Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

My Mac 2011 version 10.7.5 is not Running Well...Help

My Mac is running oddly. Sometimes the pin-wheel takes forever. Sometimes things run really, really slow. Its intermittent. And oddly this just started happening about 3-months ago. Here is my EtreCheck results:


EtreCheck version: 2.6.4 (224)

Report generated 28/11/15 5:11 PM

Runtime 2:31

Download EtreCheck fromhttp://etresoft.com/etrecheck


Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Click the [Click to remove] links for help removing adware.


Hardware Information: (What does this mean?)

iMac (21.5-inch, Mid 2011)

[Click for Technical Specifications]

[Click for User Guide]

iMac - model: iMac12,1

1 2.5 GHz Intel Core i5 CPU: 4-core

4 GB RAM

BANK 0/DIMM0

2 GB DDR3 1333 MHz ok

BANK 1/DIMM0

2 GB DDR3 1333 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: Unknown

Video Information: (What does this mean?)

AMD Radeon HD 6750M - VRAM: 512 MB

iMac 1920 x 1080

VX2253 Series 1920 x 1080 @ 60 Hz


System Software: (What does this mean?)

OS X Lion 10.7.5 (11G63) - Time since boot: about 6 hours


Disk Information: (What does this mean?)

ST3500418AS disk0 : (500.11 GB) (Rotational)

disk0s1 (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / : 499.25 GB (298.98 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


OPTIARC DVD RW AD-5690H ()


USB Information: (What does this mean?)

Western Digital My Passport 070A 499.41 GB

disk1s1 (disk1s1) <not mounted> : 210 MB

Back-Up (disk1s2) /Volumes/Back-Up : 499.06 GB (269.54 GB free)

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. iPhone

Logitech USB Receiver

Apple Internal Memory Card Reader

Apple Computer, Inc. IR Receiver


Thunderbolt Information: (What does this mean?)

Apple, Inc. iMac


Adware: (What does this mean?)

Genieo, InstallMac Adware! [Click to remove]


Kernel Extensions: (What does this mean?)

/Applications/StrongVPN Client.app

[not loaded] net.strongvpn.tun (1.0) [Click for support]


/Library/Application Support/ESET/esets/PlugIns/kext

[not loaded] com.eset.kext.esets_kac (600.01.40f01) [Click for support]

[not loaded] com.eset.kext.esets_pfw (600.01.40f01) [Click for support]


/Library/Extensions

[loaded] foo.tap (1.0) [Click for support]

[loaded] foo.tun (1.0) [Click for support]


/System/Library/Extensions

[loaded] com.eltima.ElmediaPlayer.kext (1.0) [Click for support]

[not loaded] com.wdc.driver.1394HP (1.0.11 - SDK 10.4) [Click for support]

[not loaded] com.wdc.driver.1394_64HP (1.0.1 - SDK 10.6) [Click for support]

[loaded] com.wdc.driver.USB-64HP (1.0.3) [Click for support]

[not loaded] com.wdc.driver.USBHP (1.0.14) [Click for support]

[loaded] net.telestream.driver.TelestreamAudio (1.1.0 - SDK 10.8) [Click for support]


Startup Items: (What does this mean?)

Cocktail: Path: /Library/StartupItems/Cocktail

tap: Path: /Library/StartupItems/tap

tun: Path: /Library/StartupItems/tun

Startup items are obsolete in OS X Yosemite


System Launch Daemons: (What does this mean?)

[loaded] com.apple.devicemanager.plist- No signature!


Launch Agents: (What does this mean?)

[failed] com.brother.LOGINserver.plist [Click for support] [Click for details]

[loaded] com.divx.dms.agent.plist [Click for support]

[loaded] com.divx.update.agent.plist [Click for support]

[loaded] com.google.keystone.agent.plist [Click for support]


Launch Daemons: (What does this mean?)

[running] com.WesternDigital.WDSmartWareD.plist [Click for support]

[loaded] com.adobe.fpsaud.plist [Click for support]

[running] com.eltima.ElmediaPlayer.daemon.plist [Click for support]

[failed] com.eset.esets_daemon.plist [Click for support] [Click for details]

[loaded] com.google.keystone.daemon.plist [Click for support]

[loaded] com.maintain.HideSpotlightMenuBarIcon.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[running] com.wdc.WDDMservice.plist [Click for support]

[loaded] com.wdc.WDPrivilegedHelper.plist [Click for support]

[loaded] net.sourceforge.MonolingualHelper.plist [Click for support]


User Launch Agents: (What does this mean?)

[loaded] com.adobe.ARM.[...].plist [Click for support]

[loaded] com.genieo.completer.download.plist.eset [Click for support]

[loaded] com.genieo.completer.update.plist.eset [Click for support]

[failed] com.jdibackup.ZipCloud.autostart.plist [Click for support] [Click for details]

[failed] com.jdibackup.ZipCloud.notify.plist [Click for support] [Click for details]

[running] com.spigot.ApplicationManager.plist [Click for support]


User Login Items: (What does this mean?)

Dropbox Application (/Applications/Dropbox.app)

WDSecurityHelper Application Hidden (/Applications/WD Security.app/Contents/WDSecurityHelper.app)

K9-MacOptimizer UNKNOWN (missing value)

SpeechSynthesisServer Application (/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks /SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app)

StrongVPN Client Application (/Applications/StrongVPN Client.app)

WDDriveUtilityHelper Application (/Applications/WD Drive Utilities.app/Contents/WDDriveUtilityHelper.app)

ESET Cyber Security UNKNOWN (missing value)


Other Apps: (What does this mean?)

[running] [0x0-0x10010].com.getdropbox.dropbox

[running] [0x0-0x15015].com.strongvpn.StrongVPN-Client

[running] [0x0-0x1b01b].com.westerndigital.WDSecurityHelper

[running] [0x0-0x1c01c].com.westerndigital.WDDriveUtilityHelper

[running] [0x0-0x1e01e].jp.co.canon.cijscannerregister

[running] [0x0-0x56056].org.mozilla.firefox

[running] [0x0-0x5c05c].com.etresoft.EtreCheck


Internet Plug-ins: (What does this mean?)

DirectorShockwave: Version: 11.5.0r600 [Click for support]

o1dbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

OVSHelper: Version: 1.1 [Click for support]

OfficeLiveBrowserPlugin: Version: 12.3.0 [Click for support]

Silverlight: Version: 5.1.20125.0 - SDK 10.6 [Click for support]

FlashPlayer-10.6: Version: 19.0.0.245 - SDK 10.6 [Click for support]

DivX Web Player: Version: 3.4.1.14 - SDK 10.10 [Click for support]

Flash Player: Version: 19.0.0.245 - SDK 10.6 [Click for support]

iPhotoPhotocast: Version: 7.0 - SDK 10.8

googletalkbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

QuickTime Plugin: Version: 7.7.1

AdobePDFViewer: Version: 10.0.1 [Click for support]

SharePointBrowserPlugin: Version: 14.5.8 - SDK 10.6 [Click for support]

JavaAppletPlugin: Version: Java 7 Update 07 Check version


User internet Plug-ins: (What does this mean?)

fbplugin_1_0_3: Version: Unknown [Click for support]

RingCentralMeetings: Version: ZoomBundleVersionNumber - SDK 10.9 [Click for support]

CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Click for support]

WebEx64: Version: 1.0 - SDK 10.6 [Click for support]


Safari Extensions: (What does this mean?)

Omnibar Adware! [Click to remove]

Searchme Adware! [Click to remove]

YouTube Downloader

Slick Savings Adware! [Click to remove]

Amazon Shopping Assistant Adware! [Click to remove]

eBay Shopping Assistant Adware! [Click to remove]


3rd Party Preference Panes: (What does this mean?)

AirServer Preferences [Click for support]

Flash Player [Click for support]

Java [Click for support]

MacFUSE [Click for support]

Perian [Click for support]


Time Machine: (What does this mean?)

Time Machine not configured!


Top Processes by CPU: (What does this mean?)

5% WindowServer

3% fontd

1% firefox

0% Dropbox

0% aosnotifyd


Top Processes by Memory: (What does this mean?)

483 MB firefox

86 MB iTunes

37 MB Dropbox

33 MB WindowServer

33 MB Finder


Virtual Memory Information: (What does this mean?)

1.86 GB Free RAM

2.14 GB Used RAM

1.02 GB Swap Used


Diagnostics Information: (What does this mean?)

Nov 28, 2015, 04:59:19 PM ~/Library/Logs/DiagnosticReports/plugin-container_2015-11-28-165919_[redacted]. crash

Nov 28, 2015, 10:44:03 AM Self test - passed

iMac, Mac OS X (10.7.5)

Posted on Nov 28, 2015 1:26 AM

Reply
Question marked as Best reply

Posted on Nov 28, 2015 7:48 AM

See all the "Red" that says "Adware". That is your problem.


Specifically, Genieo. This bit of software can bring the most powerful Mac to its knees. And they are very tricky in getting people to install it, buy putting huge inviting green banner Ads that just say "Download", and if you are on a page where you expect to download something, you can click the Ad thinking you are downloading something you want. My wife, a seasoned programmer, got caught by Genieo and it made her very powerful Mac crawl.


MalwareBytes Anti-Malware (formally AdwareMedic)

<https://www.malwarebytes.org/>


And then rescan with EtreCheck and if you still have "Adware" indicated work on removing that.

12 replies
Question marked as Best reply

Nov 28, 2015 7:48 AM in response to tadbubs

See all the "Red" that says "Adware". That is your problem.


Specifically, Genieo. This bit of software can bring the most powerful Mac to its knees. And they are very tricky in getting people to install it, buy putting huge inviting green banner Ads that just say "Download", and if you are on a page where you expect to download something, you can click the Ad thinking you are downloading something you want. My wife, a seasoned programmer, got caught by Genieo and it made her very powerful Mac crawl.


MalwareBytes Anti-Malware (formally AdwareMedic)

<https://www.malwarebytes.org/>


And then rescan with EtreCheck and if you still have "Adware" indicated work on removing that.

Nov 28, 2015 1:12 PM in response to tadbubs

No. It just means you have to remove the stuff manually. MalwareBytes is a nice automated tool, but it is not essential.


Before you begin, I would suggest making sure you have a backup (or even better 2 using 2 different backup utilities to 2 different destination devices or network locations). You NEVER know what might go wrong, and it is better to be safe than sorry. Yes, when it comes to my data, I'm the paranoid type. Been playing with computers for too many years and have the scars to prove it 🙂


So for every item labeled Adware by EtreCheck, Google "os x remove xyz" or "os x uninstall xyz" until you find manual instructions. But start with Genieo as that is the most likely cause of your performance issues. Start here

<http://www.thesafemac.com/arg-genieo/>

but Genieo likes to change its stripes, so it is possible these instructions are not up-to-date, and may need to be adapted.


You may want a copy of EasyFind

<http://www.devontechnologies.com/products/freeware.html>

which will help find related files buried deep in your Mac.


NOTE: If you want to upgrade to a newer version of OS X that is fine, but I would clear up the performance issues first, if for no other reason, it may take longer to perform the upgrade with Genieo running and sucking the life out of your Mac. I would also make sure I have backups before starting any upgrade.


Then again, you are away from home. Unless this is a long term assignment, I would wait until I got home before making an operating system upgrade.

Nov 29, 2015 8:28 AM in response to tadbubs

tadbubs wrote:


Hmm, the malware file won't load. It says my version of OX is not compatible. So, I've got to purchase the higher OX, huh?


You can find an older version of Malwarebytes Anti-Malware for Mac that will run on your system here:


Download Malwarebytes Anti-Malware for Mac 1.0.2.8

<This is a Direct Download Link>


Thomas Reed

Director of Mac Offerings, Malwarebytes



I may receive some form of compensation, financial or otherwise, from my recommendation or link.


<Edited by Host>

Nov 29, 2015 9:00 PM in response to thomas_r.

THOMAS! Dude!! I'm giving you a huge buddy-hug from across the ocean. Thanks. You're cool too Bob but, Thomas delivered the defensive formation...you delivered the offensive play. Oh Yeah


Just loaded and ran the program. Here are my results:


EtreCheck version: 2.6.5 (225)

Report generated 30/11/15 12:50 PM

Runtime 1:12

Download EtreCheck from http://etrecheck.com


Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.


Hardware Information: (What does this mean?)

iMac (21.5-inch, Mid 2011)

[Click for Technical Specifications]

[Click for User Guide]

iMac - model: iMac12,1

1 2.5 GHz Intel Core i5 CPU: 4-core

4 GB RAM

BANK 0/DIMM0

2 GB DDR3 1333 MHz ok

BANK 1/DIMM0

2 GB DDR3 1333 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: Unknown

Video Information: (What does this mean?)

AMD Radeon HD 6750M - VRAM: 512 MB

iMac 1920 x 1080

VX2253 Series 1920 x 1080 @ 60 Hz


System Software: (What does this mean?)

OS X Lion 10.7.5 (11G63) - Time since boot: less than an hour


Disk Information: (What does this mean?)

ST3500418AS disk0 : (500.11 GB) (Rotational)

disk0s1 (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / : 499.25 GB (288.54 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


OPTIARC DVD RW AD-5690H ()


USB Information: (What does this mean?)

Western Digital My Passport 070A 499.41 GB

disk1s1 (disk1s1) <not mounted> : 210 MB

Back-Up (disk1s2) /Volumes/Back-Up : 499.06 GB (269.54 GB free)

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. FaceTime HD Camera (Built-in)

Logitech USB Receiver

Apple Computer, Inc. IR Receiver

Apple Internal Memory Card Reader


Thunderbolt Information: (What does this mean?)

Apple, Inc. iMac


Kernel Extensions: (What does this mean?)

/Applications/StrongVPN Client.app

[not loaded] net.strongvpn.tun (1.0) [Click for support]


/Library/Application Support/ESET/esets/PlugIns/kext

[not loaded] com.eset.kext.esets_kac (600.01.40f01) [Click for support]

[not loaded] com.eset.kext.esets_pfw (600.01.40f01) [Click for support]


/Library/Extensions

[loaded] foo.tap (1.0) [Click for support]

[loaded] foo.tun (1.0) [Click for support]


/System/Library/Extensions

[loaded] com.eltima.ElmediaPlayer.kext (1.0) [Click for support]

[not loaded] com.wdc.driver.1394HP (1.0.11 - SDK 10.4) [Click for support]

[not loaded] com.wdc.driver.1394_64HP (1.0.1 - SDK 10.6) [Click for support]

[loaded] com.wdc.driver.USB-64HP (1.0.3) [Click for support]

[not loaded] com.wdc.driver.USBHP (1.0.14) [Click for support]

[loaded] net.telestream.driver.TelestreamAudio (1.1.0 - SDK 10.8) [Click for support]


Startup Items: (What does this mean?)

Cocktail: Path: /Library/StartupItems/Cocktail

tap: Path: /Library/StartupItems/tap

tun: Path: /Library/StartupItems/tun

Startup items are obsolete in OS X Yosemite


System Launch Daemons: (What does this mean?)

[loaded] com.apple.devicemanager.plist - No signature!


Launch Agents: (What does this mean?)

[failed] com.brother.LOGINserver.plist [Click for support] [Click for details]

[loaded] com.divx.dms.agent.plist [Click for support]

[loaded] com.divx.update.agent.plist [Click for support]

[loaded] com.google.keystone.agent.plist [Click for support]


Launch Daemons: (What does this mean?)

[running] com.WesternDigital.WDSmartWareD.plist [Click for support]

[loaded] com.adobe.fpsaud.plist [Click for support]

[running] com.eltima.ElmediaPlayer.daemon.plist [Click for support]

[failed] com.eset.esets_daemon.plist [Click for support] [Click for details]

[loaded] com.google.keystone.daemon.plist [Click for support]

[loaded] com.maintain.HideSpotlightMenuBarIcon.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[running] com.wdc.WDDMservice.plist [Click for support]

[loaded] com.wdc.WDPrivilegedHelper.plist [Click for support]

[loaded] net.sourceforge.MonolingualHelper.plist [Click for support]


User Launch Agents: (What does this mean?)

[loaded] com.adobe.ARM.[...].plist [Click for support]


User Login Items: (What does this mean?)

Dropbox Application (/Applications/Dropbox.app)

WDSecurityHelper Application Hidden (/Applications/WD Security.app/Contents/WDSecurityHelper.app)

K9-MacOptimizer UNKNOWN (missing value)

SpeechSynthesisServer Application (/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks /SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app)

StrongVPN Client Application (/Applications/StrongVPN Client.app)

WDDriveUtilityHelper Application (/Applications/WD Drive Utilities.app/Contents/WDDriveUtilityHelper.app)

ESET Cyber Security UNKNOWN (missing value)


Other Apps: (What does this mean?)

[running] [0x0-0x13013].com.strongvpn.StrongVPN-Client

[running] [0x0-0x1a01a].com.westerndigital.WDSecurityHelper

[running] [0x0-0x1b01b].com.westerndigital.WDDriveUtilityHelper

[running] [0x0-0x1e01e].jp.co.canon.cijscannerregister

[running] [0x0-0x20020].org.mozilla.firefox

[running] [0x0-0x29029].com.etresoft.EtreCheck

[running] [0x0-0xd00d].com.getdropbox.dropbox


Internet Plug-ins: (What does this mean?)

DirectorShockwave: Version: 11.5.0r600 [Click for support]

o1dbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

OVSHelper: Version: 1.1 [Click for support]

OfficeLiveBrowserPlugin: Version: 12.3.0 [Click for support]

Silverlight: Version: 5.1.20125.0 - SDK 10.6 [Click for support]

FlashPlayer-10.6: Version: 19.0.0.245 - SDK 10.6 [Click for support]

DivX Web Player: Version: 3.4.1.14 - SDK 10.10 [Click for support]

Flash Player: Version: 19.0.0.245 - SDK 10.6 [Click for support]

iPhotoPhotocast: Version: 7.0 - SDK 10.8

googletalkbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

QuickTime Plugin: Version: 7.7.1

AdobePDFViewer: Version: 10.0.1 [Click for support]

SharePointBrowserPlugin: Version: 14.5.8 - SDK 10.6 [Click for support]

JavaAppletPlugin: Version: Java 7 Update 07 Check version


User internet Plug-ins: (What does this mean?)

fbplugin_1_0_3: Version: Unknown [Click for support]

RingCentralMeetings: Version: ZoomBundleVersionNumber - SDK 10.9 [Click for support]

CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Click for support]

WebEx64: Version: 1.0 - SDK 10.6 [Click for support]


Safari Extensions: (What does this mean?)

YouTube Downloader


3rd Party Preference Panes: (What does this mean?)

AirServer Preferences [Click for support]

Flash Player [Click for support]

Java [Click for support]

MacFUSE [Click for support]

Perian [Click for support]


Time Machine: (What does this mean?)

Time Machine information requires OS X 10.8 "Moutain Lion" or later.


Top Processes by CPU: (What does this mean?)

5% firefox

3% WindowServer

2% fontd

0% mdworker(2)

0% Dropbox


Top Processes by Memory: (What does this mean?)

602 MB firefox

86 MB mds

78 MB Dropbox

53 MB WindowServer

53 MB mdworker(2)


Virtual Memory Information: (What does this mean?)

1.39 GB Free RAM

2.61 GB Used RAM

0 B Swap Used


Diagnostics Information: (What does this mean?)

Nov 30, 2015, 12:31:14 PM Self test - passed

Nov 28, 2015, 04:59:19 PM ~/Library/Logs/DiagnosticReports/plugin-container_2015-11-28-165919_[redacted]. crash

Nov 30, 2015 7:22 AM in response to tadbubs

FYI:

THOMAS! Dude!! I'm giving you a huge buddy-hug from across the ocean. Thanks. You're cool too Bob but, Thomas delivered the defensive formation...you delivered the offensive play. Oh Yeah

Thomas wrote the original AdwareMedic which became MalwareBytes. Thomas has been a long time contributor to the forums and has helped a lot of users both before and after writing his adware removal tool. He is well respected for his efforts.

Dec 1, 2015 9:18 AM in response to tadbubs

Hello tadbubs,

Try to create a new user account on your machine and try it there.


I think the culprit could be the "fbplugin_1_0_3" user internet plug-in. To get to it, switch to the Finder, hold down the option key and choose "Library" from the Go menu. Then go into the "Internet Plug-ins" folder and you should find it there. Just be very careful in those hidden directories. There are no user-accessible files there. I wouldn't even say this much if there was another option.


Unfortunately, adware is always evolving. If you use an old tool, it is very likely that it will miss things. You actually got very lucky with EtreCheck. EtreCheck is based off Apple's published adware removal instructions and those are horribly out of date now. EtreCheck now misses most recent adware. The next major update of EtreCheck will actually have less-powerful adware detection capabilities. I am going to have to look for things that just "look" like adware and recommend the user run MalwareBytes if it find anything remotely fishy.

Dec 1, 2015 11:04 AM in response to tadbubs

tadbubs wrote:


Odd, I'm still getting a strange Yahoo page pop-in when I do a search within Google.

Could that be something I missed?


Possibly, but I don't see anything I'd consider suspicious in your EtreCheck report.


Next steps I'd recommend are outlined here:


https://support.malwarebytes.org/customer/portal/articles/2045704-what-should-i- do-if-malwarebytes-anti-malware-for-mac-didn-t-solve-my-problem-?b_id=9511


Note that you can always contact the Malwarebytes support team directly, through the Contact Support item in the Help menu in Malwarebytes Anti-Malware for Mac, if you think you may be infected with something we're not detecting.


Thomas Reed

Director of Mac Offerings, Malwarebytes

(I do not receive any kind of compensation for the link I have provided, other than the fact that it takes you to my employer's website.)

My Mac 2011 version 10.7.5 is not Running Well...Help

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.