It didn't work in Safe mode and restarting the computer didn't help either.
Below is the report.
EtreCheck version: 4.3.6 (4D041)
Report generated: 2018-09-19 11:50:39
Download EtreCheck from https://etrecheck.com
Runtime: 3:03
Performance: Good
Problem: Apps are crashing
Major Issues:
Anything that appears on this list needs immediate attention.
No Time Machine backup- Time Machine backup not found.
Unsigned files- There are unsigned software installed that could be adware and should be reviewed.
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Configuration profiles present- This machine has configuration profiles. These are sometimes used by adware and malware.
Apps crashing- There have been numerous app crashes.
System modifications- There are a large number of system modifications running in the background.
32-bit Apps- This machine has 32-bits apps that may have problems in the future.
Hardware Information:
iMac (Retina 5K, 27-inch, 2017)
iMac Model: iMac18,3
1 3.8 GHz Intel Core i5 (i5-7600K) CPU: 4-core
16 GB RAM - Upgradeable
BANK 0/DIMM0 - 8 GB DDR4 2400 ok
BANK 0/DIMM1 - Empty
BANK 1/DIMM0 - 8 GB DDR4 2400 ok
BANK 1/DIMM1 - Empty
Video Information:
Radeon Pro 580 - VRAM: 8192 MB
iMac 5120 x 2880
Cinema HD 1920 x 1200
Drives:
disk0 - APPLE SSD SM0128L 121.33 GB (Solid State - TRIM: Yes)
Internal PCI-Express 8.0 GT/s x4 NVM Express
disk0s1 - EFI [EFI] 315 MB
disk0s2 [Core Storage Container] 120.88 GB
disk2 - Macintosh HD (Journaled HFS+) [Fusion Drive] 2.11 TB
disk0s3 - B*******X [Recovery] 134 MB
disk1 - APPLE HDD ST2000DM001 2.00 TB (Mechanical)
Internal SATA 6 Gigabit Serial ATA
disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk1s2 [Core Storage Container] 2.00 TB
disk2 - Macintosh HD (Journaled HFS+) [Fusion Drive] 2.11 TB
disk1s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB
Mounted Volumes:
disk2 - Macintosh HD [Fusion Drive] 2.11 TB (2.02 TB free)
Journaled HFS+
Mount point: /
Encrypted
Network:
Interface en0: Ethernet
One IPv4 address
One IPv6 address
Interface en7: iPhone 3
Interface en5: iPhone
Interface en6: iPhone 2
Interface en1: Wi-Fi
Interface en4: Bluetooth PAN
Interface bridge0: Thunderbolt Bridge
iCloud Quota: 5.00 GB available
System Software:
macOS Sierra 10.12.6 (16G1510)
Time since boot: Less than an hour
System Load: 2.03 (1 min ago) 3.08 (5 min ago) 1.66 (15 min ago)
Configuration Files:
File /etc/sysctl.conf exists but not expected
Configuration Profiles:
com.google.Chrome - HideWebStorePromo
com.google.Chrome - ImportAutofillFormData
com.google.Chrome - ImportBookmarks
com.google.Chrome - MetricsReportingEnabled
com.google.Chrome - AutoFillEnabled
com.google.Chrome - SyncDisabled
com.google.Chrome - PasswordManagerEnabled
com.google.Chrome - ImportHomepage
com.google.Chrome - SafeBrowsingEnabled
com.google.Chrome - DefaultGeolocationSetting
com.google.Chrome - SavingBrowserHistoryDisabled
com.google.Chrome - IncognitoEnabled
com.google.Chrome - BlockThirdPartyCookies
com.google.Chrome - DefaultBrowserSettingEnabled
com.google.Chrome - PasswordManagerAllowShowPasswords
com.google.Chrome - AlwaysAuthorizePlugins
com.google.Chrome - ImportSavedPasswords
com.google.Chrome - ImportSearchEngine
com.google.Chrome - ImportHistory
com.google.Chrome - CloudPrintProxyEnabled
com.apple.systempreferences - DisabledPreferencePanes
Security:
| System | Status |
|---|
| Gatekeeper | Mac App Store and identified developers |
| System Integrity Protection | Enabled |
Unsigned Files:
Launchd: /Library/LaunchDaemons/com.jamfsoftware.startupItem.plist
Executable: /Library/Application Support/JAMF/ManagementFrameworkScripts/StartupScript.sh
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.forescout.secureconnector.daemon.plist
Executable: /Applications/ForeScout SecureConnector.app/Contents/MacOS/ForeScout SecureConnector -daemon
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist
Executable: /Library/Application Support/Citrix Receiver/ctxusbd
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/gov.nih.niaid.h_drive.plist
Executable: /usr/local/bin/H_Drive.bash
Launchd: /Library/LaunchAgents/com.forescout.secureconnector.agent.plist
Executable: /Applications/ForeScout SecureConnector.app/Contents/MacOS/ForeScout SecureConnector -agent
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.fireeye.xagt.plist
Executable: /Library/FireEye/xagt/xagt.app/Contents/MacOS/bin/xagt -M DAEMON
Details: Restrictive app permissions - possibly adware
Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist
Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist
Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.fireeye.xagtnotif.plist
Executable: /Library/FireEye/xagt/xagtnotif.app/Contents/MacOS/xagtnotif
Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist
Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords
Details: Exact match found in the whitelist - probably OK
32-bit Applications:
12 32-bit apps
Kernel Extensions:
/Library/Application Support/Citrix Receiver
[Not Loaded] CitrixGUSB.kext (Citrix Systems, Inc., 12.5.0 - SDK 10.9)
/Library/Application Support/Cylance/Desktop/backup
[Loaded] CyProtectDrvOSX.kext (Cylance, Inc., 2.0.1494.543 - SDK 10.10)
/Library/Extensions
[Not Loaded] AX88179_178A.kext (WEI LU SU, 1.8.0 - SDK 10.10)
[Loaded] FireEye.kext (FireEye, Inc., 1.0.0 - SDK 10.9)
/System/Library/Extensions
[Not Loaded] gsidrv.kext (Guidance Software, Inc., 1.0 - SDK 10.6)
System Launch Agents:
| [Not Loaded] | 7 Apple tasks |
| [Loaded] | 171 Apple tasks |
| [Running] | 108 Apple tasks |
System Launch Daemons:
| [Not Loaded] | 40 Apple tasks |
| [Loaded] | 171 Apple tasks |
| [Running] | 107 Apple tasks |
| [Other] | 2 Apple tasks |
Launch Agents:
| [Running] | com.mcafee.reporter.plist (McAfee, Inc. - installed 2018-04-13) |
| [Loaded] | com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-08-21) |
| [Running] | com.cylancePROTECT.plist (Cylance, Inc. - installed 2018-09-10) |
| [Running] | com.mcafee.menulet.plist (McAfee, Inc. - installed 2018-04-13) |
| [Not Loaded] | com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-02-14) |
| [Running] | com.gladwev.flightdeck.plist (Gladwev Software Private Limited - installed 2018-07-20) |
| [Running] | com.forescout.secureconnector.agent.plist (? 2a45e38a - installed 2018-09-09) |
| [Running] | com.citrix.ServiceRecords.plist (? 8e6543d - installed 2017-02-01) |
| [Loaded] | com.citrix.AuthManager_Mac.plist (? 1ce99fae - installed 2017-02-01) |
| [Running] | com.fireeye.xagtnotif.plist (? c6278c4b - installed 2017-11-28) |
| [Running] | com.citrix.ReceiverHelper.plist (? bbfad3f1 - installed 2017-02-01) |
| [Running] | com.jamfsoftware.jamf.agent.plist (JAMF Software - installed 2018-09-13) |
| [Loaded] | com.oracle.java.Java-Updater.plist (? f960cd5a - installed 2018-07-07) |
| [Loaded] | gov.nih.niaid.h_drive.plist (? 9627b08d - installed 2017-01-10) |
| [Other] | com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-14) |
| [Running] | com.jamf.management.agent.plist (JAMF Software - installed 2018-07-10) |
Launch Daemons:
| [Loaded] | com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2018-08-24) |
| [Loaded] | com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-14) |
| [Running] | com.mcafee.agent.macompat.plist (McAfee, Inc. - installed 2017-09-05) |
| [Running] | com.forescout.secureconnector.daemon.plist (? 8237dcc6 - installed 2018-09-09) |
| [Running] | com.cylance.agent_service.plist (Cylance, Inc. - installed 2018-09-10) |
| [Running] | com.mcafee.agent.macmn.plist (McAfee, Inc. - installed 2017-09-05) |
| [Loaded] | com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-09-17) |
| [Running] | com.tenablesecurity.nessusagent.plist (Tenable Network Security, Inc. - installed 2018-04-06) |
| [Not Loaded] | com.jamfsoftware.startupItem.plist (? 44b5eabd - installed 2018-09-13) |
| [Running] | com.fireeye.xagt.plist (? 6b4416e6 - installed 2017-11-28) |
| [Running] | com.GSI.Servlet.plist (? 2e0ddf74 - installed 2017-04-07) |
| [Not Loaded] | com.mcafee.ssm.Eupdate.plist (? 0 - installed 2018-04-13) |
| [Running] | com.mcafee.virusscan.fmpd.plist (McAfee, Inc. - installed 2018-05-03) |
| [Loaded] | com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-07-07) |
| [Running] | com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-02-14) |
| [Running] | com.mcafee.ssm.ScanManager.plist (McAfee, Inc. - installed 2018-04-13) |
| [Loaded] | com.barebones.authd.plist (? c13813d8 - installed 2015-12-18) |
| [Running] | com.mcafee.agent.ma.plist (McAfee, Inc. - installed 2017-09-05) |
| [Running] | com.jamf.management.daemon.plist (JAMF Software - installed 2018-07-10) |
| [Loaded] | com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-14) |
| [Running] | com.mcafee.ssm.ScanFactory.plist (McAfee, Inc. - installed 2018-04-13) |
| [Loaded] | com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2017-02-01) |
| [Running] | com.jamfsoftware.jamf.daemon.plist (JAMF Software - installed 2018-09-13) |
| [Loaded] | com.jamfsoftware.task.1.plist (JAMF Software - installed 2018-09-13) |
| [Loaded] | com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-02-10) |
| [Running] | gov.nih.nihauthplugind.plist (? fbe765aa - installed 2018-01-02) |
| [Not Loaded] | com.mcafee.aac.plist (? 0 - installed 2018-05-03) |
| [Running] | BESAgentDaemon.plist (International Business Machines Corp.(Tivoli) - installed 2018-04-03) |
User Launch Agents:
| [Loaded] | com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18) |
| [Loaded] | com.logmein.GoToMeeting.G2MUpdate.plist (LogMeIn, Inc. - installed 2018-09-13) |
| [Loaded] | com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-03-22) |
User Login Items:
iTunesHelper Application (Apple - installed 2018-07-10)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Internet Plug-ins:
QuickTime Plugin: (installed 2018-07-18)
AdobePDFViewerNPAPI: (installed 2017-07-31)
AdobePDFViewer: (installed 2017-07-31)
CitrixICAClientPlugIn: (installed 2018-02-14)
Silverlight: (installed 2018-02-14)
MeetingJoinPlugin: (installed 2018-09-17)
JavaAppletPlugin: (installed 2018-09-17)
3rd Party Preference Panes:
Java (installed 2018-09-17)
NessusAgent.Preferences (installed 2017-08-14)
NIHAuthPluginPrefPane (installed 2018-07-08)
Time Machine:
Time Machine Not Configured!
Top Processes by CPU:
| Process (count) | Source | % of CPU | Location |
| 4D | ? | 34 | /Applications/Crimson/Crimson.app |
| VShieldScanner (4) | McAfee, Inc. | 12 |
| WindowServer | Apple | 5 |
| fontd | Apple | 4 |
| kernel_task | Apple | 2 |
Top Processes by Memory:
| Process (count) | Source | RAM usage | Location |
| kernel_task | Apple | 1.21 GB |
| mdworker (28) | Apple | 806 MB |
| com.apple.WebKit.WebContent (4) | Apple | 721 MB |
| VShieldScanner (4) | McAfee, Inc. | 264 MB |
| mds_stores | Apple | 201 MB |
Top Processes by Network Use:
| Process | Source | Input | Output | Location |
| com.apple.WebKit.Networking | Apple | 3 MB | 90 KB |
| CylanceSvc | Cylance, Inc. | 234 KB | 25 KB |
| mDNSResponder | Apple | 60 KB | 17 KB |
| 4D | ? | 68 KB | 4 KB | /Applications/Crimson/Crimson.app |
| kernel_task | Apple | 30 KB | 15 KB |
Top Processes by Energy Use:
| Process (count) | Source | Energy (0-100) | Location |
| xagt (2) | ? | 5 | /Library/FireEye/xagt/xagt.app |
| com.apple.PerformanceAnalysis.animationperfd | Apple | 4 |
| WindowServer | Apple | 3 |
| assistant_service | Apple | 1 |
| hidd | Apple | 1 |
Virtual Memory Information:
| Available RAM | 10.46 GB |
| Free RAM | 1.24 GB |
| Used RAM | 5.54 GB |
| Cached files | 9.22 GB |
| Swap Used | 0 B |
Software Installs (past 30 days):
| Name | Version | Install Date |
| Microsoft AutoUpdate | 3.8.16112200 | 2018-08-21 |
| Microsoft OneDrive | 18.131.701 | 2018-08-24 |
| Gatekeeper Configuration Data | 154 | 2018-09-05 |
| Google Chrome 69.0.3497.81 C2018-09-04 | 1 | 2018-09-10 |
| Google Chrome 69.0.3497.92 C2018-09-12 | 1 | 2018-09-14 |
| Microsoft Excel for Mac | 16.16.180**001 | 2018-09-14 |
| Microsoft OneNote for Mac | 16.16.180**001 | 2018-09-14 |
| Microsoft Outlook for Mac | 16.16.180**001 | 2018-09-14 |
| Microsoft PowerPoint for Mac | 16.16.180**001 | 2018-09-14 |
| Microsoft Word for Mac | 16.16.180**001 | 2018-09-14 |
| Node.js | v8.12.0 | 2018-09-17 |
| JDK 8 Update 181 | 1.1 | 2018-09-17 |
| CylancePROTECT C2018-09-04 | 1 | 2018-09-17 |
| CylancePROTECT | 2.0.1494.543 | 2018-09-17 |
| Safari | 12.0 | 2018-09-18 |
| Skype for Business | 16.21.65 | 2018-09-18 |
Diagnostics Information (past 7 days):
2018-09-19 11:02:08 Crimson_v12.app Crash
/Applications/Crimson/Crimson.app/Components/Crimson_v12.app
2018-09-18 11:05:04 Java Updater.app Crash
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app
Detected over-release of a CFTypeRef |
2018-09-17 12:28:24 FlightDeck Mac Agent.app Crash (12 times)
/Applications/FlightDeck Mac Agent.app
2018-09-17 12:13:42 CylanceUI.app Crash
/Applications/Cylance/CylanceUI.app
2018-09-13 12:04:41 Crimson SQL Dev.app Hang
/Applications/Crimson/Crimson SQL Dev.app
End of report