com.apple.xpc.launchd & com.apple.mdworker.bundles pollute logs with errors

In my case yes, most of the files were found on the boot drive: in /Library and in /Applications.

I also had some hits on my backup drive, but those I left as is. I didn't want to mess with the backup drive.

I recently began getting some unexpected shutdowns on my iMac - always when I'm away (makes me think it is related to the screen saver).

However, I did notice that the console logs have tons of lines like this:

com.apple.xpc.launchd: (com.apple.mdworker.bundles[182xx]) Could not find uid associated with service: 0: Undefined error: 0 501

The tail end is always 501. (I noticed that you have 502 in your error msgs.)

My console logs are filled with lines like this ... and I'm wondering if that has something to do with the shutdowns.

Most irritating ... and I'm using Yosemite, iMac 2.5 i5, 16GB, 2TB.

I'd love to figure out what the problem is ...

Thank you William. I ran the command and examined the results ... no 501 (only 502 and 503 - my user ID and my wife's).

So I looked into my Users folder and lo and behold there's a .dmg file there in a folder named Deleted Users. I guess this must have happened around 3 or 4 years ago when I set up my iMac.

Do you think that could be the cause of the random shutdowns that I'm experiencing on the iMac?

The logs show a huge number of lines all ending with 501 and then there's a "respawn" line - just before the shutdown.

I don't need that .dmg so I believe that I can safely delete it.

Much appreciate your pointing me in the right direction.

Thanks, again.

David

Hello,

Just wanted to say thank you! I had two of those phantom users - from the files they owned, I'm guessing they were created during previous upgrades? And I was having serious problems - Illustrator (several versions), EndNote, and several other programs I use every day would only open in safe mode, or sometimes after up to several hours of bouncing icons. And that would start over on the next restart. Many hours were spent with various tech support people and their hold music.

Now, knock on wood, everything tested opens even after a restart. It also seems a bit snappier, but that may just be my improved mood.

In case it's relevant - OS 10.10.1, mid-2010 MacBook Pro.

Barbara

The phantoms are all somehow myself (it's my own laptop), I really don't know how they were generated, but here's hoping they stay gone. Whoever they were, they were especially fond of Adobe files.

There are actually still problems, but that's for another thread.

In the absence of any further contributions to this thread, I finally got round to following cloudranger's detailed instructions this morning and as far as I can tell it's worked. I'm certainly not getting those two lines repeated every 10 seconds in the Console (though there's plenty of other rubbish). That said, I had to delay matters because the drive that hosts my nightly SuperDuper! backup failed just at the crucial moment. So I bought a new drive and made absolutely sure I had a full, bootable backup before proceeding.

As far as my final paragraph in the previous post is concerned I ended up doing the following: having backed up (which took almost 24 hours to copy c.1.5TB of files!) and restarted I unmounted both my SuperDuper! drive and my Time Machine drive before following cloudranger's procedure. I then did a further SuperDuper! smart update - which was very quick - and this changed the ownership of al the necessary files on the backup. As for Time Machine, I'm working on the basis that the changes will gradually work their way through and that I won't have to access any of the files concerned in the meantime. I'm taking the same approach to my CrashPlan cloud backup. If I ever have to restore from that, I can always follow the procedure again - it really did’t take long.

So thank you, cloudranger - and others - for your valuable advice. Not that I've noticed ay particular improvement in my Mac's performance so far...

Hi

I see you have already solved your issue, but here is an answer to your question as to how to exclude time machine in the find command just for completeness and in case anyone else needs it...

In the finder find the name of the disk being used for time machine in the side bar (mine is called TimeMachine)

In the terminal type: df

You should see an entry ending with something like /Volumes/TimeMachine (or whatever name you gave it)

You can then exclude that disk from the find command like this (replacing the path with whatever path you have):

sudo find / ! -path "/Volumes/TimeMachine/*" -uid 501 -exec chown -h 503:20 {} \; -print

The case is sensitive in the path string normally (the default in mac is to create a case sensitive file system) and you need to make sure you add the asterisk so that it excludes all files.

Merry Christmas!

Thanks! This was super helpful for me. I recently installed a second drive in my MBP (OWC Data Doubler with an SSD) and wanted to leave my data on the HDD. This required logging in as a different admin user. This set a bunch of stuff to this other account's uid. While the process is somewhat lengthy (300K+ files were owned by the "wrong" uid), I seem to have come out to the other side fine.

I just wanted to thank you guys for working through all this stuff. I had the exact same problem and have fixed the multiple user accounts on my mid 2012 mbp. My machine started randomly shutting off last week or maybe the week before (like someone is turning off a light switch) and in researching the problem came across this as one of the possible causes of the issue so I will definitely keep you informed on the progress.

Wanted to add my thanks for this thread. Very informative and CloudRanger's and others' suggestions worked to fix my respawn -- 50x UID problems. I have had some significant crashing issues since moving to 10.0.2, which I am not sure are fully resolved, but I think we are well on the way. Of note, this is not a clean install, but an initial migration from my old iMac 2008 24"...... with an upgrade to Yosemite with 10.10.2 update.

However, I still have frequent log entries like this:

3/8/15 1:49:00.800 PM mdworker[1195]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:00.802 PM mdworker[1195]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:00.805 PM mdworker[1195]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:00.904 PM mdworker[1196]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:00.906 PM mdworker[1196]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:00.908 PM mdworker[1196]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.007 PM mdworker[1195]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.009 PM mdworker[1195]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.018 PM mdworker[1196]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.021 PM mdworker[1196]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.296 PM mdworker[1197]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.298 PM mdworker[1197]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.301 PM mdworker[1197]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.304 PM mdworker[1197]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

3/8/15 1:49:01.306 PM mdworker[1197]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)"

and here is EtreCheck:

EtreCheck version: 2.1.8 (121)

Report generated March 8, 2015 at 2:03:38 PM EDT

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: ℹ️

iMac (27-inch, Late 2013) (Technical Specifications)

iMac - model: iMac14,2

1 3.2 GHz Intel Core i5 CPU: 4-core

16 GB RAM Upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en1: 802.11 a/b/g/n/ac

Video Information: ℹ️

NVIDIA GeForce GT 755M - VRAM: 1024 MB

iMac 2560 x 1440

System Software: ℹ️

OS X 10.10.2 (14C109) - Time since boot: 0:51:17

Disk Information: ℹ️

APPLE SSD SD0128F disk0 : (121.33 GB)

EFI (disk0s1) <not mounted> : 210 MB

Boot OS X (disk0s3) <not mounted> : 134 MB

Macintosh HD (disk2) / : 1.11 TB (537.41 GB free)

Core Storage: disk0s2 120.99 GB Online

Core Storage: disk1s2 999.34 GB Online

APPLE HDD ST1000DM003 disk1 : (1 TB)

EFI (disk1s1) <not mounted> : 210 MB

Recovery HD (disk1s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk2) / : 1.11 TB (537.41 GB free)

Core Storage: disk0s2 120.99 GB Online

Core Storage: disk1s2 999.34 GB Online

USB Information: ℹ️

ASMedia AS2105 1 TB

EFI (disk3s1) <not mounted> : 210 MB

Daily Backup (disk3s2) /Volumes/Daily Backup : 999.86 GB (434.06 GB free)

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. FaceTime HD Camera (Built-in)

Apple, Inc. Keyboard Hub

Logitech USB Trackball

USB Mass Storage Device 1.84 GB

Apple, Inc Apple Keyboard

Thunderbolt Information: ℹ️

Apple Inc. thunderbolt_bus

Gatekeeper: ℹ️

Anywhere

Kernel Extensions: ℹ️

/System/Library/Extensions

[loaded] com.Cycling74.driver.Soundflower (1.5.3 - SDK 10.6) [Click for support]

[not loaded] com.Ralink.driver.RT2860WirelessDriver (1.0.0) [Click for support]

[loaded] com.globaldelight.driver.BoomDevice (1.1 - SDK 10.1) [Click for support]

[not loaded] com.perceptiveautomation.indigo_overrides.kext (1.0.0d1) [Click for support]

[not loaded] com.rogueamoeba.InstantOn (6.0.1 - SDK 10.6) [Click for support]

[not loaded] com.roxio.BluRaySupport (1.1.6) [Click for support]

/System/Library/Extensions/InstantOn.kext/Contents/PlugIns

[not loaded] com.rogueamoeba.InstantOnCore (6.0.1 - SDK 10.6) [Click for support]

---ignore these, I suppose, as they are on my external disk. Although I don't know why Etrecheck would read them.....

/Volumes/Daily Backup/Applications/TechTool Pro 7.app

[not loaded] com.micromat.driver.spdKernel (1 - SDK 10.8) [Click for support]

[not loaded] com.micromat.driver.spdKernel-10-8 (1 - SDK 10.8) [Click for support]

/Volumes/Daily Backup/Applications/Toast 11 Titanium/Spin Doctor.app

[not loaded] com.hzsystems.terminus.driver (4) [Click for support]

/Volumes/Daily Backup/Applications/Utilities/DiskWarrior.app

[not loaded] com.alsoft.Preview (4.4) [Click for support]

/Volumes/Daily Backup/Applications/VMware Fusion.app

[not loaded] com.vmware.kext.vmci (90.4.19) [Click for support]

[not loaded] com.vmware.kext.vmioplug.10.1.26 (10.1.26) [Click for support]

[not loaded] com.vmware.kext.vmnet (0143.58.62) [Click for support]

[not loaded] com.vmware.kext.vmx86 (0143.58.62) [Click for support]

[not loaded] com.vmware.kext.vsockets (90.4.24) [Click for support]

/Volumes/Daily Backup/Users/[redacted]/Library/Services/ToastIt.service/Contents/MacOS

[not loaded] com.roxio.TDIXController (2.0) [Click for support]

Launch Agents: ℹ️

[unknown] afraid.org.freedns.plist [Click for support]

[running] com.bjango.istatmenusagent.plist [Click for support]

[loaded] com.hp.help.tocgenerator.plist [Click for support]

[running] com.micromat.TechToolProAgent.plist [Click for support]

[loaded] com.oracle.java.Java-Updater.plist [Click for support]

[running] com.teamviewer.teamviewer.plist [Click for support]

[running] com.teamviewer.teamviewer_desktop.plist [Click for support]

Launch Daemons: ℹ️

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.adobe.versioncueCS3.plist [Click for support]

[running] com.bjango.istatmenusdaemon.plist [Click for support]

[running] com.bresink.system.privilegedhelper-tts.plist [Click for support]

[running] com.crashplan.engine.plist [Click for support]

[unknown] com.crashplan.engine.plist.save [Click for support]

[running] com.crashplan.engine.plist~ [Click for support]

[running] com.micromat.TechToolProDaemon.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[loaded] com.oracle.java.Helper-Tool.plist [Click for support]

[loaded] com.oracle.java.JavaUpdateHelper.plist [Click for support]

[failed] com.rogueamoeba.hermes.plist [Click for support] [Click for details]

[not loaded] com.slinkware.slinkDaemon.plist [Click for support]

[loaded] com.teamviewer.Helper.plist [Click for support]

[running] com.teamviewer.teamviewer_service.plist [Click for support]

[loaded] com.timesoftware.timemachineeditor.backup-auto.plist [Click for support]

[loaded] com.timesoftware.timemachineeditor.helper.plist [Click for support]

User Launch Agents: ℹ️

[running] com.ecamm.printopia.plist [Click for support]

[loaded] com.facebook.videochat.[redacted].plist [Click for support]

[loaded] com.google.keystone.agent.plist [Click for support]

[loaded] com.macupdate.desktop5.scanner.plist [Click for support]

[loaded] com.shirtpocket.backupbytime.plist [Click for support]

[not loaded] com.zeobit.MacKeeper.Helper [Click for support]

User Login Items: ℹ️

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

System Events Application Hidden (/System/Library/CoreServices/System Events.app)

AirPort Base Station Agent Application Hidden (/System/Library/CoreServices/AirPort Base Station Agent.app)

Airfoil Application (/Applications/Airfoil.app)

Mail Application (/Applications/Mail.app)

VMware Fusion Start Menu Application (/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)

Dropbox Application (/Applications/Dropbox.app)

AppTrap Application (/Library/PreferencePanes/AppTrap.prefPane/Contents/Resources/AppTrap.app)

DelayedLauncher Application (/Users/[redacted]/Downloads/DelayedLauncher.app)

timemachinevideooffice UNKNOWN (missing value)

CrashPlan menu bar Application (/Applications/CrashPlan.app/Contents/Helpers/CrashPlan menu bar.app)

TeamViewer Application (/Applications/TeamViewer.app)

homes UNKNOWN (missing value)

Internet Plug-ins: ℹ️

Google Earth Web Plug-in: Version: 6.1 [Click for support]

Default Browser: Version: 600 - SDK 10.10

Flip4Mac WMV Plugin: Version: 2.3.8.1 [Click for support]

Musicnotes: Version: 1.17.0 [Click for support]

RealPlayer Plugin: Version: Unknown

PDF Browser Plugin: Version: 2.2.3 [Click for support]

FlashPlayer-10.6: Version: 16.0.0.305 - SDK 10.6 [Click for support]

DivXBrowserPlugin: Version: 1.3 [Click for support]

Silverlight: Version: 4.0.51204.0 [Click for support]

Flash Player: Version: 16.0.0.305 - SDK 10.6 [Click for support]

iPhotoPhotocast: Version: 7.0 - SDK 10.8

CitrixICAClientPlugIn: Version: 11.2.0 [Click for support]

PDEPrint: Version: 2.0 [Click for support]

QuickTime Plugin: Version: 7.7.3

SharePointBrowserPlugin: Version: 14.4.8 - SDK 10.6 [Click for support]

GoogleOneClickPlugin: Version: Unknown

ContentUploaderPlugin: Version: 1.2 [Click for support]

JavaAppletPlugin: Version: Java 8 Update 31 Check version

User internet Plug-ins: ℹ️

WebEx: Version: 1.0 [Click for support]

Safari Extensions: ℹ️

AdBlock

ClickToFlash

Franker

3rd Party Preference Panes: ℹ️

Adobe Version Cue CS3 [Click for support]

AppTrap [Click for support]

Citrix Online Plug-in [Click for support]

Flash Player [Click for support]

hueyPRO [Click for support]

Java [Click for support]

Printopia [Click for support]

TechTool Protection [Click for support]

Time Machine: ℹ️

Time Machine not configured!

Top Processes by CPU: ℹ️

6% WindowServer

3% CrashPlanService

1% Safari

1% AppleSpell

0% fontd

Top Processes by Memory: ℹ️

653 MB mds_stores

258 MB Mail

189 MB CrashPlanService

155 MB Finder

155 MB WindowServer

Virtual Memory Information: ℹ️

10.71 GB Free RAM

4.16 GB Active RAM

857 MB Inactive RAM

1.46 GB Wired RAM

1.88 GB Page-ins

0 B Page-outs

Diagnostics Information: ℹ️

Mar 8, 2015, 01:10:31 PM Self test - passed

Mar 8, 2015, 08:54:25 AM /Library/Logs/DiagnosticReports/com.bresink.system.privilegedhelper-tts_2015-03 -08-085425_[redacted].cpu_resource.diag [Click for details]

Mar 7, 2015, 04:11:31 PM /Library/Logs/DiagnosticReports/Dropbox109_2015-03-07-161131_[redacted].cpu_res ource.diag [Click for details]

Mar 6, 2015, 06:28:54 PM /Library/Logs/DiagnosticReports/WindowServer_2015-03-06-182854_[redacted].cpu_r esource.diag [Click for details]

I have searched high and low and still don't understand what these are or why they keep coming up. I have a 2013 27" i5 Mac, with Synology NAS attached via ethernet, as well as two external USB drives which I use for backup. I've run Disk Utility from the Recovery Disk, TinkerTool System 4 to clear caches and DiskWarrior 4.4, which reports a clean directory. Any thoughts as to how to correct these would be appreciated.

Thanks for the UID advice. This has just fixed my issue with the new Photos.app where it was hanging indefinitely 5 seconds after launch. Problem solved. I wonder how many other issues it has solved.

Unfortunately the solution was temporary. Appeared again the next day.

Whatever deleting the folders does, it's only a temporary solution. Problem reappeared within 3 hours. Same folders are back.

Is it possible to let me know the steps you followed to identify the relevant files and change the ownership?

This could be my problem but I have no idea how to do what you accomplished.

Thanks/cheers

Very much appreciate your detailed post and help.

Sincere thanks.

I will try this ... 501 is the number that appears in the console log ... frequently!

Thanks, again.

David