Weird wired memory usage and other weird happenings

Hi there!


The MacBook Air has been extremely slow recently.


User uploaded file


As the screenshot from Activity Monitor shows, Wired Memory (right, middle) uses more than 800 MB - this is when the Mac has just been rebooted and no other app is open.


How to clear up the Wired Memory?

I read this page but didn't find solutions.


Other weird happenings lately:

1. Two sets of Date, Time etc show simultaneously.

User uploaded file


2. OS freezes often, and I had to force shut down the Mac.

3. Calendar app crashes often.


How can these problems be solved?


P.S. Avira didn't find any viruses.


OS version: 10.11


Thanks!

MacBook Air, OS X El Capitan (10.11)

Posted on Nov 22, 2018 4:46 AM

Reply

Similar questions

16 replies

Nov 22, 2018 6:29 AM in response to Sail_To_Lahaina

Please post the EtreCheck output as a "Reply" to this thread

<https://discussions.apple.com/docs/DOC-6174> or <https://etrecheck.com>

Click on the Share icon and select "Copy Report"

User uploaded file

.

And then Paste the report as a "Reply" to this thread.

If, AND ONLY IF, you get the error:

"The message contains invalid characters"

then try posting to PasteBin.com, and give us a PasteBin URL link.

<http://pastebin.com/>

.

EtreCheck is a tool that helps Apple Support Community volunteers debug problems without any access to the troubled computers. Debugging problems can be a difficult task even when the machine is in front of you. Attempting it via a discussion forum is extremely difficult. EtreCheck is a great help that regards.


NOTE: you Macbook Air does not have the resources (CPU nor RAM capacity) to run an anti-virus all the time, nor a Mac cleaner. They will suck the life out of your Mac.


Also, at the moment, there are not self-propagating Mac viruses. There is malware/adware that Requires you to aid in the installation. These tend to get onto a Mac because the user was tricked into installing them. On a page where you want to obtain an app has an Ad that looks like a big green download button. Since you were going to download something you click on that Ad, and download malware, then proceed to install it (this actually happened to my Wife, who is a software developer, so I'm sure it can happen to anyone). The other more common way is either a download site wraps their own installer around some freeware app, and an adware vendor pays the download site to do a side-load of their adware. Or a developer gets paid to include some adware as a side load with their app. Or sometimes the malware/adware provider just supplies a convincing marketing story, and the user installs it themselves.


But if nothing has been installed, then a virus will not magically appear.


The longtime forum volunteers have found that MalwareBytes does the best job of removing the malware/adware from a Mac. The MalwareBytes for Mac author is a long time contributor to these forums and has earned his trust over many years.


MalwareBytes Anti-Malware (formally AdwareMedic)

<https://www.malwarebytes.org>

And when you are finished checking (and cleaning) uninstall MalwareBytes

<https://support.malwarebytes.com/docs/DOC-1928>


But, please post the EtreCheck output as your issues may have nothing to do with malware/adware.

Nov 24, 2018 5:42 AM in response to BobHarris

Thank you for the detailed reply.


I've uninstalled all items I could in the four sections you specified. Great to see so much trash vanish. However, the Mac was still as slow after the clean-up. Following is a screenshot from Activity Monitor IMMEDIATELY after a reboot - Memory Used is 1.76 GB out of 2 GB. Wired Memory is 824 MB (Why on earth is it?!).


User uploaded file


And yes, 2GB of RAM is the bare minimum for El Capitan, the empty disk space is insufficient, battery is in bad shape. However, until a week ago, the Mac had been quite fast, and the three factors above were almost the same as now (RAM was the same; disk space had been around 10GB for a long time. Battery became bad a long time ago. When the Mac is plugged into a power source, it's still slow). So I guess the above aren't the causes for the sluggishness of the Mac.


User uploaded file

Why are there two sets of Date, Time etc.? Googled it but didn't find similar problems. Malware? Can this be the cause?


And why is Wired Memory 824.4 MB upon reboot? How to free it up?

Nov 23, 2018 7:18 AM in response to Sail_To_Lahaina

Time since boot: Less than an hour

Available RAM 261 MB

Swap Used 1.57 GB

In less than an hour, you have loaded so much stuff into RAM that you have used 1.57 Gigabytes of Swap space.


Your Macbook Air ONLY has 2GB of RAM, which is a bare minimum for El Capitan. This configuration cannot support all the background kernel extensions, launch agents, launch daemons and user login items you have running on your Mac.


In addition, you do not have much free space. On an SSD this is not as critical as on a rotating disk, but you do risk running down to zero and not being able to create more Swap space, which will force macOS to kill processes if it cannot add additional swap files when you ask the Mac to do more work.


Another issue is:

High battery cycle count - Your battery may be losing capacity.

Battery: Health = Replace Now - Cycle count = 1414

macOS may actually throttle your Mac's performance if it things the battery is getting too low to extend how long the battery will last on the current charge. Your battery is sufficiently old and has experienced so many recharge cycles, it is going to be a handicap when you are not attached to the power adapter. While the battery can be replaced, I do not think it is worth the cost (see arguments below).


The Macbook Air RAM cannot be increased. I think the SSD storage can be increased <http://MacSales.com>, but without more RAM, I'm not sure it is worth the cost. Your Macbook Air is 7 years old, and I think you should be considering getting a new Mac.


Based on all the kernel extensions, launch agents and daemons, I suspect you do not "Just" surf the web and do email. So I think you might want to be thinking about a replacement Mac if you wish to continue using all the things you currently have installed.


But until you decide to get a new Mac, you should go through the EtreCheck report and uninstall as many of the times called out in the sections:

  • Kernel Extensions:
  • Launch Agents:
  • User Launch Agents:
  • User Login Items:

Nov 23, 2018 6:42 AM in response to Sail_To_Lahaina

EtreCheck version: 5.0.2 (5015)

Report generated: 2018-11-23 22:20:46

Download EtreCheck from https://etrecheck.com

Runtime: 12:32

Performance: Poor

Sandbox: Enabled

Full drive access: Disabled


Problem: Computer is too slow

Description:

Computer is very slow.

Wired Memory consistently uses more than 850 MB.

Two sets, sometimes three sets of Date, Time etc show simultaneously in the menu bar.


Major Issues:

Anything that appears on this list needs immediate attention.


Poor performance - EtreCheck report shows poor performance. This is unusual.

More than one antivirus app - This machine has multiple antivirus apps installed.

Low RAM - This machine has insufficient RAM.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Low disk space - This machine is running low on free hard drive space.

High battery cycle count - Your battery may be losing capacity.

Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.

System modifications - There are a large number of system modifications running in the background.

Vintage hardware - This machine may be considered vintage.

Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.


Hardware Information:

MacBook Air (11-inch, Mid 2011) - Vintage!

MacBook Air Model: MacBookAir4,1

1 1.6 GHz Intel Core i5 (i5-2467M) CPU: 2-core

2 GB RAM - Not upgradeable

BANK 0/DIMM0 - 1 GB DDR3 1333 ok

BANK 1/DIMM0 - 1 GB DDR3 1333 ok

Battery: Health = Replace Now - Cycle count = 1414


Video Information:

Intel HD Graphics 3000 - VRAM: 288 MB

Color LCD 1366 x 768


Drives:

disk0 - APPLE SSD TS064C 60.67 GB (Solid State - TRIM: Yes)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 59.81 GB

disk1 - M*******h (Journaled HFS+) 59.44 GB (49.31 GB used)

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB


Mounted Volumes:

disk1 - M*******h 59.44 GB (9.86 GB free)

Journaled HFS+

Mount point: /


Network:

Interface usbmodemFA130: MT65xx Preloader 2

Interface usbmodemFD110: MT65xx Preloader

Interface en0: Wi-Fi

802.11 a/b/g/n

Interface en4: iPhone


System Software:

OS X El Capitan 10.11 (15A284)

Time since boot: Less than an hour


Configuration Files:

/etc/hosts - Count: 40


Security:

SystemStatus
GatekeeperEnabled
System Integrity ProtectionEnabled


Unsigned Files:

Launchd: /Library/LaunchAgents/com.avira.antivirus.scheduler.agent.plist

Executable: /Applications/Avira.app/Contents/MacOS/AV_Scheduler --callbackFromGuard

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/net.culater.SIMBL.Agent.plist

Executable: /Library/ScriptingAdditions/SIMBL.osax/Contents/Resources/SIMBL Agent.app/Contents/MacOS/SIMBL Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.avira.antivirus.general.agent.plist

Executable: /Applications/Avira.app/Contents/MacOS/AV_Scheduler --taskFromDaemon

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.motorola.motohelper.plist

Executable: /Library/Application Support/Motorola Mobility/MotoHelper.app/Contents/Resources/MotoHelperDaemon

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.delantis.tcbblocknke_load_kext.plist

Executable: /usr/local/bin/tcpblocknke

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.delantis.TCPBlock.plist

Executable: /Library/PrivilegedHelperTools/com.delantis.TCPBlock

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.tendyron.launchd.monitor_CCB.plist

Executable: /usr/local/lib/OnKeyMonitor_CCB

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.avira.antivirus.dbcleaner.plist

Executable: /Applications/Avira.app/Contents/MacOS/dbcleaner

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.avira.antivirus.update.default.plist

Executable: /Applications/Avira.app/Contents/MacOS/AV_Scheduler -j update

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.alipay.refresher.plist

Executable: ~/Library/Alipay/refresher

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.delantis.tcbblockd.plist

Executable: /usr/local/bin/tcpblockd

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist

Executable: /opt/X11/lib/X11/xinit/privileged_startx -d /opt/X11/lib/X11/xinit/privileged_startx.d

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist

Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.alipay.adaptor.plist

Executable: /Library/Application Support/Alipay/lib/CDOAdaptor 3rd

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.motorola-mobility.mmcfgd.plist

Executable: /Library/Application Support/Motorola Mobility/MotNetConfig/mmcfgd

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.paragon-software.facebook.agent.plist

Executable: /Library/Application Support/Paragon Software/Paragon Software Facebook Agent.app/Contents/MacOS/Paragon Software Facebook Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.pqrs.Karabiner.load.plist

Executable: /Library/Application Support/org.pqrs/Karabiner/startup.sh start

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool .plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/org.musingsfrommars.MTL.Agent.plist

Executable: /Library/ScriptingAdditions/MTL.osax/Contents/Resources/MTLAgent.app/Contents/M acOS/MTLAgent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.motorola.motohelperUpdater.plist

Executable: /Library/Application Support/Motorola Mobility/MotoHelper.app/Contents/Resources/REUpdater

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist

Executable: /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/org.macosforge.xquartz.startx.plist

Executable: /opt/X11/lib/X11/xinit/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist

Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.avira.antivirus.systray.plist

Executable: /Applications/Avira.app/Contents/MacOS/AV_Systray.app/Contents/MacOS/AV_Systray

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.bhz.hdzbccb.moniter.plist

Executable: /Library/Application Support/CCB_HDZB_UKEY/moniter_CCB_HDZB

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.avira.helper.avstats.plist

Executable: /Applications/Utilities/Avira-Uninstall.app/Contents/MacOS/AvStats server start

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.avira.antivirus.notifications.agent.plist

Executable: /Applications/Avira.app/Contents/MacOS/AV_Scheduler --showNotification

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.lsreset.plist

Executable: /bin/sh -c 'pkill -9 "Little Snitch Daemon"'

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.adobe.CS5ServiceManager.plist

Executable: /Library/Application Support/Adobe/CS5ServiceManager/CS5ServiceManager.app/Contents/MacOS/CS5Service Manager -launchedbylogin

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.avira.antivirus.telemetry.agent.plist

Executable: /Applications/Avira.app/Contents/MacOS/AV_Scheduler --showTelemetry

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Update r.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.avira.antivirus.odscan.default.plist

Executable: /Applications/Avira.app/Contents/MacOS/AV_Scheduler -j scan -d /Applications/Avira.app/Contents/Resources/av_scheduler_plugin/scanjobfiles/com .avira.antivirus.odscan.ini -l 1542977753

Details: Exact match found in the whitelist - probably OK


32-bit Applications:

38 32-bit apps


Kernel Extensions:

/Applications/Astrill.app

Astrill.kext (Astrill Systems Corporation, 20111101)

MacProxy.kext (Astrill Systems Corporation, 2.0.9 - SDK 10.11)


/Applications/ExpressVPN.app

ExpressVPNSplitTunnel.kext (ExprsVPN LLC, 1.0.2 - SDK 10.12)


/Applications/Seil.app

Seil.10.9.signed.kext (Fumihiko Takayama, 11.2.0 - SDK 10.9)


/Library/Application Support/VirtualBox

VBoxDrv.kext (Oracle America, Inc., 5.1.28)

VBoxNetAdp.kext (Oracle America, Inc., 5.1.28)

VBoxNetFlt.kext (Oracle America, Inc., 5.1.28)

VBoxUSB.kext (Oracle America, Inc., 5.1.28)


/Library/Application Support/org.pqrs/Karabiner

Karabiner.signed.kext (Fumihiko Takayama, 10.11.0 - SDK 10.11)


/Library/Extensions

FileAccessControl.kext (Avira Operations GmbH & Co. KG, 1.2.5 - SDK 10.9)

Boom2Device.kext (Global Delight Technologies Pvt. Ltd, 1.2 - SDK 10.10)

ufsd_NTFS.kext (Paragon Software GmbH, 15.1.70 - SDK 10.10)


/Library/Extensions/VyprVPN

tap.kext (20111101)

tun.kext (20111101)


/System/Library/Extensions

HDZB_CCB_UKeyInstall.kext (Beijing Huadazhibao Electronic System Co.Ltd, 1.0 - SDK 10.10)

tcpblocknke.kext (4.0.0 - SDK 10.8)

ePass2000_FT11.kext (FEITIAN Technologies Co.,Ltd., 1.0.0 - SDK 10.10)

MotMobileUSB.kext (1.2.2 - SDK 10.5)

OnKeyHIDOverrideDriver.kext (1.0.0 - SDK 10.9)


/System/Library/Extensions/MotMobileUSB.kext/Contents/PlugIns

MotMobileMS.kext (1.0.0 - SDK 10.5)

MotMobileMTP.kext (1.2.2 - SDK 10.5)

MotMobileUSBLAN.kext (1.2.2 - SDK 10.5)

MotMobileUSBLANMerge.kext (1.2.2 - SDK 10.5)

MotMobileUSBSwch.kext (1.2.2 - SDK 10.5)


Startup Items:

TuxeraNTFSUnmountHelper Path: /Library/StartupItems/TuxeraNTFSUnmountHelper


System Launch Agents:

[Not Loaded] 8 Apple tasks
[Loaded] 154 Apple tasks
[Running] 37 Apple tasks
[Killed] 36 Apple tasks


System Launch Daemons:

[Not Loaded] 46 Apple tasks
[Loaded] 157 Apple tasks
[Running] 57 Apple tasks
[Killed] 27 Apple tasks
[Other] One Apple task


Launch Agents:

[Loaded] com.avira.antivirus.gjallarhorn.plist (Avira Operations GmbH & Co. KG - installed 2018-11-08)
[Loaded] com.avira.antivirus.stats.plist (Avira Operations GmbH & Co. KG - installed 2018-11-08)
[Running] com.avira.antivirus.systray.plist (? 9bf80dc3 - installed 2018-11-08)
[Loaded] com.avira.antivirus.iris.plist (Avira Operations GmbH & Co. KG - installed 2018-11-08)
[Loaded] com.adobe.CS5ServiceManager.plist (? 40cdc1ff - installed 2014-12-31)
[Running] org.musingsfrommars.MTL.Agent.plist (? 8ba41dba - installed 2014-08-28)
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-05-26)
[Running] com.avira.helper.avstats.plist (? cf66ea88 - installed 2018-11-08)
[Loaded] org.macosforge.xquartz.startx.plist (? d225a7da - installed 2014-08-12)
[Loaded] com.avira.antivirus.scheduler.agent.plist (? 4b765eec - installed 2018-11-08)
[Loaded] com.paragon.updater.plist (Paragon Software GmbH - installed 2016-11-29)
[Loaded] com.avira.antivirus.general.agent.plist (? 94ca9a28 - installed 2018-11-08)
[Loaded] com.avira.servicehub.license.poll.plist (Avira Operations GmbH & Co. KG - installed 2018-11-08)
[Loaded] com.motorola.motohelperUpdater.plist (? 94e04925 - installed 2014-06-28)
[Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-18)
[Loaded] com.avira.antivirus.update.default.plist (? 7dca32a5 - installed 2018-11-08)
[Running] com.motorola.motohelper.plist (? f4042d6c - installed 2014-06-12)
[Loaded] com.avira.antivirus.telemetry.agent.plist (? a4625078 - installed 2018-11-08)
[Loaded] com.avira.antivirus.iris.notify.plist (Avira Operations GmbH & Co. KG - installed 2018-11-08)
[Not Loaded] com.oracle.java.Java-Updater.plist (? 978ce8e4 - installed 2016-06-22)
[Loaded] com.avira.antivirus.notifications.agent.plist (? 8b13021d - installed 2018-11-08)
[Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-12-13)
[Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-11-09)
[Running] com.avira.servicehub.license.plist (Avira Operations GmbH & Co. KG - installed 2018-11-08)
[Loaded] com.paragon-software.facebook.agent.plist (? 95fb0bd4 - installed 2016-11-29)
[Running] com.sogou.SogouServices.plist (Beijing Sogou Technology Development Co.,Ltd. - installed 2020-10-18)
[Loaded] com.avira.antivirus.odscan.default.plist (? 8a569882 - installed 2018-11-23)
[Running] net.culater.SIMBL.Agent.plist (? 850e6250 - installed 2014-08-28)


Launch Daemons:

[Loaded] com.apple.aelwriter.plist (Apple - installed 2014-12-21)
[Running] com.avira.helper.watchdox.plist (Avira Operations GmbH & Co. KG - installed 2018-11-08)
[Running] com.bhz.hdzbccb.moniter.plist (? b2095d53 - installed 2015-10-14)
[Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-11-09)
[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-08-28)
[Loaded] net.interacto.flavours.helper.plist (? c03ce522 - installed 2014-11-13)
[Running] com.tendyron.launchd.monitor_CCB.plist (? 323572c2 - installed 2015-10-19)
[Loaded] com.purevpn.macapp.HelperTool.plist (GZ Systems Limited - installed 2018-02-23)
[Running] com.apple.qmaster.qmasterd.plist (Apple - installed 2009-06-20)
[Not Loaded] org.virtualbox.startup.plist (? 700b9385 - installed 2017-09-17)
[Running] com.alipay.DispatcherService.plist (Alipay.com Co.,Ltd - installed 2017-01-02)
[Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-11-23)
[Other] com.avira.antivirus.dbcleaner.plist (? 223cb974 - installed 2018-11-08)
[Loaded] com.adobe.SwitchBoard.plist (? 68cad67 - installed 2014-12-31)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-02)
[Loaded] com.delantis.tcbblockd.plist (? 48f1fc91 - installed 2014-04-12)
[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25)
[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2016-06-22)
[Loaded] org.macosforge.xquartz.privileged_startx.plist (? 65395f14 - installed 2014-08-12)
[Loaded] com.macpaw.CleanMyMac4.Agent.plist (? 6a086eb0 - installed 2018-11-23)
[Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2017-12-13)
[Loaded] com.lsreset.plist (? 0 - installed 2014-11-15)
[Loaded] com.delantis.tcbblocknke_load_kext.plist (? aae84ad1 - installed 2013-12-07)
[Loaded] com.delantis.TCPBlock.plist (? 168d2575 - installed 2014-12-22)
[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-18)
[Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2017-12-13)
[Loaded] com.spyoff.helper.vpnd.plist (Sareta S.r.l. - installed 2017-11-24)
[Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-04-22)
[Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-08-15)
[Running] com.motorola-mobility.mmcfgd.plist (? ab5fc842 - installed 2012-01-18)
[Loaded] org.wireshark.ChmodBPF.plist (? d4207e05 - installed 2014-10-09)
[Not Loaded] org.pqrs.Karabiner.load.plist (? 44439558 - installed 2015-10-11)
[Loaded] com.nordvpn.NordVPN.Helper.plist (TEFINKOM & CO S.A - installed 2018-06-24)


User Launch Agents:

[Loaded] com.spotify.webhelper.plist (? 0 - installed 2018-08-20)
[Loaded] com.alipay.refresher.plist (? 0 - installed 2015-04-03)
[Running] com.macpaw.CleanMyMac4.Updater.plist (S8EX82NJP6 - installed 2018-11-23)
[Running] com.alipay.adaptor.plist (? 0 - installed 2015-04-03)
[Running] com.expressvpn.ExpressVPN.agent.plist (ExprsVPN LLC - installed 2018-11-20)
[Loaded] com.macpaw.CleanMyMac4.HealthMonitor.plist (S8EX82NJP6 - installed 2018-11-23)


User Login Items:

BandwidthLauncher (App Store - installed 2018-04-01)

(/Applications/Bandwidth+.app/Contents/Library/LoginItems/BandwidthLauncher.app )

FSMenuAppLoginItemHelper (Paragon Software GmbH - installed 2018-04-22)

(/Applications/Paragon NTFS for Mac 15.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app)


Internet Plug-ins:

AdobePDFViewerNPAPI: 11.0.07 (installed 2014-05-08)

Flash Player: 28.0.0.161 (installed 2018-02-17)

AdobePDFViewer: 11.0.07 (installed 2014-05-08)

googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-12)

NPSafeSubmit: 1.0 (installed 2013-04-16)

ePass2000_FT11: 1.0.15308 (installed 2015-11-29)

QuickTime Plugin: 7.7.3 (installed 2015-09-17)

HDZB_CCB_SignPlugin: 1.0 (installed 2015-10-14)

FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-17)

NPSafeInput: 1.0 (installed 2013-04-16)

CMBSecurity: 1.0 (installed 2012-12-25)

NPCleanHistory: 1.0 (installed 2012-03-26)

NPAPI_Core_Safe_SoftKeyboard_Plugin: 1.1 (installed 2017-03-16)

Silverlight: 5.1.30317.0 (installed 2014-05-25)

NPClientBinding: 1.0.0.5 (installed 2013-05-02)

Default Browser: 601 (installed 2015-09-17)

SharePointBrowserPlugin: 14.4.5 (installed 2014-10-22)

o1dbrowserplugin: 5.41.3.0 (installed 2015-12-17)

JavaAppletPlugin: Java 8 Update 101 build 13 (installed 2018-10-27)

TDR_CCB_NetSignPlugin: 1.0 (installed 2015-10-19)


Audio Plug-ins:

DVCPROHDAudio: 1.3.2 (installed 2014-12-21)


Safari Extensions:

ExpressVPN for Safari - App Store (installed 2018-11-20)


3rd Party Preference Panes:

Flash Player (installed 2018-02-02)

Java (installed 2016-07-26)

NTFS (installed 2017-12-13)


Time Machine:

Time Machine information not available without Full Drive Access.


Performance:

System Load: 2.57 (1 min ago) 3.42 (5 min ago) 3.79 (15 min ago)

Nominal I/O speed: 35.82 MB/s

File system: 120.66 seconds (timed out)

Write speed: 20 MB/s

Read speed: 34 MB/s


CPU Usage:

TypeOverallIndividual cores
System15 %26 %7 %21 %7 %
User13 %18 %8 %17 %8 %
Idle72 %57 %86 %62 %85 %


Top Processes by CPU:

Process (count)SourceCPULocation
Other processes?70.04 %
EtreCheckApp Store30.94 %
firefoxMozilla Corporation6.10 %
syncdefaultsdApple2.37 %
ExpressVPNExprsVPN LLC0.28 %


Top Processes by Memory:

Process (count)SourceRAM usageLocation
firefoxMozilla Corporation118 MB
EtreCheckApp Store74 MB
com.apple.WebKit.WebContentApple17 MB
ExpressVPNExprsVPN LLC16 MB
syncdefaultsdApple14 MB


Virtual Memory Information:

Available RAM261 MB
Free RAM15 MB
Used RAM1.75 GB
Cached files245 MB
Swap Used1.57 GB


Software Installs (past 30 days):

NameVersionInstall Date
Avira Antivirus2018-11-12
ExpressVPN2018-11-20
Malwarebytes for Mac2018-11-23
Memory Clean6.62018-11-23
EtreCheck5.0.22018-11-23


Diagnostics Information (past 7 days):

2018-11-23 21:23:47 Last Shutdown Cause: 3 - Hard shutdown


Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.


End of report

Nov 24, 2018 5:47 AM in response to BobHarris

Here's the newest EtreCheck, just in case it's useful:

EtreCheck version: 5.0.2 (5015)

Report generated: 2018-11-24 21:25:45

Download EtreCheck from https://etrecheck.com

Runtime: 7:04

Performance: Below Average

Sandbox: Enabled

Full drive access: Disabled


Problem: Computer is too slow


Major Issues:

Anything that appears on this list needs immediate attention.


Low RAM - This machine has insufficient RAM.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Low disk space - This machine is running low on free hard drive space.

High battery cycle count - Your battery may be losing capacity.

Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.

Low performance - EtreCheck report took over 5 minutes to run. This is unusual.

Vintage hardware - This machine may be considered vintage.

Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.


Hardware Information:

MacBook Air (11-inch, Mid 2011) - Vintage!

MacBook Air Model: MacBookAir4,1

1 1.6 GHz Intel Core i5 (i5-2467M) CPU: 2-core

2 GB RAM - Not upgradeable

BANK 0/DIMM0 - 1 GB DDR3 1333 ok

BANK 1/DIMM0 - 1 GB DDR3 1333 ok

Battery: Health = Replace Soon - Cycle count = 1415


Video Information:

Intel HD Graphics 3000 - VRAM: 288 MB

Color LCD 1366 x 768


Drives:

disk0 - APPLE SSD TS064C 60.67 GB (Solid State - TRIM: Yes)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 59.81 GB

disk1 - M*******h (Journaled HFS+) 59.44 GB (48.95 GB used)

disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB


Mounted Volumes:

disk1 - M*******h 59.44 GB (10.22 GB free)

Journaled HFS+

Mount point: /


Network:

Interface usbmodemFA130: MT65xx Preloader 2

Interface usbmodemFD110: MT65xx Preloader

Interface en0: Wi-Fi

802.11 a/b/g/n

Interface en4: iPhone


System Software:

OS X El Capitan 10.11 (15A284)

Time since boot: Less than an hour


Configuration Files:

/etc/hosts - Count: 40


Security:

SystemStatus
GatekeeperEnabled
System Integrity ProtectionEnabled


Unsigned Files:

Launchd: /Library/LaunchAgents/com.paragon-software.facebook.agent.plist

Executable: /Library/Application Support/Paragon Software/Paragon Software Facebook Agent.app/Contents/MacOS/Paragon Software Facebook Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.pqrs.Karabiner.load.plist

Executable: /Library/Application Support/org.pqrs/Karabiner/startup.sh start

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Update r.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist

Executable: /opt/X11/lib/X11/xinit/privileged_startx -d /opt/X11/lib/X11/xinit/privileged_startx.d

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool .plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/org.macosforge.xquartz.startx.plist

Executable: /opt/X11/lib/X11/xinit/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.tendyron.launchd.monitor_CCB.plist

Executable: /usr/local/lib/OnKeyMonitor_CCB

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.lsreset.plist

Executable: /bin/sh -c 'pkill -9 "Little Snitch Daemon"'

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/org.musingsfrommars.MTL.Agent.plist

Executable: /Library/ScriptingAdditions/MTL.osax/Contents/Resources/MTLAgent.app/Contents/M acOS/MTLAgent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.adobe.fpsaud.plist

Executable: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


32-bit Applications:

37 32-bit apps


Kernel Extensions:

/Applications/ExpressVPN.app

ExpressVPNSplitTunnel.kext (ExprsVPN LLC, 1.0.2 - SDK 10.12)


/Applications/Seil.app

Seil.10.9.signed.kext (Fumihiko Takayama, 11.2.0 - SDK 10.9)


/Library/Application Support/org.pqrs/Karabiner

Karabiner.signed.kext (Fumihiko Takayama, 10.11.0 - SDK 10.11)


System Launch Agents:

[Not Loaded] 8 Apple tasks
[Loaded] 157 Apple tasks
[Running] 37 Apple tasks
[Killed] 33 Apple tasks


System Launch Daemons:

[Not Loaded] 46 Apple tasks
[Loaded] 160 Apple tasks
[Running] 54 Apple tasks
[Killed] 27 Apple tasks
[Other] One Apple task


Launch Agents:

[Running] org.musingsfrommars.MTL.Agent.plist (? 8ba41dba - installed 2014-08-28)
[Loaded] org.macosforge.xquartz.startx.plist (? d225a7da - installed 2014-08-12)
[Loaded] com.paragon.updater.plist (Paragon Software GmbH - installed 2016-11-29)
[Not Loaded] com.oracle.java.Java-Updater.plist (? 978ce8e4 - installed 2016-06-22)
[Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-12-13)
[Loaded] com.paragon-software.facebook.agent.plist (? 95fb0bd4 - installed 2016-11-29)
[Running] com.sogou.SogouServices.plist (Beijing Sogou Technology Development Co.,Ltd. - installed 2020-10-18)


Launch Daemons:

[Loaded] com.apple.aelwriter.plist (Apple - installed 2014-12-21)
[Loaded] net.interacto.flavours.helper.plist (? c03ce522 - installed 2014-11-13)
[Running] com.tendyron.launchd.monitor_CCB.plist (? 323572c2 - installed 2015-10-19)
[Loaded] com.purevpn.macapp.HelperTool.plist (GZ Systems Limited - installed 2018-02-23)
[Running] com.apple.qmaster.qmasterd.plist (Apple - installed 2009-06-20)
[Loaded] com.adobe.SwitchBoard.plist (? 68cad67 - installed 2014-12-31)
[Loaded] com.adobe.fpsaud.plist (? 2afb3af7 - installed 2018-02-02)
[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2016-06-22)
[Loaded] org.macosforge.xquartz.privileged_startx.plist (? 65395f14 - installed 2014-08-12)
[Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2017-12-13)
[Loaded] com.lsreset.plist (? 0 - installed 2014-11-15)
[Other] com.paragon-software.ntfs.loader.plist (Apple - installed 2017-12-13)
[Loaded] com.spyoff.helper.vpnd.plist (Sareta S.r.l. - installed 2017-11-24)
[Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-04-22)
[Not Loaded] org.pqrs.Karabiner.load.plist (? 44439558 - installed 2015-10-11)
[Loaded] com.nordvpn.NordVPN.Helper.plist (TEFINKOM & CO S.A - installed 2018-06-24)


User Launch Agents:

[Running] com.expressvpn.ExpressVPN.agent.plist (ExprsVPN LLC - installed 2018-11-20)


User Login Items:

BandwidthLauncher (App Store - installed 2018-04-01)

(/Applications/Bandwidth+.app/Contents/Library/LoginItems/BandwidthLauncher.app )


Internet Plug-ins:

AdobePDFViewerNPAPI: 11.0.07 (installed 2014-05-08)

Flash Player: 28.0.0.161 (installed 2018-02-17)

AdobePDFViewer: 11.0.07 (installed 2014-05-08)

googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-12)

NPSafeSubmit: 1.0 (installed 2013-04-16)

ePass2000_FT11: 1.0.15308 (installed 2015-11-29)

QuickTime Plugin: 7.7.3 (installed 2015-09-17)

HDZB_CCB_SignPlugin: 1.0 (installed 2015-10-14)

FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-17)

NPSafeInput: 1.0 (installed 2013-04-16)

CMBSecurity: 1.0 (installed 2012-12-25)

NPCleanHistory: 1.0 (installed 2012-03-26)

NPAPI_Core_Safe_SoftKeyboard_Plugin: 1.1 (installed 2017-03-16)

Silverlight: 5.1.30317.0 (installed 2014-05-25)

NPClientBinding: 1.0.0.5 (installed 2013-05-02)

Default Browser: 601 (installed 2015-09-17)

SharePointBrowserPlugin: 14.4.5 (installed 2014-10-22)

o1dbrowserplugin: 5.41.3.0 (installed 2015-12-17)

JavaAppletPlugin: Java 8 Update 101 build 13 (installed 2018-10-27)

TDR_CCB_NetSignPlugin: 1.0 (installed 2015-10-19)


Audio Plug-ins:

DVCPROHDAudio: 1.3.2 (installed 2014-12-21)


Safari Extensions:

ExpressVPN for Safari - App Store (installed 2018-11-20)


3rd Party Preference Panes:

Flash Player (installed 2018-02-02)

Java (installed 2016-07-26)

NTFS (installed 2017-12-13)


Time Machine:

Time Machine information not available without Full Drive Access.


Performance:

System Load: 15.42 (1 min ago) 10.65 (5 min ago) 5.00 (15 min ago)

Nominal I/O speed: 32.74 MB/s

File system: 94.69 seconds

Write speed: 33 MB/s

Read speed: 79 MB/s


CPU Usage:

TypeOverallIndividual cores
System5 %8 %2 %6 %2 %
User16 %29 %5 %23 %5 %
Idle80 %63 %93 %70 %92 %


Top Processes by CPU:

Process (count)SourceCPULocation
EtreCheckApp Store34.47 %
Other processes?28.74 %
firefoxMozilla Corporation15.58 %
Activity MonitorApple1.71 %
ExpressVPNExprsVPN LLC0.39 %


Top Processes by Memory:

Process (count)SourceRAM usageLocation
EtreCheckApp Store277 MB
firefoxMozilla Corporation187 MB
Activity MonitorApple44 MB
AddressBookSourceSyncApple36 MB
SystemUIServer (2)Apple32 MB


Virtual Memory Information:

Available RAM193 MB
Free RAM14 MB
Used RAM1.81 GB
Cached files178 MB
Swap Used569 MB


Software Installs (past 30 days):

NameVersionInstall Date
Avira Antivirus2018-11-12
ExpressVPN2018-11-20
Malwarebytes for Mac2018-11-23
Memory Clean6.62018-11-23
EtreCheck5.0.22018-11-23


Diagnostics Information (past 7 days):

Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.


End of report

Nov 24, 2018 10:17 AM in response to Sail_To_Lahaina

Try the "intel Power Gadget" and see if your CPU is running at full speed. You have a 1.6GHz intel Core i5 with 2 cores.

https://software.intel.com/en-us/articles/intel-power-gadget-20

macOS has been known to reduce the CPU speed when the battery is too far gone.


And as Eric Root has said, you have way too much 3rd party software installed that is running all the time in the background. A vanilla clean system with none of those 3rd party additions would struggle with El Capitan, but you have handicapped it even more with all the extra software.

Nov 26, 2018 6:15 AM in response to Sail_To_Lahaina

Launch Agents:

[Running] org.musingsfrommars.MTL.Agent.plist (? 8ba41dba - installed 2014-08-28)
[Loaded] org.macosforge.xquartz.startx.plist (? d225a7da - installed 2014-08-12)
[Loaded] com.paragon.updater.plist (Paragon Software GmbH - installed 2016-11-29)
[Not Loaded] com.oracle.java.Java-Updater.plist (? 978ce8e4 - installed 2016-06-22)
[Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-12-13)
[Loaded] com.paragon-software.facebook.agent.plist (? 95fb0bd4 - installed 2016-11-29)
[Running] com.sogou.SogouServices.plist (Beijing Sogou Technology Development Co.,Ltd. - installed 2020-10-18)


Launch Daemons:

[Loaded] com.apple.aelwriter.plist (Apple - installed 2014-12-21)
[Loaded] net.interacto.flavours.helper.plist (? c03ce522 - installed 2014-11-13)
[Running] com.tendyron.launchd.monitor_CCB.plist (? 323572c2 - installed 2015-10-19)
[Loaded] com.purevpn.macapp.HelperTool.plist (GZ Systems Limited - installed 2018-02-23)
[Running] com.apple.qmaster.qmasterd.plist (Apple - installed 2009-06-20)
[Loaded] com.adobe.SwitchBoard.plist (? 68cad67 - installed 2014-12-31)
[Loaded] com.adobe.fpsaud.plist (? 2afb3af7 - installed 2018-02-02)
[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2016-06-22)
[Loaded] org.macosforge.xquartz.privileged_startx.plist (? 65395f14 - installed 2014-08-12)
[Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2017-12-13)
[Loaded] com.lsreset.plist (? 0 - installed 2014-11-15)
[Other] com.paragon-software.ntfs.loader.plist (Apple - installed 2017-12-13)
[Loaded] com.spyoff.helper.vpnd.plist (Sareta S.r.l. - installed 2017-11-24)
[Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-04-22)
[Not Loaded] org.pqrs.Karabiner.load.plist (? 44439558 - installed 2015-10-11)
[Loaded] com.nordvpn.NordVPN.Helper.plist (TEFINKOM & CO S.A - installed 2018-06-24)


User Launch Agents:

[Running] com.expressvpn.ExpressVPN.agent.plist (ExprsVPN LLC - installed 2018-11-20)


User Login Items:

BandwidthLauncher (App Store - installed 2018-04-01)

(/Applications/Bandwidth+.app/Contents/Library/LoginItems/BandwidthLauncher.app )

When you boot, you have all of the above 3rd party software running in the background (except for the items marked [Not Loaded]).


These are items that are using up ALL your RAM when you boot and before you get a chance to run Activity Monitor.


So yes, you have way too much 3rd party software installed that runs when you boot or login for the small amount of RAM in your Mac.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Weird wired memory usage and other weird happenings

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.