Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

8 points

after upgrading to Mavericks TrendMicro UIMgmt appears at startup

After recently upgrading to OSX Mavericks, my Mac has slowed down at startup.

I followed the instructions given to a user having a similar problem and uninstalled some unnecessary software. However, the problem is not resolved.

The major culprit seems to be a reappearance of TrendMicro Smart Surfing for Mac, which I previously installed but then removed (incorrectly).

I thought I had fixed this problem before I upgraded to OSX Mavericks. Whatever I did to fix it seemed to work, as TrendMicro stopped interfering with my Mac until now.

After waiting an inordinate amount of time at startup, I get an (error message) box saying "UIMgmt wants to make changes." Then it asks me to enter my password to allow it.

I have searched the web for solutions and tried a few (entering commands using the Terminal Console). Nothing is working. There is no visible application for TrendMicro in my Applications folder.

Thank you.

Mac mini (Mid 2011), OS X Mavericks (10.9.3)

Posted on May 23, 2014 5:55 PM

43 replies

iDeBb Author

Level 1

8 points

May 25, 2014 4:24 PM in response to John Galt

Thank you, John. I will take your suggestions into consideration. Thanks again for your responses.

iDeBb Author

Level 1

8 points

May 25, 2014 4:25 PM in response to Allan Eckert

Thank you for your suggestions, Allan.

iDeBb Author

Level 1

8 points

May 25, 2014 5:27 PM in response to Linc Davis

I deleted the Kaspersky software after reading your informative post.

I also deleted Adobe Flash Player and Reader, EtreCheck and a few other applications that I no longer use, (Coupon apps).

I ran the test again. I can see that some of the apps I deleted have left behind plug-ins, and there are others I don't recognize.

For example, I do not own an Epson printer. I don't know why a plug-in exists on my computer.

Also, do I need to be concerned about the Bad plist: Library/Preferences/com.solidstatenetworks.awkhost.plist?

Thanks in advance.

Model Identifier: Macmini5,2

System Version: OS X 10.9.3 (13D65)

Kernel Version: Darwin 13.2.0

Boot Mode: Normal

Time since boot: 1:06

FileVault: On

Diagnostic reports

2014-05-08 PluginProcess crash

2014-05-12 Calendar crash

2014-05-16 PluginProcess crash

2014-05-17 Dock crash

2014-05-22 kav_agent crash

2014-05-25 kav_app hang

Log

May 19 23:40:38 process PluginProcess[348] caught causing excessive wakeups. Observed wakeups rate (per sec): 353; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 274163

May 19 23:57:46 process PluginProcess[348] caught causing excessive wakeups. Observed wakeups rate (per sec): 351; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 644611

May 22 13:58:43 process installd[630] thread 46060 caught burning CPU! It used more than 50% CPU (Actual recent usage: 75%) over 180 seconds. thread lifetime cpu usage 90.075942 seconds, (89.323848 user, 0.752094 system) ledger info: balance: 90001578014 credit: 90001578014 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 119092759727

May 22 16:11:42 Process Setup Assistant [197] disabling system-wide I/O Throttling

May 22 16:11:42 Process Setup Assistant [197] disabling system-wide CPU Throttling

May 22 20:02:52 process WindowServer[90] caught causing excessive wakeups. Observed wakeups rate (per sec): 160; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 115199

May 24 10:21:07 jnl: disk3: replay_journal: from: 66073088 to: 67255296 (joffset 0x1d1c000)

May 24 10:21:08 jnl: disk3: journal replay done.

May 25 20:06:05 process kav[80] caught causing excessive wakeups. Observed wakeups rate (per sec): 213; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 268406

kexts

com.kaspersky.kext.klif

com.kaspersky.nke

launchd

/System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist

(com.apple.AirPortBaseStationAgent)

Library/LaunchAgents/com.apple.FolderActions.enabled.plist

(com.apple.FolderActions.enabled)

Library/LaunchAgents/com.apple.FolderActions.folders.plist

(com.apple.FolderActions.folders)

Bundles

/System/Library/Extensions/EPSONUSBPrintClass.kext

(com.epson.print.kext.USBPrintClass)

/System/Library/Extensions/Seagate Storage Driver.kext

(com.seagate.driver.PowSecDriverCore)

/Library/Extensions/klif.kext

(com.kaspersky.kext.klif)

/Library/Extensions/klnke.kext

(com.kaspersky.nke)

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

(com.adobe.acrobat.pdfviewer)

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

(com.adobe.acrobat.pdfviewerNPAPI)

/Library/Internet Plug-Ins/CouponPrinter-FireFox_v2.plugin

(com.coupons.plugin.mozilla-plugin)

/Library/Internet Plug-Ins/CouponPrinter-Safari.webplugin

(com.coupons.plugin.safari-plugin)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/Silverlight.plugin

(com.microsoft.SilverlightPlugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

Library/Internet Plug-Ins/npBcsMcTcIO.plugin

(org.mozilla.basicPlugin)

Library/Services/ClipboardMgr.app

(com.apple.automator.ClipboardMgr)

Library/Services/Text2Audio.app

(com.apple.automator.Text2Audio)

Library/Services/writereviewelements.workflow

(N/A)

Bad plists

Library/Preferences/com.solidstatenetworks.awkhost.plist

Firewall: On

Restricted files: 317

Safari extensions

Ghostery

DoNotTrackMe- Online Privacy Protection

Elapsed time (s): 187

Linc Davis

Level 10

209,547 points

May 25, 2014 6:07 PM in response to iDeBb

How did you try to remove Kaspersky?

iDeBb Author

Level 1

8 points

May 26, 2014 9:05 AM in response to Linc Davis

I followed these instructions:

http://support.kaspersky.com/us/9941

Linc Davis

Level 10

209,547 points

May 26, 2014 9:29 AM in response to iDeBb

I can't get that page to load, so I don't know what's on it, but it's not the same one I linked to in my earlier comment. I've had no complaints that those instructions don't work.

May 26, 2014 9:33 AM in response to Linc Davis

His link worked perfectly fine for me.

iDeBb Author

Level 1

8 points

May 26, 2014 10:22 AM in response to Linc Davis

It is a link to the Kaspersky site where download instructions exist for the actual software I was using (different from the product you referenced in your link).

There is an uninstaller that has to be downloaded first, then executed, in order to remove the product. This is a link to the second page of instructions:

http://support.kaspersky.com/us/9941#block0

Linc Davis

Level 10

209,547 points

May 26, 2014 10:28 AM in response to iDeBb

I can't tell you how to remove it completely, but removing the files below should disable it:

/Library/Extensions/klif.kext

/Library/Extensions/klnke.kext

iDeBb Author

Level 1

8 points

Jun 1, 2014 8:53 AM in response to Linc Davis

Thank you. I ran your Unix test application after deleting the files. Here are the results. I don't know why some the kaspersky files are still present.

Also, do you know anything about the bad plist, and should I be concerned about it?

Thanks.

Model Identifier: Macmini5,2

System Version: OS X 10.9.3 (13D65)

Kernel Version: Darwin 13.2.0

Boot Mode: Normal

Time since boot: 1:32

FileVault: On

Diagnostic reports

2014-05-17 Dock crash

2014-05-22 kav_agent crash

2014-05-25 kav_app hang

2014-05-26 Mail crash

2014-05-26 PluginProcess crash

2014-05-28 PluginProcess crash

Log

May 26 14:23:36 CODE SIGNING: cs_invalid_page(0x7fff97ec4000): p=250[com.apple.WebKit] final status 0x0, allowing (remove VALID) page

May 27 20:23:42 process iTunes[372] thread 5699 caught burning CPU! It used more than 50% CPU (Actual recent usage: 66%) over 180 seconds. thread lifetime cpu usage 106.142536 seconds, (83.328568 user, 22.813968 system) ledger info: balance: 90009763622 credit: 90009763622 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 135051424899

May 29 18:20:09 process com.apple.WebKit[586] thread 29426 caught burning CPU! It used more than 50% CPU (Actual recent usage: 87%) over 180 seconds. thread lifetime cpu usage 92.543983 seconds, (90.435560 user, 2.108423 system) ledger info: balance: 90019903961 credit: 90019903961 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 102458356108

May 31 10:41:59 process Canon IJ Scan Ut[302] caught causing excessive wakeups. Observed wakeups rate (per sec): 464; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45226

kexts

com.kaspersky.kext.klif

com.kaspersky.nke

launchd

/System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist

(com.apple.AirPortBaseStationAgent)

Library/LaunchAgents/com.apple.FolderActions.enabled.plist

(com.apple.FolderActions.enabled)

Library/LaunchAgents/com.apple.FolderActions.folders.plist

(com.apple.FolderActions.folders)

Bundles

/System/Library/Extensions/EPSONUSBPrintClass.kext

(com.epson.print.kext.USBPrintClass)

/System/Library/Extensions/Seagate Storage Driver.kext

(com.seagate.driver.PowSecDriverCore)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

Library/Internet Plug-Ins/npBcsMcTcIO.plugin

(org.mozilla.basicPlugin)

Library/Services/ClipboardMgr.app

(com.apple.automator.ClipboardMgr)

Library/Services/Text2Audio.app

(com.apple.automator.Text2Audio)

Library/Services/writereviewelements.workflow

(N/A)

Bad plists

Library/Preferences/com.solidstatenetworks.awkhost.plist

Restricted files: 317

Safari extensions

Ghostery

DoNotTrackMe- Online Privacy Protection

LastPass

Add To Amazon Wish List

Awesome Screenshot

Ginger

markerto

WebWatch

Open in Papers

Elapsed time (s): 155

Linc Davis

Level 10

209,547 points

Jun 1, 2014 9:56 AM in response to iDeBb

Back up all data to at least two different storage devices, if you haven't already done so. One backup is not enough to be safe. The backups can be made with Time Machine or with Disk Utility. Preferably both.

Erase and install OS X. This operation will destroy all data on the startup volume, so you had be better be sure of the backups. If you upgraded from an older version of OS X, you'll need the Apple ID and password that you used, so make a note of those before you begin.

When you restart, you'll be prompted to go through the initial setup process in Setup Assistant. That’s when you transfer the data from a backup.

Select only users and Computer & Network Settings in the Setup Assistant dialog—not Applications or Other files and folders. Don't transfer the Guest account, if it was enabled.

After that, run Software Update.

If the problem is resolved after the clean installation, reinstall third-party software selectively. I can only suggest general guidelines. Self-contained applications that install into the Applications folder by drag-and-drop or download from the App Store are usually safe. Anything that comes packaged as an installer or that prompts for an administrator password is suspect, and you must test thoroughly after reinstalling each such item to make sure you haven't restored the problem.

I strongly recommend that you never reinstall commercial "anti-virus" products or "utilities," nor any software that changes the user interface or modifies the functions of built-in applications. If you do that, the problem is likely to recur.

Before installing any software, ask yourself the question: "Am I sure I know how to uninstall this without having to wipe the volume again?" If the answer is "no," stop.

Never install any third-party software unless you know how to uninstall it.

Dec 24, 2014 2:32 AM in response to iDeBb

I FINALLY FIGURED IT OUT!!!

THIS UIMGMT POP UP WAS DRIVING ME CRAZY.

PLEASE LIKE MY POST OR SEND ME A MESSAGE LETTING ME KNOW IT HELPED YOU! :O)

OK HERE GOES:

1) GO TO SYSTEM PREFERENCES

2) CLICK USER & GROUPS

(SEE PHOTO BELOW FOR REFERENCE TO THE FOLLOWING NOTES)

3) CLICK ON "LOGIN ITEMS"

(NOW THIS PART IS VERY IMPORTANT)

IT IS HERE THAT YOU WILL SEE THE TREND MICRO START UP

(A) FIRST CLICK LOCK ON BOTTOM LEFT AND ENTER YOUR COMPUTER CODE IF NEEDED TO ALLOW CHANGES

(DONT DO THIS IT DOESN'T WORK)

NOW, I FIRST TRIED TO HIDE THE TREND MICRO START UP BY CHECKING THE BOX BUT WHEN I RESTARTED MY COMPUTER IT WAS STILL POPPING UP...

(THIS DOESN'T WORK EITHER)

THEN: I TRIED ACTUALLY SELECTED IT AND HIT THE MINUS BUTTON AND REMOVED IT, BUT AGAIN AFTER I RESTARTED,

THE UIMGMT POP UP POPPED UP AGAIN AND IT REAPPEARED IN THE SAME SPOT WHERE I DELETED IT WITH THE MINUS KEY

THEN I FIGURED IT OUT THIS WORKS!!!!!!

RIGHT CLICK IT (THE TREND MICRO START UP) AND IT WILL SAY "FIND IN FINDER" <-------CLICK THAT

THEN WHEN THE TREND MICRO FOLDERS POP UP

DELETE THEM ALL ESPECIALLY THE MAIN ONE WITH THE SUB FOLDERS AND THEN EMPTY YOUR TRASH

THEN GO BACK AND "THEN" DO STEPS 1,2,3 AND HIT MINUS KEY TO REMOVE IT BUT BE SURE TO HIT LOCK ON BOTTOM LEFT AND ENTER YOUR COMPUTER CODE IF NEEDED TO ALLOW CHANGES

NOW RESTART YOUR COMPUTER...

WHEN YOU RESTART IT, IT WON'T POP UP ANY MORE

LET ME KNOW IF THIS HELPS YOU!!!!

< Edited By Host >

ermeister

Level 2

345 points

Mar 13, 2015 10:15 AM in response to Linc Davis

HI Linc,

I'm also having the same UIMgmt message popup. I ran your test and here are the results. I appreciate your help. Thanks

Model Identifier: MacBookPro8,2

System Version: OS X 10.10.1 (14B25)

Kernel Version: Darwin 14.0.0

Boot Mode: Normal

USB

USB Receiver (Logitech Inc.)

Mass Storage (Alcor Micro, Corp.)

Diagnostic reports

2015-02-22 com.apple.WebKit.WebContent hang

2015-02-24 com.apple.WebKit.WebContent hang

2015-02-26 coreaudiod crash

2015-03-02 com.apple.WebKit.WebContent crash

2015-03-02 coreaudiod crash

2015-03-03 coreaudiod crash

Log

Mar 13 09:43:10 BUG in process suhelperd[178]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

Mar 13 09:43:10 wl0: Roamed or switched channel, reason #8, bssid 58

Mar 13 09:43:44 BUG in process suhelperd[178]: over-released legacy external boost assertions (0 total, 0 external, 0 legacy-external)

kexts

com.logmein.driver.LogMeInSoundDriver

com.silex.driver.sxuptp

Daemons

com.logmein.logmeinserver

com.microsoft.office.licensing.helper

com.logmein.raupdate

com.adobe.fpsaud

Agents

com.logmein.LMILaunchAgentFixer

com.adobe.ARM.UUID

com.hp.devicemonitor

jp.co.canon.CUPSFAX.BackGrounder

com.logmein.logmeingui

com.logmein.logmeinguiagent

com.epson.eventmanager.agent

com.seagate.SeagateStorageGauge.plist

launchd

/System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist

(com.apple.AirPortBaseStationAgent)

/System/Library/LaunchDaemons/com.apple.installer.osmessagetracing.plist

(com.apple.installer.osmessagetracing)

/System/Library/LaunchDaemons/com.apple.NetBootClientHelper.plist

(com.apple.NetBootClientHelper)

/Library/LaunchAgents/com.Affinegy.InstaLANa.plist

(com.Affinegy.InstaLANa)

/Library/LaunchAgents/com.epson.eventmanager.agent.plist

(com.epson.eventmanager.agent)

/Library/LaunchAgents/com.logmein.LMILaunchAgentFixer.plist

(com.logmein.LMILaunchAgentFixer)

/Library/LaunchAgents/com.logmein.logmeingui.plist

(com.logmein.logmeingui)

/Library/LaunchAgents/com.logmein.logmeinguiagent.plist

(com.logmein.logmeinguiagent)

/Library/LaunchAgents/com.logmein.logmeinguiagentatlogin.plist

(com.logmein.logmeinguiagentatlogin)

/Library/LaunchAgents/com.seagate.SeagateStorageGauge.plist

(com.seagate.SeagateStorageGauge.plist)

/Library/LaunchAgents/jp.co.canon.CUPSFAX.BG.plist

(jp.co.canon.CUPSFAX.BackGrounder)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.logmein.logmeinserver.plist

(com.logmein.logmeinserver)

/Library/LaunchDaemons/com.logmein.raupdate.plist

(com.logmein.raupdate)

/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

(com.microsoft.office.licensing.helper)

Library/LaunchAgents/com.adobe.ARM.UUID.plist

(com.adobe.ARM.UUID)

Startup items

/Library/StartupItems/HP IO/HP IO

/Library/StartupItems/HP IO/Resources/version.plist

/Library/StartupItems/HP IO/StartupParameters.plist

/Library/StartupItems/iCoreService/StartupParameters.plist

Bundles

/System/Library/Extensions/CanonCUPSFAXUSBClassDriver.kext

(com.canon.cups.fax.print.kext.usbprintclass)

/System/Library/Extensions/hp_Inkjet1_io_enabler.kext

(com.hp.print.hpio.Inkjet1.kext)

/System/Library/Extensions/JMicronATA.kext

(com.jmicron.JMicronATA)

/System/Library/Extensions/LogMeInSoundDriver.kext

(com.logmein.driver.LogMeInSoundDriver)

/System/Library/Extensions/Seagate Storage Driver.kext

(com.seagate.driver.PowSecDriverCore)

/System/Library/Extensions/SXUPTP.kext

(com.silex.driver.sxuptp)

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

(com.adobe.acrobat.pdfviewer)

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

(com.adobe.acrobat.pdfviewerNPAPI)

/Library/Internet Plug-Ins/CentraUpdaterPlugin.plugin

(com.centra.centraupdaterplugin)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

(net.telestream.wmv.plugin)

/Library/Internet Plug-Ins/LogMeIn.plugin

(com.logmein.remctrlplugin)

/Library/Internet Plug-Ins/LogMeIn.plugin/LogMeInPluginHost.app

(com.logmein.LogMeInPluginHost)

/Library/Internet Plug-Ins/LogMeInSafari32.plugin

(com.logmein.remctrlplugin)

/Library/Internet Plug-Ins/LogMeInSafari64.plugin

(com.logmein.remctrlplugin)

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

(com.microsoft.sharepoint.browserplugin)

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

(com.microsoft.sharepoint.webkitplugin)

/Library/Internet Plug-Ins/Silverlight.plugin

(com.microsoft.SilverlightPlugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/Spotlight/SpotlightCdmzCrawler.mdimporter

(com.csodessa.mdimporter.SpotlightCdmzCrawler)

dylibs

/usr/lib/libgutenprint.2.dylib

Bad plists

/Library/Preferences/com.epson.Epson Event Manager.UnInstallList.plist

/Library/Preferences/com.epson.Epson Scanner ICA Driver.UnInstallList.plist

/Library/Preferences/com.epson.Inkjet Printer Driver.UnInstallList.plist

/Library/Preferences/com.epson.PC-FAX Driver.UnInstallList.plist

Library/Preferences/com.solidstatenetworks.awkhost.plist

Library/Preferences/com.solidstatenetworks.host.plist

Firewall: On

Listeners

launchd: afpovertcp

launchd: microsoft-ds

kdc: kerberos

cupsd: ipp

Restricted files: 73

Elapsed time (s): 224

after upgrading to Mavericks TrendMicro UIMgmt appears at startup