HI, I'm trying to disable kernel_task because it's using up my CPU, but I can't find the IOPlatformPluginFamily.kext folder that will help me move it and solve the problem. Can someone tell me how/why it's missing and how I get it back? Thanks.
My model identifier is a MacBook Pro 9,2
MacBook Pro
the settings should look like this…
and you should have "Macintosh HD" selected in the drop down menu underneath the search field.
1. At its peak kernel_task uses 800-1gb of my memory, and can freeze my whole desktop.
2. I used the uninstaller to get rid of CleanMyMac.
EtreCheck version: 3.0 (300)
Report generated 2016-08-14 21:05:51
Download EtreCheck from https://etrecheck.com
Runtime 3:47
Performance: Good
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Problem: Computer is too slow
Hardware Information:ⓘ
MacBook Pro (13-inch, Mid 2012)
[Technical Specifications] - [User Guide] - [Warranty & Service]
MacBook Pro - model: MacBookPro9,2
1 2.5 GHz Intel Core i5 CPU: 2-core
4 GB RAM Upgradeable - [Instructions]
BANK 0/DIMM0
2 GB DDR3 1600 MHz ok
BANK 1/DIMM0
2 GB DDR3 1600 MHz ok
Bluetooth: Good - Handoff/Airdrop2 supported
Wireless: en1: 802.11 a/b/g/n
Battery: Health = Normal - Cycle count = 843
Video Information:ⓘ
Intel HD Graphics 4000
Color LCD 1280 x 800
System Software:ⓘ
OS X El Capitan 10.11.6 (15G31) - Time since boot: about 2 hours
Disk Information:ⓘ
APPLE HDD HTS545050A7E362 disk0 : (500.11 GB) (Rotational)
EFI (disk0s1) <not mounted> : 210 MB
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
Macintosh HD (disk1) / : 498.88 GB (243.03 GB free)
Encrypted AES-XTS Unlocked
Core Storage: disk0s2 499.25 GB Online
HL-DT-ST DVDRW GS41N ()
USB Information:ⓘ
Apple Inc. FaceTime HD Camera (Built-in)
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Computer, Inc. IR Receiver
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Seagate Expansion 2 TB
EFI (disk2s1) <not mounted> : 210 MB
Seagate Expansion Drive (disk2s2) /Volumes/Seagate Expansion Drive : 2.00 TB (1.38 TB free)
Thunderbolt Information:ⓘ
Apple Inc. thunderbolt_bus
Configuration files:ⓘ
/etc/sysctl.conf - File exists but not expected
Gatekeeper:ⓘ
Mac App Store and identified developers
Kernel Extensions:ⓘ
/System/Library/Extensions
[not loaded] com.ZTE.driver.ZTEUSBCDCACMData (ZTEDriver_MacV1.3.1 - 2016-08-14) [Support]
[not loaded] com.ZTE.driver.ZTEUSBMassStorageFilter (ZTEDriver_MacV1.3.1 - 2016-08-14) [Support]
System Launch Agents:ⓘ
[not loaded] 6 Apple tasks
[loaded] 152 Apple tasks
[running] 59 Apple tasks
[killed] 21 Apple tasks
21 processes killed due to insufficient RAM
System Launch Daemons:ⓘ
[not loaded] 43 Apple tasks
[loaded] 156 Apple tasks
[running] 76 Apple tasks
[killed] 15 Apple tasks
15 processes killed due to insufficient RAM
Launch Agents:ⓘ
[running] com.jamfsoftware.jamf.agent.plist (2016-02-23) [Support]
[running] com.papercut.client.plist (2015-12-16)
Launch Daemons:ⓘ
[failed] cn.com.zte.PPPMonitor.plist (2009-08-27) - /Library/Application Support/ZTE_Mobile/PPPMonitordForMobile: Executable not found!
[failed] com.adobe.fpsaud.plist (2016-04-05)
[failed] com.jamfsoftware.jamf.daemon.plist (2016-02-23) - /usr/local/jamf/bin/jamf: Executable not found!
[not loaded] com.jamfsoftware.startupItem.plist (2016-02-23)
[failed] com.jamfsoftware.task.1.plist (2016-02-23) - /usr/local/jamf/bin/jamf: Executable not found!
[failed] com.jamfsoftware.task.checkForTasks.plist (2016-02-24) - /usr/local/jamf/bin/jamf: Executable not found!
[loaded] com.macpaw.CleanMyMac2.Agent.plist (2015-01-27) [Support]
[loaded] com.microsoft.office.licensing.helper.plist (2012-04-02)
[loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (2015-04-20) - /Applications/Tunnelblick.app/Contents/Resources/tunnelblickd: Executable not found!
User Launch Agents:ⓘ
[loaded] com.bittorrent.uTorrent.plist (2016-05-16) [Support]
[loaded] com.google.keystone.agent.plist (2016-07-12)
[running] com.spotify.webhelper.plist (2016-08-14) [Support]
[failed] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (2015-03-31) - /Applications/Tunnelblick.app/Contents/Resources/launchAtLogin.sh: Executable not found!
Internet Plug-ins:ⓘ
FlashPlayer-10.6: 21.0.0.213 - SDK 10.6 (2016-04-08) [Support]
QuickTime Plugin: 7.7.3 (2016-08-14)
Flash Player: 21.0.0.213 - SDK 10.6 (2016-04-08) Outdated! Update
Default Browser: 601 - SDK 10.11 (2016-08-14)
SharePointBrowserPlugin: 14.5.4 - SDK 10.6 (2015-08-17) [Support]
Silverlight: 5.1.20913.0 - SDK 10.6 (2014-02-10) [Support]
JavaAppletPlugin: 15.0.1 - SDK 10.11 (2015-04-23) Check version
Safari Extensions:ⓘ
iTube Studio - iSkysoft Studio - http://www.iskysoft.com (2014-02-26)
3rd Party Preference Panes:ⓘ
Flash Player (2016-04-05) [Support]
Time Machine:ⓘ
Mobile backups: ON
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 498.88 GB Disk used: 255.84 GB
Destinations:
Seagate Expansion Drive [Local]
Total size: 2.00 TB
Total number of backups: 15
Oldest backup: 21/02/2015, 12:08 AM
Last backup: 14/03/2016, 1:08 PM
Size of backup disk: Excellent
Backup size 2.00 TB > (Disk size 498.88 GB X 3)
Top Processes by CPU:ⓘ
52% backupd
12% Google Chrome Helper(8)
4% Google Chrome
4% WindowServer
3% kernel_task
Top Processes by Memory:ⓘ
652 MB kernel_task
627 MB Google Chrome Helper(8)
238 MB mdworker(15)
176 MB Google Chrome
90 MB Spotify Helper(2)
Virtual Memory Information:ⓘ
30 MB Free RAM
3.97 GB Used RAM (924 MB Cached)
126 MB Swap Used
Diagnostics Information:ⓘ
Aug 14, 2016, 06:35:44 PM Self test - passed
Aug 14, 2016, 04:32:11 PM ~/Library/Logs/DiagnosticReports/findNames_2016-08-14-163211_[redacted].crash
/System/Library/Services/AppleSpell.service/Contents/MacOS/findNames
Aug 12, 2016, 07:04:36 PM /Library/Logs/DiagnosticReports/App Store_2016-08-12-190436_[redacted].hang
/Applications/App Store.app/Contents/MacOS/App Store
Files deleted by EtreCheck:ⓘ
Aug 14, 2016, 07:57:14 PM - /Users/SarahChia/Library/LaunchAgents/com.spigot.ApplicationManager.plist
Aug 14, 2016, 07:57:21 PM - /Users/SarahChia/Library/Safari/Extensions/Searchme.safariextz
Aug 14, 2016, 07:58:44 PM - /Library/LaunchAgents/cn.com.zte.mobile.usbswapper.plist
I also didn't have Macintosh HD selected in the search field, and the .kext file came up in the Extensions folder, but now I'm not sure as to whether or not to alter it anymore. You've dissauded me haha
Part of CleanMyMac is still in the list.
You have too many apps starting. Open System Preferences > Users & Groups > Login Items and delete anything you don't need to run all the time with the minus button. Then restart.
You have something called iTube Studio installed from 2014 which may not be compatible with El Capitan. Check for an update.
I don't know what this is…jamfsoftware but see if you can disable it.
What you should do is start in safe mode and see how things run.
There are no login items, I disabled them all a few months ago so I don't know why they're coming up.
How do I disable the .plist files?
Did you remove them or just uncheck them? Unchecking them does not remove them.
I removed them.
How do I disable the jamfsoftware .plist files?
As I said, I don't know that software. You don't need to disable the playlist file if it's not running.
Have you restarted?
Post a new EtreCheck report.
EtreCheck version: 3.0 (300)
Report generated 2016-08-14 22:26:33
Download EtreCheck from https://etrecheck.com
Runtime 6:06
Performance: Below Average
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Problem: Computer is too slow
Hardware Information:ⓘ
MacBook Pro (13-inch, Mid 2012)
[Technical Specifications] - [User Guide] - [Warranty & Service]
MacBook Pro - model: MacBookPro9,2
1 2.5 GHz Intel Core i5 CPU: 2-core
4 GB RAM Upgradeable - [Instructions]
BANK 0/DIMM0
2 GB DDR3 1600 MHz ok
BANK 1/DIMM0
2 GB DDR3 1600 MHz ok
Bluetooth: Good - Handoff/Airdrop2 supported
Wireless: en1: 802.11 a/b/g/n
Battery: Health = Normal - Cycle count = 843
Video Information:ⓘ
Intel HD Graphics 4000
Color LCD 1280 x 800
System Software:ⓘ
OS X El Capitan 10.11.6 (15G31) - Time since boot: about 3 hours
Disk Information:ⓘ
APPLE HDD HTS545050A7E362 disk0 : (500.11 GB) (Rotational)
EFI (disk0s1) <not mounted> : 210 MB
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
Macintosh HD (disk1) / : 498.88 GB (242.84 GB free)
Encrypted AES-XTS Unlocked
Core Storage: disk0s2 499.25 GB Online
HL-DT-ST DVDRW GS41N ()
USB Information:ⓘ
Apple Inc. FaceTime HD Camera (Built-in)
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Computer, Inc. IR Receiver
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Seagate Expansion 2 TB
EFI (disk2s1) <not mounted> : 210 MB
Seagate Expansion Drive (disk2s2) /Volumes/Seagate Expansion Drive : 2.00 TB (1.37 TB free)
Thunderbolt Information:ⓘ
Apple Inc. thunderbolt_bus
Configuration files:ⓘ
/etc/sysctl.conf - File exists but not expected
Gatekeeper:ⓘ
Mac App Store and identified developers
Kernel Extensions:ⓘ
/System/Library/Extensions
[not loaded] com.ZTE.driver.ZTEUSBCDCACMData (ZTEDriver_MacV1.3.1 - 2016-08-14) [Support]
[not loaded] com.ZTE.driver.ZTEUSBMassStorageFilter (ZTEDriver_MacV1.3.1 - 2016-08-14) [Support]
System Launch Agents:ⓘ
[not loaded] 6 Apple tasks
[loaded] 152 Apple tasks
[running] 57 Apple tasks
[killed] 23 Apple tasks
23 processes killed due to insufficient RAM
System Launch Daemons:ⓘ
[not loaded] 43 Apple tasks
[loaded] 155 Apple tasks
[running] 75 Apple tasks
[killed] 17 Apple tasks
17 processes killed due to insufficient RAM
Launch Agents:ⓘ
[running] com.jamfsoftware.jamf.agent.plist (2016-02-23) [Support]
[running] com.papercut.client.plist (2015-12-16)
Launch Daemons:ⓘ
[failed] cn.com.zte.PPPMonitor.plist (2009-08-27) - /Library/Application Support/ZTE_Mobile/PPPMonitordForMobile: Executable not found!
[failed] com.adobe.fpsaud.plist (2016-04-05)
[failed] com.jamfsoftware.jamf.daemon.plist (2016-02-23) - /usr/local/jamf/bin/jamf: Executable not found!
[not loaded] com.jamfsoftware.startupItem.plist (2016-02-23)
[failed] com.jamfsoftware.task.1.plist (2016-02-23) - /usr/local/jamf/bin/jamf: Executable not found!
[failed] com.jamfsoftware.task.checkForTasks.plist (2016-02-24) - /usr/local/jamf/bin/jamf: Executable not found!
[loaded] com.microsoft.office.licensing.helper.plist (2012-04-02)
[loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (2015-04-20) - /Applications/Tunnelblick.app/Contents/Resources/tunnelblickd: Executable not found!
User Launch Agents:ⓘ
[loaded] com.bittorrent.uTorrent.plist (2016-05-16) [Support]
[loaded] com.google.keystone.agent.plist (2016-07-12)
[running] com.spotify.webhelper.plist (2016-08-14) [Support]
[failed] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (2015-03-31) - /Applications/Tunnelblick.app/Contents/Resources/launchAtLogin.sh: Executable not found!
Internet Plug-ins:ⓘ
FlashPlayer-10.6: 21.0.0.213 - SDK 10.6 (2016-04-08) [Support]
QuickTime Plugin: 7.7.3 (2016-08-14)
Flash Player: 21.0.0.213 - SDK 10.6 (2016-04-08) Outdated! Update
Default Browser: 601 - SDK 10.11 (2016-08-14)
SharePointBrowserPlugin: 14.5.4 - SDK 10.6 (2015-08-17) [Support]
Silverlight: 5.1.20913.0 - SDK 10.6 (2014-02-10) [Support]
JavaAppletPlugin: 15.0.1 - SDK 10.11 (2015-04-23) Check version
3rd Party Preference Panes:ⓘ
Flash Player (2016-04-05) [Support]
Time Machine:ⓘ
Mobile backups: ON
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 498.88 GB Disk used: 256.03 GB
Destinations:
Seagate Expansion Drive [Local]
Total size: 2.00 TB
Total number of backups: 15
Oldest backup: 21/02/2015, 12:08 AM
Last backup: 14/03/2016, 1:08 PM
Size of backup disk: Excellent
Backup size 2.00 TB > (Disk size 498.88 GB X 3)
Top Processes by CPU:ⓘ
22% Finder
12% WindowServer
5% mdworker(19)
4% Google Chrome Helper(10)
4% kernel_task
Top Processes by Memory:ⓘ
770 MB Google Chrome Helper(10)
604 MB kernel_task
221 MB mdworker(19)
152 MB Google Chrome
98 MB mds_stores
Virtual Memory Information:ⓘ
48 MB Free RAM
3.95 GB Used RAM (724 MB Cached)
109 MB Swap Used
Diagnostics Information:ⓘ
Aug 14, 2016, 06:35:44 PM Self test - passed
Aug 14, 2016, 04:32:11 PM ~/Library/Logs/DiagnosticReports/findNames_2016-08-14-163211_[redacted].crash
/System/Library/Services/AppleSpell.service/Contents/MacOS/findNames
Aug 12, 2016, 07:04:36 PM /Library/Logs/DiagnosticReports/App Store_2016-08-12-190436_[redacted].hang
/Applications/App Store.app/Contents/MacOS/App Store
Files deleted by EtreCheck:ⓘ
Aug 14, 2016, 07:57:14 PM - /Users/SarahChia/Library/LaunchAgents/com.spigot.ApplicationManager.plist
Aug 14, 2016, 07:57:21 PM - /Users/SarahChia/Library/Safari/Extensions/Searchme.safariextz
Aug 14, 2016, 07:58:44 PM - /Library/LaunchAgents/cn.com.zte.mobile.usbswapper.plist
Did you delete some apps?
Try restarting in safe mode and run the report while in safe mode.
I wonder why EtreCheck removed…
| Aug 14, 2016, 07:57:21 PM - /Users/SarahChia/Library/Safari/Extensions/Searchme.safariextz |
| Aug 14, 2016, 07:58:44 PM - /Library/LaunchAgents/cn.com.zte.mobile.usbswapper.plist |
Yeah I'm not really sure either, I didn't alter either of those inbetween EtreChecks.
I removed the CleanMyMac.plist and the Safari Extension iPlayer.
I won't do a reboot until tomorrow, I'm doing a backup that will last all night so I'll reply tomorrow with the EtreCheck results.
Thanks for all your advice and insight, been extremely helpful so far.
You're welcome.
s_chia wrote:
Yeah I'm not really sure either, I didn't alter either of those inbetween EtreChecks.
Hello s_chia,
The only way EtreCheck will delete any files is if the user uses EtreCheck to delete the files. Two of those files had already been identified and flagged as adware. The zte software was unknown. Unfortunately, it was also not signed by its developer either. So, if you told EtreCheck to delete it, there would be nothing to stop EtreCheck from doing as it was told. EtreCheck was designed to be used here in Apple Support Communities. If there is ever any question about what to do with the information it provides, just ask.
If you need to use that ZTE modem, then you will need to reinstall the software. You can also locate the file "cn.com.zte.mobile.usbswapper.plist" in your Trash and use the Trash's "Put Back" command to restore it. You might need to run a Terminal command to re-enable the job. Again, reinstalling the ZTE software would probably be easier. But I would be happy to help either via e-mail support (see http://etresoft.com/#support) or here in the forums.
I went ahead and added this file to EtreCheck's whitelist. Adware and other malware is becoming a new fact of life for Mac users. Malware authors are creating a never-ending stream of never-before seen adware that is impossible to detect ahead of time. It is now the responsibility of legitimate software developers to have clearly identifiable, digitally-signed software if they want to run it hidden in the background. Otherwise, it is going to be at risk of deletion. The only option I have with EtreCheck would be to just ignore adware and malware entirely.
IOPlatformPluginFamily.kext
