Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Mail Not Responding

Several times a day I need to force quit Mail because it displays "Not Responding" in the Activity Monitor.


Not sure where to begin.


Is the answer in the Crash Report or the Open Files and Ports in Activity Monitor?

iMac, OS X Yosemite (10.10.5)

Posted on Aug 25, 2015 7:25 AM

Reply
13 replies

Aug 25, 2015 4:50 PM in response to utopiact

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec

Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Aug 25, 2015 5:26 PM in response to Linc Davis

The test did NOT complete....


1 Start time: 20:13:00 08/25/15

2

3 Revision: 1337

4

5 Model Identifier: iMac13,2

6 System Version: OS X 10.10.5 (14F27)

7 Kernel Version: Darwin 14.5.0

8 Time since boot: 9:00

9

10 UID: 502

11

12 Memory

13

14 BANK 0/DIMM0

15

16 Size: 4 GB

17 Speed: 1600 MHz

18 Status: OK

19 Manufacturer: 0x02FE

20

21 BANK 1/DIMM0

22

23 Size: 4 GB

24 Speed: 1600 MHz

25 Status: OK

26 Manufacturer: 0x02FE

27

28 BANK 0/DIMM1

29

30 Size: 8 GB

31 Speed: 1600 MHz

32 Status: OK

33 Manufacturer: 0x873E

34

35 BANK 1/DIMM1

36

37 Size: 8 GB

38 Speed: 1600 MHz

39 Status: OK

40 Manufacturer: 0x873E

41

42 USB

43

44 D3 Station (Samsung Electronics Co., Ltd.)

45 USB3.0 Hub (VIA Labs, Inc.)

46 USB3.0 Hub (VIA Labs, Inc.)

47 USB2.0 Hub (VIA Labs, Inc.)

48 DYMO LabelWriter Twin Turbo (Dymo Corporation)

49 5 Pound USB Postal Scale (Dymo Corporation)

50 USB2.0 Hub (VIA Labs, Inc.)

51 PS2 to USB Ver 7A4A (Cypress Semiconductor)

52 Hub (Texas Instruments)

53 HP LaserJet P1006 (Hewlett Packard)

54

55 Bluetooth

56

57 Apple Wireless Trackpad

58

59 Activity

60

61 CPU: user 19%, system 10%

62

63 CPU usage (%)

64

65 TeamViewer_Deskt (UID 502): 68.0

66 WindowServer (UID 0): 24.4

67

68 I/O wait time (ms/s)

69

70 backupd (UID 0): 901

71

72 Energy (lifetime)

73

74 Mail (UID 502): 12.90

75 accountsd (UID 502): 8.45

76 WindowServer (UID 88): 6.49

77 kernel_task (UID 0): 6.02

78

79 Energy (sampled)

80

81 TeamViewer_Desktop (UID 502): 59.64

82 WindowServer (UID 88): 58.58

83 Mail (UID 502): 11.28

84

85 Memory (MB)

86

87 kernel_task (UID 0): 1884

88

89 Mach ports (total)

90

91 TeamViewer_Deskt (UID 502): 33527

92

93 Font issues: 7

94

95 Global prefs (system)

96

97 MultipleSessionEnabled = 0

98

99 DNS: 204.117.214.10 (static)

100

101 Listeners

102

103 cupsd: ipp

104 kdc: kerberos

105 launchd: ssh

106

107 System caches/logs

108

109 4.2 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data

110

111 lost+found

112

113 iNode22110033 xar archive - version 1 (4348218934 B)

114

115 Diagnostic reports

116

117 2015-08-14 Mail crash x3

118 2015-08-15 Mail hang

119 2015-08-16 AdobeAcrobat crash

120 2015-08-16 Mail crash

121 2015-08-17 Mail hang x2

122 2015-08-17 com.apple.CodeSigningHelper crash

123 2015-08-18 Google Chrome crash

124 2015-08-18 Mail hang

125 2015-08-18 helpd crash

126 2015-08-19 Mail crash x4

127 2015-08-20 taskgated crash

128 2015-08-21 Mail crash x2

129 2015-08-21 Mail hang

130 2015-08-22 Mail crash x2

131 2015-08-22 com.apple.iCal.CalendarNC crash

132 2015-08-23 Opera Helper crash

133 2015-08-23 blued crash

134 2015-08-24 Mail crash

135 2015-08-25 AdobeAcrobat crash x2

136 2015-08-25 AdobeAcrobat hang

137 2015-08-25 Mail crash x3

138 2015-08-25 Mail hang x9

139 2015-08-25 PDFpen crash x3

140 2015-08-25 Safari hang

141 2015-08-25 mds crash

142

143 HID errors: 1

144

145 Kernel log

146

147 Aug 22 08:53:37 ARPT: 1.588190: BRCM tunables:

148 Aug 22 08:53:37 pci pause: SDXC

149 Aug 22 08:53:56 IO80211AWDLPeerManager::getVHtCapabilityIE Unable to get vht capabilities ret 2d

150 Aug 22 08:54:01 utun_start: ifnet_disable_output returned error 12

151 Aug 22 08:54:18 en2: promiscuous mode disable failed

152 Aug 22 08:54:18 en3: promiscuous mode disable failed

153 Aug 22 19:23:41 bird[310] Unable to quarantine: 93

154 Aug 22 19:29:03 bird[310] Unable to quarantine: 93

155 Aug 22 19:29:04 bird[310] Unable to quarantine: 93

156 Aug 22 19:29:36 bird[310] Unable to quarantine: 93

157 Aug 22 19:30:09 bird[310] Unable to quarantine: 93

158 Aug 25 11:14:14 ARPT: 1.577598: BRCM tunables:

159 Aug 25 11:14:14 pci pause: SDXC

160 Aug 25 11:14:18 IO80211AWDLPeerManager::configure Unable to set BSSID ret 52

161 Aug 25 11:14:47 utun_start: ifnet_disable_output returned error 12

162

163 System log

164

165 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

166 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

167 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

168 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

169 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

170 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

171 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

172 Aug 25 17:42:16 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

173 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

174 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

175 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

176 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

177 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

178 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

179 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

180 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

181 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

182 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

183 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

184 Aug 25 17:45:13 QuickLookUIHelper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

185 Aug 25 17:52:10 Mail: -[__NSTaggedDate frame]: unrecognized selector sent to instance 0xbadd7fcf3d30bead

186 Aug 25 18:03:01 Activity Monitor: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Mail_UUID.plist.

187 Aug 25 18:03:01 Activity Monitor: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

188 Aug 25 18:03:01 sharingd: 18:03:01.756 : SDConnectionManager:: XPC connection invalidated

189 Aug 25 18:46:55 sharingd: 18:46:55.145 : SDConnectionManager:: XPC connection invalidated

190

191 launchd log

192

193 Aug 22 08:53:55 com.apple.xpc.launchd.domain.system: Session adoption is only allowed in user domains.

194 Aug 22 08:54:50 com.apple.xpc.launchd.user.502.100008.Aqua: Could not import service from caller: caller = otherbsd.269, service = com.fiplab.MemoryCleanHelper, error = 119: Service is disabled

195 Aug 22 08:54:50 com.apple.xpc.launchd.user.502.100008.Aqua: Could not import service from caller: caller = otherbsd.269, service = com.fiplab.sharebuckethelper, error = 119: Service is disabled

196 Aug 22 08:54:50 com.apple.xpc.launchd.user.502.100008.Aqua: Could not import service from caller: caller = otherbsd.269, service = org.tempel.findanyfile.hotkey, error = 119: Service is disabled

197 Aug 22 08:54:50 com.apple.xpc.launchd.user.502.100008.Aqua: Could not import service from caller: caller = otherbsd.269, service = com.apple.photostream-agent, error = 119: Service is disabled

198 Aug 22 09:27:18 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.714, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

199 Aug 22 09:27:18 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.714, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

200 Aug 22 09:29:09 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.720, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

201 Aug 22 09:29:09 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.720, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

202 Aug 22 09:31:11 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.734, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

203 Aug 22 09:31:11 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.734, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

204 Aug 22 09:53:22 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.797, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

205 Aug 22 09:53:22 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.797, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

206 Aug 22 17:50:21 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1917, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

207 Aug 22 17:50:21 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1917, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

208 Aug 22 17:50:28 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1918, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

209 Aug 22 17:50:28 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1918, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

210 Aug 22 18:01:29 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1929, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

211 Aug 22 18:01:29 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1929, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

212 Aug 22 18:01:38 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1930, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

213 Aug 22 18:01:38 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.1930, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

214 Aug 24 17:27:41 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.5694, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

215 Aug 24 17:27:41 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.5694, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

216 Aug 25 10:02:19 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.6765, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

217 Aug 25 10:02:19 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.6765, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

218

219 Console log

220

221 Aug 20 18:56:36 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

222 Aug 20 22:15:32 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Mail_UUID.plist.

223 Aug 20 22:15:32 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

224 Aug 21 09:37:58 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7fc598c12980

225 Aug 21 10:00:15 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/com.apple.iCal.C alendarNC_UUID.plist.

226 Aug 21 11:32:56 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7f9993f278b0

227 Aug 21 14:53:00 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Mail_UUID.plist.

228 Aug 21 14:53:00 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

229 Aug 22 09:30:34 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Opera%20Helper_U UID.plist.

230 Aug 22 17:13:17 mdworker: -[__NSArrayM objectForKey:]: unrecognized selector sent to instance 0x7feaba521910

231 Aug 23 19:23:32 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Mail_UUID.plist.

232 Aug 23 19:23:33 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

233 Aug 24 14:04:15 storeassetd: Metadata.framework [Error]: server port invalidated for uid 502

234 Aug 24 14:04:15 storedownloadd: Metadata.framework [Error]: server port invalidated for uid 502

235 Aug 24 17:01:53 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Mail_UUID.plist.

236 Aug 24 17:01:53 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

237 Aug 25 14:43:11 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Mail_UUID.plist.

238 Aug 25 14:43:11 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

239 Aug 25 17:33:25 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/AdobeAcrobat_UUI D.plist.

240 Aug 25 17:34:23 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/AdobeAcrobat_UUI D.plist.

241 Aug 25 17:38:49 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/PDFpen_UUID.plis t.

242 Aug 25 17:41:24 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/PDFpen_UUID.plis t.

243 Aug 25 17:42:06 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/PDFpen_UUID.plis t.

244 Aug 25 18:46:57 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Application%20Support/CrashReporter/Mail_UUID.plist.

245 Aug 25 18:46:57 ReportCrash: Failed to write crash history to file:///Users/USER/Library/Containers/com.apple.mail/Data/Library/Application%2 0Support/CrashReporter/Mail_UUID.plist.

246

247 Loaded kernel extensions

248

249 com.parallels.virtualhid (1.0.3 3)

250 com.parallels.virtualsound (1.0.36 36)

251 com.plantronics.driver.PlantronicsDriverShield (4.3)

252

253 System services loaded

254

255 com.adobe.fpsaud

256 com.apple.Kerberos.kdc

257 - status: 1

258 com.apple.watchdogd

259 com.dymo.pnpd

260 com.google.keystone.daemon

261 com.iobit.AMCDaemon

262 com.oracle.java.JavaUpdateHelper

263 com.parallels.mobile.dispatcher.launchdaemon

264 com.parallels.mobile.kextloader.launchdaemon

265 com.prey.agent

266 com.teamviewer.Helper

267 com.teamviewer.service

268 org.macosforge.xquartz.privileged_startx

269

270 Login services loaded

271

272 com.adobe.ARM.UUID

273 com.amazon.music

274 com.apple.mrt.uiagent

275 com.citrixonline.GoToMeeting.G2MUpdate

276 com.iobit.MacBooster-mini

277 com.lastpass.LastPassHelper

278 - status: 78

279 com.parallels.mobile.prl_deskctl_agent.launchagent

280 com.parallels.mobile.startgui.launchagent

281 com.teamviewer.desktop

282 com.teamviewer.teamviewer

283 org.macosforge.xquartz.startx

284

285 Login services disabled

286

287 com.apple.photostream-agent

288 org.chromium.chromoting

289 com.borealinteractive.menubellshelper

290

291 User services disabled

292

293 com.apple.photostream-agent

294 org.chromium.chromoting

295 com.borealinteractive.menubellshelper

296

297 Startup items

298

299 /Library/StartupItems/ChmodBPF/ChmodBPF

300 /Library/StartupItems/ChmodBPF/StartupParameters.plist

301

302 User login items

303

304 Activity Monitor

305 - /Applications/Utilities/Activity Monitor.app

306 Contacts

307 - /Applications/Contacts.app

308 Calendar

309 - /Applications/Calendar.app

310 Dropbox

311 - /Applications/Dropbox.app

312 iTunes

313 - /Applications/iTunes.app

314 Safari

315 - /Applications/Safari.app

316 Mail

317 - /Applications/Mail.app

318 Printer Pro Desktop

319 - /Applications/Printer Pro Desktop.app

320

321 User crontab

322

323 #SqzS VERSION = 1.0.0

324 #SYMANTEC SCHEDULER CRON ENTRIES. THESE ENTRIES ARE AUTOMATICALLY GENERATED

325 #PLEASE DO NOT EDIT.

326 # Enc=1 Name="FileSaver Daily Update" EvType1=3 EvType2=0 Sched=3

327 0 12 * * * "/Library/Application Support/Norton Solutions Support/Scheduler/schedLauncher" 0 "/Library/Application Support/Norton Solutions Support/Norton Utilities/Norton Volume Assist" " " "oapp" "aevt" "exAG" "-d0"

328 # Enc=1 Name="Daily Defragmentation" EvType1=4 EvType2=0 Sched=3

329 0 0 * * * "/Library/Application Support/Norton Solutions Support/Scheduler/schedLauncher" 0 "/Library/Application Support/Norton Solutions Support/Norton Utilities/Norton Defragger" " " "oapp" "aevt" "exAG" "-d0"

330 # Enc=1 Name="Update Virus Protection" EvType1=1 EvType2=0 Sched=1

331 #0 9 1 * * "/Library/Application Support/Norton Solutions Support/Scheduler/schedLauncher" -u 0 "/Applications/Norton Solutions/LiveUpdate.app/Contents/MacOS/LiveUpdate" " " "oapp" "aevt" "exAG" "-update LUdf"

332 #SqzS END SYMANTEC CRON ENTRIES

333

334 Safari extensions

335

336 AdBlock

337 - com.betafish.adblockforsafari

338 LastPass

339 - com.lastpass.lpsafariextension

340 WebsiteOpener

341 - com.yourcompany.websiteopener

342 YSlow

343 - com.yahoo.yslow

344

345 Firefox extensions

346

347 Auto Refresh

348 LastPass Password Manager

349 ReloadEvery

350

351 Widgets

352

353 Tic-Tac-Toe

354 TxtDrop Free SMS

355 iStat Pro

356

357 iCloud errors

358

359 bird 6

360 accountsd 2

361 Mail 2

362 cloudd 1

363 Spotlight 1

364 Finder 1

365 CallHistorySyncHelper 1

366

367 Continuity errors

368

369 lsuseractivityd 120

370 sharingd 20

Aug 26, 2015 5:30 AM in response to utopiact

Whenever an anonymous stranger asks you to execute commands in Terminal be very wary, Terminal is an effective attack vector, used with malice or insufficient knowledge it can be used to cripple your Mac. Ensure that that the person who posts it leaves a method of contact for you to use in the event that something goes wrong. Always check that the posters email address is supplied, and always backup your Mac before executing the code that is posted.

Aug 26, 2015 8:54 AM in response to Linc Davis

I was able to complete the test under safe mode...


Mail is running fine so far...


1 Start time: 10:00:43 08/26/15

2

3 Revision: 1337

4

5 Model Identifier: iMac13,2

6 System Version: OS X 10.10.5 (14F27)

7 Kernel Version: Darwin 14.5.0

8 Boot Mode: Safe

9 Time since boot: 25 minutes

10

11 UID: 502

12

13 Memory

14

15 BANK 0/DIMM0

16

17 Size: 4 GB

18 Speed: 1600 MHz

19 Status: OK

20 Manufacturer: 0x02FE

21

22 BANK 1/DIMM0

23

24 Size: 4 GB

25 Speed: 1600 MHz

26 Status: OK

27 Manufacturer: 0x02FE

28

29 BANK 0/DIMM1

30

31 Size: 8 GB

32 Speed: 1600 MHz

33 Status: OK

34 Manufacturer: 0x873E

35

36 BANK 1/DIMM1

37

38 Size: 8 GB

39 Speed: 1600 MHz

40 Status: OK

41 Manufacturer: 0x873E

42

43 USB

44

45 D3 Station (Samsung Electronics Co., Ltd.)

46 USB3.0 Hub (VIA Labs, Inc.)

47 USB3.0 Hub (VIA Labs, Inc.)

48 USB2.0 Hub (VIA Labs, Inc.)

49 DYMO LabelWriter Twin Turbo (Dymo Corporation)

50 5 Pound USB Postal Scale (Dymo Corporation)

51 USB2.0 Hub (VIA Labs, Inc.)

52 PS2 to USB Ver 7A4A (Cypress Semiconductor)

53 Hub (Texas Instruments)

54 HP LaserJet P1006 (Hewlett Packard)

55

56 Bluetooth

57

58 Apple Wireless Trackpad

59

60 CPU usage (%)

61

62 Safari (UID 502): 81.0

63

64 I/O requests (KiB/s)

65

66 Safari (UID 502): 3473

67

68 Energy (lifetime)

69

70 WindowServer (UID 88): 11.03

71 Terminal (UID 502): 9.06

72 kernel_task (UID 0): 8.13

73 Safari (UID 502): 8.05

74 bash (UID 502): 7.39

75 usernoted (UID 502): 6.11

76

77 Energy (sampled)

78

79 kernel_task (UID 0): 19.74

80 Safari (UID 502): 16.00

81

82 Memory (MB)

83

84 kernel_task (UID 0): 1186

85

86 Spotlight: Indexing and searching disabled

87

88 Global prefs (system)

89

90 MultipleSessionEnabled = 0

91

92 DNS: 204.117.214.10 (static)

93

94 Listeners

95

96 cupsd: ipp

97 kdc: kerberos

98 launchd: ssh

99

100 System caches/logs

101

102 4.3 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data

103

104 lost+found

105

106 iNode22110033 xar archive - version 1 (4348218934 B)

107

108 Diagnostic reports

109

110 2015-08-16 AdobeAcrobat crash

111 2015-08-16 Mail crash

112 2015-08-17 Mail hang x2

113 2015-08-17 com.apple.CodeSigningHelper crash

114 2015-08-18 Google Chrome crash

115 2015-08-18 Mail hang

116 2015-08-18 helpd crash

117 2015-08-19 Mail crash x4

118 2015-08-20 taskgated crash

119 2015-08-21 Mail crash x2

120 2015-08-21 Mail hang

121 2015-08-22 Mail crash x2

122 2015-08-22 com.apple.iCal.CalendarNC crash

123 2015-08-23 Opera Helper crash

124 2015-08-23 blued crash

125 2015-08-24 Mail crash

126 2015-08-25 Mail crash

127 2015-08-25 Mail hang x5

128 2015-08-25 mds crash

129 2015-08-26 AdobeAcrobat crash x2

130 2015-08-26 AdobeAcrobat hang

131 2015-08-26 Mail crash x3

132 2015-08-26 Mail hang x7

133 2015-08-26 PDFpen crash x3

134 2015-08-26 Safari hang

135

136 HID errors: 2

137

138 Kernel log

139

140 Aug 22 08:53:37 ARPT: 1.588190: BRCM tunables:

141 Aug 22 08:53:37 pci pause: SDXC

142 Aug 22 08:53:56 IO80211AWDLPeerManager::getVHtCapabilityIE Unable to get vht capabilities ret 2d

143 Aug 22 08:54:01 utun_start: ifnet_disable_output returned error 12

144 Aug 22 08:54:18 en2: promiscuous mode disable failed

145 Aug 22 08:54:18 en3: promiscuous mode disable failed

146 Aug 22 19:23:41 bird[310] Unable to quarantine: 93

147 Aug 22 19:29:03 bird[310] Unable to quarantine: 93

148 Aug 22 19:29:04 bird[310] Unable to quarantine: 93

149 Aug 22 19:29:36 bird[310] Unable to quarantine: 93

150 Aug 22 19:30:09 bird[310] Unable to quarantine: 93

151 Aug 25 11:14:14 ARPT: 1.577598: BRCM tunables:

152 Aug 25 11:14:14 pci pause: SDXC

153 Aug 25 11:14:18 IO80211AWDLPeerManager::configure Unable to set BSSID ret 52

154 Aug 25 11:14:47 utun_start: ifnet_disable_output returned error 12

155 Aug 26 09:51:16 ARPT: 1.463022: BRCM tunables:

156 Aug 26 09:51:16 pci pause: SDXC

157 Aug 26 09:51:31 IO80211AWDLPeerManager::getVHtCapabilityIE Unable to get vht capabilities ret 2d

158 Aug 26 09:51:55 utun_start: ifnet_disable_output returned error 12

159 Aug 26 09:52:01 Failed to load kext com.apple.driver.AppleFIVRDriCouldn't alloc class "AppleThunderboltEDMSink"

160 Aug 26 09:52:05 IOHIDSystem: Seize of IOHIDPointing failed.

161 Aug 26 09:52:05 IOHIDSystem: Seize of AppleMultitouchHIDEventDriver failed.

162

163 System log

164

165 Aug 26 10:01:33 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

166 Aug 26 10:01:44 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

167 Aug 26 10:01:44 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

168 Aug 26 10:01:44 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

169 Aug 26 10:01:53 com.apple.kextcache: Can't read info dictionary for F5D6050.kext: IOCFUnserialize: syntax error near line 40.

170 Aug 26 10:01:53 com.apple.kextcache: Can't read info dictionary for HotSync Classic Seize.kext: IOCFUnserialize: syntax error near line 1.

171 Aug 26 10:01:53 com.apple.kextcache: kext file:///System/Library/Extensions/PlantronicsDriverShield.kext/ is in hash exception list, allowing to load

172 Aug 26 10:01:54 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

173 Aug 26 10:01:54 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

174 Aug 26 10:01:54 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

175 Aug 26 10:01:54 com.apple.kextcache: Can't read info dictionary for F5D6050.kext: IOCFUnserialize: syntax error near line 40.

176 Aug 26 10:01:54 com.apple.kextcache: Can't read info dictionary for HotSync Classic Seize.kext: IOCFUnserialize: syntax error near line 1.

177 Aug 26 10:01:55 com.apple.kextcache: kext file:///System/Library/Extensions/JMicronATA.kext/ is in hash exception list, allowing to load

178 Aug 26 10:02:04 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

179 Aug 26 10:02:04 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

180 Aug 26 10:02:04 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

181 Aug 26 10:02:08 com.apple.kextcache: Can't read info dictionary for F5D6050.kext: IOCFUnserialize: syntax error near line 40.

182 Aug 26 10:02:08 com.apple.kextcache: Can't read info dictionary for HotSync Classic Seize.kext: IOCFUnserialize: syntax error near line 1.

183 Aug 26 10:02:08 com.apple.kextcache: DymoUsbPrinterClassDriver.kext has invalid signature; omitting.

184 Aug 26 10:02:14 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

185 Aug 26 10:02:14 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

186 Aug 26 10:02:14 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

187 Aug 26 10:02:24 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

188 Aug 26 10:02:24 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

189 Aug 26 10:02:24 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

190

191 launchd log

192

193 Aug 25 10:02:19 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.6765, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

194 Aug 25 10:02:19 com.apple.xpc.launchd.user.502.100008.Aqua: Caller not allowed to perform action: Google Chrome H.6765, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100008

195 Aug 26 09:23:23 com.apple.xpc.launchd.user.502.100006.Aqua: Caller not allowed to perform action: Google Chrome H.10401, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100006

196 Aug 26 09:23:23 com.apple.xpc.launchd.user.502.100006.Aqua: Caller not allowed to perform action: Google Chrome H.10401, action = pid-local registration, code = 1: Operation not permitted, uid = 502, euid = 502, gid = 20, egid = 20, asid = 100006

197 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

198 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

199 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

200 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

201 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

202 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

203 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

204 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

205 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

206 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

207 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted

208 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted

209 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted

210 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted

211 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted

212 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted

213 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted

214 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

215 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

216 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

217 Aug 26 09:52:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.254: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

218

219 Console log

220

221 Aug 26 09:53:06 fontd: Failed to compile sql statement (79), "SELECT * FROM loc_names_table ORDER BY font_column;"

222 Aug 26 09:53:06 fontd: Failed to compile sql statement (82), "INSERT INTO version_table VALUES( ?, ? );"

223 Aug 26 09:53:06 fontd: Failed to compile sql statement (83), "INSERT OR ABORT INTO font_table VALUES( NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? );"

224 Aug 26 09:53:06 fontd: Failed to compile sql statement (84), "INSERT OR ABORT INTO dir_table VALUES( NULL, ?, ?, ?, ?, ? );"

225 Aug 26 09:53:06 fontd: Failed to compile sql statement (85), "INSERT OR ABORT INTO bookmarks_table VALUES( NULL, ?, ?, ? );"

226 Aug 26 09:53:06 fontd: Failed to compile sql statement (86), "DELETE FROM font_table WHERE font_column == ?;"

227 Aug 26 09:53:06 fontd: Failed to compile sql statement (87), "DELETE FROM dir_table WHERE dir_column == ?;"

228 Aug 26 09:53:06 fontd: Failed to compile sql statement (88), "UPDATE OR ABORT font_table SET flags_column == ( flags_column & ?) | ? WHERE font_column == ?;"

229 Aug 26 09:53:06 fontd: Failed to compile sql statement (89), "UPDATE OR ABORT dir_table SET flags_column == ( flags_column & ?) | ? WHERE dir_column == ?;"

230 Aug 26 09:53:06 fontd: Failed to compile sql statement (90), "INSERT INTO name_table VALUES( ?, ?, ? );"

231 Aug 26 09:53:06 fontd: Failed to compile sql statement (91), "INSERT INTO family_table VALUES( ?, ?, ? );"

232 Aug 26 09:53:06 fontd: Failed to compile sql statement (92), "INSERT INTO subfamily_table VALUES( ?, ?, ? );"

233 Aug 26 09:53:06 fontd: Failed to compile sql statement (93), "INSERT INTO fullname_table VALUES( ?, ?, ? );"

234 Aug 26 09:53:06 fontd: Failed to compile sql statement (94), "INSERT OR REPLACE INTO traits_table VALUES( ?, ?, ?, ?, ? );"

235 Aug 26 09:53:06 fontd: Failed to compile sql statement (95), "INSERT INTO loc_names_table VALUES( ?, ?, ?, ?, ?, ?, ?, ?, ? );"

236 Aug 26 09:53:06 fontd: Failed to compile sql statement (96), "INSERT OR REPLACE INTO charset_table VALUES( NULL, ? );"

237 Aug 26 09:53:06 fontd: Failed to compile sql statement (97), "INSERT INTO unicoderanges_table VALUES( ?, ?, ?, ?, ? );"

238 Aug 26 09:53:06 fontd: Failed to compile sql statement (98), "INSERT INTO language_table VALUES( ?, ?, ? );"

239 Aug 26 09:53:06 fontd: Failed to compile sql statement (99), "INSERT INTO varaxis_table VALUES( ?, ?, ?, ?, ?, ?, ? );"

240 Aug 26 09:53:06 fontd: Failed to compile sql statement (100), "INSERT INTO varinstance_table VALUES( ?, ?, ? );"

241 Aug 26 09:53:06 fontd: Failed to compile sql statement (101), "INSERT OR REPLACE INTO lwfn_table VALUES( ?, ? );"

242 Aug 26 09:53:06 fontd: Failed to create font store at path /var/folders/tn/1cck066r8xjfmk00r6b9vc600000gp/C/com.apple.FontRegistry/fontreg istry.user, trying alternative

243 Aug 26 09:53:06 fontd: Failed to finalize sql statement (1)

244 Aug 26 09:53:06 fontd: Failed to finalize sql statement (80)

245 Aug 26 09:53:06 fontd: Failed to finalize sql statement (81)

246

247 System services loaded

248

249 com.apple.Kerberos.kdc

250 - status: 1

251 com.apple.dpd

252 - status: 75

253 com.apple.watchdogd

254

255 Login services loaded

256

257 com.apple.mrt.uiagent

258

259 Login services disabled

260

261 com.apple.photostream-agent

262 org.chromium.chromoting

263 com.borealinteractive.menubellshelper

264

265 User services disabled

266

267 com.apple.photostream-agent

268 org.chromium.chromoting

269 com.borealinteractive.menubellshelper

270

271 Startup items

272

273 /Library/StartupItems/ChmodBPF/ChmodBPF

274 /Library/StartupItems/ChmodBPF/StartupParameters.plist

275

276 User login items

277

278 Activity Monitor

279 - /Applications/Utilities/Activity Monitor.app

280 Contacts

281 - /Applications/Contacts.app

282 Calendar

283 - /Applications/Calendar.app

284 Dropbox

285 - /Applications/Dropbox.app

286 iTunes

287 - /Applications/iTunes.app

288 Safari

289 - /Applications/Safari.app

290 Mail

291 - /Applications/Mail.app

292 Printer Pro Desktop

293 - /Applications/Printer Pro Desktop.app

294

295 User crontab

296

297 #SqzS VERSION = 1.0.0

298 #SYMANTEC SCHEDULER CRON ENTRIES. THESE ENTRIES ARE AUTOMATICALLY GENERATED

299 #PLEASE DO NOT EDIT.

300 # Enc=1 Name="FileSaver Daily Update" EvType1=3 EvType2=0 Sched=3

301 0 12 * * * "/Library/Application Support/Norton Solutions Support/Scheduler/schedLauncher" 0 "/Library/Application Support/Norton Solutions Support/Norton Utilities/Norton Volume Assist" " " "oapp" "aevt" "exAG" "-d0"

302 # Enc=1 Name="Daily Defragmentation" EvType1=4 EvType2=0 Sched=3

303 0 0 * * * "/Library/Application Support/Norton Solutions Support/Scheduler/schedLauncher" 0 "/Library/Application Support/Norton Solutions Support/Norton Utilities/Norton Defragger" " " "oapp" "aevt" "exAG" "-d0"

304 # Enc=1 Name="Update Virus Protection" EvType1=1 EvType2=0 Sched=1

305 #0 9 1 * * "/Library/Application Support/Norton Solutions Support/Scheduler/schedLauncher" -u 0 "/Applications/Norton Solutions/LiveUpdate.app/Contents/MacOS/LiveUpdate" " " "oapp" "aevt" "exAG" "-update LUdf"

306 #SqzS END SYMANTEC CRON ENTRIES

307

308 Safari extensions

309

310 AdBlock

311 - com.betafish.adblockforsafari

312 LastPass

313 - com.lastpass.lpsafariextension

314 WebsiteOpener

315 - com.yourcompany.websiteopener

316 YSlow

317 - com.yahoo.yslow

318

319 Firefox extensions

320

321 Auto Refresh

322 LastPass Password Manager

323 ReloadEvery

324

325 Widgets

326

327 Tic-Tac-Toe

328 TxtDrop Free SMS

329 iStat Pro

330

331 iCloud errors

332

333 bird 8

334 cloudd 3

335 accountsd 2

336 Mail 2

337 Finder 2

338 CallHistorySyncHelper 2

339 Spotlight 1

340

341 Continuity errors

342

343 lsuseractivityd 87

344 sharingd 23

345

346 Restricted files: 330501

347

348 Lockfiles: 217

349

350 High file counts

351

352 Desktop: 167

353 Library/Keychains: 78

354

355 Global prefs (user)

356

357 AppleCollationOrder = en

358 AppleID = utopiact

359 InitialKeyRepeat = 15

360 KeyRepeat = 2

361 NSNavSidebarWidth = 285

362 NSQuitAlwaysKeepsWindows = 0

363 NSTableViewDefaultSizeMode = 1

364 iSyncPrefsImported = 1

365

366 Accessibility

367

368 Keyboard Zoom: On

369 Scroll Zoom: On

370

371 Contents of /Library/LaunchAgents/com.micromat.TechToolProAgent.plist

372 - mod date: Jan 8 14:30:48 2013

373 - size (B): 526

374 - checksum: 4001901753

375

376 <?xml version="1.0" encoding="UTF-8"?>

377 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

378 <plist version="1.0">

379 <dict>

380 <key>StartInterval</key>

381 <integer>15</integer>

382 <key>RunAtLoad</key>

383 <false/>

384 <key>Label</key>

385 <string>com.micromat.TechToolProAgent</string>

386 <key>ProgramArguments</key>

387 <array>

388 <string>/Library/PreferencePanes/TechTool Protection.prefPane/Contents/PlugIns/TechToolProAgent.app/Contents/MacOS/TechTo olProAgent</string>

389 </array>

390 </dict>

391 </plist>

392

393 Contents of /Library/LaunchAgents/com.p5sys.jumpdesktop.agent.plist

394 - mod date: Aug 18 14:22:24 2013

395 - size (B): 548

396 - checksum: 2228379206

397

398 <?xml version="1.0" encoding="UTF-8"?>

399 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

400 <plist version="1.0">

401 <dict>

402 <key>Label</key>

403 <string>com.p5sys.jumpdesktop.agent</string>

404 <key>LimitLoadToSessionType</key>

405 <array>

406 <string>Aqua</string>

407 </array>

408 <key>ProgramArguments</key>

409 <array>

410 <string>/Applications/JumpDesktop/JumpDesktop.app/Contents/MacOS/JumpDesktop</s tring>

411 </array>

412 <key>RunAtLoad</key>

413 <true/>

414 </dict>

415 </plist>

416

417 Contents of /Library/LaunchAgents/com.parallels.mobile.prl_deskctl_agent.launchagent.plist

418 - mod date: Aug 11 06:24:30 2015

419 - size (B): 730

420 - checksum: 1795713191

421

422 <?xml version="1.0" encoding="UTF-8"?>

423 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

424 <plist version="1.0">

425 <dict>

426 <key>EnableTransactions</key>

427 <true/>

428 <key>KeepAlive</key>

429 <dict>

430 <key>PathState</key>

431 <dict>

432 <key>/etc/com.parallels.mobile.prl_deskctl_agent.launchd</key>

433 <true/>

434 </dict>

435 </dict>

436 <key>Label</key>

437 <string>com.parallels.mobile.prl_deskctl_agent.launchagent</string>

438 <key>LimitLoadToSessionType</key>

439 <array>

440 <string>Aqua</string>

441 <string>LoginWindow</string>

442 </array>

443 <key>Program</key>

444 <string>/Applications/Parallels Access.app/Contents/MacOS/Parallels Access Agent.app/Contents/MacOS/prl_deskctl_agent</string>

445 </dict>

446 </plist>

447

448 Contents of /Library/LaunchDaemons/com.app4mac.CheckUpAgent.plist

449 - mod date: Feb 15 22:10:54 2008

450 - size (B): 562

451 - checksum: 4056928582

452

453 <?xml version="1.0" encoding="UTF-8"?>

454 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

455 <plist version="1.0">

456 <dict>

457 <key>Disabled</key>

458 <true/>

459 <key>KeepAlive</key>

460 <true/>

461 <key>Label</key>

462 <string>com.app4mac.CheckUpAgent</string>

463 <key>OnDemand</key>

464 <false/>

465 <key>Program</key>

466 <string>/Applications/CheckUp.app/Contents/MacOS/CheckUpAgent</string>

467 <key>ProgramArguments</key>

468 <array>

469 <string>/Users/Shared/CheckUpAgent</string>

470 </array>

471 <key>StartOnMount</key>

472 <false/>

473 </dict>

474 </plist>

475

476 Contents of /Library/LaunchDaemons/com.barebones.authd.plist

477 - mod date: Aug 6 09:19:55 2013

478 - size (B): 634

479 - checksum: 1995816654

480

481 <?xml version="1.0" encoding="UTF-8"?>

482 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

483 <plist version="1.0">

484 <dict>

485 <key>EnableTransactions</key>

486 <true/>

487 <key>Label</key>

488 <string>com.barebones.authd</string>

489 <key>ProgramArguments</key>

490 <array>

491 <string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

492 </array>

493 <key>Sockets</key>

494 <dict>

495 <key>com.barebones.authd.socket</key>

496 <dict>

497 <key>SockPathMode</key>

498 <integer>438</integer>

499 <key>SockPathName</key>

500 <string>/var/tmp/com.barebones.authd.socket</string>

501 </dict>

502 </dict>

503 </dict>

504 </plist>

505

506 Contents of /Library/LaunchDaemons/com.barebones.textwrangler.plist

507 - mod date: Jan 7 14:11:16 2011

508 - size (B): 802

509 - checksum: 2824893286

510

511 <?xml version="1.0" encoding="UTF-8"?>

512 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

513 <plist version="1.0">

514 <dict>

515 <key>Disabled</key>

516 <true/>

517 <key>Label</key>

518 <string>com.barebones.textwrangler</string>

519 <key>OnDemand</key>

520 <true/>

521 <key>ProgramArguments</key>

522 <array>

523 <string>/Library/PrivilegedHelperTools/com.barebones.textwrangler</string>

524 </array>

525 <key>ServiceIPC</key>

526 <true/>

527 <key>Sockets</key>

528 <dict>

529 <key>MasterSocket</key>

530 <dict>

531 <key>SockFamily</key>

532 <string>Unix</string>

533 <key>SockPathMode</key>

534 <integer>438</integer>

535 <key>SockPathName</key>

536

537 ...and 7 more line(s)

538

539 Contents of /Library/LaunchDaemons/com.crashplan.engine.plist

540 - mod date: Apr 21 19:49:56 2013

541 - size (B): 1676

542 - checksum: 533621574

543

544 <?xml version="1.0" encoding="UTF-8"?>

545 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

546 <plist version="1.0">

547 <dict>

548 <key>Label</key>

549 <string>com.crashplan.engine</string>

550 <key>UserName</key>

551 <string>root</string>

552 <key>GroupName</key>

553 <string>wheel</string>

554 <key>Nice</key>

555 <integer>20</integer>

556 <key>KeepAlive</key>

557 <true/>

558 <key>OnDemand</key>

559 <false/>

560 <key>RunAtLoad</key>

561 <true/>

562 <key>AbandonProcessGroup</key>

563 <true/>

564 <key>WorkingDirectory</key>

565 <string>/Applications/CrashPlan.app/Contents/Resources/Java</string>

566 <key>ProgramArguments</key>

567 <array>

568 <string>/usr/bin/java</string>

569

570 ...and 26 more line(s)

571

572 Contents of /Library/LaunchDaemons/com.freemacsoft.appcleanerd.plist

573 - mod date: Jan 22 23:25:17 2012

574 - size (B): 440

575 - checksum: 1431319842

576

577 <?xml version="1.0" encoding="UTF-8"?>

578 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

579 <plist version="1.0">

580 <dict>

581 <key>Label</key>

582 <string>com.freemacsoft.appcleanerd</string>

583 <key>OnDemand</key>

584 <false/>

585 <key>ProgramArguments</key>

586 <array>

587 <string>/Library/PrivilegedHelperTools/com.freemacsoft.appcleanerd</string>

588 </array>

589 <key>RunAtLoad</key>

590 <true/>

591 </dict>

592 </plist>

593

594 Contents of /Library/LaunchDaemons/com.hidden.daemon.plist

595 - mod date: Jul 1 03:52:48 2010

596 - size (B): 486

597 - checksum: 2360769608

598

599 <?xml version="1.0" encoding="UTF-8"?>

600 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

601 <plist version="1.0">

602 <dict>

603 <key>Label</key>

604 <string>com.hidden.daemon</string>

605 <key>OnDemand</key>

606 <false/>

607 <key>UserName</key>

608 <string>root</string>

609 <key>GroupName</key>

610 <string>wheel</string>

611 <key>KeepAlive</key>

612 <true/>

613 <key>ProgramArguments</key>

614 <array>

615 <string>/usr/local/hidden/hidden</string>

616 </array>

617 </dict>

618 </plist>

619

620 Contents of /Library/LaunchDaemons/com.iobit.AMCDaemon.plist

621 - mod date: Oct 31 15:18:54 2014

622 - size (B): 485

623 - checksum: 3248374927

624

625 <?xml version="1.0" encoding="UTF-8"?>

626 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

627 <plist version="1.0">

628 <dict>

629 <key>KeepAlive</key>

630 <true/>

631 <key>Label</key>

632 <string>com.iobit.AMCDaemon</string>

633 <key>UserName</key>

634 <string>root</string>

635 <key>ProgramArguments</key>

636 <array>

637 <string>/Library/Application Support/AMC/AMCDaemon</string>

638 <string>-load</string>

639 </array>

640 <key>RunAtLoad</key>

641 <true/>

642 </dict>

643 </plist>

644

645 Contents of /Library/LaunchDaemons/com.micromat.TechToolProDaemon.plist

646 - mod date: Jan 8 14:30:48 2013

647 - size (B): 875

648 - checksum: 11654605

649

650 <?xml version="1.0" encoding="UTF-8"?>

651 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

652 <plist version="1.0">

653 <dict>

654 <key>Label</key>

655 <string>com.micromat.TechToolProDaemon</string>

656 <key>StartInterval</key>

657 <integer>2</integer>

658 <key>RunAtLoad</key>

659 <false/>

660 <key>OnDemand</key>

661 <false/>

662 <key>KeepAlive</key>

663 <dict>

664 <key>OtherJobEnabled</key>

665 <dict>

666 <key>com.apple.loginwindow</key>

667 <true/>

668 <key>com.apple.WindowServer</key>

669 <true/>

670 <key>com.apple.windowserver.active</key>

671 <true/>

672 </dict>

673 </dict>

674 <key>LowPriorityIO</key>

675

676 ...and 9 more line(s)

677

678 Contents of /Library/LaunchDaemons/com.p5sys.jumpdesktop.service.plist

679 - mod date: Aug 18 14:22:24 2013

680 - size (B): 553

681 - checksum: 3155793145

682

683 <?xml version="1.0" encoding="UTF-8"?>

684 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

685 <plist version="1.0">

686 <dict>

687 <key>Label</key>

688 <string>com.p5sys.jumpdesktop.service</string>

689 <key>ProgramArguments</key>

690 <array>

691 <string>/Applications/JumpDesktop/JumpDesktop.app/Contents/MacOS/JumpDesktop</s tring>

692 <string>service</string>

693 </array>

694 <key>RunAtLoad</key>

695 <true/>

696 <key>Disabled</key>

697 <false/>

698 <key>KeepAlive</key>

699 <true/>

700 </dict>

701 </plist>

702

703 Contents of /Library/LaunchDaemons/com.parallels.mobile.dispatcher.launchdaemon.plist

704 - mod date: Aug 11 06:24:30 2015

705 - size (B): 727

706 - checksum: 1994226602

707

708 <?xml version="1.0" encoding="UTF-8"?>

709 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

710 <plist version="1.0">

711 <dict>

712 <key>ExitTimeOut</key>

713 <integer>150</integer>

714 <key>Label</key>

715 <string>com.parallels.mobile.dispatcher.launchdaemon</string>

716 <key>ProgramArguments</key>

717 <array>

718 <string>/Applications/Parallels Access.app/Contents/MacOS/Parallels Access Dispatcher Service.app/Contents/MacOS/prl_pm_service</string>

719 <string>-e</string>

720 <string>--logfile</string>

721 <string>/var/log/prl_disp_service_server.log</string>

722 <string>--pidfile</string>

723 <string>/var/run/prl_pm_service.pid</string>

724 </array>

725 <key>RunAtLoad</key>

726 <true/>

727 </dict>

728 </plist>

729

730 Contents of /Library/LaunchDaemons/com.parallels.mobile.kextloader.launchdaemon.plist

731 - mod date: Aug 11 06:24:38 2015

732 - size (B): 663

733 - checksum: 316984297

734

735 <?xml version="1.0" encoding="UTF-8"?>

736 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

737 <plist version="1.0">

738 <dict>

739 <key>ExitTimeOut</key>

740 <integer>150</integer>

741 <key>Label</key>

742 <string>com.parallels.mobile.kextloader.launchdaemon</string>

743 <key>ProgramArguments</key>

744 <array>

745 <string>/sbin/kextload</string>

746 <string>/Applications/Parallels Access.app/Contents/Library/Extensions/10.9/prl_virtual_sound.kext</string>

747 <string>/Applications/Parallels Access.app/Contents/Library/Extensions/10.9/prl_virtual_hid.kext</string>

748 </array>

749 <key>RunAtLoad</key>

750 <true/>

751 </dict>

752 </plist>

753

754 Contents of /Library/LaunchDaemons/com.prey.agent.plist

755 - mod date: Apr 24 17:59:03 2015

756 - size (B): 686

757 - checksum: 1193980917

758

759 <?xml version="1.0" encoding="UTF-8"?>

760 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

761 <plist version="1.0">

762 <dict>

763 <key>KeepAlive</key>

764 <dict>

765 <key>SuccessfulExit</key>

766 <false/>

767 </dict>

768 <key>Label</key>

769 <string>com.prey.agent</string>

770 <key>ProgramArguments</key>

771 <array>

772 <string>/usr/lib/prey/current/bin/prey</string>

773 </array>

774 <key>WorkingDirectory</key>

775 <string>/usr/lib/prey/current</string>

776 <key>RunAtLoad</key>

777 <true/>

778 <key>ExitTimeOut</key>

779 <integer>20</integer>

780 <key>UserName</key>

781 <string>prey</string>

782 <key>WatchPaths</key>

783 <array>

784

785 ...and 4 more line(s)

786

787 Contents of /Library/LaunchDaemons/com.proquesys.NetSAW2.plist

788 - mod date: Jun 14 12:32:24 2011

789 - size (B): 688

790 - checksum: 3198422678

791

792 <?xml version="1.0" encoding="UTF-8"?>

793 <!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd >

794 <plist version="1.0">

795 <dict>

796 <key>Label</key>

797 <string>com.proquesys.NetSAW2</string>

798 <key>ProgramArguments</key>

799 <array>

800 <string>/usr/local/bin/ns2flows.machO</string>

801 </array>

802 <key>OnDemand</key>

803 <false/>

804 <key>UserName</key>

805 <string>raycooke</string>

806 <key>StandardErrorPath</key>

807 <string>/Library/Application Support/ns2flows/stderr.txt</string>

808 <key>StandardOutPath</key>

809 <string>/Library/Application Support/ns2flows/stdout.txt</string>

810 <key>WorkingDirectory</key>

811 <string>/Library/Application Support/ns2flows</string>

812 </dict>

813 </plist>

814

815 Contents of /Library/LaunchDaemons/com.prosofteng.DriveGenius.locum.plist

816 - mod date: Nov 15 11:11:32 2012

817 - size (B): 682

818 - checksum: 757526819

819

820 <?xml version="1.0" encoding="UTF-8"?>

821 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

822 <plist version="1.0">

823 <dict>

824 <key>EnvironmentVariables</key>

825 <dict/>

826 <key>GroupName</key>

827 <string>wheel</string>

828 <key>KeepAlive</key>

829 <false/>

830 <key>Label</key>

831 <string>com.prosofteng.DriveGenius.locum</string>

832 <key>MachServices</key>

833 <dict>

834 <key>com.prosofteng.DriveGenius.locum</key>

835 <true/>

836 </dict>

837 <key>ProgramArguments</key>

838 <array>

839 <string>/Library/PrivilegedHelperTools/com.prosofteng.DriveGenius.locum</string >

840 </array>

841 <key>RunAtLoad</key>

842 <false/>

843 <key>UserName</key>

844 <string>root</string>

845

846 ...and 2 more line(s)

847

848 Contents of /Library/LaunchDaemons/com.prosoftnet.ibackupxdaemon.plist

849 - mod date: Jun 1 05:15:28 2009

850 - size (B): 427

851 - checksum: 1321861200

852

853 <?xml version="1.0" encoding="UTF-8"?>

854 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

855 <plist version="1.0">

856 <dict>

857 <key>Label</key>

858 <string>IBDaemon</string>

859 <key>OnDemand</key>

860 <false/>

861 <key>ProgramArguments</key>

862 <array>

863 <string>/Applications/IBackupforMac/IBDaemon.app/Contents/MacOS/IBDaemon</strin g>

864 </array>

865 <key>RunAtLoad</key>

866 <true/>

867 </dict>

868 </plist>

869

870 Contents of /Library/LaunchDaemons/com.qdea.syncproxhelper.plist

871 - mod date: Sep 5 08:37:24 2010

872 - size (B): 795

873 - checksum: 2411696409

874

875 <?xml version="1.0" encoding="UTF-8"?>

876 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

877 <plist version="1.0">

878 <dict>

879 <key>Disabled</key>

880 <true/>

881 <key>Label</key>

882 <string>com.qdea.syncproxhelper</string>

883 <key>KeepAlive</key>

884 <false/>

885 <key>ProgramArguments</key>

886 <array>

887 <string>/Library/PrivilegedHelperTools/com.qdea.syncproxhelper</string>

888 </array>

889 <key>ServiceIPC</key>

890 <true/>

891 <key>Sockets</key>

892 <dict>

893 <key>MasterSocket</key>

894 <dict>

895 <key>SockFamily</key>

896 <string>Unix</string>

897 <key>SockPathMode</key>

898 <integer>438</integer>

899 <key>SockPathName</key>

900

901 ...and 7 more line(s)

902

903 Contents of /Library/LaunchDaemons/com.smithmicro.schedulerdaemon.plist

904 - mod date: Oct 26 09:45:07 2009

905 - size (B): 468

906 - checksum: 4089351027

907

908 <?xml version="1.0" encoding="UTF-8"?>

909 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

910 <plist version="1.0">

911 <dict>

912 <key>Label</key>

913 <string>com.smithmicro.schedulerdaemon</string>

914 <key>OnDemand</key>

915 <false/>

916 <key>ProgramArguments</key>

917 <array>

918 <string>/Library/Smith Micro/Common/schedulerdaemon</string>

919 </array>

920 <key>RunAtLoad</key>

921 <true/>

922 <key>UserName</key>

923 <string>root</string>

924 </dict>

925 </plist>

926

927 Contents of /Library/LaunchDaemons/com.starfield.backupservice.plist

928 - mod date: Oct 1 21:20:25 2013

929 - size (B): 465

930 - checksum: 1966268484

931

932 <?xml version="1.0" encoding="UTF-8"?>

933 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

934 <plist version="1.0">

935 <dict>

936 <key>KeepAlive</key>

937 <true/>

938 <key>Label</key>

939 <string>com.starfield.backupservice</string>

940 <key>OnDemand</key>

941 <false/>

942 <key>ProgramArguments</key>

943 <array>

944 <string>/Applications/Workspace/BackupService/offSyncService</string>

945 </array>

946 <key>RunAtLoad</key>

947 <true/>

948 </dict>

949 </plist>

950

951 Contents of /Library/LaunchDaemons/com.tether.plist

952 - mod date: Mar 7 13:17:20 2012

953 - size (B): 561

954 - checksum: 1903244518

955

956 <?xml version="1.0" encoding="UTF-8"?>

957 <!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN

958 http://www.apple.com/DTDs/PropertyList-1.0.dtd >

959 <plist version="1.0">

960 <dict>

961 <key>Label</key>

962 <string>com.tether.tetherdaemon</string>

963 <key>ProgramArguments</key>

964 <array>

965 <string>/Applications/Tether.app/Contents/Resources/TetherDaemon</string>

966 </array>

967 <key>KeepAlive</key>

968 <true/>

969 </dict>

970 </plist>

971

972 Contents of /Library/LaunchDaemons/openbase.plist

973 - mod date: Oct 22 15:34:05 2007

974 - size (B): 427

975 - checksum: 1265528665

976

977 <?xml version="1.0" encoding="UTF-8"?>

978 <!DOCTYPE plist PUBLIC "-//OpenBase International//DTD PLIST 1.0//EN"

979 "http://www.openbase.com">

980 <plist version="1.0">

981 <dict>

982 <key>Label</key>

983 <string>com.openbase.com.openexec</string>

984 <key>ProgramArguments</key>

985 <array>

986 <string>/Library/OpenBase/bin/openmonitor</string>

987 <string>-noexit</string>

988 <string>YES</string>

989 </array>

990 <key>RunAtLoad</key>

991 <true/>

992 </dict>

993 </plist>

994

995 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

996 - mod date: Apr 14 17:39:06 2015

997 - size (B): 554

998 - checksum: 3012644940

999

1000 <?xml version="1.0" encoding="UTF-8"?>

1001 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1002 <plist version="1.0">

1003 <dict>

1004 <key>Disabled</key>

1005 <true/>

1006 <key>Label</key>

1007 <string>org.apache.httpd</string>

1008 <key>EnvironmentVariables</key>

1009 <dict>

1010 <key>XPC_SERVICES_UNAVAILABLE</key>

1011 <string>1</string>

1012 </dict>

1013 <key>ProgramArguments</key>

1014 <array>

1015 <string>/usr/sbin/httpd-wrapper</string>

1016 <string>-D</string>

1017 <string>FOREGROUND</string>

1018 </array>

1019 <key>OnDemand</key>

1020 <false/>

1021 </dict>

1022 </plist>

1023

1024 Contents of /private/etc/hosts

1025 - mod date: Oct 1 21:20:20 2013

1026 - size (B): 255

1027 - checksum: 3555392180

1028

1029 127.0.0.1 localhost

1030 255.255.255.255 broadcasthost

1031 ::1 localhost

1032 fe80::1%lo0 localhost

1033 127.0.0.1 DriveMap

1034

1035 Contents of /private/etc/pam.d/chrome-remote-desktop

1036 - mod date: Jul 16 15:23:42 2014

1037 - size (B): 424

1038 - checksum: 3278862984

1039

1040 auth required pam_deny.so

1041 account required pam_permit.so

1042 password required pam_deny.so

1043 session required pam_deny.so

1044

1045 Contents of /private/etc/ssh_config

1046 - mod date: Mar 28 15:36:28 2014

1047 - size (B): 3957

1048 - checksum: 2841432291

1049

1050 Host *

1051 SendEnv LANG LC_*

1052 Host *

1053 XAuthLocation /opt/X11/bin/xauth

1054

1055 Contents of Library/LaunchAgents/.DS_Store

1056 - data

1057 - mod date: Nov 19 16:53:42 2013

1058 - size (B): 6148

1059 - checksum: 1987479788

1060

1061 [N/A]

1062

1063 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

1064 - mod date: Dec 23 09:23:45 2013

1065 - size (B): 603

1066 - checksum: 394026997

1067

1068 <?xml version="1.0" encoding="UTF-8"?>

1069 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1070 <plist version="1.0">

1071 <dict>

1072 <key>Label</key>

1073 <string>com.adobe.ARM.UUID</string>

1074 <key>ProgramArguments</key>

1075 <array>

1076 <string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

1077 <string>semi-auto</string>

1078 </array>

1079 <key>RunAtLoad</key>

1080 <true/>

1081 <key>StartInterval</key>

1082 <integer>12600</integer>

1083 </dict>

1084 </plist>

1085

1086 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

1087 - mod date: Dec 22 16:43:01 2013

1088 - size (B): 601

1089 - checksum: 926752576

1090

1091 <?xml version="1.0" encoding="UTF-8"?>

1092 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1093 <plist version="1.0">

1094 <dict>

1095 <key>Label</key>

1096 <string>com.adobe.ARM.UUID</string>

1097 <key>ProgramArguments</key>

1098 <array>

1099 <string>/Applications/Adobe Acrobat X Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

1100 </array>

1101 <key>RunAtLoad</key>

1102 <true/>

1103 <key>StartInterval</key>

1104 <integer>12600</integer>

1105 </dict>

1106 </plist>

1107

1108 Contents of Library/LaunchAgents/com.amazon.music.plist

1109 - mod date: Jul 21 13:09:46 2015

1110 - size (B): 448

1111 - checksum: 3668832669

1112

1113 <?xml version="1.0" encoding="UTF-8"?>

1114 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1115 <plist version="1.0">

1116 <dict>

1117 <key>EnableTransactions</key>

1118 <false/>

1119 <key>KeepAlive</key>

1120 <true/>

1121 <key>Label</key>

1122 <string>com.amazon.music</string>

1123 <key>Program</key>

1124 <string>/Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper</string>

1125 <key>RunAtLoad</key>

1126 <true/>

1127 </dict>

1128 </plist>

1129

1130 Contents of Library/LaunchAgents/com.apple.FolderActions.folders.plist

1131 - mod date: Dec 1 09:57:21 2013

1132 - size (B): 586

1133 - checksum: 3157223569

1134

1135 <?xml version="1.0" encoding="UTF-8"?>

1136 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1137 <plist version="1.0">

1138 <dict>

1139 <key>Label</key>

1140 <string>com.apple.FolderActions.folders</string>

1141 <key>Program</key>

1142 <string>/usr/bin/osascript</string>

1143 <key>ProgramArguments</key>

1144 <array>

1145 <string>osascript</string>

1146 <string>-e</string>

1147 <string>tell application "Folder Actions Dispatcher" to tick</string>

1148 </array>

1149 <key>WatchPaths</key>

1150 <array>

1151 <string>/Users/USER/Dropbox/Print/PrintQueue</string>

1152 </array>

1153 </dict>

1154 </plist>

1155

1156 Contents of Library/LaunchAgents/com.citrixonline.GoToMeeting.G2MUpdate.plist

1157 - mod date: Aug 25 11:56:05 2015

1158 - size (B): 460

1159 - checksum: 1605981103

1160

1161 <?xml version="1.0" encoding="UTF-8"?>

1162 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1163 <plist version="1.0">

1164 <dict>

1165 <key>Label</key>

1166 <string>com.citrixonline.GoToMeeting.G2MUpdate</string>

1167 <key>ProgramArguments</key>

1168 <array>

1169 <string>/Users/USER/Library/Application Support/CitrixOnline/GoToMeeting/G2MUpdate</string>

1170 </array>

1171 <key>StartInterval</key>

1172 <integer>3660</integer>

1173 </dict>

1174 </plist>

1175

1176 Contents of Library/LaunchAgents/com.iobit.MacBoosterMini.plist

1177 - mod date: Dec 20 15:18:23 2014

1178 - size (B): 471

1179 - checksum: 3702352754

1180

1181 <?xml version="1.0" encoding="UTF-8"?>

1182 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1183 <plist version="1.0">

1184 <dict>

1185 <key>KeepAlive</key>

1186 <true/>

1187 <key>Label</key>

1188 <string>com.iobit.MacBooster-mini</string>

1189 <key>Program</key>

1190 <string>/Users/USER/Library/Application Support/MacBooster/MacBooster mini.app/Contents/MacOS/MacBooster mini</string>

1191 <key>Version</key>

1192 <integer>10837</integer>

1193 </dict>

1194 </plist>

1195

1196 Contents of Library/LaunchAgents/com.lastpass.LastPassHelper.plist

1197 - mod date: Jul 12 11:33:15 2015

1198 - size (B): 446

1199 - checksum: 3832661722

1200

1201 <?xml version="1.0" encoding="UTF-8"?>

1202 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1203 <plist version="1.0">

1204 <dict>

1205 <key>Label</key>

1206 <string>com.lastpass.LastPassHelper</string>

1207 <key>Program</key>

1208 <string>/Users/USER/Library/Application Support/LastPass/LastPassHelper.app/Contents/MacOS/LastPassHelper</string>

1209 <key>RunAtLoad</key>

1210 <true/>

1211 </dict>

1212 </plist>

1213

1214 Contents of Library/LaunchAgents/com.parallels.mobile.startgui.launchagent.plist

1215 - mod date: Aug 25 11:35:09 2015

1216 - size (B): 524

1217 - checksum: 662430762

1218

1219 <?xml version="1.0" encoding="UTF-8"?>

1220 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1221 <plist version="1.0">

1222 <dict>

1223 <key>ExitTimeOut</key>

1224 <integer>150</integer>

1225 <key>Label</key>

1226 <string>com.parallels.mobile.startgui.launchagent</string>

1227 <key>ProgramArguments</key>

1228 <array>

1229 <string>/Applications/Parallels Access.app/Contents/MacOS/prl_deskctl_wizard</string>

1230 <string>--autorun</string>

1231 </array>

1232 <key>RunAtLoad</key>

1233 <true/>

1234 </dict>

1235 </plist>

1236

1237 App extensions

1238

1239 com.getdropbox.dropbox.garcon

1240 com.microsoft.onenote.mac.shareextension

1241 com.parallels.Access.FileSharingExtension

1242 com.parallels.desktop.console.Resource-Monitor

1243

1244 Modifications

1245

1246 file added: /Applications/Amazon Music.app/Contents/Frameworks/Amazon Music Helper.app

1247 file added: /Applications/Amazon Music.app/Contents/Frameworks/cef/libcef.dylib

1248 file added: /Applications/Amazon Music.app/Contents/Frameworks/taglib/libtag.1.9.1.dylib

1249 file added: /Applications/AppCleaner.app/Contents/MacOS/AppCleaner.x86_64

1250 file missing: /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner Helper.app

1251 file added: /Applications/Evernote.app/Contents/MacOS/Evernote.x86_64

1252

1253 Installations

1254

1255 Microsoft OneNote: 8/24/15, 8:13 PM

1256 TeamViewer: 8/13/15, 10:13 AM

1257 Adobe Flash Player: 8/12/15, 6:15 PM

1258 Microsoft OneNote: 8/7/15, 5:33 PM

1259 plugins-3: 7/31/15, 5:29 PM

1260

1261 Elapsed time (sec): 6742

Aug 26, 2015 11:34 AM in response to utopiact

A

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

Restart

from the menu bar.

B

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

C

Though I don't like to make this suggestion, the system is so heavily modified by third-party software (some of it years out of date) that, instead of trying to remove the modifications piecemeal, you should erase the startup volume, reinstall OS X, and then go through the initial setup process, restoring only user data from a backup—not applications or other files. This course of action will be the easiest and most reliable.

Back up all data to at least two different storage devices, if you haven't already done so. One backup is not enough to be safe. The backups can be made with Time Machine or with Disk Utility. Preferably both.

Erase and install OS X. This operation will destroy all data on the startup volume, so you had be better be sure of the backups. If you upgraded from an older version of OS X, you'll need the Apple ID and password that you used, so make a note of those before you begin.

When you restart, you'll be prompted to go through the initial setup process. That’s when you transfer the data from a backup.

Select only users in the Setup Assistant dialog—not Applications, Computer & Network Settings, or Other files and folders. Don't transfer the Guest account, if it was enabled.

After that, check the App Store for software updates.

If the problem is resolved after the clean installation, reinstall third-party software selectively. I can only suggest general guidelines. Self-contained applications that install into the Applications folder by drag-and-drop or download from the App Store are usually safe. Anything that comes packaged as an installer or that prompts for an administrator password is suspect, and you must test thoroughly after reinstalling each such item to make sure you haven't restored the problem.

I strongly recommend that you never reinstall commercial "security" products or "utilities," nor any software that changes the user interface or the behavior of built-in applications such as Safari. If you do that, the problem is likely to recur. Specifically, never reinstall "Drive Genius," "TechTool," "CheckUp," "AppCleaner," or "MacBooster."

Any system modifications that you do choose to install must be kept up to date. None is required for normal operation.

Before installing any software, ask yourself the question: "Am I sure I know how to uninstall this without having to wipe the volume again?" If the answer is "no," stop.

Never install any third-party software unless you know how to uninstall it.

Mail Not Responding

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.