Getting a panic (memory leak) restart once a day

Question

Level 1

8 points

Getting a panic (memory leak) restart once a day

Using a MacPro (early 2008, dual quad Intel CPUs), 10GB RAM, 1TB SanDisk SSD, and 10.10.3. Restarts occur when I am away from the computer for several hours and sometimes while using any program, but sometimes mail. I have run with a CCC backed-up HDD, with the same results. RAM has been tested OK using the Membr program. Runs slower since upgrade to 10.10.2. Highest process is "distnoted" running about 200% CPU. I have reset the NVRAM and replaced the logic board battery - no change.

Mac Pro, OS X Yosemite (10.10.3), Early 2008 Intel

Posted on May 5, 2015 3:40 PM

Reply

Answer 1

Linc Davis

Level 10

209,547 points

May 5, 2015 7:30 PM in response to Kwajmeck

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

In the Console window, select

DIAGNOSTIC AND USAGE INFORMATION ▹ System Diagnostic Reports

(not Diagnostic and Usage Messages) from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar.

There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of reports. A panic report has a name that begins with "Kernel" and ends in ".panic". Select the most recent one. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.

If you don't see any reports listed, but you know there was a panic, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.

In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)

Please don’t post other kinds of diagnostic report.

I know the report is long, maybe several hundred lines. Please post all of it anyway.

Reply

Answer 2

The hatter

Level 9

60,990 points

May 6, 2015 7:10 AM in response to Kwajmeck

I am fully opposed to an upgrade in place of the OS. Too many side effects and issues.

Rember and Memtest have a low probability of finding errors with ECC.

Swapping FBDIIMMs out and replacing, and looking for any errors or running above 70*C does.

Whatever is there on the boot drive and cloned would still be there. Try a clean install instead.

Reply

Answer 3

Kwajmeck Author

Level 1

8 points

May 6, 2015 2:34 PM in response to Linc Davis

Here is the report

Wed May 6 11:07:38 2015

*** Panic Report ***

panic(cpu 5 caller 0xffffff800a96bb55): "zalloc: zone map exhausted while allocating from zone buf.8192, likely due to memory leak in zone vm objects (1926070080 total bytes, 8025282 elements allocated)"@/SourceCache/xnu/xnu-2782.20.48/osfmk/kern/zalloc.c:2521

Backtrace (CPU 5), Frame : Return Address

0xffffff814bf3a930 : 0xffffff800a92bda1

0xffffff814bf3a9b0 : 0xffffff800a96bb55

0xffffff814bf3aae0 : 0xffffff800ab2c901

0xffffff814bf3ab10 : 0xffffff800ab2aea3

0xffffff814bf3ab70 : 0xffffff800ab2a9c6

0xffffff814bf3ac50 : 0xffffff800ab2c180

0xffffff814bf3acb0 : 0xffffff800ad24f55

0xffffff814bf3ad10 : 0xffffff800ad746eb

0xffffff814bf3adb0 : 0xffffff800ad6f61c

0xffffff814bf3aec0 : 0xffffff800ad69f53

0xffffff814bf3af90 : 0xffffff800ad697c5

0xffffff814bf3b080 : 0xffffff800ab65342

0xffffff814bf3b1f0 : 0xffffff800ab8b952

0xffffff814bf3b2a0 : 0xffffff800ab89e70

0xffffff814bf3b3a0 : 0xffffff800ad3f44a

0xffffff814bf3b430 : 0xffffff800ab6f548

0xffffff814bf3b4b0 : 0xffffff7f8b019180

0xffffff814bf3b800 : 0xffffff7f8b01ae94

0xffffff814bf3b840 : 0xffffff800ada0256

0xffffff814bf3b8a0 : 0xffffff800ab4427a

0xffffff814bf3b8f0 : 0xffffff800ab62dbe

0xffffff814bf3b990 : 0xffffff800ab4e5b8

0xffffff814bf3bbd0 : 0xffffff800ab4f190

0xffffff814bf3bf50 : 0xffffff800ae4ba86

0xffffff814bf3bfb0 : 0xffffff800aa35376

Kernel Extensions in backtrace:

com.sophos.kext.sav(9.2.50)[D9AF65D9-4A18-3B20-86BB-17DEBC7D5852]@0xffffff7f8b0 18000->0xffffff7f8b01cfff

BSD process name corresponding to current thread: System Events

Mac OS version:

14D136

Kernel version:

Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64

Kernel UUID: 4B3A11F4-77AA-3D27-A22D-81A1BC5B504D

Kernel slide: 0x000000000a600000

Kernel text base: 0xffffff800a800000

__HIB text base: 0xffffff800a700000

System model name: MacPro3,1 (Mac-F42C88C8)

System uptime in nanoseconds: 24061576303113

vm objects:1926070080

vm object hash entri:315229080

VM map entries:632114160

pv_list:16699392

vm pages:164644480

kalloc.16:123905232
kalloc.32:1153152
kalloc.64:10023552
kalloc.128:8605696
kalloc.256:3158016
kalloc.512:153759744
kalloc.1024:2707456
kalloc.2048:1822720
kalloc.4096:1761280
kalloc.8192:5300224

mem_obj_control:126091152

sched groups:1145664

ipc ports:3274560

threads:1510000

vnodes:39567840

namecache:16532160

HFS node:54060960

HFS fork:17965056

cluster_write:5824280

buf.8192:2564096

ubc_info zone:12291488

socache zone:1100928

vnode pager structur:5587320

compressor_pager:495427584

compressor_segment:7318656

Kernel Stacks:2654208

PageTables:161009664

Kalloc.Large:18460722

Backtrace suspected of leaking: (outstanding bytes: 325200)

0xffffff800a96bf56

0xffffff800a9b392d

0xffffff800a9a6e6d

0xffffff800a998eb6

0xffffff800aa18224

last loaded kext at 715074320843: com.apple.filesystems.smbfs 3.0.1 (addr 0xffffff7f8cd29000, size 389120)

last unloaded kext at 93034529033: com.apple.iokit.IOAHCIPassThrough 1.0.3 (addr 0xffffff7f8bd9d000, size 36864)

loaded kexts:

com.sophos.kext.sav 9.2.50
com.sophos.nke.swi 9.2.50
com.hzsystems.terminus.driver 4
com.apple.filesystems.smbfs 3.0.1
com.apple.filesystems.msdosfs 1.10
com.apple.filesystems.autofs 3.0
com.apple.iokit.IOBluetoothSerialManager 4.3.4f4
com.apple.iokit.CSRBluetoothHostControllerUSBTransport 4.3.4f4
com.apple.driver.AppleOSXWatchdog 1
com.apple.driver.AppleHWSensor 1.9.5d0
com.apple.driver.AppleUpstreamUserClient 3.6.1
com.apple.driver.AppleMCCSControl 1.2.11
com.apple.kext.AMDFramebuffer 1.3.2
com.apple.iokit.IOUserEthernet 1.0.1
com.apple.ATIRadeonX2000 10.0.0
com.apple.driver.AppleHDA 272.18
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AppleHWAccess 1
com.apple.driver.AppleHV 1
com.apple.driver.AudioAUUC 1.70
com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0
com.apple.kext.AMD2600Controller 1.3.2
com.apple.driver.AppleLPC 1.7.3
com.apple.driver.AppleMCEDriver 1.1.9
com.apple.driver.ACPI_SMC_PlatformPlugin 1.0.0
com.apple.driver.LSI_FW_500 3.5.5
com.apple.iokit.SCSITaskUserClient 3.7.5
com.apple.driver.XsanFilter 404
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1
com.apple.BootCache 36
com.apple.iokit.IOAHCIBlockStorage 2.7.1
com.apple.driver.AppleUSBOHCI 656.4.1
com.apple.driver.AppleIntel8254XEthernet 3.1.4b1
com.apple.driver.AppleFWOHCI 5.5.2
com.apple.driver.AppleUSBHub 705.4.2
com.apple.driver.AppleAHCIPort 3.1.2
com.apple.driver.AppleIntelPIIXATA 2.5.1
com.apple.driver.AppleUSBEHCI 705.4.14
com.apple.driver.AppleUSBUHCI 656.4.1
com.apple.driver.AppleUSBXHCI 710.4.11
com.apple.driver.AppleACPIButtons 3.1
com.apple.driver.AppleRTC 2.0
com.apple.driver.AppleHPET 1.8
com.apple.driver.AppleSMBIOS 2.1
com.apple.driver.AppleACPIEC 3.1
com.apple.driver.AppleAPIC 1.7
com.apple.driver.AppleIntelCPUPowerManagementClient 218.0.0
com.apple.nke.applicationfirewall 161
com.apple.security.quarantine 3
com.apple.security.TMSafetyNet 8
com.apple.driver.AppleIntelCPUPowerManagement 218.0.0
com.apple.kext.triggers 1.0
com.apple.iokit.IOSerialFamily 11
com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.3.4f4
com.apple.driver.AppleSMBusController 1.0.13d1
com.apple.iokit.IOSurface 97.4
com.apple.iokit.IOBluetoothFamily 4.3.4f4
com.apple.driver.DspFuncLib 272.18
com.apple.kext.OSvKernDSPLib 1.15
com.apple.iokit.IONDRVSupport 2.4.1
com.apple.driver.AppleHDAController 272.18
com.apple.iokit.IOHDAFamily 272.18
com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0
com.apple.iokit.IOUSBUserClient 705.4.0
com.apple.kext.AMDSupport 1.3.2
com.apple.AppleGraphicsDeviceControl 3.10.22
com.apple.iokit.IOGraphicsFamily 2.4.1
com.apple.iokit.IOFireWireIP 2.2.6
com.apple.driver.AppleSMC 3.1.9
com.apple.driver.IOPlatformPluginLegacy 1.0.0
com.apple.driver.IOPlatformPluginFamily 5.9.1d7
com.apple.iokit.IOAHCISerialATAPI 2.6.1
com.apple.driver.AppleUSBHIDKeyboard 176.2
com.apple.driver.AppleHIDKeyboard 176.2
com.apple.iokit.IOUSBHIDDriver 705.4.0
com.apple.iokit.IOSCSIBlockCommandsDevice 3.7.5
com.apple.driver.AppleUSBAudio 295.23
com.apple.iokit.IOAudioFamily 203.3
com.apple.vecLib.kext 1.2.0
com.apple.iokit.IOUSBMassStorageClass 3.7.2
com.apple.driver.AppleUSBMergeNub 705.4.0
com.apple.driver.AppleUSBComposite 705.4.9
com.apple.iokit.IOFireWireSerialBusProtocolTransport 2.5.1
com.apple.iokit.IOFireWireSBP2 4.2.5
com.apple.iokit.IOSCSIMultimediaCommandsDevice 3.7.5
com.apple.iokit.IOBDStorageFamily 1.7
com.apple.iokit.IODVDStorageFamily 1.7.1
com.apple.iokit.IOCDStorageFamily 1.7.1
com.apple.iokit.IOATAPIProtocolTransport 3.5.0
com.apple.iokit.IOSCSIArchitectureModelFamily 3.7.5
com.apple.iokit.IONetworkingFamily 3.2
com.apple.iokit.IOFireWireFamily 4.5.6
com.apple.iokit.IOAHCIFamily 2.7.5
com.apple.iokit.IOATAFamily 2.5.3
com.apple.iokit.IOUSBFamily 720.4.4
com.apple.driver.AppleEFINVRAM 2.0
com.apple.iokit.IOHIDFamily 2.0.0
com.apple.driver.AppleEFIRuntime 2.0
com.apple.iokit.IOSMBusFamily 1.1
com.apple.security.sandbox 300.0
com.apple.kext.AppleMatch 1.0.0d1
com.apple.driver.AppleKeyStore 2
com.apple.driver.AppleMobileFileIntegrity 1.0.5
com.apple.driver.AppleCredentialManager 1.0
com.apple.driver.DiskImages 396
com.apple.iokit.IOStorageFamily 2.0
com.apple.iokit.IOReportFamily 31
com.apple.driver.AppleFDEKeyStore 28.30
com.apple.driver.AppleACPIPlatform 3.1
com.apple.iokit.IOPCIFamily 2.9
com.apple.iokit.IOACPIFamily 1.4
com.apple.kec.pthread 1
com.apple.kec.corecrypto 1.0
com.apple.kec.Libm 1

Reply

Answer 4

Linc Davis

Level 10

209,547 points

May 6, 2015 4:29 PM in response to Kwajmeck

Remove the Sophos product by following the instructions on this page, and also this one, if applicable. If you have a different version, the procedure may be different.

Back up all data before making any changes.

Reply

Answer 5

Kwajmeck Author

Level 1

8 points

May 8, 2015 8:20 AM in response to Linc Davis

Hi Linc and The Hatter. I removed Sophos at 10:20 am yesterday and 4 hours later I had another panic crash with the same info as I replied yesterday. I have not, as yet, erased and reinstalled OS 10.10.3. Should this be my next step?

Reply

Answer 6

Kwajmeck Author

Level 1

8 points

May 8, 2015 10:05 AM in response to Kwajmeck

Update

Did not restart - this just came up after a period of VERY slow response to all applications.

Process: Mail [278]

Path: /Applications/Mail.app/Contents/MacOS/Mail

Identifier: com.apple.mail

Version: 8.2 (2098)

Build Info: Mail-2098000000000000~1

Code Type: X86-64 (Native)

Parent Process: ??? [1]

Responsible: Mail [278]

User ID: 501

Date/Time: 2015-05-08 09:24:20.211 -0600

OS Version: Mac OS X 10.10.3 (14D136)

Report Version: 11

Time Awake Since Boot: 7600 seconds

Crashed Thread: 0 Dispatch queue: com.apple.main-thread

Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000018

There are another 38 pages from the report on the screen. There was no report available on Console.

Reply

Answer 7

Linc Davis

Level 10

209,547 points

May 8, 2015 1:17 PM in response to Kwajmeck

Look at the latest panic report. Does it mention Sophos under "loaded kexts?"

Reply

Answer 8

Kwajmeck Author

Level 1

8 points

May 8, 2015 2:32 PM in response to Linc Davis

On the Console report, there is no mention of Sophos. However, on the repot on the screen, this is only mention of Sophos:

last loaded kext at 22598736512131: com.apple.driver.AppleUSBCDC 4.3.3b1 (addr 0xffffff7f91982000, size 20480)

last unloaded kext at 22662256430141: com.apple.driver.AppleUSBCDC 4.3.3b1 (addr 0xffffff7f91982000, size 16384)

loaded kexts:

com.sophos.kext.sav 9.2.50
com.sophos.nke.swi 9.2.50

This is interesting because I uninstalled Sophos the day before using the instructions you provided. I always shutdown at night and startup in the morning fresh.

Reply

Answer 9

Linc Davis

Level 10

209,547 points

May 8, 2015 2:37 PM in response to Kwajmeck

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 10

Kwajmeck Author

Level 1

8 points

May 9, 2015 4:42 PM in response to Linc Davis

These results contained invalid characters. I will post on Pastebin tomorrow

Reply

Answer 11

Kwajmeck Author

Level 1

8 points

May 9, 2015 4:33 PM in response to Kwajmeck

Here is part 2

Part 2

May 9 14:59:30 com.apple.WebKit (map: 0xffffff804931da50) triggered DYLD shared region unnest for map: 0xffffff804931da50, region 0x7fff89000000->0x7fff89200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 9 15:01:02 com.apple.WebKit (map: 0xffffff803ab05d20) triggered DYLD shared region unnest for map: 0xffffff803ab05d20, region 0x7fff89000000->0x7fff89200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 9 15:03:51 com.apple.WebKit (map: 0xffffff804931da50) triggered DYLD shared region unnest for map: 0xffffff804931da50, region 0x7fff89000000->0x7fff89200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 9 16:05:02 firefox (map: 0xffffff804931d780) triggered DYLD shared region unnest for map: 0xffffff804931d780, region 0x7fff86600000->0x7fff86800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

System log

May 9 15:57:08 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Carbon Copy Cloner" for over 1.00 seconds. Server has re-enabled them.

May 9 15:57:12 fseventsd: Logging disabled completely for device:1: /private/tmp/com.bombich.ccc.AvU4aa

May 9 15:57:27 fseventsd: Logging disabled completely for device:1: /private/tmp/com.bombich.ccc.QQ4D8r

May 9 15:57:27 fseventsd: Logging disabled completely for device:1: /private/tmp/com.bombich.ccc.7z8oJP

May 9 15:57:43 fseventsd: event logs in /Volumes/Recovery HD/.fseventsd out of sync with volume. destroying old logs. (683712 0 683727)

May 9 15:57:43 fseventsd: log dir: /Volumes/Recovery HD/.fseventsd getting new uuid: UUID

May 9 15:57:43 fseventsd: Events arrived for /Volumes/Recovery HD after an unmount request! Re-initializing.

May 9 15:57:43 fseventsd: creating a dls for /Volumes/Recovery HD but it already has one...

May 9 15:57:43 fseventsd: disk logger: failed to open output file /Volumes/Recovery HD/.fseventsd/00000000000d454f (No such file or directory). mount point /Volumes/Recovery HD/.fseventsd

May 9 16:11:09 WDQuickView: __tcp_connection_register_reachability_block_invoke 514 networkd reported net_helper_connection_start failed

May 9 16:11:09 WDQuickView: __tcp_connection_register_reachability_block_invoke 513 networkd reported net_helper_connection_start failed

May 9 16:27:25 PDFpen: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

May 9 16:28:43 PDFpen: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

May 9 16:29:26 WindowServer: WSGetSurfaceInWindow : Invalid surface 1411734814 for window 311

launchd log

May 8 08:16:36 com.google.keystone.system.agent: Interval spawn of service failed: 139: Service cannot presently execute

May 8 10:13:50 com.apple.xpc.launchd.user.501.100006.Aqua: Could not read path: path = /Users/USER/Library/LaunchAgents/com.bombich.ccc-user-agent.plist, error = 2: No such file or directory

May 8 10:47:54 com.adobe.ARM.UUID: Interval spawn of service failed: 139: Service cannot presently execute

May 8 14:40:11 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.276, service = com.bombich.cccuseragent, error = 119: Service is disabled

May 8 14:40:11 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.276, service = com.apple.photostream-agent, error = 119: Service is disabled

May 8 14:40:11 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.276, service = ua.com.AntLogic.TodoLauncher, error = 119: Service is disabled

May 8 15:39:09 com.google.keystone.system.agent: Interval spawn of service failed: 139: Service cannot presently execute

May 8 18:10:26 com.adobe.ARM.UUID: Interval spawn of service failed: 139: Service cannot presently execute

May 8 20:40:01 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.277, service = com.bombich.cccuseragent, error = 119: Service is disabled

May 8 20:40:01 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.277, service = com.apple.photostream-agent, error = 119: Service is disabled

May 8 20:40:01 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.277, service = ua.com.AntLogic.TodoLauncher, error = 119: Service is disabled

May 8 21:38:58 com.google.keystone.system.agent: Interval spawn of service failed: 139: Service cannot presently execute

May 9 07:53:44 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.270, service = com.bombich.cccuseragent, error = 119: Service is disabled

May 9 07:53:44 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.270, service = com.apple.photostream-agent, error = 119: Service is disabled

May 9 07:53:44 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.270, service = ua.com.AntLogic.TodoLauncher, error = 119: Service is disabled

May 9 14:02:08 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.bombich.cccuseragent, error = 119: Service is disabled

May 9 14:02:08 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.271, service = com.apple.photostream-agent, error = 119: Service is disabled

May 9 14:02:08 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.271, service = ua.com.AntLogic.TodoLauncher, error = 119: Service is disabled

May 9 15:01:50 com.google.keystone.system.agent: Interval spawn of service failed: 139: Service cannot presently execute

May 9 15:57:04 com.apple.xpc.launchd.user.501.100006.Aqua: Could not read path: path = /Users/USER/Library/LaunchAgents/com.bombich.ccc-user-agent.plist, error = 2: No such file or directory

May 9 15:57:26 com.apple.xpc.launchd.user.501.100006.Aqua: Could not read path: path = /Users/USER/Library/LaunchAgents/com.bombich.ccc-user-agent.plist, error = 2: No such file or directory

Loaded kernel extensions

com.hzsystems.terminus.driver (4)

System services loaded

com.adobe.fpsaud

com.apple.AccountPolicyHelper

com.apple.CodeSigningHelper

com.apple.MobileFileIntegrity

com.apple.PerformanceAnalysis.animationperfd

com.apple.awdd

com.apple.cfprefsd.xpc.daemon

com.apple.coreduetd

com.apple.coresymbolicationd

com.apple.ctkd

com.apple.diagnosticd

com.apple.icloud.findmydeviced

com.apple.iconservices.iconservicesagent

com.apple.iconservices.iconservicesd

com.apple.ifdreader

com.apple.nehelper

com.apple.networkd_privileged

com.apple.nsurlsessiond_privileged

com.apple.nsurlstoraged

com.apple.sandboxd

com.apple.secinitd

com.apple.softwareupdated

com.apple.spindump

com.apple.sysmond

com.apple.systemstatsd

com.apple.tccd.system

com.apple.watchdogd

com.apple.wdhelper

com.apple.xpc.smd

com.bombich.ccc

com.google.keystone.daemon

com.macpaw.CleanMyMac2.Agent

com.microsoft.office.licensing.helper

com.oracle.java.Helper-Tool

com.oracle.java.JavaUpdateHelper

org.cups.cupsd

org.macosforge.xquartz.privileged_startx

org.tcpdump.chmod_bpf

- status: 78

Login services loaded

2BUA8C4S2C.com.agilebits.onepassword4-helper

com.adobe.ARM.UUID

- status: 78

com.adobe.ARM.UUID

- status: 78

com.adobe.ARM.UUID

- status: 78

com.adobe.ARM.UUID

com.akamai.single-user-client

com.apple.AirPlayUIAgent

com.apple.CallHistoryPluginHelper

com.apple.CallHistorySyncHelper

com.apple.Maps.mapspushd

com.apple.SafariNotificationAgent

com.apple.accountsd

com.apple.bird

com.apple.cloudd

com.apple.cloudphotosd

com.apple.cmfsyncagent

com.apple.coreservices.appleid.authentication

com.apple.coreservices.uiagent

com.apple.icloud.fmfd

com.apple.iconservices.iconservicesagent

com.apple.nsurlstoraged

com.apple.pbs

com.apple.photolibraryd

com.apple.printtool.agent

com.apple.recentsd

com.apple.scopedbookmarksagent.xpc

com.apple.soagent

com.apple.spindump_agent

com.apple.telephonyutilities.callservicesd

com.apple.xpc.loginitemregisterd

com.cnet.ttengine

com.google.keystone.system.agent

- status: 78

com.maintain.ShowUserLibraryDirectory

com.maintain.SystemEvents

com.oracle.java.Java-Updater

com.prosofteng.DGMonitor

- status: 78

org.macosforge.xquartz.startx

ws.agile.1PasswordAgent

Login services disabled

com.tuneupmedia.TuneUpHelper

com.apple.photostream-agent

com.bombich.cccuseragent

com.macblurayplayer.MacBlurayPlayerHelper

com.adobe.AAM.Scheduler-1.0

User services loaded

com.apple.CloudPhotosConfiguration

com.apple.DataDetectorsDynamicData

com.apple.InputMethodKit.UserDictionary

com.apple.MailServiceAgent

com.apple.cfprefsd.xpc.agent

com.apple.geod

com.apple.imdpersistence.IMDPersistenceAgent

com.apple.internetaccounts

com.apple.pluginkit.pkd

com.apple.secd

com.apple.secinitd

com.apple.security.cloudkeychainproxy3

com.apple.tccd

com.apple.tonelibraryd

User services disabled

com.tuneupmedia.TuneUpHelper

com.apple.photostream-agent

com.bombich.cccuseragent

com.macblurayplayer.MacBlurayPlayerHelper

com.adobe.AAM.Scheduler-1.0

Startup items

/Library/StartupItems/TiVoDesktop/StartupParameters.plist

/Library/StartupItems/TiVoDesktop/TiVoDesktop

/Library/StartupItems/VideoGlide Startup/StartupParameters.plist

/Library/StartupItems/VideoGlide Startup/VideoGlide Startup

/Library/StartupItems/VideoGlide Startup/VideoGlide Startup.app/Contents/Info.plist

/Library/StartupItems/VideoGlide Startup/VideoGlide Startup.app/Contents/MacOS/VideoGlide Startup

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

ScanSnap Manager

- /Applications/ScanSnap/ScanSnap Manager.app

AppTrap

- /Library/PreferencePanes/AppTrap.prefPane/Contents/Resources/AppTrap.app

SMARTReporter

- /Applications/SMARTReporter.app

Dropbox

- /Applications/Dropbox.app

Adobe Acrobat Pro

- /Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app

AdobeResourceSynchronizer

- /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app

HP Product Research

- /Library/Application Support/Hewlett-Packard/Customer Participation/HP Product Research.app

WD Quick View

- /Volumes/Hermione/Incompatible Software/WDQuickView.app

User crontab

59 11 * * 7 /Applications/MacScan\ 2/MacScan.app/Contents/MacOS/MacScan -autoscan YES -autoquit YES

Safari extensions

1Password

- com.agilebits.onepassword4-safari

ShopAtHome.com extension

- com.shopathome.toolbar

iCloud errors

cloudd 169

bird 33

accountsd 14

Spotlight 12

Mail 8

Finder 8

CallHistorySyncHelper 2

Continuity errors

sharingd 1

Restricted files: 326

Lockfiles: 58

Data packages

/Users/USER/Library/Application Support/DriveGenius/LoginItemsStore

Contents of /Library/LaunchAgents/com.hp.productresearch.plist

- mod date: Jan 16 06:29:07 2012

- size (B): 479

- checksum: 1866638499

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Program</key>

<string>/Library/Application Support/Hewlett-Packard/Customer Participation/HP Product Research.app/Contents/MacOS/HP Product Research</string>

<key>Label</key>

<string>com.hp.productresearch</string>

<key>LaunchOnlyOnce</key>

<true/>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Reply

Answer 12

Kwajmeck Author

Level 1

8 points

May 9, 2015 4:34 PM in response to Kwajmeck

Part 3

Contents of /Library/LaunchAgents/com.maintain.LogOut.plist

- mod date: Mar 23 13:53:06 2013

- size (B): 895

- checksum: 1206406608

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.maintain.LogOut</string>

<key>ProgramArguments</key>

<array>

<string>osascript</string>

<string>delay 3</string>

<string>do shell script "killall Cocktail"</string>

<string>ignoring application responses</string>

<string>tell application "System Events" to log out</string>

...and 7 more line(s)

Contents of /Library/LaunchAgents/com.maintain.PurgeInactiveMemory.plist

- mod date: Mar 23 13:48:56 2013

- size (B): 443

- checksum: 1305623818

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.maintain.PurgeInactiveMemory</string>

<key>ProgramArguments</key>

<array>

<string>purge</string>

</array>

<key>RunAtLoad</key>

<key>StartInterval</key>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.maintain.Restart.plist

- mod date: Mar 23 13:53:06 2013

- size (B): 896

- checksum: 2768333425

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.maintain.Restart</string>

<key>ProgramArguments</key>

<array>

<string>osascript</string>

<string>delay 3</string>

<string>do shell script "killall Cocktail"</string>

<string>ignoring application responses</string>

<string>tell application "System Events" to restart</string>

...and 7 more line(s)

Contents of /Library/LaunchAgents/com.maintain.ShutDown.plist

- mod date: Mar 23 13:53:07 2013

- size (B): 899

- checksum: 3229530888

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.maintain.ShutDown</string>

<key>ProgramArguments</key>

<array>

<string>osascript</string>

<string>delay 3</string>

<string>do shell script "killall Cocktail"</string>

<string>ignoring application responses</string>

<string>tell application "System Events" to shut down</string>

...and 7 more line(s)

Contents of /Library/LaunchAgents/com.maintain.Sleep.plist

- mod date: Mar 23 13:53:08 2013

- size (B): 892

- checksum: 956273533

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.maintain.Sleep</string>

<key>ProgramArguments</key>

<array>

<string>osascript</string>

<string>delay 3</string>

<string>do shell script "killall Cocktail"</string>

<string>ignoring application responses</string>

<string>tell application "System Events" to sleep</string>

...and 7 more line(s)

Contents of /Library/LaunchAgents/com.maintain.SystemEvents.plist

- mod date: Mar 23 13:48:29 2013

- size (B): 486

- checksum: 1297325733

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.maintain.SystemEvents</string>

<key>ProgramArguments</key>

<array>

<string>/System/Library/CoreServices/System Events.app/Contents/MacOS/System Events</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

- mod date: Apr 15 12:15:02 2015

- size (B): 104

- checksum: 4168154276

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.oracle.java.Java-Updater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

<string>-bgcheck</string>

</array>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

<key>Weekday</key>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchDaemons/com.bombich.ccc.plist

- mod date: Dec 5 15:48:47 2013

- size (B): 770

- checksum: 3730953884

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<key>Label</key>

<string>com.bombich.ccc</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.bombich.ccc</string>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<key>SockPathMode</key>

<key>SockPathName</key>

...and 7 more line(s)

Contents of /Library/LaunchDaemons/com.bombich.ccchelper.plist

- mod date: Oct 19 09:36:15 2014

- size (B): 484

- checksum: 801575064

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.bombich.ccchelper</string>

<key>MachServices</key>

<dict>

<key>com.bombich.ccchelper</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.bombich.ccchelper</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.macpaw.CleanMyMac2.Agent.plist

- mod date: Aug 24 20:33:58 2014

- size (B): 833

- checksum: 2214847194

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.macpaw.CleanMyMac2.Agent</string>

<key>MachServices</key>

<dict>

<key>com.macpaw.CleanMyMac2.Agent</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent</string>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<key>SockPathMode</key>

...and 8 more line(s)

Contents of /Library/LaunchDaemons/com.maintain.CocktailScheduler.plist

- mod date: Mar 23 15:53:39 2013

- size (B): 566

- checksum: 2969513386

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.maintain.cocktail.scheduler</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Cocktail/Scheduler.sh</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

</dict>

</plist>

Contents of /Library/LaunchDaemons/org.tcpdump.chmod_bpf.plist

- mod date: Dec 8 18:30:14 2014

- size (B): 441

- checksum: 519380055

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>org.tcpdump.chmod_bpf</string>

<key>RunAtLoad</key>

<true/>

<key>Program</key>

<string>/usr/local/bin/chmod_bpf</string>

<key>ProgramArguments</key>

<array>

<string>/usr/local/bin/chmod_bpf</string>

</array>

</dict>

</plist>

Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

- mod date: Apr 10 11:52:03 2015

- size (B): 554

- checksum: 3012644940

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>org.apache.httpd</string>

<key>EnvironmentVariables</key>

<dict>

<key>XPC_SERVICES_UNAVAILABLE</key>

</dict>

<key>ProgramArguments</key>

<array>

<string>/usr/sbin/httpd-wrapper</string>

<string>FOREGROUND</string>

</array>

<key>OnDemand</key>

</dict>

</plist>

Contents of /private/etc/ssh_config

- mod date: Jan 6 12:40:59 2013

- size (B): 1732

- checksum: 1281775184

Host *

SendEnv LANG LC_*

Host *

XAuthLocation /opt/X11/bin/xauth

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Jan 20 14:22:47 2012

- size (B): 574

- checksum: 408149527

Reply

Answer 13

Linc Davis

Level 10

209,547 points

May 9, 2015 5:18 PM in response to Kwajmeck

That's not all the output, but I'll respond on the basis of what you've provided. It would have been better to post the results on Pastebin.

A

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities ▹ Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button

Select

 ▹ Restart

from the menu bar.

B

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

C

Back up all data before proceeding.

Launch the Font Book application and validate all fonts. You must select the fonts in order to validate them. See the built-in help and this support article for instructions. If Font Book finds any issues, resolve them.

Start up in safe mode to rebuild the font caches. Restart as usual and test.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t start in safe mode. In that case, ask for instructions.

If you still have problems, then from the Font Book menu bar, select

File ▹ Restore Standard Fonts...

You'll be prompted to confirm, and then to enter your administrator login password.

Also note that if you deactivate or remove any built-in fonts, for instance by using a third-party font manager, the system may become unstable.

D

None of the following system modifications serves any real purpose, and any or all could be contributing to the problem:

CleanMyMac

Cocktail

DriveGenius

MacScan

Toast (obsolete)

I suggest you remove them unconditionally.

Any third-party software that doesn't install from the App Store or by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

"CleanMyMac" is a scam and a common cause of instability and poor performance. Depending on what version you have, the developer's instructions may not completely remove it. Follow those instructions, then do as below.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/Library/LaunchDaemons/com.macpaw.CleanMyMac2.Agent.plist

Right-click or control-click the highlighted line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder may open with an item selected. If it does, move the selected item to the Trash. You may be prompted for your administrator login password.

Repeat with this line:

/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent

Restart the computer and empty the Trash.

You may also have to remove these items in the same way:

~/Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist

Never again install "CleanMyMac" or anything like it.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

E

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

~/Library/Accounts/Accounts3.sqlite

Right-click or control-click the line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. Log out or restart the computer.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

F

Some OS X files (Installer package receipts) are missing or invalid. Other OS files may also be missing or invalid.

If you don't already have a current backup, back up all data, then reinstall the OS.* You don't need to erase the startup volume, and you won't need the backup unless something goes wrong. If the system was upgraded from an older version of OS X, you may need the Apple ID and password you used.

If you use FileVault 2, then before running the Installer you must launch Disk Utility and select the icon of the FileVault startup volume ("Macintosh HD," unless you gave it a different name.) It will be nested below another icon with the same name. Click the Unlock button in the toolbar and enter your login password when prompted. Then quit Disk Utility to be returned to the main Recovery screen.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

If you installed the Java runtime distributed by Apple and still need it, you'll have to reinstall it. The same goes for Xcode. All other data will be preserved.

*The linked support article refers to OS X 10.10 ("Yosemite"), but the procedure is the same for OS X 10.7 ("Lion") and later.

G

Even after taking all the above steps, you may still have problems with performance or stability. If so, one or more of your third-party peripherals may be at fault. Finding out which ones is a process of elimination.

Reply