Will adding more memory speed up my computer?

Question

Level 1

17 points

Will adding more memory speed up my computer?

I have a late 2009 27" iMac 3.06 Intel Core 2 Duo processor with 4 GB 1067 MHz DDR3 RAM and an ATI Radeon HD 4670 256 MB Graphics card. My system has been running crazy slow lately and I've tried a number of fixes to no avail. Short of buying a newer, faster, and more current computer I was wondering if adding more RAM would help?

Thoughts? Thanks!

iMac, OS X Yosemite (10.10.1)

Posted on Feb 21, 2015 12:01 PM

Reply

Answer 1

Drew Reece

Level 6

10,660 points

Feb 21, 2015 12:10 PM in response to bzq

It really depends on why it is running slow. RAM helps the OS hold more data in 'fast, short term' memory ready for the CPU & other tasks to use. If the OS is constantly needing to get more data then more RAM may help, but RAM is only 1 part of the picture.

You didn't follow up on Linc Davis's request for more info, or follow up the request to post an Etrecheck report…

My iMac is running exceptionally slow.

Your Mac may remain slow if you have bad software installed & do not attempt to address it or you may be lucky & find the RAM is the answer.

A simple answer may be to backup, erase & clean install the OS to a start fresh but without any background we are in the dark just as much as you are.

Reply

Answer 2

Old Toad

Level 10

207,403 points

Feb 21, 2015 12:12 PM in response to bzq

You also didn't follow up on the request to run Etrecheck and post the results.

Reply

Answer 3

Linc Davis

Level 10

209,541 points

Feb 21, 2015 12:27 PM in response to bzq

When you see a beachball cursor or the slowness is especially bad, note the exact time: hour, minute, second.

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES ▹ All Messages

from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar at the top of the screen.

Each message in the log begins with the date and time when it was entered. Scroll back to the time you noted above.

Select the messages entered from then until the end of the episode, or until they start to repeat, whichever comes first.

Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of it useless for solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name, may appear in the log. Anonymize before posting.

Reply

Answer 4

bzq Author

Level 1

17 points

Feb 21, 2015 1:21 PM in response to Drew Reece

Currently I'm downloading app updates in iTunes and it's literally taking hours to download and install only a 50MB file. When I clock my download speed on the AT&T website it shows about 25 Mbps.

I didn't really understand the support that Linc gave me but I'll try again. He, and the rest of the community, certainly offer valuable time and information to help us IT challenged folk.

Reply

Answer 5

Drew Reece

Level 6

10,660 points

Feb 21, 2015 1:48 PM in response to bzq

Linc is attempting to isolate what is causing the issue by finding what is being recorded in logs as the issue arises, it often works very well (see his other posts).

Other users will suggest Etrecheck reports to show what is installed. Etrecheck is more general approach, from there we can point out any possible conflicting software but it obviously less targeted than Linc's method. I have also seen the Etrecheck method work too (there are probably examples in my activity - click usernames if you want to see that).

http://etresoft.com/etrecheck

That will examine the system and create a report for pasting here.

You can decide to do either or both but at some point we need to be able to see what is installed & running, Linc may post another 'one liner' to show that info after the logs are posted.

The download speed sounds annoying, something is not right. I'd also suggest making a full backup if you don't already have one, carefully applied system maintenance should help matters, but by it's very nature its checking & altering low level parts of the system.

Reply

Answer 6

bzq Author

Level 1

17 points

Feb 21, 2015 2:30 PM in response to Drew Reece

This is from Etrecheck:

I really hope that I'm not allowing/inviting you guys onto my computer and stealing my life. That would really suck.

Problem description:

Slow running computer, but primarily when trying to install iTunes app updates. AT&T clock speed is 25 Mbps but it’s taking HOURS to update a 50 MB app. I’ve rebooted my computer, modem/router, etc but still painstakingly slow.

EtreCheck version: 2.1.8 (121)

Report generated February 21, 2015 at 4:25:14 PM CST

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: ℹ️

iMac (27-inch, Late 2009) (Technical Specifications)

iMac - model: iMac10,1

1 3.06 GHz Intel Core 2 Duo CPU: 2-core

4 GB RAM Upgradeable

BANK 0/DIMM0

Empty

BANK 1/DIMM0

Empty

BANK 0/DIMM1

2 GB DDR3 1067 MHz ok

BANK 1/DIMM1

2 GB DDR3 1067 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Video Information: ℹ️

ATI Radeon HD 4670 - VRAM: 256 MB

iMac 2560 x 1440

System Software: ℹ️

OS X 10.10.2 (14C109) - Time since boot: 19:24:42

Disk Information: ℹ️

Hitachi HDE721010SLA330 disk0 : (1 TB)

EFI (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / : 999.35 GB (396.81 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

HL-DT-ST DVDRW GA11N

USB Information: ℹ️

VIA Labs, Inc. USB2.0 Hub

Apple Inc. Built-in iSight

Seagate Backup+ Desk 3 TB

disk2s1 (disk2s1) <not mounted> : 262 KB

Seagate Backup Plus Drive (disk2s3) /Volumes/Seagate Backup Plus Drive : 3.00 TB (164.53 GB free)

Apple Internal Memory Card Reader

Western Digital My Passport 0820 2 TB

EFI (disk1s1) <not mounted> : 210 MB

My Passport (disk1s2) /Volumes/My Passport : 2.00 TB (1.75 TB free)

Apple Computer, Inc. IR Receiver

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Configuration files: ℹ️

/etc/launchd.conf - Exists

Gatekeeper: ℹ️

Mac App Store and identified developers

Kernel Extensions: ℹ️

/Applications/Popcorn.app

[not loaded] com.roxio.TDIXController (1.6) [Click for support]

/System/Library/Extensions

[not loaded] com.Belcarra.iokit.USBLAN_netpart (3.1.1 - SDK 10.6) [Click for support]

[not loaded] com.Belcarra.iokit.USBLAN_usbpart (3.1.1 - SDK 10.6) [Click for support]

[not loaded] com.RemoteControl.USBLAN.usbpart (3.1.1 - SDK 10.7) [Click for support]

[loaded] com.dvdfab.kext.fabio (1) [Click for support]

[not loaded] com.leapfrog.driver.LfConnectDriver (1.0.5 - SDK 10.0) [Click for support]

/System/Library/Extensions/2.2.0/Belcarra.USBLAN_netpart.kext/Contents/Plug-Ins

[not loaded] com.belcarra.iokit.netpart.panther (1.6.3) [Click for support]

/System/Library/Extensions/2.2.0/Belcarra.USBLAN_usbpart.kext/Contents/Plug-Ins

[not loaded] com.belcarra.iokit.usbpart.panther (1.6.3) [Click for support]

/System/Library/Extensions/2.2.0/RemoteControl.USBLAN_usbpart.kext/Contents/Plu g-Ins

[not loaded] com.RemoteControl.USBLAN.panther (1.6.2) [Click for support]

Problem System Launch Daemons: ℹ️

[failed] com.apple.loginwindow.LFVTracer.plist [Click for details]

Launch Agents: ℹ️

[not loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.divx.dms.agent.plist [Click for support]

[loaded] com.divx.update.agent.plist [Click for support]

[loaded] com.oracle.java.Java-Updater.plist [Click for support]

Launch Daemons: ℹ️

[loaded] com.adobe.fpsaud.plist [Click for support]

[failed] com.google.GoogleML.plist [Click for support]

[running] com.google.keystone.daemon.plist [Click for support]

[loaded] com.oracle.java.Helper-Tool.plist [Click for support]

[loaded] com.oracle.java.JavaUpdateHelper.plist [Click for support]

[running] com.trusteer.rooks.rooksd.plist [Click for support]

[loaded] com.westerndigital.ErasePrivilegedHelper.plist [Click for support]

User Launch Agents: ℹ️

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.adobe.ARM.[...].plist [Click for support]

[running] com.akamai.single-user-client.plist [Click for support]

[not loaded] jp.co.canon.Inkjet_Extended_Survey_Agent.plist [Click for support]

User Login Items: ℹ️

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

iTunesHelper UNKNOWN (missing value)

Canon IJ Network Scanner Selector2 Application Hidden (/Library/Printers/Canon/IJScanner/Utilities/Canon IJ Network Scanner Selector2.app)

Monitor UNKNOWN Hidden (missing value)

Dropbox Application (/Applications/Dropbox.app)

Canon IJ Network Scanner Selector EX Application Hidden (/Applications/Canon Utilities/IJ Network Scanner Selector EX/Canon IJ Network Scanner Selector EX.app)

WDDriveUtilityHelper Application (/Applications/WD Drive Utilities.app/Contents/WDDriveUtilityHelper.app)

Google Chrome Application Hidden (/Applications/Google Chrome.app)

Google Software Update Application (/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Reso urces/GoogleSoftwareUpdateAgent.app)

Internet Plug-ins: ℹ️

AdobePDFViewerNPAPI: Version: 11.0.10 - SDK 10.6 [Click for support]

Flash Player: Version: 16.0.0.305 - SDK 10.6 [Click for support]

EPPEX Plugin: Version: 4.1.0.0 [Click for support]

DivX Web Player: Version: 3.2.4.1250 - SDK 10.6 [Click for support]

AdobePDFViewer: Version: 11.0.10 - SDK 10.6 [Click for support]

Unity Web Player: Version: UnityPlayer version 3.1.0f4 [Click for support]

nppanda3d: Version: Unknown [Click for support]

Photo Center Plugin: Version: Photo Center Plugin 1.1.2.2 [Click for support]

iPhotoPhotocast: Version: 7.0

RealPlayer Plugin: Version: Unknown [Click for support]

DirectorShockwave: Version: 11.5.7r609 [Click for support]

QuickTime Plugin: Version: 7.7.3

FlashPlayer-10.6: Version: 16.0.0.305 - SDK 10.6 [Click for support]

Silverlight: Version: 5.1.20913.0 - SDK 10.6 [Click for support]

CouponPrinter-FireFox: Version: Version 1.1.5

OVSHelper: Version: 1.1 [Click for support]

LogitechHarmony: Version: 2.0 - SDK 10.7 [Click for support]

Default Browser: Version: 600 - SDK 10.10

Flip4Mac WMV Plugin: Version: 2.3.8.1 [Click for support]

JavaAppletPlugin: Version: Java 8 Update 31 Check version

OfficeLiveBrowserPlugin: Version: 12.3.6 [Click for support]

User internet Plug-ins: ℹ️

BrowserPlus_2.9.8: Version: 2.9.8 [Click for support]

CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Click for support]

fbplugin_1_0_3: Version: Unknown [Click for support]

Safari Extensions: ℹ️

AdBlock

3rd Party Preference Panes: ℹ️

Akamai NetSession Preferences [Click for support]

BrowserPlus [Click for support]

Flash Player [Click for support]

Flip4Mac WMV [Click for support]

Java [Click for support]

Rapport [Click for support]

Time Machine: ℹ️

Skip System Files: NO

Mobile backups: OFF

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 999.35 GB Disk used: 602.54 GB

Destinations:

Seagate Backup Plus Drive [Local]

Total size: 3.00 TB

Total number of backups: 125

Oldest backup: 2013-03-09 06:21:21 +0000

Last backup: 2015-02-21 21:55:49 +0000

Size of backup disk: Excellent

Backup size 3.00 TB > (Disk size 999.35 GB X 3)

Top Processes by CPU: ℹ️

8% iTunes

5% mds

4% WindowServer

0% AppleSpell

0% firefox

Top Processes by Memory: ℹ️

494 MB iTunes

356 MB com.apple.MediaLibraryService

326 MB firefox

146 MB Google Chrome Helper

129 MB Google Chrome

Virtual Memory Information: ℹ️

31 MB Free RAM

1.61 GB Active RAM

1.60 GB Inactive RAM

601 MB Wired RAM

10.76 GB Page-ins

114 MB Page-outs

Diagnostics Information: ℹ️

Feb 20, 2015, 08:58:48 PM Self test - passed

Feb 21, 2015, 01:45:58 PM /Users/[redacted]/Library/Logs/DiagnosticReports/ScreenSaverEngine_2015-02-21-1 34558_[redacted].crash

Feb 21, 2015, 09:06:46 AM /Library/Logs/DiagnosticReports/LegacyFileVaultMessageTracer_2015-02-21-090646_ [redacted].crash

Reply

Answer 7

Drew Reece

Level 6

10,660 points

Feb 21, 2015 4:11 PM in response to bzq

Trusteer & Akamai Netsession seem like they can mess up downloads…

http://www.trusteer.com/support/uninstalling-rapport-mac-os-x

http://www.akamai.com/html/solutions/client_faq.html

Disable, update or remove them & retest.

Reply

Answer 8

Feb 21, 2015 4:17 PM in response to Drew Reece

If it is overall system performance you are dissatisfied with, such as booting up, long app load times, etc. I suggest upgrading to a Solid State Drive. I upgraded to a Crucial SSD and I can't believe the difference in my Mac's performance, it is truly a worthy upgrade.

Reply

Answer 9

bzq Author

Level 1

17 points

Feb 21, 2015 4:56 PM in response to Linc Davis

Here's an example. We had just plugged our digital camera in to download photos.

2/21/15 6:38:38.188 PM com.apple.xpc.launchd[1]: (com.apple.xpc.launchd.domain.user.200) Caller specified a plist with bad ownership/permissions: path = /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist, caller = softwareupdated.169

2/21/15 6:38:38.188 PM com.apple.xpc.launchd[1]: (com.apple.xpc.launchd.domain.user.200) Failed to bootstrap path: path = /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist, error = 122: Path had bad ownership/permissions

2/21/15 6:38:38.000 PM kernel[0]: BUG in process suhelperd[171]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

2/21/15 6:38:38.000 PM kernel[0]: IOBluetoothDevice::setProperties() -- calling hciController->CallCreateDeviceReporter() -- this = 0xa400

2/21/15 6:38:38.000 PM kernel[0]: IOBluetoothHCIController::CallCreateDeviceReporter -- calling enqueueAction() -- device = 0xa400

2/21/15 6:38:38.000 PM kernel[0]: IOBluetoothHCIController::CreateDeviceReporterAction -- device = = 0xa400

2/21/15 6:38:38.000 PM kernel[0]: IOBluetoothHCIController::CreateDeviceReporterAction -- calling CreateDeviceReporter() device = = 0xa400

2/21/15 6:38:38.000 PM kernel[0]: IOBluetoothHCIController::CreateDeviceReporter -- device = = 0xa400

2/21/15 6:38:38.000 PM kernel[0]: [BNBMouseDevice::init][85.3] init is complete

2/21/15 6:38:38.832 PM fseventsd[20]: log dir: /.fseventsd getting new uuid: 6AA5EBEC-F494-440C-AD28-476615285E14

2/21/15 6:38:38.000 PM kernel[0]: BUG in process suhelperd[171]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

2/21/15 6:38:38.000 PM kernel[0]: [BNBMouseDevice::handleStart][85.3] returning 1

2/21/15 6:38:38.000 PM kernel[0]: [AppleMultitouchHIDEventDriver::start] entered

2/21/15 6:38:38.000 PM kernel[0]: BUG in process suhelperd[171]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

2/21/15 6:38:38.857 PM WindowServer[134]: **DMPROXY** (2) Found `/System/Library/CoreServices/DMProxy'. Run with arg = -discovery

2/21/15 6:38:38.000 PM kernel[0]: BUG in process suhelperd[171]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

2/21/15 6:38:38.976 PM WindowServer[134]: CGXSetDisplayColorProfileAndTransfer: Display 0x04272d40: Unit 0; ColorProfile { 908984193 }; TransferTable (256, 3)

2/21/15 6:38:38.991 PM com.apple.AmbientDisplayAgent[174]: AmbientDisplayAgent started

2/21/15 6:38:38.995 PM com.apple.AmbientDisplayAgent[174]: AMBD initializing devices

2/21/15 6:38:38.998 PM VDCAssistant[151]: AVFJPG_GetJPEGDecodeAvailability unsupported

2/21/15 6:38:39.008 PM com.apple.xpc.launchd[1]: (com.apple.AssistiveControl.running) The HideUntilCheckIn property is an architectural performance issue. Please transition away from it.

2/21/15 6:38:39.003 PM com.apple.AmbientDisplayAgent[174]: AMBD Agent: xpc connection became invalid during event handler

Reply

Answer 10

Linc Davis

Level 10

209,541 points

Feb 21, 2015 5:09 PM in response to bzq

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(1252 ' 0.5 0.25 10 1000 15 5120 1000 25000 1 1 0 100 ' 51 25600 4 10 25 5120 102400 1000 25 1000 225 40 500 300 85 25 20480 262144 20 2000 524288 604800 5 );k=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays PCI UniversalAccess InstallHistory ConfigurationProfile AirPort 'com\.apple\.' -\\t N\\/A 'AES|atr|udit|msa|dnse|ax|ensh|fami|FileS|fing|ft[pw]|gedC|kdu|etS|is\.|alk|ODSA|otp|htt|pcas|ps-lp|rexe|rlo|rsh|smb|snm|teln|upd-[aw]|uuc|vix|webf' OSBundle{Require,AllowUserLoa}d 'Mb/s:per sec:ms/s:KiB/s:%:total:MB:total' 'Net in:Net out:I/O wait time:I/O requests:CPU usage:Open files:Memory:Mach ports:File opens:Forks:Failed forks:System errors' 'tsA|[ST]M[HL]' PlistBuddy{,' 2>&1'}' -c Print' 'Info\.plist' CFBundleIdentifier );f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' %s{' ','\n'{"${k[22]}",}}'%s\n' '%d MB: %s\n' '\n ...and %s more line(s)\n' '\nContents of %s\n '"${k[22]}"'mod date: %s\n '"${k[22]}"'checksum: %s\n%s\n' );c=(879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 3374894509 1051159591 892310726 1707497389 523110921 2883943871 3873345487 );s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[4]} ' s/:$//;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[9]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' BEGIN { FS="\f";if(system("sw_vers -productVersion|grep -q ^10\.1")) d="^'"${k[21]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' { sub(/ :/,"");print|"tail -n'${p[10]}'";} ' ' NR==2&&$4<='${p[7]}' { print $4;} ' ' ($1~"wir"&&$2>'${p[22]}')||($1~/P.+ts:/&&$2>'${p[19]}') { print $1" "int($2);} ' '/YLD/s/=/ /p' ' { q=$1;$1="";u=$NF;$NF="";gsub(/ +$/,"");print q"\f"$0"\f"u;} ' ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' ' !/, .+:/{print};END{if(NR<'{${p[12]},${p[13]}}')printf("^'"${k[21]}"'.+")} ' '|uniq' ' 1;END { print "/L.+/Scr.+/Templ.+\.app$";print "/L.+/Pri.+\.plugin$";if(NR<'{${p[14]},${p[21]}}') print "^/[Sp].+|'${k[21]}'";} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p;' '&&echo On' '/\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/p' '/\.dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".","");print $0"$";} END { split("'"${c[*]}"'",c);for(i in c) print "\t"c[i]"$";} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' BEGIN{ FS="= "} $2 { gsub(/[()"]/,"",$2);print $2;} ' ' /^\//!d;s/^.{5}//;s/ [^/]+\//: \//p;' '>&-||echo No' '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[2]}'{$2=$2-1;print}' ' BEGIN { M1='${p[16]}';M2='${p[18]}';M3='${p[8]}';M4='${p[3]}';} !/^A/{next};/%/ { getline;if($5<M1) o["CPU"]="CPU: user "$2"%, system "$4"%";next;} $2~/^disk/&&$4>M2 { o[$2]=$2": "$3" ops/s, "$4" blocks/s";next;} $2~/^(en[0-9]|bridg)/ { if(o[$2]) { e=$3+$4+$5+$6;if(e) o[$2]=o[$2]"; errors "e"/s";next;};if($4>M3||$6>M4) o[$2]=$2": in "int($4/1024)", out "int($6/1024)" (KiB/s)";} END { for(i in o) print o[i];} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' BEGIN{FS=": "} /^ {10}O/ {exit} /^ {0,12}[^ ]/ {next} $1~"Ne"&&$2!~/^In/{print} $1~"Si" { split($2,a," ");if(a[1]-a[4]<'${p[5]}') print;};$1~"T"&&$2<'${p[20]}'{print};$1~"Se"&&$2!~"2"{print};' ' BEGIN { FS="\f";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1;} ' ' BEGIN { split("'"${p[1]}"'",m);FS="\f";} $2<=m[$1]{next} $1<9 { o[$1]=o[$1]"\n "$3" (UID "$4"): "$2;} $1==9&&$5!~"^/dev" { o[$1]=o[$1]"\n "$3" (UID "$4") => "$5" (status "$6"): "$2;} $1==10&&$5 { p="ps -c -ocomm -p"$5"|sed 1d";p|getline n;close(p);if(n) $5=n;o[$1]=o[$1]"\n "$5" => "$3" (UID "$4"): "$2;} $1~/1[12]/ { o[$1]=o[$1]"\n "$3" (UID "$4", error "$5"): "$2;} END { n=split("'"${k[27]}"'",u,":");for(i=n+1;i<n+5;i++)u[i]=u[2];split("'"${k[28]}"'",l,":");for(i in o) print "\n"l[i]" ("u[i]")\n"o[i];} ' ' /^ {8}[^ ]/{print} ' ' BEGIN { L='${p[17]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${k[30]}"' "F|getline g) { l++;if(l<=L) f=f"\n "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n '"${k[22]}"'"T;printf("'"${f[8]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' 's/^.{52}(.+) <.+/\1/p' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");p=a[1];k[S]='${k[25]}';k[U]='${k[26]}';v[S]="Safe";v[U]="true";for(i in k) { s=system("'"${k[30]}"'\\ :"k[i]" \""p"\"/*/I*|grep -qw "v[i]);if(!s) a[1]=a[1]" "i;};if(!a[2]) a[2]="'"${k[23]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${k[31]}"'\\ :'"${k[33]}"' \""$0"\"/*/'${k[32]}'";p|getline b;close(p);if(b~/, .+:/||b=="") b="'"${k[23]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR>=13 { gsub(/[^0-9]/,"",$1);print;} ' ' $10~/$L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${k[32]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ / [VY]/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' '/^find: /!p;' ' /^p/{ s/.//g;x;s/\nu/'$'\f''/;s/(\n)c/\1'$'\f''/;s/\n\n//;p;};H;' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;p;' ' s/^.+ |\(.+$$//g;p;' '1;END{if(NR<'${p[15]}')printf("^/(S|usr/(X|li))")}' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END{ if(i>1)print n} ' s/{'\.|jnl: ','P.+:'}'//;s/ +([0-9]+)(.+)/\2 \1/p' ' /es: ./{ s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(B2|[my]): /H;d;:0'$'\n'' x;/[my]: [AM]|m: I.+p$|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/'$'\f''(0|-(4[34])?)$/p' '|sort'{'|uniq'{,\ -c},\ -nr} ' s/^/'{5,6,7,8}$'\f''/;s/ *'$'\f'' */'$'\f''/g;p;' '/e:/{print $2}' ' /^[(]/{ s/....//;s/$/:/;N;/: [)]$/d;s/\n.+ ([^ ]+).$/\1/;H;};${ g;p;} ' 's/:.+$//p' '|wc -l' /{\\.{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'Info,'Launch[AD].+'}'\.plist$/p' 's/([-+.?])/\\\1/g;p' 's/, /\'$'\n/g;p' ' BEGIN{FS="\f"} { printf("'"${f[6]}"'",$1/1048576,$2);} ' ' /= D/&&$1!~/'{${k[24]},${k[29]}}'/ { getline d;if(d~"t") D=D"\n"$1;} END { print D;} ' ' NR>1&&$3!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $3"\f"$2;} ' '|tail -n'${p[6]} ' $1>1 { $NF=$NF" x"$1;} /\*/ { if(!f) f="\n\t* Code injection";} { $1="";} 1;END { print f;} ' ' s/.+bus /Bus: /;s/,.+[(]/ /;s/,.+//p;' ' { $NF=$NF" Errors: "$1;$1="";} 1 ' ' 1s/^/\'$'\n''/;/^ +(([MNPRSV]|De|Li).+|Bus): .|d: Y/d;s/:$//;$d;p;' ' BEGIN { RS=",";FS=":";} $1~"name" { gsub("\"","",$2);print $2;} ' '|grep -q e:/' '/[^ .]/p' '{ print $1}' ' /^ +N.+: [1-9]/ { i++;} END { if(i) print "system: "i;} ' ' NF { print "'{admin,user}' "$NF;exit;} ' ' /se.+ =/,/[\}]/!d;/[=\}]/!p ' ' 3,4d;/^ +D|Of|Fu| [0B]/d;s/^ |:$//g;$!H;${ x;/:/p;} ' ' BEGIN { FS=": ";} NR==1 { sub(":","");h="\n"$1"\n";} /:$/ { l=$1;next;} $1~"S"&&$2!~3 { getline;next;} /^ {6}I/ { i++;L[i]=l" "$2;if(i=='${p[24]}') nextfile;} END { if(i) print h;for(j=0;j<i;j++) print L[i-j];} ' ' /./H;${ x;s/\n//;s/\n/, /g;/,/p;} ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${k[30]}\\" echo cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin' env pluginkit scutil 'dtrace -q -x aggsortrev -n' security sed\ -En awk 'dscl . -read' networksetup mdutil lsof test osascript\ -e netstat mdls route cat );c2=(${k[21]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'" 'L*/Ca*/'${k[21]}'Saf*/E* -d 2 -name '${k[32]} '~ $TMPDIR.. $ -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility Req "'${k[21]}'('{'bird|.*i?clou','lsu|sha'}')"' "-f'%N: %l' Desktop {/,}L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message CRne '0xdc008012|(allow|call)ing|(mplet|nabl)ed|ry HD|safe b|xpm' -k Message CReq 'bad |Can.t l|corru|dead|fail|GPU |hfs: Ru|inval|Limiti|v_c|NVDA[(]|pagin|Purg(ed|in)|error|Refus|TCON|tim(ed? ?|ing )o|trig|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o%cpu,comm,ruid' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0<0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno!=0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000000);normalize(@h,10240);printa(\"1\f%@d\f%s\f%d\n\",@a);printa(\"2\f%@d\f%s\f%d\n\",@b);printa(\"9\f%@d\f%s\f%d\f%s\f%d\n\",@c);printa(\"10\f%@d\f%s\f%d\f%d\n\",@d);printa(\"11\f%@d\f%s\f%d\f%d\n\",@e);printa(\"12\f%@d\f%s\f%d\f%d\n\",@f);printa(\"3\f%@d\f%s\f%d\n\",@g);printa(\"4\f%@d\f%s\f%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag $ -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true $ -execdir stat -f'$'\f''%Sc'$'\f''%N -t%F {} \;' '/S*/*/Ca*/*xpc*' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' /\ kMDItemContentTypeTree=${k[21]}{bundle,mach-o-dylib} :Label "/p*/e*/{auto*,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {/p*,/usr/local}/e*/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list '-F "" -k Sender hidd -k Level Nle 3' /Library/Preferences/${k[21]}alf\ globalstate --proxy '-n get default' print\ system --dns -get{dnsservers,info} dump-trust-settings\ {-s,-d,} -n1 '-R -ce -l1 -n5 -o'{'prt -stats prt','mem -stats mem'}',command,uid' -kl -l -s\ / '--regexp --files '${k[21]}'pkg.*' '+c0 -i4TCP:0-1023' ${k[21]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER' '-app Safari WebKitDNSPrefetchingEnabled' '-Fcu +c0 -l' -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','(a und|I/O |jnl_io.+)err','USBF:.+bus'}'"' -name\ kMDItem${k[33]} -T\ hfs '-n get default' -listnetworkserviceorder :${k[33]} :CFBundleDisplayName $EUID {'$TMPDIR../C ','/{S*/,}'}'L*/{,Co*/*/*/L*/}{Cache,Log}s -type f -size +'${p[11]}'M -exec stat -f'%z\f%N' {} \;' \ /v*/d*/*/*l*d{,.*.$UID}/* '-app Safari UserStyleSheetEnabled' 'L*/A*/Fi*/P*/*/a*.json' users/$USER\ HomeDirectory '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' ' -F "\$Time \$(Sender): \$Message" -k Sender Rne launchd -k Level Nle 3 -k Facility R'{'ne "user|','eq "'}'console" -k Message CRne "[{}<>]|commit - no t|deprec|Goog|realp|sandbox ex|/root" ' getenv '/ "kMDItemDateAdded>=\$time.now(-'${p[23]}')&&kMDItem'${k[33]}'=*"' -m\ / '' ' -F "\$Time \$(RefProc): \$Message" -k Sender Req launchd -k Level Nle 3 -k Message Rne "asse|bug|Ig|Jet" ' );N1=${#c2[@]};for j in {0..20};do c2[N1+j]=SP${k[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel,Firefox}\ extensions System\ load boot\ args FileVault\ {2,1} {Kernel,System,Console,launchd}\ log SMC Login\ hook 'I/O per process' 'High file counts' UID Daemons Agents XPC\ cache Startup\ items {Admin,Root}\ access Stylesheet Library\ paths{,' ('{shell,launchd}\)} Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory\ pressure Listeners Widgets Parental\ Controls Prefetching Nets Volumes {Continuity,I/O,iCloud,HID,HCI}\ errors {User,System}\ {caches/logs,overrides} Shutdown\ codes Heat Diagnostic\ reports Bad\ plists Free\ space VM Bundles{,' (new)'} Trust\ settings Activity );N3=${#l[@]};for i in {0..8};do l[N3+i]=${k[5+i]};done;F() { local x="${s[$1]}";[[ "$x" =~ ^([\&\|\<\>]|$) ]]&&{ printf "$x";return;};:|${c1[30]} "$x" 2>&-;printf "%s \'%s\'" "|${c1[30+$?]}" "$x";};A0() { Q=6;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[0]};};A1() { local c="${c1[$1]} ${c2[$2]}";shift 2;c="$c ` while [[ "$1" ]];do F $1;shift;done`";((P2))&&{ c="sudo $c";P2=;};v=`eval "$c"`;[[ "$v" ]];};A2() { local c="${c1[$1]}";[[ "$c" =~ ^(awk|sed ) ]]&&c="$c '${s[$2]}'"||c="$c ${c2[$2]}";shift 2;local d=` while [[ "$1" ]];do F $1;shift;done`;((P2))&&{ c="sudo $c";P2=;};local a;v=` while read a;do eval "$c '$a' $d";done<<<"$v";`;[[ "$v" ]];};A3(){ v=$((`date +%s`-v[3]));};B1() { v=No;! ((v[1]))&&{ v=;P1=1;};};eval "`type -a B1|sed '1d;s/1/2/'`";B3(){ v[$1]="$v";};B4() { local i=$1;local j=$2;shift 2;local c="cat` while [[ "$1" ]];do F $1;shift;done`";v[j]=`eval "{ $c;}"<<<"${v[i]}"`;};B5(){ v="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d$'\e' <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F$'\e' ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`egrep -v "${v[$1]}"<<<"$v"|sort`;};eval "`type -a B7|sed '1d;s/7/8/;s/-v //'`";C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { B4 0 0 63&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";printf '\n\tThe test results are on the Clipboard.\n\n\tPlease close this window.\n';exit 2>&-;};for i in 1 2;do eval D$((i-1))'() { A'$i' $@;C0;};';for j in 2 3;do eval D$((i+2*j-3))'() { local x=$1;shift;A'$i' $@;C'$j' $x;};';done;done;trap C5 2;o=$({ A0;D0 0 N1+1 2;D0 0 $N1 1;B1;C2 27;B1&&! B2&&C2 28;D2 22 15 63;D0 0 N1+2 3;D0 0 N1+15 17;D4 3 0 N1+3 4;D4 4 0 N1+4 5;D4 N3+4 0 N1+9 59;D0 0 N1+16 99; for i in 0 1 2;do D4 N3+i 0 N1+5+i 6;done;D4 N3+3 0 N1+8 71;D4 62 1 10 7;D4 10 1 11 8;B2&&D4 18 19 53 67;D2 11 2 12 9;D2 12 3 13 10;D2 13 32 70 101 25;D2 65 6 76 13;D2 45 20 52 66;D4 66 7 77 14;D4 70 8 15 38;D0 9 16 16 77 45;C4;B2&&D0 35 49 61 75 76 78 45;B2&&{ D0 28 17 45;C4;};D0 12 40 54 16 79 45;D0 12 39 54 16 80 45;D4 31 25 77 15&&{ B4 0 8 103;B4 8 0;A2 18 74;B6 8 0 3;C3 32;};B2&&D4 19 21 0;B2&&D4 40 10 42;D2 2 0 N1+19 46 84;D2 44 34 43 53;D2 25 22 20 32;D2 33 0 N1+14 51;for i in {0..2};do A1 29 35+i 104+i;B3 25+i;done;B6 25 27 5;B6 0 26 5;B4 0 0 110;C2 69;D2 34 21 28 35;D4 35 27 29 36;A1 40 59 81;B3 18;A1 33 60 82;B8 18;B4 0 19 83;A1 27 32 39&&{ B3 20;B4 19 0;A2 33 33 40;B3 21;B6 20 21 3;};C2 36;D4 50 38 5 68;B4 19 0;D5 37 33 34 42;B2&&D4 46 35 45 55;D4 38 0 N1+20 43;B2&&D4 59 4 65 76 91;D4 63 4 19 44 75 95 96;B1&&{ D4 53 5 55 75 69&&D4 51 6 58 31;D4 56 5 56 97 75 98&&D0 0 N1+7 99;D2 55 5 27 84;D4 61 5 54 75 70;D4 14 5 14 12;D4 15 5 72 12;D4 17 5 78 12;C4;};D4 16 5 73 12;A1 13 44 74 18;C4;B3 4;B4 4 0 85;A2 14 61 89;B4 0 5 19 102;A1 17 41 50;B7 5;C3 8;B4 4 0 88;A2 14 24 89;C4;B4 0 6 19 102;B4 4 0 86;A2 14 61 89;B4 0 7 19 102;B5 6 7;B4 0 11 73 102;A1 18 31 107 94 74||{ B2&&A1 18 26 94 74;}&&{ B7 11;B4 0 0 11;C3 23;};A1 18 26 94;B7 11;B4 0 0 11;C3 24;D4 60 14 66 92;D4 58 14 67 93;D4 26 4 21 24;D4 42 14 1 62;D4 43 37 2 90 48;D4 41 10 42;D2 48 36 47 25;A1 4 3 60&&{ B3 9;A2 14 61;B4 0 10 21;B4 9 0;A2 14 62;B4 0 0 21;B6 0 10 4;C3 5;};D4 9 41 69 100;D2 29 21 68 35;D2 49 21 48 49;B4 4 22 57 102;A1 21 46 56 74;B7 22;B4 0 0 58;C3 47;D4 54 5 7 75 76 69;D4 52 5 8 75 76 69;D4 57 4 64 76 91;D2 0 4 4 84;D2 1 4 51 84;D4 21 22 9 37;D0 0 N1+17 108; A1 23 18 28 89;B4 0 16 22 102;A1 16 25 33;B7 16;B4 0 0 34;D1 31 47;D4 64 4 71 41;C4;B4 4 12 26 89 23 102;for i in {0..3};do A1 0 N1+10+i 72 74;B7 12;B4 0 0 52;C3 N3+5+i;((i))||C4;done;A1 24 22 29;B7 12;B3 14;A2 39 57 30;B3 15;B6 14 15 4;C3 67;A1 24 75 74;B3 23;A2 39 57 30;B3 24;B6 23 24 4;C3 68;B4 4 13 27 89 65;A1 24 23;B7 13;C3 30;B4 4 0 87;A2 14 61 89 20;B4 0 17;A1 26 50 64;B7 17;C3 6;D0 0 N1+18 109;D4 7 11 6;A3;C2 39;C4;} 4>&2 2>/dev/null;);C5

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I may not agree with them.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 11

bzq Author

Level 1

17 points

Feb 22, 2015 7:25 AM in response to Linc Davis

Start time: 09:10:28 02/22/15

Revision: 1252

Model Identifier: iMac10,1

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 13:33

UID: 501

SerialATA

Hitachi HDE721010SLA330

USB

USB2.0 Hub (VIA Labs, Inc.)

Backup+ Desk (Seagate LLC)

My Passport 0820 (Western Digital Technologies, Inc.)

Bluetooth

Apple Wireless Keyboard

Apple Wireless Mouse

Activity

CPU: user 31%, system 22%

en1: in 1862, out 52 (KiB/s)

Net out (per sec)

usbmuxd (UID 213): 6

I/O requests (KiB/s)

launchd (UID 0): 1161

System errors (per sec)

usbmuxd (UID 213, error 35): 1164

Net in (Mb/s)

usbmuxd (UID 213): 6

Font issues: 1

Nets

en0 192.168.1

en1 192.168.1

Listeners

cupsd: ipp

kdc: kerberos

launchd: afpovertcp

launchd: dec_dlm

System caches/logs

14982 MB:

2511 MB:

Diagnostic reports

2015-02-01 LegacyFileVaultMessageTracer crash

2015-02-02 Adobe Photoshop Elements Editor crash

2015-02-07 Microsoft Word hang

2015-02-07 iPhoto hang

2015-02-08 LegacyFileVaultMessageTracer crash

2015-02-15 LegacyFileVaultMessageTracer crash

2015-02-21 LegacyFileVaultMessageTracer crash

2015-02-21 ScreenSaverEngine crash

HID errors: 4

Kernel log

Feb 21 00:07:40 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 08:07:39 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 08:12:43 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 08:14:59 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 08:16:25 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 08:41:30 firefox (map: 0xffffff802a7113c0) triggered DYLD shared region unnest for map: 0xffffff802a7113c0, region 0x7fff8a800000->0x7fff8aa00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

Feb 21 10:13:14 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 10:14:41 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 4, packet length = 6) Data Content:

Feb 21 10:14:51 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 4, packet length = 6) Data Content:

Feb 21 11:47:53 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 11:57:40 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 21 18:38:39 hfs_mountfs: hfs_early_journal_init failed, erroring out

Feb 21 18:38:39 hfs_mount: hfs_mountfs returned error=22 for device disk1s3

Feb 21 18:38:40 hfs_mountfs: hfs_early_journal_init failed, erroring out

Feb 21 18:38:40 hfs_mount: hfs_mountfs returned error=22 for device disk2s2

Feb 21 18:38:41 utun_start: ifnet_disable_output returned error 12

Feb 21 18:39:02 firefox (map: 0xffffff80220ffc30) triggered DYLD shared region unnest for map: 0xffffff80220ffc30, region 0x7fff90800000->0x7fff90a00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

Feb 21 19:38:24 hfs_mountfs: hfs_early_journal_init failed, erroring out

Feb 21 19:38:24 hfs_mount: hfs_mountfs returned error=22 for device disk1s3

Feb 21 19:38:25 hfs_mountfs: hfs_early_journal_init failed, erroring out

Feb 21 19:38:25 hfs_mount: hfs_mountfs returned error=22 for device disk2s2

Feb 21 19:38:27 utun_start: ifnet_disable_output returned error 12

Feb 21 20:52:00 firefox (map: 0xffffff800f860690) triggered DYLD shared region unnest for map: 0xffffff800f860690, region 0x7fff83c00000->0x7fff83e00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

Feb 21 21:56:26 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

Feb 22 08:09:41 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 5, packet length = 7) Data Content:

System log

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500] (Can't assign requested address).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500]: because interface address is/was not ready (flags 2c2).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:226:bbff:fe50:9a7e[500] (Can't assign requested address).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:226:bbff:fe50:9a7e[500]: because interface address is/was not ready (flags 42).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:226:bbff:fe50:9a7e[4500] (Can't assign requested address).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:226:bbff:fe50:9a7e[4500]: because interface address is/was not ready (flags 42).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[500] (Can't assign requested address).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[500]: because interface address is/was not ready (flags 2c2).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500] (Can't assign requested address).

Feb 22 08:55:44 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500]: because interface address is/was not ready (flags 2c2).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[500] (Can't assign requested address).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[500]: because interface address is/was not ready (flags 2c2).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500] (Can't assign requested address).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500]: because interface address is/was not ready (flags 2c2).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[500] (Can't assign requested address).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[500]: because interface address is/was not ready (flags 2c2).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500] (Can't assign requested address).

Feb 22 08:55:45 racoon: failed to bind to address 2602:306:3766:5fb0:e0df:f9e7:5daa:e8ab[4500]: because interface address is/was not ready (flags 2c2).

Feb 22 08:56:11 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Console" for over 1.00 seconds. Server has re-enabled them.

Feb 22 08:57:07 fseventsd: Logging disabled completely for device:1: /Volumes/Recovery HD

Feb 22 09:02:55 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFECC) from font server

Feb 22 09:08:40 com.apple.usbmuxd: LOCKDOWN_V2_BONJOUR_SERVICE_NAME is _apple-mobdev2._tcp,8f3607c0

Feb 22 09:08:47 iTunes: ApplePushService: APSConnection being used without a delegate queue

Feb 22 09:10:36 spindump: No microstackshots found

launchd log

Feb 21 19:38:24 com.apple.secd: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:29 com.apple.secd: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:42 com.apple.secd: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:43 com.apple.secd: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:44 com.apple.gamed: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:44 com.apple.xpc.launchd.user.501.100006.Aqua: Caller tried to hijack service: path = /System/Library/LaunchAgents/com.apple.mbpluginhost.user.plist, caller = loginwindow.69

Feb 21 19:38:44 com.apple.xpc.launchd.user.501.100006.Aqua: Caller tried to hijack service: path = /System/Library/LaunchAgents/com.apple.pluginkit.pkd.plist, caller = loginwindow.69

Feb 21 19:38:44 com.apple.PubSub.Agent: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:44 com.apple.rtcreportingd: The UserName key is not supported for non-System services.

Feb 21 19:38:44 com.apple.soagent: Invalid type for event (event/type): events/array

Feb 21 19:38:44 com.apple.soagent: Invalid type for event (event/type): bundleid/string

Feb 21 19:38:44 org.openbsd.ssh-agent: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:44 com.apple.xpc.launchd.user.501.100006.Aqua: Caller specified a plist with bad ownership/permissions: path = /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist, caller = loginwindow.69

Feb 21 19:38:44 com.apple.xpc.launchd.user.501.100006.Aqua: Failed to bootstrap path: path = /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist, error = 122: Path had bad ownership/permissions

Feb 21 19:38:44 com.apple.xpc.launchd.user.501.100006.Aqua: Failed to bootstrap path: path = /System/Library/LaunchAgents/com.apple.pluginkit.pkd.plist, error = 17: File exists

Feb 21 19:38:44 com.apple.xpc.launchd.user.501.100006.Aqua: Failed to bootstrap path: path = /System/Library/LaunchAgents/com.apple.mbpluginhost.user.plist, error = 17: File exists

Feb 21 19:38:44 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.244, service = com.apple.photostream-agent, error = 119: Service is disabled

Feb 21 19:38:45 com.apple.secd: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:48 com.apple.secd: The ServiceIPC key is no longer respected. Please remove it.

Feb 21 19:38:48 com.apple.xpc.launchd.domain.user.55: Caller specified a plist with bad ownership/permissions: path = /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist, caller = appleeventsd.24

Feb 21 19:38:48 com.apple.xpc.launchd.domain.user.55: Failed to bootstrap path: path = /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist, error = 122: Path had bad ownership/permissions

Feb 22 09:08:38 com.apple.xpc.launchd.domain.pid.BKAgentService.1216: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/PrivateFrameworks/BookKit.framework/Versions/A/XPCServices/com. apple.BKAgentService.xpc

Feb 22 09:08:40 com.apple.xpc.launchd.domain.pid.MediaLibraryService.1218: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/Frameworks/MediaLibrary.framework/Versions/A/XPCServices/com.ap ple.MediaLibraryService.xpc

Console log

Feb 18 18:52:21 ReportCrash: Invoking spindump for pid=336 wakeups_rate=152 duration=297 because of excessive wakeups

Feb 20 17:05:19 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

Feb 21 09:04:32 ReportCrash: Invoking spindump for pid=775 wakeups_rate=273 duration=165 because of excessive wakeups

Feb 21 10:35:56 ReportCrash: Invoking spindump for pid=904 wakeups_rate=307 duration=147 because of excessive wakeups

Feb 21 19:59:33 ReportCrash: Invoking spindump for pid=249 thread=3392 percent_cpu=53 duration=170 because of excessive cpu utilization

Loaded kernel extensions

com.dvdfab.kext.fabio (1)

Daemons

com.adobe.fpsaud

com.apple.AccountPolicyHelper

com.apple.CodeSigningHelper

com.apple.Kerberos.kdc

- status: 1

com.apple.MobileFileIntegrity

com.apple.awdd

com.apple.backupd-auto

com.apple.cache_delete

com.apple.cfprefsd.xpc.daemon

com.apple.coreduetd

com.apple.coresymbolicationd

com.apple.ctkd

com.apple.diagnosticd

com.apple.distnoted.xpc.daemon

- status: 78

com.apple.dpd

- status: 75

com.apple.icloud.findmydeviced

com.apple.iconservices.iconservicesagent

com.apple.iconservices.iconservicesd

com.apple.ifdreader

com.apple.nehelper

com.apple.networkd_privileged

com.apple.nsurlsessiond_privileged

com.apple.nsurlstoraged

com.apple.periodic-daily

com.apple.sandboxd

com.apple.secinitd

com.apple.softwareupdate_download_service

com.apple.softwareupdated

com.apple.spindump

com.apple.sysmond

com.apple.systemstatsd

com.apple.tccd.system

com.apple.watchdogd

com.apple.wdhelper

com.google.GoogleML

- status: 1

com.google.keystone.daemon

com.oracle.java.Helper-Tool

com.oracle.java.JavaUpdateHelper

com.trusteer.rooks.rooksd

com.westerndigital.ErasePrivilegedHelper

org.cups.cupsd

Agents

com.adobe.AAM.Scheduler-1.0

com.adobe.ARM.UUID

com.divx.dms.agent

com.divx.update.agent

com.oracle.java.Java-Updater

User overrides

jp.co.canon.Inkjet_Extended_Survey_Agent

Global login items

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resou rces/GoogleSoftwareUpdateAgent.app

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

iTunesHelper

- missing value

Canon IJ Network Scanner Selector2

- /Library/Printers/Canon/IJScanner/Utilities/Canon IJ Network Scanner Selector2.app

Monitor

- missing value

Dropbox

- /Applications/Dropbox.app

Canon IJ Network Scanner Selector EX

- /Applications/Canon Utilities/IJ Network Scanner Selector EX/Canon IJ Network Scanner Selector EX.app

WDDriveUtilityHelper

- /Applications/WD Drive Utilities.app/Contents/WDDriveUtilityHelper.app

Google Chrome

- /Applications/Google Chrome.app

Google Software Update

- /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resou rces/GoogleSoftwareUpdateAgent.app

Safari extensions

AdBlock

- com.betafish.adblockforsafari

Firefox extensions

Hootsuite Hootlet

Bloglovin'

Adblock Plus

Kodak EasyShare Gallery Companion

iCloud errors

bird 8

Restricted files: 840

Lockfiles: 238

Accessibility

Keyboard Zoom: On

Scroll Zoom: On

Contents of /Library/LaunchAgents/com.divx.dms.agent.plist

- mod date: Nov 17 02:11:48 2014

- checksum: 637650676

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.divx.dms.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/DivX/DivXMediaServer.app/Contents/MacOS/DivXMediaServer</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.divx.update.agent.plist

- mod date: May 19 16:24:29 2014

- checksum: 3867571547

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.divx.update.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/DivX/DivXUpdate.app/Contents/MacOS/DivXUpdate</string>

<string>/silent</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

- mod date: Aug 27 16:00:22 2013

- checksum: 3986972276

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.oracle.java.Java-Updater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

<string>-bgcheck</string>

</array>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

<key>Weekday</key>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchDaemons/com.google.GoogleML.plist

- mod date: Mar 10 12:19:30 2008

- checksum: 315725308

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.google.GoogleML</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/Google/GoogleML/GoogleML.bundle/Contents/MacOS/googleml-modwat ch</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardOutPath</key>

<key>UserName</key>

<key>WatchPaths</key>

<array>

<string>/Library/Google/GoogleML/Modules</string>

<string>/Library/Google/GoogleML</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.google.keystone.daemon.plist

- mod date: Dec 23 14:33:27 2009

- checksum: 2436874840

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>OnDemand</key>

<key>Label</key>

<string>com.google.keystone.daemon</string>

<key>MachServices</key>

<dict>

<key>com.google.Keystone.Daemon</key>

<dict>

<key>HideUntilCheckIn</key>

<true/>

</dict>

<key>Program</key>

<string>//Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Conte nts/MacOS/GoogleSoftwareUpdateDaemon</string>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchDaemons/com.trusteer.rooks.rooksd.plist

- mod date: May 23 00:53:33 2011

- checksum: 1478412778

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.trusteer.rooks.rooksd</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Rapport/bin/rooksd</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.westerndigital.ErasePrivilegedHelper.plist

- mod date: Apr 4 20:08:49 2014

- checksum: 2855540152

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.westerndigital.ErasePrivilegedHelper</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.westerndigital.ErasePrivilegedHelper </string>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<key>SockPathMode</key>

<key>SockPathName</key>

<string>/var/run/com.westerndigital.ErasePrivilegedHelper.socket</string>

<key>SockType</key>

...and 5 more line(s)

Contents of /private/etc/launchd.conf

- mod date: Dec 30 12:04:13 2007

- checksum: 1160501048

setenv _GOOGLE_GILD_RUNTIME_FRAMEWORK_ABSOLUTE_PATH_ /Library/Google/Frameworks/Gild.framework

Contents of /private/etc/ssh_config

- mod date: Mar 18 21:09:23 2007

- checksum: 1785449457

[N/A]

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Feb 3 21:35:02 2015

- checksum: 394026997

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Sep 17 10:05:49 2012

- checksum: 2170691092

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader 9/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of Library/LaunchAgents/jp.co.canon.Inkjet_Extended_Survey_Agent.plist

- mod date: Mar 29 22:00:00 2010

- checksum: 1116988227

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>jp.co.canon.Inkjet_Extended_Survey_Agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app/Contents/Resources/Canon_Inkjet_Extended_Survey_Agent</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Bad plists

Library/Preferences/pbs.plist

Bundles (new)

/Applications/Dropbox.app

- com.getdropbox.dropbox

/Users/USER/Downloads/EtreCheck 2.app

- com.etresoft.EtreCheck

Library paths

/Library/Application Support/Adobe/APE/3.1/adbeapecore.framework/Versions/A/Resources/WebKit.dylib

/Library/Application Support/Adobe/APE/3.101/adbeapecore.framework/Versions/A/Resources/WebKit.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/DWANative.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdCaps.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdFS.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKEngine.dylib

/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/AdobePIM.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/PWANative.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_caps.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_oobelib.dylib

/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_upgrade.dylib

/Library/Application Support/Adobe/OOBE/PDApp/UWA/UWANative.dylib

/Library/Application Support/Adobe/OOBE/PDApp/core/AdobePIM.dylib

/Library/Application Support/DivX/DesktopService/libDivXDownloadManager.dylib

/Library/Application Support/DivX/Libraries/DivXUpdateCheckDll.dylib

/Library/Application Support/DivX/Libraries/libDivXDesktopSupport.dylib

/Library/Application Support/DivX/Libraries/libicudata.40.1.dylib

/Library/Application Support/DivX/Libraries/libicuuc.40.1.dylib

/Library/Application Support/DivX/QtPlugins/accessible/libqtaccessiblewidgets.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqcncodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqjpcodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqkrcodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqtwcodecs.dylib

/Library/Application Support/DivX/QtPlugins/iconengines/libqsvgicon.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqgif.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqico.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqjpeg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqmng.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqsvg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqtiff.dylib

/Library/Application Support/DivX/QtPlugins/sqldrivers/libqsqlite.dylib

/Library/Application Support/LeapFrog/LeapFrog Connect/Devices/Leapster2.lfcDevice/Contents/Hook/libLeapsterDeviceHook.dylib

/Library/Application Support/LeapFrog/LeapFrog Connect/Devices/Leapster2.lfcDevice/Contents/Style/libStylePlugin_Leapster_Engl ishUS.dylib

/Library/Application Support/LeapFrog/LeapFrog Connect/Devices/Leapster2.lfcDevice/Contents/Suite/libLeapsterDevice.dylib

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

/Library/Google/Frameworks/Gild.framework/Versions/A/Resources/libgild.dylib

/Library/Rapport/bin/RapportKukai.dylib

/Library/Rapport/bin/RapportTanzan3.dylib

/Library/Rapport/bin/RapportTanzan35.dylib

/Library/Rapport/bin/RapportTanzan36.dylib

/Library/Rapport/bin/RapportTanzan4.dylib

/Library/Rapport/bin/RapportUtil1.dylib

/Library/Rapport/bin/RapportWR.dylib

/Library/Rapport/bin/librooksbas.dylib

/Library/Rapport/bin/librooksmce.dylib

/Users/USER/Library/Application Support/Firefox/Profiles/ddl7zjy7.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

/Users/USER/Library/Application Support/Firefox/Profiles/ddl7zjy7.default/gmp-gmpopenh264/1.3/libgmpopenh264.dy lib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.703/_platform_specific/mac_x86/libwidev inecdm.dylib

/usr/local/clamXav/lib/libclamav.5.dylib

/usr/local/clamXav/lib/libclamunrar.5.dylib

/usr/local/clamXav/lib/libclamunrar_iface.5.dylib

App extensions

com.getdropbox.dropbox.garcon

Installations

DivX for Mac: 1/6/10, 7:31 PM

Adobe Reader 9: 1/4/10, 9:50 PM

Office 2008 12.2.3 Update: 1/1/10, 7:44 PM

Microsoft Office 2008 for Mac: 1/1/10, 7:23 PM

Bundled Applications: 1/1/10, 6:57 PM

Elapsed time (sec): 795

Reply

Answer 12

Rudegar

Level 10

170,700 points

Feb 22, 2015 8:38 AM in response to bzq

well it sure helped my mid 2011 imac 21" i7 amd something something video card to upgrade from 4GB to 16GB

Reply

Answer 13

Linc Davis

Level 10

209,541 points

Feb 22, 2015 9:05 AM in response to bzq

A

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities ▹ Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

 ▹ Restart

from the menu bar.

B

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

C

Remove "Rapport" by following the instructions on this page. If you have trouble, see this page.

Back up all data before making any changes.

D

Also remove "DivX," which is useless junk, and "DVD Fab."

Any third-party software that doesn't install by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

E

You have two connections to the same network, probably Wi-Fi and Ethernet. Either turn off Wi-Fi or unplug the Ethernet cable.

F

Triple-click anywhere in the line below on this page to select it:

~/Library/Preferences/pbs.plist

Right-click or control-click the line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

G

Reset your computer’s PRAM.

Reply

Answer 14

bzq Author

Level 1

17 points

Feb 22, 2015 7:30 PM in response to Linc Davis

OK, Linc. I've followed each step all the way through resetting the PRAM--excellent instructions, by the way. Very easy to follow. I'm almost afraid to ask but, now what?

My iTunes is still running extra slow when it comes to downloading app updates--currently about 13 hours for a 32 MB update. Also, when my wife ran Photoshop to edit photos the thumbnails were solid black.

Thanks!

Reply

Answer 15

Linc Davis

Level 10

209,541 points

Feb 22, 2015 7:54 PM in response to bzq

Now you're raising issues you haven't mentioned before. Is there any change after taking the steps I suggested?

Reply