Upgraded to El Capitan and I'm about to pull my hair out - HELP!

Question

Level 1

8 points

Upgraded to El Capitan and I'm about to pull my hair out - HELP!

Here is my EtreCheck, can anyone see something off. Besides running slow the rainbow ball is driving me nuts. Even typing this out its popping up and I have to wait. It did not run like this before I upgraded. I looked at activity monitor and like my adobe apps are hogging a lot, but it didn't run like this before the upgrade, feel like I'm on my old Android phone from years back and I have to make sure all the apps are shut in order to make a call 😐 Any help would be greatly appreciated.

EtreCheck version: 2.9.11 (264)

Report generated 2016-05-03 09:33:15

Download EtreCheck from https://etrecheck.com

Runtime 9:19

Performance: Below Average

Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Click the [Remove] links to remove adware.

Problem: Beachballing

Hardware Information: ⓘ

iMac (27-inch, Mid 2010)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac11,3

1 2.8 GHz Intel Core i5 CPU: 4-core

8 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

2 GB DDR3 1333 MHz ok

BANK 1/DIMM0

2 GB DDR3 1333 MHz ok

BANK 0/DIMM1

2 GB DDR3 1333 MHz ok

BANK 1/DIMM1

2 GB DDR3 1333 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Video Information: ⓘ

ATI Radeon HD 5750 - VRAM: 1024 MB

iMac 1920 x 1080

System Software: ⓘ

OS X El Capitan 10.11.4 (15E65) - Time since boot: about 6 days

Disk Information: ⓘ

WDC WD1001FALS-40Y6A0 disk0 : (1 TB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

DEB27 HD (disk0s2) / : 999.35 GB (389.14 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

OPTIARC DVD RW AD-5680H ()

USB Information: ⓘ

Mitsumi Electric Hub in Apple Extended USB Keyboard

Mitsumi Electric Apple Extended USB Keyboard

Seiko Epson Corp. EPSON DS-30

Apple Computer, Inc. IR Receiver

Apple Inc. Built-in iSight

Kensington Kensington Expert Mouse

Apple Card Reader

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Configuration files: ⓘ

/etc/hosts - Count: 45

Gatekeeper: ⓘ

Anywhere

Adware: ⓘ

~/Library/LaunchAgents/com.onlineapplicationnotice.AppNotice.plist

One adware file found. [Remove]

Kernel Extensions: ⓘ

/Library/Application Support/Roxio

[not loaded] com.roxio.TDIXController (2.0 - 2014-06-24) [Support]

/Library/Extensions

[loaded] com.kensington.trackballworks.driver (1.2.1 - SDK 10.8 - 2016-04-06) [Support]

[loaded] com.techsmith.TACC (1.0.3 - SDK 10.10 - 2016-04-06) [Support]

[not loaded] org.virtualbox.kext.VBoxDrv (4.2.12 - 2016-04-06) [Support]

[not loaded] org.virtualbox.kext.VBoxNetAdp (4.2.12 - 2016-04-06) [Support]

[not loaded] org.virtualbox.kext.VBoxNetFlt (4.2.12 - 2016-04-06) [Support]

[not loaded] org.virtualbox.kext.VBoxUSB (4.2.12 - 2016-04-06) [Support]

/System/Library/Extensions

[loaded] com.logmein.driver.LogMeInSoundDriver (4.1.6121 - 2016-04-06) [Support]

Startup Items: ⓘ

FanControlDaemon: Path: /Library/StartupItems/FanControlDaemon

VirtualBox: Path: /Library/StartupItems/VirtualBox

Startup items are obsolete in OS X Yosemite

System Launch Agents: ⓘ

[not loaded] 8 Apple tasks

[loaded] 150 Apple tasks

[running] 62 Apple tasks

[killed] 18 Apple tasks

18 processes killed due to insufficient RAM

System Launch Daemons: ⓘ

[failed] com.apple.csrutil.report.plist

[not loaded] 46 Apple tasks

[loaded] 151 Apple tasks

[running] 78 Apple tasks

[killed] 12 Apple tasks

12 processes killed due to insufficient RAM

Launch Agents: ⓘ

[not loaded] com.adobe.AAM.Updater-1.0.plist (2014-06-23) [Support]

[running] com.adobe.AdobeCreativeCloud.plist (2014-06-19) [Support]

[loaded] com.adobe.CS5ServiceManager.plist (2011-07-21) [Support]

[failed] com.logmein.LMILaunchAgentFixer.plist (2016-04-05) [Support]

[not loaded] com.logmein.logmeingui.plist (2016-04-05) [Support]

[not loaded] com.logmein.logmeinguiagent.plist (2016-04-05) [Support]

[not loaded] com.logmein.logmeinguiagentatlogin.plist (2016-04-05) [Support]

Launch Daemons: ⓘ

[loaded] com.adobe.SwitchBoard.plist (2014-06-23) [Support]

[failed] com.adobe.fpsaud.plist (2016-04-15) [Support]

[loaded] com.apple.aelwriter.plist

[running] com.apple.qmaster.qmasterd.plist

[loaded] com.bombich.ccc.plist (2013-03-31) [Support]

[not loaded] com.logmein.logmeinserver.plist (2016-04-05) [Support]

[loaded] com.logmein.raupdate.plist (2013-06-06) [Support]

[loaded] com.malwarebytes.MBAMHelperTool.plist (2016-04-26) [Support]

[loaded] com.microsoft.office.licensing.helper.plist (2010-08-25) [Support]

User Launch Agents: ⓘ

[loaded] com.adobe.ARM.[...].plist (2014-12-02) [Support]

[loaded] com.adobe.ARM.[...].plist (2013-04-23) [Support]

[loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist (2016-04-12) [Support]

[running] com.dtv.vgconnect.plist (2014-09-18) [Support]

[loaded] com.dtv.vgconnect.uninstall.plist (2014-10-20) [Support]

[loaded] com.google.keystone.agent.plist (2016-03-02) [Support]

[running] com.nchsoftware.expressaccounts.agent.plist (2013-05-01) [Support]

[running] com.nchsoftware.expressinvoice.agent.plist (2013-05-01) [Support]

[running] com.nchsoftware.inventoria.agent.plist (2013-05-01) [Support]

[running] com.nchsoftware.reflect.agent.plist (2013-05-02) [Support]

[failed] com.nds.pcshow.plist (2013-11-17) [Support]

[loaded] com.nds.pcshow.uninstall.plist (2014-04-07) [Support]

[running] com.onlineapplicationnotice.AppNotice.plist (2016-04-26) Adware! [Remove]

~/Library/Application Support/AppCommon/AppNotice

[not loaded] org.virtualbox.vboxwebsrv.plist (2013-05-24) [Support]

User Login Items: ⓘ

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Dropbox Application (/Applications/Dropbox.app)

TrackballWorksHelper Application (/Library/PreferencePanes/TrackballWorks.prefPane/Contents/Resources/TrackballW orksHelper.app)

Android File Transfer Agent Application (~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Other Apps: ⓘ

[loaded] com.adobe.InDesign.63072

[running] com.adobe.Photoshop.64672

[running] com.etresoft.EtreCheck.299872

[running] com.getdropbox.dropbox.137632

[running] com.google.android.mtpagent.141472

[running] com.kensington.trackballworks.helper.136032

[running] com.microsoft.Excel.4192

[running] com.microsoft.autoupdate.fba.255712

[loaded] us.zoom.ringcentral.346912

[loaded] 408 Apple tasks

[running] 189 Apple tasks

[killed] 34 Apple tasks

Internet Plug-ins: ⓘ

LogMeInSafari64: 1.0.730 (2012-07-11) [Support]

Default Browser: 601 - SDK 10.11 (2016-03-12)

AdobeAAMDetect: AdobeAAMDetect 2.0.0.0 - SDK 10.7 (2014-06-19) [Support]

FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-04-25) [Support]

AdobePDFViewerNPAPI: 11.0.09 - SDK 10.6 (2014-09-12) [Support]

LogMeIn: 1.0.730 (2012-07-11) [Support]

QuickTime Plugin: 7.7.3 (2016-03-12)

Flash Player: 21.0.0.226 - SDK 10.6 (2016-04-25) [Support]

LogMeInSafari32: 1.0.730 (2012-07-11) [Support]

iPhotoPhotocast: 7.0 - SDK 10.8 (2013-10-01)

AdobePDFViewer: 11.0.09 - SDK 10.6 (2014-11-26) [Support]

SharePointBrowserPlugin: 14.0.0 (2010-08-25) [Support]

Silverlight: 5.1.41212.0 - SDK 10.6 (2016-01-24) [Support]

JavaAppletPlugin: Java 7 Update 21 (2014-04-11) Check version

User internet Plug-ins: ⓘ

CitrixOnlineWebDeploymentPlugin: 1.0.105 (2014-05-13) [Support]

OctoshapeWeb: 1.0 - SDK 10.8 (2014-10-20) [Support]

RingCentralMeetings: ZoomBundleVersionNumber - SDK 10.10 (2016-04-27) [Support]

Audio Plug-ins: ⓘ

DVCPROHDAudio: 1.3.2 (2013-04-18)

3rd Party Preference Panes: ⓘ

Flash Player (2016-04-15) [Support]

Growl (2013-04-18) [Support]

TrackballWorks (2015-08-05) [Support]

Time Machine: ⓘ

Time Machine not configured!

Top Processes by CPU: ⓘ

19% ReportCrash

5% kernel_task

4% opendirectoryd

3% WindowServer

2% coresymbolicationd

Top Processes by Memory: ⓘ

1.40 GB com.apple.WebKit.WebContent(15)

942 MB Safari

795 MB kernel_task

287 MB Mail

188 MB mdworker(12)

Virtual Memory Information: ⓘ

509 MB Free RAM

7.50 GB Used RAM (1.81 GB Cached)

203 MB Swap Used

Diagnostics Information: ⓘ

May 3, 2016, 09:32:22 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093222_[redac ted].crash

/Users/USER/Library/NDSPCShowServer/NDSPCShowServer.bundle/Contents/MacOS/PCSho wServerPMWrapper

May 3, 2016, 09:32:13 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093213_[redac ted].crash

May 3, 2016, 09:32:02 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093202_[redac ted].crash

May 3, 2016, 09:31:52 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093152_[redac ted].crash

May 3, 2016, 09:31:42 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093142_[redac ted].crash

May 3, 2016, 09:31:32 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093132_[redac ted].crash

May 3, 2016, 09:31:22 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093122_[redac ted].crash

May 3, 2016, 09:31:12 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093112_[redac ted].crash

May 3, 2016, 09:31:11 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093111_[redac ted].crash

May 3, 2016, 09:30:55 AM ~/Library/Logs/DiagnosticReports/Adobe Illustrator_2016-05-03-093055_[redacted].crash

/Applications/Adobe Illustrator CS5.1/Adobe Illustrator.app/Contents/MacOS/Adobe Illustrator

May 3, 2016, 09:30:30 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093030_[redac ted].crash

May 3, 2016, 09:30:20 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093020_[redac ted].crash

May 3, 2016, 09:30:10 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-093010_[redac ted].crash

May 3, 2016, 09:29:58 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-092958_[redac ted].crash

May 3, 2016, 09:29:47 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-092947_[redac ted].crash

May 3, 2016, 09:29:37 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-092937_[redac ted].crash

May 3, 2016, 09:29:27 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-092927_[redac ted].crash

May 3, 2016, 09:29:16 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-092916_[redac ted].crash

May 3, 2016, 09:29:15 AM ~/Library/Logs/DiagnosticReports/PCShowServerPMWrapper_2016-05-03-092915_[redac ted].crash

iMac, OS X El Capitan (10.11.4)

Posted on May 3, 2016 7:39 AM

Reply

Answer 1

pinkstones

Level 5

4,246 points

May 3, 2016 7:50 AM in response to coolbeansdeb

Here's what I see —

You have adware on your computer. You have two options for removing it. You can either use Malwarebytes' Anti-Malware for Mac to get rid of it, which is program developed by a highly trusted and respected contributor here, or you can take care of it manually by following the steps in this support article.
You need to change your Gatekeeper settings. It's dangerous to have it set to "Anywhere." Go to System Preferences --> Security & Privacy and change it to "Mac App store and identified developers."
"PCShowServer" is crashing a lot. If you don't absolutely have to have it, I would uninstall it. If you have to have it, see if it needs to be updated to work with El Capitan. If it can't be updated to work with El Capitan, uninstall it.
You need to cut down on the number of open tabs you have when using the Internet. You've got 15 tabs using up almost 1.5 GB of RAM, which slowing your system down.

Before upgrading your system to any new OS, the first thing(s) you should do are make a complete backup of your system using either Time Machine or something like CarbonCopyCloner, and then make sure that every single application/plugin/extension/driver you have on your hard drive can work with El Capitan. If it can't, update it. If it can't be updated, uninstall it. If you can't uninstall it because you need it for work or something, then you don't upgrade.

Reply

Answer 2

JimmyCMPIT

Level 7

29,306 points

May 3, 2016 8:03 AM in response to coolbeansdeb

com.onlineapplicationnotice.AppNotice.plist

this is Adware and I'd get rid of it with Malwarebytes for mac, you apparently have it but it may be out of date, remember it doesn't prevent malware, it detects it and cleans it if it's present.

https://www.malwarebytes.org/antimalware/mac/

the overwhelming majority of users here will tell you they never had any issue with this software, i am one of them. Anyone of discerning opinion may ask you to remove this manually, it's up to you.

com.nds.pcshow.plist

com.nds.pcshow.uninstall.plist

apparently this could be a DirectTV app and if you don't need it remove it, otherwise if you are using sky-blue player or sky-blue desktop throw them out.

com.dtv.vgconnect.plist (2014-09-18)

com.dtv.vgconnect.uninstall.plist (2014-10-20)

again, DirectTV, i'd loose it.

LMI (log me in) seems to be having issues. to test I would remove/uninstall it.

you are running some sort of accounting software

I have no idea why it needs to be present at boot.

you may wish to ask the developer before removing.

com.nchsoftware.expressaccounts.agent.plist (2013-05-01)

com.nchsoftware.expressinvoice.agent.plist (2013-05-01)

com.nchsoftware.inventoria.agent.plist (2013-05-01)

com.nchsoftware.reflect.agent.plist (2013-05-02)

apparently you are running Growl, most people running it don't know they are running it, here's how to remove it.

http://growl.info/documentation/growl-package-removal.php

I'd also detach the zoom device and any other external device after removal, then run the test again, and if it's clean reattach the devices one by one.

Reply

Answer 3

coolbeansdeb Author

Level 1

8 points

May 3, 2016 8:09 AM in response to JimmyCMPIT

Will remove some of these items, yes that Growl is a pain, didn't realize still there.

To remove the unwanted programs do I need to do an uninstall or just drag them to the trash?

I trashed something once called PC something that was using a lot of memory and my whole system shut down so I try not to throw stuff away unless I know what it is. I don't use any outside PC apps etc just mac.

Just downloaded and reran the Malwarebytes but it says I'm clean? Am I missing something?

Reply

Answer 4

JimmyCMPIT

Level 7

29,306 points

May 3, 2016 8:26 AM in response to coolbeansdeb

some of them you do, some may require an uninstaller, check with the developers websites, if they are not disingenuous to begin with most developers have the correct method of removal on their sites. From what I can see the stuff you have is fairly legit so I'd trust them a bit more than some other "usual suspects" we see 'round these parts.

com.onlineapplicationnotice.AppNotice.plist

it may be a false positive on etrecheck, it may be neglect on malware bytes.

the etrecheck dev is on these forums and may respond (and don't be surprised if an argument breaks out but hopefully it will stay on topic)

I can't find much in English on this, but it may be part of something called "free iPhone for Mac" or it could be a 3rd party Android app, or it could be related to herring, I found stuff on Scandinavian websites but I forgot all the Scandinavian learned during the resurgence of swing dancing.

there may be an entry for it in

>System Preferences>Users & Groups

go to your account

unlock the panel

check the "login items" tab

if so uncheck it.

also check

Macintosh HD/Library/StartupItems

and if it's there remove it.

if it is an app for android or "free iPhone" check with the developer if you can find them on line, otherwise most uninstalls like you've seen on a mac begin with a short trip to Oscar the Grouch's home.

Reply

Answer 5

pinkstones

Level 5

4,246 points

May 3, 2016 8:33 AM in response to coolbeansdeb

murksaxet wrote:

I trashed something once called PC something that was using a lot of memory and my whole system shut down so I try not to throw stuff away unless I know what it is. I don't use any outside PC apps etc just mac.

It doesn't appear you uninstalled it correctly, because if that's the same program I mentioned in my initial response to you, it's still on your computer. You might have to reinstall it, then uninstall it completely following the developer's instructions.

Reply

Answer 6

Linc Davis

Level 10

209,739 points

May 3, 2016 9:04 AM in response to coolbeansdeb

When you see a beachball cursor or the slowness is especially bad, note the exact time: hour, minute, second.

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any one of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES ▹ All Messages

from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar at the top of the screen.

Each message in the log begins with the date and time when it was entered. Scroll back to the time you noted above.

Select the messages entered from then until the end of the episode, or until they start to repeat, whichever comes first.

Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of it useless for solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name, may appear in the log. Anonymize before posting.

When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

Reply

Answer 7

etresoft

Level 9

57,260 points

May 3, 2016 9:55 PM in response to pinkstones

pinkstones wrote:

Here's what I see —

You have adware on your computer. You have two options for removing it. You can either use Malwarebytes' Anti-Malware for Mac to get rid of it, which is program developed by a highly trusted and respected contributor here, or you can take care of it manually by following the steps in this support article.

Hello pinkstones,

EtreCheck can now remove adware, and it does so without installing any additional launch daemons like Malwarebytes does.

EtreCheck accurately identified the adware on that system. When users report unknown software in EtreCheck, I can compare the internal details with known adware. If they are the same, then I can definitively classify that unknown software as adware. That is exactly what happened in this case.

Reply

Answer 8

Dogcow-Moof

Level 8

36,857 points

May 4, 2016 12:14 AM in response to etresoft

It even had that helpful "remove" button in the EtreCheck output. ;-)

Reply