Slow app launching time with Anti-virus turned on

Question

Slow app launching time with Anti-virus turned on

Spec

I'm running with latest Mac OS El Capitan in macbook pro 2015 15inch model with ATI card.

Issue

Recently i've been experiencing slow app launch time for everything. Even a pop-up window would freeze for few second (mouse hover ballon) before it respond. However, the start-up speed or app running speed is not affected at all.

Solution

I uninstalled my Kaspersky and it went back to normal again. The speed was fine so i thought this was Kaspersky's problem.

Twist!!!

Although funny thing happened when I installed Avira. Same thing came back. However i never had this before previously. It's only recently this has occurred. Can I have some help please? does this mean i can't install any anti-virus anymore?

I have included my console notes here

Process

Turn on Avira protection -> opened up a film (file route deleted for privacy concerns) and closed it -> Turned off Avira protection -> opened up a film and closed it

30/11/2015 10:56:08.113 a.m. usernoted[805]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:08.133 a.m. launchservicesd[81]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:08.135 a.m. launchservicesd[81]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:08.650 a.m. appleeventsd[55]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:09.117 a.m. tccd[855]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:09.637 a.m. Avira[2393]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:12.554 a.m. Avira[2393]: [32m[INFORMATION]2015-11-30 10:56:12: eb81e654-1be5-4d7e-b842-e5cbeee35548:16 fork auth process to switch on RTP [0m

30/11/2015 10:56:12.563 a.m. avrtp[2396]: [0m

30/11/2015 10:56:12.564 a.m. avrtp[2396]: [0m

30/11/2015 10:56:12.564 a.m. avrtp[2396]: [32m[INFORMATION]2015-11-30 10:56:12: 69db9058-8608-4431-831c-f670b4f165f2:69 auth main [0m

30/11/2015 10:56:12.564 a.m. avrtp[2396]: [32m[INFORMATION]2015-11-30 10:56:12: 69db9058-8608-4431-831c-f670b4f165f2:70 uid(501), gid(20), euid(0), egid(20), auth-key() [0m

30/11/2015 10:56:12.564 a.m. avrtp[2396]: [32m[INFORMATION]2015-11-30 10:56:12: 69db9058-8608-4431-831c-f670b4f165f2:95 switch RTP on [0m

30/11/2015 10:56:12.565 a.m. avrtp[2396]: [0m2015-11-30 10:56:12: bb76d9d7-a243-49c4-86f7-61ee1df94b00:252 sending control port command [0m

30/11/2015 10:56:13.581 a.m. launchservicesd[81]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:13.582 a.m. launchservicesd[81]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:14.074 a.m. avlogwriter[1814]: [32m[INFORMATION]2015-11-30 10:56:14: bde4d2d2-495f-40b9-b40e-9ae0d5332728:52 Got: 12 for group everyone [0m

30/11/2015 10:56:14.079 a.m. avguard.bin[1842]: Real-Time Protection has been activated.

30/11/2015 10:56:14.178 a.m. avlogwriter[1814]: [32m[INFORMATION]2015-11-30 10:56:14: bde4d2d2-495f-40b9-b40e-9ae0d5332728:52 Got: 12 for group everyone [0m

30/11/2015 10:56:14.350 a.m. AV_Scheduler[2397]: [32m[INFORMATION]2015-11-30 10:56:14: 8b7a4c51-7992-4dcc-96dd-a19fe1cca001:21 Calling Apple notify [0m

30/11/2015 10:56:14.352 a.m. usernoted[805]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:14.492 a.m. com.apple.xpc.launchd[1]: (com.avira.antivirus.telemetry_agent) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

30/11/2015 10:56:19.489 a.m. QuickLookSatellite[2012]: [10:56:19.489] <<< FFR_Common >>> FigFormatReaderCreateForStreamReturningMatchingContainerLabelType: *** Could not find format reader for URL "file:///" extension "rmvb" FileType '' MIMETYPE "(null)" SuggFileName "(null)" SuggNameExtension "(null)"

30/11/2015 10:56:19.489 a.m. QuickLookSatellite[2012]: [10:56:19.489] FigFormatReaderCreateForStreamReturningMatchingContainerLabelType signalled err=-12847 (kFigFormatReaderError_FileNotRecognized) (Unrecognized content) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.20/Prototypes /FormatHandlers/FigFormatReader_Common.c line 2158

30/11/2015 10:56:21.020 a.m. QuickLookSatellite[2012]: [10:56:21.020] <<< FFR_Common >>> FigFormatReaderCreateForStreamReturningMatchingContainerLabelType: *** Could not find format reader for URL "file:///" extension "rmvb" FileType '' MIMETYPE "(null)" SuggFileName "(null)" SuggNameExtension "(null)"

30/11/2015 10:56:21.020 a.m. QuickLookSatellite[2012]: [10:56:21.020] FigFormatReaderCreateForStreamReturningMatchingContainerLabelType signalled err=-12847 (kFigFormatReaderError_FileNotRecognized) (Unrecognized content) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.20/Prototypes /FormatHandlers/FigFormatReader_Common.c line 2158

30/11/2015 10:56:21.034 a.m. CoreServicesUIAgent[866]: Error -60005 creating authorization

30/11/2015 10:56:21.040 a.m. QuickLookUIHelper[2401]: [10:56:21.039] <<< FFR_Common >>> FigFormatReaderCreateForStreamReturningMatchingContainerLabelType: *** Could not find format reader for URL "file:///" extension "rmvb" FileType '' MIMETYPE "(null)" SuggFileName "(null)" SuggNameExtension "(null)"

30/11/2015 10:56:21.040 a.m. QuickLookUIHelper[2401]: [10:56:21.040] FigFormatReaderCreateForStreamReturningMatchingContainerLabelType signalled err=-12847 (kFigFormatReaderError_FileNotRecognized) (Unrecognized content) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.20/Prototypes /FormatHandlers/FigFormatReader_Common.c line 2158

30/11/2015 10:56:21.052 a.m. QuickLookSatellite[2012]: [10:56:21.052] <<< FFR_Common >>> FigFormatReaderCreateForStreamReturningMatchingContainerLabelType: *** Could not find format reader for URL "file:///" extension "rmvb" FileType '' MIMETYPE "(null)" SuggFileName "(null)" SuggNameExtension "(null)"

30/11/2015 10:56:21.052 a.m. QuickLookSatellite[2012]: [10:56:21.052] FigFormatReaderCreateForStreamReturningMatchingContainerLabelType signalled err=-12847 (kFigFormatReaderError_FileNotRecognized) (Unrecognized content) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.20/Prototypes /FormatHandlers/FigFormatReader_Common.c line 2158

30/11/2015 10:56:21.075 a.m. com.apple.xpc.launchd[1]: (com.apple.xpc.launchd.domain.pid.Movist.2402) Failed to bootstrap path: path = /Applications/Movist.app/Contents/Frameworks/UniversalDetector.framework/Versio ns/A/UniversalDetector, error = 20: Not a directory

30/11/2015 10:56:21.081 a.m. secinitd[2275]: assertion failed: 15B42: libxpc.dylib + 67253 [3E09C275-A33B-357A-B0AB-A2DDF88EC9D5]: 0x14

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: unbalanced enable/disable update.

30/11/2015 10:56:21.466 a.m. Movist[2402]: Backtrace (at 4908.05):

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 0 CoreGraphics 0x00007fff9afc419b CGSReenableUpdate + 200

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 1 QuickLook 0x00007fff93294a0b _Z18QLTryCatchAndCrashU13block_pointerFvvE + 17

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 2 libdispatch.dylib 0x00007fff968a38f5 _dispatch_call_block_and_release + 12

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 3 libdispatch.dylib 0x00007fff968983c3 _dispatch_client_callout + 8

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 4 libdispatch.dylib 0x00007fff9689cff3 _dispatch_queue_drain + 754

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 5 libdispatch.dylib 0x00007fff968a36bf _dispatch_queue_invoke + 549

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 6 libdispatch.dylib 0x00007fff968983c3 _dispatch_client_callout + 8

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 7 libdispatch.dylib 0x00007fff9689c253 _dispatch_root_queue_drain + 1890

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 8 libdispatch.dylib 0x00007fff9689bab8 _dispatch_worker_thread3 + 91

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 9 libsystem_pthread.dylib 0x00007fff93dfb4f2 _pthread_wqthread + 1129

30/11/2015 10:56:21.466 a.m. Movist[2402]: CGSReenableUpdate: 10 libsystem_pthread.dylib 0x00007fff93df9375 start_wqthread + 13

30/11/2015 10:56:21.532 a.m. com.apple.appkit.xpc.openAndSavePanelService[2403]: assertion failed: 15B42: libxpc.dylib + 79134 [3E09C275-A33B-357A-B0AB-A2DDF88EC9D5]: 0x89

30/11/2015 10:56:21.718 a.m. tccd[855]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:27.216 a.m. Movist[2402]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:32.993 a.m. tccd[855]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:38.521 a.m. SecurityAgent[2406]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:39.900 a.m. Avira[2393]: [32m[INFORMATION]2015-11-30 10:56:39: eb81e654-1be5-4d7e-b842-e5cbeee35548:16 fork auth process to switch off RTP [0m

30/11/2015 10:56:39.913 a.m. avrtp[2408]: [0m

30/11/2015 10:56:39.914 a.m. avrtp[2408]: [32m[INFORMATION]2015-11-30 10:56:39: 69db9058-8608-4431-831c-f670b4f165f2:69 auth main [0m

30/11/2015 10:56:39.914 a.m. avrtp[2408]: [32m[INFORMATION]2015-11-30 10:56:39: 69db9058-8608-4431-831c-f670b4f165f2:70 uid(501), gid(20), euid(0), egid(20), auth-key(494489d47b1c4935a78601000000000000000000000000000000000000000000) [0m

30/11/2015 10:56:39.917 a.m. avrtp[2408]: [32m[INFORMATION]2015-11-30 10:56:39: ef6f4cd1-93ab-48b8-87a2-710bcdcc50a5:88 Passed AuthorizationCopyRights, error is 0

[0m

30/11/2015 10:56:39.917 a.m. avrtp[2408]: [32m[INFORMATION]2015-11-30 10:56:39: 69db9058-8608-4431-831c-f670b4f165f2:95 switch RTP off [0m

30/11/2015 10:56:39.918 a.m. avrtp[2408]: [0m2015-11-30 10:56:39: bb76d9d7-a243-49c4-86f7-61ee1df94b00:252 sending control port command [0m

30/11/2015 10:56:41.172 a.m. avguard.bin[1842]: Real-Time Protection has been deactivated.

30/11/2015 10:56:41.218 a.m. avlogwriter[1814]: [32m[INFORMATION]2015-11-30 10:56:41: bde4d2d2-495f-40b9-b40e-9ae0d5332728:52 Got: 12 for group everyone [0m

30/11/2015 10:56:41.222 a.m. avlogwriter[1814]: [32m[INFORMATION]2015-11-30 10:56:41: bde4d2d2-495f-40b9-b40e-9ae0d5332728:52 Got: 12 for group everyone [0m

30/11/2015 10:56:41.513 a.m. AV_Scheduler[2410]: [32m[INFORMATION]2015-11-30 10:56:41: 8b7a4c51-7992-4dcc-96dd-a19fe1cca001:21 Calling Apple notify [0m

30/11/2015 10:56:41.515 a.m. usernoted[805]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:56:41.670 a.m. com.apple.xpc.launchd[1]: (com.avira.antivirus.telemetry_agent) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

30/11/2015 10:56:47.274 a.m. com.flexibits.fbcaldav.FBCalDAV-XPC[952]: CFNetwork SSLHandshake failed (-9824)

30/11/2015 10:56:47.275 a.m. com.flexibits.fbcaldav.FBCalDAV-XPC[952]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9824)

30/11/2015 10:57:01.990 a.m. QuickLookSatellite[2012]: [10:57:01.990] <<< FFR_Common >>> FigFormatReaderCreateForStreamReturningMatchingContainerLabelType: *** Could not find format reader for URL "file:///" extension "rmvb" FileType '' MIMETYPE "(null)" SuggFileName "(null)" SuggNameExtension "(null)"

30/11/2015 10:57:01.990 a.m. QuickLookSatellite[2012]: [10:57:01.990] FigFormatReaderCreateForStreamReturningMatchingContainerLabelType signalled err=-12847 (kFigFormatReaderError_FileNotRecognized) (Unrecognized content) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.20/Prototypes /FormatHandlers/FigFormatReader_Common.c line 2158

30/11/2015 10:57:02.051 a.m. CoreServicesUIAgent[866]: Error -60005 creating authorization

30/11/2015 10:57:02.064 a.m. com.apple.xpc.launchd[1]: (com.apple.xpc.launchd.domain.pid.Movist.2415) Failed to bootstrap path: path = /Applications/Movist.app/Contents/Frameworks/UniversalDetector.framework/Versio ns/A/UniversalDetector, error = 20: Not a directory

30/11/2015 10:57:02.069 a.m. secinitd[2275]: assertion failed: 15B42: libxpc.dylib + 67253 [3E09C275-A33B-357A-B0AB-A2DDF88EC9D5]: 0x14

30/11/2015 10:57:02.608 a.m. tccd[855]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:57:03.137 a.m. Movist[2415]: SecTaskLoadEntitlements failed error=22

30/11/2015 10:57:03.138 a.m. Movist[2415]: SecTaskLoadEntitlements failed error=22

MacBook Pro (Retina, 15-inch, Mid 2015), OS X El Capitan (10.11.1)

Posted on Nov 30, 2015 3:01 AM

Reply

Answer 1

benwiggy

Level 4

1,473 points

Nov 30, 2015 3:44 AM in response to stevenhasquestion

You will solve many problems by uninstalling AV software.

Reply

Answer 2

Nov 30, 2015 3:59 AM in response to benwiggy

Hi benwiggy

Thanks for your reply and comforting. I'm a little concerned that this only happens now not before. I've had Avira running for a long time probably since June. Nothing happened then until recently. Since i know how to open up console and see so many error messages i start to wonder if there's something wrong with me mac. Also what's weird is that this isn't just from one company but 2 AV software. I really do hope this can be solved than not to have an AV software.

Reply

Answer 3

benwiggy

Level 4

1,473 points

Nov 30, 2015 4:02 AM in response to stevenhasquestion

To expand: AV software is frequently the cause of more problems than it claims to solve or prevent. It generally offers very little beyond the security that is already part of your Mac, and these forums regularly show slowness, crashes and other troubles caused by AV software.

Reply

Answer 4

Nov 30, 2015 4:25 AM in response to stevenhasquestion

Most if not all anti-virus software has an 'on-access' feature whereby it checks each file that is 'accessed' to see if it contains malware e.g. a virus. So when you 'open' an application you are of course 'accessing' it. In fact opening an application will trigger accessing many files both in the application itself and settings files, temporary files, and possible the document you might have told that application to open.

Therefore it is unavoidable that if you have anti-virus software installed it will result in a slowdown of opening applications. Now some anti-virus software will be worse than others at this. Historically Symantec and McAfee have been notorious, however I can also remember a time when Sophos was particularly bad when you started up a virtual machine. Virtual machines allow running other operating systems at the same time and use a comparatively large file to act as the virtual hard disk for the operating system, this being typically multiple gigabytes in size cause Sophos back then to scan the entire file which took obviously a significant amount of time. Sophos fixed that issue because they better understand that type of file and that it does not need scanning that way.

So, this issue is an unavoidable side effect but some anti-virus programs may be worse than others, also the faster your Mac and especially the speed of the drive the less impact this will cause. You could try some other anti-virus programs to see if you can find one that is acceptable to you - most have free trials or similar available including Sophos which is what my company uses.

Reply

Answer 5

pinkstones

Level 5

4,228 points

Nov 30, 2015 4:36 AM in response to stevenhasquestion

stevenhasquestion wrote:

Hi benwiggy

Thanks for your reply and comforting. I'm a little concerned that this only happens now not before. I've had Avira running for a long time probably since June. Nothing happened then until recently. Since i know how to open up console and see so many error messages i start to wonder if there's something wrong with me mac. Also what's weird is that this isn't just from one company but 2 AV software. I really do hope this can be solved than not to have an AV software.

You don't need AV software. There is no virus currently in the wild that can do any damage to OS X. I used to have a PC, so I always had AV software on my computer, along with a firewall, but when I got my MacBook 4 1/2 years ago, I had to undo myself of that kind of thinking, because it was no longer necessary. Macs have built-in protection against crap that can damage it, and if you do a search through the forums, particularly in the OS sections, you'll see tons of people complaining of slowness, applications not launching correctly, files going missing.....and most of it can be attributed to third-party software, particularly, AV programs.

I get that we as computer users have been conditioned to immediately put more security than Fort Knox on our systems to protect against all manner of maladies, but Macs are not PCs, and OS X is not Windows. Those AV programs are scanning for Windows viruses, and should you, by some remarkable coincidence, get a Windows virus on your computer.....nothing is going to happen. The only time I would suggest installing an AV program is if you routinely open and send attachments to/from Windows users who don't have AV protection themselves, but only because you could be infecting them when you send them.

Reply

Answer 6

Nov 30, 2015 4:38 AM in response to John Lockwood

HI

John thanks for your reply.

I understand AV software in general would slow down inevitable as it checks the file. But if a computer is fast enough i'm guessing it would not be noticed? the issue i'm facing is that it was just as smooth as normal when i first start using it for about couple month. It's only these couple days i notice that it slowed the app launch speed. And also every prompt message i get (asking for permission) would also be slow. This ferstraights me as it seems that my computer was fully capable of running both of the AV software before but stopped to do so all the certain. This makes me worry that if it could be to do with corrupted system file rather than the AV software itself

Reply

Answer 7

Nov 30, 2015 4:41 AM in response to pinkstones

Hi Pinkstones,

thanks for replying.

Shifting away from the topic of usefulness of the AV software, do you think by any chance that it could be that i have corrupted system file or something? Because it only happend very recently.

Reply

Answer 8

Nov 30, 2015 4:43 AM in response to John Lockwood

Thanks for your time explaning!!

Do you think by any chance that this is due to i did something or the system file corrupted to have this happend all the certain? Because it was fine for a good 4 month untill recently.

Reply

Answer 9

pinkstones

Level 5

4,228 points

Nov 30, 2015 4:44 AM in response to stevenhasquestion

stevenhasquestion wrote:

Hi Pinkstones,

thanks for replying.

Shifting away from the topic of usefulness of the AV software, do you think by any chance that it could be that i have corrupted system file or something? Because it only happend very recently.

It's possible. I'd suggest running First Aid on your disk to see. Shut down the computer, then restart it, pressing Command + R right after you hear the startup chime. When the Disk Utility screen pops up, select First Aid. You can't repair the disk while the disk is being used, so that's why you have to shut it down first. Let it run, making any fixes that need to be made, and when it's over, restart the computer.

Reply

Answer 10

John Galt

Level 10

140,826 points

Nov 30, 2015 7:49 AM in response to stevenhasquestion

The symptoms you describe (occasional system unresponsiveness) are consistent with my observations during evaluation of "Avira". Uninstall it using its uninstaller, which will be found in your Mac's Utilities folder, unless you moved or deleted it.

The following files and folders will remain and will require manual removal:

~/Library/Application Support/Avira

/Library/Application Support/Avira

~/Library/Saved Application State/com.avira.uninstall.savedState

~/Library/Saved Application State/com.avira.controlcenter.savedState

/var/log/com.avira.helper.watchdox.log

Uninstall "Kaspersky". one or more of the following may apply:

http://support.kaspersky.com/7264

http://support.kaspersky.com/8366

http://support.kaspersky.com/9941

Non-Apple "anti-virus" products serve no beneficial purpose on Macs. It is not sufficient to disable them; they must be permanently and irrevocably uninstalled according to their developers' instructions to ensure they will no longer affect your Mac. Read Effective defenses against malware and other threats.

Reply

Answer 11

Nov 30, 2015 12:17 PM in response to pinkstones

Hi there,

I'm using El Capitan so there's no first aid only just a check button. And I've tried this but it didn't discover any error.

Reply

Answer 12

Nov 30, 2015 12:26 PM in response to John Galt

Hi John,

thanks for your advice! the uninstall tool was very helpful for completely uninstalling my Kaspersky. I did discover trace of Kaspersky still hanging around. many thanks for kicking that out of my macbook!

The symptom however, was not occasional. It happens every time for every app and every pop up window. Also the issue can be solved by disabling the file protect. It's whenever i switch that on it causes issues in slowing down the launch speed of the mac. and only recently this have happened. It never happened before during the first 4 month. But i do agree with you to have a complete uninstall

If you have time could you provide the link for "Effective defenses against malware and other threats." again please? it goes back to this page, is it just me?

Reply

Answer 13

Nov 30, 2015 12:29 PM in response to stevenhasquestion

Try this link.

Effective defenses against malware and other threats

Reply

Answer 14

pinkstones

Level 5

4,228 points

Nov 30, 2015 12:32 PM in response to stevenhasquestion

Can you post your EtreCheck report? Go to http://www.etresoft.com/etrecheck — download it, then run it, copying the status report to paste here. If after uninstalling the AV programs and running Disk Utility you're still experiencing slowness, maybe there's something else going on, and if there is, it'll show up in the report.

Reply

Answer 15

John Galt

Level 10

140,826 points

Nov 30, 2015 12:35 PM in response to stedman1

Thanks stedman1. I probably did something wrong. This site has been giving me some trouble today.

Reply