Problem description: My computer is running very slow ever since I switched to Yosemite. I get the multicolored wheel just opening my browser at times and waiting for a page to open, or an application. Any ideas other than rebooting my computer to

Question

Level 1

19 points

Problem description: My computer is running very slow ever since I switched to Yosemite. I get the multicolored wheel just opening my browser at times and waiting for a page to open, or an application. Any ideas other than rebooting my computer to

Problem description:

My computer is running very slow ever since I switched to Yosemite. I get the multicolored wheel just opening my browser at times and waiting for a page to open, or an application. Any ideas other than rebooting my computer to get the problem to alleviate for a few days?

EtreCheck version: 2.1.8 (121)

Report generated February 16, 2015 at 2:35:55 PM PST

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: ℹ️

iMac (21.5-inch, Late 2009) (Technical Specifications)

iMac - model: iMac10,1

1 3.06 GHz Intel Core 2 Duo CPU: 2-core

4 GB RAM Upgradeable

BANK 0/DIMM0

Empty

BANK 1/DIMM0

Empty

BANK 0/DIMM1

2 GB DDR3 1067 MHz ok

BANK 1/DIMM1

2 GB DDR3 1067 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Video Information: ℹ️

NVIDIA GeForce 9400 - VRAM: 256 MB

iMac 1920 x 1080

System Software: ℹ️

OS X 10.10.2 (14C109) - Time since boot: 11 days 19:34:2

Disk Information: ℹ️

ST3500418ASQ disk0 : (500.11 GB)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

BOOTCAMP (disk0s4) /Volumes/BOOTCAMP : 60.76 GB (15.30 GB free)

Macintosh HD (disk1) / : 438.11 GB (351.62 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 438.49 GB Online

HL-DT-ST DVDRW GA11N

USB Information: ℹ️

Apple Inc. Built-in iSight

Apple Internal Memory Card Reader

Apple, Inc. Keyboard Hub

Apple Inc. Apple Keyboard

hp officejet 4200 series

Apple Computer, Inc. IR Receiver

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Gatekeeper: ℹ️

Mac App Store and identified developers

Problem System Launch Agents: ℹ️

[killed] com.apple.accountsd.plist

[killed] com.apple.AirPlayUIAgent.plist

[killed] com.apple.bird.plist

[killed] com.apple.CallHistoryPluginHelper.plist

[killed] com.apple.CallHistorySyncHelper.plist

[killed] com.apple.cloudd.plist

[killed] com.apple.coreservices.appleid.authentication.plist

[killed] com.apple.coreservices.uiagent.plist

[killed] com.apple.EscrowSecurityAlert.plist

[killed] com.apple.icloud.fmfd.plist

[killed] com.apple.iconservices.iconservicesagent.plist

[killed] com.apple.nsurlsessiond.plist

[killed] com.apple.pluginkit.pkd.plist

[killed] com.apple.printtool.agent.plist

[killed] com.apple.recentsd.plist

[killed] com.apple.secd.plist

[killed] com.apple.security.cloudkeychainproxy.plist

[killed] com.apple.spindump_agent.plist

[killed] com.apple.telephonyutilities.callservicesd.plist

19 processes killed due to memory pressure

Problem System Launch Daemons: ℹ️

[killed] com.apple.AssetCacheLocatorService.plist

[killed] com.apple.awdd.plist

[killed] com.apple.coresymbolicationd.plist

[killed] com.apple.ctkd.plist

[killed] com.apple.diagnosticd.plist

[killed] com.apple.emond.aslmanager.plist

[killed] com.apple.iconservices.iconservicesagent.plist

[killed] com.apple.iconservices.iconservicesd.plist

[killed] com.apple.ifdreader.plist

[killed] com.apple.nehelper.plist

[killed] com.apple.nsurlsessiond.plist

[killed] com.apple.periodic-daily.plist

[killed] com.apple.periodic-monthly.plist

[killed] com.apple.periodic-weekly.plist

[killed] com.apple.sandboxd.plist

[killed] com.apple.softwareupdate_download_service.plist

[killed] com.apple.spindump.plist

[killed] com.apple.tccd.system.plist

[killed] com.apple.wdhelper.plist

[killed] com.apple.xpc.smd.plist

20 processes killed due to memory pressure

User Launch Agents: ℹ️

[loaded] com.adobe.ARM.[...].plist [Click for support]

[running] com.GoodShop.updater.plist [Click for support]

User Login Items: ℹ️

None

Internet Plug-ins: ℹ️

o1dbrowserplugin: Version: 5.38.6.0 - SDK 10.8 [Click for support]

Google Earth Web Plug-in: Version: 5.2 [Click for support]

Default Browser: Version: 600 - SDK 10.10

Flip4Mac WMV Plugin: Version: 2.4.2.4 [Click for support]

RealPlayer Plugin: Version: Unknown [Click for support]

AdobePDFViewerNPAPI: Version: 10.1.13 [Click for support]

DivXBrowserPlugin: Version: 2.0 [Click for support]

Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Click for support]

QuickTime Plugin: Version: 7.7.3

iPhotoPhotocast: Version: 7.0

googletalkbrowserplugin: Version: 5.38.6.0 - SDK 10.8 [Click for support]

AdobePDFViewer: Version: 10.1.13 [Click for support]

GarminGpsControl: Version: 4.2.0.0 - SDK 10.8 [Click for support]

User internet Plug-ins: ℹ️

CitrixOnlineWebDeploymentPlugin: Version: 1.0.79 [Click for support]

VSeeHelper: Version: VSeeHelper 1.0.0.0 - SDK 10.8 [Click for support]

Safari Extensions: ℹ️

avast! Online Security

Goodshop app

3rd Party Preference Panes: ℹ️

DivX [Click for support]

Flip4Mac WMV [Click for support]

MacFUSE [Click for support]

Time Machine: ℹ️

Skip System Files: NO

Mobile backups: OFF

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 438.11 GB Disk used: 86.50 GB

Destinations:

Backup [Local]

Total size: 159.70 GB

Total number of backups: 3

Oldest backup: 2014-11-24 05:20:18 +0000

Last backup: 2015-02-01 03:04:02 +0000

Size of backup disk: Too small

Backup size 159.70 GB < (Disk used 86.50 GB X 3)

Top Processes by CPU: ℹ️

8% WindowServer

5% DashboardClient

3% mds

2% launchd

0% ocspd

Top Processes by Memory: ℹ️

64 MB WindowServer

52 MB thunderbird

34 MB mds

34 MB Mail

30 MB mds_stores

Virtual Memory Information: ℹ️

654 MB Free RAM

834 MB Active RAM

777 MB Inactive RAM

903 MB Wired RAM

102.49 GB Page-ins

1.46 GB Page-outs

Diagnostics Information: ℹ️

Standard users cannot read /Library/Logs/DiagnosticReports.

Run as an administrator account to see more information.

iMac, OS X Yosemite (10.10.2)

Posted on Feb 16, 2015 2:44 PM

Reply

Answer 1

Best reply

Linc Davis

Level 10

209,541 points

Feb 16, 2015 6:33 PM in response to JIL33

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(1241 ' 0.5 0.25 10 1000 15 5120 1000 25000 1 1 0 100 ' 51 25600 4 10 25 5120 102400 1000 25 1000 80 40 500 300 85 25 20480 262144 20 2000 524288 604800 5 );k=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays PCI UniversalAccess InstallHistory ConfigurationProfile AirPort 'com\.apple\.' -\\t N\\/A 'AES|atr|udit|msa|dnse|ax|ensh|fami|FileS|fing|ft[pw]|gedC|kdu|etS|is\.|alk|ODSA|otp|htt|pcas|ps-lp|rexe|rlo|rsh|smb|snm|teln|upd-[aw]|uuc|vix|webf' OSBundle{Require,AllowUserLoa}d 'Mb/s:per sec:ms/s:KiB/s:%:total:MB:total' 'Net in:Net out:I/O wait time:I/O requests:CPU usage:Open files:Memory:Mach ports:File opens:Forks:Failed forks:System errors' 'tsA|[ST]M[HL]' PlistBuddy{,' 2>&1'}' -c Print' 'Info\.plist' CFBundleIdentifier );f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' '%s %s\n' '%s\n'"${k[22]}"'%s\n' '\nContents of %s\n '"${k[22]}"'mod date: %s\n '"${k[22]}"'checksum: %s\n%s\n' '%d MB: %s\n' '\n ...and %s more line(s)\n' );c=(879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 3374894509 1051159591 892310726 1707497389 523110921 2883943871 3873345487 );s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[4]} ' s/:$//;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[9]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' BEGIN { FS=":";if(system("sw_vers -productVersion|grep -q ^10\.1")) d="^'"${k[21]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' { sub(/ :/,"");print|"tail -n'${p[10]}'";} ' ' NR==2&&$4<='${p[7]}' { print $4;} ' ' ($1~"wir"&&$2>'${p[22]}')||($1~/P.+ts:/&&$2>'${p[19]}') { print $1" "int($2);} ' '/YLD/s/=/ /p' ' { q=$1;$1="";u=$NF;$NF="";gsub(/ +$/,"");print q":"$0":"u;} ' ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' ' !/ /{print};END{if(NR<'{${p[12]},${p[13]}}')printf("^'"${k[21]}"'.+")} ' '|uniq' ' 1;END { if(NR<'{${p[14]},${p[21]}}') printf("^/[Sp].+|'${k[21]}'");} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p;' '&&echo On' '/\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/p' '/\.dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".","");print $0"$";} END { split("'"${c[*]}"'",c);for(i in c) print "\t"c[i]"$";} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' $2=="=" { gsub(/[()"]/,"",$3);print $3;} ' ' /^\// { sub("/dev/","",$1);printf("%s: %s\n",$1,$9);} ' '>&-||echo No' '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[2]}'{$2=$2-1;print}' ' BEGIN { M1='${p[16]}';M2='${p[18]}';M3='${p[8]}';M4='${p[3]}';} !/^A/{next};/%/ { getline;if($5<M1) o["CPU"]="CPU: user "$2"%, system "$4"%";next;} $2~/^disk/&&$4>M2 { o[$2]=$2": "$3" ops/s, "$4" blocks/s";next;} $2~/^(en[0-9]|bridg)/ { if(o[$2]) { e=$3+$4+$5+$6;if(e) o[$2]=o[$2]"; errors "e"/s";next;};if($4>M3||$6>M4) o[$2]=$2": in "int($4/1024)", out "int($6/1024)" (KiB/s)";} END { for(i in o) print o[i];} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' BEGIN{FS=": "} /^ {10}O/ {exit} /^ {0,12}[^ ]/ {next} $1~"Ne"&&$2!~/^In/{print} $1~"Si" { split($2,a," ");if(a[1]-a[4]<'${p[5]}') print;};$1~"T"&&$2<'${p[20]}'{print};$1~"Se"&&$2!~"2"{print};' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1;} ' ' BEGIN { split("'"${p[1]}"'",m);FS=":";} $2<=m[$1]{next} $1<9 { o[$1]=o[$1]"\n "$3" (UID "$4"): "$2;} $1==9&&$5!~"^/dev" { o[$1]=o[$1]"\n "$3" (UID "$4") => "$5" (status "$6"): "$2;} $1==10&&$5 { p="ps -c -ocomm -p"$5"|sed 1d";p|getline n;close(p);if(n) $5=n;o[$1]=o[$1]"\n "$5" => "$3" UID ("$4"): "$2;} $1~/1[12]/ { o[$1]=o[$1]"\n "$3" (UID "$4", error "$5"): "$2;} END { n=split("'"${k[27]}"'",u,":");for(i=n+1;i<n+5;i++)u[i]=u[2];split("'"${k[28]}"'",l,":");for(i in o) print "\n"l[i]" ("u[i]")\n"o[i];} ' ' /^ {8}[^ ]/{print} ' ' BEGIN { L='${p[17]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${k[30]}"' "F|getline g) { l++;if(l<=L) f=f"\n "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n '"${k[22]}"'"T;printf("'"${f[5]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' 's/^.{52}(.+) <.+/\1/p' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");p=a[1];k[S]='${k[25]}';k[U]='${k[26]}';v[S]="Safe";v[U]="true";for(i in k) { s=system("'"${k[30]}"'\\ :"k[i]" \""p"\"/*/I*|grep -qw "v[i]);if(!s) a[1]=a[1]" "i;};if(!a[2]) a[2]="'"${k[23]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${k[31]}"'\\ :'"${k[33]}"' \""$0"\"/*/'${k[32]}'";p|getline b;close(p);if(b~/ /||b=="") b="'"${k[23]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR>=13 { gsub(/[^0-9]/,"",$1);print;} ' ' $10~/$L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${k[32]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ / [VY]/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' '/^find: /!p;' ' /^p/{ s/.//g;x;s/\nu/:/;s/(\n)c/\1:/;s/\n\n//;p;};H;' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;p;' ' s/^.+ |\(.+$$//g;p;' '1;END{if(NR<'${p[15]}')printf("^/(S|usr/(X|li))")}' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END{ if(i>1)print n} ' s/{'\.|jnl: ','P.+:'}'//;s/ +([0-9]+)(.+)/\2 \1/p' ' /es: ./{ s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(B2|[my]): /H;d;:0'$'\n'' x;/[my]: [AM]|m: I.+p$|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/:(0|-(4[34])?)$/p' '|sort'{'|uniq'{,\ -c},\ -nr} ' s/^/'{5,6,7,8}':/;s/ *: */:/g;p;' '/e:/{print $2}' ' /^[(]/{ s/....//;s/$/:/;N;/: [)]$/d;s/\n.+ ([^ ]+).$/\1/;H;};${ g;p;} ' 's/:.+$//p' '|wc -l' /{\\.{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'Info,'Launch[AD].+'}'\.plist$/p' 's/([-+.?])/\\\1/g;p' 's/, /\'$'\n/g;p' ' BEGIN{FS=":"} { printf("'"${f[6]}"'",$1/1048576,$2);} ' ' /= D/&&$1!~/'{${k[24]},${k[29]}}'/ { getline d;if(d~"t") D=D"\n"$1;} END { print D;} ' ' NR>1&&$3!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $3":"$2;} ' '|tail -n'${p[6]} ' $1>1 { $NF=$NF" x"$1;} /\*/ { if(!f) f="\n\t* Code injection";} { $1="";} 1;END { print f;} ' ' s/.+bus /Bus: /;s/,.+[(]/ /;s/,.+//p;' ' { $NF=$NF" Errors: "$1;$1="";} 1 ' ' 1s/^/\'$'\n''/;/^ +(([MNPRSV]|De|Li).+|Bus): .|d: Y/d;s/:$//;$d;p;' ' BEGIN { RS=",";FS=":";} $1~"name" { gsub("\"","",$2);print $2;} ' '|grep -q e:/' '/[^ .]/p' '{ print $1}' ' BEGIN{ FS=": "} /^C/ { getline t;if(a[split(t,a)]) print $2;} ' ' 3,4d;/^ +D|Of|Fu| [0B]/d;s/^ |:$//g;$!H;${ x;/:/p;} ' ' BEGIN { FS=": ";} NR==1 { sub(":","");h="\n"$1"\n";} /:$/ { l=$1;next;} $1~"S"&&$2!~3 { getline;next;} /^ {6}I/ { i++;L[i]=l" "$2;if(i=='${p[24]}') nextfile;} END { if(i) print h;for(j=0;j<i;j++) print L[i-j];} ' ' /services =/,/[\}]/!d;/[=\}]/!p ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${k[30]}\\" echo cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin' env pluginkit scutil 'dtrace -q -x aggsortrev -n' security sed\ -En awk 'dscl . -read' networksetup mdutil lsof test osascript\ -e netstat mdls route cat );c2=(${k[21]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'" 'L*/Ca*/'${k[21]}'Saf*/E* -d 2 -name '${k[32]} '~ $TMPDIR.. $ -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility Req "'${k[21]}'('{'bird|.*i?clou','lsu|sha'}')"' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message CRne '0xdc008012|(allow|call)ing|(mplet|nabl)ed|ry HD|safe b' -k Message CReq 'bad |Can.t l|corru|dead|fail|GPU |hfs: Ru|inval|Limiti|v_c|NVDA[(]|pagin|Purg(ed|in)|error|Refus|TCON|tim(ed? ?|ing )o|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o%cpu,comm,ruid' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0<0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno!=0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000000);normalize(@h,10240);printa(\"1:%@d:%s:%d\n\",@a);printa(\"2:%@d:%s:%d\n\",@b);printa(\"9:%@d:%s:%d:%s:%d\n\",@c);printa(\"10:%@d:%s:%d:%d\n\",@d);printa(\"11:%@d:%s:%d:%d\n\",@e);printa(\"12:%@d:%s:%d:%d\n\",@f);printa(\"3:%@d:%s:%d\n\",@g);printa(\"4:%@d:%s:%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag $ -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true $ -execdir stat -f:%Sc:%N -t%F {} \;' '/S*/*/Ca*/*xpc*' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' /\ kMDItemContentTypeTree=${k[21]}{bundle,mach-o-dylib} :Label "/p*/e*/{aut*,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {/p*,/usr/local}/e*/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/{Lau,Sec}*/*t .launchd.conf" list '-F "" -k Sender hidd -k Nle 3' /Library/Preferences/${k[21]}alf\ globalstate --proxy '-n get default' print\ system --dns -get{dnsservers,info} dump-trust-settings\ {-s,} '' -n1 '-R -ce -l1 -n5 -o'{'prt -stats prt','mem -stats mem'}',command,uid' -kl -l -s\ / '--regexp --files '${k[21]}'pkg.*' '+c0 -i4TCP:0-1023' ${k[21]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER' '-app Safari WebKitDNSPrefetchingEnabled' '-Fcu +c0 -l' -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','(a und|I/O |jnl_io.+)err','USBF:.+bus'}'"' -name\ kMDItem${k[33]} -T\ hfs '-n get default' -listnetworkserviceorder :${k[33]} :CFBundleDisplayName $EUID {,'/{S*/,}'}'L*/{,Co*/*/*/L*/}{Cache,Log}s $TMPDIR../C -type f -size +'${p[11]}'M -exec stat -f'%z:%N' {} \;' \ /v*/d*/*/*l*d{,.*.$UID}/* '-app Safari UserStyleSheetEnabled' 'L*/A*/Fi*/P*/*/a*.json' users/$USER\ HomeDirectory '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' ' -F "\$Time \$Sender \$(RefProc): \$Message" -k Level Nle 3 -k Facility R'{'ne "user|','eq "'}'console" -k Message CRne "^[^A-Z]|deprec|sandbox ex" ' getenv '/ "kMDItemDateAdded>=\$time.now(-'${p[23]}')&&kMDItem'${k[33]}'=*"' -m\ / );N1=${#c2[@]};for j in {0..20};do c2[N1+j]=SP${k[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel,Firefox}\ extensions System\ load boot\ args FileVault\ {2,1} {Kernel,System,Console}\ log Activity SMC Login\ hook 'I/O per process' 'High file counts' UID Daemons Agents XPC\ cache Startup\ items {Admin,Root}\ access Stylesheet Library\ paths{,' ('{shell,launchd}\)} Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory\ pressure Listeners Widgets Parental\ Controls Prefetching Nets Volumes {Continuity,I/O,iCloud,HID,HCI}\ errors {User,System}\ {caches/logs,overrides} Shutdown\ codes Heat Diagnostic\ reports Bad\ plists Free\ space VM Bundles{,' (new)'} 'Trusted certs ('{system,user}\) );N3=${#l[@]};for i in {0..8};do l[N3+i]=${k[5+i]};done;F() { local x="${s[$1]}";[[ "$x" =~ ^([\&\|\<\>]|$) ]]&&{ printf "$x";return;};:|${c1[30]} "$x" 2>&-;printf "%s \'%s\'" "|${c1[30+$?]}" "$x";};A0() { Q=6;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[0]};};A1() { local c="${c1[$1]} ${c2[$2]}";shift 2;c="$c ` while [[ "$1" ]];do F $1;shift;done`";((P2))&&{ c="sudo $c";P2=;};v=`eval "$c"`;[[ "$v" ]];};A2() { local c="${c1[$1]}";[[ "$c" =~ ^(awk|sed ) ]]&&c="$c '${s[$2]}'"||c="$c ${c2[$2]}";shift 2;local d=` while [[ "$1" ]];do F $1;shift;done`;((P2))&&{ c="sudo $c";P2=;};local a;v=` while read a;do eval "$c '$a' $d";done<<<"$v";`;[[ "$v" ]];};A3(){ v=$((`date +%s`-v[3]));};B1() { v=No;! ((v[1]))&&{ v=;P1=1;};};eval "`type -a B1|sed '1d;s/1/2/'`";B3(){ v[$1]="$v";};B4() { local i=$1;local j=$2;shift 2;local c="cat` while [[ "$1" ]];do F $1;shift;done`";v[j]=`eval "{ $c;}"<<<"${v[i]}"`;};B5(){ v="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`egrep -v "${v[$1]}"<<<"$v"|sort`;};eval "`type -a B7|sed '1d;s/7/8/;s/-v //'`";C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { B4 0 0 63&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";printf '\n\tThe test results are on the Clipboard.\n\n\tPlease close this window.\n';exit 2>&-;};for i in 1 2;do eval D$((i-1))'() { A'$i' $@;C0;};';for j in 2 3;do eval D$((i+2*j-3))'() { local x=$1;shift;A'$i' $@;C'$j' $x;};';done;done;trap C5 2;o=$({ A0;D0 0 N1+1 2;D0 0 $N1 1;B1;C2 27;B1&&! B2&&C2 28;D2 22 15 63;D0 0 N1+2 3;D0 0 N1+15 17;D4 3 0 N1+3 4;D4 4 0 N1+4 5;D4 N3+4 0 N1+9 59;D0 0 N1+16 99; for i in 0 1 2;do D4 N3+i 0 N1+5+i 6;done;D4 N3+3 0 N1+8 71;D4 62 1 10 7;D4 10 1 11 8;B2&&D4 18 19 53 67;D2 11 2 12 9;D2 12 3 13 10;D2 13 32 70 101 25;D2 65 6 76 13;D2 45 20 52 66;D4 66 7 37 14;D4 17 8 15 38;D0 9 16 16 77 45;C4;B2&&D0 35 49 61 75 76 78 45;B2&&{ D0 28 17 45;C4;};D0 12 40 54 16 79 45;D0 12 39 54 16 80 45;D4 31 25 37 15&&{ B4 0 8 103;B4 8 0;A2 18 74;B6 8 0 3;C3 32;};B2&&D4 19 21 0;B2&&D4 40 10 42;D2 2 0 N1+19 46 84;D2 44 34 43 53;D2 25 22 20 32;D2 33 0 N1+14 51;D4 69 29 35 104 75 96;D4 70 29 36 104 75 96;D2 34 21 28 35;D4 35 27 29 36;A1 40 59 81;B3 18;A1 33 60 82;B8 18;B4 0 19 83;A1 27 32 39&&{ B3 20;B4 19 0;A2 33 33 40;B3 21;B6 20 21 3;};C2 36;D4 50 38 5 68;B4 19 0;D5 37 33 34 42;B2&&D4 46 35 45 55;D4 38 0 N1+20 43;B2&&D4 59 4 65 76 91;D4 63 4 19 44 75 95 96;B1&&{ D4 53 5 55 75 69&&D4 51 6 58 31;D4 56 5 56 97 75 98&&D0 0 N1+7 99;D2 55 5 27 84;D4 61 5 54 75 70;D4 14 5 14 12;D4 15 5 72 12;C4;};D4 16 5 73 12;A1 13 44 74 18;C4;B3 4;B4 4 0 85;A2 14 61 89;B4 0 5 19 102;A1 17 41 50;B7 5;C3 8;B4 4 0 88;A2 14 24 89;C4;B4 0 6 19 102;B4 4 0 86;A2 14 61 89;B4 0 7 19 102;B5 6 7;B4 0 11 73 102;A1 18 31 107 94 74||{ B2&&A1 18 26 94 74;}&&{ B7 11;B4 0 0 11;C3 23;};A1 18 26 94;B7 11;B4 0 0 11;C3 24;D4 60 14 66 92;D4 58 14 67 93;D4 26 4 21 24;D4 42 14 1 62;D4 43 37 2 90 48;D4 41 10 42;D2 48 36 47 25;A1 4 3 60&&{ B3 9;A2 14 61;B4 0 10 21;B4 9 0;A2 14 62;B4 0 0 21;B6 0 10 4;C3 5;};D4 9 41 69 100;D2 29 21 68 35;D2 49 21 48 49;B4 4 22 57 102;A1 21 46 56 74;B7 22;B4 0 0 58;C3 47;D4 54 5 7 75 76 69;D4 52 5 8 75 76 69;D4 57 4 64 76 91;D2 0 4 4 84;D2 1 4 51 84;D4 21 22 9 37;D0 0 N1+17 105; A1 23 18 28 89;B4 0 16 22 102;A1 16 25 33;B7 16;B4 0 0 34;D1 31 47;D4 64 4 71 41;C4;B4 4 12 26 89 23 102;for i in {0..3};do A1 0 N1+10+i 72 74;B7 12;B4 0 0 52;C3 N3+5+i;((i))||C4;done;A1 24 22 29;B7 12;B3 14;A2 39 57 30;B3 15;B6 14 15 4;C3 67;A1 24 75 74;B3 23;A2 39 57 30;B3 24;B6 23 24 4;C3 68;B4 4 13 27 89 65;A1 24 23;B7 13;C3 30;B4 4 0 87;A2 14 61 89 20;B4 0 17;A1 26 50 64;B7 17;C3 6;D0 0 N1+18 106;D4 7 11 6;A3;C2 39;C4;} 4>&2 2>/dev/null;);C5

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I may not agree with them.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 2

JIL33 Author

Level 1

19 points

Feb 28, 2015 5:08 PM in response to Linc Davis

Hi Linc! Sorry for the delay. Here is the information:

Start time: 16:48:08 02/28/15

Revision: 1241

Model Identifier: iMac10,1

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 10 days 21:04

UID: 502

SerialATA

ST*******ASQ

USB

officejet 4200 series (Hewlett Packard)

Bluetooth

Apple Wireless Mouse

FileVault 2: On FileVault master keychain appears to be installed

FileVault 1: On

I/O wait time (ms/s)

launchd (UID 0): 53

Font issues: 40

Firewall: On

System caches/logs

1987 MB: /System/Library/Caches/com.apple.coresymbolicationd/data

Diagnostic reports

2015-01-31 SecurityAgent crash

2015-02-01 2BUA8C4S2C.com.agilebits.onepassword4-helper crash

2015-02-01 IMDPersistenceAgent crash

2015-02-01 secd crash

2015-02-20 Inkjet7 crash

2015-02-28 IMDPersistenceAgent crash

2015-02-28 secd crash x2

Kernel log

Feb 23 07:06:08 Failed to get hibernate image filename

Feb 23 17:07:05 Failed to get hibernate image filename

Feb 24 07:06:05 Failed to get hibernate image filename

Feb 24 17:47:13 Failed to get hibernate image filename

Feb 24 18:31:50 IOAudioStream[0xffffff802df40400]::clipIfNecessary() - Error: counted 1 clip more than one buffer ahead errors.

Feb 24 19:14:41 Failed to get hibernate image filename

Feb 24 20:56:40 Failed to get hibernate image filename

Feb 24 22:14:14 Failed to get hibernate image filename

Feb 24 22:38:31 Failed to get hibernate image filename

Feb 25 06:58:23 Failed to get hibernate image filename

Feb 25 17:40:53 Failed to get hibernate image filename

Feb 25 21:04:27 Failed to get hibernate image filename

Feb 25 21:31:52 Failed to get hibernate image filename

Feb 26 07:03:06 Failed to get hibernate image filename

Feb 26 17:06:59 Failed to get hibernate image filename

Feb 27 06:58:56 Failed to get hibernate image filename

Feb 27 17:02:56 Failed to get hibernate image filename

Feb 27 19:17:20 Failed to get hibernate image filename

Feb 27 23:04:12 Failed to get hibernate image filename

Feb 28 10:09:19 Failed to get hibernate image filename

Feb 28 13:07:21 Failed to get hibernate image filename

Feb 28 14:08:38 Failed to get hibernate image filename

Feb 28 15:11:16 Failed to get hibernate image filename

Feb 28 16:18:21 msdosfs_fat_uninit_vol: error 6 from msdosfs_fat_cache_flush

Feb 28 16:29:32 Failed to get hibernate image filename

System log

label = "2.5.4.3";

"localized label" = "2.5.4.3";

type = string;

value = "courier.sandbox.push.apple.com";

})

Feb 28 16:30:55 loginwindow ERROR | __50-[MCXDLauncher(Private) startNetworkChangeThread:]_block_invoke | Unable to GetMCXAgentPort

Feb 28 16:31:09 apsd Failed entitlement check 'com.apple.private.aps-connection-initiate' for ManagedClientAgent[8424]

Feb 28 16:31:44 apsd Failed entitlement check 'com.apple.private.aps-connection-initiate' for ManagedClientAgent[8433]

Feb 28 16:32:36 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Mail" for over 1.00 seconds. Server has re-enabled them.

Feb 28 16:34:16 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.

Feb 28 16:38:37 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "1Password mini" for over 1.00 seconds. Server has re-enabled them.

Feb 28 16:38:49 WindowServer WSGetSurfaceInWindow : Invalid surface 769181205 for window 4518

Feb 28 16:38:56 WindowServer WSGetSurfaceInWindow : Invalid surface 1023641180 for window 4522

Feb 28 16:39:06 WindowServer WSGetSurfaceInWindow : Invalid surface 1058035653 for window 4525

Feb 28 16:39:22 WindowServer WSGetSurfaceInWindow : Invalid surface 996085260 for window 4530

Feb 28 16:39:33 WindowServer WSGetSurfaceInWindow : Invalid surface 1034343505 for window 4534

Feb 28 16:39:39 Google Chrome Helper CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

Feb 28 16:46:20 apsd Failed entitlement check 'com.apple.private.aps-connection-initiate' for ManagedClientAgent[8979]

Feb 28 16:49:02 loginwindow ERROR | __50-[MCXDLauncher(Private) startNetworkChangeThread:]_block_invoke | Unable to GetMCXAgentPort

Daemons

com.apple.AccountPolicyHelper

com.apple.AssetCacheLocatorService

com.apple.CodeSigningHelper

com.apple.MobileFileIntegrity

com.apple.awdd

com.apple.backupd-auto

com.apple.cache_delete

com.apple.coresymbolicationd

com.apple.ctkd

com.apple.diagnosticd

com.apple.emond.aslmanager

com.apple.iconservices.iconservicesagent

com.apple.iconservices.iconservicesd

com.apple.ifdreader

com.apple.installd

com.apple.installer.osmessagetracing

com.apple.nehelper

com.apple.networkd_privileged

com.apple.nsurlsessiond_privileged

com.apple.nsurlstoraged

com.apple.periodic-daily

com.apple.periodic-monthly

com.apple.periodic-weekly

com.apple.sandboxd

com.apple.secinitd

com.apple.security.syspolicy

- status: -15

com.apple.softwareupdate_download_service

com.apple.softwareupdated

com.apple.spindump

com.apple.sysmond

com.apple.systemstatsd

com.apple.tccd.system

com.apple.watchdogd

com.apple.wdhelper

org.cups.cupsd

Agents

2BUA8C4S2C.com.agilebits.onepassword4-helper

com.adobe.ARM.UUID

com.apple.AirPortBaseStationAgent

com.apple.imdpersistence.IMDPersistenceAgent

- status: -10

com.apple.secd

- status: -10

User crontab

59 16 * * 7 /Applications/MacScan\ 2/MacScan.app/Contents/MacOS/MacScan -autoscan YES

Firefox extensions

Mozilla Firefox hotfix

Widgets

iCal

iCloud errors

cloudd 7

comapple.InputMethodKit.UserDictionary 2

CallHistorySyncHelper 1

Continuity errors

sharingd 1

Restricted files: 174

Lockfiles: 30

High file counts

Desktop: 54

Accessibility

Scroll Zoom: On

Contents of /System/Library/Security/authorization.plist

- mod date: Oct 9 02:17:00 2014

- checksum: 2720110640

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>comment</key>

<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

allow rule: this is always allowed

<key>com.apple.TestApp.benign</key>

<string>allow</string>

deny rule: this is always denied

<key>com.apple.TestApp.dangerous</key>

user rule: successful authentication as a user in the specified group(5) allows the associated right.

The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.

See remaining rules for examples.

</string>

<key>rights</key>

<dict>

<dict>

<key>class</key>

<key>comment</key>

...and 1850 more line(s)

Contents of /private/etc/authorization.deprecated

- mod date: Oct 25 13:37:39 2014

- checksum: 842352627

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>comment</key>

<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

allow rule: this is always allowed

<key>com.apple.TestApp.benign</key>

<string>allow</string>

deny rule: this is always denied

<key>com.apple.TestApp.dangerous</key>

user rule: successful authentication as a user in the specified group(5) allows the associated right.

The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.

See remaining rules for examples.

</string>

<key>rights</key>

<dict>

<dict>

<key>class</key>

<key>comment</key>

...and 1013 more line(s)

Contents of /private/etc/pam.d/prl_disp_service

- mod date: Mar 5 03:24:01 2010

- checksum: 1160556194

auth required pam_nologin.so

auth optional pam_afpmount.so

auth sufficient pam_securityserver.so nullok

auth sufficient pam_unix.so nullok

auth required pam_deny.so

account required pam_permit.so

password required pam_deny.so

session required pam_permit.so

session optional pam_afpmount.so

Contents of /private/etc/pam.d/prl_disp_service.snow_leopard

- mod date: Mar 5 03:24:01 2010

- checksum: 2633576920

auth optional pam_krb5.so

auth optional pam_mount.so

auth sufficient pam_serialnumber.so serverinstall legacy

auth required pam_opendirectory.so

account required pam_nologin.so

account required pam_opendirectory.so

password required pam_deny.so

session required pam_launchd.so

session required pam_uwtmp.so

session optional pam_mount.so

auth optional pam_krb5.so

auth optional pam_mount.so

auth sufficient pam_serialnumber.so serverinstall legacy

auth required pam_opendirectory.so

account required pam_nologin.so

account required pam_opendirectory.so

password required pam_deny.so

session required pam_launchd.so

session required pam_uwtmp.so

session optional pam_mount.so

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Aug 1 17:37:19 2012

- checksum: 408149527

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Applications

/Applications/Acrobat 6.0 Professional/Acrobat 6.0.2 Professional.app

- N/A

/Applications/Acrobat 6.0 Professional/Acrobat Distiller 6.0.2.app

- com.adobe.distiller

/Applications/Adobe/Acrobat.com.app

- com.adobe.mauby.UUID.1

/Applications/Adobe/Adobe Help.app

- chc.UUID.1

/Applications/Bible Explorer 4.app

- com.BE8.wordsearchbible.corp

/Applications/DivX Converter.app

- N/A

/Applications/DivX Player.app

- com.divx.DivX_Player

/Applications/DivX/DivX Community.app

- com.spritec.DVD

/Applications/DivX/DivX Products.app

- com.spritec.DVD

/Applications/DivX/DivX Support.app

- com.spritec.DVD

/Applications/DivX/Uninstall DivX for Mac.app

- com.divxinc.uninstalldivxformac

/Applications/FOX News Live.app

- FoxPlayerAIR.UUID.1

/Applications/Flip4Mac/WMV Player.app

- net.telestream.wmv.player

/Applications/Garmin Express.app

- com.garmin.renu.client

/Applications/Garmin WebUpdater.app

- com.garmin.WebUpdater

/Applications/Hewlett-Packard/HP Image Edit.app

- com.hp.hpimageedit

/Applications/Hewlett-Packard/HP Image Print.app

- com.hp.photo.imageprint

/Applications/Hewlett-Packard/HP Image Zone.app

- com.hp.imagezone

/Applications/Hewlett-Packard/HP Instant Share.app

- com.hp.photo.instantshare

/Applications/Hewlett-Packard/HP Panorama Stitching.app

- com.hp.PanoramaStitching

/Applications/Hewlett-Packard/HP Photo and Imaging Software/HP E-mail Portal/HP E-mail Portal

- N/A

/Applications/Hewlett-Packard/HP Photo and Imaging Software/HP Photo and Imaging Director/Director Docker.app

- com.hp.director.docker

/Applications/Hewlett-Packard/HP Software Update.app

- com.hp.softwareupdate

/Applications/Hewlett-Packard/HP Uninstaller

- N/A

/Applications/Karaoke Maker/Audacity.app

- net.sourceforge.audacity

/Applications/Macromedia Studio 8/Macromedia Contribute 3/Contribute

- com.macromedia.Contribute

/Applications/Macromedia Studio 8/Macromedia Contribute 3/Contribute/Contents/MacOS/Contribute

- N/A

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8

- com.macromedia.Dreamweaver

/Applications/Macromedia Studio 8/Macromedia Extension Manager/Extension Manager.app

- com.macromedia.ExtensionManager

/Applications/Macromedia Studio 8/Macromedia Fireworks 8/Fireworks 8.app

- com.macromedia.fireworks

/Applications/Macromedia Studio 8/Macromedia Flash 8 VideoEncoder/Flash 8 Video Encoder.app

- com.macromedia.FLVEncoder

/Applications/Macromedia Studio 8/Macromedia Flash 8/Flash 8.app

- com.macromedia.flash.8

/Applications/Microsoft AutoUpdate.app

- com.microsoft.autoupdate

/Applications/Microsoft Office 2004/Additional Tools/Handheld Sync Installer

- com.MindVision.VISEX

/Applications/Microsoft Office 2004/Additional Tools/Handheld Sync Installer/Contents/MacOSClassic/Handheld Sync Installer

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Microsoft Language Register/Microsoft Language Register

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Remote Desktop Connection/Remote Desktop Connection

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Remove Office/Remove Office

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Windows Media Installer

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Windows Media Installer/Contents/MacOS/Windows Media Installer

- N/A

/Applications/Microsoft Office 2004/MSN Messenger.app

- Microsoft/com.microsoft.Messenger

/Applications/Microsoft Office 2004/Microsoft Entourage

- N/A

/Applications/Microsoft Office 2004/Microsoft Excel

- N/A

/Applications/Microsoft Office 2004/Microsoft PowerPoint

- N/A

/Applications/Microsoft Office 2004/Microsoft Word

- N/A

/Applications/Microsoft Office 2004/Office/Alerts Daemon.app

- Microsoft/com.microsoft.AlertsDaemon

/Applications/Microsoft Office 2004/Office/Database Utility

- N/A

/Applications/Microsoft Office 2004/Office/Equation Editor

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Cert Manager.app

- com.microsoft.certmgr

/Applications/Microsoft Office 2004/Office/Microsoft Clip Gallery

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Database Daemon

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Error Reporting.app

- com.microsoft.error_reporting

/Applications/Microsoft Office 2004/Office/Microsoft Graph

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Office Notifications

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Query

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Sync Services.app

- com.microsoft.entourage.syncservices

/Applications/Microsoft Office 2004/Office/Organization Chart

- N/A

/Applications/Microsoft Office 2004/Office/Project Gallery Launcher

- N/A

/Applications/Open XML Converter.app

- com.microsoft.OfficeConverter

/Applications/OpenOffice.app

- org.openoffice.script

/Applications/Quicken 2007/Quicken 2007

- com.intuit.quicken

/Applications/Quicken 2007/Quicken 2007/Contents/MacOS/Quicken 2007

- N/A

/Applications/Quicken 2007/Quicken 2007/Contents/SupportApps/Emergency Records Organizer

- com.intuit.ero

/Applications/Quicken 2007/Quicken 2007/Contents/SupportApps/Emergency Records Organizer/Contents/MacOSClassic/Emergency Records Organizer

- N/A

/Applications/Quicken 2007/Quicken 2007/Contents/SupportApps/Home Inventory.app

- com.intuit.HomeInventory

/Applications/Quicken 2007/Quicken 2007/Contents/SupportApps/Quicken Backup Utility.app

- com.intuit.quicken.dotmac

/Applications/Quicken 2007/Quicken 2007/Contents/SupportApps/Quicken Scheduler

- N/A

/Applications/RealPlayer Converter.app

- com.real.converter

/Applications/RealPlayer.app

- com.RealNetworks.RealPlayer

/Applications/TorBrowser.app

- N/A

/Applications/Utilities/Adobe AIR Application Installer.app

- com.adobe.air.ApplicationInstaller

/Applications/Utilities/Adobe Utilities.localized/Adobe Updater6/Adobe Updater.app

- "com.Adobe.ESD.AdobeUpdaterApplication"

/Library/Application Support/Adobe/AdobePDF.app

- com.Adobe.print.AdobePDF.bef

/Library/Application Support/DivX/DivXUpdater.app

- com.divx.DivXUpdater

/Library/Application Support/Hewlett-Packard/Software Update/HP Rules Processor.app

- com.hp.rulesprocessor

/Library/Application Support/Hewlett-Packard/Software Update/HP Scheduler.app

- com.hp.HPScheduler

/Library/Application Support/Hewlett-Packard/Software Update/HP Software Updater

- N/A

/Library/Application Support/Hewlett-Packard/Software Update/HP Software Updater/Contents/MacOS/HP Software Updater

- N/A

/Library/Application Support/Microsoft/HV1.0/Microsoft Help Viewer.app

- com.microsoft.helpviewer

/Library/Application Support/Microsoft/Office Converter Support/Open XML for Charts.app

- com.microsoft.openxml.chartconverter.app

/Library/Application Support/Microsoft/Office Converter Support/Open XML for Excel.app

- com.microsoft.openxml.excel.app

/Library/Application Support/Microsoft/Office Converter Support/Open XML for Word.app

- com.microsoft.openxml.word.app

/Library/Application Support/Microsoft/Office Converter Support/pptfc.app

- com.microsoft.openxml.powerpoint.app

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

- com.microsoft.silverlight.sllauncher

/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

- com.apple.ScriptEditor.id.cocoa-applet-template

/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

- com.apple.ScriptEditor.id.droplet-with-settable-properties-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

- com.apple.ScriptEditor.id.file-processing-droplet-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

- com.apple.ScriptEditor.id.image-file-processing-droplet-template

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/flashplayer

- N/A

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/fscommand/c_burn_cd.app

- N/A

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/fscommand/c_export_images.app

- N/A

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/fscommand/c_import_images.app

- N/A

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/fscommand/c_panorama_stitch.app

- N/A

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/fscommand/c_use_folders.app

- N/A

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/fscommand/c_use_image_edit.app

- N/A

/Library/Documentation/Help/HP Photo and Imaging Help/shrd/fscommand/c_use_image_print.app

- N/A

/Library/Documentation/User Guides and Information.localized/Apple Hardware Test Read Me.app

- com.apple.AppleHardwareTestReadMe

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app

- com.adobe.air.ApplicationInstaller

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app

- com.adobe.air.Template

/Library/Image Capture/Scripts/Import and View with iPhoto.app

- com.hp.iPhoto.icautotask

/Library/Parallels/Parallels Mounter.app

- com.parallels.server.mounter

/Library/Printers/hp/Fax/fax.backend

- com.hp.fax

/Library/Printers/hp/Fax/rastertofax.filter

- com.hp.rastertofax

/Library/Printers/hp/cups/filters/commandtohp.filter

- com.hp.print.cups.filter.commandtohp

/Library/Printers/hp/cups/filters/pdftopdf.filter

- com.hp.print.cups.filter.pdftopdf

/Library/Printers/hp/cups/tools/autosetup.tool

- com.hp.print.autosetup

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_bepbmhgboaologfdajaanbcjmnhjmhfn/Default bepbmhgboaologfdajaanbcjmnhjmhfn.app

- com.google.Chrome.app.Default-bepbmhgboaologfdajaanbcjmnhjmhfn-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

/Users/USER/Library/Caches/com.adobe.Reader.ARM/UUID/Adobe Reader Updater.app

- com.adobe.ARM

/mike's old computer/Adobe/AdobePDF.app

- com.Adobe.print.AdobePDF.bef

/mike's old computer/Adobe/Installers/R2/Setup.app

- com.adobe.Installers.Setup

/mike's old computer/Deimos Rising/Deimos Rising

- N/A

/mike's old computer/IA_Installers/TypingMaster_for_Mac/TypingMasterMac.app

- N/A

/mike's old computer/TypingMasterMac/UninstallerData/Uninstall TypingMaster for Mac.app

- N/A

/mike's old computer/TypingMasterMac/itutoreng.app

- N/A

/mike's old computer/adobe applications/Adobe GoLive CS/Adobe GoLive CS.app

- com.adobe.GoLive

/mike's old computer/adobe applications/Adobe Illustrator CS/2.app

- com.adobe.illustrator

/mike's old computer/adobe applications/Adobe InDesign CS/InDesign CS.app

- com.adobe.InDesign

/mike's old computer/adobe applications/Adobe InDesign CS/Plug-Ins/Online/AUMLibrary.cfm/Contents/SharedSupport/Adobe Update Manager.app

- com.adobe.ESD.AUM

/mike's old computer/adobe applications/Adobe Photoshop CS/Adobe ImageReady CS.app

- com.adobe.ImageReady

/mike's old computer/adobe applications/Adobe Photoshop CS/Adobe Photoshop CS.app

- com.adobe.Photoshop

/mike's old computer/adobe applications/Adobe Version Cue/Uninstall Adobe Version Cue.app

- N/A

/old computer stuff/At Ease Setup Folder/At Ease Setup

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Apple System Profiler

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Calculator

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Chooser

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/FaxStatus

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Graphing Calculator

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Internet Access/Browse the Internet

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Internet Access/Connect To...

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Internet Access/Mail

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Key Caps

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Note Pad

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Remote Access Status

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Scrapbook

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Sherlock

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/SimpleSound

- N/A

/old computer stuff/OLDIESystem Folder/Apple Menu Items/Stickies

- N/A

/old computer stuff/OLDIESystem Folder/Application Support/IntelliTools/Classic Sending Helper

- N/A

/old computer stuff/OLDIESystem Folder/Application Support/Norton AntiVirus ƒ/NAV Small Scanner

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Appearance

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Apple Menu Options

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/AppleTalk

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/ColorSync

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Configuration Manager

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Control Strip

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Date & Time

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/DialAssist

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Energy Saver

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Extensions Manager

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/File Exchange

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/File Sharing

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/General Controls

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Infrared

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Internet

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Keyboard

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Location Manager

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Memory

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Microsoft Office Manager

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Modem

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Monitors & Sound

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Mouse

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Numbers

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/QuickTime™ Settings:™ Settings:

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/QuikSync

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Remote Access

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Speech

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Startup Disk

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/TCP:IP

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Text

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Users & Groups

- N/A

/old computer stuff/OLDIESystem Folder/Control Panels/Web Sharing

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Application Switcher

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/ColorSync Extension

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Control Strip Extension

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Desktop PrintMonitor

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Desktop Printer Spooler

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/FBC Indexing Scheduler

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/FaxMonitor

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Find/Find by Content Indexing

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Folder Actions

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Norton Scheduler

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/PrintMonitor

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Time Synchronizer

- N/A

/old computer stuff/OLDIESystem Folder/Extensions/Web Sharing Extension

- N/A

/old computer stuff/OLDIESystem Folder/Help/Apple Help Viewer/Help Viewer

- N/A

/old computer stuff/OLDIESystem Folder/MacTCP DNR

- N/A

/old computer stuff/OLDIESystem Folder/Scripting Additions/Desktop Printer Manager

- N/A

/old computer stuff/OLDIESystem Folder/Scripting Additions/Network Setup Scripting

- N/A

/old computer stuff/OLDIESystem Folder/Scripting Additions/URL Access Scripting

- N/A

/old computer stuff/OLDIESystem Folder/System Extensions (Disabled)/AOL 5.0 Backup Installer

- N/A

/old computer stuff/Tony Hawk's Pro Skater 4/Tony Hawk's Pro Skater 4.app

- com.aspyr.thps4

Frameworks

/Library/Frameworks/Adobe AIR.framework

- com.adobe.AIR

/Library/Frameworks/DivX Toolkit.framework

- com.divx.divxtoolkit

/Library/Frameworks/EWSMac.framework

- com.eSellerate.EWSMac67108868

/Library/Frameworks/HPSmartPrint.framework

- com.hp.print.HPSmartPrint

/Library/Frameworks/MacFUSE.framework

- com.google.MacFUSE

/Library/Frameworks/PrintMeSSL.framework

- com.efi.printme.ssl

/Library/Frameworks/TSLicense.framework

- net.telestream.license

PrefPane

/Library/PreferencePanes/DivX.prefPane

- com.divx.divxprefs

/Library/PreferencePanes/Flip4Mac WMV.prefPane

- net.telestream.wmv.prefpane

/Library/PreferencePanes/MacFUSE.prefPane

- com.google.MacFUSE

Bundles

/Library/Audio/MIDI Drivers/EmagicUSBMIDIDriver.plugin

- info.emagic.driver.unitor

/Library/Contextual Menu Items/ParallelsCM.plugin

- com.parallels.cmplugin

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

- com.adobe.adobecp

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

- com.macromedia.FlashPlayer-10.6.plugin

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/adobecp.plugin

- com.adobe.adobecp20

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

- com.adobe.acrobat.pdfviewer

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

- com.adobe.acrobat.pdfviewerNPAPI

/Library/Internet Plug-Ins/DivXBrowserPlugin.plugin

- com.divx.DivXBrowserPlugin

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

- net.telestream.wmv.plugin

/Library/Internet Plug-Ins/GarminGpsControl.plugin

- com.garmin.GarminGpsControl

/Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin

- com.Google.GoogleEarthPlugin.plugin

/Library/Internet Plug-Ins/Silverlight.plugin

- com.microsoft.SilverlightPlugin

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

- com.google.googletalkbrowserplugin

/Library/Internet Plug-Ins/iPhotoPhotocast.plugin

- com.apple.plugin.iPhotoPhotocast

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

- com.google.o1dbrowserplugin

/Library/Printers/Macromedia/PDEs/FlashPaperPDE.plugin

- com.macromedia.flashpaper.pde.FlashPaperPDE

/Library/Printers/PPD Plugins/AdobePDFPDE.plugin

- com.Adobe.print.AdobePDF.pde

/Library/QuickLook/GBQLGenerator.qlgenerator

- com.apple.garageband.quicklookgenerator

/Library/QuickLook/ParallelsQL.qlgenerator

- com.parellels.quicklookgenerator

/Library/Spotlight/GBSpotlightImporter.mdimporter

- com.apple.garageband.spotlightimporter

/Library/Spotlight/Microsoft Entourage.mdimporter

- com.microsoft.entourageMDImporter

/Library/Spotlight/ParallelsMD.mdimporter

- com.parallels.mdimporter

/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/12.0.0.70/PepperFlashPlayer.plugin

- com.macromedia.PepperFlashPlayer.pepper

/Users/USER/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin

- com.citrixonline.mac.WebDeploymentPlugin

Library paths

/Applications/Karaoke Maker/libmp3lame.dylib

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8/Contents/Frameworks/libwchar.dylib

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8/Contents/MacOS/CoreTypes.dylib

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8/Contents/MacOS/LibCURL.dylib

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8/Contents/MacOS/LibCrypto.dylib

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8/Contents/MacOS/LibSSL.dylib

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8/Contents/MacOS/SystemFrameworkUtils.dylib

/Applications/Macromedia Studio 8/Macromedia Dreamweaver 8/Dreamweaver 8/Contents/MacOS/ZLib.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/DWANative.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdCaps.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdFS.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKEngine.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/AdobePIM.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/PWANative.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_caps.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_oobelib.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_upgrade.dylib

/Library/Application Support/Adobe/OOBE/PDApp/UWA/UWANative.dylib

/Library/Application Support/Adobe/OOBE/PDApp/core/AdobePIM.dylib

/Library/Application Support/DivX/Libraries/libDivXDesktopSupport.dylib

/Library/Application Support/DivX/QtPlugins/accessible/libqtaccessiblewidgets.dylib

/Library/Application Support/DivX/QtPlugins/iconengines/libqsvgicon.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqgif.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqico.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqjpeg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqmng.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqsvg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqtiff.dylib

/Library/Application Support/DivX/QtPlugins/script/libqtscriptdbus.dylib

/Library/Application Support/DivX/QtPlugins/sqldrivers/libqsqlite.dylib

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

/Library/Frameworks/MacFUSE.framework/Versions/A/Resources/Debug/libfuse.dylib. dSYM/Contents/Resources/DWARF/libfuse.dylib

/Library/Frameworks/MacFUSE.framework/Versions/A/Resources/Debug/libfuse_ino64. dylib.dSYM/Contents/Resources/DWARF/libfuse_ino64.dylib

/Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/3.0/Frameworks /Core.framework/Versions/3.0/Libraries/libHPIOnetsnmp.5.dylib

/Library/Printers/hp/Frameworks/HPSmartX.framework/Versions/B/Resources/lib/SxC FReader.dylib

/Library/Printers/hp/Frameworks/HPSmartX.framework/Versions/C/Resources/lib/SxC FReader.dylib

/Users/USER/Library/Application Support/AOL Desktop/Security/libnspr4.dylib

/Users/USER/Library/Application Support/AOL Desktop/Security/libnssckbi.dylib

/Users/USER/Library/Application Support/AOL Desktop/Security/libplc4.dylib

/Users/USER/Library/Application Support/AOL Desktop/Security/libplds4.dylib

/Users/USER/Library/Application Support/Firefox/Profiles/w5owlxqa.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.758/_platform_specific/mac_x64/libwidev inecdm.dylib

/Users/USER/Library/Caches/com.apple.ScreenSaver.Engine/com.apple.vision/com.ap ple.vision.64FaceCoreCLKernel.dylib

/mike's old computer/adobe applications/Adobe Version Cue/libpbodbc3.dylib

/mike's old computer/adobe applications/Adobe Version Cue/libps-gcc2-v8_50.dylib

/mike's old computer/adobe applications/Adobe Version Cue/libps-jni-gcc2-v8_50.dylib

/mike's old computer/adobe applications/Adobe Version Cue/libps-pb-gcc2-v8_50.dylib

/mike's old computer/adobe applications/Adobe Version Cue/libps-rw-gcc2-v8_50.dylib

/mike's old computer/adobe applications/Adobe Version Cue/libps-util-gcc2-v8_50.dylib

/mike's old computer/adobe applications/Adobe Version Cue/tomcat/webapps/ROOT/WEB-INF/components/com.adobe.bauhaus.nativecomm/res/VCF oundation.dylib

/usr/lib/libgutenprint.2.0.3.dylib

/usr/local/lib/libfreetype.6.3.16.dylib

/usr/local/lib/libfreetype.6.dylib

/usr/local/lib/libfreetype.dylib

/usr/local/lib/libfuse.2.dylib

/usr/local/lib/libfuse_ino64.2.dylib

Installations

Norton AntiVirus Application: 6/20/10, 10:21 PM

Symantec Scheduler: 6/20/10, 10:21 PM

Microsoft® Silverlight™ Browser Plug-In: 6/19/10, 8:25 PM

Parallels Desktop 5 for Mac: 6/10/10, 6:02 AM

MacFUSE Core: 6/10/10, 6:03 AM

Elapsed time (sec): 317

Reply

Answer 3

Eric Root

Level 10

684,027 points

Mar 1, 2015 4:25 PM in response to JIL33

Un-install Norton Anti-virus and Symantec using the developer's-install instructions.

Norton Product Uninstall

Symantec Uninstaller

More RAM would help. 4 GB is about the bare minimum. The 2 places I’ve seen recommended most to buy reliable RAM are below. I have purchased RAM several times from Other World Computing and have always been very satisfied with the product and service. They have on-line instructions on how to replace the RAM. OWC has also tested RAM above what Apple states is the maximum. I now have 6GB installed on a machine supposedly limited to 4 GB.

Crucial

Other World Computing

Reply

Answer 4

JIL33 Author

Level 1

19 points

Mar 1, 2015 9:21 PM in response to Eric Root

I see no Norton Anti-virus and Symantec anywhere on my computer. I went to the site you told me and the folders they want me to look for do not exist on my computer. What do I do now?

Reply

Answer 5

JIL33 Author

Level 1

19 points

Mar 1, 2015 9:22 PM in response to Linc Davis

Hi Linc,

Sorry for taking so long to do what you asked me to do. I finally did and posted the results in this discussion. What do I do next?

Reply

Answer 6

Leopardus

Level 4

1,303 points

Mar 1, 2015 11:33 PM in response to JIL33

Hi JIL33,

The participants assisting you on this matter are extremely capable and should sort out with you all the old and new software issues at hand. One of them, I think Eric, has already pointed out a hardware bottleneck that your iMac is experiencing which is clear when you look at all the processes killed due to memory pressure on the system. Your Mac has the architecture and slots to accomodate up to 16GB of RAM, which the processor can also address. (Refer Apple Support Documentand the Intel Specification Sheet)

You should immediately notice the difference in System operation, as far fewer paging operations need to take place. (Paging also known as swopping between the virtual and physical memory, which takes place between the RAM and your HD).

Have fun

Leo

Reply

Answer 7

Eric Root

Level 10

684,027 points

Mar 2, 2015 4:45 PM in response to JIL33

Have you previously removed them? If not, see if you can find the files using this program. If you go Finder/View/Show Path Bar, it will show you where it is located.

EasyFind – Spotlight Replacement

Reply

Answer 8

Linc Davis

Level 10

209,541 points

Mar 2, 2015 5:43 PM in response to JIL33

I see no Norton Anti-virus and Symantec anywhere on my computer.

That's because Norton Antivirus is not on your computer. You installed it about five years ago and removed it later.

The danger of running that test script, and then not posting the results promptly, is that the information it produces will be read by others. Then you'll get advice of the same quality as you would get from posting "etrecheck" output, or worse. The test results are not intended for anyone else's use. I unsubscribed from this thread one day after you failed to respond to my request for information, and I saw only by chance that you had finally replied.

A

You're using the "legacy" (pre-Lion) version of FileVault (LFV) as well as FileVault 2. LFV is obsolete and should not be used under OS X 10.7 or later.

When LFV is active, your home folder is only backed up by Time Machine when you log out. If you use Time Machine and haven't logged out recently, do that now so the backups can be updated. If you use third-party backup software, the backups may or may not be up to date, depending on how the software works.

After backing up, follow the instructions on this support page under the heading "Migrating a Legacy FileVault home folder from an earlier version of OS X." You might get an alert that there isn't enough disk space to deactivate LFV. If so, see this support page.

B

The worthless "MacScan" is at least partially installed. You should remove it.

Any third-party software that doesn't install by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

C

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities ▹ Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

 ▹ Restart

from the menu bar.

D

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

E

Back up all data before proceeding.

Launch the Font Book application and validate all fonts. You must select the fonts in order to validate them. See the built-in help and this support article for instructions. If Font Book finds any issues, resolve them.

Start up in safe mode to rebuild the font caches. Restart as usual and test.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t start in safe mode. In that case, ask for instructions.

If you still have problems, then from the Font Book menu bar, select

File ▹ Restore Standard Fonts...

You'll be prompted to confirm, and then to enter your administrator login password.

Also note that if you deactivate or remove any built-in fonts, for instance by using a third-party font manager, the system may become unstable.

F

Storing many files on the Desktop may slow down the Finder, especially if the files have custom icons. Move most or all of the files to another subfolder of your home folder.

G

The symbol cache file is very large. It stores data used in logs and crash reports, and it may have grown because there have been a lot of crashes. The file is created automatically, and if deleted, it should be recreated when you restart the computer. Initially, at least, it will be a lot smaller.

I've seen one unverified report that a system became unbootable when the cache was deleted. That would have been due to a corrupt installation of OS X, but you should be prepared to reinstall if necessary. There is no reason to panic as long as you have good backups, which you should already have if you got this far.

Enter the following command in the same way as before:

sudo mv /S*/*/Caches/com.apple.coresymbolicationd /tmp/

Restart the computer.

Reply

Answer 9

Mar 2, 2015 6:08 PM in response to JIL33

One suggestion I might offer is to first backup all your data to an external drive using clone software. Erase your internal drive and do a clean install of Yosemite.

I'm suggesting this because I see lots of old files that are taking up space on your drive and many no longer run in Yosemite. It might be easier to start with a clean slate rather than find and remove all the old files.

Create a Clone backup:

What is a clone backup?

A clone is an exact bootable copy of your internal drive. Unlike standard copying of all files to another drive, the clone software copies hidden files along with other in-use files that are not avaialbe when you copy over files to another drive.
More info on Wikipedia
Time Machine is not bootable. You can only restore fromTime Machine.

Software used to Clone:

SuperDuper! http://www.shirt-pocket.com/

CCC http://www.bombich.com/download.html

Use Disk Utility to clone your drive:

1. Select your new volume (indented) and click on the "Restore" tab.

2. Drag your old volume to the Source field

3. Drag your new hard drive to the Destination field.

4. Click the check box for "Erasing Destination".

5. Click restore at the bottom and it then will start copying over to your new hard drive.

Reply

Answer 10

JIL33 Author

Level 1

19 points

Mar 2, 2015 10:07 PM in response to Linc Davis

Linc, you are amazing!! I will try your solution in the next few days and let you know what happens. I did find some Norton files from an old folder when I got EasyFind and one symantec file. I deleted them before I got your response. I hope that was okay.

Reply

Answer 11

JIL33 Author

Level 1

19 points

Mar 2, 2015 10:09 PM in response to Eric Root

I found some Norton files in an old folder and a symantec file with EasyFind. I deleted all of them. Thanks! Great program!

Reply

Answer 12

etresoft

Level 8

46,098 points

Mar 3, 2015 5:26 PM in response to JIL33

Your machine is six years old. It is never going to run Yosemite like a new one. The only thing you can do is upgrade the RAM.

Here is a link to OWC, a reputable online retailer of RAM upgrades: http://eshop.macsales.com/MyOWC/Upgrades.cfm?sort=pop&model=384&type=Memory

Ideally, you should run Yosemite with an SSD. That is going to be difficult on an iMac so I suggest getting the maximum RAM - 16 GB. Here are instructions from Apple on how to install it: iMac: How to remove or install memory - Apple Support

Reply

Answer 13

JIL33 Author

Level 1

19 points

Mar 7, 2015 8:08 PM in response to Linc Davis

I did all of the things you stated except for item A. I will wait and see if I need to do that or if this solves my problem. Thanks!

Reply

Answer 14

JIL33 Author

Level 1

19 points

Apr 5, 2015 4:16 PM in response to Linc Davis

Link, what you told me worked like a charm and I didn't have to buy more expensive memory like many adviced. Instead, I will save the money for when I need to buy my next computer or whatever. Thank you for all you do!!

Reply

Answer 15

VFHL

Level 1

4 points

Apr 2, 2016 6:49 AM in response to Linc Davis

Hi Linc,

I too have this problem... Can you please help me?

Regards,

Varun

Reply