Ronof9
Level 1 (4 points)
Notebooks

Q: Mac Air Mid 2011 1.7 core i5 Crashing Restarting a lot

Have had Power issues with Air for a long time, gone through about 10 magsafes and Battery lasts no time at all.

Recently a lot of crashes/restarts been happening, the old spinning wheel etc.

Uninstalled the sophos anti-virus yesterday to speed things up and below is EtreCheck report.

Would really appreciate any advice on how to improve things.

I did have issues with Logitech Media Server hogging resources but cannot get it to work since El capitan.

Cheers

 

EtreCheck version: 2.6.3 (223)

Report generated 17/11/2015, 09:14

Runtime 1:51

Download EtreCheck from http://etresoft.com/etrecheck

 

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

 

Hardware Information: (What does this mean?)

    MacBook Air (13-inch, Mid 2011)

    [Click for Technical Specifications]

    [Click for User Guide]

    MacBook Air - model: MacBookAir4,2

    1 1.7 GHz Intel Core i5 CPU: 2-core

    4 GB RAM Not upgradeable

            BANK 0/DIMM0

            2 GB DDR3 1333 MHz ok

        BANK 1/DIMM0

            2 GB DDR3 1333 MHz ok

    Bluetooth: Old - Handoff/Airdrop2 not supported

    Wireless:  en0: 802.11 a/b/g/n

    Battery: Health = Normal - Cycle count = 1034 - SN = D86203403U0DKRNA6

 

Video Information: (What does this mean?)

    Intel HD Graphics 3000

        Color LCD 1440 x 900

 

System Software: (What does this mean?)

    OS X El Capitan 10.11.1 (15B42) - Time since boot: less than an hour

 

Disk Information: (What does this mean?)

    APPLE SSD SM256C disk0 : (251 GB) (Solid State - TRIM: Yes)

        EFI (disk0s1) <not mounted> : 210 MB

        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB

        Macintosh HD (disk1) / : 249.77 GB (104.39 GB free)

            Core Storage: disk0s2 250.14 GB Online

 

USB Information: (What does this mean?)

    Apple Inc. FaceTime Camera (Built-in)

    Apple Inc. Apple Internal Keyboard / Trackpad

    Apple Inc. BRCM20702 Hub

        Apple Inc. Bluetooth USB Host Controller

    Apple Card Reader

 

Thunderbolt Information: (What does this mean?)

    Apple Inc. thunderbolt_bus

 

Gatekeeper: (What does this mean?)

    Anywhere

 

Kernel Extensions: (What does this mean?)

        /Applications/Toast 11 Titanium/Spin Doctor.app

    [not loaded]    com.hzsystems.terminus.driver (4) [Click for support]

 

        /Incompatible Software/Parallels Service.app

    [not loaded]    com.parallels.kext.prl_hid_hook (7.0 15107.796624) [Click for support]

    [not loaded]    com.parallels.kext.prl_hypervisor (7.0 15107.796624) [Click for support]

    [not loaded]    com.parallels.kext.prl_netbridge (7.0 15107.796624) [Click for support]

    [not loaded]    com.parallels.kext.prl_usb_connect (7.0 15107.796624) [Click for support]

    [not loaded]    com.parallels.kext.prl_vnic (7.0 15107.796624) [Click for support]

 

        /Library/StartupItems/ArcanaStartupSound/Resources

    [not loaded]    arcana.PRAM (6.1) [Click for support]

 

        /System/Library/Extensions

    [not loaded]    com.paceap.kext.PACESupport (5.4.1) [Click for support]

    [not loaded]    com.paceap.kext.PACESupport2 (5.4.1) [Click for support]

    [loaded]    com.rim.driver.BlackBerryUSBDriverInt (0.0.64) [Click for support]

    [not loaded]    com.roxio.BluRaySupport (1.1.6) [Click for support]

    [not loaded]    com.wdc.driver.IOFireWireWDHID (1.1.2) [Click for support]

 

        ~/Library/Services/ToastIt.service/Contents/MacOS

    [not loaded]    com.roxio.TDIXController (2.0) [Click for support]

 

Startup Items: (What does this mean?)

    ArcanaStartupSound: Path: /Library/StartupItems/ArcanaStartupSound

    Startup items are obsolete in OS X Yosemite

 

System Launch Agents: (What does this mean?)

    [killed]    com.apple.CallHistoryPluginHelper.plist

    [killed]    com.apple.CallHistorySyncHelper.plist

    [killed]    com.apple.Maps.pushdaemon.plist

    [killed]    com.apple.SafariCloudHistoryPushAgent.plist

    [killed]    com.apple.coreservices.appleid.authentication.plist

    [killed]    com.apple.icloud.fmfd.plist

    [killed]    com.apple.reversetemplated.plist

    [killed]    com.apple.scopedbookmarkagent.xpc.plist

    [killed]    com.apple.spindump_agent.plist

    [killed]    com.apple.spotlight.IndexAgent.plist

    10 processes killed due to insufficient RAM

 

System Launch Daemons: (What does this mean?)

    [killed]    com.apple.audio.systemsoundserverd.plist

    [killed]    com.apple.awdd.plist

    [killed]    com.apple.ifdreader.plist

    [killed]    com.apple.nsurlsessiond.plist

    [killed]    com.apple.softwareupdated.plist

    [killed]    com.apple.tccd.system.plist

    [killed]    com.apple.wdhelper.plist

    [killed]    com.apple.xpc.smd.plist

    8 processes killed due to insufficient RAM

 

Launch Agents: (What does this mean?)

    [loaded]    com.google.keystone.agent.plist [Click for support]

    [loaded]    com.hp.help.tocgenerator.plist [Click for support]

    [loaded]    com.oracle.java.Java-Updater.plist [Click for support]

    [running]    com.trusteer.rapport.rapportd.plist [Click for support]

 

Launch Daemons: (What does this mean?)

    [loaded]    com.adobe.fpsaud.plist [Click for support]

    [loaded]    com.google.keystone.daemon.plist [Click for support]

    [loaded]    com.macpaw.CleanMyMac3.Agent.plist [Click for support]

    [loaded]    com.malwarebytes.MBAMHelperTool.plist [Click for support]

    [loaded]    com.microsoft.office.licensing.helper.plist [Click for support]

    [loaded]    com.oracle.java.Helper-Tool.plist [Click for support]

    [running]    com.trusteer.rooks.rooksd.plist [Click for support]

 

User Launch Agents: (What does this mean?)

    [loaded]    com.adobe.ARM.[...].plist [Click for support]

    [loaded]    com.macpaw.CleanMyMac3.Scheduler.plist [Click for support]

    [running]    com.spotify.webhelper.plist [Click for support]

    [failed]    com.wondershare.mobilegodaemon.plist [Click for support]

 

User Login Items: (What does this mean?)

    iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

    CleanMyMac 3 Menu    Application  (/Applications/CleanMyMac 3.app/Contents/MacOS/CleanMyMac 3 Menu.app)

 

Other Apps: (What does this mean?)

    [running]    com.apple.xpc.launchd.oneshot.0x10000005.EtreCheck

    [running]    com.evernote.EvernoteHelper

    [running]    com.macpaw.CleanMyMac3.Menu.22752

 

Internet Plug-ins: (What does this mean?)

    MeetingJoinPlugin: Version: Unknown - SDK 10.6 [Click for support]

    Default Browser: Version: 601 - SDK 10.11

    AdobePDFViewerNPAPI: Version: 11.0.13 - SDK 10.6 [Click for support]

    FlashPlayer-10.6: Version: 19.0.0.245 - SDK 10.6 [Click for support]

    Silverlight: Version: 5.1.10411.0 - SDK 10.6 [Click for support]

    AmazonMP3DownloaderPlugin101749: Version: Unknown

    QuickTime Plugin: Version: 7.7.3

    Flash Player: Version: 19.0.0.245 - SDK 10.6 [Click for support]

    iPhotoPhotocast: Version: 7.0

    SharePointBrowserPlugin: Version: 14.4.7 - SDK 10.6 [Click for support]

    AdobePDFViewer: Version: 11.0.13 - SDK 10.6 [Click for support]

    JavaAppletPlugin: Version: Java 8 Update 65 build 17 Check version

 

Safari Extensions: (What does this mean?)

    Add To Amazon Wish List

    AddThis

    Evernote Web Clipper

    Pin It Button

 

3rd Party Preference Panes: (What does this mean?)

    Flash Player  [Click for support]

    Java  [Click for support]

    MenuMeters  [Click for support]

    Perian  [Click for support]

    ArcanaStartupSound  [Click for support]

    Trusteer Endpoint Protection  [Click for support]

 

Time Machine: (What does this mean?)

    Auto backup: YES

    Volumes being backed up:

        Macintosh HD: Disk size: 249.77 GB Disk used: 145.38 GB

    Destinations:

        Backup [Local]

        Total size: 500.11 GB

        Total number of backups: 3

        Oldest backup: 19/03/2015, 16:19

        Last backup: 27/10/2015, 13:45

        Size of backup disk: Adequate

            Backup size 500.11 GB > (Disk used 145.38 GB X 3)

 

Top Processes by CPU: (What does this mean?)

       101%    mdworker(16)

        42%    com.apple.ICPPhotoStreamLibraryService

         5%    WindowServer

         4%    mds_stores

         4%    mds

 

Top Processes by Memory: (What does this mean?)

    493 MB    kernel_task

    336 MB    mdworker(16)

    209 MB    com.apple.WebKit.WebContent(2)

    119 MB    Safari

    102 MB    Finder

 

Virtual Memory Information: (What does this mean?)

    89 MB    Free RAM

    3.91 GB    Used RAM (732 MB Cached)

    168 MB    Swap Used

 

Diagnostics Information: (What does this mean?)

    Nov 17, 2015, 08:56:25 AM    Self test - passed

    Nov 16, 2015, 04:32:00 PM    /Library/Logs/DiagnosticReports/rapportd_2015-11-16-163200_[redacted].cpu_resou rce.diag [Click for details]

    Nov 14, 2015, 07:39:07 PM    /Library/Logs/DiagnosticReports/SophosWebIntelligence_2015-11-14-193907_[redact ed].crash

    Nov 13, 2015, 06:43:48 PM    /Library/Logs/DiagnosticReports/Kernel_2015-11-13-184348_[redacted].panic [Click for details]

    Nov 13, 2015, 06:40:54 PM    /Library/Logs/DiagnosticReports/Kernel_2015-11-13-184054_[redacted].panic [Click for details]

MacBook Air (13-inch Mid 2011), OS X El Capitan (10.11.1)

Posted on Nov 17, 2015 2:07 AM

Close
Ronof9

Q: Mac Air Mid 2011 1.7 core i5 Crashing Restarting a lot

  • All replies
  • Helpful answers

  • by OGELTHORPE,Helpful

    OGELTHORPE OGELTHORPE Nov 17, 2015 12:59 PM in response to Ronof9
    Level 9 (52,776 points)
    Mac OS X
    Nov 17, 2015 12:59 PM in response to Ronof9

    If you no longer have a Blackberry, get rid of all RIM files.

     

    Rid the MBA of Trusteer.

     

    Rid the MBA of CleanMyMac3.

     

    Go to the developers websites and use their uninstall instructions.

     

    You post suggests that your MBA experience kernel panics. If so, log and post it per these instructions:

     

    https://support.apple.com/en-us/HT201753

     

    Ciao.

  • by John Galt,Helpful

    John Galt John Galt Nov 17, 2015 12:59 PM in response to Ronof9
    Level 9 (50,404 points)
    Mac OS X
    Nov 17, 2015 12:59 PM in response to Ronof9

    Review your Gatekeeper settings: OS X : About Gatekeeper - Apple Support. Gatekeeper is designed to help prevent you from inadvertently installing garbage software, and it has been disabled on that Mac.

     

    It is unreasonable to expect a Mac to operate properly after garbage "cleaning" and "anti-virus" software has been installed and used. The result has been to crash your Mac, as shown in that report.

     

    "Sophos" has been known to cause battery depletion, but if you are certain it has been properly removed it should no longer be a factor.

     

    To uninstall "Trusteer" read http://www.trusteer.com/support/uninstalling-rapport-mac-os-x

     

    As far as I have been able to determine, uninstalling "Trusteer" will effectively render its effects inert, but the same cannot be said for "CleanMyMac". Not only are its uninstallation instructions incomplete, reversing the effects of actually having used it may require erasing the Mac and reconfiguring it. How would you like to proceed?

  • by Linc Davis,

    Linc Davis Linc Davis Nov 17, 2015 1:19 PM in response to Ronof9
    Level 10 (208,037 points)
    Applications
    Nov 17, 2015 1:19 PM in response to Ronof9
    Uninstalled the sophos anti-virus

    Have there been any crashes since then?

  • by Ronof9,

    Ronof9 Ronof9 Nov 17, 2015 1:32 PM in response to Linc Davis
    Level 1 (4 points)
    Notebooks
    Nov 17, 2015 1:32 PM in response to Linc Davis

    To all the replies above : Thank you for taking the time and effort.

    Truster uninstalled, Rim Files Deleted (well those I could find) as well as any Parallel files I could find.

    There was a crash after I uninstalled one of the applications as the system was looking for some file (understandable).

    I have removed several extensions and tried to repair disk permissions.

     

    Gatekeeper was set to Apple and Identified Developers, but this was changed in order to install the Logitech Media Server -

    I will change it back to the original setting.

     

    re how would I like to proceed re Cleanmymac, always thought it did more good than harm, so considering

    " reversing the effects of actually having used it may require erasing the Mac and reconfiguring it."

    I think I will just leave it there.

     

    What Next : Do I do another Etrecheck to determine the condition of the mac air as it stands now?

  • by Linc Davis,

    Linc Davis Linc Davis Nov 17, 2015 2:35 PM in response to Ronof9
    Level 10 (208,037 points)
    Applications
    Nov 17, 2015 2:35 PM in response to Ronof9

    Do I do another Etrecheck to determine the condition of the mac air as it stands now?

    No. The "etrecheck" stuff is not relevant. If you're getting kernel panics, the relevant information is in the panic reports.

    These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

    Launch the Console application in any of the following ways:

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad and start typing the name.

    In the Console window, select

              DIAGNOSTIC AND USAGE INFORMATION â–¹ System Diagnostic Reports

    (not Diagnostic and Usage Messages) from the log list on the left. If you don't see that list, select

              View â–¹ Show Log List

    from the menu bar.

    There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of reports. A panic report has a name that begins with "Kernel" and ends in ".panic". Select the most recent one. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.

    If you don't see any reports listed, but you know there was a panic, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.

    In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)

    Please don’t post other kinds of diagnostic report.

    I know the report is long, maybe several hundred lines. Please post all of it anyway.

    When you post the report, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

    If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

  • by OGELTHORPE,

    OGELTHORPE OGELTHORPE Nov 17, 2015 3:17 PM in response to Ronof9
    Level 9 (52,776 points)
    Mac OS X
    Nov 17, 2015 3:17 PM in response to Ronof9

    Ronof9 wrote:

     

    re how would I like to proceed re Cleanmymac, always thought it did more good than harm, so considering

    " reversing the effects of actually having used it may require erasing the Mac and reconfiguring it."

    I think I will just leave it there.

     

     

    I cannot endorse that, but that is your decision.

     

    In my original response, I requested that you post any kernel panic reports that you may have experienced.

     

    Follow these directions:

     

    https://support.apple.com/en-us/HT201753

     

    Ciao.

  • by Ronof9,

    Ronof9 Ronof9 Nov 17, 2015 3:34 PM in response to Linc Davis
    Level 1 (4 points)
    Notebooks
    Nov 17, 2015 3:34 PM in response to Linc Davis

    Hopefully I've got the right report, System Diagnostics Report :- pastebin link (stumbled upon in QR code option), where the "copy link" option is, I can't find ?

    http://pastebin.com/2AtEcNrE

    Cheers (am off to bed now)

  • by Ronof9,

    Ronof9 Ronof9 Nov 17, 2015 3:41 PM in response to OGELTHORPE
    Level 1 (4 points)
    Notebooks
    Nov 17, 2015 3:41 PM in response to OGELTHORPE

    Thanks, please see report (link) above.

    Cheers

  • by OGELTHORPE,

    OGELTHORPE OGELTHORPE Nov 17, 2015 3:42 PM in response to Ronof9
    Level 9 (52,776 points)
    Mac OS X
    Nov 17, 2015 3:42 PM in response to Ronof9

    Ronof9 wrote:

     

    Thanks, please see report (link) above.

    Cheers

    No link. 

     

    Ciao.

  • by Linc Davis,

    Linc Davis Linc Davis Nov 17, 2015 4:03 PM in response to Ronof9
    Level 10 (208,037 points)
    Applications
    Nov 17, 2015 4:03 PM in response to Ronof9

    That's not a panic report. If you don't have any panic reports, but you still have a problem, please advise.

  • by Ronof9,

    Ronof9 Ronof9 Nov 18, 2015 6:43 AM in response to OGELTHORPE
    Level 1 (4 points)
    Notebooks
    Nov 18, 2015 6:43 AM in response to OGELTHORPE

    There is a link, as you can see from Linc Davis reply, unfortunately it 's not  Panic report, but I can't provide a report that is not there.

    Cheers

  • by Ronof9,

    Ronof9 Ronof9 Nov 18, 2015 7:11 AM in response to Linc Davis
    Level 1 (4 points)
    Notebooks
    Nov 18, 2015 7:11 AM in response to Linc Davis

    Will advise if further problems arise, am hoping removing trusteer and sophos will help things, though I experienced power issues way before sophos arrived.

    Have not had any crashes restarts since last one mentioned in earlier post, so hopefully things are looking up.

    Safari had crashed more frequently since el capitan installed, but have removed several extensions since then which may help.


    My original issue was not being able to get Logitech Media Server working after El Capitan was installed,

    In answer to my question relating to the non-creation of the 'Squeezebox' folder in the same  ~/Library/Logs/ folder where the Kernel Panic

    Report should be I got the following reply:-


    "Yes, the installer should have created the ~/Library/Logs/Squeezebox

    folder with the appropriate permissions. For whatever reasons this still

    fails for some. But you can create that folder manually, then fix the

    permissions and try again."


    So if there is  a problem with the permissions on this /Logs/ folder since El Capitan was introduced, could this be why there is no Kernel Panic Report?

    I am going to 'manually create the squeezebox folder' and see if that solves the LMS issue, any advice on the creation of this folder appreciated.

    Cheers

  • by Linc Davis,

    Linc Davis Linc Davis Nov 18, 2015 7:29 AM in response to Ronof9
    Level 10 (208,037 points)
    Applications
    Nov 18, 2015 7:29 AM in response to Ronof9

    could this be why there is no Kernel Panic Report?

    No. Panic reports wouldn't be in that folder.

  • by Ronof9,

    Ronof9 Ronof9 Nov 18, 2015 9:23 AM in response to Linc Davis
    Level 1 (4 points)
    Notebooks
    Nov 18, 2015 9:23 AM in response to Linc Davis

    OK, One thing I've noticed there are two seperate /Library/ folders and am worried this has some significance?

    Macinitosh HD/Library                contains 68 Folder items (one of which is the Logs Folder where that single report resides)              

    Macinitosh HD/System/Library   contains 76 Folder items (no log file)


    At first glance there seems to be quite a few of the same folder names in each library.

    Cheers