EtreCheckPro version: 6.8.0 (68018)
Report generated: 2023-01-11 14:57:15
Download EtreCheckPro from https://etrecheck.com
Runtime: 5:48
Performance: Poor

Problem: Computer is restarting
Description: 
Mac Rebooting at Login Scr, after FileVault reached 99%

Major Issues:
  Anything that appears on this list needs immediate attention. 
  Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  SSD too slow - SSD is showing poor performance.
  Heavy RAM usage - Apps are using a large amount of RAM.
  Apps crashing - There have been numerous app crashes.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  Vintage hardware - This computer may be considered vintage.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  MacBook Air (13-inch, Early 2015)
    Status: Vintage
  MacBook Air Model: MacBookAir7,2
  1.6 GHz Dual-Core Intel Core i5 (i5-5250U) CPU: 2-core
  8 GB RAM - Not upgradeable
    BANK 0/DIMM0 - 4 GB DDR3 1600  
    BANK 1/DIMM0 - 4 GB DDR3 1600  
  Battery: Health = Normal - Cycle count = 543

Video Information:
  Intel HD Graphics 6000 - VRAM: 1536 MB
    Color LCD 1440 x 900

Drives:
  disk0 - APPLE SSD SM0128G 121.33 GB (Solid State - TRIM: Yes) 
  Internal PCI 5.0 GT/s x4 Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 121.12 GB
      disk1 [APFS Virtual drive] 121.12 GB (Shared by 6 volumes)
        disk1s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (61.99 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (269 MB used)
        disk1s3 - Recovery (APFS) [Recovery] (1.12 GB used)
        disk1s4 - VM (APFS) [APFS VM] (1.07 GB used)
        disk1s5 (APFS) [APFS Container] (15.41 GB used)
          disk1s5s1 - Macintosh HD (APFS) [APFS Snapshot] (15.41 GB used)
        disk1s6 - Update (APFS) (291 KB used)

Mounted Volumes:
  disk1s1 - Macintosh HD - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Decryption paused: 99% done
    Used: 61.99 GB
    Shared values
      Size: 121.12 GB
      Free: 41.13 GB
      Available: 51.94 GB

  disk1s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Used: 269 MB
    Shared values
      Size: 121.12 GB
      Free: 41.13 GB

  disk1s4 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Used: 1.07 GB
    Shared values
      Size: 121.12 GB
      Free: 41.13 GB

  disk1s5s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Read-only: Yes
    Used: 15.41 GB
    Shared values
      Size: 121.12 GB
      Free: 41.13 GB
      Available: 51.94 GB

  disk1s6 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Used: 291 KB
    Shared values
      Size: 121.12 GB
      Free: 41.13 GB

Network:
  Interface en3: ZTE Technologies MSM
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en2: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS Monterey 12.6.2 (21G320) 
  Time since boot: About 3 hours

Notifications:
  EtreCheckPro.app
    one notification

  com.paragon-software.ntfs.notification-agent.app
    5 notifications

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple

Unsigned Files:
  Launchd: /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist
    Executable: /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF
    Details: Exact match found in the legitimate list - probably OK

  Apps: 1

Applications:
  399 apps
  44 x86-only apps
  5 unsigned apps

Kernel Extensions:
  /Library/Extensions
    [Not Loaded] DisplayLinkDriver.kext - com.displaylink.DisplayLinkDriver (5.2 (54) - SDK 10.14)
    [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0)
    [Loaded] ufsd_NTFS.kext - com.paragon-software.filesystems.ntfs (15.5.53 - SDK 10.10)

System Launch Daemons:
  [Not Loaded]  39 Apple tasks
  [Loaded]  203 Apple tasks
  [Running]  138 Apple tasks
  [Other]  One Apple task

System Launch Agents:
  [Not Loaded]  17 Apple tasks
  [Loaded]  178 Apple tasks
  [Running]  161 Apple tasks

Launch Daemons:
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2020-09-05)
    Executable: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer

  [Running] com.displaylink.displaylinkmanager.plist (DisplayLink Corp - installed 2020-01-25)
    Executable: /Library/PrivilegedHelperTools/DisplayLink/DisplayLinkManager

  [Running] com.nordvpn.osx.helper.plist (TEFINKOM & CO S.A - installed 2021-02-08)
    Executable: /Library/PrivilegedHelperTools/com.nordvpn.osx.helper

  [Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2019-07-11)
    Executable: /Library/PrivilegedHelperTools/com.paragon-software.installer

  [Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2022-12-02)
    Command: /sbin/kextload /Library/Extensions/ufsd_NTFS.kext

  [Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2019-07-11)
    Executable: /Library/Application Support/Paragon Software/com.paragon-software.ntfsd

  [Loaded] org.wireshark.ChmodBPF.plist (Not signed - installed 2018-11-14)
    Executable: /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF

Launch Agents:
  [Not Loaded] com.displaylink.useragent-prelogin.plist (DisplayLink Corp - installed 2019-10-16)
    Executable: /Library/PrivilegedHelperTools/DisplayLink/DisplayLinkUserAgent.app/Contents/MacOS/DisplayLinkUserAgent

  [Running] com.displaylink.useragent.plist (DisplayLink Corp - installed 2019-10-16)
    Executable: /Library/PrivilegedHelperTools/DisplayLink/DisplayLinkUserAgent.app/Contents/MacOS/DisplayLinkUserAgent

  [Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2019-06-07)
    Executable: /Library/Application Support/Paragon Software/com.paragon-software.ntfs.notification-agent.app/Contents/MacOS/NotificationAgent

User Launch Agents:
  [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-10-27)
    Command: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded

  [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-10-27)
    Command: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost

User Login Items:
  [Running] CyberGhost VPN (Cyberghost SRL - installed 2022-10-25)
    Application
    /Applications/CyberGhost VPN.app

  [Running] Flux (Michael Herf - installed 2021-10-08)
    Application
    /Applications/Flux.app

  [Not Loaded] Folx Schedule Helper (Electronic Team, Inc. - installed 2022-10-05)
    Modern Login Item
    /Applications/Folx.app/Contents/Library/LoginItems/FolxScheduleHelper.app

  [Loaded] FSMenuAppLoginItemHelper (Paragon Software GmbH - installed 2019-07-12)
    Modern Login Item
    /Applications/NTFS for Mac.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app

  [Not Loaded] Viber (Viber Media SARL. - installed 2019-08-26)
    Modern Login Item
    /Applications/Viber.app

  [Not Loaded] WhatsApp Login Helper (App Store - installed 2022-12-29)
    Modern Login Item
    /Applications/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app

  [Not Loaded] HP Device Monitor (HP Inc. - installed 2018-05-16)
    Modern Login Item
    /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app

  [Not Loaded] HP Product Research (HP Inc. - installed 2018-05-16)
    Modern Login Item
    /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app

App Extensions:
  Share services:
    Telegram - /Applications/Telegram.app
    Viber - /Applications/Viber.app

  Safari extensions:
    Folx - /Applications/Folx.app

3rd Party Preference panels:
  FUSE (Benjamin Fleischer - installed 2018-12-18)
  NTFS (Paragon Software GmbH - installed 2019-06-07)

Backup:
  Auto backup: No
  Volumes being backed up: 
    Macintosh HD - Data: Disk size: 121.12 GB - Disk used: 80.00 GB 
  Destinations: 
    E******h [Local] (Last used)
      Total size: 0 B
      Total number of backups: 0

Performance:
  System Load: 2.63 (1 min ago) 2.66 (5 min ago) 2.61 (15 min ago)
  Nominal I/O usage: 0.06 MB/s
  File system: 120.07 seconds (timed out)
  Write speed: 555 MB/s
  Read speed: 1304 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 2 %
  User: 3 %
  Idle: 95 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  WindowServer 8.04 % (Apple)
  EtreCheckPro 5.08 % (Etresoft, Inc.)
  kernel_task 4.83 % (Apple)
  com.apple.WebKit.WebContent (19) 2.16 % (Apple)
  com.apple.WebKit.Networking 1.62 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  com.apple.WebKit.WebContent (19) 2.02 GB (Apple)
  EtreCheckPro 670 MB (Etresoft, Inc.)
  MTLCompilerService (32) 361 MB (Apple)
  Safari 152 MB (Apple)
  Spotlight 137 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 763 KB / 190 KB (Apple)
  com.apple.WebKit.Networking 404 KB / 191 KB (Apple)
  apsd 32 KB / 40 KB (Apple)
  rapportd 26 KB / 29 KB (Apple)
  netbiosd 7 KB / 1 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  WindowServer 6 (Apple)
  com.apple.WebKit.WebContent (19) 5 (Apple)
  com.apple.WebKit.Networking 3 (Apple)
  Safari 1 (Apple)
  AXVisualSupportAgent 0 (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 1017 MB
  Used RAM: 4.53 GB
  Cached files: 2.48 GB

  Available RAM: 3.47 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2022-12-16 Microsoft Remote Desktop (10.8.0)
  2022-12-16 WhatsApp (2.2246.10)
  2022-12-17 macOS Monterey (12.6.2)
  2022-12-17 macOS 12.6.2 (12.6.2)
  2022-12-17 MRTConfigData (1.93)
  2022-12-17 XProtectPayloads (86)
  2022-12-17 Safari (16.2)
  2022-12-17 Numbers (12.1)
  2022-12-17 Pages (12.1)
  2022-12-17 Keynote (12.1)
  2022-12-23 Todoist (8.1.2)
  2022-12-29 Python (0)
  2022-12-30 Log-Viewer (2.1.1)
  2022-12-30 Command Line Tools for Xcode (14.2)

Diagnostics Information (past 7-30 days):
  2023-01-11 14:00:31 bluetoothd Crash (2 times)
    Executable: /usr/sbin/bluetoothd
    Details:
      libsystem_c.dylib: abort() called

  2023-01-11 11:27:41 Kernel Panic (2 times)
    Details:
      panic(cpu 1 caller 0xffffff800362b570): "can't modify o 0xffffff868067
      1660 on encrypted and locked fs 0xffffff94e5049000\
      Panicked task 0xffffff9018e15350: 6 threads: pid 1: launchd


  2023-01-10 13:47:14 AppleCameraAssistant Crash (4 times)
    Executable: /System/Library/Frameworks/CoreMediaIO.framework/Versions/A/Resources/AppleCamera.plugin

  2023-01-10 12:33:27 Messages Crash
    Executable: /System/Applications/Messages.app

  2023-01-09 19:29:48 signpost_reporter High CPU Use (2 times)
    Executable: /usr/libexec/signpost_reporter

  2023-01-06 12:14:09 Google Chrome.app High CPU Use
    Executable: /Applications/Google Chrome.app


End of report