Thanks so much again Linc Davis - everything was going well - I had put back in two of the three cards (I hadn't put back the RocketRaid card yet as I expected that it might be the culprit) and the machine had run well for several days - waking very quickly from sleep - and then this happened today: I came to the machine to find that it had restarted itself earlier (and before that, someone else in my household had woken it up but unfortunately they are unable to tell me any details about the state that they found it in!) so I looked at the console and found all sorts of strange stuff that maybe you could help me with - including a reference to MacKeeper which was removed YEARS ago. Have I been hacked?? Apologies for the amount of code, but there seems to be significant stuff at the start and the end. Any ideas? Thanks so much in advance.
19/05/2015 17:59:26.697 com.apple.time[257]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
19/05/2015 17:59:26.000 kernel[0]: USBF: 92236.254 AppleUSBEHCI::SuspendUSBBus - port 2 was NOT already suspended (as it should have been) PROBLEMS AHEAD
19/05/2015 17:59:30.000 kernel[0]: disk1s1: media is not present.
19/05/2015 17:59:30.000 kernel[0]: disk1s1: media is not present.
19/05/2015 17:59:30.000 kernel[0]: jnl: disk1s1: do_jnl_io: strategy err 0x6
19/05/2015 17:59:30.000 kernel[0]: jnl: disk1s1: end_transaction: only wrote 0 of 12288 bytes to the journal!
19/05/2015 17:59:30.000 kernel[0]: disk1s1: media is not present.
19/05/2015 17:59:30.000 kernel[0]: hfs: unmount initiated on Time Machine Backups on device disk1s1
19/05/2015 17:59:30.000 kernel[0]: jnl: disk1s1: close: journal 0xffffff803e325a80, is invalid. aborting outstanding transactions
19/05/2015 17:59:32.000 kernel[0]: Wake reason: EHCI
19/05/2015 17:59:32.000 kernel[0]: Previous Sleep Cause: 5
19/05/2015 17:59:32.000 kernel[0]: USBF: 92239.447 AppleUSBXHCI::CheckSleepCapability - controller will be unloaded across sleep
19/05/2015 17:59:32.027 sandboxd[136]: ([16612]) mds_stores(16612) deny file-read-data /Volumes/Time Machine Backups/.Spotlight-V100/Store-V1/Stores
19/05/2015 17:59:32.031 sandboxd[136]: ([16612]) mds_stores(16612) deny file-read-data /Volumes/Time Machine Backups/.Spotlight-V100/Store-V1/Stores
19/05/2015 17:59:32.035 sandboxd[136]: ([16612]) mds_stores(16612) deny file-read-data /Volumes/Time Machine Backups/.Spotlight-V100/Store-V1/Stores
19/05/2015 17:59:32.000 kernel[0]: The USB device Keyboard Hub (Port 2 of Hub at 0xfd000000) may have caused a wake by issuing a remote wakeup (1)
19/05/2015 17:59:33.000 kernel[0]: USBMSC Identifier (non-unique): 0000D311CB54 0x59b 0x70 0x4, 3
19/05/2015 17:59:33.000 kernel[0]: Ethernet [Intel8254x]: Link up on en0, 100-Megabit, Full-duplex, Symmetric flow-control, Debug [792d,6f08,0de1,0e00,45e1,4000]
19/05/2015 17:59:33.876 configd[59]: LINKLOCAL en0: parent has no IP
19/05/2015 17:59:34.000 kernel[0]: jnl: disk1s1: replay_journal: from: 86335488 to: 86630400 (joffset 0x574f000)
19/05/2015 17:59:35.000 kernel[0]: jnl: disk1s1: journal replay done.
19/05/2015 17:59:36.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 17:59:36.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 17:59:36.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 17:59:36.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 17:59:36.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 17:59:36.000 kernel[0]: hfs: mounted Time Machine Backups on device disk1s1
19/05/2015 17:59:37.183 mds[38]: (Normal) Volume: volume:0x7fd1059e3c00 ********** Bootstrapped Creating a default store:1 SpotLoc:(null) SpotVerLoc:(null) occlude:0 /Volumes/Virtual CD
19/05/2015 17:59:37.208 mds[38]: (Warning) Volume: vsd:0x7fd104abb000 Open failed. failureCount:0 (null)
19/05/2015 17:59:47.662 AirPlayUIAgent[841]: 2015-05-19 05:59:47.661917 PM [AirPlayUIAgent] Changed PIN pairing: no
19/05/2015 17:59:47.689 AirPlayUIAgent[841]: 2015-05-19 05:59:47.688579 PM [AirPlayUIAgent] Changed PIN pairing: no
19/05/2015 17:59:52.252 mds[38]: (Warning) Volume: vsd:0x7fd104161800 Open failed. failureCount:1 {
DisabledRecycleCount = 1;
}
19/05/2015 18:00:22.802 mds[38]: (Warning) Volume: vsd:0x7fd102a61000 Open failed. failureCount:2 {
DisabledRecycleCount = 2;
}
19/05/2015 18:00:23.966 ntpd[167]: ntpd: wake time set +0.438657 s
19/05/2015 18:00:23.989 com.apple.time[257]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
19/05/2015 18:00:23.997 com.apple.time[257]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
19/05/2015 18:01:09.000 bootlog[0]: BOOT_TIME 1432054869 0
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.appstore" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.authd" sharing output destination "/var/log/system.log" with ASL Module "com.apple.asl".
Output parameters from ASL Module "com.apple.asl" override any specified in ASL Module "com.apple.authd".
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.authd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.bookstore" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.eventmonitor" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.install" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.iokit.power" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.mail" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.MessageTracer" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.performance" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 syslogd[23]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
19/05/2015 18:02:03.000 kernel[0]: Longterm timer threshold: 1000 ms
19/05/2015 18:02:03.000 kernel[0]: Darwin Kernel Version 13.4.0: Wed Mar 18 16:20:14 PDT 2015; root:xnu-2422.115.14~1/RELEASE_X86_64
19/05/2015 18:02:03.000 kernel[0]: vm_page_bootstrap: 3959326 free pages and 202210 wired pages
19/05/2015 18:02:03.000 kernel[0]: kext submap [0xffffff7f807ab000 - 0xffffff8000000000], kernel text [0xffffff8000200000 - 0xffffff80007ab000]
19/05/2015 18:02:03.000 kernel[0]: zone leak detection enabled
19/05/2015 18:02:03.000 kernel[0]: "vm_compressor_mode" is 4
19/05/2015 18:02:03.000 kernel[0]: standard timeslicing quantum is 10000 us
19/05/2015 18:02:03.000 kernel[0]: standard background quantum is 2500 us
19/05/2015 18:02:03.000 kernel[0]: mig_table_max_displ = 74
19/05/2015 18:02:03.000 kernel[0]: Notice - new kext com.Logitech.Unifying.HID Driver, v1.3 matches prelinked kext but can't determine if executables are the same (no UUIDs).
19/05/2015 18:02:03.000 kernel[0]: Refusing new kext com.Logitech.Unifying.HID Driver, v1.3: already have prelinked v1.3.1.
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=0 LocalApicId=0 Enabled
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=1 LocalApicId=1 Enabled
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=2 LocalApicId=2 Enabled
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=3 LocalApicId=3 Enabled
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=4 LocalApicId=4 Enabled
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=5 LocalApicId=6 Enabled
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=6 LocalApicId=5 Enabled
19/05/2015 18:02:03.000 kernel[0]: AppleACPICPU: ProcessorId=7 LocalApicId=7 Enabled
19/05/2015 18:02:03.000 kernel[0]: calling mpo_policy_init for TMSafetyNet
19/05/2015 18:02:03.000 kernel[0]: Security policy loaded: Safety net for Time Machine (TMSafetyNet)
19/05/2015 18:02:03.000 kernel[0]: calling mpo_policy_init for Sandbox
19/05/2015 18:02:03.000 kernel[0]: Security policy loaded: Seatbelt sandbox policy (Sandbox)
19/05/2015 18:02:03.000 kernel[0]: calling mpo_policy_init for Quarantine
19/05/2015 18:02:03.000 kernel[0]: Security policy loaded: Quarantine policy (Quarantine)
19/05/2015 18:02:03.000 kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
19/05/2015 18:02:03.000 kernel[0]: The Regents of the University of California. All rights reserved.
19/05/2015 18:02:03.000 kernel[0]: MAC Framework successfully initialized
19/05/2015 18:02:03.000 kernel[0]: using 16384 buffer headers and 10240 cluster IO buffer headers
19/05/2015 18:02:03.000 kernel[0]: AppleKeyStore starting (BUILT: Aug 17 2014 20:21:39)
19/05/2015 18:02:03.000 kernel[0]: IOAPIC: Version 0x20 Vectors 64:87
19/05/2015 18:02:03.000 kernel[0]: ACPI: sleep states S3 S4 S5
19/05/2015 18:01:14.424 com.apple.launchd[1]: *** launchd[1] has started up. ***
19/05/2015 18:02:03.000 kernel[0]: pci (build 20:04:33 Aug 17 2014), flags 0x63008, pfm64 (38 cpu) 0x3f80000000, 0x80000000
19/05/2015 18:01:14.424 com.apple.launchd[1]: *** Shutdown logging is enabled. ***
19/05/2015 18:02:03.000 kernel[0]: [ PCI configuration begin ]
19/05/2015 18:02:03.000 kernel[0]: AppleIntelCPUPowerManagement: (built 20:17:40 Aug 17 2014) initialization complete
19/05/2015 18:02:03.000 kernel[0]: Sleep failure code 0x00000000 0x18006c00
19/05/2015 18:01:32.857 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon[70]) Exited with code: 2
19/05/2015 18:02:03.000 kernel[0]: console relocated to 0x3f80060000
19/05/2015 18:02:03.000 kernel[0]: [ PCI configuration end, bridges 15, devices 29 ]
19/05/2015 18:02:03.000 kernel[0]: SXHCD 0xffffff8205df5000: unable to obtain ownership: 0xe00002be
19/05/2015 18:02:03.000 kernel[0]: USBF: 0.395 AppleUSBXHCI::CheckSleepCapability - controller will be unloaded across sleep
19/05/2015 18:01:32.857 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon) Throttling respawn: Will start in 10 seconds
19/05/2015 18:01:42.859 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon[81]) Exited with code: 2
19/05/2015 18:01:42.859 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon) Throttling respawn: Will start in 10 seconds
19/05/2015 18:02:03.000 kernel[0]: USBF: 0.396 AppleUSBXHCI::CheckSleepCapability - controller will be unloaded across sleep
19/05/2015 18:02:03.000 kernel[0]: mcache: 8 CPU(s), 64 bytes CPU cache line size
19/05/2015 18:01:52.861 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon[86]) Exited with code: 2
19/05/2015 18:02:03.000 kernel[0]: mbinit: done [128 MB total pool size, (85/42) split]
19/05/2015 18:02:03.000 kernel[0]: Pthread support ABORTS when sync kernel primitives misused
19/05/2015 18:02:03.000 kernel[0]: FireWire runtime power conservation disabled. (2)
19/05/2015 18:01:52.861 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon) Throttling respawn: Will start in 10 seconds
19/05/2015 18:02:03.000 kernel[0]: rooting via boot-uuid from /chosen: AF2C36B2-7815-3667-BDCD-E56912861A10
19/05/2015 18:02:03.000 kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
19/05/2015 18:02:02.863 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon[98]) Exited with code: 2
19/05/2015 18:02:03.000 kernel[0]: com.apple.AppleFSCompressionTypeZlib kmod start
19/05/2015 18:02:02.863 com.apple.launchd[1]: (com.zeobit.MacKeeper.plugin.AntiTheft.daemon) Throttling respawn: Will start in 10 seconds
19/05/2015 18:02:03.000 kernel[0]: com.apple.AppleFSCompressionTypeLZVN kmod start
19/05/2015 18:02:03.000 kernel[0]: com.apple.AppleFSCompressionTypeDataless kmod start
19/05/2015 18:02:03.000 kernel[0]: com.apple.AppleFSCompressionTypeZlib load succeeded
19/05/2015 18:02:03.000 kernel[0]: com.apple.AppleFSCompressionTypeLZVN load succeeded
19/05/2015 18:02:03.000 kernel[0]: com.apple.AppleFSCompressionTypeDataless load succeeded
19/05/2015 18:02:03.000 kernel[0]: AppleIntelCPUPowerManagementClient: ready
19/05/2015 18:02:03.000 kernel[0]: BTCOEXIST off
19/05/2015 18:02:03.000 kernel[0]: wl0: Broadcom BCM4328 802.11 Wireless Controller
19/05/2015 18:02:03.000 kernel[0]: 5.10.131.36
19/05/2015 18:02:03.000 kernel[0]: FireWire (OHCI) TI ID 823f built-in now active, GUID 001ff3fffe253272; max speed s800.
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: No interval found for . Using 8000000
19/05/2015 18:02:03.000 kernel[0]: USBMSC Identifier (non-unique): 0000D311CB54 0x59b 0x70 0x4, 3
19/05/2015 18:02:03.000 kernel[0]: Got boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/SATA@1F,2/AppleAHCI/PRT1 @1/IOAHCIDevice@0/AppleAHCIDiskDriver/IOAHCIBlockStorageDevice/IOBlockStorageDri ver/Hitachi HDS722020ALA330 Media/IOGUIDPartitionScheme/Untitled@2
19/05/2015 18:02:03.000 kernel[0]: BSD root: disk0s2, major 1, minor 1
19/05/2015 18:02:03.000 kernel[0]: jnl: b(1, 1): replay_journal: from: 28479488 to: 33800192 (joffset 0x2e85000)
19/05/2015 18:02:03.000 kernel[0]: jnl: b(1, 1): journal replay done.
19/05/2015 18:02:03.000 kernel[0]: hfs: mounted Mac Pro HD2 Snow on device root_device
19/05/2015 18:02:03.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 18:02:03.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 18:02:03.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 18:02:03.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 18:02:03.000 kernel[0]: SAM Multimedia: READ or WRITE failed, SENSE_KEY = 0x05, ASC = 0x20, ASCQ = 0x00
19/05/2015 18:02:03.000 kernel[0]: hfs: Removed 437 orphaned / unlinked files and 309 directories
19/05/2015 18:02:03.000 kernel[0]: Waiting for DSMOS...