Cant restart my Mac, finder not responding.

[cepum5]

Hey all.

For the last 3-4 months I have been dealing with this issue, when Im trying to restart or shut down my Mac, it starts the process, desktop icons and top menu dissapear, but thats it. The finder crashes , and is not responding. I can still use the dock.

Only option is to put it on sleep, but right now I need to update to 10.11.6 ,but because of this restart issue I cant.

Maybe anyone of you had the same problem and know how to tackle this?

SOLVED:

I needed to go through the startup/launch app list ,you can access that by going system preferences - Users & Groups - Choose User - User Lists and than uncheck everything. Worked as a charm for me.

 

[PabloRe]

Why not to push the button? If it is the only way to restart...

 

[cepum5]

Why not to push the button? If it is the only way to restart...

Would like to do it properly tho, not force quit every time and also it cant update the OS if Im pushing the button.

 

[cepum5]

Thats what I got when I try to restart.

 

[997440]

Did you try booting into Safe Mode? Any better?
Then a normal boot. Better?

If not, download and install the free app EtreCheck. Post the report and someone may be able to help you.

Edit to add: Also, if the issue doesn't clear up after Safe Mode then normal boot, try booting into a different user account and report the result. It would further assist someone to be able to help you.

 

[Fishrrman]

I've posted this workaround before, I'll post it again, but few seem interested in trying it.

I, too, have some shutdown problems with El Capitan. The problems disappear when I safe boot, so I'll reckon it's got something to do with a login item or a process I'm running. But my "solution" works around it.

Do this:
1. When it's time to shut down or restart, DO NOT choose either option from the finder menu.
2. Instead, LOG YOURSELF OUT.
3. You'll next see the login screen. At the bottom are options to shut down or restart.
4. Choose either one.

What happens next…?

 

[T'hain Esh Kelch]

Do a reinstall of the OS.

 

[cepum5]

Did you try booting into Safe Mode? Any better?
Then a normal boot. Better?

So tried Safe Mode, I can restart and shut down on that one. But, when I go back on normal boot, same issue - it starts the process and get stuck in the middle, like on screenshot.

If not, download and install the free app EtreCheck. Post the report and someone may be able to help you.

Here is the report:

EtreCheck version: 2.9.13 (267)

Report generated 2016-07-28 18:07:11

Download EtreCheck from https://etrecheck.com

Runtime 1:31

Performance: Excellent



Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Click the [Remove] links to remove adware.



Problem: Other problem



Hardware Information: ⓘ

MacBook Pro (Retina, 13-inch, Early 2015)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro12,1

1 2.7 GHz Intel Core i5 CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1867 MHz ok

BANK 1/DIMM0

4 GB DDR3 1867 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 291


Video Information: ⓘ

Intel Iris Graphics 6100

Color LCD 2560 x 1600


System Software: ⓘ

OS X El Capitan 10.11.5 (15F34) - Time since boot: less than an hour


Disk Information: ⓘ

APPLE SSD SM0128G disk0 : (121.33 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / [Startup]: 120.12 GB (14.75 GB free) (Low!)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 120.47 GB Online


USB Information: ⓘ

Broadcom Corp. Bluetooth USB Host Controller

Logitech USB Receiver


Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus


Gatekeeper: ⓘ

Anywhere


Adware: ⓘ

/Library/LaunchAgents/com.MacUpdater.agent.plist

/Library/LaunchDaemons/com.HotShoppy.agent.plist

~/Library/LaunchAgents/com.MacUpdater.agent.plist

~/Library/LaunchAgents/com.spigot.ApplicationManager.plist

4 adware files found. [Remove]


Kernel Extensions: ⓘ

/Applications/Parallels Desktop.app

[not loaded] com.parallels.kext.hypervisor (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]

[not loaded] com.parallels.kext.netbridge (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]

[not loaded] com.parallels.kext.usbconnect (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]

[not loaded] com.parallels.kext.vnic (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]



/Library/Extensions

[not loaded] com.FTDI.driver.D2XXHelper (1.0 - SDK 10.11 - 2016-07-27) [Support]

[not loaded] com.mice.driver.Wireless360Controller (1.0.0d15 - SDK 10.10 - 2016-07-27) [Support]

[not loaded] com.mice.driver.WirelessGamingReceiver (1.0.0d15 - SDK 10.10 - 2016-07-27) [Support]

[not loaded] com.mice.driver.Xbox360Controller (1.0.0d15 - SDK 10.10 - 2016-07-27) [Support]

[loaded] com.symantec.internetSecurity.kext (6.4.1 - SDK 10.9 - 2016-07-27) [Support]



/System/Library/Extensions

[loaded] com.symantec.ips.kext (6.4 - SDK 10.8 - 2016-07-27) [Support]

[loaded] com.symantec.nfm.kext (6.4 - SDK 10.8 - 2016-07-27) [Support]

[not loaded] com.wacom.kext.pentablet (Pen Tablet 5.3.6-6 - SDK 10.9 - 2016-07-27) [Support]

[not loaded] com.wacom.kext.wacomtablet (Wacom Tablet 6.3.15-3 - SDK 10.11 - 2016-07-27) [Support]



System Launch Agents: ⓘ

[not loaded] 7 Apple tasks

[loaded] 161 Apple tasks

[running] 70 Apple tasks


System Launch Daemons: ⓘ

[not loaded] 47 Apple tasks

[loaded] 158 Apple tasks

[running] 85 Apple tasks


Launch Agents: ⓘ

[loaded] com.MacUpdater.agent.plist (2016-07-19) Adware! [Remove]

/Applications/MacUpdater/MacUpdater

[not loaded] com.adobe.AAM.Updater-1.0.plist (2016-06-13) [Support]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a...plist (2016-07-13) [Support]

[running] com.adobe.AdobeCreativeCloud.plist (2016-04-12) [Support]

[loaded] com.oracle.java.Java-Updater.plist (2015-10-14) [Support]

[failed] com.symantec.errorreporter-periodicagent.NFM.plist (2015-10-06) [Support]

[running] com.symantec.uiagent.application.NFM.plist (2015-09-12) [Support]

[running] com.wacom.pentablet.plist (2014-12-23) [Support]

[running] com.wacom.wacomtablet.plist (2015-12-16) [Support]


Launch Daemons: ⓘ

[failed] com.HotShoppy.agent.plist (2016-07-19) Adware! [Remove]

[loaded] com.adobe.ARMDC.Communicator.plist (2016-07-13) [Support]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (2016-07-13) [Support]

[loaded] com.adobe.agsservice.plist (2016-04-12) [Support]

[loaded] com.adobe.fpsaud.plist (2016-04-16) [Support]

[running] com.cleverfiles.cfbackd.plist (2016-05-17) [Support]

[running] com.mice.360Daemon.plist (2016-04-27) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2015-10-14) [Support]

[loaded] com.symantec.SymLUHelper.NFM.plist (2015-09-12) [Support]

[loaded] com.symantec.UninstallerToolHelper.plist (2015-04-22) [Support]

[running] com.symantec.deepsight-extractor.NFM.plist (2015-09-12) [Support]

[loaded] com.symantec.errorreporter-periodic.NFM.plist (2015-10-06) [Support]

[failed] com.symantec.liveupdate.daemon.NFM.plist (2015-09-12) [Support]

[running] com.symantec.sharedsettings.NFM.plist (2015-09-12) [Support]

[running] com.symantec.symdaemon.NFM.plist (2015-09-12) [Support]

[loaded] com.wacom.displayhelper.plist (2015-12-16) [Support]


User Launch Agents: ⓘ

[loaded] com.MacUpdater.agent.plist (2016-07-19) Adware! [Remove]

/Applications/MacUpdater/MacUpdater

[loaded] com.adobe.AAM.Updater-1.0.plist (2015-10-06) [Support]

[loaded] com.bittorrent.uTorrent.plist (2015-10-10) [Support]

[loaded] com.google.keystone.agent.plist (2016-07-12) [Support]

[failed] com.spigot.ApplicationManager.plist (2015-10-10) Adware! [Remove]

[running] com.spotify.webhelper.plist (2016-07-28) [Support]

[loaded] com.valvesoftware.steamclean.plist (2016-07-23) [Support]


User Login Items: ⓘ

Flux Application (~/Applications/Flux.app)

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Android File Transfer Agent Application (~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Skype Application (/Volumes/Skype/Skype.app)

Google Drive Application (/Applications/Google Drive.app)

Google Chrome Application (/Applications/Google Chrome.app)

BambooCore Application (/Library/Application Support/Wacom/BambooCore.app)


Other Apps: ⓘ

[running] com.GoPro.goproapp-devicedetection

[running] com.adobe.CCXProcess.274912

[running] com.adobe.acc.AdobeDesktopService.63392.C77DA4F0-6092-420D-9846-B602702115FE

[running] com.adobe.accmac.196512

[running] com.etresoft.EtreCheck.330912

[running] com.google.Chrome.54752

[running] com.google.GoogleDrive.75552

[running] com.google.android.mtpagent.143392

[running] com.skype.skype.329312

[running] com.wacom.BambooCore.88352

[running] com.wacom.ConsumerTouchDriver.185632

[running] com.wacom.TabletDriver.298912

[running] com.wacom.WacomTouchDriver.215072

[running] org.herf.Flux.73952

[loaded] 408 Apple tasks

[running] 204 Apple tasks


Internet Plug-ins: ⓘ

AdobeAAMDetect: 3.0.0.0 - SDK 10.9 (2016-04-12) [Support]

FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-04-22) [Support]

QuickTime Plugin: 7.7.3 (2016-05-23)

AdobePDFViewerNPAPI: 15.017.20050 - SDK 10.11 (2016-07-14) [Support]

AdobePDFViewer: 15.017.20050 - SDK 10.11 (2016-07-14) [Support]

Flash Player: 21.0.0.226 - SDK 10.6 (2016-04-22) Outdated! Update

Default Browser: 601 - SDK 10.11 (2016-05-23)

Unity Web Player: UnityPlayer version 5.2.1f1 - SDK 10.6 (2015-09-21) [Support]

NortonInternetSecurityBF: 6.4 - SDK 10.9 (2015-10-06) [Support]

WacomTabletPlugin: WacomTabletPlugin 2.1.0.6 - SDK 10.9 (2015-12-16) [Support]

JavaAppletPlugin: Java 8 Update 91 build 14 (2016-05-24) Check version



Safari Extensions: ⓘ

Pin It Button - Pinterest, Inc. - http://www.pinterest.com/ (2015-10-26)

Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (2016-03-29)

Open in Internet Explorer - Parallels - http://www.parallels.com (2016-07-19)


3rd Party Preference Panes: ⓘ

Flash Player (2016-04-16) [Support]

Java (2016-05-24) [Support]

PenTablet (2016-07-27) [Support]

WacomTablet (2015-12-16) [Support]

XBox 360 Controllers (2016-04-27) [Support]


Time Machine: ⓘ

Time Machine not configured!



Top Processes by CPU: ⓘ

2% kernel_task

2% Google Chrome Helper(9)

2% fontd

1% WindowServer

1% Google Chrome


Top Processes by Memory: ⓘ

1.06 GB Google Chrome Helper(9)

879 MB kernel_task

467 MB mdworker(18)

319 MB SymDaemon

262 MB Google Drive


Virtual Memory Information: ⓘ

967 MB Free RAM

7.05 GB Used RAM (2.26 GB Cached)

0 B Swap Used


Diagnostics Information: ⓘ

Jul 28, 2016, 05:51:13 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-175113_[redacted].crash

com.wacom.PenTabletDriver - /Library/Application Support/Tablet/PenTabletDriver.app/Contents/MacOS/PenTabletDriver

Jul 28, 2016, 05:51:04 PM Self test - passed

Jul 28, 2016, 05:49:05 PM ~/Library/Logs/DiagnosticReports/quicklookd_2016-07-28-174905_[redacted].crash

/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/MacOS/quicklookd

Jul 28, 2016, 05:48:35 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-174835_[redacted].crash

Jul 28, 2016, 05:47:00 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-174700_[redacted].crash

Jul 28, 2016, 02:27:53 PM /Library/Logs/DiagnosticReports/SymDaemon_2016-07-28-142753_[redacted].cpu_resource.diag [Details]

/Library/Application Support/Symantec/*/SymDaemon.bundle/Contents/MacOS/SymDaemon

Jul 28, 2016, 01:58:24 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-135824_[redacted].crash

Jul 28, 2016, 10:21:31 AM /Library/Logs/DiagnosticReports/SymDaemon_2016-07-28-102131_[redacted].cpu_resource.diag [Details]

Jul 28, 2016, 10:01:41 AM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-100141_[redacted].crash

Jul 28, 2016, 10:00:16 AM ~/Library/Logs/DiagnosticReports/Finder_2016-07-28-100016_[redacted].crash

com.apple.finder - /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder

Jul 28, 2016, 09:58:32 AM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-095832_[redacted].crash

Jul 27, 2016, 02:01:14 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-27-140114_[redacted].crash

com.google.GoogleDrive.FinderSyncAPIExtension - /Applications/Google Drive.app/Contents/PlugIns/FinderSyncAPIExtension.appex/Contents/MacOS/FinderSyncAPIExtension

Jul 27, 2016, 01:39:16 PM /Library/Logs/DiagnosticReports/coreaudiod_2016-07-27-133916_[redacted].crash

/usr/sbin/coreaudiod

Jul 26, 2016, 05:50:17 PM /Library/Logs/DiagnosticReports/coreaudiod_2016-07-26-175017_[redacted].crash

Jul 26, 2016, 04:33:46 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-26-163346_[redacted].crash

Jul 26, 2016, 03:26:28 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-26-152628_[redacted].crash

Jul 26, 2016, 03:26:08 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-26-152608_[redacted].crash

Jul 26, 2016, 11:15:55 AM /Library/Logs/DiagnosticReports/SymDaemon_2016-07-26-111555_[redacted].cpu_resource.diag [Details]

Jul 25, 2016, 11:20:24 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-25-232024_[redacted].crash
[doublepost=1469722380][/doublepost]

I've posted this workaround before, I'll post it again, but few seem interested in trying it.

I, too, have some shutdown problems with El Capitan. The problems disappear when I safe boot, so I'll reckon it's got something to do with a login item or a process I'm running. But my "solution" works around it.

Do this:
1. When it's time to shut down or restart, DO NOT choose either option from the finder menu.
2. Instead, LOG YOURSELF OUT.
3. You'll next see the login screen. At the bottom are options to shut down or restart.
4. Choose either one.

What happens next…?

So it all gets stuck on 2. step as I cant get past that, same result as in the screenshot.

 

[Weaselboy]

Adware: ⓘ

/Library/LaunchAgents/com.MacUpdater.agent.plist

/Library/LaunchDaemons/com.HotShoppy.agent.plist

~/Library/LaunchAgents/com.MacUpdater.agent.plist

~/Library/LaunchAgents/com.spigot.ApplicationManager.plist

4 adware files found. [Remove]

You have some adware installed there. Run Etrecheck again and click to remove the adware.

The fact that this is fixed by running in safe mode is proof positive this is caused by one or more of the launch/startup items we see in the Etrecheck report, since a safe mode boot stops all those from running. So now it is a matter of figuring out which one is causing this.

I would get rid of all the Symantec stuff. Also, from the crash logs it looks like the Wacom driver is causing problems... so try updating or removing that.

There is also a Google Drive crash, and with its Finder integration, I'm wondering if that may be contributing to your Finder hangs.

 

[cepum5]

You have some adware installed there. Run Etrecheck again and click to remove the adware.

When I try to remove adware it shows me this:

 

[Weaselboy]

When I try to remove adware it shows me this:

View attachment 642291

Interesting. Etrecheck has integrated the malware removal app WalwareBytes, but it looks like it won't work without a backup. Makes sense I guess.

Try downloading MalwareBytes direct and running it to get rid of the adware. Do it while in a safe mode boot so none of that stuff is running while it is trying to delete it.

 

[cepum5]

Interesting. Etrecheck has integrated the malware removal app WalwareBytes, but it looks like it won't work without a backup. Makes sense I guess.

Try downloading title]MalwareBytes[/URL] direct and running it to get rid of the adware. Do it while in a safe mode boot so none of that stuff is running while it is trying to delete it.

So I removed adware with MalwareBytes and did it while in Safe Mode. That didnt solve the issue.
My report looks like this after the changes:

EtreCheck version: 2.9.13 (267)

Report generated 2016-07-28 20:35:58

Download EtreCheck from https://etrecheck.com

Runtime 1:47

Performance: Excellent



Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.



Problem: Apps are crashing



Hardware Information: ⓘ

MacBook Pro (Retina, 13-inch, Early 2015)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro12,1

1 2.7 GHz Intel Core i5 CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1867 MHz ok

BANK 1/DIMM0

4 GB DDR3 1867 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 292


Video Information: ⓘ

Intel Iris Graphics 6100

Color LCD 2560 x 1600


System Software: ⓘ

OS X El Capitan 10.11.5 (15F34) - Time since boot: less than an hour


Disk Information: ⓘ

APPLE SSD SM0128G disk0 : (121.33 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / [Startup]: 120.12 GB (14.53 GB free) (Low!)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 120.47 GB Online


USB Information: ⓘ

Broadcom Corp. Bluetooth USB Host Controller

Logitech USB Receiver


Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus


Gatekeeper: ⓘ

Anywhere


Kernel Extensions: ⓘ

/Applications/Parallels Desktop.app

[not loaded] com.parallels.kext.hypervisor (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]

[not loaded] com.parallels.kext.netbridge (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]

[not loaded] com.parallels.kext.usbconnect (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]

[not loaded] com.parallels.kext.vnic (11.2.0 32581 - SDK 10.9 - 2016-07-19) [Support]



/Library/Extensions

[not loaded] com.FTDI.driver.D2XXHelper (1.0 - SDK 10.11 - 2016-07-27) [Support]

[not loaded] com.mice.driver.Wireless360Controller (1.0.0d15 - SDK 10.10 - 2016-07-27) [Support]

[not loaded] com.mice.driver.WirelessGamingReceiver (1.0.0d15 - SDK 10.10 - 2016-07-27) [Support]

[not loaded] com.mice.driver.Xbox360Controller (1.0.0d15 - SDK 10.10 - 2016-07-27) [Support]

[loaded] com.symantec.internetSecurity.kext (6.4.1 - SDK 10.9 - 2016-07-27) [Support]



/System/Library/Extensions

[loaded] com.symantec.ips.kext (6.4 - SDK 10.8 - 2016-07-27) [Support]

[loaded] com.symantec.nfm.kext (6.4 - SDK 10.8 - 2016-07-27) [Support]

[not loaded] com.wacom.kext.pentablet (Pen Tablet 5.3.6-6 - SDK 10.9 - 2016-07-27) [Support]

[not loaded] com.wacom.kext.wacomtablet (Wacom Tablet 6.3.15-3 - SDK 10.11 - 2016-07-27) [Support]



System Launch Agents: ⓘ

[not loaded] 7 Apple tasks

[loaded] 160 Apple tasks

[running] 71 Apple tasks


System Launch Daemons: ⓘ

[not loaded] 47 Apple tasks

[loaded] 157 Apple tasks

[running] 86 Apple tasks


Launch Agents: ⓘ

[not loaded] com.adobe.AAM.Updater-1.0.plist (2016-06-13) [Support]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a...plist (2016-07-13) [Support]

[running] com.adobe.AdobeCreativeCloud.plist (2016-04-12) [Support]

[loaded] com.oracle.java.Java-Updater.plist (2015-10-14) [Support]

[failed] com.symantec.errorreporter-periodicagent.NFM.plist (2015-10-06) [Support]

[running] com.symantec.uiagent.application.NFM.plist (2015-09-12) [Support]

[running] com.wacom.pentablet.plist (2014-12-23) [Support]

[running] com.wacom.wacomtablet.plist (2015-12-16) [Support]


Launch Daemons: ⓘ

[loaded] com.adobe.ARMDC.Communicator.plist (2016-07-13) [Support]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (2016-07-13) [Support]

[loaded] com.adobe.agsservice.plist (2016-04-12) [Support]

[loaded] com.adobe.fpsaud.plist (2016-04-16) [Support]

[running] com.cleverfiles.cfbackd.plist (2016-05-17) [Support]

[loaded] com.malwarebytes.HelperTool.plist (2016-07-28) [Support]

[running] com.mice.360Daemon.plist (2016-04-27) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2015-10-14) [Support]

[running] com.symantec.SymLUHelper.NFM.plist (2015-09-12) [Support]

[loaded] com.symantec.UninstallerToolHelper.plist (2015-04-22) [Support]

[running] com.symantec.deepsight-extractor.NFM.plist (2015-09-12) [Support]

[loaded] com.symantec.errorreporter-periodic.NFM.plist (2015-10-06) [Support]

[running] com.symantec.liveupdate.daemon.NFM.plist (2015-09-12) [Support]

[running] com.symantec.sharedsettings.NFM.plist (2015-09-12) [Support]

[running] com.symantec.symdaemon.NFM.plist (2015-09-12) [Support]

[loaded] com.wacom.displayhelper.plist (2015-12-16) [Support]


User Launch Agents: ⓘ

[loaded] com.adobe.AAM.Updater-1.0.plist (2015-10-06) [Support]

[loaded] com.bittorrent.uTorrent.plist (2015-10-10) [Support]

[loaded] com.google.keystone.agent.plist (2016-07-12) [Support]

[running] com.spotify.webhelper.plist (2016-07-28) [Support]

[loaded] com.valvesoftware.steamclean.plist (2016-07-23) [Support]


User Login Items: ⓘ

Flux Application (~/Applications/Flux.app)

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Android File Transfer Agent Application (~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Skype Application (/Volumes/Skype/Skype.app)

Google Drive Application (/Applications/Google Drive.app)

Google Chrome Application (/Applications/Google Chrome.app)

BambooCore Application (/Library/Application Support/Wacom/BambooCore.app)


Other Apps: ⓘ

[running] com.GoPro.goproapp-devicedetection

[running] com.adobe.CCXProcess.274912

[running] com.adobe.acc.AdobeDesktopService.63392.35A8679F-F545-4FE6-B094-438ABCC3FB86

[running] com.adobe.accmac.196512

[running] com.etresoft.EtreCheck.330912

[running] com.google.Chrome.54752

[running] com.google.GoogleDrive.75552

[running] com.google.android.mtpagent.143392

[running] com.skype.skype.161632

[running] com.wacom.BambooCore.88352

[running] com.wacom.ConsumerTouchDriver.185632

[running] com.wacom.TabletDriver.168992

[running] com.wacom.WacomTouchDriver.215072

[running] org.herf.Flux.73952

[loaded] 404 Apple tasks

[running] 196 Apple tasks


Internet Plug-ins: ⓘ

AdobeAAMDetect: 3.0.0.0 - SDK 10.9 (2016-04-12) [Support]

FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-04-22) [Support]

QuickTime Plugin: 7.7.3 (2016-05-23)

AdobePDFViewerNPAPI: 15.017.20050 - SDK 10.11 (2016-07-14) [Support]

AdobePDFViewer: 15.017.20050 - SDK 10.11 (2016-07-14) [Support]

Flash Player: 21.0.0.226 - SDK 10.6 (2016-04-22) Outdated! Update

Default Browser: 601 - SDK 10.11 (2016-05-23)

Unity Web Player: UnityPlayer version 5.2.1f1 - SDK 10.6 (2015-09-21) [Support]

NortonInternetSecurityBF: 6.4 - SDK 10.9 (2015-10-06) [Support]

WacomTabletPlugin: WacomTabletPlugin 2.1.0.6 - SDK 10.9 (2015-12-16) [Support]

JavaAppletPlugin: Java 8 Update 91 build 14 (2016-05-24) Check version



Safari Extensions: ⓘ

Pin It Button - Pinterest, Inc. - http://www.pinterest.com/ (2015-10-26)

Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (2016-03-29)

Open in Internet Explorer - Parallels - http://www.parallels.com (2016-07-19)


3rd Party Preference Panes: ⓘ

Flash Player (2016-04-16) [Support]

Java (2016-05-24) [Support]

PenTablet (2016-07-27) [Support]

WacomTablet (2015-12-16) [Support]

XBox 360 Controllers (2016-04-27) [Support]


Time Machine: ⓘ

Time Machine not configured!



Top Processes by CPU: ⓘ

97% Google Drive

14% mdworker(2)

6% Google Chrome

5% kernel_task

4% Google Chrome Helper(9)


Top Processes by Memory: ⓘ

1.14 GB Google Chrome Helper(10)

861 MB kernel_task

311 MB SymDaemon

246 MB Google Drive

238 MB Google Chrome


Virtual Memory Information: ⓘ

1.92 GB Free RAM

6.07 GB Used RAM (2.42 GB Cached)

0 B Swap Used


Diagnostics Information: ⓘ

Jul 28, 2016, 08:33:38 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-203338_[redacted].crash

com.wacom.PenTabletDriver - /Library/Application Support/Tablet/PenTabletDriver.app/Contents/MacOS/PenTabletDriver

Jul 28, 2016, 08:33:29 PM Self test - passed

Jul 28, 2016, 08:32:13 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-203213_[redacted].crash

Jul 28, 2016, 08:30:56 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-28-203056_[redacted].crash

com.google.GoogleDrive.FinderSyncAPIExtension - /Applications/Google Drive.app/Contents/PlugIns/FinderSyncAPIExtension.appex/Contents/MacOS/FinderSyncAPIExtension

Jul 28, 2016, 08:30:20 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-203020_[redacted].crash

Jul 28, 2016, 08:13:47 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-201347_[redacted].crash

Jul 28, 2016, 05:51:13 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-175113_[redacted].crash

Jul 28, 2016, 05:49:05 PM ~/Library/Logs/DiagnosticReports/quicklookd_2016-07-28-174905_[redacted].crash

/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/MacOS/quicklookd

Jul 28, 2016, 05:48:35 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-174835_[redacted].crash

Jul 28, 2016, 05:47:00 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-174700_[redacted].crash

Jul 28, 2016, 02:27:53 PM /Library/Logs/DiagnosticReports/SymDaemon_2016-07-28-142753_[redacted].cpu_resource.diag [Details]

/Library/Application Support/Symantec/*/SymDaemon.bundle/Contents/MacOS/SymDaemon

Jul 28, 2016, 01:58:24 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-135824_[redacted].crash

Jul 28, 2016, 10:21:31 AM /Library/Logs/DiagnosticReports/SymDaemon_2016-07-28-102131_[redacted].cpu_resource.diag [Details]

Jul 28, 2016, 10:01:41 AM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-100141_[redacted].crash

Jul 28, 2016, 10:00:16 AM ~/Library/Logs/DiagnosticReports/Finder_2016-07-28-100016_[redacted].crash

com.apple.finder - /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder

Jul 28, 2016, 09:58:32 AM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-28-095832_[redacted].crash

Jul 27, 2016, 02:01:14 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-27-140114_[redacted].crash

Jul 27, 2016, 01:39:16 PM /Library/Logs/DiagnosticReports/coreaudiod_2016-07-27-133916_[redacted].crash

/usr/sbin/coreaudiod

Jul 26, 2016, 05:50:17 PM /Library/Logs/DiagnosticReports/coreaudiod_2016-07-26-175017_[redacted].crash

Jul 26, 2016, 04:33:46 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-26-163346_[redacted].crash

Jul 26, 2016, 03:26:28 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-26-152628_[redacted].crash

Jul 26, 2016, 03:26:08 PM ~/Library/Logs/DiagnosticReports/FinderSyncAPIExtension_2016-07-26-152608_[redacted].crash

Jul 26, 2016, 11:15:55 AM /Library/Logs/DiagnosticReports/SymDaemon_2016-07-26-111555_[redacted].cpu_resource.diag [Details]

Jul 25, 2016, 11:20:24 PM /Library/Logs/DiagnosticReports/PenTabletDriver_2016-07-25-232024_[redacted].crash

 

[Weaselboy]

You need to try the other suggestions I posted in post #9. Like I said, the fact a safe mode boot fixes this is proof it is one of the launch/startup items in the EtreCheck list.

I suggested where to start in post #9. If that does not fix it, there is no easy way to tell which items it is other than just starting to remove them until you find the offender.

What I would do it print out the report and use it as a work sheet to mark off what you have tried. Make a folder on the Desktop then drag half of these items on the list out at a time to narrow it down. Once you find the offender you can put everything back.

 

[cepum5]

You need to try the other suggestions I posted in post #9. Like I said, the fact a safe mode boot fixes this is proof it is one of the launch/startup items in the EtreCheck list.

I suggested where to start in post #9. If that does not fix it, there is no easy way to tell which items it is other than just starting to remove them until you find the offender.

What I would do it print out the report and use it as a work sheet to mark off what you have tried. Make a folder on the Desktop then drag half of these items on the list out at a time to narrow it down. Once you find the offender you can put everything back.

Already removed wacom drivers and disconected google drive. Do you know how could I get rid of that Symantec stuff?

I will go through the list as you said and see if that helps.

 

[Weaselboy]

Already removed wacom drivers and disconected google drive. Do you know how could I get rid of that Symantec stuff?

I will go through the list as you said and see if that helps.

Did you remove those items after you ran this latest Etrecheck report, because I still see them there.

Look in these folders for any from Symantec. You can see the folders in the report.

~/Library/LaunchAgents (~ is your users folder)
/Library/LaunchAgents
/Library/LaunchDaemons
/Library/StartupItems
/System/Library/Extensions/

 

[cepum5]

Did you remove those items after you ran this latest Etrecheck report, because I still see them there.

Look in these folders for any from Symantec. You can see the folders in the report.

~/Library/LaunchAgents (~ is your users folder)
/Library/LaunchAgents
/Library/LaunchDaemons
/Library/StartupItems
/System/Library/Extensions/

Good news. I solved it. I went to system preferences - users & groups - and unchecked every startup app and now it works. Im not sure which one was conflicting but I think it was that wacom bamboocore app that was left behind.

Anyways thank you all for your help , especialy Weaselboy ,for assisting on solving this issue. Will add the answer on top of the post for others.

 

[JohnDS]

Unchecking startup items in the Users and Groups panel does not disable them. It just forces them to start in the background. To disable an item, you have to click on it to highlight it and click the minus button at the bottom of the window.

 

[thomasareed]

Interesting. Etrecheck has integrated the malware removal app WalwareBytes, but it looks like it won't work without a backup.

Actually, Etrecheck has not integrated Malwarebytes in any way. It has its own adware removal functionality now. Some of Etrecheck's adware detection is based on the old AdwareMedic signatures, but that's outdated at this point.

 

[Weaselboy]

Actually, Etrecheck has not integrated Malwarebytes in any way. It has its own adware removal functionality now. Some of Etrecheck's adware detection is based on the old AdwareMedic signatures, but that's outdated at this point.

Oh thanks... appreciate the clarification. I thought I had read EtreCheck was using MWB. I must have been thinking of the old AdwareMedic signatures you mention. I think it was mentioned in an earlier EtreCheck release note.

 

[thomasareed]

Oh thanks... appreciate the clarification. I thought I had read EtreCheck was using MWB. I must have been thinking of the old AdwareMedic signatures you mention. I think it was mentioned in an earlier EtreCheck release note.

That's possible, I haven't looked at all the EtreCheck release notes.