Slowing down...(includes etrecheck)

Question

Level 1

0 points

Slowing down...(includes etrecheck)

I just discovered World of Warcraft, and I want to play it on my Macbook Pro, but I'm afraid I'm going to have to upgrade to something else. My mac is about 4 years old, and this last year (and especially after Mavericks!), everything has slowed down. Apps are slow to open, sometimes they just spin and spin when working, and I'm getting frustrated. I *think* I keep everything updated and cleaned up, but maybe I'm missing something. Any advice?

Hardware Information:

MacBook Pro (15-inch, Mid 2010)

MacBook Pro - model: MacBookPro6,2

1 2.4 GHz Intel Core i5 CPU: 2 cores

4 GB RAM

Video Information:

Intel HD Graphics - VRAM: 288 MB

NVIDIA GeForce GT 330M - VRAM: 256 MB

System Software:

OS X 10.9.2 (13C64) - Uptime: 3 days 7:50:21

Disk Information:

Hitachi HTS545032B9SA02 disk0 : (320.07 GB)

EFI (disk0s1) <not mounted>: 209.7 MB

Macintosh HD (disk0s2) / [Startup]: 319.21 GB (67.69 GB free)

Recovery HD (disk0s3) <not mounted>: 650 MB

MATSHITADVD-R UJ-898

USB Information:

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Internal Memory Card Reader

Apple Inc. BRCM2070 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Computer, Inc. IR Receiver

Apple Inc. Built-in iSight

FireWire Information:

Thunderbolt Information:

Configuration files:

/etc/sysctl.conf - Exists

Kernel Extensions:

com.eset.kext.esets_kac (4.1.86)

Startup Items:

MissingSyncMounting: Path: /Library/StartupItems/MissingSyncMounting

Privoxy: Path: /Library/StartupItems/Privoxy

Tor: Path: /Library/StartupItems/Tor

Launch Daemons:

[System] com.adobe.fpsaud.plist 3rd-Party support link

[System] com.backblaze.bzserv.plist 3rd-Party support link

[System] com.cisco.anyconnect.vpnagentd.plist 3rd-Party support link

[System] com.eset.esets_daemon.plist 3rd-Party support link

[System] com.google.GoogleML.plist 3rd-Party support link

[System] com.google.keystone.daemon.plist 3rd-Party support link

[System] com.insynchq.insync.daemon.plist 3rd-Party support link

[System] com.microsoft.office.licensing.helper.plist 3rd-Party support link

[System] com.oracle.java.Helper-Tool.plist 3rd-Party support link

[System] com.oracle.java.JavaUpdateHelper.plist 3rd-Party support link

[System] com.sierrawireless.SWoCTool.plist 3rd-Party support link

[System] com.smithmicro.schedulerdaemon.plist 3rd-Party support link

Launch Agents:

[System] com.cisco.anyconnect.gui.plist 3rd-Party support link

[System] com.epson.eventmanager.agent.plist 3rd-Party support link

[System] com.google.keystone.agent.plist 3rd-Party support link

[System] com.oracle.java.Java-Updater.plist 3rd-Party support link

User Launch Agents:

[not loaded] com.adobe.ARM.[...].plist 3rd-Party support link

[not loaded] com.backblaze.bzbmenu.plist 3rd-Party support link

[not loaded] com.facebook.videochat.[redacted].plist 3rd-Party support link

[not loaded] com.google.GoogleContactSyncAgent.plist 3rd-Party support link

[not loaded] com.iLike.Agent.plist 3rd-Party support link

[not loaded] com.smithmicro.cleaning.schedulermailer.plist 3rd-Party support link

User Login Items:

Google Drive

Dropbox

EvernoteHelper

ESET Cybersecurity

Internet Plug-ins:

Gears: Version: 1.0 3rd-Party support link

Flash Player: Version: 12.0.0.70 - SDK 10.6 3rd-Party support link

AdobePDFViewer: Version: 9.5.5 3rd-Party support link

Photo Center Plugin: Version: Upload Plugin 1.0.0.4 3rd-Party support link

googletalkbrowserplugin: Version: 5.1.4.17398 3rd-Party support link

iPhotoPhotocast: Version: 7.0 - SDK 10.8

RealPlayer Plugin: Version: (null) 3rd-Party support link

DirectorShockwave: Version: 11.5.6r606 3rd-Party support link

QuickTime Plugin: Version: 7.7.3

FlashPlayer-10.6: Version: 12.0.0.70 - SDK 10.6 3rd-Party support link

AmazonMP3DownloaderPlugin1017277: Version: AmazonMP3DownloaderPlugin 1.0.17 3rd-Party support link

npgtpo3dautoplugin: Version: 0.1.44.29 - SDK 10.5 3rd-Party support link

CouponPrinter-FireFox_v2: Version: Version 1.1.7 - SDK 10.5 3rd-Party support link

Silverlight: Version: 5.1.20913.0 - SDK 10.6 3rd-Party support link

Google Earth Web Plug-in: Version: 6.0 3rd-Party support link

SharePointBrowserPlugin: Version: 14.3.9 - SDK 10.6 3rd-Party support link

Default Browser: Version: 537 - SDK 10.9

o1dbrowserplugin: Version: 5.1.4.17398 3rd-Party support link

Flip4Mac WMV Plugin: Version: 2.3.8.1 3rd-Party support link

JavaAppletPlugin: Version: Java 7 Update 51 3rd-Party support link

OfficeLiveBrowserPlugin: Version: 12.3.6 3rd-Party support link

Safari Extensions:

GMail Counter: Version: 0.9.3

GmailThis: Version: 2.0

Pinterest: Version: 1.0

Print Plus: Version: 1.0.2.0

Add To Amazon Wish List: Version: 1.8

Push to Kindle: Version: 1.0

markerto: Version: 1.0

Audio Plug-ins:

BluetoothAudioPlugIn: Version: 1.0 - SDK 10.9

AirPlay: Version: 2.0 - SDK 10.9

AppleAVBAudio: Version: 203.2 - SDK 10.9

iSightAudio: Version: 7.7.3 - SDK 10.9

iTunes Plug-ins:

Quartz Composer Visualizer: Version: 1.4 - SDK 10.9

MissingSyncPalmiTunesPlugin: Version: 5.1.2 3rd-Party support link

User iTunes Plug-ins:

iLike: Version: 1.0 3rd-Party support link

PPC Bundle: Version: (null) 3rd-Party support link

iLike Bundle: Version: (null) 3rd-Party support link

Tiger Bundle: Version: (null) 3rd-Party support link

User Internet Plug-ins:

fbplugin_1_0_3: Version: (null) 3rd-Party support link

Move-Media-Player: Version: npmnqmp 071101000050 3rd-Party support link

BrowserPlus_2.9.8: Version: 2.9.8 3rd-Party support link

fbplugin_1_0_1: Version: (null) 3rd-Party support link

npBcsMcTcIO: Version: (null) 3rd-Party support link

Picasa: Version: 1.0 3rd-Party support link

3rd Party Preference Panes:

Backblaze Backup 3rd-Party support link

BrowserPlus 3rd-Party support link

Flash Player 3rd-Party support link

FlexCal 3rd-Party support link

Flip4Mac WMV 3rd-Party support link

Java 3rd-Party support link

Perian 3rd-Party support link

Old Applications:

/Library/Application Support/Microsoft/MERP2.0

Microsoft Error Reporting: Version: 2.2.9 - SDK 10.4 3rd-Party support link

Microsoft Ship Asserts: Version: 1.1.4 - SDK 10.4 3rd-Party support link

Solver: Version: 1.0 - SDK 10.5 3rd-Party support link

/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

SLLauncher: Version: 1.0 - SDK 10.5 3rd-Party support link

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

/Applications/Microsoft Office 2011/Office

Open XML for Excel: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Office Setup Assistant: Version: 14.2.0 - SDK 10.5 3rd-Party support link

Microsoft Alerts Daemon: Version: 14.3.9 - SDK 10.5 3rd-Party support link

SyncServicesAgent: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Database Daemon: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Graph: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Database Utility: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Office Reminders: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Upload Center: Version: 14.3.9 - SDK 10.5 3rd-Party support link

My Day: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Chart Converter: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Clip Gallery: Version: 14.3.9 - SDK 10.5 3rd-Party support link

/Library/Printers/EPSON/InkjetPrinter2/Utility/UT4

Epson Printer Utility 4: Version: 9.17 - SDK 10.5 3rd-Party support link

EpsonSuppliesTool4: Version: 8.75 - SDK 10.5 3rd-Party support link

/Applications/Microsoft Office 2011

Microsoft PowerPoint: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Excel: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Outlook: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Word: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Document Connection: Version: 14.3.9 - SDK 10.5 3rd-Party support link

Microsoft Language Register: Version: 14.3.9 - SDK 10.5 3rd-Party support link

/Applications/Microsoft Office 2011/Additional Tools/Microsoft Language Register/Microsoft Language Register.app

Microsoft AutoUpdate: Version: 2.3.6 - SDK 10.4 3rd-Party support link

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

/Applications/iWork '09

TurboTax Deluxe 2011-Intel: Version: 2011.r17.007 - SDK 10.4 3rd-Party support link

TurboTax Deluxe 2011: Version: 2011.r17.007 - SDK 10.4 3rd-Party support link

Spotify: Version: 0.8.8.347.gbcec6996 - SDK 10.5 3rd-Party support link

Time Machine:

Skip System Files: NO

Auto backup: NO - Auto backup turned off

Time Machine not configured!

Top Processes by CPU:

3% postbox-bin

3% WindowServer

1% EtreCheck

0% ps

0% EEventManager

Top Processes by Memory:

463 MB postbox-bin

414 MB firefox

119 MB Finder

74 MB mds_stores

53 MB WindowServer

Virtual Memory Information:

159 MB Free RAM

975 MB Active RAM

759 MB Inactive RAM

904 MB Wired RAM

12.89 GB Page-ins

13.75 GB Page-outs

MacBook Pro, OS X Mavericks (10.9.2)

Posted on Mar 10, 2014 8:26 PM

Reply

Answer 1

Best reply

Kappy

Level 10

361,741 points

Mar 10, 2014 8:32 PM in response to iwantsimple

You don't have enought RAM installed. You need a lot more than you now have. Your computer is slow because of all the third-party junk you have installed to the point where OS X is forced to use disk-based VM in place of real RAM causing a major logjam.

Judging by what i see you need to have about 8 GBs of memory installed. Right now you aren't even close to that.

Reply

Answer 2

MichelPM

Level 10

80,958 points

Mar 10, 2014 8:45 PM in response to iwantsimple

You have serious memory Page out issues.

Your year and model MBP can take a total of 8 GBs of RAM.

I, strongly, recommend purchasing and installing the total 8 GBs of RAM.

Correct and reliable Mac RAM can be purchased from online Mac RAM sources Crucial memory or OWC (macsales.com).

Other thing to do immediately is completely uninstall all Google apps per the instructions on Google's website.

Currenlty, both Google Drive and Chrome aren't playing well with OS X Mavericks.

Google still hasn't announced "official" fixes for these, yet.

I see some sort of SmithMicro cleaning app.

Completely uninstall this per the instructions on the developer's website OR look for another uninstall solution that might be better by doing a web search for a proper and clean uninstall.

"Cleaning" apps like this SmithMicro app, MacKeeper or any other maintenance apps like CleanMyMac 1 or 2, TuneUpMyMac or anything like these apps, are commercially advertised malware, at best and potential detrimental software, at the very worst!

These malware apps are,usually, downloaded and used by unknowing Mac users who are not very computer or Mac savvy.

These types of apps, while they appear to be helpful, can do too good a job of data "cleanup" causing the potential to do serious data corruption or data deletion and render a perfectly running OS completely dead and useless leaving you with a frozen, non-functional Mac.

Plus, these type of apps aren't really necessary. They really aren't.

There are manual methods to clear off unnecessary data off of your Mac that are safer and you have complete control over your Mac and not just leave a piece of auto cleaning software in charge of clearing off data off of your Mac.

These apps potential of causing OS X issues outweighs the implied good and benefits these types of hard drive or memory "cleaning" apps are written to do.

Plus, the software company's that write these apps make it hard to easily uninstall these apps if something DOES go wrong and these apps work in a way where you have no recovery or revert function to return your Mac back to its former, working state in the event something does go wrong.

It is best to never, EVER download and install these types of apps.

The risk to your system and data is too great a risk!

You may need to update all of your third party software if there are OS X Mavericks updates that can be applied. You may need to, ACTUALLY, go the third party developers' websites if there are no updates through the Mac App Store.

Update all of your Web browser Internet plugins and extensions, also.

Also, if you have any connected third party devices, like keyboards, mice/trackpads, drawing tablets, hubs, card readers, audio/video interfaces, etc, you need to update the drivers for these devices by going to the device maker's website to find OS X Mavericks compatible versions, if needed, available and/or applicable.

Good Luck!

Reply

Answer 3

Linc Davis

Level 10

209,541 points

Mar 10, 2014 9:02 PM in response to iwantsimple

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. All it does is to collect information about the state of the computer. That information goes nowhere unless you choose to share it. However, you should be cautious about running any kind of program (not just a shell script) at the request of a stranger on a public message board. If you have doubts, search this site for other discussions in which this procedure has been followed without any report of ill effects. If you can't satisfy yourself that the instructions are safe, don't follow them. Ask for other options.

Here's a summary of what you need to do, if you choose to proceed: Copy a line of text from this web page into the window of another application. Wait for the script to run. It usually takes a few minutes. Then paste the results, which will have been copied automatically, back into a reply on this page. The sequence is: copy, paste, wait, paste again. Details follow.

4. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

5. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

6. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin; clear; Fb='%s\n\t(%s)\n'; Fm='\n%s\n\n%s\n'; Fr='\nRAM details\n%s\n'; Fs='\n%s: %s\n'; Fu='user %s%%, system %s%%'; AC="com.autodesk.AutoCAD com.google.GoogleDrive"; H='^[[:space:]]*((127\.0\.0\.1|::1|fe80::1%lo0)[[:space:]]+local|(255\.){3}255[[:space:]]*broadcast)host[[:space:]]*$'; NS=networksetup; PB="/usr/libexec/PlistBuddy -c Print"; A () { [[ a -eq 0 ]]; }; M () { find -L "$d" -type f | while read f; do file -b "$f" | egrep -lq XML\|exec && echo $f; done; }; AT () { o=`file -b "$1" | egrep -v '^(A.{16}t$|cann)'`; Ps "${1##*/} format"; }; Pc () { o=`grep -v '^ *#' "$2"`; l=`wc -l <<< "$o"`; [[ l -gt 25 ]] && o=`head -n25 <<< "$o"`$'\n'"[$((l-25)) more line(s)]"; Pm "$1"; AT "$1"; }; Pm () { [[ "$o" ]] && o=`sed -E '/^ *$/d; s/^ */ /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/' <<< "$o"` && printf "$Fm" "$1" "$o"; }; Pp () { o=`$PB "$2" | awk -F'= ' \/$3'/{print $2}'`; Pm "$1"; }; Ps () { o=`echo $o`; [[ ! "$o" =~ ^0?$ ]] && printf "$Fs" "$1" "$o"; }; R () { o=; [[ r -eq 0 ]]; }; SP () { system_profiler SP${1}DataType; }; id -G | grep -qw 80; a=$?; A && sudo true; r=$?; t=`date +%s`; clear; { A || echo $'No admin access\n'; A && ! R && echo $'No root access\n'; SP Software | sed -n 's/^ *//;5p;6p;8p'; h=(`SP Hardware | awk '/ Id/{print $3}; /Mem/{print $2}'`); o=$h; Ps "Model"; o=$((h[1]<4?h[1]:0)); Ps "Total RAM (GB)"; o=`SP Memory | sed '1,5d;/[my].*:/d'`; [[ "$o" =~ s:\ [^O]|x([^08]|0[^2]|8[^0]) ]] && printf "$Fr" "$o"; o=`SP Diagnostics | sed '5,6!d'`; [[ "$o" =~ Pass ]] || Pm "POST"; p=`SP Power`; o=`awk '/Cy/{print $NF}' <<< "$p"`; o=$((o>=300?o:0)); Ps "Battery cycles"; o=`sed -n '/Cond.*: [^N]/{s/^.*://p;}' <<< "$p"`; Ps "Battery condition"; for b in Thunderbolt USB; do o=`SP $b | sed -En '1d;/:$/{s/ *:$//;x;s/\n//p;};/^ *V.* [0N].* /{s/ 0x.... //;s/[()]//g;s/(.*: )(.*)/ $\2$/;H;};/Apple|Genesy|Intel|SMSC/{s/.//g;h;}'`; Pm $b; done; o=`pmset -g therm | sed 's/^.*C/C/'`; [[ "$o" =~ No\ th|pms ]] && o=; Pm "Thermal conditions"; o=`pmset -g sysload | grep -v :`; [[ "$o" =~ =\ [^GO] ]] || o=; Pm "System load advisory"; o=`nvram boot-args | awk '{$1=""; print}'`; Ps "boot-args"; a=(/ ""); A=(System User); for i in 0 1; do o=`cd ${a[$i]}L*/Lo*/Diag* || continue; for f in *.{cr,h,pa,s}*; do [[ -f "$f" ]] || continue; d=$(stat -f%Sc -t%F "$f"); [[ "$f" =~ h$ ]] && grep -lq "^Thread c" "$f" && f="$f *"; echo "$d ${f%%_2*} ${f##*.}"; done | sort | tail`; Pm "${A[$i]} diagnostics"; done; grep -lq '*$' <<< "$o" && printf $'\n* Code injection\n'; o=`syslog -F bsd -k Sender kernel -k Message CReq 'caug|GPU |hfs: Ru|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|timed? ?o|WARN' | tail -n50 | awk '/:/{$4=""; $5=""};1'`; Pm "Kernel messages"; o=`df -m / | awk 'NR==2 {print $4}'`; o=$((o<5120?o:0)); Ps "Free space (MiB)"; o=$(($(vm_stat | awk '/eo/{sub("\\.",""); print $2}')/256)); o=$((o>=1024?o:0)); Ps "Pageouts (MiB)"; s=( `sar -u 1 10 | sed '$!d'` ); [[ s[4] -lt 85 ]] && o=`printf "$Fu" ${s[1]} ${s[3]}` || o=; Ps "Total CPU usage" && { s=(`ps acrx -o comm,ruid,%cpu | sed '2!d'`); n=$((${#s[*]}-1)); c="${s[*]}"; o=${s[$n]}%; Ps "CPU usage by process \"${c% ${s[$((n-1))]}*}\" with UID ${s[$((n-1))]}"; }; s=(`top -R -l1 -n1 -o prt -stats command,uid,prt | sed '$!d'`); n=$((${#s[*]}-1)); s[$n]=${s[$n]%[+-]}; c="${s[*]}"; o=$((s[$n]>=25000?s[$n]:0)); Ps "Mach ports used by process \"${c% ${s[$((n-1))]}*}\" with UID ${s[$((n-1))]}"; o=`kextstat -kl | grep -v com\\.apple | cut -c53- | cut -d\< -f1`; Pm "Loaded extrinsic kernel extensions"; R && o=`sudo launchctl list | awk 'NR>1 && !/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|calendarse|cups|dove|isc|ntp|openld|post[fg]|x)/{print $3}'`; Pm "Extrinsic daemons"; o=`launchctl list | awk 'NR>1 && !/0x|com\.apple|org\.(x|openbsd)|\.[0-9]+$/{print $3}'`; Pm "Extrinsic agents"; o=`for d in {/,}L*/Lau*; do M; done | egrep -v 'com\.apple\.(CSConfig|server)' | while read f; do ID=$($PB\ :Label "$f") || ID="No job label"; printf "$Fb" "$f" "$ID"; done`; Pm "launchd items"; o=`for d in /{S*/,}L*/StartupItems; do M; done`; Pm "Startup items"; sys=`pkgutil --regexp --only-files --files com.apple.pkg.* | sort | uniq | sed 's:^:/:'`; b=`sed -E '/^.+Lib.+\/Contents\/Info.plist$/!d;s/\/Info.plist$//;/Contents\/./d' <<< "$sys"`; l=`egrep '^/usr/lib/.+dylib$' <<< "$sys"`; [[ "$b" && "$l" ]] && { o=`find -L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Compon,Ex,In,iTu,Keyb,Mail/B,P*P,Qu*T,Scripti,Sec,Servi,Spo}* -type d -name Contents -prune | grep -Fv "$b" | while read d; do test -f "$d/Info.plist" || continue; ID=$($PB\ :CFBundleIdentifier "$_") || ID="No bundle ID"; printf "$Fb" "${d%/Contents}" "$ID"; done`; Pm "Extrinsic loadable bundles"; o=`find /usr/lib -type f -name *.dylib | grep -Fv "$l"`; Pm "Extrinsic shared libraries"; :; } || echo $'\nReceipts missing'; o=`for e in INSERT_LIBRARIES LIBRARY_PATH; do launchctl getenv DYLD_$e; done`; Pm "Environment"; o=`find -L {,/u*/lo*}/e*/periodic -type f -mtime -10d`; Pm "Modified periodic scripts"; o=`scutil --proxy | grep Prox`; Pm "Proxies"; o=`scutil --dns | awk '/r\[0\] /{if ($NF !~ /^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./) print $NF; exit}'`; i=`route -n get default | awk '/e:/{print $2}'`; I=`$NS -listnetworkserviceorder | sed -En '/ '$i'\)$/{x;s/^$.+$ //p;q;};x'`; n=`$NS -getdnsservers "$I" | awk '!/^T/{print "not "}'`; Ps "DNS (${n}from DHCP)"; o=`$NS -getinfo "$I" | awk '/k:/{if ($3 !~ "(255\.){3}0") print $3}'`; Ps "Netmask"; R && o=`sudo profiles -P | grep : | wc -l`; Ps "Profiles"; f=auto_master; [[ `md5 -q /etc/$f` =~ ^b166 ]] || Pc $f /etc/$f; for f in fstab sysctl.conf crontab launchd.conf; do Pc $f /etc/$f; done; f=/etc/hosts; Pc "hosts" <(egrep -v "$H" $f ); AT $f; Pc "User launchd" ~/.launchd*; R && Pc "Root crontab" <(sudo crontab -l); Pc "User crontab" <(crontab -l | sed -E 's:/Users/[^/]+/:/Users/USER/:g'); R && o=`sudo defaults read com.apple.loginwindow LoginHook`; Pm "Login hook"; LD="$(`find /S*/*/F* -type f -name lsregister | head -n1` -dump)"; o=`for ID in $AC; do [[ "$LD" =~ $ID ]] && echo $ID; done`; Pm "Application check"; Pp "Global login items" /L*/P*/loginw* Path; Pp "User login items" L*/P*/*loginit* Name; Pp "Safari extensions" L*/Saf*/*/E*.plist Bundle | sed -E 's/(\..*$|-[1-9])//g'; o=`find ~ $TMPDIR.. $ -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $ | wc -l`; Ps "Restricted user files"; cd; o=`SP Fonts | egrep 'id: N|te: Y' | wc -l`; Ps "Font problems"; o=`find L*/{Con,Pref}* -type f ! -size 0 -name *.plist | while read f; do plutil -s "$f" >&- || echo $f; done`; Pm "Bad plists"; d=(Desktop L*/Keyc*); n=(20 7); for i in 0 1; do o=`find "${d[$i]}" -type f -maxdepth 1 | wc -l`; o=$((o<=n[$i]?0:o)); Ps "${d[$i]##*/} file count"; done; o=; [[ UID -eq 0 ]] && o=root; Ps "UID"; o=$((`date +%s`-t)); Ps "Elapsed time (s)"; } 2>/dev/null | pbcopy; exit 2>&-

Copy the selected text to the Clipboard by pressing the key combination command-C.

7. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

Click anywhere in the Terminal window and paste (command-V). The text you pasted should vanish immediately. If it doesn't, press the return key.

8. If you see an error message in the Terminal window such as "syntax error," enter

exec bash

and press return. Then paste the script again.

9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line

[Process completed]

to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report the results. No harm will be done.

11. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

12. When you post the results, you might see the message, "You have included content in your post that is not permitted." It means that the forum software has misidentified something in the post as a violation of the rules. If that happens, please post the test results on Pastebin, then post a link here to the page you created.

Note: This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.

________________________________

Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Terms of Use of the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 4

iwantsimple Author

Level 1

0 points

Mar 10, 2014 9:27 PM in response to iwantsimple

Can anyone tell me why the responses that have been posted are blank now? I read the two responses and went to do the suggestions, but when I came back to check on what else I needed to do, the message contents is missing and only the authors' names are there. What's going on??

Reply

Answer 5

iwantsimple Author

Level 1

0 points

Mar 10, 2014 11:25 PM in response to Linc Davis

Here are the results:

System Version: OS X 10.9.2 (13C64)

Kernel Version: Darwin 13.1.0

Boot Mode: Normal

Model: MacBookPro6,2

Battery cycles: 303

System diagnostics

2014-02-19 com.apple.NotesMigratorService crash

2014-02-27 com.apple.NotesMigratorService crash

2014-03-01 com.apple.NotesMigratorService crash

2014-03-02 plugin-container spin

2014-03-07 Google Chrome hang

2014-03-09 iPhoto hang

2014-03-09 plugin-container spin

2014-03-10 firefox spin

2014-03-10 plugin-container spin

User diagnostics

2014-02-19 J8RPQ294UB.com.skitch.SkitchHelper crash

Kernel messages

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TM9P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TMAP kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TMBP kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TMCP kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TMDP kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TMEP kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TMFP kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TS0C kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TW0P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR Tp0P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TA0S kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TA1S kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TA2S kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TA3S kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR TA1P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR Tp1P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR Tp2P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR Tp3P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR Tp4P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:14:58 SMC::smcReadKeyAction ERROR Tp5P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff800f6ec000

Mar 9 15:49:07 process plugin-container[11982] caught causing excessive wakeups. Observed wakeups rate (per sec): 305; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 56069

Mar 9 15:59:18 wl0: Roamed or switched channel, reason #8, bssid 64:0f:28:6a:9b:31

Mar 9 16:54:28 PM notification timeout (pid 3923, Messages)

Mar 9 21:07:50 SMC::smcHandleInterruptEvent WARNING status=0x0 (0x40 not set) notif=0x0

Mar 9 22:41:59 MacAuthEvent en1 Auth result for: 64:0f:28:6a:9b:31 Auth timed out

Mar 10 00:10:29 process plugin-container[14957] caught causing excessive wakeups. Observed wakeups rate (per sec): 152; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 79754

Mar 10 01:07:57 process plugin-container[15257] caught causing excessive wakeups. Observed wakeups rate (per sec): 188; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 97969

Mar 10 01:27:42 process firefox[3455] caught causing excessive wakeups. Observed wakeups rate (per sec): 163; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 1441747

Mar 10 01:41:21 process plugin-container[15257] caught causing excessive wakeups. Observed wakeups rate (per sec): 305; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 448909

Mar 10 01:41:56 PM notification timeout (pid 3923, Messages)

--- last message repeated 4 times ---

Mar 10 20:33:55 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key LsNM (kSMCKeyNotFound)

Mar 10 20:33:55 SMC::smcReadKeyAction ERROR LsNM kSMCKeyNotFound(0x84) fKeyHashTable=0x0

Mar 10 20:33:55 SMC::smcGetLightshowVers ERROR: smcReadKey LsNM failed (kSMCKeyNotFound)

Mar 10 20:33:55 SMC::smcPublishLightshowVersion ERROR: smcGetLightshowVers failed (kSMCKeyNotFound)

Mar 10 20:33:55 SMC::smcInitHelper ERROR: smcPublishLightshowVersion failed (kSMCKeyNotFound)

Mar 10 20:33:55 SMC::smcInitHelper ERROR: MMIO regMap == NULL - fall back to old SMC mode

Mar 10 20:34:17 SIOCPROTODETACH_IN6: utun0 error=6

Mar 10 20:34:17 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key MOTP (kSMCKeyNotFound)

Mar 10 20:34:50 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key B0OS (kSMCKeyNotFound)

Mar 10 20:39:45 [331|501] com.apple.IconSe async. scan: #'/Users/Shared/Battle.net/Agent/Blizzard Error.app/Contents/Resources/Warning.icns/..namedfork/rsrc' act=0x00000002 rsn='ETYP1' ln='612'

Mar 10 20:39:45 [331|501] com.apple.IconSe async. scan: #'/Users/Shared/Battle.net/Agent/Blizzard Error.app/Contents/Resources/Warning.icns' act=0x00000002 rsn='ETYP1' ln='612'

--- last message repeated 1 time ---

Mar 10 20:39:48 [331|501] com.apple.IconSe async. scan: #'/Users/Shared/Battle.net/Agent/Error Reporter.app/Contents/Resources/ErrorReporter.icns/..namedfork/rsrc' act=0x00000002 rsn='ETYP1' ln='612'

Mar 10 20:39:48 [331|501] com.apple.IconSe async. scan: #'/Users/Shared/Battle.net/Agent/Error Reporter.app/Contents/Resources/ErrorReporter.icns' act=0x00000002 rsn='ETYP1' ln='612'

--- last message repeated 1 time ---

Mar 10 21:13:23 process firefox[455] thread 4483 caught burning CPU! It used more than 50% CPU (Actual recent usage: 64%) over 180 seconds. thread lifetime cpu usage 197.281027 seconds, (189.602856 user, 7.678171 system) ledger info: balance: 90004316691 credit: 192810594151 debit: 102806277460 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 140128318276

Mar 10 21:17:51 process plugin-container[696] caught causing excessive wakeups. Observed wakeups rate (per sec): 236; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 66413

Mar 10 21:25:05 IOAudioStream[0xffffff802ec60800]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (0,648)->(1,1008).

Mar 10 21:36:40 wl0: Roamed or switched channel, reason #8, bssid 64:0f:28:6a:9b:31

Total CPU usage: user 14%, system 1%

CPU usage by process "bzfilelist" with UID 0: 43.5%

Loaded extrinsic kernel extensions

com.eset.kext.esets_kac (4.1.86)

Extrinsic daemons

com.smithmicro.schedulerdaemon

com.sierrawireless.SWoCTool

com.oracle.java.JavaUpdateHelper

com.oracle.java.Helper-Tool

com.microsoft.office.licensing.helper

com.insynchq.insync.daemon

com.google.keystone.daemon

com.google.GoogleML

com.eset.esets_daemon

com.cisco.anyconnect.vpnagentd

com.backblaze.bzserv

com.adobe.fpsaud

Extrinsic agents

J8RPQ294UB.com.skitch.SkitchHelper

com.oracle.java.Java-Updater

com.google.keystone.system.agent

com.epson.eventmanager.agent

com.cisco.anyconnect.gui

com.smithmicro.cleaning.schedulermailer

com.iLike.Agent

com.google.GoogleContactSyncAgent

com.facebook.videochat.updater

com.backblaze.bzbmenu

com.adobe.ARM.UUID

launchd items

/Library/LaunchAgents/com.cisco.anyconnect.gui.plist

(com.cisco.anyconnect.gui)

/Library/LaunchAgents/com.epson.eventmanager.agent.plist

(com.epson.eventmanager.agent)

/Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.system.agent)

/Library/LaunchAgents/com.oracle.java.Java-Updater.plist

(com.oracle.java.Java-Updater)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.backblaze.bzserv.plist

(com.backblaze.bzserv)

/Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist

(com.cisco.anyconnect.vpnagentd)

/Library/LaunchDaemons/com.eset.esets_daemon.plist

(com.eset.esets_daemon)

/Library/LaunchDaemons/com.google.GoogleML.plist

(com.google.GoogleML)

/Library/LaunchDaemons/com.google.keystone.daemon.plist

(com.google.keystone.daemon)

/Library/LaunchDaemons/com.insynchq.insync.daemon.plist

(com.insynchq.insync.daemon)

/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

(com.microsoft.office.licensing.helper)

/Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

(com.oracle.java.Helper-Tool)

/Library/LaunchDaemons/com.oracle.java.JavaUpdateHelper.plist

(com.oracle.java.JavaUpdateHelper)

/Library/LaunchDaemons/com.sierrawireless.SWoCTool.plist

(com.sierrawireless.SWoCTool)

/Library/LaunchDaemons/com.smithmicro.schedulerdaemon.plist

(com.smithmicro.schedulerdaemon)

Library/LaunchAgents/com.adobe.ARM.UUID.plist

(com.adobe.ARM.UUID)

Library/LaunchAgents/com.apple.FolderActions.enabled.plist

(com.apple.FolderActions.enabled)

Library/LaunchAgents/com.apple.FolderActions.folders.plist

(com.apple.FolderActions.folders)

Library/LaunchAgents/com.apple.SafariBookmarksSyncer.plist

(com.apple.Safari)

Library/LaunchAgents/com.backblaze.bzbmenu.plist

(com.backblaze.bzbmenu)

Library/LaunchAgents/com.facebook.videochat.plist

(com.facebook.videochat.updater)

Library/LaunchAgents/com.google.GoogleContactSyncAgent.plist

(com.google.GoogleContactSyncAgent)

Library/LaunchAgents/com.iLike.Agent.plist

(com.iLike.Agent)

Library/LaunchAgents/com.smithmicro.cleaning.schedulermailer.plist

(com.smithmicro.cleaning.schedulermailer)

Startup items

/Library/StartupItems/MissingSyncMounting/MissingSyncMounting

/Library/StartupItems/MissingSyncMounting/Resources/English.lproj/Localizable.s trings

/Library/StartupItems/Privoxy/Privoxy

/Library/StartupItems/Tor/Tor

Extrinsic loadable bundles

/System/Library/CoreServices/SecurityAgentPlugins/HomeDirMechanism.bundle

(com.apple.SecurityAgentPlugin.HomeDirMechanism)

/System/Library/CoreServices/SecurityAgentPlugins/KerberosAgent.bundle

(com.apple.KerberosAgent)

/System/Library/CoreServices/SecurityAgentPlugins/loginwindow.bundle

(com.apple.securityAgentPlugins.loginwindowUI)

/System/Library/CoreServices/SecurityAgentPlugins/MCXMechanism.bundle

(com.apple.securityAgentPlugin.MCXMechanism)

/System/Library/CoreServices/SecurityAgentPlugins/PKINITMechanism.bundle

(com.apple.PKINITMechanism)

/System/Library/CoreServices/SecurityAgentPlugins/RestartAuthorization.bundle

(com.apple.securityAgentPlugin.RestartAuthorization)

/System/Library/Extensions/AMDRadeonVADriver.bundle

(com.apple. AMDRadeonVADriver)

/System/Library/Extensions/AMDRadeonX3000.kext

(com.apple.AMDRadeonX3000)

/System/Library/Extensions/AMDRadeonX3000GLDriver.bundle

(com.apple.AMDRadeonX3000GLDriver)

/System/Library/Extensions/AMDRadeonX4000.kext

(com.apple.AMDRadeonX4000)

/System/Library/Extensions/AMDRadeonX4000GLDriver.bundle

(com.apple.AMDRadeonX4000GLDriver)

/System/Library/Extensions/AppleIntelHD3000Graphics.kext

(com.apple.driver.AppleIntelHD3000Graphics)

/System/Library/Extensions/AppleIntelHD3000GraphicsGA.plugin

(com.apple.driver.AppleIntelHD3000GraphicsGA)

/System/Library/Extensions/AppleIntelHD3000GraphicsGLDriver.bundle

(com.apple.driver.AppleIntelHD3000GraphicsGLDriver)

/System/Library/Extensions/AppleIntelHD3000GraphicsVADriver.bundle

(com.apple.AppleIntelHD3000GraphicsVADriver)

/System/Library/Extensions/AppleIntelHD4000Graphics.kext

(com.apple.driver.AppleIntelHD4000Graphics)

/System/Library/Extensions/AppleIntelHD4000GraphicsGLDriver.bundle

(com.apple.driver.AppleIntelHD4000GraphicsGLDriver)

/System/Library/Extensions/AppleIntelHD4000GraphicsVADriver.bundle

(com.apple.AppleIntelHD4000GraphicsVADriver)

/System/Library/Extensions/AppleIntelHD5000Graphics.kext

(com.apple.driver.AppleIntelHD5000Graphics)

/System/Library/Extensions/AppleIntelHD5000GraphicsGLDriver.bundle

(com.apple.driver.AppleIntelHD5000GraphicsGLDriver)

/System/Library/Extensions/AppleIntelHD5000GraphicsVADriver.bundle

(com.apple.AppleIntelHD5000GraphicsVADriver)

/System/Library/Extensions/AppleIntelHDGraphicsGLDriver.bundle

(com.apple.driver.AppleIntelHDGraphicsGLDriver)

/System/Library/Extensions/AppleIntelHSWVA.bundle

(com.apple.AppleIntelHSWFBVA)

/System/Library/Extensions/AppleIntelIVBVA.bundle

(com.apple.AppleIntelIVBFBVA)

/System/Library/Extensions/AppleIntelMCEReporter.kext

(com.apple.driver.AppleIntelMCEReporter)

/System/Library/Extensions/ATIRadeonX2000.kext

(com.apple.ATIRadeonX2000)

/System/Library/Extensions/ATIRadeonX2000GA.plugin

(com.apple.ATIRadeonX2000GA)

/System/Library/Extensions/ATIRadeonX2000GLDriver.bundle

(com.apple.ATIRadeonX2000GLDriver)

/System/Library/Extensions/ATIRadeonX2000VADriver.bundle

(com.apple.ATIRadeonX2000VADriver)

/System/Library/Extensions/EPSONProjectorAudio.kext

(com.epson.driver.EPSONProjectorAudio)

/System/Library/Extensions/EPSONUSBPrintClass.kext

(com.epson.print.kext.USBPrintClass)

/System/Library/Extensions/GeForce.kext

(com.apple.GeForce)

/System/Library/Extensions/GeForceGA.plugin

(com.apple.GeForceGA)

/System/Library/Extensions/GeForceGLDriver.bundle

(com.apple.GeForceGLDriver)

/System/Library/Extensions/GeForceTesla.kext

(com.apple.GeForceTesla)

/System/Library/Extensions/GeForceTeslaGLDriver.bundle

(com.apple.GeForceTeslaGLDriver)

/System/Library/Extensions/GeForceTeslaVADriver.bundle

(com.apple.GeForceTeslaVADriver)

/System/Library/Extensions/GeForceVADriver.bundle

(com.apple.GeForceVADriver)

/System/Library/Extensions/HotSync Classic Seize.kext

(com.palm.ClassicNotSeizeDriver)

/System/Library/Extensions/hp_designjet_series.kext

(com.hp.print.hpio.Designjet.kext)

/System/Library/Extensions/hp_Deskjet_io_enabler.kext

(com.hp.print.hpio.Deskjet.kext)

/System/Library/Extensions/hp_fax_io.kext

(com.hp.kext.hp-fax-io)

/System/Library/Extensions/hp_Inkjet1_io_enabler.kext

(com.hp.print.hpio.Inkjet1.kext)

/System/Library/Extensions/hp_Inkjet2_io_enabler.kext

(com.hp.print.hpio.Inkjet2.kext)

/System/Library/Extensions/hp_Inkjet3_io_enabler.kext

(com.hp.print.hpio.Inkjet3.kext)

/System/Library/Extensions/hp_Inkjet4_io_enabler.kext

(com.hp.print.hpio.Inkjet4.kext)

/System/Library/Extensions/hp_Inkjet5_io_enabler.kext

(com.hp.print.hpio.Inkjet5.kext)

/System/Library/Extensions/hp_Inkjet7_io_enabler.kext

(com.hp.print.hpio.inkjet7.kext)

/System/Library/Extensions/hp_Inkjet8_io_enabler.kext

(com.hp.print.hpio.inkjet8.kext)

/System/Library/Extensions/hp_Inkjet9_io_enabler.kext

(com.hp.print.hpio.Inkjet9.kext)

/System/Library/Extensions/hp_Inkjet_io_enabler.kext

(com.hp.print.hpio.Inkjet.kext)

/System/Library/Extensions/hp_io_printerclassdriver_enabler.kext

(com.hp.hpio.hp_io_printerclassdriver_enabler)

/System/Library/Extensions/hp_Laserjet_io_enabler.kext

(com.hp.print.hpio.Laserjet.kext)

/System/Library/Extensions/hp_Officejet_io_enabler.kext

(com.hp.print.hpio.Officejet.kext)

/System/Library/Extensions/hp_Photosmart_io_enabler.kext

(com.hp.print.hpio.Photosmart.kext)

/System/Library/Extensions/hp_PhotosmartPro_io_enabler.kext

(com.hp.print.hpio.PhotosmartPro.kext)

/System/Library/Extensions/hp_psa640_io_enabler.kext

(com.hp.hpio.hp_psa640_io_enabler)

/System/Library/Extensions/hp_qc_io_enabler.kext

(com.hp.hpio.hp_psa530_630_io_enabler)

/System/Library/Extensions/IOMissingSyncMassStorage.kext

(com.markspace.iokit.IOMissingSyncMassStorage)

/System/Library/Extensions/LexmarkUSBMerge.kext

(com.lexmark.print.usbmerge)

/System/Library/Extensions/Missing Sync Classic Seize.kext

(com.markspace.missingsync.palmos.classicseize)

/System/Library/Extensions/NovatelWireless3G.kext

(com.novatelwireless.driver.3G)

/System/Library/Extensions/NovatelWirelessFilter.kext

(com.novatelwireless.driver.DisableAutoInstall)

/System/Library/Extensions/SierraSupport.kext

(com.sierrawireless.driver.SierraSupport)

/System/Library/Extensions/SierraSwitch.kext

(com.sierrawireless.driver.SierraSwitch)

/System/Library/Extensions/SierraSwitchKicker.kext

(com.sierrawireless.driver.SierraSwitchKicker)

/System/Library/Extensions/tun.kext

(com.cisco.cscotun)

/Library/Audio/MIDI Drivers/EmagicUSBMIDIDriver.plugin

(info.emagic.driver.unitor)

/Library/Audio/Plug-Ins/Components/A52Codec.component

(com.shepmater.A52Codec)

/Library/Audio/Plug-Ins/HAL/AirPlay.driver

(com.apple.audio.AirTunesHALPlugin)

/Library/Audio/Plug-Ins/HAL/AppleAVBAudio.driver

(com.apple.audio.AppleAVBAudio)

/Library/Audio/Plug-Ins/HAL/BluetoothAudioPlugIn.driver

(com.apple.audio.BluetoothAudioPlugIn)

/Library/Audio/Plug-Ins/HAL/iSightAudio.driver

(com.apple.iSightAudio)

/Library/InputManagers/GearsEnabler/GearsEnabler.bundle

(com.google.GearsEnabler)

/Library/InputManagers/SetAlphaValue/SetAlphaValue.bundle

(parrotsoftwares.SetAlphaValue)

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

(com.adobe.acrobat.pdfviewer)

/Library/Internet Plug-Ins/AmazonMP3DownloaderPlugin1017277.plugin

(com.AmazonMP3DownloaderPluginLib.Amazon MP3 Downloader Plugin)

/Library/Internet Plug-Ins/CouponPrinter-FireFox_v2.plugin

(com.coupons.plugin.mozilla-plugin)

/Library/Internet Plug-Ins/CouponPrinter-Safari.webplugin

(com.coupons.plugin.safari-plugin)

/Library/Internet Plug-Ins/Default Browser.plugin

(com.apple.DefaultBrowser.PlugIn)

/Library/Internet Plug-Ins/DirectorShockwave.plugin

(com.adobe.shockwave.pluginshim)

/Library/Internet Plug-Ins/Disabled Plug-Ins/Windows Media Plugin

(com.microsoft.WMP.defaultplugin)

/Library/Internet Plug-Ins/DRM Plugin.bundle

(com.microsoft.DRMPlugin)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

(net.telestream.wmv.plugin)

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin

(net.telestream.wmv.webplugin)

/Library/Internet Plug-Ins/Gears.plugin

(com.google.Gears)

/Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin

(com.Google.GoogleEarthPlugin.plugin)

/Library/Internet Plug-Ins/GoogleGadget.webplugin

(com.google.googlegadgetwebplugin)

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

(com.google.googletalkbrowserplugin)

/Library/Internet Plug-Ins/iPhotoPhotocast.plugin

(com.apple.plugin.iPhotoPhotocast)

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

(com.oracle.java.JavaAppletPlugin)

/Library/Internet Plug-Ins/npgtpo3dautoplugin.plugin

(com.google.o3d)

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

(com.google.o1dbrowserplugin)

/Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin

(com.microsoft.officelive.browserplugin)

/Library/Internet Plug-Ins/Photo Center Plugin.plugin

(com.snapfish.upload)

/Library/Internet Plug-Ins/Quartz Composer.webplugin

(com.apple.QuartzComposer.webplugin)

/Library/Internet Plug-Ins/QuickTime Plugin.plugin

(com.apple.QuickTime Plugin.plugin)

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

(com.microsoft.sharepoint.browserplugin)

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

(com.microsoft.sharepoint.webkitplugin)

/Library/Internet Plug-Ins/Silverlight.plugin

(com.microsoft.SilverlightPlugin)

/Library/iTunes/iTunes Plug-ins/MissingSyncPalmiTunesPlugin.bundle

(com.markspace.missingsync.iTunes)

/Library/iTunes/iTunes Plug-ins/Quartz Composer Visualizer.bundle

(com.apple.QuartzComposer.iTunesPlugIn)

/Library/PhonePlugins/Feisar-W580.phoneplugin

(com.feisar.phoneplugin.com.sony-ericsson.W580)

/Library/PhonePlugins/Nokia_E71_2v0.phoneplugin

(com.nokia.phoneplugin.NokiaE71)

/Library/PreferencePanes/BackblazeBackup.prefPane

(com.backblaze.BackblazeBackup)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/PreferencePanes/FlexCal.prefPane

(com.flexgames.FlexCal)

/Library/PreferencePanes/Flip4Mac WMV.prefPane

(net.telestream.wmv.prefpane)

/Library/PreferencePanes/JavaControlPanel.prefPane

(com.oracle.java.JavaControlPanel)

/Library/PreferencePanes/Perian.prefPane

(org.perian.PerianPane)

/Library/QuickTime/AC3MovieImport.component

(com.cod3r.ac3movieimport)

/Library/QuickTime/AppleMPEG2Codec.component

(com.apple.AppleMPEG2Codec)

/Library/QuickTime/Perian.component

(org.perian.Perian)

/Library/ScriptingAdditions/Insync.osax

(net.culater.Insync.osax)

/Library/Spotlight/GBSpotlightImporter.mdimporter

(com.apple.garageband.spotlightimporter)

/Library/Spotlight/Growly Notes.mdimporter

(com.growlybird.mdimporter.notes)

/Library/Spotlight/iBooksAuthor.mdimporter

(com.apple.MDImporter.iBooksAuthor)

/Library/Spotlight/iMovie.mdimporter

(com.apple.iMovieMDImporter)

/Library/Spotlight/iWork.mdimporter

(com.apple.MDImporter.iWork)

/Library/Spotlight/Microsoft Entourage.mdimporter

(com.microsoft.entourageMDImporter)

/Library/Spotlight/Microsoft Office.mdimporter

(com.microsoft.MDImporter.Office)

Library/Address Book Plug-Ins/SkypeABDialer.bundle

(com.skype.skypeabdialer)

Library/Address Book Plug-Ins/SkypeABSMS.bundle

(com.skype.skypeabsms)

Library/Internet Plug-Ins/BrowserPlus_2.9.8.plugin

(com.yahoo.browserplus)

Library/Internet Plug-Ins/FacebookVideoCalling.bundle

(com.skype.FacebookVideoCalling)

Library/Internet Plug-Ins/fbplugin_1_0_1.plugin

(com.facebook.plugin)

Library/Internet Plug-Ins/fbplugin_1_0_3.plugin

(com.facebook.plugin)

Library/Internet Plug-Ins/Move-Media-Player.plugin

(com.movenetworks.movemediaplayer.plugin)

Library/Internet Plug-Ins/npBcsMcTcIO.plugin

(org.mozilla.basicPlugin)

Library/Internet Plug-Ins/Picasa.plugin

(com.google.PicasaPlugin)

Library/iTunes/iTunes Plug-ins/iLike.bundle

(com.iLike.Plugin)

Library/PreferencePanes/BrowserPlusPrefs.prefPane

(com.yahoo.browserplus.prefpane)

Extrinsic shared libraries

/usr/lib/dtrace/libdtrace_dyld.dylib

/usr/lib/libgmalloc.B.dylib

/usr/lib/libXplugin.1.dylib

sysctl.conf

kern.sysv.shmmni=4096

kern.sysv.shmseg=4096

kern.sysv.shmmin=1

kern.sysv.shmmax=536870912

kern.sysv.shmall=131072

launchd.conf

setenv _GOOGLE_GILD_RUNTIME_FRAMEWORK_ABSOLUTE_PATH_ /Library/Google/Frameworks/Gild.framework

Application check

com.google.GoogleDrive

Safari extensions

Add To Amazon Wish List

GMail Counter

Print Plus

Push to Kindle

markerto

Restricted user files: 2133

Font problems: 48

Bad plists

Library/Preferences/com.apple.iphotomosaic.plist

Library/Preferences/com.solidstatenetworks.awkhost.plist

Library/Preferences/mp-MealChoices.plist

Library/Preferences/mp-MyIngredients.plist

Keychains file count: 8

Elapsed time (s): 529

----------------------------------------------------

I have deleted everything that I could find that was Google-related. I have also removed all apps that I haven't used in the past year. What else can I do to speed things up?

If I add the additional 4 gb or RAM, will I be able to play WOW on this laptop without the character movement lagging?

Thank you for your help!!

Reply

Answer 6

MichelPM

Level 10

80,958 points

Mar 11, 2014 12:23 AM in response to iwantsimple

"If I add the additional 4 gb or RAM, will I be able to play WOW on this laptop without the character movement lagging?"

The character movements or moving graphics issues are more a function of you Mac's GPU.

This is not a RAM related issue, per se, but a GPU issue. Your GPU only has 256 MBs of VRAM.

So, you may still experience graphics lag.

RAM makes your overall system run smoother, quicker and more efficient by allowing apps and the OS access to the additional installed RAM when needed.

Your MacBook's dedicated GPU RAM is what is used, specifically, for onscreen graphics.

So, your GPU may still be the weak link in your MacBook.

Reply

Answer 7

MichelPM

Level 10

80,958 points

Mar 11, 2014 12:27 AM in response to iwantsimple

Did you completely uninstall SmithMicro Spring Cleaning app?

This maybe causing additional OS slowdowns, too!

Reply

Answer 8

iwantsimple Author

Level 1

0 points

Mar 11, 2014 12:28 AM in response to MichelPM

Thank you for clarifying that. I'm considering getting the RAM up and everything cleaned up so it works right again, using this computer for everything EXCEPT gaming, and buying a Windows computer to use solely for gaming. I'd really rather use one computer for everything, but it seems that Mac just isn't there yet (awesome at everything AND gaming)...

Reply

Answer 9

MichelPM

Level 10

80,958 points

Mar 11, 2014 12:32 AM in response to iwantsimple

FYI,

Laptop computers and to a greater extent, Mac laptop computers DO NOT make the best gaming machines, anyhow.

Reply

Answer 10

iwantsimple Author

Level 1

0 points

Mar 11, 2014 12:34 AM in response to MichelPM

I believe I did. I'm not sure where to look to find out if there are bits and pieces left behind...

Reply

Answer 11

iwantsimple Author

Level 1

0 points

Mar 11, 2014 12:35 AM in response to MichelPM

That's what I'm reading. I can't sit for long periods in a regular chair, so I'm avoiding a desktop machine. I'll have to do more research on the laptop gaming issue...

Reply

Answer 12

Linc Davis

Level 10

209,541 points

Mar 11, 2014 6:43 AM in response to iwantsimple

A.

Your system is heavily modified with third-party software. As a first step toward solving the problem, I suggest you remove "ESET" (which serves no purpose) and also "Backblaze," which is using excessive processor cycles and is often implicated in system slowdowns.

Any third-party software that doesn't install by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and (unless otherwise specified in this comment) I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to reboot in order to complete an uninstallation. Until you do that, the uninstallation may have no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

WARNING: Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

Uninstall ESET by following these instructions. If you have a different version of the product, the procedure may be different.

Another option is to make a fresh start by erasing the startup volume and restoring only your documents from a backup. Ask if you choose that option and need guidance.

B.

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock all your user files, reset their ownership, and remove their access-control lists. If you've set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

{ sudo chflags -R nouchg,nouappnd ~ $TMPDIR..; sudo chown -R $UID:staff ~ $_; sudo chmod -R u+rwX ~ $_; chmod -R -N ~ $_; } 2>&-

This time you'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Boot into Recovery. When the OS X Utilities screen appears, select

Utilities ▹ Terminal

from the menu bar. A Terminal window will open. In that window, type this:

res

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

 ▹ Restart

from the menu bar.

C.

Launch the Font Book application and validate all fonts. You must select the fonts in order to validate them. See the built-in help and this support article for instructions. If Font Book finds any issues, resolve them.

From the application's menu bar, select

File ▹ Restore Standard Fonts...

You'll be prompted to confirm, and then to enter your administrator login password.

Boot in safe mode to rebuild the font caches. Boot again as usual and test.

Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a Fusion Drive or a software RAID, you can’t boot in safe mode. In that case, ask for instructions.

Also note that if you deactivate or remove any built-in fonts, for instance by using a third-party font manager, the system may become unstable.

Reply

Answer 13

iwantsimple Author

Level 1

0 points

Mar 11, 2014 10:00 AM in response to Linc Davis

Okay, I have done all of that. I have a question about ESET and Backblaze.

Backblaze is my backup software. I pay $5/month for it to run backups for me online. I can't risk losing data from this computer. Should I really remove Backblaze? Is there a better/less draining alternative?

ESET is my virus software. It DOES update constantly, and I know it slows down my computer considerably. What alternative do I have, though? Isn't this virus software necessary?

Reply

Answer 14

MichelPM

Level 10

80,958 points

Mar 11, 2014 10:37 AM in response to iwantsimple

If you aren't running Windows on your MacBook, then antivirus isn't necessary on a Mac with OS X.

Antivirus software can slow down the normal operation of OS X and can cause other adverse effects on the system and can negatively impact performance on OS X.

Most Antivirus software packages put too many limits on OS X

If you really feel like you have to have Antivirus software on your Mac, the least invasive ones are

ClamXAV

VirusBarrierExpress(found on the Mac App Store)

Try completely uninstalling ESET per the instructions on their website and see if your MacBook's performance picks up some more.

Reply

Answer 15

Linc Davis

Level 10

209,541 points

Mar 11, 2014 10:40 AM in response to iwantsimple

Is there a better/less draining alternative?

Mac Basics: Time Machine backs up your Mac

As for online backup, there are many options. I've never used most of them, but from what I've seen on this site, "Backblaze" seems to be one of the worst. The developer has a bad reputation.

Isn't this virus software necessary?

1. This is a comment on what you should and should not do to protect yourself from malicious software ("malware") that circulates on the Internet. It does not apply to software, such as keystroke loggers, that may be installed deliberately by an intruder who has hands-on access to your computer, or who has been able to log in to it remotely. That threat is in a different category, and there's no easy way to defend against it. If you have reason to suspect that you're the target of such an attack, you need expert help.

If you find this comment too long or too technical, read only sections 5, 6, and 10.

OS X now implements three layers of built-in protection specifically against malware, not counting runtime protections such as execute disable, sandboxing, system library randomization, and address space layout randomization that may also guard against other kinds of exploits.

2. All versions of OS X since 10.6.7 have been able to detect known Mac malware in downloaded files, and to block insecure web plugins. This feature is transparent to the user. Internally Apple calls it "XProtect."

The malware recognition database used by XProtect is automatically updated; however, you shouldn't rely on it, because the attackers are always at least a day ahead of the defenders.

The following caveats apply to XProtect:

It can be bypassed by some third-party networking software, such as BitTorrent clients and Java applets.
It only applies to software downloaded from the network. Software installed from a CD or other media is not checked.

As new versions of OS X are released, it's not clear whether Apple will indefinitely continue to maintain the XProtect database of older versions such as 10.6. The security of obsolete system versions may eventually be degraded. Security updates to the code of obsolete systems will stop being released at some point, and that may leave them open to other kinds of attack besides malware.

3. Starting with OS X 10.7.5, there has been a second layer of built-in malware protection, designated " Gatekeeper" by Apple. By default, applications and Installer packages downloaded from the network will only run if they're digitally signed by a developer with a certificate issued by Apple. Software certified in this way hasn't necessarily been tested by Apple, but you can be reasonably sure that it hasn't been modified by anyone other than the developer. His identity is known to Apple, so he could be held legally responsible if he distributed malware. That may not mean much if the developer lives in a country with a weak legal system (see below.)

Gatekeeper doesn't depend on a database of known malware. It has, however, the same limitations as XProtect, and in addition the following:

It can easily be disabled or overridden by the user.
A malware attacker could get control of a code-signing certificate under false pretenses, or could simply ignore the consequences of distributing codesigned malware.
An App Store developer could find a way to bypass Apple's oversight, or the oversight could fail due to human error.

For the reasons given above, App Store products, and other applications recognized by Gatekeeper as signed, are safer than others, but they can't be considered absolutely safe. "Sandboxed" applications may prompt for access to private data, such as your contacts, or for access to the network. Think before granting that access. Sandboxing security is based on user input. Never click through any request for authorization without thinking.

4. Starting with OS X 10.8.3, a third layer of protection has been added: a "Malware Removal Tool" (MRT). MRT runs automatically in the background when you update the OS. It checks for, and removes, malware that may have evaded the other protections via a Java exploit (see below.) MRT also runs when you install or update the Apple-supplied Java runtime (but not the Oracle runtime.) Like XProtect, MRT is effective against known threats, but not against unknown ones. It notifies you if it finds malware, but otherwise there's no user interface to MRT.

5. The built-in security features of OS X reduce the risk of malware attack, but they are not, and never will be, complete protection. The best defense is always going to be your own intelligence. With the possible exception of Java exploits, all known malware circulating on the Internet that affects a fully-updated installation of OS X 10.6 or later takes the form of so-called " Trojan horses," which can only have an effect if the victim is duped into running them. The threat therefore amounts to a battle of wits between you and Internet criminals. If you're smarter than they think you are, you'll win. That means, in practice, that you always stay within a safe harbor of computing practices. How do you know when you're leaving the safe harbor? Below are some warning signs of danger.

Software from an untrustworthy source

Software of any kind is distributed via BitTorrent. or Usenet, or on a website that also distributes pirated music or movies.
Software with a corporate brand, such as Adobe Flash Player, doesn't come directly from the developer’s website.
Rogue websites such as Softonic and CNET Download distribute free applications that have been packaged in a superfluous "installer."
The software is advertised by means of spam or intrusive web ads.

Software that is plainly illegal or does something illegal

Software that you would otherwise have to pay for is "cracked" or "free."
An application helps you to infringe copyright, for instance by circumventing the copy protection on commercial software, or saving streamed media for reuse without permission.

Conditional or unsolicited offers from strangers

A telephone caller or a web page tells you that you have a “virus” and offers to help you remove it. (Some reputable websites did legitimately warn visitors who were infected with the "DNSChanger" malware. That exception to this rule no longer applies.)
A web site offers free content such as video or music, but to use it you must install a “codec,” “plug-in,” "player," "downloader," "extractor," or “certificate” that comes from that same site, or an unknown one.
You win a prize in a contest you never entered.
Someone on a message board such as this one is eager to help you, but only if you download an application of his choosing.
A "FREE WI-FI !!!" network advertises itself in a public place such as an airport, but is not provided by the management.
Anything online that you would expect to pay for is "free."

Unexpected events

You open what you think is a document and get an alert that it's "an application downloaded from the Internet." Click Cancel and delete the file. Even if you don't get the alert, you should still delete any file that isn't what you expected it to be.
An application does something you don't expect, such as asking for permission to access your contacts, your location, or the Internet for no obvious reason.
Software is attached to email that you didn't request, even if it comes (or seems to come) from someone you trust.

I don't say that leaving the safe harbor just once will necessarily result in disaster, but making a habit of it will weaken your defenses against malware attack. Any of the above scenarios should, at the very least, make you uncomfortable.

6. Java on the Web ( not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.

Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.

Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it — not JavaScript — in your browsers.

Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a lock icon in the address bar with the abbreviation "https" when visiting a secure site.

Stay within the safe harbor, and you’ll be as safe from malware as you can practically be. The rest of this comment concerns what you should not do to protect yourself.

7. Never install any commercial "anti-virus" or "Internet security" products for the Mac, as they all do more harm than good, if they do any good at all. If you need to be able to detect Windows malware in your files, use one of the free security apps in the Mac App Store — nothing else.

Why shouldn't you use commercial "anti-virus" products?

To recognize malware, the software depends on a database of known threats, which is always at least a day out of date. New threats are emerging on a daily basis. Research has shown that most successful attacks are "zero-day" — that is, previously unknown. Recognition-based malware scanners do not defend against such attacks.
Their design is predicated on the nonexistent threat that malware may be injected at any time, anywhere in the file system. Malware is downloaded from the network; it doesn't materialize from nowhere.
In order to meet that nonexistent threat, the software modifies or duplicates low-level functions of the operating system, which is a waste of resources and a common cause of instability, bugs, and poor performance.
By modifying the operating system, the software itself may create weaknesses that could be exploited by malware attackers.

8. An anti-malware product from the App Store, such as "ClamXav," has the same drawback as the commercial suites of being always out of date, but it does not inject code into the operating system. That doesn't mean it's entirely harmless. It may report email messages that have "phishing" links in the body, or Windows malware in attachments, as infected files, and offer to delete or move them. Doing so will corrupt the Mail database. The messages should be deleted from within the Mail application.

An anti-virus app is not needed, and cannot be relied upon, for protection against OS X malware. It's useful only for detecting Windows malware, and even for that use it's not really effective, because new Windows malware is emerging much faster than OS X malware. Windows malware can't harm you directly (unless, of course, you use Windows.) Just don't pass it on to anyone else.

A Windows malware attachment in email is usually easy to recognize without the need for any software; for example:

♥♥♥♥♥♥♥♥♥♥♥♥♥♥!!!!!!!H0TBABEZ4U!!!!!!!.AVI♥♥♥♥♥♥♥♥♥♥♥♥♥♥.exe

Software may be able to tell you which particular trojan it is, but do you really care? In practice, there's seldom a reason to use recognition software unless an institutional policy requires it. Windows malware is so widespread that you should assume it's in every unknown email attachment until proven otherwise. Nevertheless, ClamXav or a similar App Store product may be useful if an uninformed network administrator says you must have some kind of "anti-virus" application.

The ClamXav developer won't try to "upsell" you to a paid version of the product. Other developers may do that. Don't be upsold. For one thing, you should not pay to protect Windows users from the consequences of their choice of computing platform. For another, a paid upgrade from a free app will probably have all the disadvantages mentioned in section 7.

9. It seems to be a common belief that the built-in Application Firewall acts as a barrier to infection, or prevents malware from functioning. It does neither. It blocks inbound connections to certain network services you're running, such as file sharing. It's disabled by default and you should leave it that way if you're behind a router on a private home or office network. Activate it only when you're on an untrusted network, for instance a public Wi-Fi hotspot, where you don't want to provide services. Disable any services you don't use in the Sharing preference pane. All are disabled by default.

10. As a Mac user you don't have to live in fear that your computer may be infected every time you install software, read email, or visit a web page. But neither should you assume that you will always be safe from exploitation, no matter what you do. The greatest harm done by security software is precisely its selling point: it makes people feel safe. They may then feel safe enough to take risks from which the software doesn't protect them. "Hmmmm, this torrent is a crack of that new game I want. I think I'll download it. It could be a trojan, but the antivirus will warn me if it is." Then they wonder why their Mac is so slow all of a sudden. It's slow because it's running flat out mining bitcoins for a hacker who has already sold their credit card number and banking passwords to a criminal gang. Maybe a week later the antivirus does warn them, but what good does that do?

Nothing can lessen the need for safe computing practices.

Reply