Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Spinning Wheel, Ran EtreCheck, now what do I do with report?

I have been getting spinning wheel and creative cloud crashing. Saw on here a post saying to download EtreCheck and to post report, but cant find that post anymore. Can someone help me?

iMac

Posted on Dec 10, 2017 8:08 PM

Reply
5 replies

Dec 10, 2017 8:15 PM in response to munkymajik

EtreCheck version: 3.4.6 (460)

Report generated 2017-12-11 14:47:39

Download EtreCheck from https://etrecheck.com

Runtime: 5:22

Performance: Below Average


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.

Click the [Clean up] link to delete unused files.


Problem: Beachballing

Description:

Getting the beachball a lot, creative cloud apps crashing, they are the main apps I use. Just installed Sierra.


Hardware Information:

iMac (27-inch, Late 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac14,2

1 3.2 GHz Intel Core i5 (i5-4570) CPU: 4-core

8 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Handoff/Airdrop2: supported

Wireless:
en1: 802.11 a/b/g/n/ac

iCloud Quota: 690 MB available


Video Information:

NVIDIA GeForce GT 755M - VRAM: 1 GB

iMac 2560 x 1440


Disk Information:

APPLE HDD ST1000DM003 disk0: (1 TB) (Rotational)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted>
[EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) /
[Startup]: 999.35 GB (859.23 GB free)

(disk0s3) <not mounted>
[Recovery]: 650 MB


USB Information:

USB30Bus

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. FaceTime HD Camera (Built-in)

EPSON EPSON XP-200 Series


Thunderbolt Information:

Apple Inc. thunderbolt_bus


System Software:

macOS High Sierra
10.13.1 (17B1003) - Time since boot: less than an hour


Gatekeeper:

Mac App Store and identified developers


Possible adware:

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

Unknown file: ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

open /Applications/ZipCloud.app --args -s -l

Adware: ~/Library/LaunchAgents/com.pcv.hlpramc.plist

4 possible adware files found. [Remove/Report]


Clean up:

/Library/LaunchDaemons/com.citrix.ctxusbd.plist

/Library/Application Support/Citrix Receiver/ctxusbd

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/maintenance.sh

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/launch -guid NONE -source mmb-1536 -brand WebTools

Executable not found!

~/Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist

/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper

Executable not found!

4 orphan files found. [Clean up]


Kernel Extensions:

/Library/Application Support/MacKeeper/AntiVirus.app

[not loaded] net.kromtech.kext.AVKauth (2.3.7 - SDK 10.9) [Lookup]

[not loaded] net.kromtech.kext.Firewall (2.3.7 - SDK 10.9) [Lookup]


/System/Library/Extensions

[not loaded] com.devguru.driver.SamsungComposite (1.4.20 - SDK 10.6) [Lookup]


/System/Library/Extensions/ssuddrv.kext/Contents/PlugIns

[not loaded] com.devguru.driver.SamsungACMControl (1.4.20 - SDK 10.6) [Lookup]

[not loaded] com.devguru.driver.SamsungACMData (1.4.20 - SDK 10.6) [Lookup]

[not loaded] com.devguru.driver.SamsungMTP (1.4.20 - SDK 10.5) [Lookup]

[not loaded] com.devguru.driver.SamsungSerial (1.4.20 - SDK 10.6) [Lookup]


Startup Items:

HWNetMgr: Path: /Library/StartupItems/HWNetMgr

StartOuc: Path: /Library/StartupItems/StartOuc

Startup items no longer function in OS X Yosemite or later


System Launch Agents:

[not loaded] 8 Apple tasks

[loaded] 178 Apple tasks

[running] 102 Apple tasks


System Launch Daemons:

[not loaded] 37 Apple tasks

[loaded] 179 Apple tasks

[running] 114 Apple tasks


Launch Agents:

[running] HWPortCfg.plist (? 799429ac 500b9fb6 - installed 2014-03-28) [Lookup]

[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[loaded] com.citrix.AuthManager_Mac.plist (? 1ce99fae d10bd3ad - installed 2017-03-22) [Lookup]

[running] com.citrix.ReceiverHelper.plist (? bbfad3f1 e901c5c2 - installed 2017-03-22) [Lookup]

[running] com.citrix.ServiceRecords.plist (? 8e6543d 27768e09 - installed 2017-03-22) [Lookup]

[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (? e5b56ea9 77024e44 - installed 2016-02-08) [Lookup]

[running] com.epson.eventmanager.agent.plist (? cd93600d 3b1d3aeb - installed 2016-02-08) [Lookup]

[loaded] com.epson.ews.launcher.plist (? d9ab2448 ef88a691 - installed 2015-09-06) [Lookup]


Launch Daemons:

[loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2017-09-23) [Lookup]

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 eb967f59 - installed 2016-04-05) [Lookup]

[not loaded] com.apple.installer.cleanupinstaller.plist (? 1963bf56 0 - installed 2017-11-29)

[loaded] com.citrix.ctxusbd.plist (? 44dc9c9f 0 - installed 2017-02-02) [Lookup] - /Library/Application Support/Citrix Receiver/ctxusbd: Executable not found!

[loaded] com.macpaw.CleanMyMac3.Agent.plist (MacPaw Inc. - installed 2017-09-15) [Lookup]

[loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-27) [Lookup]

[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e 8b29c3ef - installed 2012-04-02) [Lookup]

[running] com.zeobit.MacKeeper.AntiVirus.plist (ZeoBIT LLC - installed 2014-09-04) [Lookup]

[running] com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist (ZeoBIT LLC - installed 2015-11-25) [Lookup]


User Launch Agents:

[failed] com.WebTools.oiuqw343sQ9a.helpd.plist (? d35359bf 0 - installed 2015-09-02) Adware!
[Remove/Report]

[failed] com.WebTools.oiuqw343sQ9a.plist (? 91b33378 0 - installed 2015-09-02) Adware!
[Remove/Report]

[loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[loaded] com.adobe.ARM.[...].plist (? 560d19c8 ac8ed034 - installed 2017-09-10) [Lookup]

[loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2016-11-28) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Lookup]

[failed] com.jdibackup.ZipCloud.autostart.plist (? 91fd01ed 0 - installed 2017-01-07) [Lookup]

[loaded] com.macpaw.CleanMyMac3.Scheduler.plist (MacPaw Inc. - installed 2017-11-07) [Lookup]

[running] com.pcv.hlpramc.plist (PCVARK software Private Limited - installed 2015-09-02) Adware!
[Remove/Report]

~/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

[running] com.spotify.webhelper.plist (Spotify - installed 2017-12-03) [Lookup]

[failed] com.zeobit.MacKeeper.Helper.plist (? 18d1682b 0 - installed 2015-12-15) [Lookup] - /Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper: Executable not found!


User Login Items:

fuspredownloader Application - Hidden

(~/Library/Application Support/.FUS/fuspredownloader.app)

iTunesHelper Application (Apple, Inc. - installed 2017-12-11)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Photo Stream URL SMLoginItem - Hidden (Apple, Inc. - installed 2038-01-19)

(/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app)


Internet Plug-ins:

AdobeAAMDetect: 3.0.0.0 (installed 2017-12-11) [Lookup]

FlashPlayer-10.6: 21.0.0.213 (installed 2016-04-09) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-10-26)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2017-11-26) [Lookup]

AdobePDFViewer: 18.009.20044 (installed 2017-11-26) [Lookup]

Flash Player: 21.0.0.213 (installed 2016-04-09) Outdated! Update

Flip4Mac WMV Plugin: 3.2.0.16
(installed 2013-11-17) [Lookup]

CitrixICAClientPlugIn: 12.5.0 (installed 2017-03-22) [Lookup]

DirectorShockwave: 12.0.5r146 (installed 2013-10-24) [Lookup]

JavaAppletPlugin: 15.0.1 (installed 2014-10-25) Check version


User internet Plug-ins:

CitrixOnlineWebDeploymentPlugin: 1.0.105 (installed 2013-04-26) [Lookup]


3rd Party Preference Panes:

Flash Player (installed 2016-04-05) [Lookup]

Flip4Mac WMV (installed 2013-03-30) [Lookup]


Time Machine:

Skip System Files: NO

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 999.35 GB Disk used: 140.11 GB

Destinations:

Seagate Wireless [Local]

Total size: 2.00 TB

Total number of backups: 48

Oldest backup: 19/10/17, 7:22 am

Last backup: 29/11/17, 10:37 am

Size of backup disk: Adequate

Backup size 2.00 TB > (Disk used 140.11 GB X 3)


Top Processes by CPU:

7%
kernel_task

6%
WindowServer

4%
Adobe CEF Helper

2%
Creative Cloud

1%
Adobe Desktop Service


Top Processes by Memory:

764 MB kernel_task

277 MB Google Chrome Helper

266 MB Google Chrome Helper

257 MB AntiVirus

252 MB Google Chrome


Top Processes by Network Use:

Input Output Process name

37 KB 16 KB mDNSResponder

6 KB 5 KB apsd

7 KB 2 KB cloudd

714 B 490 B netbiosd

0 B 64 B SystemUIServer


Top Processes by Energy Use:

7.44 WindowServer

4.22 Adobe CEF Helper

2.74 AcroCEF

2.68 Creative Cloud


Virtual Memory Information:

2.84 GB
Available RAM

401 MB Free RAM

5.16 GB
Used RAM

2.45 GB
Cached files

8 MB Swap Used





Dec 11, 2017 1:04 AM in response to ahaes

Possible adware:

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

Unknown file: ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

open /Applications/ZipCloud.app --args -s -l

Adware: ~/Library/LaunchAgents/com.pcv.hlpramc.plist

4 possible adware files found. [Remove/Report]

If you agree, you can click on the [Remove/Report] button when running EtreCheck.


You could also try running MalwareBytes. I'm just talking about the free version which you run manually when you want to check.

<https://www.malwarebytes.org>


Clean up:

/Library/LaunchDaemons/com.citrix.ctxusbd.plist

/Library/Application Support/Citrix Receiver/ctxusbd

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/maintenance.sh

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/launch -guid NONE -source mmb-1536 -brand WebTools

Executable not found!

~/Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist

/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper

Executable not found!

4 orphan files found. [Clean up]

You should most likely do some house cleaning. Again you can click on the [Clean up] while running EtreCheck and the above items will be deleted.


Kernel Extensions:

/Library/Application Support/MacKeeper/AntiVirus.app

[not loaded] net.kromtech.kext.AVKauth (2.3.7 - SDK 10.9) [Lookup]

[not loaded] net.kromtech.kext.Firewall (2.3.7 - SDK 10.9) [Lookup]

This looks like some kind of anti-virus. I would remove this. Then again, when I google kromtech, MacKeeping comes up, so maybe this came along with MacKeeper.


Google "uninstall mackeeper" and you will find lots of instructions for uninstalling MacKeeper. And yes, many in the forum consider MacKeeper harmful to your Mac, even though it is technically not a virus.

[loaded] com.macpaw.CleanMyMac3.Agent.plist (MacPaw Inc. - installed 2017-09-15) [Lookup]

[loaded] com.macpaw.CleanMyMac3.Scheduler.plist (MacPaw Inc. - installed 2017-11-07) [Lookup]

CleanMyMac is another one that should go. macOS does not really need 3rd party utilities to keep it healthy.

Then review the 3rd party additions listed by EtreCheck, and uninstall, using the vendor's uninstall instructions, any that you no longer need and forgot you have installed.

Dec 10, 2017 8:48 PM in response to ahaes

Possible adware:

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

Unknown file: ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

open /Applications/ZipCloud.app --args -s -l

Adware: ~/Library/LaunchAgents/com.pcv.hlpramc.plist

4 possible adware files found. [Remove/Report]


Clean up:

/Library/LaunchDaemons/com.citrix.ctxusbd.plist

/Library/Application Support/Citrix Receiver/ctxusbd

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/maintenance.sh

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/launch -guid NONE -source mmb-1536 -brand WebTools

Executable not found!

~/Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist

/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper

Executable not found!

4 orphan files found. [Clean up]


Run the report again and click [Remove/Report] and [Clean up].


Most posters recommend not using cleaning programs. They can destroy normal computer operations.


CleanMyMac3 Uninstall


Check for associated parts and pieces using these programs.


EasyFind – Spotlight Replacement



Find Any File

MacKeeper – Do Not Install


MacKeeper – Do Not Install (2) See SDW2001’s post


MacKeeper Removal


MacKeeper Removal

Spinning Wheel, Ran EtreCheck, now what do I do with report?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.