8 Replies Latest reply: Apr 24, 2013 7:29 PM by Kevin Lew
Kevin Lew Level 1 (0 points)

Hello out there.  Kevin here.


Can someone help me out with a problem? 


I have an early MacBook Pro, OS 10.8.3 and this has been happening as of laterly.  Most of the time, I have the computer on almost all day. 


Now, when it is left on for a few hours and I come back to it, applications e.g. Safari, iTunes, Calendar fail to come up.  Anything typed in the browser does not load.  So I hit the little apple on the top left and do some force quits.  Then shut down.  The MacBook fails to shut down.  At best, I get a white screen and it goes no further so I have to manually shut it down and turn it back on.  Then everything works as it should, but now I have to shut down the computer every time I stop using it.


Any help would be sincerely appreciated.

MacBook Pro, Mac OS X (10.7.3)
  • Linc Davis Level 10 (192,275 points)

    If you have more than one user account, these instructions must be carried out as an administrator.

    Launch the Console application in any of the following ways:

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad. Click Utilities, then Console in the icon grid.

    Step 1

    Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left. If you don't see that menu, select

    View Show Log List

    from the menu bar.


    Enter "BOOT_TIME" (without the quotes) in the search box. Note the timestamps of those log messages, which refer to the times when the system was booted. Now clear the search box and scroll back in the log to the last boot time after  you had the problem. Select the messages logged before the boot, while the system was unresponsive or was failing to shut down. Copy them to the Clipboard (command-C). Paste into a reply to this message (command-V). Please include the BOOT_TIME message at the end of the log extract.

    If there are runs of repeated messages, post only one example of each. Don’t post many repetitions of the same message.

    When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.

    Please do not indiscriminately dump thousands of lines from the log into this discussion.

    Important: Some private information, such as your name, may appear in the log. Anonymize before posting.

    Step 2

    Still in Console, look under System Diagnostic Reports for crash or panic logs, and post the entire contents of the most recent one, if any. In the interest of privacy, I suggest you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if present (it may not be.) Please don’t post shutdownStall, spin, or hang logs — they're very long and not helpful.

  • Kevin Lew Level 1 (0 points)

    Thanks Linc, but what and where is the Clipboard?  That's as far as I got.  I'm kind of a noob here

  • Grant Bennet-Alder Level 9 (56,501 points)

    The clipboard is the place where things go and come from when you Copy, Cut, and Paste. It is not generally accessible except with the Copy, Cut and Paste commands and their shortcuts.


    Since the clipboard is maintained when you switch between Applications, you can copy that stuff in Console, switch to your Browser, and paste in into a Browser window to share with Readers here. Once pasted, you can fix up or delete anything you do not wish to share before pressing the ( Update ) button to post the results.

  • Kevin Lew Level 1 (0 points)

    Hi Linc.  Here is the first step


    4/22/13 7:32:19.969 PM UserEventAgent[11]: Captive: [async_http_read_stream:386] kCFStreamEventErrorOccurred NSPOSIXErrorDomain/60: The operation couldn’t be completed. Operation timed out

    4/22/13 7:32:19.969 PM UserEventAgent[11]: Captive: [CaptiveHandleRedirectFromPostAuthenticationProbe:1719] en1: Unknown result value: 1

    4/22/13 7:32:25.023 PM UserEventAgent[11]: Captive: [async_http_read_stream:386] kCFStreamEventErrorOccurred NSPOSIXErrorDomain/60: The operation couldn’t be completed. Operation timed out

    4/22/13 7:32:25.024 PM UserEventAgent[11]: Captive: [CaptiveHandleRedirectFromPostAuthenticationProbe:1719] en1: Unknown result value: 1

    4/22/13 7:32:30.174 PM UserEventAgent[11]: Captive: [async_http_read_stream:386] kCFStreamEventErrorOccurred NSPOSIXErrorDomain/60: The operation couldn’t be completed. Operation timed out

    4/22/13 7:32:30.174 PM UserEventAgent[11]: Captive: [CaptiveHandleRedirectFromPostAuthenticationProbe:1719] en1: Unknown result value: 1

    4/22/13 9:51:23.000 PM bootlog[0]: BOOT_TIME 1366692683 0




    Step 2 -  Here are some things that say 'crashed'


    Thread 7 crashed with X86 Thread State (64-bit):

      rax: 0xc15fdb14f04c1c17  rbx: 0x00007fc43301b0e8  rcx: 0x00000000001f8100  rdx: 0x00000000000eb6f0

      rdi: 0x0000000105ad8400  rsi: 0x0000000000000001  rbp: 0x000000011b831440  rsp: 0x000000011b831410

       r8: 0x0000000000000007   r9: 0x00000000a557c934  r10: 0x00007fc435da77a0  r11: 0x000000009121e013

      r12: 0x0000000000000040  r13: 0x00007fc43301b050  r14: 0x0000000000000040  r15: 0x0000000000000001

      rip: 0x000000010581ff5b  rfl: 0x0000000000010206  cr2: 0x0000000000000bad

    Logical CPU: 0



    Binary Images:

           0x105650000 -        0x10576fff7  mds (707.3) <1448C11E-D2EC-305E-88C9-C6DAF1FEB535> /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework /Support/mds

           0x1057c3000 -        0x105992fff  com.apple.spotlight.index (10.7.0 - 707.3) <DB706194-BC57-3853-9993-95DC58D3A07C> /System/Library/PrivateFrameworks/SpotlightIndex.framework/Versions/A/Spotlight Index

           0x1059f5000 -        0x1059fbff7  com.apple.MDSChannel (1.2 - 1.2) <05A6F55A-8197-316A-A127-DE6528F9B291> /System/Library/PrivateFrameworks/MDSChannel.framework/Versions/A/MDSChannel

           0x105a02000 -        0x105a05ff7  com.apple.ServerInformation (1.1 - 1) <0F1E39E4-5195-39ED-B91C-CA72BAD74820> /System/Library/PrivateFrameworks/ServerInformation.framework/Versions/A/Server Information

           0x105a0e000 -        0x105a86fff  com.apple.DCERPC (1.5 - 53.1.1) <25F4A15A-5252-3C70-A1D0-8145357F78B8> /System/Library/PrivateFrameworks/DCERPC.framework/Versions/A/DCERPC

           0x105ab2000 -        0x105acbff7  com.apple.SMBClient (1.8 - 1.8) <B30889AB-8E45-3E57-9DC8-1212E2B87A95> /System/Library/PrivateFrameworks/SMBClient.framework/Versions/A/SMBClient

           0x10dfbe000 -        0x10e0d7ff7  libmecab.1.0.0.dylib (359.50) <BDE1F58F-ED72-34BB-9027-2A7AA384F82E> /usr/lib/libmecab.1.0.0.dylib

        0x7fff65250000 -     0x7fff6528493f  dyld (210.2.3) <A40597AA-5529-3337-8C09-D8A014EB1578> /usr/lib/dyld

        0x7fff85000000 -     0x7fff8500cfff  com.apple.CrashReporterSupport (10.8.2 - 415) <55783BF9-125E-3F9C-A412-6A095ECD9353> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/Cra shReporterSupport

        0x7fff8509d000 -     0x7fff850abff7  libkxld.dylib (2050.18.24) <7027CE49-007D-3553-8FFA-3E3B428B2316> /usr/lib/system/libkxld.dylib

        0x7fff8510a000 -     0x7fff8510bff7  libSystem.B.dylib (169.3) <365477AB-D641-389D-B8F4-A1FAE9657EEE> /usr/lib/libSystem.B.dylib

        0x7fff8510c000 -     0x7fff8512dff7  libCRFSuite.dylib (33) <736ABE58-8DED-3289-A042-C25AF7AE5B23> /usr/lib/libCRFSuite.dylib

        0x7fff85133000 -     0x7fff85147fff  com.apple.speech.synthesis.framework (4.1.12 - 4.1.12) <94EDF2AB-809C-3D15-BED5-7AD45B2A7C16> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesis

        0x7fff854ce000 -     0x7fff8582afff  com.apple.Foundation (6.8 - 945.11) <A5D41956-A354-3ACC-9355-BE200072223B> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation

        0x7fff85854000 -     0x7fff85863ff7  libxar.1.dylib (105) <370ED355-E516-311E-BAFD-D80633A84BE1> /usr/lib/libxar.1.dylib

        0x7fff85864000 -     0x7fff8588ffff  libxslt.1.dylib (11.3) <441776B8-9130-3893-956F-39C85FFA644F> /usr/lib/libxslt.1.dylib

        0x7fff85890000 -     0x7fff858a4fff  libGL.dylib (8.6.1) <2E00615F-97F5-34EB-BE07-75A24F3C18D7> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib

        0x7fff858a5000 -     0x7fff858abfff  libmacho.dylib (829) <BF332AD9-E89F-387E-92A4-6E1AB74BD4D9> /usr/lib/system/libmacho.dylib

        0x7fff858ac000 -     0x7fff858bfff7  com.apple.LangAnalysis (1.7.0 - 1.7.0) <2F2694E9-A7BC-33C7-B4CF-8EC907DF0FEB> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ LangAnalysis.framework/Versions/A/LangAnalysis

        0x7fff858c0000 -     0x7fff858cefff  com.apple.Librarian (1.1 - 1) <1635162F-239A-341E-83C7-710C55E254AF> /System/Library/PrivateFrameworks/Librarian



    Your help is appreciated 

  • Linc Davis Level 10 (192,275 points)

    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.


    These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.


    Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.


    Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands.


    Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.


    Launch the Terminal application in any of the following ways:


    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.


    When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.


    Step 1


    Triple-click the line of text below to select it:
    kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
    Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). Post the lines of output (if any) that appear below what you just entered. You can do that by copying and pasting as well. Omit the final line ending in “$”. No typing is involved in this step.
    Step 2


    Repeat with this line:
    sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfix|x)/{print $3}'
    This time you'll be prompted for your login password, which you do have to type. It won't be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.


    Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.


    Step 3
    launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
    Step 4
    ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts 2> /dev/null
    Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.


    Step 5
    osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
    Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.


    You can then quit Terminal.

  • Kevin Lew Level 1 (0 points)

    ok.  I got this:


    Last login: Tue Apr 23 22:19:11 on ttys000

    Kevin-Lews-MacBook-Pro:~ kevinlew$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'

    Kevin-Lews-MacBook-Pro:~ kevinlew$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'



    WARNING: Improper use of the sudo command could lead to data loss

    or the deletion of important system files. Please double-check your

    typing when using sudo. Type "man sudo" for more information.



    To proceed, enter your password, or type Ctrl-C to abort.









    Kevin-Lews-MacBook-Pro:~ kevinlew$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'


    Kevin-Lews-MacBook-Pro:~ kevinlew$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null


















    /Library/Input Methods:



    /Library/Internet Plug-Ins:




    Flash Player.plugin

    Flip4Mac WMV Plugin.plugin


    Quartz Composer.webplugin

    QuickTime Plugin.plugin









    /Library/Keyboard Layouts:















    Flash Player.prefPane

    Flip4Mac WMV.prefPane
















    Flip4Mac WMV Advanced.component

    Flip4Mac WMV Export.component

    Flip4Mac WMV Import.component








    Microsoft Office.mdimporter

















    Library/Address Book Plug-Ins:






    Library/Input Methods:




    Library/Internet Plug-Ins:



    Library/Keyboard Layouts:





    com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.76D1A2FD-B206-4583-BB61-0B4 CB40C4AB9.plist

    com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.9A2BE7E6-0924-4E45-9B08-8C0 F5148AE0F.plist




    Kevin-Lews-MacBook-Pro:~ kevinlew$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null

    iTunesHelper, StatusMenu

    Kevin-Lews-MacBook-Pro:~ kevinlew$

  • Linc Davis Level 10 (192,275 points)

    You have what looks like a partial installation of "Avast," which is perhaps the worst of the whole wretched lot of commercial "security" products for the Mac. It's worse than the imaginary "viruses" you were worried about when you installed it. Not only does it fail to protect you, it destabilizes and slows down your computer, and it sometimes or always corrupts the network settings and the permissions of files in your home folder. Removing it may not repair all the damage, and neither will Disk Utility or even reinstalling OS X.

    Back up all data, then remove "Avast" according to the developer's instructions:

    avast! Support Center


    If you tried to remove Avast by dragging an application to the Trash, you'll have to reinstall it and follow the instructions linked above.

    If you still have problems after following those instructions, post again.

  • Kevin Lew Level 1 (0 points)

    Dear Linc,


    Thank you so very much!   I got rid of the Avast as directed above.  I left the computer on for a few hours and now there are no failures and it shuts down as it should.  All good things to you!  I really appreciate it.