Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Spinning Wheel, EtreCheck report, help!

I had beachball and crashing apps, Here is my EtreCheck report, now what do I do?


EtreCheck version: 3.4.6 (460)

Report generated 2017-12-11 14:47:39

Download EtreCheck from https://etrecheck.com

Runtime: 5:22

Performance: Below Average


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.

Click the [Clean up] link to delete unused files.


Problem: Beachballing

Description:

Getting the beachball a lot, creative cloud apps crashing, they are the main apps I use. Just installed Sierra.


Hardware Information:

iMac (27-inch, Late 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac14,2

1 3.2 GHz Intel Core i5 (i5-4570) CPU: 4-core

8 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Handoff/Airdrop2: supported

Wireless:
en1: 802.11 a/b/g/n/ac

iCloud Quota: 690 MB available


Video Information:

NVIDIA GeForce GT 755M - VRAM: 1 GB

iMac 2560 x 1440


Disk Information:

APPLE HDD ST1000DM003 disk0: (1 TB) (Rotational)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted>
[EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) /
[Startup]: 999.35 GB (859.23 GB free)

(disk0s3) <not mounted>
[Recovery]: 650 MB


USB Information:

USB30Bus

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. FaceTime HD Camera (Built-in)

EPSON EPSON XP-200 Series


Thunderbolt Information:

Apple Inc. thunderbolt_bus


System Software:

macOS High Sierra
10.13.1 (17B1003) - Time since boot: less than an hour


Gatekeeper:

Mac App Store and identified developers


Possible adware:

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

Unknown file: ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

open /Applications/ZipCloud.app --args -s -l

Adware: ~/Library/LaunchAgents/com.pcv.hlpramc.plist

4 possible adware files found. [Remove/Report]


Clean up:

/Library/LaunchDaemons/com.citrix.ctxusbd.plist

/Library/Application Support/Citrix Receiver/ctxusbd

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/maintenance.sh

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/launch -guid NONE -source mmb-1536 -brand WebTools

Executable not found!

~/Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist

/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper

Executable not found!

4 orphan files found. [Clean up]


Kernel Extensions:

/Library/Application Support/MacKeeper/AntiVirus.app

[not loaded] net.kromtech.kext.AVKauth (2.3.7 - SDK 10.9) [Lookup]

[not loaded] net.kromtech.kext.Firewall (2.3.7 - SDK 10.9) [Lookup]


/System/Library/Extensions

[not loaded] com.devguru.driver.SamsungComposite (1.4.20 - SDK 10.6) [Lookup]


/System/Library/Extensions/ssuddrv.kext/Contents/PlugIns

[not loaded] com.devguru.driver.SamsungACMControl (1.4.20 - SDK 10.6) [Lookup]

[not loaded] com.devguru.driver.SamsungACMData (1.4.20 - SDK 10.6) [Lookup]

[not loaded] com.devguru.driver.SamsungMTP (1.4.20 - SDK 10.5) [Lookup]

[not loaded] com.devguru.driver.SamsungSerial (1.4.20 - SDK 10.6) [Lookup]


Startup Items:

HWNetMgr: Path: /Library/StartupItems/HWNetMgr

StartOuc: Path: /Library/StartupItems/StartOuc

Startup items no longer function in OS X Yosemite or later


System Launch Agents:

[not loaded] 8 Apple tasks

[loaded] 178 Apple tasks

[running] 102 Apple tasks


System Launch Daemons:

[not loaded] 37 Apple tasks

[loaded] 179 Apple tasks

[running] 114 Apple tasks


Launch Agents:

[running] HWPortCfg.plist (? 799429ac 500b9fb6 - installed 2014-03-28) [Lookup]

[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[loaded] com.citrix.AuthManager_Mac.plist (? 1ce99fae d10bd3ad - installed 2017-03-22) [Lookup]

[running] com.citrix.ReceiverHelper.plist (? bbfad3f1 e901c5c2 - installed 2017-03-22) [Lookup]

[running] com.citrix.ServiceRecords.plist (? 8e6543d 27768e09 - installed 2017-03-22) [Lookup]

[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (? e5b56ea9 77024e44 - installed 2016-02-08) [Lookup]

[running] com.epson.eventmanager.agent.plist (? cd93600d 3b1d3aeb - installed 2016-02-08) [Lookup]

[loaded] com.epson.ews.launcher.plist (? d9ab2448 ef88a691 - installed 2015-09-06) [Lookup]


Launch Daemons:

[loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2017-09-23) [Lookup]

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 eb967f59 - installed 2016-04-05) [Lookup]

[not loaded] com.apple.installer.cleanupinstaller.plist (? 1963bf56 0 - installed 2017-11-29)

[loaded] com.citrix.ctxusbd.plist (? 44dc9c9f 0 - installed 2017-02-02) [Lookup] - /Library/Application Support/Citrix Receiver/ctxusbd: Executable not found!

[loaded] com.macpaw.CleanMyMac3.Agent.plist (MacPaw Inc. - installed 2017-09-15) [Lookup]

[loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-27) [Lookup]

[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e 8b29c3ef - installed 2012-04-02) [Lookup]

[running] com.zeobit.MacKeeper.AntiVirus.plist (ZeoBIT LLC - installed 2014-09-04) [Lookup]

[running] com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist (ZeoBIT LLC - installed 2015-11-25) [Lookup]


User Launch Agents:

[failed] com.WebTools.oiuqw343sQ9a.helpd.plist (? d35359bf 0 - installed 2015-09-02) Adware!
[Remove/Report]

[failed] com.WebTools.oiuqw343sQ9a.plist (? 91b33378 0 - installed 2015-09-02) Adware!
[Remove/Report]

[loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2017-12-11) [Lookup]

[loaded] com.adobe.ARM.[...].plist (? 560d19c8 ac8ed034 - installed 2017-09-10) [Lookup]

[loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2016-11-28) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Lookup]

[failed] com.jdibackup.ZipCloud.autostart.plist (? 91fd01ed 0 - installed 2017-01-07) [Lookup]

[loaded] com.macpaw.CleanMyMac3.Scheduler.plist (MacPaw Inc. - installed 2017-11-07) [Lookup]

[running] com.pcv.hlpramc.plist (PCVARK software Private Limited - installed 2015-09-02) Adware!
[Remove/Report]

~/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

[running] com.spotify.webhelper.plist (Spotify - installed 2017-12-03) [Lookup]

[failed] com.zeobit.MacKeeper.Helper.plist (? 18d1682b 0 - installed 2015-12-15) [Lookup] - /Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper: Executable not found!


User Login Items:

fuspredownloader Application - Hidden

(~/Library/Application Support/.FUS/fuspredownloader.app)

iTunesHelper Application (Apple, Inc. - installed 2017-12-11)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Photo Stream URL SMLoginItem - Hidden (Apple, Inc. - installed 2038-01-19)

(/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app)


Internet Plug-ins:

AdobeAAMDetect: 3.0.0.0 (installed 2017-12-11) [Lookup]

FlashPlayer-10.6: 21.0.0.213 (installed 2016-04-09) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-10-26)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2017-11-26) [Lookup]

AdobePDFViewer: 18.009.20044 (installed 2017-11-26) [Lookup]

Flash Player: 21.0.0.213 (installed 2016-04-09) Outdated! Update

Flip4Mac WMV Plugin: 3.2.0.16
(installed 2013-11-17) [Lookup]

CitrixICAClientPlugIn: 12.5.0 (installed 2017-03-22) [Lookup]

DirectorShockwave: 12.0.5r146 (installed 2013-10-24) [Lookup]

JavaAppletPlugin: 15.0.1 (installed 2014-10-25) Check version


User internet Plug-ins:

CitrixOnlineWebDeploymentPlugin: 1.0.105 (installed 2013-04-26) [Lookup]


3rd Party Preference Panes:

Flash Player (installed 2016-04-05) [Lookup]

Flip4Mac WMV (installed 2013-03-30) [Lookup]


Time Machine:

Skip System Files: NO

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 999.35 GB Disk used: 140.11 GB

Destinations:

Seagate Wireless [Local]

Total size: 2.00 TB

Total number of backups: 48

Oldest backup: 19/10/17, 7:22 am

Last backup: 29/11/17, 10:37 am

Size of backup disk: Adequate

Backup size 2.00 TB > (Disk used 140.11 GB X 3)


Top Processes by CPU:

7%
kernel_task

6%
WindowServer

4%
Adobe CEF Helper

2%
Creative Cloud

1%
Adobe Desktop Service


Top Processes by Memory:

764 MB kernel_task

277 MB Google Chrome Helper

266 MB Google Chrome Helper

257 MB AntiVirus

252 MB Google Chrome


Top Processes by Network Use:

Input Output Process name

37 KB 16 KB mDNSResponder

6 KB 5 KB apsd

7 KB 2 KB cloudd

714 B 490 B netbiosd

0 B 64 B SystemUIServer


Top Processes by Energy Use:

7.44 WindowServer

4.22 Adobe CEF Helper

2.74 AcroCEF

2.68 Creative Cloud


Virtual Memory Information:

2.84 GB
Available RAM

401 MB Free RAM

5.16 GB
Used RAM

2.45 GB
Cached files

8 MB Swap Used





iMac

Posted on Dec 10, 2017 8:12 PM

Reply
1 reply

Dec 10, 2017 8:22 PM in response to ahaes

I would start by deleting all the software responsible for this stuff including the stuff itself. Uninstall the software if you have an uninstaller to use.


Possible adware:

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

Adware: ~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

Unknown file: ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

open /Applications/ZipCloud.app --args -s -l

Adware: ~/Library/LaunchAgents/com.pcv.hlpramc.plist

4 possible adware files found. [Remove/Report]


Clean up:

/Library/LaunchDaemons/com.citrix.ctxusbd.plist

/Library/Application Support/Citrix Receiver/ctxusbd

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/maintenance.sh

Executable not found!

~/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist

~/Library/Application Support/WebTools/oiuqw343sQ9a/launch -guid NONE -source mmb-1536 -brand WebTools

Executable not found!

~/Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist

/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper

Executable not found!

4 orphan files found. [Clean up]


Kernel Extensions:

/Library/Application Support/MacKeeper/AntiVirus.app

[not loaded] net.kromtech.kext.AVKauth (2.3.7 - SDK 10.9) [Lookup]

[not loaded] net.kromtech.kext.Firewall (2.3.7 - SDK 10.9) [Lookup]


/System/Library/Extensions

[not loaded] com.devguru.driver.SamsungComposite (1.4.20 - SDK 10.6) [Lookup]


/System/Library/Extensions/ssuddrv.kext/Contents/PlugIns

[not loaded] com.devguru.driver.SamsungACMControl (1.4.20 - SDK 10.6) [Lookup]

[not loaded] com.devguru.driver.SamsungACMData (1.4.20 - SDK 10.6) [Lookup]

[not loaded] com.devguru.driver.SamsungMTP (1.4.20 - SDK 10.5) [Lookup]

[not loaded] com.devguru.driver.SamsungSerial (1.4.20 - SDK 10.6) [Lookup]


Startup Items:

HWNetMgr: Path: /Library/StartupItems/HWNetMgr

StartOuc: Path: /Library/StartupItems/StartOuc

Startup items no longer function in OS X Yosemite or later


Basics for Uninstalling Software


Most OS X applications are completely self-contained "packages" that can be uninstalled by simply dragging the application to the Trash. Applications may create preference files that are stored in the /Home/Library/Preferences/ folder. Although they do nothing once you delete the associated application, they do take up some disk space. If you want you can look for them at the above location and delete them, too.


Some applications may install an uninstaller program that can be used to remove the application. If you cannot find the uninstaller then you could download the freeware, Easy Find, to locate files that need to be removed. The places you need to search include:


  1. /Home/Library/Applications Support/ folder. Check if the application has created a folder then delete the folder that's in the Applications Support folder.
  2. Applications may install a startupitem or a LogIn item. Startupitems are usually installed in the /Library/StartupItems/ folder or the /Home/Library/StartupItems/ folder. LogIn Items are set in the Users & Groups preferences. Open it inSystem Preferences, then click on the LogIn Items tab. Select the item from the list and click on the Delete [-] button to remove it.
  3. Some software use startup daemons or agents. Look for them in /Library/LaunchAgents/ and /Library/LaunchDaemons/ or in /Home/Library/LaunchAgents/.


Some applications install a receipt in the /Library/Receipts/ folder. Usually with the same name as the program or the developer. The item generally has a ".pkg" extension. Be sure you also delete this item as some programs use it to determine if it's already installed.


There are many utilities that can uninstall applications. Here is a selection:


  1. AppZapper
  2. AppDelete
  3. Hazel
  4. AppCleaner
  5. CleanApp
  6. iTrash
  7. AppBolish
  8. AppUninstaller
  9. Uninstaller


For more information visit The XLab FAQs and read the FAQ on removing software.

Spinning Wheel, EtreCheck report, help!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.