You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Stop Firefox from opening at restart

Every time I restart macOS (v10.12.4) on Mac Mini Firefox opens. I don't even use Firefox routinely, however, occasionally I need it when old fashioned website doesn't work with Safari — boy, is it slow by comparison! I looked and relooked at preferences to see where to shut it off to no avail. What might I do to get it to stop. Thanks.

Mac mini, macOS Sierra (10.12.4)

Posted on Apr 2, 2017 10:50 AM

Reply
31 replies

Apr 2, 2017 11:43 AM in response to NeilKo

What login items are listed? They have the potential to tell Firefox to open.


When Firefox opens what does it show?

Firefox could be opening because you have a link, HTML file, PDF etc set to open on login or any other item that Firefox can handle. Does it show the homepage that is set in Firefox's Preferences when it launches or something else?

You can try resetting/ refreshing Firefox…

https://support.mozilla.org/t5/Procedures-to-diagnose-and-fix/Refresh-Firefox-re set-add-ons-and-settings/ta-p/23405?redi…


Disable or remove any Firefox extensions too. I suspect malware could potentially cause it too if it tries to install addons or add other changes for Firefox.

See if http://malwarebytes.com/ detects anything.


You can also create a new user account & see if that exhibits the same behaviour.


Log out, login but hold shift as you click to login & keep it held until the Desktop is fully loaded - that disables login items, does Firefox still open in that case?


Does safe boot alter it at all?

Use safe mode to isolate issues with your Mac - Apple Support

Apr 2, 2017 12:50 PM in response to Drew Reece

OK, Drew, I went through all of yours to no available, but I will list each as I went through them in case I've done one or more incorrectly.


Only Login Items I have and have had for many, many months are CrashPlan menu bar and 1Password 6, which I've only had for less than two months. See image attached...

User uploaded file

When FF opens, it opens in the "Safe finder" window. See image attached...

User uploaded file


It does show the homepage ID'd in preferences when opening. See attached image of same...


User uploaded file


I did try resetting/ refreshing FF. First time restart it did not open, but next time it did.


I have no FF extensions, nor have I ever had same. I use FF as little as I can; only when necessary.


I downloaded Malwarebytes, but I could not get it to run.


I have not yet created a new user account; I missed this one in your list. I will now try my guest account to see if it fails in the same manner and let you know.


I did a safe boot with no success. While I was in safe boot FF did not open, but when I went back to my standard account, it did.


Thanks for your effort. I'll now try the alternative guest account and let you know results. —NeilKo

Apr 12, 2017 12:47 PM in response to Drew Reece

Hi Drew


I've been seeking to clean up my Mini as much as possible along the way. I am quite frustrated by the "Swap Used problem." The place I see "Beachballing" the most is when I open or go to use Excel, which I use every day. It is extremely slow to open. Also, I noticed that my Boom 2 seems to take up a disproportionate amount of RAM, so I'm now keeping it closed on a regular basis, although even though it is closed, it still shows up in my etrecheck report; I just did another run, hoping that it might tell you something new about what my system looks like now that it has been a couple of weeks since the last run...


Top Processes by CPU:

7% securityd

7% WindowServer

7% kernel_task

4% identityservicesd

3% blued


Top Processes by Memory:

1.81 GB Boom 2

1.50 GB kernel_task

1.12 GB com.apple.WebKit.WebContent(5)

590 MB Safari

442 MB mdworker(14)

Virtual Memory Information:

5.04 GB Available RAM

1.73 GB Free RAM

10.96 GB Used RAM

3.31 GB Cached files

7.50 GB Swap Used


I have the full run saved, should you want to see it.


Finally, last but not least, as I was going through the paces guided by you, I realized that the opening Sierra Mountains that I have is not "normal," i.e., mine is heavily blurred — see attached below. When I went to my guest sign in, I noticed that it is nicely crisp as it should be, and I wonder if there is still an anomaly in my system that is causing it. User uploaded file


As always, I appreciate any guidance you may have for me.

Apr 13, 2017 8:17 PM in response to NeilKo

The desktop that appears on startup sounds like the login window (where you choose a user & enter the password)

That is normally blurred…

User uploaded file


I suspect you can just redownload Boom2 if you have a custom build installed. I have not used it very much at all so I can't comment. I agree with you & ishrugged, see if removing PIA makes it better too.

Apr 2, 2017 1:53 PM in response to NeilKo

I believe safe finder is malware or some other form of junk…

http://www.besttechtips.org/how-to-remove-safe-finder/


I would start by removing the safe finder as the FF homepage, a reset should have removed it anyway so you probably have other junk installed that is reinstalling 'safe finder'.


I'd suggest you tell us why Malwarebytes's app failed - e.g. did the download complete, did the app fail to open etc… Running that should help you to rip out the crapware.


Other posts here may have other ways to remove it…

I have safe finder on my mac I don't want it


If you can't seem to get rid of it post back, we may be able to find other options but I have no personal experience of this app/ junk/ browser hijacking tool.

Apr 4, 2017 8:37 AM in response to NeilKo

I just downloaded and ran Malwarebytes for Mac. My mistake earlier was that I downloaded the Windows version. I had 97 suspected files all of which I deleted and restarted. I'm hoping I'm now good to go. I did the same thing with my MBA, as it is on the same network, and I had about 45 threat files there.


I've now downloaded Etrecheck to run it. I've now run it, but I have no idea how to read it, so please advise if you see other things I might do to clean up my system; here are the results...


EtreCheck version: 3.1.5 (343)

Report generated 2017-04-04 10:34:15

Download EtreCheck from https://etrecheck.com

Runtime 2:24

Performance: Excellent


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Problem: Other problem

Description:

Malware


Hardware Information:

Mac mini (Late 2012)

[Technical Specifications] - [User Guide] - [Warranty & Service]

Mac mini - model: Macmini6,1

1 2.5 GHz Intel Core i5 (i5-3210M) CPU: 2-core

16 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: Unknown

Video Information:

Intel HD Graphics 4000

Thunderbolt Display 2048 x 1152

2757 1920 x 1080 @ 60 Hz


System Software:

macOS Sierra 10.12.4 (16E195) - Time since boot: less than an hour


Disk Information:

Samsung SSD 840 EVO 500GB disk0 : (500.11 GB) (Solid State - TRIM: No)

[Show SMART report]

EFI (disk0s1) <not mounted> : 210 MB

SSD (disk0s2) / [Startup]: 499.25 GB (186.95 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


HGST HTS721010A9E630 disk1 : (1 TB) (Rotational)

[Show SMART report]

EFI (disk1s1) <not mounted> : 210 MB

HDD (disk1s2) /Volumes/HDD : 999.86 GB (791.31 GB free)


USB Information:

Apple, Inc. IR Receiver

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. FaceTime HD Camera (Display)

Apple Inc. Apple Thunderbolt Display

BLUE MICROPHONE Blue Snowball

Apple Inc. Display Audio

VIA Labs, Inc. USB3.0 Hub

ASIX Elec. Corp. AX88179

VIA Labs, Inc. USB2.0 Hub

C-Media Electronics Inc. USB PnP Sound Device

VIA Labs, Inc. USB3.0 Hub

VIA Labs, Inc. USB2.0 Hub

harman/kardon SoundSticks

Apple, Inc. Keyboard Hub

Apple Inc. Apple Keyboard

KYE Systems Corp. USB_Camera


Thunderbolt Information:

Apple Inc. thunderbolt_bus

Belkin International, Inc. Express Dock

Apple Inc. Thunderbolt Display


Gatekeeper:

Anywhere


Kernel Extensions:

/Applications/Boom 2.app

[loaded] com.globaldelight.driver.Boom2Device (1.2 - SDK 10.10 - 2017-01-18) [Support]


/Applications/Transmit.app

[not loaded] com.panic.TransmitDisk.transmitdiskfs (4.0.0 - SDK 10.6 - 2014-12-12) [Support]


/Applications/Utilities/DiskWarrior.app

[not loaded] com.alsoft.Preview (4.4 - 2014-12-27) [Support]


/Library/Extensions

[loaded] com.Cycling74.driver.Soundflower (1.6.7 - SDK 10.10 - 2017-04-01) [Support]


System Launch Agents:

[not loaded] 6 Apple tasks

[loaded] 172 Apple tasks

[running] 104 Apple tasks


System Launch Daemons:

[not loaded] 37 Apple tasks

[loaded] 177 Apple tasks

[running] 104 Apple tasks


Launch Agents:

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (2016-11-24) [Support]

[running] com.fujitsu.pfu.ScanSnap.AOUMonitor.plist (2017-01-18) [Support]

[loaded] com.google.keystone.agent.plist (2017-03-08) [Support]

[not loaded] com.teamviewer.teamviewer.plist (2017-04-04) [Support]

[not loaded] com.teamviewer.teamviewer_desktop.plist (2017-04-04) [Support]


Launch Daemons:

[loaded] com.adobe.ARMDC.Communicator.plist (2017-01-11) [Support]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (2017-01-11) [Support]

[loaded] com.adobe.fpsaud.plist (2017-02-28) [Support]

[loaded] com.barebones.authd.plist (2015-12-18) [Support]

[running] com.crashplan.engine.plist (2017-04-03) [Support]

[loaded] com.google.keystone.daemon.plist (2017-03-08) [Support]

[loaded] com.malwarebytes.HelperTool.plist (2017-04-04) [Support]

[loaded] com.microsoft.office.licensing.helper.plist (2015-06-04) [Support]

[loaded] com.skype.skypeinstaller.plist (2016-05-20) [Support]

[loaded] com.teamviewer.Helper.plist (2016-12-21) [Support]

[not loaded] com.teamviewer.teamviewer_service.plist (2017-04-04) [Support]

[loaded] jp.co.canon.MasterInstaller.plist (2015-12-26) [Support]


User Launch Agents:

[loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist (2017-03-15) [Support]

[loaded] com.pia.pia_manager.plist (2017-03-22)


User Login Items:

CrashPlan menu bar Application

(/Applications/CrashPlan.app/Contents/Helpers/CrashPlan menu bar.app)

1Password 6 Application

(/Applications/1Password 6.app)


Internet Plug-ins:

AdobePDFViewerNPAPI: 15.023.20056 - SDK 10.11 (2017-01-22) [Support]

FlashPlayer-10.6: 25.0.0.127 - SDK 10.9 (2017-03-14) [Support]

QuickTime Plugin: 7.7.3 (2017-04-01)

AdobePDFViewer: 15.023.20056 - SDK 10.11 (2017-01-22) [Support]

Flash Player: 25.0.0.127 - SDK 10.9 (2017-03-14) [Support]

SharePointBrowserPlugin: 14.6.8 - SDK 10.6 (2016-09-20) [Support]


User internet Plug-ins:

CitrixOnlineWebDeploymentPlugin: 1.0.105 (2013-04-25) [Support]


Safari Extensions:

1Password - AgileBits - https://agilebits.com/onepassword (2017-02-15)

Evernote Web Clipper - Evernote Corp. - http://evernote.com (2016-12-04)

Grammarly Spell Checker & Grammar Checker - Grammarly (2016-03-29)


3rd Party Preference Panes:

Flash Player (2017-02-28) [Support]


Time Machine:

Mobile backups: OFF

Auto backup: YES

Volumes being backed up:

SSD: Disk size: 499.25 GB Disk used: 312.30 GB

Destinations:

TimeMachineN [Local]

Total size: 3.00 TB

Total number of backups: 116

Oldest backup: 1/31/15, 4:11 PM

Last backup: 2/9/17, 8:29 AM

Size of backup disk: Excellent

Backup size 3.00 TB > (Disk size 499.25 GB X 3)


Top Processes by CPU:

187% softwareupdated

36% kernel_task

21% syncdefaultsd

8% WindowServer

6% Boom 2


Top Processes by Memory:

1.66 GB softwareupdated

1.16 GB kernel_task

1.04 GB com.apple.WebKit.WebContent(5)

721 MB mdworker(21)

475 MB Safari


Virtual Memory Information:

3.64 GB Available RAM

31 MB Free RAM

12.36 GB Used RAM

3.61 GB Cached files

95 MB Swap Used


Diagnostics Information:

Apr 4, 2017, 10:15:42 AM /Library/Logs/DiagnosticReports/coreaudiod_2017-04-04-101542_[redacted].crash

/usr/sbin/coreaudiod

Apr 4, 2017, 10:15:30 AM Self test - passed

Apr 4, 2017, 06:58:43 AM /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2017-04-04-065843_[ redacted].cpu_resource.diag [Details]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.We bKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

Apr 3, 2017, 10:02:20 AM /Library/Logs/DiagnosticReports/coreaudiod_2017-04-03-100220_[redacted].crash

Apr 3, 2017, 10:01:20 AM ~/Library/Logs/DiagnosticReports/quicklookd_2017-04-03-100120_[redacted].crash

/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd. app/Contents/MacOS/quicklookd

Apr 3, 2017, 09:58:31 AM /Library/Logs/DiagnosticReports/lsd_2017-04-03-095831_[redacted].crash

/usr/libexec/lsd

Apr 3, 2017, 09:43:50 AM /Library/Logs/DiagnosticReports/com.apple.WebKit.Networking_2017-04-03-094350_[ redacted].cpu_resource.diag [Details]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.We bKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking

Apr 3, 2017, 09:22:06 AM ~/Library/Logs/DiagnosticReports/Calendar_2017-04-03-092206_[redacted].crash

com.apple.iCal - /Applications/Calendar.app/Contents/MacOS/Calendar

Apr 3, 2017, 07:59:19 AM ~/Library/Logs/DiagnosticReports/Installer_2017-04-03-075919_[redacted].crash

com.fuzeday.Installer - /Users/[redacted]/Library/Application Support/sourcekp/sourcekp.app/Contents/MacOS/Installer

Apr 2, 2017, 02:32:19 PM /Library/Logs/DiagnosticReports/identityservicesd_2017-04-02-143219_[redacted]. crash

/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/ MacOS/identityservicesd

Apr 1, 2017, 05:39:52 PM /Library/Logs/DiagnosticReports/CrashPlanService_2017-04-01-173952_[redacted].c pu_resource.diag [Details]

/Applications/CrashPlan.app/Contents/MacOS/CrashPlanService

Apr 1, 2017, 04:42:09 PM ~/Library/Logs/DiagnosticReports/PDFpenPro_2017-04-01-164209_[redacted].crash

/Applications/PDFpenPro.app/Contents/MacOS/PDFpenPro

Apr 1, 2017, 04:30:22 PM /Library/Logs/DiagnosticReports/mtmd_2017-04-01-163022_[redacted].crash

/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmd

Apr 1, 2017, 04:30:04 PM /Library/Logs/DiagnosticReports/mtmd_2017-04-01-163004_[redacted].crash

Apr 1, 2017, 04:29:55 PM /Library/Logs/DiagnosticReports/mtmd_2017-04-01-162955_[redacted].crash

Apr 1, 2017, 04:29:41 PM /Library/Logs/DiagnosticReports/mtmd_2017-04-01-162941_[redacted].crash

Apr 1, 2017, 04:29:32 PM /Library/Logs/DiagnosticReports/mtmd_2017-04-01-162932_[redacted].crash

Apr 1, 2017, 04:29:29 PM /Library/Logs/DiagnosticReports/mtmd_2017-04-01-162929_[redacted].crash

Apr 2, 2017 11:19 AM in response to Kappy

Thanks for giving it a go. I've checked Login Items on several occasions to ensure that Firefox is not a login item. Also, whenever I start up and Firefox is open, I immediately close it, i.e., it is not open when I shut down or restart. There has to be something else going on. Thanks, again, though. —Neil

Apr 2, 2017 12:39 PM in response to Kappy

I tried this before going to Drew's many suggestions. I thought it would be the easiest if it worked, plus I've been looking for an app like Easy Find for a year, so either way I would win. I downloaded Easy Find and searched for any and all citations for firefox and got a dozen or so. I deleted all of them thinking that would surely block it out from opening again. No cigar — FF opened the first time I tried. Nuts. I then moved on to Drew's many suggestions — See my response next.

Apr 2, 2017 12:51 PM in response to NeilKo

Then there are only a few places it might appear such as in one of these folders:


/Home/Library/LaunchAgents/

/Library/LaunchAgents/

/Library/LaunchDaemons/


You may need to look for both "firefox" and "mozilla." There will be a /Home/Library/Preferences/Mozilla/ folder that you should not delete.

Apr 2, 2017 1:10 PM in response to NeilKo

I just tried an alternative user account, and it opened without FF showing. I then logged out and in without the box checked for opening windows AND IT WORKED!! — SO FAR, ANYWAY! I'm a bit gunshy given what I've had to go through to get here, but at this moment, i.e., the last login, it stayed away. Now I'll have to try it on a restart basis, which might be different login/out.

Apr 3, 2017 4:26 AM in response to NeilKo

You have adware installed. You need to remove it and then manually fix Firefox's home page and search engine settings.


You say that Malwarebytes wouldn't run... did you download the Mac version or the Windows version? Be sure to download the Mac version.


If you did download the Mac version and it wouldn't run, what version of Mac OS X do you have? (Choose About This Mac from the Apple menu to find out.)

Apr 3, 2017 8:28 AM in response to NeilKo

Thanks to all who have offered suggestions. I finally threw in the towel and removed FF from my desktop completely. I also used Easy Find on both "firefox" and Mozilla" to delete all references to same. I've spent more time trying to fix it than I've spent on it in the last five years, so I thought it was time to pull the plug. If I should happen to need it again, I can always download it for free :-) I sincerely appreciate all who have tried to help. Thanks, again.

Apr 3, 2017 10:11 AM in response to NeilKo

You do realise that Firefox wasn't the problem?

You have adware installed that was causing it to launch. You probably still have that installed…

Run malwarebytes to remove it or look up instructions to remove 'safe finder'.


NOTE:

thomas_r works for malwarebytes - if you think I'm clueless just re read his response to you & consider that he knows what he is talking about 🙂


Good luck

Stop Firefox from opening at restart

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.