Only be able to start in safe mode...
Hi guys!
The basics of my old Mac Pro:
Model name: Mac Pro
Model identifier: MacPro1, 1
Name of the processor: Dual-Core Intel Xeon
Processor speed: of 2.66 GHz
Number of processors: 2
Total number of Cores: 4
L2 Cache (per CPU): 4 MB
Memory: 3 GB
Bus speed: 1.33 GHz
Boot ROM version: MP11.005C.B08
Version of the SCM (System): 1.7f10
It is currently running Lion 10.7.5
For awhile, I was little liviing to the fact it starts only in safe mode. The day this started, the machine was on and the power is out.
I read today in the communities. LINC Davis someone gave instructions to run a diagnostic and post it. One of them mentioned user Verbose modes and unique, so I tried them. I tried the verbose mode and it booted up and everything ran! Safe mode enabled me to hear the sounds of music or system (except the initial "tada" when I hit the power button, and no video won't play either. Then I tried some additional tests. I restarted in verbose mode... which resulted to lose the sound and video. Then I booted into single user mode, and it would not complete the boot. He stopped with a gray screen and just a slider in the corner. Tried to boot in verbose mode and nothing got but gray screen and the cursor in the corner.
I'm now booted without new failure.
Here are the results of the two diagnoses... the first was when I was in Safe Mode, second is when I was in Verbose Mode & sound and video worked, for a while at least.
STARTED IN SAFE MODE:
Start time: 06/08/16 16:23:26
Review: 1283
Model identifier: MacPro1, 1
Memory: 3 GB
The system version: Mac OS X 10.7.5 (11 G 63)
Kernel version: Darwin 11.4.2
Start mode: security
64-bit kernel and Extensions: No.
Since the start-up time: 50 minutes
UID: 501
Memory
Riser DIMM A/DIMM 1
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
Riser DIMM A/DIMM 2
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
DIMM Riser B/DIMM 1
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
DIMM Riser B/DIMM 2
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
Riser A/DIMM DIMMS 3
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
Riser DIMM A/DIMM 4
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
DIMM B/DIMM Riser 3
Size: empty
Speed: empty
Status: empty
Manufacturer: empty
DIMM B/DIMM Riser 4
Size: empty
Speed: empty
Status: empty
Manufacturer: empty
Cards video/monitors
NVIDIA GeForce 7300 GT
DELL E198WFP (hand)
PanasonicTV0
ATX
WDC WD1003FZEX-00MK2A0
PCI cards
NVIDIA GeForce 7300 GT
Type: View controller
USB
WiFi (ASUSTek Computer Inc.)
Kensington 4 button mouse (Kensington)
Featured: indexing and search disabled
Firewall: on
Proxies
ProxyAutoConfigEnable: 1
ProxyAutoConfigURLString: http://wpad/wpad.dat
ProxyAutoDiscoveryEnable: 1
DNS: 209.18.47.61
Listeners
KDC: kerberos
launchd: afpovertcp
Diagnostic reports
2016-05-10 kernel panic x 2
2016-05-10 MusicManagerHelper accident x 2
Accident to install Adobe Flash Player 2016-05-19
2016-05-19 kernel panic x 7
2016-05-19 MusicManagerHelper crash
2016-05-19 QuickLookUIHelper crash
2016-05-19 Sophos Anti-virus crash x 4
2016-05-19 helpd accident x 5
2016-06-02 kernel panic x 7
Accident of Sophos Anti-virus 2016-06-02
2016 06-02 UserNotificationCenter crash
Accident of automator 2016-06-08
Accident of finder 2016-06-08
2016-06-08 kernel panic x 4
2016 06-08 SecurityAgent accident x 4
Accident of Sophos Anti-virus 2016-06-08
The core journal
8 Jun 11:40:29 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 Jun 11:53:38 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
8 Jun 11:53:38 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:05:26 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:05:26 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:18:35 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:18:35 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:31:44 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:31:44 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:43:52 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:43:52 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:57:01 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:57:01 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 Jun 13:08:49 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
8 Jun 13:08:49 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 13:23:21 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 13:23:21 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 13:35:29 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 13:35:29 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 June 13:47:15 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
8 June 13:47:15 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 June 15:33:46 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key $Num (kSMCKeyNotFound)
8 June 15:33:46 SMC::smcReadKeyAction ERROR $Num kSMCKeyNotFound(0x84) fKeyHashTable = 0x0
8 June 15:33:46 SMC::smcInitHelper ERROR: regMap MMIO == NULL - go back to the old mode MSC
8 June 15:33:47 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key BEMB (kSMCKeyNotFound)
System log
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AudioIPCDriver failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleSMBusPCI.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleSMBusPCI failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAController.ke xt - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleHDAController failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleMCCSControl.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleMCCSControl failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleMCEDriver.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleMCEDriver failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleTyMCEDriver.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleTyMCEDriver failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOFireWireIP.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOFireWireIP failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothS erialManager.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOBluetoothSerialManager failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleUpstreamUserClient.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleUpstreamUserClient failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOSurface.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOSurface failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOUserEthernet.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOUserEthernet failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/GeForce7xxx.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.GeForce7xxx failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/GeForce.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.GeForce failed; removal of the personalities of the kernel.
launchd Journal
Jun 5 15:24:39 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
Jun 5 15:24:39 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
Jun 5 15:24:57: FAILURE: could not send a response MIG: 0 x 10000003
Jun 5 15:25:25 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
5 Jul 22:42:04 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
5 Jul 22:42:04 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
5 Jul 22:42:04 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
5 Jul 22:42:23: FAILURE: could not send a response MIG: 0 x 10000003
5 Jul 22:42:53 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
6 Jun 01:31:01 com.apple.dock.extra: XPC Service could not exec (3). Reset port.
6 June 12:05:02 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
6 Jun 21:27:07 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
Jun 7 00:54:04 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
7 Jun 03:53:28 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 03:53:28 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 03:53:28 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 04:03 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
7 Jun 21:48:45 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 21:48:45 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 21:48:45 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
7 June 21:49:38 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
8 June 15:33:30 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
8 June 15:33:30 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
8 June 15:33:30 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
8 June 15:34:59 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
The console log
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.03.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.02.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.01.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.04.29.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.04.28.asl
3 Jun 01:16:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.04.asl
4 Jun 16:58:11 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.05.asl
8 Jun 01:49:43 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.09.asl
Kernel loaded extensions
e.AppleFSCompression.AppleFSCompressionTypeDataless (1.0.0d1)
e.AppleFSCompression.AppleFSCompressionTypeZlib (1.0.0d1)
e.BootCache (33)
e.Dont_Steal_Mac_OS_X (7.0.0)
e.NVDAResman.G7xxx (7.0.4)
e.driver.ACPI_SMC_PlatformPlugin (5.0.0d8)
e.driver.AppleACPIButtons (1.5)
e.driver.AppleACPIEC (1.5)
e.driver.AppleACPIPlatform (1.5)
e.driver.AppleAHCIPort (2.3.1)
e.driver.AppleAPIC (1.6)
e.driver.AppleEFINVRAM (1.6.1)
e.driver.AppleEFIRuntime (1.6.1)
e.driver.AppleFWOHCI (4.9.0 :)
e.driver.AppleGraphicsControl (3.1.33)
e.driver.AppleHPET (1.7)
e.driver.AppleHWSensor (1.9.5d0)
e.driver.AppleIntel8254XEthernet (2.1.3b1)
e.driver.AppleIntelCPUPowerManagement (195.0.0)
e.driver.AppleIntelCPUPowerManagementClient (195.0.0)
e.driver.AppleIntelPIIXATA (2.5.1)
e.driver.AppleKeyStore (28.18)
e.driver.AppleLPC (1.6.0)
e.driver.ApplePolicyControl (3.1.33)
e.driver.AppleRTC (1.5)
e.driver.AppleSMBIOS (1.9)
e.driver.AppleSMC (3.1.3d10)
e.driver.AppleUSBComposite (5.0.0)
e.driver.AppleUSBEHCI (5.1.0)
e.driver.AppleUSBHub (5.1.0)
e.driver.AppleUSBMergeNub (5.1.0)
e.driver.AppleUSBUHCI (5.1.0)
e.driver.DiskImages (331.7)
e.driver.IOPlatformPluginFamily (5.1.1d6)
e.driver.IOPlatformPluginLegacy (5.0.0d8)
e.driver.XsanFilter (404)
e.filesystems.autofs (3.0)
e.iokit.IOACPIFamily (1.4)
e.iokit.IOAHCIBlockStorage (2.1.0)
e.iokit.IOAHCIFamily (2.0.8)
e.iokit.IOATAFamily (2.5.1)
e.iokit.IOATAPIProtocolTransport (3.0.0)
e.iokit.IOBDStorageFamily (1.7)
e.iokit.IOCDStorageFamily (1.7.1)
e.iokit.IODVDStorageFamily (1.7.1)
e.iokit.IOFireWireFamily (4.4.8)
e.iokit.IOGraphicsFamily (2.3.4)
e.iokit.IOHIDFamily (1.7.1)
e.iokit.IONDRVSupport (2.3.4)
e.iokit.IONetworkingFamily (2.1)
e.iokit.IOPCIFamily (2.7)
e.iokit.IOSCSIArchitectureModelFamily (3.2.1)
e.iokit.IOSCSIMultimediaCommandsDevice (3.2.1)
e.iokit.IOSMBusFamily (1.1)
e.iokit.IOStorageFamily (1.7.2)
e.iokit.IOUSBFamily (5.1.0)
e.iokit.IOUSBHIDDriver (5.0.0)
e.iokit.IOUSBUserClient (5.0.0)
e.iokit.SCSITaskUserClient (3.2.1)
e.kext.AppleMatch (1.0.0d1)
e.kext.Triggers (1.0)
e.NKE.applicationfirewall (3.2.30)
e.NVIDIA.nv40hal.G7xxx (7.0.4)
e.security.TMSafetyNet (8)
e.Security.Quarantine (1.4)
e.Security.sandbox (177.11)
All officers
com.apple.launchctl.Aqua
-status: 1
com Apple.MRT.UIAgent
-status: 255
Problems with fonts
com.apple.launchctl.Aqua
-status: 1
com Apple.MRT.UIAgent
-status: 255
User login items
iCal
-/Applications/iCal.app
Music Manager
-/Users/user/library/PreferencePanes/MusicManager.prefPane/contents/helpers/musi cManagerHelper.app
Wondershare Helper Compact
-/ Users/USER/Library/Application support/assistance/Wondershare Helper Compact.app
Firefox extensions
Hello Firefox Beta
Ad-Aware Ad Block
Widgets
Clock FlipClock
Small files: 638
Lockfiles: 1
Universal access
Zoom mode: window
Content of /Library/LaunchAgents/com.sophos.uiserver.plist
-mod date: 9 May 20:14:18 2016
-checksum: 40276757
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > KeepAlive < / key >
< true / >
< key > tag < / key >
< string > com.sophos.uiserver < / string >
< key > ProgramArguments < / key >
< table >
< string >/Library/Sophos Anti-Virus/SophosUIServer.app/Contents/MacOS/SophosUIServer < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StandardErrorPath < / key >
< string >/dev/null < / string >
< key > StandardOutPath < / key >
< string >/dev/null < / string >
< / dict >
< / plist >
Content of /Library/LaunchDaemons/com.sophos.common.servicemanager.plist
-mod date: 9 May 20:14:15 2016
-checksum: 521223032
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > StandardErrorPath < / key >
< string >/dev/null < / string >
< key > StandardOutPath < / key >
< string >/dev/null < / string >
< key > tag < / key >
< string > com.sophos.common.servicemanager < / string >
< key > ProgramArguments < / key >
< table >
< string >/Library/Sophos Anti-Virus/SophosServiceManager.bundle/Contents/MacOS/SophosServiceManager < / str ing >
< / array >
< key > KeepAlive < / key >
< true / >
< key > MachServices < / key >
< dict >
com.Sophos.common.ServiceManager < key > < / key >
< true / >
< / dict >
< / dict >
< / plist >
Content of /System/Library/LaunchAgents/com.apple.iCalPush.plist
-mod date: 31 dec 18:37: 21 2015
-checksum: 2684394709
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.iCalPush < / string >
< key > LimitLoadToSessionType < / key >
< table >
< string > LoginWindow < / string >
Aqua < string > < / string >
< / array >
< key > MachServices < / key >
< dict >
com.apple.iCalPush < key > < / key >
< true / >
< / dict >
< key > ProgramArguments < / key >
< table >
< string > /Applications/iCal.app/Contents/Resources/iCalPush < / string >
< / array >
< / dict >
< / plist >
Content of /System/Library/LaunchAgents/org.x.startx.plist
-mod date: 31 dec 18:39: 55 2015
-checksum: 355348819
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-computer //Apple / / DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > org.x.startx < / string >
< key > ProgramArguments < / key >
< table >
< string >/usr/X 11/bin/startx < / string >
< / array >
Sockets < key > < / key >
< dict >
org.x:0 < key > < / key >
< dict >
< key > SecureSocketWithKey < / key >
< string > VIEW < / string >
< / dict >
< / dict >
< key > ServiceIPC < / key >
< true / >
< key > EnableTransactions < / key >
< true / >
< / dict >
< / plist >
Content of /System/Library/LaunchDaemons/com.apple.xprotectupdater.plist
-mod date: 31 dec 19:21: 17 2015
-checksum: 3347091824
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.xprotectupdater < / string >
< key > ProgramArguments < / key >
< table >
< string > / usr/libexec/XProtectUpdater < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StartCalendarInterval < / key >
< dict >
< key > time < / key >
< integer > 23 < / integer >
< key > Minute < / key >
< integer > 3 < / integer >
< / dict >
< / dict >
< / plist >
Content of /System/Library/LaunchDaemons/org.apache.httpd.plist
-mod date: April 17, 14:12:12 2016
-checksum: 3461590056
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > disabled < / key >
< true / >
< key > tag < / key >
< string > org.apache.httpd < / string >
< key > OnDemand < / key >
< false / >
< key > ProgramArguments < / key >
< table >
< string > / usr/sbin/httpd < / string >
< string > d < / string >
< string > FOREGROUND < / string >
< / array >
< key > SHAuthorizationRight < / key >
< string > system.preferences < / string >
< / dict >
< / plist >
Content of Library/LaunchAgents/com.adobe.ARM.UUID.plist
-mod date: 21 Jan 16:52:52 2016
-checksum: 394026997
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.adobe.ARM.UUID < / string >
< key > ProgramArguments < / key >
< table >
< string >/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Helper.app/Contents/MacOS/Adobe Reader Updater Helper Updater < / string >
Semi-auto < string > < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StartInterval < / key >
< integer > 12600 < / integer >
< / dict >
< / plist >
Contents of Library/LaunchAgents/com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID. plist
-mod date: Apr 1 22:46:36 2016
-checksum: 1246257216
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID < / string >
< key > ProgramArguments < / key >
< table >
ourceSyncScheduleHelper /System/Library/Frameworks/AddressBook.framework/Resources/AddressBookS < string > < / string >
< string > - scheduleSync < / string >
< string > UUID < / string >
< / array >
< key > StartInterval < / key >
< integer > 120000 < / integer >
< / dict >
< / plist >
Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist content
-mod date: 31 dec 19:02: 16 2015
-checksum: 3183285794
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > KeepAlive < / key >
< false / >
< key > tag < / key >
< string > com.apple.CSConfigDotMacCert - E-MAIL-shared services < / string >
< key > LimitLoadToSessionType < / key >
Aqua < string > < / string >
< key > LowPriorityIO < / key >
< true / >
< key > Nice < / key >
< integer > 10 < / integer >
< key > ProgramArguments < / key >
< table >
.framework/Versions/A/Support/CSConfigDotMacCert /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices < string > < / string >
< string >-l < / string >
< string > /Users/USER/Library/Logs/CSConfigDotMacCert.log < / string >
< string > u < / string >
< string > EMAIL < / string >
< string > t < / string >
shared services < string > < / string >
< string > s < / string >
< / array >
.. .and 4 more lines
Content of Library/LaunchAgents/com.apple.FolderActions.folders.plist
-mod date: 8 June 16:26:37 2016
-checksum: 4030248352
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.FolderActions.folders < / string >
program < key > < / key >
< string > / usr/bin/osascript < / string >
< key > ProgramArguments < / key >
< table >
< string > osascript < / string >
< string > e < / string >
< string > tell application "Folder Actions dispatcher" check < / string >
< / array >
< key > WatchPaths < / key >
< table >
< string >/Applications/Utilities < / string >
< / array >
< / dict >
< / plist >
Content of Library/LaunchAgents/com.google.keystone.agent.plist
-mod date: Mar 10 16:06:19 2016
-checksum: 3847280815
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.google.keystone.user.agent < / string >
< key > LimitLoadToSessionType < / key >
Aqua < string > < / string >
< key > ProgramArguments < / key >
< table >
< string > /Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent < / string >
< string > - runMode < / string >
< string > ifneeded < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StartInterval < / key >
< integer > 3623 < / integer >
< key > StandardErrorPath < / key >
< string >/dev/null < / string >
< key > StandardOutPath < / key >
< string >/dev/null < / string >
< / dict >
< / plist >
Bad plists
/ Library/Preferences/com. Apple.softwareupdate.plist
Frames
/Library/frameworks/savi.framework
-com.sophos.sav.savi
/Library/frameworks/SUMScanKit.framework
-com.sophos.sum.scan.kit
/Library/frameworks/SophosGenericsCommon.framework
-com.sophos.macendpoint.SophosGenericsCommon
/Library/frameworks/SophosGenericsCore.framework
-com.sophos.macendpoint.SophosGenericsCore
PrefPane
/ Library/PreferencePanes/Flash Player.prefPane
-com.adobe.flashplayerpreferences
/Users/user/library/PreferencePanes/MusicManager.prefPane
-com.google.musicmanager.pref
El
Start time: 06/08/16 16:23:26
Review: 1283
Model identifier: MacPro1, 1
Memory: 3 GB
The system version: Mac OS X 10.7.5 (11 G 63)
Kernel version: Darwin 11.4.2
Start mode: security
64-bit kernel and Extensions: No.
Since the start-up time: 50 minutes
UID: 501
Memory
Riser DIMM A/DIMM 1
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
Riser DIMM A/DIMM 2
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
DIMM Riser B/DIMM 1
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
DIMM Riser B/DIMM 2
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
Riser A/DIMM DIMMS 3
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
Riser DIMM A/DIMM 4
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0x830B
DIMM B/DIMM Riser 3
Size: empty
Speed: empty
Status: empty
Manufacturer: empty
DIMM B/DIMM Riser 4
Size: empty
Speed: empty
Status: empty
Manufacturer: empty
Cards video/monitors
NVIDIA GeForce 7300 GT
DELL E198WFP (hand)
PanasonicTV0
ATX
WDC WD1003FZEX-00MK2A0
PCI cards
NVIDIA GeForce 7300 GT
Type: View controller
USB
WiFi (ASUSTek Computer Inc.)
Kensington 4 button mouse (Kensington)
Featured: indexing and search disabled
Firewall: on
Proxies
ProxyAutoConfigEnable: 1
ProxyAutoConfigURLString: http://wpad/wpad.dat
ProxyAutoDiscoveryEnable: 1
DNS: 209.18.47.61
Listeners
KDC: kerberos
launchd: afpovertcp
Diagnostic reports
2016-05-10 kernel panic x 2
2016-05-10 MusicManagerHelper accident x 2
Accident to install Adobe Flash Player 2016-05-19
2016-05-19 kernel panic x 7
2016-05-19 MusicManagerHelper crash
2016-05-19 QuickLookUIHelper crash
2016-05-19 Sophos Anti-virus crash x 4
2016-05-19 helpd accident x 5
2016-06-02 kernel panic x 7
Accident of Sophos Anti-virus 2016-06-02
2016 06-02 UserNotificationCenter crash
Accident of automator 2016-06-08
Accident of finder 2016-06-08
2016-06-08 kernel panic x 4
2016 06-08 SecurityAgent accident x 4
Accident of Sophos Anti-virus 2016-06-08
The core journal
8 Jun 11:40:29 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 Jun 11:53:38 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
8 Jun 11:53:38 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:05:26 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:05:26 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:18:35 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:18:35 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:31:44 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:31:44 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:43:52 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:43:52 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 12:57:01 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 12:57:01 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 Jun 13:08:49 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
8 Jun 13:08:49 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 13:23:21 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 13:23:21 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
June 8, 13:35:29 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
June 8, 13:35:29 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 June 13:47:15 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key MSSP (kSMCKeyNotFound)
8 June 13:47:15 SMC::setPowerState ERROR: failed to smcPublishSleepCause (kSMCKeyNotFound)
8 June 15:33:46 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key $Num (kSMCKeyNotFound)
8 June 15:33:46 SMC::smcReadKeyAction ERROR $Num kSMCKeyNotFound(0x84) fKeyHashTable = 0x0
8 June 15:33:46 SMC::smcInitHelper ERROR: regMap MMIO == NULL - go back to the old mode MSC
8 June 15:33:47 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key BEMB (kSMCKeyNotFound)
System log
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AudioIPCDriver failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleSMBusPCI.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleSMBusPCI failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAController.ke xt - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleHDAController failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleMCCSControl.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleMCCSControl failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleMCEDriver.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleMCEDriver failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleTyMCEDriver.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleTyMCEDriver failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOFireWireIP.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOFireWireIP failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothS erialManager.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOBluetoothSerialManager failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/AppleUpstreamUserClient.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.driver.AppleUpstreamUserClient failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOSurface.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOSurface failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/IOUserEthernet.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.iokit.IOUserEthernet failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/GeForce7xxx.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.GeForce7xxx failed; removal of the personalities of the kernel.
8 June 15:38:39 com.apple.kextd: cannot load /System/Library/Extensions/GeForce.kext - ineligible for secure boot.
8 June 15:38:39 com.apple.kextd: load com.apple.GeForce failed; removal of the personalities of the kernel.
launchd Journal
Jun 5 15:24:39 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
Jun 5 15:24:39 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
Jun 5 15:24:57: FAILURE: could not send a response MIG: 0 x 10000003
Jun 5 15:25:25 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
5 Jul 22:42:04 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
5 Jul 22:42:04 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
5 Jul 22:42:04 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
5 Jul 22:42:23: FAILURE: could not send a response MIG: 0 x 10000003
5 Jul 22:42:53 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
6 Jun 01:31:01 com.apple.dock.extra: XPC Service could not exec (3). Reset port.
6 June 12:05:02 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
6 Jun 21:27:07 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
Jun 7 00:54:04 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
7 Jun 03:53:28 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 03:53:28 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 03:53:28 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 04:03 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
7 Jun 21:48:45 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 21:48:45 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
7 Jun 21:48:45 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
7 June 21:49:38 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
8 June 15:33:30 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
8 June 15:33:30 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
8 June 15:33:30 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
8 June 15:34:59 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
The console log
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.03.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.02.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.01.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.04.29.asl
2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.04.28.asl
3 Jun 01:16:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.04.asl
4 Jun 16:58:11 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.05.asl
8 Jun 01:49:43 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.09.asl
Kernel loaded extensions
e.AppleFSCompression.AppleFSCompressionTypeDataless (1.0.0d1)
e.AppleFSCompression.AppleFSCompressionTypeZlib (1.0.0d1)
e.BootCache (33)
e.Dont_Steal_Mac_OS_X (7.0.0)
e.NVDAResman.G7xxx (7.0.4)
e.driver.ACPI_SMC_PlatformPlugin (5.0.0d8)
e.driver.AppleACPIButtons (1.5)
e.driver.AppleACPIEC (1.5)
e.driver.AppleACPIPlatform (1.5)
e.driver.AppleAHCIPort (2.3.1)
e.driver.AppleAPIC (1.6)
e.driver.AppleEFINVRAM (1.6.1)
e.driver.AppleEFIRuntime (1.6.1)
e.driver.AppleFWOHCI (4.9.0 :)
e.driver.AppleGraphicsControl (3.1.33)
e.driver.AppleHPET (1.7)
e.driver.AppleHWSensor (1.9.5d0)
e.driver.AppleIntel8254XEthernet (2.1.3b1)
e.driver.AppleIntelCPUPowerManagement (195.0.0)
e.driver.AppleIntelCPUPowerManagementClient (195.0.0)
e.driver.AppleIntelPIIXATA (2.5.1)
e.driver.AppleKeyStore (28.18)
e.driver.AppleLPC (1.6.0)
e.driver.ApplePolicyControl (3.1.33)
e.driver.AppleRTC (1.5)
e.driver.AppleSMBIOS (1.9)
e.driver.AppleSMC (3.1.3d10)
e.driver.AppleUSBComposite (5.0.0)
e.driver.AppleUSBEHCI (5.1.0)
e.driver.AppleUSBHub (5.1.0)
e.driver.AppleUSBMergeNub (5.1.0)
e.driver.AppleUSBUHCI (5.1.0)
e.driver.DiskImages (331.7)
e.driver.IOPlatformPluginFamily (5.1.1d6)
e.driver.IOPlatformPluginLegacy (5.0.0d8)
e.driver.XsanFilter (404)
e.filesystems.autofs (3.0)
e.iokit.IOACPIFamily (1.4)
e.iokit.IOAHCIBlockStorage (2.1.0)
e.iokit.IOAHCIFamily (2.0.8)
e.iokit.IOATAFamily (2.5.1)
e.iokit.IOATAPIProtocolTransport (3.0.0)
e.iokit.IOBDStorageFamily (1.7)
e.iokit.IOCDStorageFamily (1.7.1)
e.iokit.IODVDStorageFamily (1.7.1)
e.iokit.IOFireWireFamily (4.4.8)
e.iokit.IOGraphicsFamily (2.3.4)
e.iokit.IOHIDFamily (1.7.1)
e.iokit.IONDRVSupport (2.3.4)
e.iokit.IONetworkingFamily (2.1)
e.iokit.IOPCIFamily (2.7)
e.iokit.IOSCSIArchitectureModelFamily (3.2.1)
e.iokit.IOSCSIMultimediaCommandsDevice (3.2.1)
e.iokit.IOSMBusFamily (1.1)
e.iokit.IOStorageFamily (1.7.2)
e.iokit.IOUSBFamily (5.1.0)
e.iokit.IOUSBHIDDriver (5.0.0)
e.iokit.IOUSBUserClient (5.0.0)
e.iokit.SCSITaskUserClient (3.2.1)
e.kext.AppleMatch (1.0.0d1)
e.kext.Triggers (1.0)
e.NKE.applicationfirewall (3.2.30)
e.NVIDIA.nv40hal.G7xxx (7.0.4)
e.security.TMSafetyNet (8)
e.Security.Quarantine (1.4)
e.Security.sandbox (177.11)
All officers
com.apple.launchctl.Aqua
-status: 1
com Apple.MRT.UIAgent
-status: 255
Problems with fonts
com.apple.launchctl.Aqua
-status: 1
com Apple.MRT.UIAgent
-status: 255
User login items
iCal
-/Applications/iCal.app
Music Manager
-/Users/user/library/PreferencePanes/MusicManager.prefPane/contents/helpers/musi cManagerHelper.app
Wondershare Helper Compact
-/ Users/USER/Library/Application support/assistance/Wondershare Helper Compact.app
Firefox extensions
Hello Firefox Beta
Ad-Aware Ad Block
Widgets
Clock FlipClock
Small files: 638
Lockfiles: 1
Universal access
Zoom mode: window
Content of /Library/LaunchAgents/com.sophos.uiserver.plist
-mod date: 9 May 20:14:18 2016
-checksum: 40276757
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > KeepAlive < / key >
< true / >
< key > tag < / key >
< string > com.sophos.uiserver < / string >
< key > ProgramArguments < / key >
< table >
< string >/Library/Sophos Anti-Virus/SophosUIServer.app/Contents/MacOS/SophosUIServer < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StandardErrorPath < / key >
< string >/dev/null < / string >
< key > StandardOutPath < / key >
< string >/dev/null < / string >
< / dict >
< / plist >
Content of /Library/LaunchDaemons/com.sophos.common.servicemanager.plist
-mod date: 9 May 20:14:15 2016
-checksum: 521223032
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > StandardErrorPath < / key >
< string >/dev/null < / string >
< key > StandardOutPath < / key >
< string >/dev/null < / string >
< key > tag < / key >
< string > com.sophos.common.servicemanager < / string >
< key > ProgramArguments < / key >
< table >
< string >/Library/Sophos Anti-Virus/SophosServiceManager.bundle/Contents/MacOS/SophosServiceManager < / str ing >
< / array >
< key > KeepAlive < / key >
< true / >
< key > MachServices < / key >
< dict >
com.Sophos.common.ServiceManager < key > < / key >
< true / >
< / dict >
< / dict >
< / plist >
Content of /System/Library/LaunchAgents/com.apple.iCalPush.plist
-mod date: 31 dec 18:37: 21 2015
-checksum: 2684394709
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.iCalPush < / string >
< key > LimitLoadToSessionType < / key >
< table >
< string > LoginWindow < / string >
Aqua < string > < / string >
< / array >
< key > MachServices < / key >
< dict >
com.apple.iCalPush < key > < / key >
< true / >
< / dict >
< key > ProgramArguments < / key >
< table >
< string > /Applications/iCal.app/Contents/Resources/iCalPush < / string >
< / array >
< / dict >
< / plist >
Content of /System/Library/LaunchAgents/org.x.startx.plist
-mod date: 31 dec 18:39: 55 2015
-checksum: 355348819
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-computer //Apple / / DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > org.x.startx < / string >
< key > ProgramArguments < / key >
< table >
< string >/usr/X 11/bin/startx < / string >
< / array >
Sockets < key > < / key >
< dict >
org.x:0 < key > < / key >
< dict >
< key > SecureSocketWithKey < / key >
< string > VIEW < / string >
< / dict >
< / dict >
< key > ServiceIPC < / key >
< true / >
< key > EnableTransactions < / key >
< true / >
< / dict >
< / plist >
Content of /System/Library/LaunchDaemons/com.apple.xprotectupdater.plist
-mod date: 31 dec 19:21: 17 2015
-checksum: 3347091824
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.xprotectupdater < / string >
< key > ProgramArguments < / key >
< table >
< string > / usr/libexec/XProtectUpdater < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StartCalendarInterval < / key >
< dict >
< key > time < / key >
< integer > 23 < / integer >
< key > Minute < / key >
< integer > 3 < / integer >
< / dict >
< / dict >
< / plist >
Content of /System/Library/LaunchDaemons/org.apache.httpd.plist
-mod date: April 17, 14:12:12 2016
-checksum: 3461590056
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > disabled < / key >
< true / >
< key > tag < / key >
< string > org.apache.httpd < / string >
< key > OnDemand < / key >
< false / >
< key > ProgramArguments < / key >
< table >
< string > / usr/sbin/httpd < / string >
< string > d < / string >
< string > FOREGROUND < / string >
< / array >
< key > SHAuthorizationRight < / key >
< string > system.preferences < / string >
< / dict >
< / plist >
Content of Library/LaunchAgents/com.adobe.ARM.UUID.plist
-mod date: 21 Jan 16:52:52 2016
-checksum: 394026997
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.adobe.ARM.UUID < / string >
< key > ProgramArguments < / key >
< table >
< string >/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Helper.app/Contents/MacOS/Adobe Reader Updater Helper Updater < / string >
Semi-auto < string > < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StartInterval < / key >
< integer > 12600 < / integer >
< / dict >
< / plist >
Contents of Library/LaunchAgents/com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID. plist
-mod date: Apr 1 22:46:36 2016
-checksum: 1246257216
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID < / string >
< key > ProgramArguments < / key >
< table >
ourceSyncScheduleHelper /System/Library/Frameworks/AddressBook.framework/Resources/AddressBookS < string > < / string >
< string > - scheduleSync < / string >
< string > UUID < / string >
< / array >
< key > StartInterval < / key >
< integer > 120000 < / integer >
< / dict >
< / plist >
Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist content
-mod date: 31 dec 19:02: 16 2015
-checksum: 3183285794
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > KeepAlive < / key >
< false / >
< key > tag < / key >
< string > com.apple.CSConfigDotMacCert - E-MAIL-shared services < / string >
< key > LimitLoadToSessionType < / key >
Aqua < string > < / string >
< key > LowPriorityIO < / key >
< true / >
< key > Nice < / key >
< integer > 10 < / integer >
< key > ProgramArguments < / key >
< table >
.framework/Versions/A/Support/CSConfigDotMacCert /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices < string > < / string >
< string >-l < / string >
< string > /Users/USER/Library/Logs/CSConfigDotMacCert.log < / string >
< string > u < / string >
< string > EMAIL < / string >
< string > t < / string >
shared services < string > < / string >
< string > s < / string >
< / array >
.. .and 4 more lines
Content of Library/LaunchAgents/com.apple.FolderActions.folders.plist
-mod date: 8 June 16:26:37 2016
-checksum: 4030248352
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.apple.FolderActions.folders < / string >
program < key > < / key >
< string > / usr/bin/osascript < / string >
< key > ProgramArguments < / key >
< table >
< string > osascript < / string >
< string > e < / string >
< string > tell application "Folder Actions dispatcher" check < / string >
< / array >
< key > WatchPaths < / key >
< table >
< string >/Applications/Utilities < / string >
< / array >
< / dict >
< / plist >
Content of Library/LaunchAgents/com.google.keystone.agent.plist
-mod date: Mar 10 16:06:19 2016
-checksum: 3847280815
<? XML version = "1.0" encoding = "UTF-8"? >
<! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
< plist version = "1.0" >
< dict >
< key > tag < / key >
< string > com.google.keystone.user.agent < / string >
< key > LimitLoadToSessionType < / key >
Aqua < string > < / string >
< key > ProgramArguments < / key >
< table >
< string > /Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent < / string >
< string > - runMode < / string >
< string > ifneeded < / string >
< / array >
< key > RunAtLoad < / key >
< true / >
< key > StartInterval < / key >
< integer > 3623 < / integer >
< key > StandardErrorPath < / key >
< string >/dev/null < / string >
< key > StandardOutPath < / key >
< string >/dev/null < / string >
< / dict >
< / plist >
Bad plists
/ Library/Preferences/com. Apple.softwareupdate.plist
Frames
/Library/frameworks/savi.framework
-com.sophos.sav.savi
/Library/frameworks/SUMScanKit.framework
-com.sophos.sum.scan.kit
/Library/frameworks/SophosGenericsCommon.framework
-com.sophos.macendpoint.SophosGenericsCommon
/Library/frameworks/SophosGenericsCore.framework
-com.sophos.macendpoint.SophosGenericsCore
PrefPane
/ Library/PreferencePanes/Flash Player.prefPane
-com.adobe.flashplayerpreferences
/Users/user/library/PreferencePanes/MusicManager.prefPane
-com.google.musicmanager.pref
Time elapsed (s): 397
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
START UP IN VERBOSE MODE
1 hour of departure: 18:17:25 06/08/16
2
Review 3: 1612
4
5 model identifier: MacPro1, 1
6 memory: 3 GB
7 boot ROM Version: MP11.005C.B08
8 the system version: Mac OS X 10.7.5 (11 G 63)
9 kernel version: Darwin 11.4.2
10 times since boot: 01:00
11
Memory 12
Riser DIMM 13 A/DIMM 1
14
15 size: 512 MB
16: 667 MHz speed
17 location: OK
18 manufacturer: 0x830B
19
Riser DIMM 20 A/DIMM 2
21
22 size: 512 MB
23 speed: 667 MHz
24 location: OK
25 manufacturer: 0x830B
26
27 DIMM Riser B/DIMM 1
28
Size 29: 512 MB
30: 667 MHz speed
31 location: OK
32 manufacturer: 0x830B
33
34 DIMM Riser B/DIMM 2
35
Size 36: 512 MB
37 speed: 667 MHz
38 status: OK
39 manufacturer: 0x830B
40
Riser 41 A/DIMM DIMMS 3
42
43 size: 512 MB
44: 667 MHz speed
45 State: OK
46 manufacturer: 0x830B
47
Riser DIMM 48 A/DIMM 4
49
50 size: 512 MB
Speed 51: 667 MHz
52 status: OK
53 manufacturer: 0x830B
54
55 Riser B/DIMM DIMMS 3
56
Size 57: empty
Speed 58: empty
59 status: empty
60 manufacturer: vacuum
61
DIMM 62 Riser B/DIMM 4
63
Size 64: empty
Speed 65: empty
66 status: empty
67 manufacturer: vacuum
68
ATX 69
70
WDC WD1003FZEX-00MK2A0 71
72
73 PCI cards
74
75 NVIDIA GeForce 7300 GT
76
Type 77: view controller
78
79 USB
80
WiFi 81 (ASUSTek Computer Inc.)
82 SoundSticks (Harman International)
Mouse button 83 4 Kensington (Kensington)
84
Heat 85
86
Use of 87: pmset < options >
88 see pmset (1) for more details: "man pmset".
89
Firewall 90: on
91
92 proxies
93
94 ProxyAutoConfigEnable: 1
95 ProxyAutoConfigURLString: http://wpad/wpad.dat
ProxyAutoDiscoveryEnable 96: 1
97
98 DNS: 209.18.47.61
99
100 listeners
101
102 kdc: kerberos
launchd 103: afpovertcp
104
105 diagnostic reports
106
2016-05-107 10 kernel panic x 2
2016-05-108 10 MusicManagerHelper crash x 2
Crash installing Adobe Flash Player 109 2016-05-19
2016-05-110 19 x 7 panic kernel
MusicManagerHelper 111 crash 2016-05-19
2016-05-112 19 QuickLookUIHelper crash
2016-05-113 19 Sophos Anti-virus crash x 4
114 helpd 2016-05-19 crash x 5
2016 06-115 02 kernel panic x 7
Sophos Anti-virus 116 crash 2016-06-02
UserNotificationCenter 117 crash 2016-06-02
Automator 118 crash 2016-06-08
Crash of finder 119 2016-06-08
2016 06-120 08 kernel panic x 4
2016 06-121 08 SecurityAgent crash x 4
Crash of Sophos Anti-virus 122 2016-06-08
123
124 core journal
125
126 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
127 the 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
128 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
129 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
130 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
131 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
132 of 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
133 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
134 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
135 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
136, 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
137 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
138 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
139 the 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
140 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
141 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
142 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
143 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
144 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
145 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
146 8 June 17:16:36 NVDA (OpenGL): exception channel! exception type = 0xd = GR: error to notify SW
147 the 8 June 17:17:12 sleep failure code 0x00000000 0 x 19006600
148 June 8, 17:17:13 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key $Num (kSMCKeyNotFound)
149 8 June 17:17:13 previous judgment Cause: 3
150 8 June 17:17:14 SMC::smcReadKeyAction ERROR: failure of smcReadData8 for key BEMB (kSMCKeyNotFound)
151
152 journal system
153
154 8 June 17:10:26 netbiosd: could not start the NetBIOS name service:
155 8 June 17:10:32 SophosWebD: undefined GPO
156 of 8 June 17:10:32 SophosWebD: incoming policy not valid, current policy will not be updated.
157 8 June 17:10:34 loginwindow: Login window has begun a security officer
158 8 June 17:10:34 SecurityAgent: Echo enabled
159 8 June 17:11:17 WindowServer: kCGErrorFailure: set a breakpoint @ CGErrorBreakpoint() to intercept errors as they are registered.
160 8 June 17:12:39 mdworker32: kCGErrorFailure: set a breakpoint @ CGErrorBreakpoint() to intercept errors as they are registered.
161 8 June 17:17:06 fseventsd: event logs in .fseventsd not synchronized with the volume. destroy the old newspapers. (373-5-403)
162 8 June 17:17:06 fseventsd: log dir: .fseventsd get new uuid: UUID
163 8 June 17:17:13 mDNSResponder: mDNSResponder mDNSResponder - 320.16 (July 19, 2012 21:07:07) from 11 OSXVers
164 8 June 17:17:18 mDNSResponder: D2DInitialize managed
165, 8 June 17:17:19 < no asl_client >: [SophosDistantObject.m:208] an exception occurred when the e-mail server: SophosNilProxyException. New test: 1 attempt
166 8 June 17:17:24 SophosWebD: undefined GPO
167, 8 June 17:17:24 SophosWebD: incoming policy not valid, current policy will not be updated.
168, 8 June 17:17:24 loginwindow: Login window has begun a security officer
169 8 June 17:17:24 SecurityAgent: Echo enabled
170 8 June 17:17:25 WindowServer: kCGErrorFailure: set a breakpoint @ CGErrorBreakpoint() to intercept errors as they are registered.
171 8 June 17:17:33 SecurityAgent: user info nec Tony1 context values
172 8 June 17:17:34 SecurityAgent: procedure of connection login window
173 8 June 17:17:40 am preferences system: kCGErrorIllegalArgument: CGSDeviceCreate: invalid window
174 8 June 17:17:40 am preferences system: kCGErrorFailure: set a breakpoint @ CGErrorBreakpoint() to intercept errors as they are registered.
175 8 June 17:17:40 am preferences system: could not create device window frame
176 8 June 17:17:41 system preferences: CGWindowContextCreate: failed to create the delegate of window frame.
177 8 June 17:19:49 mdworker32: kCGErrorFailure: set a breakpoint @ CGErrorBreakpoint() to intercept errors as they are registered.
178 8 June 17:47:49 SophosAutoUpdate: impossible to retrieve the Automatic Configuration Script to the URL. (Script URL: http://wpad/wpad.dat)
179
launchd 180 Journal
181
182 June 7 03:53:28 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
183 7 Jun 03:53:28 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
184 June 7 03:53:28 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
185 June 7 04:03 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
186 7 June 21:48:45 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
187 7 June 21:48:45 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
188 7 June 21:48:45 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
189 the 7 June 21:49:38 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
190 8 June 15:33:30 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
191 8 Jun 15:33:30 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
192 8 June 15:33:30 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
193 8 June 15:34:59 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
194 8 Jun 16:42:24 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
195 8 Jun 16:42:24 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
196 8 Jun 16:42:24 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
197 8 Jun 16:43:04 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
198, 8 June 17:10:12 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
199 the 8 June 17:10:12 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
200 8 June 17:10:12 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
201 June 8, 17:10:24: FAILURE: could not send a response MIG: 0 x 10000003
202 8 June 17:17:06 com.apple.powerd: unknown value for the key POSIXSpawnType: Interactive
203 8 June 17:17:06 com.apple.sandboxd: unknown value for the key POSIXSpawnType: Interactive
204 8 June 17:17:06 com.apple.usbmuxd: unknown value for the key POSIXSpawnType: Interactive
205 June 8, 17:17:19: FAILURE: could not send a response MIG: 0 x 10000003
206 8 June 17:17:35 com.apple.AirPortBaseStationAgent: unknown value for the key POSIXSpawnType: background
207
208 console log
209
210 2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.03.asl
211 2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.02.asl
212 2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.01.asl
213 2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.04.29.asl
214 2 Jun 01:29:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.04.28.asl
215 3 Jun 01:16:44 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.04.asl
216 4 Jun 16:58:11 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.05.asl
217 8 Jun 01:49:43 SubmitDiagInfo: cleaning of the database of diagnostic messages expired at the path: /var/log/DiagnosticMessages/2016.05.09.asl
218
Loaded kernel extensions 219
220
221 e.AppleFSCompression.AppleFSCompressionTypeDataless (1.0.0d1)
222 e.AppleFSCompression.AppleFSCompressionTypeZlib (1.0.0d1)
223 e.BootCache (33)
224 e.Dont_Steal_Mac_OS_X (7.0.0)
225 e.GeForce7xxx (7.0.4)
226 e.NVDAResman.G7xxx (7.0.4)
227 e.driver.ACPI_SMC_PlatformPlugin (5.0.0d8)
228 e.driver.AppleACPIButtons (1.5)
229 e.driver.AppleACPIEC (1.5)
230 e.driver.AppleACPIPlatform (1.5)
231 e.driver.AppleAHCIPort (2.3.1)
232 e.driver.AppleAPIC (1.6)
233 e.driver.AppleEFINVRAM (1.6.1)
234 e.driver.AppleEFIRuntime (1.6.1)
235 e.driver.AppleFWOHCI (4.9.0)
236 e.driver.AppleGraphicsControl (3.1.33)
237 e.driver.AppleHDA (2.2.5a5)
238 e.driver.AppleHDAController (2.2.5a5)
239 e.driver.AppleHPET (1.7)
240 e.driver.AppleHWSensor (1.9.5d0)
241 e.driver.AppleIntel8254XEthernet (2.1.3b1)
242 e.driver.AppleIntelCPUPowerManagement (195.0.0)
243 e.driver.AppleIntelCPUPowerManagementClient (195.0.0)
e.driver.AppleIntelPIIXATA 244 (2.5.1)
245 e.driver.AppleKeyStore (28.18)
246 e.driver.AppleLPC (1.6.0)
247 e.driver.AppleMCCSControl (1.0.33)
248 e.driver.AppleMCEDriver (1.1.9)
249 e.driver.ApplePolicyControl (3.1.33)
250 e.driver.AppleRTC (1.5)
251 e.driver.AppleSMBIOS (1.9)
252 e.driver.AppleSMBusController (1.0.10d0)
253 e.driver.AppleSMC (3.1.3d10)
254 e.driver.AppleUSBAudio (2.9.0f5)
255 e.driver.AppleUSBComposite (5.0.0)
256 e.driver.AppleUSBEHCI (5.1.0)
257 e.driver.AppleUSBHub (5.1.0)
258 e.driver.AppleUSBMergeNub (5.1.0)
259 e.driver.AppleUSBUHCI (5.1.0)
260 e.driver.AppleUpstreamUserClient (3.5.9)
261 e.driver.AudioAUUC (1.59)
262 e.driver.AudioIPCDriver (1.2.3)
263 e.driver.DiskImages (331.7)
264 e.driver.DspFuncLib (2.2.5a5)
265 e.driver.IOPlatformPluginFamily (5.1.1d6)
266 e.driver.IOPlatformPluginLegacy (5.0.0d8)
267 e.driver.XsanFilter (404)
268 e.filesystems.autofs (3.0)
269 e.iokit.IOACPIFamily (1.4)
270 e.iokit.IOAHCIBlockStorage (2.1.0)
271 e.iokit.IOAHCIFamily (2.0.8)
272 e.iokit.IOATAFamily (2.5.1)
273 e.iokit.IOATAPIProtocolTransport (3.0.0)
274 e.iokit.IOAudioFamily (1.8.6fc18)
275 e.iokit.IOBDStorageFamily (1.7)
276 e.iokit.IOBluetoothSerialManager (4.0.8f17)
277 e.iokit.IOCDStorageFamily (1.7.1)
278 e.iokit.IODVDStorageFamily (1.7.1)
279 e.iokit.IOFireWireFamily (4.4.8)
280 e.iokit.IOFireWireIP (2.2.5)
281 e.iokit.IOGraphicsFamily (2.3.4)
282 e.iokit.IOHDAFamily (2.2.5a5)
283 e.iokit.IOHIDFamily (1.7.1)
284 e.iokit.IONDRVSupport (2.3.4)
285 e.iokit.IONetworkingFamily (2.1)
286 e.iokit.IOPCIFamily (2.7)
287 e.iokit.IOSCSIArchitectureModelFamily (3.2.1)
288 e.iokit.IOSCSIMultimediaCommandsDevice (3.2.1)
289 e.iokit.IOSMBusFamily (1.1)
290 e.iokit.IOSerialFamily (10.0.5)
291 e.iokit.IOStorageFamily (1.7.2)
292 e.iokit.IOSurface (80.0.2)
293 e.iokit.IOUSBFamily (5.1.0)
294 e.iokit.IOUSBHIDDriver (5.0.0)
295 e.iokit.IOUSBUserClient (5.0.0)
296 e.iokit.IOUserEthernet (1.0.0d1)
297 e.iokit.SCSITaskUserClient (3.2.1)
298 e.kext.AppleMatch (1.0.0d1)
299 e.kext.OSvKernDSPLib (1.3)
300 e.kext.triggers (1.0)
e.NKE.applicationfirewall 301 (3.2.30)
302 e.nvidia.nv40hal.G7xxx (7.0.4)
303 e.security.TMSafetyNet (8)
304 e.security.quarantine (1.4)
305 e.security.sandbox (177.11)
306 os.kext.sav (9.4.2)
307 os.nke.swi (9.4.2)
308
Load System 309 services
310
311 com.adobe.fpsaud
312 com.sophos.autoupdate
com.Sophos.common.ServiceManager 313
com.Sophos.Configuration 314
com.Sophos.InterCheck 315
316 com.sophos.notification
317 com.sophos.scan
318 com.sophos.sxld
319 com.sophos.webd
320
321 enforcement agent
322
323 com.adobe.ARM.UUID
324 com.apple.CSConfigDotMacCert - E-MAIL-SSP
325 status: 1
326 com.apple.launchctl.Aqua
327 status: 1
328 com.apple.mrt.uiagent
329 status: 255
330 com.google.keystone.user.agent
331 com.sophos.uiserver
332
333 /Library/LaunchAgents/com.sophos.uiserver.plist content
334 - mod date: 9 May 20:14:18 2016
335. (B) size: 563
336 checksum: 40276757
337
338 <? XML version = "1.0" encoding = "UTF-8"? >
339 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
340 < plist version = "1.0" >
341 < dict >
342 < key > KeepAlive < / key >
343 < true / >
344 < key > tag < / key >
345 com.sophos.uiserver < string > < / string >
346 < key > ProgramArguments < / key >
347 < table >
< string > 348/library/Sophos Anti-Virus/SophosUIServer.app/Contents/MacOS/SophosUIServer < / string >
349 < / array >
350 < key > RunAtLoad < / key >
351 < true / >
352 < key > StandardErrorPath < / key >
353 < string >/dev/null < / string >
354 < key > StandardOutPath < / key >
355 < string >/dev/null < / string >
356 < / dict >
357 < / plist >
358
359 /Library/LaunchDaemons/com.sophos.common.servicemanager.plist content
360 - mod date: 9 May 20:14:15 2016
361. (B) size: 658
362 checksum: 521223032
363
364 <? XML version = "1.0" encoding = "UTF-8"? >
365 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
366 < plist version = "1.0" >
367 < dict >
368 < key > StandardErrorPath < / key >
369 < string >/dev/null < / string >
370 < key > StandardOutPath < / key >
371 < string >/dev/null < / string >
372 < key > tag < / key >
373 com.sophos.common.servicemanager < string > < / string >
374 < key > ProgramArguments < / key >
375 < table >
< string > 376/library/Sophos Anti-Virus/SophosServiceManager.bundle/Contents/MacOS/SophosServiceManager < / str ing >
377 < / array >
378 < key > KeepAlive < / key >
379 < true / >
380 < key > MachServices < / key >
381 < dict >
382 com.sophos.common.servicemanager < key > < / key >
383 < true / >
384 < / dict >
385 < / dict >
386 < / plist >
387
388 content of /System/Library/LaunchAgents/com.apple.iCalPush.plist
389 - mod date: 31 dec 18:37: 21 2015
390. (B) size: 690
391 checksum: 2684394709
392
393 <? XML version = "1.0" encoding = "UTF-8"? >
394 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
395 < plist version = "1.0" >
396 < dict >
397 < key > tag < / key >
398 < string > com.apple.iCalPush < / string >
399 < key > LimitLoadToSessionType < / key >
400 < table >
401 LoginWindow < string > < / string >
402 < string > Aqua < / string >
403 < / array >
404 < key > MachServices < / key >
405 < dict >
406 com.apple.iCalPush < key > < / key >
407 < true / >
408 < / dict >
409 < key > ProgramArguments < / key >
410 < table >
411 /Applications/iCal.app/Contents/Resources/iCalPush < string > < / string >
412 < / array >
413 < / dict >
414 < / plist >
415
416 /System/Library/LaunchAgents/org.x.startx.plist content
417 - mod date: 31 dec 18:39: 55 2015
418. (B) size: 562
419 checksum: 355348819
420
421 <? XML version = "1.0" encoding = "UTF-8"? >
422 <! DOCTYPE plist PUBLIC "-computer //Apple / / DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
423 < plist version = "1.0" >
424 < dict >
425 < key > tag < / key >
426 < string > org.x.startx < / string >
427 < key > ProgramArguments < / key >
428 < table >
429 < string >/usr/X 11/bin/startx < / string >
430 < / array >
431 Sockets < key > < / key >
432 < dict >
433 org.x:0 < key > < / key >
434 < dict >
435 < key > SecureSocketWithKey < / key >
436 < string > VIEW < / string >
437 < / dict >
438 < / dict >
439 < key > ServiceIPC < / key >
440 < true / >
441 < key > EnableTransactions < / key >
442 < true / >
443 < / dict >
444 < / plist >
445
446 /System/Library/LaunchDaemons/com.apple.xprotectupdater.plist content
447 - mod date: 31 dec 19:21: 17 2015
448 (B) size: 513
449 checksum: 3347091824
450
451 <? XML version = "1.0" encoding = "UTF-8"? >
452 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
453 < plist version = "1.0" >
454 < dict >
455 < key > tag < / key >
456 < string > com.apple.xprotectupdater < / string >
457 < key > ProgramArguments < / key >
458 < table >
459 < string > / usr/libexec/XProtectUpdater < / string >
460 < / array >
461 < key > RunAtLoad < / key >
462 < true / >
463 < key > StartCalendarInterval < / key >
464 < dict >
465 < key > time < / key >
466 < integer > 23 < / integer >
Minute 467 < key > < / key >
468 < integer > 3 < / integer >
469 < / dict >
470 < / dict >
471 < / plist >
472
473 /System/Library/LaunchDaemons/org.apache.httpd.plist content
474 - mod date: April 17, 14:12:12 2016
475. (B) size: 507
476 checksum: 3461590056
477
478 <? XML version = "1.0" encoding = "UTF-8"? >
479 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
480 < plist version = "1.0" >
481 < dict >
482 < key > disabled < / key >
483 < true / >
484 < key > tag < / key >
485 org.apache.httpd < string > < / string >
486 < key > OnDemand < / key >
487 < false / >
488 < key > ProgramArguments < / key >
489 < table >
490 < string > / usr/sbin/httpd < / string >
491 < string > d < / string >
492 < string > FOREGROUND < / string >
493 < / array >
494 < key > SHAuthorizationRight < / key >
495 system.preferences < string > < / string >
496 < / dict >
497 < / plist >
498
499 /private/etc/memberd.conf content
500 - mod date: 31 dec 18:44: 17 2015
501 (B) size: 168
502 checksum: 1648513985
503
504 DefaultExpirationInSecs 14400
505 DefaultFailureExpirationInSecs 7200
506 DefaultKernelExpirationInSecs 120
507 DefaultMaximumRefreshInSecs 900
508 KerberosFallbackToRecordName 1
509
510 content of Library/LaunchAgents/com.adobe.ARM.UUID.plist
511 - mod date: 21 Jan 16:52:52 2016
512 (B) size: 603
513 checksum: 394026997
514
515 <? XML version = "1.0" encoding = "UTF-8"? >
516 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
517 < plist version = "1.0" >
518 < dict >
519 < key > tag < / key >
520 com.adobe.ARM.UUID < string > < / string >
521 < key > ProgramArguments < / key >
522 < table >
< string > 523/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Helper.app/Contents/MacOS/Adobe Reader Updater Helper Updater < / string >
524 semi-auto < string > < / string >
525 < / array >
526 < key > RunAtLoad < / key >
527 < true / >
528 < key > StartInterval < / key >
529 < integer > 12600 < / integer >
530 < / dict >
531 < / plist >
532
533 Library/LaunchAgents/com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID content. plist
534 - mod date: Apr 1 22:46:36 2016
535. (B) size: 618
536 checksum: 1246257216
537
538 <? XML version = "1.0" encoding = "UTF-8"? >
539 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
540 < plist version = "1.0" >
541 < dict >
542 < key > tag < / key >
543 com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID < string > < / string >
544 < key > ProgramArguments < / key >
545 < table >
546 /System/Library/Frameworks/AddressBook.framework/Resources/AddressBookS ourceSyncScheduleHelper < string > < / string >
547 < string > - scheduleSync < / string >
548 < string > UUID < / string >
549 < / array >
550 < key > StartInterval < / key >
551 < integer > 120000 < / integer >
552 < / dict >
553 < / plist >
554
555 Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist content
556 - mod date: 31 dec 19:02: 16 2015
557. (B) size: 902
558 checksum: 3183285794
559
560 <? XML version = "1.0" encoding = "UTF-8"? >
561 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
562 < plist version = "1.0" >
563 < dict >
564 < key > KeepAlive < / key >
565 < false / >
566 < key > tag < / key >
567 < string > com.apple.CSConfigDotMacCert - E-MAIL-shared services < / string >
568 < key > LimitLoadToSessionType < / key >
569 Aqua < string > < / string >
570 < key > LowPriorityIO < / key >
571 < true / >
572 < key > Nice < / key >
573 < integer > 10 < / integer >
574 < key > ProgramArguments < / key >
575 < table >
576 < string > /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert < / string >
577 < string >-l < / string >
578 < string > /Users/USER/Library/Logs/CSConfigDotMacCert.log < / string >
579 < string > u < / string >
580 < string > EMAIL < / string >
581 < string > t < / string >
shared services 582 < string > < / string >
583 < string > s < / string >
584 < / array >
585
586 .and 4 more lines
587
588 Library/LaunchAgents/com.apple.FolderActions.folders.plist content
589 - mod date: 8 June 17:18:37 2016
590. (B) size: 569
591 checksum: 4030248352
592
593 <? XML version = "1.0" encoding = "UTF-8"? >
594 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
595 < plist version = "1.0" >
596 < dict >
597 < key > tag < / key >
598 < string > com.apple.FolderActions.folders < / string >
program 599 < key > < / key >
600 < string > / usr/bin/osascript < / string >
601 < key > ProgramArguments < / key >
602 < table >
603 osascript < string > < / string >
604 < string > e < / string >
605 < string > tell application "Folder Actions dispatcher" check < / string >
606 < / array >
607 < key > WatchPaths < / key >
608 < table >
< string > 609/Applications/Utilities < / string >
610 < / array >
611 < / dict >
612 < / plist >
613
614 Library/LaunchAgents/com.google.keystone.agent.plist content
615 - mod date: Mar 10 16:06:19 2016
616 (B) size: 802
617 checksum: 3847280815
618
619 <? XML version = "1.0" encoding = "UTF-8"? >
620 <! DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0 / / IN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd" > ""
621 < plist version = "1.0" >
622 < dict >
623 < key > tag < / key >
624 com.google.keystone.user.agent < string > < / string >
625 < key > LimitLoadToSessionType < / key >
626 < string > Aqua < / string >
627 < key > ProgramArguments < / key >
628 < table >
629 < string > /Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent < / string >
630 < string > - runMode < / string >
631 ifneeded < string > < / string >
632 < / array >
633 < key > RunAtLoad < / key >
634 < true / >
635 < key > StartInterval < / key >
636 < integer > 3623 < / integer >
637 < key > StandardErrorPath < / key >
638 < string >/dev/null < / string >
639 < key > StandardOutPath < / key >
640 < string >/dev/null < / string >
641 < / dict >
642 < / plist >
643
644 illegible plists
645
/Library/preferences/com.Apple.SoftwareUpdate.plist 646
647
648 points of user login
649
650 iCal
651 - /Applications/iCal.app
Music Manager 652
653 - /Users/USER/Library/PreferencePanes/MusicManager.prefPane/Contents/Helpers/Musi cManagerHelper.app
Wondershare 654 Helper Compact
655 / users/USER/Library/Application Support / Helper / Wondershare Helper Compact.app
656
657 Firefox extensions
658
659 Hello Firefox Beta
Ad-Aware 660 ad block
661
662 widgets
663
Clock FlipClock 664
665
666 iCloud services
667
668 CONTACTS
CALENDAR 669
670 BOOKMARKS
671 MOBILE_DOCUMENTS
672
Permissions restrictive 673: 642
674
675 Lockfiles: 1
676
677 global prefs (user)
678
679 AppleShowAllExtensions = 1
680 AppleTextBreakLocale = "en_US_POSIX".
681 NSUserReplacementItemsEnabled = 1
682 = 1 WebAutomaticTextReplacementEnabled
683
Universal access 684
685
686 zoom Mode: window
687
688 applications
689
690/applications/M4P to MP3 Converter.app
691 - com.ondesoft.M4P - to-MP3-Converter
692 Jian Li
Compact.app support/Helper/Wondershare Helper 693 Users/USER/Library/Application
694 - com.wondershare.helper_compact
695 Wondershare Software Co., Ltd.
696
PrefPane 697
698
699/Library/PreferencePanes/Flash Player.prefPane
700 - com.adobe.flashplayerpreferences
701
Bundles of 702
703
704/library/Internet Plug - Ins / AdobePDFViewer.plugin
705 - com.adobe.acrobat.pdfviewer
706 - adobe Systems, Inc..
707/library/Internet Plug - Ins / AdobePDFViewerNPAPI.plugin
708 - com.adobe.acrobat.pdfviewerNPAPI
709 - adobe Systems, Inc..
710/library/Internet Plug - Ins / Flash Player.plugin
711 -. com.macromedia.Flash Player.plugin
712 - adobe Systems, Inc..
713/library/Internet Plug - Ins / Quartz Composer.webplugin
714 - com.apple.QuartzComposer.webplugin
715 signature software
716/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/21.0.0.216/PepperFlashPlayer.plugin
717 - com.macromedia.PepperFlashPlayer.pepper
718 - adobe Systems, Inc..
719/users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/widevine cdmadapter.plugin
720. NA
721 /Users/USER/Library/Widgets/FlipClock.wdgt
722 - com FlipClock.widget.FlipClock
723 /usr/share/servermgrd/bundles/servermgr_addressbook.bundle
724. NA
725
726 bundles (new)
727
728/Library/Application Support / Sophos / he / Sophos Installer Components/savi.bundle
729 - com.sophos.macinstallpkg.savi
730 Sophos (2H5GFH3774)
731 /Library/Caches/com.sophos.sau/CID/Sophos Installer Components/savi.bundle
732 - com.sophos.macinstallpkg.savi
733 Sophos (2H5GFH3774)
Components/savi.bundle 734/users/USER/downloads/n/Sophos Installer
735 - com.sophos.macinstallpkg.savi
736 Sophos (2H5GFH3774)
737
738 library paths
739
740/users/USER/Library/Application Support/Firefox/Profiles/w0m9itqx.default-1463807046223/gmp-gmpopenh264/1.5.3/l ibgmpopenh264.dylib
741 Users/USER/Library/Application Support/Firefox/Profiles/w0m9itqx.default-1463807046223/gmp-widevinecdm/1.4.8.8 66 / libwidevinecdm.dylib
742/users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/libwidev inecdm.dylib
743
744 changes
745
746 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPadBack.png
747 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPadForward.png
748 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPadRotate.png
749 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPhoneBack.png
750 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPhoneForward.p ng
751 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPhoneRetinaBac k.png
752 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPhoneRetinaFor ward.png
753 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPhoneRetinaRot ate.png
754 added resource: /Applications/Safari.app/Contents/Resources/_internal_MobileTestIPhoneRotate.pn g
755 added resource: /Applications/Safari.app/Contents/Resources/Activity_StopPressed~snowleopard.ti ff
756...
757
Time up 758 (s): 640
A
The graphics processor is faulty and should be replaced if you continue to use the machine. You can also search the Web for instructions to bake in an oven Tin reflow. Sometimes this will prolong its life for a while.
B
The results of the tests show other issues, probably not related to the original question.
Please remove the Sophos product by following the instructions on this page, so this one, if any. If you have a different version, the procedure may be different.
Back up all data before making any changes. Never install a software "anti-virus" or "anti-malware" again.
Tags: Mac
Similar Questions
-
not be able to start in safe mode
I found a Trojan horse that is attached to skype.exe.
I tried to start in safe mode by pressing F8 at startup upward, but I'm not able to access safe mode start upward.
Any thoughts?
Thank you
It worked - thank you.
-
Cannot start Firefox, crash even in Crash Reporter. Not be able to start in safe mode either.
Cannot start Firefox. He goes to Mozilla Crash Reporter every time. I can't even start it Safe Mode.
I tried to uninstall and delete all the files related to Mozilla Firefox in & AppData & and each base registry with RegEdit.I have run, or at least try, on a system with Windows 7 64 bit, 8 GB RAM, 314.22 driver for Nvidia GeForce GPU and a CPU Intel Core i5 2500 k CPU.
Little help would be nice.
Hi deliubogdan
Try to remove the extension DataMngr (Datamngr.dll)
Do a check with some malware malware, analysis of programs on the Windows computer.
Please scan with all programs, because each program detects a different malicious program.
All of these programs have free versions.Make sure that you update each program to get the latest version of their databases before scanning.
- Malwarebytes' Anti-Malware:
http://www.Malwarebytes.org/MBAM.php - AdwCleaner:
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.Softpedia.com/get/antivirus/removal-tools/AdwCleaner.shtml - SuperAntispyware:
http://www.SUPERAntiSpyware.com/ - Microsoft security scanner:
http://www.Microsoft.com/security/scanner/en-us/default.aspx - Windows Defender: Home Page:
http://www.Microsoft.com/Windows/products/winfamily/Defender/default.mspx - Spybot Search & Destroy:
http://www.safer-networking.org/en/index.html - Kasperky free Security Scan:
http://www.Kaspersky.com/security-scan
Alternatively, you can write a check for an infection rootkit TDSSKiller.
- Utility anti-rootkit TDSSKiller:
http://support.Kaspersky.com/5350?El=88446
See also:
- "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
- Malwarebytes' Anti-Malware:
-
Re: Toshiba L305 Satellite 1) screen is messed up and only start in safe mode
* HELP! *
Windows starts only in safe mode or safe mode with network. My screen is messed up (black and gray with horizontal lines and the screen looks like it scrolls continuously).
I connected the laptop to an external monitor and it still does not start normally and I need to recover contacts from my iphone from itunes.
Is there something I can do? I really don't want to lose all my contacts! I have to remove the hard drive and it burst in another machine and try to start windows normally to have access to my current drive with all the data that is on it, but I don't know if it works or if it's a bad idea.
What could be causing the screen get all dirtied upwards and at the same time windows does not start normally? I have never had a virus before problems!
Help! Thanks :)
Hello
> Windows will only start in safe mode or safe mode with networking
It seems that the bootmanger is corrupt or something like this
> I really don't want to lose all my contacts!
I know, I Safe mode, you have access to all data on the hard drive. So, you can move all the important data on USB or on the partition (if available) 2 nd on your hard drive and you don't need to remove the hard drive
Then you can reinstall Windows with a recovery disc or by using the disk copy of Win. This is the best solution in your case, try to fix windows can take a lot of time as a new installation. -
XP SP3 update causes computer to only start in safe mode
My daughter had XP IE8 running on his computer, site update Windows XP SP3 download. I downloaded and installed, however it won't start in safe mode. When I remove SP3, the computer loads normally. I then uninstalled IE8 (went back to IE6), made sure I had the pre-requistes, followed the steps as outline on the microsoft site, downloaded SP3 again and installed. It will only re-start in safe mode. I tried everything, no matter what I do, XP SP3 causes the computer to restart in safe mode only. I'm totally frustrated. Can someone help me?
What is the origin of XP SP3 only start in SafeMode anfter installation? What can I do to fix this?
Continuous restarts or can only to Safe Mode boot after installing WinXP SP3?
[NB: the above has been updated several times and now includes "a small tool that allows to detect the problem IntelPPM and mitigate before installing (WinXP SP3)".]
Possible workaround: boot safe mode and rename INTELPMM. SYS to INTELPMM. OLD.
Other references include:
- Error after you upgrade a computer that uses one processor other than a processor of Intel for Windows XP Service Pack 2 or Service Pack 3 for Windows XP: "STOP: 0x0000007E"
http://support.Microsoft.com/kb/953356 - HP and Compaq Desktop PC: restart the computer after the display of the Stop error 0x0000007E after installing WinXP SP3]
http://h10025.www1.HP.com/ewfrf/wc/document?LC=en&DLC=en&cc=us&DocName=c01457284
- Error after you upgrade a computer that uses one processor other than a processor of Intel for Windows XP Service Pack 2 or Service Pack 3 for Windows XP: "STOP: 0x0000007E"
-
Computer hangs, reboot, can only start in safe mode
Original title:-i can only start in safe mode
Ive tried to use several restore points but when I try to reboot the computer freezes and I have to start in safe mode
Safe mode is a mode where Windows works only the bare minimum programs and processes necessary to the performance of your system. When you start in Normal mode, many more processes and applications running. At least one of these programs or process causes your computer to crash. If your task is to identify this program/process and, at least temporarily, to prevent it from running at startup. Microsoft has a tool that you can use to selectively disable or or the process that normally run at startup called "msconfig". It can be a long and exhausting iterative process of turning things off and restart to see if it you fixed program, but that's what you do:
"How to solve configuration errors by using the System Configuration utility in Windows XP"
<>http://support.Microsoft.com/kb/310560/en-us >
First, disable all items "start-up". If it does not, set it to 'Services '. If this does not work, then reactivate some of them and try again until you zero - in on the culprit.
HTH,
JW
-
I have windows xp after the installation of service pack 3 I can only start in safe mode
I have windows XP after the installation of service pack 3 I can only start in safe mode?
Hello
· You get the error message?
· What happens when you try to start in normal mode?
Method 1
Windows XP can in every start Safe Mode by default. Even if you select the option Start Windows normally, it always starts in Mode without failure. IOW, you can't get out of safe mode.
This happens if the switch/SafeBoot is added to the Boot.ini file. / SafeBoot parameter forces a boot in safe mode by using the specified parameters. The available parameters are:
(a) minimal
(b) network
(c) safeboot: minimal (alternateshell)
For more information about the boot.ini switches, see visualization and correction of the settings of the boot on x 86 systems
RESOLUTION
(a) click Start, run and type MSCONFIG
(b) click the Boot.ini tab
(c) If you have a dual-boot system, select the entry that is appropriate under the [operating systems]
(d) in section downstairs, Startup Options uncheck / hisFEBOOT
(e) click OK
(f) restart Windows
The entry/SafeBoot are removed from the Boot.ini file.
Method 2:
If the above method is not the cause, it seems that Service Pack 3 is not installed correctly.
Step 1: You try to run the system restore from safe mode that will repair return the computer to the point while it was working fine.
How to restore Windows XP to a previous state
Step 2:
I suggest you follow the troubleshooting steps form the article and check if it helps.
How to troubleshoot an installation fails on Windows XP Service Pack 3
http://support.Microsoft.com/kb/950718
Note: System requirements to install Windows XP SP3
Reference: Learn how to install Windows XP Service Pack 3 (SP3)
Hope the helps of information.
-
After a clean install of windows xp family, with nothing but Pctools virus installed and disabled, Xp will only start in safe mode, all 3 choices, it does not start in Msconfig service diagnosis either. Eventvwr said service control module has failed. I tried to uncheck that service figure, but he said that the computer will not start if it is disabled. I uninstalled 3 times and reinstalled with the same results. A last one being a service pk 3 that I downloaded and installed in safe mode.
It has been installed and working before the clean install of windows with pk3. I removed the patration from the hard drive, write 000 to the dick and reformatted before clean install of xp. It will work with service pk 2 is installed.
I checked the forums and he Goggled and could not find a solution
any help will be appreciated
E-mail address is removed from the privacy *.
Boris
You must install SP3 before you install your antivirus program. This can be done safely by downloading the file in advance and install while physically disconnected from the Internet. In addition, you should keep IE at the level before installing SP3 IE6.
Link to the standalone SP3 Installer file:
-
computer will only start in safe mode, always samekh in normal mode
Original title: help
computer will only start in safe mode, always samekh in normal mode.any ideas?
Hello
do this work in Mode safe mode with networking:
Run the sfc/scannow command.
http://support.Microsoft.com/kb/929833
Use the (SFC.exe) System File Checker tool to determine which file is causing the problem and then replace the file. To do this, follow these steps:
- Open an elevated command prompt. To do this, click Start, click principally madeprograms,Accessories, right-clickguest, and then clickrun as administrator. If you are prompted for an administrator password or a confirmation, type the password, or clickallow.
- Type the following command and press ENTER:sfc/scannow
The sfc/scannow command analyzes all protected system files and replaces incorrect versions with appropriate Microsoft versions
Download update and scan with the free version of malwarebytes anti-malware
http://www.Malwarebytes.org/MBAM.php
You can also download and run rkill to stop the process of problem before you download and scan with malwarebytes
http://www.bleepingcomputer.com/download/anti-virus/rkill
safe mode with networking
Windows Vista
Using the F8 method:
- Restart your computer.
- When the computer starts, you will see your computer hardware are listed. When you see this information begins to tap theF8 key repeatedly until you are presented with theBoot Options Advanced Windows Vista.
- Select the Safe Mode with networking with the arrow keys.
- Then press enter on your keyboard to start mode without failure of Vista.
- To start Windows, you'll be a typical logon screen. Connect to your computer and Vista goes into safe mode.
- Do whatever tasks you need and when you are done, reboot to return to normal mode.
-
Error code 0x000000TF not able to boot in safe mode on Windows XP computer.
Original title: xp suddenly will not start in safe mode.
I haven't added any software and I don't seem to have any virus, any help?
error message 0x000000TF 0 x 80042000, 0x00000000, 0x00000000)
Try at least the basics:
1. first of all, check the intregity of your player. If it is not quite right, you will not be able to start. If fix you (by running chkdsk), maybe it's ALL that is necessary. At the command prompt, run this command:
Chkdsk /r
(There is a space before the slash). I know that that page has a slightly different order, but the /r switch (to repair bad sectors and recover readable data) is all that is necessary. For more information, see:
http://vlaurie.com/Computers2/articles/Chkdsk.htm
Plan for several hours to run chkdsk/r. But this could very well be all that is necessary.
2. If still no joy, you'll need to fix your boot.ini file. Until you do this, you will have to remove some attributes of this file, so you can change (the flags 'Hidden' and 'System' and 'Read only'). So, at the command prompt, enter these commands:
C:ATTRIB H C:\\BOOT. INI
C:ATTRIB R C:\\BOOT. INI
C:ATTRIB S C:\\BOOT. INIThen, delete the boot.ini file. It is fine to do, especially if there is something wrong with her! You create a new.
DEL BOOT. INI
Now, rebuild your boot.ini file:
BOOTCFG /REBUILD
(even when there is a space before the slash)
Continue to follow the instructions on this page:
http://tech.Icrontic.com/articles/repair_windows_xp/
Add installation to boot list? Enter y
To enter load identifier, type:
Windows XP Home Edition (I think that's what you have. For XP Pro, type "Windows XP Professional")
To the operating system load options, type:
/ / fastdetect / noexecute = optin
(even once, there is a space before each slash)
Note that in case your CPU has NO other buffer overflow protection, you must not enter the "' / noexecute = optin" switch. " But it's a safe assumption you have and you should use it. Google or ask here if you don't know what CPU you have.
For pour ecrire to write the newly created boot sector on the hard disk, type the following at the prompt:
FIXBOOT
(And press on Y to confirm).
I mean chkdsk /r first because that's all that would be necessary. But you also have other instructions. If still no joy, restoring the so-called manual system might work:
http://support.Microsoft.com/kb/307545
If still no joy, I'd go for the Clean install (of course, you can also try a repair installation before that gap very last effort, but repair installs can sometimes be very difficult).
Have you confirmed that all your data is backed up. If you perform a clean installation, you erase your hard drive, you know!
-
I have windows vista home premium 32 bit service pack 2 (never been able to restart in safe mode)
I was never able to restart in safe mode, he comes back and automatically restarts and begins normal mode.
The issue I'm having is that I tried to start my computer on my regular account and also I tried to start it on the built in Administrator account and both directions after I login I get a screen dead (black on the administrator account and purple on ordinary account) and it is just here doing nothing.
I tried for hours now. I read on possibly DΘmarrer on chest done but then it is my dilemma it will not load and it has never loaded in SafeMode since day 1.
Thanks Bill Gates for such a piece of c r a p like windows vista.
Any ideas on how to solve this problem?
Thank you!
PS: don't know if this helps, but this computer is an Acer Aspire 5810TZ-4657
Hello
This is how to start safe mode:
http://www.bleepingcomputer.com/tutorials/how-to-start-Windows-in-safe-mode/#Vista
__________________________________________________
Startup Repair:
Do a Safe Mode system restore to before the problem started.
http://bertk.MVPs.org/html/restoresysv.html
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
If it doesn't, try a startup repair and / or a system restore using a DVD of Vista from Microsoft
Manufacturers recovery disks normally do not have Service Options; they are normally a relocation to the factory only settings option.
Here is the guide to repair Options using a Vista DVD from Microsoft.
If a friend or a work acquantance of yours has one, you can borrow and use it for repairs.
http://www.bleepingcomputer.com/tutorials/repair-Windows-with-Windows-Startup-Repair/
Table of contents
- Overview of Windows Vista repair options
- How to perform an automatic repair of Windows Vista using Startup Repair
- Advanced Tools Overview
- Conclusion
If you do not or can not borrow a Microsoft DVD there is a download of a file ISO of Vista Startup Repair available that you can put on a Bootable floppy to make the above startup repair and that the method is recommended by a large number of posters in these Forums.
Unfortunately, you have to buy it.
Here is a link to it:
http://NeoSmart.net/blog/2011/Windows-Recovery-discs-updated-reinstated/
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
To reinstall Vista on an Acer, or use DVDs you do download for startup repair.
This can help you (download files and make your own DVDs).
Vista ultimate is available. Read the information in the lower part of the message on how to use it for other editions of Vista:
http://www.heidoc.NET/Joomla/technology-science/Microsoft/57-Windows-Vista-direct-download-links
And here are instructions on how to burn ISO disk images:
http://www.SnapFiles.com/get/isorecorder.html
The download links and information on how to make the ISO file, and then create the Setup DVD above are at this link:
"How to download a Vista ISO and create a Setup DVD or USB"
http://www.Vistax64.com/tutorials/301852-Vista-ISO-download-create-installation-DVD-USB.html
"How to create a USB of Vista Installation key '
http://www.Vistax64.com/tutorials/181538-USB-bootable-Vista-installation-Flash-thumb-drive.html
___________________________________
You press the left ALT and F10 at startup to start the recovery process to factory settings.
http://Acer.custhelp.com/app/answers/detail/A_ID/2631
You can order Acer recovery disks, if they still have.
How to order the eRecovery discs:
https://store.Acer.com/store?action=DisplayDataValidationServicePage&locale=en_US&siteid=Acerna
Also you should have your own recovery discs.
Read your manual on how to make them through the Acer eRecovery program.
Some manufacturers have more available Vista recovery disks.
If this happens, you may need to try this instead:
You can also borrow and use a Microsoft Vista DVD, which contains the files for the different editions of Vista (Home Basic, Home Premium, Business and Ultimate) must be installed. The product key on your computer / Laptop box determines what Edition is installed.
Other manufacturers recovery DVDs are should not be used for this purpose.
And you need to know the version of 'bit' for Vista, as 32-bit and 64-bit editions come on different DVDs
Here's how to do a clean install of Vista using a DVD of Vista from Microsoft:
"How to do a clean install and configure with a full Version of Vista '
http://www.Vistax64.com/tutorials/117366-clean-install-full-version-Vista.html
And once the operating system is installed, go to your computer manufacturer's website and get the latest drivers for your particular model or laptop computer.
And phone Activation may be necessary when you use the above installation method.
"How to activate Vista normally and by Activation of the phone '
http://www.Vistax64.com/tutorials/84488-activate-Vista-phone.html
See you soon
-
HP dv6-6b51nr, will not start in safe mode. pls help
Thanks for any help.
I am trying to start my laptop in safe mode by pressing f8 at startup. but I got only a black screen then the laptop starts beeping, which will not stop until I force shut down the laptop.
Seems something wrong. Help, please.
Thank you.
If you are still able to start a normal Windows there is a work around.
In Windows, search programs and files box, type "msconfig".
Select the Startup tab and choose start as in the image below. Now, restart the laptop and you should start in Windows safe mode.
Don't forget to go back into msconfig later you will start up in the normal Windows installation again. If you forget to do this, it will always start in safe mode.
You do not specify what operating system is installed in your laptop. The procedure is valid for Windows XP, Vista and Windows 7.
-
I have Windows Vista Home Premium. I was on the internet when my computer screen turned blue and a message told me that a problem has been detected and Windows has been shut down. He said that I had tried to do something with memory executable not executable (I don't have a note of the code). He said as he poured out memory. Now, whenever I start, the blue screen of death gives me different messages and different error codes. Today, he says:
IRQL_NOT_LESS_OR_EQUAL
and codes of error STOP: 0x0000000A (0x0000001B, 0 x 00000600, 0x810A90B0, 0x00000001).
PC World say that they need to reinstall Windows, but I have some really really important files on there that I have not supported (I know, really stupid on my part) and they said they cannot guarantee their recovery. Is there another way to fix it?
I've been on the forums and suggestions involve me to be able to connect to my computer. Blue screen hits me before I can log on, and there is no prompt to start in safe mode.
Thank you very much!
Try this to save your data:
Data recovery:
1. slave of your hard drive in another computer and read/save your data out there.
2. put your Hard drive in a USB hard drive case, plug it into another computer and read/save from there.
3 Alternatively, use Knoppix Live CD to recover data:
http://www.Knopper.NET/Knoppix/index-en.html
Download/save the file Knoppix Live CD ISO above.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
http://isorecorder.alexfeinman.com/isorecorder.htm
Download the Vista software from the link above.
After installing above ISO burning software, right click on the Knoppix ISO file > copy the Image to a CD.
Knoppix is not installed on your PC; use only the resources of your PC, RAM, graphics etc.
Change the boot order in YOUR computer/laptop to the CD/DVD Drive 1 in the boot order.
Plug a Flash Drive/Memory Stick, BOOT with the Live CD, and you should be able to read the hard drive.
When the desktop loads, you will see at least two drive hard icons on the desktop (one for your hard drive) and one for the USB key.
Click on the icons of hard drive to open and to understand which drive is which.
Click the icon for the USB drive and click on "Actions > Change the read/write mode" so you can write to disk (it is read-only by default for security reasons).
Now to find the files you want to back up, just drag and drop them on the USB. When you're done, shut down the system and remove the USB key.
See you soon.
Mick Murphy - Microsoft partner -
Firefox crashes immediately on startup. Won't start in safe mode.
If this is not for my personal system, but a colleague. Our company force installation of some software updates, and he had a forced installation arrives for a Firefox version 38 ESR. The installation completes successfully, and he was not able to run Firefox since then. We have tried to uninstall/reinstall to level 39 (including by deleting the directory under Program Files (x 86). We also tried to restart after each step, do not restart after each step, update of Firefox did not help either, and "Reset" is not available. We can open in safe mode and disable the Add-ons, but then it crashes again once we restarted in normal mode. This morning we tried to install level 38 instead of 39, but get the same results. Help?
You can check if Firefox can be started in Safe Mode by holding down the shift/Options button.
Start Firefox in Safe Mode to check if one of the extensions (Firefox/tools > Modules > Extensions) or if hardware acceleration is the cause of the problem.
- Put yourself in the DEFAULT theme: Firefox/tools > Modules > appearance
- Do NOT click on the reset button on the startup window Mode safe
- https://support.Mozilla.org/KB/safe+mode
- https://support.Mozilla.org/KB/troubleshooting+extensions+and+themes
You can try to disable hardware acceleration in Firefox.
- Tools > Options > advanced > General > Browsing: "use hardware acceleration when available.
You will need to close and restart Firefox after enabling/disabling this setting.
You can check if there is an update for your display driver graphic card and search for hardware acceleration of related issues.
-
How to not show the windows in safe mode (pop-up), start in safe mode
Firefox Safe mode
Safe Mode is a special mode of Firefox that can be used to troubleshoot issues. Your add-ons and custom settings will be temporarily disabled. You can also Reset Firefox if you want to start fresh. Start in Safe Mode Reset FirefoxThis window I want to cancel whenever I want to use the command line
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode How to do it? Thanks
There is a pref extensions.enabledAddons you can find on the topic: config page.
One possibility would be to have two versions of a user.js file to initialize this pref with extensions installed and enabled and copy one you need by launching Firefox via a cmd file.
If you are that tight on memory, then you only need to run a version at the time.It is Pref plugin.state to disable plugins in case you want to do the same, but plugins are used when you visit pages that use them and affecting all the plugins for "Ask to activate" should suffice.
Maybe you are looking for
-
New version is available, so I allowed to download and install. However, TB is not updated. This is not the 1st time this has happened and NORMALLY a 'solution' is provided by Treasury Board to correct the problem. In addition, a user account is not
-
Problems after update BIOS on Satellite Pro 4600
There is a problem with the computer toshiba laptop. its the fact do not install any windows OS after the Installer starts running xp there is an error message that says that the drivers of setupdd.sys could not be loaded (error code 14) I tried with
-
Satellite Pro C850 - missing Recovery Media Creator
I recently bought a C850 Pro Satellite and, after update to Windows 7 and everything defining the way I like it, I tried to create a recovery media. However, when I click on Recovery Media Creator in the programs, the file 'TRMCLcher.exe' is not foun
-
HP laptop Pavilion dv7 - 6143cl with windows 7 64 bit I'm trying to find a table that defines which functions are performed when a key is pressed simultaneously with the fn key. I tried the card myself, but some seem not to do anything and others per
-
edit title of Windows media player
When you use windows media player, although I deleted and reloaded the library, thinking could solve the problem, he did not make a difference. I can't yet edit the titles and artists, etc. to the library for audio files. In addition, now I could