After upgrading to 10.10.4 mail hangs intermittently

Question

Level 1

0 points

After upgrading to 10.10.4 mail hangs intermittently

Hi all.

After upgrading from Snow Leopard to Yosemite 10.10.4 I now have a very unstable Mail app.

Everything works, except Mail hangs randomly when I first log in. (Its in the dock - set to open at login)

My inbox has typically 60-70 messages but when Mail hangs it will display either none of the messages that should be there, or sometimes a lower number.

Clicking around Mail works and those few messages that are displayed are openable. It is not possible to open any mail folders.

Looking at the Activity window - There is an entry for each mail account (I have 10) and they are all stuck say "Opening Mailbox......."

When I try and quit Mail, it then just hangs and can only be closed with a Force Quit.

I've tried the suggestions of rebuilding the mailboxes and the plist file but it didn't help.

Its *VERY* random. Mail will run fine for several days and then hangup on start for days and then start working reliably again.

If it is working OK, closing Mail and re-opening it will ALWAYS result in a hang.

After a Force Quit, it will nearly always open OK right away, but not 100%.

My Mail accounts are a mixture of POP and IMAP, no Exchange accounts.

I've tried playing with the "Automatically detect and maintain account settings" option but it makes no difference.

Once Mail is running it works reliably and all 10 accounts can send and receive mail.

Regards all

iMac, OS X Yosemite (10.10.4)

Posted on Aug 3, 2015 9:00 AM

Reply

Answer 1

Linc Davis

Level 10

209,739 points

Aug 3, 2015 11:44 AM in response to BigYinUK

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES ▹ All Messages

from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar at the top of the screen.

Click the Clear Display icon in the toolbar. Then take an action that isn't working the way you expect. Select any lines that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name or email address, may appear in the log. Anonymize before posting.

When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

Reply

Answer 2

BigYinUK Author

Level 1

0 points

Aug 4, 2015 2:56 AM in response to Linc Davis

I will try that but at the moment it is refusing to misbehave 😕

Bear with me and I'll post some results the next time it hangs.

Regards

Reply

Answer 3

BigYinUK Author

Level 1

0 points

Aug 7, 2015 2:05 AM in response to BigYinUK

Mail hung today on start - 7 messages in inbox (should be 70)

07/08/2015 09:30:03.766 com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

07/08/2015 09:30:06.390 Mail[546]: dnssd_clientstub DNSServiceProcessResult called with DNSServiceRef with no ProcessReply function

07/08/2015 09:30:12.725 com.apple.internetaccounts[526]: dnssd_clientstub DNSServiceProcessResult called with DNSServiceRef with no ProcessReply function

07/08/2015 09:30:13.278 com.apple.internetaccounts[526]: dnssd_clientstub DNSServiceProcessResult called with DNSServiceRef with no ProcessReply function

07/08/2015 09:30:17.052 com.apple.internetaccounts[526]: dnssd_clientstub DNSServiceProcessResult called with DNSServiceRef with no ProcessReply function

Now I tried to close mail (unsuccessful)

07/08/2015 09:31:20.227 WindowServer[406]: disable_update_timeout: UI updates were forcibly disabled by application "Mail" for over 1.00 seconds. Server has re-enabled them.

07/08/2015 09:31:34.228 WindowServer[406]: disable_update_likely_unbalanced: UI updates still disabled by application "Mail" after 15.00 seconds (server forcibly re-enabled them after 1.00 seconds). Likely an unbalanced disableUpdate call.

Force quit mail

07/08/2015 09:32:03.969 com.apple.xpc.launchd[1]: (com.apple.mail.70464[546]) Service exited due to signal: Terminated: 15

07/08/2015 09:32:04.022 com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

07/08/2015 09:32:04.310 com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

07/08/2015 09:32:04.408 cloudphotosd[563]: +[CSLogger preferencesChanged:] reconfiguring logging

07/08/2015 09:32:04.419 cloudphotosd[563]: Determine service transition start: service=com.apple.photo.icloud.sharedstreams personId=(null) lastKnownPersonId=(null) targetState=0

07/08/2015 09:32:04.420 cloudphotosd[563]: Determine service transition end: 2, currentState: 3, shouldEnableService: 0

07/08/2015 09:32:04.423 cloudphotosd[563]: Determine service transition start: service=com.apple.photo.icloud.myphotostream personId=(null) lastKnownPersonId=(null) targetState=0

07/08/2015 09:32:04.423 cloudphotosd[563]: Determine service transition end: 2, currentState: 3, shouldEnableService: 0

07/08/2015 09:32:04.617 cloudphotosd[563]: Determine service transition start: service=com.apple.photo.icloud.cloudphoto personId=(null) lastKnownPersonId=(null) targetState=0

07/08/2015 09:32:04.618 cloudphotosd[563]: Determine service transition end: 2, currentState: 3, shouldEnableService: 0

07/08/2015 09:32:07.256 cloudphotosd[563]: New connection request from 567

07/08/2015 09:32:08.083 com.apple.photomoments[570]: Photomoments process awakened.

07/08/2015 09:32:08.470 com.apple.photomoments[570]: Connection error while checking Apple Internalness. Error: Error Domain=NSCocoaErrorDomain Code=4099 "Couldn’t communicate with a helper application." (The connection to service named com.apple.CrashReporterSupportHelper was invalidated.) UserInfo=0x7f846bd267d0 {NSDebugDescription=The connection to service named com.apple.CrashReporterSupportHelper was invalidated.}

07/08/2015 09:32:08.875 com.apple.geod[571]: Connection error while checking Apple Internalness. Error: Error Domain=NSCocoaErrorDomain Code=4099 "Couldn’t communicate with a helper application." (The connection to service named com.apple.CrashReporterSupportHelper was invalidated.) UserInfo=0x7fc5185285d0 {NSDebugDescription=The connection to service named com.apple.CrashReporterSupportHelper was invalidated.}

07/08/2015 09:32:09.242 sandboxd[363]: ([570]) com.apple.photom(570) deny mach-lookup com.apple.CrashReporterSupportHelper

07/08/2015 09:32:09.334 sandboxd[363]: ([571]) com.apple.geod(571) deny mach-lookup com.apple.CrashReporterSupportHelper

07/08/2015 09:32:13.132 spindump[496]: Saved hang report for Mail version 8.2 (2102) to /Library/Logs/DiagnosticReports/Mail_2015-08-07-093213_xxxxxxxxuser.hang

Reply

Answer 4

Macbrush

Level 1

39 points

Aug 8, 2015 6:06 AM in response to BigYinUK

I also have this problem on all of my Macs running 10.10.4. First I suspect it was the newly added hotmail account, so I disabled it to no avail. It is definitely something newly introduced by 10.10.4 update, and I hope Apple will fix it soon.

Reply

Answer 5

Linc Davis

Level 10

209,739 points

Aug 8, 2015 7:33 AM in response to BigYinUK

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 6

BigYinUK Author

Level 1

0 points

Aug 8, 2015 8:52 AM in response to Linc Davis

Thank you for your help.

1 Start time: 16:31:38 08/08/15

2

3 Revision: 1331

4

5 Model Identifier: iMac10,1

6 Memory: 4 GB

7 System Version: OS X 10.10.4 (14E46)

8 Kernel Version: Darwin 14.4.0

9 Time since boot: 35 minutes

10

11 SerialATA

12

13 Hitachi HDT721050SLA360

14

15 Bluetooth

16

17 Apple Wireless Keyboard

18 Apple Wireless Mouse

19

20 Energy (lifetime)

21

22 Terminal (UID 501): 15.87

23 bash (UID 0): 15.71

24 firefox (UID 501): 15.35

25

26 Root crontab

27

28 #SqzS VERSION = 1.0.0

29 #SYMANTEC SCHEDULER CRON ENTRIES. THESE ENTRIES ARE AUTOMATICALLY GENERATED

30 #PLEASE DO NOT EDIT.

31 # Enc=1 Name=DefaultLiveUpdateSchedule EvType1=1 EvType2=1 Sched=5

32 6 */4 * * * "/Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/Contents/schedLauncher" -u 1 "/Library/Application Support/Norton Solutions Support/LiveUpdate/LiveUpdate.app/Contents/MacOS/LiveUpdate" " " "oapp" "aevt" "exAG" "-update LUal -liveupdatequiet YES -liveupdateautoquit YES"

33 #SqzS END SYMANTEC CRON ENTRIES

34

35 Font issues: 4

36

37 DNS: 178.62.83.59 (static)

38

39 Listeners

40

41 cupsd: ipp

42 kdc: kerberos

43 launchd: afpovertcp

44 nfsd: 1023

45 rpc.lockd: 1017

46 rpc.rquotad: 1003

47 rpc.statd: exp1

48 rpcbind: sunrpc

49

50 Wi-Fi

51

52 Security: None

53

54 Diagnostic reports

55

56 2015-07-22 Mail hang x6

57 2015-07-22 SoundTap hang

58 2015-07-23 Mail hang

59 2015-07-24 Mail hang

60 2015-07-26 Mail hang

61 2015-08-02 Mail hang

62 2015-08-03 Mail hang

63 2015-08-04 Mail hang

64 2015-08-06 Mail hang

65 2015-08-07 Mail hang

66

67 HCI errors

68

69 Bus: 0x26 Addr: 3 Errors: 2

70

71 USB

72

73 USB Hi-Speed Bus

74

75 Host Controller Location: Built-in USB

76 Host Controller Driver: AppleUSBEHCI

77 Bus Number: 0x26

78

79 Internal Memory Card Reader

80

81 Location ID: 0x26500000 / 2

82 Current Available (mA): 500

83 Current Required (mA): 500

84 Built-In: Yes

85

86 USB Hi-Speed Bus

87

88 Host Controller Location: Built-in USB

89 Host Controller Driver: AppleUSBEHCI

90 Bus Number: 0x24

91

92 Built-in iSight

93

94 Location ID: 0x24400000 / 2

95 Current Available (mA): 500

96 Current Required (mA): 500

97 Built-In: Yes

98

99 USB Bus

100

101 Host Controller Location: Built-in USB

102 Host Controller Driver: AppleUSBOHCI

103 Bus Number: 0x06

104

105 BRCM2046 Hub

106

107 Location ID: 0x06100000 / 2

108 Current Available (mA): 500

109 Current Required (mA): 0

110 Built-In: Yes

111

112 Bluetooth USB Host Controller

113

114 Location ID: 0x06110000 / 3

115 Current Available (mA): 500

116 Current Required (mA): 0

117 Built-In: Yes

118

119 USB Bus

120

121 Host Controller Location: Built-in USB

122 Host Controller Driver: AppleUSBOHCI

123 Bus Number: 0x04

124

125 IR Receiver

126

127 Location ID: 0x04500000 / 2

128 Current Available (mA): 500

129 Current Required (mA): 100

130 Built-In: Yes

131

132 HID errors: 18

133

134 Kernel log

135

136 Aug 7 10:19:12 firefox (map: 0xffffff8013fe0960) triggered DYLD shared region unnest for map: 0xffffff8013fe0960, region 0x7fff8b800000->0x7fff8ba00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

137 Aug 7 11:12:07 firefox (map: 0xffffff80103c8e10) triggered DYLD shared region unnest for map: 0xffffff80103c8e10, region 0x7fff8b800000->0x7fff8ba00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

138 Aug 7 12:05:02 firefox (map: 0xffffff80103c8e10) triggered DYLD shared region unnest for map: 0xffffff80103c8e10, region 0x7fff8b800000->0x7fff8ba00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

139 Aug 7 12:50:52 /SourceCache/AppleFSCompression_kexts/AppleFSCompression-68.30.1/Compressors/Da taless/compressorType5Kext.c:537: Error: post_request error for /Volumes/Yosemite Backup/Backups.backupdb/Anonymous’s iMac/2015-08-07-123024/Macintosh HD/.DocumentRevisions-V100/PerUID/501/2/com.apple.documentVersions/UUID.txt: 35

140 Aug 7 12:50:52 decmpfs.c:1368:decmpfs_read_compressed: decmpfs_fetch_uncompressed_data err -35

141 Aug 7 12:51:07 /SourceCache/AppleFSCompression_kexts/AppleFSCompression-68.30.1/Compressors/Da taless/compressorType5Kext.c:537: Error: post_request error for /Volumes/Yosemite Backup/Backups.backupdb/Anonymous’s iMac/2015-08-07-123024/Macintosh HD/.DocumentRevisions-V100/PerUID/501/2/com.apple.documentVersions/UUID.txt: 35

142 Aug 7 12:51:07 decmpfs.c:1368:decmpfs_read_compressed: decmpfs_fetch_uncompressed_data err -35

143 Aug 7 13:18:44 firefox (map: 0xffffff80193ded20) triggered DYLD shared region unnest for map: 0xffffff80193ded20, region 0x7fff8b800000->0x7fff8ba00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

144 Aug 7 13:49:56 firefox (map: 0xffffff80193dec30) triggered DYLD shared region unnest for map: 0xffffff80193dec30, region 0x7fff8b800000->0x7fff8ba00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

145 Aug 7 13:55:53 komodo-bin (map: 0xffffff8013fe0d20) triggered DYLD shared region unnest for map: 0xffffff8013fe0d20, region 0x7fff8b800000->0x7fff8ba00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

146 Aug 7 15:32:03 firefox (map: 0xffffff8015efc000) triggered DYLD shared region unnest for map: 0xffffff8015efc000, region 0x7fff8c000000->0x7fff8c200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

147 Aug 7 15:52:25 firefox (map: 0xffffff80192ee960) triggered DYLD shared region unnest for map: 0xffffff80192ee960, region 0x7fff8c000000->0x7fff8c200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

148 Aug 7 17:03:42 firefox (map: 0xffffff801cc352d0) triggered DYLD shared region unnest for map: 0xffffff801cc352d0, region 0x7fff8c000000->0x7fff8c200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

149 Aug 7 21:33:30 firefox (map: 0xffffff801cc354b0) triggered DYLD shared region unnest for map: 0xffffff801cc354b0, region 0x7fff8c000000->0x7fff8c200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

150 Aug 7 21:38:52 firefox (map: 0xffffff801c7cb2d0) triggered DYLD shared region unnest for map: 0xffffff801c7cb2d0, region 0x7fff8c000000->0x7fff8c200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

151 Aug 8 09:39:43 firefox (map: 0xffffff801b5543c0) triggered DYLD shared region unnest for map: 0xffffff801b5543c0, region 0x7fff91a00000->0x7fff91c00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

152 Aug 8 10:56:06 0 1 AppleUSBCDCACMData: start - Find CDC driver for ACM data interface failed

153 Aug 8 10:56:43 USBF: 7980.378 AppleUSBEHCI::Found a transaction which hasn't moved in 2000 milliseconds on bus 0x26, timing out! (Addr: 3, EP: 1)

154 Aug 8 10:56:50 USBF: 7987.384 AppleUSBEHCI::Found a transaction which hasn't moved in 2000 milliseconds on bus 0x26, timing out! (Addr: 3, EP: 1)

155 Aug 8 10:59:02 0 1 AppleUSBCDCACMData: start - Find CDC driver for ACM data interface failed

156 Aug 8 10:59:02 en4: failed to restore 4 suspended link-layer multicast membership(s) (err=5)

157 Aug 8 15:59:20 firefox (map: 0xffffff801abf1a50) triggered DYLD shared region unnest for map: 0xffffff801abf1a50, region 0x7fff8ee00000->0x7fff8f000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

158 Aug 8 16:12:11 firefox (map: 0xffffff801abf14b0) triggered DYLD shared region unnest for map: 0xffffff801abf14b0, region 0x7fff8ee00000->0x7fff8f000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

159 Aug 8 16:12:37 firefox (map: 0xffffff801abf14b0) triggered DYLD shared region unnest for map: 0xffffff801abf14b0, region 0x7fff8ee00000->0x7fff8f000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

160 Aug 8 16:24:26 firefox (map: 0xffffff801abf14b0) triggered DYLD shared region unnest for map: 0xffffff801abf14b0, region 0x7fff8ee00000->0x7fff8f000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

161

162 System log

163

164 Aug 8 15:58:05 loginwindow: Login Window point of no return

165 Aug 8 15:58:05 com.apple.AmbientDisplayAgent: Set a breakpoint at CGSLogError to catch errors as they are logged.

166 Aug 8 15:58:05 com.apple.AmbientDisplayAgent: CGSGetNextEventRecord (Inline) connection 0xfb8b, 32768 bytes

167 Aug 8 15:58:05 loginwindow: Login Window Application Started

168 Aug 8 15:58:05 WindowServer: Set a breakpoint at CGSLogError to catch errors as they are logged.

169 Aug 8 15:58:05 WindowServer: WSSetWindowTransform: Singular matrix

170 Aug 8 15:58:06 loginwindow: Login Window Started Security Agent

171 Aug 8 15:58:06 UserEventAgent: Failed to copy info dictionary for bundle /System/Library/UserEventPlugins/alfUIplugin.plugin

172 Aug 8 15:58:06 WiFiAgent: securityd_message_with_reply_sync Failed to talk to secd after 4 attempts.

173 Aug 8 15:58:22 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

174 Aug 8 15:58:23 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

175 Aug 8 15:58:24 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

176 Aug 8 15:58:25 sandboxd: Invalid connection: com.apple.coresymbolicationd

177 Aug 8 15:58:25 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

178 Aug 8 15:58:26 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

179 Aug 8 15:58:27 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

180 Aug 8 15:58:30 mapspushd: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

181 Aug 8 15:58:30 CallHistorySyncHelper: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

182 Aug 8 15:58:36 bird: getting migration state failed, we'll retry next time the network changes: Error Domain=AOSErrorDomain Code=1000 "The operation couldn’t be completed. (AOSErrorDomain error 1000.)"

183 Aug 8 16:01:46 cloudphotosd: Unexpected unknown service state

184 Aug 8 16:01:46 cloudphotosd: Unexpected unknown service state

185 Aug 8 16:01:47 cloudphotosd: Unexpected unknown service state

186 Aug 8 16:12:03 nesessionmanager: Registered for dynamic store notifications on keys: (

187 "State:/Users/USER

188 )

189

190 launchd log

191

192 Aug 8 09:00:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.427: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

193 Aug 8 09:00:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.427: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

194 Aug 8 09:00:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.427: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

195 Aug 8 09:00:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.427: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

196 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

197 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

198 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

199 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

200 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

201 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

202 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

203 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

204 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

205 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

206 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted

207 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted

208 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted

209 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted

210 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted

211 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted

212 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted

213 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

214 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

215 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

216 Aug 8 15:58:07 com.apple.xpc.launchd.domain.pid.SecurityAgent.389: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

217

218 Console log

219

220 Aug 7 10:56:39 mds_stores: (/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T)(Error) IndexStore in bool setLocalizedAttributesLocked(datastore_info *, db_obj **, CFStringRef *, CFDictionaryRef *, CFIndex, StoreOptions, MDPlistContainerRef, bool, bool, uint32_t, CFArrayRef):Error:7 setting field:com_apple_system_prefs_keywords for oid:587979

221 Aug 7 11:05:59 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7ff2b9d2b1c0

222 Aug 7 11:05:59 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7ff2b9c2f5d0

223 Aug 7 11:13:03 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc291520cc0

224 Aug 7 11:13:03 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc29143b990

225 Aug 7 11:13:03 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc291439ba0

226 Aug 7 11:13:03 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc291523ea0

227 Aug 7 11:13:05 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc2914405a0

228 Aug 7 11:13:05 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc29151d310

229 Aug 7 11:13:05 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc291522b70

230 Aug 7 11:44:58 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc2915291d0

231 Aug 7 11:48:20 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc291441b20

232 Aug 7 12:40:16 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

233 Aug 7 12:40:16 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

234 Aug 7 12:40:16 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

235 Aug 7 12:50:40 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc4ea43ab90

236 Aug 7 13:58:03 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

237 Aug 7 13:59:34 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

238 Aug 7 13:59:35 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

239 Aug 8 08:44:36 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

240 Aug 8 09:00:39 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

241 Aug 8 09:00:39 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

242 Aug 8 15:57:32 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

243 Aug 8 15:58:21 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

244 Aug 8 15:58:21 backupd: Property list invalid for format: 200 (property lists cannot contain NULL)

245

246 Loaded kernel extensions

247

248 com.Cycling74.driver.Soundflower (2)

249 org.virtualbox.kext.VBoxDrv (5.0.0)

250 org.virtualbox.kext.VBoxNetAdp (5.0.0)

251 org.virtualbox.kext.VBoxNetFlt (5.0.0)

252 org.virtualbox.kext.VBoxUSB (5.0.0)

253

254 System services loaded

255

256 com.adobe.fpsaud

257 com.apple.Kerberos.kdc

258 - status: 1

259 com.apple.spindump

260 - status: 75

261 com.apple.watchdogd

262 com.bresink.system.securityagent3

263 com.bresink.system.securityagent3a

264 com.line6.l6ksettingmgr

265 com.oracle.java.Helper-Tool

266 com.vmware.launchd.vmware

267 - status: 71

268 org.wireshark.ChmodBPF

269

270 System services disabled

271

272 com.apple.mtmd

273 org.samba.winbindd

274 com.openssh.sshd

275 com.apple.mtmfs

276

277 Startup items

278

279 /Library/StartupItems/CoreDuoTemp/CoreDuoTemp

280 /Library/StartupItems/CoreDuoTemp/StartupParameters.plist

281 /Library/StartupItems/FanControlDaemon/FanControlDaemon

282 /Library/StartupItems/FanControlDaemon/StartupParameters.plist

283 /Library/StartupItems/NortonMissedTasks/NortonMissedTasks

284 /Library/StartupItems/NortonMissedTasks/StartupParameters.plist

285 /Library/StartupItems/SMC/SMC

286 /Library/StartupItems/SMC/smcdaemon

287 /Library/StartupItems/SMC/smclient

288 /Library/StartupItems/SMC/StartupParameters.plist

289 /Library/StartupItems/SMC/syguard

290 /Library/StartupItems/SMC/SymantecALS

291 /Library/StartupItems/SymAutoProtect/SAVAPComm.kext/Contents/Info.plist

292 /Library/StartupItems/SymAutoProtect/SAVAPComm.kext/Contents/MacOS/SAVAPComm

293 /Library/StartupItems/SymAutoProtect/StartupParameters.plist

294 /Library/StartupItems/SymAutoProtect/SymAutoProtect

295

296 User login items

297

298 MyDriveConnect

299 - missing value

300 iTunesHelper

301 - missing value

302 10.66.1.10-8888/status.html.webloc

303 - missing value

304 smcFanControl

305 - missing value

306 Dropbox

307 - missing value

308 Spotify

309 - missing value

310 Wondershare Helper Compact

311 - /Users/USER/Library/Application Support/Helper/Wondershare Helper Compact.app

312 Airfoil

313 - missing value

314 Mail

315 - /Applications/Mail.app

316 Calendar

317 - /Applications/Calendar.app

318 fuspredownloader

319 - /Users/USER/Library/Application Support/.FUS/fuspredownloader.app

320

321 User crontab

322

323 #SqzS VERSION = 1.0.0

324 #SYMANTEC SCHEDULER CRON ENTRIES. THESE ENTRIES ARE AUTOMATICALLY GENERATED

325 #PLEASE DO NOT EDIT.

326 # Enc=1 Name=DefaultLiveUpdateSchedule EvType1=1 EvType2=1 Sched=5

327 6 */4 * * * "/Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/Contents/schedLauncher" -u 1 "/Library/Application Support/Norton Solutions Support/LiveUpdate/LiveUpdate.app/Contents/MacOS/LiveUpdate" " " "oapp" "aevt" "exAG" "-update LUal -liveupdatequiet YES -liveupdateautoquit YES"

328 #SqzS END SYMANTEC CRON ENTRIES

329

330 iCloud errors

331

332 cloudd 42

333 comapple.InputMethodKit.UserDictionary 20

334 cloudphotosd 11

335 comapple.CloudPhotosConfiguration 9

336 Finder 5

337 bird 3

338 Spotlight 2

339

340 Continuity errors

341

342 sharingd 11

343

344 Restricted files: 4566

345

346 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

347 - mod date: Jul 21 10:23:50 2015

348 - size (B): 104

349 - checksum: 733095480

350

351 <?xml version="1.0" encoding="UTF-8"?>

352 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

353 <plist version="1.0">

354 <dict>

355 <key>Label</key>

356 <string>com.oracle.java.Java-Updater</string>

357 <key>ProgramArguments</key>

358 <array>

359 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

360 <string>-bgcheck</string>

361 </array>

362 <key>StandardErrorPath</key>

363 <string>/dev/null</string>

364 <key>StandardOutPath</key>

365 <string>/dev/null</string>

366 <key>StartCalendarInterval</key>

367 <dict>

368 <key>Hour</key>

369 <integer>16</integer>

370 <key>Minute</key>

371 <integer>53</integer>

372 <key>Weekday</key>

373 <integer>4</integer>

374 </dict>

375 </dict>

376

377 ...and 1 more line(s)

378

379 Contents of /Library/LaunchAgents/com.symantec.quickmenusa.application.plist

380 - mod date: Oct 31 01:56:46 2011

381 - size (B): 488

382 - checksum: 182589944

383

384 <?xml version="1.0" encoding="UTF-8"?>

385 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

386 <plist version="1.0">

387 <dict>

388 <key>KeepAlive</key>

389 <true/>

390 <key>Label</key>

391 <string>com.symantec.quickmenusa.application</string>

392 <key>ProgramArguments</key>

393 <array>

394 <string>/Library/Application Support/Symantec/SymSAQuickMenu/SymQuickMenu.app/Contents/MacOS/SymQuickMenu</s tring>

395 </array>

396 <key>RunAtLoad</key>

397 <true/>

398 </dict>

399 </plist>

400

401 Contents of /Library/LaunchAgents/com.symantec.savdiskmountnotify.application.plist

402 - mod date: Apr 2 16:16:40 2012

403 - size (B): 502

404 - checksum: 1974089599

405

406 <?xml version="1.0" encoding="UTF-8"?>

407 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

408 <plist version="1.0">

409 <dict>

410 <key>KeepAlive</key>

411 <true/>

412 <key>Label</key>

413 <string>com.symantec.savdiskmountnotify.application</string>

414 <key>ProgramArguments</key>

415 <array>

416 <string>/Library/Application Support/Symantec/AntiVirus/SAVDiskMountNotify.app/Contents/MacOS/SAVDiskMountNo tify</string>

417 </array>

418 <key>RunAtLoad</key>

419 <true/>

420 </dict>

421 </plist>

422

423 Contents of /Library/LaunchAgents/com.symantec.scannotification.application.plist

424 - mod date: Apr 2 16:16:40 2012

425 - size (B): 496

426 - checksum: 898239945

427

428 <?xml version="1.0" encoding="UTF-8"?>

429 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

430 <plist version="1.0">

431 <dict>

432 <key>KeepAlive</key>

433 <true/>

434 <key>Label</key>

435 <string>com.symantec.scannotification.application</string>

436 <key>ProgramArguments</key>

437 <array>

438 <string>/Library/Application Support/Symantec/AntiVirus/ScanNotification.app/Contents/MacOS/ScanNotification </string>

439 </array>

440 <key>RunAtLoad</key>

441 <true/>

442 </dict>

443 </plist>

444

445 Contents of /Library/LaunchAgents/com.symantec.symsecondarylaunch.application.plist

446 - mod date: Apr 2 16:16:40 2012

447 - size (B): 502

448 - checksum: 798050194

449

450 <?xml version="1.0" encoding="UTF-8"?>

451 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

452 <plist version="1.0">

453 <dict>

454 <key>KeepAlive</key>

455 <true/>

456 <key>Label</key>

457 <string>com.symantec.symsecondarylaunch.application</string>

458 <key>ProgramArguments</key>

459 <array>

460 <string>/Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/Contents/MacOS/SymSecondaryLa unch</string>

461 </array>

462 <key>RunAtLoad</key>

463 <true/>

464 </dict>

465 </plist>

466

467 Contents of /Library/LaunchDaemons/com.bresink.system.securityagent3.plist

468 - mod date: Jul 20 19:08:03 2011

469 - size (B): 722

470 - checksum: 3596337913

471

472 <?xml version="1.0" encoding="UTF-8"?>

473 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

474 <plist version="1.0">

475 <dict>

476 <key>Label</key>

477 <string>com.bresink.system.securityagent3</string>

478 <key>ProgramArguments</key>

479 <array>

480 <string>/Library/PrivilegedHelperTools/com.bresink.system.securityagent3</strin g>

481 </array>

482 <key>Sockets</key>

483 <dict>

484 <key>MasterSocket</key>

485 <dict>

486 <key>SockFamily</key>

487 <string>Unix</string>

488 <key>SockPathMode</key>

489 <integer>438</integer>

490 <key>SockPathName</key>

491 <string>/var/run/com.bresink.system.securityagent3.socket</string>

492 <key>SockType</key>

493 <string>Stream</string>

494 </dict>

495 </dict>

496 </dict>

497

498 ...and 1 more line(s)

499

500 Contents of /Library/LaunchDaemons/com.bresink.system.securityagent3a.plist

501 - mod date: Jul 28 10:33:52 2014

502 - size (B): 725

503 - checksum: 1758205685

504

505 <?xml version="1.0" encoding="UTF-8"?>

506 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

507 <plist version="1.0">

508 <dict>

509 <key>Label</key>

510 <string>com.bresink.system.securityagent3a</string>

511 <key>ProgramArguments</key>

512 <array>

513 <string>/Library/PrivilegedHelperTools/com.bresink.system.securityagent3a</stri ng>

514 </array>

515 <key>Sockets</key>

516 <dict>

517 <key>MasterSocket</key>

518 <dict>

519 <key>SockFamily</key>

520 <string>Unix</string>

521 <key>SockPathMode</key>

522 <integer>438</integer>

523 <key>SockPathName</key>

524 <string>/var/run/com.bresink.system.securityagent3a.socket</string>

525 <key>SockType</key>

526 <string>Stream</string>

527 </dict>

528 </dict>

529 </dict>

530

531 ...and 1 more line(s)

532

533 Contents of /Library/LaunchDaemons/com.line6.l6ksettingmgr.plist

534 - mod date: Jan 8 12:11:03 2014

535 - size (B): 562

536 - checksum: 604148678

537

538 <?xml version="1.0" encoding="UTF-8"?>

539 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

540 <plist version="1.0">

541 <dict>

542 <key>Label</key>

543 <string>com.line6.l6ksettingmgr</string>

544 <key>OnDemand</key>

545 <false/>

546 <key>ProgramArguments</key>

547 <array>

548 <string>/usr/local/bin/L6KSettingMgr</string>

549 </array>

550 <key>RunAtLoad</key>

551 <true/>

552 <key>ServiceDescription</key>

553 <string></string>

554 <key>UserName</key>

555 <string>root</string>

556 <key>WorkingDirectory</key>

557 <string>/usr/local/bin</string>

558 </dict>

559 </plist>

560

561 Contents of /Library/LaunchDaemons/com.vmware.launchd.vmware.plist

562 - mod date: Apr 8 04:32:31 2009

563 - size (B): 520

564 - checksum: 1467462916

565

566 <?xml version="1.0" encoding="UTF-8"?>

567 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"

568 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

569 <plist version="1.0">

570 <dict>

571 <key>Label</key>

572 <string>com.vmware.launchd.vmware</string>

573 <key>ProgramArguments</key>

574 <array>

575 <string>/Library/Application Support/VMware Fusion/boot.sh</string>

576 <string>--start</string>

577 </array>

578 <key>RunAtLoad</key>

579 <true/>

580 </dict>

581 </plist>

582

583 Contents of /Library/LaunchDaemons/org.virtualbox.startup.plist

584 - mod date: Jul 20 20:50:21 2015

585 - size (B): 76

586 - checksum: 3094394405

587

588 <?xml version="1.0" encoding="UTF-8"?>

589 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

590 <plist version="1.0">

591 <dict>

592 <key>Label</key> <string>org.virtualbox.startup</string>

593 <key>Disabled</key> <false/>

594 <key>RunAtLoad</key> <true/>

595 <key>KeepAlive</key> <false/>

596 <key>LaunchOnlyOnce</key> <true/>

597 <key>ProgramArguments</key>

598 <array>

599 <string>/Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh</string>

600 <string>restart</string>

601 </array>

602 </dict>

603 </plist>

604

605 Contents of /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist

606 - mod date: May 25 21:48:42 2015

607 - size (B): 382

608 - checksum: 1346761329

609

610 <?xml version="1.0" encoding="UTF-8"?>

611 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

612 <plist version="1.0">

613 <dict>

614 <key>Label</key>

615 <string>org.wireshark.ChmodBPF</string>

616 <key>RunAtLoad</key>

617 <true/>

618 <key>Program</key>

619 <string>/Library/Application Support/Wireshark/ChmodBPF/ChmodBPF</string>

620 </dict>

621 </plist>

622

623 Contents of /System/Library/LaunchDaemons/oscam.plist.save

624 - mod date: Jun 1 10:28:32 2011

625 - size (B): 343

626 - checksum: 452906270

627

628 <?xml version="1.0" encoding="UTF-8"?>

629 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

630 <plist version="1.0">

631 <dict>

632 <key>RunAtLoad</key>

633 <true/>

634 <key>Label</key>

635 <string>Oscam 1.00-unstable_svn Build 5230</string>

636 <key>Program</key>

637 <string>/usr/bin/oscam</string>

638 </dict>

639 </plist>

640

641 Contents of /private/etc/hosts

642 - mod date: Feb 19 13:15:55 2012

643 - size (B): 336

644 - checksum: 1505266782

645

646 127.0.0.1 localhost

647 255.255.255.255 broadcasthost

648 ::1 localhost

649 fe80::1%lo0 localhost

650 0.0.0.0 activate.adobe.com

651 0.0.0.0 practivate.adobe.com

652 0.0.0.0 cg-global.maxymiser.com

653

654 Contents of /private/etc/liveupdate.conf

655 - mod date: Oct 31 01:58:05 2011

656 - size (B): 861

657 - checksum: 706684447

658

659 hosts/0/url=http://liveupdate.symantecliveupdate.com:80

660 hosts/1/url=http://liveupdate.symantec.com:80

661 hosts/2/login:ENC=UUID

662 hosts/2/password:ENC=UUID

663 hosts/2/url=ftp://update.symantec.com/opt/content/onramp

664 workdir=/tmp

665 logfile=/Library/Application Support/Norton Solutions Support/LiveUpdate/liveupdt.log

666

667 Extensions

668

669 /Library/Extensions/BJUSBLoad.kext

670 - jp.co.canon.bj.print.BJUSBLoad

671 /Library/Extensions/Soundflower.kext

672 - com.Cycling74.driver.Soundflower

673 /System/Library/Extensions/BJUSBLoad.kext

674 - jp.co.canon.bj.print.BJUSBLoad

675 /System/Library/Extensions/EPSONUSBPrintClass.kext

676 - com.epson.print.kext.USBPrintClass

677 /System/Library/Extensions/FTDIUSBSerialDriver.kext

678 - com.FTDI.driver.FTDIUSBSerialDriver

679 /System/Library/Extensions/JMicronATA.kext

680 - com.jmicron.JMicronATA

681 /System/Library/Extensions/Line6Audio.kext

682 - com.line6.driver.xtaudio

683 /System/Library/Extensions/LogitechHIDDevices.kext

684 - com.Logitech.Control Center.HID Driver

685 /System/Library/Extensions/LogitechUnifying.kext

686 - com.Logitech.Unifying.HID Driver

687 /System/Library/Extensions/SoundTapVirtualAudioDevice.kext

688 - com.NCHSoftware.driver.SoundTapVirtualAudioDevice

689 /System/Library/Extensions/UsbEthernetGadget.kext

690 - com.tomtom.driver.UsbEthernetGadget

691 /System/Library/Extensions/hp_Deskjet_io_enabler.kext

692 - com.hp.print.hpio.Deskjet.kext

693 /System/Library/Extensions/hp_Inkjet1_io_enabler.kext

694 - com.hp.print.hpio.Inkjet1.kext

695 /System/Library/Extensions/hp_Inkjet3_io_enabler.kext

696 - com.hp.print.hpio.Inkjet3.kext

697 /System/Library/Extensions/hp_Inkjet4_io_enabler.kext

698 - com.hp.print.hpio.Inkjet4.kext

699 /System/Library/Extensions/hp_Inkjet5_io_enabler.kext

700 - com.hp.print.hpio.Inkjet5.kext

701 /System/Library/Extensions/hp_Inkjet8_io_enabler.kext

702 - com.hp.print.hpio.inkjet8.kext

703 /System/Library/Extensions/hp_Inkjet_io_enabler.kext

704 - com.hp.print.hpio.Inkjet.kext

705 /System/Library/Extensions/hp_Laserjet_io_enabler.kext

706 - com.hp.print.hpio.Laserjet.kext

707 /System/Library/Extensions/hp_Officejet_io_enabler.kext

708 - com.hp.print.hpio.Officejet.kext

709 /System/Library/Extensions/hp_PhotosmartPro_io_enabler.kext

710 - com.hp.print.hpio.PhotosmartPro.kext

711 /System/Library/Extensions/hp_Photosmart_io_enabler.kext

712 - com.hp.print.hpio.Photosmart.kext

713 /System/Library/Extensions/hp_qc_io_enabler.kext

714 - com.hp.hpio.hp_psa530_630_io_enabler

715 /System/Library/Extensions/speedit.kext

716 - com.increw.kext.speedit

717 /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns/ssudmdmcontrol.kext

718 - com.devguru.driver.SamsungACMControl

719 /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns/ssudmdmdata.kext

720 - com.devguru.driver.SamsungACMData

721 /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns/ssudmtp.kext

722 - com.devguru.driver.SamsungMTP

723 /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns/ssudserial.kext

724 - com.devguru.driver.SamsungSerial

725 /System/Library/Extensions/ssuddrv.kext

726 - com.devguru.driver.SamsungComposite

727

728 Applications

729

730 /Applications/Adobe Bridge CS3/Bridge CS3.app

731 - com.adobe.bridge2

732 /Applications/Adobe Help Viewer 1.1.app

733 - com.adobe.Adobe Help Viewer

734 /Applications/Adobe Photoshop Elements 6/Adobe Photoshop Elements 6/Adobe Photoshop Elements.app

735 - com.adobe.PhotoshopElements

736 /Applications/Adobe Photoshop Elements 6/Adobe Photoshop Elements.app

737 - com.adobe.PhotoshopElements

738 /Applications/Adobe Stock Photos CS3/Adobe Stock Photos CS3.app

739 - com.adobe.stockphotos-1.5

740 /Applications/Adobe/Adobe Help.app

741 - chc.UUID.1

742 /Applications/BBC iPlayer Desktop.app

743 - BBCiPlayerDesktop.UUID.1

744 /Applications/Camino.app

745 - org.mozilla.camino

746 /Applications/FileZilla.app

747 - de.filezilla

748 /Applications/Flip4Mac/WMV Player.app

749 - net.telestream.wmv.player

750 /Applications/HandBrake.app

751 - org.m0k.handbrake

752 /Applications/Kigo Video Converter.app

753 - com.kigo.videoconverter.converter

754 /Applications/Line6/Vyzex Pocket POD.app

755 - com.psicraft.vyzex.pocketpod

756 /Applications/Nvu.app

757 - org.mozilla.nvu

758 /Applications/OpenOffice.org.app

759 - org.openoffice.script

760 /Applications/Pref Setter.app

761 - net.nightproductions.prefSetter

762 /Applications/Soundflower/Soundflowerbed.app

763 - com.cycling74.Soundflowerbed

764 /Applications/Soundflower/Uninstall Soundflower.app

765 - N/A

766 /Applications/Switch.app

767 - com.nchsoftware.switch

768 /Applications/Symantec Solutions/LiveUpdate.app

769 - com.Symantec.LiveUpdate

770 /Applications/Symantec Solutions/Symantec Endpoint Protection.app

771 - com.Symantec.NAVX

772 /Applications/Symantec Solutions/Symantec Scheduler.app

773 - com.Symantec.Scheduler

774 /Applications/Unetbootin.app

775 - com.yourcompany.unetbootin

776 /Applications/Utilities/2009 Aluminum Wireless Keyboard Firmware Update.app

777 - com.apple.wirelesskeyboardfirmwareupdate2009update

778 /Applications/Utilities/Adobe AIR Application Installer.app

779 - com.adobe.air.ApplicationInstaller

780 /Applications/Utilities/Adobe Utilities.localized/Adobe Updater5/Adobe Updater.app

781 - "com.Adobe.ESD.AdobeUpdaterApplication"

782 /Applications/Utilities/Adobe Utilities.localized/ExtendScript Toolkit 2/ExtendScript Toolkit 2.app

783 - com.adobe.estoolkit-2.0

784 /Applications/Utilities/JDiskReport.app

785 - com.jgoodies.jdiskreport

786 /Applications/Utilities/LCC Connection Utility.app

787 - com.Logitech.Control Center.LCC Connection Utility

788 /Applications/Utilities/LCC Uninstaller.app

789 - com.Logitech.Control Center.LCC Uninstaller

790 /Applications/Utilities/vCardExplorer.app

791 - com.corefault.vCardExplorer

792 /Applications/VMware Fusion.app

793 - com.vmware.fusion

794 /Applications/VPN Autoconnect.app

795 - N/A

796 /Applications/Wireshark.app

797 - org.wireshark.Wireshark

798 /Applications/Wondershare AllMyMusic.app

799 - com.Wondershare.AllMyMusic

800 /Applications/X32-Edit.app

801 - com.music-group.X32-Edit

802 /Applications/YouTube Video Grabber.app

803 - com.niteowlsoftware.YouTubeVideoGrabber

804 /Applications/calibre.app

805 - net.kovidgoyal.calibre

806 /Applications/uTorrent.app

807 - com.bittorrent.uTorrent

808 /Library/Application Support/Adobe/Adobe Asset Services CS3/AssetServicesCS3.app

809 - com.adobe.assetServicesCS3

810 /Library/Application Support/Adobe/Installers/UUID/Setup.app

811 - com.adobe.Installers.Redirector

812 /Library/Application Support/Adobe/Installers/R1/Setup.app

813 - com.adobe.Installers.Setup

814 /Library/Application Support/Logitech.localized/Logitech Control Center.localized/Device Manager.app

815 - com.Logitech.Control Center.Device Manager

816 /Library/Application Support/Logitech.localized/Logitech Control Center.localized/LCC Pilot.app

817 - com.Logitech.Control Center.Pilot

818 /Library/Application Support/Logitech.localized/Logitech Control Center.localized/LCCDaemon.app

819 - com.Logitech.Control Center.Daemon

820 /Library/Application Support/Logitech.localized/Logitech Control Center.localized/Logitech Registration.app

821 - com.leadertech.powerReg

822 /Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

823 - com.microsoft.silverlight.sllauncher

824 /Library/Application Support/Norton Solutions Support/LiveUpdate/IRTool.app

825 - N/A

826 /Library/Application Support/Norton Solutions Support/LiveUpdate/IRUI.app

827 - com.symantec.IRUI

828 /Library/Application Support/Norton Solutions Support/LiveUpdate/LiveUpdate.app

829 - com.Symantec.LiveUpdate.background

830 /Library/Application Support/Norton Solutions Support/Scheduler/SymSecondaryLaunch.app

831 - com.Symantec.SymSecondaryLaunch

832 /Library/Application Support/Symantec/AntiVirus/SAVDiskMountNotify.app

833 - com.symantec.diskMountNotify

834 /Library/Application Support/Symantec/AntiVirus/ScanNotification.app

835 - com.symantec.scanNotification

836 /Library/Application Support/Symantec/AntiVirus/SmallScanner.app

837 - com.symantec.app.SmallScanner

838 /Library/Application Support/Symantec/SymSAQuickMenu/SymQuickMenu.app

839 - com.symantec.quickmenu.app

840 /Library/Application Support/VMware Fusion/Uninstall VMware Fusion.app

841 - com.vmware.fusion.uninstaller

842 /Library/Application Support/VMware Fusion/VMDKMounter.app

843 - com.vmware.vmdkmounter

844 /Library/Documentation/Help/Norton Help Scripts/FSlauncher

845 - N/A

846 /Library/Documentation/Help/Norton Help Scripts/LUlauncher

847 - N/A

848 /Library/Documentation/Help/Norton Help Scripts/NAVlauncher

849 - N/A

850 /Library/Documentation/Help/Norton Help Scripts/NDDlauncher

851 - N/A

852 /Library/Documentation/Help/Norton Help Scripts/NDElauncher

853 - N/A

854 /Library/Documentation/Help/Norton Help Scripts/NISlauncher

855 - N/A

856 /Library/Documentation/Help/Norton Help Scripts/NPClauncher

857 - N/A

858 /Library/Documentation/Help/Norton Help Scripts/NPFlauncher

859 - N/A

860 /Library/Documentation/Help/Norton Help Scripts/NSWlauncher

861 - N/A

862 /Library/Documentation/Help/Norton Help Scripts/NSlauncher

863 - N/A

864 /Library/Documentation/Help/Norton Help Scripts/NUMlauncher

865 - N/A

866 /Library/Documentation/Help/Norton Help Scripts/NetPreflauncher

867 - N/A

868 /Library/Documentation/Help/Norton Help Scripts/SAVlauncher

869 - N/A

870 /Library/Documentation/Help/Norton Help Scripts/SAVopendefinitionsinfo

871 - N/A

872 /Library/Documentation/Help/Norton Help Scripts/SAVopenhistory

873 - N/A

874 /Library/Documentation/Help/Norton Help Scripts/SAVopenquarantine

875 - N/A

876 /Library/Documentation/Help/Norton Help Scripts/SDPElauncher

877 - N/A

878 /Library/Documentation/Help/Norton Help Scripts/SDlauncher

879 - N/A

880 /Library/Documentation/Help/Norton Help Scripts/UElauncher

881 - N/A

882 /Library/Documentation/Help/Norton Help Scripts/VRlauncher

883 - N/A

884 /Library/Documentation/Help/Norton Help Scripts/WIlauncher

885 - N/A

886 /Library/Documentation/Help/Norton Help Scripts/openconnectedusers

887 - N/A

888 /Library/Documentation/Help/Norton Help Scripts/opendefinitionsinfo

889 - N/A

890 /Library/Documentation/Help/Norton Help Scripts/openhistory

891 - N/A

892 /Library/Documentation/Help/Norton Help Scripts/openlog

893 - N/A

894 /Library/Documentation/Help/Norton Help Scripts/openmainwindowdiskview

895 - N/A

896 /Library/Documentation/Help/Norton Help Scripts/openmainwindowfileview

897 - N/A

898 /Library/Documentation/Help/Norton Help Scripts/openprefs

899 - N/A

900 /Library/Documentation/Help/Norton Help Scripts/openquarantine

901 - N/A

902 /Library/Documentation/Help/Norton Help Scripts/openremindersprefs

903 - N/A

904 /Library/Documentation/Help/Norton Help Scripts/openrepairprefs

905 - N/A

906 /Library/Documentation/Help/Norton Help Scripts/openscanprefs

907 - N/A

908 /Library/Documentation/Help/Norton Help Scripts/openselftest

909 - N/A

910 /Library/Documentation/Help/Norton Help Scripts/opensetup

911 - N/A

912 /Library/Documentation/User Guides And Information.localized/Apple Hardware Test Read Me.app

913 - com.apple.AppleHardwareTestReadMe

914 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app

915 - com.adobe.air.ApplicationInstaller

916 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app

917 - com.adobe.air.Template

918 /Library/Image Capture/TWAIN Data Sources/Canon MP140 series.ds

919 - com.twainds.mp140.scangear12100.canon

920 /Library/Services/ScanService.service

921 - com.symantec.ScanService

922 /Users/USER/Documents/TomTom/HOME/Backup/GO/Backup01/InternalMemory/TomTom HOME Install.app

923 - com.MindVision.VISEX

924 /Users/USER/Downloads/AirPlayer.app

925 - com.sadun.AirPlayer

926 /Users/USER/Downloads/Diaita1.07/Diaita 1.07.app

927 - N/A

928 /Users/USER/Downloads/Fractal Chaos(mac)/Fractal Chaos.app

929 - N/A

930 /Users/USER/Downloads/LCC Installer.app

931 - com.Logitech.Control Center.Update

932 /Users/USER/Downloads/Launch! Usage Meter.app

933 - com.curmi.Launch!UsageMeter

934 /Users/USER/Downloads/Power Fractal.app

935 - com.daugerresearch.PowerFractal

936 /Users/USER/Downloads/UA-101_Mac_10.6_Driver_v100/UA101_Uninstaller.app

937 - N/A

938 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/AssetServicesCS3.app

939 - com.adobe.assetServicesCS3

940 /Users/USER/Library/Application Support/Adobe/Adobe/Installers/UUID/Setup.app

941 - com.adobe.Installers.Redirector

942 /Users/USER/Library/Application Support/Adobe/Adobe/Installers/R1/Setup.app

943 - com.adobe.Installers.Setup

944 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

945 - com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

946 /Users/USER/Music/iTunes/iTunes Media/Music/Fantom/FANTOMX_Uninstaller.app

947 - N/A

948

949 Frameworks

950

951 /Library/Frameworks/Adobe AIR.framework

952 - com.adobe.AIR

953 /Library/Frameworks/L6TWXG.framework

954 - N/A

955 /Library/Frameworks/TSLicense.framework

956 - net.telestream.license

957

958 PrefPane

959

960 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

961 - com.oracle.java.JavaControlPanel

962 /Library/PreferencePanes/Flash Player.prefPane

963 - com.adobe.flashplayerpreferences

964 /Library/PreferencePanes/Flip4Mac WMV.prefPane

965 - net.telestream.wmv.prefpane

966 /Library/PreferencePanes/Line6AudioMIDI.prefPane

967 - com.line6.audiomidiprefpane

968 /Library/PreferencePanes/SymAutoProtect.prefPane

969 - SymAutoProtect

970 /Library/PreferencePanes/SymantecSAQuickMenu.prefPane

971 - com.symantec.quickmenusa.prefpane

972

973 Bundles

974

975 /Library/Application Support/Adobe/APE/3.101/adbeapecore.framework/Versions/A/Resources/Flash Player.plugin

976 - com.macromedia.FlashPlayer-10.4-10.5.plugin

977 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/ASEFormat.plugin

978 - com.adobe.aseformat

979 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/BMP.plugin

980 - null

981 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/Cineon.plugin

982 - null

983 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/EPS Parser.plugin

984 - null

985 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/GIF.plugin

986 - null

987 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/JPEG2000.plugin

988 - null

989 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/OpenEXR.plugin

990 - null

991 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/PBM.plugin

992 - null

993 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/PCX.plugin

994 - null

995 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/PNG.plugin

996 - null

997 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/Pixar.plugin

998 - null

999 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/Radiance.plugin

1000 - null

1001 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/Targa.plugin

1002 - null

1003 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/WBMP.plugin

1004 - null

1005 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/altiveccore.plugin

1006 - null

1007 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/dicom.plugin

1008 - com.adobe.dicom

1009 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/mmxcore.plugin

1010 - null

1011 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/multiprocessor support.plugin

1012 - null

1013 /Library/Application Support/Adobe/Adobe Asset Services CS3/Plug-Ins/ppccore.plugin

1014 - null

1015 /Library/Application Support/Adobe/Adobe Asset Services CS3/Required/Photoshop Adapter.plugin

1016 - null

1017 /Library/Application Support/Adobe/Plug-Ins/CS3/File Formats/Camera Raw.plugin

1018 - com.adobe.CameraRaw

1019 /Library/Application Support/Canon/ScanGear/Plugins/CNCL2006.plugin

1020 - jp.co.Canon.bj.scan.2006

1021 /Library/Application Support/Canon/ScanGear/Plugins/MPScannerUSB4.plugin

1022 - jp.co.Canon.mp.scanner.usb4

1023 /Library/Application Support/Canon/ScanGear/Plugins/acrop.plugin

1024 - jp.co.canon.scangear.acrop

1025 /Library/Application Support/Canon/ScanGear/Plugins/ausm.plugin

1026 - jp.co.canon.scangear.ausm

1027 /Library/Application Support/Canon/ScanGear/Plugins/balco.plugin

1028 - jp.co.canon.scangear.balco

1029 /Library/Application Support/Canon/ScanGear/Plugins/cubs206.plugin

1030 - jp.co.canon.scangear.cubs206

1031 /Library/Application Support/Canon/ScanGear/Plugins/filter.plugin

1032 - jp.co.canon.scangear.filter

1033 /Library/Application Support/Canon/ScanGear/Plugins/gercg.plugin

1034 - jp.co.canon.scangear.gercg

1035 /Library/Application Support/Canon/ScanGear/Plugins/hsl.plugin

1036 - jp.co.canon.scangear.hsl

1037 /Library/Application Support/Canon/ScanGear/Plugins/mc04.plugin

1038 - jp.co.canon.scangear.mc04

1039 /Library/Application Support/Canon/ScanGear/Plugins/mld1210.plugin

1040 - jp.co.canon.scangear.mld2006

1041 /Library/Application Support/Canon/ScanGear/Plugins/moire500.plugin

1042 - jp.co.canon.scangear.moire500

1043 /Library/Application Support/Canon/ScanGear/Plugins/qare.plugin

1044 - jp.co.canon.scangear.qare

1045 /Library/Application Support/Canon/ScanGear/Plugins/rotate.plugin

1046 - jp.co.canon.scangear.rotate

1047 /Library/Application Support/Canon/ScanGear/Plugins/rstcol230.plugin

1048 - jp.co.canon.scangear.rstcol230

1049 /Library/Application Support/Canon/ScanGear/Plugins/smac.plugin

1050 - jp.co.canon.scangear.smac

1051 /Library/Application Support/Canon/ScanGear/Plugins/stad2010.plugin

1052 - jp.co.canon.scangear.stad2010

1053 /Library/Application Support/Canon/ScanGear/Plugins/zoom.plugin

1054 - jp.co.canon.scangear.zoom

1055 /Library/Audio/MIDI Drivers/EmagicUSBMIDIDriver.plugin

1056 - info.emagic.driver.unitor

1057 /Library/Audio/MIDI Drivers/Line6MIDI.plugin

1058 - com.line6.midi.driver.PODxt

1059 /Library/Contextual Menu Items/FusionVMDKPlugIn.plugin

1060 - com.vmware.FusionVMDKPlugIn

1061 /Library/Contextual Menu Items/SAVCMPlugIn.plugin

1062 - com.symantec.NAVCMPlugIn

1063 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

1064 - com.adobe.adobecp

1065 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

1066 - com.macromedia.FlashPlayer-10.6.plugin

1067 /Library/Internet Plug-Ins/DirectorShockwave.plugin

1068 - com.adobe.shockwave.pluginshim

1069 /Library/Internet Plug-Ins/Flash Player.plugin

1070 - com.macromedia.Flash Player.plugin

1071 /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

1072 - net.telestream.wmv.plugin

1073 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

1074 - com.oracle.java.JavaAppletPlugin

1075 /Library/Internet Plug-Ins/Silverlight.plugin

1076 - com.microsoft.SilverlightPlugin

1077 /Library/Internet Plug-Ins/iPhotoPhotocast.plugin

1078 - com.apple.plugin.iPhotoPhotocast

1079 /Library/QuickLook/GBQLGenerator.qlgenerator

1080 - com.apple.garageband.quicklookgenerator

1081 /Library/QuickLook/VMware Fusion QuickLook.qlgenerator

1082 - com.vmware.fusion.quicklook

1083 /Library/Spotlight/GBSpotlightImporter.mdimporter

1084 - com.apple.garageband.spotlightimporter

1085 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

1086 - com.skype.skypeabdialer

1087 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

1088 - com.skype.skypeabsms

1089 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/ASEFormat.plugin

1090 - com.adobe.aseformat

1091 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/BMP.plugin

1092 - null

1093 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/Cineon.plugin

1094 - null

1095 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/EPS Parser.plugin

1096 - null

1097 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/GIF.plugin

1098 - null

1099 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/JPEG2000.plugin

1100 - null

1101 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/OpenEXR.plugin

1102 - null

1103 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/PBM.plugin

1104 - null

1105 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/PCX.plugin

1106 - null

1107 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/PNG.plugin

1108 - null

1109 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/Pixar.plugin

1110 - null

1111 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/Radiance.plugin

1112 - null

1113 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/Targa.plugin

1114 - null

1115 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/WBMP.plugin

1116 - null

1117 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/altiveccore.plugin

1118 - null

1119 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/dicom.plugin

1120 - com.adobe.dicom

1121 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/mmxcore.plugin

1122 - null

1123 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/multiprocessor support.plugin

1124 - null

1125 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Plug-Ins/ppccore.plugin

1126 - null

1127 /Users/USER/Library/Application Support/Adobe/Adobe/Adobe Asset Services CS3/Required/Photoshop Adapter.plugin

1128 - null

1129 /Users/USER/Library/Application Support/Adobe/Adobe/Plug-Ins/CS3/File Formats/Camera Raw.plugin

1130 - com.adobe.CameraRaw

1131 /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/18.0.0.209/PepperFlashPlayer.plugin

1132 - com.macromedia.PepperFlashPlayer.pepper

1133 /Users/USER/Library/Widgets/BBC Weather.wdgt

1134 - com.olivetoast.widget.bbcweather

1135 /Users/USER/Library/Widgets/Calorie Counter.wdgt

1136 - com.jonbrown.widget.CalorieCounter

1137 /Users/USER/Library/Widgets/Currency Converter.wdgt

1138 - net.palple.widget.currencyconverter

1139 /Users/USER/Library/Widgets/HexCalculator.wdgt

1140 - com.robrohan.widget.HexCalculator

1141 /Users/USER/Library/Widgets/Wunderground Weather.wdgt

1142 - com.wunderground.Widget

1143 /Users/USER/Library/Widgets/iStat nano.wdgt

1144 - com.iSlayer.iStatnanoV2.widget

1145 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

1146 - com.skype.skypeabdialer

1147 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

1148 - com.skype.skypeabsms

1149 /usr/local/lib/codecs/cook.bundle

1150 - org.HelixCommunity.cook

1151

1152 Library paths

1153

1154 /Incompatible Software/Rapport/bin/RapportDaishi.dylib

1155 /Incompatible Software/Rapport/bin/RapportKadkadai.dylib

1156 /Incompatible Software/Rapport/bin/RapportKadkadai538.dylib

1157 /Incompatible Software/Rapport/bin/RapportKobo6.dylib

1158 /Incompatible Software/Rapport/bin/RapportNichiren.dylib

1159 /Incompatible Software/Rapport/bin/RapportTanzan17.dylib

1160 /Incompatible Software/Rapport/bin/RapportTanzan24.dylib

1161 /Incompatible Software/Rapport/bin/RapportTanzan25.dylib

1162 /Incompatible Software/Rapport/bin/RapportTanzan26.dylib

1163 /Incompatible Software/Rapport/bin/RapportTanzan27.dylib

1164 /Incompatible Software/Rapport/bin/RapportTanzan28.dylib

1165 /Incompatible Software/Rapport/bin/RapportTanzan29.dylib

1166 /Incompatible Software/Rapport/bin/RapportTanzan30.dylib

1167 /Incompatible Software/Rapport/bin/RapportTanzan31.dylib

1168 /Incompatible Software/Rapport/bin/RapportTanzan32.dylib

1169 /Incompatible Software/Rapport/bin/RapportTanzan33.dylib

1170 /Incompatible Software/Rapport/bin/RapportTanzan36.dylib

1171 /Incompatible Software/Rapport/bin/RapportUtil1.dylib

1172 /Incompatible Software/Rapport/bin/RapportWKLibre534.dylib

1173 /Incompatible Software/Rapport/bin/RapportWKLibre537.dylib

1174 /Incompatible Software/Rapport/bin/RapportWKLibre538.dylib

1175 /Incompatible Software/Rapport/bin/RapportWR.dylib

1176 /Incompatible Software/Rapport/bin/librooksbas.dylib

1177 /Incompatible Software/Rapport/bin/librooksmce.dylib

1178 /Incompatible Software/Rapport/bin/trf.dylib

1179 /Incompatible Software/Rapport/store/exts/RapportGP/baseline/RapportGP.dylib

1180 /Incompatible Software/Rapport/store/exts/RapportMS/baseline/RapportMS.dylib

1181 /Library/Application Support/Adobe/APE/3.101/adbeapecore.framework/Versions/A/Resources/WebKit.dylib

1182 /Library/Application Support/Adobe/OOBE/PDApp/DWA/DWANative.dylib

1183 /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdCaps.dylib

1184 /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdFS.dylib

1185 /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKEngine.dylib

1186 /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/AdobePIM.dylib

1187 /Library/Application Support/Adobe/OOBE/PDApp/LWA/PWANative.dylib

1188 /Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_caps.dylib

1189 /Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_oobelib.dylib

1190 /Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_upgrade.dylib

1191 /Library/Application Support/Adobe/OOBE/PDApp/UWA/UWANative.dylib

1192 /Library/Application Support/Adobe/OOBE/PDApp/core/AdobePIM.dylib

1193 /Library/Application Support/Symantec/AntiVirus/Engine/libecomlodr.dylib

1194 /Library/Application Support/Symantec/AntiVirus/Engine20150805/libecomlodr.dylib

1195 /Library/Application Support/Symantec/AntiVirus/Engine20150806/libecomlodr.dylib

1196 /Library/Application Support/Symantec/AntiVirus/Hub/libecomlodr.dylib

1197 /Library/Application Support/VMware Fusion/libpixops.dylib

1198 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

1199 /Library/Frameworks/L6TWXG.framework/Versions/A/Data/twx/L6TWX_u.dylib

1200 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/3.0/Frameworks /Core.framework/Versions/3.0/Libraries/libHPIOnetsnmp.5.dylib

1201 /Library/Printers/hp/Frameworks/HPSmartX.framework/Versions/B/Resources/lib/SxC FReader.dylib

1202 /Library/Printers/hp/Frameworks/HPSmartX.framework/Versions/C/Resources/lib/SxC FReader.dylib

1203 /Users/USER/Library/Application Support/Firefox/Profiles/33t3ysbu.default/gmp-gmpopenh264/1.4/libgmpopenh264.dy lib

1204 /Users/USER/Downloads/D2XX/Object/10.4/Objects-normal/i386/libftd2xx.1.0.4.dyli b

1205 /Users/USER/Downloads/D2XX/Object/10.4/Objects-normal/ppc/libftd2xx.1.0.4.dylib

1206 /Users/USER/Downloads/D2XX/Object/10.5-10.6/Objects-normal/i386/libftd2xx.1.0.4 .dylib

1207 /Users/USER/Downloads/D2XX/Object/10.5-10.6/Objects-normal/ppc/libftd2xx.1.0.4. dylib

1208 /Users/USER/Downloads/D2XX/Object/10.5-10.6/Objects-normal/x86_64/libftd2xx.1.0 .4.dylib

1209 /Users/USER/Downloads/D2XX/bin/10.4/libftd2xx.1.0.4.dylib

1210 /Users/USER/Downloads/D2XX/bin/10.5 - 10.6/libftd2xx.1.0.4.dylib

1211 /Users/USER/Library/Application Support/Firefox/Profiles/nmtfpnqv.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

1212 /Users/USER/Library/Application Support/Firefox/Profiles/nmtfpnqv.default/gmp-gmpopenh264/1.3/libgmpopenh264.dy lib

1213 /Users/USER/Library/Application Support/Firefox/Profiles/nmtfpnqv.default/gmp-gmpopenh264/1.4/libgmpopenh264.dy lib

1214 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.823/_platform_specific/mac_x64/libwidev inecdm.dylib

1215 /Users/USER/Library/Thunderbird/Profiles/g1vyt9cc.default/extensions/{UUID}/com ponents/libcalbasecomps.dylib

1216 /Users/USER/Library/Application Support/Firefox/Profiles/jv9u41hs.default/gmp-gmpopenh264/1.3/libgmpopenh264.dy lib

1217 /Users/USER/Library/Application Support/Firefox/Profiles/6k8g2qet.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

1218 /Users/USER/Library/Application Support/Firefox/Profiles/6k8g2qet.default/gmp-gmpopenh264/1.3/libgmpopenh264.dy lib

1219 /usr/lib/libgutenprint.2.0.3.dylib

1220 /usr/lib/libsymsea.1.1.0.dylib

1221 /usr/local/lib/libftd2xx.1.0.4.dylib

1222

1223 Modifications

1224

1225 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat

1226

1227 Bad kernel extensions

1228

1229 /System/Library/Extensions/speedit.kext

1230 /System/Library/Extensions/UsbEthernetGadget.kext

1231

1232 Installations

1233

1234 Image2icon: 8/7/15, 3:48 PM

1235 Image2icon: 8/5/15, 3:14 PM

1236 Java 8 Update 51: 8/2/15, 4:54 PM

1237 Canon IJ Printer Driver: 8/1/15, 4:37 PM

1238 MyDrive Connect: 8/1/15, 2:34 PM

1239

1240 Elapsed time (sec): 323

Reply

Answer 7

Linc Davis

Level 10

209,739 points

Aug 8, 2015 10:41 AM in response to BigYinUK

A

You have an old and incomplete installation of a Symantec "anti-virus" product. Remove it completely.

Any third-party software that doesn't install from the App Store or by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

B

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities ▹ Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

 ▹ Restart

from the menu bar.

C

Back up all data before proceeding.

Launch the Font Book application and validate all fonts. You must select the fonts in order to validate them. See the built-in help and this support article for instructions. If Font Book finds any issues, resolve them.

Start up in safe mode to rebuild the font caches. Restart as usual and test.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t start in safe mode. In that case, ask for instructions.

If you still have problems, then from the Font Book menu bar, select

File ▹ Restore Standard Fonts...

You'll be prompted to confirm, and then to enter your administrator login password.

Also note that if you deactivate or remove any built-in fonts, for instance by using a third-party font manager, the system may become unstable.

D

This procedure will delete certain temporary and cache files used by system processes. The files are automatically generated and don't contain any of your data. Occasionally they can become corrupt and cause problems such as yours.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/var/folders/zz

Right-click or control-click the highlighted line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with a subfolder named "zz" selected. Move that subfolder to the Trash. You may be prompted for your administrator login password. Restart the computer and empty the Trash.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

E

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/.Spotlight-V100

Right-click or control-click the highlighted line and select

Services ▹ Open

from the contextual menu. A folder should open with a subfolder named ".Spotlight-V100" selected. Move the subfolder to the Trash. You may be prompted for your administrator login password.

Restart the computer. If you try to search now from the magnifying-glass icon in the top right corner of the display, there should be an indication that indexing is in progress.

You can't see the folder in the Trash because it's invisible. The next time you empty the Trash, it should be deleted.

F

Back up all data.

Unlock the Network preference pane, if necessary, by clicking the lock icon in the lower left corner and entering your password. Cllck Advanced and select the TCP/IP tab in the sheet that drops down. Near the top you may see this:

Configure IPv4: Using DHCP

If that's not what you see, stop here and ask for instructions.

Otherwise, select the DNS tab and delete all the DNS Servers from the list on the left by selecting them and clicking the minus-sign button below. Click OK, then Apply.

Open the DNS tab again. The server list should have been automatically repopulated with at least one address, and you should have normal Internet access. If so, you can close the preference pane. Otherwise, go back to the TCP/IP tab and click

Renew DHCP Lease

Check the DNS server list again. If it's still empty, enter this:

8.8.8.8

That's Google DNS, which I don't recommend for more than temporary use. Click OK, then Apply, and ask for instructions.

G

If you still have problems after taking all the above steps, remove "VirtualBox" and see whether there's an improvement.

H

You're on an unsecured Wi-Fi network. If it's your network, that's very dangerous. Change your router's settings so that it uses WPA 2 Personal encryption. If it doesn't support that standard, it should be replaced. I can't give you specific instructions for changing the setting, because all routers are different. Refer to the manufacturer's documentation.

Reply

Answer 8

Eric Root

Level 10

685,185 points

Aug 8, 2015 10:59 AM in response to BigYinUK

If installed, get rid of Trusteer Rapport. It doesn’t work well under Mac OS.

Trusteer Rapport Uninstall

Reply

Answer 9

Linc Davis

Level 10

209,739 points

Aug 8, 2015 3:35 PM in response to Linc Davis

Since Rapport is not installed, you can't, and don't need to, uninstall it.

Reply

Answer 10

BigYinUK Author

Level 1

0 points

Aug 9, 2015 2:13 AM in response to Linc Davis

During the Yosemite install it flagged various bits of "incompatible software" and Trusteer was one of them (there were others of course). Bit of a shame the installer failed to notice the incorrect version of Symantec Endpoint Protection! I must admit, I didn't check but would have expected SEP to keep up to date as its a perpetual licence on this machine.

Anyway, thanks for the info Linc and I have uninstalled it. Will have to see how it goes.

Regards

Reply

Answer 11

BigYinUK Author

Level 1

0 points

Aug 9, 2015 4:26 AM in response to Linc Davis

OK, I've run through all that list.

A - Old version of SEP removed. I will put the latest build version on once this problem is resolved.

B - Run successfully.

C - Found 4 "slight" problems with the Palatino font. I don't use this font so removed it.

D - Run

E - Removed folder and rebuilt indexes.

F - OS X auto adds my router as Primary DNS - This is a problem as its auto-configured by my ISP to use their DNS's (and that can't be changed). I've had intermittent issues with their DNS on all the computers on my network, not just this iMac. I know its not ideal but I've been using Google's 8.8.8.8 for years now and without any problems. Will try and find another to use if I can.

G - Sorry, Virtualbox is not the culprit here - I'd already been having this problem with Mail before installing Virtualbox.

H - Lolz - Yes, I agree but I had temporarily turned off the WPA2 because at the time we had guests staying and they were having trouble entering the password 😟 Normally the connection *is* WPA2 secured. ** We live on a farm miles from anywhere so nobody is going to snoop unless they have a very big antenna indeed.

Result of all this - Mail still crashes. Its better now though, it crashes every time I run it 😟

I'm going to rebuild the entire system onto a new SSD I've ordered. If that doesn't fix it, I'm going back to Microsloth.

BTW Yosemite works fine on my Air, with all the same software (inc SEP) installed. Mail has never hung on that.

Thanks for you help.

Regards

Reply

Answer 12

Linc Davis

Level 10

209,739 points

Aug 9, 2015 6:28 AM in response to BigYinUK

There are reports that this issue is caused by a bug. The following workarounds seem to have helped in some cases. Try them and see whether there's an improvement.

1. Hold down the shift key while launching Mail, or the option key while quitting.

2. Leave the Mail preferences window open when quitting.

3. Eliminate all subfolders of mailboxes in IMAP and Exchange accounts. You may have to access the accounts in a web browser to do this; e.g., for an iCloud Mail account, you would sign in to icloud.com.

Reply

Answer 13

BigYinUK Author

Level 1

0 points

Aug 9, 2015 7:25 AM in response to Linc Davis

Hi Linc

I'll try with suggestion 1 as that seems to be when I have the problem. So far that seems to work (Mail was crashing nearly every time I started it today).

I don't have any IMAP mail accounts, they're all POP.

Reply

Answer 14

BigYinUK Author

Level 1

0 points

Aug 10, 2015 2:21 PM in response to BigYinUK

Hi Linc et al

I've install 10.10.4 onto a brand new 512Gb SSD. No programs or data (other than Mail) yet, BUT Mail crashes in exactly the same way as it did on my old installation.

ALL that is on the disk atm is OS X. I am going to re-installing those programs I want and copying over data I need. I am NOT going to be restoring from a Time Machine backup.

I copied over the mail data manually from my old systems backups and am having EXACTLY the same symptoms. As it was before, it is totally random, sometimes it'll start without a hang or it'll hang and I'll have to force quit and restart Mail.

Before I started copying over data there was nothing in the /Mail/V2 folder.

Starting Mail whilst holding the SHIFT key down seems to work fine every time.

Any other suggestions?

Regards

Reply

Answer 15

BigYinUK Author

Level 1

0 points

Aug 15, 2015 1:17 AM in response to BigYinUK

Just in case anyone *is* interested, this (my) problem is not fixed by the 10.10.5 update.

In fact its slightly more unstable in that Mail will sometimes start normally, all messages displayed etc but then crashes during use - Something it did not do at 10.10.4.

Not well done Apple, very disappointing 😟

Regards all

Reply