Mac Air Mid 2011 1.7 core i5 Crashing Restarting a lot

Question

Ronof9 Author

Level 1

6 points

Mac Air Mid 2011 1.7 core i5 Crashing Restarting a lot

Have had Power issues with Air for a long time, gone through about 10 magsafes and Battery lasts no time at all.

Recently a lot of crashes/restarts been happening, the old spinning wheel etc.

Uninstalled the sophos anti-virus yesterday to speed things up and below is EtreCheck report.

Would really appreciate any advice on how to improve things.

I did have issues with Logitech Media Server hogging resources but cannot get it to work since El capitan.

Cheers

EtreCheck version: 2.6.3 (223)

Report generated 17/11/2015, 09:14

Runtime 1:51

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: (What does this mean?)

MacBook Air (13-inch, Mid 2011)

[Click for Technical Specifications]

[Click for User Guide]

MacBook Air - model: MacBookAir4,2

1 1.7 GHz Intel Core i5 CPU: 2-core

4 GB RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1333 MHz ok

BANK 1/DIMM0

2 GB DDR3 1333 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 1034 - SN = D86203403U0DKRNA6

Video Information: (What does this mean?)

Intel HD Graphics 3000

Color LCD 1440 x 900

System Software: (What does this mean?)

OS X El Capitan 10.11.1 (15B42) - Time since boot: less than an hour

Disk Information: (What does this mean?)

APPLE SSD SM256C disk0 : (251 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / : 249.77 GB (104.39 GB free)

Core Storage: disk0s2 250.14 GB Online

USB Information: (What does this mean?)

Apple Inc. FaceTime Camera (Built-in)

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Card Reader

Thunderbolt Information: (What does this mean?)

Apple Inc. thunderbolt_bus

Gatekeeper: (What does this mean?)

Anywhere

Kernel Extensions: (What does this mean?)

/Applications/Toast 11 Titanium/Spin Doctor.app

[not loaded] com.hzsystems.terminus.driver (4) [Click for support]

/Incompatible Software/Parallels Service.app

[not loaded] com.parallels.kext.prl_hid_hook (7.0 15107.796624) [Click for support]

[not loaded] com.parallels.kext.prl_hypervisor (7.0 15107.796624) [Click for support]

[not loaded] com.parallels.kext.prl_netbridge (7.0 15107.796624) [Click for support]

[not loaded] com.parallels.kext.prl_usb_connect (7.0 15107.796624) [Click for support]

[not loaded] com.parallels.kext.prl_vnic (7.0 15107.796624) [Click for support]

/Library/StartupItems/ArcanaStartupSound/Resources

[not loaded] arcana.PRAM (6.1) [Click for support]

/System/Library/Extensions

[not loaded] com.paceap.kext.PACESupport (5.4.1) [Click for support]

[not loaded] com.paceap.kext.PACESupport2 (5.4.1) [Click for support]

[loaded] com.rim.driver.BlackBerryUSBDriverInt (0.0.64) [Click for support]

[not loaded] com.roxio.BluRaySupport (1.1.6) [Click for support]

[not loaded] com.wdc.driver.IOFireWireWDHID (1.1.2) [Click for support]

~/Library/Services/ToastIt.service/Contents/MacOS

[not loaded] com.roxio.TDIXController (2.0) [Click for support]

Startup Items: (What does this mean?)

ArcanaStartupSound: Path: /Library/StartupItems/ArcanaStartupSound

Startup items are obsolete in OS X Yosemite

System Launch Agents: (What does this mean?)

[killed] com.apple.CallHistoryPluginHelper.plist

[killed] com.apple.CallHistorySyncHelper.plist

[killed] com.apple.Maps.pushdaemon.plist

[killed] com.apple.SafariCloudHistoryPushAgent.plist

[killed] com.apple.coreservices.appleid.authentication.plist

[killed] com.apple.icloud.fmfd.plist

[killed] com.apple.reversetemplated.plist

[killed] com.apple.scopedbookmarkagent.xpc.plist

[killed] com.apple.spindump_agent.plist

[killed] com.apple.spotlight.IndexAgent.plist

10 processes killed due to insufficient RAM

System Launch Daemons: (What does this mean?)

[killed] com.apple.audio.systemsoundserverd.plist

[killed] com.apple.awdd.plist

[killed] com.apple.ifdreader.plist

[killed] com.apple.nsurlsessiond.plist

[killed] com.apple.softwareupdated.plist

[killed] com.apple.tccd.system.plist

[killed] com.apple.wdhelper.plist

[killed] com.apple.xpc.smd.plist

8 processes killed due to insufficient RAM

Launch Agents: (What does this mean?)

[loaded] com.google.keystone.agent.plist [Click for support]

[loaded] com.hp.help.tocgenerator.plist [Click for support]

[loaded] com.oracle.java.Java-Updater.plist [Click for support]

[running] com.trusteer.rapport.rapportd.plist [Click for support]

Launch Daemons: (What does this mean?)

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.google.keystone.daemon.plist [Click for support]

[loaded] com.macpaw.CleanMyMac3.Agent.plist [Click for support]

[loaded] com.malwarebytes.MBAMHelperTool.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[loaded] com.oracle.java.Helper-Tool.plist [Click for support]

[running] com.trusteer.rooks.rooksd.plist [Click for support]

User Launch Agents: (What does this mean?)

[loaded] com.adobe.ARM.[...].plist [Click for support]

[loaded] com.macpaw.CleanMyMac3.Scheduler.plist [Click for support]

[running] com.spotify.webhelper.plist [Click for support]

[failed] com.wondershare.mobilegodaemon.plist [Click for support]

User Login Items: (What does this mean?)

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

CleanMyMac 3 Menu Application (/Applications/CleanMyMac 3.app/Contents/MacOS/CleanMyMac 3 Menu.app)

Other Apps: (What does this mean?)

[running] com.apple.xpc.launchd.oneshot.0x10000005.EtreCheck

[running] com.evernote.EvernoteHelper

[running] com.macpaw.CleanMyMac3.Menu.22752

Internet Plug-ins: (What does this mean?)

MeetingJoinPlugin: Version: Unknown - SDK 10.6 [Click for support]

Default Browser: Version: 601 - SDK 10.11

AdobePDFViewerNPAPI: Version: 11.0.13 - SDK 10.6 [Click for support]

FlashPlayer-10.6: Version: 19.0.0.245 - SDK 10.6 [Click for support]

Silverlight: Version: 5.1.10411.0 - SDK 10.6 [Click for support]

AmazonMP3DownloaderPlugin101749: Version: Unknown

QuickTime Plugin: Version: 7.7.3

Flash Player: Version: 19.0.0.245 - SDK 10.6 [Click for support]

iPhotoPhotocast: Version: 7.0

SharePointBrowserPlugin: Version: 14.4.7 - SDK 10.6 [Click for support]

AdobePDFViewer: Version: 11.0.13 - SDK 10.6 [Click for support]

JavaAppletPlugin: Version: Java 8 Update 65 build 17 Check version

Safari Extensions: (What does this mean?)

Add To Amazon Wish List

AddThis

Evernote Web Clipper

Pin It Button

3rd Party Preference Panes: (What does this mean?)

Flash Player [Click for support]

Java [Click for support]

MenuMeters [Click for support]

Perian [Click for support]

ArcanaStartupSound [Click for support]

Trusteer Endpoint Protection [Click for support]

Time Machine: (What does this mean?)

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 249.77 GB Disk used: 145.38 GB

Destinations:

Backup [Local]

Total size: 500.11 GB

Total number of backups: 3

Oldest backup: 19/03/2015, 16:19

Last backup: 27/10/2015, 13:45

Size of backup disk: Adequate

Backup size 500.11 GB > (Disk used 145.38 GB X 3)

Top Processes by CPU: (What does this mean?)

101% mdworker(16)

42% com.apple.ICPPhotoStreamLibraryService

5% WindowServer

4% mds_stores

4% mds

Top Processes by Memory: (What does this mean?)

493 MB kernel_task

336 MB mdworker(16)

209 MB com.apple.WebKit.WebContent(2)

119 MB Safari

102 MB Finder

Virtual Memory Information: (What does this mean?)

89 MB Free RAM

3.91 GB Used RAM (732 MB Cached)

168 MB Swap Used

Diagnostics Information: (What does this mean?)

Nov 17, 2015, 08:56:25 AM Self test - passed

Nov 16, 2015, 04:32:00 PM /Library/Logs/DiagnosticReports/rapportd_2015-11-16-163200_[redacted].cpu_resou rce.diag [Click for details]

Nov 14, 2015, 07:39:07 PM /Library/Logs/DiagnosticReports/SophosWebIntelligence_2015-11-14-193907_[redact ed].crash

Nov 13, 2015, 06:43:48 PM /Library/Logs/DiagnosticReports/Kernel_2015-11-13-184348_[redacted].panic [Click for details]

Nov 13, 2015, 06:40:54 PM /Library/Logs/DiagnosticReports/Kernel_2015-11-13-184054_[redacted].panic [Click for details]

MacBook Air (13-inch Mid 2011), OS X El Capitan (10.11.1)

Posted on Nov 17, 2015 2:07 AM

Reply

Answer 1

OGELTHORPE

Level 9

57,329 points

Nov 17, 2015 12:59 PM in response to Ronof9

If you no longer have a Blackberry, get rid of all RIM files.

Rid the MBA of Trusteer.

Rid the MBA of CleanMyMac3.

Go to the developers websites and use their uninstall instructions.

You post suggests that your MBA experience kernel panics. If so, log and post it per these instructions:

https://support.apple.com/en-us/HT201753

Ciao.

Reply

Answer 2

John Galt

Level 10

156,512 points

Nov 17, 2015 12:59 PM in response to Ronof9

Review your Gatekeeper settings: OS X : About Gatekeeper - Apple Support. Gatekeeper is designed to help prevent you from inadvertently installing garbage software, and it has been disabled on that Mac.

It is unreasonable to expect a Mac to operate properly after garbage "cleaning" and "anti-virus" software has been installed and used. The result has been to crash your Mac, as shown in that report.

"Sophos" has been known to cause battery depletion, but if you are certain it has been properly removed it should no longer be a factor.

To uninstall "Trusteer" read http://www.trusteer.com/support/uninstalling-rapport-mac-os-x

As far as I have been able to determine, uninstalling "Trusteer" will effectively render its effects inert, but the same cannot be said for "CleanMyMac". Not only are its uninstallation instructions incomplete, reversing the effects of actually having used it may require erasing the Mac and reconfiguring it. How would you like to proceed?

Reply

Answer 3

Linc Davis

Level 10

209,739 points

Nov 17, 2015 1:19 PM in response to Ronof9

Uninstalled the sophos anti-virus

Have there been any crashes since then?

Reply

Answer 4

Ronof9 Author

Level 1

6 points

Nov 17, 2015 1:32 PM in response to Linc Davis

To all the replies above : Thank you for taking the time and effort.

Truster uninstalled, Rim Files Deleted (well those I could find) as well as any Parallel files I could find.

There was a crash after I uninstalled one of the applications as the system was looking for some file (understandable).

I have removed several extensions and tried to repair disk permissions.

Gatekeeper was set to Apple and Identified Developers, but this was changed in order to install the Logitech Media Server -

I will change it back to the original setting.

re how would I like to proceed re Cleanmymac, always thought it did more good than harm, so considering

" reversing the effects of actually having used it may require erasing the Mac and reconfiguring it."

I think I will just leave it there.

What Next : Do I do another Etrecheck to determine the condition of the mac air as it stands now?

Reply

Answer 5

Linc Davis

Level 10

209,739 points

Nov 17, 2015 2:35 PM in response to Ronof9

Do I do another Etrecheck to determine the condition of the mac air as it stands now?

No. The "etrecheck" stuff is not relevant. If you're getting kernel panics, the relevant information is in the panic reports.

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

In the Console window, select

DIAGNOSTIC AND USAGE INFORMATION ▹ System Diagnostic Reports

(not Diagnostic and Usage Messages) from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar.

There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of reports. A panic report has a name that begins with "Kernel" and ends in ".panic". Select the most recent one. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.

If you don't see any reports listed, but you know there was a panic, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.

In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)

Please don’t post other kinds of diagnostic report.

I know the report is long, maybe several hundred lines. Please post all of it anyway.

When you post the report, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

Reply

Answer 6

OGELTHORPE

Level 9

57,329 points

Nov 17, 2015 3:17 PM in response to Ronof9

Ronof9 wrote:

re how would I like to proceed re Cleanmymac, always thought it did more good than harm, so considering

" reversing the effects of actually having used it may require erasing the Mac and reconfiguring it."

I think I will just leave it there.

I cannot endorse that, but that is your decision.

In my original response, I requested that you post any kernel panic reports that you may have experienced.

Follow these directions:

https://support.apple.com/en-us/HT201753

Ciao.

Reply

Answer 7

Ronof9 Author

Level 1

6 points

Nov 17, 2015 3:34 PM in response to Linc Davis

Hopefully I've got the right report, System Diagnostics Report :- pastebin link (stumbled upon in QR code option), where the "copy link" option is, I can't find ?

http://pastebin.com/2AtEcNrE

Cheers (am off to bed now)

Reply

Answer 8

Ronof9 Author

Level 1

6 points

Nov 17, 2015 3:41 PM in response to OGELTHORPE

Thanks, please see report (link) above.

Cheers

Reply

Answer 9

OGELTHORPE

Level 9

57,329 points

Nov 17, 2015 3:42 PM in response to Ronof9

Ronof9 wrote:

Thanks, please see report (link) above.

Cheers

No link. 😟

Ciao.

Reply

Answer 10

Linc Davis

Level 10

209,739 points

Nov 17, 2015 4:03 PM in response to Ronof9

That's not a panic report. If you don't have any panic reports, but you still have a problem, please advise.

Reply

Answer 11

Ronof9 Author

Level 1

6 points

Nov 18, 2015 6:43 AM in response to OGELTHORPE

There is a link, as you can see from Linc Davis reply, unfortunately it 's not Panic report, but I can't provide a report that is not there.

Cheers

Reply

Answer 12

Ronof9 Author

Level 1

6 points

Nov 18, 2015 7:11 AM in response to Linc Davis

Will advise if further problems arise, am hoping removing trusteer and sophos will help things, though I experienced power issues way before sophos arrived.

Have not had any crashes restarts since last one mentioned in earlier post, so hopefully things are looking up.

Safari had crashed more frequently since el capitan installed, but have removed several extensions since then which may help.

My original issue was not being able to get Logitech Media Server working after El Capitan was installed,

In answer to my question relating to the non-creation of the 'Squeezebox' folder in the same ~/Library/Logs/ folder where the Kernel Panic

Report should be I got the following reply:-

"Yes, the installer should have created the ~/Library/Logs/Squeezebox

folder with the appropriate permissions. For whatever reasons this still

fails for some. But you can create that folder manually, then fix the

permissions and try again."

So if there is a problem with the permissions on this /Logs/ folder since El Capitan was introduced, could this be why there is no Kernel Panic Report?

I am going to 'manually create the squeezebox folder' and see if that solves the LMS issue, any advice on the creation of this folder appreciated.

Cheers

Reply

Answer 13

Linc Davis

Level 10

209,739 points

Nov 18, 2015 7:29 AM in response to Ronof9

could this be why there is no Kernel Panic Report?

No. Panic reports wouldn't be in that folder.

Reply

Answer 14

Ronof9 Author

Level 1

6 points

Nov 18, 2015 9:23 AM in response to Linc Davis

OK, One thing I've noticed there are two seperate /Library/ folders and am worried this has some significance?

Macinitosh HD/Library contains 68 Folder items (one of which is the Logs Folder where that single report resides)

Macinitosh HD/System/Library contains 76 Folder items (no log file)

At first glance there seems to be quite a few of the same folder names in each library.

Cheers

Reply