tony2093 Author

Level 1

6 points

MacBook Air freezes at logon unless in safe mode

I've run out of ideas investigating why my MacBook Air won't logon unless in safe mode so I'll ask here...

After a recent update of High Sierra my MacBook Air hangs during logon sequence. Safe mode logon works OK. I've included the EtreCheck output below (obviously from when in safe mode). I've tried:

resetting PRAM
resetting SMC
adding a new account and logging on (same problem)
looking at /var/log/system.log
starting in recovery mode and performing first aid on disc (all fine)
switching off "Auto Proxy Discovery" for Wifi network (which was the only item classed as 'major' by EtreCheck)
removing all Login Items under the admin account

What can I do to work out what is happening?

Thanks

Tony

EtreCheck version: 4.0 (4A128)

Report generated: 2018-02-16 13:07:29

Download EtreCheck from https://etrecheck.com

Runtime: 2:55

Performance: Excellent

Problem: No problem - just checking

Major Issues:

Anything that appears on this list needs immediate attention.

Proxies - Network proxies detected. This could be evidence of malware.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Clean up - There are orphan files that could be removed.

Unsigned files - There is unsigned software installed. It appears to be legitimate but should be reviewed.

Hardware Information:

MacBook Air (11-inch, Early 2015)

MacBook Air Model: MacBookAir7,1

1 1.6 GHz Intel Core i5 (i5-5250U) CPU: 2-core

4 RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1600 ok

BANK 1/DIMM0

2 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 211

Video Information:

Intel HD Graphics 6000 - VRAM: 1536 MB

Color LCD 1366 x 768

Drives:

disk0 - APPLE SSD AP0128H 121.33 GB (Solid State - TRIM: Yes)

Internal PCI-Express 5.0 GT/s x4 NVM Express

disk0s1 - EFI [EFI] 315 MB

disk0s2 121.02 GB

disk1s1 - Macintosh HD (APFS) 121.02 GB 75.60 GB

disk1s2 - Preboot (APFS) [APFS Preboot] 121.02 GB 22 MB

disk1s3 - Recovery (APFS) [Recovery] 121.02 GB 510 MB

disk1s4 - VM (APFS) [APFS VM] 121.02 GB 1.07 GB

Mounted Volumes:

disk1s1 - Macintosh HD 121.02 GB (43.69 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM] 121.02 GB (43.69 GB free)

APFS

Mount point: /private/var/vm

Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Proxy Auto Discovery

Interface en2: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 4.24 GB available

System Software:

macOS High Sierra 10.13.3 (17D47)

Time since boot: Less than an hour

System Load: 6.67 (1 min ago) 3.61 (5 min ago) 1.51 (15 min ago)

Security:

Versions

System Latest Installed Status

Gatekeeper 135 135 Mac App Store and identified developers">Adware pattern match

XProtect 2098 2098

Malware Removal Tool 1.29 1.29

System Integrity Protection Enabled

Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist

Executable: ~/Library/Application Support/Steam/SteamApps/steamclean

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.whatpulse.ChmodBPF.plist

Executable: /bin/bash /Library/StartupItems/ChmodBPF/ChmodBPF.sh

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist

Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.pqrs.Karabiner.load.plist

Executable: /Library/Application Support/org.pqrs/Karabiner/startup.sh start

Details: Exact match found in the whitelist - probably OK

Kernel Extensions:

/Library/Application Support/VirtualBox

[Not Loaded] VBoxDrv.kext (5.0.18)

[Not Loaded] VBoxNetAdp.kext (5.0.18)

[Not Loaded] VBoxNetFlt.kext (5.0.18)

[Not Loaded] VBoxUSB.kext (5.0.18)

/Library/Application Support/org.pqrs/Karabiner

[Not Loaded] Karabiner.signed.kext (10.21.0 - SDK 10.11)

/Library/Extensions

[Not Loaded] Soundflower.kext (2.0b2 - SDK 10.10)

[Not Loaded] AVFrameBuffer.kext (3.0.1 - SDK 10.11)

[Not Loaded] AVVideoCard.kext (3.0.1 - SDK 10.11)

[Not Loaded] MSMFramebuffer.kext (3.3 - SDK 10.11)

[Not Loaded] MSMVideoDevice.kext (3.3 - SDK 10.11)

[Not Loaded] YamDisplayDriver.kext (1.0.1 - SDK 10.12)

/System/Library/Extensions

[Not Loaded] SRXDisplayCard.kext (1.6 - SDK 10.10)

[Not Loaded] SRXFrameBufferConnector.kext (1.6 - SDK 10.9)

System Launch Agents:

[Not Loaded] 8 s

[Loaded] 184 s

[Running] 98 s

System Launch Daemons:

[Not Loaded] 38 s

[Loaded] 188 s

[Running] 106 s

Launch Agents:

[Not Loaded] com.teamviewer.teamviewer_desktop.plist (? efecefe3 - installed 2017-11-06)

[Not Loaded] com.teamviewer.teamviewer.plist (? 9223e856 - installed 2017-11-06)

[Not Loaded] com.oracle.java.Java-Updater.plist (? da5bd1b2 - installed 2016-12-13)

Launch Daemons:

[Not Loaded] net.exirion.ssdfanctrl.plist (? 6fbe74f0 - installed 2013-11-01)

[Not Loaded] org.virtualbox.startup.plist (? 700b9385 - installed 2016-12-02)

[Not Loaded] com.teamviewer.teamviewer_service.plist (? 52d5a08d - installed 2017-11-06)

[Not Loaded] com.malwarebytes.MBAMHelperTool.plist (Malwarebytes Corporation - installed 2016-06-09)

[Not Loaded] com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2018-01-19)

[Not Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2017-08-24)

[Not Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-02)

[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2016-12-13)

[Not Loaded] com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - installed 2017-06-13)

[Not Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2016-02-12)

[Not Loaded] org.pqrs.Karabiner.load.plist (? 44439558 - installed 2016-07-06)

[Not Loaded] org.whatpulse.ChmodBPF.plist (? 605a94fb - installed 2018-01-19)

User Launch Agents:

[Not Loaded] com.BlueStacks.AppPlayer.Service.plist (BlueStack Systems, Inc. - installed 2015-07-31)

[Not Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28)

[Not Loaded] com.valvesoftware.steamclean.plist (? 0 - installed 2017-06-08)

[Not Loaded] com.BlueStacks.AppPlayer.UninstallWatcher.plist (BlueStack Systems, Inc. - installed 2018-01-19)

[Not Loaded] org.virtualbox.vboxwebsrv.plist (Oracle America, Inc. - installed 2016-04-19)

[Not Loaded] com.BlueStacks.AppPlayer.Updater.plist (BlueStack Systems, Inc. - installed 2015-07-31)

Internet Plug-ins:

FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-07)

QuickTime Plugin: 7.7.3 (installed 2018-01-19)

Flash Player: 28.0.0.161 (installed 2018-02-07)

JavaAppletPlugin: Java 8 Update 121 build 13 (installed 2017-03-02)

3rd Party Preference Panes:

Fan Control (installed 2016-08-17)

Flash Player (installed 2018-02-02)

FUSE (installed 2017-09-21)

Java (installed 2017-03-02)

Time Machine:

Skip System Files: No

Mobile backups:

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 121.02 GB - Disk used: 77.33 GB

Destinations:

e************e [Network] (Last used)

Total size: 249.37 GB

Total number of backups: 5

Oldest backup: 2018-02-16 05:15:45

Last backup: 2018-02-16 10:50:18

Top Processes by CPU:

Process (count) Source % of CPU

WindowServer Apple 6

kernel_task Apple 2

hidd Apple 2

SystemUIServer Apple 0

powerd Apple 0

Top Processes by Memory:

Process (count) Source RAM usage

kernel_task Apple 453 MB

Finder Apple 63 MB

UserEventAgent (2) Apple 49 MB

SystemUIServer Apple 48 MB

NotificationCenter Apple 48 MB

Top Processes by Network Use:

Process Source Input Output

mDNSResponder Apple 31 KB 13 KB

apsd Apple 5 KB 11 KB

netbiosd Apple 810 B 354 B

SystemUIServer Apple 0 B 64 B

Top Processes by Energy Use:

Process (count) Source Energy usage (0-100)

WindowServer Apple 2

SystemUIServer Apple 0

fseventsd Apple 0

mds Apple 0

logd Apple 0

Virtual Memory Information:

Available RAM 1.92 GB

Free RAM 20 MB

Used RAM 2.08 GB

Cached files 1.90 GB

Swap Used 0 B

Software Installs (past 30 days):

Name Version Install Date

Flappy Golf 2 2.0.8 2018-02-15

Octagon 3.2 2018-02-15

WiFi Explorer 2.3.3 2018-02-15

Clean up:

/Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service

Executable not found

/Library/LaunchAgents/com.teamviewer.teamviewer.plist

/Applications/TeamViewer.app/Contents/MacOS/TeamViewer

Executable not found

/Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop

Executable not found

/Library/LaunchDaemons/net.exirion.ssdfanctrl.plist

/Library/StartupItems/SSDFanControl/ssdfanctrl

Executable not found

Diagnostics Information (past 7 days):

2018-02-16 13:01:37 Last Shutdown Cause: 3 - Hard shutdown

2018-02-15 22:33:52 com.apple.WebKit.WebContent CPU

2018-02-15 18:39:23 Octagon.app CPU

2018-02-15 18:29:02 com.apple.WebKit.Plugin.64 CPU

2018-02-15 01:41:20 WindowServer Crash

StartTime:2018-02-15 01:41:20

GPU:IG

MetalDevice for accelerator(0x0): 0x7fd0564965f8 (MTLDevice: 0x7fd0568c0800)

MetalDevice for accelerator(0x9507): 0x7fd056568388 (MTLDevice: 0x7fd0568c0800)

IOService:/IOResources/AVExGFX/Avatron Virtual Display@1/AVExFramebuffer@1

IOService:/IOResources/AVExGFX/Avatron Virtual Display@2/AVExFramebuffer@2

IOService:/IOResources/AVExGFX/Avatron Virtual Display@3/AVExFramebuffer@3

IOService:/IOResources/AVExGFX/Avatron Virtual Display@0/AVExFramebuffer@0

IOService:/IOResources/MSMVideoDevice/MSMVideoHead@9/MSMFramebuffer-9

IOService:/IOResources/MSMVideoDevice/MSMVideoHead@8/MSMFramebuffer-8

IOService:/IOResources/MSMVideoDevice/MSMVideoHead@7/MSMFramebuffer-7

IOService:/IOResources/MSMVideoDevice/MSMVideoHead@4/MSMFramebuffer-4

IOService:/IOResources/MSMVideoDevice/MSMVideoHead@6/MSMFramebuffer-6

IOService:/IOResources/MSMVideoDevice/MSMVideoHead@2/MSMFramebuffer-2

IOService:/IOResources/MSMVideoDevice/MSMVideoHead@5/MSMFramebuffer-5

IOService:/IOResources/MSMVideoDevice/M

BUG IN CLIENT OF LIBDISPATCH: corruption of lock owner

End of report

MacBook Air, macOS High Sierra (10.13.3)

Posted on Feb 15, 2018 7:07 PM

Reply

Similar questions

26 replies

tony2093 Author

Level 1

6 points

Feb 17, 2018 5:05 PM in response to spencer194

OK, I've got my machine back into a useable state (thanks Josh for all your pointers).

I ended up:

erasing the hard drive
reinstalling MacOS and creating a new (dummy) account (but _not_ doing a complete reinstall from the time machine backup). I also didn't restore any system settings.
restoring old account from time machine backup, together with associated user files (this was not straight forward: you have to use Migration Assistant and when I tried to use it, it repeatedly refuses to see the external disc with my backup on it until after many attempts it just magically appeared!)
deleting dummy account

It now reboots successfully and I'll reinstall any missing apps from scratch.

I assume there were some system settings that were incompatible with the latest High Sierra (10.13.3) release.

Tony

Reply

Level 2

269 points

Feb 15, 2018 8:05 PM in response to tony2093

Weird last time I saw that error was when I was trying to create a VM with Virtual box and install Sierra 10.12.6. Anyway... I would suggest reinstalling at this point. You don't have to restore everything. Just boot to recovery mode and click Reinstall macOS How to reinstall macOS - Apple Support. Follow the Recovery one. This may take a while but when its done post back if you can login. Apparently this is pretty common --> iMac Won't fully Boot (black screen spinning).

Good Luck,

Josh

Reply

Level 2

269 points

Feb 17, 2018 5:06 PM in response to tony2093

It isn’t unusual for it to take longer than an hour but we might as well move to reformatting. You said you have created a backup. Great. Hopefully all went well with that. Alright lets get on with it. To find the drive to reformat is a little more difficult in High Sierra (Because why keep something as is when you can change it to make it more difficult and need an extra step *cough* *cough* Apple. Again I hate High Sierra 😟). How to reinstall macOS - Apple Support Bolded things are things added by me

Step 1:

Start up from macOS Recovery

macOS Recovery installs different versions of macOS depending on the key combination you use while starting up. Turn on or restart your Mac, then immediately hold down one of these combinations:

Command (⌘)-R

Install the latest macOS that was installed on your Mac, without upgrading to a later version.^*

Step 2: Reformat

Select Disk Utility from the utilities window of macOS Recovery, then click Continue.
Click the button above View on the toolbar and select something like "View All Devices" or something like that (This is the High Sierra thing I was talking about).
Select your device or volume in the sidebar of Disk Utility. This should be the one at the top. I have included an image below to show you what I mean.
Click the Erase button.
Complete these fields:
- Name: Enter a name for your disk, such as "Macintosh HD".
- FormatAPFS.
- Scheme (if available): Choose GUID Partition Map.
Click Erase to begin erasing your disk.
First time you do this it may result in an immediate error. Just repeat steps 3-6.
When done, quit Disk Utility to return to the utilities window. You're now ready to install macOS.

DO NOT RESTART BETWEEN STEPS 2 AND 3

Step 3: Reinstall macOS High Sierra

Click Disk Utility in the Menubar and then press Quit. Alternatively press CMD + Q. (Just quit the Application to get back to this menu )

Install macOS
1. Choose Reinstall macOS (or Reinstall OS X) from the utilities window.
2. Click Continue, then follow the onscreen instructions. You'll be asked to select your disk. If you don't see it, click Show All Disks.
  To verify eligibility to install macOS, your Mac serial number is sent to Apple, and you might be asked for your Apple ID.
3. Click Install. Your Mac restarts after installation is complete.
4. Wait for it to complete before moving on.

Step 4: Recover Data from Backup

You should now be at the setup screen. You have two options from here continue through the Setup Assistant until you reach the migration assistant and follow this guide How to move your content to a new Mac - Apple Support.

Alternatively, restart or force restart (hold down power button until it shuts off). Boot back into recovery mode and select Restore From Time Machine Backup. Follow the on screen prompts. Wait for this to complete.

Step 5: Hope for the best

Once finished migrating data check if you can login. If not, check safe mode and then post back here. Most likely you will be able to. I would then suggest running first aid just make sure everything is good.

Step 6: Pat on yourself on the back

Nice Job on completing this lengthy task. Hopefully you learned a thing or two.

Reply

Level 2

269 points

Feb 15, 2018 7:47 PM in response to tony2093

Ahhh. Thats a helpful description. And you have tried Internet Recovery? Either way try booting into Verbose Mode by pressing CMD+V when booting up. Tell me any errors or warning that occur. Similar issue here but they couldn't get in at all macos - High Sierra Freezes on Login - Ask Different. I would also try booting from recovery and reinstalling macOS. At the worst we could try backing up from Safe Mode, reformatting, reinstalling, then restoring from backup. But lets make that our last resort.

Reply

Feb 16, 2018 1:02 AM in response to tony2093

FWIW, most likely your problems are due to your limited RAM. 4GB is really minimal for High Sierra especially when trying to open several Apps at one time. Check "System Preferences > Users & Groups > Login Items and remove any apps that are starting at login. Also don't open more than one or two apps at a time.

Your version of VirtualBox is out of date so if you still use it, you should update it to 5.2.6 , otherwise uninstall it.

FileVault was not the problem.

Reply

Level 2

269 points

Feb 17, 2018 9:09 AM in response to tony2093

Alright let’s try one last thing. Keep that backup you will need it again. Redo the entire process of reformatting and reinstalling. Then setup your Mac as new. Don’t restore from backup. Create new user and just basically set it up. Once set up restart and see if you can login. If you can’t it must be some kind of hardware problem. If you can then it must be something with your backup. In which you have two options. Manually transfer your files and/or contact Apple. Move 50% of your files. Restart. Login? Yes. Move an additional 25%. Restart. Login? Yes. Continue.... once you can’t login you can try and narrow down what’s causing the issue. But at this point I would suggest bringing you mac the nearest Apple Store. Make sure to tell them (or show them this entire thread) everything that you have done so they don’t make you repeat it. They replace your Mac or come the same conclusion: Corrupt Backup. If you end up going to the Apple Store then please post back here what they say or do to solve your issue. This issue seems very odd. We have try everything I can think of.

If you are can’t login then I would suggest going to Apple Store and requesting a replacement.

Good luck,

Josh

Reply

Level 2

269 points

Feb 15, 2018 8:22 PM in response to tony2093

Really? This is very odd. Alright lets try running a hardware test to rule that out and if that comes back fine then we can move on. How to use Apple Hardware Test on your Mac - Apple Support

Sorry but more questions:

Do you have FileVault on?

Have you installed the Adobe CC or CS6 suite?

Any chance you have some kind of malware?

Did this start happening immediately after updating or did it work a couple of times and then it started happening?

What makes no sense to me is the fact that it works in safe mode, I mean thats great, but makes no sense. Safe mode should solve issues. It tries and repair disks by it self and disable things that may cause problems. Thats why I was thinking Malware maybe. Although rarely malware on macs would cause this big of issue as most are just annoying MacKeeper stuff. Maybe try installing Malwarebytes and running a scan. I doubt it would fix you problem but I guess its worth a try.

Reply

Level 2

269 points

Feb 16, 2018 4:44 PM in response to tony2093

Before we move on can you try running a Malewarebytes scan? I know theres a slim chance of it fixing the issue but would just like to check that before we move on. I am currently researching ways to fix this issue and will respond back ASAP when I have more ideas. In the mean time make sure you have a backup of your data. You should be able to make a ™ backup in safe mode. We may eventually have to try cloning (this is a bit different then backing up), reformatting, and manually, putting the files back.

Reply

Level 2

269 points

Feb 16, 2018 5:45 PM in response to tony2093

Now were getting somewhere...sort of. There is a problem with your AFPS (the new filing system introduced with macOS High Sierra *sigh with a face palm (One reason why I strongly dislike High Sierra is b/c of the new filing system that has so many issues)*. Thats why the reinstalling operating system is not working. This is going to require a reformat most likely. But humor me and boot back into internet recovery and run first aid. See if you get same error. Although it still makes NO sense why it works in safe mode. Lastly, you haven't installed any third party RAM (Memory) by any chance right?

And yes I did mean that Malwarebytes but no need now I don't think.

Reply

Level 2

269 points

Feb 15, 2018 7:15 PM in response to tony2093

Great troubleshooting steps so far! Couple questions can you please explain more by what you mean "can't login" can you not get to your login screen does the password not show up or what? Also it probably won't help but you could try running first aid from internet recovery if you haven't already. You can do this by holding down Shift-Option-Command-R when when booting up or if that doesn't work then try Option-Command-R.

Reply

tony2093 Author

Level 1

6 points

Feb 16, 2018 7:14 PM in response to 9051jo

I re-ran the first aid in recovery mode and it gave the same error message.

I then thought I'd try reinstalling the OS at that point but this has taken > 1 hour and seems to be stuck. So I suspect I'll need reformat and restore: luckily I got time machine working while it was in safe mode and got a back up done. Have never done a full restore before so hope time machine works! Does that sound like the best plan?

And no, nothing fancy like third party memory stuff - it's a pretty vanilla machine.

Reply

tony2093 Author

Level 1

6 points

Feb 15, 2018 7:39 PM in response to 9051jo

Problem description in a bit more detail:

When I reboot, I get to the login screen, put in my password and hit enter. The progress bar gets to about 70% and then hangs indefinitely.

I've tried the recovery mode and then first aid on the disc but all is reported fine here.

Reply

tony2093 Author

Level 1

6 points

Feb 15, 2018 8:36 PM in response to 9051jo

I ran the hardware test - all clear.

FileVault: yes, this is enabled. I've tried switching it off (which will take 2 hours ⚠ to decrypt the disc) to see if this has any effect.

Adobe flash is installed but I don't recognise "Adobe CC or CS6 suite", so I guess not!

It started happening immediately after the latest Hight Sierra update was installed.

I'll report back after FileVault is switched off.

Reply

tony2093 Author

Level 1

6 points

Feb 16, 2018 1:49 AM in response to CountryGirl56

Thanks, but there are no Login Items loaded at startup and this happens during the startup sequence so I doubt lack of RAM is the problem. It won't even complete the logon process so it's not a matter of starting too many apps.

Reply

tony2093 Author

Level 1

6 points

Feb 16, 2018 8:24 PM in response to 9051jo

Thanks for spending so much time on this problem 😉

Before I follow these detailed instructions, I did a verify on the time machine backup and I didn't see any errors reported (although I didn't see any explicit "OK either!). Also, before I erase my disc I want to be sure I can locate the backup TM file so I went through the steps to locate the backup in time machine system restore (I had to enter recovery mode via internet recovery as local recovery now hangs) and got to a screen: "Select a Restore Source". My backup is on an external disc connected to anther host on my network and I can't work out how to specify this. In the dialogue "Enter the address of a file server used for TM backups" I tried "afp://192.168.1.100" which is how I access it from finder but it couldn't locate it. Do you know how I should specify the server?

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

MacBook Air freezes at logon unless in safe mode

Welcome to Apple Support Community

A forum where Apple customers help each other with their products. Get started with your Apple Account.

Learn more Sign up