Q: HAS ANYONE ELSE NOTICED THIS WITH MAVERICKS
-
Feb 14, 2014 7:24 PMby Toyworks11,I think I accidently put Cream My Mac on right after I got it, and I thought I had removed it. I cannot find it on my sysstem, but then I'm not as good on it as some of you guys. how do I go about gutting the Mac and re-installing. I have the 2 discs that came wwith my Mac. One is the applications install, and the other is the OS X install.
I wonder about making a bacckup disc because I'm afraid that malware would get on it and transferred back onto my system. Should I just save my important files and do the disc reinstall?
-
Feb 14, 2014 7:41 PMby etresoft,Toyworks11 wrote:
Where do I find all this 3rd party garbage the hackers install on my Mac?
Use the 3rd party support links that come with EtreCheck. They will help you get starting tracking down an official uninstaller. If, as John Galt suggests, that Clean My Mac's uninstaller does not work, we can help you do a real clean up. But try the official uninstallers first. You don't want to go poking around the system internals unless you really know what you are doing.
It was definitely FileVault that was hammering your hard drive. Unfortunately, it has to do that in order to encrypt the contents. After encrypting it will settle down, but you will have to let it run non-stop for maybe a couple of days.
Finally, you also have a number of 3rd party system modifications that could be giving you problems in Mavericks. If you aren't happy with Mavericks, even before the disk hammering, then they are likely the cause.
-
Feb 14, 2014 7:43 PMby ~Bee,Toy --
Rapport by Trusteer can be uninstalled. It will definitely trash Safari. Get uninstaller from Trusteer, and then search for anything labeled Trusteer or Rapport. Trash any that appear.
Conduit is the same. Go on their site for Uninstalling directions. Double check via search.Trash any that appear.
You also need to make sure SIMBL unter Conduit is also gone.
Uninstall CreamMyMac (nice alias, by the way).
Search for any macpaw or CleanMyMac items. Trash any that appear.
Take SimpleFloating Clock, BirdClock and SimpleFloating off you Login Items.
(System Preferences > Accounts > Your Name > Login items.
(Delete any that you don't use any more.)
Picasa is now 3. something. You have 1.0 on there.
Housecleaning is in order, eh?
You don't really need to uninstall and reinstall the OS. Just go to the sites of the possible culprits above,
and uninstall. Empty trash, and restart your Mac.
-
Feb 14, 2014 8:46 PMby Toyworks11,Here is the Etre Report I just gathered. My problem is that I don't know how to do these tasks, but maybe I could be talked through them. I would be willing to pay someone to help me do this.
"Quote" Get uninstaller from Trusteer, and then search for anything labeled Trusteer or Rapport. Trash any that appear.
Where would I look for these Trusteer and Rapport components? I did see a Rapport item when I did a spotlight check.
Hardware Information:
iMac (27-inch, Mid 2010)
iMac - model: iMac11,3
1 3.2 GHz Intel Core i3 CPU: 2 cores
4 GB RAM
Video Information:
ATI Radeon HD 5670 - VRAM: 512 MB
System Software:
OS X 10.9.1 (13B42) - Uptime: 0 days 0:10:3
Disk Information:
ST31000528AS disk0 : (1 TB)
EFI (disk0s1) <not mounted>: 209.7 MB
Macintosh HD (disk0s2) /: 999.35 GB (239.01 GB free)
Recovery HD (disk0s3) <not mounted>: 650 MB
OPTIARC DVD RW AD-5680H
USB Information:
Eastman Kodak Company KODAK ESP 5200 Series AiO
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Internal Memory Card Reader
Apple Inc. Built-in iSight
Apple Computer, Inc. IR Receiver
FireWire Information:
Thunderbolt Information:
Kernel Extensions:
com.squirrels.driver.AirParrotSpeakers (1.7 - SDK 10.7)
com.squirrels.airparrot.framebuffer (3 - SDK 10.7)
com.logmein.driver.LogMeInSoundDriver (1.0.0)
Startup Items:
NoteburnerService: Path: /System/Library/StartupItems/NoteburnerService
Problem System Launch Daemons:
Problem System Launch Agents:
Launch Daemons:
[System] com.adobe.fpsaud.plist 3rd-Party support link
[System] com.google.keystone.daemon.plist 3rd-Party support link
[System] com.logmein.logmeinserver.plist 3rd-Party support link
[System] com.logmein.raupdate.plist 3rd-Party support link
[System] com.trusteer.rooks.rooksd.plist 3rd-Party support link
[System] org.macosforge.xquartz.privileged_startx.plist 3rd-Party support link
Launch Agents:
[System] com.conduit.loader.agent.plist 3rd-Party support link
[System] com.google.keystone.agent.plist 3rd-Party support link
[System] com.kodak.BonjourAgent.plist 3rd-Party support link
[System] com.logmein.logmeingui.plist 3rd-Party support link
[System] com.logmein.logmeinguiagent.plist 3rd-Party support link
[System] com.logmein.logmeinguiagentatlogin.plist 3rd-Party support link
[System] com.maintain.CocktailSystemEvents.plist 3rd-Party support link
[System] com.trusteer.rapport.rapportd.plist 3rd-Party support link
[System] net.culater.SIMBL.Agent.plist 3rd-Party support link
[System] org.macosforge.xquartz.startx.plist 3rd-Party support link
User Launch Agents:
[not loaded] com.kodak.KODAK AiO Firmware Updater.plist 3rd-Party support link
[not loaded] com.kodak.KODAK AiO Software Updater.plist 3rd-Party support link
[not loaded] com.macpaw.CleanMyMac2Helper.scheduledScan.plist 3rd-Party support link
[not loaded] com.macpaw.CleanMyMac2Helper.trashWatcher.plist 3rd-Party support link
User Login Items:
SimpleFloatingClock
BirdClock
SimpleFloatingClock
Internet Plug-ins:
o1dbrowserplugin: Version: 5.1.4.17398 3rd-Party support link
LogMeInSafari64: Version: 1.0.530 3rd-Party support link
Google Earth Web Plug-in: Version: 6.1 3rd-Party support link
Default Browser: Version: 537 - SDK 10.9
Flip4Mac WMV Plugin: Version: 2.3.8.1 3rd-Party support link
Silverlight: Version: 5.1.10411.0 - SDK 10.6 3rd-Party support link
FlashPlayer-10.6: Version: 12.0.0.44 - SDK 10.6 3rd-Party support link
LogMeIn: Version: 1.0.530 3rd-Party support link
Flash Player: Version: 12.0.0.44 - SDK 10.6 3rd-Party support link
LogMeInSafari32: Version: 1.0.530 3rd-Party support link
googletalkbrowserplugin: Version: 5.1.4.17398 3rd-Party support link
iPhotoPhotocast: Version: 7.0 - SDK 10.8
GarminGpsControl: Version: 4.1.0.0 Release - SDK 10.7 3rd-Party support link
npgtpo3dautoplugin: Version: 0.1.44.29 - SDK 10.5 3rd-Party support link
QuickTime Plugin: Version: 7.7.3
JavaAppletPlugin: Version: 14.8.0 - SDK 10.9 Outdated! Update
Audio Plug-ins:
BluetoothAudioPlugIn: Version: 1.0 - SDK 10.9
AirPlay: Version: 1.9 - SDK 10.9
AppleAVBAudio: Version: 2.0.0 - SDK 10.9
iSightAudio: Version: 7.7.3 - SDK 10.9
User Internet Plug-ins:
Picasa: Version: 1.0 3rd-Party support link
3rd Party Preference Panes:
Flash Player 3rd-Party support link
MagicPrefs 3rd-Party support link
Trusteer Endpoint Protection 3rd-Party support link
Bad Fonts:
None
Old Applications:
iSkysoft Helper Compact: Version: 2.2.6.4 - SDK 10.5 3rd-Party support link
/Users/[redacted]/Library/Application Support/Helper/iSkysoft Helper Compact.app
/Applications/Google SketchUp 8
SketchUp: Version: 8.0 - SDK 10.5 3rd-Party support link
LayOut: Version: 3.0 - SDK 10.5 3rd-Party support link
Style_Builder: Version: 2.0 - SDK 10.5 3rd-Party support link
SLLauncher: Version: 1.0 - SDK 10.5 3rd-Party support link
/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app
/Library/Printers/Kodak/AiO_Printers
KODAK AiO Home Center: Version: 7.7.3 - SDK 10.5 3rd-Party support link
Registration: Version: 7.7.3 - SDK 10.5 3rd-Party support link
KODAK AiO Scan: Version: 7.7.3 - SDK 10.5 3rd-Party support link
KODAK AiO Software Updater: Version: 7.7 - SDK 10.5 3rd-Party support link
KODAK AiO Uninstall: Version: 7.7.3 - SDK 10.5 3rd-Party support link
AiOFirmwareUpdater: Version: 7.7 - SDK 10.5 3rd-Party support link
Time Machine:
Time Machine not configured!
Top Processes by CPU:
1% WindowServer
1% mds_stores
1% EtreCheck
0% LogMeInGUI
0% mds
Top Processes by Memory:
373 MB Finder
160 MB com.apple.WebKit.WebContent
135 MB mds_stores
123 MB com.apple.IconServicesAgent
98 MB rapportd
Virtual Memory Information:
1.61 GB Free RAM
1.62 GB Active RAM
189 MB Inactive RAM
593 MB Wired RAM
617 MB Page-ins
0 B Page-outs
-
Feb 14, 2014 10:21 PMby Toyworks11,I just spent an hour on the Rapport site. I don'tknow how my bank got that installed on my Mac, but they should be in prison for that. I'll never trust them again. I hope I got the Rapport folders off my Mac.
How can I check that the folders are gone? Where would they be, not in Utilities because I looked
-
Feb 14, 2014 11:09 PMby Toyworks11,I just did a search to uninstall Conduit. It sounds like Conduit is just for Chrome. Am I right? Here's what I found when I searched the uninstall. Does this make any sense to anyone? I use the Safari Browser, so do you think I should still try to uninstall Conduit? My Mac is very quiet right now afer dumping Rapport I hope I got rid of all of it.
I want to thank you guys on here that have been such a great help to me. I have been having this problem for some time, and it got much worse when I switched to Mavericks.
http://www.conduit.com/aboutus/contactus
And as Columbo says "Oh, and just one more thing."
Can anyone give me good advice on the best protection software for my Mac? And please don't anyone suggest Cream My Mac.
-
Feb 15, 2014 5:57 AMby John Galt,Toyworks11 I wish to reiterate to you and anyone else reading this Discussion that following MacPaw's instructions to uninstall it does not work:
"Another way to remove CleanMyMac 2 is by simply dragging it to the Trash. However, by doing this, as with removing any other app, it will leave application leftovers on your Mac. It is recommended to use the Uninstaller module of CleanMyMac 2 for complete removal."
This is, unfortunately and not surprisingly, simply B.S. That characterization is also disturbingly common for garbage software peddlers regarding their uninstallers and / or usage instructions.
The following files are CreamMyMac "leftovers" (their terminology, not mine) that remained on my Mac after uninstalling it according to MacPaw's worthless instructions and rebooting:
~/Library/Preferences/com.macpaw.CleanMyMac2Helper.diskSpaceWatcher.plist
~/Library/Application Support/CleanMyMac 2/CleanMyMac 2 Helper.app
/private/var/run/com.macpaw.CleanMyMac2.Agent.socket
app.com.macpaw.CleanMyMac2.playlist
com.plausiblelabs.crashreporter.data
The User Launch Agent and socket remained even after reinstalling OS X, so that commonly recommended action also will not help.
I regret that I did not record the location of the last two files. If and when I find some more time I'll install CMM again and take more copious notes. There may also be other "leftovers" that I did not find, and whose effects are unknown. Why did MacPaw leave them present, what do they do, and why are they so hard to find? I have no answers to those questions. Therefore, I wish to emphasize, in an abundance of caution, that any Mac that has ever been affected by CleanMyMac at any time be completely erased and reconfigured from the ground up.
This recommendation holds true for any garbage "cleaning", "optimizing", "security" or similarly categorized filth, and is not limited at all to CleanMyMac. There are many other garbage utilities that are just as bad or worse. They are not viruses and they are not malware. They are simply scam products designed to take your money, and they do that with remarkable effectiveness. Similar products exist on every platform including iOS. There is no non-Apple "protection" product in the world that can protect you from willfully installing them.
I do not make any recommendations for actions that I have not personally verified on my own Macs, and an "erase and reinstall" is in fact what I do to ensure complete eradication from the systems I use to test the effects of it, and junk like it. When you reinstall your essential software, files, documents, and other work products, don't reinstall the junk.
-
Feb 16, 2014 1:56 AMby Toyworks11,John, I am convinced you are right. Now I have noticed since installing mavericks that when I do a shift/command/4 screen shot, the shot takes up to 40 seconds to land on the desk top.....crazy.
I have been fighting this problem for some time now, and I just want it to end. Can you advise me of how to do a wipe and re-install? i have the 2 discs that came with my system.
-
Feb 16, 2014 5:44 AMby John Galt,There are a few ways of accomplishing that but I recommend the following procedure since it will not erase anything until the last steps, and will leave you no worse off than you are now.
- Obtain an external hard disk drive of sufficient capacity. External 1 TB USB hard disks are commonly available for considerably less than $100. Even Wal-Mart has one for $70. If you contemplate using Time Machine in the future (which you should), given your present system consider getting at least a 2 TB hard disk drive.
- Connect the drive to your Mac. Using Disk Utility, erase it. Choose "Mac OS Extended (Journaled)" as its format, which is the default choice. Erasing will take only a moment or two.
- When Disk Utility finishes, boot OS X Recovery by holding ⌘ and r (two fingers) while you start your Mac.
- At the Mac OS X Utilities screen, select "Reinstall Mac OS X". When you choose the destination volume, use caution to select the external one. The correct icon is orange and bears the USB logo.
- You will need to sign in with the Apple ID and password you used to install Mavericks.
- It will take some time to download additional components from Apple's servers, an hour or more, depending on the speed of your Internet connection.
- When it finishes, your Mac will automatically restart and begin installing Mavericks on the external volume. That will take another hour or so.
- Then, you will be presented with a series of questions - which language to use and how your Mac connects to the Internet. They should be self-explanatory.
- Then, you will be presented with the opportunity to transfer information. At that screen, select "From a Mac, Time Machine backup, or startup disk".
- On the next screen, select your iMac's internal disk. It will be the silver icon resembling an internal hard disk drive.
- The next screen will ask what you want to transfer. In it, select only your User account, and any additional accounts if you have more than one. De-select all other checkboxes.
- It will take some time to transfer your account, a few hours given your present usage. The progress bar and time remaining estimates can be wildly inaccurate.
- After it finishes, you will be asked to "Register Your Mac". Assuming you did that already, select "Don't Register" and acknowledge with the Skip button.
- Click the arrow to "Start using your Mac" and log in with your usual password.
- At the Apple ID Password screen, I suggest you select "Set Up Later" and acknowledge with "Don't Use".
- Depending on the iCloud services you have been using you will be asked for your iCloud password again. Provide it each time it's needed.
After that you will have a usable but minimally configured installation, and can choose to start your Mac from it or as it is at present. To choose one or the other, use Startup Manager - hold an option key while you start your Mac. Provided no hardware problems exist, your Mac should run like blazes when started from the USB volume. If the same problems exist though, it's very likely to be a hardware problem that only an Apple Store can fix.
Use the Mac for a little while and satisfy yourself that it is running as it should. Install all Apple updates from the App Store. Install your printers and make sure they work. Install LogMeIn if you require it, and verify it works as expected. Make sure your photos, videos, music, and other documents are all intact. Only after using it and determining your Mac is operating normally, install your essential software which excludes Trusteer, CleanMy***, Conduit, and other such junk. When you do that, install new copies from their original sources - CD / DVD, or Mac App Store, or downloaded from their respective developer's authorized sources. When and if asked for a location on which to install the software, use caution to specify the external disk. I suggest you "eject" the internal one to avoid confusion. If you choose to do so, that action will be required each time you restart your Mac.
Continue to use your Mac in that manner, hours or days if necessary, until you are completely satisfied everything works to your liking. A Mac started from an external USB device won't start up as fast as it does while using its internal drive, but once you log in its performance should not be objectionably slow.
Then, when you are finally ready, "clone" the external drive onto the internal one. For that, I recommend Carbon Copy Cloner. It's $40 and worth it. There are other, similar utilities but I have not used anything else recently. You can also use Disk Utility to do the same thing but CCC is easier. Carbon Copy Cloner will create an exact, bootable copy of your external volume and place it on your iMac's internal volume, after which you can disconnect your USB drive and put it away. If something unexpected should occur, boot from your external drive again and figure out what's wrong.
Only after you are satisfied the iMac is working to your liking, re-purpose the external drive for Time Machine backups so you'll never have to face this situation again.
-
Feb 20, 2014 5:33 PMby Toyworks11,It seems like when I open my Mac mail, it starts in hammering my Hard drive. When I shut it off it stops. What could be causing that? This is killing me.
Hardware Information:
iMac (27-inch, Mid 2010)
iMac - model: iMac11,3
1 3.2 GHz Intel Core i3 CPU: 2 cores
4 GB RAM
Video Information:
ATI Radeon HD 5670 - VRAM: 512 MB
System Software:
OS X 10.9.1 (13B42) - Uptime: 1 day 3:27:8
Disk Information:
ST31000528AS disk0 : (1 TB)
EFI (disk0s1) <not mounted>: 209.7 MB
Macintosh HD (disk0s2) / [Startup]: 999.35 GB (276.66 GB free)
Recovery HD (disk0s3) <not mounted>: 650 MB
OPTIARC DVD RW AD-5680H
USB Information:
Eastman Kodak Company KODAK ESP 5200 Series AiO
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Internal Memory Card Reader
Apple Computer, Inc. IR Receiver
Apple Inc. Built-in iSight
FireWire Information:
Thunderbolt Information:
Kernel Extensions:
com.squirrels.driver.AirParrotSpeakers (1.7 - SDK 10.7)
com.squirrels.airparrot.framebuffer (3 - SDK 10.7)
com.logmein.driver.LogMeInSoundDriver (1.0.0)
Startup Items:
NoteburnerService: Path: /System/Library/StartupItems/NoteburnerService
Launch Daemons:
[System] com.adobe.fpsaud.plist 3rd-Party support link
[System] com.google.keystone.daemon.plist 3rd-Party support link
[System] com.logmein.logmeinserver.plist 3rd-Party support link
[System] com.logmein.raupdate.plist 3rd-Party support link
[System] org.macosforge.xquartz.privileged_startx.plist 3rd-Party support link
Launch Agents:
[System] com.conduit.loader.agent.plist 3rd-Party support link
[System] com.google.keystone.agent.plist 3rd-Party support link
[System] com.kodak.BonjourAgent.plist 3rd-Party support link
[System] com.logmein.logmeingui.plist 3rd-Party support link
[System] com.logmein.logmeinguiagent.plist 3rd-Party support link
[System] com.logmein.logmeinguiagentatlogin.plist 3rd-Party support link
[System] com.maintain.CocktailSystemEvents.plist 3rd-Party support link
[System] net.culater.SIMBL.Agent.plist 3rd-Party support link
[System] org.macosforge.xquartz.startx.plist 3rd-Party support link
User Launch Agents:
[not loaded] com.kodak.KODAK AiO Firmware Updater.plist 3rd-Party support link
[not loaded] com.kodak.KODAK AiO Software Updater.plist 3rd-Party support link
[not loaded] com.macpaw.CleanMyMac2Helper.scheduledScan.plist 3rd-Party support link
[not loaded] com.macpaw.CleanMyMac2Helper.trashWatcher.plist 3rd-Party support link
User Login Items:
SimpleFloatingClock
BirdClock
SimpleFloatingClock
Google Chrome
Internet Plug-ins:
o1dbrowserplugin: Version: 5.1.4.17398 3rd-Party support link
LogMeInSafari64: Version: 1.0.530 3rd-Party support link
Google Earth Web Plug-in: Version: 6.1 3rd-Party support link
Default Browser: Version: 537 - SDK 10.9
Flip4Mac WMV Plugin: Version: 2.3.8.1 3rd-Party support link
Silverlight: Version: 5.1.10411.0 - SDK 10.6 3rd-Party support link
FlashPlayer-10.6: Version: 12.0.0.70 - SDK 10.6 3rd-Party support link
LogMeIn: Version: 1.0.530 3rd-Party support link
Flash Player: Version: 12.0.0.70 - SDK 10.6 3rd-Party support link
LogMeInSafari32: Version: 1.0.530 3rd-Party support link
googletalkbrowserplugin: Version: 5.1.4.17398 3rd-Party support link
iPhotoPhotocast: Version: 7.0 - SDK 10.8
GarminGpsControl: Version: 4.1.0.0 Release - SDK 10.7 3rd-Party support link
npgtpo3dautoplugin: Version: 0.1.44.29 - SDK 10.5 3rd-Party support link
QuickTime Plugin: Version: 7.7.3
JavaAppletPlugin: Version: 14.8.0 - SDK 10.9 Outdated! Update
Safari Extensions:
iMedia Converter Deluxe : Version: 3.5.0
Audio Plug-ins:
BluetoothAudioPlugIn: Version: 1.0 - SDK 10.9
AirPlay: Version: 1.9 - SDK 10.9
AppleAVBAudio: Version: 2.0.0 - SDK 10.9
iSightAudio: Version: 7.7.3 - SDK 10.9
iTunes Plug-ins:
Quartz Composer Visualizer: Version: 1.4 - SDK 10.9
User Internet Plug-ins:
Picasa: Version: 1.0 3rd-Party support link
3rd Party Preference Panes:
Flash Player 3rd-Party support link
MagicPrefs 3rd-Party support link
Old Applications:
iSkysoft Helper Compact: Version: 2.2.6.4 - SDK 10.5 3rd-Party support link
/Users/[redacted]/Library/Application Support/Helper/iSkysoft Helper Compact.app
/Applications/Google SketchUp 8
SketchUp: Version: 8.0 - SDK 10.5 3rd-Party support link
LayOut: Version: 3.0 - SDK 10.5 3rd-Party support link
Style_Builder: Version: 2.0 - SDK 10.5 3rd-Party support link
SLLauncher: Version: 1.0 - SDK 10.5 3rd-Party support link
/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app
/Library/Printers/Kodak/AiO_Printers
KODAK AiO Home Center: Version: 7.7.3 - SDK 10.5 3rd-Party support link
Registration: Version: 7.7.3 - SDK 10.5 3rd-Party support link
KODAK AiO Scan: Version: 7.7.3 - SDK 10.5 3rd-Party support link
KODAK AiO Software Updater: Version: 7.7 - SDK 10.5 3rd-Party support link
KODAK AiO Uninstall: Version: 7.7.3 - SDK 10.5 3rd-Party support link
AiOFirmwareUpdater: Version: 7.7 - SDK 10.5 3rd-Party support link
Time Machine:
Time Machine not configured!
Top Processes by CPU:
3% mds_stores
2% Mail
2% WindowServer
1% mds
1% EtreCheck
Top Processes by Memory:
193 MB mds_stores
115 MB softwareupdated
82 MB Mail
66 MB WindowServer
61 MB Safari
Virtual Memory Information:
1.58 GB Free RAM
974 MB Active RAM
799 MB Inactive RAM
612 MB Wired RAM
1.29 GB Page-ins
35 MB Page-outs
