EtreCheckPro version: 6.8.7 (68068) Report generated: 2024-12-21 03:50:24 Download EtreCheckPro from https://etrecheck.com Runtime: 3:31 Performance: Good Problem: Other problem Description: I have redirects on my browsers search engine for google. When I use t he duckduckgo or yahoo search engine the searches are just fine, but w hen I use google it just redirects to a different domain. For safari’s google search it redirects to startpage.com and for chrome’s google s earch it redirects to a different yahoo domain. Major Issues: Anything that appears on this list needs immediate attention. No Time Machine backup - Time Machine backup not found. Heavy CPU usage - Some processes are using an unusually high amount of CPU. System extension blocked - There are system extensions awaiting user approval. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Runaway user process - A user process is using a large percentage of your CPU. External drives and performance - There are external drives connected that could be affecting performance. Hardware Information: MacBook Pro (13-inch, M1, 2020) Status: Supported MacBook Pro Model: MacBookPro17,1 2.40 GHz Apple M1 (m1) CPU: 8-core 8 GB RAM - Not upgradeable Battery: Health = Normal - Cycle count = 312 Video Information: Apple M1 Color LCD (built-in) 2880 x 1800 Drives: disk0 - APPLE SSD AP0512Q 500.28 GB (Solid State - TRIM: Yes) Internal Apple Fabric NVM Express disk0s1 [APFS Container] 524 MB disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes) disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used) disk1s2 - xART (APFS) (6 MB used) disk1s3 - Hardware (APFS) (602 KB used) disk1s4 - Recovery (APFS) [Recovery] (20 KB used) disk0s2 [APFS Container] 494.38 GB disk3 [APFS Virtual drive] 494.38 GB (Shared by 6 volumes) disk3s1 (APFS) [APFS Container] (11.09 GB used) disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (11.09 GB used) disk3s2 - Preboot (APFS) [APFS Preboot] (13.06 GB used) disk3s3 - Recovery (APFS) [Recovery] (2.01 GB used) disk3s4 - Update (APFS) (678 MB used) disk3s5 - Data (APFS) [APFS Virtual drive] (258.49 GB used) disk3s6 - VM (APFS) [APFS VM] (6.44 GB used) disk0s3 [APFS Container] 5.37 GB disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes) disk2s1 - Recovery (APFS) [Recovery] (1.75 GB used) disk2s2 - Update (APFS) (3 MB used) disk4 - Apple Disk Image 23 MB (Disk Image) External Virtual Interface disk4s1 - M****************r (Mac OS Extended) 23 MB (18 MB used) Mounted Volumes: disk1s1 - iSCPreboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/iSCPreboot Used: 6 MB Shared values Size: 524 MB Free: 507 MB disk1s2 - xART Filesystem: APFS Mount point: /System/Volumes/xarts Used: 6 MB Shared values Size: 524 MB Free: 507 MB disk1s3 - Hardware Filesystem: APFS Mount point: /System/Volumes/Hardware Used: 602 KB Shared values Size: 524 MB Free: 507 MB disk2s1 - Recovery [Recovery] Filesystem: APFS Mount point: /System/Volumes/Update/SFR/mnt1 Used: 1.75 GB Shared values Size: 5.37 GB Free: 3.60 GB disk3s1 [APFS Container] Filesystem: APFS Mount point: /System/Volumes/Update/mnt1 Encrypted Used: 11.09 GB Shared values Size: 494.38 GB Free: 202.44 GB disk3s1s1 - Macintosh HD [APFS Snapshot] Filesystem: APFS Mount point: / Read-only: Yes Used: 11.09 GB Shared values Size: 494.38 GB Free: 202.44 GB Available: 264.41 GB disk3s2 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Used: 13.06 GB Shared values Size: 494.38 GB Free: 202.44 GB disk3s4 - Update Filesystem: APFS Mount point: /System/Volumes/Update Used: 678 MB Shared values Size: 494.38 GB Free: 202.44 GB disk3s5 - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Encrypted Used: 258.49 GB Shared values Size: 494.38 GB Free: 202.44 GB Available: 264.41 GB disk3s6 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Used: 6.44 GB Shared values Size: 494.38 GB Free: 202.44 GB disk4s1 - M****************r Filesystem: Mac OS Extended Disk Image Mount point: /Volumes/M****************r Read-only: Yes Size: 23 MB USB: USB 3.1 bus USB 3.1 bus Network: Interface en3: Ethernet Adapter (en3) Interface en4: Ethernet Adapter (en4) Interface en5: Targus USB3 DV4K DOCK w PD100W Interface en6: USB-C Dual-4K Dock Interface en0: Wi-Fi 802.11 a/b/g/n/ac/ax Interface bridge0: Thunderbolt Bridge System Software: macOS Sequoia 15.1 (24B83) Time since boot: About 15 days Configuration Files: /etc/hosts - Count: 2 Notifications: EtreCheckPro.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Secure Boot: Full Security Antivirus software: Apple and McAfee Unsigned Files: Launchd: /Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper Details: Exact match found in the legitimate list - probably OK Apps: 2 System Extensions: [Not Loaded] McAfee Endpoint Security - version 10.7.6 (McAfee, LLC. - installed 2024-10-30) Application: /Applications/McAfeeSystemExtensions.app - version 10.7.6 (McAfee, LLC. - installed 2024-12-20) Description: System extennsion to get file process events for common mac framework [Waiting for authorization] McAfee Network Extension - version 10.7.6 (McAfee, LLC. - installed 2024-10-30) Application: /Applications/McAfeeSystemExtensions.app - version 10.7.6 (McAfee, LLC. - installed 2024-12-20) Description: This sample system extension controls access to a local web server. System Launch Daemons: [Not Loaded] 41 Apple tasks [Loaded] 226 Apple tasks [Running] 141 Apple tasks [Other] 2 Apple tasks System Launch Agents: [Not Loaded] 22 Apple tasks [Loaded] 237 Apple tasks [Running] 188 Apple tasks Launch Daemons: [Running] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2024-12-12) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2024-12-12) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper [Running] com.adobe.agsservice.plist (Adobe Inc. - installed 2024-10-24) Executable: /Library/Application Support/Adobe/AdobeGCClient/AGSService [Running] com.citrix.CtxWorkspaceHelperDaemon.plist (Citrix Systems, Inc. - installed 2024-11-11) Executable: /Library/Application Support/Citrix Receiver/CtxWorkspaceHelperDaemon.app/Contents/MacOS/CtxWorkspaceHelperDaemon [Loaded] com.citrix.ctxusbd.plist (Citrix Systems, Inc. - installed 2024-11-11) Executable: /Library/Application Support/Citrix Receiver/ctxusbd [Running] com.citrix.ctxworkspaceupdater.plist (Citrix Systems, Inc. - installed 2024-11-11) Executable: /Library/Application Support/Citrix Receiver/ctxworkspaceupdater [Running] com.mcafee.CmacPatch.plist (McAfee, LLC. - installed 2024-12-20) Executable: /usr/local/McAfee/McAfee Health Monitor.app/Contents/MacOS/McAfee Health Monitor [Loaded] com.mcafee.PeriodicScan.plist (McAfee, LLC. - installed 2024-12-20) Command: /usr/local/McAfee/AntiMalware/VShieldTaskManager 4 [Running] com.mcafee.cspd.plist (McAfee, LLC. - installed 2024-12-20) Executable: /Library/PrivilegedHelperTools/com.mcafee.cspd.helper/cspd [Loaded] com.mcafee.datupdate.plist (McAfee, LLC. - installed 2024-12-20) Command: /usr/local/McAfee/fmp/bin/UpdateHelper dat [Loaded] com.mcafee.genutility.plist (McAfee, LLC. - installed 2024-12-20) Command: /usr/local/McAfee/fmp/bin/GenUtility 5 [Running] com.mcafee.mac.cloudsdkdaemon.plist (McAfee, LLC. - installed 2024-12-20) Executable: /usr/local/McAfee/fmp/bin/CloudSDKDaemon [Loaded] com.mcafee.productupdate.plist (McAfee, LLC. - installed 2024-12-20) Command: /usr/local/McAfee/fmp/bin/UpdateHelper product [Running] com.mcafee.ssm.ScanFactory.plist (McAfee, LLC. - installed 2024-11-08) Executable: /usr/local/McAfee/AntiMalware/VShieldScanner [Running] com.mcafee.ssm.ScanManager.plist (McAfee, LLC. - installed 2024-11-08) Executable: /usr/local/McAfee/AntiMalware/VShieldScanManager.app/Contents/MacOS/VShieldScanManager [Running] com.mcafee.virusscan.fmpd.plist (McAfee, LLC. - installed 2024-12-20) Executable: /usr/local/McAfee/fmp/bin/fmpd [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2024-12-05) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2024-12-05) Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2024-10-15) Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper [Loaded] com.microsoft.office.licensingV2.helper.plist (Not signed - installed 2022-05-26) Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2024-10-20) Executable: /Applications/Microsoft Teams classic.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2024-11-11) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Loaded] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2024-12-12) Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2024-10-24) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=logon [Other] com.adobe.ccxprocess.plist (Not signed - installed 2024-07-10) Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot [Loaded] com.citrix.AuthManager_Mac.plist (Citrix Systems, Inc. - installed 2024-11-11) Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac [Running] com.citrix.ReceiverHelper.plist (Citrix Systems, Inc. - installed 2024-11-11) Executable: /usr/local/libexec/Citrix Workspace Helper.app/Contents/MacOS/Citrix Workspace Helper [Running] com.citrix.ServiceRecords.plist (Citrix Systems, Inc. - installed 2024-11-11) Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords [Running] com.citrix.safariadapter.plist (Citrix Systems, Inc. - installed 2024-11-11) Executable: /Library/Application Support/Citrix Receiver/SafariAdapter.app/Contents/MacOS/SafariAdapter [Running] com.mcafee.macvpn.plist (McAfee, LLC. - installed 2024-12-20) Executable: /Library/Application Support/McAfee/MSS/Applications/SafeConnect.app/Contents/MacOS/SafeConnect [Running] com.mcafee.menulet.plist (McAfee, LLC. - installed 2024-12-20) Executable: /Library/Application Support/McAfee/MSS/Applications/Menulet.app/Contents/MacOS/Menulet [Running] com.mcafee.reporter.plist (McAfee, LLC. - installed 2024-12-20) Executable: /Library/Application Support/McAfee/MSS/Applications/McAfee Reporter.app/Contents/MacOS/McAfee Reporter [Not Loaded] com.mcafee.uninstall.SystemExtension.plist (Not signed - installed 2024-10-30) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2024-12-05) Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater [Loaded] com.microsoft.SyncReporter.plist (Microsoft Corporation - installed 2024-12-05) Executable: /Applications/OneDrive.app/Contents/SyncReporter.app/Contents/MacOS/SyncReporter [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2024-10-15) Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent User Launch Agents: [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2024-10-24) Command: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility -mode=scheduled [Not Loaded] com.adobe.ccxprocess.plist (Not signed - installed 2024-07-10) Command: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess --openAtBoot [Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2024-11-20) Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2 [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-06) [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-06) User Login Items: [Not Loaded] Launcher Disabler (App Store - installed 2024-12-13) Modern Login Item /Applications/OneDrive.localized/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (App Store - installed 2024-12-13) Modern Login Item /Applications/OneDrive.localized/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Loaded] StartUpHelper (Spotify - installed 2024-11-16) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Loaded] Webex (Cisco - installed 2024-10-29) Application /Applications/Webex.app [Not Loaded] HDXCastHelper (Citrix Systems, Inc. - installed 2024-11-11) Modern Login Item /Library/Application Support/Citrix Receiver/Citrix Casting.app/Contents/Library/LoginItems/HDXCastHelper.app [Running] Messages (Apple - installed 2024-10-22) Application /System/Applications/Messages.app [Not Loaded] PasswordsMenuBarExtra (Apple - installed 2024-10-22) Modern Login Item /System/Applications/Passwords.app/Contents/Library/LoginItems/PasswordsMenuBarExtra.app Applications: 693 Apple apps 154 3rd party apps 35 x86-only apps 2 unsigned apps App Extensions: Widgets: [Loaded] PowerPointWidgetKit - /Applications/Microsoft PowerPoint.app [Loaded] WordWidgetKit - /Applications/Microsoft Word.app [Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app [Loaded] QuickAccessWidget - /Applications/Citrix Workspace.app [Loaded] CalendarWidgetExtension - /Applications/Microsoft Outlook.app Safari extensions: [Not Loaded] Webex - ~/Library/Application Support/WebEx Folder/Add-ons/Cisco WebEx Start.app Notification providers: [Loaded] ServiceExtension - /Applications/WhatsApp.app Plugins: [Not Loaded] Intents - /Applications/WhatsApp.app File providers: [Loaded] OneDrive File Provider - /Applications/OneDrive.app [Loaded] OneDrive File Provider - /Applications/OneDrive.localized/OneDrive.app Share services: [Loaded] Send to Chat - /Applications/WeChat.app Finder sync extensions: [Not Loaded] OneDrive Finder Integration - /Applications/OneDrive.app [Loaded] OneDrive Finder Integration - /Applications/OneDrive.localized/OneDrive.app QuickLook Previews: [Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck Internet Plug-ins: Web Control: 10.2.0 (McAfee, LLC. - installed 2024-12-20) AdobePDFViewer: 21.005.20058 (Adobe Systems, Inc. - installed 2021-07-23) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2021-07-23) User Internet Plug-ins: SecureBrowser: (Internet Testing Systems, LLC - installed 2021-09-13) Audio Plug-ins: MSTeamsAudioDevice: 2023.31.01.2 (Microsoft Corporation - installed 2023-08-07) Backup: Time Machine Not Configured! Performance: System Load: 9.30 (1 min ago) 14.63 (5 min ago) 20.70 (15 min ago) Nominal I/O usage: 1.84 MB/s File system: 13.13 seconds Write speed: 2357 MB/s Read speed: 2453 MB/s CPU Usage Snapshot: Type Overall System: 11 % User: 42 % Idle: 46 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Spotify Helper (Renderer) 114.62 % (Spotify) Notes 98.60 % (Apple) exchangenotesd 60.62 % (Apple) exchangesyncd 39.54 % (Apple) WindowServer 21.30 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (35) 1.02 GB (Google LLC) Spotify Helper (Renderer) 291 MB (Spotify) EtreCheckPro 241 MB (Etresoft, Inc.) VShieldScanner (4) 195 MB (McAfee, LLC.) Finder 153 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) mDNSResponder 123 MB / 87 MB (Apple) rapportd 41 KB / 2 MB (Apple) apsd 115 KB / 249 KB (Apple) Spotify 276 KB / 65 KB (Spotify) Notes 240 KB / 73 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) Spotify Helper (Renderer) 52 (Spotify) Notes 43 (Apple) exchangenotesd 29 (Apple) exchangesyncd 19 (Apple) WindowServer 4 (Apple) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 60 MB Used RAM: 7.07 GB Cached files: 889 MB Available RAM: 950 MB Swap Used: 4.96 GB Software Installs (past 60 days): Install Date Name (Version) 2024-11-03 RosettaUpdateAuto (1.0.0.0.1.1729588937) 2024-11-03 macOS 15.1 (15.1) 2024-11-03 MRTConfigData (1.93) 2024-11-03 Gatekeeper Compatibility Data (1.0) 2024-11-08 Adobe Acrobat (24.004.20243) (24.004.20243) 2024-11-08 Adobe Acrobat Reader (24.004.20243) (24.004.20243) 2024-11-11 Zoom Workplace (6.1.11.39163) 2024-11-11 Citrix Workspace (24.09.10) 2024-11-12 XProtectCloudKitUpdate (5282) 2024-11-14 Adobe Acrobat (24.004.20272) (24.004.20272) 2024-11-15 Adobe Acrobat Reader (24.004.20272) (24.004.20272) 2024-11-17 Telegram (11.4) 2024-11-25 WeChat (3.8.9) 2024-11-27 Combo Cleaner (0) 2024-11-27 "Malwarebytes for Mac Uninstaller" 2024-11-28 Malwarebytes for Mac (1.0) 2024-12-11 Microsoft Excel (16.92.24120731) 2024-12-11 Microsoft Outlook (16.92.24120731) 2024-12-11 Microsoft PowerPoint (16.92.24120731) 2024-12-11 Microsoft Word (16.92.24120731) 2024-12-12 ARMDCAgentInstaller (1.0.0) 2024-12-13 OneDrive (24.226.1110) 2024-12-18 XProtectPlistConfigData (5284) 2024-12-18 XProtectPayloads (149) 2024-12-20 DynamicBranding (3.2.0) 2024-12-20 MCSPMacOSX (2.7.228) 2024-12-20 FMP (2.0) 2024-12-20 MSCUI (2.0) 2024-12-20 AntiMalware (3.4) 2024-12-20 WebProtection (4.2.2) 2024-12-20 StatefulFirewall (3.0.0) Clean up: /Library/LaunchAgents/com.adobe.ccxprocess.plist /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess Executable not found ~/Library/LaunchAgents/com.adobe.ccxprocess.plist /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app/Contents/MacOS/CCXProcess Executable not found Diagnostics Information (past 60 days): 2024-12-20 22:44:20 spotlightknowledged High CPU Use (7 times) First occurrence: 2024-12-15 19:58:15 Executable: /System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged 2024-12-20 22:38:08 McAfee LiveSafe - Internet Security.app Hang Executable: /Applications/McAfee LiveSafe - Internet Security.app 2024-12-20 21:59:15 McAfee Reporter Crash Executable: /Library/Application Support/McAfee/MSS/Applications/McAfee Reporter.app 2024-12-20 21:52:49 com.apple.WebKit.WebContent High CPU Use Details: "com.apple.Safari"(718) 2024-12-20 09:59:09 knowledgeconstructiond High CPU Use (3 times) First occurrence: 2024-12-15 19:28:36 Executable: /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/Versions/A/knowledgeconstructiond 2024-12-16 00:53:11 mdwrite High CPU Use Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdwrite 2024-12-16 00:20:47 photolibraryd High CPU Use Executable: /System/Library/PrivateFrameworks/PhotoLibraryServices.framework/Versions/A/Support/photolibraryd 2024-12-15 18:20:39 photoanalysisd High CPU Use Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd 2024-12-15 18:03:42 Notes.app High CPU Use Executable: /System/Applications/Notes.app End of report