EtreCheckPro version: 6.5.1 (6F003) Report generated: 2021-08-26 10:49:41 Download EtreCheckPro from https://etrecheck.com Runtime: 2:45 Performance: Excellent Problem: Other problem Description: Receiving â Pulse Secure.app will damage your computer. You should mov e it to the Trash.â pop-up - appears to be Malware. MacBook Pro, Big Sur 11.5.2. Major Issues: None Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (16-inch, 2019) MacBook Pro Model: MacBookPro16,1 2.3 GHz 8-Core Intel Core i9 (i9-9880H) CPU: 8-core 32 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 16 GB DDR4 2667 BANK 2/ChannelB-DIMM0 - 16 GB DDR4 2667 Battery: Health = Normal - Cycle count = 100 Video Information: Intel UHD Graphics 630 - VRAM: 1536 MB Color LCD (built-in) 4096 x 2560 AMD Radeon Pro 5500M - VRAM: 8 GB Drives: disk0 - APPLE SSD AP1024N 1.00 TB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 1.00 TB disk1 [APFS Virtual drive] 1.00 TB (Shared by 6 volumes) disk1s1 (APFS) [APFS Container] (Shared - 15.33 GB used) disk1s1s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.33 GB used) disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 488.08 GB used) disk1s3 - Preboot (APFS) [APFS Preboot] (Shared - 420 MB used) disk1s4 - Recovery (APFS) [Recovery] (Shared - 626 MB used) disk1s5 - VM (APFS) [APFS VM] (Shared - 20 KB used) disk1s6 - Update (APFS) (Shared - 3 MB used) Mounted Volumes: disk1s1s1 - Macintosh HD [APFS Snapshot] 1.00 TB (Shared - 15.33 GB used, 529.50 GB available, 495.57 GB free) APFS Mount point: / Read-only: Yes disk1s2 - Macintosh HD - Data [APFS Virtual drive] 1.00 TB (Shared - 488.08 GB used, 529.50 GB available, 495.57 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s3 - Preboot [APFS Preboot] 1.00 TB (Shared - 420 MB used, 495.57 GB free) APFS Mount point: /System/Volumes/Preboot disk1s5 - VM [APFS VM] 1.00 TB (Shared - 20 KB used, 495.57 GB free) APFS Mount point: /System/Volumes/VM disk1s6 - Update 1.00 TB (Shared - 3 MB used, 495.57 GB free) APFS Mount point: /System/Volumes/Update Network: Interface en8: USB 10/100/1000 LAN Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge Interface en7: Thunderbolt Ethernet Slot 2 Interface en9: iPhone System Software: macOS Big Sur 11.5.2 (20G95) Time since boot: Less than an hour Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple Unsigned Files: Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist Executable: ~/Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/net.pulsesecure.UninstallPulse.plist Executable: /Library/Application Support/Pulse Secure/Pulse/Uninstall.app/Contents/Resources/uninstaller Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/net.openvpn.client.plist Executable: /Library/Frameworks/OpenVPN.framework/Versions/Current/bin/openvpn-service -no --pidfile /var/run/openvpn.pid Details: Exact match found in the legitimate list - probably OK Running app: /Library/DropboxHelperTools/Dropbox_u501/dbkextd Details: Restrictive app permissions - possibly adware Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Apps: 3 Old Applications: 90 x86-only apps Kernel Extensions: /Library/Extensions [Not Loaded] FTDIUSBSerialDriver.kext - com.FTDI.driver.FTDIUSBSerialDriver (2.3 - SDK 10.9) [Not Loaded] Dropbox.kext - com.getdropbox.dropbox.kext (1.13.0 - SDK 10.14) [Not Loaded] hp_fax_io.kext - com.hp.kext.hp-fax-io (5.11.0 - SDK 10.8) [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0) [Not Loaded] hp_Inkjet1_io_enabler.kext - com.hp.print.hpio.Inkjet1.kext (3.0.3 - SDK 10.8) [Not Loaded] klif.kext - com.kaspersky.kext.klif (3.3.0d1) [Not Loaded] klnke.kext - com.kaspersky.nke (2.1.0) [Not Loaded] BJUSBMP.kext - jp.co.canon.bj.kext.BJUSBMP (2.4.0) [Not Loaded] BJUSBLoad.kext - jp.co.canon.bj.print.BJUSBLoad (10.69.0 - SDK 10.6) [Not Loaded] CIJUSBLoad.kext - jp.co.canon.ij.print.CIJUSBLoad (10.85.10 - SDK 10.8) System Launch Daemons: [Not Loaded] 35 Apple tasks [Loaded] 183 Apple tasks [Running] 145 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 190 Apple tasks [Running] 128 Apple tasks Launch Daemons: [Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc - installed 2019-08-20) [Other] com.kaspersky.kav.plist (? 7134df3c - installed 2016-11-20) [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2021-07-28) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2021-07-28) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-08-11) [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2012-04-02) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2019-12-09) [Running] com.sonos.SonosLibraryServer.plist (Sonos, Inc. - installed 2021-04-27) [Other] net.openvpn.client.plist (? b47026bc - installed 2014-03-03) [Other] net.pulsesecure.AccessService.plist (? 1d36417 - installed 2020-03-12) [Loaded] net.pulsesecure.UninstallPulse.plist (? 54408489 - installed 2020-03-12) Launch Agents: [Running] com.elgato.StreamDeck.plist (Corsair Memory, Inc. - installed 2020-11-23) [Running] com.fujitsu.pfu.ScanSnap.AOUMonitor.plist (PFU LIMITED - installed 2021-04-14) [Running] com.fujitsu.pfu.SshRegister.plist (PFU LIMITED - installed 2021-06-10) [Running] com.fujitsu.pfu.SshResident.plist (PFU LIMITED - installed 2021-06-10) [Running] com.fujitsu.pfu.SshSCloudWatch.plist (PFU LIMITED - installed 2021-06-10) [Other] com.kaspersky.kav.gui.plist (? da6dc2bf - installed 2016-11-20) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2021-07-28) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-08-11) [Other] net.pulsesecure.pulsetray.plist (? 3d73aecc - installed 2020-03-12) User Launch Agents: [Other] com.apple.CSConfigDotMacCert-***@***-SharedServices.Agent.plist (? 0 - installed 2012-06-14) [Loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2017-10-11) [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2021-06-23) [Loaded] com.logmein.GoToMeeting.G2MUpdate.plist (LogMeIn, Inc. - installed 2018-05-30) [Loaded] com.skype.skype.shareagent.plist (? 0 - installed 2018-08-01) User Login Items: [Running] Dropbox (Dropbox, Inc. - installed 2021-08-18) Application /Applications/Dropbox.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2021-07-28) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2021-07-28) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] Slack Login Helper (App Store - installed 2021-08-23) Modern Login Item /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2019-12-05) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Not Loaded] HP Product Research (HP Inc. - installed 2019-12-05) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app Internet Plug-ins: SharePointBrowserPlugin: 14.6.7 (? - installed 2016-09-01) Silverlight: 5.1.41212.0 (? - installed 2016-01-18) Audio Plug-ins: ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2020-03-18) Backup: Skip System Files: No Mobile backups: Yes Auto backup: Yes Destinations: C**************p [Local] Total size: 2.00 TB Total number of backups: 86 Oldest backup: 2020-03-28 17:03:35 Last backup: 2021-08-25 09:14:48 M********p [Local] (Last used) Total size: 2.00 TB Total number of backups: 79 Oldest backup: 2020-04-21 20:37:18 Last backup: 2021-08-25 22:38:23 16 local snapshots Oldest local snapshot: 2021-08-25 08:09:39 Last local snapshot: 2021-08-26 10:27:10 Performance: System Load: 1.55 (1 min ago) 1.32 (5 min ago) 0.64 (15 min ago) Nominal I/O speed: 0.43 MB/s File system: 14.12 seconds Write speed: 3022 MB/s Read speed: 3050 MB/s CPU Usage Snapshot: Type Overall System: 2 % User: 4 % Idle: 94 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) mapspushd 24.70 % (Apple) EtreCheckPro 17.00 % (Etresoft, Inc.) photoanalysisd 11.80 % (Apple) ASPCarryLog 10.30 % (Apple) WindowServer 7.56 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheckPro 833 MB (Etresoft, Inc.) Dropbox (3) 594 MB (Dropbox, Inc.) Dropbox Web Helper (3) 345 MB (Dropbox, Inc.) garcon (4) 324 MB (Dropbox, Inc.) mdworker_shared (17) 294 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) corespeechd 2 KB / 9 MB (Apple) mDNSResponder 108 KB / 81 KB (Apple) Dropbox 15 KB / 121 KB (Dropbox, Inc.) biometrickitd 75 KB / 25 KB (Apple) trustd 55 KB / 4 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 4 (Apple) kernelmanagerd 2 (Apple) Messages 1 (Apple) syspolicyd 1 (Apple) mds 0 (Apple) Virtual Memory Information: Physical RAM: 32 GB Free RAM: 19.26 GB Used RAM: 7.79 GB Cached files: 4.96 GB Available RAM: 24.21 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2021-07-08 iMovie (10.2.5) 2021-07-30 Elmedia Player (8.1) 2021-08-11 Microsoft AutoUpdate (4.38.21080801) 2021-08-11 Microsoft Excel (16.52.21080801) 2021-08-11 Microsoft OneNote (16.52.21080801) 2021-08-11 Microsoft Outlook (16.52.21080801) 2021-08-11 Microsoft PowerPoint (16.52.21080801) 2021-08-11 Microsoft Word (16.52.21080801) 2021-08-11 Zoom (5.7.4.898) 2021-08-23 XProtectPlistConfigData (2150) 2021-08-23 Slack (4.19.0) 2021-08-26 macOS 11.5.2 (11.5.2) 2021-08-26 MRTConfigData (1.82) 2021-08-26 Malwarebytes for Mac 2021-08-26 "Malwarebytes for Mac Uninstaller" (1.0) Clean up: /Library/LaunchDaemons/com.kaspersky.kav.plist /Library/Application Support/Kaspersky Lab/KAV/Binaries/kav Executable not found /Library/LaunchAgents/com.kaspersky.kav.gui.plist /Library/Application Support/Kaspersky Lab/KAV/Applications/Kaspersky Anti-Virus Agent.app/Contents/MacOS/kav_agent Executable not found /Library/LaunchAgents/net.pulsesecure.pulsetray.plist /Applications/Pulse Secure.app/Contents/Plugins/JamUI/PulseTray.app/Contents/MacOS/PulseTray Executable not found /Library/LaunchDaemons/net.pulsesecure.AccessService.plist /Applications/Pulse Secure.app/Contents/Plugins/JUNS/dsAccessService Executable not found Diagnostics Information (past 7-30 days): 2021-08-26 05:26:16 AntivirusforMac.app High CPU Use (2 times) Executable: /Library/Bitdefender/*/AntivirusforMac.app End of report