EtreCheck version: 5.7.2 (5247)
Report generated: 2021-03-04 14:18:00
Download EtreCheck from https://etrecheck.com
Runtime: 1:37
Performance: Excellent
Sandbox: Enabled
Full drive access: Enabled

Problem: Computer is restarting

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Time Machine auto backup disabled - Time Machine auto backups are disabled.
  Apps crashing - There have been numerous app crashes.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.
  Sharing enabled - This computer has sharing services enabled that could be a security risk.

Hardware Information:
  iMac (Retina 5K, 27-inch, 2020)
  iMac Model: iMac20,1
  3.6 GHz 10-Core Intel Core i9 (i9-10910) CPU: 10-core
  32 GB RAM - Upgradeable

Video Information:
  AMD Radeon Pro 5300 - VRAM: 4 GB
    iMac (built-in) 4096 x 2304

Drives:
  disk0 - APPLE SSD AP1024N 1.00 TB (Solid State - TRIM: Yes) 
  Internal PCI-Express 8.0 GT/s x4 NVM Express
    disk0s1 - EFI [EFI] 315 MB
    disk0s2 [APFS Container] 1.00 TB
      disk1 [APFS Virtual drive] 1.00 TB (Shared by 6 volumes)
        disk1s1 (APFS) [APFS Container] (Shared)
          disk1s1s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.05 GB used)
        disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 256.92 GB used)
        disk1s3 - Preboot (APFS) [APFS Preboot] (Shared - 450 MB used)
        disk1s4 - Recovery (APFS) [Recovery] (Shared)
        disk1s5 - VM (APFS) [APFS VM] (Shared - 20 KB used)
        disk1s6 - Update (APFS) (Shared - 2 MB used)

  disk2 - Seagate Expansion 500.11 GB
  External USB 5 Gbit/s USB
    disk2s1 - E*********e (Journaled HFS+) 500.10 GB (271.25 GB used)

  disk3 - G-TECH OEM ATA Device 00 2.00 TB
  External FireWire Up to 800 Mb/sec
    disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk3s2 - G*****E (Journaled HFS+) 2.00 TB (1.53 TB used)

Mounted Volumes:
  disk1s1s1 - Macintosh HD [APFS Snapshot]
    1.00 TB (Shared - 15.05 GB used, 745.62 GB available, 727.00 GB free)
    APFS
    Mount point: /
    Read-only: Yes

  disk1s2 - Macintosh HD - Data [APFS Virtual drive]
    1.00 TB (Shared - 256.92 GB used, 745.62 GB available, 727.00 GB free)
    APFS
    Mount point: /System/Volumes/Data
    Encrypted

  disk1s3 - Preboot [APFS Preboot]
    1.00 TB (Shared - 450 MB used, 727.00 GB free)
    APFS
    Mount point: /System/Volumes/Preboot

  disk1s5 - VM [APFS VM]
    1.00 TB (Shared - 20 KB used, 727.00 GB free)
    APFS
    Mount point: /System/Volumes/VM

  disk1s6 - Update
    1.00 TB (Shared - 2 MB used, 727.00 GB free)
    APFS
    Mount point: /System/Volumes/Update

  disk2s1 - E*********e
    500.10 GB (271.25 GB used, 228.99 GB available, 228.86 GB free)
    Journaled HFS+
    Mount point: /Volumes/E*********e
    Owners enabled: No

  disk3s2 - G*****E
    2.00 TB (1.53 TB used, 472.48 GB available, 472.44 GB free)
    Journaled HFS+
    Mount point: /Volumes/G*****E
    Owners enabled: No

Network:
  Interface en0: Ethernet
  Interface fw0: Thunderbolt FireWire
  Interface en1: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en5: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

  Printer sharing: Enabled
  Remote Management: Enabled
  Screen sharing: Enabled

System Software:
  macOS Big Sur 11.2.2 (20D80) 
  Time since boot: Less than an hour

Notifications:
  EtreCheck.app
    2 notifications

  Franz.app
    91 notifications

  OmniFocus.app
    4 notifications (2 scheduled)

  Signal.app
    4 notifications

Security:
  Gatekeeper: Enabled
  System Integrity Protection: Enabled

  Antivirus software: Apple

  Printer sharing: Enabled
  Remote Management: Enabled
  Screen sharing: Enabled

Unsigned Files:
  Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.maintain.ShutDown.plist
    Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to shut down' -e 'end try' -e 'end ignoring'
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.maintain.Restart.plist
    Executable: /usr/bin/osascript -e 'delay 3' -e try -e 'do shell script "killall Cocktail"' -e 'end try' -e 'ignoring application responses' -e try -e 'tell application "System Events" to restart' -e 'end try' -e 'end ignoring'
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.malwarebytes.mbam.settings.daemon.plist
    Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon
    Details: Exact match found in the legitimate list - probably OK

  Plugin: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

  Preference Pane: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.prefPane

System Launch Agents:
  [Not Loaded]  17 Apple tasks
  [Loaded]  191 Apple tasks
  [Running]  123 Apple tasks

System Launch Daemons:
  [Not Loaded]  33 Apple tasks
  [Loaded]  184 Apple tasks
  [Running]  142 Apple tasks
  [Other]  One Apple task

Launch Agents:
  [Not Loaded] com.maintain.Restart.plist (? 5421a7fd  - installed 2020-11-24)
  [Not Loaded] com.maintain.ShutDown.plist (? 9b7e817c  - installed 2020-11-24)
  [Other] com.malwarebytes.mbam.frontend.agent.plist (? 1b555a92  - installed 2021-01-19)
  [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2021-02-01)
  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-02-17)
  [Not Loaded] com.oracle.java.Java-Updater.plist (? b8102ab1  - installed 2021-01-31)

Launch Daemons:
  [Other] com.malwarebytes.mbam.rtprotection.daemon.plist (? 674540fe  - installed 2021-02-18)
  [Loaded] com.malwarebytes.mbam.settings.daemon.plist (? a40d558f  - installed 2021-01-19)
  [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2021-02-01)
  [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2021-02-01)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-02-17)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2020-11-09)
  [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2021-01-19)
  [Running] com.nordvpn.osx.helper.plist (TEFINKOM & CO S.A - installed 2021-02-25)
  [Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2  - installed 2021-01-31)

User Launch Agents:
  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2020-11-24)
  [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-11-24)
  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-11-24)
  [Loaded] com.logmein.GoToMeeting.G2MAIRUploader.plist (LogMeIn, Inc. - installed 2021-02-18)
  [Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (LogMeIn, Inc. - installed 2021-02-18)
  [Other] minergate.plist (? 0  - installed 2021-02-16)

User Login Items:
  [Running] 1Password Extension Helper (App Store - installed 2020-11-24)
    Modern Login Item
    /Applications/1Password 7.app/Contents/Library/LoginItems/1Password Extension Helper.app

  [Loaded] 1Password Launcher (App Store - installed 2020-11-24)
    Modern Login Item
    /Applications/1Password 7.app/Contents/Library/LoginItems/1Password Launcher.app

  [Running] Alfred 4 (Running with Crayons Ltd - installed 2020-11-13)
    Application
    /Applications/Alfred 4.app

  [Running] Dropbox (Dropbox, Inc. - installed 2021-02-18)
    Application
    /Applications/Dropbox.app

  [Not Loaded] Evernote Login Helper (App Store - installed 2021-02-22)
    Modern Login Item
    /Applications/Evernote.app/Contents/Library/LoginItems/Evernote Login Helper.app

  [Loaded] Franz Helper (Renderer) (Stefan Malzner - installed 2020-11-17)
    Application
    /Applications/Franz.app/Contents/Frameworks/Franz Helper (Renderer).app

  [Not Loaded] NordVPNLauncher (App Store - installed 2021-03-03)
    Modern Login Item
    /Applications/NordVPN IKE.app/Contents/Library/LoginItems/NordVPNLauncher.app

  [Not Loaded] NordVPNLauncher Sideload (TEFINKOM & CO S.A - installed 2021-02-25)
    Modern Login Item
    /Applications/NordVPN.app/Contents/Library/LoginItems/NordVPNLauncher Sideload.app

  [Running] OneDrive (Microsoft Corporation - installed 2021-02-01)
    Application
    /Applications/OneDrive.app

  [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2021-02-01)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

  [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2021-02-01)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

  [Not Loaded] SpeedTestHelper (App Store - installed 2021-01-13)
    Modern Login Item
    /Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app

  [Not Loaded] StartUpHelper (Spotify - installed 2020-11-10)
    Modern Login Item
    /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app

Internet Plug-ins:
  JavaAppletPlugin: Java 8 Update 281 build 09 (? - installed 2021-01-31)

Safari Extensions:
  1Password (App Store - installed 2020-11-24)

3rd Party Preference Panes:
  Java (? - installed 2020-12-09)

Backup:
  Auto backup: No
  Destinations: 
    Data [Network] (Last used)
      Total size: 1.90 TB
      Total number of backups: 7
      Oldest backup: 2021-02-26 08:31:26
      Last backup: 2021-02-27 02:49:38
  One local snapshot
  Oldest local snapshot: 2021-02-27 01:01:10
  Last local snapshot: 2021-02-27 01:01:10

Performance:
  System Load: 3.03 (1 min ago) 0.94 (5 min ago) 0.35 (15 min ago)
  Nominal I/O speed: 0.01 MB/s
  File system: 16.42 seconds
  Write speed: 2633 MB/s
  Read speed: 2549 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 0 %
  User: 1 %
  Idle: 99 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  Other processes 12.57 % (?)
  EtreCheck 10.76 % (App Store)
  Dropbox 0.20 % (Dropbox, Inc.)
  assistantd 0.18 % (Apple)
  routined 0.14 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheck 671 MB (App Store)
  Dropbox 400 MB (Dropbox, Inc.)
  sharingd 192 MB (Apple)
  Dock 183 MB (Apple)
  secd 147 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  Other processes 271 KB / 9 MB (?)
  Dropbox 344 KB / 75 KB (Dropbox, Inc.)
  homed 127 KB / 96 KB (Apple)
  CalendarAgent 32 KB / 33 KB (Apple)
  assistantd 9 KB / 21 KB (Apple)

Virtual Memory Information:
  Physical RAM: 32 GB

  Free RAM: 20.64 GB
  Used RAM: 7.11 GB
  Cached files: 4.25 GB

  Available RAM: 24.89 GB
  Swap Used: 0 B

Software Installs (past 30 days):
  Install Date Name (Version)
  2021-02-16 Microsoft Word (16.46.21021202)
  2021-02-16 Microsoft Excel (16.46.21021202)
  2021-02-16 Microsoft OneNote (16.46.21021202)
  2021-02-16 Microsoft Outlook (16.46.21021202)
  2021-02-16 OmniFocus (3.11.4)
  2021-02-17 Microsoft AutoUpdate (4.32.21021202)
  2021-02-17 Microsoft PowerPoint (16.46.21021202)
  2021-02-18 Malwarebytes for Mac (1.0)
  2021-02-18 Spark (2.9.15)
  2021-02-22 Evernote (10.8.6)
  2021-02-27 macOS 11.2.1 (11.2.1)
  2021-02-28 macOS 11.2.2 (11.2.2)
  2021-03-03 NordVPN IKE (6.0.3)
  2021-03-04 XProtectPlistConfigData (2141)
  2021-03-04 MRTConfigData (1.75)
  2021-03-04 EtreCheck (5.7.2)

Clean up:
  ~/Library/LaunchAgents/minergate.plist
    ~/Applications/MinerGate.app/Contents/MacOS/MinerGate
    Executable not found
  /Library/LaunchAgents/com.malwarebytes.mbam.frontend.agent.plist
    /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent
    Executable not found
  /Library/LaunchDaemons/com.malwarebytes.mbam.rtprotection.daemon.plist
    /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon
    Executable not found

Diagnostics Information (past 7-30 days):
  2021-03-04 14:16:05 Franz.app Crash (10 times)
    Executable: /Applications/Franz.app

  2021-03-04 12:50:58 photolibraryd High CPU Use
    Executable: /System/Library/PrivateFrameworks/PhotoLibraryServices.framework/Versions/A/Support/photolibraryd

  2021-03-04 00:42:30 photoanalysisd High CPU Use
    Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd

  2021-03-03 22:17:47 syspolicyd High CPU Use
    Executable: /usr/libexec/syspolicyd

  2021-03-03 19:27:18 media-indexer High CPU Use (4 times)
    Executable: /System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/XPCServices/media-indexer.xpc/Contents/MacOS/media-indexer
    Details:
      objc_msgSend() selector name: copyWithZone:
      dyld3 mode

  2021-03-01 10:59:40 com.apple.WebKit.WebContent High CPU Use
    Executable: /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent


End of report