Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

MB Air mid-2012 Freezing since Yosemite Upgrade

My Mac hasn't worked w/o freezing for more than 30 mins since I upgraded to Yosemite. And it randomly freezes on any application. And I can make it freeze when I run 'System Information'. Basically my Mac has become useless. It is really frustrating.

MacBook Air, OS X Yosemite (10.10.2)

Posted on Mar 20, 2015 12:03 PM

Reply
9 replies

Mar 20, 2015 12:09 PM in response to mg234

Try these in order testing your system after each to see if it's back to normal:


1. a. Resetting your Mac's PRAM and NVRAM

b. Intel-based Macs: Resetting the System Management Controller (SMC)


2. Restart the computer in Safe Mode, then restart again, normally. If this doesn't help, then:


Boot to the Recovery HD: Restart the computer and after the chime press and hold down the COMMAND and R keys until the Utilities menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.


3. Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the Utilities menu. Repair the Hard Drive and Permissions as follows.


When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu. Select Restart from the Apple menu.


4. Reinstall Yosemite: Reboot from the Recovery HD. Select Reinstall OS X from the Utilities menu, and click on the Continue button.


Note: You will need an active Internet connection. I suggest using Ethernet if possible

because it is three times faster than wireless.


5. Reinstall Yosemite from Scratch:


Be sure you backup your files to an external drive or second internal drive because the following procedure will remove everything from the hard drive.


How to Clean Install OS X Yosemite


Note: You will need an active Internet connection. I suggest using Ethernet if possible

because it is three times faster than wireless.

Mar 20, 2015 10:21 PM in response to Linc Davis

I first try command+option+esc to get force quit the stuck app. But it doesn't work most of the time. Sometimes force quit window pops up after several minutes. Other times, wheel spins on every single app, giving me no choice but to power down the system and restart. I never had problem in launching force-quit window in Mavericks

Mar 21, 2015 5:40 AM in response to mg234

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Step 1

For this step, the title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES All Messages

from the log list on the left. If you don't see that list, select

View Show Log List

from the menu bar at the top of the screen.

In the top right corner of the Console window, there's a search box labeled Filter. Initially the words "String Matching" are shown in that box. Enter "BOOT_TIME" (without the quotes.)

Each message in the log begins with the date and time when it was entered. Select the BOOT_TIME log message that corresponds to the last boot time when you had the problem. Now clear the search box to reveal all messages. Select the ones logged before the boot, during the time something abnormal was happening. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

For example, if the system was unresponsive or was failing to shut down for three minutes before you forced a restart, post the messages timestamped within three minutes before the boot time, not after. Please include the BOOT_TIME message at the end of the log extract—not at the beginning.

If there are long runs of repeated messages, please post only one example of each. Don’t post many repetitions of the same message.

When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Some private information, such as your name, may appear in the log. Anonymize before posting.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Step 2

In the Console window, select

DIAGNOSTIC AND USAGE INFORMATION System Diagnostic Reports

(not Diagnostic and Usage Messages) from the log list on the left. If you don't see that list, select

View Show Log List

from the menu bar.

There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of reports. A crash report has a name that begins with the name of the crashed process and ends in ".crash". A panic report has a name that begins with "Kernel" and ends in ".panic". A shutdown stall report has a name that ends in ".shutdownstall". Select the most recent of each, if any. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot. It's possible that none of these reports exists.

I know the report is long, maybe several hundred lines. Please post all of it anyway.

If you don't see any reports listed, but you know there was a crash or panic, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.

In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)

Please don’t post other kinds of diagnostic report—they're very long and rarely helpful.

Mar 22, 2015 6:00 PM in response to Linc Davis

Hello,


I am getting the following errors. I have noticed that system completely freezes when the error below is reported. I didn't copy all suhelperd errors - there are lots of them.


3/22/15 8:41:36.000 PM kernel[0]: BUG in process suhelperd[359]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

3/22/15 8:41:36.000 PM kernel[0]: BUG in process suhelperd[359]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

3/22/15 8:41:37.391 PM com.apple.xpc.launchd[1]: (com.apple.FileSyncAgent.PHD.isRunning) The HideUntilCheckIn property is an architectural performance issue. Please transition away from it.

3/22/15 8:41:38.511 PM com.apple.xpc.launchd[1]: (com.apple.quicklook[383]) Endpoint has been activated through legacy launch(3) APIs. Please switch to XPC or bootstrap_check_in(): com.apple.quicklook

3/22/15 8:41:38.803 PM com.apple.xpc.launchd[1]: (com.apple.mbloginhelper.user) This key does not do anything: OnDemand

3/22/15 8:41:38.814 PM com.apple.xpc.launchd[1]: (com.apple.mbpluginhost.user) This key does not do anything: OnDemand

3/22/15 8:41:40.242 PM com.apple.xpc.launchd[1]: (com.apple.secd) This key does not do anything: OnDemand

3/22/15 8:41:40.242 PM com.apple.xpc.launchd[1]: (com.apple.secd) The ServiceIPC key is no longer respected. Please remove it.

3/22/15 8:41:40.720 PM com.apple.xpc.launchd[1]: (com.apple.speech.speechsynthesisd) This key does not do anything: OnDemand

3/22/15 8:41:40.848 PM com.apple.xpc.launchd[1]: (com.apple.TrustEvaluationAgent) This key does not do anything: OnDemand

3/22/15 8:41:41.278 PM com.apple.xpc.launchd[1]: (com.apple.DataDetectorsDynamicData) The JoinExistingSession key is only available to Application services.

3/22/15 8:41:43.196 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class AMDRadeonX4000_AMDAccelDevice.

3/22/15 8:41:43.196 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class AMDRadeonX4000_AMDAccelSharedUserClient.

3/22/15 8:41:43.196 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class AMDSIVideoContext.

3/22/15 8:41:43.196 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class Gen6DVDContext.

3/22/15 8:41:43.196 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IGAccelDevice.

3/22/15 8:41:43.196 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IGAccelSharedUserClient.

3/22/15 8:41:43.196 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IGAccelVideoContextMain.

3/22/15 8:41:43.197 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IGAccelVideoContextMedia.

3/22/15 8:41:43.197 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IGAccelVideoContextVEBox.

3/22/15 8:41:43.197 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IOBluetoothDeviceUserClient.

3/22/15 8:41:43.197 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IOHIDParamUserClient.

3/22/15 8:41:43.197 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the IOKit user-client class IOSurfaceRootUserClient.

3/22/15 8:41:43.197 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the mach service named com.apple.AirPlayXPCHelper.

3/22/15 8:41:43.198 PM com.apple.audio.DriverHelper[358]: The plug-in named AirPlay.driver requires extending the sandbox for the mach service named com.apple.wirelessproxd.

3/22/15 8:41:43.202 PM com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

3/22/15 8:41:43.502 PM com.apple.xpc.launchd[1]: (com.apple.appkit.xpc.sandboxedServiceRunner) The JoinExistingSession key is only available to Application services.

3/22/15 8:41:46.468 PM com.apple.iCloudHelper[391]: objc[391]: Class FALogging is implemented in both /System/Library/PrivateFrameworks/FamilyCircle.framework/Versions/A/FamilyCircl e and /System/Library/PrivateFrameworks/FamilyNotification.framework/Versions/A/Famil yNotification. One of the two will be used. Which one is undefined.

3/22/15 8:41:46.625 PM coreaudiod[337]: 2015-03-22 08:41:46.530871 PM [AirPlay] BTLE discovery removing all devices

3/22/15 8:41:46.626 PM coreaudiod[337]: 2015-03-22 08:41:46.626399 PM [AirPlay] Resetting AWDL traffic registration.

3/22/15 8:41:46.000 PM kernel[0]: IO80211AWDLPeerManager::setAwdlPeerTrafficRegistration Clearing AirPlay peer 00:00:00:00:00:00

3/22/15 8:41:46.627 PM coreaudiod[337]: 2015-03-22 08:41:46.626845 PM [AirPlay] Deregister AirPlay traffic for AWDL at MAC 00:00:00:00:00:00 with target infra non critical PeerIndication=0 err=0

3/22/15 8:41:46.664 PM com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

3/22/15 8:41:46.902 PM coreaudiod[337]: 2015-03-22 08:41:46.901646 PM [AirPlay] BTLE client stopping to browse for AirPlay Solo Target Presence.

3/22/15 8:41:46.902 PM coreaudiod[337]: 2015-03-22 08:41:46.901838 PM [AirPlay] BTLE client starting to browse for AirPlay Solo Target Presence.

3/22/15 8:41:46.902 PM coreaudiod[337]: 2015-03-22 08:41:46.902404 PM [AirPlay] BTLE client stopped to browse for AirPlay Solo Target Presence.

3/22/15 8:41:46.903 PM coreaudiod[337]: 2015-03-22 08:41:46.902666 PM [AirPlay] BTLE client started to browse for AirPlay Solo Target Presence.

3/22/15 8:41:47.385 PM com.apple.audio.DriverHelper[358]: The plug-in named BluetoothAudioPlugIn.driver requires extending the sandbox for the IOKit user-client class IOBluetoothDeviceUserClient.

3/22/15 8:41:47.385 PM com.apple.audio.DriverHelper[358]: The plug-in named BluetoothAudioPlugIn.driver requires extending the sandbox for the mach service named com.apple.blued.

3/22/15 8:41:47.385 PM com.apple.audio.DriverHelper[358]: The plug-in named BluetoothAudioPlugIn.driver requires extending the sandbox for the mach service named com.apple.bluetoothaudiod.

3/22/15 8:41:48.285 PM logind[73]: -[SessionManager getClient:withRole:inAuditSession:]:241: ERROR: No session dictionary for audit session 100008

3/22/15 8:41:48.285 PM logind[73]: _SMGetSessionAgent:73: ERROR: __SMGetClientForAuditSessionAgent failed 2

3/22/15 8:41:48.286 PM IMDPersistenceAgent[395]: SACShieldWindowShowing:925: ERROR: NULL response

3/22/15 8:41:48.877 PM com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

3/22/15 8:41:48.906 PM com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

3/22/15 8:41:49.296 PM coreaudiod[337]: Logging disabled

3/22/15 8:41:49.654 PM coreaudiod[337]: 2015-03-22 08:41:49.654342 PM [AirPlay] AirPlay: Performing audio format change for 4 (AP Out) to PCM/44100/16/2 for output and for input

3/22/15 8:41:49.655 PM coreaudiod[337]: 2015-03-22 08:41:49.654567 PM [AirPlay] AirPlay: Performing audio format change for 4 (AP Out) to PCM/44100/16/2 for output and for input

3/22/15 8:41:50.399 PM bluetoothaudiod[398]: Logging disabled

3/22/15 8:41:52.021 PM storeaccountd[390]: AccountServiceDelegate: Accepting new connection <NSXPCConnection: 0x7febd8d0cf80> connection from pid 318 with interface <AccountServiceInterface: 0x7febd8d0e7c0> (PID 318)

3/22/15 8:41:53.171 PM sudo[411]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/killall pcscd

3/22/15 8:41:53.172 PM com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

3/22/15 8:41:54.501 PM coreaudiod[337]: 2015-03-22 08:41:54.501304 PM [AirPlay] AirPlay: Performing audio format change for 4 (AP Out) to PCM/44100/16/2 for output and PCM/44100/16/2 for input

3/22/15 8:41:55.336 PM identityservicesd[362]: <IMMacNotificationCenterManager: 0x7f8e0375d340>: Configuring notification center for identifier: com.apple.iChat topics: (

"com.apple.private.alloy.icloudpairing",

"com.apple.private.alloy.continuity.encryption",

"com.apple.private.alloy.continuity.activity",

"com.apple.private.ids",

"com.apple.private.alloy.phonecontinuity",

"com.apple.private.alloy.continuity.activity.public",

"com.apple.private.alloy.continuity.auth",

"com.apple.private.alloy.idsremoteurlconnection",

"com.apple.private.alloy.screensharing",

"com.apple.private.alloy.maps",

"com.apple.private.alloy.callhistorysync",

"com.apple.private.alloy.continuity.tethering"

)

3/22/15 8:41:55.864 PM Messages[325]: schema version 8009

3/22/15 8:41:55.979 PM sandboxd[394]: ([309]) CalendarAgent(309) deny mach-lookup com.apple.GSSCred

3/22/15 8:41:56.650 PM bird[361]: Couldn't get connection for container <CKContainer: 0x7ff4ebf4db60; containerID=<CKContainerID: 0x7ff4ebf4dd60; containerIdentifier=com.apple.clouddocs, containerEnvironment="Production">, applicationBundleID="com.apple.clouddocs">, failing operation

3/22/15 8:41:56.762 PM bird[361]: Unable to get a push environment from cloudd, default to production : Error Domain=CKInternalErrorDomain Code=2005 "The operation couldn’t be completed. (CKInternalErrorDomain error 2005.)"

3/22/15 8:41:57.835 PM bird[361]: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

3/22/15 8:41:58.364 PM CalendarAgent[309]: Stream 0x7fd4fd1b0260 is sending an event before being opened

3/22/15 8:41:58.499 PM bird[361]: Assertion failed: ![_xpcClients containsObject:client]

3/22/15 8:41:58.499 PM bird[361]: Assertion failed: ![_xpcClients containsObject:client]

3/22/15 8:41:58.500 PM bird[361]: Assertion failed: ![_xpcClients containsObject:client]

3/22/15 8:41:58.501 PM bird[361]: Assertion failed: ![_xpcClients containsObject:client]

3/22/15 8:41:58.501 PM bird[361]: Assertion failed: ![_xpcClients containsObject:client]

3/22/15 8:41:58.501 PM bird[361]: Assertion failed: ![_xpcClients containsObject:client]

Mar 22, 2015 7:47 PM in response to Linc Davis

Hello,


I put a filter on BUG in SYSTEM LOG. I got the following.


3/22/15 8:34:25.429 PM fontd[324]: BUG in libdispatch client: dispatch_mig_server: mach_msg() failed (ipc/send) invalid memory - 0x1000000c

3/22/15 8:40:42.617 PM loginwindow[72]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.

3/22/15 8:41:03.235 PM opendirectoryd[51]: BUG in libdispatch: 14C109 - 2004 - 0x5

3/22/15 8:41:18.004 PM com.apple.xpc.launchd[1]: (com.apple.ReportCrash) The DrainMessagesOnCrash key is not yet implemented. If you rely on this key, please file a bug.

3/22/15 8:41:18.004 PM com.apple.xpc.launchd[1]: (com.apple.ReportCrash.Self) The DrainMessagesOnCrash key is not yet implemented. If you rely on this key, please file a bug.

3/22/15 8:41:36.000 PM kernel[0]: BUG in process suhelperd[359]: over-released legacy external boost assertions (1 total, 1 external, 0 legacy-external)

Mar 23, 2015 7:07 PM in response to mg234

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(1303 ' 0.5 0.25 50 1000 15 5120 1000 25000 6 6 5 1 0 100 ' 51 25600 4 10 25 5120 102400 1000 25 1536 475 40 500 300 85 25 20480 262144 20 2000 524288 604800 5 1024 25 );k=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays PCI UniversalAccess InstallHistory ConfigurationProfile AirPort 'com\.apple\.' -\\t N\\/A 'AES|atr|udit|msa|dnse|ax|ensh|fami|FileS|fing|ft[pw]|gedC|kdu|etS|is\.|alk|ODSA|otp|htt|pace|pcas|ps-lp|rexe|rlo|rsh|smb|snm|teln|upd-[aw]|uuc|vix|webf' OSBundle{Require,AllowUserLoa}d 'Mb/s:Mb/s:ms/s:KiB/s:%:total:MB:total:lifetime:sampled:per sec' 'Net in:Net out:I/O wait time:I/O requests:CPU usage:Open files:Memory:Mach ports:Energy:Energy:File opens:Forks:Failed forks:System errors' 'tsA|[ST]M[HL]' PlistBuddy{,' 2>&1'}' -c Print' 'Info\.plist' CFBundleIdentifier );f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' %s{' ','\n'{"${k[22]}",}}'%s\n' '%.1f GiB: %s\n' '\n ...and %d more line(s)\n' '\nContents of %s\n '"${k[22]}"'mod date: %s\n '"${k[22]}"'size (B): %d\n '"${k[22]}"'checksum: %d\n%s\n' );c=(879294308 4071182229 461455494 216630318 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 1383871077 1591517921 676087606 1445213025 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 3374894509 1051159591 892310726 1707497389 523110921 2883943871 3873345487 );s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[4]} ' s/:$//;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[9]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of|yc/!{ s/^.+is |\.//g;p;q;} ' ' BEGIN { FS="\f";if(system("A1 42 83 114")) d="^'"${k[21]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' $1>1{$NF=$NF" x"$1} /\*/{if(!f)f="\n\t* Code injection"} {$1=""} 1;END{print f} ' ' NR==2&&$4<='${p[7]}'{print $4} ' ' BEGIN{FS=":"} ($1~"wir"&&$2>'${p[22]}') {printf("wired %.1f\n",$2/2^18)} ($1~/P.+ts/&&$2>'${p[19]}') {printf("paged %.1f\n",$2/2^18)} ' '/YLD/s/=/ /p' ' { q=$1;$1="";u=$NF;$NF="";gsub(/ +$/,"");print q"\f"$0"\f"u;} ' ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' ' !/, .+:/ { print;n++;} END{if(n<'{${p[12]},${p[13]}}')printf("^'"${k[21]}"'.+")} ' '|uniq' ' 1;END { print "/L.+/Scr.+/Templ.+\.app$";print "/L.+/Pri.+\.plugin$";if(NR<'{${p[14]},${p[21]}}') print "^/[Sp].+|'${k[21]}'";} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p;' '&&echo On' '/\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/p' '/\.dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".","");print $0"$";} END { split("'"${c[*]}"'",c);for(i in c) print "\t"c[i]"$";} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' BEGIN{ FS="= "} $2 { gsub(/[()"]/,"",$2);print $2;} !/:/&&!$2{print "'${k[23]}'"} ' ' /^\//!d;s/^.{5}//;s/ [^/]+\//: \//p;' '>&-||echo No' '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[2]}'{$2=$2-1;print}' ' BEGIN { M1='${p[16]}';M2='${p[18]}';M3='${p[8]}';M4='${p[3]}';} !/^A/{next};/%/ { getline;if($5<M1) o["CPU"]="CPU: user "$2"%, system "$4"%";next;} $2~/^disk/&&$4>M2 { o[$2]=$2": "$3" ops/s, "$4" blocks/s";next;} $2~/^(en[0-9]|bridg)/ { if(o[$2]) { e=$3+$4+$5+$6;if(e) o[$2]=o[$2]"; errors "e"/s";next;};if($4>M3||$6>M4) o[$2]=$2": in "int($4/1024)", out "int($6/1024)" (KiB/s)";} END { for(i in o) print o[i];} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' BEGIN{FS=": "} /^ {10}O/ {exit} /^ {0,12}[^ ]/ {next} $1~"Ne"&&$2!~/^In/{print} $1~"Si" { if(a[2]) next;split($2,a," ");if(a[1]-a[4]<'${p[5]}') print;};$1~"T"&&$2<'${p[20]}'{print};$1~"Se"&&$2!~"2"{print};' ' BEGIN { FS="\f";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1;} ' ' BEGIN { split("'"${p[1]}"'",m);FS="\f";} $2<=m[$1]{next} $1==9||$1==10 { "ps -c -ouid -p"$4"|sed 1d"|getline $4;} $1<11 { o[$1]=o[$1]"\n "$3" (UID "int($4)"): "$2;} $1==11&&$5!~"^/dev" { o[$1]=o[$1]"\n "$3" (UID "$4") => "$5" (status "$6"): "$2;} $1==12&&$5 { "ps -c -ocomm -p"$5"|sed 1d"|getline n;if(n) $5=n;o[$1]=o[$1]"\n "$5" => "$3" (UID "$4"): "$2;} $1~/1[34]/ { o[$1]=o[$1]"\n "$3" (UID "$4", error "$5"): "$2;} END { n=split("'"${k[27]}"'",u,":");for(i=n+1;i<n+4;i++)u[i]=u[n];split("'"${k[28]}"'",l,":");for(i=1;i<15;i++) if(o[i])print "\n"l[i]" ("u[i]")\n"o[i];} ' ' /^ {8}[^ ]/{print} ' ' BEGIN { L='${p[17]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"stat -f%z "F|getline S;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${k[30]}"' "F|getline g) { l++;if(l<=L) f=f"\n "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n '"${k[22]}"'"T;printf("'"${f[8]}"'",F,D,S,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' 's/^.{52}(.+) <.+/\1/p' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");p=a[1];k[S]='${k[25]}';k[U]='${k[26]}';v[S]="Safe";v[U]="true";for(i in k) { s=system("'"${k[30]}"'\\ :"k[i]" \""p"\"/*/I*|grep -qw "v[i]);if(!s) a[1]=a[1]" "i;};if(!a[2]) a[2]="'"${k[23]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${k[31]}"'\\ :'"${k[33]}"' \""$0"\"/*/'${k[32]}'";p|getline b;close(p);if(b~/, .+:/||b=="") b="'"${k[23]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR>=13 { gsub(/[^0-9]/,"",$1);print;} ' ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${k[32]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ / [VY]/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' '/^find: /!p;' ' /^p/{ s/.//g;x;s/\nu/'$'\f''/;s/(\n)c/\1'$'\f''/;s/\n\n//;p;};H;' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;p;' ' s/^.+ |\(.+\)$//g;p;' '1;END{if(NR<'${p[15]}')printf("^/(S|usr/(X|li))")}' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END{ if(i>1)print n} ' s/{'\.|jnl: ','P.+:'}'//;s/ +([0-9]+)(.+)/\2'$'\t\t''\1/p' ' /^ +iP.+:$/{ s/://;b0'$'\n'' };/es: ./{ /iOS/d;s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(B2|[my]): /H;d;:0'$'\n'' x;/[my]: [AM]|m: I.+p$|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/'$'\f''(0|-(4[34])?)$/p' '|sort'{'|uniq'{,\ -c},\ -nr} ' s/^/'{5,6,7,8,9,10}$'\f''/;s/ *'$'\f'' */'$'\f''/g;p;' 's/:.+$//p' '|wc -l' /{\\.{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'Info,'Launch[AD].+'}'\.plist$/p' 's/([-+.?])/\\\1/g;p' 's/, /\'$'\n/g;p' ' BEGIN{FS="\f"} { printf("'"${f[6]}"'",$1/2^30,$2);} ' ' /= D/&&$1!~/'{${k[24]},${k[29]}}'/ { getline d;if(d~"t") print $1;} ' ' BEGIN{FS="\t"} NR>1&&$NF!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $NF"\f"a[split($(NF-1),a," ")];} ' '|tail -n'{${p[6]},${p[10]}} ' s/.+bus /Bus: /;s/,.+[(]/ /;s/,.+//p;' ' { $NF=$NF" Errors: "$1;$1="";} 1 ' ' 1s/^/\'$'\n''/;/^ +(([MNPRSV]|De|Li|Tu).+|Bus): .|d: Y/d;s/:$//;$d;p;' ' BEGIN { RS=",";FS=":";} $1~"name" { gsub(/["\\]/,"",$2);print $2;} ' '|grep -q e:/' '/[^ .]/p' '{ print $1}' ' /^ +N.+: [1-9]/ { i++;} END { if(i) print "system: "i;} ' ' NF { print "'{admin,user}' "$NF;exit;} ' ' /se.+ =/,/[\}]/!d;/[=\}]/!p ' ' 3,4d;/^ +D|Of|Fu| [0B]/d;s/^ |:$//g;$!H;${ x;/:/p;} ' ' BEGIN { FS=": ";} NR==1 { sub(":","");h="\n"$1"\n";} /:$/ { l=$1;next;} $1~"S"&&$2!~3 { getline;next;} /^ {6}I/ { i++;L[i]=l" "$2;} END { if(i) print h;for(j=0;j<'${p[24]}';j++) print L[i-j];} ' ' /./H;${ x;s/\n//;s/\n/, /g;/,/p;} ' ' {if(int($6)>'${p[25]}')printf("swap used %.1f\n",$6/1024)} ' ' BEGIN{FS="\""} $3~/ t/&&$2!~/'{${k[24]},${k[29]}}'/{print $2} ' ' int($1)>13 ' p ' BEGIN{FS="DB="} { sub(/\.db.*/,".db",$2);print $2;} ' {,1d\;}'/r%/,/^$/p' ' NR==1{next} NR>11||!$0{exit} {print $NF"\f"substr($0,1,32)"\f"$(NF-7)} ' '/e:/{print $2}' ' /^[(]/{ s/....//;s/$/:/;N;/: [)]$/d;s/\n.+ ([^ ]+).$/\1/;H;};${ g;p;} ' '1;END { exit "find /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom -mtime -'${p[23]}'s"|getline;} ' ' NR<='${p[26]}' { o=o"\n"$0;next;} { o="";exit;} END{print o|"sed 1d"} ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${k[30]}\\" echo cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin' env pluginkit scutil 'dtrace -q -x aggsortrev -n' security sed\ -En awk 'dscl . -read' networksetup mdutil lsof test osascript\ -e netstat mdls route cat uname powermetrics );c2=(${k[21]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'" 'L*/Ca*/'${k[21]}'Saf*/E* -d 2 -name '${k[32]} '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility Req "'${k[21]}'('{'bird|.*i?clou','lsu|sha'}')"' "-f'%N: %l' Desktop {/,}L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message CRne '0xdc008012|(allow|call)ing|Goog|(mplet|nabl)ed|ry HD|safe b|succ|xpm' -k Message CReq 'bad |Can.t l|corru|dead|fail|GPU |hfs: Ru|inval|Limiti|v_c|NVDA[(]|pagin|Purg(ed|in)|error|Refus|s ful|TCON|tim(ed? ?|ing )o|trig|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o%cpu,comm,ruid' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0<0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno!=0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000000);normalize(@h,10240);printa(\"1\f%@d\f%s\f%d\n\",@a);printa(\"2\f%@d\f%s\f%d\n\",@b);printa(\"11\f%@d\f%s\f%d\f%s\f%d\n\",@c);printa(\"12\f%@d\f%s\f%d\f%d\n\",@d);printa(\"13\f%@d\f%s\f%d\f%d\n\",@e);printa(\"14\f%@d\f%s\f%d\f%d\n\",@f);printa(\"3\f%@d\f%s\f%d\n\",@g);printa(\"4\f%@d\f%s\f%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f'$'\f''%Sc'$'\f''%N -t%F {} \;' '/S*/*/Ca*/*xpc*' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' /\ kMDItemContentTypeTree=${k[21]}{bundle,mach-o-dylib} :Label "/p*/e*/{auto*,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {/p*,/usr/local}/e*/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*{,/*} .launchd.conf" list '-F "" -k Sender hidd -k Level Nle 3' /Library/Preferences/${k[21]}alf\ globalstate --proxy '-n get default' vm.swapusage --dns -get{dnsservers,info} dump-trust-settings\ {-s,-d,} '~ "kMDItemKind=Package"' '-R -ce -l1 -n5 -o'{'prt -stats prt','mem -stats mem'}',command,uid' -kl -l -s\ / '--regexp --files '${k[21]}'pkg.*' '+c0 -i4TCP:0-1023' ${k[21]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER' '-app Safari WebKitDNSPrefetchingEnabled' '-Fcu +c0 -l' -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','(a und|I/O |jnl_io.+)err|disk.+abo','USBF:.+bus'}'"' -name\ kMDItem${k[33]} -T\ hfs '-n get default' -listnetworkserviceorder :${k[33]} :CFBundleDisplayName $EUID {'$TMPDIR../C ','/{S*/,}'}'L*/{,Co*/*/*/L*/}{Cache,Log}s -type f -size +'${p[11]}'M -exec stat -f%z'$'\f''%N {} \;' \ /v*/d*/*/*l*d{,.*.$UID}/* '-app Safari UserStyleSheetEnabled' 'L*/A*/Fi*/P*/*/a*.json' users/$USER\ HomeDirectory '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' ' -F "\$Time \$(Sender): \$Message" -k Sender Rne "launchd|nsurls" -k Level Nle 3 -k Facility R'{'ne "user|','eq "'}'console" -k Message CRne "[{}<>]|asser|commit - no t|deprec|done |ect pas|fmfd|Goog|ksho|ndum|obso|realp|rned f|/root|sandbox ex" ' getenv '/ "kMDItemDateAdded>=\$time.now(-'${p[23]}')&&kMDItem'${k[33]}'=*"' -m\ / '' ' -F "\$Time \$(RefProc): \$Message" -k Sender Req launchd -k Level Nle 3 -k Message Rne "asse|bug|File ex|hij|Ig|Jet|key is|lid t|Plea|ship" ' print{,-disabled}\ {system,{gui,user}/$UID} '-n1 --show-initial-usage --show-process-energy' -r ' -F "\$Message" -k Sender nsurlstoraged -k Time ge -1h -k Level Nle 4 -k Message Req "^(ER|IN)" ' );N1=${#c2[@]};for j in {0..20};do c2[N1+j]=SP${k[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel,Firefox}\ extensions System\ load boot\ args FileVault\ {2,1} {Kernel,System,Console,launchd}\ log SMC Login\ hook 'I/O per process' 'High file counts' UID {System,Login,Agent,User}' services '{load,disabl}ed {Admin,Root}\ access Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory\ pressure Listeners Widgets Parental\ Controls Prefetching Nets Volumes {Continuity,I/O,iCloud,HID,HCI}\ errors {User,System}\ caches/logs XPC\ cache Startup\ items Shutdown\ codes Heat Diagnostic\ reports Bad\ {plist,cache}s 'VM (GiB)' Bundles{,' (new)'} Trust\ settings Activity Free\ space Stylesheet Library\ paths{,' ('{shell,launchd}\)} Data\ packages );N3=${#l[@]};for i in {0..8};do l[N3+i]=${k[5+i]};done;F() { local x="${s[$1]}";[[ "$x" =~ ^([\&\|\<\>]|$) ]]&&{ printf "$x";return;};:|${c1[30]} "$x" 2>&-;printf "%s \'%s\'" "|${c1[30+$?]}" "$x";};A0() { Q=6;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[0]};};A1() { local c="${c1[$1]} ${c2[$2]}";shift 2;c="$c ` while [[ "$1" ]];do F $1;shift;done`";((P2))&&{ c="sudo $c";P2=;};v=`eval "$c"`;[[ "$v" ]];};A2() { local c="${c1[$1]}";[[ "$c" =~ ^(awk|sed ) ]]&&c="$c '${s[$2]}'"||c="$c ${c2[$2]}";shift 2;local d=` while [[ "$1" ]];do F $1;shift;done`;((P2))&&{ c="sudo $c";P2=;};local a;v=` while read a;do eval "$c '$a' $d";done<<<"$v";`;[[ "$v" ]];};A3(){ v=$((`date +%s`-v[3]));};export -f A1 A2 F;B1() { v=No;! ((v[1]))&&{ v=;P1=1;};};eval "`type -a B1|sed '1d;s/1/2/'`";B3(){ v[$1]="$v";};B4() { local i=$1;local j=$2;shift 2;local c="cat` while [[ "$1" ]];do F $1;shift;done`";v[j]=`eval "{ $c;}"<<<"${v[i]}"`;};B5(){ v="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d$'\e' <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F$'\e' ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`egrep -v "${v[$1]}"<<<"$v"|sort`;};eval "`type -a B7|sed '1d;s/7/8/;s/-v //'`";C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { B4 0 0 63&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";printf '\n\tThe test results are on the Clipboard.\n\n\tPlease close this window.\n';exit 2>&-;};for i in 1 2;do eval D$((i-1))'() { A'$i' $@;C0;};';for j in 2 3;do eval D$((i+2*j-3))'() { local x=$1;shift;A'$i' $@;C'$j' $x;};';done;done;trap C5 2;o=$({ A0;D0 0 N1+1 2;D0 0 $N1 1;B1;C2 31;B1&&! B2&&C2 32;D2 22 15 63;D0 0 N1+2 3;D0 0 N1+15 17;D4 3 0 N1+3 4;D4 4 0 N1+4 5;D4 N3+4 0 N1+9 59;D0 0 N1+16 99;for i in 0 1 2;do D4 N3+i 0 N1+5+i 6;done;D4 N3+3 0 N1+8 71;D4 62 1 10 7;D4 10 1 11 8;B2&&D4 18 19 53 67;D2 11 2 12 9;D2 12 3 13 10;D2 13 32 70 101 25;D2 71 6 76 13;D2 45 20 52 66;A1 7 77 14;B3 28;A1 20 31 111;B6 0 28 5;B4 0 0 110;C2 66;D4 70 8 15 38;D0 9 16 16 77 45;C4;B2&&D0 35 49 61 75 76 78 45;B2&&{ D0 28 17 45;C4;};B2&&{ A1 43 85 117;B3 29;B4 0 0 119 76 81 45;C0;B4 29 0 118 119 76 82 45;C0; };D0 12 40 54 16 79 45;D0 12 39 54 16 80 45;D4 74 25 77 15&&{ B4 0 8 103;B4 8 0;A2 18 74;B6 8 0 3;C3 75;};B2&&D4 19 21 0;B2&&D4 40 10 42;D2 2 0 N1+19 46 84;D2 44 34 43 53;D2 59 22 20 32;D2 33 0 N1+14 51;for i in {0..2};do A1 29 35+i 104+i;B3 25+i;done;B6 25 27 5;B6 0 26 5;B4 0 0 110;C2 69;D2 34 21 28 35;D4 35 27 29 36;A1 40 59 120;B3 18;A1 33 60 121;B8 18;B4 0 19 83;A1 27 32 39&&{ B3 20;B4 19 0;A2 33 33 40;B3 21;B6 20 21 3;};C2 36;D4 50 38 5 68;B4 19 0;D5 37 33 34 42;B2&&D4 46 35 45 55;D4 38 0 N1+20 43;B2&&D4 58 4 65 76 91;D4 63 4 19 44 75 95 12;B1&&{ D4 53 5 55 75 69&&D4 51 6 58 31;D4 56 5 56 97 75 98&&D0 0 N1+7 99;D2 55 5 27 84;D4 61 5 54 75 70;D4 14 5 14 96;D4 15 5 72 96;D4 17 5 78 96;C4;};D4 16 5 73 96;A1 13 44 74 18;C4;B3 4;B4 4 0 85;A2 14 61 89;B4 0 5 19 102;A1 17 41 50;B7 5;C3 8;B4 4 0 88;A2 14 24 89;C4;B4 0 6 19 102;B4 4 0 86;A2 14 61 89;B4 0 7 19 102;B5 6 7;B4 0 11 73 102;A1 42 86 114;j=$?;for i in 0 1 2;do ((i==2&&j==1))&&break;((! j))||((i))||B2&&A1 18 $((79+i-(i+53)*j)) 107+8*j 94 74||continue;B7 11;B4 0 0 11;C3 $((23+i*(1+i+2*j)));D4 $((24+i*(1+i+2*j))) 18-4*j 82+i-16*j $((112+((3-i)*i-40*j)/2));done;D4 60 4 21 24;D4 42 14 1 62;D4 43 37 2 90 48;D4 41 10 42;D2 48 36 47 25;A1 4 3 60&&{ B3 9;A2 14 61;B4 0 10 21;B4 9 0;A2 14 62;B4 0 0 21;B6 0 10 4;C3 5;};D4 9 41 69 100;D2 72 21 68 35;D2 49 21 48 49;B4 4 22 57 102;A1 21 46 56 74;B7 22;B4 0 0 58;C3 47;D4 54 5 7 75 76 69;D4 52 5 8 75 76 69;D4 57 4 64 76 91;D2 0 4 4 84;D2 1 4 51 84;D4 21 22 9 37;D0 0 N1+17 108;D4 76 24 38;A1 23 18 28 89;B4 0 16 22 102;A1 16 25 33;B7 16;B4 0 0 34;D1 31 47;D4 64 4 71 41;D4 65 5 87 116 74;C4;B4 4 12 26 89 23 102;for i in {0..3};do A1 0 N1+10+i 72 74;B7 12;B4 0 0 52;C3 N3+5+i;((i))||C4;done;A1 24 22 29;B7 12;B3 14;A2 39 57 30;B6 14 0 4;C3 67;A1 24 75 74;B4 1 1 122||B7 12;B4 0 0 123;B3 23;A2 39 57 30;B6 23 0 4;C3 68;B4 4 13 27 89 65;A1 24 23;B7 13;C3 73;B4 4 0 87;A2 14 61 89 20;B4 0 17;A1 26 50 64;B7 17;C3 6;D0 0 N1+18 109;D4 7 11 6;A3;C2 39;C4;} 4>&2 2>/dev/null;);C5

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec

Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Mar 24, 2015 3:56 PM in response to Linc Davis

Hello,


Here is the output of the script you asked me to run. I am still getting freezes - have become a bit less after PRAM reset


Thanks


Start time: 18:36:22 03/24/15



Revision: 1303



Model Identifier: MacBookAir5,2

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 2:23



UID: 502



Energy (lifetime)



Microsoft Outlook (UID 502): 7.21



Energy (sampled)



Console (UID 502): 6.83



Root crontab



45 16 * * * /usr/local/McAfee/AntiMalware/VShieldTaskManager 4 >> /dev/null 2>&1



Proxies



ProxyAutoConfigEnable : 1

ProxyAutoConfigURLString : http://wpad/wpad.dat



DNS: 144.20.190.70 (static)



Listeners



launchd: ssh

nfsd: 1023

rpc.lockd: 1017

rpc.rquotad: garcon

rpc.statd: exp1

rpcbind: sunrpc



Wi-Fi



Security: None



Diagnostic reports



2015-03-12 AdobeReader crash

2015-03-12 autoupdater crash x8

2015-03-13 XPCKeychainSandboxCheck crash

2015-03-13 autoupdater crash x9

2015-03-15 autoupdater crash x3

2015-03-18 plugin-container crash

2015-03-18 system_profiler crash

2015-03-21 plugin-container crash

2015-03-22 Microsoft Outlook hang

2015-03-22 MyDesktopStatus crash

2015-03-22 XPCKeychainSandboxCheck crash

2015-03-23 MyDesktopService crash x12

2015-03-23 firefox hang

2015-03-23 plugin-container crash

2015-03-24 MyDesktopService crash x8



HID errors: 631



Kernel log



Mar 23 20:01:17 ARPT: 11647.044124: MacAuthEvent en0 Auth result for: 00:7f:28:12:3f:41 Auth request tx failed

Mar 23 20:01:18 ARPT: 11647.533961: MacAuthEvent en0 Auth result for: 00:7f:28:12:3f:41 Auth request tx failed

Mar 23 22:00:11 ARPT: 14092.076067: MacAuthEvent en0 Auth result for: 00:7f:28:12:3f:41 Auth request tx failed

Mar 23 22:00:13 ARPT: 14094.709458: directed SSID scan fail

Mar 23 22:00:14 ARPT: 14095.244158: MacAuthEvent en0 Auth result for: 00:7f:28:12:3f:41 Auth request tx failed

Mar 23 22:00:16 ARPT: 14097.881822: directed SSID scan fail

Mar 23 22:16:51 firefox (map: 0xffffff8048ee52d0) triggered DYLD shared region unnest for map: 0xffffff8048ee52d0, region 0x7fff85800000->0x7fff85a00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

Mar 24 10:03:27 **** [IOBluetoothHCIController][TransferACLPacketToHW] -- commandSleep(&mSystemOnTheWayWakingUp) failed -- counter = 1 ****

Mar 24 11:29:50 SIOCPROTODETACH_IN6: utun0 error=6

Mar 24 11:42:37 rtR0InitNative: warning! failed to resolve special kernel symbols

Mar 24 11:42:50 SIOCPROTODETACH_IN6: utun0 error=6

Mar 24 11:43:06 thunderbird (map: 0xffffff8018a355a0) triggered DYLD shared region unnest for map: 0xffffff8018a355a0, region 0x7fff8a000000->0x7fff8a200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

Mar 24 11:46:42 utun_start: ifnet_disable_output returned error 12

Mar 24 13:33:06 SIOCPROTODETACH_IN6: utun0 error=6

Mar 24 14:49:44 SIOCPROTODETACH_IN6: utun0 error=6

Mar 24 15:48:22 kauth external resolver timed out (1 timeout(s) of 60 seconds).

Mar 24 15:54:50 rtR0InitNative: warning! failed to resolve special kernel symbols

Mar 24 15:55:49 kauth external resolver timed out (1 timeout(s) of 60 seconds).

Mar 24 15:56:44 rtR0InitNative: warning! failed to resolve special kernel symbols

Mar 24 15:56:56 SIOCPROTODETACH_IN6: utun0 error=6

Mar 24 16:03:01 utun_start: ifnet_disable_output returned error 12

Mar 24 16:13:23 rtR0InitNative: warning! failed to resolve special kernel symbols

Mar 24 16:13:38 SIOCPROTODETACH_IN6: utun0 error=6

Mar 24 16:21:50 utun_start: ifnet_disable_output returned error 12

Mar 24 18:19:26 SIOCPROTODETACH_IN6: utun0 error=6



System log



Mar 24 16:13:04 WindowServer: CGXGetConnectionProperty: Invalid connection 54531

Mar 24 16:13:04 loginwindow: Login Window point of no return

Mar 24 16:13:04 sharingd: 16:13:04.085 : SDConnectionManager:: XPC connection invalidated

Mar 24 16:13:04 acvpnagent: Termination reason code 5: The user is logging off the system.

Mar 24 16:21:57 Mail: Stream 0x7f844ef08fd0 is sending an event before being opened

Mar 24 16:22:12 AddressBookSourceSync: Stream 0x7f96484c8ed0 is sending an event before being opened

Mar 24 16:24:01 Mail: Stream 0x7f844f131400 is sending an event before being opened

Mar 24 16:24:05 Notes: Stream 0x7fab03274ee0 is sending an event before being opened

Mar 24 16:29:38 Mail: Stream 0x7f844f130770 is sending an event before being opened

Mar 24 16:32:23 CalendarAgent: Stream 0x7fe085491b70 is sending an event before being opened

Mar 24 16:44:02 AddressBookSourceSync: Stream 0x7fbdaae90430 is sending an event before being opened

Mar 24 16:44:38 Mail: Stream 0x7f844eccdc40 is sending an event before being opened

Mar 24 16:50:21 CalendarAgent: Stream 0x7fe085429830 is sending an event before being opened

Mar 24 16:51:43 Notes: Stream 0x7fab03301fb0 is sending an event before being opened

Mar 24 16:59:38 Mail: Stream 0x7f844f25b450 is sending an event before being opened

Mar 24 17:08:06 CalendarAgent: Stream 0x7fe085439da0 is sending an event before being opened

Mar 24 18:21:34 Mail: Stream 0x7f844eace8f0 is sending an event before being opened

Mar 24 18:21:51 AddressBookSourceSync: Stream 0x7f8fd8eda8d0 is sending an event before being opened

Mar 24 18:23:36 Mail: Stream 0x7f844ee62b90 is sending an event before being opened

Mar 24 18:23:37 Mail: Stream 0x7f844f0c3a70 is sending an event before being opened

Mar 24 18:23:42 Notes: Stream 0x7fab03279d60 is sending an event before being opened

Mar 24 18:23:49 AddressBookSourceSync: Stream 0x7fd20acd4c50 is sending an event before being opened

Mar 24 18:29:20 Mail: Stream 0x7f844f25b450 is sending an event before being opened

Mar 24 18:34:20 Mail: Stream 0x7f844fce4c50 is sending an event before being opened

Mar 24 18:34:34 CalendarAgent: Stream 0x7fe085a3b120 is sending an event before being opened



launchd log



Mar 23 11:12:17 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.256, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

Mar 23 11:12:17 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.256, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

Mar 23 11:12:17 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.256, service = QA2G25RMZ4.com.wunderkinder.wunderlist-helper, error = 119: Service is disabled

Mar 23 12:39:41 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.670, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

Mar 23 12:39:41 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.670, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

Mar 23 12:39:41 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.670, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

Mar 23 12:39:41 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.670, service = QA2G25RMZ4.com.wunderkinder.wunderlist-helper, error = 119: Service is disabled

Mar 23 15:28:07 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

Mar 23 15:28:07 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

Mar 23 15:28:07 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

Mar 23 15:28:07 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = QA2G25RMZ4.com.wunderkinder.wunderlist-helper, error = 119: Service is disabled

Mar 23 15:47:14 com.apple.xpc.launchd.user.502.100006.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

Mar 23 15:47:14 com.apple.xpc.launchd.user.502.100006.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

Mar 23 15:47:14 com.apple.xpc.launchd.user.502.100006.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

Mar 23 15:47:14 com.apple.xpc.launchd.user.502.100006.Aqua: Could not import service from caller: caller = otherbsd.253, service = QA2G25RMZ4.com.wunderkinder.wunderlist-helper, error = 119: Service is disabled

Mar 23 16:47:09 com.mcafee.ssm.Eupdate: Could not activate socket group: eUpdateListenerSocket: 37: Operation already in progress

Mar 24 11:42:51 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.239, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

Mar 24 11:42:51 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.239, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

Mar 24 11:42:51 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.239, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

Mar 24 11:42:51 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.239, service = QA2G25RMZ4.com.wunderkinder.wunderlist-helper, error = 119: Service is disabled

Mar 24 15:23:11 com.apple.xpc.launchd.user.502.100005.Aqua: Could not read path: path = /Users/USER/com.oracle.mydesktophelper, error = 2: No such file or directory

Mar 24 15:56:59 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

Mar 24 15:56:59 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

Mar 24 15:56:59 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

Mar 24 15:56:59 com.apple.xpc.launchd.user.502.100005.Aqua: Could not import service from caller: caller = otherbsd.271, service = QA2G25RMZ4.com.wunderkinder.wunderlist-helper, error = 119: Service is disabled



Console log



Mar 23 14:45:05 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fac49c30620

Mar 23 16:40:55 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fd503424560



Loaded kernel extensions



com.epson.driver.EPSONProjectorUDAudio (1.30)

com.mcafee.kext.Virex (1.1.0d1)

com.oracle.kext.OVDCUSB (4.1.51)



System services loaded



com.adobe.fpsaud

com.apple.watchdogd

com.cisco.anyconnect.vpnagentd

com.google.keystone.daemon

com.mcafee.agent.cma

com.mcafee.ssm.Eupdate

com.mcafee.ssm.ScanManager

com.mcafee.virusscan.fmpd

com.mcafee.virusscan.ssm.ScanFactory

com.microsoft.office.licensing.helper

com.oracle.java.Helper-Tool

com.oracle.java.JavaUpdateHelper

com.safenet.SfntMonD

org.macosforge.xquartz.privileged_startx



System services disabled



com.deploystudio.server



Login services loaded



at.appscape.degrees.helper

com.cisco.anyconnect.gui

com.google.keystone.system.agent

com.mcafee.menulet

com.mcafee.reporter

com.microsoft.SyncServicesAgent

com.oracle.java.Java-Updater

org.macosforge.xquartz.startx



Login services disabled



com.nero.HSMMonitor

com.adobe.AdobeCreativeCloud

com.microsoft.OneDriveLauncher

com.fiplab.MemoryCleanHelper

com.fiplab.MailTabHelper

com.adobe.AAM.Scheduler-1.0

QA2G25RMZ4.com.wunderkinder.wunderlist-helper

com.evernote.EvernoteHelper



User services disabled



com.nero.HSMMonitor

com.adobe.AdobeCreativeCloud

com.microsoft.OneDriveLauncher

com.fiplab.MemoryCleanHelper

com.fiplab.MailTabHelper

com.adobe.AAM.Scheduler-1.0

QA2G25RMZ4.com.wunderkinder.wunderlist-helper

com.evernote.EvernoteHelper



Startup items



/Library/StartupItems/cma/cma.sh

/Library/StartupItems/cma/cmamesh



User login items



Dropbox

- /Applications/Dropbox.app



Widgets



iStat nano



iCloud errors



bird 256

cloudd 39

CallHistorySyncHelper 3

comapple.InputMethodKit.UserDictionary 1



Continuity errors



lsuseractivityd 15

sharingd 5



Restricted files: 611



Lockfiles: 50



Data packages



/Users/USER/Library/Developer/Xcode/DerivedData/abc-egnbctkxtzrqkugmcgbtjyjhsww n/Build/Products/Release/libabc.dylib.dSYM



Contents of /Library/LaunchAgents/com.cisco.anyconnect.gui.plist

- mod date: Jun 11 00:06:48 2014

- size (B): 635

- checksum: 1087717482



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<dict>

<key>PathState</key>

<dict>

<key>/opt/cisco/anyconnect/gui_keepalive</key>

<true/>

</dict>

</dict>

<key>Label</key>

<string>com.cisco.anyconnect.gui</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>--wait-apps</string>

<string>/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app</string>

</array>

</dict>

</plist>



Contents of /Library/LaunchAgents/com.mcafee.menulet.plist

- mod date: Sep 30 06:02:01 2013

- size (B): 475

- checksum: 1852533552



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.mcafee.menulet</string>

<key>GroupName</key>

<string>Virex</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/McAfee/MSS/Applications/Menulet.app/Contents/MacOS/Menulet</string>

</array>

<key>KeepAlive</key>

<true/>

</dict>

</plist>



Contents of /Library/LaunchAgents/com.mcafee.reporter.plist

- mod date: Sep 30 06:02:01 2013

- size (B): 492

- checksum: 1074323989



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.mcafee.reporter</string>

<key>GroupName</key>

<string>Virex</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/McAfee/MSS/Applications/McAfee Reporter.app/Contents/MacOS/McAfee Reporter</string>

</array>

<key>KeepAlive</key>

<true/>

</dict>

</plist>



Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

- mod date: Apr 22 11:13:00 2014

- size (B): 104

- checksum: 769553797



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.oracle.java.Java-Updater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

<string>-bgcheck</string>

</array>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>20</integer>

<key>Minute</key>

<integer>42</integer>

<key>Weekday</key>

<integer>3</integer>

</dict>

</dict>



...and 1 more line(s)



Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist

- mod date: Aug 11 17:52:54 2014

- size (B): 721

- checksum: 2451978492



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>org.macosforge.xquartz.startx</string>

<key>ProgramArguments</key>

<array>

<string>/opt/X11/lib/X11/xinit/launchd_startx</string>

<string>/opt/X11/bin/startx</string>

<string>--</string>

<string>/opt/X11/bin/Xquartz</string>

</array>

<key>Sockets</key>

<dict>

<key>org.macosforge.xquartz:0</key>

<dict>

<key>SecureSocketWithKey</key>

<string>DISPLAY</string>

</dict>

</dict>

<key>ServiceIPC</key>

<true/>

<key>EnableTransactions</key>

<true/>



...and 2 more line(s)



Contents of /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist

- mod date: Jun 11 00:06:48 2014

- size (B): 611

- checksum: 2630047092



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN

http://www.apple.com/DTDs/PropertyList-1.0.dtd >

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.cisco.anyconnect.vpnagentd</string>

<key>ProgramArguments</key>

<array>

<string>/opt/cisco/anyconnect/bin/vpnagentd</string>

<string>-execv_instance</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>AbandonProcessGroup</key>

<true/>

<key>EnableTransactions</key>

<false/>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.crashplan.engine.plist

- mod date: Mar 19 17:38:43 2015

- size (B): 1743

- checksum: 757586809



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.crashplan.engine</string>

<key>UserName</key>

<string>root</string>

<key>GroupName</key>

<string>wheel</string>

<key>Nice</key>

<integer>20</integer>

<key>KeepAlive</key>

<true/>

<key>OnDemand</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>AbandonProcessGroup</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/CrashPlan.app/Contents/Resources/Java</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/CrashPlan.app/Contents/MacOS/CrashPlanService</string>



...and 26 more line(s)



Contents of /Library/LaunchDaemons/com.mcafee.agent.cma.plist

- mod date: Oct 9 04:12:05 2014

- size (B): 1128

- checksum: 575335952



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<!-- Copyright (C) 2011 McAfee, Inc. All rights reserved. -->

<dict>

<key>EnvironmentVariables</key>

<dict>

<key>DYLD_LIBRARY_PATH</key>

<string>/Library/McAfee/cma/lib:/Library/McAfee/cma/bin</string>

<key>NLSPATH</key>

<string>/Library/McAfee/cma/resource/en_US/%N</string>

</dict>

<key>Label</key>

<string>com.mcafee.agent.cma</string>

<key>ProgramArguments</key>

<array>

<string>/Library/McAfee/cma/bin/launchcma</string>

</array>

<key>WorkingDirectory</key>

<string>/Library/McAfee/cma/bin</string>

<!-- <key>StandardOutPath</key> -->

<!-- <string>/Library/McAfee/cma/scratch/etc/launch.log</string> -->

<!-- <key>StandardErrorPath</key> -->

<!-- <string>/Library/McAfee/cma/scratch/etc/launcherror.log</string> -->

<key>KeepAlive</key>



...and 5 more line(s)



Contents of /Library/LaunchDaemons/com.mcafee.virusscan.fmpd.plist

- mod date: Sep 26 12:17:48 2013

- size (B): 647

- checksum: 3429471492



<?xml version="1.0" encoding="UTF-8"?>

<!-- Copyright (C) 2013 McAfee, Inc. All rights reserved. -->

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnvironmentVariables</key>

<dict>

<key>DYLD_LIBRARY_PATH</key>

<string>/usr/local/McAfee/fmp/lib</string>

</dict>

<key>GroupName</key>

<string>Virex</string>

<key>InitGroups</key>

<false/>

<key>Label</key>

<string>com.mcafee.virusscan.fmpd</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/usr/local/McAfee/fmp/bin/fmpd</string>

</array>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.safenet.SfntMonD.plist

- mod date: Jan 8 16:24:40 2013

- size (B): 576

- checksum: 3683777698



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"

"http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.safenet.SfntMonD</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/SafeNet/SfntMonD</string>

<string>--start</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>15</integer>

</dict>

</plist>



Contents of /private/etc/ssh_config

- mod date: May 9 16:18:48 2013

- size (B): 1732

- checksum: 1281775184



Host *

SendEnv LANG LC_*

Host *

XAuthLocation /opt/X11/bin/xauth



Contents of Library/LaunchAgents/com.microsoft.LaunchAgent.SyncServicesAgent.plist

- mod date: Mar 24 16:16:02 2015

- size (B): 484

- checksum: 3051698494



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.microsoft.SyncServicesAgent</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Applications/Microsoft Office 2011/Office/SyncServicesAgent.app/Contents/MacOS/SyncServicesAgent</string>

</array>

</dict>

</plist>



Contents of Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist

- mod date: Mar 15 20:22:35 2015

- size (B): 677

- checksum: 3654809970



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<true/>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>org.virtualbox.vboxwebsvc</string>

<key>Program</key>

<string>/Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv</string>

<key>Sockets</key>

<dict>

<key>Listeners</key>

<dict>

<key>SockServiceName</key>

<string>18083</string>

<key>SockType</key>

<string>stream</string>

<key>SockFamily</key>

<string>IPv4</string>

</dict>

</dict>

</dict>



...and 1 more line(s)



App extensions



com.fiplab.batteryhealth.widget

com.getdropbox.dropbox.garcon

com.wunderkinder.wunderlistdesktop.sharingextension

com.wunderkinder.wunderlistdesktop.todayextension



Installations



iFax: 3/18/15, 9:15 PM

Solitaire Free: 3/18/15, 9:14 PM

Adobe Flash Player: 3/18/15, 2:25 PM

Oracle VM VirtualBox: 3/15/15, 8:22 PM

Adobe Flash Player: 3/13/15, 5:39 PM



Elapsed time (sec): 957

Mar 24, 2015 5:04 PM in response to mg234

A

Uninstall the McAfee product by following the instructions on whichever of the pages linked below is applicable:

How to install or uninstall McAfee Internet Security for Mac

How to manually remove VirusScan for Mac 8.6.x using a removal script

How to uninstall and reinstall McAfee Agent 4.x on Macintosh computers

Note that if you have already tried to uninstall the software, you may have to reinstall it in order to finish the job. If you have a different version of the product, the procedure may be different.

Back up all data before making any changes.

B

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

Restart

from the menu bar.

C

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

D

Most likely, the above steps won't solve the problem. In that case, the startup drive is failing, or there is some other internal hardware fault.

Back up all data on the drive immediately if you don't already have a current backup. There are ways to back up a computer that isn't fully functional—ask if you need guidance.

Make a "Genius" appointment at an Apple Store, or go to another authorized service provider.

If privacy is a concern, erase the data partition(s) with the option to write zeros* (do this only if you have at least two complete, independent backups, and you know how to restore to an empty drive from any of them.) Don’t erase the recovery partition, if present.

Keeping your confidential data secure during hardware repair

Apple also recommends that you deauthorize a device in the iTunes Store before having it serviced.

*An SSD doesn't need to be zeroed.

MB Air mid-2012 Freezing since Yosemite Upgrade

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.