EtreCheck version: 5.6 (5212) Report generated: 2020-08-07 17:37:33 Download EtreCheck from https://etrecheck.com Runtime: 1:53 Performance: Excellent Sandbox: Enabled Full drive access: Disabled Problem: Apps are crashing Major Issues: Anything that appears on this list needs immediate attention. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This machine has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (16-inch, 2019) MacBook Pro Model: MacBookPro16,1 2.60 GHz 6-Core Intel Core i7 (i7-9750H) CPU: 6-core 16 RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 8 GB DDR4 2667 BANK 2/ChannelB-DIMM0 - 8 GB DDR4 2667 Battery: Health = Normal - Cycle count = 2 Video Information: Intel UHD Graphics 630 - VRAM: 1536 MB AMD Radeon Pro 5300M - VRAM: 4 GB Color LCD (built-in) 3584 x 2240 27EA33 1920 x 1080 Drives: disk0 - APPLE SSD AP0512N 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes) disk1s1 - M*******************е (APFS) [APFS Virtual drive] (Shared - 25.91 GB used) disk1s2 - Macintosh HD - Data (APFS) (Shared - 831 KB used) disk1s3 - Preboot (APFS) [APFS Preboot] (Shared) disk1s4 - Recovery (APFS) [Recovery] (Shared) disk1s5 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk1s6 - Macintosh HD (APFS) (Shared - 11.02 GB used) Mounted Volumes: disk1s1 - M*******************е [APFS Virtual drive] 499.96 GB (Shared - 25.91 GB used, 461.00 GB available, 460.11 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s2 - Macintosh HD - Data 499.96 GB (Shared - 831 KB used, 460.11 GB free) APFS Mount point: /Volumes/Macintosh HD - Data Encrypted disk1s5 - VM [APFS VM] 499.96 GB (Shared - 2.15 GB used, 460.11 GB free) APFS Mount point: /private/var/vm Encrypted disk1s6 - Macintosh HD 499.96 GB (Shared - 11.02 GB used, 461.00 GB available, 460.11 GB free) APFS Mount point: / Encrypted Read-only: Yes Network: Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en7: iPhone Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge System Software: macOS Catalina 10.15.6 (19G73) Time since boot: About a day Configuration Profiles: This computer has configuration profiles installed. Notifications: Notifications not available without Full Drive Access. Security: Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus software: Apple and Symantec Unsigned Files: Launchd: /Library/LaunchAgents/com.jamfsoftware.jamf.agent.plist Executable: /usr/local/jamf/bin/jamfAgent Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.jamfsoftware.task.1.plist Executable: /usr/local/jamf/bin/jamf policy -randomDelaySeconds 300 Details: Exact match found in the legitimate list - probably OK Launchd: /Library/Application Support/JAMF/tmp/com.jamfsoftware.task.policy.startup.plist Executable: /usr/local/jamf/bin/jamf policy -event startup Details: Executable file is not accessible without Full Drive Access Launchd: /Library/LaunchAgents/com.manageengine.desktopcentral.peruseragent.plist Executable: /bin/sh /Library/DesktopCentral_Agent/bin/launchuserhandler.sh Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings2.NFM.plist Executable: /Library/Application Support/Symantec/Silo/NFM/DomainSettings/SymSharedSettingsd Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.cisco.anyconnect.gui.plist Executable: /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.jamfsoftware.startupItem.plist Executable: /Library/Application Support/JAMF/ManagementFrameworkScripts/StartupScript.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.symantec.sep.Migration.NFM.plist Executable: /Library/Application Support/Symantec/Silo/NFM/Migration/RestoreSettings '/Library/Application Support/Symantec/Silo/NFM/Migration/Data' '/Library/Application Support/Symantec/Silo/NFM/Migration/Settings' Launchd: /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist Executable: /opt/cisco/anyconnect/bin/vpnagentd -execv_instance Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.jamfsoftware.jamf.daemon.plist Executable: /usr/local/jamf/bin/jamf launchDaemon -monitorUsage Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.rapid7.ir_agent.plist Executable: /opt/rapid7/ir_agent/ir_agent Details: Executable file is hidden - possibly adware Launchd: /Library/LaunchAgents/com.cisco.anyconnect.notification.plist Executable: /opt/cisco/anyconnect/bin/Cisco AnyConnect Secure Mobility Client Notification.app Details: Exact match found in the legitimate list - probably OK Apps: 2 Kernel Extensions: /Library/Extensions acsock.kext (4.7.0 - SDK 10.13) SymXIPS.kext (8.2.2 - SDK 10.10) SymInternetSecurity.kext (14.2.1 - SDK 10.11) SymIPS.kext (14.2.1 - SDK 10.11) NortonForMac.kext (14.2.1 - SDK 10.11) System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 155 Apple tasks [Running] 142 Apple tasks System Launch Daemons: [Not Loaded] 35 Apple tasks [Loaded] 161 Apple tasks [Running] 140 Apple tasks [Other] One Apple task Launch Agents: [Loaded] com.cisco.anyconnect.gui.plist (? e1a9d14d - installed 2020-08-06) [Loaded] com.cisco.anyconnect.notification.plist (? 8b01cb06 - installed 2020-08-06) [Running] com.jamfsoftware.jamf.agent.plist (? 897e7d0b - installed 2020-08-06) [Loaded] com.manageengine.desktopcentral.peruseragent.plist (? c10878f3 - installed 2020-08-06) [Not Loaded] com.manageengine.desktopcentral.prelogin.plist (Zoho Corporation - installed 2020-08-06) [Not Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2020-08-07) Launch Daemons: [Running] com.cisco.anyconnect.vpnagentd.plist (? f363637f - installed 2018-11-27) [Running] com.jamf.management.daemon.plist (JAMF Software - installed 2020-06-21) [Running] com.jamfsoftware.jamf.daemon.plist (? e3277b86 - installed 2020-08-06) [Not Loaded] com.jamfsoftware.startupItem.plist (? 44b5eabd - installed 2020-08-06) [Other] com.jamfsoftware.task.1.plist (? 406cf388 - installed 2020-08-06) [Running] com.manageengine.desktopcentral.dcagentservice.plist (Zoho Corporation - installed 2020-07-24) [Loaded] com.manageengine.desktopcentral.dcagentupgrader.plist (Zoho Corporation - installed 2020-07-24) [Running] com.manageengine.desktopcentral.dcnotifyservice.plist (Zoho Corporation - installed 2020-08-06) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2020-08-07) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-08-07) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-10-15) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2020-08-06) [Running] com.rapid7.ir_agent.plist (? 60cf4b49 - installed 2020-08-06) [Not Loaded] com.symantec.SymLUHelper.NFM.plist (Symantec - installed 2018-11-18) [Not Loaded] com.symantec.UninstallerToolHelper.NFM.plist (Symantec - installed 2018-11-18) [Not Loaded] com.symantec.liveupdate.daemon.NFM.plist (Symantec - installed 2018-11-18) [Not Loaded] com.symantec.sep.Migration.NFM.plist (? a635c32 - installed 2018-11-18) [Not Loaded] com.symantec.sharedsettings.NFM.plist (Symantec - installed 2018-11-18) [Not Loaded] com.symantec.sharedsettings2.NFM.plist (? 7786c96 - installed 2018-11-18) [Not Loaded] com.symantec.symdaemon.NFM.plist (Symantec - installed 2018-11-18) [Not Loaded] com.symantec.symqual.detail.NFM.plist (Symantec - installed 2018-11-18) [Not Loaded] com.symantec.symqual.panicreporter.NFM.plist (Symantec - installed 2018-11-18) [Not Loaded] com.symantec.symqual.submit.NFM.plist (Symantec - installed 2018-11-18) User Login Items: [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2020-08-07) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2020-08-07) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] Termius Login Helper (App Store - installed 2020-08-06) Modern Login Item /Applications/Termius.app/Contents/Library/LoginItems/Termius Login Helper.app User Internet Plug-ins: User Internet Plug-ins need Full Drive Access User Audio Plug-ins: User Audio Plug-ins need Full Drive Access User iTunes Plug-ins: User iTunes Plug-ins need Full Drive Access Backup: Time Machine information not available without Full Drive Access. Performance: System Load: 1.27 (1 min ago) 1.47 (5 min ago) 1.43 (15 min ago) Nominal I/O speed: 0.86 MB/s File system: 17.34 seconds Write speed: 2384 MB/s Read speed: 3054 MB/s CPU Usage Snapshot: Type Overall System: 2 % User: 4 % Idle: 93 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Other processes 34.93 % (?) EtreCheck 22.51 % (App Store) Telegram 17.63 % (App Store) Safari 1.41 % (Apple) nsurlsessiond 1.18 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheck 562 MB (App Store) Telegram 453 MB (App Store) Safari 221 MB (Apple) App Store 134 MB (Apple) AppleSpell 104 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Other processes 335 MB / 1 MB (?) com.apple.WebKit.Networking.xpc 121 MB / 4 KB (Apple) Telegram 2 MB / 324 KB (App Store) PowerChime 317 B / 289 B (Apple) SystemUIServer 0 B / 452 B (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 567 MB Used RAM: 7.75 GB Cached files: 7.70 GB Available RAM: 8.25 GB Swap Used: 84 MB Software Installs (past 30 days): Install Date Name (Version) 2020-08-06 QuickAdd 2020-08-06 MRTConfigData (1.64) 2020-08-06 Gatekeeper Configuration Data (181) 2020-08-06 C Spire Self Help 2020-08-06 AnyConnect Secure Mobility Client 2020-08-06 Microsoft Teams (1.00.126352) 2020-08-06 agents-mac 2020-08-06 Telegram (6.3) 2020-08-06 Termius (6.3.0) 2020-08-06 Microsoft Remote Desktop (10.4.0) 2020-08-06 ManageEngine DesktopCentral Agent 2020-08-07 Microsoft Office Ð´Ð»Ñ Mac 2020-08-07 Microsoft OneDrive 2020-08-07 Command Line Tools for Xcode (11.5) 2020-08-07 XProtectPlistConfigData (2128) 2020-08-07 Norton for Mac 2020-08-07 EtreCheck (5.6) Clean up: /Library/LaunchDaemons/com.symantec.sharedsettings2.NFM.plist /Library/Application Support/Symantec/Silo/NFM/DomainSettings/SymSharedSettingsd Executable not found /Library/LaunchDaemons/com.symantec.sep.Migration.NFM.plist /Library/Application Support/Symantec/Silo/NFM/Migration/RestoreSettings Executable not found Diagnostics Information (past 7-30 days): Directory /Library/Logs/DiagnosticReports is not accessible. Enable Full Drive Access to see more information. End of report