EtreCheck version: 5.5.5 (5111)
Report generated: 2020-06-09 19:49:13
Download EtreCheck from https://etrecheck.com
Runtime: 2:35
Performance: Excellent
Sandbox: Enabled
Full drive access: Disabled

Problem: Computer is restarting

Major Issues:
  Anything that appears on this list needs immediate attention.
  Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
  Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware.
  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.
  32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 "Catalina".
  Limited drive access - More information may be available with Full Drive Access.
  Kernel extensions present - This machine has kernel extensions that may not work in the future.
  Sharing enabled - This machine has sharing services enabled that could be a security risk.

Hardware Information:
  iMac (Retina 5K, 27-inch, 2017)
  iMac Model: iMac18,3
  3,4 GHz Quad-Core Intel Core i5 (i5-7500) CPU: 4-core
  8 RAM - Upgradeable
    BANK 0/DIMM0 - 4 GB DDR4 SO-DIMM 2400
    BANK 0/DIMM1 - Empty
    BANK 1/DIMM0 - 4 GB DDR4 SO-DIMM 2400
    BANK 1/DIMM1 - Empty

Video Information:
  Radeon Pro 570 - VRAM: 4 GB
    iMac (built-in) 5120 x 2880

Drives:
  disk0 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM)
  Internal SATA 6 Gigabit Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Fusion Drive] 1000.00 GB
      disk2 [APFS Virtual drive] 1.03 TB (Shared by 5 volumes)
        disk2s1 - M************  Data (APFS) [APFS Virtual drive] (Shared - 909.83 GB used)
        disk2s2 - Preboot (APFS) [APFS Preboot] (Shared)
        disk2s3 - Recovery (APFS) [Recovery] (Shared)
        disk2s4 - VM (APFS) [APFS VM] (Shared - 9.39 GB used)
        disk2s5 - Macintosh HD (APFS) (Shared - 11.32 GB used)

  disk1 - APPLE SSD SM0032L 28.00 GB (Solid State - TRIM: Yes)
  Internal PCI-Express 8.0 GT/s x2 NVM Express
    disk1s1 - EFI [EFI] 315 MB
    disk1s2 [APFS Fusion Drive] 27.69 GB
      disk2 [APFS Virtual drive] 1.03 TB (Shared by 5 volumes)
        disk2s1 - M************  Data (APFS) [APFS Virtual drive] (Shared - 909.83 GB used)
        disk2s2 - Preboot (APFS) [APFS Preboot] (Shared)
        disk2s3 - Recovery (APFS) [Recovery] (Shared)
        disk2s4 - VM (APFS) [APFS VM] (Shared - 9.39 GB used)
        disk2s5 - Macintosh HD (APFS) (Shared - 11.32 GB used)

Mounted Volumes:
  disk2s1 - M************  Data [APFS Virtual drive]
    1.03 TB (Shared - 909.83 GB used, 92.99 GB available, 92.01 GB free)
    APFS
    Mount point: /System/Volumes/Data

  disk2s4 - VM [APFS VM]
    1.03 TB (Shared - 9.39 GB used, 92.01 GB free)
    APFS
    Mount point: /private/var/vm

  disk2s5 - Macintosh HD
    1.03 TB (Shared - 11.32 GB used, 92.99 GB available, 92.01 GB free)
    APFS
    Mount point: /
    Read-only: Yes

  disk3s1 - A***********************r
    102 MB (50 MB used, 52 MB free)
    Mac OS Extended
    Disk Image
    Mount point: /Volumes/A***********************r
    Owners enabled: No
    Read-only: Yes

Network:
  Interface en0: Ethernet
  Interface en1: Wi-Fi

  Interface en4: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

  Web sharing: Enabled

System Software:
  macOS Catalina 10.15.5 (19F101)
  Time since boot: About 6 hours

Configuration Files:
  /etc/hosts - Count: 2

Configuration Profiles:
  This computer has configuration profiles installed.

Notifications:
  Notifications not available without Full Drive Access.

Security:
  System Status
  Gatekeeper: Enabled
  System Integrity Protection: Enabled

  Antivirus software: Apple and Malwarebytes

  Web sharing: Enabled

Unsigned Files:
  Launchd: ~/Library/LaunchAgents/gitlab-runner.plist
    Executable: /usr/local/bin/gitlab-runner run --working-directory /Users/*** --config ~/.gitlab-runner/config.toml --service gitlab-runner --syslog
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.google.keystone.xpcservice.plist
    Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist
    Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist
    Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchDaemons/PT.updd.plist
    Executable: /Library/PrivilegedHelperTools/PT.updd
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchDaemons/de.appsolute.mampprohelper.plist
    Executable: /Library/PrivilegedHelperTools/de.appsolute.mampprohelper
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.tunnelbear.mac.tbeara.plist
    Executable: ~/Library/Application Support/TunnelBear/com.tunnelbear.mac.tbeara
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchDaemons/com.macpaw.CleanMyMac4.Agent.plist
    Executable: /Library/PrivilegedHelperTools/com.macpaw.CleanMyMac4.Agent

  Running app: com.macpaw.CleanMyMac4.HealthMonitor
  Running app: /Applications/MAMP/MAMP.app/Contents/MacOS/MAMP

  Plugin: /Library/Audio/Plug-Ins/HAL/KrispMic.driver
  Plugin: /Library/Audio/Plug-Ins/HAL/KrispSpeaker.driver

  Apps: 11

32-bit Applications:
  15 32-bit apps

Kernel Extensions:
  /Library/Application Support/VirtualBox
    VBoxDrv.kext (5.2.4)
    VBoxNetAdp.kext (5.2.4)
    VBoxNetFlt.kext (5.2.4)
    VBoxUSB.kext (5.2.4)

  /Library/Extensions
    SystemAudioRecorder.kext (1.1.0 - SDK 10.9)

System Launch Agents:
  [Not Loaded]  18 Apple tasks
  [Loaded]  167 Apple tasks
  [Running]  128 Apple tasks

System Launch Daemons:
  [Not Loaded]  33 Apple tasks
  [Loaded]  187 Apple tasks
  [Running]  117 Apple tasks

Launch Agents:
  [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2020-03-20)
  [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2020-04-22)
  [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2020-04-22)
  [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2020-04-21)

Launch Daemons:
  [Running] PT.updd.plist (? 0  - installed 2018-11-11)
  [Running] com.aaa.windscribe.OVPNHelper.plist (Windscribe Limited - installed 2018-10-04)
  [Running] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2020-03-20)
  [Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2020-04-22)
  [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2020-04-24)
  [Loaded] com.macpaw.CleanMyMac4.Agent.plist (? 0  - installed )
  [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2020-06-09)
  [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2020-04-21)
  [Loaded] com.tunnelbear.mac.tbeard.plist (TunnelBear, Inc. - installed 2018-10-04)
  [Loaded] de.appsolute.mampprohelper.plist (? 26ff81e4  - installed 2020-05-27)
  [Not Loaded] org.virtualbox.startup.plist (? 700b9385  - installed 2018-05-20)

User Launch Agents:
  [Loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2019-04-05)
  [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-05-19)
  [Loaded] com.adobe.ccxprocess.plist (Apple - installed 2020-06-01)
  [Loaded] com.google.keystone.agent.plist (? 0  - installed 2020-03-12)
  [Loaded] com.google.keystone.xpcservice.plist (? 0  - installed 2020-03-12)
  [Running] com.tunnelbear.mac.tbeara.plist (? 0  - installed 2018-10-04)
  [Running] gitlab-runner.plist (? 0  - installed 2018-06-09)

User Login Items:
  [Loaded] App Cleaner Helper (Sergiy Savenko - installed 2020-02-06)
    Modern Login Item
    /Applications/App Cleaner.app/Contents/Library/LoginItems/App Cleaner Helper.app

  [Not Loaded] CloudLoginHelper (Linebreak SL - installed 2020-06-08)
    Modern Login Item
    /Applications/CloudApp.app/Contents/Library/LoginItems/CloudLoginHelper.app

  [Not Loaded] DashlaneAutoStartHelper (App Store - installed 2020-05-20)
    Modern Login Item
    /Applications/Dashlane.app/Contents/Library/LoginItems/DashlaneAutoStartHelper.app

  [Not Loaded] P72E3GC48.com.dashlane.DashlaneAgent (App Store - installed 2020-05-20)
    Modern Login Item
    /Applications/Dashlane.app/Contents/Library/LoginItems/P72E3GC48.com.dashlane.DashlaneAgent.app

  [Not Loaded] Folx Schedule Helper (ELTIMA LLC - installed 2020-05-20)
    Modern Login Item
    /Applications/Folx.app/Contents/Library/LoginItems/FolxScheduleHelper.app

  [Not Loaded] Garmin Express Service (Garmin International - installed 2020-05-20)
    Modern Login Item
    /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app

  [Not Loaded] crashreporter (Garmin International - installed 2020-05-20)
    Modern Login Item
    /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app/Contents/MacOS/crashreporter.app

  [Not Loaded] HotspotShieldHelper (App Store - installed 2020-06-08)
    Modern Login Item
    /Applications/Hotspot Shield.app/Contents/Library/LoginItems/HotspotShieldHelper.app

  [Not Loaded] StartAtLoginHelper (App Store - installed 2020-06-08)
    Modern Login Item
    /Applications/Hotspot Shield.app/Contents/Library/LoginItems/StartAtLoginHelper.app

  [Not Loaded] Viber (Viber Media SARL. - installed 2020-06-09)
    Modern Login Item
    /Applications/Viber.app

  [Not Loaded] DriveDxLoginItemHelper (4ZNF85T75D - installed 2019-12-24)
    Modern Login Item
    ~/Downloads/DriveDx.app/Contents/Library/LoginItems/DriveDxLoginItemHelper.app

Internet Plug-ins:
  FlashPlayer-10.6: 32.0.0.371 (Adobe Systems, Inc. - installed 2020-05-12)
  AdobeAAMDetect: 3.0.0.0 (Adobe Systems, Inc. - installed 2020-03-20)
  Flash Player: 32.0.0.371 (Adobe Systems, Inc. - installed 2020-05-12)

User Internet Plug-ins:
  User Internet Plug-ins need Full Drive Access

Audio Plug-ins:
  KrispMic: 0.5.7 (? - installed 2018-11-13)
  KrispSpeaker: 0.5.7 (? - installed 2018-11-13)

User Audio Plug-ins:
  User Audio Plug-ins need Full Drive Access

User iTunes Plug-ins:
  User iTunes Plug-ins need Full Drive Access

Safari Extensions:
  Dashlane (App Store - installed 2020-05-20)
  Folx (ELTIMA LLC - installed 2020-05-20)

3rd Party Preference Panes:
  Flash Player (Adobe Systems, Inc. - installed 2020-04-24)

Time Machine:
  Time Machine information not available without Full Drive Access.

Performance:
  System Load: 2.39 (1 min ago) 2.88 (5 min ago) 3.29 (15 min ago)
  Nominal I/O speed: 1.76 MB/s
  File system: 28.73 seconds
  Write speed: 534 MB/s
  Read speed: 1469 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 9 %
  User: 15 %
  Idle: 76 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  Other processes 51.89 % (?)
  firefox 20.54 % (Mozilla Corporation)
  deleted 8.07 % (Apple)
  EtreCheck 7.64 % (App Store)
  trustd 4.03 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheck 395 MB (App Store)
  firefox 259 MB (Mozilla Corporation)
  Spotlight 75 MB (Apple)
  Finder 56 MB (Apple)
  Opera 48 MB (Opera Software AS)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  firefox 590 MB / 288 KB (Mozilla Corporation)
  Other processes 199 KB / 185 KB (?)
  Notes 81 KB / 143 KB (Apple)
  routined 0 B / 0 B (Apple)
  homed 0 B / 0 B (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 520 MB
  Used RAM: 6.02 GB
  Cached files: 1.47 GB

  Available RAM: 1.98 GB
  Swap Used: 3.88 GB

Software Installs (past 30 days):
  Install Date Name (Version)
  2020-05-11 Dashlane (6.2017.0)
  2020-05-12 Adobe Flash Player
  2020-05-19 Spark (2.7.0)
  2020-05-19 Newton (10.0.50)
  2020-05-29 The Unarchiver (4.2.2)
  2020-05-29 XProtectPlistConfigData (2122)
  2020-06-03 Record It (1.4.8)
  2020-06-03 macOS Catalina 10.15.5 Update
  2020-06-03 MRTConfigData (1.61)
  2020-06-03 Gatekeeper Compatibility Data (1.0)
  2020-06-08 Hotspot Shield (3.4.0)
  2020-06-09 Malwarebytes for Mac
  2020-06-09 EtreCheck (5.5.5)
  2020-06-09 MagicanFile (1.1.0)

Diagnostics Information (past 7-30 days):
  Directory /Library/Logs/DiagnosticReports is not accessible.
  Enable Full Drive Access to see more information.

End of report