Mid-2013 13" Macbook Pro unusably slow, beachballing

Question

Level 1

8 points

Mid-2013 13" Macbook Pro unusably slow, beachballing

I'd appreciate it if anyone could help out... my mid-2013 13" Macbook Pro has become unusable. It's slow to boot, slow to open applications, slow to respond and has the spinning beachball any time there's a user action.

I can't tie the degradation to anything specific, I expanded my RAM several months ago to 16GB, without any observable effect. The disk utility reports no problems, and the Apple diagnostics at startup fail to finish, I tried both basic and extended versions and they hang after about 90% completed, I have to power off with the power button.

I ran Etre-Check:

EtreCheck version: 2.9.3 (253)

Report generated 2016-02-10 23:55:16

Download EtreCheck from http://etrecheck.com

Runtime 91:33

Performance: Poor

The following internal tasks failed to complete:

/usr/sbin/system_profiler -xml SPHardwareDataType

/usr/sbin/system_profiler -xml SPSoftwareDataType

/usr/sbin/system_profiler -xml SPLogsDataType

/usr/sbin/system_profiler -xml SPApplicationsDataType

/usr/sbin/system_profiler -xml SPDisplaysDataType

/usr/sbin/system_profiler -xml SPUSBDataType

/usr/sbin/system_profiler -xml SPThunderboltDataType

/usr/sbin/system_profiler -xml SPExtensionsDataType

/usr/bin/find /System/Library/Extensions -iname *.kext

/usr/bin/find /Library/Application Support -iname *.kext

/usr/bin/osascript -e tell application "System Events" to get the properties of every login item

Problem: Beachballing

Description:

Toooo slooooow

Disk Information:

APPLE HDD ST500LM012 disk0 : (500.11 GB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / : 499.25 GB (155.55 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

MATSHITADVD-R UJ-8A8 ()

Unknown Files:

/Library/LaunchDaemons/com.eltima.ElmediaPlayer.daemon.plist

/Library/LaunchDaemons/com.nextel.dhcp.plist

~/Library/LaunchAgents/com.nokia.NokiaSoftwareUpdaterAgent.plist

3 unknown files found. [Check files]

Kernel Extensions:

/Library/Extensions

[loaded] com.sophos.kext.sav (9.4.50 - SDK 10.9) [Support]

[loaded] com.sophos.nke.swi (9.4.50 - SDK 10.9) [Support]

Startup Items:

ChmodBPF: Path: /Library/StartupItems/ChmodBPF

HWNetMgr: Path: /Library/StartupItems/HWNetMgr

Startup items are obsolete in OS X Yosemite

System Launch Agents:

[failed] com.apple.SafariCloudHistoryPushAgent.plist [Details]

[failed] com.apple.cloudphotosd.plist [Details]

[failed] com.apple.security.keychain-circle-notification.plist

[loaded] 160 Apple tasks

[running] 73 Apple tasks

System Launch Daemons:

[failed] com.apple.csrutil.report.plist

[loaded] 196 Apple tasks

[running] 91 Apple tasks

Launch Agents:

[loaded] com.adobe.AAM.Updater-1.0.plist [Support]

[loaded] com.divx.dms.agent.plist [Support]

[loaded] com.divx.update.agent.plist [Support]

[loaded] com.google.keystone.agent.plist [Support]

[loaded] com.oracle.java.Java-Updater.plist [Support]

[running] com.sophos.uiserver.plist [Support]

Launch Daemons:

[loaded] com.adobe.SC.FPFeedbackService-1.0.plist [Support]

[failed] com.adobe.fpsaud.plist [Support]

[running] com.eltima.ElmediaPlayer.daemon.plist [Support]

[loaded] com.google.keystone.daemon.plist [Support]

[loaded] com.nextel.dhcp.plist [Support]

[loaded] com.oracle.java.Helper-Tool.plist [Support]

[loaded] com.oracle.java.JavaUpdateHelper.plist [Support]

[running] com.sophos.common.servicemanager.plist [Support]

User Launch Agents:

[loaded] com.BlueStacks.AppPlayer.LogRotator.plist [Support]

[loaded] com.BlueStacks.AppPlayer.Service.plist [Support]

[loaded] com.BlueStacks.AppPlayer.UninstallAgent.plist [Support]

[loaded] com.BlueStacks.AppPlayer.UpdaterAgent.plist [Support]

[failed] com.apple.SafariBookmarksSyncer.plist [Details]

[loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist [Support]

[failed] com.facebook.videochat.[redacted].plist [Support]

[loaded] com.nokia.NokiaSoftwareUpdaterAgent.plist [Support]

User Login Items:

None

Other Apps:

[running] com.BlueStacks.AppPlayer.Agent.99872

[running] com.etresoft.EtreCheck.1952

[running] com.sophos.autoupdate

[running] com.sophos.configuration

[running] com.sophos.intercheck

[running] com.sophos.macendpoint.Sophos-Anti-Virus.85152

[running] com.sophos.notification

[running] com.sophos.scan

[running] com.sophos.sxld

[failed] com.sophos.webd

[running] com.vmware.fusionStartMenu.100192

Internet Plug-ins:

Flip4Mac WMV Plugin: Version: 2.2.3.7 [Support]

FlashPlayer-10.6: Version: 20.0.0.235 - SDK 10.6 [Support]

QuickTime Plugin: Version: 7.7.3

DivX Web Player: Version: 3.4.1.14 - SDK 10.10 [Support]

Flash Player: Version: 20.0.0.235 - SDK 10.6 Outdated! Update

Default Browser: Version: 601 - SDK 10.11

JavaAppletPlugin: Version: Java 8 Update 51 Check version

OVSHelper: Version: 1.1 [Support]

Google Earth Web Plug-in: Version: 7.0 [Support]

Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Support]

iPhotoPhotocast: Version: 7.0

User internet Plug-ins:

BlueStacks Install Detector: Version: 0.3.6 - SDK 10.7 [Support]

WebEx: Version: 1.0 [Support]

CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Support]

F5 Inspection Host Plugin: Version: 2008.01.16.11

Picasa: Version: 1.0 [Support]

WebEx64: Version: 1.0 - SDK 10.6 [Support]

Time Machine:

Time Machine information requires OS X 10.8 "Moutain Lion" or later.

Top Processes by CPU:

6% WindowServer

2% kernel_task

2% EscrowSecurityAlert

2% ps

1% uHD-UninstallAgent

Top Processes by Memory:

615 MB kernel_task

0 B cloudpaird

0 B softwareupdated

0 B askpermissiond

0 B secinitd(2)

Virtual Memory Information:

0 B Free RAM

0 B Used RAM (2.34 GB Cached)

0 B Swap Used

OS X Yosemite (10.10.2)

Posted on Feb 11, 2016 2:20 PM

Reply

Answer 1

Linc Davis

Level 10

209,547 points

Feb 11, 2016 8:56 PM in response to FrankPintor

When you see a beachball cursor or the slowness is especially bad, note the exact time: hour, minute, second.

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any one of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES ▹ All Messages

from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar at the top of the screen.

Each message in the log begins with the date and time when it was entered. Scroll back to the time you noted above.

Select the messages entered from then until the end of the episode, or until they start to repeat, whichever comes first.

Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of it useless for solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name, may appear in the log. Anonymize before posting.

When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

Reply

Answer 2

FrankPintor Author

Level 1

8 points

Feb 12, 2016 7:42 AM in response to Linc Davis

Okidoki, thanks Linc. Here's some of the console output:

--

12.02.2016 08:15:25.613 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a9ba6e0
12.02.2016 08:15:25.613 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a9ba6e0
12.02.2016 08:15:25.616 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a9ba6e0
12.02.2016 08:15:25.655 ReportCrash[31594] Attempt to read info_array in pid 31593 failed, address was 7fff6a9ba6e0
12.02.2016 08:15:25.656 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a9ba6e0
12.02.2016 08:15:25.824 ReportCrash[31594] Saved crash report for EscrowSecurityAlert[31593] version ??? to /Users/Frank/Library/Logs/DiagnosticReports/EscrowSecurityAlert_2016-02-12-0815 25_Frank-Pintors-MacBook-Pro.crash
12.02.2016 08:15:25.826 ReportCrash[31594] Removing excessive log: file:///Users/Frank/Library/Logs/DiagnosticReports/EscrowSecurityAlert_2016-02- 12-080826_Frank-Pintors-MacBook-Pro.crash
12.02.2016 08:15:35.000 kernel[0] disk0s2: I/O error.
12.02.2016 08:15:35.000 kernel[0] /BuildRoot/Library/Caches/com.apple.xbs/Sources/AppleFSCompression_kexts/AppleF SCompression-81.20.2/Common/ChunkCompression.cpp:211: /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/AOSUI: VNOP_GETXATTR(100,4u): errno 5
12.02.2016 08:15:35.654 com.apple.xpc.launchd[1] (com.apple.EscrowSecurityAlert[31595]) Service exited due to signal: Trace/BPT trap: 5
12.02.2016 08:15:35.654 com.apple.xpc.launchd[1] (com.apple.EscrowSecurityAlert) Service only ran for 9 seconds. Pushing respawn out by 1 seconds.
12.02.2016 08:15:35.862 ReportCrash[31594] Attempt to read info_array in pid 31595 failed, address was 7fff6a3be6e0
12.02.2016 08:15:35.862 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a3be6e0
12.02.2016 08:15:35.863 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a3be6e0
12.02.2016 08:15:35.866 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a3be6e0
12.02.2016 08:15:35.868 ReportCrash[31594] Attempt to read info_array in pid 31595 failed, address was 7fff6a3be6e0
12.02.2016 08:15:35.869 ReportCrash[31594] Attempt to read info_array in pid -1 failed, address was 7fff6a3be6e0
12.02.2016 08:15:35.905 ReportCrash[31594] Saved crash report for EscrowSecurityAlert[31595] version ??? to /Users/Frank/Library/Logs/DiagnosticReports/EscrowSecurityAlert_2016-02-12-0815 35_Frank-Pintors-MacBook-Pro.crash
12.02.2016 08:15:35.907 ReportCrash[31594] Removing excessive log: file:///Users/Frank/Library/Logs/DiagnosticReports/EscrowSecurityAlert_2016-02- 12-080835_Frank-Pintors-MacBook-Pro.crash
12.02.2016 08:15:36.553 com.apple.xpc.launchd[1] (com.facebook.videochat.Frank.updater[31596]) Service exited with abnormal code: 1
12.02.2016 08:15:36.652 launchservicesd[75] Application App:"Download Java Components" asn:0x0-cd0cd pid:29996 refs=7 @ 0x7f8a10432510 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x1001 pid=91 "loginwindow"")), so denying. : LASSession.cp #1531 SetFrontApplication() q=LSSession 100007/0x186a7 queue
12.02.2016 08:15:36.652 WindowServer[160] [cps/setfront] Failed setting the front application to Download Java Components, psn 0x0-0xcd0cd, securitySessionID=0x186a7, err=-13066
12.02.2016 08:16:17.000 kernel[0] disk0s2: I/O error.
12.02.2016 08:16:17.000 kernel[0] /BuildRoot/Library/Caches/com.apple.xbs/Sources/AppleFSCompression_kexts/AppleF SCompression-81.20.2/Common/ChunkCompression.cpp:211: /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/AOSUI: VNOP_GETXATTR(100,4u): errno 5
12.02.2016 08:16:17.467 com.apple.xpc.launchd[1] (com.apple.EscrowSecurityAlert[31597]) Service exited due to signal: Trace/BPT trap: 5

Reply

Answer 3

FrankPintor Author

Level 1

8 points

Feb 12, 2016 7:49 AM in response to FrankPintor

I made a mistake in my original post, it's actually a mid-2012 Macbook, 13", 2.5GHz i5, 16GB memory (expanded by me).. I checked all the connectors on the main board, removed and re-seated them, including the SATA hard drive cable at both ends, since this is being fingered as a culprit in some of the other reports here. The disk utility reports no problems (exit code 0), the Apple Diagnostics (press D at power-up) runs but doesn't ever finish, which isn't really what one wants from a diagnostic utility 😉 I also used CC-Cleaner to remove the startup items ("obsolete in Yosemite") and some programs I no longer use. However, the Macbook is still the same, slow to boot (10-15 mins) and unusably slow and beachballing at every user action when it finally allows me to log in.

Reply

Answer 4

Leopardus

Level 4

1,303 points

Feb 12, 2016 8:17 AM in response to FrankPintor

Uninstall Sopho's and CC Cleaner according to their uninstall instructions on their websites. You can retain their installers on a USB drive, if you really want to. OS X has a lot of builtin AntiVirus protection. These programs are known to create problems and bogs down your system, besides changing your kernel - thus OS X. OS X also doesnt need "cleaners", "spacesavers" and "spacerecover programs" as it has built in scripts that run to keep your system optimised.

If you are unsure how to uninstall, ask for guidelines.

Leo

Reply

Answer 5

Linc Davis

Level 10

209,547 points

Feb 12, 2016 11:14 AM in response to FrankPintor

The startup drive is failing, or there is some other internal hardware fault.

Back up all data on the drive immediately if you don't already have a current backup. There are ways to back up a computer that isn't fully functional—ask if you need guidance.

Make a "Genius" appointment at an Apple Store, or go to another authorized service provider.

If privacy is a concern, erase the data partition(s) with the option to write zeros* (do this only if you have at least two complete, independent backups, and you know how to restore to an empty drive from any of them.) Don’t erase the recovery partition, if present.

Keeping your confidential data secure during hardware repair

Apple also recommends that you deauthorize a device in the iTunes Store before having it serviced.

*An SSD doesn't need to be zeroed.

Reply

Answer 6

FrankPintor Author

Level 1

8 points

Feb 12, 2016 11:18 AM in response to Linc Davis

Linc, thanks for your feedback, I'll be taking my MacBook to an iShop here asap.

I have a question though, why would disk utility return 0 on a failing drive?

Leo, is there now a concensus that Sophos and CC Cleaner are bad? Sophos had a good reputation, and it was very difficult to find a virus checker for OSX when I installed it several years ago, and I've used CC Cleaner for years on both OSX and Windows for a long time without any apparent problems.

Reply

Answer 7

Leopardus

Level 4

1,303 points

Feb 12, 2016 11:52 AM in response to FrankPintor

Frank,

Each to his own, and opinions differ. There is much consensus here and on the developer and other Apple Forums that, although we are still relatively safe from the virus threat-a-la-windows, that it might also just be a matter of time. It has to be said though, that Apple has upped the ante as well with Xprotect, sandboxing, gatekeeping and SIP to increase the bariers to such threats. It should be noted as well that antivirus programs can only protect you against the known, thus they are always at least one step behind the threat, perceived or real. Interesting to note as well is that Apple has just hired the very people who managed to 'create the first Mac Virus' in a laboratory. Further to that, comes the question of access to your Mac. There is the theoretical access through the kernel, but therefore some modification prior thereto is required, which brings you back to gatekeeping - know what you install from where!

Sophos is known to hug resources, and it would not hurt you to do the test to find out if it is the culprit. Personally, I recommend following common sense, which is maybe not so common, instead of relying on the false sense of security derived from using AV software. But, if I suspect something, I use ClamXAV, quarentine and delete it immediately....and stay away from suspicious sites.

Leo

Reply

Answer 8

Leopardus

Level 4

1,303 points

Feb 12, 2016 2:41 PM in response to FrankPintor

FrankPintor wrote:

is there now a concensus that Sophos and CC Cleaner are bad? Sophos had a good reputation, and it was very difficult to find a virus checker for OSX when I installed it several years ago, and I've used CC Cleaner for years on both OSX and Windows for a long time without any apparent problems.

Frank,

Finally, have a look at Re: Sophos: Issues Detected and specifically at the post of MrHoffman.

Leo

Reply

Answer 9

FrankPintor Author

Level 1

8 points

Feb 13, 2016 11:43 AM in response to Leopardus

OK, thanks for the info Leo.

My Macbook is at the iShop, I should know by Tuesday what went wrong with it.

Reply

Answer 10

Leopardus

Level 4

1,303 points

Feb 15, 2016 12:58 AM in response to FrankPintor

Waiting with abated breath. Meanwhile, if you have some time to read; https://derflounder.wordpress.com/2015/10/01/system-integrity-protection-adding- another-layer-to-apples-security-model/ gives a very good overview of the current 'defence in depth' model that Apple employs for OS X.

Leo

Reply

Answer 11

FrankPintor Author

Level 1

8 points

Feb 19, 2016 7:57 AM in response to FrankPintor

Well, just to close this out, I got my MacBook back on Wednesday, the repair shop installed a new HDD, and said their tests indicated the disk was failing (SMART error)... which is a bit annoying since the Disk Utility didn't report any errors.

Also, they recommended changing the battery, they told me something about how leaving the MacBook connected to power all the time isn't good for the battery (not sure whether to believe this, charging technology has improved a lot), and that a battery can be expected to last for 1-2 years before it degrades. This would be an expensive repair, so I'm going to kick this one down the road for a while.

Thanks to Linc for identifying the problem and Leo for all the useful information :-)

Reply

Answer 12

Leopardus

Level 4

1,303 points

Feb 19, 2016 8:11 AM in response to FrankPintor

Pleasure was all mine!

Reply

Answer 13

FrankPintor Author

Level 1

8 points

Feb 19, 2016 9:16 AM in response to Linc Davis

Can I ask how you identified the drive as the problem?

Reply