You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Constant Disk Activity

I am running OSX 10.8.4 on my my iMAC 3,06 GHz Intel Core 2 Duo 4GB 1067 MHz ram.


The system is gradually getting slower and slower and there is a constant actvity on the hard disk.


I have tried the following


1. Start in safe mode (still activity on the the hard disk)

2. Running disk control

3. Closing all program

4. Ensuring there is no acitivity on indexing



Anybody got a tip on how this can be solved ?

Posted on Aug 28, 2013 6:01 AM

Reply
20 replies

Aug 28, 2013 8:35 AM in response to carlager

First, back up all data immediately, as your boot drive might be failing.


There are a few other possible causes of generalized slow performance that you can rule out easily.


  • Reset the System Management Controller.
  • If you have many image or video files on the Desktop with preview icons, move them to another folder.
  • If applicable, uncheck all boxes in the iCloud preference pane.
  • Disconnect all non-essential wired peripherals and remove aftermarket expansion cards, if any.
  • Check your keychains in Keychain Access for excessively duplicated items.
  • Boot into Recovery mode, launch Disk Utility, and run Repair Disk.
  • If you're booting from an aftermarket SSD, see whether there's a firmware update for it.


Otherwise, take the steps below when you notice the problem.


Step 1


Launch the Activity Monitor application in any of the following ways:


☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


☞ Open LaunchPad. Click Utilities, then Activity Monitor in the icon grid.


Select the CPU tab of the Activity Monitor window.


Select All Processes from the menu in the toolbar, if not already selected.


Click the heading of the % CPU column in the process table to sort the entries by CPU usage. You may have to click it twice to get the highest value at the top. What is it, and what is the process? Also post the values for % User, % System, and % Idle at the bottom of the window.


Select the System Memory tab. What values are shown in the bottom part of the window for Page outs and Swap used?


Next, select the Disk Activity tab. Post the approximate values shown for Reads in/sec and Writes out/sec (not Reads in and Writes out.)


Step 2


If you have more than one user account, you must be logged in as an administrator to carry out this step.


Launch the Console application in the same way you launched Activity Monitor. Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left. If you don't see that menu, select

View Show Log List

from the menu bar.


Select the 50 or so most recent entries in the log. Copy them to the Clipboard (command-C). Paste into a reply to this message (command-V). You're looking for entries at the end of the log, not at the beginning.


When posting a log extract, be selective. Don't post more than is requested.

Please do not indiscriminately dump thousands of lines from the log into this discussion.

Important: Some personal information, such as your name, may appear in the log. Anonymize before posting. That should be easy to do if your extract is not too long.

Aug 28, 2013 2:58 PM in response to Linc Davis

28/08/13 23.50.32,666 apsd[61]: Unable to bootstrap_lookup connection port for 'com.apple.ubd.system-push': Unknown service name

28/08/13 23.50.37,878 NetworkBrowserAgent[202]: Starting NetworkBrowserAgent

28/08/13 23.50.38,137 talagent[180]: _LSSetApplicationInformationItem(kLSDefaultSessionID, asn, _kLSApplicationIsHiddenKey, hidden ? kCFBooleanTrue : kCFBooleanFalse, NULL) produced OSStatus -50 on line 623 in TCApplication.m

28/08/13 23.50.38,137 talagent[180]: _LSSetApplicationInformationItem(kLSDefaultSessionID, asn, TAL_kLSIsProxiedForTALKey, kCFBooleanTrue, NULL) produced OSStatus -50 on line 626 in TCApplication.m

28/08/13 23.50.42,290 com.apple.launchd[1]: (com.apple.coreservices.appleid.authentication[140]) Exit timeout elapsed (20 seconds). Killing

28/08/13 23.50.47,392 WindowServer[121]: kCGErrorNotImplemented: receive_notification: CPXSetEventFilter failed

28/08/13 23.51.00,525 com.apple.time[160]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).

28/08/13 23.51.07,173 apsd[61]: <APSConnectionNotificationQueue: 0x7f96a98b2100>: outstanding count -1 for com.apple.apsd-queue-port=com.apple.syncdefaultsd.push-user=501-env=production

28/08/13 23.51.07,676 apsd[61]: <APSConnectionNotificationQueue: 0x7f96a98b2100>: outstanding count -1 for com.apple.apsd-queue-port=com.apple.syncdefaultsd.push-user=501-env=production

28/08/13 23.51.08,359 apsd[61]: <APSConnectionNotificationQueue: 0x7f96a98b2100>: outstanding count -1 for com.apple.apsd-queue-port=com.apple.syncdefaultsd.push-user=501-env=production

28/08/13 23.51.08,914 apsd[61]: <APSConnectionNotificationQueue: 0x7f96a98b2100>: outstanding count -1 for com.apple.apsd-queue-port=com.apple.syncdefaultsd.push-user=501-env=production

28/08/13 23.51.09,054 imagent[217]: [Warning] No service found, looking at name: AIM

28/08/13 23.51.09,055 imagent[217]: [Warning] No account: removing this chat [IMDChat: 0x7faaf1e26240 GUID: AIM;-;wong Style: - State: 0 Participants: (

"[IMDHandle: <wong:(null):(null)>]"

) Room Name: (null) Identifier: wong Unread count: 0]

28/08/13 23.51.18,960 coreservicesd[66]: Can't change an application into stopped state for app App:"Microsoft Excel" [ 0x0/0xa00a] @ 0x0x7f94e1e18b00 because it's already been started.

28/08/13 23.51.19,976 com.apple.time[160]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).

28/08/13 23.51.30,547 WindowServer[121]: kCGErrorNotImplemented: receive_notification: CPXSetEventFilter failed

28/08/13 23.51.30,632 WindowServer[121]: kCGErrorNotImplemented: receive_notification: CPXSetEventFilter failed

28/08/13 23.51.30,645 WindowServer[121]: kCGErrorNotImplemented: receive_notification: CPXSetEventFilter failed

28/08/13 23.51.33,161 com.apple.launchd.peruser.501[157]: (com.apple.afpstat-qfa[235]) Job failed to exec(3). Setting up event to tell us when to try again: 2: No such file or directory

28/08/13 23.51.33,162 com.apple.launchd.peruser.501[157]: (com.apple.afpstat-qfa[235]) Job failed to exec(3) for weird reason: 2

28/08/13 23.51.33,000 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=238[GoogleSoftwareUp] clearing CS_VALID

28/08/13 23.51.35,004 com.apple.launchd.peruser.501[157]: (com.apple.mrt.uiagent[227]) Exited with code: 255

28/08/13 23.51.54,259 WindowServer[121]: CGXDisableUpdate: UI updates were forcibly disabled by application "Microsoft Word" for over 1.00 seconds. Server has re-enabled them.

28/08/13 23.51.54,404 WindowServer[121]: reenable_update_for_connection: UI updates were finally reenabled by application "Microsoft Word" after 1.14 seconds (server forcibly re-enabled them after 1.00 seconds)

28/08/13 23.52.22,183 com.apple.time[160]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).

28/08/13 23.52.27,280 talagent[180]: CGSSetWindowShadowAndRimParametersWithStretch: Invalid window 0xe

28/08/13 23.52.40,989 WindowServer[121]: CGXDisableUpdate: UI updates were forcibly disabled by application "Microsoft Excel" for over 1.00 seconds. Server has re-enabled them.

28/08/13 23.52.42,501 WindowServer[121]: reenable_update_for_connection: UI updates were finally reenabled by application "Microsoft Excel" after 2.51 seconds (server forcibly re-enabled them after 1.00 seconds)

28/08/13 23.52.54,873 WindowServer[121]: CGXDisableUpdate: UI updates were forcibly disabled by application "Microsoft Word" for over 1.00 seconds. Server has re-enabled them.

28/08/13 23.52.55,112 WindowServer[121]: reenable_update_for_connection: UI updates were finally reenabled by application "Microsoft Word" after 1.24 seconds (server forcibly re-enabled them after 1.00 seconds)

28/08/13 23.53.49,000 kernel[0]: fsevents: watcher dbfseventsd (pid: 440) - Using /dev/fsevents directly is unsupported. Migrate to FSEventsFramework

28/08/13 23.53.54,880 talagent[180]: CGSSetWindowShadowAndRimParametersWithStretch: Invalid window 0xe

28/08/13 23.53.55,295 WindowServer[121]: CGXDisableUpdate: UI updates were forcibly disabled by application "Microsoft Word" for over 1.00 seconds. Server has re-enabled them.

28/08/13 23.53.55,592 WindowServer[121]: reenable_update_for_connection: UI updates were finally reenabled by application "Microsoft Word" after 1.30 seconds (server forcibly re-enabled them after 1.00 seconds)

28/08/13 23.53.57,782 WindowServer[121]: CGXDisableUpdate: UI updates were forcibly disabled by application "Microsoft PowerPoint" for over 1.00 seconds. Server has re-enabled them.

28/08/13 23.53.57,815 WindowServer[121]: reenable_update_for_connection: UI updates were finally reenabled by application "Microsoft PowerPoint" after 1.03 seconds (server forcibly re-enabled them after 1.00 seconds)

28/08/13 23.53.59,407 talagent[180]: CGSSetWindowShadowAndRimParametersWithStretch: Invalid window 0xe

28/08/13 23.54.13,945 talagent[180]: CGSSetWindowShadowAndRimParametersWithStretch: Invalid window 0xe

28/08/13 23.54.32,291 WindowServer[121]: _CGXWindowRightsRelinquish: Invalid window 0xe

28/08/13 23.54.32,292 talagent[180]: CGSConnectionRelinquishWindowRights(cid, result, reservedRights): CGError 1001 on line 865

28/08/13 23.54.32,293 WindowServer[121]: CGXTerminateWindowList: Invalid window 0xe

28/08/13 23.54.32,293 talagent[180]: CGSReleaseWindowList(cid, windowIDList, count): CGError 1001 on line 918

28/08/13 23.54.47,953 loginwindow[44]: *** WARNING: -[NSImage compositeToPoint:operation:] is deprecated in MacOSX 10.8 and later. Please use -[NSImage drawAtPoint:fromRect:operation:fraction:] instead.

28/08/13 23.54.47,953 loginwindow[44]: *** WARNING: -[NSImage compositeToPoint:fromRect:operation:] is deprecated in MacOSX 10.8 and later. Please use -[NSImage drawAtPoint:fromRect:operation:fraction:] instead.

28/08/13 23.54.49,900 com.apple.launchd.peruser.501[157]: ([0x0-0xb00b].com.adobe.Reader[194]) Exited: Terminated: 15

28/08/13 23.55.00,622 coreservicesd[66]: Can't change an application into stopped state for app App:"Console" [ 0x0/0xe00e] @ 0x0x7f94e1e1c260 because it's already been started.

28/08/13 23.55.00,892 WindowServer[121]: kCGErrorNotImplemented: receive_notification: CPXSetEventFilter failed

Aug 28, 2013 4:40 PM in response to carlager

This procedure is a diagnostic test. It will make no changes to your system, and therefore will not, in itself, solve your problem.

If you have more than one user account, you must be logged in as an administrator to carry out these instructions.


Triple-click anywhere in the line below on this page to select it:

sudo iosnoop -v | sed 50q | open -ef


Copy the selected text to the Clipboard (command-C).



Launch the Terminal application in any of the following ways:


☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.


Paste into the Terminal window (command-V). You'll be prompted for your login password. Nothing will be displayed when you type it. If you don’t have a login password, you’ll need to set one before you can run the command. You may get a one-time warning not to screw up. Confirm. You don't need to post the warning.

If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator. Log in as one and start over.

The command may take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear.


A TextEdit window will open. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. The title of the window doesn't matter, and you don't need to post that.

You can then quit Terminal.

Important: There seems to be an obscure bug in OS X that sometimes causes input devices to lag or stutter after running this command. If you notice that behavior, simply reboot to clear it.

Aug 28, 2013 11:15 PM in response to Linc Davis

TRTIME UID PID D BLOCK SIZE COMM PATHNAME

2013 Aug 29 08:11:35 501 1141 W 1234251224 4096 Terminal ??/com.apple.Terminal.savedState/window_2.data

2013 Aug 29 08:11:35 501 1141 W 1234251256 4096 Terminal ??/com.apple.Terminal.savedState/window_2.data

2013 Aug 29 08:11:35 501 1141 W 1234251248 4096 Terminal ??/com.apple.Terminal.savedState/data.data

2013 Aug 29 08:11:35 501 1141 W 1234251264 4096 Terminal ??/com.apple.Terminal.savedState/windows.plist

2013 Aug 29 08:11:35 0 12 R 1594816 8192 kextd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:11:36 0 1 W 340741864 4096 launchd ??/asl/2013.08.29.U0.G80.asl

2013 Aug 29 08:11:36 0 1 W 340742024 4096 launchd ??/asl/2013.08.29.U0.G80.asl

2013 Aug 29 08:11:36 0 1 W 1240422016 4096 launchd ??/log/system.log

2013 Aug 29 08:11:36 0 1 W 587292704 4096 launchd ??/asl/StoreData

2013 Aug 29 08:11:36 0 1 W 1232603352 4096 launchd ??/audit/20130828214946.not_terminated

2013 Aug 29 08:11:37 0 1 W 1744016 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:11:37 0 1 W 2480800 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:14 501 1120 W 1234251512 20480 cookied ??/Cookies/Cookies.binarycookies_tmp_1120_0.dat

2013 Aug 29 08:12:28 501 1120 W 1234251472 20480 cookied ??/Cookies/Cookies.binarycookies_tmp_1120_0.dat

2013 Aug 29 08:12:37 0 1 W 1484816 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:37 0 1 W 1726704 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:37 0 1 W 1744016 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:37 0 1 W 1846320 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:37 0 1 W 2555648 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:37 0 1 W 2703120 8192 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:37 0 1 W 736048 4096 launchd ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 08:12:46 501 1120 W 1234251512 20480 cookied ??/Cookies/Cookies.binarycookies_tmp_1120_0.dat

2013 Aug 29 08:12:53 501 1120 W 1234251472 20480 cookied ??/Cookies/Cookies.binarycookies_tmp_1120_0.dat

2013 Aug 29 08:12:58 501 1131 R 37815856 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42438168 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61238280 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61306080 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42489864 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42438176 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 43246128 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42448088 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61211896 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61306328 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61216256 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61215216 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61226272 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61222680 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42438080 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61226984 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42438088 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 61196600 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 43246928 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42447560 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 43206624 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42456992 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42456272 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42471968 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42467616 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 08:12:58 501 1131 R 42502000 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

Aug 29, 2013 7:31 AM in response to Linc Davis

Can´t recall if it was in safe mode. Posting a new one in normal mode with Parallels 8 for windows (using XP) launched


STRTIME UID PID D BLOCK SIZE COMM PATHNAME

2013 Aug 29 16:26:46 0 6732 R 562803072 20480 dtrace ??/lib/libdtrace.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6743 R 106540136 4096 AddressBookSour ??/A/PDFKit/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106463728 4096 xpcd ??/Resources/libTIFF.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6743 R 106476088 4096 AddressBookSour ??/A/ImageKit/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106463384 4096 xpcd ??/Resources/libPng.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106463640 20480 xpcd ??/Resources/libPng.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6597 R 1240887000 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:46 501 6743 R 1258298136 4096 AddressBookSour ??/A/QuickLookUI/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6597 R 1240900952 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:46 0 6742 R 106463696 12288 xpcd ??/Resources/libRadiance.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106462944 4096 xpcd ??/Resources/libGIF.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106462952 20480 xpcd ??/Resources/libGIF.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6743 R 106483024 4096 AddressBookSour ??/A/JavaScriptCore/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106468048 4096 xpcd ??/Resources/libJP2.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106463688 4096 xpcd ??/Resources/libRadiance.dylib/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6743 R 1214168256 4096 AddressBookSour ??/A/QTKit/..namedfork/rsrc

2013 Aug 29 16:26:46 0 1 W 479909088 131072 launchd ??/Windows XP-0.hdd/Windows XP-0.hdd.0.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds

2013 Aug 29 16:26:46 501 40 R 1520000 8192 mds ??/<unknown (NULL v_parent)>/<unknown (NULL v_name)>

2013 Aug 29 16:26:46 501 6743 R 562283840 4096 AddressBookSour ??/A/AppleSystemInfo/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106465536 4096 xpcd ??/A/ImageIO/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 106467872 16384 xpcd ??/A/ImageIO/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6743 R 62609288 4096 AddressBookSour ??/A/MediaToolbox/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 764229504 32768 xpcd ??/A/CoreText/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6597 R 1240555896 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:46 0 6742 R 764227752 4096 xpcd ??/A/CoreText/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6597 R 1240483016 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:46 501 6743 R 62623984 4096 AddressBookSour ??/A/VideoToolbox/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 746192552 4096 xpcd ??/A/ATS/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6743 R 562339576 4096 AddressBookSour ??/A/Carbon/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 746193712 28672 xpcd ??/A/ATS/..namedfork/rsrc

2013 Aug 29 16:26:46 501 6597 R 1241510256 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:46 0 1 W 479909344 131072 launchd ??/Windows XP-0.hdd/Windows XP-0.hdd.0.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds

2013 Aug 29 16:26:46 501 5812 R 12300936 4096 mdworker ??/MacOS/Microsoft Outlook

2013 Aug 29 16:26:46 501 6743 R 562382880 4096 AddressBookSour ??/A/CoreMediaAuthoring/..namedfork/rsrc

2013 Aug 29 16:26:46 0 6742 R 562346296 4096 xpcd ??/A/ColorSync/..namedfork/rsrc

2013 Aug 29 16:26:47 501 6743 R 62609992 4096 AddressBookSour ??/A/CoreMediaIO/..namedfork/rsrc

2013 Aug 29 16:26:47 0 6742 R 601847872 4096 xpcd ??/A/QD/..namedfork/rsrc

2013 Aug 29 16:26:47 501 6597 R 1240887152 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:47 501 6743 R 1258543112 4096 AddressBookSour ??/A/MediaControlSender/..namedfork/rsrc

2013 Aug 29 16:26:47 501 6597 R 1240541264 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:47 501 6743 R 1258478856 4096 AddressBookSour ??/A/CoreAUC/..namedfork/rsrc

2013 Aug 29 16:26:47 501 6597 R 1240889376 4096 Safari ??/com.apple.Safari/SafeBrowsing.db

2013 Aug 29 16:26:47 0 6742 R 562347816 24576 xpcd ??/A/ColorSync/..namedfork/rsrc

2013 Aug 29 16:26:47 501 6689 R 578009800 4096 Terminal ??/Fonts/Menlo.ttc/..namedfork/rsrc

2013 Aug 29 16:26:47 501 6743 R 62235632 4096 AddressBookSour ??/A/Apple80211/..namedfork/rsrc

2013 Aug 29 16:26:47 0 1 W 479909600 131072 launchd ??/Windows XP-0.hdd/Windows XP-0.hdd.0.{5fbaabe3-6958-40ff-92a7-860e329aab41}.hds

2013 Aug 29 16:26:47 501 6743 R 62237512 4096 AddressBookSour ??/A/CoreWLAN/..namedfork/rsrc

2013 Aug 29 16:26:47 0 6742 R 764825664 4096 xpcd ??/A/HIServices/..namedfork/rsrc

2013 Aug 29 16:26:47 501 6689 R 578010016 8192 Terminal ??/Fonts/Menlo.ttc/..namedfork/rsrc

Aug 29, 2013 1:22 PM in response to Linc Davis

This is done in safe mode


STRTIME UID PID D BLOCK SIZE COMM PATHNAME

2013 Aug 29 22:21:07 501 241 R 11808592 4096 iCalExternalSyn ??/Calendar Sync Changes/35B2CC9A-FB82-4125-8883-521114EECDA0.tmp

2013 Aug 29 22:21:07 501 241 R 11805480 4096 iCalExternalSyn ??/Calendar Sync Changes/35B3CDD8-C635-4770-9D95-8D7B7D345BA1.tmp

2013 Aug 29 22:21:07 501 241 R 1237635760 4096 iCalExternalSyn ??/Calendar Sync Changes/35B5227F-59F6-4796-B303-197C311F853A.tmp

2013 Aug 29 22:21:07 501 237 R 12300784 4096 mdworker ??/MacOS/Microsoft Outlook

2013 Aug 29 22:21:07 501 241 R 1203692440 4096 iCalExternalSyn ??/Calendar Sync Changes/35B58BFB-9ECE-4D80-8084-79451BC205D6.tmp

2013 Aug 29 22:21:07 501 241 R 1201668624 4096 iCalExternalSyn ??/Calendar Sync Changes/35B60B6E-3E18-41EC-909C-1C7F4CBE0DC2.tmp

2013 Aug 29 22:21:07 501 241 R 1203954072 4096 iCalExternalSyn ??/Calendar Sync Changes/35B736B2-1F60-4547-9473-6C99CB8F692B.tmp

2013 Aug 29 22:21:07 501 241 R 11947648 4096 iCalExternalSyn ??/Calendar Sync Changes/35B750D9-7199-47F9-9419-B1D48D9D9B49.tmp

2013 Aug 29 22:21:07 501 241 R 512395640 4096 iCalExternalSyn ??/Calendar Sync Changes/35BF14E3-B9C1-4FA9-9DAD-B8A607945EDF.tmp

2013 Aug 29 22:21:07 501 241 R 1232098696 4096 iCalExternalSyn ??/Calendar Sync Changes/35B7E4D0-FF4A-422A-A220-97860EB313A8.tmp

2013 Aug 29 22:21:07 501 241 R 1211455872 4096 iCalExternalSyn ??/Calendar Sync Changes/35B84683-B4F9-466E-92E0-847B2B291ADE.tmp

2013 Aug 29 22:21:07 501 241 R 1307128152 4096 iCalExternalSyn ??/Calendar Sync Changes/35BAE0CB-1064-4050-9F55-F2C70B8D3C4E.tmp

2013 Aug 29 22:21:07 501 241 R 1286295296 4096 iCalExternalSyn ??/Calendar Sync Changes/35BB6364-DEE3-4CEB-A72D-E4C4FD64AB42.tmp

2013 Aug 29 22:21:07 501 241 R 1234601824 4096 iCalExternalSyn ??/Calendar Sync Changes/35BBB033-F5AE-4465-9EFE-D37E19148A15.tmp

2013 Aug 29 22:21:07 501 241 R 1259367208 4096 iCalExternalSyn ??/Calendar Sync Changes/35BD6BE2-AB02-4694-B3AF-F926CE442FF4.tmp

2013 Aug 29 22:21:07 501 241 R 1178044992 4096 iCalExternalSyn ??/Calendar Sync Changes/35BD7690-6B6D-4A28-9A06-35A49284D714.tmp

2013 Aug 29 22:21:07 501 241 R 11801872 4096 iCalExternalSyn ??/Calendar Sync Changes/35BE4478-4D66-4093-9FD9-ADAA52864D91.tmp

2013 Aug 29 22:21:07 501 241 R 1136414096 4096 iCalExternalSyn ??/Calendar Sync Changes/35BE7680-D698-4076-A18D-677C43D64DA0.tmp

2013 Aug 29 22:21:07 501 241 R 1259275368 4096 iCalExternalSyn ??/Calendar Sync Changes/35BF5AF3-50EB-4F0F-AFDD-6D302FF3D19B.tmp

2013 Aug 29 22:21:07 501 241 R 11801640 4096 iCalExternalSyn ??/Calendar Sync Changes/35BF8441-FB44-42FE-9EF3-6F4675AA8E0C.tmp

2013 Aug 29 22:21:07 501 241 R 1266715008 4096 iCalExternalSyn ??/Calendar Sync Changes/35C02B30-4272-4BA3-9A03-E2CB9CE3823E.tmp

2013 Aug 29 22:21:07 0 242 R 562570736 4096 kextcache ??/MacOS/JMicronATA

2013 Aug 29 22:21:07 501 241 R 1244090816 4096 iCalExternalSyn ??/Calendar Sync Changes/35C039EC-D007-4044-BF0F-6BE4B5A8A191.tmp

2013 Aug 29 22:21:07 501 241 R 1201280440 4096 iCalExternalSyn ??/Calendar Sync Changes/35C11991-711D-4216-B9B6-6E6EA178F04D.tmp

2013 Aug 29 22:21:07 501 241 R 11802056 4096 iCalExternalSyn ??/Calendar Sync Changes/35C1E925-C376-4966-83EB-154C38604FE3.tmp

2013 Aug 29 22:21:07 501 241 R 220291392 4096 iCalExternalSyn ??/Calendar Sync Changes/35C20A8A-E170-43D0-9D99-DE8A6AC1C9F5.tmp

2013 Aug 29 22:21:07 501 241 R 11805472 4096 iCalExternalSyn ??/Calendar Sync Changes/35C211BD-F7D7-40A9-AD27-E7F93DD0FCB4.tmp

2013 Aug 29 22:21:07 501 241 R 1199446464 4096 iCalExternalSyn ??/Calendar Sync Changes/35C28AC1-A60C-4939-8CAF-78E979C4D22C.tmp

2013 Aug 29 22:21:07 501 241 R 1206518136 4096 iCalExternalSyn ??/Calendar Sync Changes/35C2DC6E-E4E3-4575-9DFD-EDF6CCC505C3.tmp

2013 Aug 29 22:21:07 501 241 R 1325358208 4096 iCalExternalSyn ??/Calendar Sync Changes/35C44C81-5715-4B4D-A6A6-3082A61AAEE0.tmp

2013 Aug 29 22:21:07 501 241 R 1222060872 4096 iCalExternalSyn ??/Calendar Sync Changes/35C710B4-429C-4EC4-BF8B-958E5B548B49.tmp

2013 Aug 29 22:21:07 501 241 R 1135857632 4096 iCalExternalSyn ??/Calendar Sync Changes/35CA6621-E9BD-442F-94F6-1B1C00E4FD88.tmp

2013 Aug 29 22:21:07 501 241 R 1308584560 4096 iCalExternalSyn ??/Calendar Sync Changes/35CAD868-390A-4AD2-B88B-B6F41930EE62.tmp

2013 Aug 29 22:21:07 501 241 R 1245157296 4096 iCalExternalSyn ??/Calendar Sync Changes/35CE4C02-EAA1-41BE-B4AF-17EF2354B8A5.tmp

2013 Aug 29 22:21:08 501 241 R 1222989144 4096 iCalExternalSyn ??/Calendar Sync Changes/35CE6047-07D8-4B9B-81B7-320FC8645099.tmp

2013 Aug 29 22:21:08 501 241 R 1234193136 4096 iCalExternalSyn ??/Calendar Sync Changes/35CEDF28-6501-42B7-A0FD-CEE48B106F26.tmp

2013 Aug 29 22:21:08 501 241 R 11802736 4096 iCalExternalSyn ??/Calendar Sync Changes/35D07C9F-E3E8-42C8-8073-771D0CF79EEC.tmp

2013 Aug 29 22:21:08 501 237 R 12300792 4096 mdworker ??/MacOS/Microsoft Outlook

2013 Aug 29 22:21:08 501 241 R 1176617408 4096 iCalExternalSyn ??/Calendar Sync Changes/35D1158B-4EC5-4246-8542-60B47C6C2A95.tmp

2013 Aug 29 22:21:08 501 241 R 1223250592 4096 iCalExternalSyn ??/Calendar Sync Changes/35D26094-DE49-4671-BB6D-72497AF3777A.tmp

2013 Aug 29 22:21:08 501 241 R 11811368 4096 iCalExternalSyn ??/Calendar Sync Changes/35D356FF-990B-4B82-8D64-AA1A82A4CE3E.tmp

2013 Aug 29 22:21:08 501 241 R 1237572472 4096 iCalExternalSyn ??/Calendar Sync Changes/35D36CF3-4583-48F0-AF66-83139966FA48.tmp

2013 Aug 29 22:21:08 501 241 R 1218247120 4096 iCalExternalSyn ??/Calendar Sync Changes/35D494BE-5AC6-43E7-BB32-2E25AFC325BA.tmp

2013 Aug 29 22:21:08 501 241 R 1254494664 4096 iCalExternalSyn ??/Calendar Sync Changes/35D735E0-7F77-4C42-9F97-26E562D10356.tmp

2013 Aug 29 22:21:08 501 241 R 11840568 4096 iCalExternalSyn ??/Calendar Sync Changes/35D95807-5317-4391-BBF3-09331E9B52EE.tmp

2013 Aug 29 22:21:08 501 241 R 1200285816 4096 iCalExternalSyn ??/Calendar Sync Changes/35DA2CA0-3B5F-49D0-959E-006F545593F1.tmp

2013 Aug 29 22:21:08 501 241 R 1312138136 4096 iCalExternalSyn ??/Calendar Sync Changes/35DADB1A-1617-4E81-ABB9-9A80968E455D.tmp

2013 Aug 29 22:21:08 501 241 R 11849632 4096 iCalExternalSyn ??/Calendar Sync Changes/35DBDD68-14D0-45AD-9AC5-A03E885773AC.tmp

2013 Aug 29 22:21:08 501 270 R 1337543736 4096 Terminal ??/com.apple.Terminal.savedState/window_2.data

Aug 29, 2013 3:00 PM in response to Linc Davis

Just saw that there are 64,672 .tmp files in Library--> Calendar --> Calendar Sync Changes




Content of each of the files is


<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>deleted</key>

<dict/>

<key>modified</key>

<dict>

<key>com.apple.calendars.Calendar</key>

<array>

<string>ExchangeCalendar/p44</string>

</array>

</dict>

</dict>

</plist>


just wondering if this has got something to do with the slow down of the system.


Can these files be deleted with out problems ?

Aug 30, 2013 7:26 AM in response to carlager

You still haven't answered the question of whether WindowServer consistently uses too many cycles when not in safe mode, but I'll assume that it does, because I get tired of begging for information pretty quickly. If my assumption is wrong, what follows willl be a waste of time.

Please read this whole message before doing anything.

This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.


These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.


Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.


Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands.


Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.


Launch the Terminal application in any of the following ways:


☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.


When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.


Step 1


Triple-click the line of text below on this page to select it:

kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}' | open -ef

Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). A TextEdit window will open with the output of the command. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.

Step 2


Repeat with this line:

{ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; echo; sudo defaults read com.apple.loginwindow LoginHook; echo; sudo crontab -l; } 2> /dev/null | open -ef

This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.


Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.


Step 3

{ launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)/{print $3}'; echo; crontab -l 2> /dev/null; } | open -ef

Step 4

ls -A /e*/{cr,la,mach}* {,/}Lib*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts .la* 2> /dev/null | open -ef

Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.


Step 5

osascript -e 'tell application "System Events" to get name of login items' | open -ef

Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.


You can then quit Terminal.

Constant Disk Activity

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.