Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Safari is crushing continuesly.

Safari is crushing continuesly. the info about removing add-ons are not complete for me, in the sense that i dnt know what to remove, given that this is the solution to my problem... Anyone can help?

iMac, OS X Mountain Lion (10.8.5)

Posted on Nov 30, 2013 2:46 AM

Reply
26 replies

Nov 30, 2013 10:42 AM in response to andyBall_uk

By name, at least - it's a 'web reputation checker' from Avast! 'anti-virus'


Could be... that one probably ought to be left in place, then, unless the problem isn't solved by removing the Spigot stuff. If that's the case, Avast probably ought to be removed entirely to see if that makes a difference. Avast is properly uninstalled using the item in the avast! menu.

Nov 30, 2013 10:58 AM in response to Marga Jee

Please read this whole message before doing anything.

This procedure is a diagnostic test. It changes nothing, and therefore will not, in itself, solve your problem.

Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The procedure will help identify which such modifications you've installed, as well as certain other aspects of the configuration that may have a bearing on the problem. Don’t be alarmed by the apparent complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.


These steps are to be taken while booted in “normal” mode, not in safe mode, if possible. If you’re now running in safe mode, reboot as usual before continuing. If you can only boot in safe mode, you can still use this procedure, but not all of it will work. Be sure to mention that in your reply, if you haven't already done so.


Below are instructions to enter UNIX shell commands. The commands are safe and do nothing but produce human-readable text output, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects. I am not asking you to trust me. If you can't satisfy yourself that these instructions are safe, don't follow them.

The commands will line-wrap or scroll in your browser, but each one is really just a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it.


Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. Step 1 should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.


Launch the Terminal application in any of the following ways:


☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.


When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.


Step 1


Triple-click anywhere in the line of text below on this page to select it:

{ echo "Loaded kernel extensions:"; kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'; echo $'\n'"Loaded user agents:"; launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)|\.[0-9]+$/{print $3}'; echo $'\n'"Inserted libraries:"; launchctl getenv DYLD_INSERT_LIBRARIES; echo $'\n'"User cron tasks:"; crontab -l; echo $'\n'"System launchd configuration:"; cat /e*/lau*; echo $'\n'"User launchd configuration:"; cat .lau*; echo $'\n'"Login items:"; osascript -e 'tell application "System Events" to get name of login items'; printf "\nRestricted user files: %s\n" $(find ~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \) | wc -l); echo $'\n'"Extrinsic loadable bundles:"; cd; find -L /S*/L*/E* {,/}L*/{Ad,Compon,Ex,In,Keyb,Mail/Bu,P*P,Qu,Scripti,Servi,Spo}* -type d -name Contents -prune | while read d; do /usr/libexec/PlistBuddy -c 'Print :CFBundleIdentifier' "$d/Info.plist" | egrep -qv "^com\.apple\.[^x]|Accusys|ArcMSR|ATTO|HDPro|HighPoint|driver\.stex|hp-fax|JMicron|print|SoftRAID" && echo ${d%/Contents}; done; echo $'\n'"Unsigned shared libraries:"; find /u*/{,*/}lib -type f -exec sh -c 'file -b $1 | grep -qw shared && ! codesign -v $1' {} {} \; -print; echo; ls -A {,/}L*/{La,Priv,Sta}* L*/Fonts; } 2> /dev/null | open -ef


Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.

The command may take up to a few minutes to run, depending on how many files you have and the speed of the computer. A TextEdit window will open with the output. Post the contents of the TextEdit window (not the Terminal window) — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.

Step 2


Remember that you must be logged in as an administrator for this step. Do as in Step 1 with this line:

{ echo "Loaded system agents:"; sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; echo $'\n'"Login hook:"; sudo defaults read com.apple.loginwindow LoginHook; echo $'\n'"Root cron tasks:"; sudo crontab -l; echo $'\n'"Log check:"; syslog -k Sender kernel -k Message CReq 'GPU |hfs: Ru|I/O e|find tok|n Cause: -|NVDA\(|pagin|timed? ?o' | tail } 2> /dev/null | open -ef

This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

To prevent confusion, I'll repeat: When you type your password in the Terminal window, you won't see what you're typing.

Note: If you don’t have a login password, set one before taking Step 2. If that’s not possible, skip the step.

Important: If any personal information, such as your name or email address, appears in the output of these commands, anonymize it before posting. Usually that won't be necessary.

Remember, Steps 1 and 2 are all copy-and-paste — no typing, except your password. Also remember to post the output as text, not as a screenshot.

You can then quit Terminal.

Nov 30, 2013 12:11 PM in response to Linc Davis

STEP 1 report


Loaded kernel extensions:

com.huawei.driver.HuaweiDataCardACMData (4.08.00)

com.avast.PacketForwarder (1.3)

com.avast.AvastFileShield (2.0.0)


Loaded user agents:

com.avast.helper

com.avast.userinit

com.quark.quarkupdate.agent

com.hp.productresearch

com.hp.devicemonitor

com.genieoinnovation.macextension

com.facebook.videochat.margascr.updater

com.adobe.ARM.ad895013aeb33ea6e968d9fdc06c0eb42c7c2a5229d98d64ad002716


Inserted libraries:


User cron tasks:


System launchd configuration:


User launchd configuration:


Login items:

iTunesHelper, GrowlHelperApp, FontExplorerXAutoload, AdobeResourceSynchronizer, GrowlHelperApp, Mail, World Clock Deluxe, Dropbox, iAntiVirus, RealPlayer Downloader Agent, TuneupMyMac, avast!


Restricted user files: 80


Extrinsic loadable bundles:

/System/Library/Extensions/ConnectUSB.kext

/System/Library/Extensions/HuaweiDataCardDriver.kext

/System/Library/Extensions/hypervisor.kext

/System/Library/Extensions/iavkfs.kext

/System/Library/Extensions/JRDMassStorageDriver.kext

/System/Library/Extensions/JRDUSBModemCDC.kext

/System/Library/Extensions/JRDUSBModemData.kext

/System/Library/Extensions/Pvsnet.kext

/System/Library/Extensions/vmmain.kext

Library/Address Book Plug-Ins/SkypeABDialer.bundle

Library/Address Book Plug-Ins/SkypeABSMS.bundle

Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin

Library/Internet Plug-Ins/FacebookVideoCalling.bundle

Library/PreferencePanes/Growl.prefPane

Library/Spotlight/FontMDI.mdimporter

/Library/InputManagers/Smart Crash Reports/Smart Crash Reports.bundle

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

/Library/Internet Plug-Ins/DRM Plugin.bundle

/Library/Internet Plug-Ins/Flash Player.plugin

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

/Library/Internet Plug-Ins/Musicnotes.plugin

/Library/Internet Plug-Ins/RealPlayer Plugin.plugin

/Library/Internet Plug-Ins/Silverlight.plugin

/Library/Internet Plug-Ins/Windows Media Plugin

/Library/PreferencePanes/Avast.prefPane

/Library/PreferencePanes/Flash Player.prefPane

/Library/PreferencePanes/Flip4Mac WMV.prefPane

/Library/PreferencePanes/MAudioOzone.prefPane

/Library/PreferencePanes/NIUSBAudio.prefPane

/Library/PreferencePanes/QUPreferencePane.prefPane

/Library/PreferencePanes/VersionCue.prefPane

/Library/PreferencePanes/VersionCueCS3.prefPane

/Library/QuickLook/Finale.qlgenerator

/Library/QuickTime/Flip4Mac WMV Advanced.component

/Library/QuickTime/Flip4Mac WMV Export.component

/Library/QuickTime/Flip4Mac WMV Import.component

/Library/QuickTime/Flix Flv.component

/Library/QuickTime/Flix Swf.component

/Library/QuickTime/FLV.component

/Library/ScriptingAdditions/QXPScriptingAdditions.osax

/Library/Spotlight/Finale.mdimporter

/Library/Spotlight/Microsoft Entourage.mdimporter

/Library/Spotlight/Microsoft Office.mdimporter


Unsigned shared libraries:

/usr/local/lib/libfuse.0.0.0.dylib

/usr/local/lib/libfuse.0.dylib

/usr/local/lib/libfuse.dylib

/usr/local/lib/libulockmgr.0.0.0.dylib

/usr/local/lib/libulockmgr.0.dylib

/usr/local/lib/libulockmgr.dylib


/Library/LaunchAgents:

com.avast.userinit.plist

com.genieoinnovation.macextension.plist

com.hp.devicemonitor.plist

com.hp.productresearch.plist

com.quark.quarkupdate.agent.plist


/Library/LaunchDaemons:

PACESupport.plist

com.WesternDigital.WDSmartWareD.plist

com.adobe.fpsaud.plist

com.adobe.versioncueCS3.plist

com.avast.init.plist

com.avast.uninstall.plist

com.edb.launchd.postgresql-8.4.plist

com.genieoinnovation.macextension.client.plist

com.quark.quarkupdate.plist

com.wdc.WDDMservice.plist


/Library/PrivilegedHelperTools:

com.genieoinnovation.macextension.client

com.quark.quarkupdate


/Library/StartupItems:

AdobeVersionCue

HWNetMgr

HWPortDetect

M-Audio Firmware Loader

MAudioOzone

PACESupport

Parallels

ParallelsTransporter


Library/Fonts:

Brush Script

HelveBla

HelveBlaObl

HelveLig

HelveLigObl

Sabon (A)

SabonBol

SabonBolIta

SabonIta

SabonRom

encodings.dir

fonts.dir

fonts.list

fonts.scale


Library/LaunchAgents:

com.adobe.ARM.ad895013aeb33ea6e968d9fdc06c0eb42c7c2a5229d98d64ad002716.plist

com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.6EE0CB9D-154A-48F7-9428-969 732FBF899.plist

com.avast.home.userinit.plist

com.facebook.videochat.margascr.plist


STEP 2 when inserted the line nothing happens, i waited 20 min. the other report came in 2 min

Nov 30, 2013 12:22 PM in response to Marga Jee

You installed the "Genieo" spyware/adware. There is an uninstaller, but as the developer is not trustworthy, you shouldn't rely on it. I suggest the tedious procedure below to disable Genieo.

Back up all data.

Triple-click anywhere in the line below on this page to select it:

/Applications/Genieo.app


Right-click or control-click the line and select

Services Reveal

from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. You may be prompted for your administrator password.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go Go to Folder...

from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.

Repeat with each of these lines:

/Applications/Uninstall Genieo.app
/Library/Frameworks/GenieoExtra.framework
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
/usr/lib/libgenkit.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib

Note: Some of these items may be absent, in which case you'll get a message that the file doesn't exist.

Reboot. Safari should now launch without crashing. If not, stop here and post your results.

From the Safari menu bar, select


Safari Preferences Extensions


Uninstall any extension you don't recognize. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.


The Genieo installer may also install the "Silverlight" web plugin from Microsoft. If you have no use for that plugin, you should remove it according to Microsoft's instructions. Don't remove it if you subscribe to "Netflix."

This procedure may leave a few files behind, but it should render Genieo permanently non-functional, as long as you never reinstall it.

"Avast" is perhaps the worst of the whole wretched lot of commercial "security" products for the Mac. It's worse than the imaginary "viruses" you were worried about when you installed it. Not only does it fail to protect you from garbage like "Genieo," it throws false warnings, destabilizes and slows down your computer, and sometimes or always corrupts the network settings and the permissions of files in your home folder. Removing it may not repair all the damage, and neither will Disk Utility or even reinstalling OS X.

Remove "Avast" according to the developer's instructions. Reboot.

If you tried to remove Avast by dragging an application to the Trash, you'll have to reinstall it and follow the instructions linked above.

If you still have problems after following those instructions, post again.

Nov 30, 2013 12:45 PM in response to Marga Jee

As Linc has pointed out, in addition to the Spigot adware, you also have the Genieo adware. Remove it according to Linc's directions. The fact that you have multiple adware programs installed indicates that you need to exercise more caution regarding what you download and install.


Remove Avast, and also get rid of iAntivirus, which is quite poor at recognizing Mac malware. To protect yourself against malware, see my Mac Malware Guide:


http://www.thesafemac.com/mmg


Also, I notice that you have TuneUpMyMac. Such programs are completely worthless and may even damage your system in some cases. You need to get rid of it. For more about this issue, see:


http://www.thesafemac.com/the-myth-of-the-dirty-mac/

Nov 30, 2013 12:58 PM in response to Linc Davis

wow, it worked... about genieo: i didnt install it, it came on its own with some other plug in for quicktime or similar. i immediately uninstall it and it seemed it disappeared. the funny thing is that this happened more than one month ago, but safari started to freak out just yesterday, after the safe reboot.

I also uninstalled Avast following the procedure...thanks so much... I am amazed by your skills, I really admire it...

Safari is crushing continuesly.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.