tywait13

Q: Trouble removing files in protected directories in Time Machine backup

My original need was to track down the cause of some recent system hangs and crashes (see bottom of Etrecheck output).  When I looked at my system log I noticed some files in my Time Machine backup are causing errors.  An example is:

 

Mar  6 00:00:00 Tynans-MBP kernel[0]: /SourceCache/AppleFSCompression_kexts/AppleFSCompression-68.1.1/Compressors/Dat aless/compressorType5Kext.c:537: Error: post_request error for /Volumes/Seagate Backup Plus Drive/Backups.backupdb/Tynan’s MacBook Pro/2015-01-31-155557/Macintosh HD/.DocumentRevisions-V100/PerUID/501/5/com.apple.documentVersions/E71B8A06-AE4 F-46B2-AD33-AC18572B5279.playground/Documentation/section-80.html: 35

 

I looked for a way to remove the files using Time Machine.  The solution I found in one of the posts in this forum (6660987) called for starting Finder using sudo and then entering Time Machine.  I was able to follow that sequence successfully one time and navigate to the "file" E71B8A06-AE4F-46B2-AD33-AC18572B5279.playground. in Time Machine.  I right clicked to get the action menu for the item and clicked delete.  It appeared to be removed, but when I exited Time Machine (using ESCape) a small window in the screen informed me that the operation failed because I didn't have permission to do that operation on one or more objects.

 

Subsequent attempts to get a "root" Finder window using sudo have failed, and there have been multiple intervening reboots.  If I try to start it using "sudo /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder", there's no new Finder window, the external drive (where I have Time Machine's data in one partition and an Extended Mac OS volume in the second partition) spins up, and the following messages appear in the terminal window (they also appear if I've Quit dropbox):

 

2015-03-06 16:42:39.780 Finder[552:14557] plugin com.getdropbox.dropbox.garcon interrupted

2015-03-06 16:42:39.781 Finder[552:14557] Hub connection error Error Domain=NSCocoaErrorDomain Code=4097 "Couldn’t communicate with a helper application." (connection to service named com.getdropbox.dropbox.garcon) UserInfo=0x7fc90a905bc0 {NSDebugDescription=connection to service named com.getdropbox.dropbox.garcon}

 

If, instead, I sudo into root (sudo su - root) and try to start Finder, I get two new (larger) icons for the external drives noted above on the desktop, no new window, and the following error in the root terminal window:

2015-03-06 16:05:58.296 Finder[471:6871] CoreDockSetTrashFull returned error -4959

 

Problem description:

Etrecheck for my system.

 

EtreCheck version: 2.1.8 (121)

Report generated March 6, 2015 at 4:58:28 PM EST

Download EtreCheck from http://etresoft.com/etrecheck

 

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

 

Hardware Information: ℹ️

    MacBook Pro (Retina, Mid 2012) (Verified)

    MacBook Pro - model: MacBookPro10,1

    1 2.3 GHz Intel Core i7 CPU: 4-core

    8 GB RAM Not upgradeable

        BANK 0/DIMM0

            4 GB DDR3 1600 MHz ok

        BANK 1/DIMM0

            4 GB DDR3 1600 MHz ok

    Bluetooth: Good - Handoff/Airdrop2 supported

    Wireless:  en0: 802.11 a/b/g/n

    Battery Health: Normal - Cycle count 54

 

Video Information: ℹ️

    Intel HD Graphics 4000

        Color LCD spdisplays_2880x1800Retina

    NVIDIA GeForce GT 650M - VRAM: 1024 MB

 

System Software: ℹ️

    OS X 10.10.2 (14C109) - Time since boot: 1:0:46

 

Disk Information: ℹ️

    APPLE SSD SM256E disk0 : (251 GB)

        EFI (disk0s1) <not mounted> : 210 MB

        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB

        Macintosh HD (disk1) / : 249.77 GB (141.41 GB free)

            Core Storage: disk0s2 250.14 GB Online

 

USB Information: ℹ️

    Seagate Backup+  Desk M 2 TB

        EFI (disk2s1) <not mounted> : 315 MB

        Seagate Backup Plus Drive (disk2s2) /Volumes/Seagate Backup Plus Drive : 1.49 TB (1.03 TB free)

        Seagate External Storage 1 (disk2s3) /Volumes/Seagate External Storage 1 : 511.87 GB (442.10 GB free)

    Apple Inc. FaceTime HD Camera (Built-in)

    Apple Inc. Apple Internal Keyboard / Trackpad

    Apple Inc. BRCM20702 Hub

        Apple Inc. Bluetooth USB Host Controller

 

Thunderbolt Information: ℹ️

    Apple Inc. thunderbolt_bus

 

Gatekeeper: ℹ️

    Mac App Store and identified developers

 

Kernel Extensions: ℹ️

        /Applications/VMware Fusion.app

    [not loaded]    com.vmware.kext.vmci (90.6.3) [Click for support]

    [not loaded]    com.vmware.kext.vmioplug.14.1.3 (14.1.3) [Click for support]

    [not loaded]    com.vmware.kext.vmnet (0231.47.74) [Click for support]

    [not loaded]    com.vmware.kext.vmx86 (0231.47.74) [Click for support]

    [not loaded]    com.vmware.kext.vsockets (90.6.0) [Click for support]

 

        /Library/Extensions

    [loaded]    com.sophos.kext.sav (9.2.50 - SDK 10.8) [Click for support]

    [loaded]    com.sophos.nke.swi (9.2.50 - SDK 10.8) [Click for support]

 

Launch Agents: ℹ️

    [running]    com.canon.MFManager.plist [Click for support]

    [running]    com.sophos.uiserver.plist [Click for support]

    [loaded]    org.macosforge.xquartz.startx.plist [Click for support]

 

Launch Daemons: ℹ️

    [loaded]    com.adobe.fpsaud.plist [Click for support]

    [loaded]    com.github.GitHub.GHInstallCLI.plist [Click for support]

    [running]    com.sophos.common.servicemanager.plist [Click for support]

    [loaded]    org.macosforge.xquartz.privileged_startx.plist [Click for support]

    [loaded]    org.wireshark.ChmodBPF.plist [Click for support]

 

User Launch Agents: ℹ️

    [loaded]    com.adobe.ARM.[...].plist [Click for support]

    [loaded]    com.valvesoftware.steamclean.plist [Click for support]

 

User Login Items: ℹ️

    iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

    smcFanControl    Application  (/Applications/Utilities/smcFanControl.app)

    Dropbox    Application  (/Applications/Dropbox.app)

    SpeechSynthesisServer    Application  (/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks /SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app)

    VMware Fusion Start Menu    Application  (/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)

    Alfred 2    Application  (/Applications/Alfred 2.app)

 

Internet Plug-ins: ℹ️

    FlashPlayer-10.6: Version: 16.0.0.305 - SDK 10.6 [Click for support]

    QuickTime Plugin: Version: 7.7.3

    AdobePDFViewerNPAPI: Version: 11.0.10 - SDK 10.6 [Click for support]

    AdobePDFViewer: Version: 11.0.10 - SDK 10.6 [Click for support]

    Flash Player: Version: 16.0.0.305 - SDK 10.6 [Click for support]

    Default Browser: Version: 600 - SDK 10.10

    Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Click for support]

 

User internet Plug-ins: ℹ️

    rbjnplugin_2.7.232.8: Version: rbjnplugin 2.7.232.8 - SDK 10.8 [Click for support]

    rbjninstallplugin_2.7.232.8: Version: rbjninstallplugin 2.7.232.8 - SDK 10.8 [Click for support]

    WebEx64: Version: 1.0 - SDK 10.6 [Click for support]

 

3rd Party Preference Panes: ℹ️

    Flash Player  [Click for support]

 

Time Machine: ℹ️

    Skip System Files: NO

    Mobile backups: OFF

    Auto backup: NO - Auto backup turned off

    Volumes being backed up:

        Macintosh HD: Disk size: 249.77 GB Disk used: 108.36 GB

        Seagate External Storage 1: Disk size: 511.87 GB Disk used: 69.77 GB

    Destinations:

        Seagate Backup Plus Drive [Local]

        Total size: 1.49 TB

        Total number of backups: 51

        Oldest backup: 2014-07-30 00:31:36 +0000

        Last backup: 2015-03-06 15:13:13 +0000

        Size of backup disk: Adequate

            Backup size 1.49 TB > (Disk used 178.13 GB X 3)

 

Top Processes by CPU: ℹ️

         5%    WindowServer

         1%    firefox

         1%    fontd

         0%    thunderbird

         0%    SophosUIServer

 

Top Processes by Memory: ℹ️

    739 MB    firefox

    361 MB    thunderbird

    223 MB    WindowServer

    189 MB    InterCheck

    180 MB    SophosScanD

 

Virtual Memory Information: ℹ️

    1.12 GB    Free RAM

    3.62 GB    Active RAM

    2.59 GB    Inactive RAM

    1.25 GB    Wired RAM

    1.82 GB    Page-ins

    0 B    Page-outs

 

Diagnostics Information: ℹ️

    Mar 6, 2015, 04:42:39 PM    /Library/Logs/DiagnosticReports/garcon_2015-03-06-164239_[redacted].crash

    Mar 6, 2015, 03:57:00 PM    Self test - passed

    Mar 6, 2015, 03:36:23 PM    /Library/Logs/DiagnosticReports/garcon_2015-03-06-153623_[redacted].crash

    Mar 6, 2015, 03:10:48 PM    /Library/Logs/DiagnosticReports/garcon_2015-03-06-151048_[redacted].crash

    Mar 6, 2015, 03:10:13 PM    /Library/Logs/DiagnosticReports/Finder_2015-03-06-151013_[redacted].crash

    Mar 6, 2015, 02:58:47 PM    /Library/Logs/DiagnosticReports/garcon_2015-03-06-145847_[redacted].crash

    Mar 6, 2015, 01:48:48 PM    /Library/Logs/DiagnosticReports/com.apple.AddressBook.InternetAccountsBridge_20 15-03-06-134848_[redacted].crash

    Mar 6, 2015, 11:52:13 AM    /Library/Logs/DiagnosticReports/garcon_2015-03-06-115213_[redacted].crash

    Mar 6, 2015, 11:45:47 AM    /Library/Logs/DiagnosticReports/garcon_2015-03-06-114547_[redacted].crash

    Mar 6, 2015, 09:46:12 AM    /Library/Logs/DiagnosticReports/thunderbird_2015-03-06-094612_[redacted].hang

    Mar 5, 2015, 02:57:56 PM    /Library/Logs/DiagnosticReports/backupd_2015-03-05-145756_[redacted].cpu_resour ce.diag [Click for details]

    Mar 3, 2015, 11:32:39 PM    /Library/Logs/DiagnosticReports/backupd_2015-03-03-233239_[redacted].cpu_resour ce.diag [Click for details]

MacBook Pro, OS X Yosemite (10.10.2), Etrecheck included in posting.

Posted on Mar 6, 2015 2:11 PM