tawsh

Q: My iMac is Slow – No Idea Why

Product name: iMac

Processor 2.7 GHz Intel Core i5

Memory: 4 GB 1333 MHz DDR3

OS X: 10.9.4

 

--

 

My iMac is fairly new. Perhaps 3 years. All my programs are legal and I really only use my computer in the evening to work on freelance stuff. I feel as though ever since I updated to Mavericks, it's super slow doing the tiniest tasks. I'm a web developer/designer so I use Creative Cloud and often am switching between programs. Programs chug and even opening a browser is slower than it should be.

 

I've tried a few things to fix this.

 

1. I've rebooted my system and I always shut it off at night so it can clear it's cache.

2. I've disabled all my Google Chrome extensions (I read that that can slow things down)

3. My desktop is clean with only 3 folders on it.

4. I run verify disk/repair disk weekly.

5. I have the majority of my music on iMatch in the cloud and I regularly backup my photos on a hard drive.

6. All my working files for my work is located on a hard drive.

7. I unplug my hard drive when it's not in use and I don't work directly on it.

8. I've disabled most of my, 'open on restart' programs.

 

When I open Activity Monitor, I always have a billion things running and I don't know if that's normal. I don't know what half the items do or are. This list scrolls beyond what I've shown in the screen shot.

Screen Shot 2014-08-28 at 9.03.25 PM.png

Screen Shot 2014-08-28 at 9.05.37 PM.png

 

What is wrong?

Posted on Aug 28, 2014 6:07 PM

Close

Q: My iMac is Slow – No Idea Why

  • All replies
  • Helpful answers

  • by John Galt,

    John Galt John Galt Aug 28, 2014 6:19 PM in response to tawsh
    Level 8 (48,668 points)
    Mac OS X
    Aug 28, 2014 6:19 PM in response to tawsh

    Launch the Console app - it is in your Utilities folder and looks like this

     

    Screen Shot 2013-10-15 at 1.28.39 AM.png

     

    You can find it by selecting Utilities from the Finder's Go menu.

     

    Open Console.

     

    If the log list column on the left is not already displayed, show the log list by selecting Show Log List from Console's View menu. Select Show Toolbar if it is not already shown.

     

    Locate system.log in the list and select it. Many date and time-stamped entries will appear, hundreds of them, and you must find the entries relevant to your Mac's problem.


    To do that click the Clear Display button in the Toolbar. All previously displayed log entries will reappear.

     

    Next: Perform whatever actions cause the Mac to exhibit the slow behavior. If the problem is caused by errors logged by the system, the Console window will show them being recorded in system.log.

     

    One or more of them, along with their time stamps, may reveal the reason for the problem you describe.

     

    Copy and paste those log entries in a reply. If hundreds of the same repetitive messages appear, please edit them before posting. There should be no need for more than 100 or so total log entries.

     

    Most of the entries will be cryptic but will contain information you might consider personal such as your Mac's name. If you do not want that information to appear, delete or obscure it when posting your reply. Leave enough information so that the entries can be deciphered.


  • by tawsh,

    tawsh tawsh Aug 28, 2014 6:41 PM in response to John Galt
    Level 1 (0 points)
    Aug 28, 2014 6:41 PM in response to John Galt

    I think I have a malware problem. I’m seeing a lot of ‘whitesmoke_uploader’ logs.

     

     

    Aug 28 21:30:10 Natashas-iMac.local whitesmoke_uploader[6196]: NEW VERSION ALALIABLE!!!

    Aug 28 21:30:11 Natashas-iMac.local Safari[5125]: CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary on line 3. Parsing will be abandoned. Break on _CFPropertyListMissingSemicolon to debug.

    Aug 28 21:30:12 --- last message repeated 4 times ---

    Aug 28 21:30:12 Natashas-iMac.local whitesmoke_uploader[6196]: Succeeded! Received 162 bytes of data

    Aug 28 21:30:12 Natashas-iMac kernel[0]: whitesmoke_uploa: guarded fd exception: fd 0 code 0x2 guard 0x98408d94

    Aug 28 21:30:13 Natashas-iMac com.apple.launchd.peruser.501[150] (com.whitesmoke.uploader[6196]): Exited: Killed: 9

    Aug 28 21:30:13 Natashas-iMac com.apple.launchd.peruser.501[150] (com.whitesmoke.uploader): Throttling respawn: Will start in 6 seconds

    Aug 28 21:30:13 Natashas-iMac.local ReportCrash[6180]: Saved crash report for whitesmoke_uploader[6196] version ??? to /Users/mcdiarmid/Library/Logs/DiagnosticReports/whitesmoke_uploader_2014-08-28- 213013_Natashas-iMac.crash

    Aug 28 21:30:13 Natashas-iMac.local ReportCrash[6180]: Removing excessive log: file:///Users/mcdiarmid/Library/Logs/DiagnosticReports/whitesmoke_uploader_2014 -08-28-212625_Natashas-iMac.crash

    Aug 28 21:30:19 Natashas-iMac.local whitesmoke_uploader[6198]: /Users/mcdiarmid/Library/Application Support/WhiteSmoke/settings.plist

    Aug 28 21:30:21 Natashas-iMac.local whitesmoke_uploader[6198]: Succeeded! Received 162 bytes of data

    Aug 28 21:30:21 Natashas-iMac.local whitesmoke_uploader[6198]: compare [<html>

      <head><title>404 Not Found</title></head>

      <body bgcolor="white">

      <center><h1>404 Not Found</h1></center>

      <hr><center>nginx</center>

      </body>

      </html>

      ] & [2.0.1.2]

  • by John Galt,

    John Galt John Galt Aug 29, 2014 7:40 AM in response to tawsh
    Level 8 (48,668 points)
    Mac OS X
    Aug 29, 2014 7:40 AM in response to tawsh

    Hi tawsh

     

    Are you actually using a Whitesmoke product, or did you install a free demo of it? You would know since it's a subscription-based product for which you must pay a recurring fee.

     

    If you know you did not purchase it, or if you are not certain, then its components must be removed. Write back for additional instructions.

     

    Be sure to back up your Mac's content according to the following: Mac Basics: Time Machine backs up your Mac. If you have not already done so, do that now. Don't make any changes to your Mac until you are completely satisfied that you have adequate backups of your important work.

  • by Linc Davis,Helpful

    Linc Davis Linc Davis Aug 29, 2014 8:00 AM in response to tawsh
    Level 10 (207,931 points)
    Applications
    Aug 29, 2014 8:00 AM in response to tawsh

    To remove the WhiteSmoke spyware, first back up all data, then select

              Safari Preferences... Extensions

    from the Safari menu bar. For any extension with a name you don't recognize, select it and click Uninstall. If in doubt, delete all extensions.

    If you use Firefox or Chrome, do the equivalent in those browsers. You might have to delete Chrome completely and reinstall it from a fresh download.

    Triple-click anywhere in the line of text below on this page to select it:

    ~/Library/LaunchAgents/com.whitesmoke.uploader.plist

    Copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

              Go Go to Folder

    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder may open with a file selected. Delete the selected file. Then do the same with this line:

    ~/Library/Application Support/WhiteSmoke

    Finally, this:

    /Applications/WhiteSmoke.app

    This time you may be prompted for your administrator password.

    Log out and log back in.

  • by John Galt,

    John Galt John Galt Aug 29, 2014 8:05 AM in response to tawsh
    Level 8 (48,668 points)
    Mac OS X
    Aug 29, 2014 8:05 AM in response to tawsh

    Here are specific removal instructions for Google Chrome: http://www.whitesmoke.com/remove-toolbar

     

    If they do not work, write back.

     

    Whitesmoke appears to be adware thinly disguised as a productivity enhancement tool. If you did not intentionally install it, then you were deceived into doing so. For an explanation or how that may have occurred and how to avoid it in the future, read How to install adware.

  • by tawsh,

    tawsh tawsh Aug 29, 2014 8:09 AM in response to John Galt
    Level 1 (0 points)
    Aug 29, 2014 8:09 AM in response to John Galt

    I am certain I did not intentionally download any Whitesmoke products, as I have never heard of such a product.

     

    I have Time Machine so I will ensure I have a current backup before proceeding.

  • by John Galt,Helpful

    John Galt John Galt Aug 29, 2014 8:23 AM in response to tawsh
    Level 8 (48,668 points)
    Mac OS X
    Aug 29, 2014 8:23 AM in response to tawsh

    Good. In that case do the following. Do it after following the removal instructions for Chrome that I linked earlier.

     

    If you have not already done so, back up your Mac's content according to the following: Mac Basics: Time Machine backs up your Mac. Don't make any changes to your Mac until you are completely satisfied that you have adequate backups of your important work.

     

    Then:

     

    Remove "whitesmoke" as follows. Be sure to read the instructions with care.

     

    Select the entire line that follows (triple-click to select it), then control-click, and from the contextual menu that appears, select Services > Reveal in Finder:


    ~/Library/Application Support


    A Finder window will appear with the folder named "Application Support" selected. Open that folder and search for any items containing the name "whitesmoke". Drag the entire folder to the Trash. If there is no item containing the name "whitesmoke" continue with the following.

     

    Repeat with the following lines.

     

    ~/Library/LaunchAgents

     

    Open the "LaunchAgents" folder. Look for a file containing the name "whitesmoke". Drag it to the Trash.

     

    Next: Open your Applications folder by selecting Applications from the Finder's Go menu. Look for an icon named "Whitesmoke". Drag it to the Trash. You may need to authenticate to make this change.

     

    Restart your Mac.

  • by Linc Davis,

    Linc Davis Linc Davis Aug 29, 2014 8:30 AM in response to tawsh
    Level 10 (207,931 points)
    Applications
    Aug 29, 2014 8:30 AM in response to tawsh

    The trojan that you installed has nothing to do with the spelling corrector. I posted instructions for removing it.

  • by tawsh,

    tawsh tawsh Aug 29, 2014 6:30 PM in response to Linc Davis
    Level 1 (0 points)
    Aug 29, 2014 6:30 PM in response to Linc Davis

    I followed your instructions and removed all instances of Whitesmoke, and reinstalled a new Chrome. My Safari did have a Conduit (Malware?) extension so I disabled and removed that as well. I also restarted my computer.

     

    I'm not noticing a major difference. My Creative Cloud still opens super slow and my browsers take a few seconds to open.

     

    What else should I try? Should I bring it into the Genius bar at an Apple store?

  • by Linc Davis,

    Linc Davis Linc Davis Aug 29, 2014 6:54 PM in response to tawsh
    Level 10 (207,931 points)
    Applications
    Aug 29, 2014 6:54 PM in response to tawsh

    Launch the Console application. Click the Clear Display icon in the toolbar. Then take one of the actions that you're having trouble with. Select any messages that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

    The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

    Some private information, such as your name, may appear in the log. Anonymize before posting.

  • by tawsh,

    tawsh tawsh Aug 29, 2014 7:19 PM in response to Linc Davis
    Level 1 (0 points)
    Aug 29, 2014 7:19 PM in response to Linc Davis

    So this is me working in Photoshop and Illustrator and flipping between iTunes.

     

    --

     

    Marker - Aug 29, 2014, 10:15:31 PM

    Aug 29 22:15:32 Natashas-iMac.local com.apple.usbmuxd[23]: _SendAttachNotification Device dc:9b:9c:41:60:07@fe80::de9b:9cff:fe41:6007._apple-mobdev2._tcp.local. has already appeared on interface 5. Suppressing duplicate attach notification.

    Aug 29 22:15:57 Natashas-iMac.local mds[37]: (Warning) Volume: vsd:0x7fc404750800 Open failed.  failureCount:3 {

         DisabledRecycleCount = 3;

      }

    Aug 29 22:16:02 Natashas-iMac.local iTunes[32972]: Entered:_AMMuxedDeviceDisconnected, mux-device:28

    Aug 29 22:16:02 Natashas-iMac.local iTunes[32972]: Entered:__thr_AMMuxedDeviceDisconnected, mux-device:28

    Aug 29 22:16:02 Natashas-iMac.local iTunes[32972]: tid:1ac27 - Mux ID not found in mapping dictionary

    Aug 29 22:16:02 Natashas-iMac.local iTunes[32972]: tid:1ac27 - Can't handle disconnect with invalid ecid

    Aug 29 22:16:10 Natashas-iMac.local com.apple.usbmuxd[23]: _SendAttachNotification Device dc:9b:9c:41:60:07@fe80::de9b:9cff:fe41:6007._apple-mobdev2._tcp.local. has already appeared on interface 5. Suppressing duplicate attach notification.

    Aug 29 22:17:26 Natashas-iMac com.apple.launchd[1] (com.apple.quicklook.satellite.61A6CEF5-798E-4C6E-BA3E-089945DEDC18[57624]): Exited: Killed: 9

    Aug 29 22:17:50 Natashas-iMac.local iTunes[32972]: BUG in libdispatch client: kevent[EVFILT_WRITE] delete: "No such file or directory" - 0x2

    Aug 29 22:17:57 Natashas-iMac.local mds[37]: (Warning) Volume: vsd:0x7fc3fdd87000 Open failed.  failureCount:4 {

         DisabledRecycleCount = 4;

      }

    Aug 29 22:18:21 Natashas-iMac.local com.apple.usbmuxd[23]: _heartbeat_failed heartbeat detected detach for device 0x1d-fe80::cc1:48a4:1f3f:3eaa:0!

    Aug 29 22:18:24 Natashas-iMac.local mdworker[57627]: (Warning) Import: Bad path:

    Aug 29 22:18:24 Natashas-iMac.local mdworker[57629]: (Warning) Import: Bad path:

    Aug 29 22:18:24 Natashas-iMac.local mdworker[57628]: (Warning) Import: Bad path:

    Aug 29 22:18:24 Natashas-iMac.local mdworker[57630]: (Warning) Import: Bad path:

    Aug 29 22:18:25 Natashas-iMac.local mdworker[57632]: (Warning) Import: Bad path:

    Aug 29 22:18:25 Natashas-iMac.local mdworker[57631]: (Warning) Import: Bad path:

    Aug 29 22:18:25 Natashas-iMac.local mdworker[57633]: (Warning) Import: Bad path:

    Aug 29 22:18:25 Natashas-iMac.local mdworker[57634]: (Warning) Import: Bad path:

  • by Linc Davis,Solvedanswer

    Linc Davis Linc Davis Aug 29, 2014 7:55 PM in response to tawsh
    Level 10 (207,931 points)
    Applications
    Aug 29, 2014 7:55 PM in response to tawsh

    Please unmount all external storage devices and disconnect the mobile device(s). Any difference?