Safari Web Content Is Loaded For a Site I'm Not On

Question

Safari Web Content Is Loaded For a Site I'm Not On

Yosemite 10.10.5, Safari 8.0.8.

So my computer was running hot and has been for about a week, I move on over to Activity Monitor and find that there are not 1, but 2 identical processes of Safari Web Content that are loaded for a specific website that I don't currently have loaded. It's taking ~500MB RAM between the two processes and about 86% CPU. In other words, it's a battery killer. It's not generating any network traffic, so no clue what the heck it's doing with my precious resources....

Killing the process manually saves me for a few minutes but then this website process launches again. Closing out Safari stops it from starting again. Notably, it will start if I open Safari and just let it set without navigating to any pages.

I figured it might be an extension, but there was nothing listed. I turned off extensions anyway. No dice. I tried looking through system hidden files for anything remotely similar to the process name and can't find anything.

Edit: It does not run beneath any other browser (Chrome 45 or Firefox 40.0.3). Also to elaborate, it doesn't actually display any content whatsoever in Safari. No-Pop Ups, No Notifications, nothing.....

Edit Edit: It only runs on one particular user account that has admin rights.

Ideas on where/what it could be?

Thanks.

MacBook Pro with Retina display, OS X Yosemite (10.10.5), (13", 256GB, 16GB RAM)

Posted on Sep 3, 2015 10:47 PM

Reply

Answer 1

dominic23

Level 10

83,910 points

Sep 4, 2015 3:54 AM in response to Aaron Chamberlain

Can you run EtreCheck and post the report here please?

http://etresoft.com/etrecheck

Reply

Answer 2

Sep 4, 2015 8:52 AM in response to dominic23

Nothing quite helpful in those results if I may say. All launch agents and daemons are things I've installed very intentionally. /etc/hosts/ was Red because I have 21 entries, but that was also intentional because I'm picky about my network traffic either through LittleSnitch or through the hosts file.

EDIT: Since I knew the first run wasn't helpful I fired up Safari and ran the check with the Safari Web Content process starting.

EtreCheck version: 2.4.1 (137)

Report generated 9/4/15, 8:50 AM

Hardware Information: (What does this mean?)

MacBook Pro (Retina, 13-inch, Early 2015) (Technical Specifications)

MacBook Pro - model: MacBookPro12,1

1 2.7 GHz Intel Core i5 CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1867 MHz ok

BANK 1/DIMM0

4 GB DDR3 1867 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 40 - SN = D865171WAYQFY5GA3

Video Information: (What does this mean?)

Intel Iris Graphics 6100

Color LCD 2560 x 1600

System Software: (What does this mean?)

OS X 10.10.5 (14F27) - Time since boot: less than an hour

Disk Information: (What does this mean?)

APPLE SSD SM0256G disk0 : (251 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / : 249.78 GB (85.25 GB free)

Core Storage: disk0s2 250.14 GB Online

USB Information: (What does this mean?)

Apple Internal Memory Card Reader

Broadcom Corp. Bluetooth USB Host Controller

Mitsumi Electric Apple Optical USB Mouse

Thunderbolt Information: (What does this mean?)

Apple Inc. thunderbolt_bus

Configuration files: (What does this mean?)

/etc/hosts - Count: 21

Gatekeeper: (What does this mean?)

Mac App Store and identified developers

Kernel Extensions: (What does this mean?)

/Applications/VMware Fusion.app

[not loaded] com.vmware.kext.vmci (90.6.3) [Click for support]

[not loaded] com.vmware.kext.vmioplug.14.1.4 (14.1.4) [Click for support]

[not loaded] com.vmware.kext.vmnet (0277.92.24) [Click for support]

[not loaded] com.vmware.kext.vmx86 (0277.92.24) [Click for support]

[not loaded] com.vmware.kext.vsockets (90.6.0) [Click for support]

/Library/Extensions

[loaded] at.obdev.nke.LittleSnitch (4246 - SDK 10.8) [Click for support]

[not loaded] com.blackmagic-design.desktopvideo.iokit.driver (10.4.3 - SDK 10.9) [Click for support]

[not loaded] com.blackmagic-design.desktopvideo.iokit.framebufferdriver (10.4.3 - SDK 10.9) [Click for support]

[not loaded] com.blackmagic-design.desktopvideo.multibridge.iokit.driver (10.4.3 - SDK 10.9) [Click for support]

[not loaded] com.blackmagic-design.driver.BlackmagicIO (10.4.3 - SDK 10.9) [Click for support]

[not loaded] com.blackmagic-design.driver.BlackmagicUsbIO (10.4.3 - SDK 10.9) [Click for support]

[loaded] net.telestream.driver.TelestreamAudio (1.1.1 - SDK 10.8) [Click for support]

/Library/Extensions/DeckLink_Driver.kext/Contents/PlugIns

[not loaded] com.blackmagic-design.desktopvideo.firmware (10.4.3 - SDK 10.9) [Click for support]

Launch Agents: (What does this mean?)

[running] at.obdev.LittleSnitchUIAgent.plist [Click for support]

[not loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[running] com.adobe.AdobeCreativeCloud.plist [Click for support]

[running] com.blackmagic-design.DesktopVideoFirmwareUpdater.plist [Click for support]

[loaded] com.oracle.java.Java-Updater.plist [Click for support]

[running] com.rosettastone.rosettastonedaemon.plist [Click for support]

[loaded] org.macosforge.xquartz.startx.plist [Click for support]

Launch Daemons: (What does this mean?)

[running] at.obdev.littlesnitchd.plist [Click for support]

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.blackmagic-design.desktopvideo.XPCService.plist [Click for support]

[running] com.blackmagic-design.DesktopVideoHelper.plist [Click for support]

[running] com.blackmagic-design.streaming.BMDStreamingServer.plist [Click for support]

[loaded] com.macpaw.CleanMyMac3.Agent.plist [Click for support]

[loaded] com.oracle.java.Helper-Tool.plist [Click for support]

[loaded] com.oracle.java.JavaUpdateHelper.plist [Click for support]

[loaded] com.rogueamoeba.instanton-agent.plist [Click for support]

[loaded] org.macosforge.xquartz.privileged_startx.plist [Click for support]

[loaded] org.wireshark.ChmodBPF.plist [Click for support]

[loaded] org.wireshark.XQuartzFixer.plist [Click for support]

User Launch Agents: (What does this mean?)

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.google.keystone.agent.plist [Click for support]

[loaded] com.macpaw.CleanMyMac3.Scheduler.plist [Click for support]

[running] com.spotify.webhelper.plist [Click for support]

User Login Items: (What does this mean?)

CleanMyMac 3 Menu Application (/Applications/CleanMyMac 3.app/Contents/MacOS/CleanMyMac 3 Menu.app)

Google Drive Application (/Applications/Google Drive.app)

VMware Fusion Start Menu Application (/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)

Internet Plug-ins: (What does this mean?)

AdobeExManDetect: Version: AdobeExManDetect 1.1.0.0 - SDK 10.7 [Click for support]

FlashPlayer-10.6: Version: 18.0.0.232 - SDK 10.6 [Click for support]

AdobeAAMDetect: Version: AdobeAAMDetect 2.0.0.0 - SDK 10.7 [Click for support]

AdobePDFViewerNPAPI: Version: 11.0.0 - SDK 10.6 [Click for support]

AdobePDFViewer: Version: 11.0.0 - SDK 10.6 [Click for support]

Flash Player: Version: 18.0.0.232 - SDK 10.6 [Click for support]

Default Browser: Version: 600 - SDK 10.10

QuickTime Plugin: Version: 7.7.3

JavaAppletPlugin: Version: Java 8 Update 60 build 27 Check version

User internet Plug-ins: (What does this mean?)

CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Click for support]

3rd Party Preference Panes: (What does this mean?)

Blackmagic Desktop Video [Click for support]

Flash Player [Click for support]

Java [Click for support]

Time Machine: (What does this mean?)

Time Machine not configured!

Top Processes by CPU: (What does this mean?)

93% com.apple.WebKit.WebContent(2)

46% Safari

13% WindowServer

7% launchservicesd

2% fontd

Top Processes by Memory: (What does this mean?)

975 MB com.apple.WebKit.WebContent(2)

688 MB Google Chrome Helper(5)

663 MB kernel_task

221 MB Google Drive

213 MB Finder

Virtual Memory Information: (What does this mean?)

928 MB Free RAM

7.09 GB Used RAM (1.66 GB Cached)

0 B Swap Used

Diagnostics Information: (What does this mean?)

Sep 4, 2015, 08:50:02 AM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-04-085002_[ redacted].cpu_resource.diag [Click for details]

Sep 4, 2015, 08:40:52 AM Self test - passed

Sep 4, 2015, 08:03:27 AM /Library/Logs/DiagnosticReports/Google Drive_2015-09-04-080327_[redacted].crash

Sep 3, 2015, 11:00:13 PM /Library/Logs/DiagnosticReports/sharingd_2015-09-03-230013_[redacted].crash

Sep 3, 2015, 10:58:15 PM /Library/Logs/DiagnosticReports/Google Drive_2015-09-03-225815_[redacted].crash

Sep 3, 2015, 10:34:41 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-223441_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 10:04:38 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-220438_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 10:00:43 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-220043_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 09:54:53 PM ~/Library/Logs/DiagnosticReports/Sequel Pro_2015-09-03-215453_[redacted].crash

Sep 3, 2015, 09:53:23 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-215323_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 09:45:00 PM ~/Library/Logs/DiagnosticReports/PluginProcess_2015-09-03-214500_[redacted].cra sh

Sep 3, 2015, 09:41:16 PM ~/Library/Logs/DiagnosticReports/Sequel Pro_2015-09-03-214116_[redacted].crash

Sep 3, 2015, 09:39:57 PM ~/Library/Logs/DiagnosticReports/Sequel Pro_2015-09-03-213957_[redacted].crash

Sep 3, 2015, 09:25:09 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-212509_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 09:16:57 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-211657_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 09:15:27 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-211527_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 09:02:13 PM ~/Library/Logs/DiagnosticReports/AppNIB_2015-09-03-210213_[redacted].crash

Sep 3, 2015, 08:54:52 PM ~/Library/Logs/DiagnosticReports/AppNIB_2015-09-03-205452_[redacted].crash

Sep 3, 2015, 08:51:09 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-205109_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 08:50:16 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-205016_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 03:43:06 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-154306_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 03:24:52 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-03-152452_[ redacted].cpu_resource.diag [Click for details]

Sep 3, 2015, 12:48:46 PM /Library/Logs/DiagnosticReports/Google Drive_2015-09-03-124846_[redacted].cpu_resource.diag [Click for details]

Sep 2, 2015, 08:31:09 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-02-203109_[ redacted].cpu_resource.diag [Click for details]

Sep 2, 2015, 08:29:23 PM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-09-02-202923_[ redacted].cpu_resource.diag [Click for details]

Sep 2, 2015, 08:27:11 PM /Library/Logs/DiagnosticReports/Google Drive_2015-09-02-202711_[redacted].crash

Sep 2, 2015, 07:45:13 PM ~/Library/Logs/DiagnosticReports/AppNIB_2015-09-02-194513_[redacted].crash

Sep 2, 2015, 10:35:16 AM ~/Library/Logs/DiagnosticReports/AppNIB_2015-09-02-103516_[redacted].crash

Sep 2, 2015, 10:33:55 AM ~/Library/Logs/DiagnosticReports/AppNIB_2015-09-02-103355_[redacted].crash

Sep 2, 2015, 10:32:29 AM ~/Library/Logs/DiagnosticReports/AppNIB_2015-09-02-103229_[redacted].crash

Sep 2, 2015, 10:10:09 AM ~/Library/Logs/DiagnosticReports/AppNIB_2015-09-02-101009_[redacted].crash

Reply

Answer 3

Klaus1

Level 9

52,749 points

Sep 4, 2015 9:49 AM in response to Aaron Chamberlain

CleanMyMac could be a prime suspect. Try turning it off or deleting it. You don't need it.

Reply

Answer 4

Sep 4, 2015 10:48 AM in response to Klaus1

No I use CleanMyMac. It's actually quite handy at finding old files. It also uninstalls things quite nicely. I manage a lot of Adobe products for my work and Adobe does a horrible job at removing files with it's official "Uninstaller".

I have network traffic blocked for that app anyway and I manually update.

Anyways... I kinda resolved the issue. By blocking in /etc/hosts the website it was trying to connect the process starts every time with Safari but after a minute or less closes out, and you can clearly see that in the Web Frameworks console log, so I might just call this resolved....

I always do a clean install when a new OS comes out so it will truly be gone in a few weeks when El Capitan comes out....

Reply

Answer 5

John Galt

Level 10

141,144 points

Sep 4, 2015 11:44 AM in response to Aaron Chamberlain

Back up your Mac if you have not done so already. To learn how to use Time Machine read Mac Basics: Time Machine backs up your Mac - Apple Support.

Uninstall "CleanMyMac 3". Read below. Do not install it, or anything like it, ever again.

In addition, that Mac's Hosts file appears to have been modified. Fixing a modified Hosts file requires specific instructions. Apple Support Communities contributor and EtreCheck author etresoft recently added a User Tip discussing that concern, and how to correct it: Fixing a hacked /etc/hosts file

To remove CleanMyMac 3 itself, use its Uninstaller module, followed by these additional steps:

Remove the file ~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

To navigate to that file, copy and paste the following line into the Finder's Go menu > Go To Folder...

~/Library/LaunchAgents/

Locate the following file and drag it to the Trash:

com.macpaw.CleanMyMac3.Scheduler.plist

Then, open  (Apple menu) > System Preferences > Users & Groups > Login Items.
Select the item CleanMyMac3 Menu
Click the [—] (minus) button.
Restart your Mac.

Beware that reinstalling OS X alone will have no effect on either removing CleanMyMac or reversing the damage it is capable of inflicting upon a system. To recover from the effects of having used it to modify OS X, the additional software you require and the essential files you may need follow the applicable recovery procedure below:

If you have a backup that you created prior to using CleanMyMac, now is the time to use it. For Time Machine, boot OS X Recovery, and at the Mac OS X Utilities screen, choose Restore from Time Machine Backup. Choose a date preceding the installation of CleanMyMac.
If you do not have a backup that predates the use of CleanMyMac, create one now. To do that read Mac Basics: Time Machine backs up your Mac.
- The recovery procedure will require that you erase the Mac using OS X Recovery, and then create a new user whose contents will be empty. You will then be able to use Setup Assistant to migrate your essential documents including photos, music, work products and other essential files.
- When doing so, select only your previous User account and do not select "Applications", "Computer and Network Settings" or "Other files and folders". De-select those choices.
- Subsequent to using Setup Assistant, you will need to reinstall the essential software you may require, once again remembering to install software only from their original sources, and omitting all non-essential software.
- "Non-essential software" is a broad category that includes but is not limited to third party "cleaning", "maintenance", and "anti-virus" products.

To erase and install Yosemite read: OS X Yosemite: Erase and reinstall OS X

To migrate your essential documents read: OS X Yosemite: Transfer your info from a computer or storage device and follow the procedure under Transfer info from a Time Machine backup or other storage device.

Reply

Answer 6

Sep 4, 2015 1:03 PM in response to John Galt

Maybe you should read my posts before commenting.....

I guess I'll delete Clean My Mac but really I've never had problems with it and no one can substantiate their claims of hate for the app besides that they like doing things the non-lazy way.

BTW the Safari Web Content Process said it was specifically for http://altpress.com, it's a music news website, so nothing at all to do with CleanMyMac.

And as for clean installing I mean to say every year I completely wipe my hard drive with a 7-Pass Zero out. Then I reinstall the OS and then I reinstall apps as I need them. It's a good way to thin out all the apps I use from time to time. Important work stuff is stored on my Drobo Mini that stores only documents.

Reply