Basilisk2

Q: imac won't switch off or reboot after AV file deletion

My AV software told me I had two infected files so I deleted them when I was running Maverick but since then the system has not worked properly. Worst is not being able to Repair Permissions. I repair them in DU but when I try to restart the Mac it gets stuck in a loop which can last for hours - most I left it was overnight but the wheel was still spinning in the morning.

 

Here are the unrepairable permissions:

Screen Shot 2015-08-28 at 15.15.47.png

 

The ARD entry is worrying me.

 

I have reset the PRAM, NVRAM, SMC, rebooted in Safe Mode, rebooted from the recovery disk, and in desperation upgraded to Yosemite yet the problem remains. Perhaps I really am infected with something that causes the AV program not to work anymore, makes he Fusion drive act like two separate drives, one of which being a system drive which is full, and a generally slow machine eg taking as much as 10 seconds to highlight a file in Finder.

 

I am running out of ideas and solutions... please help!

 

TIA

iMac, OS X Yosemite (10.10.5)

Posted on Aug 29, 2015 11:39 AM

Close

Q: imac won't switch off or reboot after AV file deletion

  • All replies
  • Helpful answers

  • by Allan Eckert,

    Allan Eckert Allan Eckert Aug 29, 2015 11:45 AM in response to Basilisk2
    Level 9 (53,581 points)
    Desktops
    Aug 29, 2015 11:45 AM in response to Basilisk2

    Which of the nefarious AV software packages do you have installed?

  • by Basilisk2,

    Basilisk2 Basilisk2 Aug 29, 2015 12:52 PM in response to Allan Eckert
    Level 1 (4 points)
    Mac OS X
    Aug 29, 2015 12:52 PM in response to Allan Eckert

    Avira.

  • by Barney-15E,Helpful

    Barney-15E Barney-15E Aug 29, 2015 4:44 PM in response to Basilisk2
    Level 9 (50,072 points)
    Mac OS X
    Aug 29, 2015 4:44 PM in response to Basilisk2

    The ARD entry is worrying me

    It shouldn't: Mac OS X: Disk Utility's Repair Disk Permissions messages that you can safely ignore - Apple Support

     

    What files did you delete?

  • by Basilisk2,

    Basilisk2 Basilisk2 Aug 29, 2015 5:08 PM in response to Barney-15E
    Level 1 (4 points)
    Mac OS X
    Aug 29, 2015 5:08 PM in response to Barney-15E

    I am not sure what I deleted, they had non-word names as if written in code. Impossible to remember and I didn't write the names down. However, installing Yosemite does not seem to have replaced them as I had hoped it would and whilst I can stop worrying about the Permissions (thanks for that) I still have a system with constant freezes and spinning beach balls for operations that used to be instantaneous.

  • by Barney-15E,

    Barney-15E Barney-15E Aug 29, 2015 5:24 PM in response to Basilisk2
    Level 9 (50,072 points)
    Mac OS X
    Aug 29, 2015 5:24 PM in response to Basilisk2

    Perhaps I really am infected with something that causes the AV program not to work anymore

    They pretty much don't work anyway, so I doubt that is the problem.

     

    What prompted you to Repair Disk Permissions?

     

    When you booted into Safe Mode did you try to use the Mac that way or did you just boot up in safe mode and then restart normally?

    If you used it in Safe Mode, were the symptoms still there?

     

    When it is running slow, can you take a look at both Activity Monitor and Console.

    In Activity Monitor, look at the CPU usage and Memory. See if there is anything using a lot of CPU or Memory. What color is the Memory pressure?

    When in Console, select All Messages and see if anything is repeating or indicative of something failing.

  • by Basilisk2,

    Basilisk2 Basilisk2 Aug 29, 2015 6:08 PM in response to Barney-15E
    Level 1 (4 points)
    Mac OS X
    Aug 29, 2015 6:08 PM in response to Barney-15E

    I tried to Repair Permissions in order to get the machine to work properly again; not only did it make no difference, every time I tried to do this the reboot loop began and the machine stopped loading half way through.

     

    In Safe Mode the same error was still there, to the best of my knowledge. I didn't run it for hours like that - just long enough to see the same kind of problems still existed.

     

    I'll take a look in the areas you mention. It seems to happen after some use, often on warm days, and as if the RAM gets filled up but never emptied, or the machine is switching between real RAM and virtual RAM (on the Hard Drive). The SSD part of the 3Tb fusion drive has a capacity of 1.25 Gb, of which 1.21 Gb is full. In old one disk systems when they got that full they behaved pretty much in the same way - slowly, hesitantly, and with odd problems that could not be fixed other than via making more space. I have a feeling one of the files I deleted said something about being a Device Handler or a file for controlling he memory allocation or something like that. Really can't be sure.

     

    I'm pretty sure my machine is being spied on, and I know by who as well, because they know too much about who I email and when and where I am going without me telling them... which is why I installed the AV in the first place. :-/ I wanted to see if there was a key logger or other spyware on board.

     

    The main problem now though is the memory swapping (if that is the problem) or the inability to cycle off or on properly without needing a 5 sec hard reboot...

  • by Barney-15E,Helpful

    Barney-15E Barney-15E Aug 29, 2015 6:21 PM in response to Basilisk2
    Level 9 (50,072 points)
    Mac OS X
    Aug 29, 2015 6:21 PM in response to Basilisk2

    AV software isn't capable of detecting key loggers.

    However, if that is what you think is going on, you need to erase the drive completely and reinstall the OS. Make a backup so you can access your data files afterwards, but don't migrate them or restore from the backup.

     

    Can you boot to Internet Recovery?

  • by Basilisk2,

    Basilisk2 Basilisk2 Aug 30, 2015 5:55 PM in response to Barney-15E
    Level 1 (4 points)
    Mac OS X
    Aug 30, 2015 5:55 PM in response to Barney-15E

    Where do I find Internet Recovery and what if the internet is flaky too? Mine seems to have to reconnect every so often...

  • by Barney-15E,

    Barney-15E Barney-15E Aug 30, 2015 7:03 PM in response to Basilisk2
    Level 9 (50,072 points)
    Mac OS X
    Aug 30, 2015 7:03 PM in response to Basilisk2

    Hold down Cmd-Opt-R on restart:  https://support.apple.com/en-us/HT201314

     

    However, if your internet is slow or flakey, you may not have much success getting the installer to download correctly.

    Can you take it to a place that has a better internet connection or an Apple Store. They usually don't have a problem with you using their internet, and they may give you a hand re-installing. Best to make an appointment at the Genius bar.

  • by Basilisk2,

    Basilisk2 Basilisk2 Aug 31, 2015 5:08 AM in response to Barney-15E
    Level 1 (4 points)
    Mac OS X
    Aug 31, 2015 5:08 AM in response to Barney-15E

    Thanks Barney, you really know your stuff! :-)

     

    I am trying to avoid taking the iMac into an Apple Store due to its weight and the distance from car parking facilities, but I may have to. It doesn't help that the latest iMacs come in a not really reusable box for transport protection. Yes, the new sloped box probably costs far less money to make, but I believe it will also be the first Apple box that people won't pay for secondhand. It also didn't have that marvellous feeling of "Wow!" when I took the computer out of the box either.  And of course, this is a typical example of why shipping computers with an OS on a DVD will always be my preferred method.

     

    Behaviour update so far: Login and Logout is quicker than with Mavericks, but I still haven't managed to restart it without the boot loop tripping it up. On the weekend I wanted to take a screenshot of part of an ongoing Skype call but while the first shot was instant, the second one took ten seconds from hitting Cmd+Shift+4 to actually saving the image, which by that time had already moved on and was no longer what I wanted.

     

    I keep on thinking things point to problems with the Fusion Drive as the SSD is now effectively full, and there seems to be a lot of disk swapping going on. Add in some flakey internet/WiFi and these other inadequate responses and the machine is very frustrating to use. I've had Macs for 10 years now and this is definitely the worst hardware/software combination I've had. Tiger was a far more reliable and controllable OS; while the white iMac was my best hardware - although a Mac mini server used as a desktop at work is also very good.

     

    Sorry to write so much.

  • by Allan Eckert,

    Allan Eckert Allan Eckert Aug 31, 2015 6:05 AM in response to Basilisk2
    Level 9 (53,581 points)
    Desktops
    Aug 31, 2015 6:05 AM in response to Basilisk2

    When you make the appointment with the Apple Store, ask them if they have something you can borrow to help get it into the store.

     

    I know when I taking in my old Power Mac, I asked. They told me where I could park to unload it and had someone with dolly waiting to help me.

  • by Basilisk2,

    Basilisk2 Basilisk2 Aug 31, 2015 7:24 AM in response to Allan Eckert
    Level 1 (4 points)
    Mac OS X
    Aug 31, 2015 7:24 AM in response to Allan Eckert

    I tried marking your reply as Helpful Allan Eckart, but Safari wouldn't let me. So I tried logging out of the Apple Discussions website and the window just went white with nothing happening. I clicked on the Back arrow and came back to here. The logout page uses a .jspa script I believe. Right clicking on links also means it takes about 10 seconds to get the context menu to show. Memory handling, screen rewriting and various associated functions are really f***ed on this machine!

  • by Allan Eckert,

    Allan Eckert Allan Eckert Aug 31, 2015 8:26 AM in response to Basilisk2
    Level 9 (53,581 points)
    Desktops
    Aug 31, 2015 8:26 AM in response to Basilisk2

    Sounds like it is time to follow Barney's suggestion and take it to the Apple Store.

     

    By the way, you are only allowed to mark two posts as helpful and one as solved on these forums.