EasySuite "disk image" will not delete

Thanks Illass - here's the report. It did indeed find adware, and listed EasySuite as well, but it could not remove it.

EtreCheck version: 2.9.10 (261)

Report generated 2016-04-05 12:39:40

Download EtreCheck from https://etrecheck.com

Runtime 4:14

Performance: Good

Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Click the [Remove] links to remove adware.

Problem: Other problem

Description:

An unwanted “disk image” appears on my desktop and cannot be deleted or trashed. It will disappear after ejecting the image using the trashcan, eject buttons or programming through the terminal but reappears again after several minutes.

Hardware Information: ⓘ

Mac Pro (Early 2009)

[Technical Specifications] - [User Guide] - [Warranty & Service]

Mac Pro - model: MacPro4,1

2 2.26 GHz Quad-Core Intel Xeon CPU: 8-core

14 GB RAM Upgradeable - [Instructions]

DIMM 1

2 GB DDR3 ECC 1066 MHz ok

DIMM 2

2 GB DDR3 ECC 1066 MHz ok

DIMM 3

2 GB DDR3 ECC 1066 MHz ok

DIMM 4

1 GB DDR3 ECC 1066 MHz ok

DIMM 5

2 GB DDR3 ECC 1066 MHz ok

DIMM 6

2 GB DDR3 ECC 1066 MHz ok

DIMM 7

2 GB DDR3 ECC 1066 MHz ok

DIMM 8

1 GB DDR3 ECC 1066 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Video Information: ⓘ

NVIDIA Quadro FX 4800 - VRAM: 1536 MB

Cinema HD Display 2560 x 1600

System Software: ⓘ

OS X El Capitan 10.11.4 (15E65) - Time since boot: less than an hour

Disk Information: ⓘ

HL-DT-ST DVD-RW GH41N ()

PIONEER BD-RW BDR-207D ()

Hitachi HDS721010KLA330 disk0 : (1 TB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

[redacted] (disk0s2) / : 999.34 GB (97.27 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

ST31000528AS disk2 : (1 TB) (Rotational)

EFI (disk2s1) <not mounted> : 210 MB

[redacted] 2 (disk2s2) /Volumes/Osbornio 2 : 999.86 GB (355.13 GB free)

Hitachi HDS721010KLA330 disk1 : (1 TB) (Rotational)

disk1s1 (disk1s1) <not mounted> : 32 KB

[redacted] 3 (disk1s3) /Volumes/Osbornio 3 : 1.00 TB (511.82 GB free)

ST31000528AS disk3 : (1 TB) (Rotational)

EFI (disk3s1) <not mounted> : 210 MB

[redacted] 4 (disk3s2) /Volumes/Osbornio 4 : 750.35 GB (637.78 GB free)

BOOTCAMP (disk3s3) /Volumes/BOOTCAMP : 249.51 GB (42.07 GB free)

USB Information: ⓘ

VIA Labs, Inc. USB2.0 Hub 18.7 MB

VIA Labs, Inc. USB2.0 Hub 18.7 MB

Brother HL-5140

hp hp scanjet 8200

Combo Drive 18.7 MB

EasySuite (disk4s0) /Volumes/EasySuite : 16 MB (0 B free) - 2 errors

Drive failure!

Apple, Inc. Keyboard Hub

Mitsumi Electric Apple Optical USB Mouse

Apple, Inc Apple Keyboard

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Motorola, Inc. Apple USB Modem

Firewire Information: ⓘ

Apple Computer, Inc. iSight 200mbit - 400mbit max

Gatekeeper: ⓘ

Mac App Store and identified developers

Adware: ⓘ

~/Library/LaunchAgents/com.EasyShopper.agent.plist

~/Library/LaunchAgents/com.mediahm.operator.update.plist

2 adware files found. [Remove]

Kernel Extensions: ⓘ

/Applications/Toast 11 Titanium/Spin Doctor.app

[not loaded] com.hzsystems.terminus.driver (4 - 2012-03-15) [Support]

/Incompatible Software/Parallels Service.app

[not loaded] com.parallels.kext.prl_hid_hook (5.0 9310.546799 - 2016-02-23) [Support]

[not loaded] com.parallels.kext.prl_hypervisor (5.0 9310.546799 - 2016-02-23) [Support]

[not loaded] com.parallels.kext.prl_netbridge (5.0 9310.546799 - 2016-02-23) [Support]

[not loaded] com.parallels.kext.prl_usb_connect (5.0 9310.546799 - 2016-02-23) [Support]

[not loaded] com.parallels.kext.prl_vnic (5.0 9310.546799 - 2016-02-23) [Support]

/Library/Extensions

[loaded] at.obdev.nke.LittleSnitch (4362 - SDK 10.8 - 2016-03-21) [Support]

/System/Library/Extensions

[not loaded] com.AmbrosiaSW.AudioSupport (4.1.2 - SDK 10.7 - 2016-03-21) [Support]

[loaded] com.nvidia.CUDA (1.1.0 - 2016-03-21) [Support]

[not loaded] com.palm.ClassicNotSeizeDriver (3.2 - 2016-03-21) [Support]

[not loaded] com.roxio.BluRaySupport (1.1.6 - 2016-03-21) [Support]

~/Library/Services/ToastIt.service/Contents/MacOS

[not loaded] com.roxio.TDIXController (2.0 - 2014-02-25) [Support]

Startup Items: ⓘ

ParallelsDesktopTransporter: Path: /Library/StartupItems/ParallelsDesktopTransporter

Startup items are obsolete in OS X Yosemite

System Launch Agents: ⓘ

[not loaded] 8 Apple tasks

[loaded] 163 Apple tasks

[running] 67 Apple tasks

System Launch Daemons: ⓘ

[not loaded] 46 Apple tasks

[loaded] 161 Apple tasks

[running] 81 Apple tasks

Launch Agents: ⓘ

[running] at.obdev.LittleSnitchUIAgent.plist (2016-02-29) [Support]

[not loaded] com.adobe.AAM.Updater-1.0.plist (2016-02-28) [Support]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a...plist (2016-02-28) [Support]

[running] com.adobe.AdobeCreativeCloud.plist (2016-02-28) [Support]

[loaded] com.hp.help.tocgenerator.plist (2009-07-28) [Support]

[loaded] com.nvidia.CUDASoftwareUpdate.plist (2016-04-05) [Support]

Launch Daemons: ⓘ

[running] at.obdev.littlesnitchd.plist (2016-02-29) [Support]

[loaded] com.adobe.ARMDC.Communicator.plist (2016-02-28) [Support]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (2016-02-28) [Support]

[loaded] com.adobe.SwitchBoard.plist (2016-02-28) [Support]

[running] com.adobe.adobeupdatedaemon.plist (2016-02-28) [Support]

[loaded] com.adobe.agsservice.plist (2016-02-28) [Support]

[loaded] com.adobe.fpsaud.plist (2016-03-18) [Support]

[loaded] com.ambrosiasw.ambrosiaaudiosupporthelper.daemon.plist (2013-03-22) [Support]

[loaded] com.apple.aelwriter.plist

[running] com.apple.qmaster.qmasterd.plist

[loaded] com.fxfactory.FxFactory.helper.plist (2016-02-28) [Support]

[loaded] com.microsoft.office.licensing.helper.plist (2010-08-25) [Support]

[not loaded] com.noiseindustries.FxFactory.AE.plist (2012-09-27) [Support]

[loaded] com.noiseindustries.FxFactory.helper.plist (2016-02-27) [Support]

[loaded] com.nvidia.cuda.launcher.plist (2016-02-24) [Support]

User Launch Agents: ⓘ

[failed] com.EasyShopper.agent.plist (2016-02-28) Adware! [Remove]

[loaded] com.adobe.AAM.Updater-1.0.plist (2012-09-27) [Support]

[failed] com.adobe.ARM.[...].plist (2009-10-17) [Support]

[loaded] com.bittorrent.uTorrent.plist (2015-02-04) [Support]

[loaded] com.mediahm.operator.update.plist (2016-04-04) Adware! [Remove]

~/Library/Application Support/mediahm/mediahm.app/Contents/MacOS/Installer

User Login Items: ⓘ

iTunesHelper UNKNOWN Hidden (missing value)

PopChar UNKNOWN (missing value)

Wondershare Helper Compact Application (~/Library/Application Support/Helper/Wondershare Helper Compact.app)

Dropbox Application (/Applications/Dropbox.app)

VoiceZoneConnect Application (/Applications/VoiceZoneConnect.app)

HPShortcutManagerStartup Application (/Library/Application Support/Hewlett-Packard/HP Scanjet Scanner/HPShortcutManagerStartup.app)

Director Docker Application (/Applications/Hewlett-Packard/HP Photo and Imaging Software/HP Photo and Imaging Director/Director Docker.app)

HP Scheduler Application (/Library/Application Support/Hewlett-Packard/Software Update/HP Scheduler.app)

Other Apps: ⓘ

[loaded] at.obdev.MicroSnitchOpenAtLoginHelper

[running] com.adobe.CCXProcess.645472

[running] com.adobe.Reader.45792

[running] com.adobe.acc.AdobeDesktopService.688032.D03CE67A-B0EF-4D8B-B281-CF68B1E14073

[running] com.adobe.accmac.686752

[running] com.getdropbox.dropbox.63712

[running] com.hp.scan.shortcutmgr.146592

[running] com.hp.scan.shortcutmgr.startup.144672

[running] com.twc.voicezoneconnect.124512

[running] com.wondershare.helper_compact.146912

[running] jp.co.canon.cijscannerregister.143712

[running] org.mozilla.firefox.808032

[loaded] 418 Apple tasks

[running] 180 Apple tasks

Internet Plug-ins: ⓘ

Unity Web Player: UnityPlayer version 4.3.1f1 - SDK 10.6 (2014-01-09) [Support]

Default Browser: 601 - SDK 10.11 (2016-03-21)

Flip4Mac WMV Plugin: 2.3.2.6 (2010-02-19) [Support]

RealPlayer Plugin: Unknown (2009-09-28) [Support]

AdobeAAMDetect: 3.0.0.0 - SDK 10.9 (2016-02-28) [Support]

FlashPlayer-10.6: 21.0.0.197 - SDK 10.6 (2016-03-31) [Support]

AdobePDFViewerNPAPI: 15.010.20060 - SDK 10.8 (2016-02-26) [Support]

Silverlight: 5.1.30514.0 - SDK 10.6 (2015-01-16) [Support]

QuickTime Plugin: 7.7.3 (2016-03-21)

Flash Player: 21.0.0.197 - SDK 10.6 (2016-03-31) Cannot contact Adobe

iPhotoPhotocast: 7.0 (2010-04-01)

SharePointBrowserPlugin: 14.6.0 - SDK 10.6 (2016-02-24) [Support]

AdobePDFViewer: 15.010.20060 - SDK 10.8 (2016-02-26) [Support]

CANONiMAGEGATEWAYDL: 3.1.0.2 (2009-09-08) [Support]

JavaAppletPlugin: 15.0.1 - SDK 10.7 (2016-02-28) Check version

User internet Plug-ins: ⓘ

QuickTime Plugin: 6.5.1 (2005-01-15)

Unity Player: UnityPlayer version 1.1.1 (2005-09-01) [Support]

iGetterScriptablePlugin: 2.9.3 (2015-02-02) [Support]

Java Applet: 1.2.0 (2004-08-23)

Safari Extensions: ⓘ

iGetter Extension (2014-11-14)

Audio Plug-ins: ⓘ

DVCPROHDAudio: 1.3.2 (2010-04-01)

3rd Party Preference Panes: ⓘ

BIAS Key (2005-04-11) [Support]

CUDA Preferences (2016-02-24) [Support]

Déjà Vu (2007-06-13) [Support]

Flash Player (2016-03-18) [Support]

Flip4Mac WMV (2010-02-19) [Support]

HP Scanjet (2009-11-13) [Support]

Iomega Active Delivery (2011-09-02) [Support]

MacFUSE (2010-01-17) [Support]

Perian (2011-07-23) [Support]

Time Machine: ⓘ

Skip System Files: NO

Auto backup: NO - Auto backup turned off

Volumes being backed up:

Osbornio: Disk size: 999.34 GB Disk used: 902.07 GB

Destinations:

Baby Osbornio 2 [Local]

Total size: 0 B

Total number of backups: 0

Oldest backup: -

Last backup: -

Size of backup disk: Too small

Backup size 0 B < (Disk used 902.07 GB X 3)

Top Processes by CPU: ⓘ

4% WindowServer

1% kernel_task

1% Little Snitch Agent

0% SubmitDiagInfo

0% firefox

Top Processes by Memory: ⓘ

849 MB kernel_task

688 MB firefox

186 MB AdobeReader

143 MB Dropbox

143 MB mds_stores

Virtual Memory Information: ⓘ

7.50 GB Free RAM

6.49 GB Used RAM (3.79 GB Cached)

0 B Swap Used

Diagnostics Information: ⓘ

Apr 5, 2016, 12:05:06 PM Self test - passed

Apr 4, 2016, 10:55:15 PM /Library/Logs/DiagnosticReports/firefox_2016-04-04-225515_[redacted].cpu_resour ce.diag [Details]

/Applications/Firefox.app/Contents/MacOS/firefox

No USB, no thumb drive, no nuthin'. It appeared there after I upgraded to 10.11.4 and hasn't gone away since. It must have gotten hold of something in my efforts to upgrade the various software that didn't work with El Capitan.

Well, you must be some kind of wizard or something, Illaass! I re-booted in safe mode and the disk image was gone. I re-started in normal mode and it was back again. I restarted with all the usb devices unplugged and it was gone! But I'm afraid it will be back again when I plug them in and restart. I will let you know what happens. Stay tuned ......

It's baaaaaaack! So it's something involved with the USB ports?

Hi Chitlins -

I think I may be a little dense but I don't see any recommended result in your post. Everybody knows what EasySuite is, there just seems to be no way to get rid of it nor an answer as to how it got there.

I see that you emphasized "EasyMacCopy." Is it a clue? I don't have any of those programs on my computer. Like I said, I am a bit dense about these mysteries.

The issue was a cable. The problem was that I have no idea where that cable came from, which is why it was so confusing. I thought the system was exactly the same setup before the upgrade to El Capitan but I suppose in all the transferring of programs and peripherals an "Insignia" cable got caught up in the scramble and utilized where an old standard USB cable should have been and viola! A computer mystery was born. And, with thanks to Chitlins and Illaass, has now been put to rest ... PERMANENTLY!!

Which leads me to the next enigma: Where did that extra Insignia cable come from and to whom does it belong?

I'll tackle those questions in another post.