Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

MacBook Pro Multiple Kernel Panics

I have suffered a couple of kernel panics within about a week of each other. They both seem to be caused by a memory leak. I suspect the problem may be to do with Parallels as I had Parallels open both times. Or possibly a Razer driver that I had installed and then uninstalled (but not completely as I see a kext is still loaded from Razer).


OS X 10.9.4, MacBook Pro 13" Retina Late 2012


Here's my crash log:


Any ideas?


Anonymous UUID: 42BC6CF7-3072-4C08-02DA-487C02AF368A



Thu Aug 14 12:13:44 2014

panic(cpu 3 caller 0xffffff80082521dd): "zalloc: zone map exhausted while allocating from zone buf.8192, likely due to memory leak in zone kalloc.64 (1181755008 total bytes, 18464833 elements allocated)"@/SourceCache/xnu/xnu-2422.110.17/osfmk/kern/zalloc.c:2494

Backtrace (CPU 3), Frame : Return Address

0xffffff811312b1d0 : 0xffffff8008222f79

0xffffff811312b250 : 0xffffff80082521dd

0xffffff811312b350 : 0xffffff80083c8b7a

0xffffff811312b3b0 : 0xffffff80083c856b

0xffffff811312b480 : 0xffffff80083c7831

0xffffff811312b4c0 : 0xffffff80083c7a07

0xffffff811312b4e0 : 0xffffff8008558282

0xffffff811312b540 : 0xffffff80085940ac

0xffffff811312b560 : 0xffffff8008591197

0xffffff811312b670 : 0xffffff800855a511

0xffffff811312b810 : 0xffffff800855a1d4

0xffffff811312b890 : 0xffffff800856a4c6

0xffffff811312ba60 : 0xffffff80083fd52b

0xffffff811312bac0 : 0xffffff80083d5eeb

0xffffff811312bb40 : 0xffffff80083d5844

0xffffff811312bc00 : 0xffffff80083f1712

0xffffff811312bd80 : 0xffffff80083e99cc

0xffffff811312bf50 : 0xffffff8008640a33

0xffffff811312bfb0 : 0xffffff80082f3f46



BSD process name corresponding to current thread: LaunchBar



Mac OS version:

13E28



Kernel version:

Darwin Kernel Version 13.3.0: Tue Jun 3 21:27:35 PDT 2014; root:xnu-2422.110.17~1/RELEASE_X86_64

Kernel UUID: BBFADD17-672B-35A2-9B7F-E4B12213E4B8

Kernel slide: 0x0000000008000000

Kernel text base: 0xffffff8008200000

System model name: MacBookPro10,2 (Mac-AFD8A9D944EA4843)



System uptime in nanoseconds: 217194732537479

vm objects:43552096

vm object hash entri:5611560

VM map entries:8296720

Reserved VM map entr:1672960

pv_list:13934592

vm pages:145929312

kalloc.16:98273296

kalloc.32:121959936

kalloc.64:1181755008

kalloc.128:813334528

kalloc.256:587083776

kalloc.512:42057728

kalloc.1024:2314240

kalloc.2048:1662976

kalloc.4096:8478720

kalloc.8192:4579328

mem_obj_control:2724304

wait queue links:1094256

ipc ports:4157440

threads:1366752

vnodes:31705680

namecache:13872000

HFS node:43296656

HFS fork:14839808

decmpfs_cnode:2330496

buf.8192:112066560

ubc_info zone:10147896

vnode pager structur:3434000

compressor_pager:3515904

compressor_segment:2028384

Kernel Stacks:3506176

PageTables:76591104

Kalloc.Large:34666154



Backtrace suspected of leaking: (outstanding bytes: 88576)

0xffffff8008251ce3

0xffffff800822aa3f

0xffffff800864e7dd

0xffffff80086b9987

0xffffff7f8a35f154

0xffffff7f8a35f2c0

0xffffff7f8a367170

0xffffff7f8a366bdc

0xffffff7f8a363310

0xffffff7f8a3608a0

0xffffff80086d03cd

0xffffff80086cdf7f

0xffffff80082b6998

0xffffff8008226bc1

0xffffff80082139c5

Kernel Extensions in backtrace:

com.parallels.kext.hypervisor(9.0)[00000000-0000-0000-0000-000000000000]@0xffff ff7f8a35e000->0xffffff7f8a39cfff

dependency: com.apple.iokit.IOPCIFamily(2.9)[4662B11D-2ECA-315D-875C-618C97CDAB2A]@0xffffff 7f8887c000

dependency: com.apple.iokit.IOACPIFamily(1.4)[045D5D6F-AD1E-36DB-A249-A346E2B48E54]@0xfffff f7f88d7c000



last loaded kext at 217051919271042: com.apple.iokit.SCSITaskUserClient 3.6.6 (addr 0xffffff7f8a3e9000, size 36864)

last unloaded kext at 217112970814017: com.apple.driver.AppleUSBCDC 4.2.1b5 (addr 0xffffff7f8a1aa000, size 16384)

loaded kexts:

com.parallels.filesystems.prlufs 2010.12.28

com.parallels.kext.vnic 9.0 24237.1028877

com.parallels.kext.netbridge 9.0 24237.1028877

com.parallels.kext.hidhook 9.0 24237.1028877

com.parallels.kext.hypervisor 9.0 24237.1028877

com.parallels.kext.usbconnect 9.0 24237.1028877

com.razer.common.razerhid 9.35

com.apple.driver.AppleUSBDisplays 360.8.14

com.apple.iokit.AppleBCM5701Ethernet 3.8.1b2

com.apple.driver.AppleFWOHCI 5.0.2

com.apple.driver.AppleBluetoothMultitouch 80.14

com.apple.filesystems.afpfs 11.1

com.apple.nke.asp-tcp 8.0.1

com.apple.filesystems.autofs 3.0

com.apple.iokit.IOBluetoothSerialManager 4.2.6f1

com.apple.driver.AudioAUUC 1.60

com.apple.driver.X86PlatformShim 1.0.0

com.apple.driver.AGPM 100.14.28

com.apple.driver.ApplePlatformEnabler 2.0.9d6

com.apple.driver.AppleMikeyHIDDriver 124

com.apple.driver.AppleUpstreamUserClient 3.5.13

com.apple.driver.AppleHDA 2.6.3f4

com.apple.driver.AppleMikeyDriver 2.6.3f4

com.apple.driver.AppleSMCLMU 2.0.4d1

com.apple.driver.AppleLPC 1.7.0

com.apple.iokit.IOUserEthernet 1.0.0d1

com.apple.Dont_Steal_Mac_OS_X 7.0.0

com.apple.driver.AppleHWAccess 1

com.apple.driver.AppleThunderboltIP 1.1.2

com.apple.driver.AppleSMCPDRC 1.0.0

com.apple.driver.AppleIntelHD4000Graphics 8.2.8

com.apple.driver.AppleIntelFramebufferCapri 8.2.8

com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.2.6f1

com.apple.driver.AppleBacklight 170.3.5

com.apple.driver.AppleMCCSControl 1.2.5

com.apple.driver.SMCMotionSensor 3.0.4d1

com.apple.driver.AppleUSBTCButtons 240.2

com.apple.driver.AppleUSBTCKeyboard 240.2

com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeLZVN 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1

com.apple.BootCache 35

com.apple.driver.XsanFilter 404

com.apple.iokit.IOAHCIBlockStorage 2.6.0

com.apple.driver.AppleUSBHub 683.4.0

com.apple.driver.AppleSDXC 1.5.2

com.apple.driver.AirPort.Brcm4331 700.20.22

com.apple.driver.AppleAHCIPort 3.0.5

com.apple.driver.AppleUSBEHCI 660.4.0

com.apple.driver.AppleUSBXHCI 683.4.0

com.apple.driver.AppleSmartBatteryManager 161.0.0

com.apple.driver.AppleACPIButtons 2.0

com.apple.driver.AppleRTC 2.0

com.apple.driver.AppleHPET 1.8

com.apple.driver.AppleSMBIOS 2.1

com.apple.driver.AppleACPIEC 2.0

com.apple.driver.AppleAPIC 1.7

com.apple.driver.AppleIntelCPUPowerManagementClient 217.92.1

com.apple.nke.applicationfirewall 153

com.apple.security.quarantine 3

com.apple.driver.AppleIntelCPUPowerManagement 217.92.1

com.apple.iokit.IOSCSIBlockCommandsDevice 3.6.6

com.apple.iokit.IOUSBMassStorageClass 3.6.0

com.apple.driver.AppleUSBHIDKeyboard 170.15

com.apple.driver.AppleHIDKeyboard 170.15

com.apple.driver.AppleUSBAudio 2.9.5f8

com.apple.iokit.IOFireWireIP 2.2.6

com.apple.iokit.IOEthernetAVBController 1.0.3b4

com.apple.driver.mDNSOffloadUserClient 1.0.1b5

com.apple.iokit.IOFireWireFamily 4.5.5

com.apple.driver.AppleMultitouchDriver 245.13

com.apple.driver.AppleThunderboltPCIUpAdapter 1.4.5

com.apple.driver.AppleThunderboltDPOutAdapter 3.1.7

com.apple.security.SecureRemotePassword 1.0

com.apple.driver.IOBluetoothHIDDriver 4.2.6f1

com.apple.kext.triggers 1.0

com.apple.iokit.IOSerialFamily 10.0.7

com.apple.iokit.IOSCSIArchitectureModelFamily 3.6.6

com.apple.driver.DspFuncLib 2.6.3f4

com.apple.vecLib.kext 1.0.0

com.apple.driver.AppleSMBusPCI 1.0.12d1

com.apple.driver.AppleHDAController 2.6.3f4

com.apple.iokit.IOHDAFamily 2.6.3f4

com.apple.driver.X86PlatformPlugin 1.0.0

com.apple.iokit.IOBluetoothFamily 4.2.6f1

com.apple.driver.IOPlatformPluginFamily 5.7.1d6

com.apple.iokit.IOSurface 91.1

com.apple.iokit.IOAcceleratorFamily2 98.22

com.apple.AppleGraphicsDeviceControl 3.6.22

com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.2.6f1

com.apple.iokit.IOAudioFamily 1.9.7fc2

com.apple.kext.OSvKernDSPLib 1.14

com.apple.driver.AppleBacklightExpert 1.0.4

com.apple.iokit.IONDRVSupport 2.4.1

com.apple.driver.AppleSMBusController 1.0.12d1

com.apple.iokit.IOGraphicsFamily 2.4.1

com.apple.driver.AppleSMC 3.1.8

com.apple.driver.AppleUSBMultitouch 240.9

com.apple.iokit.IOUSBHIDDriver 660.4.0

com.apple.driver.AppleThunderboltDPInAdapter 3.1.7

com.apple.driver.AppleThunderboltDPAdapterFamily 3.1.7

com.apple.driver.AppleThunderboltPCIDownAdapter 1.4.5

com.apple.driver.CoreStorage 380

com.apple.driver.AppleUSBMergeNub 650.4.0

com.apple.driver.AppleUSBComposite 656.4.1

com.apple.driver.AppleThunderboltNHI 2.0.1

com.apple.iokit.IOThunderboltFamily 3.3.1

com.apple.iokit.IOUSBUserClient 660.4.2

com.apple.iokit.IO80211Family 640.36

com.apple.iokit.IONetworkingFamily 3.2

com.apple.iokit.IOAHCIFamily 2.6.5

com.apple.iokit.IOUSBFamily 683.4.0

com.apple.driver.AppleEFINVRAM 2.0

com.apple.driver.AppleEFIRuntime 2.0

com.apple.iokit.IOHIDFamily 2.0.0

com.apple.iokit.IOSMBusFamily 1.1

com.apple.security.sandbox 278.11.1

com.apple.kext.AppleMatch 1.0.0d1

com.apple.security.TMSafetyNet 7

com.apple.driver.AppleKeyStore 2

com.apple.driver.DiskImages 371.1

com.apple.iokit.IOStorageFamily 1.9

com.apple.iokit.IOReportFamily 23

com.apple.driver.AppleFDEKeyStore 28.30

com.apple.driver.AppleACPIPlatform 2.0

com.apple.iokit.IOPCIFamily 2.9

com.apple.iokit.IOACPIFamily 1.4

com.apple.kec.pthread 1

com.apple.kec.corecrypto 1.0

Model: MacBookPro10,2, BootROM MBP102.0106.B03, 2 processors, Intel Core i5, 2.5 GHz, 8 GB, SMC 2.6f59

Graphics: Intel HD Graphics 4000, Intel HD Graphics 4000, Built-In

Memory Module: BANK 0/DIMM0, 4 GB, DDR3, 1600 MHz, 0x02FE, 0x45424A3831554738454255302D474E2D4620

Memory Module: BANK 1/DIMM0, 4 GB, DDR3, 1600 MHz, 0x02FE, 0x45424A3831554738454255302D474E2D4620

AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x10F), Broadcom BCM43xx 1.0 (5.106.98.100.22)

Bluetooth: Version 4.2.6f1 14216, 3 services, 23 devices, 1 incoming serial ports

Network Service: Display Ethernet, Ethernet, en5

Network Service: Wi-Fi, AirPort, en0

PCI Card: Apple 57761-B0, Ethernet Controller, Thunderbolt@191,0,0

PCI Card: pci11c1,5901, IEEE 1394 Open HCI, Thunderbolt@190,0,0

PCI Card: pci12d8,400e, USB Open Host Controller, Thunderbolt@196,0,0

PCI Card: pci12d8,400e, USB Open Host Controller, Thunderbolt@196,0,1

PCI Card: pci12d8,400f, USB Enhanced Host Controller, Thunderbolt@196,0,2

Serial ATA Device: APPLE SSD SM256E, 251 GB

USB Device: Hub

USB Device: FaceTime HD Camera (Built-in)

USB Device: Hub

USB Device: LaCie Rugged FW/USB

USB Device: Hub

USB Device: Apple Internal Keyboard / Trackpad

USB Device: BRCM20702 Hub

USB Device: Bluetooth USB Host Controller

USB Device: Hub

USB Device: Keyboard Hub

USB Device: Apple Keyboard

USB Device: Apple Thunderbolt Display

USB Device: FaceTime HD Camera (Display)

USB Device: Display Audio

Thunderbolt Bus: MacBook Pro, Apple Inc., 23.4

Thunderbolt Device: Thunderbolt Display, Apple Inc., 1, 26.2

MacBook Pro (Retina, 13-inch, Late 2012), OS X Mavericks (10.9.4)

Posted on Aug 13, 2014 5:25 PM

Reply
8 replies

Aug 13, 2014 5:35 PM in response to MrOriginal

I see a kext is still loaded from Razer

Any third-party software that doesn't install by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

Aug 13, 2014 6:03 PM in response to MrOriginal

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

Don't be put off merely by the seeming complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can read it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of the script have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts SerialATA 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' com.clark.\* \*dropbox \*GoogleDr\* \*k.AutoCAD\* \*k.Maya\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 "` route -n get default|awk '/e:/{print $2}' `" 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB com.apple.AirPortBaseStationAgent 464843899 51 5120 files );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' /^ *$|CSConfigDot/d;s/^ */ /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/;/Shared/!s/\/Users\/[^/]+/~/g ' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { if(n<200) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { print "'${p[41]}'";if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$|'${p[41]}'/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/^root$/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1100) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { print "'${p[41]}'.plist\t'${p[42]}'";if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\\([0-9]+\\)\\(.+\\)/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p) if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|(Bo|PO).+ sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n ...and %s more line(s)\n",l-L);} ' ' /^ +[NP].+ =/h;/^( +D.+[{]|[}])/{ g;s/.+= //p;};' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil 'PlistBuddy 2>&1 -c "Print' whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test );c2=(com.apple.loginwindow\ LoginHook '" /L*/P*/loginw*' '" L*/P*/*loginit*' 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name In*t -exec '"${c1[14]}"' :CFBundleDisplayName" {} \;|sort|uniq' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' :${p[35]}\" :Label\" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'bad |Beac|caug|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cgh] ! -name *ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '-L {/{S*/,},}L*/Lau* -type f' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Ca*/*/Ex,Compon,Ex,Inter,iTu*/*P,Keyb,Mail/B,Pr*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t /S*/L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'|sort|uniq -c|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" );N1=${#c2[@]};for j in {0..9};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents launchd Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching SATA Descriptors );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0(){ [[ "$v" ]]&&echo "$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "$s"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 50;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 35 49 61 51;D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;A2 4 20 21;B7 6;B2 9;A4 14 7 52 9;B2 10;B6 9 10 4;C3 25;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D13 14 1 48 42;D12 34 43 53 44;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 14 2 48 43;D13 4 5 32 1;D13 4 3 60 5;D12 26 48 49 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D22 4 4 50 0;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press thereturn key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press returnthree times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line

[Process completed]

to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report the results. No harm will be done.

12. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.

______________________________________________________________

Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Aug 14, 2014 3:32 AM in response to MrOriginal

I changed my mind after doing some research and choosing to run the script without entering my password.


Start time: 22:25:11 08/14/14



Model Identifier: MacBookPro10,2

System Version: OS X 10.9.4 (13E28)

Kernel Version: Darwin 13.3.0

Time since boot: 36 minutes



Root access: No



FileVault: On



Log



Aug 14 03:51:29 process prl_vm_app[38751] caught causing excessive wakeups. EXC_RESOURCE supressed due to audio playback

Aug 14 03:55:46 process prl_vm_app[38751] caught causing excessive wakeups. EXC_RESOURCE supressed due to audio playback

Aug 14 04:15:42 process prl_vm_app[38751] caught causing excessive wakeups. Observed wakeups rate (per sec): 283; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 1553107

Aug 14 04:25:35 process prl_vm_app[38751] caught causing excessive wakeups. Observed wakeups rate (per sec): 150; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 1711248

Aug 14 11:46:04 vnic0: failed to restore 1 suspended link-layer multicast membership(s) (err=22)

Aug 14 11:46:04 vnic1: failed to restore 1 suspended link-layer multicast membership(s) (err=22)

Aug 14 11:50:11 process prl_vm_app[40869] caught causing excessive wakeups. EXC_RESOURCE supressed due to audio playback

Aug 14 12:13:43 jnl: b(1, 4): replay_journal: from: 13794816 to: 16825344 (joffset 0x74e000)

Aug 14 12:13:43 jnl: b(1, 4): journal replay done.

Aug 14 12:13:46 hfs_mountfs: hfs_early_journal_init failed, erroring out

Aug 14 12:13:46 hfs_mount: hfs_mountfs returned error=22 for device disk2s2

Aug 14 12:13:46 jnl: disk2s2: replay_journal: from: 16628224 to: 18301440 (joffset 0x951000)

Aug 14 12:13:48 jnl: disk2s2: journal replay done.

Aug 14 17:13:06 WARNING: hibernate_page_list_setall skipped 4939 xpmapped pages

Aug 14 17:15:47 wl0: Roamed or switched channel, reason #4, bssid 00

Aug 14 17:26:46 Sound assertion in AppleHDAFunctionGroup at line 1057

Aug 14 17:34:53 wl0: Roamed or switched channel, reason #2, bssid 00

Aug 14 18:14:19 MacAuthEvent en0 Auth result for: 00 Auth timed out

Aug 14 18:29:20 MacAuthEvent en0 Auth result for: 00 Auth timed out

Aug 14 18:29:20 wl0: Roamed or switched channel, reason #8, bssid 00

Aug 14 18:31:26 MacAuthEvent en0 Auth result for: 00 Auth timed out

Aug 14 18:31:26 wl0: Roamed or switched channel, reason #8, bssid 00

Aug 14 21:48:10 ### ERROR: opCode = 0x0406 (Disconnect) -- send request failed (err=0xE00002EB (kIOReturnAborted))

Aug 14 22:23:56 vnic0: promiscuous mode enable failed

Aug 14 22:23:56 vnic1: promiscuous mode enable failed



Activity



CPU: user 1%, system 19%



kexts



com.razer.common.razerhid (9.35)

com.parallels.kext.usbconnect (9.0 24237.1028877)

com.parallels.kext.hypervisor (9.0 24237.1028877)

com.parallels.kext.hidhook (9.0 24237.1028877)

com.parallels.kext.netbridge (9.0 24237.1028877)

com.parallels.kext.vnic (9.0 24237.1028877)

com.parallels.filesystems.prlufs (2010.12.28)



Agents



com.github.GitHub.Conduit

2BUA8C4S2C.com.agilebits.onepassword-osx-helper

com.paragon.ntfs.trial

org.macosforge.xquartz.startx

com.pharos.popup

com.pharos.notify

com.paragon.updater

com.bjango.istatmenusnotifications

com.bjango.istatmenusagent

com.adobe.AdobeCreativeCloud

com.spotify.webhelper

com.google.keystone.user.agent

com.backblaze.bzbmenu

com.adobe.ARM.UUID



launchd



/System/Library/LaunchAgents/com.paragon.NTFS.notify.plist

- com.paragon.ntfs.trial

/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

- com.adobe.AAM.Startup-1.0

/Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist

- com.adobe.AdobeCreativeCloud

/Library/LaunchAgents/com.bjango.istatmenusagent.plist

- com.bjango.istatmenusagent

/Library/LaunchAgents/com.bjango.istatmenusnotifications.plist

- com.bjango.istatmenusnotifications

/Library/LaunchAgents/com.paragon.updater.plist

- com.paragon.updater

/Library/LaunchAgents/com.pharos.notify.plist

- com.pharos.notify

/Library/LaunchAgents/com.pharos.popup.plist

- com.pharos.popup

/Library/LaunchAgents/org.macosforge.xquartz.startx.plist

- org.macosforge.xquartz.startx

/Library/LaunchDaemons/com.backblaze.bzserv.plist

- com.backblaze.bzserv

/Library/LaunchDaemons/com.bjango.istatmenusdaemon.plist

- com.bjango.istatmenusdaemon

/Library/LaunchDaemons/com.bourgeoisbits.cloak.cloakd.plist

- com.bourgeoisbits.cloak.cloakd

/Library/LaunchDaemons/com.bourgeoisbits.cloak.cloakproxyd.plist

- com.bourgeoisbits.cloak.cloakproxyd

/Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist

- org.macosforge.xquartz.privileged_startx

Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

- com.adobe.AAM.Scheduler-1.0

Library/LaunchAgents/com.adobe.ARM.UUID.plist

- com.adobe.ARM.UUID

Library/LaunchAgents/com.backblaze.bzbmenu.plist

- com.backblaze.bzbmenu

Library/LaunchAgents/com.google.keystone.agent.plist

- com.google.keystone.user.agent

Library/LaunchAgents/com.spotify.webhelper.plist

- com.spotify.webhelper



Bundles



/Library/Extensions/RazerHid.kext

- com.razer.common.razerhid

/Library/Extensions/RazerHid.kext/Contents/Resources

- com.razer.common.razerhid

/Library/Internet Plug-Ins/AdobeAAMDetect.plugin

- com.AdobeAAMDetectLib.AdobeAAMDetect

/Library/Internet Plug-ins Disabled/AdobePDFViewer.plugin

- com.adobe.acrobat.pdfviewer

/Library/Internet Plug-ins Disabled/AdobePDFViewerNPAPI.plugin

- com.adobe.acrobat.pdfviewerNPAPI

/Library/PreferencePanes/BackblazeBackup.prefPane

- com.backblaze.BackblazeBackup

/Library/PreferencePanes/NTFSforMacOSX.prefPane

- com.paragon-software.filesystems.ntfs.prefpanel

/Library/PreferencePanes/TeXDistPrefPane.prefPane

- comp.text.tex.distribution.preference

/Library/ScriptingAdditions/Adobe Unit Types.osax

- N/A

/Library/ScriptingAdditions/BartenderHelper.osax

- com.surteesstudios.BartenderHelper

Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

Library/Caches/com.apple.Safari/Extensions/1Password.safariextension

- com.agilebits.onepassword4-safari

Library/Caches/com.apple.Safari/Extensions/OpenIE.safariextension

- com.parallels.openinie

Library/Services/Batch Sequential Rename.workflow

- N/A

Library/Services/Copy Path.workflow

- N/A



dylibs



/usr/lib/libUFSDNTFS.dylib



Apps



/Applications/Dropbox.app



Contents of /etc/pf.conf



scrub-anchor "com.apple/*"

nat-anchor "com.apple/*"

rdr-anchor "com.apple/*"

dummynet-anchor "com.apple/*"

anchor "com.apple/*"

anchor "com.getcloak"

load anchor "com.apple" from "/etc/pf.anchors/com.apple"



Contents of /etc/ssh_config (ASCII English text, with very long lines)



Host *

SendEnv LANG LC_*

Host *

XAuthLocation /opt/X11/bin/xauth



Contents of /etc/sshd_config



SyslogFacility AUTHPRIV

AuthorizedKeysFile .ssh/authorized_keys

UsePrivilegeSeparation sandbox # Default for new installations.

AcceptEnv LANG LC_*

Subsystem sftp /usr/libexec/sftp-server

XAuthLocation /opt/X11/bin/xauth



Contents of /System/Library/LaunchAgents/com.paragon.NTFS.notify.plist (XML document text)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.paragon.ntfs.trial</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PreferencePanes/NTFSforMacOSX.prefPane/Contents/MacOS/notifica tor</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

</dict>

</plist>



Contents of /System/Library/LaunchDaemons/com.apple.rpmuxd.plist (Apple binary property list)



bplist00” \MachServices_ ProgramArgumentsULabel— _ com.apple.rpmuxd ° _ /usr/libexec/rpmuxd /58KLN



Firewall: On



Safari extensions



1Password

Open in Internet Explorer



Restricted files: 220



Elapsed time (s): 133

Aug 14, 2014 7:53 AM in response to MrOriginal

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/Library/Extensions/RazerHid.kext

Right-click or control-click the highlighted line and select

Services Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. You may be prompted for your administrator login password. Restart the computer and empty the Trash.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Aug 14, 2014 3:24 PM in response to Linc Davis

Thanks Linc. I noticed that a kext from Parallels called com.parallels.kext.hypervisor(9.0) was in the backtrace of my kernel panic log. I remember enabling a feature called Adaptive Hypervisor in Parallels some days ago that dynamically allocates system resources to the virtual machine. I think this sounds like a likely candidate for my kernel panics, so I have disabled the Adaptive Hypervisor feature and will see if the issue persists. If it does persist, I will remove RazerHid.kext.


I am still using my Razer mouse, just without Razer Synapse installed, which clearly leaves behind kext's when uninstalled, but this may be convenient as I still want my mouse to work.

Sep 4, 2014 6:36 PM in response to Linc Davis

Hi Linc,


I just had another kernel panic. This time Parallels wasn't open and the Razer kext was in the backtrace. I had reinstalled Razer Synapse and got a new mouse that no longer has the issue of sending random button presses with Synapse installed. Any advice? Should I uninstall Synapse, uninstall the kext and reinstall Synapse?


Here's my kernel panic log:


Anonymous UUID: 42BC6CF7-3072-4C08-02DA-487C02AF368A



Fri Sep 5 13:30:29 2014

panic(cpu 0 caller 0xffffff8008e521dd): "zalloc: zone map exhausted while allocating from zone kalloc.8192, likely due to memory leak in zone kalloc.64 (1805920704 total bytes, 28217475 elements allocated)"@/SourceCache/xnu/xnu-2422.110.17/osfmk/kern/zalloc.c:2494

Backtrace (CPU 0), Frame : Return Address

0xffffff8114673c70 : 0xffffff8008e22f79

0xffffff8114673cf0 : 0xffffff8008e521dd

0xffffff8114673df0 : 0xffffff8008e2aa3f

0xffffff8114673e20 : 0xffffff8008e13026

0xffffff8114673e50 : 0xffffff8008e26b51

0xffffff8114673e80 : 0xffffff8008e139c5

0xffffff8114673ef0 : 0xffffff8008e1e013

0xffffff8114673f70 : 0xffffff8008ec9b8d

0xffffff8114673fb0 : 0xffffff8008ef3f66



BSD process name corresponding to current thread: WindowServer



Mac OS version:

13E28



Kernel version:

Darwin Kernel Version 13.3.0: Tue Jun 3 21:27:35 PDT 2014; root:xnu-2422.110.17~1/RELEASE_X86_64

Kernel UUID: BBFADD17-672B-35A2-9B7F-E4B12213E4B8

Kernel slide: 0x0000000008c00000

Kernel text base: 0xffffff8008e00000

System model name: MacBookPro10,2 (Mac-AFD8A9D944EA4843)



System uptime in nanoseconds: 109946840968602

vm objects:45583776

vm object hash entri:7615400

VM map entries:11991040

pv_list:14893056

vm pages:145728576

kalloc.16:139364544

kalloc.32:418384512

kalloc.64:1805920704

kalloc.128:198250496

kalloc.256:124395520

kalloc.512:37183488

kalloc.1024:3936256

kalloc.2048:5480448

kalloc.4096:17227776

kalloc.8192:13500416

mem_obj_control:3764640

wait queue links:1110456

ipc ports:3699520

ipc kmsgs:1085440

threads:1617360

vnodes:31705680

namecache:13586400

HFS node:42990304

HFS fork:13946880

cluster_write:2591600

buf.4096:6434816

buf.8192:121339904

ubc_info zone:9256104

dtrace.dtrace_probe_:28598272

vnode pager structur:3987480

compressor_pager:4878720

compressor_segment:2389968

dtrace.fasttrap_trac:14492160

dtrace.fasttrap_prob:10249680

dtrace.fasttrap_prob:4085136

Kernel Stacks:6635520

PageTables:90705920

Kalloc.Large:138632615



Backtrace suspected of leaking: (outstanding bytes: 42048)

0xffffff8008e51ce3

0xffffff8008e2aa3f

0xffffff800924e7dd

0xffffff8009264951

0xffffff80092963d3

0xffffff800924d85e

0xffffff800924da27

0xffffff8009291233

0xffffff8009296a34

0xffffff7f896d7eb8

0xffffff7f896d304c

Kernel Extensions in backtrace:

com.razer.common.razerhid(9.35)[0A917EFD-D323-36E1-AE4A-288047813989]@0xffffff7 f896cd000->0xffffff7f896e5fff

dependency: com.apple.iokit.IOUSBFamily(683.4.0)[7595281D-D047-3715-9044-98F46B62F845]@0xff ffff7f894ab000

dependency: com.apple.iokit.IOHIDFamily(2.0.0)[994495B5-FB34-3DB5-B47A-D2A732E52F33]@0xffff ff7f8956d000

dependency: com.apple.iokit.IOUSBHIDDriver(660.4.0)[ABEFEB9E-8AF5-3927-93D6-205DD1EA6425]@0 xffffff7f895f2000

dependency: com.apple.driver.IOBluetoothHIDDriver(4.2.6f1)[37DE58F3-99F5-319C-B922-79CB88FC 5C67]@0xffffff7f896b9000



last loaded kext at 108624563546399: com.apple.driver.AppleIntelMCEReporter 104 (addr 0xffffff7f8adc3000, size 49152)

last unloaded kext at 108691128163623: com.apple.driver.AppleIntelMCEReporter 104 (addr 0xffffff7f8adc3000, size 32768)

loaded kexts:

com.razer.common.razerhid 9.35

com.apple.filesystems.smbfs 2.0.2

com.apple.filesystems.afpfs 11.1

com.apple.nke.asp-tcp 8.0.1

com.apple.driver.AppleBluetoothMultitouch 80.14

com.apple.filesystems.autofs 3.0

com.apple.iokit.IOBluetoothSerialManager 4.2.6f1

com.apple.driver.AudioAUUC 1.60

com.apple.driver.AGPM 100.14.28

com.apple.driver.ApplePlatformEnabler 2.0.9d6

com.apple.driver.X86PlatformShim 1.0.0

com.apple.driver.AppleMikeyHIDDriver 124

com.apple.driver.AppleHDA 2.6.3f4

com.apple.driver.AppleMikeyDriver 2.6.3f4

com.apple.driver.AppleUSBDisplays 360.8.14

com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.2.6f1

com.apple.iokit.IOUserEthernet 1.0.0d1

com.apple.Dont_Steal_Mac_OS_X 7.0.0

com.apple.driver.AppleHWAccess 1

com.apple.driver.AppleUpstreamUserClient 3.5.13

com.apple.driver.AppleLPC 1.7.0

com.apple.driver.AppleSMCPDRC 1.0.0

com.apple.driver.AppleBacklight 170.3.5

com.apple.driver.AppleMCCSControl 1.2.5

com.apple.driver.AppleSMCLMU 2.0.4d1

com.apple.driver.AppleThunderboltIP 1.1.2

com.apple.driver.AppleIntelHD4000Graphics 8.2.8

com.apple.driver.AppleIntelFramebufferCapri 8.2.8

com.apple.driver.SMCMotionSensor 3.0.4d1

com.apple.driver.AppleUSBTCButtons 240.2

com.apple.driver.AppleUSBTCKeyboard 240.2

com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeLZVN 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1

com.apple.BootCache 35

com.apple.driver.XsanFilter 404

com.apple.iokit.IOAHCIBlockStorage 2.6.0

com.apple.iokit.AppleBCM5701Ethernet 3.8.1b2

com.apple.driver.AppleFWOHCI 5.0.2

com.apple.driver.AirPort.Brcm4331 700.20.22

com.apple.driver.AppleSDXC 1.5.2

com.apple.driver.AppleUSBHub 683.4.0

com.apple.driver.AppleAHCIPort 3.0.5

com.apple.driver.AppleUSBEHCI 660.4.0

com.apple.driver.AppleUSBXHCI 683.4.0

com.apple.driver.AppleSmartBatteryManager 161.0.0

com.apple.driver.AppleACPIButtons 2.0

com.apple.driver.AppleRTC 2.0

com.apple.driver.AppleHPET 1.8

com.apple.driver.AppleSMBIOS 2.1

com.apple.driver.AppleACPIEC 2.0

com.apple.driver.AppleAPIC 1.7

com.apple.driver.AppleIntelCPUPowerManagementClient 217.92.1

com.apple.nke.applicationfirewall 153

com.apple.security.quarantine 3

com.apple.driver.AppleIntelCPUPowerManagement 217.92.1

com.apple.security.SecureRemotePassword 1.0

com.apple.driver.AppleMultitouchDriver 245.13

com.apple.kext.triggers 1.0

com.apple.iokit.IOSerialFamily 10.0.7

com.apple.iokit.IOSCSIArchitectureModelFamily 3.6.6

com.apple.driver.DspFuncLib 2.6.3f4

com.apple.vecLib.kext 1.0.0

com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.2.6f1

com.apple.driver.AppleSMBusPCI 1.0.12d1

com.apple.iokit.IOFireWireIP 2.2.6

com.apple.driver.AppleSMBusController 1.0.12d1

com.apple.driver.AppleHDAController 2.6.3f4

com.apple.iokit.IOHDAFamily 2.6.3f4

com.apple.driver.X86PlatformPlugin 1.0.0

com.apple.driver.IOPlatformPluginFamily 5.7.1d6

com.apple.driver.AppleUSBAudio 2.9.5f8

com.apple.iokit.IOAudioFamily 1.9.7fc2

com.apple.kext.OSvKernDSPLib 1.14

com.apple.iokit.IOSurface 91.1

com.apple.iokit.IOAcceleratorFamily2 98.22

com.apple.AppleGraphicsDeviceControl 3.6.22

com.apple.driver.AppleBacklightExpert 1.0.4

com.apple.iokit.IONDRVSupport 2.4.1

com.apple.iokit.IOGraphicsFamily 2.4.1

com.apple.driver.AppleSMC 3.1.8

com.apple.driver.AppleUSBHIDKeyboard 170.15

com.apple.driver.AppleHIDKeyboard 170.15

com.apple.driver.IOBluetoothHIDDriver 4.2.6f1

com.apple.iokit.IOBluetoothFamily 4.2.6f1

com.apple.driver.AppleUSBMultitouch 240.9

com.apple.iokit.IOUSBHIDDriver 660.4.0

com.apple.driver.AppleThunderboltDPInAdapter 3.1.7

com.apple.driver.AppleThunderboltDPOutAdapter 3.1.7

com.apple.driver.AppleThunderboltDPAdapterFamily 3.1.7

com.apple.driver.AppleThunderboltPCIUpAdapter 1.4.5

com.apple.driver.AppleThunderboltPCIDownAdapter 1.4.5

com.apple.driver.CoreStorage 380

com.apple.driver.AppleUSBMergeNub 650.4.0

com.apple.driver.AppleUSBComposite 656.4.1

com.apple.iokit.IOEthernetAVBController 1.0.3b4

com.apple.driver.mDNSOffloadUserClient 1.0.1b5

com.apple.iokit.IOFireWireFamily 4.5.5

com.apple.driver.AppleThunderboltNHI 2.0.1

com.apple.iokit.IOThunderboltFamily 3.3.1

com.apple.iokit.IO80211Family 640.36

com.apple.iokit.IONetworkingFamily 3.2

com.apple.iokit.IOAHCIFamily 2.6.5

com.apple.iokit.IOUSBUserClient 660.4.2

com.apple.iokit.IOUSBFamily 683.4.0

com.apple.driver.AppleEFINVRAM 2.0

com.apple.driver.AppleEFIRuntime 2.0

com.apple.iokit.IOHIDFamily 2.0.0

com.apple.iokit.IOSMBusFamily 1.1

com.apple.security.sandbox 278.11.1

com.apple.kext.AppleMatch 1.0.0d1

com.apple.security.TMSafetyNet 7

com.apple.driver.AppleKeyStore 2

com.apple.driver.DiskImages 371.1

com.apple.iokit.IOStorageFamily 1.9

com.apple.iokit.IOReportFamily 23

com.apple.driver.AppleFDEKeyStore 28.30

com.apple.driver.AppleACPIPlatform 2.0

com.apple.iokit.IOPCIFamily 2.9

com.apple.iokit.IOACPIFamily 1.4

com.apple.kec.pthread 1

com.apple.kec.corecrypto 1.0

Model: MacBookPro10,2, BootROM MBP102.0106.B03, 2 processors, Intel Core i5, 2.5 GHz, 8 GB, SMC 2.6f59

Graphics: Intel HD Graphics 4000, Intel HD Graphics 4000, Built-In

Memory Module: BANK 0/DIMM0, 4 GB, DDR3, 1600 MHz, 0x02FE, 0x45424A3831554738454255302D474E2D4620

Memory Module: BANK 1/DIMM0, 4 GB, DDR3, 1600 MHz, 0x02FE, 0x45424A3831554738454255302D474E2D4620

AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x10F), Broadcom BCM43xx 1.0 (5.106.98.100.22)

Bluetooth: Version 4.2.6f1 14216, 3 services, 23 devices, 1 incoming serial ports

Network Service: Display Ethernet, Ethernet, en5

Network Service: Wi-Fi, AirPort, en0

PCI Card: pci11c1,5901, IEEE 1394 Open HCI, Thunderbolt@190,0,0

PCI Card: pci12d8,400e, USB Open Host Controller, Thunderbolt@196,0,0

PCI Card: pci12d8,400e, USB Open Host Controller, Thunderbolt@196,0,1

PCI Card: pci12d8,400f, USB Enhanced Host Controller, Thunderbolt@196,0,2

PCI Card: Apple 57761-B0, Ethernet Controller, Thunderbolt@191,0,0

Serial ATA Device: APPLE SSD SM256E, 251 GB

USB Device: Hub

USB Device: FaceTime HD Camera (Built-in)

USB Device: Hub

USB Device: Hub

USB Device: BRCM20702 Hub

USB Device: Bluetooth USB Host Controller

USB Device: Apple Internal Keyboard / Trackpad

USB Device: Hub

USB Device: Keyboard Hub

USB Device: Apple Keyboard

USB Device: FaceTime HD Camera (Display)

USB Device: Display Audio

USB Device: Apple Thunderbolt Display

Thunderbolt Bus: MacBook Pro, Apple Inc., 23.4

Thunderbolt Device: Thunderbolt Display, Apple Inc., 1, 26.2

MacBook Pro Multiple Kernel Panics

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.