Hey,
When I try to open iBooks it starts launching and nothing happens. A cursor changes to a rainbow wheel, I can't open or start anything. I have to restart laptop to come back the Macbook to life.
Thanks.
MacBook Pro with Retina display, OS X Yosemite (10.10.5)
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
The title of the Console window should be All Messages. If it isn't, select
SYSTEM LOG QUERIES ▹ All Messages
from the log list on the left. If you don't see that list, select
View ▹ Show Log List
from the menu bar at the top of the screen.
Click the Clear Display icon in the toolbar. Then take an action that isn't working the way you expect. Select any lines that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
Please don't indiscriminately dump thousands of lines from the log into this discussion.
Please don't post screenshots of log messages—post the text.
Some private information, such as your name or email address, may appear in the log. Anonymize before posting.
When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.
hello,
I hope I've copied the right thing. See Pastebin below:
I'll do my best to correct something if I am wrong. the overall situation makes me feel bad as I like reading a lot.
Thanks.
Back up all data.
Launch the Keychain Access application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
From the Category list in the lower left corner of the window, select My Certificates. In the list of certificates on the right, there may be one or more have a name that begins with "VeriSign". Export each such certificate by dragging it to the Desktop, then delete it from the keychain. If there are any certificates marked with a red "X" as expired or invalid, regardless of name, delete them without exporting.
Next, select Certificates from the Category list. Look carefully at the list of certificates in the right side of the window. If any of them has a blue-and-white plus sign in the icon, double-click it. An inspection window will open. Click the disclosure triangle labeled Trust to disclose the trust settings for the certificate. From the menu labeled
Secure Sockets Layer (SSL)
select
no value specified
Close the inspection window. You'll be prompted for your administrator password to update the settings.
Now open the same inspection window again, and select
When using this certificate: Use System Defaults
Save the change in the same way as before.
Revert all the certificates with non-default trust settings. Never again change any of those settings.
Again, delete all expired or invalid certificates.
Log out or restart the computer. Test. If all is now well, back up again, then delete the certificates you exported to the Desktop.
Hello Linc,
Thanks for quick updates! I did what you told me but the problem still appears when I open iBooks. I had only one certificate in 'My certificates' section which I dragged to desktop. However, its name starts with 'com.apple... etc.'. There was no 'VeriSign' certificate at all. I also fixed 2 certificates in 'Certificates' section and deleted one with red X in the same section.
When I rebooted Mac and opened the app problem appeared once again in the same way. The only way to restore laptop is to reboot Mac.
I hope I can do something with it because I am frightened of danger level. We don't have apple support in Belarus and if the problem is worse than I expect it might be a huge issue for me to fix it.
Thanks.
Please read this whole message before doing anything.
This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
Step 1
The purpose of this step is to determine whether the problem is localized to your user account.
Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
Test while logged in as Guest. Same problem?
After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
Step 2
The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Please take this step regardless of the results of Step 1.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.
Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.
The Step 1 worked perfectly well. I started iBooks without any delay. The Step 2 showed the same results crashing the whole system in the same way as it usually does.
Sorry for being absence for such a long time. I had continuous business trip without Mac on me.
1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.
Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.
Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.
Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
4. Here's a general summary of what you need to do, if you choose to proceed:
☞ Copy a particular line of text to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.
5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.
You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.
If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.
8. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.
9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:
[Process started]
Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec
The test results are on the Clipboard.
Please close this window.
[Process completed]
The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.
Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.
12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.
______________________________________________________________
Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.
Hello,
Here are the results. Thanks for helping.
1 Start time: 00:13:28 09/02/15
2
3 Revision: 1342
4
5 Model Identifier: MacBookPro12,1
6 System Version: OS X 10.10.5 (14F27)
7 Kernel Version: Darwin 14.5.0
8 Time since boot: 1 day1:12
9
10 FileVault 2
11
12 FileVault is Off, but needs to be restarted to finish.
13
14 I/O requests (KiB/s)
15
16 kernel_task (UID 0): 1330
17
18 System errors (per sec)
19
20 nsurlstoraged (UID 501, error 1): 262
21 com.apple.WebKi (UID 501, error 1): 131
22
23 Energy (lifetime)
24
25 com.apple.WebKit.Plugin.64 (UID 501): 5975.78
26 WindowServer (UID 88): 975.91
27 kernel_task (UID 0): 128.07
28 com.apple.WebKit.WebContent (UID 501): 42.56
29 com.apple.WebKit.WebContent (UID 501): 9.58
30
31 Energy (sampled)
32
33 WindowServer (UID 88): 14.44
34 kernel_task (UID 0): 6.31
35
36 Global prefs (system)
37
38 AppleTextDirection = 0
39
40 Diagnostic reports
41
42 2015-08-23 com.apple.WebKit.Plugin.64 crash
43 2015-08-24 Kernel panic
44 2015-08-24 com.apple.AmbientDisplayAgent crash
45 2015-08-24 iTunes crash x2
46 2015-08-25 com.apple.iCal.CalendarNC crash
47 2015-09-01 Kernel panic
48
49 HID errors: 4
50
51 Kernel log
52
53 Sep 1 06:37:01 hibernate file close due timeout
54 Sep 1 06:37:19 hibernate file close due timeout
55 Sep 1 06:57:39 ARPT: Wake Reason: Wake on TCP Timeout
56 Sep 1 09:02:20 Failed to open the file
57 Sep 1 09:18:40 Failed to open the file
58 Sep 1 10:07:45 Failed to open the file
59 Sep 1 10:27:48 ARPT: Wake Reason: Wake on TCP Timeout
60 Sep 1 11:18:41 ARPT: Wake Reason: Wake on TCP Timeout
61 Sep 1 11:39:31 ARPT: Wake Reason: Wake on TCP Timeout
62 Sep 1 12:00:21 ARPT: Wake Reason: Wake on TCP Timeout
63 Sep 1 12:21:09 ARPT: Wake Reason: Wake on TCP Timeout
64 Sep 1 13:12:07 ARPT: Wake Reason: Wake on TCP Timeout
65 Sep 1 13:50:29 ARPT: Wake Reason: Wake on TCP Timeout
66 Sep 1 14:45:58 ARPT: Wake Reason: Wake on TCP Timeout
67 Sep 1 15:21:50 ARPT: Wake Reason: Wake on TCP Timeout
68 Sep 1 16:16:15 ARPT: Wake Reason: Wake on TCP Timeout
69 Sep 1 16:37:04 ARPT: Wake Reason: Wake on TCP Timeout
70 Sep 1 16:57:54 ARPT: Wake Reason: Wake on TCP Timeout
71 Sep 1 18:04:49 ARPT: Wake Reason: Wake on TCP Timeout
72 Sep 1 18:25:39 ARPT: Wake Reason: Wake on TCP Timeout
73 Sep 1 19:01:31 ARPT: Wake Reason: Wake on TCP Timeout
74 Sep 1 19:22:21 ARPT: Wake Reason: Wake on TCP Timeout
75 Sep 1 21:13:56 ARPT: Wake Reason: Wake on TCP Timeout
76 Sep 1 22:20:48 ARPT: Wake Reason: Wake on TCP Timeout
77 Sep 1 23:46:08 ARPT: Wake Reason: Wake on TCP Timeout
78
79 System log
80
81 Sep 2 00:02:25 Mail: Stream 0x7fb5a39d4bb0 is sending an event before being opened
82 Sep 2 00:02:35 mDNSResponder: mDNSPlatformClearSPSMACAddr: Unable to remove key
83 Sep 2 00:02:35 com.apple.usbmuxd: USBMuxBonjourDeviceReconfirm DNSServiceReconfirmRecord(a4:5e:60:ad:0a:1c@fe80::a65e:60ff:fead:a1c._apple-mob dev2._tcp.local.) failed -65541.
84 Sep 2 00:02:55 com.apple.usbmuxd: LOCKDOWN_V2_BONJOUR_SERVICE_NAME is _apple-mobdev2._tcp,91ae07cc
85 Sep 2 00:02:55 mDNSResponder: mDNS_RegisterInterface: Frequent transitions for interface awdl0 (FE80:0000:0000:0000:CC22:C2FF:FE86:6BF4)
86 Sep 2 00:02:55 mDNSResponder: mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:A65E:60FF:FEC8:3045)
87 Sep 2 00:02:55 mDNSResponder: mDNS_RegisterInterface: Frequent transitions for interface en0 (192.168.1.4)
88 Sep 2 00:04:13 Mail: Stream 0x7fb5a3becfc0 is sending an event before being opened
89 Sep 2 00:04:13 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 179
90 Sep 2 00:05:29 Mail: Stream 0x7fb5a3c82700 is sending an event before being opened
91 Sep 2 00:05:29 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 180
92 Sep 2 00:06:45 Mail: Stream 0x7fb5a377abb0 is sending an event before being opened
93 Sep 2 00:06:45 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 181
94 Sep 2 00:08:01 Mail: Stream 0x7fb5a3cadd30 is sending an event before being opened
95 Sep 2 00:08:02 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 182
96 Sep 2 00:09:18 Mail: Stream 0x7fb5a3d1d8b0 is sending an event before being opened
97 Sep 2 00:09:18 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 183
98 Sep 2 00:10:34 Mail: Stream 0x7fb5a3ca9190 is sending an event before being opened
99 Sep 2 00:10:34 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 184
100 Sep 2 00:11:50 Mail: Stream 0x7fb5a390d4a0 is sending an event before being opened
101 Sep 2 00:11:50 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 185
102 Sep 2 00:13:06 Mail: Stream 0x7fb5a3ba21d0 is sending an event before being opened
103 Sep 2 00:13:06 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 186
104 Sep 2 00:14:22 Mail: Stream 0x7fb5a2b65f30 is sending an event before being opened
105 Sep 2 00:14:23 com.apple.sbd: SOSCCThisDeviceIsInCircle SOSCCThisDeviceIsInCircle!! 187
106
107 launchd log
108
109 Aug 31 23:02:11 com.apple.xpc.launchd.user.201.100005.Aqua: Could not read path: path = /Users/USER/Library/LaunchAgents, error = 2: No such file or directory
110 Aug 31 23:02:11 com.apple.xpc.launchd.user.201.100005.Aqua: Could not import service from caller: caller = otherbsd.231, service = com.apple.photostream-agent, error = 119: Service is disabled
111 Aug 31 23:03:58 com.apple.xpc.launchd.domain.user.0: Caller not allowed to perform action: loginwindow.88, action = query service enabled state, code = 1: Operation not permitted, uid = 0, euid = 201, gid = 201, egid = 201, asid = 100005
112 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
113 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
114 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
115 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
116 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
117 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
118 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
119 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
120 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
121 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
122 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted
123 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted
124 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted
125 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted
126 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted
127 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted
128 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted
129 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
130 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
131 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
132 Aug 31 23:03:59 com.apple.xpc.launchd.domain.pid.SecurityAgent.445: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
133 Aug 31 23:04:06 com.apple.xpc.launchd.user.501.100026.Aqua: Could not import service from caller: caller = otherbsd.456, service = com.apple.photostream-agent, error = 119: Service is disabled
134
135 Console log
136
137 Aug 31 22:49:29 fontd: Failed to open read-only database, regenerating DB
138
139 System services loaded
140
141 com.adobe.fpsaud
142 com.apple.AccountPolicyHelper
143 com.apple.MobileFileIntegrity
144 com.apple.ctkd
145 com.apple.icloud.findmydeviced
146 com.apple.ifdreader
147 com.apple.nehelper
148 com.apple.nsurlsessiond_privileged
149 com.apple.sandboxd
150 com.apple.secinitd
151 com.apple.tccd.system
152 com.apple.watchdogd
153 com.apple.wdhelper
154 com.apple.xpc.smd
155
156 Login services loaded
157
158 com.apple.CallHistoryPluginHelper
159 com.apple.spindump_agent
160 com.bittorrent.uTorrent
161 com.spigot.ApplicationManager
162
163 Login services disabled
164
165 com.apple.photostream-agent
166
167 User services disabled
168
169 com.apple.photostream-agent
170
171 User login items
172
173 iTunesHelper
174 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
175
176 Safari extensions
177
178 AdBlock
179 - com.betafish.adblockforsafari
180 eBay Shopping Assistant
181 - com.spigot.safari.ebayshopassist
182 Searchme
183 - com.spigot.safari.searchme
184
185 iCloud errors
186
187 cloudphotosd 4
188 cloudd 3
189 comapple.CloudPhotosConfiguration 2
190 bird 1
191
192 Continuity errors
193
194 lsuseractivityd 3
195
196 Restricted files: 40
197
198 Lockfiles: 8
199
200 Global prefs (user)
201
202 AppleICUForce24HourTime = 1
203
204 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
205 - mod date: Jun 21 20:17:00 2015
206 - size (B): 554
207 - checksum: 3012644940
208
209 <?xml version="1.0" encoding="UTF-8"?>
210 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
211 <plist version="1.0">
212 <dict>
213 <key>Disabled</key>
214 <true/>
215 <key>Label</key>
216 <string>org.apache.httpd</string>
217 <key>EnvironmentVariables</key>
218 <dict>
219 <key>XPC_SERVICES_UNAVAILABLE</key>
220 <string>1</string>
221 </dict>
222 <key>ProgramArguments</key>
223 <array>
224 <string>/usr/sbin/httpd-wrapper</string>
225 <string>-D</string>
226 <string>FOREGROUND</string>
227 </array>
228 <key>OnDemand</key>
229 <false/>
230 </dict>
231 </plist>
232
233 Contents of Library/LaunchAgents/com.apple.FolderActions.folders.plist
234 - mod date: Jun 16 09:55:00 2015
235 - size (B): 517
236 - checksum: 1189540302
237
238 <?xml version="1.0" encoding="UTF-8"?>
239 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
240 <plist version="1.0">
241 <dict>
242 <key>Label</key>
243 <string>com.apple.FolderActions.folders</string>
244 <key>Program</key>
245 <string>/usr/bin/osascript</string>
246 <key>ProgramArguments</key>
247 <array>
248 <string>osascript</string>
249 <string>-e</string>
250 <string>tell application "Folder Actions Dispatcher" to tick</string>
251 </array>
252 <key>WatchPaths</key>
253 <array/>
254 </dict>
255 </plist>
256
257 Contents of Library/LaunchAgents/com.bittorrent.uTorrent.plist
258 - mod date: Jun 17 11:11:34 2015
259 - size (B): 511
260 - checksum: 68136511
261
262 <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd> <plist version="1.0"> <dict> <key>Label</key> <string>com.bittorrent.uTorrent</string> <key>ProgramArguments</key> <array> <string>/usr/bin/open</string> <string>-W</string> <string>-a</string> <string>/Applications/uTorrent.app</string> </array> <key>KeepAlive</key> <false/> <key>LaunchOnlyOnce</key> <true/> </dict> </plist>
263
264 Contents of Library/LaunchAgents/com.spigot.ApplicationManager.plist
265 - mod date: Jun 17 11:11:24 2015
266 - size (B): 491
267 - checksum: 1147974083
268
269 <?xml version="1.0" encoding="UTF-8"?>
270 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
271 <plist version="1.0">
272 <dict>
273 <key>KeepAlive</key>
274 <true/>
275 <key>Label</key>
276 <string>com.spigot.ApplicationManager</string>
277 <key>ProgramArguments</key>
278 <array>
279 <string>/Users/USER/Library/Application Support/Spigot/ApplicationManager</string>
280 <string>--protect</string>
281 </array>
282 <key>RunAtLoad</key>
283 <true/>
284 </dict>
285 </plist>
286
287 Applications
288
289 /Users/USER/Downloads/Simple Comic.app
290 - com.tsst.simplecomic
291
292 PrefPane
293
294 /Library/PreferencePanes/Flash Player.prefPane
295 - com.adobe.flashplayerpreferences
296
297 Bundles
298
299 /Library/Internet Plug-Ins/Flash Player.plugin
300 - com.macromedia.Flash Player.plugin
301 /Library/Internet Plug-Ins/Unity Web Player.plugin
302 - com.unity.UnityWebPlayer
303
304 Modifications
305
306 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat
307
308 Installations
309
310 Unity Web Player: 8/22/15, 21:59
311 Adobe Flash Player: 8/12/15, 23:15
312 Adobe Flash Player: 7/14/15, 22:33
313 Adobe Flash Player: 7/8/15, 22:29
314 Adobe Flash Player: 6/24/15, 01:22
315
316 Elapsed time (sec): 215
A
It seems that you recently deactivated FileVault. How long ago was that, and have you restarted the computer since then?
B
A kernel panic was logged today.
These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
In the Console window, select
DIAGNOSTIC AND USAGE INFORMATION ▹ System Diagnostic Reports
(not Diagnostic and Usage Messages) from the log list on the left. If you don't see that list, select
View ▹ Show Log List
from the menu bar.
There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of reports. A panic report has a name that begins with "Kernel" and ends in ".panic". Select the most recent one. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.
If you don't see any reports listed, but you know there was a panic, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.
In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)
Please don’t post other kinds of diagnostic report.
I know the report is long, maybe several hundred lines. Please post all of it anyway.
When you post the report, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.
C
Back up all data.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
~/Library/Caches
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder named "Caches" should open. Select all the contents of that folder and move them to the Trash. Close the folder.
Log out or restart the computer. Empty the Trash.
D
You installed the "Spigot" ad-injection malware. Take the steps below to disable it.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
Back up all data before continuing.
1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
~/Library/LaunchAgents
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.
2. Inside the folder you just opened, there may be one or more files with a name beginning as follows:
com.spigot
Move all such items to the Trash.
Log out or restart the computer. The trojan will now be inactive, but there are a few more components of it that should be cleaned up.
3. Do as in Step 1 with this line:
~/Library/Application Support
and remove an item named
Spigot
If it's present.
Empty the Trash.
4. From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall all extensions you don't know you need, including any with the word "Spigot" in the description. If in doubt, remove all of them. None is required for normal operation. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.
Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic," "CNET Download," or "SourceForge." Never visit any of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.
Hello,
I went through all steps. Answers below
A
I have recently deactivated it to run one of suggested test. I didn’t reboot the system after.
B
Anonymous UUID: 00C5B144-14A9-A795-5D74-4BE8AC8DA0D5
Mon Aug 24 01:33:33 2015
*** Panic Report ***
panic(cpu 0 caller 0xffffff800efc127e): "launchd died\nState at Last Exception:\n\n"@/SourceCache/xnu/xnu-2782.40.9/bsd/kern/kern_exit.c:363
uuid info:
0x7fff6d046000 uuid = <b1b370a5-479f-3533-8ad7-97b687d4f989>
0x1047f0000 uuid = <c0446878-e8d0-3461-a226-91ff1c2b2da6>
0x10483f000 uuid = <4396b358-725e-3ec0-bcbb-e4bf75fe1fb0>
RAX: 0x0000000002000001, RBX: 0x0000000000000006, RCX: 0x00000001053030e8, RDX: 0x0000000000000000
RSP: 0x00000001053030e8, RBP: 0x0000000105303190, RSI: 0x0000000105302f40, RDI: 0x0000000000000001
R8: 0x0000000000000000, R9: 0x000000010482f9f0, R10: 0x00007fff8afbeb02, R11: 0x0000000000000206
R12: 0x0000000000000000, R13: 0x00007fff910ec7e0, R14: 0x00000001053035d0, R15: 0x0000000105303790
RFL: 0x0000000000000206, RIP: 0x00007fff8afbc95a, CS: 0x0000000000000007, SS: 0x0000000000000023
Thread 0xffffff8020e7e5c0
0x00007fff9804fdab
0x00007fff9804fec8
0x00007fff980493b4
0x00007fff900caa6c
0x000000010481e907
0x00007fff8e7a1c13
0x00007fff8e7a488f
0x00007fff8e7b2fe4
0x00007fff9328fa9d
0x00007fff9328d3dd
0x0000000000000000
Thread 0xffffff8021243c50
0x00007fff8e7a4a6a
0x0000000000000000
Thread 0xffffff802128ac50
0x0000000104807c91
0x00007fff8e7a1c13
0x00007fff8e7a5365
0x00007fff8e7a6ecc
0x00007fff8e7a46b7
0x00007fff8e7b2fe4
0x00007fff9328fa9d
0x00007fff9328d3dd
0x0000000000000000
Thread 0xffffff802128a798
0x00007fff8e7b23ad
0x0000000000000000
Thread 0xffffff802616f970
0x00007fff8e7ac87e
0x00007fff8e7a562b
0x00007fff8e7a5154
0x00007fff8e7a6ecc
0x00007fff8e7a46b7
0x00007fff8e7a4453
0x00007fff9329005a
0x00007fff9328ffd7
0x00007fff9328d3ed
0x0000000000000000
Thread 0xffffff8021020970
0x00007fff924b2f1a
0x0000000000000000
0x00007fff6d052475
0x00007fff8ff517b5
0x00007fff9801e648
0x00007fff910ec7e0
0x00007fff910eeddf
0x00007fff8e7a1c13
0x00007fff8e7a2e5e
0x00007fff910ed0a7
0x000000010481b393
0x00007fff8e7a1c13
0x00007fff8e7a5365
0x00007fff8e7a6ecc
0x00007fff8e7a5154
0x00007fff8e7a6ecc
0x00007fff8e7a46b7
0x00007fff8e7b2fe4
0x00007fff9328fa9d
0x00007fff9328d3dd
0x0000000000000000
Thread 0xffffff802483f000
0x00007fff8e7a562b
0x00007fff8e7a5154
0x00007fff8e7a6ecc
0x00007fff8e7a46b7
0x00007fff8e7b2fe4
0x00007fff9328fa9d
0x00007fff9328d3dd
0x0000000000000000
Mac OS version: 14F27
Kernel version: Darwin Kernel Version 14.5.0: Wed Jul 29 02:26:53 PDT 2015; root:xnu-2782.40.9~1/RELEASE_X86_64
Kernel UUID: 58F06365-45C7-3CA7-B80D-173AFD1A03C4
System model name: MacBookPro12,1 (Mac-E43C1C25D4880AD6)
System Profile:
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x133), Broadcom BCM43xx 1.0 (7.15.166.24.3)
Bluetooth: Version 4.3.6f3 16238, 3 services, 27 devices, 1 incoming serial ports
Thunderbolt Bus: MacBook Pro, Apple Inc., 27.1
Memory Module: BANK 0/DIMM0, 4 GB, DDR3, 1867 MHz, 0x80AD, 0x483943434E4E4E424C54414C41522D4E5544
Memory Module: BANK 1/DIMM0, 4 GB, DDR3, 1867 MHz, 0x80AD, 0x483943434E4E4E424C54414C41522D4E5544
USB Device: Internal Memory Card Reader
USB Device: Bluetooth USB Host Controller
Serial ATA Device: APPLE SSD SM0256G, 251 GB
Model: MacBookPro12,1, BootROM MBP121.0167.B07, 2 processors, Intel Core i5, 2.7 GHz, 8 GB, SMC 2.28f7
Network Service: Wi-Fi, AirPort, en0
Graphics: Intel Iris Graphics 6100, Intel Iris Graphics 6100, Built-In
C
Done
D
Done
The panic, if it's repeated, indicates a hardware fault requiring warranty service.
Make a "Genius" appointment at an Apple Store, or go to another authorized service provider. You may have to leave the machine there for several days.
Back up all data on the internal drive(s) before you hand over your computer to anyone. There are ways to back up a computer that isn't fully functional—ask if you need guidance.
If privacy is a concern, erase the data partition(s) with the option to write zeros* (do this only if you have at least two complete, independent backups, and you know how to restore to an empty drive from any of them.) Don’t erase the recovery partition, if present.
Keeping your confidential data secure during hardware repair
Apple also recommends that you deauthorize a device in the iTunes Store before having it serviced.
*An SSD doesn't need to be zeroed.
Fortunately, it's working for now. You are the best, Linc! 🙂
ibooks freezes Macbook Pro
