Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

EKA5

macrumors newbie
Original poster
Aug 13, 2025
1
0
DFW, TX
Posting my EtreCheck Report to hopefully begin this process of finding an expert!

I've had numerous issues over the past year and a half with my apple devices. I once found a GoogleCloud project on my gmail account that I never created and I think that's where this all began. My phone, ipad, and mac will all block different parts of websites, my connections and apple syncing will stop working, and it's driving me nuts. Last October I got a brand new iPhone, new apple ID, even a new phone number and I thought it all stopped but unfortunately in February of this year it started again. I suspect it's my husband or son, who are both far more tech-savy than me, and I think it's being conducted via our home network. We have a Firewalla Purple and since then I've discovered more devices that I never knew existed along with different wifi networks running. I can't log into my router anymore through Frontier Internet either. I try to forget about it but then a picture or message will disappear and I start inspecting again.

ANY help or guidance would be greatly appreciated! Apple has been no help!

EtreCheckPro version: 6.8.11 (68081)
Report generated: 2025-08-13 11:05:17
Download EtreCheckPro from https://etrecheck.com
Runtime: 7:42
Performance: Below Average

Problem: No problem - just checking

Major Issues:
Anything that appears on this list needs immediate attention.
No Time Machine backup - Time Machine backup not found.

Minor Issues:
These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
Configuration profiles found - This computer may have configuration profiles installed.
Apps crashing - There have been numerous app crashes.
Clean up - There are orphan files that could be removed.
Low performance - EtreCheck report took an unusually long time to run.
Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
MacBook Air (M1, 2020)
Status: Supported
MacBook Air Model: MacBookAir10,1
2.40 GHz Apple M1 (m1) CPU: 8-core
8 GB RAM - Not upgradeable
Battery: Health = Normal - Cycle count = 45

Video Information:
Apple M1
Color LCD (built-in) 2880 x 1800

Drives:
disk0 - APPLE SSD AP0256Q 251.00 GB (Solid State - TRIM: Yes)
Internal Apple Fabric NVM Express
S.M.A.R.T. Details: 0% used, 3.53 TB written, 100% health, 16 unsafe shutdowns
disk0s1 [APFS Container] 524 MB
disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes)
disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used)
disk1s2 - xART (APFS) (6 MB used)
disk1s3 - Hardware (APFS) (2 MB used)
disk1s4 - Recovery (APFS) [Recovery] (20 KB used)
disk0s2 [APFS Container] 245.11 GB
disk3 [APFS Virtual drive] 245.11 GB (Shared by 6 volumes)
disk3s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (85.53 GB used)
disk3s2 - Update (APFS) (46 MB used)
disk3s3 (APFS) [APFS Container] (11.26 GB used)
disk3s3s1 - Macintosh HD (APFS) [APFS Snapshot] (11.26 GB used)
disk3s4 - Preboot (APFS) [APFS Preboot] (7.15 GB used)
disk3s5 - Recovery (APFS) [Recovery] (1.05 GB used)
disk3s6 - VM (APFS) [APFS VM] (20 KB used)
disk0s3 [APFS Container] 5.37 GB
disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes)
disk2s1 - Recovery (APFS) [Recovery] (1.98 GB used)
disk2s2 - Update (APFS) (1 MB used)

Mounted Volumes:
disk1s1 - iSCPreboot [APFS Preboot]
Filesystem: APFS
Mount point: /System/Volumes/iSCPreboot
Used: 6 MB
Shared values
Size: 524 MB
Free: 505 MB

disk1s2 - xART
Filesystem: APFS
Mount point: /System/Volumes/xarts
Used: 6 MB
Shared values
Size: 524 MB
Free: 505 MB

disk1s3 - Hardware
Filesystem: APFS
Mount point: /System/Volumes/Hardware
Used: 2 MB
Shared values
Size: 524 MB
Free: 505 MB

disk3s1 - Macintosh HD - Data [APFS Virtual drive]
Filesystem: APFS
Mount point: /System/Volumes/Data
Encrypted
Used: 85.53 GB
Shared values
Size: 245.11 GB
Free: 139.93 GB
Available: 159.54 GB

disk3s2 - Update
Filesystem: APFS
Mount point: /System/Volumes/Update
Used: 46 MB
Shared values
Size: 245.11 GB
Free: 139.93 GB

disk3s3s1 - Macintosh HD [APFS Snapshot]
Filesystem: APFS
Mount point: /
Read-only: Yes
Used: 11.26 GB
Shared values
Size: 245.11 GB
Free: 139.93 GB
Available: 159.54 GB

disk3s4 - Preboot [APFS Preboot]
Filesystem: APFS
Mount point: /System/Volumes/Preboot
Used: 7.15 GB
Shared values
Size: 245.11 GB
Free: 139.93 GB

disk3s6 - VM [APFS VM]
Filesystem: APFS
Mount point: /System/Volumes/VM
Used: 20 KB
Shared values
Size: 245.11 GB
Free: 139.93 GB

USB:
USB 3.1 bus
<Empty>

USB 3.1 bus
<Empty>

Network:
Interface en0: Wi-Fi
802.11 a/b/g/n/ac/ax

iCloud Quota: 1.00 GB available

Firewall:
Blocked apps:
com.apple.RemoteDesktopAgent
com.apple.sidecar-relay
com.apple.identityservicesd
com.apple.replicatord
com.apple.startupdiskhelper
com.apple.syslogd
com.apple.kdc
com.apple.rapportd
Stealth mode: Enabled

System Software:
macOS Sequoia 15.6 (24G84)
Installed 2025-08-10
Time since boot: Less than an hour

Configuration Profiles:
com.apple.applicationaccess
forceAutomaticDateAndTime

com.apple.applicationaccess
allowSafariPrivateBrowsing
allowSafariHistoryClearing

Notifications:
EtreCheckPro.app
3 notifications

Security:
Gatekeeper: App Store and identified developers
System Integrity Protection: Enabled
Secure Boot: Full Security

Antivirus software: Apple

System Extensions:
[Running] ProtonVPN WireGuard - version 5.1.0 (ProtonVPN AG - installed 2025-06-26)
Application: /Applications/ProtonVPN.app - version 5.1.0 (ProtonVPN AG - installed 2025-06-26)

Kernel Extensions:
/Library/Extensions
[Not Loaded] SamsungPortableSSDDriver.kext - com.samsung.portablessd.driver (2.0.0 - SDK 11)

System Launch Daemons:
[Not Loaded] 42 Apple tasks
[Loaded] 200 Apple tasks
[Running] 175 Apple tasks
[Other] 2 Apple tasks

System Launch Agents:
[Not Loaded] 20 Apple tasks
[Loaded] 232 Apple tasks
[Running] 197 Apple tasks

Launch Daemons:
[Loaded] ch.protonvpn.ProtonVPNNetworkHelper.plist (ProtonVPN AG - installed 2024-12-11)
Executable: /Library/PrivilegedHelperTools/ch.protonvpn.ProtonVPNNetworkHelper

[Not Loaded] com.fing.service.plist (Not signed - installed 2025-06-29)
Command: /Applications/Fing.app/Contents/Resources/service/fing --servicemode com.fing.service.plist --agentroot /Applications/Fing.app/Contents/Resources/service

[Not Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2024-12-03)
Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon

Launch Agents:
[Not Loaded] com.apple.dt.xcode.xcbackgrounddownloader.plist (Apple - installed 2025-05-13)
Command: /Applications/Xcode.app/Contents/Developer/usr/bin/xcodebuild -downloadAllPreviouslySelectedPlatforms
Location: /Applications/Xcode.app

User Launch Agents:
[Not Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2025-06-10)
Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2

[Not Loaded] com.samsung.portablessdplus.mon.plist (Samsung Electronics - installed 2025-02-03)
Executable: ~/Library/Application Support/Portable_SSD/SamsungPortableSSD_1.0.app/Contents/Resources/SamsungPortableSSDMon_1.0

User Login Items:
[Not Loaded] Launcher Disabler (App Store - installed 2025-07-23)
Modern Login Item
/Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

[Not Loaded] OneDrive Launcher (App Store - installed 2025-07-23)
Modern Login Item
/Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

[Not Loaded] ProtonVPNStarter (ProtonVPN AG - installed 2025-06-26)
Modern Login Item
/Applications/ProtonVPN.app/Contents/Library/LoginItems/ProtonVPNStarter.app

[Not Loaded] PasswordsMenuBarExtra (Apple - installed 2025-07-19)
Modern Login Item
/System/Applications/Passwords.app/Contents/Library/LoginItems/PasswordsMenuBarExtra.app

[Not Loaded] WeatherMenu (Apple - installed 2025-07-19)
Modern Login Item
/System/Applications/Weather.app/Contents/Library/LoginItems/WeatherMenu.app

Applications:
810 Apple apps
71 3rd party apps
8 x86-only apps
No unsigned apps

App Extensions:
Widgets:
[Loaded] PowerPointWidgetKit - /Applications/Microsoft PowerPoint.app
[Not Loaded] Developer - /Applications/Developer.app
[Loaded] CalendarWidgetExtension - /Applications/Microsoft Outlook.app
[Loaded] WordWidgetKit - /Applications/Microsoft Word.app
[Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app
[Not Loaded] DaagWidget - /Applications/Co — Star.app

Safari extensions:
[Not Loaded] Safari Extension - /Applications/Proton Pass for Safari.app

Plugins:
[Loaded] Co—Star - /Applications/Co — Star.app
[Not Loaded] ProtonVPN Plutonium - /Applications/ProtonVPN.app
[Loaded] quicktype - /Applications/Paste JSON as Code • quicktype.app

Notification providers:
[Loaded] NotificationServiceExtension - /Applications/US Mobile.app
[Loaded] Firewalla - /Applications/Firewalla.app

File providers:
[Not Loaded] OneDrive File Provider - /Applications/OneDrive.app

Share services:
[Loaded] OneNote - /Applications/Microsoft OneNote.app

Finder sync extensions:
[Not Loaded] OneDrive Finder Integration - /Applications/OneDrive.app

QuickLook Previews:
[Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app
com.etresoft.etrecheck4 *.etrecheck

Backup:
Time Machine Not Configured!

Performance:
System Load: 2.58 (1 min ago) 18.65 (5 min ago) 14.19 (15 min ago)
Nominal I/O usage: 17.38 MB/s
File system: 9.30 seconds
Write speed: 2278 MB/s
Read speed: 2959 MB/s

CPU Usage Snapshot:
Type Overall
System: 11 %
User: 19 %
Idle: 70 %

Top Processes Snapshot by CPU:
Process (count) CPU (Source - Location)
WindowServer 25.26 % (Apple)
EtreCheckPro 17.50 % (Etresoft, Inc.)
duetexpertd 13.46 % (Apple)
linkd 12.18 % (Apple)
Monterey 8.80 % (Apple)

Top Processes Snapshot by Memory:
Process (count) RAM usage (Source - Location)
Google Chrome Helper (Renderer) (19) 1.52 GB (Google LLC)
EtreCheckPro 760 MB (Etresoft, Inc.)
Console 181 MB (Apple)
com.apple.appkit.xpc.openAndSavePanelService (3) 174 MB (Apple)
Google Chrome 157 MB (Google LLC)

Top Processes Snapshot by Network Use:
Process (count) Input / Output (Source - Location)
mDNSResponder 130 KB / 78 KB (Apple)
apsd 8 KB / 44 KB (Apple)
nsurlsessiond 38 KB / 6 KB (Apple)
searchpartyuseragent 8 KB / 3 KB (Apple)
netbiosd 1 KB / 808 B (Apple)

Top Processes Snapshot by Energy Use:
Process (count) Energy (0-100) (Source - Location)
WindowServer 8 (Apple)
searchpartyd 5 (Apple)
cloudd (2) 3 (Apple)
Monterey 3 (Apple)
WallpaperSequoiaExtension 2 (Apple)

Virtual Memory Information:
Physical RAM: 8 GB

Free RAM: 62 MB
Used RAM: 5.97 GB
Cached files: 1.97 GB

Available RAM: 2.03 GB
Swap Used: 0 B

Software Installs (past 60 days):
Install Date Name (Version)
2025-06-15 XProtectPlistConfigData (5300) - Software update
2025-06-27 XProtectCloudKitUpdate (5302) - XProtectUpdateService
2025-06-29 XProtectPlistConfigData (5302) - Software update
2025-07-01 Paste JSON as Code • quicktype (8.2.22) - App Store
2025-07-01 Xcode (16.4) - App Store
2025-07-01 XProtectPlistConfigData (5303) - Software update
2025-07-01 macOS 15.5 (15.5) - Software update
2025-07-01 RosettaUpdateAuto (1.0.0.0.1.1752914184) - Install on demand
2025-07-02 Proton Pass for Safari (1.31.1) - App Store
2025-07-02 Developer App (10.8.1) - App Store
2025-07-09 XProtectCloudKitUpdate (5304) - XProtectUpdateService
2025-07-23 OneDrive (25.110.0608) - App Store
2025-07-23 Bee DICOM Viewer (2.6.2) - App Store
2025-07-23 Numbers (14.4) - App Store
2025-07-23 OneDrive (25.127.0701) - App Store
2025-07-23 Proton Pass for Safari (1.32.2) - App Store
2025-07-23 XProtectPayloads (152) - Software update
2025-07-23 XProtectPlistConfigData (5308) - Software update
2025-08-01 Crixy: Designs for Cricut (1.0.2) - App Store
2025-08-06 XProtectCloudKitUpdate (5309) - XProtectUpdateService
2025-08-10 XProtectPayloads (153) - Software update
2025-08-10 XProtectPlistConfigData (5309) - Software update
2025-08-10 macOS 15.6 (15.6) - Software update
2025-08-10 RosettaUpdateAuto (1.0.0.0.1.1752914184) - Install on demand
2025-08-13 XProtectCloudKitUpdate (5310) - XProtectUpdateService

Clean up:
/Library/LaunchDaemons/com.fing.service.plist
/Applications/Fing.app/Contents/Resources/service/fing
Executable not found

Diagnostics Information (past 60 days):
2025-08-13 10:51:52 DaagWidgetExtension Crash (2 times)
First occurrence: 2025-08-10 18:04:51

2025-08-13 10:43:28 Google Chrome Helper Crash
Executable: /Applications/Google Chrome.app

2025-08-12 19:27:10 Finder.app High CPU Use
Executable: /System/Library/CoreServices/Finder.app

2025-08-11 17:53:59 signpost_reporter High CPU Use
Executable: /usr/libexec/signpost_reporter

2025-08-10 20:05:07 ANECompilerService High CPU Use
Executable: /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/Contents/MacOS/ANECompilerService

2025-08-10 18:03:36 lsd Crash (4 times)
First occurrence: 2025-08-10 18:03:10
Executable: /usr/libexec/lsd

2025-08-10 17:50:11 managedsettingsdiagnoticstool Crash (2 times)
Executable: /System/Library/Frameworks/ManagedSettings.framework/managedsettingsdiagnoticstool

2025-08-10 17:50:11 rmdinspect Crash (2 times)
Executable: /System/Library/PrivateFrameworks/RemoteManagement.framework/rmdinspect


End of report
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.