EtreCheckPro version: 6.5.2 (6F007)
Report generated: 2021-09-16 14:03:34
Download EtreCheckPro from https://etrecheck.com
Runtime: 3:02
Performance: Excellent

Problem: Computer is restarting

Major Issues:
  Anything that appears on this list needs immediate attention. 
  Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  No Time Machine backup - Time Machine backup not found.
  Apps crashing - There have been numerous app crashes.
  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.
  x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system.
  Limited drive access - More information may be available with Full Drive Access.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  iMac (Retina 5K, 27-inch, Late 2015)
  iMac Model: iMac17,1
  3,2 GHz Quad-Core Intel Core i5 (i5-6500) CPU: 4-core
  32 GB RAM - At maximum
    BANK 0/DIMM0 - 8 GB DDR3 1867  
    BANK 0/DIMM1 - 8 GB DDR3 1867  
    BANK 1/DIMM0 - 8 GB DDR3 1867  
    BANK 1/DIMM1 - 8 GB DDR3 1867  

Video Information:
  AMD Radeon R9 M380 - VRAM: 2 GB
    iMac (built-in) 5120 x 2880

Drives:
  disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes) 
  Internal PCI 5.0 GT/s x2 Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 500.07 GB
      disk1 [APFS Virtual drive] 500.07 GB (Shared by 6 volumes)
        disk1s1 - M*****  - Data (APFS) [APFS Virtual drive] (Shared - 394.48 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 306 MB used)
        disk1s3 - Recovery (APFS) [Recovery] (Shared - 626 MB used)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used)
        disk1s5 (APFS) [APFS Container] (Shared - 15.33 GB used)
          disk1s5s1 - M***S (APFS) [APFS Snapshot] (Shared - 15.33 GB used)
        disk1s6 - Update (APFS) (Shared - 4 MB used)

Mounted Volumes:
  disk1s1 - M*****  - Data [APFS Virtual drive]
    500.07 GB (Shared - 394.48 GB used, 88.82 GB available, 87.01 GB free)
    APFS
    Mount point: /System/Volumes/Data

  disk1s2 - Preboot [APFS Preboot]
    500.07 GB (Shared - 306 MB used, 87.01 GB free)
    APFS
    Mount point: /System/Volumes/Preboot

  disk1s4 - VM [APFS VM]
    500.07 GB (Shared - 2.15 GB used, 87.01 GB free)
    APFS
    Mount point: /System/Volumes/VM

  disk1s5s1 - M***S [APFS Snapshot]
    500.07 GB (Shared - 15.33 GB used, 88.82 GB available, 87.01 GB free)
    APFS
    Mount point: /
    Read-only: Yes

  disk1s6 - Update
    500.07 GB (Shared - 4 MB used, 87.01 GB free)
    APFS
    Mount point: /System/Volumes/Update

Network:
  Interface en0: Ethernet
  Interface en1: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en4: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge
  iCloud Quota: 4.05 GB available

System Software:
  macOS Big Sur 11.5.2 (20G95) 
  Time since boot: Less than an hour

Configuration Files:
  /etc/hosts - Count: 3

Notifications:
  Tunnelblick.app
    one notification

  TG Pro.app
    one notification

  Microsoft To Do.app
    2 notifications (2 scheduled)

  qbittorrent.app
    12 notifications

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple

Unsigned Files:
  Launchd: ~/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist
    Executable: /Applications/Tunnelblick.app/Contents/Resources/launchAtLogin.sh
    Details: Exact match found in the legitimate list - probably OK

  Running app: /Library/DropboxHelperTools/Dropbox_u501/dbkextd
    Details: Restrictive app permissions - possibly adware
  Running app: /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app/Contents/Library/LoginItems/CleanMyMac X HealthMonitor.app
  Running app: /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app

  Login Item: /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app/Contents/Library/LoginItems/CleanMyMac X HealthMonitor.app
  Login Item: /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app

  Apps: 10

Old Applications:
  26 x86-only apps

Kernel Extensions:
  /Applications/Tunnelblick.app
    [Not Loaded] tap-notarized.kext - net.tunnelblick.tap (20141104 (Tunnelblick tap kext version 5.0; Tunnelblick build 5622))
    [Not Loaded] tun-notarized.kext - net.tunnelblick.tun (20141104 (Tunnelblick tun kext version 5.0; Tunnelblick build 5622))

System Launch Daemons:
  [Not Loaded]  35 Apple tasks
  [Loaded]  188 Apple tasks
  [Running]  140 Apple tasks
  [Other]  One Apple task

System Launch Agents:
  [Not Loaded]  18 Apple tasks
  [Loaded]  195 Apple tasks
  [Running]  121 Apple tasks

Launch Daemons:
  [Loaded] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2021-08-09)
  [Running] com.adobe.agsservice.plist (Adobe Inc. - installed 2021-09-16)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-09-15)
  [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2021-09-16)
  [Running] com.tunabellysoftware.TGFanHelper.plist (Tunabelly Software Inc. - installed 2021-08-06)
  [Loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (Jonathan Bullard - installed 2021-09-14)

Launch Agents:
  [Not Loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2021-08-09)
  [Not Loaded] com.adobe.GC.AGM.plist (Adobe Inc. - installed 2021-09-16)
  [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-09-16)
  [Not Loaded] com.adobe.ccxprocess.plist (Adobe Systems, Inc. - installed 2021-08-09)
  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-09-15)

User Launch Agents:
  [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-09-16)
  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2021-08-06)
  [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2021-08-23)
  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-08-23)
  [Loaded] com.valvesoftware.steamclean.plist (Valve Corporation - installed 2021-08-31)
  [Loaded] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (? 0  - installed 2021-09-01)

User Login Items:
  [Running] BetterSnapTool (App Store - installed 2021-08-06)
    Application
    /Applications/BetterSnapTool.app

  [Not Loaded] Autoupdate (Brave Software, Inc. - installed 2021-09-02)
    Modern Login Item
    /Applications/Brave Browser.app/Contents/Frameworks/Brave Browser Framework.framework/Versions/93.1.29.76/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app

  [Running] CleanMyMac X Menu (? - installed 2021-05-27)
    Modern Login Item
    /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app

  [Running] CleanMyMac X HealthMonitor (? - installed 2021-05-27)
    Modern Login Item
    /Applications/CleanMyMac X.app/Contents/Library/LoginItems/CleanMyMac X Menu.app/Contents/Library/LoginItems/CleanMyMac X HealthMonitor.app

  [Loaded] CrossOver CD Helper (CodeWeavers Inc. - installed 2021-08-03)
    Application
    /Applications/CrossOver.app/Contents/Resources/CrossOver CD Helper.app

  [Running] Dropbox (Dropbox, Inc. - installed 2021-09-15)
    Application
    /Applications/Dropbox.app

  [Not Loaded] Launcher Disabler (App Store - installed 2021-09-12)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

  [Not Loaded] OneDrive Launcher (App Store - installed 2021-09-12)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

  [Not Loaded] Slack Login Helper (App Store - installed 2021-09-12)
    Modern Login Item
    /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app

  [Loaded] TGProLaunchHelper (Tunabelly Software Inc. - installed 2021-09-15)
    Modern Login Item
    /Applications/TG Pro.app/Contents/Library/LoginItems/TGProLaunchHelper.app

  [Not Loaded] ViberLoginHelper (Viber Media SARL. - installed 2021-08-30)
    Modern Login Item
    /Applications/Viber.app/Contents/Library/LoginItems/ViberLoginHelper.app

  [Not Loaded] QuickEntryHelper (XMind Ltd. - installed 2021-07-13)
    Modern Login Item
    /Applications/XMind.app/Contents/PlugIns/XMind QuickEntry.app/Contents/Library/LoginItems/QuickEntryHelper.app

Internet Plug-ins:
  AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2021-08-09)

Safari Extensions:
  MKPlayer (App Store - installed 2021-08-18)
  Open in IINA (HeChen LI - installed 2021-08-22)
  Webex (Cisco - installed 2021-09-01)

Backup:
  Time Machine Not Configured!

Performance:
  System Load: 34.59 (1 min ago) 27.68 (5 min ago) 12.26 (15 min ago)
  Nominal I/O speed: 0.20 MB/s
  File system: 20.95 seconds
  Write speed: 518 MB/s
  Read speed: 538 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 11 %
  User: 12 %
  Idle: 77 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  mds_stores 19.96 % (Apple)
  EtreCheckPro 14.04 % (Etresoft, Inc.)
  kernel_task 12.44 % (Apple)
  mds 9.86 % (Apple)
  WindowServer 5.14 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheckPro 703 MB (Etresoft, Inc.)
  Dropbox (4) 630 MB (Dropbox, Inc.)
  Dropbox Web Helper (4) 499 MB (Dropbox, Inc.)
  Finder 199 MB (Apple)
  CleanMyMac X Menu.app 167 MB (? - /Applications/CleanMyMac X.app)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 119 KB / 33 KB (Apple)
  Dropbox 13 KB / 89 KB (Dropbox, Inc.)
  apsd 8 KB / 32 KB (Apple)
  CalendarAgent 22 KB / 7 KB (Apple)
  trustd 23 KB / 2 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  WindowServer 4 (Apple)
  kernelmanagerd 1 (Apple)
  Dropbox Web Helper (4) 1 (Dropbox, Inc.)
  syspolicyd 1 (Apple)
  mds 1 (Apple)

Virtual Memory Information:
  Physical RAM: 32 GB

  Free RAM: 21.29 GB
  Used RAM: 5.89 GB
  Cached files: 4.82 GB

  Available RAM: 26.11 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2021-08-06 macOS 11.5.1 (11.5.1)
  2021-08-06 Elmedia Video Player (8.1)
  2021-08-06 BetterSnapTool (1.9.5)
  2021-08-06 Numbers (11.1)
  2021-08-06 Pages (11.1)
  2021-08-06 Keynote (11.1)
  2021-08-06 Microsoft Edge (93.0.961.47)
  2021-08-06 Audiobook Builder (2.1.4)
  2021-08-06 The Unarchiver (4.3.3)
  2021-08-06 OmniGraffle (7.18.5)
  2021-08-06 Tweetbot (2.5.8)
  2021-08-06 Command Line Tools for Xcode (12.4)
  2021-08-10 EFICheck AllowListAll (109)
  2021-08-10 Camera Raw 12.4 (12.4)
  2021-08-18 Microsoft Remote Desktop (10.6.8)
  2021-08-18 MKPlayer (1.5.3)
  2021-08-20 Node.js (v16.7.0)
  2021-08-24 XProtectPlistConfigData (2150)
  2021-09-01 Webex
  2021-09-12 FileZilla Pro (3.55.2)
  2021-09-12 Slack (4.19.0)
  2021-09-12 macOS 11.5.2 (11.5.2)
  2021-09-12 Microsoft To Do (2.52)
  2021-09-12 OneDrive (21.160.0808)
  2021-09-14 MRTConfigData (1.84)
  2021-09-15 Microsoft AutoUpdate (4.39.21091200)
  2021-09-16 Microsoft Teams (1.00.422368)

Diagnostics Information (past 7-30 days):
  2021-09-16 13:58:02 Kernel Panic (11 times)
    Details:
      panic(cpu 1 caller 0xffffff80181c57d6): Kernel trap at 0xffffff8018762
      7ad, type 14=page fault, registers:


  2021-09-16 13:53:03 cloudd Crash
    Executable: /System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
    Details:
      dyld3 mode

  2021-09-16 13:53:03 secd Crash
    Executable: /usr/libexec/secd
    Details:
      objc_msgSend() selector name: release
      dyld3 mode

  2021-09-15 15:24:11 ExternalQuickLookSatellite-x86_64 Crash (4 times)
    Executable: /System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/ExternalQuickLookSatellite-x86_64.xpc/Contents/MacOS/ExternalQuickLookSatellite-x86_64
    Details:
      objc_msgSend() selector name: _cfTypeID
      dyld3 mode
      qlmanage --diag 6571367.4680006 6571367.4680035 6571367.4680018 657136
      7.4680073 6571367.4680074 6571367.4680024 6571367.4680017 6571367.4680
      018 6571367.4680017 6571367.4680043 6571367.4680073 6571367.4680034 65
      71367.4680032 6571367.4680005 6571367.4680002 6571367.4680074 6571367.
      4680043 6571367.4680002 6571367.4680006 6571367.4680070 6571367.468002
      6 6571367.4680070 6571367.4680024 6571367.4680027 6571367.4680011 6571
      367.4680027 6571367.4680005 6571367.4680016
      last threaded generator: org.xmind.XMindQuickLook

  2021-09-13 08:05:09 Dropbox.app High CPU Use
    Executable: /Applications/Dropbox.app

  2021-09-12 17:28:42 Adobe Lightroom Classic.app High CPU Use
    Executable: /Applications/Adobe Lightroom Classic/Adobe Lightroom Classic.app


End of report