Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Macbook Pro 2010 slow as molasses since Yosemite

Hi everyone,


I'm not sure I can blame Yosemite exactly, but I know the molasses problem has started at some point since I first upgraded (which was when it was first released). The main symptom I see is overall system sluggishness. Simple apps that used to be zippy to open now take forever to open. Switching apps sometimes takes seconds. I get the rainbow spinny wheel for basic things like loading a webpage in Safari or Firefox, navigating between Finder tabs, etc. I've upgraded this thing to 8 GB of RAM and a 500 GB hard drive (25 GB free), but iStatPro always tells me after a day or so after rebooting that all my memory is used up (a pretty significant chuck to 'inactive', but I've read How to use Activity Monitor - Apple Support and I understand that inactive memory may not be my bottleneck. I do have Filevault enabled, but that was never an issue before... it's been enabled since Mavericks was first released and I never really noticed a performance degradation before.


Since this machine is 5 years old now, I'd expect it so be slow on intensive tasks. But the slowness I'm lamenting here is basic OS GUI slowness. Simple things like opening browser windows, waiting for webpages to load, switching between apps, etc. takes FOREVER. It's not my broadband speed that's the issue with the webpage load times... it seems to be slowness with Safari running scripts, rendering, etc. My broadband is actually pretty zippy when I'm just transferring data behind the scenes.


Here's the EtreCheck output. I'd appreciate comments from anyone who has insights. Even "hey man, your computer is five years old, this is life" are fine if in fact that's the case.


Many thanks,

SP


Problem description:

Macbook Pro (late 2010), 8 GB memory, 500 GB hard drive (25 GB free). Runs very slow under 10.10.2. Rainbow spinny wheel for even the most basic tasks (opening windows, etc.) Opening apps takes a long time. iStatPro shows that 100% of RAM is occupied after just a couple of days with just Mail, Calendar, Safari, and Firefox running. Quitting all these apps and reopening them only partially solves the problem. Reboots speed things up mildly for about a day or two.


EtreCheck version: 2.1.8 (121)

Report generated February 18, 2015 at 7:12:55 PM PST

Download EtreCheck from http://etresoft.com/etrecheck


Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.


Hardware Information: ℹ️

MacBook Pro (15-inch, Mid 2010) (Technical Specifications)

MacBook Pro - model: MacBookPro6,2

1 2.4 GHz Intel Core i5 CPU: 2-core

8 GB RAM Upgradeable

BANK 0/DIMM0

4 GB DDR3 1067 MHz ok

BANK 1/DIMM0

4 GB DDR3 1067 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Battery Health: Normal - Cycle count 665


Video Information: ℹ️

Intel HD Graphics - VRAM: 288 MB

Color LCD 1440 x 900

NVIDIA GeForce GT 330M - VRAM: 256 MB


System Software: ℹ️

OS X 10.10.2 (14C109) - Time since boot: 2:5:0


Disk Information: ℹ️

WDC WD5000BPKT-22PK4T0 disk0 : (500.11 GB)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Tesla (disk1) / : 498.91 GB (28.04 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 499.25 GB Online


HL-DT-ST DVDRW GS23N


USB Information: ℹ️

Apple Internal Memory Card Reader

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM2070 Hub

Apple Inc. Bluetooth USB Host Controller

HP Photosmart C5100 series

Apple Inc. Built-in iSight

Apple Computer, Inc. IR Receiver


Firewire Information: ℹ️

WD My Book 111D 800mbit - 800mbit max

EFI (disk2s1) <not mounted> : 210 MB

Boot OS X (disk2s3) <not mounted> : 134 MB

WD 2 TB (disk3) /Volumes/WD 2 TB : 2.00 TB (687.78 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk2s2 2.00 TB Online


Configuration files: ℹ️

/etc/hosts - Count: 14569


Gatekeeper: ℹ️

Anywhere


Kernel Extensions: ℹ️

/Applications/NoMachine.app

[not loaded] com.nomachine.driver.nxtun (4.1.b1) [Click for support]

[not loaded] com.nomachine.driver.nxusb (4.3.b1 - SDK 10.7) [Click for support]

[not loaded] com.nomachine.kext.nxfs (4.1.b1 - SDK 10.6) [Click for support]


/Applications/VMware Fusion.app

[not loaded] com.vmware.kext.vmci (2.0.0) [Click for support]

[not loaded] com.vmware.kext.vmioplug (2.0.0) [Click for support]

[not loaded] com.vmware.kext.vmnet (2.0.0) [Click for support]

[not loaded] com.vmware.kext.vmx86 (2.0.0) [Click for support]


/Library/Application Support/VirtualBox

[loaded] org.virtualbox.kext.VBoxDrv (4.3.16) [Click for support]

[loaded] org.virtualbox.kext.VBoxNetAdp (4.3.16) [Click for support]

[loaded] org.virtualbox.kext.VBoxNetFlt (4.3.16) [Click for support]

[loaded] org.virtualbox.kext.VBoxUSB (4.3.16) [Click for support]


/Library/Extensions

[loaded] com.squirrels.driver.AirParrotSpeakers (1.8 - SDK 10.8) [Click for support]


/System/Library/Extensions

[loaded] com.Cycling74.driver.Soundflower (1.5.3 - SDK 10.6) [Click for support]

[loaded] com.nomachine.driver.nxau (4.1.b1 - SDK 10.8) [Click for support]

[loaded] com.squirrels.airparrot.framebuffer (3 - SDK 10.8) [Click for support]

[not loaded] com.wdc.driver.1394HP (1.0.9) [Click for support]

[loaded] com.wdc.driver.1394_64HP (1.0.1 - SDK 10.6) [Click for support]

[not loaded] com.wdc.driver.USBHP (1.0.11) [Click for support]

[not loaded] com.wdc.driver.USB_64HP (1.0.0 - SDK 10.6) [Click for support]


Startup Items: ℹ️

ciscod: Path: /System/Library/StartupItems/ciscod

MySQLCOM: Path: /Library/StartupItems/MySQLCOM

rEFItBlesser: Path: /Library/StartupItems/rEFItBlesser

Startup items are obsolete in OS X Yosemite


Launch Agents: ℹ️

[loaded] com.cisco.anyconnect.gui.plist [Click for support]

[running] com.nomachine.localnxserver.plist [Click for support]

[running] com.opendns.osx.DNSCryptMenuBar.plist [Click for support]

[loaded] com.oracle.java.Java-Updater.plist [Click for support]

[running] net.culater.SIMBL.Agent.plist [Click for support]


Launch Daemons: ℹ️

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.barebones.authd.plist [Click for support]

[loaded] com.barebones.textwrangler.plist [Click for support]

[running] com.cisco.anyconnect.vpnagentd.plist [Click for support]

[loaded] com.github.GitHub.GHInstallCLI.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[running] com.nomachine.server.plist [Click for support]

[loaded] com.nomachine.uninstall.plist [Click for support]

[loaded] com.opendns.osx.DNSCryptAfterboot.plist [Click for support]

[loaded] com.opendns.osx.DNSCryptConsoleChange.plist [Click for support]

[loaded] com.opendns.osx.DNSCryptControlChange.plist [Click for support]

[loaded] com.opendns.osx.DNSCryptNetworkChange.plist [Click for support]

[loaded] com.oracle.java.Helper-Tool.plist [Click for support]

[loaded] com.oracle.java.JavaUpdateHelper.plist [Click for support]

[not loaded] org.virtualbox.startup.plist [Click for support]


User Launch Agents: ℹ️

[failed] com.adobe.ARM.[...].plist [Click for support] [Click for details]

[failed] com.amazon.cloud-player.plist [Click for support] [Click for details]

[running] com.amazon.music.plist [Click for support]

[loaded] com.google.keystone.agent.plist [Click for support]

[running] com.spotify.webhelper.plist [Click for support]

[not loaded] org.virtualbox.vboxwebsrv.plist [Click for support]


User Login Items: ℹ️

Google Drive Application Hidden (/Applications/Google Drive.app)

Messages Application Hidden (/Applications/Messages.app)

Dropbox Application Hidden (/Applications/Dropbox.app)

GeekTool Helper Application (/Applications/GeekTool.app/Contents/PlugIns/GeekTool.prefPane/Contents/Resourc es/GeekTool Helper.app)

OpenDNS Updater Application Hidden (/Applications/OpenDNS Updater.app)


Internet Plug-ins: ℹ️

o1dbrowserplugin: Version: 3.19.1.13088 [Click for support]

Default Browser: Version: 600 - SDK 10.10

Flip4Mac WMV Plugin: Version: 3.2.0.16 - SDK 10.8 [Click for support]

OfficeLiveBrowserPlugin: Version: 12.3.0 [Click for support]

Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Click for support]

FlashPlayer-10.6: Version: 16.0.0.305 - SDK 10.6 [Click for support]

Flash Player: Version: 16.0.0.305 - SDK 10.6 [Click for support]

iPhotoPhotocast: Version: 7.0

QuickTime Plugin: Version: 7.7.3

SharePointBrowserPlugin: Version: 14.3.6 - SDK 10.6 [Click for support]

AdobePDFViewer: Version: 9.0.0 [Click for support]

CANONiMAGEGATEWAYDL: Version: 3.2.0.1 - SDK 10.6 [Click for support]

JavaAppletPlugin: Version: Java 8 Update 31 Check version


User internet Plug-ins: ℹ️

JavaPlugin2_NPAPI: Version: Unknown

Google Earth Web Plug-in: Version: 7.1 [Click for support]

OfficeLiveBrowserPlugin: Version: 12.2.3 [Click for support]

Flip4Mac WMV Plugin: Version: 2.2.3.7 [Click for support]

DivXBrowserPlugin: Version: 1.4 [Click for support]

QuickTime Plugin: Version: 7.6.6

iPhotoPhotocast: Version: 7.0

googletalkbrowserplugin: Version: 1.3.1.9639 [Click for support]

npgtpo3dautoplugin: Version: 0.1.43.2 [Click for support]

AdobePDFViewer: Version: 9.3.4 [Click for support]

Picasa: Version: 1.0 - SDK 10.4 [Click for support]

DirectorShockwave: Version: 11.0.0r458 [Click for support]


Safari Extensions: ℹ️

Facebook Disconnect

Cookie Stumbler

Ghostery

Twitter Disconnect

AVG Do Not Track

ClickToFlash

Google Disconnect

UTM Stripper

1Password

AdBlock

Adblock Plus


User Audio Plug-ins: ℹ️

iSightAudio: Version: 7.6.6


3rd Party Preference Panes: ℹ️

DNSCrypt [Click for support]

Flash Player [Click for support]

Java [Click for support]

MenuMeters [Click for support]

MySQL [Click for support]


Time Machine: ℹ️

Skip System Files: NO

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Tesla: Disk size: 498.91 GB Disk used: 470.87 GB

Destinations:

WD 2 TB [Local]

Total size: 2.00 TB

Total number of backups: 129

Oldest backup: 2012-08-15 13:32:51 +0000

Last backup: 2015-02-19 02:03:52 +0000

Size of backup disk: Excellent

Backup size 2.00 TB > (Disk size 498.91 GB X 3)


Top Processes by CPU: ℹ️

11% WindowServer

9% Disk Utility

8% mds

2% hidd

1% kextd


Top Processes by Memory: ℹ️

524 MB firefox

464 MB Safari

395 MB com.apple.MediaLibraryService

361 MB mds_stores

326 MB iTunes


Virtual Memory Information: ℹ️

1.38 GB Free RAM

4.83 GB Active RAM

1.04 GB Inactive RAM

1.34 GB Wired RAM

2.96 GB Page-ins

0 B Page-outs


Diagnostics Information: ℹ️

Feb 18, 2015, 05:05:15 PM Self test - passed

MacBook Pro (15-inch Mid 2010), OS X Mavericks (10.9)

Posted on Feb 18, 2015 7:36 PM

Reply
10 replies

Feb 18, 2015 10:03 PM in response to StrangeProportion

When you see a beachball cursor or the slowness is especially bad, note the exact time: hour, minute, second.

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES All Messages

from the log list on the left. If you don't see that list, select

View Show Log List

from the menu bar at the top of the screen.

Each message in the log begins with the date and time when it was entered. Scroll back to the time you noted above.

Select the messages entered from then until the end of the episode, or until they start to repeat, whichever comes first.

Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of it useless for solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name, may appear in the log. Anonymize before posting.

Feb 19, 2015 7:08 PM in response to StrangeProportion

Thanks for your help! Here's a recent example:


2/19/15 7:04:44.982 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:04:45.310 PM osascript[89641]: Performance: Please update this scripting addition to supply a value for ThreadSafe for each event handler: "/Library/ScriptingAdditions/SIMBL.osax"

2/19/15 7:04:49.292 PM Console[89654]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

2/19/15 7:04:49.432 PM acwebsecagent[209]: Connection : Auth key is not provided or is invalid, applying connection failure policy. CMode : 0 TMode : 0

2/19/15 7:04:50.737 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:04:50.805 PM com.apple.xpc.launchd[1]: (com.apple.quicklook.32bit[89655]) Endpoint has been activated through legacy launch(3) APIs. Please switch to XPC or bootstrap_check_in(): com.apple.quicklook.32bit

2/19/15 7:04:51.058 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:04:51.075 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:04:51.115 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:04:51.123 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:04:51.124 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:02.392 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:06.086 PM WindowServer[165]: Received display connect changed for display 0x42728c1

2/19/15 7:05:06.113 PM WindowServer[165]: Found 12 modes for display 0x042728c1 [12, 0]

2/19/15 7:05:06.134 PM WindowServer[165]: CGXMuxAcknowledge: Posting glitchless acknowledge

2/19/15 7:05:06.183 PM WindowServer[165]: Received display connect changed for display 0x42728c1

2/19/15 7:05:06.184 PM WindowServer[165]: Found 1 modes for display 0x042728c1 [1, 0]

2/19/15 7:05:06.185 PM WindowServer[165]: Received display connect changed for display 0x3f003e

2/19/15 7:05:06.186 PM WindowServer[165]: Found 1 modes for display 0x003f003e [1, 0]

2/19/15 7:05:06.565 PM com.apple.xpc.launchd[1]: (com.apple.ReportCrash[89695]) Endpoint has been activated through legacy launch(3) APIs. Please switch to XPC or bootstrap_check_in(): com.apple.ReportCrash

2/19/15 7:05:07.698 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.745 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.758 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.764 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.771 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.779 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.785 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.791 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

2/19/15 7:05:07.816 PM com.apple.WebKit.Networking[87666]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

Feb 19, 2015 9:09 PM in response to StrangeProportion

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(1249 ' 0.5 0.25 10 1000 15 5120 1000 25000 1 1 0 100 ' 51 25600 4 10 25 5120 102400 1000 25 1000 200 40 500 300 85 25 20480 262144 20 2000 524288 604800 5 );k=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays PCI UniversalAccess InstallHistory ConfigurationProfile AirPort 'com\.apple\.' -\\t N\\/A 'AES|atr|udit|msa|dnse|ax|ensh|fami|FileS|fing|ft[pw]|gedC|kdu|etS|is\.|alk|ODSA|otp|htt|pcas|ps-lp|rexe|rlo|rsh|smb|snm|teln|upd-[aw]|uuc|vix|webf' OSBundle{Require,AllowUserLoa}d 'Mb/s:per sec:ms/s:KiB/s:%:total:MB:total' 'Net in:Net out:I/O wait time:I/O requests:CPU usage:Open files:Memory:Mach ports:File opens:Forks:Failed forks:System errors' 'tsA|[ST]M[HL]' PlistBuddy{,' 2>&1'}' -c Print' 'Info\.plist' CFBundleIdentifier );f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' %s{' ','\n'{"${k[22]}",}}'%s\n' '%d MB: %s\n' '\n ...and %s more line(s)\n' '\nContents of %s\n '"${k[22]}"'mod date: %s\n '"${k[22]}"'checksum: %s\n%s\n' );c=(879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 3374894509 1051159591 892310726 1707497389 523110921 2883943871 3873345487 );s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[4]} ' s/:$//;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[9]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' BEGIN { FS=":";if(system("sw_vers -productVersion|grep -q ^10\.1")) d="^'"${k[21]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' { sub(/ :/,"");print|"tail -n'${p[10]}'";} ' ' NR==2&&$4<='${p[7]}' { print $4;} ' ' ($1~"wir"&&$2>'${p[22]}')||($1~/P.+ts:/&&$2>'${p[19]}') { print $1" "int($2);} ' '/YLD/s/=/ /p' ' { q=$1;$1="";u=$NF;$NF="";gsub(/ +$/,"");print q":"$0":"u;} ' ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' ' !/, .+:/{print};END{if(NR<'{${p[12]},${p[13]}}')printf("^'"${k[21]}"'.+")} ' '|uniq' ' 1;END { print "/L.+/Scr.+/Templ.+\.app$";print "/L.+/Pri.+\.plugin$";if(NR<'{${p[14]},${p[21]}}') print "^/[Sp].+|'${k[21]}'";} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p;' '&&echo On' '/\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/p' '/\.dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".","");print $0"$";} END { split("'"${c[*]}"'",c);for(i in c) print "\t"c[i]"$";} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' BEGIN{ FS="= "} $2 { gsub(/[()"]/,"",$2);print $2;} ' ' /^\//!d;s/^.{5}//;s/ [^/]+\//: \//p;' '>&-||echo No' '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[2]}'{$2=$2-1;print}' ' BEGIN { M1='${p[16]}';M2='${p[18]}';M3='${p[8]}';M4='${p[3]}';} !/^A/{next};/%/ { getline;if($5<M1) o["CPU"]="CPU: user "$2"%, system "$4"%";next;} $2~/^disk/&&$4>M2 { o[$2]=$2": "$3" ops/s, "$4" blocks/s";next;} $2~/^(en[0-9]|bridg)/ { if(o[$2]) { e=$3+$4+$5+$6;if(e) o[$2]=o[$2]"; errors "e"/s";next;};if($4>M3||$6>M4) o[$2]=$2": in "int($4/1024)", out "int($6/1024)" (KiB/s)";} END { for(i in o) print o[i];} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' BEGIN{FS=": "} /^ {10}O/ {exit} /^ {0,12}[^ ]/ {next} $1~"Ne"&&$2!~/^In/{print} $1~"Si" { split($2,a," ");if(a[1]-a[4]<'${p[5]}') print;};$1~"T"&&$2<'${p[20]}'{print};$1~"Se"&&$2!~"2"{print};' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1;} ' ' BEGIN { split("'"${p[1]}"'",m);FS=":";} $2<=m[$1]{next} $1<9 { o[$1]=o[$1]"\n "$3" (UID "$4"): "$2;} $1==9&&$5!~"^/dev" { o[$1]=o[$1]"\n "$3" (UID "$4") => "$5" (status "$6"): "$2;} $1==10&&$5 { p="ps -c -ocomm -p"$5"|sed 1d";p|getline n;close(p);if(n) $5=n;o[$1]=o[$1]"\n "$5" => "$3" (UID "$4"): "$2;} $1~/1[12]/ { o[$1]=o[$1]"\n "$3" (UID "$4", error "$5"): "$2;} END { n=split("'"${k[27]}"'",u,":");for(i=n+1;i<n+5;i++)u[i]=u[2];split("'"${k[28]}"'",l,":");for(i in o) print "\n"l[i]" ("u[i]")\n"o[i];} ' ' /^ {8}[^ ]/{print} ' ' BEGIN { L='${p[17]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${k[30]}"' "F|getline g) { l++;if(l<=L) f=f"\n "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n '"${k[22]}"'"T;printf("'"${f[8]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' 's/^.{52}(.+) <.+/\1/p' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");p=a[1];k[S]='${k[25]}';k[U]='${k[26]}';v[S]="Safe";v[U]="true";for(i in k) { s=system("'"${k[30]}"'\\ :"k[i]" \""p"\"/*/I*|grep -qw "v[i]);if(!s) a[1]=a[1]" "i;};if(!a[2]) a[2]="'"${k[23]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${k[31]}"'\\ :'"${k[33]}"' \""$0"\"/*/'${k[32]}'";p|getline b;close(p);if(b~/, .+:/||b=="") b="'"${k[23]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR>=13 { gsub(/[^0-9]/,"",$1);print;} ' ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${k[32]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ / [VY]/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' '/^find: /!p;' ' /^p/{ s/.//g;x;s/\nu/:/;s/(\n)c/\1:/;s/\n\n//;p;};H;' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;p;' ' s/^.+ |\(.+\)$//g;p;' '1;END{if(NR<'${p[15]}')printf("^/(S|usr/(X|li))")}' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END{ if(i>1)print n} ' s/{'\.|jnl: ','P.+:'}'//;s/ +([0-9]+)(.+)/\2 \1/p' ' /es: ./{ s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(B2|[my]): /H;d;:0'$'\n'' x;/[my]: [AM]|m: I.+p$|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/:(0|-(4[34])?)$/p' '|sort'{'|uniq'{,\ -c},\ -nr} ' s/^/'{5,6,7,8}':/;s/ *: */:/g;p;' '/e:/{print $2}' ' /^[(]/{ s/....//;s/$/:/;N;/: [)]$/d;s/\n.+ ([^ ]+).$/\1/;H;};${ g;p;} ' 's/:.+$//p' '|wc -l' /{\\.{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'Info,'Launch[AD].+'}'\.plist$/p' 's/([-+.?])/\\\1/g;p' 's/, /\'$'\n/g;p' ' BEGIN{FS=":"} { printf("'"${f[6]}"'",$1/1048576,$2);} ' ' /= D/&&$1!~/'{${k[24]},${k[29]}}'/ { getline d;if(d~"t") D=D"\n"$1;} END { print D;} ' ' NR>1&&$3!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $3":"$2;} ' '|tail -n'${p[6]} ' $1>1 { $NF=$NF" x"$1;} /\*/ { if(!f) f="\n\t* Code injection";} { $1="";} 1;END { print f;} ' ' s/.+bus /Bus: /;s/,.+[(]/ /;s/,.+//p;' ' { $NF=$NF" Errors: "$1;$1="";} 1 ' ' 1s/^/\'$'\n''/;/^ +(([MNPRSV]|De|Li).+|Bus): .|d: Y/d;s/:$//;$d;p;' ' BEGIN { RS=",";FS=":";} $1~"name" { gsub("\"","",$2);print $2;} ' '|grep -q e:/' '/[^ .]/p' '{ print $1}' ' /^ +N.+: [1-9]/ { i++;} END { if(i) print "system: "i;} ' ' NF { print "'{admin,user}' "$NF;exit;} ' ' /se.+ =/,/[\}]/!d;/[=\}]/!p ' ' 3,4d;/^ +D|Of|Fu| [0B]/d;s/^ |:$//g;$!H;${ x;/:/p;} ' ' BEGIN { FS=": ";} NR==1 { sub(":","");h="\n"$1"\n";} /:$/ { l=$1;next;} $1~"S"&&$2!~3 { getline;next;} /^ {6}I/ { i++;L[i]=l" "$2;if(i=='${p[24]}') nextfile;} END { if(i) print h;for(j=0;j<i;j++) print L[i-j];} ' ' /./H;${ x;s/\n//;s/\n/, /g;/,/p;} ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${k[30]}\\" echo cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin' env pluginkit scutil 'dtrace -q -x aggsortrev -n' security sed\ -En awk 'dscl . -read' networksetup mdutil lsof test osascript\ -e netstat mdls route cat );c2=(${k[21]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'" 'L*/Ca*/'${k[21]}'Saf*/E* -d 2 -name '${k[32]} '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility Req "'${k[21]}'('{'bird|.*i?clou','lsu|sha'}')"' "-f'%N: %l' Desktop {/,}L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message CRne '0xdc008012|(allow|call)ing|(mplet|nabl)ed|ry HD|safe b|xpm' -k Message CReq 'bad |Can.t l|corru|dead|fail|GPU |hfs: Ru|inval|Limiti|v_c|NVDA[(]|pagin|Purg(ed|in)|error|Refus|TCON|tim(ed? ?|ing )o|trig|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o%cpu,comm,ruid' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0<0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno!=0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000000);normalize(@h,10240);printa(\"1:%@d:%s:%d\n\",@a);printa(\"2:%@d:%s:%d\n\",@b);printa(\"9:%@d:%s:%d:%s:%d\n\",@c);printa(\"10:%@d:%s:%d:%d\n\",@d);printa(\"11:%@d:%s:%d:%d\n\",@e);printa(\"12:%@d:%s:%d:%d\n\",@f);printa(\"3:%@d:%s:%d\n\",@g);printa(\"4:%@d:%s:%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;' '/S*/*/Ca*/*xpc*' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' /\ kMDItemContentTypeTree=${k[21]}{bundle,mach-o-dylib} :Label "/p*/e*/{auto*,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {/p*,/usr/local}/e*/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list '-F "" -k Sender hidd -k Level Nle 3' /Library/Preferences/${k[21]}alf\ globalstate --proxy '-n get default' print\ system --dns -get{dnsservers,info} dump-trust-settings\ {-s,-d,} -n1 '-R -ce -l1 -n5 -o'{'prt -stats prt','mem -stats mem'}',command,uid' -kl -l -s\ / '--regexp --files '${k[21]}'pkg.*' '+c0 -i4TCP:0-1023' ${k[21]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER' '-app Safari WebKitDNSPrefetchingEnabled' '-Fcu +c0 -l' -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','(a und|I/O |jnl_io.+)err','USBF:.+bus'}'"' -name\ kMDItem${k[33]} -T\ hfs '-n get default' -listnetworkserviceorder :${k[33]} :CFBundleDisplayName $EUID {'$TMPDIR../C ','/{S*/,}'}'L*/{,Co*/*/*/L*/}{Cache,Log}s -type f -size +'${p[11]}'M -exec stat -f'%z:%N' {} \;' \ /v*/d*/*/*l*d{,.*.$UID}/* '-app Safari UserStyleSheetEnabled' 'L*/A*/Fi*/P*/*/a*.json' users/$USER\ HomeDirectory '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' ' -F "\$Time \$(Sender): \$Message" -k Level Nle 3 -k Facility R'{'ne "user|','eq "'}'console" -k Message CRne "[{}<>]|commit - no t|deprec|Goog|realp|sandbox ex|/root" ' getenv '/ "kMDItemDateAdded>=\$time.now(-'${p[23]}')&&kMDItem'${k[33]}'=*"' -m\ / '' );N1=${#c2[@]};for j in {0..20};do c2[N1+j]=SP${k[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel,Firefox}\ extensions System\ load boot\ args FileVault\ {2,1} {Kernel,System,Console}\ log Activity SMC Login\ hook 'I/O per process' 'High file counts' UID Daemons Agents XPC\ cache Startup\ items {Admin,Root}\ access Stylesheet Library\ paths{,' ('{shell,launchd}\)} Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory\ pressure Listeners Widgets Parental\ Controls Prefetching Nets Volumes {Continuity,I/O,iCloud,HID,HCI}\ errors {User,System}\ {caches/logs,overrides} Shutdown\ codes Heat Diagnostic\ reports Bad\ plists Free\ space VM Bundles{,' (new)'} Trust\ settings );N3=${#l[@]};for i in {0..8};do l[N3+i]=${k[5+i]};done;F() { local x="${s[$1]}";[[ "$x" =~ ^([\&\|\<\>]|$) ]]&&{ printf "$x";return;};:|${c1[30]} "$x" 2>&-;printf "%s \'%s\'" "|${c1[30+$?]}" "$x";};A0() { Q=6;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[0]};};A1() { local c="${c1[$1]} ${c2[$2]}";shift 2;c="$c ` while [[ "$1" ]];do F $1;shift;done`";((P2))&&{ c="sudo $c";P2=;};v=`eval "$c"`;[[ "$v" ]];};A2() { local c="${c1[$1]}";[[ "$c" =~ ^(awk|sed ) ]]&&c="$c '${s[$2]}'"||c="$c ${c2[$2]}";shift 2;local d=` while [[ "$1" ]];do F $1;shift;done`;((P2))&&{ c="sudo $c";P2=;};local a;v=` while read a;do eval "$c '$a' $d";done<<<"$v";`;[[ "$v" ]];};A3(){ v=$((`date +%s`-v[3]));};B1() { v=No;! ((v[1]))&&{ v=;P1=1;};};eval "`type -a B1|sed '1d;s/1/2/'`";B3(){ v[$1]="$v";};B4() { local i=$1;local j=$2;shift 2;local c="cat` while [[ "$1" ]];do F $1;shift;done`";v[j]=`eval "{ $c;}"<<<"${v[i]}"`;};B5(){ v="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d$'\e' <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F$'\e' ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`egrep -v "${v[$1]}"<<<"$v"|sort`;};eval "`type -a B7|sed '1d;s/7/8/;s/-v //'`";C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { B4 0 0 63&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";printf '\n\tThe test results are on the Clipboard.\n\n\tPlease close this window.\n';exit 2>&-;};for i in 1 2;do eval D$((i-1))'() { A'$i' $@;C0;};';for j in 2 3;do eval D$((i+2*j-3))'() { local x=$1;shift;A'$i' $@;C'$j' $x;};';done;done;trap C5 2;o=$({ A0;D0 0 N1+1 2;D0 0 $N1 1;B1;C2 27;B1&&! B2&&C2 28;D2 22 15 63;D0 0 N1+2 3;D0 0 N1+15 17;D4 3 0 N1+3 4;D4 4 0 N1+4 5;D4 N3+4 0 N1+9 59;D0 0 N1+16 99; for i in 0 1 2;do D4 N3+i 0 N1+5+i 6;done;D4 N3+3 0 N1+8 71;D4 62 1 10 7;D4 10 1 11 8;B2&&D4 18 19 53 67;D2 11 2 12 9;D2 12 3 13 10;D2 13 32 70 101 25;D2 65 6 76 13;D2 45 20 52 66;D4 66 7 77 14;D4 17 8 15 38;D0 9 16 16 77 45;C4;B2&&D0 35 49 61 75 76 78 45;B2&&{ D0 28 17 45;C4;};D0 12 40 54 16 79 45;D0 12 39 54 16 80 45;D4 31 25 77 15&&{ B4 0 8 103;B4 8 0;A2 18 74;B6 8 0 3;C3 32;};B2&&D4 19 21 0;B2&&D4 40 10 42;D2 2 0 N1+19 46 84;D2 44 34 43 53;D2 25 22 20 32;D2 33 0 N1+14 51;for i in {0..2};do A1 29 35+i 104+i;B3 25+i;done;B6 25 27 5;B6 0 26 5;B4 0 0 110;C2 69;D2 34 21 28 35;D4 35 27 29 36;A1 40 59 81;B3 18;A1 33 60 82;B8 18;B4 0 19 83;A1 27 32 39&&{ B3 20;B4 19 0;A2 33 33 40;B3 21;B6 20 21 3;};C2 36;D4 50 38 5 68;B4 19 0;D5 37 33 34 42;B2&&D4 46 35 45 55;D4 38 0 N1+20 43;B2&&D4 59 4 65 76 91;D4 63 4 19 44 75 95 96;B1&&{ D4 53 5 55 75 69&&D4 51 6 58 31;D4 56 5 56 97 75 98&&D0 0 N1+7 99;D2 55 5 27 84;D4 61 5 54 75 70;D4 14 5 14 12;D4 15 5 72 12;C4;};D4 16 5 73 12;A1 13 44 74 18;C4;B3 4;B4 4 0 85;A2 14 61 89;B4 0 5 19 102;A1 17 41 50;B7 5;C3 8;B4 4 0 88;A2 14 24 89;C4;B4 0 6 19 102;B4 4 0 86;A2 14 61 89;B4 0 7 19 102;B5 6 7;B4 0 11 73 102;A1 18 31 107 94 74||{ B2&&A1 18 26 94 74;}&&{ B7 11;B4 0 0 11;C3 23;};A1 18 26 94;B7 11;B4 0 0 11;C3 24;D4 60 14 66 92;D4 58 14 67 93;D4 26 4 21 24;D4 42 14 1 62;D4 43 37 2 90 48;D4 41 10 42;D2 48 36 47 25;A1 4 3 60&&{ B3 9;A2 14 61;B4 0 10 21;B4 9 0;A2 14 62;B4 0 0 21;B6 0 10 4;C3 5;};D4 9 41 69 100;D2 29 21 68 35;D2 49 21 48 49;B4 4 22 57 102;A1 21 46 56 74;B7 22;B4 0 0 58;C3 47;D4 54 5 7 75 76 69;D4 52 5 8 75 76 69;D4 57 4 64 76 91;D2 0 4 4 84;D2 1 4 51 84;D4 21 22 9 37;D0 0 N1+17 108; A1 23 18 28 89;B4 0 16 22 102;A1 16 25 33;B7 16;B4 0 0 34;D1 31 47;D4 64 4 71 41;C4;B4 4 12 26 89 23 102;for i in {0..3};do A1 0 N1+10+i 72 74;B7 12;B4 0 0 52;C3 N3+5+i;((i))||C4;done;A1 24 22 29;B7 12;B3 14;A2 39 57 30;B3 15;B6 14 15 4;C3 67;A1 24 75 74;B3 23;A2 39 57 30;B3 24;B6 23 24 4;C3 68;B4 4 13 27 89 65;A1 24 23;B7 13;C3 30;B4 4 0 87;A2 14 61 89 20;B4 0 17;A1 26 50 64;B7 17;C3 6;D0 0 N1+18 109;D4 7 11 6;A3;C2 39;C4;} 4>&2 2>/dev/null;);C5

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec

Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I may not agree with them.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Feb 19, 2015 9:47 PM in response to Linc Davis

Wow, thanks.


Start time: 21:18:41 02/19/15



Revision: 1249



Model Identifier: MacBookPro6,2

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 11 minutes



UID: 502



Memory





BANK 0/DIMM0



Size: 4 GB

Speed: 1067 MHz

Status: OK

Manufacturer: 0x859B



BANK 1/DIMM0



Size: 4 GB

Speed: 1067 MHz

Status: OK

Manufacturer: 0x859B



SerialATA



WDC WD5000BPKT-22PK4T0



FireWire



My Book 111D (WD)



FileVault 2: On



CPU usage (%)



WindowServer (UID 0): 53.6



I/O wait time (ms/s)



mds (UID 0): 230

Notes (UID 502): 223

syncdefaultsd (UID 502): 160

launchd (UID 0): 63

nxclient (UID 502): 24

nsurlstoraged (UID 502): 17

secinitd (UID 502): 15

cfprefsd (UID 502): 12



I/O requests (KiB/s)



coresymbolicati (UID 0): 11318



Font issues: 1



DNS: 127.0.0.54 (static)



Listeners



cupsd: ipp

dnscrypt-proxy: domain

kdc: kerberos

launchd: afpovertcp

launchd: ssh



Diagnostic reports



2015-01-27 plugin-container crash

2015-02-04 firefox hang

2015-02-04 plugin-container crash

2015-02-19 Mail crash



HID errors: 6



Shutdown codes



-128 3



Kernel log



Feb 16 12:55:40 Limiting closed port RST response from 285 to 250 packets per second

Feb 16 18:57:28 PM notification timeout (pid 29128, Safari)

Feb 16 18:57:28 PM notification timeout (pid 38416, com.apple.WebKit)

Feb 16 18:58:05 PM notification timeout (pid 29128, Safari)

Feb 16 18:58:05 PM notification timeout (pid 38416, com.apple.WebKit)

Feb 16 18:58:37 PM notification timeout (pid 29128, Safari)

Feb 16 18:58:37 PM notification timeout (pid 38416, com.apple.WebKit)

Feb 16 20:22:36 CoreStorageFamily::unlockVEKs(UUID) VEK unwrap failed. this is normal, except for the root volume.

Feb 18 17:06:22 CoreStorageFamily::unlockVEKs(UUID) VEK unwrap failed. this is normal, except for the root volume.

Feb 18 17:06:22 Failed to open swap file 30

Feb 18 17:06:22 vm_swap_create_file failed @ 20 secs

Feb 18 17:07:07 SIOCPROTODETACH_IN6: utun0 error=6

Feb 18 17:07:20 rtR0InitNative: warning! failed to resolve special kernel symbols

Feb 18 17:07:20 supdrvDTraceInit: RTR0DbgKrnlInfoOpen failed with rc=-102.

Feb 18 17:07:20 VBoxDrv: Failed to open kernel symbols, rc=-102

Feb 18 17:33:28 Limiting closed port RST response from 346 to 250 packets per second

Feb 18 17:34:05 Limiting closed port RST response from 343 to 250 packets per second

Feb 18 18:58:33 firefox (map: 0xffffff802f9e0b40) triggered DYLD shared region unnest for map: 0xffffff802f9e0b40, region 0x7fff87e00000->0x7fff88000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

Feb 18 20:00:53 SIOCPROTODETACH_IN6: utun0 error=6

Feb 18 20:04:39 firefox (map: 0xffffff8024ecf4b0) triggered DYLD shared region unnest for map: 0xffffff8024ecf4b0, region 0x7fff82000000->0x7fff82200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

Feb 18 20:22:46 Warning: IOSurface 00000058 modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit

Feb 18 20:22:46 Warning: IOSurface 00000058 modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit

Feb 18 23:07:57 CoreStorageFamily::unlockVEKs(UUID) VEK unwrap failed. this is normal, except for the root volume.

Feb 19 21:08:29 CoreStorageFamily::unlockVEKs(UUID) VEK unwrap failed. this is normal, except for the root volume.

Feb 19 21:08:51 SIOCPROTODETACH_IN6: utun0 error=6



System log



Feb 19 21:09:57 maspushagent: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:09:57 AddressBookSourceSync: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:09:58 maspushagent: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:09:58 AddressBookSourceSync: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:09:59 maspushagent: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:10:00 maspushagent: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:10:01 mapspushd: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:10:01 maspushagent: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

Feb 19 21:10:29 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Dropbox" for over 1.00 seconds. Server has re-enabled them.

Feb 19 21:13:31 bird: Assertion failed: ![_xpcClients containsObject:client]

Feb 19 21:13:31 bird: Assertion failed: ![_xpcClients containsObject:client]

Feb 19 21:13:32 bird: Assertion failed: ![_xpcClients containsObject:client]

Feb 19 21:13:42 bird: Assertion failed: ![_xpcClients containsObject:client]

Feb 19 21:13:42 bird: Assertion failed: ![_xpcClients containsObject:client]

Feb 19 21:13:46 com.apple.usbmuxd: LOCKDOWN_V2_BONJOUR_SERVICE_NAME is _apple-mobdev2._tcp,91a507f7

Feb 19 21:13:47 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Safari" for over 1.00 seconds. Server has re-enabled them.

Feb 19 21:13:52 acvpnagent: Function: GetSettings File: ../../vpn/Agent/ServicePluginMgr.cpp Line: 274 m_pIServicePlugin is NULL

Feb 19 21:13:57 iTunes: ApplePushService: APSConnection being used without a delegate queue

Feb 19 21:14:10 SIMBL Agent: AppleEvents: Send port for process has no send right, port=( port:34563/0x8703 rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

Feb 19 21:14:27 acwebsecagent: License One or more of the License/Public Key can't be NULL

Feb 19 21:14:27 acwebsecagent: SSLExt Failed to get ScanSafe headers

Feb 19 21:14:32 SIMBL Agent: AppleEvents: Send port for process has no send right, port=( port:34563/0x8703 rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

Feb 19 21:19:13 dtrace: Invalid connection: com.apple.coresymbolicationd

Feb 19 21:19:27 acwebsecagent: License One or more of the License/Public Key can't be NULL

Feb 19 21:19:27 acwebsecagent: SSLExt Failed to get ScanSafe headers



Console log



Feb 13 06:59:12 nsurlstoraged: Process 12340 does not have access to path /Users/USER/Library/Caches/com.apple.AddressBookSourceSync/Cache.db

Feb 13 06:59:12 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.AddressBookSourceSync/Cache.db is NOT valid. Unable to determine schema version.

Feb 13 06:59:12 nsurlstoraged: Process 12340 does not have access to path /Users/USER/Library/Caches/com.apple.AddressBookSourceSync/Cache.db

Feb 13 06:59:12 nsurlstoraged: Process 12340 does not have access to path /Users/USER/Library/Caches/com.apple.AddressBookSourceSync/Cache.db

Feb 13 10:21:29 ReportCrash: Invoking spindump for pid=37112 wakeups_rate=266 duration=170 because of excessive wakeups

Feb 13 22:25:47 ReportCrash: Invoking spindump for pid=43635 wakeups_rate=163 duration=277 because of excessive wakeups

Feb 14 20:01:10 ReportCrash: Invoking spindump for pid=22953 wakeups_rate=184 duration=245 because of excessive wakeups

Feb 14 20:13:24 ReportCrash: Invoking spindump for pid=39446 wakeups_rate=221 duration=204 because of excessive wakeups

Feb 15 19:47:34 ReportCrash: Invoking spindump for pid=38882 wakeups_rate=197 duration=229 because of excessive wakeups

Feb 16 13:39:17 ReportCrash: Invoking spindump for pid=35254 wakeups_rate=428 duration=106 because of excessive wakeups

Feb 17 22:16:09 ReportCrash: Invoking spindump for pid=71792 wakeups_rate=170 duration=265 because of excessive wakeups

Feb 18 17:07:53 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

Feb 18 19:01:06 ReportCrash: Invoking spindump for pid=663 wakeups_rate=294 duration=154 because of excessive wakeups

Feb 18 20:01:25 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

Feb 19 21:10:01 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.



Loaded kernel extensions



com.Cycling74.driver.Soundflower (1.5.3)

com.cisco.kext.acsock (1.1.0)

com.nomachine.driver.nxau (4.1.b1)

com.wdc.driver.1394_64HP (1.0.1)



Daemons



com.adobe.fpsaud

com.apple.Kerberos.kdc

- status: 1

com.apple.installer.osmessagetracing

com.apple.watchdogd

com.barebones.authd

com.barebones.textwrangler

com.cisco.anyconnect.vpnagentd

com.github.GitHub.GHInstallCLI

com.microsoft.office.licensing.helper

com.nomachine.nxserver

com.nomachine.uninstall

com.opendns.osx.DNSCryptAfterboot

com.opendns.osx.DNSCryptConsoleChange

com.opendns.osx.DNSCryptControlChange

com.opendns.osx.DNSCryptNetworkChange

com.oracle.java.Helper-Tool

com.oracle.java.JavaUpdateHelper



Agents



2BUA8C4S2C.com.agilebits.onepassword-osx-helper

com.adobe.ARM.UUID

- status: 78

com.amazon.cloud-player

- status: 78

com.amazon.music

com.apple.AirPortBaseStationAgent

com.apple.FolderActions.enabled

com.apple.FolderActions.folders

com.apple.photostream-agent

com.cisco.anyconnect.gui

com.google.keystone.user.agent

com.nomachine.localnxserver

com.opendns.osx.DNSCryptMenuBar

com.oracle.java.Java-Updater

com.spotify.webhelper

net.culater.SIMBL.Agent



User overrides



com.fiplab.MemoryCleanHelper

com.evernote.EvernoteHelper

com.mint.quickview-launcher



Startup items



/System/Library/StartupItems/ciscod/ciscod

/System/Library/StartupItems/ciscod/StartupParameters.plist

/Library/StartupItems/MySQLCOM/MySQLCOM

/Library/StartupItems/MySQLCOM/StartupParameters.plist

/Library/StartupItems/rEFItBlesser/rEFItBlesser

/Library/StartupItems/rEFItBlesser/StartupParameters.plist



User login items



Google Drive

- /Applications/Google Drive.app

Messages

- /Applications/Messages.app

Dropbox

- /Applications/Dropbox.app

OpenDNS Updater

- /Applications/OpenDNS Updater.app



Safari extensions



1Password

- com.agilebits.onepassword4-safari

Adblock Plus

- org.adblockplus.adblockplussafari

AdBlock

- com.betafish.adblockforsafari

AVG Do Not Track

- com.avg.donottrack

ClickToFlash

- com.hoyois.safari.clicktoflash

Cookie Stumbler

- de.writeitstudios.cookiesafariext

Facebook Disconnect

- me.disconnect.facebook

Ghostery

- com.betteradvertising.ghostery

Google Disconnect

- me.disconnect.google

Twitter Disconnect

- me.disconnect.twitter

UTM Stripper

- com.dosburros.safari-utm-stripper



Firefox extensions



au-revoir-utm

Ghostery

Facebook Disconnect

Disconnect

Adblock Plus

WordPress.com Extension

Google Disconnect

Twitter Disconnect



Widgets



Time Machine Buddy

iCal

iStat pro



iCloud errors



bird 170

cloudd 21



Continuity errors



sharingd 8



Restricted files: 10950



Lockfiles: 84



High file counts



Library/Keychains -1 10



Accessibility



Keyboard Zoom: On



Contents of /Library/LaunchAgents/com.cisco.anyconnect.gui.plist

- mod date: Jun 10 21:06:48 2014

- checksum: 1087717482



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<dict>

<key>PathState</key>

<dict>

<key>/opt/cisco/anyconnect/gui_keepalive</key>

<true/>

</dict>

</dict>

<key>Label</key>

<string>com.cisco.anyconnect.gui</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>--wait-apps</string>

<string>/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app</string>

</array>

</dict>

</plist>



Contents of /Library/LaunchAgents/com.nomachine.localnxserver.plist

- mod date: Jan 27 20:12:41 2015

- checksum: 2995421022



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.nomachine.localnxserver</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

<string>Aqua</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/etc/NX/nxnode</string>

<string>--localsession</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>KeepAlive</key>

<dict>

<key>SuccessfulExit</key>

<false/>

</dict>

<key>StandardOutPath</key>

<string>/Library/Application Support/NoMachine/var/log/nxserver.log</string>



...and 4 more line(s)



Contents of /Library/LaunchAgents/com.opendns.osx.DNSCryptMenuBar.plist

- mod date: Apr 6 14:06:35 2014

- checksum: 940029516



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.opendns.osx.DNSCryptMenuBar</string>

<key>KeepAlive</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Applications/DNSCrypt-Menubar.app/Contents/MacOS/DNSCrypt-Menubar</str ing>

</array>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

</dict>

</plist>



Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

- mod date: Feb 21 10:31:41 2013

- checksum: 1256326484



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.oracle.java.Java-Updater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

<string>-bgcheck</string>

</array>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>21</integer>

<key>Minute</key>

<integer>36</integer>

<key>Weekday</key>

<integer>1</integer>

</dict>

</dict>



...and 1 more line(s)



Contents of /Library/LaunchAgents/net.culater.SIMBL.Agent.plist

- mod date: Mar 8 11:18:32 2013

- checksum: 1107421619



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>net.culater.SIMBL.Agent</string>

<key>Program</key>

<string>/Library/ScriptingAdditions/SIMBL.osax/Contents/Resources/SIMBL Agent.app/Contents/MacOS/SIMBL Agent</string>

<key>RunAtLoad</key>

<false/>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>OnDemand</key>

<false/>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.barebones.authd.plist

- mod date: Jun 3 19:13:39 2012

- checksum: 1995816654



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableTransactions</key>

<true/>

<key>Label</key>

<string>com.barebones.authd</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

</array>

<key>Sockets</key>

<dict>

<key>com.barebones.authd.socket</key>

<dict>

<key>SockPathMode</key>

<integer>438</integer>

<key>SockPathName</key>

<string>/var/tmp/com.barebones.authd.socket</string>

</dict>

</dict>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.barebones.textwrangler.plist

- mod date: Mar 28 19:43:31 2012

- checksum: 2824893286



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.barebones.textwrangler</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.barebones.textwrangler</string>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<string>Unix</string>

<key>SockPathMode</key>

<integer>438</integer>

<key>SockPathName</key>



...and 7 more line(s)



Contents of /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist

- mod date: Jun 10 21:06:48 2014

- checksum: 2630047092



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN

http://www.apple.com/DTDs/PropertyList-1.0.dtd >

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.cisco.anyconnect.vpnagentd</string>

<key>ProgramArguments</key>

<array>

<string>/opt/cisco/anyconnect/bin/vpnagentd</string>

<string>-execv_instance</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>AbandonProcessGroup</key>

<true/>

<key>EnableTransactions</key>

<false/>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.github.GitHub.GHInstallCLI.plist

- mod date: Sep 3 22:20:48 2014

- checksum: 4139687208



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.github.GitHub.GHInstallCLI</string>

<key>MachServices</key>

<dict>

<key>com.github.GitHub.GHInstallCLI</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.github.GitHub.GHInstallCLI</string>

</array>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.nomachine.server.plist

- mod date: Jan 27 20:12:32 2015

- checksum: 1914188641



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.nomachine.nxserver</string>

<key>Username</key>

<string>nx</string>

<key>KeepAlive</key>

<dict>

<key>SuccessfulExit</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/etc/NX/nxserver</string>

<string>--daemon</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<string>/Library/Application Support/NoMachine/var/log/nxserver.log</string>

<key>StandardOutPath</key>

<string>/Library/Application Support/NoMachine/var/log/nxserver.log</string>

<key>WorkingDirectory</key>



...and 5 more line(s)



Contents of /Library/LaunchDaemons/com.nomachine.uninstall.plist

- mod date: Jan 27 20:12:42 2015

- checksum: 312261778



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.nomachine.uninstall</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/NoMachine/nxuninstall.sh</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Applications/NoMachine.app</string>

</array>

<key>StandardOutPath</key>

<string>/Library/Application Support/NoMachine/var/log/nxuninstall.log</string>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.opendns.osx.DNSCryptAfterboot.plist

- mod date: Apr 6 14:06:35 2014

- checksum: 1820797437



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-/Apple/DTD PLIST 1.0/EN" "http:/www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.opendns.osx.DNSCryptAfterboot</string>

<key>KeepAlive</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts/afterboot.sh</string>

</array>

<key>ExitTimeOut</key>

<integer>300</integer>

<key>ThrottleInterval</key>

<integer>1</integer>

<key>Nice</key>

<integer>1</integer>

<key>UserName</key>

<string>root</string>

</dict>



...and 1 more line(s)



Contents of /Library/LaunchDaemons/com.opendns.osx.DNSCryptConsoleChange.plist

- mod date: Apr 6 14:06:35 2014

- checksum: 3807579422



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-/Apple/DTD PLIST 1.0/EN" "http:/www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.opendns.osx.DNSCryptConsoleChange</string>

<key>KeepAlive</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts/handle-console-change.sh</string>

</array>

<key>ExitTimeOut</key>

<integer>30</integer>

<key>ThrottleInterval</key>

<integer>0</integer>

<key>Nice</key>

<integer>15</integer>

<key>UserName</key>

<string>root</string>

<key>WatchPaths</key>



...and 6 more line(s)



Contents of /Library/LaunchDaemons/com.opendns.osx.DNSCryptControlChange.plist

- mod date: Apr 6 14:06:35 2014

- checksum: 1462886689



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-/Apple/DTD PLIST 1.0/EN" "http:/www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.opendns.osx.DNSCryptControlChange</string>

<key>KeepAlive</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts/handle-control-change.sh</string>

</array>

<key>ExitTimeOut</key>

<integer>300</integer>

<key>ThrottleInterval</key>

<integer>0</integer>

<key>Nice</key>

<integer>1</integer>

<key>UserName</key>

<string>root</string>

<key>WatchPaths</key>



...and 5 more line(s)



Contents of /Library/LaunchDaemons/com.opendns.osx.DNSCryptNetworkChange.plist

- mod date: Apr 6 14:06:35 2014

- checksum: 2230400701



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-/Apple/DTD PLIST 1.0/EN" "http:/www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.opendns.osx.DNSCryptNetworkChange</string>

<key>KeepAlive</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr/scrip ts/handle-network-change.sh</string>

</array>

<key>ExitTimeOut</key>

<integer>300</integer>

<key>ThrottleInterval</key>

<integer>1</integer>

<key>Nice</key>

<integer>1</integer>

<key>UserName</key>

<string>root</string>

<key>WatchPaths</key>



...and 5 more line(s)



Contents of /private/etc/hosts

- ASCII English text, with CRLF line terminators

- mod date: Feb 13 15:17:15 2015

- checksum: 700879088



127.0.0.1 localhost

::1 localhost #[IPv6]

127.0.0.1 fr.a2dfp.net

127.0.0.1 m.fr.a2dfp.net

127.0.0.1 ad.a8.net

127.0.0.1 asy.a8ww.net

127.0.0.1 abcstats.com

127.0.0.1 a.abv.bg

127.0.0.1 adserver.abv.bg

127.0.0.1 adv.abv.bg

127.0.0.1 bimg.abv.bg

127.0.0.1 ca.abv.bg

127.0.0.1 www2.a-counter.kiev.ua

127.0.0.1 track.acclaimnetwork.com

127.0.0.1 accuserveadsystem.com

127.0.0.1 www.accuserveadsystem.com

127.0.0.1 achmedia.com

127.0.0.1 aconti.net

127.0.0.1 secure.aconti.net

127.0.0.1 www.aconti.net #[Dialer.Aconti]

127.0.0.1 am1.activemeter.com

127.0.0.1 www.activemeter.com #[Tracking.Cookie]

127.0.0.1 ads.activepower.net

127.0.0.1 stat.active24stats.nl #[Tracking.Cookie]

127.0.0.1 ad2games.com



...and 14546 more line(s)



Contents of /private/etc/pam.d/nx

- mod date: Jan 27 20:12:06 2015

- checksum: 3756560288



auth include su

account include su

password include su

session include su



Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Sep 15 18:32:30 2010

- checksum: 1251035989



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Acrobat 9 Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>12600</integer>

</dict>

</plist>



Contents of Library/LaunchAgents/com.amazon.cloud-player.plist

- mod date: Nov 4 19:45:30 2013

- checksum: 1833760484



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableTransactions</key>

<false/>

<key>Hidden</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.amazon.cloud-player</string>

<key>Program</key>

<string>/Applications/Amazon Cloud Player.app/Contents/MacOS/Amazon Music Helper</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>



Contents of Library/LaunchAgents/com.amazon.music.plist

- mod date: Jul 16 22:57:49 2014

- checksum: 3668832669



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableTransactions</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.amazon.music</string>

<key>Program</key>

<string>/Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>



Contents of Library/LaunchAgents/com.apple.FolderActions.folders.plist

- mod date: Jan 27 20:27:51 2015

- checksum: 1497884728



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.apple.FolderActions.folders</string>

<key>Program</key>

<string>/usr/bin/osascript</string>

<key>ProgramArguments</key>

<array>

<string>osascript</string>

<string>-e</string>

<string>tell application "Folder Actions Dispatcher" to tick</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Movies/encode/in</string>

<string>/Users/USER/Movies/encode/in720</string>

</array>

</dict>

</plist>



Contents of Library/LaunchAgents/com.google.keystone.agent.plist

- mod date: Dec 18 21:21:57 2014

- checksum: 1729547407



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.google.keystone.user.agent</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

<string>-runMode</string>

<string>ifneeded</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3523</integer>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>



Contents of Library/LaunchAgents/com.spotify.webhelper.plist

- mod date: Jan 15 21:18:41 2015

- checksum: 2895606825



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.spotify.webhelper</string>

<key>KeepAlive</key>

<dict>

<key>NetworkState</key>

<true/>

</dict>

<key>RunAtLoad</key>

<true/>

<key>Program</key>

<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

<key>SpotifyPath</key>

<string>/Applications/Spotify.app</string></dict>

</plist>



Bundles (new)



/Applications/EtreCheck.app

- com.etresoft.EtreCheck



App extensions



com.getdropbox.dropbox.garcon



Installations



Adobe Flash Player: 2/5/14, 9:57 AM

Adobe Flash Player: 12/10/13, 12:46 PM

Java 7 Update 45: 11/3/13, 7:24 PM

Safari Cookies: 10/31/13, 7:52 AM

Flip4Mac: 10/30/13, 2:21 PM



Bad kernel extensions



/System/Library/Extensions/WD1394HPDriver.kext

/System/Library/Extensions/WDUSBHPDriver.kext



Elapsed time (sec): 1148

Feb 19, 2015 10:17 PM in response to StrangeProportion

A

Though I don't like to make this suggestion, the system is so heavily modified by hacks and incompatible third-party software that, instead of trying to remove the modifications piecemeal, you should erase the startup volume, reinstall OS X, and then go through the initial setup process, restoring only user data and settings from a backup—not applications or other files. This course of action will be the easiest and most reliable.

Back up all data to at least two different storage devices, if you haven't already done so. One backup is not enough to be safe. The backups can be made with Time Machine or with Disk Utility. Preferably both.

Erase and install OS X. This operation will destroy all data on the startup volume, so you had be better be sure of the backups. If you upgraded from an older version of OS X, you'll need the Apple ID and password that you used, so make a note of those before you begin.

When you restart, you'll be prompted to go through the initial setup process in Setup Assistant. That’s when you transfer the data from a backup.

Select only users and Computer & Network Settings in the Setup Assistant dialog—not Applications or Other files and folders. Don't transfer the Guest account, if it was enabled.

After that, check the App Store for software updates.

If the problem is resolved after the clean installation, reinstall third-party software selectively. I can only suggest general guidelines. Self-contained applications that install into the Applications folder by drag-and-drop or download from the App Store are usually safe. Anything that comes packaged as an installer or that prompts for an administrator password is suspect, and you must test thoroughly after reinstalling each such item to make sure you haven't restored the problem.

I strongly recommend that you never reinstall commercial "security" products or "utilities," nor any software (such as "SIMBL") that changes the user interface or the behavior of built-in applications such as Safari. If you do that, the problem is likely to recur. Do not install a hacked hosts file to block ad servers.

Any system modifications that you do choose to install must be kept up to date. None is required for normal operation.

Before installing any software, ask yourself the question: "Am I sure I know how to uninstall this without having to wipe the volume again?" If the answer is "no," stop.

Never install any third-party software unless you know how to uninstall it.

B

I'm not confident that even a clean installation, though it's necessary, will solve all your problems. There are several indications of a hardware fault, perhaps in the logic board or in the SATA cable connecting it to the internal hard drive.

C

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

Restart

from the menu bar.

Feb 20, 2015 4:44 AM in response to StrangeProportion

StrangeProportion wrote:


Configuration files: ℹ️

/etc/hosts - Count: 14569


Gatekeeper: ℹ️

Anywhere


Kernel Extensions: ℹ️



/Library/Extensions

[loaded] com.squirrels.driver.AirParrotSpeakers (1.8 - SDK 10.8) [Click for support]


/System/Library/Extensions

[loaded] com.Cycling74.driver.Soundflower (1.5.3 - SDK 10.6) [Click for support]

[loaded] com.squirrels.airparrot.framebuffer (3 - SDK 10.8) [Click for support]



Startup Items: ℹ️

ciscod: Path: /System/Library/StartupItems/ciscod

MySQLCOM: Path: /Library/StartupItems/MySQLCOM

rEFItBlesser: Path: /Library/StartupItems/rEFItBlesser

Startup items are obsolete in OS X Yosemite


Launch Agents: ℹ️

[running] net.culater.SIMBL.Agent.plist [Click for support]

These are the things that look like the biggest problems. I'm not sure they will help that much. Your hard drive is almost full. The OS does a lot of extra work behind the scenes when your hard drive starts to fill up. Since you have a traditional spinning hard drive, said work is that much slower. When running Yosemite on an older machine, and SSD is always best.

Feb 20, 2015 7:47 AM in response to etresoft

Thank you both very much. I appreciate the insights. I'm very attached to my hosts file, because egads, there are ads everywhere when I use the default file! And of course, watching eyes are everywhere. But I know that must contribute. I'll look into those startup items, and will try to clear out my hard drive. It's all media, but I don't like how iTunes and iPhoto work with external hard drives so I've always kept it on the laptop. Maybe it's time to look into NAS for media storage.

Feb 20, 2015 8:18 AM in response to StrangeProportion

Hacking the hosts file is not the right way to block ads. Use software such as "GlimmerBlocker."


The answer you marked correct is mostly wrong, as usual with advice based on "etrecheck" output. The startup items have no effect in Yosemite, because they don't load at all. The Gatekeeper setting also has no effect on performance, only on security. You hard drive is not full enough for there to be any noticeable effect on performance.


Also, you can't use a NAS to store your iPhoto library. You must use a locally-attached storage device in Mac OS format.

Feb 20, 2015 12:42 PM in response to Linc Davis

Those startup items are identified as a problem precisely because they don't run on Yosemite. They are all part of larger software packages that are expecting those startup items to be functional. The other parts of the software may now running in an unexpected configuration that could result in slow downs, crashes, or data loss.


GlimmerBlocker is a Java-based, open-source web proxy. I know because I used it years ago. Recommending it to someone who is already complaining about slowness is a horrible idea. Today, there are far better alternatives like the Safari AdBlock extension.


<Edited By Host>

Aug 8, 2015 9:32 AM in response to StrangeProportion

Just wondering if you've truly solved you MacBook performance problem? I have a similar model, with the same issues. It has become so slow that I usually keep my phone on my desktop to use it while the beachball is spinning. I've completely wiped my hard disk and installed a clean system without replacing ANY backed-up files and it is still unchanged. Sometimes I even forget what I was doing I'm waiting so long for it to respond.


It almost seems that there is some insidious code in Yosemite like:


when user clicks mouse

if hardware age > 5 years then

if random-number > 0.5 then

spin beachball for 20-30 seconds.

Macbook Pro 2010 slow as molasses since Yosemite

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.