Removing iWeb from Rubbish Bin

[Randy B. Singer]

...she can't do much to get rid of the iWeb unless she can identify and kill whatever process is running and preventing the emptying of the Trash. And she doesn't want to reboot until she finishes her PS project ...

TrashIt! will not require her to kill any processes or reboot.

I can't think of a more simple, direct solution. I don't know why everyone wants to make this so hard.

 

[MacInWin]

TrashIt! will not require her to kill any processes or reboot.

I can't think of a more simple, direct solution. I don't know why everyone wants to make this so hard.

So TrashIt! will be able to delete the running process file, while leaving the running process running? Or does it kill the process as part of the deletion process?

 

[kathmat]

Did you ever try TrashIt!, as I suggested all the way back in post #13?

I did... truthfully just a moment ago as I might have missed that reply, and a tad nervous as it was unverified, but nothing, not even using really stuck. Still there!

 

[kathmat]

TrashIt! will not require her to kill any processes or reboot.

I can't think of a more simple, direct solution. I don't know why everyone wants to make this so hard.

I am going to do that this morning. My project is complete so it's off to the races. Will of course report on my progress. Thank you.

 

[kathmat]

Just for what it's worth, I see you from the attachment kathmat posted, what the Finder is calling "iWeb.app" is now nothing but an empty container "containing Zero bytes", and it's also apparently in the Trash of the icloud account. So it's not even actually on their Mac or taking up space there, nor doing anything other than being annoying to exist.

I won't attempt to suggest how one would empty it from one's icloud account "Trash" as I haven't really got a clue nor do I use icloud for anyting or care for how it works or doesn't. But I would suggest that the "iWeb.app" filename involved definitely exists with the name the Finder has provided for it.

But maybe one of these hits would work to delete that empty file from the icloud account trash. Once trashed I would think it would disappear from any syncing etc and from showing on ones Mac:

Google Search

- Patrick
=======

It was not on icloud (in the trash) so the mystery deepens.

 

[pm-r]

So, she's basically stuck where she is until she gets the project finished and is willing to reboot the machine in Safe Mode so that the culprit that is running won't get loaded.

For @kathmat, you are going to have to get over the OCD about the Trash until you can do a Safe Boot. There is nothing to do at this point until you can do that.

As for the first statement above, there seems to be a lots of options and choices for saving Photoshop history states, but I don't know if they work after a restart or shutdown/reboot, but that could speed up the repair and fix-it process problem.

Google Search

And I would agree with your second statement.


- Patrick
=======

 

[pm-r]

It was not on icloud (in the trash) so the mystery deepens.

Not to get too picky, but as I understand how things work with Apple, the iCloud Drive location as the get info screenshot says is part of the apple icloud:
What is iCloud Drive and how is it different from iCloud?

https://appletoolbox.com/icloud-and-icloud-drive-ten-questions-qa/

Just being a bit curious here, but I wonder if that iWeb icon would disappear from your Trash if you disconnected your Mac from your Internet connection??? Hmmm...??? ie: no icloud stuff would then be available or accessible would it???

EDIT:
This is interesting and I wondered if it would be helpful:
How to Recover Deleted Files, Contacts, Calendars, and Photos From iCloud

Apple now allows you to restore iCloud Drive files, contacts, and calendars. However, you’ll have to visit iCloud’s website to do it. There’s no trash folder in iCloud Drive as there is in other cloud storage services, which means this is the only way to regain access to a file once you’ve deleted it.

How to Recover Deleted Files, Contacts, Calendars, and Photos From iCloud

Apple's iCloud now allows you to undelete files you've deleted from iCloud Drive, restore recently deleted photos, and revert your contacts and calendars to a previous state.

www.howtogeek.com

QUEUE: Mission Impossible theme song here...

- Patrick
=======

 

[kathmat]

Not to get too picky, but as I understand how things work with Apple, the iCloud Drive location as the get info screenshot says is part of the apple icloud:
What is iCloud Drive and how is it different from iCloud?

https://appletoolbox.com/icloud-and-icloud-drive-ten-questions-qa/

Just being a bit curious here, but I wonder if that iWeb icon would disappear from your Trash if you disconnected your Mac from your Internet connection??? Hmmm...??? ie: no icloud stuff would then be available or accessible would it???

EDIT:
This is interesting and I wondered if it would be helpful:
How to Recover Deleted Files, Contacts, Calendars, and Photos From iCloud

How to Recover Deleted Files, Contacts, Calendars, and Photos From iCloud

Apple's iCloud now allows you to undelete files you've deleted from iCloud Drive, restore recently deleted photos, and revert your contacts and calendars to a previous state.

www.howtogeek.com

QUEUE: Mission Impossible theme song here...

- Patrick
=======

Re: PS - The only method to "saving" history states is to turn on the History log in the preferences. However, this is only going to document the steps performed but will not maintain the data in the History panel, and which is where I need to see it.

 

[kathmat]

Not to get too picky, but as I understand how things work with Apple, the iCloud Drive location as the get info screenshot says is part of the apple icloud:
What is iCloud Drive and how is it different from iCloud?

https://appletoolbox.com/icloud-and-icloud-drive-ten-questions-qa/

Just being a bit curious here, but I wonder if that iWeb icon would disappear from your Trash if you disconnected your Mac from your Internet connection??? Hmmm...??? ie: no icloud stuff would then be available or accessible would it???

EDIT:
This is interesting and I wondered if it would be helpful:
How to Recover Deleted Files, Contacts, Calendars, and Photos From iCloud

How to Recover Deleted Files, Contacts, Calendars, and Photos From iCloud

Apple's iCloud now allows you to undelete files you've deleted from iCloud Drive, restore recently deleted photos, and revert your contacts and calendars to a previous state.

www.howtogeek.com

QUEUE: Mission Impossible theme song here...

- Patrick
=======

I am trying everything suggested and again - thank you all for your interest in my non life threatening problem. I tried the no internet scenario, but nope - it was still there. And... restarted in safe mode and tried to empty the bin that way... no dice!

 

[kathmat]

As for the first statement above, there seems to be a lots of options and choices for saving Photoshop history states, but I don't know if they work after a restart or shutdown/reboot, but that could speed up the repair and fix-it process problem.

Google Search

And I would agree with your second statement.


- Patrick
=======

Finished my PS project and did the safe boot. A picture is worth a thousand words. I am going to wait until after Xmas as they are inundated right now (when are they not...) and if just out of sheer cussedness to find out why the thing is stuck there, I will take it to the Genius Bar at the Apple Store and see if they can figure it out and explain to me why. Bless you all for your interest.

 

[MacInWin]

To do the safe boot you have to press and HOLD the key combination, not just click the keys. If you had done an actual Safe Boot, iWeb would not have loaded. So, the error message says that you did not actually accomplish a Safe Boot. Try again, follow the directions here: How to use safe mode on your Mac

 

[Randy B. Singer]

So TrashIt! will be able to delete the running process file, while leaving the running process running? Or does it kill the process as part of the deletion process?

The latter...and you are over-thinking it. There should be no downside to trying TrashIt! If the offending file can be dragged out of the Trashcan, it should be dragged onto TrashIt!'s icon. If it can't be dragged out of the Trashcan, TrashIt! should be used to delete whatever is in the Trashcan.

If TrashIt! doesn't work, then the offending file isn't really there. In that case what you are seeing reported is either an echo from a file on a remote server (e.g. the Internet) or a placeholder for something that has already been dismounted.

 

[MacInWin]

The latter...and you are over-thinking it.

I don't think I'm overthinking it, Randy. I'm just curious how one app can delete the resident and running components of another app. That action would seem to be a breach of the sandbox approach and could represent a security "hole" for a malicious operator. Smuggle into an otherwise innocent application the ability to stop and delete a security component, thereby making the Mac less secure. If an app can kill a component of iWeb, it could be configured to kill a component of, say, any stay-resident malware app.

I thought Apple didn't let apps do that to each other. I guess macOS isn't as secure as I thought.

 

[Randy B. Singer]

I thought Apple didn't let apps do that to each other. I guess macOS isn't as secure as I thought.

Or, once again, you are over-thinking it, on top of needlessly looking for reasons to be unhappy.

Volitionally running an app that's been signed, and for which you have to authenticate, is nothing at all like trying to run malicious code surreptitiously inside of an app.

Please don't spread FUD. (fear, uncertainty, and doubt)

 

[MacInWin]

Not sure why you went so hostile, Randy. I am just genuinely curious about how TrashIt! (which the OP says did NOT work), would be able to stop a running process and delete a file associated with that process. If it can do that, that is both useful and worrying. Useful in that it would allow better emptying of the Trash where the trashed files are tied to a running process, and worrying in that if it can do that, what else can do the same thing and stop a running process from a different application? But so as not to offend your delicate sensibilities, I'm done here. I hope the OP gets the Safe Mode sorted and can get rid of the annoyance of iWeb in the Trash.

 

[pm-r]

But so as not to offend your delicate sensibilities, I'm done here. I hope the OP gets the Safe Mode sorted and can get rid of the annoyance of iWeb in the Trash.

Just before you leave Jake, I'm just curious as to why the safe boot mode method suggestion might work as opposed to just shutting down and/or rebooting, as wouldn't they also stop the file from "being in use"???

But just to make it clear, I am a great advocate and suggester of using safe boot mode as you probably are aware.

FWIW: I've usually had good success removing stubborn files from the trash or those the finder insist "are in use" using the Finder "Secure Empty Trash" method.

But I already mentioned that previously but I guess it didn't work as we are now into the mid 50s posts!!! ...


- Patrick
=======

 

[MacInWin]

Just before you leave Jake, I'm just curious as to why the safe boot mode method suggestion might work as opposed to just shutting down and/or rebooting, as wouldn't they also stop the file from "being in use"???

Patrick, as I understand it Safe Mode only boots the essential components of the OS itself, and nothing of any user or any other startup applications. So at the end of the boot, all that is running is the OS, no added kexts, plist items, etc. A reboot would load the OS, then the startup items for all users, then the startup items for the logged in user. Given she moved the app to the trash, it MIGHT be possible to reboot and empty the trash, but if there is a plist or some loaded component somewhere in the startup routine, she will get the same message about being in use, even if the full app is not there. I had the issue with a different package (I don't really remember what it was now.) and a Safe Mode boot let me get rid of it.

 

[chscag]

I have a feeling that the original kext for iWeb or one of its components is still loading. Safe Mode would be a good first start to see if what's in the Trash can be removed. Also, I'm not all that sure if Safe Mode would kill the process that iWeb is running (if any) since that process is an Apple process.

If that doesn't work for some reason, she may be able to boot to Recovery, Utilities, Terminal, and turn SIP off. Then reboot and try again to empty the Trash. Sometimes that will work.

At this point in time it seems like she has tried everything.

 

[MacInWin]

I have a feeling that the original kext for iWeb or one of its components is still loading. Safe Mode would be a good first start to see if what's in the Trash can be removed. Also, I'm not all that sure if Safe Mode would kill the process that iWeb is running (if any) since that process is an Apple process.

If that doesn't work for some reason, she may be able to boot to Recovery, Utilities, Terminal, and turn SIP off. Then reboot and try again to empty the Trash. Sometimes that will work.

At this point in time it seems like she has tried everything.

Charlie, that's been my position from the beginning. As long as that kext or component is loading, she won't be able to empty the trash. TrashIt! didn't work, she said, which is, to me, not surprising as it probably couldn't kill the running process. So the alternative is to do a Safe Mode boot, and if that fails, you're suggestion of booting to Recovery might work, too. I wonder if she ran Etrecheck and posted the results if we could find the blocker?

 

[chscag]

I wonder if she ran Etrecheck and posted the results if we could find the blocker?

That's a good idea. I have found many little left overs by using Etrecheck.