System Crash recovery

Etrecheck is trying to insist that performance is 'Good' but also noted that the Macintosh HD had >500 errors with a Drive failure warning. Since neither DiskUtility nor the Apple Hardware test found anything wrong with the disk I suspect those errors are reflecting some other problem.

[code]

Macintosh HD (disk0s2) / : 968.70 GB (721.18 GB free) - 515 errors

Drive failure![/code]

EtreCheck version: 2.9.8 (258)

Report generated 2016-03-13 14:31:17

Download EtreCheck from https://etrecheck.com

Runtime 3:12

Performance: Good

Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Problem: Beachballing

Hardware Information: ⓘ

iMac (21.5-inch, Mid 2011)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac12,1

1 2.7 GHz Intel Core i5 CPU: 4-core

12 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

2 GB DDR3 1333 MHz ok

BANK 1/DIMM0

2 GB DDR3 1333 MHz ok

BANK 0/DIMM1

4 GB DDR3 1333 MHz ok

BANK 1/DIMM1

4 GB DDR3 1333 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Video Information: ⓘ

AMD Radeon HD 6770M - VRAM: 512 MB

iMac 1920 x 1080

System Software: ⓘ

OS X Yosemite 10.10.5 (14F27) - Time since boot: about 8 days

Disk Information: ⓘ

ST31000528AS disk0 : (1 TB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / : 968.70 GB (730.38 GB free) - 561 errors

Drive failure!

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Recovery HD (disk0s4) /Volumes/Recovery HD [Recovery]: 650 MB (128 MB free)

disk0s5 (disk0s5) <not mounted> : 1 MB

disk0s6 (disk0s6) <not mounted> : 25.72 GB

disk0s7 (disk0s7) <not mounted> : 4.27 GB

HL-DT-STDVDRW GA32N ()

USB Information: ⓘ

Logitech USB Receiver

Apple Computer, Inc. IR Receiver

Apple Internal Memory Card Reader

Apple Inc. FaceTime HD Camera (Built-in)

Mitsumi Electric Hub in Apple Extended USB Keyboard

Mitsumi Electric Apple Extended USB Keyboard

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus

Gatekeeper: ⓘ

Mac App Store and identified developers

Kernel Extensions: ⓘ

/Library/Application Support/VirtualBox

[loaded] org.virtualbox.kext.VBoxDrv (5.0.14 - 2016-02-09) [Support]

[loaded] org.virtualbox.kext.VBoxNetAdp (5.0.14 - 2016-02-09) [Support]

[loaded] org.virtualbox.kext.VBoxNetFlt (5.0.14 - 2016-02-09) [Support]

[loaded] org.virtualbox.kext.VBoxUSB (5.0.14 - 2016-02-09) [Support]

System Launch Agents: ⓘ

[not loaded] 6 Apple tasks

[loaded] 154 Apple tasks

[running] 52 Apple tasks

System Launch Daemons: ⓘ

[not loaded] 47 Apple tasks

[loaded] 136 Apple tasks

[running] 81 Apple tasks

Launch Daemons: ⓘ

[loaded] com.adobe.fpsaud.plist (2016-01-11) [Support]

[not loaded] org.freedesktop.dbus-system.plist (2015-03-27) [Support]

[loaded] org.macosforge.xquartz.privileged_startx.plist (2013-11-10) [Support]

[not loaded] org.virtualbox.startup.plist (2016-02-09) [Support]

User Launch Agents: ⓘ

[loaded] com.valvesoftware.steamclean.plist (2016-03-13) [Support]

User Login Items: ⓘ

None

Other Apps: ⓘ

[running] com.etresoft.EtreCheck.112212

[running] com.valvesoftware.steam.43200

[running] com.valvesoftware.steam.ipctool

[loaded] org.freedesktop.dbus-session

[loaded] org.macosforge.xquartz.startx

[loaded] 373 Apple tasks

[running] 154 Apple tasks

Internet Plug-ins: ⓘ

Flip4Mac WMV Plugin: 2.4.4.2 (2012-08-12) [Support]

FlashPlayer-10.6: 18.0.0.194 - SDK 10.6 (2015-06-28) [Support]

QuickTime Plugin: 7.7.3 (2016-02-23)

Flash Player: 18.0.0.194 - SDK 10.6 (2015-06-28) Outdated! Update

Default Browser: 600 - SDK 10.10 (2016-02-23)

PepperFlashPlayer: 20.0.0.286 - SDK 10.6 (2016-01-21) [Support]

Silverlight: 5.1.10411.0 - SDK 10.6 (2012-08-13) [Support]

JavaAppletPlugin: 15.0.0 - SDK 10.10 (2014-02-16) Check version

Safari Extensions: ⓘ

Adblock Plus (2016-01-05)

ClickToFlash (2016-01-03)

DuckDuckGo (2015-07-10)

3rd Party Preference Panes: ⓘ

Flash Player (2016-01-11) [Support]

Flip4Mac WMV (2012-05-15) [Support]

Time Machine: ⓘ

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 968.70 GB Disk used: 238.32 GB

Destinations:

TOSHIBA EXT [Local]

Total size: 749.81 GB

Total number of backups: 44

Oldest backup: 6/5/13, 9:09 PM

Last backup: 2/23/16, 7:05 AM

Size of backup disk: Adequate

Backup size 749.81 GB > (Disk used 238.32 GB X 3)

Top Processes by CPU: ⓘ

3% WindowServer

2% fontd

1% kernel_task

0% steam_osx(2)

0% dpd

Top Processes by Memory: ⓘ

782 MB kernel_task

172 MB mds_stores

111 MB Finder

111 MB steam_osx(2)

98 MB cfprefsd(2)

Virtual Memory Information: ⓘ

6.00 GB Free RAM

6.00 GB Used RAM (6.91 GB Cached)

0 B Swap Used

The hard disk errors are really the only red flags in the EtreCheck report.

The Console log appears more unsettling.

...

3/13/16 6:18:54.292 PM QuickLookSatellite[4371]: [QL] No sandbox token for request <QLThumbnailRequest stackshot.log>, it will probably fail

3/13/16 6:18:54.292 PM QuickLookSatellite[4371]: [QL] No sandbox token for thumbnail request file:///Library/Logs/stackshot.log, it will probably fail

3/13/16 6:18:57.265 PM iconservicesd[59]: Failed to move temp file /Library/Caches/com.apple.iconservices.store/F4C6515F-3D37-3D98-EA80-3AF13A1F47 2A.isdata.tmp to /Library/Caches/com.apple.iconservices.store/F4C6515F-3D37-3D98-EA80-3AF13A1F47 2A.isdata with error: Error Domain=NSCocoaErrorDomain Code=516 "“F4C6515F-3D37-3D98-EA80-3AF13A1F472A.isdata.tmp” couldn’t be moved to “com.apple.iconservices.store” because an item with the same name already exists." UserInfo=0x7fcac97917a0 {NSSourceFilePathErrorKey=/Library/Caches/com.apple.iconservices.store/F4C6515F -3D37-3D98-EA80-3AF13A1F472A.isdata.tmp, NSUserStringVariant=(

Move

), NSDestinationFilePath=/Library/Caches/com.apple.iconservices.store/F4C6515F-3D3 7-3D98-EA80-3AF13A1F472A.isdata, NSFilePath=/Library/Caches/com.apple.iconservices.store/F4C6515F-3D37-3D98-EA80 -3AF13A1F472A.isdata.tmp, NSUnderlyingError=0x7fcac97915e0 "The operation couldn’t be completed. File exists"}

3/13/16 6:18:57.474 PM iconservicesd[59]: Failed to move temp file /Library/Caches/com.apple.iconservices.store/F4C6515F-3D37-3D98-EA80-3AF13A1F47 2A.isdata.tmp to /Library/Caches/com.apple.iconservices.store/F4C6515F-3D37-3D98-EA80-3AF13A1F47 2A.isdata with error: Error Domain=NSCocoaErrorDomain Code=516 "“F4C6515F-3D37-3D98-EA80-3AF13A1F472A.isdata.tmp” couldn’t be moved to “com.apple.iconservices.store” because an item with the same name already exists." UserInfo=0x7fcac9714560 {NSSourceFilePathErrorKey=/Library/Caches/com.apple.iconservices.store/F4C6515F -3D37-3D98-EA80-3AF13A1F472A.isdata.tmp, NSUserStringVariant=(

Move

), NSDestinationFilePath=/Library/Caches/com.apple.iconservices.store/F4C6515F-3D3 7-3D98-EA80-3AF13A1F472A.isdata, NSFilePath=/Library/Caches/com.apple.iconservices.store/F4C6515F-3D37-3D98-EA80 -3AF13A1F472A.isdata.tmp, NSUnderlyingError=0x7fcac9790d00 "The operation couldn’t be completed. File exists"}

3/13/16 6:18:58.860 PM QuickLookSatellite[4371]: In -[NSApplication(NSQuietSafeQuit) _updateCanQuitQuietlyAndSafely], _LSSetApplicationInformationItem(NSCanQuitQuietlyAndSafely) returned error -50

3/13/16 6:19:06.336 PM Finder[251]: Layout still needs update after calling -[TListScrollView layout]. TListScrollView or one of its superclasses may have overridden -layout without calling super. Or, something may have dirtied layout in the middle of updating it. Both are programming errors in Cocoa Autolayout. The former is pretty likely to arise if some pre-Cocoa Autolayout class had a method called layout, but it should be fixed.

3/13/16 6:19:24.293 PM Console[4374]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

3/13/16 6:19:26.325 PM com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

3/13/16 6:19:43.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:19:57.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:19:57.889 PM systemstatsd[388]: assertion failed: 14F27: systemstatsd + 3258 [934DD34F-EAF0-3DE6-B4A9-6DD998596D75]: 0xa

3/13/16 6:20:12.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:20:27.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:20:27.190 PM systemstatsd[388]: assertion failed: 14F27: systemstatsd + 3297 [934DD34F-EAF0-3DE6-B4A9-6DD998596D75]: 0xa

3/13/16 6:22:26.876 PM com.apple.xpc.launchd[1]: (com.apple.imfoundation.IMRemoteURLConnectionAgent) The _DirtyJetsamMemoryLimit key is not available on this platform.

3/13/16 6:22:55.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:23:09.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:23:09.695 PM systemstatsd[388]: assertion failed: 14F27: systemstatsd + 3258 [934DD34F-EAF0-3DE6-B4A9-6DD998596D75]: 0xa

3/13/16 6:23:25.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:23:39.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:23:39.216 PM systemstatsd[388]: assertion failed: 14F27: systemstatsd + 3297 [934DD34F-EAF0-3DE6-B4A9-6DD998596D75]: 0xa

3/13/16 6:26:40.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:26:53.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:26:54.001 PM systemstatsd[388]: assertion failed: 14F27: systemstatsd + 3258 [934DD34F-EAF0-3DE6-B4A9-6DD998596D75]: 0xa

3/13/16 6:27:09.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:27:23.000 PM kernel[0]: disk0s2: I/O error.

3/13/16 6:27:23.085 PM systemstatsd[388]: assertion failed: 14F27: systemstatsd + 3297 [934DD34F-EAF0-3DE6-B4A9-6DD998596D75]: 0xa

However, the DiagnosticReports folder contains no kernel panic fails. There are an assortment of recent powerstats.diag logs with a few older awdd.awd documents and a couple of wakeups_resource.diag reports that I think occurred before the crash, but no panics. I've attached the latest log contents below for reference.

Date/Time: 2016-03-12 00:00:00 -0500

OS Version: 10.10.5 (Build 14F27)

Architecture: x86_64

Report Version: 19

Event: powerstats

Signature: com.apple.SystemStats.TopPkgPowerEvent

Start time: 2016-03-12 00:00:00 -0500

End time: 2016-03-12 00:10:10 -0500

Duration: 610s

Steps: 0

Hardware model: iMac12,1

Active cpus: 4

================================================================

Rank:: 3

CPU Summary

===========

Avg. Frequency: 2.161 GHz

Package Power:: Pkg: 6.75W, CPU 1.74W, GPU: 0.26W

Pkg Interrupt Rate: Total: 500Hz ARPT/DSB3/HDAU/RP02: 29Hz EHC1/HDEF: 43Hz EHC2: 1Hz GFX0: 60Hz IPI: 7Hz SATA: 244Hz TMR: 116Hz

Pkg C-State Res: Total: 90.1% C2: 29% C3: 0% C6: 61%

Cores C-State Res: C3: 0% C6: 97%

Apps & Daemons (grouped by coalition)

=====================================

Ranked by CPU & Energy Impact:

00:00:10 1.6 % 5760.95 com.apple.system

00:00:16 2.7 % 1677.98 com.apple.Safari

00:00:00 0.1 % 68.00 com.apple.systemstatsd

00:00:00 0.0 % 63.00 com.apple.watchdogd

00:00:00 0.0 % 58.00 jp.co.canon.cijscannerregister

Ranked by Interrupts / Idle Wakeups:

245616 (403.3/sec) 237807 wkups (403.3/sec) com.apple.system

3212 (5.3/sec) 3043 wkups (5.3/sec) com.apple.watchdogd

2338 (3.8/sec) 2195 wkups (3.8/sec) jp.co.canon.cijscannerregister

580 (1.0/sec) 551 wkups (1.0/sec) org.ntp.ntpd

228 (0.4/sec) 191 wkups (0.4/sec) com.apple.Spotlight

Ranked by Process Launches (incl. XPC svcs. & fork()):

0 com.apple.AddressBook.SourceSync

0 com.apple.ocspd

0 com.apple.syncdefaultsd

0 com.apple.Spotlight

0 com.apple.DataDetectorsDynamicData

Devices Dashboard

=================

Display Brightness: 89.0%

Wi-Fi on: 00:10:09 (100% of total)

Discrete GPU on: 00:00:00 (0% of total)

Bluetooth on: 00:10:09 (100% of total)

The 8GB of extra RAM was manufactured by Crucial and was installed by myself a little over a year ago. So far its been working great.

I reformatted the hard drive last night, zeroed out the partition, reinstalled the OS, and just finished restoring my user data from the time machine backup. The process took twice as long as I was expecting but was completed with less than half the frustration I feared. So far Safari hasn't given me any beachballs and Half life 2 runs smoothly. Not the most scientific of benchmarks and still too early to declare victory but I'm cautiously optimistic that the system is back to where it was before the crash.

Just to be safe I'm now shopping around for a Firewire 800 hard drive that I can use as an external boot volume if the iMac's internal hard drive does end up going down.

Yah, Other World Computing has always been highly recommended but the only firewire drives they sell appear to be enclosures. That might be the way to go for an SSD upgrade but for this quick-restore I cheaped out and bought a bus-powered G-Drive mobile off the shelf from my local Fry's.

Installing OSX to the external drive took a little longer than the internal drive reinstall, but so far performance between the two is comparable enough that I now plan on upgrading to El Capitan on one for a side-by-side OS performance comparison.

Anyway, it doesn't look like my internal is in the process of failing and if it does fail I now know I can boot to an external HDD.

So, Problem/Solution Summery.

1) My Problem: Systematic lag, latency, and beach balls across most applications following a virtual box crash with the following additional symptoms:

a) Slowness persisting despite both CPU and RAM utilization being low

b) kernel[0]: disk0s#: I/O errors reported in console log

c) Disk failure errors reported by EtreCheck

d) No drive errors reported by DiskUtility

2) What I did that fixed the problem:

a) Rebooted using my TimeMachine backup volume as restore disk

b) Reformatted main HD

c) Zeroed out HD

d) Reinstalled OS

e) Restored only User data

3) Presumably not every step I took was required, but I was frustrated and wanted burn everything to the ground for a clean new start.

Other Lessons Learned

1) Timemachine backups work as bootable restore drives

2) Pay attention to your backups: Excluding the recent history snapshots I made post-crash I had nothing until April 2015. Either my 3+ year old time machine archive had quietly switched to annual snapshots or I had gotten way too lazy with my monthly backup routine. Thankfully any crash corruption had not damaged my recent user data.

3) If I did this again I would have created a 2nd backup to a different drive before reformatting. Oops. Thankfully nothing went wrong.