Big Nasty801

Q: My macbook is running slow and I have plenty of memory. PLEASE HELP

My macbook is slow when I turn it on it takes about 5 mins to get to the grey screen and when I get on the internet and the rainbow circle pops up. I also use Serato my dj software and it lags and I can not have that happen during a gig. Please Help here are my computer specs thank you

 

Hardware Information:

          MacBook Pro (13-inch, Mid 2010)

          MacBook Pro - model: MacBookPro7,1

          1 2.4 GHz Intel Core 2 Duo CPU: 2 cores

          4 GB RAM

 

Video Information:

          NVIDIA GeForce 320M - VRAM: 256 MB

 

System Software:

          OS X 10.9.3 (13D65) - Uptime: 0 days 0:43:27

 

Disk Information:

          Hitachi HTS545025B9SA02 disk0 : (250.06 GB)

                    EFI (disk0s1) <not mounted>: 209.7 MB

                    250GB (disk0s2) / [Startup]: 249.2 GB (168 GB free)

                    Recovery HD (disk0s3) <not mounted>: 650 MB

 

          HL-DT-ST DVDRW  GS23N 

 

USB Information:

          Apple Inc. Built-in iSight

          Apple Internal Memory Card Reader

          Apple Inc. BRCM2046 Hub

                    Apple Inc. Bluetooth USB Host Controller

          Apple Computer, Inc. IR Receiver

          Apple Inc. Apple Internal Keyboard / Trackpad

 

Gatekeeper:

          Anywhere

 

Kernel Extensions:

          [not loaded] com.devguru.driver.SamsungACMControl (1.4.14 - SDK 10.6) Support

          [not loaded] com.devguru.driver.SamsungACMData (1.4.14 - SDK 10.6) Support

          [not loaded] com.devguru.driver.SamsungComposite (1.4.14 - SDK 10.6) Support

          [not loaded] com.devguru.driver.SamsungMTP (1.4.14 - SDK 10.5) Support

          [not loaded] com.devguru.driver.SamsungSerial (1.4.14 - SDK 10.6) Support

          [not loaded] com.numark.ns7ii.usb (2.2.6 - SDK 10.7) Support

          [not loaded] com.numark.ns7ii.usb_TIGER (2.2.6 - SDK 10.4) Support

 

Launch Daemons:

          [loaded] com.adobe.fpsaud.plist Support

 

User Launch Agents:

          [loaded] com.google.keystone.agent.plist Support

          [running] com.spotify.webhelper.plist Support

 

User Login Items:

          None

 

Internet Plug-ins:

          Silverlight: Version: 5.1.20913.0 - SDK 10.6 Support

          FlashPlayer-10.6: Version: 13.0.0.214 - SDK 10.6 Support

          Flash Player: Version: 13.0.0.214 - SDK 10.6 Support

          QuickTime Plugin: Version: 7.7.3

          Default Browser: Version: 537 - SDK 10.9

 

Audio Plug-ins:

          BluetoothAudioPlugIn: Version: 1.0 - SDK 10.9

          NumarkNS7IIAudio: Version: 1.0 - SDK 10.8 Support

          AirPlay: Version: 2.0 - SDK 10.9

          AppleAVBAudio: Version: 203.2 - SDK 10.9

          iSightAudio: Version: 7.7.3 - SDK 10.9

 

iTunes Plug-ins:

          Quartz Composer Visualizer: Version: 1.4 - SDK 10.9

 

3rd Party Preference Panes:

          Flash Player  Support

 

Time Machine:

          Time Machine not configured!

 

Top Processes by CPU:

              12%          Google Chrome

               7%          WindowServer

               3%          hidd

               2%          mds

               0%          imagent

 

Top Processes by Memory:

          94 MB          Google Chrome

          94 MB          com.apple.IconServicesAgent

          66 MB          WinZip Mac

          61 MB          mds_stores

          41 MB          WindowServer

 

Virtual Memory Information:

          1.97 GB          Free RAM

          1.08 GB          Active RAM

          246 MB          Inactive RAM

          478 MB          Wired RAM

          449 MB          Page-ins

          0 B          Page-outs

MacBook Pro, OS X Mavericks (10.9.3)

Posted on Jun 4, 2014 6:50 PM

Close

Q: My macbook is running slow and I have plenty of memory. PLEASE HELP

  • All replies
  • Helpful answers

  • by Kappy,

    Kappy Kappy Jun 4, 2014 6:53 PM in response to Big Nasty801
    Level 10 (271,691 points)
    Desktops
    Jun 4, 2014 6:53 PM in response to Big Nasty801

    Things You Can Do To Resolve Slow Downs

     

    If your computer seems to be running slower here are some things you can do:

     

    Start with visits to:     OS X Maintenance - MacAttorney;

                                      The X Lab: The X-FAQs;

                                      The Safe Mac » Mac Performance Guide;

                                      The Safe Mac » The myth of the dirty Mac;

                                      Mac maintenance Quick Assist.

     

    Boot into Safe Mode then repair your hard drive and permissions:

     

    Repair the Hard Drive and Permissions Pre-Lion

     

    Boot from your OS X Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Utilities menu. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list.  In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive.  If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer.

     

    Repair the Hard Drive - Lion/Mountain Lion/Mavericks

     

    Boot to the Recovery HD:

     

    Restart the computer and after the chime press and hold down the COMMAND and R keys until the Utilites Menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD disk icon and click on the arrow button below.

     

    When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list.  In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive.  If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported, then click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu. Select Restart from the Apple menu.

     

    Restart your computer normally and see if this has helped any. Next do some maintenance:

     

    For situations Disk Utility cannot handle the best third-party utility is Disk Warrior;  DW only fixes problems with the disk directory, but most disk problems are caused by directory corruption; Disk Warrior 4.x is now Intel Mac compatible.

     

    Note: Alsoft ships DW on a bootable DVD that will startup Macs running Snow Leopard or earlier. It cannot start Macs that came with Lion or later pre-installed, however, DW will work on those models.

     

    Suggestions for OS X Maintenance

     

    OS X performs certain maintenance functions that are scheduled to occur on a daily, weekly, or monthly period. The maintenance scripts run in the early AM only if the computer is turned on 24/7 (no sleep.) If this isn't the case, then an excellent solution is to download and install a shareware utility such as Macaroni, JAW PseudoAnacron, or Anacron that will automate the maintenance activity regardless of whether the computer is turned off or asleep.  Dependence upon third-party utilities to run the periodic maintenance scripts was significantly reduced since Tiger.  These utilities have limited or no functionality with Snow Leopard or later and should not be installed.

     

    OS X automatically defragments files less than 20 MBs in size, so unless you have a disk full of very large files there's little need for defragmenting the hard drive.

     

    Helpful Links Regarding Malware Protection

     

    An excellent link to read is Tom Reed's Mac Malware Guide.

    Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.

    See these Apple articles:

     

              Mac OS X Snow Leopard and malware detection

              OS X Lion- Protect your Mac from malware

              OS X Mountain Lion- Protect your Mac from malware

              About file quarantine in OS X

     

    If you require anti-virus protection I recommend using VirusBarrier Express 1.1.6 or Dr.Web Light both from the App Store. They're both free, and since they're from the App Store, they won't destabilize the system. (Thank you to Thomas Reed for these recommendations.)

     

    Troubleshooting Applications

     

    I recommend downloading a utility such as TinkerTool System, OnyX, Mavericks Cache Cleaner, or Cocktail that you can use for removing old log files and archives, clearing caches, etc. Corrupted cache, log, or temporary files can cause application or OS X crashes as well as kernel panics.

     

    If you have Snow Leopard or Leopard, then for similar repairs install the freeware utility Applejack.  If you cannot start up in OS X, you may be able to start in single-user mode from which you can run Applejack to do a whole set of repair and maintenance routines from the command line.  Note that AppleJack 1.5 is required for Leopard. AppleJack 1.6 is compatible with Snow Leopard. Applejack does not work with Lion and later.

     

    Basic Backup

     

    For some people Time Machine will be more than adequate. Time Machine is part of OS X. There are two components:

     

    1. A Time Machine preferences panel as part of System Preferences;

    2. A Time Machine application located in the Applications folder. It is

        used to manage backups and to restore backups. Time Machine

        requires a backup drive that is at least twice the capacity of the

        drive being backed up.

     

    Alternatively, get an external drive at least equal in size to the internal hard drive and make (and maintain) a bootable clone/backup. You can make a bootable clone using the Restore option of Disk Utility. You can also make and maintain clones with good backup software. My personal recommendations are (order is not significant):

     

      1. Carbon Copy Cloner

      2. Get Backup

      3. Deja Vu

      4. SuperDuper!

      5. Synk Pro

      6. Tri-Backup

     

    Visit The XLab FAQs and read the FAQ on backup and restore.  Also read How to Back Up and Restore Your Files. For help with using Time Machine visit Pondini's Time Machine FAQ for help with all things Time Machine.

     

    Referenced software can be found at MacUpdate.

     

    Additional Hints

     

    Be sure you have an adequate amount of RAM installed for the number of applications you run concurrently. Be sure you leave a minimum of 10% of the hard drive's capacity as free space.

     

    Add more RAM. If your computer has less than 2 GBs of RAM and you are using OS X Leopard or later, then you can do with more RAM. Snow Leopard and Lion work much better with 4 GBs of RAM than their system minimums. The more concurrent applications you tend to use the more RAM you should have.

     

    Always maintain at least 15 GBs or 10% of your hard drive's capacity as free space, whichever is greater. OS X is frequently accessing your hard drive, so providing adequate free space will keep things from slowing down.

     

    Check for applications that may be hogging the CPU:

     

    Pre-Mavericks

     

    Open Activity Monitor in the Utilities folder.  Select All Processes from the Processes dropdown menu.  Click twice on the CPU% column header to display in descending order.  If you find a process using a large amount of CPU time (>=70,) then select the process and click on the Quit icon in the toolbar.  Click on the Force Quit button to kill the process.  See if that helps.  Be sure to note the name of the runaway process so you can track down the cause of the problem.

     

    Mavericks and later

     

    Open Activity Monitor in the Utilities folder.  Select All Processes from the View menu.  Click on the CPU tab in the toolbar. Click twice on the CPU% column header to display in descending order.  If you find a process using a large amount of CPU time (>=70,) then select the process and click on the Quit icon in the toolbar.  Click on the Force Quit button to kill the process.  See if that helps.  Be sure to note the name of the runaway process so you can track down the cause of the problem.

     

    Often this problem occurs because of a corrupted cache or preferences file or an attempt to write to a corrupted log file.

  • by Big Nasty801,

    Big Nasty801 Big Nasty801 Jun 5, 2014 7:55 PM in response to Kappy
    Level 1 (0 points)
    Jun 5, 2014 7:55 PM in response to Kappy

    Im a complete air head can someone please break this down for me?!?! PLEASE

  • by Linc Davis,

    Linc Davis Linc Davis Jun 5, 2014 8:29 PM in response to Big Nasty801
    Level 10 (208,022 points)
    Applications
    Jun 5, 2014 8:29 PM in response to Big Nasty801

    These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

    Launch the Console application in any of the following ways:

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad. Click Utilities, then Console in the icon grid.

    Step 1

    For this step, the title of the Console window should be All Messages. If it isn't, select

    SYSTEM LOG QUERIES All Messages

    from the log list on the left. If you don't see that list, select

    View Show Log List

    from the menu bar at the top of the screen.

    In the top right corner of the Console window, there's a search box labeled Filter. Initially the words "String Matching" are shown in that box. Enter "BOOT_TIME" (without the quotes.)

    Each message in the log begins with the date and time when it was entered. Note the timestamps of the BOOT_TIME log messages, which refer to the times when the system was started. Now clear the search box and scroll back in the log to the last boot time when you had the problem. Select the messages logged after the boot, during the time something abnormal was happening. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

    For example, if the problem is a slow startup taking three minutes, post the messages timestamped within three minutes   after the boot time, not before. Please include the BOOT_TIME message at the beginning of the log extract—not at the end.

    If there are long runs of repeated messages, please post only one example of each. Don’t post many repetitions of the same message.

    When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.

    Please don't indiscriminately dump thousands of lines from the log into this discussion.

    Please don't post screenshots of log messages—post the text.

    ☞ Some private information, such as your name, may appear in the log. Anonymize before posting.

    Step 2

    In the Console window, select

    DIAGNOSTIC AND USAGE INFORMATION System Diagnostic Reports

    (not Diagnostic and Usage Messages) from the log list on the left. If you don't see that list, select

    View Show Log List

    from the menu bar.

    There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of reports. A crash report has a name that begins with the name of the crashed process and ends in ".crash". A panic report has a name that begins with "Kernel" and ends in ".panic". Select the most recent of each. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.

    I know the report is long, maybe several hundred lines. Please post all of it anyway.

    ☞ If you don't see any reports listed, but you know there was a crash or panic, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.

    In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)

    ☞ Please don’t post other kinds of diagnostic report—they're very long and rarely helpful.

  • by Big Nasty801,

    Big Nasty801 Big Nasty801 Jun 6, 2014 10:15 PM in response to Linc Davis
    Level 1 (0 points)
    Jun 6, 2014 10:15 PM in response to Linc Davis

    When I type in Boot_Time there are no messages

  • by Linc Davis,

    Linc Davis Linc Davis Jun 6, 2014 10:29 PM in response to Big Nasty801
    Level 10 (208,022 points)
    Applications
    Jun 6, 2014 10:29 PM in response to Big Nasty801

    Reboot and try again. Make sure you're looking at All Messages.

  • by Big Nasty801,

    Big Nasty801 Big Nasty801 Jun 6, 2014 10:50 PM in response to Linc Davis
    Level 1 (0 points)
    Jun 6, 2014 10:50 PM in response to Linc Davis

    6/6/14 11:18:12.000 PM bootlog[0]: BOOT_TIME 1402118292 0

     

    6/6/14 11:19:33.000 PM syslogd[19]: Configuration Notice:

    ASL Module "com.apple.appstore" claims selected messages.

    Those messages may not appear in standard system log files or in the ASL database.

     

     

    6/6/14 11:19:33.000 PM syslogd[19]: Configuration Notice:

    ASL Module "com.apple.authd" sharing output destination "/var/log/system.log" with ASL Module "com.apple.asl".

    Output parameters from ASL Module "com.apple.asl" override any specified in ASL Module "com.apple.authd".

     

    6/6/14 11:19:33.000 PM syslogd[19]: Configuration Notice:

    ASL Module "com.apple.authd" claims selected messages.

    Those messages may not appear in standard system log files or in the ASL database.

     

    6/6/14 11:19:33.000 PM syslogd[19]: Configuration Notice:

    ASL Module "com.apple.MessageTracer" claims selected messages.

    Those messages may not appear in standard system log files or in the ASL database.

     

    6/6/14 11:19:33.000 PM kernel[0]: Longterm timer threshold: 1000 ms

    6/6/14 11:19:33.000 PM kernel[0]: Darwin Kernel Version 13.2.0: Thu Apr 17 23:03:13 PDT 2014; root:xnu-2422.100.13~1/RELEASE_X86_64

    6/6/14 11:19:33.000 PM kernel[0]: vm_page_bootstrap: 820892 free pages and 153956 wired pages

    6/6/14 11:19:33.000 PM kernel[0]: kext submap [0xffffff7f807a9000 - 0xffffff8000000000], kernel text [0xffffff8000200000 - 0xffffff80007a9000]

    6/6/14 11:19:33.000 PM kernel[0]: zone leak detection enabled

    6/6/14 11:19:33.000 PM kernel[0]: "vm_compressor_mode" is 4

    6/6/14 11:19:33.000 PM kernel[0]: standard timeslicing quantum is 10000 us

    6/6/14 11:19:33.000 PM kernel[0]: standard background quantum is 2500 us

    6/6/14 11:19:33.000 PM kernel[0]: mig_table_max_displ = 74

    6/6/14 11:19:33.000 PM kernel[0]: AppleACPICPU: ProcessorId=0 LocalApicId=0 Enabled

    6/6/14 11:19:33.000 PM kernel[0]: AppleACPICPU: ProcessorId=1 LocalApicId=1 Enabled

    6/6/14 11:19:33.000 PM kernel[0]: calling mpo_policy_init for TMSafetyNet

    6/6/14 11:19:33.000 PM kernel[0]: Security policy loaded: Safety net for Time Machine (TMSafetyNet)

    6/6/14 11:19:33.000 PM kernel[0]: calling mpo_policy_init for Sandbox

    6/6/14 11:19:33.000 PM kernel[0]: Security policy loaded: Seatbelt sandbox policy (Sandbox)

    6/6/14 11:19:33.000 PM kernel[0]: calling mpo_policy_init for Quarantine

    6/6/14 11:19:33.000 PM kernel[0]: Security policy loaded: Quarantine policy (Quarantine)

    6/6/14 11:19:33.000 PM kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993

    6/6/14 11:19:33.000 PM kernel[0]: The Regents of the University of California. All rights reserved.

    6/6/14 11:19:33.000 PM kernel[0]: MAC Framework successfully initialized

    6/6/14 11:19:33.000 PM kernel[0]: using 16384 buffer headers and 10240 cluster IO buffer headers

    6/6/14 11:19:33.000 PM kernel[0]: AppleKeyStore starting (BUILT: Apr 17 2014 23:36:27)

    6/6/14 11:19:33.000 PM kernel[0]: IOAPIC: Version 0x11 Vectors 64:87

    6/6/14 11:19:33.000 PM kernel[0]: ACPI: sleep states S3 S4 S5

    6/6/14 11:19:33.000 PM kernel[0]: pci (build 23:24:05 Apr 17 2014), flags 0x63008, pfm64 (36 cpu) 0xf80000000, 0x80000000

    6/6/14 11:19:33.000 PM kernel[0]: AppleIntelCPUPowerManagement: (built 23:35:25 Apr 17 2014) initialization complete

    6/6/14 11:19:33.000 PM kernel[0]: [ PCI configuration begin ]

    6/6/14 11:19:33.000 PM kernel[0]: console relocated to 0xf80010000

    6/6/14 11:19:33.000 PM kernel[0]: [ PCI configuration end, bridges 5, devices 24 ]

    6/6/14 11:19:33.000 PM kernel[0]: FireWire (OHCI) Lucent ID 5901 built-in now active, GUID e80688fffef18626; max speed s800.

    6/6/14 11:19:33.000 PM kernel[0]: USBMSC Identifier (non-unique): 000000009833 0x5ac 0x8403 0x9833, 2

    6/6/14 11:19:33.000 PM kernel[0]: mcache: 2 CPU(s), 64 bytes CPU cache line size

    6/6/14 11:19:33.000 PM kernel[0]: mbinit: done [64 MB total pool size, (42/21) split]

    6/6/14 11:19:33.000 PM kernel[0]: Pthread support ABORTS when sync kernel primitives misused

    6/6/14 11:19:33.000 PM kernel[0]: rooting via boot-uuid from /chosen: 13FBE4E0-095F-34C4-9BCD-94A13D9B087B

    6/6/14 11:19:33.000 PM kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>

    6/6/14 11:19:33.000 PM kernel[0]: com.apple.AppleFSCompressionTypeZlib kmod start

    6/6/14 11:19:33.000 PM kernel[0]: com.apple.AppleFSCompressionTypeDataless kmod start

    6/6/14 11:19:33.000 PM kernel[0]: com.apple.AppleFSCompressionTypeZlib load succeeded

    6/6/14 11:19:33.000 PM kernel[0]: com.apple.AppleFSCompressionTypeDataless load succeeded

    6/6/14 11:19:33.000 PM kernel[0]: AppleIntelCPUPowerManagementClient: ready

    6/6/14 11:19:33.000 PM kernel[0]: BTCOEXIST off

    6/6/14 11:19:33.000 PM kernel[0]: BRCM tunables:

    6/6/14 11:19:33.000 PM kernel[0]: pullmode[1] txringsize[  256] txsendqsize[1024] reapmin[   32] reapcount[  128]

    6/6/14 11:19:33.000 PM kernel[0]: Got boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/SATA@A/AppleMCP89AHCI/PR T0@0/IOAHCIDevice@0/AppleAHCIDiskDriver/IOAHCIBlockStorageDevice/IOBlockStorageD river/Hitachi HTS545025B9SA02 Media/IOGUIDPartitionScheme/Untitled@2

    6/6/14 11:19:33.000 PM kernel[0]: BSD root: disk0s2, major 1, minor 2

    6/6/14 11:19:33.000 PM kernel[0]: hfs: mounted 250GB on device root_device

    6/6/14 11:19:33.000 PM kernel[0]: Waiting for DSMOS...

    6/6/14 11:18:20.800 PM com.apple.launchd[1]: *** launchd[1] has started up. ***

    6/6/14 11:18:20.800 PM com.apple.launchd[1]: *** Shutdown logging is enabled. ***

    6/6/14 11:19:21.378 PM hidd[43]: void __IOHIDPlugInLoadBundles(): Loaded 0 HID plugins

    6/6/14 11:19:25.724 PM hidd[43]: Posting 'com.apple.iokit.hid.displayStatus' notifyState=1

    6/6/14 11:19:37.000 PM kernel[0]: VM Swap Subsystem is ON

    6/6/14 11:19:38.459 PM com.apple.SecurityServer[25]: Session 100000 created

    6/6/14 11:19:39.000 PM kernel[0]: IO80211Controller::dataLinkLayerAttachComplete():  adding AppleEFINVRAM notification

    6/6/14 11:19:39.000 PM kernel[0]: IO80211Interface::efiNVRAMPublished(): 

    6/6/14 11:19:52.166 PM stackshot[21]: Timed out waiting for IOKit to finish matching.

    6/6/14 11:19:55.000 PM kernel[0]: NVDAStartup: Official

    6/6/14 11:19:55.000 PM kernel[0]: NVDANV50HAL loaded and registered

    6/6/14 11:19:55.000 PM kernel[0]: SMC::smcReadKeyAction ERROR: smcReadData8 failed for key LsNM (kSMCKeyNotFound)

    6/6/14 11:19:55.000 PM kernel[0]: SMC::smcReadKeyAction ERROR LsNM kSMCKeyNotFound(0x84) fKeyHashTable=0x0

    6/6/14 11:19:55.000 PM kernel[0]: SMC::smcGetLightshowVers ERROR: smcReadKey LsNM failed (kSMCKeyNotFound)

    6/6/14 11:19:55.000 PM kernel[0]: SMC::smcPublishLightshowVersion ERROR: smcGetLightshowVers failed (kSMCKeyNotFound)

    6/6/14 11:19:55.000 PM kernel[0]: SMC::smcInitHelper ERROR: smcPublishLightshowVersion failed (kSMCKeyNotFound)

    6/6/14 11:19:55.000 PM kernel[0]: Previous Shutdown Cause: 3

    6/6/14 11:19:55.000 PM kernel[0]: SMC::smcInitHelper ERROR: MMIO regMap == NULL - fall back to old SMC mode

  • by Linc Davis,

    Linc Davis Linc Davis Jun 7, 2014 6:57 AM in response to Big Nasty801
    Level 10 (208,022 points)
    Applications
    Jun 7, 2014 6:57 AM in response to Big Nasty801

    1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

    2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

    There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

    3. Below are instructions to run a UNIX shell script, a type of program. All it does is to collect information about the state of the computer. That information goes nowhere unless you choose to share it. However, you should be cautious about running any kind of program (not just a shell script) at the behest of a stranger. If you have doubts, search this site for other discussions in which this procedure has been followed without any report of ill effects. If you can't satisfy yourself that the instructions are safe, don't follow them. Ask for other options.

    Here's a summary of what you need to do, if you choose to proceed:

    ☞ Copy a line of text in this window to the Clipboard.

    ☞ Paste into the window of another application.

    ☞ Wait for the test to run. It usually takes a few minutes.

    ☞ Paste the results, which will have been copied automatically, back into a reply on this page.

    The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

    4. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

    5. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

    6. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

    Triple-click anywhere in the line of text below on this page to select it:

    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts 51 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports 'com.autodesk.AutoCad com.evenflow.dropbox com.google.GoogleDrive' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 ` route -n get default|awk '/e:/{print $2}' ` 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n\t(%s)\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' /^ *$|CSConfigDot/d;s/^ */   /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/;/Shared/!s/\/Users\/[^/]+/~/g ' ' s/^ +//;5p;6p;8p;12p;' ' {sub(/^ +/,"")};NR==6;NR==13&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { if(n<200) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/root/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1000) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/d;/(etc|Preferences)\//s/^\.\/[^/]+//p;' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.[bw]/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| ","||kMDItem'${p[35]}'=");sub("^.."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[9]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/ { next;} /%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]" "$1;b=b$1;} END { if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n   "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n   [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|POSIX sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n   ...and %s more line(s)\n",l-L);} ' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ +B/{ s/.+= |(-[0-9]+)?\.s.+//g;p;} ' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / /{$0="'"${p[28]}"'"};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil PlistBuddy whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test );c2=(com.apple.loginwindow\ LoginHook '-c Print /L*/P*/loginw*' '-c Print L*/P*/*loginit*' '-c Print L*/Saf*/*/E*.plist' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' '-c Print\ :'${p[35]}' 2>&1' '-c Print\ :Label 2>&1' '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'Beac|caug|dead[^bl]|FAIL|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cgh] ! -name *ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '-L {/{S*/,},}L*/Lau* -type f' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Ca*/*/Ex,Compon,Ex,In,iTu,Keyb,Mail/B,P*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,[lps]*.conf,pam.d,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}* .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' -i4TCP:0-1023 com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' );N1=${#c2[@]};for j in {0..8};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents launchd Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0(){ [[ "$v" ]]&&echo "$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "$s"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;A2 0 $((N1+1)) 2;C0;A1 0 $N1 1;C0;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;A2 4 20 21;B7 6;B2 9;A4 14 7 52 9;B2 10;B6 9 10 4;C3 25;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;D13 24 24 32 31;D13 25 37 32 33;A1 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D23 14 1 48 42;D12 34 43 53 44;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D23 14 2 48 43;D13 4 5 32 1;D22 4 4 50 0;D13 14 3 49 5;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
      
    Copy the selected text to the Clipboard by pressing the key combination command-C.

    7. Launch the built-in Terminal application in any of the following ways:

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

    Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

    8. If you see an error message in the Terminal window such as "syntax error," enter

    exec bash

    and press return. Then paste the script again.

    9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.

    If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

    10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line

    [Process completed]

    to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report the results. No harm will be done.

    11. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

    At the top of the results, there will be a line that begins with "Model Identifier." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

    If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

    12. When you post the results, you might see the message, "You have included content in your post that is not permitted." It means that the forum software has misidentified something in the post as a violation of the rules. If that happens, please post the test results on Pastebin, then post a link here to the page you created.

    Note: This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.

    ________________________________

     
    Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.
  • by Big Nasty801,

    Big Nasty801 Big Nasty801 Jun 7, 2014 4:59 PM in response to Linc Davis
    Level 1 (0 points)
    Jun 7, 2014 4:59 PM in response to Linc Davis

    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts 51 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports 'com.autodesk.AutoCad com.evenflow.dropbox com.google.GoogleDrive' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 ` route -n get default|awk '/e:/{print $2}' ` 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n\t(%s)\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' /^ *$|CSConfigDot/d;s/^ */   /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/;/Shared/!s/\/Users\/[ ^/]+/~/g ' ' s/^ +//;5p;6p;8p;12p;' ' {sub(/^ +/,"")};NR==6;NR==13&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { if(n<200) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/root/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1000) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/d;/(etc|Preferences)\//s/^\.\/[^/]+//p;' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.[bw]/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| ","||kMDItem'${p[35]}'=");sub("^.."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[9]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/ { next;} /%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]" "$1;b=b$1;} END { if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n   "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n   [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|POSIX sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n   ...and %s more line(s)\n",l-L);} ' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ +B/{ s/.+= |(-[0-9]+)?\.s.+//g;p;} ' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / /{$0="'"${p[28]}"'"};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil PlistBuddy whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test );c2=(com.apple.loginwindow\ LoginHook '-c Print /L*/P*/loginw*' '-c Print L*/P*/*loginit*' '-c Print L*/Saf*/*/E*.plist' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' '-c Print\ :'${p[35]}' 2>&1' '-c Print\ :Label 2>&1' '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'Beac|caug|dead[^bl]|FAIL|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cgh] ! -name *ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '-L {/{S*/,},}L*/Lau* -type f' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Ca*/*/Ex,Compon,Ex,In,iTu,Keyb,Mail/B,P*P,Qu*T,Scripti,Sec,Servi,Sp o,Widg}* -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,[lps]*.conf,pam.d,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}* .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' -i4TCP:0-1023 com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' );N1=${#c2[@]};for j in {0..8};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents launchd Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0(){ [[ "$v" ]]&&echo "$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "$s"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;A2 0 $((N1+1)) 2;C0;A1 0 $N1 1;C0;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;A2 4 20 21;B7 6;B2 9;A4 14 7 52 9;B2 10;B6 9 10 4;C3 25;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;D13 24 24 32 31;D13 25 37 32 33;A1 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D23 14 1 48 42;D12 34 43 53 44;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D23 14 2 48 43;D13 4 5 32 1;D22 4 4 50 0;D13 14 3 49 5;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-

  • by Big Nasty801,

    Big Nasty801 Big Nasty801 Jun 7, 2014 5:01 PM in response to Big Nasty801
    Level 1 (0 points)
    Jun 7, 2014 5:01 PM in response to Big Nasty801

    Does that look right?

  • by Linc Davis,

    Linc Davis Linc Davis Jun 7, 2014 5:07 PM in response to Big Nasty801
    Level 10 (208,022 points)
    Applications
    Jun 7, 2014 5:07 PM in response to Big Nasty801

    You didn't wait for the "Process completed" message to appear. Please try again.

  • by Big Nasty801,

    Big Nasty801 Big Nasty801 Jun 7, 2014 5:50 PM in response to Linc Davis
    Level 1 (0 points)
    Jun 7, 2014 5:50 PM in response to Linc Davis

    Start time: 18:09:44 06/07/14

     

     

    Model Identifier: MacBookPro7,1

    System Version: OS X 10.9.3 (13D65)

    Kernel Version: Darwin 13.2.0

    Boot Mode: Normal

    Time since boot: 5:37

     

     

    Diagnostic reports

     

     

       2014-05-19 Kernel panic

       2014-05-20 Spotify hang

       2014-05-20 com.google.Chrome crash

       2014-05-20 coreaudiod crash

       2014-05-20 coreaudiod crash

       2014-05-20 plugin-container crash

       2014-05-20 plugin-container crash

       2014-05-20 plugin-container crash

       2014-05-22 plugin-container crash

       2014-05-25 Serato DJ hang

       2014-05-25 coreaudiod crash

       2014-05-28 Dock crash

       2014-05-28 Finder crash

       2014-05-28 WinZip Mac crash

       2014-05-28 coreservicesd crash

       2014-05-28 loginwindow crash

       2014-05-31 Serato DJ hang

       2014-05-31 coreaudiod crash

       2014-05-31 coreaudiod crash

       2014-06-03 Google Chrome hang

       2014-06-03 Serato DJ hang

       2014-06-03 Serato DJ hang

       2014-06-03 Spotify hang

       2014-06-03 Spotify hang

       2014-06-05 Serato DJ crash

     

     

    Log

     

     

       Jun  6 23:23:48 process SecurityAgent[140] caught causing excessive wakeups. Observed wakeups rate (per sec): 326; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45337

       Jun  6 23:35:56 process WindowServer[90] caught causing excessive wakeups. Observed wakeups rate (per sec): 888; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 135791

       Jun  7 00:59:55 USB: reset feedback error counter (full frame)

       Jun  7 01:02:06 process MIDIServer[561] caught causing excessive wakeups. EXC_RESOURCE supressed due to audio playback

       Jun  7 01:11:31 USB: reset feedback error counter (full frame)

       Jun  7 01:11:31 USB: reset feedback error counter (full frame)

       Jun  7 01:22:20 USB: reset feedback error counter (full frame)

       Jun  7 01:46:26 USB: reset feedback error counter (full frame)

       Jun  7 01:55:21 USB: reset feedback error counter (full frame)

       Jun  7 02:00:11 USB: reset feedback error counter (full frame)

       Jun  7 02:03:42 USB: reset feedback error counter (full frame)

       Jun  7 02:04:15 USB: reset feedback error counter (full frame)

       Jun  7 02:05:17 USB: reset feedback error counter (full frame)

       Jun  7 02:16:04 PM notification timeout (pid 555, Serato DJ)

       Jun  7 12:39:15 jnl: b(1, 2): replay_journal: from: 1519104 to: 7114752 (joffset 0x747000)

       Jun  7 12:39:15 jnl: b(1, 2): journal replay done.

       Jun  7 12:45:01 process SecurityAgent[143] caught causing excessive wakeups. Observed wakeups rate (per sec): 196; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45110

       Jun  7 17:10:57 wl0: Roamed or switched channel, reason #2, bssid 00

     

     

    Daemons

     

     

       com.adobe.fpsaud

     

     

    Agents

     

     

       com.spotify.webhelper

       com.google.keystone.user.agent

     

     

    launchd

     

     

       /System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist

                 (com.apple.AirPortBaseStationAgent)

       /Library/LaunchDaemons/com.adobe.fpsaud.plist

                 (com.adobe.fpsaud)

       Library/LaunchAgents/com.google.keystone.agent.plist

                 (com.google.keystone.user.agent)

       Library/LaunchAgents/com.spotify.webhelper.plist

                 (com.spotify.webhelper)

     

     

    Bundles

     

     

       /System/Library/Extensions/NumarkNS7IIAudio.kext

                 (com.numark.ns7ii.usb)

       /System/Library/Extensions/ssuddrv.kext

                 (com.devguru.driver.SamsungComposite)

       /Library/Audio/MIDI Drivers/Numark NS7II MIDI Driver.plugin

                 (com.numark.ns7ii.midi)

       /Library/Audio/Plug-Ins/HAL/NumarkNS7IIAudio.driver

                 (com.numark.ns7ii.coreaudio)

       /Library/Audio/Plug-Ins/HAL/NumarkNS7IIAudioHAL.plugin

                 (com.numark.ns7ii.hal)

       /Library/Extensions/NumarkNS7IIAudio.kext

                 (com.numark.ns7ii.usb)

       /Library/Internet Plug-Ins/Flash Player.plugin

                 (N/A)

       /Library/Internet Plug-Ins/Silverlight.plugin

                 (com.microsoft.SilverlightPlugin)

       /Library/PreferencePanes/Flash Player.prefPane

                 (com.adobe.flashplayerpreferences)

       Library/Services/WinzipAdd.workflow

                 (N/A)

       Library/Services/WinzipEmail.workflow

                 (N/A)

       Library/Services/WinzipUnzip.workflow

                 (N/A)

     

     

    DNS: 75.75.75.75 (static)

     

     

    Restricted files: 67

     

     

    Elapsed time (s): 2319

  • by Linc Davis,

    Linc Davis Linc Davis Jun 7, 2014 6:08 PM in response to Big Nasty801
    Level 10 (208,022 points)
    Applications
    Jun 7, 2014 6:08 PM in response to Big Nasty801

    First, please follow these instructions:

     

    Intel-based Macs: Resetting the System Management Controller (SMC)

     

    If there's no change, see below.

     

    Start up in Recovery mode. In the OS X Utilities screen, select Get Help Online. A clean copy of Safari will launch. No plugins, such as Flash, will be available. While in Recovery, you'll have no access to your saved bookmarks or passwords, so make a note of those before you begin, if they're needed for the test.

     

    Test. After testing, restart as usual and post the results.