com.apple.AddressBook.InternetAccountsBridge[2010]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted

Question

Level 1

8 points

com.apple.AddressBook.InternetAccountsBridge[2010]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted

Hi,

I have MacMini Server running on 10.10.5 which hosts all my contacts using the Server App (Carddav). This setup is running for a while now without any issue.

But after the update of my Clients (iMac, Macbook Pro) to El Capitan 10.11.2 I see a lot of errors on the client in /var/log/system. Also if I try to edit one contact the beachball appears and it takes a while until I can edit something.

What can I do to solve it? This seems to be a El Capitan bug.

Dec 14 00:08:14 MacBook-Pro com.apple.AddressBook.InternetAccountsBridge[2010]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 1

Dec 14 00:08:14 MacBook-Pro sandboxd[129] ([2010]): com.apple.Addres(2010) deny network-outbound /private/var/run/mDNSResponder

Dec 14 00:08:15 MacBook-Pro com.apple.AddressBook.InternetAccountsBridge[2010]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 2

Dec 14 00:08:15 MacBook-Pro sandboxd[129] ([2010]): com.apple.Addres(2010) deny network-outbound /private/var/run/mDNSResponder

Dec 14 00:08:16 MacBook-Pro kernel[0]: Sandbox: com.apple.Addres(2010) deny(1) network-outbound /private/var/run/mDNSResponder

Dec 14 00:08:16 MacBook-Pro com.apple.AddressBook.InternetAccountsBridge[2010]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3

Dec 14 00:08:17 MacBook-Pro kernel[0]: Sandbox: com.apple.Addres(2010) deny(1) network-outbound /private/var/run/mDNSResponder

Dec 14 00:08:17 MacBook-Pro com.apple.AddressBook.InternetAccountsBridge[2010]: dnssd_clientstub ConnectToServer: connect() failed path:/var/run/mDNSResponder Socket:4 Err:-1 Errno:1 Operation not permitted

MacBook Pro with Retina display, OS X El Capitan (10.11.2), null

Posted on Dec 13, 2015 3:26 PM

Reply

Answer 1

Linc Davis

Level 10

209,535 points

Dec 13, 2015 3:58 PM in response to Madman1234

Please read this whole message before doing anything.

This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Reply

Answer 2

Madman1234 Author

Level 1

8 points

Dec 14, 2015 12:40 AM in response to Linc Davis

Boot in safe mode - same issue

after reboot in normal mode - same issue,

Please advice.

Thanks!

Reply

Answer 3

Linc Davis

Level 10

209,535 points

Dec 14, 2015 10:38 AM in response to Madman1234

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, please back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the requisite skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is intermittently slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual before running it. If you can only test in safe mode, do that.

6. If you have more than one user, and only one user is affected by the problem,, and the affected user is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any one of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If the test is taking much longer than usual to run because the computer is very slow, you might be prompted for your password a second time. The authorization that you grant by entering it expires automatically after five minutes.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

Test started

Part 1 of 4 done at: … sec
…
Part 4 of 4 done at: … sec

The test results are on the Clipboard.

Please close this window.

The intervals between parts won't be exactly equal, but they give a rough indication of progress.

Wait for the final message "Please close this window" to appear. If you don't see it within about 15 minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step. You'll have incomplete results, but still something. If you close the Terminal window while the test is still running, the partial results won't be saved and you'll have to start over.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been saved to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "close this window" message. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the software that runs this website. Please post the test results on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 4

Madman1234 Author

Level 1

8 points

Dec 14, 2015 1:39 PM in response to Linc Davis

I ran the test, but it contains only general stuff, and nothing regarding to my problem. I have a Bachelor in Computer Science, so I am able to read the output.

The issue starts, as soon as I try to edit of my contacts which are hosted on my server.

Thanks

Reply

Answer 5

Linc Davis

Level 10

209,535 points

Dec 14, 2015 2:19 PM in response to Madman1234

I would need to see the test output to make any other suggestions, except this one: If you happen to be running a pirated copy of OS X on a PC, you should erase the boot drive and install an OS that you have a right to use. Good luck.

Reply

Answer 6

Madman1234 Author

Level 1

8 points

Dec 14, 2015 2:32 PM in response to Linc Davis

I have a Macbook Pro Retina, so it's fine 🙂

1 Start time: 22:26:35 12/14/15

2

3 Revision: 1407

4

5 Model Identifier: MacBookPro12,1

6 Boot ROM Version: MBP121.0167.B15

7 System Version: OS X 10.11.2 (15C50)

8 Kernel Version: Darwin 15.2.0

9 Time since boot: 3:13

10

11 USB

12

13 USB-PS/2 Optical Mouse (Logitech Inc.)

14

15 Energy impact, lifetime (relative)

16

17 WindowServer (UID 88): 778.88

18 com.apple.WebKit.WebContent (UID 501): 24.52

19 bash (UID 501): 5.35

20 Safari (UID 501): 3.24

21 com.apple.WebKit.WebContent (UID 501): 2.39

22

23 Energy impact, sampled (relative)

24

25 WindowServer (UID 88): 6.18

26 mdworker (UID 501): 2.96

27 kernel_task (UID 0): 2.47

28 Terminal (UID 501): 2.37

29 AddressBookSourceSync (UID 501): 2.01

30

31 GPU usage, lifetime (ms/s)

32

33 WindowServer (UID 88): 1580.38

34 kernel_task (UID 0): 211.22

35 com.apple.WebKit.WebContent (UID 501): 31.01

36 com.apple.WebKit.WebContent (UID 501): 2.16

37

38 GPU usage, sampled (ms/s)

39

40 WindowServer (UID 88): 6.86

41

42 CPU usage, lifetime (ms/s)

43

44 com.apple.WebKit.WebContent (UID 501): 92.20

45 kernel_task (UID 0): 54.26

46 bash (UID 501): 53.51

47 WindowServer (UID 88): 42.13

48 Safari (UID 501): 26.03

49 com.apple.WebKit.WebContent (UID 501): 18.21

50

51 CPU usage, sampled (ms/s)

52

53 mdworker (UID 501): 54.80

54 WindowServer (UID 88): 23.15

55 AddressBookSourceSync (UID 501): 19.46

56 com.apple.AddressBook.InternetAc (UID 501): 8.87

57 sandboxd (UID 0): 7.50

58 socketfilterfw (UID 0): 5.09

59 com.apple.WebKit.WebContent (UID 501): 4.78

60 com.apple.WebKit.WebContent (UID 501): 3.85

61

62 Memory (MB)

63

64 kernel_task (UID 0): 1022

65

66 Firewall: On

67

68 TCP/IP

69

70 DHCP Configuration

71

72 System caches/logs

73

74 2,2 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data

75

76 Diagnostic reports

77

78 2015-12-14 OutBank crash

79

80 HID errors: 13

81

82 Kernel log

83

84 Dec 13 17:27:21 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xec80597b599f7873

85 Dec 13 19:02:23 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xec80597b59abe6fb

86 Dec 13 20:01:31 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xec80597b51744e6b

87 Dec 13 21:45:48 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xec80597b51897e6b

88 Dec 14 00:08:23 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xec80597b5185b4bb

89 Dec 14 09:33:23 Process launchd [1] disabling system-wide I/O Throttling

90 Dec 14 09:33:23 Process launchd [1] disabling system-wide CPU Throttling

91 Dec 14 09:34:04 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x1804914c06dd60f3, provider is 0x1804914b479e82f3

92 Dec 14 09:34:04 init: error getting PHY_MODE; using MODE_UNKNOWN

93 Dec 14 09:34:04 [IGPU] Scheduler Throttle Cap = 100ms.

94 Dec 14 09:35:58 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xd785d63051311e2b, provider is 0xd785d62f91bcd42b

95 Dec 14 09:35:58 init: error getting PHY_MODE; using MODE_UNKNOWN

96 Dec 14 09:37:46 considerRebuildOfPrelinkedKernel com.apple.iokit.IOEthernetAVBController triggered rebuild

97 Dec 14 09:38:33 Process launchd [1] disabling system-wide I/O Throttling

98 Dec 14 09:38:33 Process launchd [1] disabling system-wide CPU Throttling

99 Dec 14 09:38:46 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xcd05aaa17825e28b, provider is 0xcd05aaa0b8d1048b

100 Dec 14 09:38:46 init: error getting PHY_MODE; using MODE_UNKNOWN

101 Dec 14 09:38:47 [IGPU] Scheduler Throttle Cap = 100ms.

102 Dec 14 09:40:33 considerRebuildOfPrelinkedKernel com.apple.iokit.IOEthernetAVBController triggered rebuild

103 Dec 14 09:42:03 utun_start: ifnet_disable_output returned error 12

104 Dec 14 09:42:03 utun_start: ifnet_disable_output returned error 12

105 Dec 14 19:13:16 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xc47b505c41c6faf1, provider is 0xc47b505b826babf1

106 Dec 14 19:13:16 init: error getting PHY_MODE; using MODE_UNKNOWN

107 Dec 14 19:13:17 [IGPU] Scheduler Throttle Cap = 100ms.

108 Dec 14 22:20:14 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xc0bf77f707f45b17

109

110 System log

111

112 Dec 14 22:17:57 OutBank: CGContextSaveGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

113 Dec 14 22:17:57 OutBank: CGContextConcatCTM: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

114 Dec 14 22:17:57 OutBank: CGContextRestoreGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

115 Dec 14 22:17:57 OutBank: CGContextGetCTM: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

116 Dec 14 22:17:57 OutBank: CGContextGetDefaultUserSpaceToDeviceSpaceTransform: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

117 Dec 14 22:17:57 OutBank: CGContextSaveGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

118 Dec 14 22:17:57 OutBank: CGContextConcatCTM: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

119 Dec 14 22:17:57 OutBank: CGContextSaveGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

120 Dec 14 22:17:57 OutBank: CGContextSetCompositeOperation: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

121 Dec 14 22:17:57 OutBank: CGContextDrawImages: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

122 Dec 14 22:17:57 OutBank: CGContextRestoreGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

123 Dec 14 22:17:57 OutBank: CGContextRestoreGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.

124 Dec 14 22:18:25 com.apple.backupd: Error: (-8084) SrcErr:YES Copying /Users/USER/Library/Containers/de.stoegerit.OutBankMac/Data/Library/Saved Application State/de.stoegerit.OutBankMac.savedState/windows.plist to (null)

125 Dec 14 22:19:40 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x38 is not attached to window 0x47

126 Dec 14 22:19:41 Safari: tcp_connection_tls_session_error_callback_imp 178 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

127 Dec 14 22:20:10 Safari: tcp_connection_tls_session_error_callback_imp 177 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32

128 Dec 14 22:20:10 Safari: tcp_connection_tls_session_error_callback_imp 176 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32

129 Dec 14 22:20:10 Safari: tcp_connection_tls_session_error_callback_imp 175 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

130 Dec 14 22:20:10 Safari: tcp_connection_tls_session_error_callback_imp 173 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

131 Dec 14 22:21:36 Safari: tcp_connection_tls_session_error_callback_imp 185 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

132 Dec 14 22:21:38 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x38 is not attached to window 0x47

133 Dec 14 22:21:39 Safari: tcp_connection_tls_session_error_callback_imp 186 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

134 Dec 14 22:22:06 Safari: tcp_connection_tls_session_error_callback_imp 184 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32

135 Dec 14 22:22:06 Safari: tcp_connection_tls_session_error_callback_imp 181 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32

136 Dec 14 22:22:08 Safari: tcp_connection_tls_session_error_callback_imp 182 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32

137

138 launchd log

139

140 Dec 12 20:04:24 com.apple.xpc.launchd.domain.system: Caller not allowed to perform action: open.1050, action = service submission, code = 1: Operation not permitted, uid = 501, euid = 501, gid = 20, egid = 20, asid = 100000

141 Dec 12 20:04:25 com.apple.xpc.launchd.domain.system: Could not read path: path = //System/Library/LaunchAgents/com.apple.MDCrashReportd.plist, error = 2: No such file or directory

142 Dec 12 20:04:25 com.apple.xpc.launchd.domain.system: Caller not allowed to perform action: launchctl.1090, action = start service, code = 1: Operation not permitted, uid = 501, euid = 501, gid = 20, egid = 20, asid = 100000

143 Dec 13 09:03:15 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.

144 Dec 13 09:03:15 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

145 Dec 13 09:03:37 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.327, service = com.shazam.mac.ShazamHelper, error = 119: Service is disabled

146 Dec 13 09:03:37 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.327, service = com.whoisonmywifi.helperagent, error = 119: Service is disabled

147 Dec 13 16:19:10 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.

148 Dec 13 16:19:10 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

149 Dec 13 16:19:24 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.261, service = com.shazam.mac.ShazamHelper, error = 119: Service is disabled

150 Dec 13 16:19:24 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.261, service = com.whoisonmywifi.helperagent, error = 119: Service is disabled

151 Dec 14 09:34:03 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.

152 Dec 14 09:34:03 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

153 Dec 14 09:34:17 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.334, service = com.shazam.mac.ShazamHelper, error = 119: Service is disabled

154 Dec 14 09:34:17 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.334, service = com.whoisonmywifi.helperagent, error = 119: Service is disabled

155 Dec 14 09:35:57 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.

156 Dec 14 09:35:57 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

157 Dec 14 09:38:46 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.

158 Dec 14 09:38:46 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

159 Dec 14 09:39:02 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.264, service = com.shazam.mac.ShazamHelper, error = 119: Service is disabled

160 Dec 14 09:39:02 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.264, service = com.whoisonmywifi.helperagent, error = 119: Service is disabled

161 Dec 14 19:13:16 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.

162 Dec 14 19:13:16 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

163 Dec 14 19:13:43 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.257, service = com.shazam.mac.ShazamHelper, error = 119: Service is disabled

164 Dec 14 19:13:43 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.257, service = com.whoisonmywifi.helperagent, error = 119: Service is disabled

165

166 Console log

167

168 Dec 9 09:33:02 fontd: Failed to open read-only database, regenerating DB

169 Dec 12 08:52:09 fontd: Failed to open read-only database, regenerating DB

170 Dec 13 09:03:38 fontd: Failed to open read-only database, regenerating DB

171 Dec 14 09:36:18 fontd: XType - wal checkpoint: 0, -1, -1.

172 Dec 14 09:39:02 fontd: Failed to open read-only database, regenerating DB

173 Dec 14 11:08:48 hps: Error loading /Library/Internet Plug-Ins/Silverlight.plugin/Contents/MacOS/agcore: dlopen(/Library/Internet Plug-Ins/Silverlight.plugin/Contents/MacOS/agcore, 262): no suitable image found. Did find:

174 /Library/Internet Plug-Ins/Silverlight.plugin/Contents/MacOS/agcore: mach-o, but wrong architecture

175 Dec 14 19:13:44 fontd: Failed to open read-only database, regenerating DB

176

177 Loaded kernel extensions

178

179 com.checkpoint.cpfw (1.0)

180

181 System services loaded

182

183 com.apple.logd

184 - status: 1

185 com.apple.watchdogd

186 com.checkpoint.epc.service

187 com.microsoft.office.licensing.helper

188 com.oracle.java.Helper-Tool

189 com.teamviewer.Helper

190 com.transcend.TSRecoverHandlerHelp

191 com.transcend.TSSleepHandlerHelp

192 com.transcend.TSTRIMHandlerHelp

193

194 Login services loaded

195

196 com.checkpoint.eps.gui

197 com.checkpoint.eps.upgrader

198 com.citrix.AuthManager_Mac

199 com.citrix.ReceiverHelper

200 com.citrix.ServiceRecords

201 com.google.keystone.user.agent

202 com.oracle.java.Java-Updater

203

204 Login services disabled

205

206 com.shazam.mac.ShazamHelper

207

208 User services disabled

209

210 com.shazam.mac.ShazamHelper

211

212 Contents of /Library/LaunchAgents/com.checkpoint.eps.gui.plist

213 - mod date: Jun 21 12:54:28 2015

214 - size (B): 564

215 - checksum: 970934272

216

217 <?xml version="1.0" encoding="UTF-8"?>

218 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

219 <plist version="1.0">

220 <dict>

221 <key>Label</key>

222 <string>com.checkpoint.eps.gui</string>

223 <key>ProgramArguments</key>

224 <array>

225 <string>open</string>

226 <string>-a</string>

227 <string>Endpoint Security VPN.app</string>

228 </array>

229 <key>RunAtLoad</key>

230 <true/>

231 <key>ServiceIPC</key>

232 <false/>

233 </dict>

234 </plist>

235

236 Contents of /Library/LaunchAgents/com.checkpoint.eps.upgrader.plist

237 - mod date: Jun 21 12:54:29 2015

238 - size (B): 738

239 - checksum: 2620573250

240

241 <?xml version="1.0" encoding="UTF-8"?>

242 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

243 <plist version="1.0">

244 <dict>

245 <key>Label</key>

246 <string>com.checkpoint.eps.upgrader</string>

247 <key>ProgramArguments</key>

248 <array>

249 <string>/Library/Application Support/Checkpoint/Endpoint Connect/Upgrader</string>

250 </array>

251 <key>WatchPaths</key>

252 <array>

253 <string>/Library/Application Support/Checkpoint/Endpoint Connect/pkg</string>

254 </array>

255 <key>AbandonProcessGroup</key>

256 <true/>

257 <key>WorkingDirectory</key>

258 <string>/Library/Application Support/Checkpoint/Endpoint Connect</string>

259 </dict>

260 </plist>

261

262 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

263 - mod date: Jul 12 20:00:10 2015

264 - size (B): 104

265 - checksum: 2739741283

266

267 <?xml version="1.0" encoding="UTF-8"?>

268 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

269 <plist version="1.0">

270 <dict>

271 <key>Label</key>

272 <string>com.oracle.java.Java-Updater</string>

273 <key>ProgramArguments</key>

274 <array>

275 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

276 <string>-bgcheck</string>

277 </array>

278 <key>StandardErrorPath</key>

279 <string>/dev/null</string>

280 <key>StandardOutPath</key>

281 <string>/dev/null</string>

282 <key>StartCalendarInterval</key>

283 <dict>

284 <key>Hour</key>

285 <integer>7</integer>

286 <key>Minute</key>

287 <integer>20</integer>

288 <key>Weekday</key>

289 <integer>3</integer>

290 </dict>

291 </dict>

292

293 ...and 1 more line(s)

294

295 Contents of /Library/LaunchDaemons/com.checkpoint.epc.service.plist

296 - mod date: Jun 21 12:54:28 2015

297 - size (B): 1077

298 - checksum: 73522609

299

300 <?xml version="1.0" encoding="UTF-8"?>

301 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

302 <plist version="1.0">

303 <dict>

304 <key>Label</key>

305 <string>com.checkpoint.epc.service</string>

306 <key>ProgramArguments</key>

307 <array>

308 <string>/Library/Application Support/Checkpoint/Endpoint Connect/TracSrvWrapper</string>

309 </array>

310 <key>WorkingDirectory</key>

311 <string>/Library/Application Support/Checkpoint/Endpoint Connect</string>

312 <key>RunAtLoad</key>

313 <true/>

314 <key>KeepAlive</key>

315 <dict>

316 <key>SuccessfulExit</key>

317 <false/>

318 </dict>

319 <key>ServiceIPC</key>

320 <true/>

321 <key>EnvironmentVariables</key>

322 <dict>

323 <key>TRACLOG</key>

324 <string>true</string>

325

326 ...and 7 more line(s)

327

328 Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

329 - mod date: Mar 2 14:11:02 2015

330 - size (B): 611

331 - checksum: 2586050363

332

333 <?xml version="1.0" encoding="UTF-8"?>

334 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

335 <plist version="1.0">

336 <dict>

337 <key>Disabled</key>

338 <true/>

339 <key>Label</key>

340 <string>com.teamviewer.service</string>

341 <key>KeepAlive</key>

342 <true/>

343 <key>ProgramArguments</key>

344 <array>

345 <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

346 <string>-Module</string>

347 <string>Full</string>

348 </array>

349 <key>RunAtLoad</key>

350 <true/>

351 <key>WorkingDirectory</key>

352 <string>/Applications/TeamViewer.app/Contents/MacOS</string>

353 </dict>

354 </plist>

355

356 Contents of /Library/LaunchDaemons/com.transcend.TSRecoverHandlerHelp.plist

357 - mod date: Aug 14 17:47:26 2015

358 - size (B): 596

359 - checksum: 2394320075

360

361 <?xml version="1.0" encoding="UTF-8"?>

362 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

363 <plist version="1.0">

364 <dict>

365 <key>Label</key>

366 <string>com.transcend.TSRecoverHandlerHelp</string>

367 <key>MachServices</key>

368 <dict>

369 <key>com.transcend.TSRecoverHandlerHelp</key>

370 <true/>

371 </dict>

372 <key>Program</key>

373 <string>/Library/PrivilegedHelperTools/com.transcend.TSRecoverHandlerHelp</stri ng>

374 <key>ProgramArguments</key>

375 <array>

376 <string>/Library/PrivilegedHelperTools/com.transcend.TSRecoverHandlerHelp</stri ng>

377 </array>

378 </dict>

379 </plist>

380

381 Contents of /Library/LaunchDaemons/com.transcend.TSSleepHandlerHelp.plist

382 - mod date: Aug 14 17:47:26 2015

383 - size (B): 619

384 - checksum: 879412800

385

386 <?xml version="1.0" encoding="UTF-8"?>

387 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

388 <plist version="1.0">

389 <dict>

390 <key>KeepAlive</key>

391 <true/>

392 <key>Label</key>

393 <string>com.transcend.TSSleepHandlerHelp</string>

394 <key>MachServices</key>

395 <dict>

396 <key>com.transcend.TSSleepHandlerHelp</key>

397 <true/>

398 </dict>

399 <key>Program</key>

400 <string>/Library/PrivilegedHelperTools/com.transcend.TSSleepHandlerHelp</string >

401 <key>ProgramArguments</key>

402 <array>

403 <string>/Library/PrivilegedHelperTools/com.transcend.TSSleepHandlerHelp</string >

404 </array>

405 </dict>

406 </plist>

407

408 Contents of /Library/LaunchDaemons/com.transcend.TSTRIMHandlerHelp.plist

409 - mod date: Aug 14 17:47:26 2015

410 - size (B): 584

411 - checksum: 2461208954

412

413 <?xml version="1.0" encoding="UTF-8"?>

414 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

415 <plist version="1.0">

416 <dict>

417 <key>Label</key>

418 <string>com.transcend.TSTRIMHandlerHelp</string>

419 <key>MachServices</key>

420 <dict>

421 <key>com.transcend.TSTRIMHandlerHelp</key>

422 <true/>

423 </dict>

424 <key>Program</key>

425 <string>/Library/PrivilegedHelperTools/com.transcend.TSTRIMHandlerHelp</string>

426 <key>ProgramArguments</key>

427 <array>

428 <string>/Library/PrivilegedHelperTools/com.transcend.TSTRIMHandlerHelp</string>

429 </array>

430 </dict>

431 </plist>

432

433 Contents of Library/LaunchAgents/com.google.keystone.agent.plist

434 - mod date: Sep 24 20:24:23 2015

435 - size (B): 803

436 - checksum: 1800037854

437

438 <?xml version="1.0" encoding="UTF-8"?>

439 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

440 <plist version="1.0">

441 <dict>

442 <key>Label</key>

443 <string>com.google.keystone.user.agent</string>

444 <key>LimitLoadToSessionType</key>

445 <string>Aqua</string>

446 <key>ProgramArguments</key>

447 <array>

448 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

449 <string>-runMode</string>

450 <string>ifneeded</string>

451 </array>

452 <key>RunAtLoad</key>

453 <true/>

454 <key>StartInterval</key>

455 <integer>3523</integer>

456 <key>StandardErrorPath</key>

457 <string>/dev/null</string>

458 <key>StandardOutPath</key>

459 <string>/dev/null</string>

460 </dict>

461 </plist>

462

463 User login items

464

465 iTunesHelper

466 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

467 VMware Fusion Start Menu

468 - /Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app

469 SMARTReporter

470 - /Applications/SMARTReporter.app

471 owncloud

472 - /Applications/owncloud.app

473

474 Safari extensions

475

476 Adblock Plus

477 - org.adblockplus.adblockplussafari

478

479 iCloud errors

480

481 comapple.CloudPhotosConfiguration 20

482 cloudphotosd 20

483 cloudd 19

484 Finder 6

485 bird 5

486 Safari 1

487

488 Continuity errors

489

490 sharingd 58

491

492 Bad permissions: 9

493

494 Extensions

495

496 /System/Library/Extensions/cpfw.kext

497 - com.checkpoint.cpfw

498

499 Applications

500

501 /Applications/Citrix Receiver.app

502 - com.citrix.receiver.nomas

503 /Applications/Geekbench.app

504 - ca.primatelabs.Geekbench23

505 /Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

506 - com.microsoft.ASApplication

507 /Applications/Microsoft Office 2011/Office/Equation Editor.app

508 - com.microsoft.EquationEditor

509 /Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

510 - com.microsoft.office.setupassistant

511 /Applications/Microsoft Office 2011/Office/Microsoft Query.app

512 - com.microsoft.Query

513 /Applications/TaiG.app

514 - com.jailbreak.TaiG

515 /Applications/iFunBox.app

516 - com.iFunBoxDevTeam.iFunBox

517 /Library/Application Support/Citrix Receiver/Citrix Receiver Launcher.app

518 - com.citrix.CitrixReceiverLauncher

519 /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

520 - com.microsoft.autoupdate2

521 /Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

522 - com.microsoft.error_reporting

523 /Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

524 - com.microsoft.netlib.shipassertprocess

525 /Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

526 - com.microsoft.silverlight.sllauncher

527 /Users/USER/Applications/Chrome Apps.localized/Profile 1 apdfllckaahabafndbhieahigkjlhalf.app

528 - com.google.Chrome.app.Profile-1-apdfllckaahabafndbhieahigkjlhalf

529 /Users/USER/Applications/Chrome Apps.localized/Profile 1 blpcfgokakmgnkcojhhkbfbldkacnbeo.app

530 - com.google.Chrome.app.Profile-1-blpcfgokakmgnkcojhhkbfbldkacnbeo

531 /Users/USER/Applications/Chrome Apps.localized/Profile 1 coobgpohoikkiipiblmjeljniedjpjpf.app

532 - com.google.Chrome.app.Profile-1-coobgpohoikkiipiblmjeljniedjpjpf

533 /Users/USER/Applications/Chrome Apps.localized/Profile 1 pjkljhegncpnkpknbcohdijeoejaedia.app

534 - com.google.Chrome.app.Profile-1-pjkljhegncpnkpknbcohdijeoejaedia

535 /Users/USER/Applications/Chrome Apps.localized/app_list.app

536 - com.google.Chrome.app.Default-app_list

537 /Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Profile 1 aohghmighlieiainnegkcijnfilokake.app

538 - com.google.Chrome.app.Profile-1-aohghmighlieiainnegkcijnfilokake-internal

539 /Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Profile 1 apdfllckaahabafndbhieahigkjlhalf.app

540 - com.google.Chrome.app.Profile-1-apdfllckaahabafndbhieahigkjlhalf-internal

541 /Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Profile 1 blpcfgokakmgnkcojhhkbfbldkacnbeo.app

542 - com.google.Chrome.app.Profile-1-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

543 /Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Profile 1 coobgpohoikkiipiblmjeljniedjpjpf.app

544 - com.google.Chrome.app.Profile-1-coobgpohoikkiipiblmjeljniedjpjpf-internal

545 /Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Profile 1 pjkljhegncpnkpknbcohdijeoejaedia.app

546 - com.google.Chrome.app.Profile-1-pjkljhegncpnkpknbcohdijeoejaedia-internal

547 /usr/local/libexec/AuthManager_Mac.app

548 - com.citrix.AuthManagerMac

549 /usr/local/libexec/ReceiverHelper.app

550 - com.citrix.ReceiverHelper

551 /usr/local/libexec/ServiceRecords.app

552 - Citrix.ServiceRecords

553

554 Frameworks

555

556 /Library/Frameworks/DivXInstallerUtilities.framework

557 - com.yourcompany.DivXInstallerUtilities

558

559 PrefPane

560

561 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

562 - com.oracle.java.JavaControlPanel

563 /Library/PreferencePanes/Tuxera NTFS.prefPane

564 - com.tuxera.ntfs.mac.prefpane

565

566 Bundles

567

568 /Library/Internet Plug-Ins/CitrixICAClientPlugIn.plugin

569 - com.citrix.citrixicaclientplugIn

570 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

571 - com.oracle.java.JavaAppletPlugin

572 /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

573 - com.microsoft.sharepoint.browserplugin

574 /Library/Internet Plug-Ins/Silverlight.plugin

575 - com.microsoft.SilverlightPlugin

576 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

577 - com.skype.skypeabdialer

578 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

579 - com.skype.skypeabsms

580 /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin

581 - com.macromedia.PepperFlashPlayer.pepper

582 /Users/USER/Library/Internet Plug-Ins/WebEx64.plugin

583 - com.cisco_webex.plugin.gpc64

584

585 Library paths

586

587 /Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

588 /Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

589 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

590 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

591 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

592 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

593 /Library/Application Support/Checkpoint/Endpoint Connect/Qt/plugins/imageformats/libqgif.dylib

594 /Users/USER/Library/Application Support/Firefox/Profiles/so0bvi35.default/gmp-gmpopenh264/1.5.1/libgmpopenh264. dylib

595 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/libwidev inecdm.dylib

596 /Users/USER/Library/Application Support/WebEx Folder/T30_MC/cmcrypto-30.0.0.2.dylib

597 /Users/USER/Library/Application Support/WebEx Folder/T30_MC/libcrypto-0.2.5.3.dylib

598 /Users/USER/Library/Application Support/WebEx Folder/T30_MC/libssl-0.2.5.3.dylib

599 /Users/USER/Library/Application Support/WebEx Folder/T30_MC/xml-29.0.0.1.dylib

600 /Users/USER/Library/Application Support/WebEx Folder/onprem_1224/atpp-7.1.20.0.dylib

601 /Users/USER/Library/Application Support/WebEx Folder/onprem_1224/cmcrypto-29.13.0.2.dylib

602 /Users/USER/Library/Application Support/WebEx Folder/onprem_1224/libcrypto.0.2.5.4.dylib

603 /Users/USER/Library/Application Support/WebEx Folder/onprem_1224/libssl.0.2.5.4.dylib

604 /Users/USER/Library/Application Support/WebEx Folder/onprem_1224/xml-11.18.32.0.dylib

605 /Users/USER/Library/Application Support/WebEx Folder/onprem_1524/cmcrypto-29.13.0.2.dylib

606 /Users/USER/Library/Application Support/WebEx Folder/onprem_1524/libcrypto-0.2.5.4.dylib

607 /Users/USER/Library/Application Support/WebEx Folder/onprem_1524/libssl-0.2.5.4.dylib

608 /Users/USER/Library/Application Support/WebEx Folder/onprem_1524/xml-29.0.0.1.dylib

609 /usr/local/lib/libTrAPI.dylib

610

611 App extensions

612

613 com.owncloud.desktopclient.FinderSyncExt

614

615 Modifications

616

617 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat

618

619 Bad kernel extensions

620

621 /System/Library/Extensions/AppleOSXUSBNCM.kext

622

623 Installations

624

625 Microsoft Remote Desktop: 03.12.15, 17:43

626 Albelli Fotobücher: 02.12.15, 19:55

627 Office 2011 14.5.8 Update: 30.11.15, 08:56

628 Java 8 Update 66: 25.11.15, 07:20

629 Java 8 Update 66: 24.11.15, 22:35

630

631 Elapsed time (sec): 330

Reply

Answer 7

Linc Davis

Level 10

209,535 points

Dec 14, 2015 7:56 PM in response to Madman1234

Please remove "Check Point Endpoint Security" and see whether there's an improvement.

Any third-party software that doesn't install from the App Store or by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

Reply

Answer 8

Madman1234 Author

Level 1

8 points

Dec 14, 2015 10:12 PM in response to Linc Davis

You can see, that the process AddressBookSourceSync (UID 501): 19.46 uses a lot of CPU resources. Something is wrong here.

As I said, I have the same issue also on other clients running 10.11.2. On other clients there is no VPN Client installed.

I will try to configure the Address Book from a VMWare Fusion OS X install and I will check, if the problem is version specific. Starting from 10.11. going to 10.11.1. and 10.11.2

What do you think?

Reply

Answer 9

Linc Davis

Level 10

209,535 points

Dec 14, 2015 10:18 PM in response to Madman1234

On other clients there is no VPN Client installed.

It's not just a VPN. There is no Check Point software on the other clients?

Reply

Answer 10

Madman1234 Author

Level 1

8 points

Dec 14, 2015 10:50 PM in response to Linc Davis

Correct, no Check Point VPN Client on the other machine.

Reply

Answer 11

Linc Davis

Level 10

209,535 points

Dec 14, 2015 11:09 PM in response to Madman1234

Before we continue, could you please explain why you posted the same question on a website devoted to piracy of OS X:

http://www.insanelymac.com/forum/topic/309859-sandbox-comappleaddres941-deny1-ne twork-outbound-privatevarrunmdnsresponde…

Is the server a Mac?

Reply

Answer 12

Madman1234 Author

Level 1

8 points

Dec 15, 2015 7:15 AM in response to Linc Davis

I would like to know if I am on the correct track:

Do I need to create a new file under /usr/share/sandbox called com.apple.AddressBook.InternetAccountsBridge.sb ?

And there I need to allow access to /private/var/run/mDNSResponder?

Like:

(allow file-read* (literal "/private/var/run/mDNSResponder"))

?

Thanks

Reply

Answer 13

Madman1234 Author

Level 1

8 points

Dec 15, 2015 7:50 AM in response to Madman1234

I created a sandbox permission file with the following:

1)

(version 1)

(allow network-inbound

(local tcp "*:*")

(local udp "*:*")

(local udp "localhost:*")

)

(allow network-outbound

(literal "/private/var/run/mDNSResponder")

(remote tcp "*:*")

(remote udp "localhost:*"))

(allow default)

; all|allow

2)

I ran

sudo sandbox-exec -f /usr/share/sandbox/com.apple.AddressBook.InternetAccountsBridge.sb /System/Library/Frameworks/AddressBook.framework/Versions/A/XPCServices/com.app le.AddressBook.InternetAccountsBridge.xpc/Contents/MacOS/com.apple.AddressBook.I nternetAccountsBridge

But it still gives me the error. Is this the correct sandboxed application? Why is it still showingthe deny message?

Reply

Answer 14

Dec 16, 2015 1:52 AM in response to Madman1234

Did a solution ever appear for this issue or did it go quiet as the bad smell of piracy appeared?

I've got the exact same issue with a (real!) MBP mid 2012 running OSX 10.11.2.

Opened Contacts, to start sending xmas cards, and Contacts get's the spinning rainbow wheel. Opened up console and there's a lot of messages along the lines of:

Dec 16 09:44:19 hybrid kernel[0]: Sandbox: com.apple.Addres(7497) deny(1) network-outbound /private/var/run/mDNSResponder

Dec 16 09:44:19 hybrid com.apple.AddressBook.InternetAccountsBridge[7497]: dnssd_clientstub ConnectToServer: connect()-> No of tries: 3

Contacts are synced with Gmail, Linkedin and Facebook. Not iCloud.

The only unusual thing about this Mac is that it was purchased with OS X 10.9, then subsequently upgraded to Yosemite then El Capitan. Well, that's not that unusual!

Reply

Answer 15

Madman1234 Author

Level 1

8 points

Dec 16, 2015 2:07 AM in response to fergycool

I did the upgrade from 10.10.x to 10.11.2 on my real MBP Retina Early 2015 and have this issue.

Reply