Level 1

0 points

All my browsers crash constantly! Need help to keep my sanity

While browsing I continually get the pinwheel and have to force close the browser. Happens with firefox, safari, and chrome will not even launch anymore. Just sits there and bounces until it crashes. Seems to happen most when I open a new page.

It started happening out of the blue about 5 months ago. Happens probably every 20 - 30 minutes (I do keep a lot of tabs open, if that is relevant). I've tried reinstalling the browsers, different OS installs, time machine restores from when things were working, and multiple system wipes and starting from scratch..... SAME PROBLEM

MacBook Pro (15-inch, Mid 2010)

2.4 GHz Intel Core i5

8 GB 1067 MHz DDR3

Intel HD Graphics 288 MB

OSX 10.11.2

Could this be a hardware issue? Logic board failure or something of the like?

The next time I see the pinwheel, I may just chuck the thing out the window. Would greatly appreciate some help!

MacBook Pro

Posted on Jan 30, 2016 10:16 AM

64 replies

Seanothon Author

Level 1

0 points

Feb 1, 2016 10:44 AM in response to WZZZ

After following the previous steps, the issue still occurs

When I searched in console I got the following results:

1/31/16 9:37:42.000 PM kernel[0]: Process launchd [1] disabling system-wide I/O Throttling

and in system.log

Jan 30 19:55:21 Seans-MacBook-Pro kernel[0]: Process launchd [1] disabling system-wide I/O Throttling

Jan 31 10:03:11 Seans-MacBook-Pro kernel[0]: Process launchd [1] disabling system-wide I/O Throttling

Jan 31 21:37:42 Seans-MacBook-Pro kernel[0]: Process launchd [1] disabling system-wide I/O Throttling

Seanothon Author

Level 1

0 points

Feb 1, 2016 10:47 AM in response to Linc Davis

Followed all those steps but the issue is still occurring. Would chucking it out the window help any?

Linc Davis

Level 10

209,739 points

Feb 1, 2016 11:36 AM in response to Seanothon

Please repeat the test you ran earlier. I'd like to see what has changed.

Seanothon Author

Level 1

0 points

Feb 1, 2016 12:05 PM in response to Linc Davis

1 Start time: 09:50:48 02/01/16

3 Revision: 1473

5 Model Identifier: MacBookPro6,2

6 Boot ROM Version: MBP61.0057.B11

7 System Version: OS X 10.11.2 (15C50)

8 Kernel Version: Darwin 15.2.0

9 Time since boot: 2:50

11 Battery

13 Cycle Count: 1281

14 Condition: Replace Soon

16 SerialATA

18 TOSHIBA MK3255GSXF

20 Activity

22 CPU: user 17%, system 8%

23 disk0: 483 ops/s, 43212 blocks/s

25 CPU usage (%)

27 firefox (UID 501): 40.3

28 plugin-container (UID 501): 17.1

30 System errors (per sec)

32 plugin-container (UID 501, error 316): 848

33 plugin-container (UID 501, error 60): 655

34 firefox (UID 501, error 35): 154

35 firefox (UID 501, error 316): 130

37 I/O out, sampled (KiB/s)

39 kernel_task (UID 0): 1043

41 Energy impact, lifetime (relative)

43 firefox (UID 501): 70.49

44 plugin-container (UID 501): 31.72

46 Energy impact, sampled (relative)

48 firefox (UID 501): 119.22

49 plugin-container (UID 501): 16.22

50 kernel_task (UID 0): 16.11

52 CPU usage, lifetime (ms/s)

54 firefox (UID 501): 693.90

55 plugin-container (UID 501): 260.57

56 VTDecoderXPCService (UID 501): 152.10

58 CPU usage, sampled (ms/s)

60 firefox (UID 501): 1194.48

62 Memory (MB)

64 firefox (UID 501): 1206

65 plugin-container (UID 501): 1013

67 Listeners

69 kdc: kerberos

70 launchd: afpovertcp

71 launchd: microsoft-ds

73 Diagnostic reports

75 2016-01-04 firefox hang

76 2016-01-08 FinderSyncAPIExtension crash x2

77 2016-01-09 FinderSyncAPIExtension crash

78 2016-01-19 findNames crash

79 2016-01-19 firefox hang

80 2016-01-20 firefox hang x4

81 2016-01-23 firefox hang x3

82 2016-01-23 plugin-container crash x4

83 2016-01-24 plugin-container crash x2

84 2016-01-25 firefox hang

85 2016-01-25 plugin-container crash

86 2016-01-26 firefox hang

87 2016-01-26 plugin-container crash

88 2016-01-27 firefox hang

89 2016-01-27 plugin-container crash x2

90 2016-01-28 plugin-container crash

91 2016-01-29 firefox hang x2

92 2016-01-29 plugin-container crash x4

93 2016-01-30 Google Chrome crash

94 2016-01-30 Google Chrome hang x8

95 2016-01-30 Malwarebytes Anti-Malware hang x3

96 2016-01-30 plugin-container crash x3

97 2016-02-01 Google Chrome hang x2

98 2016-02-01 firefox hang x2

99 2016-02-01 plugin-container crash x2

100

101 HID errors: 18

102

103 Kernel log

104

105 Jan 30 15:00:33 Limiting closed port RST response from 576 to 250 packets per second

106 Jan 30 15:00:35 Limiting closed port RST response from 619 to 250 packets per second

107 Jan 30 15:00:37 Limiting closed port RST response from 544 to 250 packets per second

108 Jan 30 15:00:39 Limiting closed port RST response from 583 to 250 packets per second

109 Jan 30 15:00:41 Limiting closed port RST response from 603 to 250 packets per second

110 Jan 30 15:00:43 Limiting closed port RST response from 666 to 250 packets per second

111 Jan 30 15:02:38 Limiting closed port RST response from 657 to 250 packets per second

112 Jan 30 15:03:14 Limiting closed port RST response from 271 to 250 packets per second

113 Jan 30 15:04:19 Limiting closed port RST response from 257 to 250 packets per second

114 Jan 30 15:53:32 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xaa781a6f0e91b6fb, provider is 0xaa781a6f0e94bafb

115 Jan 30 19:55:21 Process launchd [1] disabling system-wide I/O Throttling

116 Jan 30 19:55:21 Process launchd [1] disabling system-wide CPU Throttling

117 Jan 30 19:56:54 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xfea408714c624267, provider is 0xfea408714c649967

118 Jan 30 20:13:36 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x5151a72e43e1a1a5, provider is 0x5151a72e43e4a2a5

119 Jan 31 08:05:50 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x4eab14a8e8129ddb, provider is 0x4eab14a8e8156cdb

120 Jan 31 10:00:33 Limiting closed port RST response from 412 to 250 packets per second

121 Jan 31 10:03:11 Process launchd [1] disabling system-wide I/O Throttling

122 Jan 31 10:03:11 Process launchd [1] disabling system-wide CPU Throttling

123 Jan 31 15:25:36 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x8527f87c75997c7f, provider is 0x8527f87c759bcd7f

124 Jan 31 16:03:57 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xe46be4e4f7189a8f, provider is 0xe46be4e4f71bb48f

125 Jan 31 21:37:42 Process launchd [1] disabling system-wide I/O Throttling

126 Jan 31 21:37:42 Process launchd [1] disabling system-wide CPU Throttling

127 Feb 1 07:01:16 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x28c38fe5ea786c7f, provider is 0x28c38fe5ea7b747f

128 Feb 1 08:20:40 Limiting closed port RST response from 358 to 250 packets per second

129 Feb 1 08:59:58 Limiting closed port RST response from 440 to 250 packets per second

130

131 System log

132

133 Feb 1 09:12:09 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

134 Feb 1 09:12:27 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

135 Feb 1 09:12:27 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

136 Feb 1 09:12:41 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

137 Feb 1 09:12:41 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

138 Feb 1 09:13:10 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

139 Feb 1 09:13:10 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

140 Feb 1 09:13:19 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

141 Feb 1 09:13:19 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

142 Feb 1 09:13:32 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

143 Feb 1 09:13:32 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

144 Feb 1 09:14:28 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

145 Feb 1 09:14:28 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

146 Feb 1 09:14:53 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

147 Feb 1 09:14:53 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

148 Feb 1 09:15:23 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

149 Feb 1 09:15:23 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

150 Feb 1 09:15:48 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

151 Feb 1 09:15:48 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

152 Feb 1 09:15:51 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

153 Feb 1 09:15:51 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

154 Feb 1 09:16:27 plugin-container: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

155 Feb 1 09:16:27 plugin-container: ava error: InitDriver call failed, call DeleteDriver ...

156 Feb 1 09:52:09 firefox: HDDec_Thread_HWSliceDecoder_SampleID: CreateGPUInterface renderer 1040008

157 Feb 1 09:52:09 firefox: ava error: InitDriver call failed, call DeleteDriver ...

158

159 launchd log

160

161 Jan 30 13:15:12 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

162 Jan 30 13:15:37 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

163 Jan 30 13:16:36 com.apple.xpc.launchd.user.domain.501.100005.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.108, error = 138: Service cannot be loaded on this hardware

164 Jan 30 13:16:36 com.apple.xpc.launchd.user.domain.501.100005.Aqua: Failed to bootstrap path: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, error = 138: Service cannot be loaded on this hardware

165 Jan 30 15:53:18 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

166 Jan 30 15:53:30 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

167 Jan 30 15:54:00 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.92, error = 138: Service cannot be loaded on this hardware

168 Jan 30 19:56:42 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

169 Jan 30 19:56:44 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

170 Jan 30 19:57:23 com.apple.xpc.launchd.user.domain.501.100008.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.92, error = 138: Service cannot be loaded on this hardware

171 Jan 30 20:13:34 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

172 Jan 30 20:13:35 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

173 Jan 30 20:14:03 com.apple.xpc.launchd.user.domain.501.100006.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.92, error = 138: Service cannot be loaded on this hardware

174 Jan 31 08:05:41 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

175 Jan 31 08:05:42 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

176 Jan 31 08:06:16 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.92, error = 138: Service cannot be loaded on this hardware

177 Jan 31 15:25:22 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

178 Jan 31 15:25:25 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

179 Jan 31 15:26:01 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.92, error = 138: Service cannot be loaded on this hardware

180 Jan 31 16:03:44 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

181 Jan 31 16:03:47 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

182 Jan 31 16:04:33 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.92, error = 138: Service cannot be loaded on this hardware

183 Feb 1 07:01:08 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

184 Feb 1 07:01:09 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

185 Feb 1 07:02:01 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: path = /System/Library/LaunchAgents/com.apple.CommCenter-osx.plist, caller = loginwindow.92, error = 138: Service cannot be loaded on this hardware

186

187 Console log

188

189 Jan 30 13:16:50 fontd: Failed to compile sql statement (87), "INSERT OR ABORT INTO font_table VALUES( NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? );"

190 Jan 30 13:16:50 fontd: Failed to compile sql statement (88), "INSERT OR ABORT INTO dir_table VALUES( NULL, ?, ?, ?, ?, ? );"

191 Jan 30 13:16:50 fontd: Failed to compile sql statement (89), "INSERT OR ABORT INTO bookmarks_table VALUES( NULL, ?, ?, ? );"

192 Jan 30 13:16:50 fontd: Failed to compile sql statement (90), "DELETE FROM font_table WHERE font_column == ?;"

193 Jan 30 13:16:50 fontd: Failed to compile sql statement (91), "DELETE FROM dir_table WHERE dir_column == ?;"

194 Jan 30 13:16:50 fontd: Failed to compile sql statement (92), "UPDATE OR ABORT font_table SET flags_column == ( flags_column & ?) | ? WHERE font_column == ?;"

195 Jan 30 13:16:50 fontd: Failed to compile sql statement (93), "UPDATE OR ABORT dir_table SET flags_column == ( flags_column & ?) | ? WHERE dir_column == ?;"

196 Jan 30 13:16:50 fontd: Failed to compile sql statement (94), "INSERT INTO name_table VALUES( ?, ?, ? );"

197 Jan 30 13:16:50 fontd: Failed to compile sql statement (95), "INSERT INTO family_table VALUES( ?, ?, ? );"

198 Jan 30 13:16:50 fontd: Failed to compile sql statement (96), "INSERT INTO subfamily_table VALUES( ?, ?, ? );"

199 Jan 30 13:16:50 fontd: Failed to compile sql statement (97), "INSERT INTO fullname_table VALUES( ?, ?, ? );"

200 Jan 30 13:16:50 fontd: Failed to compile sql statement (98), "INSERT OR REPLACE INTO traits_table VALUES( ?, ?, ?, ?, ? );"

201 Jan 30 13:16:50 fontd: Failed to compile sql statement (99), "INSERT INTO loc_names_table VALUES( ?, ?, ?, ?, ?, ?, ?, ?, ? );"

202 Jan 30 13:16:50 fontd: Failed to compile sql statement (100), "INSERT OR REPLACE INTO charset_table VALUES( NULL, ? );"

203 Jan 30 13:16:50 fontd: Failed to compile sql statement (101), "INSERT INTO unicoderanges_table VALUES( ?, ?, ?, ?, ? );"

204 Jan 30 13:16:50 fontd: Failed to compile sql statement (102), "INSERT INTO language_table VALUES( ?, ?, ? );"

205 Jan 30 13:16:50 fontd: Failed to compile sql statement (103), "INSERT INTO varaxis_table VALUES( ?, ?, ?, ?, ?, ?, ? );"

206 Jan 30 13:16:50 fontd: Failed to compile sql statement (104), "INSERT INTO varinstance_table VALUES( ?, ?, ? );"

207 Jan 30 13:16:50 fontd: Failed to compile sql statement (105), "INSERT OR REPLACE INTO lwfn_table VALUES( ?, ? );"

208 Jan 30 13:16:50 fontd: Failed to compile sql statement (106), "INSERT INTO psname_aliases_table VALUES( ?, ?, ? );"

209 Jan 30 13:16:50 fontd: Failed to compile sql statement (107), "INSERT OR REPLACE INTO format_table VALUES( ?, ? );"

210 Jan 30 13:16:50 fontd: Failed to create font store at path /var/folders/y7/tt87kvc147q72p013mj9_rj80000gn/C/com.apple.FontRegistry/fontreg istry.user, trying alternative

211 Jan 30 13:16:50 fontd: Failed to create alternative font store at path /tmp/fontregistry.user, falling back to in-memory store

212 Jan 30 13:16:51 fontd: XType - wal checkpoint: 0, -1, -1.

213 Jan 30 15:54:03 fontd: Failed to open read-only database, regenerating DB

214

215 Loaded kernel extensions

216

217 at.obdev.nke.LittleSnitch (4358)

218

219 System services loaded

220

221 at.obdev.littlesnitchd

222 com.adobe.fpsaud

223 com.apple.Kerberos.kdc

224 - status: 1

225 com.apple.logd

226 - status: 1

227 com.apple.watchdogd

228

229 System services disabled

230

231 org.openldap.slapd

232 com.apple.PasswordService

233

234 Login services loaded

235

236 at.obdev.LittleSnitchUIAgent

237 com.google.keystone.user.agent

238

239 Contents of /Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist

240 - mod date: Dec 21 14:49:22 2015

241 - size (B): 464

242 - checksum: 2014742307

243

244 <?xml version="1.0" encoding="UTF-8"?>

245 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

246 <plist version="1.0">

247 <dict>

248 <key>KeepAlive</key>

249 <true/>

250 <key>Label</key>

251 <string>at.obdev.LittleSnitchUIAgent</string>

252 <key>ProgramArguments</key>

253 <array>

254 <string>/Library/Little Snitch/Little Snitch Agent.app/Contents/MacOS/Little Snitch Agent</string>

255 </array>

256 <key>RunAtLoad</key>

257 <true/>

258 </dict>

259 </plist>

260

261 Contents of /Library/LaunchDaemons/at.obdev.littlesnitchd.plist

262 - mod date: Dec 21 14:49:21 2015

263 - size (B): 631

264 - checksum: 4174275850

265

266 <?xml version="1.0" encoding="UTF-8"?>

267 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

268 <plist version="1.0">

269 <dict>

270 <key>KeepAlive</key>

271 <true/>

272 <key>Label</key>

273 <string>at.obdev.littlesnitchd</string>

274 <key>ProgramArguments</key>

275 <array>

276 <string>/Library/Little Snitch/Little Snitch Daemon.bundle/Contents/MacOS/Little Snitch Daemon</string>

277 </array>

278 <key>RunAtLoad</key>

279 <true/>

280 <key>StandardErrorPath</key>

281 <string>/Library/Logs/LittleSnitchDaemon.log</string>

282 <key>StandardOutPath</key>

283 <string>/Library/Logs/LittleSnitchDaemon.log</string>

284 </dict>

285 </plist>

286

287 Contents of /private/etc/hosts

288 - mod date: Dec 14 14:55:34 2015

289 - size (B): 236

290 - checksum: 85078130

291

292 127.0.0.1 localhost

293 255.255.255.255 broadcasthost

294 ::1 localhost

295 fe80::1%lo0 localhost

296

297 Contents of /private/etc/ssh/ssh_config

298 - mod date: Dec 14 14:55:34 2015

299 - size (B): 1622

300 - checksum: 3773335109

301

302 Host *

303 SendEnv LANG LC_*

304

305 Contents of Library/LaunchAgents/com.google.keystone.agent.plist

306 - mod date: Dec 14 15:21:47 2015

307 - size (B): 806

308 - checksum: 322890825

309

310 <?xml version="1.0" encoding="UTF-8"?>

311 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

312 <plist version="1.0">

313 <dict>

314 <key>Label</key>

315 <string>com.google.keystone.user.agent</string>

316 <key>LimitLoadToSessionType</key>

317 <string>Aqua</string>

318 <key>ProgramArguments</key>

319 <array>

320 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.** ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

321 <string>-runMode</string>

322 <string>ifneeded</string>

323 </array>

324 <key>RunAtLoad</key>

325 <true/>

326 <key>StartInterval</key>

327 <integer>3623</integer>

328 <key>StandardErrorPath</key>

329 <string>/dev/null</string>

330 <key>StandardOutPath</key>

331 <string>/dev/null</string>

332 </dict>

333 </plist>

334

335 User login items

336

337 Google Drive

338 - /Applications/Google Drive.app

339

340 iCloud errors

341

342 comapple.CloudPhotosConfiguration 18

343 cloudphotosd 18

344 cloudd 18

345 Finder 9

346 CallHistorySyncHelper 3

347

348 Continuity errors

349

350 sharingd 10

351

352 Bad permissions: 8

353

354 Lockfiles: 6

355

356 Extensions

357

358 /Library/Extensions/LittleSnitch.kext

359 - at.obdev.nke.LittleSnitch

360 - Objective Development Software GmbH (MLZF7K7B5R)

361

362 Applications

363

364 /Applications/Keka.app

365 - com.aone.keka

366 - Jorge Garcia Armero

367 /Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app

368 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf

369 /Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

370 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo

371 /Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app

372 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf

373 /Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app

374 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia

375 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

376 - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

377 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

378 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

379 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

380 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

381 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

382 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

383 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

384 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

385

386 PrefPane

387

388 /Library/PreferencePanes/Flash Player.prefPane

389 - com.adobe.flashplayerpreferences

390

391 Bundles

392

393 /Library/Internet Plug-Ins/Flash Player.plugin

394 - com.macromedia.Flash Player.plugin

395 - Adobe Systems, Inc.

396 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/widevine cdmadapter.plugin

397 - N/A

398

399 Bundles (new)

400

401 /Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app

402 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf

403 /Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

404 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo

405 /Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app

406 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf

407 /Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app

408 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia

409 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

410 - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

411 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

412 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

413 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

414 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

415 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

416 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

417 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

418 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

419

420 Library paths

421

422 /Users/USER/Library/Application Support/Firefox/Profiles/aizi64r3.default/gmp-gmpopenh264/1.5.3/libgmpopenh264. dylib

423 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/libwidev inecdm.dylib

424

425 App extensions

426

427 com.google.GoogleDrive.FinderSyncAPIExtension

428

429 Non-loading kernel extensions

430

431 /System/Library/Extensions/AppleOSXUSBNCM.kext

432 - com.apple.driver.AppleOSXUSBNCM

433 - Software Signing

434

435 Installations

436

437 Adobe Flash Player: 1/20/16, 1:02 PM

438 Adobe Photoshop Lightroom 5.6: 1/3/16, 1:47 PM

439 Adobe Flash Player: 12/21/15, 5:35 PM

440

441 Elapsed time (sec): 667

OGELTHORPE

Level 9

57,329 points

Feb 1, 2016 12:14 PM in response to Seanothon

You probably should replace the battery in your MBP.

Ciao.

etresoft

Level 9

56,810 points

Feb 1, 2016 12:20 PM in response to Seanothon

Hello Seanothon,

Unfortunately, your EtreCheck report shows a machine with 3rd party system modifications and adware. I can't commend on any past OS reinstalls or backup restores since I don't know what was reinstalled. All I have is what is in front of me. So, even if it seems you have already done this, you may need to humour me and try it again.

My first suspicion is that Little Snitch is doing its job and interfering with your adware's activity. Your adware doesn't like it when you interfere with its primary function so it could easily just lock up. Depending on how you have Little Snitch configured, it could also be interfering with MalwareBytes too and causing that app to lockup.

But luckily, your adware is confined to your user account. You can go to System Preferences > Users & Groups and create a new user account. Then log out of your current account and into the new account. Browse the web for 20-30 minutes. Open up some tabs - a lot of tabs. See if you can reproduce the problem. If you can, then run another EtreCheck report as it may have additional data.

Then maybe try disabling or pausing Little Snitch. You don't need to install it. Little Snitch is a powerful tool. If configured too strictly, it could interfere with the normal operation of other software. People don't normally test their software in the presence of something like Little Snitch.

But if your new account works properly without either the adware or Little Snitch, then the problem is confined to your current account. Hopefully by pausing Little Snitch MalwareBytes will run and remove your adware.

A hardware fault is also a possibility. The 2.5" hard drives in those old MacBook Pros tend to fail after 2-3 years. Your hard drive is overdue. But generally, it doesn't make sense to jump to a hardware conclusion while there is active adware. Also, your EtreCheck report doesn't show any evidence of hard drive failure like a 15 minute runtime or hard disk errors. That doesn't mean the hard drive hasn't failed, it just means that isn't my first guess.

Linc Davis

Level 10

209,739 points

Feb 1, 2016 12:27 PM in response to Seanothon

You got rid of "Spigot," which is some progress, but not enough, apparently. You now have no adware.

"Little Snitch" is still running. It's not clear whether you tested without it. Merely turning it off is not a test. It has to be completely removed.

Another thing that hasn't changed is that Firefox is using excessive system resources. I suggest that you follow the instructions on this page.

You haven't remove any of the Chrome extensions, and in fact you seem to have added a new one. Please create a new Chrome user profile. Note that Chrome can sync your account settings between devices, so if you enable that feature, malicious profile data can spread from one to another in a virus-like way.

Although you say that Safari is crashing, there are no Safari crash reports.

WZZZ

Level 6

13,238 points

Feb 1, 2016 1:44 PM in response to Linc Davis

The following is meant for etresoft, not Linc Davis:

Unless Little Snitch rules have been set to always deny some or all of the outgoing connections from Malwarebytes (OP should check those rules), these four outgoing connections need to be allowed for Malwarebytes to run properly.

WZZZ

Level 6

13,238 points

Feb 1, 2016 7:22 PM in response to WZZZ

To set things straight: just tested and Malwarebytes runs just fine even blocked by Little Snitch.

thomas_r.

Level 7

32,031 points

Feb 2, 2016 4:28 AM in response to Seanothon

In case you're confused by the disagreements here, it should be noted that it is indisputable fact that you have had many different processes crashing. You have some kind of systemic problem, though what that is can only be guessed at based on the information at hand. Since there's so much differing advice here, and because my belief is that you may have a hardware issue, I would recommend contacting Apple Support directly. They will be able to help you diagnose this problem far better than a bunch of random strangers on a forum.

Linc Davis

Level 10

209,739 points

Feb 2, 2016 8:10 PM in response to Seanothon

Facts that are of material importance to you:

1. The "malwarebytes" product repeatedly hung the system, and not because of a hardware failure.

2. It also failed to remove the "Spigot" malware.

WZZZ

Level 6

13,238 points

Feb 2, 2016 9:35 PM in response to Linc Davis

Full set of facts:

56	2016-01-02 com.apple.WebKit.Plugin.64 crash

57	2016-01-03 firefox hang

58	2016-01-04 firefox hang

59	2016-01-04 plugin-container crash

60	2016-01-08 FinderSyncAPIExtension crash x2

61	2016-01-09 FinderSyncAPIExtension crash

62	2016-01-19 findNames crash

63	2016-01-19 firefox hang

64	2016-01-20 firefox hang x4

65	2016-01-23 firefox hang x3

66	2016-01-23 plugin-container crash x5

67	2016-01-24 plugin-container crash x2

68	2016-01-25 firefox hang

69	2016-01-25 plugin-container crash

70	2016-01-26 firefox hang

71	2016-01-26 plugin-container crash

72	2016-01-27 firefox hang

73	2016-01-27 plugin-container crash x2

74	2016-01-28 plugin-container crash

75	2016-01-29 firefox hang x2

76	2016-01-29 plugin-container crash x4

77	2016-01-30 Google Chrome hang x2

78	2016-01-30 Malwarebytes Anti-Malware hang x3

79	2016-01-30 plugin-container crash x3

75	2016-01-04 firefox hang

76	2016-01-08 FinderSyncAPIExtension crash x2

77	2016-01-09 FinderSyncAPIExtension crash

78	2016-01-19 findNames crash

79	2016-01-19 firefox hang

80	2016-01-20 firefox hang x4

81	2016-01-23 firefox hang x3

82	2016-01-23 plugin-container crash x4

83	2016-01-24 plugin-container crash x2

84	2016-01-25 firefox hang

85	2016-01-25 plugin-container crash

86	2016-01-26 firefox hang

87	2016-01-26 plugin-container crash

88	2016-01-27 firefox hang

89	2016-01-27 plugin-container crash x2

90	2016-01-28 plugin-container crash

91	2016-01-29 firefox hang x2

92	2016-01-29 plugin-container crash x4

93	2016-01-30 Google Chrome crash

94	2016-01-30 Google Chrome hang x8

95	2016-01-30 Malwarebytes Anti-Malware hang x3

96	2016-01-30 plugin-container crash x3

97	2016-02-01 Google Chrome hang x2

98	2016-02-01 firefox hang x2

99	2016-02-01 plugin-container crash x2

100

101 HID errors: 18

WZZZ

Level 6

13,238 points

Feb 3, 2016 5:38 AM in response to Seanothon

Linc Davis wrote:

Facts that are of material importance to you:

1. The "malwarebytes" product repeatedly hung the system, and not because of a hardware failure.

2. It also failed to remove the "Spigot" malware.

For #1, if I were you, I would be asking for evidence to back up this claim. The more information I would have, the better, in order to know how to proceed. Besides that, even if there is no hardware failure on your machine, it is well documented from all the diagnostic reports you have received that you may have other systemic issues which are responsible for Malwarebytes to not be able to run properly. Under normal circumstances, there is no reason why it should not remove this well known adware infection.

For #2, obviously see #1.

For your information, I have come across an instance elsewhere where Malwarebytes restored to fully normal operation a Mac Firefox, like yours, which was freezing and crippled by adware. That you are still having problems with Firefox even after removing the Spigot adware, would indicate that the source of the Firefox hangs and crashes is not solely due to adware. As has already been recommended, you should have your machine checked out hands-on by a knowledgeable Apple technician, not long distance by someone here.

Kukla, thank you very much, malwarebytes solved the problem, it detected quite a list of adware, I deleted it and now things are running quite fast and smooth. The one website that was giving me a lot of grief was CNN, I'm a news junkie,

I tried it and navigated around for a bit and things are running smooth again.

http://forums.mozillazine.org/viewtopic.php?f=38&t=2982383

MadMacs0

Level 5

5,233 points

Feb 3, 2016 2:51 PM in response to WZZZ

WZZZ wrote:

just tested and Malwarebytes runs just fine even blocked by Little Snitch.

That's good to know, but that also prevents Sparkle from checking for app updates and Malwarebytes from updating Signatures.

I see that Little Snitch is asking you for IP addresses rather than URL's above. Mine starts suddenly doing that for some reason that I have not quite figured out. If I reboot it goes back to URL's. In can case, these are the URL's Malwarebytes asks for with my setup:

d2fzrl4t7xvjzd.cloudfront.net port 443

sirius-prod.elasticbeanstalk.com port 443

keystone.mwbsys.com port 443

cdn.mwbsys.com port 443

keystone.mwbsys.com port 443

data-cdn.mbamupdates.com port 80

CDN's are used to speed up world-wide distribution of data. I would guess that the keystone server handles app updates.

Here's what the EULA has to say:

Privacy Policy. By entering into this Agreement you agree to the terms of Malwarebytes’ privacy policy, which can be found at https://www.malwarebytes.org/privacy/ (as may be updated from time to time, the “Privacy Policy”). More information concerning what data is collected and used by Malwarebytes and how it is used is available in the Privacy Policy. Without limiting the Privacy Policy, you agree that Malwarebytes may track certain data it obtains from your Device, including data about any malicious software, exploits or other threats flagged by the Software (including but not limited to potential sources of such threats, such as payload files, file format and recent URL’s visited), data about your license, data about what version of the Software you are using and what operating conditions it runs under and data concerning your geographic location. This information is collected and used for the purpose of tracking malicious software, exploits and other threats, and evaluating and improving Malwarebytes’ products and services. We may share data relating to malicious software, exploits or other threats flagged by the Software with third parties. In the event that any user who operates the Software as permitted under this Agreement (including, if you are a Malwarebytes for Business customer, your Authorized Users) makes a complaint or claim based on the tracking or collection of data in accordance with this Section 6, you agree that you are solely responsible for addressing any such complaints or claims.

WZZZ

Level 6

13,238 points

Feb 3, 2016 9:00 PM in response to MadMacs0

Yeah, it won't get the latest signatures if not allowed to connect, but that didn't seem relevant to this topic, so didn't mention it.

Also, you must know this, so maybe this isn't what you meant, but if you put the mouse pointer up near the URL, then "Show Details" appears. Click on that and you get the IPs and other information, which is what's appearing in my screenshots. It must depend on location for what connections it makes. I don't think I've ever seen more than the four I gave above.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

All my browsers crash constantly! Need help to keep my sanity