EtreCheck version: 5.1 (5020) Report generated: 2019-01-01 14:42:13 Download EtreCheck from https://etrecheck.com Runtime: 3:02 Performance: Good Sandbox: Enabled Full drive access: Disabled Problem: Computer is restarting Major Issues: Anything that appears on this list needs immediate attention. More than one antivirus app - This machine has multiple antivirus apps installed. Minor Issues: These issues do not need immediate attention but they may indicate future problems. Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed. System modifications - There are a large number of system modifications running in the background. 32-bit Apps - This machine has 32-bits apps that may have problems in the future. Abnormal shutdown - Your machine shut down abnormally. Limited drive access - More information may be available with Full Drive Access. Hardware Information: iMac (27-inch, Mid 2011) iMac Model: iMac12,2 1 3.4 GHz Intel Core i7 (i7-2600) CPU: 4-core 16 RAM - At maximum BANK 0/DIMM0 - 8 GB DDR3 1333 ok BANK 1/DIMM0 - 8 GB DDR3 1333 ok BANK 0/DIMM1 - Empty BANK 1/DIMM1 - Empty Video Information: AMD Radeon HD 6970M - VRAM: 2048 MB iMac 2560 x 1440 LCD-MONITOR 1680 x 1050 Drives: disk0 - ST6000NM0024-1HT17Z 6.00 TB (Mechanical - 7200 RPM) Internal SATA 6 Gigabit Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 - U***s (Journaled HFS+) 6.00 TB (5.19 TB used) disk1 - Samsung SSD 850 EVO 1TB 1.00 TB (Solid State - TRIM: Yes) Internal SATA 6 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 [APFS Container] 1000.00 GB disk2 [APFS Virtual drive] 1000.00 GB (Shared by 4 volumes) disk2s1 - M**********W (APFS) (Shared - 224.63 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (Shared) disk2s3 - Recovery (APFS) [Recovery] (Shared) disk2s4 - VM (APFS) [APFS VM] (Shared - 1.07 GB used) disk3 - APPLE SD Card Reader 63.86 GB (SD Card) Internal USB 480 Mbit/s USB disk3s1 - C******C 63.85 GB (21.05 GB used) Mounted Volumes: disk0s2 - U***s 6.00 TB (811.61 GB free) Journaled HFS+ Mount point: /Volumes/U***s disk2s1 - M**********W 1000.00 GB (773.55 GB free) APFS Mount point: / disk2s4 - VM [APFS VM] (Shared - 1.07 GB used) APFS Mount point: /private/var/vm disk3s1 - C******C 63.85 GB (42.78 GB free) Mount point: /Volumes/C******C Network: Interface wchusbserialfd1420: USB2.0-Serial Interface en0: Ethernet Proxy Auto Discovery Interface en5: iPhone Interface en6: iPad Interface en1: Wi-Fi 802.11 a/b/g/n Interface en4: Bluetooth PAN System Software: macOS High Sierra 10.13.6 (17G4015) Time since boot: Less than an hour Configuration Files: File /etc/sysctl.conf exists but not expected /etc/hosts - Count: 14 Security: System Status Gatekeeper Enabled System Integrity Protection Enabled Unsigned Files: Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.dropbox.DropboxMacUpdate.agent.plist Executable: /Volumes/U***s/U***s/C***s/L*****y/D*****x/D******************p/C******s/M***S/D**************e -check periodic Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.synology.SynoSIMBL.plist Executable: /Library/ScriptingAdditions/SynoCxtMenuSIMBL.osax/Contents/Resources/SynoCxtMenuSIMBL Agent.app/Contents/MacOS/SynoCxtMenuSIMBL Agent Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist Executable: '~/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app' --args -scheduled Details: Exact match found in the whitelist - probably OK Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchAgents/com.divx.dms.agent.plist Executable: /Library/Application Support/DivX/DivXMediaServer.app/Contents/MacOS/DivXMediaServer Details: Exact match found in the whitelist - probably OK Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist Executable: /Library/Application Support/Citrix Receiver/ctxusbd Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist Executable: /Volumes/U***s/U***s/C***s/L*****y/A*****************t/S*****y/S**************r Details: Exact match found in the whitelist - probably OK Launchd: ~/Library/LaunchAgents/com.amazon.music.plist Executable: /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper Details: Exact match found in the whitelist - probably OK 32-bit Applications: 83 32-bit apps Kernel Extensions: /Applications/Hotspot Shield.app tun.kext (1.0) /Applications/Toast 11 Titanium/Spin Doctor.app Terminus.kext (4) /Applications/Toast 11 Titanium/Toast Titanium.app RoxioBluRaySupport.kext (1.1.6) TDIXController.kext (2.0) /Applications/VMware Fusion.app VMwareVMCI.kext (10.1.0) vmioplug.kext (10.1.0) vmnet.kext (10.1.0) vmmon.kext (10.1.0) /Library/Application Support/Citrix Receiver CitrixGUSB.kext (12.5.0 - SDK 10.9) /Library/Application Support/Malwarebytes/MBAM/Kext MB_MBAM_Protection.kext (3.6 - SDK 10.14) /Library/Extensions LittleSnitch.kext (4.2.4 - SDK 10.11) klif.kext (3.0.4a41) klnke.kext (1.6) usbserial.kext (1.1.1 - SDK 10.9) /System/Library/Extensions ComputerAudioCapture.kext (1.0.0 - SDK 10.8) System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 165 Apple tasks [Running] 112 Apple tasks System Launch Daemons: [Not Loaded] 37 Apple tasks [Loaded] 187 Apple tasks [Running] 112 Apple tasks Launch Agents: [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2018-11-10) [Loaded] com.divx.update.agent.plist (? a041d049 - installed 2016-04-13) [Running] com.brother.LOGINserver.plist (? a1772de2 - installed 2016-10-17) [Running] com.synology.SynoSIMBL.plist (? bba1eb5c - installed 2015-11-24) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-12-13) [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2018-12-19) [Running] com.citrix.ServiceRecords.plist (? 8e6543d - installed 2017-02-01) [Running] com.citrix.ReceiverHelper.plist (? bbfad3f1 - installed 2017-02-01) [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2018-10-19) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18) [Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-12-12) [Loaded] com.divx.dms.agent.plist (? bf9bdaf7 - installed 2016-05-31) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-12-07) [Running] com.citrix.AuthManager_Mac.plist (? 1ce99fae - installed 2017-02-01) [Running] at.obdev.LittleSnitchHelper.plist (Objective Development Software GmbH - installed 2018-12-12) [Running] at.obdev.LittleSnitchUIAgent.plist (Objective Development Software GmbH - installed 2018-12-12) [Loaded] com.synology.SynoSIMBL_RefreshFinder.plist (Apple - installed 2017-10-03) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-12-19) Launch Daemons: [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-12-11) [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-11-29) [Loaded] com.cyberghostsrl.CyberghostPrivilegedHelper.plist (Cyberghost SRL - installed 2017-09-17) [Loaded] com.apple.aelwriter.plist (Apple - installed 2012-06-30) [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25) [Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2017-02-01) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-12-07) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-10-19) [Loaded] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2018-11-10) [Loaded] com.bombich.ccchelper.plist (? c6624472 - installed 2016-06-19) [Loaded] com.nordvpn.NordVPN.Helper.plist (TEFINKOM & CO S.A - installed 2018-04-03) [Running] at.obdev.littlesnitchd.plist (Objective Development Software GmbH - installed 2018-12-12) [Loaded] com.macpaw.CleanMyMac2.Agent.plist (? f27087f6 - installed 2015-08-26) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-18) [Running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-12-19) [Running] com.surteesstudios.hddfancontroldaemon.plist (? 750580a6 - installed 2014-06-04) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2018-12-13) [Loaded] com.barebones.authd.plist (? c13813d8 - installed 2016-10-02) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-12-13) [Running] com.backblaze.bzserv.plist (Backblaze - installed 2018-11-23) [Running] com.tunabellysoftware.TGFanHelper.plist (Tunabelly Software Inc. - installed 2018-09-08) [Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-10-06) [Loaded] com.macpaw.CleanMyMac3.Agent.plist (MacPaw Inc. - installed 2018-12-30) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-12-09) [Loaded] com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2017-06-13) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-10-19) User Launch Agents: [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (? 0 - installed 2018-12-11) [Loaded] com.macpaw.CleanMyMac3.Scheduler.plist (? 0 - installed 2017-09-30) [Running] com.amazon.music.plist (? 0 - installed 2018-08-09) [Running] com.spotify.webhelper.plist (? 0 - installed 2018-10-23) [Loaded] com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-09-01) [Running] com.backblaze.bzbmenu.plist (Backblaze - installed 2019-01-01) User Login Items: Caffeine.app (App Store - installed 2014-12-22) (/Applications/Caffeine.app) CleanMyMac 3 Menu.app (MacPaw Inc. - installed 2018-12-30) (/Applications/CleanMyMac 3.app/Contents/MacOS/CleanMyMac 3 Menu.app) Qfinder Pro.app (? - installed 2018-12-30) (/Applications/Qfinder Pro.app) Resilio Sync.app (Resilio, Inc. - installed 2018-12-30) (/Applications/Resilio Sync.app) iTunesHelper.app (Apple - installed 2018-07-11) (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app) Internet Plug-ins: npSurveillancePlugin_1.0.0.1158: SurveillancePlugin_x86_64 1.0.0.1158 (installed 2017-03-05) OVSHelper: 1.1 (installed 2016-06-06) Unity Web Player: UnityPlayer version 4.3.7f1 (installed 2014-05-15) Flip4Mac WMV Plugin: 2.4.2.4 (installed 2012-03-31) AdobeAAMDetect: 3.0.0.0 (installed 2018-11-10) FlashPlayer-10.6: 32.0.0.101 (installed 2018-12-30) DivX Web Player: 3.6.0.4 (installed 2016-05-31) AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-12-30) QuickTime Plugin: 7.7.3 (installed 2018-12-30) Flash Player: 32.0.0.101 (installed 2018-12-30) Silverlight: 5.1.41212.0 (installed 2017-05-29) SharePointBrowserPlugin: 14.7.7 (installed 2017-09-14) AdobePDFViewer: 19.010.20064 (installed 2018-12-30) CouponPrinter-FireFox_v2: 1.1.10 (installed 2013-05-13) PepperFlashPlayer: 32.0.0.101 (installed 2018-12-05) CitrixICAClientPlugIn: 12.5.0 (installed 2017-05-29) JavaAppletPlugin: Java 8 Update 191 build 12 (installed 2018-12-30) 3rd Party Preference Panes: Backblaze Backup (installed 2018-12-30) Flash Player (installed 2018-11-29) HDD Fan Control (installed 2017-05-29) Java (installed 2018-12-30) Time Machine: Time Machine information not available without Full Drive Access. Performance: System Load: 3.98 (1 min ago) 3.18 (5 min ago) 2.25 (15 min ago) Nominal I/O speed: 5.42 MB/s File system: 52.58 seconds Write speed: 477 MB/s Read speed: 498 MB/s CPU Usage: Type Overall System 5 % User 15 % Idle 80 % Top Processes by CPU: Process (count) CPU (Source - Location) Other processes 123.96 % (?) EtreCheck 18.06 % (App Store) Console 4.18 % (Apple) iconservicesagent 3.50 % (Apple) Google Chrome 3.10 % (Google, Inc.) Top Processes by Memory: Process (count) RAM usage (Source - Location) EtreCheck 620 MB (App Store) com.apple.SpeechRecognitionCore.speechrecognitiond 556 MB (Apple) Microsoft Word 300 MB (Microsoft Corporation) Google Chrome 274 MB (Google, Inc.) Resilio Sync 161 MB (Resilio, Inc.) Top Processes by Network Use: Process Input / Output (Source - Location) mDNSResponder 16 KB / 21 KB (Apple) apsd 5 KB / 12 KB (Apple) neagent 4 KB / 2 KB (Apple) netbiosd 2 KB / 905 B (Apple) keyboardservicesd 0 B / 0 B (Apple) Virtual Memory Information: Available RAM 5.83 GB Free RAM 48 MB Used RAM 10.17 GB Cached files 5.79 GB Swap Used 94 MB Software Installs (past 30 days): Install Date Name (Version) 2018-12-05 Gatekeeper Configuration Data (157) 2018-12-05 Easy Image Viewer (4.0) 2018-12-05 Safari (12.0.2) 2018-12-05 Adobe Flash Player 2018-12-05 Adobe Pepper Flash Player 2018-12-09 LastPass (4.3.0) 2018-12-11 Translate Tab (2.0.3) 2018-12-12 Adobe Acrobat DC (19.010.20064) 2018-12-12 XProtectPlistConfigData (2101) 2018-12-12 Purple Tree (3.3.2) 2018-12-13 Microsoft Office for Mac 2018-12-13 MRTConfigData (1.38) 2018-12-15 Spark (2.1.4) 2018-12-20 WiFi Scanner (2.8.2) 2018-12-21 Security Update 2018-003 (10.13.6) 2018-12-21 Relax Melodies (6.0.1) 2018-12-21 Red Crucible - Reloaded (1.4.42) 2018-12-21 EtreCheck (5.1) 2018-12-29 Java 8 Update 191 2018-12-30 AVG Cleaner (4766) 2018-12-30 WhatsApp (0.3.1850) 2018-12-30 Detexif (1.0.3) Diagnostics Information (past 7 days): 2019-01-01 14:24:30 Last Shutdown Cause: 0 - Power loss Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access. End of report