Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

The Dyslexic

macrumors newbie
Original poster
Jan 8, 2016
4
0
london
Hi there everyone.

i am a full time photographs based in london uk, have been using macs for over 8 years. this is the first time i have posted on this or any forums.

i am using iMac 27-inch, Late 2013,
Processor 3.5 GHz Intel Core i7
Memory 24 GB 1600 MHz DDR3 2x 4gb 2 x8gb
Graphics NVIDIA GeForce GTX 780M 4096 MB
Software OS X 10.9.5 (13F1507)
Macintosh HD 3.11 Tb Drive with only 1 tb used

I have a Lacie thunderbolt 4 TB drive attached. we work on a network of 4 macs and 1 pc. with 3 network external drives.

The problem that i am having has got worse as time has gone by. i am getting that lovely rainbow spinning wheel. at many different time. it will constantly spin, i can more the wheel around. but i cannot access anything, will not allow me to open any file or app. cannot force Quit. i have to shut it down disconnect the main and then restart.

Coping files to or from a Lacie networked external drive.
ejecting the Pc

i also get the wheel when i just open apps and some files, by this spins from 30 secs then stops.

Please could someone help me out, driving me mad, as thinks are taking forever to do.

Many thanks in advance

Joel
 
First open /Applications/Utilities/Activity Viewer.app and see if something is eating up processor cycles and if you find one quit it and uninstall it!

Next use the freeware MailwareBytes for Mac and scan you system to see if you contracted a Trojan!

Lastly use another freeware app called EtreCheck and run it. It will build a text document of all the installed programs on your Mac and also any plugins and services you have installed! The report will list the folder locations so you can upgrade or delete a service, old applications plugins and services and any running process! Just remember to manually reboot if you delete and running process to fully get rid of that process.
 
Last edited:
First, before doing anything else, make sure you have an up to date backup. After you've made a good backup, boot your machine to recovery (command + r), select utilities, Disk Utility, and verify the hard drive. You could be faced with a failing hard drive which is why a backup is so important.
 
First open /Applications/Utilities/Activity Viewer.app and see if something is eating up processor cycles and if you find one quit it and uninstall it!

Next use the freeware MailwareBytes for Mac and scan you system to see if you contracted a Trojan!

Lastly use another freeware app called EtreCheck and run it. It will build a text document of all the installed programs on your Mac and also any plugins and services you have installed! The report will list the folder locations so you can upgrade or delete a service, old applications plugins and services and any running process! Just remember to manually reboot if you delete and running process to fully get rid of that process.



Hi there Thank you so much for coming back to me on this matter,

I have run the malaware
First open /Applications/Utilities/Activity Viewer.app and see if something is eating up processor cycles and if you find one quit it and uninstall it!

Next use the freeware MailwareBytes for Mac and scan you system to see if you contracted a Trojan!

Lastly use another freeware app called EtreCheck and run it. It will build a text document of all the installed programs on your Mac and also any plugins and services you have installed! The report will list the folder locations so you can upgrade or delete a service, old applications plugins and services and any running process! Just remember to manually reboot if you delete and running process to fully get rid of that process.



Hi there

Thank you for coming back to me on this,

on the activity monitor i have something called.

Kernel_task Memory 1.38 treads 118 ports 0 PID 0 user Root

i have run the mail ware app, it found one that i have deleted it via the program and we will see what happens.

the Etrecharck this is what i got back

_________________________________________________________________________________________________
EtreCheck version: 2.6.6 (226)

Report generated 11/01/2016 11:03

Runtime 2:07

Download EtreCheck from http://etrecheck.com



Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.



Hardware Information: (What does this mean?)

iMac (27-inch, Late 2013)

[Click for Technical Specifications]

[Click for User Guide]

iMac - model: iMac14,2

1 3.5 GHz Intel Core i7 CPU: 4-core

24 GB RAM Upgradeable

[Click for upgrade instructions]

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

BANK 0/DIMM1

8 GB DDR3 1600 MHz ok

BANK 1/DIMM1

8 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en1: 802.11 a/b/g/n/ac



Video Information: (What does this mean?)

NVIDIA GeForce GTX 780M - VRAM: 4096 MB

iMac 2560 x 1440

BenQ PJ 2560 x 1440 @ 60 Hz



System Software: (What does this mean?)

OS X Mavericks 10.9.5 (13F1507) - Time since boot: less than an hour



Disk Information: (What does this mean?)

APPLE SSD SD0128F disk0 : (121.33 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Boot OS X (disk0s3) <not mounted> : 134 MB

Macintosh HD (disk3) / : 3.11 TB (1.39 TB free)

Core Storage: disk0s2 120.99 GB Online

Core Storage: disk2s2 3.00 TB Online



APPLE HDD ST3000DM001 disk2 : (3 TB) (Rotational)

EFI (disk2s1) <not mounted> : 210 MB

Recovery HD (disk2s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk3) / : 3.11 TB (1.39 TB free)

Core Storage: disk0s2 120.99 GB Online

Core Storage: disk2s2 3.00 TB Online



ST4000DX002-1H2178 disk1 : (4 TB) (Rotational)

EFI (disk1s1) <not mounted> : 210 MB

BIG WEDDING (disk1s2) /Volumes/BIG WEDDING : 4.00 TB (1.87 TB free)



USB Information: (What does this mean?)

StoreJet Transcend StoreJet Transcend 1 TB

EFI (disk4s1) <not mounted> : 210 MB

JD27 TM (disk4s2) /Volumes/JD27 TM : 999.86 GB (118.45 GB free)

Lexar USB_3_0 Reader

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. MacBook Air SuperDrive



Thunderbolt Information: (What does this mean?)

Apple Inc. thunderbolt_bus

LaCie d2 TBT2 USB3



Configuration files: (What does this mean?)

/etc/sysctl.conf - File exists but not expected

/etc/hosts - Count: 15



Gatekeeper: (What does this mean?)

Anywhere



Kernel Extensions: (What does this mean?)

/Applications/AVG AntiVirus.app

[loaded] com.avg.Antivirus.OnAccess.kext (2015.0 - SDK 10.8) [Click for support]



/Applications/Toast 11 Titanium/Spin Doctor.app

[not loaded] com.hzsystems.terminus.driver (4) [Click for support]



/Library/Extensions

[not loaded] com.LaCie.ScsiType00 (2.4.1 - SDK 10.8) [Click for support]



/System/Library/Extensions

[not loaded] com.Leaf.driver.LeafFwXDriverMatcher (1.2.0d1) [Click for support]

[loaded] com.avatron.AVExFramebuffer (1.7 - SDK 10.8) [Click for support]

[loaded] com.avatron.AVExVideo (1.7 - SDK 10.8) [Click for support]

[loaded] com.logmein.driver.LogMeInSoundDriver (4.1.55f95) [Click for support]

[not loaded] com.parallels.kext.prl_hid_hook (4.0 3540.209168) [Click for support]

[not loaded] com.parallels.kext.prl_hypervisor (4.0 3540.209168) [Click for support]

[not loaded] com.parallels.kext.prl_netbridge (4.0 3540.209168) [Click for support]

[not loaded] com.parallels.kext.prl_usb_connect (4.0 3540.209168) [Click for support]

[not loaded] com.parallels.kext.prl_vnic (4.0 3540.209168) [Click for support]

[not loaded] com.roxio.BluRaySupport (1.1.6) [Click for support]



~/Library/Services/ToastIt.service/Contents/MacOS

[not loaded] com.roxio.TDIXController (2.0) [Click for support]



Startup Items: (What does this mean?)

ParallelsDesktopTransporter: Path: /Library/StartupItems/ParallelsDesktopTransporter

ProTec6b: Path: /Library/StartupItems/ProTec6b

Startup items are obsolete in OS X Yosemite



System Launch Agents: (What does this mean?)

[running] com.apple.Dock.plist - Invalid signature!

[loaded] com.apple.RemoteDesktop.plist - Invalid signature!

[loaded] com.apple.screensharing.MessagesAgent.plist - Invalid signature!



Launch Agents: (What does this mean?)

[failed] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.adobe.CS5ServiceManager.plist [Click for support]

[running] com.avg.Antivirus.gui.plist [Click for support]

[running] com.brother.LOGINserver.plist [Click for support]

[failed] com.epson.epw.agent.plist [Click for support]

[failed] com.lacie.LaCieDesktopManagerAgent.plist [Click for support]

[running] com.logmein.logmeingui.plist [Click for support]

[running] com.logmein.logmeinguiagent.plist [Click for support]

[loaded] com.logmein.logmeinguiagentatlogin.plist [Click for support]

[loaded] com.oracle.java.Java-Updater.plist [Click for support]

[failed] com.parallels.desktop.launch.plist [Click for support]

[running] com.xrite.colormunkid.plist [Click for support]

[running] com.xrite.device.message.plist [Click for support]



Launch Daemons: (What does this mean?)

[loaded] com.adobe.SwitchBoard.plist [Click for support]

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.avg.Antivirus.crashpad.plist [Click for support]

[running] com.avg.Antivirus.infosd.plist [Click for support]

[running] com.avg.Antivirus.services.plist [Click for support]

[failed] com.lacie.LaCieDesktopManagerDaemon.plist [Click for support] [Click for details]

[running] com.logmein.logmeinserver.plist [Click for support]

[loaded] com.logmein.raupdate.plist [Click for support]

[loaded] com.malwarebytes.MBAMHelperTool.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[loaded] com.oracle.java.Helper-Tool.plist [Click for support]

[failed] com.parallels.desktop.launchdaemon.plist [Click for support]

[running] com.xrite.device.colormunki.plist [Click for support]



User Launch Agents: (What does this mean?)

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.adobe.ARM.[...].plist [Click for support]

[loaded] uk.co.markallan.clamxav.freshclam.plist [Click for support]



User Login Items: (What does this mean?)

iTunesHelper UNKNOWN Hidden (missing value)

Pogoplug UNKNOWN (missing value)

Dropbox Application (/Applications/Dropbox.app)

ColorMunki Photo Tray Application Hidden (/Library/Application Support/Colormunki/Photo/Tools/ColorMunki Photo Tray.app)

VPNServerConfigurator UNKNOWN (missing value)

Genieo UNKNOWN (missing value)



Other Apps: (What does this mean?)

[running] [0x0-0x8008].com.phaseone.captureone7

[running] [0x0-0x9009].com.adobe.Photoshop

[running] com.brother.utility.NETserver.37344

[running] com.brother.utility.USBserver.32240

[running] com.etresoft.EtreCheck.108272

[running] com.getdropbox.dropbox.14112

[running] com.xrite.ColorMunkiTray.photo.13584

[running] dk.infinite-loop.crashreporter.53008.3AA453FE-DFD7-4645-ABD6-F0FE6B9E78BD



Internet Plug-ins: (What does this mean?)

LogMeInSafari64: Version: 1.0.586 [Click for support]

Default Browser: Version: 537 - SDK 10.9

OfficeLiveBrowserPlugin: Version: 12.3.6 [Click for support]

AdobePDFViewerNPAPI: Version: 11.0.13 - SDK 10.6 [Click for support]

FlashPlayer-10.6: Version: 20.0.0.267 - SDK 10.6 [Click for support]

LogMeIn: Version: 1.0.586 [Click for support]

Silverlight: Version: 5.1.40416.0 - SDK 10.6 [Click for support]

QuickTime Plugin: Version: 7.7.3

Flash Player: Version: 20.0.0.267 - SDK 10.6 [Click for support]

LogMeInSafari32: Version: 1.0.586 [Click for support]

iPhotoPhotocast: Version: 7.0

AdobePDFViewer: Version: 11.0.13 - SDK 10.6 [Click for support]

SharePointBrowserPlugin: Version: 14.0.0 [Click for support]

JavaAppletPlugin: Version: Java 8 Update 66 build 17 Check version



3rd Party Preference Panes: (What does this mean?)

AirServer Preferences [Click for support]

Flash Player [Click for support]

Java [Click for support]

MacFUSE [Click for support]

Perian [Click for support]

X-Rite Device Services [Click for support]



Time Machine: (What does this mean?)

Skip System Files: NO

Mobile backups: OFF

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 3.11 TB Disk used: 1.71 TB

Destinations:

JD27 TM [Local]

Total size: 999.86 GB

Total number of backups: 1

Oldest backup: 06/01/2016 03:35

Last backup: 06/01/2016 03:35

Size of backup disk: Too small

Backup size 999.86 GB < (Disk used 1.71 TB X 3)



Top Processes by CPU: (What does this mean?)

6% fontd

3% WindowServer

2% kernel_task

0% LogMeIn

0% dpd



Top Processes by Memory: (What does this mean?)

1.35 GB kernel_task

860 MB Capture One

221 MB mds_stores

197 MB com.apple.WebKit.WebContent(2)

172 MB com.apple.IconServicesAgent



Virtual Memory Information: (What does this mean?)

18.00 GB Free RAM

5.80 GB Used RAM (1.95 GB Cached)

0 B Swap Used



Diagnostics Information: (What does this mean?)

Jan 11, 2016, 10:56:34 AM Self test - passed
 
It's AVG. That program is well known to cause problems in OS X "upgrades"!

Hi there tanks again.

Avg in not running all the time. i installed it as i was getting problems and need to check virus's etc. so i should uninstall this then,

What would you recommend i use if anything ????
 
Hi there tanks again.

Avg in not running all the time. i installed it as i was getting problems and need to check virus's etc. so i should uninstall this then,

What would you recommend i use if anything ????

You should have used the Uninstall AVG for Mac when you deleted it.

Do a search for the plugin. Plus go to your internet plugins folder and delete the Genieo plugin too!
 
You should have used the Uninstall AVG for Mac when you deleted it.

Do a search for the plugin. Plus go to your internet plugins folder and delete the Genieo plugin too!


I have deleted AVG, do i need a virus program ?? if so what one do you recommend,

i have had a look in plug ins and i can't see any genieo ones there.

these are the ones i do have

file:///Library/Internet%20Plug-Ins/AdobePDFViewer.plugin/
file:///Library/Internet%20Plug-Ins/AdobePDFViewerNPAPI.plugin/
file:///Library/Internet%20Plug-Ins/Default%20Browser.plugin/
file:///Library/Internet%20Plug-Ins/Disabled%20Plug-Ins/
file:///Library/Internet%20Plug-Ins/Flash%20Player.plugin/
file:///Library/Internet%20Plug-Ins/flashplayer.xpt
file:///Library/Internet%20Plug-Ins/iPhotoPhotocast.plugin/
file:///Library/Internet%20Plug-Ins/JavaAppletPlugin.plugin/
file:///Library/Internet%20Plug-Ins/LogMeIn.plugin/
file:///Library/Internet%20Plug-Ins/LogMeInSafari32.plugin/
file:///Library/Internet%20Plug-Ins/LogMeInSafari64.plugin/
file:///Library/Internet%20Plug-Ins/nsIQTScriptablePlugin.xpt
file:///Library/Internet%20Plug-Ins/OfficeLiveBrowserPlugin.plugin/
file:///Library/Internet%20Plug-Ins/Quartz%20Composer.webplugin/
file:///Library/Internet%20Plug-Ins/SharePointBrowserPlugin.plugin/
file:///Library/Internet%20Plug-Ins/SharePointWebKitPlugin.webplugin/
file:///Library/Internet%20Plug-Ins/Silverlight.plugin/
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.