swift -observer

User Login Items:
  [Running] AppCleaner SmartDelete (Julien Ramseier - installed 2023-08-29)
    Modern Login Item
    /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app

  [Not Loaded] JumpshareLauncher (App Store - installed 2023-11-18)
    Modern Login Item
    /Applications/Jumpshare.app/Contents/Library/LoginItems/JumpshareLauncher.app

  [Not Loaded] MessengerHelper (App Store - installed 2023-11-20)
    Modern Login Item
    /Applications/Messenger.app/Contents/Library/LoginItems/MessengerHelper.app

  [Not Loaded] MessengerLoginHelper (App Store - installed 2023-11-20)
    Modern Login Item
    /Applications/Messenger.app/Contents/Library/LoginItems/MessengerLoginHelper.app

  [Loaded] ProtonVPNStarter (ProtonVPN AG - installed 2023-11-25)
    Modern Login Item
    /Applications/ProtonVPN.app/Contents/Library/LoginItems/ProtonVPNStarter.app

  [Not Loaded] Launcher (App Store - installed 2023-10-13)
    Modern Login Item
    /Applications/VPN Unlimited.app/Contents/Library/LoginItems/Launcher.app

  [Running] VirusBarrier Scanner_Helper (App Store - installed 2023-09-07)
    Modern Login Item
    /Applications/VirusBarrier Scanner.app/Contents/Library/LoginItems/VirusBarrier Scanner_Helper.app

  [Not Loaded] DriveDxLoginItemHelper (Kirill Luzanov - installed 2023-10-14)
    Modern Login Item
    ~/Downloads/DriveDx.app/Contents/Library/LoginItems/DriveDxLoginItemHelper.app

App Extensions:
  Plugins:
    Intents - /Applications/WhatsApp.localized/WhatsApp.app

  Notification providers:
    ServiceExtension - /Applications/WhatsApp.localized/WhatsApp.app

  Safari extensions:
    Microsoft Bing for Safari - /Applications/Microsoft Bing for Safari.app
    JSON Peep - /Applications/JSONPeep.app
    XLinux OS Extension - /Applications/XLinux OS.app
    MKPlayer - /Applications/MKPlayer.app

  Share services:
    Go Map!! - /Applications/Go Map!!.app
    Jumpshare - /Applications/Jumpshare.app

  VPNs:
    WireguardPacketTunnel - /Applications/VPN Unlimited.app
    PacketTunnel - /Applications/VPN Unlimited.app

  QuickLook Previews:
    Suspicious Package - /Applications/Suspicious Package.app
      com.apple.installer-package *.pkg
      com.apple.installer-meta-package *.mpkg
      com.apple.installer-package-archive *.pkg
      com.mothersruin.installer-flat-package
      com.mothersruin.installer-bom-file
    Apparency - /Applications/Apparency.app
      com.apple.bundle
      com.apple.application-bundle *.app
      com.apple.package
      com.apple.application
      public.unix-executable
      com.apple.mach-o-dylib *.dylib
      com.apple.plugin *.plugin
      com.apple.application-and-system-extension *.appex
      com.apple.system-extension *.systemextension
      com.apple.driver-extension *.dext
      com.apple.quicklook-generator *.qlgenerator
      com.apple.metadata-importer *.mdimporter
      com.apple.generic-bundle *.bundle
      com.apple.framework *.framework
      com.apple.systempreference.prefpane *.prefpane
      com.apple.kernel-extension *.kext
    EtreCheckQuickLook - /Applications/EtreCheckPro.app
      com.etresoft.etrecheck4 *.etrecheck

Audio Plug-ins:
  TVRemoteAudio: 1.0.1 (TeamViewer Germany GmbH - installed 2023-07-19)

Backup:
  Time Machine information is limited without Full Disk Access
  Destinations: 
    M*****k [Local] (Last used)
  15 local snapshots
  Oldest local snapshot: 2023-11-21 19:34:07
  Last local snapshot: 2023-11-25 15:43:02

Performance:
  System Load: 1.53 (1 min ago) 1.49 (5 min ago) 1.37 (15 min ago)
  Nominal I/O usage: 0.46 MB/s
  File system: 25.98 seconds
  Write speed: 340 MB/s
  Read speed: 2622 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 1 %
  User: 4 %
  Idle: 94 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  EtreCheckPro 12.02 % (Etresoft, Inc.)
  WindowServer 6.30 % (Apple)
  kernel_task 1.27 % (Apple)
  launchd 0.88 % (Apple)
  thunderbird 0.24 % (Mozilla Corporation)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  thunderbird 4.30 GB (Mozilla Corporation)
  kernel_task 2.42 GB (Apple)
  WhatsApp 1.09 GB (App Store)
  EtreCheckPro 814 MB (Etresoft, Inc.)
  Google Chrome Helper (Renderer) (6) 797 MB (Google LLC)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 77 MB / 13 MB (Apple)
  Mail 71 MB / 621 KB (Apple)
  netbiosd 2 MB / 578 KB (Apple)
  Messenger 85 KB / 96 KB (App Store)
  thunderbird 158 KB / 16 KB (Mozilla Corporation)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  WindowServer 4 (Apple)
  sysmond 0 (Apple)
  RTProtectionDaemon 0 (Malwarebytes Corporation)
  Messenger 0 (App Store)
  Activity Monitor 0 (Apple)

Virtual Memory Information:
  Physical RAM: 24 GB

  Free RAM: 366 MB
  Used RAM: 17.33 GB
  Cached files: 6.31 GB

  Available RAM: 6.67 GB
  Swap Used: 255 MB

Software Installs (past 60 days):
  Install Date Name (Version)
  2023-09-29 Malwarebytes for Mac (1.0)
  2023-10-06 iMovie (10.3.10)
  2023-10-07 WhatsApp (2.2343.55)
  2023-10-09 JSONPeep (1.3.2)
  2023-10-13 VPN Unlimited (8.4)
  2023-10-15 WireGuard (1.0.16)
  2023-10-19 Zoom (5.16.2.23409)
  2023-10-22 macOS 13.6 (13.6)
  2023-10-27 XProtectPayloads (118)
  2023-11-01 Mobile Device (1.0.0.0)
  2023-11-07 GarageBand (10.4.9)
  2023-11-07 Safari (17.1)
  2023-11-08 BBEdit (14.6.9)
  2023-11-10 XProtectPlistConfigData (2175)
  2023-11-14 ClamXAV Uninstaller
  2023-11-14 macOS 13.6.1 (13.6.1)
  2023-11-15 MRTConfigData (1.93)
  2023-11-16 ClamXAV v3.6.1
  2023-11-18 Microsoft Bing for Safari (3.0.0)
  2023-11-18 Jumpshare (3.2.15)
  2023-11-19 ‎WhatsApp (23.23.81)
  2023-11-20 Messenger (199.0)
  2023-11-22 Pure Paste (1.9.2)
  2023-11-23 Duplicate File Finder (7.3.3)
  2023-11-25 ChatGuru (6.7.26)

Clean up:
  ~/Library/LaunchAgents/com.sqwarq.DetectX-Swift.observer.plist
    /private/var/folders/jk/2jw43h_13fv3d0q7_srm0x3c0000gn/T/AppTranslocation/3D52A127-032D-4AEC-BF66-8918DE49BD90/d/DetectX Swift.app/Contents/MacOS/DetectX Swift
    Executable not found

Diagnostics Information (past 7-30 days):
  2023-11-24 09:52:25 Thunderbird.app High CPU Use (4 times)
    Executable: /Applications/Thunderbird.app

  2023-11-22 07:40:11 WhatsApp.app High CPU Use (2 times)
    Executable: /Applications/WhatsApp.localized/WhatsApp.app

  2023-11-21 07:35:50 BlockBlock Crash (3 times)
    Executable: /Library/Objective-See/BlockBlock/BlockBlock.app


End of report