Apple Intelligence is now available on iPhone, iPad, and Mac!

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Mail App Freezes/Hangs OS X 10.10.2

Mid 2011 11" MBA 4,1 maxed BTO model 4GB RAM, 256GB SSD, 1.8 Ghz Core i7.


Upgraded to Yosemite 10.10.2 from 10.10.1 yesterday before I went to bed. Shut down the computer.


This morning Mail App has repeatedly frozen up on me and I have been forced to Force Quit the application and restart it. I have used the automatic reporting tool every time, and an extract of the same exact message I get every time follows. It goes on for much longer appearing to display a loop that is not being resolved. My question is - has something gone wrong with my mail accounts configuration, or does this appear to be a new problem with Mail App in 10.10.2? Really need help - if the answer is to eliminate all email accounts from the computer and then set them all up again from scratch, I am willing to do that, but it is a big time investment, as there are large Google Apps for business accounts involved with many GBs of email - so I would like to know if that is what is happening first or not.


Any help is EXTREMELY appreciated, as Mail is unusable for me right now, pretty much broken!


Date/Time: 2015-01-28 12:11:55 +0100

OS Version: 10.10.2 (Build 14C109)

Architecture: x86_64

Report Version: 21



Command: Mail

Path: /Applications/Mail.app/Contents/MacOS/Mail

Version: 8.2 (2070.6)

Build Version: 1

Project Name: Mail

Source Version: 2070006000000000

Parent: launchd [1]

PID: 1111



Event: hang

Duration: 1.50s (process was unresponsive for 61 seconds before sampling)

Steps: 16 (100ms sampling interval)



Hardware model: MacBookAir4,1

Active cpus: 4



Fan speed: 1999 rpm



--------------------------------------------------

Timeline format: stacks are sorted chronologically

Use -i and -heavy to re-report with count sorting

--------------------------------------------------



Heaviest stack for the main thread of the target process:

16 start + 1 (libdyld.dylib + 13769) [0x7fff8bbb55c9]

16 NSApplicationMain + 1832 (AppKit + 10772) [0x7fff8fe1ca14]

16 -[NSApplication run] + 594 (AppKit + 95635) [0x7fff8fe31593]

16 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 194 (AppKit + 145200) [0x7fff8fe3d730]

16 _DPSNextEvent + 964 (AppKit + 147329) [0x7fff8fe3df81]

16 _BlockUntilNextEventMatchingListInModeWithFilter + 71 (HIToolbox + 190123) [0x7fff8c5556ab]

16 ReceiveNextEventCommon + 431 (HIToolbox + 190570) [0x7fff8c55586a]

16 RunCurrentEventLoopInMode + 235 (HIToolbox + 191215) [0x7fff8c555aef]

16 CFRunLoopRunSpecific + 296 (CoreFoundation + 464984) [0x7fff95168858]

16 __CFRunLoopRun + 2159 (CoreFoundation + 467727) [0x7fff9516930f]

16 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 9 (CoreFoundation + 744569) [0x7fff951acc79]

16 _dispatch_main_queue_callback_4CF + 416 (libdispatch.dylib + 56066) [0x7fff8a1b5b02]

16 _dispatch_source_invoke + 412 (libdispatch.dylib + 22059) [0x7fff8a1ad62b]

16 _dispatch_source_latch_and_call + 721 (libdispatch.dylib + 51326) [0x7fff8a1b487e]

16 _dispatch_client_callout + 8 (libdispatch.dylib + 7187) [0x7fff8a1a9c13]

16 _dispatch_after_timer_callback + 77 (libdispatch.dylib + 58744) [0x7fff8a1b6578]

16 _dispatch_client_callout + 8 (libdispatch.dylib + 7187) [0x7fff8a1a9c13]

16 _dispatch_call_block_and_release + 12 (libdispatch.dylib + 25379) [0x7fff8a1ae323]

16 __29-[NSPersistentUIManager init]_block_invoke_2 + 77 (AppKit + 3214919) [0x7fff9012ae47]

16 run_cocoa_block + 41 (AppKit + 20070) [0x7fff8fe1ee66]

16 -[NSPersistentUIManager flushPersistentStateAndClose:waitingUntilDone:] + 184 (AppKit + 2071371) [0x7fff90013b4b]

16 -[NSPersistentUIManager flushAllChangesOptionallyWaitingUntilDone:updatingSnapshots:] + 761 (AppKit + 2072178) [0x7fff90013e72]

16 _dispatch_barrier_sync_f_slow + 597 (libdispatch.dylib + 46423) [0x7fff8a1b3557]

16 semaphore_wait_trap + 10 (libsystem_kernel.dylib + 70938) [0x7fff87ad351a]

*16 semaphore_wait_continue + 0 (kernel + 1373536) [0xffffff800034f560]





Process: Mail [1111]

Path: /Applications/Mail.app/Contents/MacOS/Mail

Architecture: x86_64

Parent: launchd [1]

UID: 501

Sudden Term: Dirty

Task size: 38701 pages (-11)

CPU Time: 0.005s

Note: Unresponsive for 61 seconds before sampling

Dispatch Thread Hard Limit Reached: 512 (too many dispatch threads blocked in synchronous operations)



Thread 0x203c9 DispatchQueue 1 16 samples (1-16) priority 47

<frontmost, thread QoS user interactive, boosted, received importance donation from WindowServer [111], IO policy important>

16 start + 1 (libdyld.dylib + 13769) [0x7fff8bbb55c9] 1-16

16 NSApplicationMain + 1832 (AppKit + 10772) [0x7fff8fe1ca14] 1-16

16 -[NSApplication run] + 594 (AppKit + 95635) [0x7fff8fe31593] 1-16

16 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 194 (AppKit + 145200) [0x7fff8fe3d730] 1-16

16 _DPSNextEvent + 964 (AppKit + 147329) [0x7fff8fe3df81] 1-16

16 _BlockUntilNextEventMatchingListInModeWithFilter + 71 (HIToolbox + 190123) [0x7fff8c5556ab] 1-16

16 ReceiveNextEventCommon + 431 (HIToolbox + 190570) [0x7fff8c55586a] 1-16

16 RunCurrentEventLoopInMode + 235 (HIToolbox + 191215) [0x7fff8c555aef] 1-16

16 CFRunLoopRunSpecific + 296 (CoreFoundation + 464984) [0x7fff95168858] 1-16

16 __CFRunLoopRun + 2159 (CoreFoundation + 467727) [0x7fff9516930f] 1-16

16 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 9 (CoreFoundation + 744569) [0x7fff951acc79] 1-16

16 _dispatch_main_queue_callback_4CF + 416 (libdispatch.dylib + 56066) [0x7fff8a1b5b02] 1-16

16 _dispatch_source_invoke + 412 (libdispatch.dylib + 22059) [0x7fff8a1ad62b] 1-16

16 _dispatch_source_latch_and_call + 721 (libdispatch.dylib + 51326) [0x7fff8a1b487e] 1-16

16 _dispatch_client_callout + 8 (libdispatch.dylib + 7187) [0x7fff8a1a9c13] 1-16

16 _dispatch_after_timer_callback + 77 (libdispatch.dylib + 58744) [0x7fff8a1b6578] 1-16

16 _dispatch_client_callout + 8 (libdispatch.dylib + 7187) [0x7fff8a1a9c13] 1-16

16 _dispatch_call_block_and_release + 12 (libdispatch.dylib + 25379) [0x7fff8a1ae323] 1-16

16 __29-[NSPersistentUIManager init]_block_invoke_2 + 77 (AppKit + 3214919) [0x7fff9012ae47] 1-16

16 run_cocoa_block + 41 (AppKit + 20070) [0x7fff8fe1ee66] 1-16

16 -[NSPersistentUIManager flushPersistentStateAndClose:waitingUntilDone:] + 184 (AppKit + 2071371) [0x7fff90013b4b] 1-16

16 -[NSPersistentUIManager flushAllChangesOptionallyWaitingUntilDone:updatingSnapshots:] + 761 (AppKit + 2072178) [0x7fff90013e72] 1-16

16 _dispatch_barrier_sync_f_slow + 597 (libdispatch.dylib + 46423) [0x7fff8a1b3557] 1-16

16 semaphore_wait_trap + 10 (libsystem_kernel.dylib + 70938) [0x7fff87ad351a] 1-16

*16 semaphore_wait_continue + 0 (kernel + 1373536) [0xffffff800034f560] 1-16



Thread 0x20434 DispatchQueue 2 16 samples (1-16) priority 47

<frontmost, thread QoS user interactive, boosted, received importance donation from WindowServer [111], IO policy important>

16 _dispatch_mgr_thread + 52 (libdispatch.dylib + 19050) [0x7fff8a1aca6a] 1-16

16 kevent64 + 10 (libsystem_kernel.dylib + 94770) [0x7fff87ad9232] 1-16

*16 ??? (kernel + 5988368) [0xffffff80007b6010] 1-16



Thread 0x2b56c DispatchQueue 9 16 samples (1-16) priority 20

<frontmost, thread QoS utility, boosted, received importance donation from WindowServer [111], IO policy standard>

16 start_wqthread + 13 (libsystem_pthread.dylib + 5133) [0x7fff8964840d] 1-16

16 _pthread_wqthread + 729 (libsystem_pthread.dylib + 13879) [0x7fff8964a637] 1-16

16 _dispatch_worker_thread3 + 91 (libdispatch.dylib + 77796) [0x7fff8a1bafe4] 1-16

16 _dispatch_root_queue_drain + 935 (libdispatch.dylib + 18575) [0x7fff8a1ac88f] 1-16

16 _dispatch_client_callout + 8 (libdispatch.dylib + 7187) [0x7fff8a1a9c13] 1-16

16 _dispatch_call_block_and_release + 12 (libdispatch.dylib + 25379) [0x7fff8a1ae323] 1-16

16 ____CFMachPortDeallocate_block_invoke + 30 (CoreFoundation + 590814) [0x7fff951873de] 1-16

16 semaphore_wait_trap + 10 (libsystem_kernel.dylib + 70938) [0x7fff87ad351a] 1-16

*16 semaphore_wait_continue + 0 (kernel + 1373536) [0xffffff800034f560] 1-16



Thread 0x2b5c2 DispatchQueue 9 16 samples (1-16) priority 20

<frontmost, thread QoS utility, boosted, received importance donation from WindowServer [111], IO policy standard>

16 start_wqthread + 13 (libsystem_pthread.dylib + 5133) [0x7fff8964840d] 1-16

16 _pthread_wqthread + 729 (libsystem_pthread.dylib + 13879) [0x7fff8964a637] 1-16

16 _dispatch_worker_thread3 + 91 (libdispatch.dylib + 77796) [0x7fff8a1bafe4] 1-16

16 _dispatch_root_queue_drain + 935 (libdispatch.dylib + 18575) [0x7fff8a1ac88f] 1-16

16 _dispatch_client_callout + 8 (libdispatch.dylib + 7187) [0x7fff8a1a9c13] 1-16

16 _dispatch_call_block_and_release + 12 (libdispatch.dylib + 25379) [0x7fff8a1ae323] 1-16

16 ____CFMachPortDeallocate_block_invoke + 30 (CoreFoundation + 590814) [0x7fff951873de] 1-16

16 semaphore_wait_trap + 10 (libsystem_kernel.dylib + 70938) [0x7fff87ad351a] 1-16

*16 semaphore_wait_continue + 0 (kernel + 1373536) [0xffffff800034f560] 1-16

MacBook Air, OS X Yosemite (10.10.1)

Posted on Jan 28, 2015 3:31 AM

Reply
44 replies

Oct 26, 2017 8:06 PM in response to myopicpaideia

***** SOLUTION *****


So, I've spent the last several hours digging into why Mail would download several messages, then hang.


As it turns out, turning on debugging and watching the IMAP streams revealed something very interesting. Namely that the Mail application is doing everything just find in regards to IMAP (I wrote a custom set of tools to verify this from the debugging logs, and it's jives with the IMAP protocol 100%).


What DIDN'T make sense until I started running packet traces on what was coming out of the machine was the hanging on seemingly random messages. Once I started tracing the outbound connections, I found something interesting. Every time the Mail application would "hang", it would request a URL (picture or document in most cases) and then just never come back. Well, actually it did come back in some cases, but some domains that were in my e-mails had since been purchased by domain brokers. Domain brokers often "blackhole" domains they are "parking" until the sell. This means that Mail was trying to get someone's snazy signature company logo from a company that had gone out of business and subsequently become a black hole for URLs attempting to get things from them.


If that's all too technical, the upshot of this is that you need to turn off the automatic download of images / documents from the Internet when you are downloading your mail, if this is happening to you.


Un-check the box at:

Mail > Preferences > Viewing >Uncheck Display remote images in HTML messages.


That let me finish downloading my email and stopped Mail fro being a locked up App.


Good Luck,

Mark.

Jan 28, 2015 9:39 AM in response to myopicpaideia

Please read this whole message before doing anything.

This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.

Step 1

The purpose of this step is to determine whether the problem is localized to your user account.

Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”

While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.

Test while logged in as Guest. Same problem?

After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.

*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.

Step 2

The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Please take this step regardless of the results of Step 1.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Jan 28, 2015 11:46 AM in response to Linc Davis

Thanks for your reply, Linc, I see this is a standard answer you've written to others.


I have performed step 1 using a newly created test user account, because I have find my Mac enabled, and Mail flies, no lag during typing, no stuttering when scrolling up and down the folder lists, no problems at all, Mail just performs as it should, ecven while simultaneously trying to sync up the very large Gmail business account with well 20GB of mail. Logged back into my normal user account, and verified that the problems still persisted in Mail App, and it promptly hung on me after 5 minutes of stuttery, laggy performance.


I am currently trying to perform step 2, the safe mode test, but after entering my user password and then holding down shift the second time, the machine seems to have frozen/hanged as I have literally been stuck with the dark grey start-up at halfway for 7-8 minutes now. Something is clearly not working.


I am almost convinced that is has to be a corrupted mail database or cache for one or more of the 6 different mail accounts I have had on the machine since I bought in 2011. I have not done a clean install since I bought it, having upgraded from Snow Leopard or Lion (can't really remember what it shipped with, tbh) up through every major and minor point release on top of each other since. Have had intermittent problems with Mail since Mavericks, but now the app has ground to a halt.


Would you recommend a factory restore/clean install of 10.10.2? Or should I nit be so drastic and try to simply eliminate all traces of my Mail accounts and start them over from scratch?

Jan 28, 2015 1:33 PM in response to Linc Davis

Ok, Linc, I have now successfully started up the machine in safe mode, it took the safe mode disk check and repair almost 20 minutes to complete, but it did eventually start up. I opened up Mail app and immediately it reverted to its extremely laggy and stuttering behaviour, the rainbow circle comes on every few seconds and freezes the app momentarily, scrolling the very long folder lists in the mail accounts stutters, stops and skips, and even moving the cursor while writing a mail will trigger a rainbow circle.


EVentually after 10 minutes it hanged completely, and I had to force quit.


Booted back up normally and can confirm the same problematic behavior.


So in summary, the result of Step 1 was a smooth and probkem free Mail app (caveat that I only started syncing up 1 mail account as opposed to the 4 I have active in my user account and only used it for about 15 minutes as a test).


The result of Step 2 was the existence of the same problematic behavior and eventual freezing/hanging of Mail app.


Do you have any recommendations as to further troubleshooting, or a possible solution? Possibly a complete wipe of all my Mail data and then setting them up from scratch? Or an even more drastic clean install of the entire OS?


Again, thank you for all your help, it is much appreciated.

Jan 28, 2015 2:17 PM in response to myopicpaideia

Back up all data before proceeding.

1. Triple-click anywhere in the line below on this page to select it:

~/Library/Mail/Bundles

Right-click or control-click the highlighted line and select

Services Open

from the contextual menu.* A folder may open, or you may get an error message that the item can't be found. Either result is normal. If the folder does open and has contents, move the contents to the Desktop. Relaunch Mail and test. If there's no change, put the contents of the folder back and quit Mail again.

2. Repeat with this line:

/Library/Mail/Bundles

This time you may be prompted for your administrator login password when you remove the items. Make sure they're removed from the folder and not just copied to the Desktop. If necessary, copy them first and then move the originals to the Trash.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Jan 28, 2015 3:24 PM in response to myopicpaideia

Back up all data before proceeding.

Step 1

If Mail crashes or freezes immediately on launch, try the steps suggested on this page. Sometimes a corrupt message on a mail server can be deleted by logging in to the server through its web page. If Mail still won't launch, skip to Step 3.

Step 2

Select all your mailboxes, and then select

Mailbox ▹ Export Mailbox...

from the Mail menu bar. Export the mailboxes to the Desktop folder.

Make a note of the settings for all your Mail accounts – everything you'd need to reconstruct the settings from scratch.
Quit Mail.

Step 3

In the Finder, hold down the option key and select

Go ▹ Library

from the menu bar. Move the following items (some may not exist) from the folder that opens to the Desktop:

Application Support/AddressBook/MailRecents-v4.abcdmr

Containers/com.apple.corerecents.recentsd

Containers/com.apple.mail

Containers/com.apple.MailServiceAgent

Mail

Note: you are not moving the Mail application. You’re moving a folder named “Mail.”

Launch Mail. It will behave as if you were setting it up for the first time. Go through the setup process with one of your accounts, using the information you noted earlier. Test. If Mail works now, recreate the rest of your settings.

If there’s no improvement, quit Mail and put back the items you moved to the Desktop, replacing any newer ones that may have been created in their place. Stop here and post your results.

Step 4

This step should not be necessary with IMAP or Exchange mailboxes, because they synchronize automatically with the server. Nevertheless, if the mailboxes are very large, importing them may spare you the need for a long download.

If you took Step 2, import the mailboxes you exported:

File ▹ Import Mailbox...

Select Apple Mail as the data type.

If you skipped Step 2, look inside the Mail folder on the Desktop for a subfolder Mail/V2/Mailboxes. Import the mailboxes it contains.

Test. If Mail is still working, delete the items you moved to the Desktop in Step 3.

Jan 29, 2015 12:29 AM in response to Linc Davis

Mail was not quitting or freezing/hanging on launch, so I skipped step 1 and 2.


The result of Step 3 is as follows:


Mail app starts up as you said it would, as if it was opening for the first time. However, when I go to set up an account, it does not complete the process. After entering the email address and password, clicking on the "setup" button simply results in the text fields for email address and password being emptied and nothing happens.


These are the files/folders I moved to the desktop per instructions in Step 3.

User uploaded file

In Application Support/AddressBook/ in addition to the file you mentioned, I also have these:

User uploaded file

I have know idea if that is relevant at all. I replaced all the files back to their original locations and started Mail again. It opened and worked as normal, meaning horribly slow, max fan speed immediately, stuttering, lagging, and treating me to the rainbow circle every few seconds.


Have also checked Activity Monitor as well:

User uploaded file

User uploaded file

User uploaded file

Jan 29, 2015 9:47 AM in response to Linc Davis

User uploaded file

This was the result of a verify disk operation by disk utility in Safe Mode (From a guide I decided to try that involves reseting the SMC and PRAM - repairing permissions was the first step and I decided to verify the disk as well.)


I followed the instructions and booted into recovery mode and ran disk utility - except verify disk reported no issues, and was done in less than 3 seconds, same with repair disk. So I booted into Safe Mode again to see if I could repeat the error in disk utility. The same error above occurred.


Could a bad sector on my SSD be the culprit for all my Mail woes? The system otherwise performs very well. It is Mail only that I have a problem with.

Jan 29, 2015 8:57 PM in response to myopicpaideia

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays 85 percent 20480 {{,'\.'{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'}Info,'Launch[AD].+'}'\.plist' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH 10 "` route -n get default|awk '/e:/{print $2}' `" ' function f() { n++;sub(/^/,"^");gsub(/\./,"\\.");gsub(/\+/,"\\+");gsub(/\-/,"\\-");gsub(/\?/,"\\?");print|"sort|uniq";};function g(N,d) { if(n<N) print d;};' N\\/A '|sort|uniq'{,\ -c} 102400 25600 Label 1024 CFBundleIdentifier 25 25 25 1000 MB 20 1191 51 5120 files 4 1000 25 5120 -\\t PlistBuddy{,' 2>&1'}' -c Print' OSBundleRequired 25000 ports 'com\.apple\.' );N0=${#p[@]};p[N0]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n'"${p[50]}"'%s\n' '%s (UID %s) %s %s' '\nContents of %s\n '"${p[50]}"'mod date: %s\n '"${p[50]}"'checksum: %s\n%s\n' '\n ...and %s more line(s)\n' 'RSSI: %s\nNoise: %s\nTx rate: %s\n' {Privacy,Mode}': %s\n' );b=(com.adobe.{AAM.Updater-1.0{,},AdobeCreativeCloud,CS{4,5}ServiceManager,fpsaud,SwitchBoard{,}} ${p[56]}{aelwriter,{AirPortBaseSt,SafariNotific}ationAgent,FolderActions.enabled,installer.osmessagetracing,mrt.uiagent,ReportCrash.Self,{rp,usb}muxd} com.citrixonline.GoToMeeting.G2MUpdate com.google.keystone.daemon com.microsoft.office.licensing.helper com.oracle.java.{Helper-Tool,JavaUpdateHelper{,}} org.macosforge.xquartz.{privileged_{,},}startx );c=(879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 2051385900 3301885676 891055588 695903914 1443423563 4136085286 523110921 2883943871 3873345487 );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("'"${f[5]}"'",$0,u,q,"'${p[$2]}'");} ';};S4() { echo "${p[27]}"\ ' /'${p[$1]}'$/ { p="'"${p[52]}"'\\ :'${p[$2]}' \""$0"\"";p|getline;close(p);if($0!~/ /) f();};END{g('$3',"^'"${p[56]}"'")} ';};s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[46]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[47]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' BEGIN { FS=":";if(system("sw_vers -productVersion|grep -q ^10\.1")) d="^'"${p[56]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' { sub(/ :/,"");print|"tail -n'${p[48]}'";} ' ' NR==2&&$4<='${p[49]}' { print $4;} ' ' END { $2/=256;if($2>='${p[34]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 54 55`" 'NR!=2{next}'"`S0 37 17`" ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' "`S4 20 35 80`" 's/^.{52}(.+) <.+/\1/p' "`S4 23 33 80`" "`S4 21 35 80`" ' NR>1&&$3!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $3":"$2;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p ' '/^root$/p' "${p[27]}"\ ' /\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/{f()} END{g(900,"^/System/")} ' ' /\.dylib$/!d;s/(\.|\+|\-|\?)/\\\1/g;s/^/^/p;' "${p[27]}"\ ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");f();} END { split("'"${b[*]}"'",b);split("'"${c[*]}"'",c);for(i in b) print b[i]"\.plist\t"c[i];g(500,"Launch");} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' { gsub(/[()"]/,"",$3);if($2!="="||!$3) $3="N/A";print $3;} ' ' /^\// { sub("/dev/","",$1);printf("%s: %s\n",$1,$9);} ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&& $3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' $1=="op" {m=$3};$1~"lN" {N=$2};$1~"lR" {S=$2};$1~"Tx" {T=$2};$1~/^st/ {s=$2};$1~"li"&&$3!~"wpa2" {printf("'"${f[9]}"'",toupper($3))};END { if(S*N*T&&(S-N<'${p[25]}'||T<'${p[41]}')) printf("'"${f[8]}"'",S,N,T);if(s~/^r/&&m!~/^st/) printf("'"${f[10]}"'",m);} ' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\\([0-9]+\\)\\(.+\\)/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p);if(b) print("\n\t* Code injection");} ' ' BEGIN { FS=":";m["A"]=0.5;m["B"]=0.25;m["C"]=1;m["D"]=1;m["E"]=0;m["F"]=100;m["G"]=1000;m["H"]=1000;} $1~/[ABGH]/&&$2>m[$1]{o[$1]=o[$1]"\n "$3" (UID "$4"): "$2} $1~/C/&&$2>m[$1]&&$5!~"^/dev"{o[$1]=o[$1]"\n "$3" (UID "$4") -> "$5" (status "$6"): "$2} $1~/D/&&$2>m[$1]&&$5 { p="ps -c -ocomm -p"$5"|sed 1d";p|getline n;close(p);if(n)$5=n;o[$1]=o[$1]"\n "$5" -> "$3" UID ("$4"): "$2;} $1~/[EF]/&&$2>m[$1]{o[$1]=o[$1]"\n "$3" (UID "$4", error "$5"): "$2} END { u1="Mb/s";u2="per sec";u3="us/s";u4="KiB/s";u["A"]=u1;u["B"]=u1;u["C"]=u2;u["D"]=u2;u["E"]=u2;u["F"]=u2;u["G"]=u3;u["H"]=u4;l["A"]="Net in";l["B"]="Net out";l["C"]="File opens";l["D"]="Forks";l["E"]="Failed forks";l["F"]="System errors";l["G"]="I/O wait time";l["H"]="I/O requests";for(i in o)print "\n"l[i]" ("u[i]")\n"o[i];} ' ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${p[51]}"' "F|getline g) { l++;if(l<=L) f=f"\n "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n '"${p[50]}"'"T;printf("'"${f[6]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");s=system("'"${p[51]}"'\\ :'${p[53]}' \""a[1]"\"/*/I*|grep -q Sa");if(!s) a[1]=a[1]" S";if(!a[2]) a[2]="'"${p[28]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${p[52]}"'\\ :'"${p[35]}"' \""$0"\"/*/'${p[19]}'";p|getline b;close(p);if(b~/ /||b=="") b="'"${p[28]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${p[19]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;' ' s/^.+ |\(.+\)$//g;p ' "`S4 22 35 20`" ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END { if(i>1) print n;} ' s/{':[^:]+$','P.+:'}'//;s/ +([0-9]+)(.+)/\2: \1/p' ' /es: ./{ s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(By|m): /H;d;:0'$'\n'' x;/[my]: [AM]|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/:(0|-(4[34])?)$/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${p[52]}\\" whoami cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin /' ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' pluginkit scutil 'dtrace -q -n' profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil lsof test osascript\ -e netstat mdls );S1() { printf kMDItemContentTypeTree=${p[56]}$1;};S2() { printf 'L*/Ca*/'${p[56]}'Saf*/E*/* -d 1 -name '${p[19]}' -exec '"${c1[14]}"' :'$1' {} \;|uniq';};c2=(${p[56]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'|tr , \\\n" "`S2 CFBundleDisplayName`" '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility CReq "apple\.(bird|i?clou)"'"${p[30]}" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$(RefProc): \$Message' -k Sender Req 'fsev|kern|launchd' -k RefProc Rne 'Aq|WebK' -k Message Rne '08012|Goog|ksadm|probe|Roame|SMC:|smcD|sserti|suhel| VALI|ver-r|xpma' -k Message Req 'abn|bad |Beac|caug|corru|dead[^bl]|FAIL|fail|GPU |hfs: Ru|idle ex|inval|jnl:|last value [1-9]|lv_c|NVDA\(|pagin|pci pa|proc: t|Roamed|rror|SL|TCON|Throttli|tim(ed? ?|ing )o|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0 < 0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno != 0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000);normalize(@h,10240);printa(\"A:%@d:%s:%d\n\",@a);printa(\"B:%@d:%s:%d\n\",@b);printa(\"C:%@d:%s:%d:%s:%d\n\",@c);printa(\"D:%@d:%s:%d:%d\n\",@d);printa(\"E:%@d:%s:%d:%d\n\",@e);printa(\"F:%@d:%s:%d:%d\n\",@f);printa(\"G:%@d:%s:%d\n\",@g);printa(\"H:%@d:%s:%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${p[56]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '/S*/*/Ca*/*xpc* >&- ||echo No' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' "`S1 "{bundle,mach-o-dylib}"`" "`S2 ${p[35]}`" "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/${p[56]}alf\ globalstate --proxy '-n get default' -I --dns -get{dnsservers,info}\ "${p[N0]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --files '${p[56]}'pkg.*'"${p[29]}" -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' ${p[56]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'${p[30]}|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????|wc -l' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','a underr|I/O e'}'"'"${p[30]}" '-app Safari UserStyleSheetEnabled' -name\ kMDItem${p[35]} -T\ hfs '-F "" -k Sender hidd -k Nle 3|wc -l' );N1=${#c2[@]};for j in {0..15};do c2[N1+j]=SP${p[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel}\ extensions Heat System\ load boot\ args FileVault Diagnostic\ reports Log {Free\ space,Swap}' (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports User Daemons Agents XPC\ cache Startup\ items {Admin,Root}\ access Bundles {,Inserted\ }dylibs Stylesheet Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching Nets Descriptors Bad\ plists {I/O,iCloud,HID}\ errors Shutdown\ codes 'High file counts' Memory\ pressure Volumes SMC );N3=${#l[@]};for i in {0..8};do l[N3+i]=${p[5+i]};done;A0() { Q=5;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[42]};};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};A'$((7+i))'() { v=` eval sudo "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};';done;A9(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=No;((v['$((i+1))']==0))&&v=;};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Ev "${v[$1]}"<<<"$v"|sort`;};C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "${s[63]}"<<<"$v"`&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";echo $'\n\tThe results are on the Clipboard.\n\n\tPlease close this window.';exit 2>&-;};for i in 1 2 7 8;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;trap C5 2;o=$({ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 22;A1 0 $((N1+2)) 3;C0;A1 0 $((N1+15)) 17;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 $((N3+4));for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 0 $((N1+8)) 71 $((N3+3));D13 1 10 7 9;D13 1 11 8 10;B1&&D73 19 53 67 60;D22 2 12 9 11;D12 3 13 10 12;D22 6 36 13 15;D22 20 52 66 58;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;C4;B1&&{ D82 35 49 61 51;A8 28 17 45;C0;C4;};D22 12 44 54 45;D22 12 39 15 21;D13 25 37 32 31;B1&&{ D73 21 0 32 19;D73 10 42 32 40;D82 29 35 46 2;};D12 34 43 53 44;D12 22 20 32 25;D22 0 $((N1+14)) 51 33;D12 21 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 38 5 68 50;D23 33 34 42 37;B1&&D83 35 45 55 46;D23 32 31 43 38;D23 4 19 44 13;B0&&{ D13 5 55 69 53&&D23 6 58 31 59;C4;D12 5 59 32 55;D13 5 54 70 56;D23 5 14 12 14;C4;};A1 13 40 18;B2 4;B4 4 5 19;A1 17 41 20;C4;B7 5;C3 8;B4 4 6 21;B4 4 7 22;B5 6 7;B3 6 6 73;B1&&{ A8 18 26 23;B7 6;B4 0 0 11;C3 23;};A2 18 26 23;B7 6;B4 0 0 11;C3 24;D13 4 21 24 26;D23 14 1 62 42;D13 37 2 48 43;D13 10 42 32 41;D12 36 47 32 48;A1 4 3 60;B2 30;A1 4 24 60;B2 31;B6 30 31 4;C3 5;D12 21 56 35 32;D12 21 48 49 49;B3 4 22 57;A1 21 46 56;B7 22;B3 0 0 58;C3 47;D13 5 7 69 54;D22 4 4 50 0;D12 4 51 32 1;D23 22 9 37 57;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;D13 4 8 41 52;C4;B4 4 12 26;for i in {0..3};do A1 0 $((N1+10+i)) 72;B7 12;B4 0 0 52;C3 $((N3+5+i));((i))||C4;done;A1 24 22 29;B7 12;B2 14;A4 39 57 30 0;B2 15;B6 14 15 4;C3 29;B3 4 13 27;A1 24 23 32;B7 13;C3 30;B4 4 16 65;A1 26 50 64;B7 16;C3 6;D13 11 6 32 7;A9;C2 39;C4;} 4>&2 2>/dev/null;);C5

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec

Part 8 of 8 done at … sec

The results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I may not agree with them.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Jan 29, 2015 10:29 PM in response to Linc Davis

Start time: 07:08:11 01/30/15



Revision: 1191



Model Identifier: MacBookAir4,1

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 11 minutes



FileVault: On



I/O requests (KiB/s)



Dropbox109 (UID 501): 1703



Listeners



cupsd: ipp

kdc: kerberos

launchd: afpovertcp

launchd: microsoft-ds



Diagnostic reports



2015-01-27 cloudd crash x2

2015-01-27 taskgated crash

2015-01-30 Mail hang x17

2015-01-30 blued crash x3

2015-01-30 com.apple.AmbientDisplayAgent crash x2



Log



Jan 29 19:50:21 memorystatus_thread: idle exiting pid 870 [cfprefsd]

Jan 29 19:50:22 memorystatus_thread: idle exiting pid 943 [findmydeviced]

Jan 29 19:51:26 process Mail[933] thread 63519 caught burning CPU! It used more than 50% CPU (Actual recent usage: 54%) over 180 seconds. thread lifetime cpu usage 91.236211 seconds, (34.690476 user, 56.545735 system) ledger info: balance: 90001397828 credit: 90001397828 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 164357566024

Jan 29 20:02:36 process mtmd[23] thread 73911 caught burning CPU! It used more than 50% CPU (Actual recent usage: 81%) over 180 seconds. thread lifetime cpu usage 90.240285 seconds, (76.032808 user, 14.207477 system) ledger info: balance: 90001771960 credit: 90001771960 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 109857112226

Jan 29 20:21:18 com.apple.xpc.launchd.domain.pid.BKAgentService.1063: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/PrivateFrameworks/BookKit.framework/Versions/A/XPCServices/com. apple.BKAgentService.xpc

Jan 29 20:21:18 com.apple.xpc.launchd.domain.pid.BKAgentService.1063: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/PrivateFrameworks/BookKit.framework/Versions/A/XPCServices/com. apple.BKAgentService.xpc

Jan 29 21:01:18 ### ERROR: opCode = 0x0406 (Disconnect) -- send request failed (err=0xE00002EB (kIOReturnAborted))

Jan 30 06:57:17 com.apple.CSConfigDotMacCert-EMAIL-SharedServices: Service setup event to handle failure and will not launch until it fires.

Jan 30 06:57:20 com.apple.xpc.launchd.domain.pid.om.apple.photostream-agent.264: Path not allowed in target domain: type = pid, path = /Applications/iPhoto.app/Contents/Frameworks/PhotoFoundation.framework/Versions /A/XPCServices/com.apple.PhotoApps.DevicePropertyReader.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app

Jan 30 06:57:20 com.apple.xpc.launchd.domain.pid.om.apple.photostream-agent.264: Path not allowed in target domain: type = pid, path = /Applications/iPhoto.app/Contents/Frameworks/PhotoFoundation.framework/Versions /A/XPCServices/com.apple.PhotoApps.DevicePropertyReader.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app

Jan 30 06:57:35 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:57:45 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:57:56 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:58:06 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:58:16 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:58:26 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:58:36 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:58:47 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:58:57 com.apple.spindump: Service exited with abnormal code: 75

Jan 30 06:59:32 MacAuthEvent en0 Auth result for: e2:b5:2d:1c:2e:40 Auth request tx failed

Jan 30 06:59:35 MacAuthEvent en0 Auth result for: e2:b5:2d:1c:2e:40 Auth request tx failed

Jan 30 06:59:39 MacAuthEvent en0 Auth result for: e2:b5:2d:1c:2e:40 Auth request tx failed

Jan 30 07:06:49 directed SSID scan fail

Jan 30 07:06:52 directed SSID scan fail

Jan 30 07:09:35 MacAuthEvent en0 Auth result for: e2:b5:2d:1c:2e:40 Auth timed out



Loaded kernel extensions



com.avatron.AVExFramebuffer (1.7)

com.avatron.AVExVideo (1.7)

com.karios.driver.DuetDisplay (1)



Daemons



com.adobe.SwitchBoard

com.adobe.fpsaud

com.apple.installer.osmessagetracing

com.microsoft.office.licensing.helper

com.spyresoft.dockmodhelper



Agents



com.adobe.ARM.UUID

com.apple.AirPortBaseStationAgent

com.apple.CSConfigDotMacCert-EMAIL-SharedServices

- status: 78

com.apple.photostream-agent

com.google.keystone.user.agent

jp.co.canon.ScanGearMF.appl.Canon-MF-Scan-Agent



Startup items



/Library/StartupItems/IPSecuritasDaemon/IPSecuritasDaemon

/Library/StartupItems/IPSecuritasDaemon/IPSecuritasMenu.app/Contents/Info.plist

/Library/StartupItems/IPSecuritasDaemon/IPSecuritasMenu.app/Contents/MacOS/IPSe curitasMenu

/Library/StartupItems/IPSecuritasDaemon/phase1-down

/Library/StartupItems/IPSecuritasDaemon/phase1-up

/Library/StartupItems/IPSecuritasDaemon/racoon

/Library/StartupItems/IPSecuritasDaemon/StartupParameters.plist



User login items



duet

- /Applications/Duet.app

Dropbox

- /Applications/Dropbox.app

Dropbox Encore

- /Applications/Dropbox Encore.app

GeekTool Helper

- missing value

Knock

- /Applications/Knock.app



iCloud errors



cloudd: 657

com.apple.InputMethodKit.UserDictionary: 1



Restricted files: 2619



Lockfiles: 10



Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

- mod date: Jun 20 09:27:21 2013

- checksum: 1230128945



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.teamviewer.teamviewer</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer 8/TeamViewer.app/Contents/MacOS/TeamViewer</string>

<string>-RunAsAgent</string>

<string>YES</string>

</array>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer 8/TeamViewer.app/Contents/MacOS/</string>

<key>RunAtLoad</key>

<true/>

<key>Debug</key>

<true/>

<key>OnDemand</key>

<false/>

<key>Disabled</key>

<true/>

</dict>



...and 1 more line(s)



Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

- mod date: Jun 20 09:27:21 2013

- checksum: 190701536



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.teamviewer.desktop</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

<string>Aqua</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer 8/TeamViewer.app/Contents/Resources/TeamViewer_Desktop</string>

<string>-RunAsAgent</string>

<string>YES</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer 8/TeamViewer.app/Contents/Resources/</string>

<key>Debug</key>

<true/>

<key>RunAtLoad</key>

<true/>



...and 6 more line(s)



Contents of /Library/LaunchAgents/jp.co.canon.ScanGearMF.appl.Canon-MF-Scan-Agent.plist

- mod date: Sep 10 02:00:00 2012

- checksum: 3126182315



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>jp.co.canon.ScanGearMF.appl.Canon-MF-Scan-Agent</string>

<key>KeepAlive</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Canon/ScanGear MF/Utilities/Canon MF Scan Agent.app/Contents/MacOS/Canon MF Scan Agent</string>

</array>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

- mod date: Aug 25 09:00:00 2010

- checksum: 998894468



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>MachServices</key>

<dict>

<key>com.microsoft.office.licensing.helper.port</key>

<true/>

</dict>

<key>Label</key>

<string>com.microsoft.office.licensing.helper</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper</s tring>

</array>

<key>ServiceIPC</key>

<true/>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.spyresoft.dockmodhelper.plist

- mod date: Mar 18 15:22:57 2014

- checksum: 4109968445



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.spyresoft.dockmodhelper</string>

<key>MachServices</key>

<dict>

<key>com.spyresoft.dockmodhelper</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.spyresoft.dockmodhelper</string>

</array>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

- mod date: Apr 25 15:11:50 2013

- checksum: 13465011



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Debug</key>

<true/>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.teamviewer.service</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer 8/TeamViewer.app/Contents/Resources/TeamViewer_Service</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer 8/TeamViewer.app/Contents/Resources</string>

</dict>

</plist>



Contents of /etc/hosts

- mod date: Sep 15 19:48:57 2011

- checksum: 3662208427



127.0.0.1 localhost

255.255.255.255 broadcasthost

::1 localhost

fe80::1%lo0 localhost

127.0.0.1 activate.adobe.com



Contents of /etc/syslog.conf

- mod date: Jan 6 14:55:10 2015

- checksum: 755542752



install.* @127.0.0.1:32376

*usbmux* /dev/null



Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Sep 15 19:50:57 2011

- checksum: 926752576



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Acrobat X Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>12600</integer>

</dict>

</plist>



Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist

- mod date: Sep 14 14:15:55 2011

- checksum: 2428853555



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.apple.CSConfigDotMacCert-EMAIL-SharedServices</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>LowPriorityIO</key>

<true/>

<key>Nice</key>

<integer>10</integer>

<key>ProgramArguments</key>

<array>

<string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>

<string>-l</string>

<string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>

<string>-u</string>

<string>EMAIL</string>

<string>-t</string>

<string>SharedServices</string>

<string>-s</string>

</array>



...and 4 more line(s)



Contents of Library/LaunchAgents/com.google.keystone.agent.plist

- mod date: Jan 15 21:10:51 2015

- checksum: 4110057263



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.google.keystone.user.agent</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

<string>-runMode</string>

<string>ifneeded</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3523</integer>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>



Bad plists



Library/Preferences/com.largechrome.depolarization.plist

Library/Preferences/com.Largetita.Monteith.plist

Library/Preferences/com.signcorporation.agave.plist



App extensions



com.getdropbox.dropbox.garcon

com.pixelmatorteam.pixelmator.Repair-Tool-Action-Extension



Elapsed time (sec): 1002

Mail App Freezes/Hangs OS X 10.10.2

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.