Where to find kernel panic logs after updating to Mavericks?

Question

Level 1

0 points

Where to find kernel panic logs after updating to Mavericks?

I have recently updated my mid-2009 MacBook Pro to Mavericks and now it seems to shut down (or at least the screen remains stuck as black) whenever I put it to sleep. I have to restart it and it tends to make the restart noise twice, beginning the process twice back to back, before booting up and saying "Your computer had to be shut down because of a problem."

According to support.apple.com/kb/ht2546

I can find the kernel logs under Library/Logs/DiagnosticReports but I'm not clear on how they are labelled. In the past, I posted a crash report related to my printer software but I was told that it was not a kernel panic log.

Any help on where to find this information so I can post it and seek assistance would be greatly appreciated!

MacBook Pro (13-inch Mid 2009), OS X Mavericks (10.9)

Posted on Nov 18, 2013 1:42 AM

Reply

Answer 1

LowLuster

Level 6

12,105 points

Nov 18, 2013 3:20 AM in response to yeddow333

Console.app.

Reply

Answer 2

yeddow333 Author

Level 1

0 points

Nov 18, 2013 3:21 AM in response to LowLuster

I appreciate the response but I'm finding the Console rather difficult to navigate. Can you be more specific as to what I should look for in the Console?

Thanks!

Reply

Answer 3

Lexiepex

Level 6

14,102 points

Nov 18, 2013 3:26 AM in response to yeddow333

If your computer did not have problems before Mavericks.

Now run Etrecheck (www.etresoft.com) and post the list here.

Much easier to read than the crash reports.

Very probably you have conflicting software.

Reply

Answer 4

yeddow333 Author

Level 1

0 points

Nov 18, 2013 3:31 AM in response to Lexiepex

Thank you so much! Here is the list:

Hardware Information:

MacBook Pro (13-inch, Mid 2009)

MacBook Pro - model: MacBookPro5,5

1 2.26 GHz Intel Core 2 Duo CPU: 2 cores

4 GB RAM

Video Information:

NVIDIA GeForce 9400M - VRAM: 256 MB

Audio Plug-ins:

BluetoothAudioPlugIn: Version: 1.0

AirPlay: Version: 1.9

AppleAVBAudio: Version: 2.0.0

iSightAudio: Version: 7.7.3

Startup Items:

360ControlDaemon - Path: /Library/StartupItems/360ControlDaemon

System Software:

OS X 10.9 (13A603) - Uptime: 0 days 2:9:15

Disk Information:

ST9160314ASG disk0 : (160.04 GB)

EFI (disk0s1) <not mounted>: 209.7 MB

Macintosh HD (disk0s2) /: 159.18 GB (22.17 GB free)

Recovery HD (disk0s3) <not mounted>: 650 MB

MATSHITADVD-R UJ-868

USB Information:

Apple Inc. iPhone

Apple Inc. Built-in iSight

Apple Internal Memory Card Reader

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Computer, Inc. IR Receiver

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

FireWire Information:

Thunderbolt Information:

Kernel Extensions:

com.orderedbytes.driver.CMUSBDevices (4.6.0)

com.orderedbytes.driver.ControllerMateFamily (4.6.0)

com.sophos.kext.sav (8.0.14)

Problem System Launch Daemons:

Problem System Launch Agents:

Launch Daemons:

[loaded] com.adobe.fpsaud.plist

[loaded] com.adobe.SwitchBoard.plist

[loaded] com.barebones.authd.plist

[loaded] com.cisco.anyconnect.vpnagentd.plist

[loaded] com.microsoft.office.licensing.helper.plist

[loaded] com.sec.faxdb.plist

[loaded] com.sophos.autoupdate.plist

[loaded] com.sophos.intercheck.plist

[loaded] com.sophos.notification.plist

[loaded] com.trusteer.rooks.rooksd.plist

[loaded] org.macosforge.xquartz.privileged_startx.plist

Launch Agents:

[not loaded] com.adobe.AAM.Updater-1.0.plist

[loaded] com.adobe.CS5ServiceManager.plist

[loaded] com.cisco.anyconnect.gui.plist

[loaded] com.divx.dms.agent.plist

[loaded] com.divx.update.agent.plist

[loaded] com.orderedbytes.ControllerMateHelper.plist

[loaded] com.sophos.uiserver.plist

[failed] com.trusteer.rapport.rapportd.plist

[loaded] org.macosforge.xquartz.startx.plist

User Launch Agents:

[loaded] com.adobe.AAM.Updater-1.0.plist

[loaded] com.adobe.ARM.[...].plist

[loaded] com.valvesoftware.steamclean.plist

User Login Items:

Connect360Helper

iTunesHelper

Dropbox

VLCStreamer

WDQuickView

3rd Party Preference Panes:

Connect360

Flash Player

Flip4Mac WMV

Growl

Perian

Rapport

WDQuickView

XBox 360 Controllers

Internet Plug-ins:

AdobePDFViewer.plugin

AdobePDFViewerNPAPI.plugin

CouponPrinter-FireFox.plugin

Default Browser.plugin

DirectorShockwave.plugin

DivX Web Player.plugin

Flash Player.plugin

FlashPlayer-10.6.plugin

Flip4Mac WMV Plugin.plugin

iPhotoPhotocast.plugin

JavaAppletPlugin.plugin

OfficeLiveBrowserPlugin.plugin

OVSHelper.plugin

QuickTime Plugin.plugin

SharePointBrowserPlugin.plugin

Silverlight.plugin

User Internet Plug-ins:

Bad Fonts:

None

Time Machine:

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 159.18 GB Disk used: 137.01 GB

Destinations:

Data [Network] (Last used)

Total size: Zero KB

Total number of backups: (null)

Size of backup disk: Too small

Backup size Zero KB < (Disk used 137.01 GB X 3)

Time Machine details may not be accurate.

All volumes being backed up may not be listed.

Top Processes by CPU:

30% InterCheck

6% SophosAutoUpdate

2% WindowServer

1% SophosUIServer

1% EtreCheck

1% mtmd

0% TextEdit

0% mds

0% plugin-container

0% fseventsd

Top Processes by Memory:

426 MB firefox

152 MB Safari

135 MB com.apple.IconServicesAgent

115 MB TextEdit

86 MB plugin-container

78 MB mds_stores

78 MB WindowServer

70 MB Dropbox

66 MB com.apple.WebKit.WebContent

61 MB InterCheck

Virtual Memory Statistics:

22 MB Free RAM

1.59 GB Active RAM

1.57 GB Inactive RAM

431 MB Wired RAM

714 MB Page-ins

65 MB Page-outs

Reply

Answer 5

Lexiepex

Level 6

14,102 points

Nov 18, 2013 5:00 AM in response to yeddow333

Yes, you have software that you should get rid of,

1. for good: Sophos, it is not really conflicting in earlier OSX, but it doesn't do anything for you. There are more threads already for conflicts in Mavericks.

So uninistall Sophos, completely.

2. for good: uninstall Growl, the notifications center of Mavericks is very good, and you do not gain anything with Growl.

3. for good (crap): uninstall Trusteer / Rapport, this can cause serious problems.

4. for good: uninstall all WesternDigital software: it does not do anything for you, it is not up-to-date, and it causes problems always.

5. for good: And uninstall SteamClean (Valve) completely.

6. If you do not need Connect360 and the other Xbox software, uninstall it

7. very very probably you do not need Shockwave and Divx, so remove it.

8. do not use Safari and Firefox at the same time (you do not have unlimited ram).

9. if you use VLC (latest version required), you do not need Flip4Mac, uninstall it.

10. get rid of OVShelper.

11. If you do not use the cisco dongle anymore, uninstall that software.

This is enough for now (at least 1-5); after all you do, restart, and make a new list.

Lex

Reply

Answer 6

yeddow333 Author

Level 1

0 points

Nov 18, 2013 7:50 AM in response to Lexiepex

Thank you so much! I deleted everything you recommended though Sophos is proving extremely frustrating to compeltely uninstall. Here's the second check:

Hardware Information:

MacBook Pro (13-inch, Mid 2009)

MacBook Pro - model: MacBookPro5,5

1 2.26 GHz Intel Core 2 Duo CPU: 2 cores

2 GB RAM

Video Information:

NVIDIA GeForce 9400M - VRAM: 256 MB

Audio Plug-ins:

BluetoothAudioPlugIn: Version: 1.0

AirPlay: Version: 1.9

AppleAVBAudio: Version: 2.0.0

iSightAudio: Version: 7.7.3

Startup Items:

360ControlDaemon - Path: /Library/StartupItems/360ControlDaemon

System Software:

OS X 10.9 (13A603) - Uptime: 0 days 0:12:42

Disk Information:

ST9160314ASG disk0 : (160.04 GB)

EFI (disk0s1) <not mounted>: 209.7 MB

Macintosh HD (disk0s2) /: 159.18 GB (22.81 GB free)

Recovery HD (disk0s3) <not mounted>: 650 MB

MATSHITADVD-R UJ-868

USB Information:

Apple Internal Memory Card Reader

Apple Inc. Built-in iSight

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Computer, Inc. IR Receiver

FireWire Information:

Thunderbolt Information:

Kernel Extensions:

com.orderedbytes.driver.CMUSBDevices (4.6.0)

com.orderedbytes.driver.ControllerMateFamily (4.6.0)

com.sophos.kext.sav (8.0.14)

Problem System Launch Daemons:

Problem System Launch Agents:

Launch Daemons:

[loaded] com.adobe.fpsaud.plist

[loaded] com.adobe.SwitchBoard.plist

[loaded] com.barebones.authd.plist

[loaded] com.microsoft.office.licensing.helper.plist

[loaded] com.sec.faxdb.plist

[loaded] com.sophos.autoupdate.plist

[loaded] com.sophos.intercheck.plist

[loaded] com.sophos.notification.plist

[loaded] org.macosforge.xquartz.privileged_startx.plist

Launch Agents:

[not loaded] com.adobe.AAM.Updater-1.0.plist

[loaded] com.adobe.CS5ServiceManager.plist

[loaded] org.macosforge.xquartz.startx.plist

User Launch Agents:

[loaded] com.adobe.AAM.Updater-1.0.plist

[loaded] com.adobe.ARM.[...].plist

User Login Items:

Dropbox

VLCStreamer

WDQuickView

3rd Party Preference Panes:

Flash Player

Perian

Internet Plug-ins:

AdobePDFViewer.plugin

AdobePDFViewerNPAPI.plugin

CouponPrinter-FireFox.plugin

Default Browser.plugin

DirectorShockwave.plugin

Flash Player.plugin

FlashPlayer-10.6.plugin

iPhotoPhotocast.plugin

JavaAppletPlugin.plugin

OfficeLiveBrowserPlugin.plugin

QuickTime Plugin.plugin

SharePointBrowserPlugin.plugin

Silverlight.plugin

User Internet Plug-ins:

Bad Fonts:

None

Time Machine:

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 159.18 GB Disk used: 136.37 GB

Destinations:

Data [Network] (Last used)

Total size: Zero KB

Total number of backups: (null)

Size of backup disk: Too small

Backup size Zero KB < (Disk used 136.37 GB X 3)

Time Machine details may not be accurate.

All volumes being backed up may not be listed.

/sbin excluded from backup!

/usr excluded from backup!

/System excluded from backup!

/bin excluded from backup!

/private excluded from backup!

/Library excluded from backup!

/Applications excluded from backup!

Top Processes by CPU:

16% mds

5% WindowServer

1% EtreCheck

1% mds_stores

0% TextEdit

0% installer

0% installd

0% mDNSResponder

0% aosnotifyd

Top Processes by Memory:

100 MB TextEdit

47 MB WindowServer

27 MB installd

25 MB mds_stores

25 MB CVMCompiler

23 MB EtreCheck

18 MB Finder

16 MB Dropbox

16 MB installer

16 MB com.apple.appkit.xpc.openAndSavePanelService

Virtual Memory Statistics:

231 MB Free RAM

554 MB Active RAM

427 MB Inactive RAM

316 MB Wired RAM

810 MB Page-ins

111 MB Page-outs

Reply

Answer 7

Lexiepex

Level 6

14,102 points

Nov 18, 2013 8:43 AM in response to yeddow333

Well done, but some remnants are still there:

points 1-5:

- In Finder go to (macintosh HD) /Library/StartupItems/, in there delete 360ControlDaemon

this will delete autostart from 360Control, not uninstall.

- Go to /Library/Extensions, in there delete com.sophos.kext.sav

- In /Library/LaunchDaemons/ delete everything that has sophos in the name

- In SystemPreferences/Users&Groups/LoginItems remove the WDQuickview entry, with the minus sign underneath.

remark: if you do not find (all) the entries in /Library/LaunchDaemons, go to /System/Library/LaunchDaemons/ folder (be careful there).

Now to the rest of my earlier post:

reply to the questions in point 6-11.

Lex

Reply

Answer 8

yeddow333 Author

Level 1

0 points

Nov 18, 2013 3:45 PM in response to Lexiepex

Thanks again, I cleared it away. There is still a faded WDQuickView option in Users&Groups/LoginItems. It is off and cannot be turned on but I also cannot press the minus sign to delete it. I'm wondering if I should delete the com.apple.wdhelper.plist file I found in System/Library/LaunchDaemons.

As for your other questions:

6. I uninstalled Connect 360

7. I deleted DivX but could not find Shockwave

8. I do not tend to use Safari and Firefox simultaneously, but good advice!

9. I do use VLC and have deleted Flip4Mac!

10. I could not find OVShelper.

11. I removed the cisco software that I found.

Here is my latest report:

Hardware Information:

MacBook Pro (13-inch, Mid 2009)

MacBook Pro - model: MacBookPro5,5

1 2.26 GHz Intel Core 2 Duo CPU: 2 cores

4 GB RAM

Video Information:

NVIDIA GeForce 9400M - VRAM: 256 MB

Audio Plug-ins:

BluetoothAudioPlugIn: Version: 1.0

AirPlay: Version: 1.9

AppleAVBAudio: Version: 2.0.0

iSightAudio: Version: 7.7.3

System Software:

OS X 10.9 (13A603) - Uptime: 0 days 7:19:23

Disk Information:

ST9160314ASG disk0 : (160.04 GB)

EFI (disk0s1) <not mounted>: 209.7 MB

Macintosh HD (disk0s2) /: 159.18 GB (22.41 GB free)

Recovery HD (disk0s3) <not mounted>: 650 MB

MATSHITADVD-R UJ-868

USB Information:

Apple Internal Memory Card Reader

Apple Inc. iPhone

Apple Inc. Built-in iSight

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Computer, Inc. IR Receiver

FireWire Information:

Thunderbolt Information:

Kernel Extensions:

com.orderedbytes.driver.CMUSBDevices (4.6.0)

com.orderedbytes.driver.ControllerMateFamily (4.6.0)

Problem System Launch Daemons:

Problem System Launch Agents:

Launch Daemons:

[loaded] com.adobe.fpsaud.plist

[loaded] com.adobe.SwitchBoard.plist

[loaded] com.barebones.authd.plist

[loaded] com.microsoft.office.licensing.helper.plist

[loaded] com.sec.faxdb.plist

[loaded] org.macosforge.xquartz.privileged_startx.plist

Launch Agents:

[not loaded] com.adobe.AAM.Updater-1.0.plist

[loaded] com.adobe.CS5ServiceManager.plist

[loaded] org.macosforge.xquartz.startx.plist

User Launch Agents:

[loaded] com.adobe.AAM.Updater-1.0.plist

[loaded] com.adobe.ARM.[...].plist

User Login Items:

Dropbox

VLCStreamer

WDQuickView

3rd Party Preference Panes:

Flash Player

Perian

Internet Plug-ins:

AdobePDFViewer.plugin

AdobePDFViewerNPAPI.plugin

CouponPrinter-FireFox.plugin

Default Browser.plugin

DirectorShockwave.plugin

Flash Player.plugin

FlashPlayer-10.6.plugin

iPhotoPhotocast.plugin

JavaAppletPlugin.plugin

OfficeLiveBrowserPlugin.plugin

QuickTime Plugin.plugin

SharePointBrowserPlugin.plugin

Silverlight.plugin

User Internet Plug-ins:

Bad Fonts:

None

Time Machine:

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 159.18 GB Disk used: 136.78 GB

Destinations:

Data [Network] (Last used)

Total size: Zero KB

Total number of backups: (null)

Size of backup disk: Too small

Backup size Zero KB < (Disk used 136.78 GB X 3)

Time Machine details may not be accurate.

All volumes being backed up may not be listed.

Top Processes by CPU:

3% Safari

2% WindowServer

1% EtreCheck

1% hidd

0% Dropbox

0% netbiosd

0% fontd

0% System Preferences

0% com.apple.preferences.users.remoteservice

0% aosnotifyd

Top Processes by Memory:

147 MB com.apple.IconServicesAgent

143 MB Safari

131 MB TextEdit

115 MB softwareupdated

98 MB Finder

98 MB com.apple.WebKit.WebContent

94 MB WindowServer

70 MB Dropbox

66 MB mds_stores

37 MB Dock

Virtual Memory Statistics:

804 MB Free RAM

1.91 GB Active RAM

520 MB Inactive RAM

559 MB Wired RAM

645 MB Page-ins

0 B Page-outs

Reply

Answer 9

Linc Davis

Level 10

209,547 points

Nov 18, 2013 5:37 PM in response to yeddow333

If you have more than one user account, you must be logged in as an administrator to carry out these instructions.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Console in the icon grid.

Select the most recent panic report (with a name that begins with "Kernel" and ends in ".panic") under the heading System Diagnostic Reports on the left. If you don't see that heading, select

View ▹ Show Log List

from the menu bar. Post the entire contents of the report — the text, please, not a screenshot. In the interest of privacy, I suggest you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header and body of the report, if it’s present (it may not be.) Please don't post any other kind of diagnostic report, such as a hang report.

Reply

Answer 10

Lexiepex

Level 6

14,102 points

Nov 19, 2013 12:42 AM in response to yeddow333

wdhelper, yes throw it away (funny that it does not show in the Etrecheck list.

OVS and Shockwave are gone.

WDQuickview: if it has the box before marked, it it still instructed to start, but it will not be visible. When the app itself is not there obviously it can not start. Do you not have administrator accounts? see in the bottom, click the lock and open it with your administrator password, maybe that helps.

About the question of Linc: he is very experienced and reads the crash reports as a thriller literature, and he has the guts to read it completely, which most of us do not have! He is a professor, post the list as he asks.

Reply

Answer 11

yeddow333 Author

Level 1

0 points

Nov 19, 2013 3:54 AM in response to Lexiepex

Thank you to both replies! Unfortunately, it seems like there is no kernel panic in the Console, so perhaps I am wrong about what my issue is. I did manage to get rid of the WD QuickView thing, fortunately.

As of now, the problem persists. What seems to happen is not that the computer shuts down but that when it is asleep or inactive for a long while, the screen is unable to come back on. I formerly thought it was shutting down but realized today that while the screen was black, my connected iPod was still being charged. So rather than random shutdowns, the screen just seems to get stuck as black, presumably sleep mode. I can only get the screen to stop being black by restarting which is the process I described in the original post.

I have reset the SMC and NVRAM which has not helped. If there aren't kernel panics, I'm not sure what to do next. Sorry if my original post was misleading, guys!

Reply

Answer 12

Lexiepex

Level 6

14,102 points

Nov 19, 2013 5:04 AM in response to yeddow333

Yes, I understand: a "wake from sleep issue". Look at the same console messages and post the latest immediately after the problem. Linc will certainly come back to give his opinion.

In the meantime:

a. I have seen several times that it was solved by looking in the printer and canceling all jobs before gooing to sleep.

b. Also what helped once was setting TimeMachine to off and see if it changes something: you have to check all settings of TimeMache anyway because Etrecheck list did not find correct external disk; you may also unmount the network drive in Finder, and see what happens.

Lex

Reply

Answer 13

Linc Davis

Level 10

209,547 points

Nov 19, 2013 7:31 AM in response to yeddow333

Please read this whole message before doing anything.

This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of certain system caches.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

Reply

Answer 14

yeddow333 Author

Level 1

0 points

Nov 19, 2013 7:43 AM in response to Linc Davis

Hm, I tried booting up in safe mode and while the progress bar filled up under the apple logo, the computer randomly turned off. I restarted and now the progress bar is filling up again. Thoughts?

Reply

Answer 15

yeddow333 Author

Level 1

0 points

Nov 19, 2013 7:49 AM in response to yeddow333

The second start up worked. Should I assume that I am now in safe mode? And is there a particular test I should run or just put my computer to sleep for a while and see if the screen stays black?

Thanks!

Reply