EtreCheckPro version: 6.8.4 (68040)
Report generated: 2024-05-03 15:04:18
Download EtreCheckPro from https://etrecheck.com
Runtime: 5:22
Performance: Good

Problem: Computer is restarting
Description: 
Restarts when going to sleep.

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  External drives and performance - There are external drives connected that could be affecting performance.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  iMac (Retina 4K, 21.5-inch, Late 2015)
    Status: Supported
  iMac Model: iMac16,2
  3.1 GHz Quad-Core Intel Core i5 (i5-5675R) CPU: 4-core
  8 GB RAM - Not upgradeable
    BANK 0/DIMM0 - 4 GB DDR3 1867  
    BANK 1/DIMM0 - 4 GB DDR3 1867  

Video Information:
  Intel Iris Pro Graphics 6200 - VRAM: 1536 MB
    G247HYL 1920 x 1080
    iMac (built-in) 3360 x 1890

Drives:
  disk0 - 500GB OWC Mercury Electra 6G SSD 500.11 GB (Solid State - TRIM: No) 
  External Thunderbolt 6 Gigabit Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 499.76 GB
      disk2 [APFS Virtual drive] 499.76 GB (Shared by 6 volumes)
        disk2s1 - O*******  - Data (APFS) [APFS Virtual drive] (205.93 GB used)
        disk2s2 - Preboot (APFS) [APFS Preboot] (269 MB used)
        disk2s3 - Recovery (APFS) [Recovery] (1.12 GB used)
        disk2s4 - VM (APFS) [APFS VM] (3.22 GB used)
        disk2s6 - Update (APFS) (19 MB used)
        disk2s7 (APFS) [APFS Container] (15.42 GB used)
          disk2s7s1 - O*****D (APFS) [APFS Snapshot] (15.42 GB used)

  disk1 - WDC WD10EZEX-08WN4A0 1.00 TB (Mechanical - 7200 RPM) 
  External Thunderbolt 6 Gigabit Serial ATA
    disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk1s2 [APFS Container] 999.86 GB
      disk4 [APFS Virtual drive] 999.86 GB (Shared by 1 volumes)
        disk4s4 - T************k (APFS) (889.01 GB used)

  disk3 - APPLE HDD ST1000LM024 1.00 TB (Mechanical - 5400 RPM) 
  Internal SATA 3 Gigabit Serial ATA
    disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk3s2 [APFS Container] 1000.00 GB
      disk5 [APFS Virtual drive] 1000.00 GB (Shared by 6 volumes)
        disk5s1 - Macintosh HD - Data (APFS) (55.63 GB used)
        disk5s2 - Preboot (APFS) [APFS Preboot] (271 MB used)
        disk5s3 - Recovery (APFS) [Recovery] (1.12 GB used)
        disk5s4 - VM (APFS) [APFS VM] (4.30 GB used)
        disk5s5 - Update (APFS) (19 MB used)
        disk5s6 - Macintosh HD (APFS) (15.42 GB used)

Mounted Volumes:
  disk2s1 - O*******  - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Used: 205.93 GB
    Shared values
      Size: 499.76 GB
      Free: 273.62 GB
      Available: 335.54 GB

  disk2s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Used: 269 MB
    Shared values
      Size: 499.76 GB
      Free: 273.62 GB

  disk2s4 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Used: 3.22 GB
    Shared values
      Size: 499.76 GB
      Free: 273.62 GB

  disk2s6 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Used: 19 MB
    Shared values
      Size: 499.76 GB
      Free: 273.62 GB

  disk2s7s1 - O*****D [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Read-only: Yes
    Used: 15.42 GB
    Shared values
      Size: 499.76 GB
      Free: 273.62 GB
      Available: 335.54 GB

  disk4s4 - T************k
    Filesystem: APFS
    Mount point: /Volumes/T************k
    Used: 889.01 GB
    Shared values
      Size: 999.86 GB
      Free: 110.65 GB

  disk5s1 - Macintosh HD - Data
    Filesystem: APFS
    Mount point: /Volumes/Macintosh HD - Data
    Used: 55.63 GB
    Shared values
      Size: 1000.00 GB
      Free: 923.03 GB
      Available: 923.04 GB

  disk5s6 - Macintosh HD
    Filesystem: APFS
    Mount point: /Volumes/Macintosh HD
    Read-only: Yes
    Used: 15.42 GB
    Shared values
      Size: 1000.00 GB
      Free: 923.03 GB

USB:
  USB30Bus
    Broadcom Corp. - Bluetooth USB Host Controller
    Apple Inc. - FaceTime HD Camera (Built-in)
    CPS - CST135XLU
    Apple Inc. - MacBook Air SuperDrive
    VIA Labs, Inc. - USB2.0 Hub
      VIA Labs, Inc. - USB2.0 Hub
    Apple, Inc. - Keyboard Hub
      Apple Inc. - Apple Keyboard


Network:
  Interface en0: Ethernet
  Interface en1: Wi-Fi
    802.11 a/b/g/n/ac
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS Monterey 12.7.4 (21H1123) 
  Time since boot: About 2 days

Notifications:
  EtreCheckPro.app
    2 notifications

  Speedtest.app
    one notification

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple and Malwarebytes

Unsigned Files:
  Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveUpdaterDaemon.plist
    Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveStandaloneUpdaterDaemon.plist
    Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon
    Details: Exact match found in the legitimate list - probably OK

  Running app: (launcher)
  Running app: /Library/DropboxHelperTools/Dropbox_u501/dbkextd
    Details: Domain name invalid - possibly malware

System Extensions:
  [Not Loaded] Malwarebytes Engine - version 5.1.4 (Malwarebytes Corporation - 2024-05-01)
    Application: /Applications/Malwarebytes.app - version 5.1.4 (Malwarebytes Corporation - 2024-05-01)
    Description: The Malwarebytes Engine extension manages your connection to the Malwarebytes VPN service.

Kernel Extensions:
  /Library/Extensions
    [Not Loaded] BrKernel.kext - com.BrKernel (2.5 - SDK 10.10)

System Launch Daemons:
  [Not Loaded]  40 Apple tasks
  [Loaded]  187 Apple tasks
  [Running]  154 Apple tasks
  [Other]  One Apple task

System Launch Agents:
  [Not Loaded]  19 Apple tasks
  [Loaded]  171 Apple tasks
  [Running]  167 Apple tasks

Launch Daemons:
  [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2024-05-01)
    Command: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon -i EF7AE343-3127-461B-9654-64BE4FB53387.pkg

  [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2024-05-01)
    Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon

  [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Not signed - installed 2024-03-31)
    Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon

  [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Not signed - installed 2024-04-09)
    Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon

  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2024-04-16)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper

  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2023-09-11)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper

  [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2023-12-14)
    Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon

Launch Agents:
  [Running] com.brother.LOGINserver.plist (Brother Industries, LTD. - installed 2019-09-02)
    Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver

  [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2024-05-01)
    Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent

  [Other] com.microsoft.OneDriveStandaloneUpdater.plist (Not signed - installed 2024-03-31)
    Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater

  [Other] com.microsoft.SyncReporter.plist (Not signed - installed 2024-04-09)
    Executable: /Applications/OneDrive.app/Contents/SyncReporter.app/Contents/MacOS/SyncReporter

  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2024-04-16)
    Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent

  [Not Loaded] update.log (Not signed - installed 2020-10-03)
    

User Launch Agents:
  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2024-03-29)
    Command: ~/Library/Dropbox/DropboxMacUpdate.app/Contents/MacOS/DropboxMacUpdate -check periodic

  [Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2024-04-29)
    Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2

  [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2024-02-25)
    <Empty>

  [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2024-02-25)
    <Empty>

  [Other] com.logmein.GoToMeeting.G2MAIRUploader.plist (Not signed - installed 2022-06-14)
    Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpload

  [Other] com.logmein.GoToMeeting.G2MUpdate.plist (Not signed - installed 2022-06-14)
    Executable: ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate

User Login Items:
  [Loaded] BartenderStartAtLoginHelper (Surtees Studios Limited - installed 2024-04-08)
    Modern Login Item
    /Applications/Bartender 4.app/Contents/Library/LoginItems/BartenderStartAtLoginHelper.app

  [Running] Dropbox (Dropbox, Inc. - installed 2024-05-02)
    Application
    /Applications/Dropbox.app

  [Running] Garmin Express Service (Garmin International - installed 2024-04-08)
    Modern Login Item
    /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app

  [Running] OneDrive (App Store - installed 2024-04-22)
    Application
    /Applications/OneDrive.app

  [Not Loaded] Launcher Disabler (App Store - installed 2024-04-22)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

  [Loaded] OneDrive Launcher (App Store - installed 2024-04-22)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

  [Not Loaded] SpeedTestHelper (App Store - installed 2024-04-08)
    Modern Login Item
    /Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app

  [Not Loaded] weatherbugosxhelper (App Store - installed 2024-04-08)
    Modern Login Item
    /Applications/WeatherBug.app/Contents/Library/LoginItems/weatherbugosxhelper.app

Applications:
  430 apps
  16 x86-only apps
  3 unsigned apps

App Extensions:
  Widgets:
    Twitter - /Applications/Twitter.app

  Safari extensions:
    eWallet AutoPass - /Applications/eWallet.app

  File providers:
    Dropbox - /Applications/Dropbox.app
    OneDrive File Provider - /Applications/OneDrive.app

  Share services:
    Dropbox Transfer - /Applications/Dropbox.app
    OneNote - /Applications/Microsoft OneNote.app

  Finder sync extensions:
    OneDrive Finder Integration - /Applications/OneDrive.app
    Dropbox Finder Extension - /Applications/Dropbox.app

  QuickLook Previews:
    Bartender Spotlight menu bar item Quick Look - /Applications/Bartender 4.app
      BartenderMenuBarItem

  QuickLook Previews (legacy):
    DropboxQL - ~/Library/QuickLook/DropboxQL.qlgenerator
      com.adobe.illustrator.ai-image *.ai
      public.text
      org.oasis-open.opendocument.spreadsheet *.ods
      org.oasis-open.opendocument.presentation *.odp
      com.adobe.encapsulated-postscript *.eps

Audio Plug-ins:
  MSTeamsAudioDevice: 2023.31.01.2 (Microsoft Corporation - installed 2023-08-07)

Backup:
  Auto backup: Yes
  Destinations: 
    T************k [Local] (Last used)
      Total size: 999.65 GB
      Total number of backups: 59
      Oldest backup: 2024-01-03 13:54:15
      Last backup: 2024-05-03 13:55:52
  24 local snapshots
  Oldest local snapshot: 2024-05-02 15:49:22
  Last local snapshot: 2024-05-03 14:55:08

Performance:
  System Load: 2.81 (1 min ago) 3.36 (5 min ago) 3.16 (15 min ago)
  Nominal I/O usage: 0.02 MB/s
  File system: 21.34 seconds
  Write speed: 212 MB/s
  Read speed: 123 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 7 %
  User: 10 %
  Idle: 83 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  RTProtectionDaemon 21.44 % (Malwarebytes Corporation)
  EtreCheckPro 14.52 % (Etresoft, Inc.)
  kernel_task 10.85 % (Apple)
  WindowServer 10.10 % (Apple)
  Google Chrome Helper (GPU) 9.92 % (Google LLC)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  Google Chrome Helper (Renderer) (11) 817 MB (Google LLC)
  EtreCheckPro 495 MB (Etresoft, Inc.)
  Google Chrome Helper (GPU) 210 MB (Google LLC)
  Google Chrome 206 MB (Google LLC)
  kernel_task 205 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 434 MB / 26 MB (Apple)
  Dropbox 4 MB / 2 MB (Dropbox, Inc.)
  apsd 2 MB / 936 KB (Apple)
  rapportd 1 MB / 708 KB (Apple)
  Mail 1 MB / 126 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  Google Chrome Helper (GPU) 6 (Google LLC)
  RTProtectionDaemon 5 (Malwarebytes Corporation)
  Google Chrome Helper (Renderer) (11) 3 (Google LLC)
  Mail 3 (Apple)
  WindowServer 2 (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 46 MB
  Used RAM: 5.83 GB
  Cached files: 2.13 GB

  Available RAM: 2.17 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2024-04-07 macOS 12.7.4 (12.7.4)
  2024-04-08 MRTConfigData (1.93)
  2024-04-08 Safari (17.4.1)
  2024-04-09 Microsoft OneDrive (24.55.317)
  2024-04-13 CleanMyMac X (4.15.3)
  2024-04-16 Microsoft AutoUpdate (4.70.24041420)
  2024-04-22 OneDrive (24.065.0331)
  2024-05-01 XProtectPlistConfigData (2193)
  2024-05-01 Malwarebytes for Mac (1.0)
  2024-05-02 XProtectPayloads (133)

Clean up:
  /Library/LaunchAgents/com.microsoft.SyncReporter.plist
    /Applications/OneDrive.app/Contents/SyncReporter.app/Contents/MacOS/SyncReporter
    Executable not found
  ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MAIRUploader.plist
    ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpload
    Executable not found
  ~/Library/LaunchAgents/com.logmein.GoToMeeting.G2MUpdate.plist
    ~/Library/Application Support/LogMeInInc/GoToMeeting/G2MUpdate
    Executable not found
  /Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist
    /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater
    Executable not found

Diagnostics Information (past 60 days):
  2024-05-01 17:29:26 mdsync High CPU Use (3 times)
    First occurrence: 2024-05-01 17:32:03
    Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdsync

  2024-05-01 12:46:09 photoanalysisd High CPU Use (2 times)
    First occurrence: 2024-04-29 08:50:04
    Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd

  2024-04-30 07:52:32 OneDrive.app High CPU Use
    First occurrence: 2024-04-30 07:54:38
    Executable: /Applications/OneDrive.app

  2024-04-28 17:22:43 fileproviderd High CPU Use (2 times)
    First occurrence: 2024-04-28 17:26:42
    Executable: /System/Library/Frameworks/FileProvider.framework/Support/fileproviderd

  2024-04-26 20:30:57 RTProtectionDaemon.app High CPU Use
    First occurrence: 2024-04-26 20:33:39
    Executable: /Library/Application Support/Malwarebytes/*/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app


End of report