EtreCheckPro version: 6.7.2 (67019) Report generated: 2022-11-06 09:52:49 Download EtreCheckPro from https://etrecheck.com Runtime: 3:33 Performance: Good Problem: Other problem Description: I seemingly botched a Time Machine back up to a Seagate OneTouch HDD 2 T drive. Yes, really. After several suggestions from Seagate support, I dove into some solutions from the Apple forums that seemed to match my skill level and now have a proper self inflicted mess on my hands. Even attempted a data transfer, folder by folder, of entire drive to the HDD. All seemed to be working well though HDD has to be reselected after going silent for weeks at a time. iMac starts fine though has g otten much slower and has begun hanging up while using both Apple Phot os and Adobe Elements. Also windows that appear to contain files and d ata not associated with everyday usage pop up and and out without any apparent pattern. I'm wondering if it would be best to do a proper backup, then wipe the Machine and do a reinstall of the OS. If this sounds reasonable, how and where to find the info that would enable me to give it a go? Major Issues: None Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Apps crashing - There have been numerous app crashes. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system. Limited permissions - More information may be available with Full Disk Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: iMac (Retina 5K, 27-inch, Late 2015) Status: Supported iMac Model: iMac17,1 3.2 GHz Quad-Core Intel Core i5 (i5-6500) CPU: 4-core 8 GB RAM - Upgradeable BANK 0/DIMM0 - 4 GB DDR3 1867 BANK 0/DIMM1 - Empty BANK 1/DIMM0 - 4 GB DDR3 1867 BANK 1/DIMM1 - Empty Video Information: AMD Radeon R9 M390 - VRAM: 2 GB iMac (built-in) 5120 x 2880 Drives: disk0 - APPLE SSD AP0032H 24.00 GB (Solid State - TRIM: Yes) Internal PCI-Express 5.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Fusion Drive] 23.69 GB disk2 [APFS Virtual drive] 1.02 TB (Shared by 6 volumes) disk2s1 - H********* - Data (APFS) [APFS Virtual drive] (184.56 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (480 MB used) disk2s3 - Recovery (APFS) [Recovery] (1.12 GB used) disk2s4 - VM (APFS) [APFS VM] (1 MB used) disk2s5 (APFS) [APFS Container] (15.41 GB used) disk2s5s1 - H*********1 (APFS) [APFS Snapshot] (15.41 GB used) disk2s6 - Update (APFS) (6 MB used) disk1 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM) Internal SATA 3 Gigabit Serial ATA disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk1s2 [APFS Fusion Drive] 1000.00 GB disk2 [APFS Virtual drive] 1.02 TB (Shared by 6 volumes) disk2s1 - H********* - Data (APFS) [APFS Virtual drive] (184.56 GB used) disk2s2 - Preboot (APFS) [APFS Preboot] (480 MB used) disk2s3 - Recovery (APFS) [Recovery] (1.12 GB used) disk2s4 - VM (APFS) [APFS VM] (1 MB used) disk2s5 (APFS) [APFS Container] (15.41 GB used) disk2s5s1 - H*********1 (APFS) [APFS Snapshot] (15.41 GB used) disk2s6 - Update (APFS) (6 MB used) disk3 - Seagate OneTouch HDD 2.00 TB External USB 5 Gbit/s USB disk3s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk3s2 [APFS Container] 2.00 TB disk4 [APFS Virtual drive] 2.00 TB (Shared by 1 volumes) disk4s1 - T*****************p (APFS) (158.76 GB used) Mounted Volumes: disk2s1 - H********* - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Fusion drive Used: 184.56 GB Shared values Size: 1.02 TB Free: 817.57 GB Available: 839.14 GB disk2s2 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Fusion drive Used: 480 MB Shared values Size: 1.02 TB Free: 817.57 GB disk2s4 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Fusion drive Used: 1 MB Shared values Size: 1.02 TB Free: 817.57 GB disk2s5s1 - H*********1 [APFS Snapshot] Filesystem: APFS Mount point: / Fusion drive Read-only: Yes Used: 15.41 GB Shared values Size: 1.02 TB Free: 817.57 GB Available: 839.14 GB disk2s6 - Update Filesystem: APFS Mount point: /System/Volumes/Update Fusion drive Used: 6 MB Shared values Size: 1.02 TB Free: 817.57 GB disk4s1 - T*****************p Filesystem: APFS Mount point: /Volumes/T*****************p Used: 158.76 GB Shared values Size: 2.00 TB Free: 1.84 TB Network: Interface en0: Ethernet Interface en1: Wi-Fi 802.11 a/b/g/n/ac Interface bridge0: Thunderbolt Bridge Remote login: Enabled System Software: macOS Monterey 12.6.1 (21G217) Time since boot: About an hour Notifications: EtreCheckPro.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple and Malwarebytes Remote login: Enabled Unsigned Files: Launchd: ~/Library/LaunchAgents/com.nchsoftware.expressaccounts.agent.plist Executable: ~/Library/NCH Software/ExpressAccounts/ExpressAccountsAgent -service Details: Exact match found in the legitimate list - probably OK Login Item: /etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist Plugin: /Library/Internet Plug-Ins/EPPEX Plugin.plugin Plugin: /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin Plugin: /Library/Internet Plug-Ins/AdobePDFViewer.plugin Plugin: /Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin Plugin: /Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin Plugin: /Library/Internet Plug-Ins/Easy-WebPrint EX.plugin Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Plugin: /Library/Internet Plug-Ins/RealPlayer Plugin.plugin Plugin: /Library/Internet Plug-Ins/DirectorShockwave.plugin Preference panel: /Library/PreferencePanes/MenuMeters.prefPane Apps: 4 Old Applications: 10 x86-only apps Kernel Extensions: /Applications/Recoverit.app [Not Loaded] WondershareDriver.kext - com.wondershare.driver (2.1.3 - SDK 10.14) /Library/Application Support/Roxio [Not Loaded] TDIXController.kext - com.roxio.TDIXController (1.6) /Library/Extensions [Not Loaded] CiscoVPN.kext - com.cisco.nke.ipsec (2.0.1) [Not Loaded] EPSONUSBPrintClass.kext - com.epson.print.kext.USBPrintClass (1.2.4) [Not Loaded] hp_qc_io_enabler.kext - com.hp.hpio.hp_psa530_630_io_enabler (1.0.1) [Not Loaded] hp_fax_io.kext - com.hp.kext.hp-fax-io (5.31.0 - SDK 10.13) [Not Loaded] hp_designjet_series.kext - com.hp.print.hpio.Designjet.kext (2.2) [Not Loaded] hp_Deskjet_io_enabler.kext - com.hp.print.hpio.Deskjet.kext (3.0.3) [Not Loaded] hp_Inkjet_io_enabler.kext - com.hp.print.hpio.Inkjet.kext (3.0.3) [Not Loaded] hp_Inkjet1_io_enabler.kext - com.hp.print.hpio.Inkjet1.kext (3.2.1 - SDK 10.8) [Not Loaded] hp_Inkjet3_io_enabler.kext - com.hp.print.hpio.Inkjet3.kext (2.0.1) [Not Loaded] hp_Inkjet4_io_enabler.kext - com.hp.print.hpio.Inkjet4.kext (4.6.0 - SDK 10.14) [Not Loaded] hp_Officejet_io_enabler.kext - com.hp.print.hpio.Officejet.kext (3.0.3) [Not Loaded] hp_Photosmart_io_enabler.kext - com.hp.print.hpio.Photosmart.kext (4.0.2) [Not Loaded] hp_Inkjet7_io_enabler.kext - com.hp.print.hpio.inkjet7.kext (1.0.2) [Not Loaded] hp_Inkjet8_io_enabler.kext - com.hp.print.hpio.inkjet8.kext (2.1.1) [Not Loaded] LexmarkUSBMerge.kext - com.lexmark.print.usbmerge (1.16.11) [Loaded] ufsd_NTFS.kext - com.paragon-software.filesystems.ntfs (15.9.329 - SDK 10.10) [Not Loaded] SMSIWirelessUSB.kext - com.smithmicro.driver.WirelessUSB (2.0.0) [Not Loaded] BJUSBLoad.kext - jp.co.canon.bj.print.BJUSBLoad (10.69.0 - SDK 10.6) [Not Loaded] CIJUSBLoad.kext - jp.co.canon.ij.print.CIJUSBLoad (11.0.0 - SDK 10.6) System Launch Daemons: [Not Loaded] 38 Apple tasks [Loaded] 197 Apple tasks [Running] 145 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 183 Apple tasks [Running] 156 Apple tasks Launch Daemons: [Loaded] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2022-09-05) [Other] com.adobe.agsservice.plist (Not signed - installed 2022-06-02) [Loaded] com.adobe.eus2022.v1.plist (Adobe Inc. - installed 2022-08-25) [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2022-08-04) [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2022-07-08) [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2022-11-03) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2022-11-03) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2022-11-03) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2022-11-03) [Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2022-10-13) [Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2022-06-25) [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2022-09-16) Launch Agents: [Other] com.adobe.ElementsAutoCreator-18.0.plist (Not signed - installed 2020-02-18) [Loaded] com.adobe.ElementsAutoCreator-20.0.plist (Adobe Inc. - installed 2022-08-25) [Running] com.adobe.ElementsAutoUpdate-2022.plist (Adobe Inc. - installed 2022-08-25) [Not Loaded] com.adobe.GC.AGM.plist (Not signed - installed 2022-06-02) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Not signed - installed 2020-02-18) [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2022-07-08) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2022-11-03) [Loaded] com.microsoft.SyncReporter.plist (Microsoft Corporation - installed 2022-11-03) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2022-11-03) [Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2021-10-11) User Launch Agents: [Other] com.adobe.ARM.***.plist (Not signed - installed 2019-12-04) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Not signed - installed 2020-02-18) [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-10-27) [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-27) [Running] com.hp.devicemonitor.plist (HP Inc. - installed 2022-11-06) [Running] com.hp.productresearch.plist (HP Inc. - installed 2022-11-06) [Running] com.nchsoftware.expressaccounts.agent.plist (Not signed - installed 2022-07-07) [Running] com.seagate.toolkit.plist (Seagate Technologies LLC - installed 2022-10-29) User Login Items: [Not Loaded] CIJSUAgent (Canon Inc. - installed 2022-01-31) Modern Login Item /Applications/Canon Utilities/IJ Scan Utility/Canon IJ Scan Utility2.app/Contents/Library/LoginItems/CIJSUAgent.app [Not Loaded] ClassicWeather (App Store - installed 2022-09-25) Modern Login Item /Applications/ClassicWeather.app/Contents/Library/LoginItems/CW LaunchHelperApp.app [Not Loaded] ForecastBarHelper (App Store - installed 2022-03-11) Modern Login Item /Applications/Forecast Bar.app/Contents/Library/LoginItems/ForecastBarHelper.app [Not Loaded] JustJoinHelper (App Store - installed 2022-07-04) Modern Login Item /Applications/JustJoin.app/Contents/Library/LoginItems/JustJoinHelper.app [Running] Messenger Helper (Facebook, Inc. - installed 2022-07-12) Modern Login Item /Applications/Messenger.app/Contents/Library/LoginItems/Messenger Helper.app [Not Loaded] Messenger Login Helper (Facebook, Inc. - installed 2022-07-12) Modern Login Item /Applications/Messenger.app/Contents/Library/LoginItems/Messenger Login Helper.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2022-11-03) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2022-11-03) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] WeatherDockFreeHelper (App Store - installed 2021-10-22) Modern Login Item /Applications/Weather Dock free.app/Contents/Library/LoginItems/WeatherDockFreeHelper.app [Loaded] weatherbugosxhelper (App Store - installed 2022-06-16) Modern Login Item /Applications/WeatherBug.app/Contents/Library/LoginItems/weatherbugosxhelper.app [Not Loaded] WeatherlyLauncher (App Store - installed 2022-10-18) Modern Login Item /Applications/Weatherly.app/Contents/Library/LoginItems/WeatherlyLauncher.app [Not Loaded] okawifiautulogin (App Store - installed 2022-09-05) Modern Login Item /Applications/okawifi.app/Contents/Library/LoginItems/okawifiautulogin.app [Running] HP Device Monitor (HP Inc. - installed 2020-07-13) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Running] HP Product Research (HP Inc. - installed 2020-07-13) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app [Not Loaded] HP Data Uploader (HP Inc. - installed 2020-07-13) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app/Contents/Resources/HP Data Uploader.app [Loaded] com.adobe.SwitchBoard.monitor.plist (Not signed) MachInit /etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist Internet Plug-ins: AdobeAAMDetect: 3.0.0.0 (Adobe Systems, Inc. - installed 2019-03-12) iPhotoPhotocast: 7.0 (Apple - installed 2012-04-04) EPPEX Plugin: 10.0 (? - installed 2015-06-22) AdobePDFViewerNPAPI: 10.1.14 (? - installed 2015-05-13) AdobePDFViewer: 10.1.14 (? - installed 2015-05-13) OfficeLiveBrowserPlugin: 12.3.6 (? - installed 2014-06-01) Google Earth Web Plug-in: 5.1 (? - installed 2009-11-11) Easy-WebPrint EX: 1.1.0 (? - installed 2014-10-04) Silverlight: 5.1.50901.0 (? - installed 2017-01-25) RealPlayer Plugin: (?) DirectorShockwave: 11.5.6r606 (? - installed 2010-02-26) 3rd Party Preference panels: MenuMeters (? - installed 2006-01-24) ParagonNTFS (Paragon Software GmbH - installed 2021-10-11) Toolkit (Seagate Technologies LLC - installed 2022-10-25) Backup: Time Machine information is limited without Full Disk Access Destinations: T*****************p [Local] (Last used) 7 local snapshots Oldest local snapshot: 2022-11-05 10:39:59 Last local snapshot: 2022-11-06 09:00:56 Performance: System Load: 2.02 (1 min ago) 1.85 (5 min ago) 1.75 (15 min ago) Nominal I/O usage: 0.01 MB/s File system: 21.51 seconds Write speed: 196 MB/s Read speed: 888 MB/s CPU Usage Snapshot: Type Overall System: 3 % User: 7 % Idle: 91 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) RTProtectionDaemon 16.80 % (Malwarebytes Corporation) EtreCheckPro 13.84 % (Etresoft, Inc.) WindowServer 4.20 % (Apple) kernel_task 2.62 % (Apple) Adobe Elements 2022 Update Service 0.28 % (Adobe Inc.) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) com.apple.WebKit.WebContent (9) 1.80 GB (Apple) EtreCheckPro 833 MB (Etresoft, Inc.) Safari 151 MB (Apple) RTProtectionDaemon 150 MB (Malwarebytes Corporation) mds_stores 141 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) mDNSResponder 451 KB / 156 KB (Apple) com.apple.WebKit.Networking 390 KB / 164 KB (Apple) rapportd 55 KB / 15 KB (Apple) trustd 62 KB / 4 KB (Apple) apsd 9 KB / 19 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) RTProtectionDaemon 8 (Malwarebytes Corporation) WindowServer 3 (Apple) AXVisualSupportAgent 0 (Apple) Toolkit 0 (Seagate Technologies LLC) Finder 0 (Apple) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 63 MB Used RAM: 5.39 GB Cached files: 2.55 GB Available RAM: 2.61 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2022-09-13 macOS 12.6 (12.6) 2022-09-16 Zoom (5.11.6.9890) 2022-09-25 ClassicWeather (5.2.2) 2022-10-09 Authenticator (3.14.0) 2022-10-12 Microsoft AutoUpdate (4.52.22101101) 2022-10-13 Microsoft Excel (16.66.22101101) 2022-10-13 Microsoft OneNote (16.66.22101101) 2022-10-13 Microsoft PowerPoint (16.66.22101101) 2022-10-13 Microsoft Word (16.66.22101101) 2022-10-13 XProtectPlistConfigData (2163) 2022-10-18 Weatherly (4.16) 2022-10-19 Canon IJ Network Tool (4.7.5) 2022-10-19 My Image Garden V366 (366) 2022-10-19 Quick Menu (2.8.2) 2022-10-21 PDF Reader (1.1) 2022-10-22 Parcel (7.6) 2022-10-26 Safari (16.1) 2022-10-26 Numbers (12.1) 2022-10-28 XProtectPayloads (83) 2022-10-29 Toolbox for Pages (6.2.4) 2022-10-29 Pages (12.1) 2022-10-29 macOS 12.6.1 (12.6.1) 2022-11-01 Microsoft Outlook (16.66.22101101) 2022-11-02 GarageBand (10.4.7) 2022-11-03 Microsoft Office (16.66.22101101) Clean up: /Library/LaunchDaemons/com.adobe.agsservice.plist /Library/Application Support/Adobe/AdobeGCClient/AGSService Executable not found ~/Library/LaunchAgents/com.adobe.GC.Invoker-1.0.plist /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility Executable not found ~/Library/LaunchAgents/com.adobe.ARM.***.plist /Applications/Adobe Acrobat X Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper Executable not found /Library/LaunchAgents/com.adobe.ElementsAutoCreator-18.0.plist /Applications/Adobe Elements 2020 Organizer.app/Contents/Elements Auto Creations 2020.app/Contents/MacOS/Elements Auto Creations 2020 Executable not found /Library/LaunchAgents/com.adobe.GC.Invoker-1.0.plist /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility Executable not found /Library/LaunchAgents/com.adobe.GC.AGM.plist /Library/Application Support/Adobe/AdobeGCClient/AGMService Executable not found Diagnostics Information (past 7-30 days): 2022-11-06 09:28:20 PhotoshopServer Crash (19 times) Executable: /Applications/Adobe Elements 2022 Organizer.app 2022-11-06 08:36:44 bluetoothd Crash (8 times) Executable: /usr/sbin/bluetoothd Details: libsystem_c.dylib: abort() called 2022-11-06 08:03:48 mdsync High CPU Use (8 times) Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdsync 2022-11-05 13:32:44 Parcel Mac Widget Crash (2 times) Executable: /Applications/Parcel.app Details: libsystem_c.dylib: abort() called 2022-11-05 13:08:57 signpost_reporter High CPU Use (4 times) Executable: /usr/libexec/signpost_reporter 2022-11-05 13:05:26 NotificationAgent Crash (6 times) Executable: /Library/Application Support/Paragon Software/com.paragon-software.ntfs.notification-agent.app Details: libsystem_c.dylib: abort() called 2022-11-03 14:10:26 com.apple.WebKit.WebContent High CPU Use (2 times) Executable: /Library/Apple/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent 2022-11-03 13:49:05 UniversalControl Crash Executable: /System/Library/CoreServices/UniversalControl.app iPhoneRestore Unknown 2022-11-03 13:19:26 RTProtectionDaemon.app High CPU Use (2 times) Executable: /Library/Application Support/Malwarebytes/*/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app 2022-11-02 13:15:32 Pages Crash (2 times) Executable: /Applications/Pages.app Details: libsystem_c.dylib: abort() called 2022-10-30 10:26:08 MTLCompilerService Crash (2 times) Executable: /System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService End of report