EtreCheckPro version: 6.5.3 (6F011)
Report generated: 2021-10-22 21:28:08
Download EtreCheckPro from https://etrecheck.com
Runtime: 3:03
Performance: Excellent

Problem: Other problem

Major Issues:
  Anything that appears on this list needs immediate attention. 
  No Time Machine backup - Time Machine backup not found.
  Adware - Adware detected.
  Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.
  System modifications - There are a large number of system modifications running in the background.
  x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  MacBook Pro (Retina, 13-inch, Early 2015)
  MacBook Pro Model: MacBookPro12,1
  3.1 GHz Dual-Core Intel Core i7 (i7-5557U) CPU: 2-core
  8 GB RAM - Not upgradeable
    BANK 0/DIMM0 - 4 GB DDR3 1867  
    BANK 1/DIMM0 - 4 GB DDR3 1867  
  Battery: Health = Normal - Cycle count = 326

Video Information:
  Intel Iris Graphics 6100 - VRAM: 1536 MB
    Color LCD (built-in) 2560 x 1600

Drives:
  disk0 - APPLE SSD SM0512G 500.28 GB (Solid State - TRIM: Yes) 
  Internal PCI 5.0 GT/s x4 Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 500.07 GB
      disk1 [APFS Virtual drive] 500.07 GB (Shared by 6 volumes)
        disk1s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 312.07 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 289 MB used)
        disk1s3 - Recovery (APFS) [Recovery] (Shared - 623 MB used)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 3.22 GB used)
        disk1s5 (APFS) [APFS Container] (Shared - 15.33 GB used)
          disk1s5s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.33 GB used)
        disk1s6 - Update (APFS) (Shared - 430 KB used)

Mounted Volumes:
  disk1s1 - Macintosh HD - Data [APFS Virtual drive]
    500.07 GB (Shared - 312.07 GB used, 168.76 GB available, 168.37 GB free)
    APFS
    Mount point: /System/Volumes/Data
    Encrypted

  disk1s2 - Preboot [APFS Preboot]
    500.07 GB (Shared - 289 MB used, 168.37 GB free)
    APFS
    Mount point: /System/Volumes/Preboot

  disk1s4 - VM [APFS VM]
    500.07 GB (Shared - 3.22 GB used, 168.37 GB free)
    APFS
    Mount point: /System/Volumes/VM

  disk1s5s1 - Macintosh HD [APFS Snapshot]
    500.07 GB (Shared - 15.33 GB used, 168.76 GB available, 168.37 GB free)
    APFS
    Mount point: /
    Read-only: Yes

  disk1s6 - Update
    500.07 GB (Shared - 430 KB used, 168.37 GB free)
    APFS
    Mount point: /System/Volumes/Update

Network:
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en3: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS Big Sur 11.6 (20G165) 
  Time since boot: About 6 days

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple and Sophos

Adware:
  Launchd: /Library/LaunchDaemons/com.fluviatic.plist
    Executable: /etc/fluviatic.sh
    Reason: Adware pattern match
  Launchd: /Library/LaunchDaemons/com.apple.nomaro.plist
    Executable: /Library/nomaro
    Reason: Adware pattern match
  Launchd: /Library/LaunchDaemons/com.brothelry.net-preferences.plist
    Executable: /etc/change_net_settings.sh
    Reason: Adware pattern match
  Launchd: /Library/LaunchDaemons/com.cytoid.plist
    Executable: /etc/cytoid.sh
    Reason: Adware pattern match
  Launchd: /Library/LaunchDaemons/com.apple.ightem.plist
    Executable: /Library/ightem
    Reason: Adware pattern match
  Launchd: /Library/LaunchDaemons/com.handily.service.plist
    Executable: /etc/run_app.sh
    Reason: Adware pattern match
  Launchd: /Library/LaunchDaemons/com.embraceor.service.plist
    Executable: /etc/run_app.sh
    Reason: Adware pattern match

Unsigned Files:
  Launchd: ~/Library/LaunchAgents/com.JMGti.plist
    Executable: ~/Library/qeSGc/0iGb1
    Details: Domain name invalid - possibly adware

  Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist
    Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/com.bittorrent.uTorrent.plist
    Executable: /Applications/uTorrent.app

  Launchd: /Library/LaunchAgents/com.Ben.plist
    Executable: /Library/laciniated/FpvUIfsO/BezAOVjO/Ben

  Launchd: ~/Library/LaunchAgents/com.ReplayInfo.plist
    Executable: ~/Library/Application Support/com.ReplayInfo/ReplayInfo
    Details: Domain name invalid - possibly adware

  Launchd: ~/Library/LaunchAgents/com.outsting-nanomelus.plist
    Executable: ~/Library/caphar/CvjZdHjk/PFaVhNLb/jYKnVsvw/outsting-nanomelus
    Details: Domain name invalid - possibly adware

  Running app: /Library/unbenignant/unbenignant
  Running app: /Library/udandan/udandan.app/Contents/MacOS/udandan
  Running app: /Library/bagel-snatchable/sgHbeBUR/QBbJfEMQ/tyRvfkGJ/apsis
  Running app: /Library/wlaghmyrnqvj/wlaghmyrnqvj
  Running app: /Library/mPGDlnMj/mPGDlnMj

  Login Item: ~/bin/helper_update

  Apps: 3

Old Applications:
  15 x86-only apps

System Extensions:
  [Running] networkextension - version 10.2.2 (Sophos - 2021-10-22)
    Application: /Applications/Sophos/Sophos Network Extension.app - version 10.2.2 (Sophos - 2021-10-22)

  [Running] com.sophos.endpoint.scanextension - version 10.2.2 (Sophos - 2021-10-22)
    Application: /Applications/Sophos/Sophos Scan.app - version 10.2.2 (Sophos - 2021-10-22)
    Description: Scanning Services

Kernel Extensions:
  /Library/Extensions
    [Not Loaded] SophosFileProtection.kext - com.sophos.kext.oas (10.1.0 - SDK 10.16)
    [Not Loaded] SophosFileMonitor.kext - com.sophos.kext.sfm (10.1.0 - SDK 10.16)
    [Not Loaded] SophosWebProtection.kext - com.sophos.nke.swi (10.1.3 - SDK 10.16)

System Launch Daemons:
  [Not Loaded]  40 Apple tasks
  [Loaded]  170 Apple tasks
  [Running]  153 Apple tasks
  [Other]  One Apple task

System Launch Agents:
  [Not Loaded]  16 Apple tasks
  [Loaded]  165 Apple tasks
  [Running]  153 Apple tasks

Launch Daemons:
  [Other] com.apple.ightem.plist (Adware - installed 2016-05-27)
  [Not Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc  - installed 2019-03-20)
  [Other] com.apple.nomaro.plist (Adware - installed 2016-05-27)
  [Loaded] com.brothelry.net-preferences.plist (Adware - installed 2016-05-27)
  [Loaded] com.cytoid.plist (Adware - installed 2016-06-09)
  [Loaded] com.embraceor.service.plist (Adware - installed 2016-11-17)
  [Loaded] com.fluviatic.plist (Adware - installed 2016-06-09)
  [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2021-08-26)
  [Not Loaded] com.handily.service.plist (Adware - installed 2016-11-17)
  [Not Loaded] com.mPGDlnMj.plist (? 0  - installed 2017-05-23)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-10-14)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2016-06-11)
  [Running] com.sophos.common.servicemanager.plist (Sophos - installed 2021-10-22)
  [Not Loaded] com.sophos.sophoscbr.plist (Sophos - installed 2021-10-07)
  [Not Loaded] com.wlaghmyrnqvj.plist (? 0  - installed 2016-11-28)

Launch Agents:
  [Loaded] com.Ben.plist (? 0  - installed )
  [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed )
  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed )
  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-10-14)
  [Running] com.sophos.agent.plist (Sophos - installed 2021-10-22)
  [Running] com.sophos.home.ui.plist (Sophos - installed 2021-10-22)

User Launch Agents:
  [Loaded] com.JMGti.plist (? 0  - installed 2021-10-22)
  [Other] com.ReplayInfo.plist (? 0  - installed 2021-10-22)
  [Loaded] com.bittorrent.uTorrent.plist (? 0  - installed )
  [Loaded] com.outsting-nanomelus.plist (? 0  - installed 2021-10-22)
  [Other] com.polyphyodont.ts.plist (? 0  - installed 2021-10-22)
  [Loaded] com.skype.skype.shareagent.plist (? 0  - installed )
  [Loaded] com.spotify.webhelper.plist (Spotify - installed )
  [Loaded] com.valvesoftware.steamclean.plist (Valve Corporation - installed )

User Login Items:
  [Running] Spotify (Spotify - installed 2017-09-22)
    Application
    /Applications/Spotify.app

  [Not Loaded] 5A4RE8SF68.com.tencent.xinWeChat.IPCHelper (App Store - installed 2021-09-16)
    Modern Login Item
    /Applications/WeChat.app/Contents/Library/LoginItems/5A4RE8SF68.com.tencent.xinWeChat.IPCHelper.app

  [Not Loaded] WhatsApp Login Helper (App Store - installed 2021-09-03)
    Modern Login Item
    /Applications/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app

  [Running] Activity Monitor (Apple - installed 2020-01-01)
    Application
    /System/Applications/Utilities/Activity Monitor.app

  [Loaded] helper_update (?)
    Application
    ~/bin/helper_update

Internet Plug-ins:
  ZoomUsPlugIn: 5.0.1 (23508.0430) (Zoom Video Communications, Inc. - installed 2020-05-01)

Backup:
  Time Machine Not Configured!

Performance:
  System Load: 2.35 (1 min ago) 2.17 (5 min ago) 3.54 (15 min ago)
  Nominal I/O speed: 9.40 MB/s
  File system: 21.08 seconds
  Write speed: 1223 MB/s
  Read speed: 1264 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 12 %
  User: 18 %
  Idle: 70 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  mds_stores 62.92 % (Apple)
  mds 30.78 % (Apple)
  WindowServer 9.40 % (Apple)
  EtreCheckPro 7.40 % (Etresoft, Inc.)
  kernel_task 4.70 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  com.apple.WebKit.WebContent (7) 1.00 GB (Apple)
  EtreCheckPro 541 MB (Etresoft, Inc.)
  SophosScanD 312 MB (?)
  MTLCompilerService (57) 223 MB (Apple)
  kernel_task 181 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 2 MB / 320 KB (Apple)
  SophosWebIntelligence 179 KB / 22 KB (?)
  SophosMcsAgentD 25 KB / 63 KB (?)
  trustd 44 KB / 4 KB (Apple)
  netbiosd 31 KB / 11 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  mds 15 (Apple)
  com.apple.siri.embeddedspeech 2 (Apple)
  WindowServer 1 (Apple)
  CoreServicesUIAgent 1 (Apple)
  mds_stores 0 (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 38 MB
  Used RAM: 5.10 GB
  Cached files: 2.86 GB

  Available RAM: 2.90 GB
  Swap Used: 408 MB

Software Installs (past 60 days):
  Install Date Name (Version)
  2021-08-30 Microsoft Excel (16.52.21080801)
  2021-08-30 Microsoft OneNote (16.52.21080801)
  2021-08-31 macOS Supplemental Update
  2021-09-03 WhatsApp (2.2134.10)
  2021-09-16 PDF Reader Pro Lite (2.8.4)
  2021-09-16 WeChat (3.2.0)
  2021-10-14 Microsoft AutoUpdate (4.40.21101001)
  2021-10-14 Mobile Device (1.0.0.0)
  2021-10-14 macOS Big Sur (11.6)
  2021-10-16 macOS 11.6 (11.6)
  2021-10-16 XProtectPlistConfigData (2151)
  2021-10-16 MRTConfigData (1.84)
  2021-10-18 LINE (7.3.0)
  2021-10-18 Safari (15.0)
  2021-10-18 Device Support Update (1.0.0.0.1.1632960232)

Clean up:
  ~/Library/LaunchAgents/com.polyphyodont.ts.plist
    ~/Library/polyphyodont.ts/polyphyodont.ts.app/Contents/MacOS/polyphyodont.ts
    Executable not found

Diagnostics Information (past 7-30 days):

End of report