I think I may have had one of those kernel panics but I don't know how to fix it. Here's the scoop.

Yesterday evening, as my machine was booting up, I clicked on Eye TV, a device that takes a cable feed and converts it to USB. Then the TV feed appears in a "monitor" on screen with the ability to select channels et cetera. Usually I am fully booted before I turn it on.

Anyway,....the Eye TV provided a feed but, when my machine finished booting up, I did not have all the items in the menu bar at the top of the screen. I had everything on the left side but only the Sophos Icon on the right side.

Everything was working fine but I wanted the right side items and decided to do a reboot. After Restart I got the Grey screen and rotating clock hand for quite a long time before the machine changed to the blue screen. After quite a few minutes, nada. I did a forced shutdown holding the AC switch.

Another boot attempt generated the same result....except I timed things. The grey screen was 1.5 minutes and the blue screen was 7 minutes. The blue screen would have gone longer except I pulled the Eye TV USB plug out.

With Eye TV unplugged, the log-in window appeared. However, it was "locked" and did not respond to any input.

I rebooted using my IMac Disk and did a "Startup Disk" restart to my backup drive. It took longer than I expected but it did have a working Log In screen. I did Permissions Repair and a full Disk Warrior directory rebuild on my main drive.

The only difference from other times was that the Permissions Repair ended with a message I've never seen before: "ACL found but not expected on "Users/Shared"."

An attempt to reboot the main drive simply resulted in the same interminable waits although, when I touched the AC switch, the Log In window appeared. However, it wasn't functioning.

I needed to boot again from my iMac Disk and use "Startup Disk" to get to my backup drive. I do note that, although it works, when I Log Out from this drive, it has a very long blue screen before it gets to the Log In window....although the window does work.

I am currently operating from my backup drive and don't plan to do any "back to log in window" moves.

Edit: I use the moving mosaic screensaver. It is now showing large blocks of white - something it's never done before.

Edit: I forgot....in the midst of all the things I was doing I also tried a Safe Boot but that didn't generate a working Log In window either.

Edit: Getting dozy in my old age....at one point I also tried removing these two plists but that didn't resolve anything. I have since put them back.
com.apple.loginitems.plist
com.apple.loginwindow.plist

Yet another edit: I think I've solved it. I did a bit of poking around and found that there are two sets of the above plists - the second being in my Admin Account. I removed both and did a restart, using Opt to get Startup Disk, and the machine booted from my main drive. Whew!!

I will now replug Eye TV and see what happens.

Hopefully final edit (Cross my heart and spit in a circle): I shutdown and plugged Eye TV back into the USB port. On reboot, and waiting to ensure everything was loaded, I opened Eye TV successfully. Everything seems to be working.

However, I still don't know what actually happened. It would be good to know so I don't do it again.

ryck

OSX 10.6.7.

Can you retrieve those plists from a backup so we can read their (former) contents?

I don't know how to attach the plists here. However, using TextEdit, I tried copying and pasting the contents (two tries) but cannot get anything more than this to appear in the post.

bplist00—
^privilegedlist“ZController_CustomListItems°‘
TIcon_CustomItemPropertiesTNameUAliasO
"ImgR

ryck

In Terminal, you could paste this command

defaults read ~/Library/Preferences/com.apple.loginitems

and then hit Return; the Terminal output will be something like



(In the interest of economy, I snipped out most of my output; what you see above represents a single login item.)

Done......here's the result....although it's sure different from the stuff in textedit. it seemed to be mostly, well, prose.

ryck


Last login: Sat Jun 11 12:37:48 on console
firstname-lastnames-imac:~ firstnamelastname$ defaults read ~/Library/Preferences/com.apple.loginitems
{
SessionItems = {
Controller = CustomListItems;
CustomListItems = (
{
Alias = <00000000 00ce0003 00010000 c752ba30 0000482b 00000000 00043eb7 00043eb8 0000c5e4 4d740000 00000920 fffe0000 00000000 0000ffff ffff0001 000c0004 3eb70004 34550004 3415000e 00220010 00450079 00650054 00560020 00480065 006c0070 00650072 002e0061 00700070 000f001a 000c004d 00610063 0069006e 0074006f 00730068 00200048 00440012 00324c69 62726172 792f4170 706c6963 6174696f 6e205375 70706f72 742f4579 6554562f 45796554 56204865 6c706572 2e617070 00130001 2f00ffff 0000>;
CustomItemProperties = {
"com.apple.loginitem.HideOnLaunch" = 1;
"com.apple.loginitem.legacyprefs" = {
Hide = 1;
Path = "/Library/Application Support/EyeTV/EyeTV Helper.app";
};
};
Icon = <496d6752 00000108 00000000 4642494c 000000fc 00000002 00000000 00000000 00ec0003 00000000 c752ba30 0000482b 00000000 00043ec1 000b3282 0000c74e c3f40000 00000920 fffe0000 00000000 0000ffff ffff0001 00180004 3ec10004 3eb90004 3eb80004 3eb70004 34550004 3415000e 0016000a 00650079 00650074 0076002e 00690063 006e0073 000f001a 000c004d 00610063 0069006e 0074006f 00730068 00200048 00440012 00504c69 62726172 792f4170 706c6963 6174696f 6e205375 70706f72 742f4579 6554562f 45796554 56204865 6c706572 2e617070 2f436f6e 74656e74 732f5265 736f7572 6365732f 65796574 762e6963 6e730013 00012f00 ffff0000>;
Name = "EyeTV Helper.app";
},
{
Alias = <00000000 00fa0003 00010000 c752ba30 0000482b 00000000 0002c700 0002c701 0000bdc6 d06a0000 00000920 fffe0000 00000000 0000ffff ffff0001 00100002 c7000002 c6fe0002 c6fd0000 00f0000e 00300017 004d0069 00630072 006f0073 006f0066 00740020 00410055 00200044 00610065 006d006f 006e002e 00610070 0070000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012004c 4170706c 69636174 696f6e73 2f4d6963 726f736f 66742041 75746f55 70646174 652e6170 702f436f 6e74656e 74732f4d 61634f53 2f4d6963 726f736f 66742041 55204461 656d6f6e 2e617070 00130001 2f00ffff 0000>;
CustomItemProperties = {
"com.apple.loginitem.legacyprefs" = {
Hide = 0;
Path = "/Applications/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft AU Daemon.app";
};
};
Icon = <496d6752 00000136 00000000 4642494c 0000012a 00000002 00000000 00000000 011a0003 00000000 c752ba30 0000482b 00000000 00069fa5 0006a018 0000c696 debb0000 00000920 fffe0000 00000000 0000ffff ffff0001 00180006 9fa50006 9f750006 9f740006 89a30006 22a40006 22a1000e 0038001b 00470065 006e0065 00720069 00630041 00700070 006c0069 00630061 00740069 006f006e 00490063 006f006e 002e0069 0063006e 0073000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012005b 53797374 656d2f4c 69627261 72792f43 6f726553 65727669 6365732f 436f7265 54797065 732e6275 6e646c65 2f436f6e 74656e74 732f5265 736f7572 6365732f 47656e65 72696341 70706c69 63617469 6f6e4963 6f6e2e69 636e7300 00130001 2f00ffff 0000>;
Name = "Microsoft AU Daemon.app";
},
{
Alias = <00000000 01060003 00010000 c752ba30 0000482b 00000000 0057ae71 0057ae72 0000c8eb a0410000 00000920 fffe0000 00000000 0000ffff ffff0001 00100057 ae710057 a8560057 a8550000 00f0000e 003c001d 00410064 006f0062 00650052 00650073 006f0075 00720063 00650053 0079006e 00630068 0072006f 006e0069 007a0065 0072002e 00610070 0070000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012004c 4170706c 69636174 696f6e73 2f41646f 62652052 65616465 722e6170 702f436f 6e74656e 74732f53 7570706f 72742f41 646f6265 5265736f 75726365 53796e63 68726f6e 697a6572 2e617070 00130001 2f00ffff 0000>;
CustomItemProperties = {
"com.apple.loginitem.HideOnLaunch" = 1;
"com.apple.loginitem.legacyprefs" = {
AliasData = <00000000 01060003 00010000 c752ba30 0000482b 00000000 0057ae71 0057ae72 0000c8eb a0410000 00000920 fffe0000 00000000 0000ffff ffff0001 00100057 ae710057 a8560057 a8550000 00f0000e 003c001d 00410064 006f0062 00650052 00650073 006f0075 00720063 00650053 0079006e 00630068 0072006f 006e0069 007a0065 0072002e 00610070 0070000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012004c 4170706c 69636174 696f6e73 2f41646f 62652052 65616465 722e6170 702f436f 6e74656e 74732f53 7570706f 72742f41 646f6265 5265736f 75726365 53796e63 68726f6e 697a6572 2e617070 00130001 2f00ffff 0000>;
Hide = 1;
Path = "/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app";
};
};
Icon = <496d6752 0000001c 00000000 5359534c 00000010 00000000 4150504c>;
Name = AdobeResourceSynchronizer;
}
);
};
}
firstname-lastnames-imac:~ firstnamelastname$

Neither these two plists nor anything else in any user's home folder can be the cause of the problem. The system won't look in any user's home folder until after you log in, because until then it doesn't know which user is relevant.

But you're hanging before that, in the LoginWindow. The problem has to be with something encountered much earlier in the boot sequence than the things you're looking at.

Try unplugging all peripherals (except mouse and keyboard) before rebooting. USB devices, in particular, are known for causing bizarre startup problems. That includes USB hubs, so unplug those, but don't overlook FireWire devices.

If that lets you boot up, try adding things back a few at a time to narrow down the offending device.

A dead battery in a wireless keyboard would make a LoginWindow seem locked. Just a thought.

But then, why did the problem go away with the removal of the plists? Coincidence?

My USB peripherals are:

Keyboard
with iPod Nano attached
Eye TV
Belkin 7 outlet hub with:
Printer
Digital Camera
Kensington Trackball

I have one Firewire going to my back-up drive and a loop through it to my TimeMachine backup.

Anyway, I've done what you suggested and, since it's only a few items, I re-attached them one at a time with shutdowns between. Almost nothing changed....except that....from the start I got a faster start-up and faster load of the menu bar and the dock. They have both been a bit sluggish since the incident.

Update Edit: Several hours later everything continues completely normal with good speed, no incidents and no harm done....except losing a few more hairs I couldn't afford.


Would that be the Eye TV starting and providing the on-screen feed before the machine had completely loaded?

Edit for question clarification: Although the boot sequence with the Eye TV was separate from the sequence that resulted in the locked Log-In window, I wondered if they are related.

That is, the Eye TV and the Log-In window do similar things. They both create a window in which instructions are given. Therefore, during the first boot (Eye TV) could the Eye TV software have done something that affected the boot sequence (instructions?) for the window creation?

Then, in the second boot, the altered instructions (if that's a possibility) would be wrong for creation of the Log-In window.

Caveat: My questions are never from the point of technical knowledge (mine is limited) but from simple-minded logic.

ryck

Here's one way to see (some of the) stuff which loads early on...

kextstat |grep -v com.apple

That terminal command will give info about non-Apple extensions.

For example, here's my current output:

i.e., Little Snitch and Air Display (by Avatron, to use my iPad as a 2nd display).

How about yours?


Edit...

Hmm, something tells me we got a flakey (intermittent) hardware problem here.

This is what I got just now. If it's not helpful, is there a way to ask Terminal to come up with a log-in from another occasion?


Last login: Sun Jun 12 12:40:39 on console
firstname-lastnames-imac:~ firstnamelastname$ kextstat |grep -v com.apple
Index Refs Address Size Wired Name (Version) <Linked Against>
97 0 0x15be000 0x5000 0x4000 com.hzsystems.driver.CDSDAudioCaptureSupport (1.5) <95 5 4 3 1>
129 0 0x3644d000 0x4000 0x3000 com.sophos.kext.sav (7.3.0) <5 4 1>
firstname-lastnames-imac:~ firstnamelastname$


Uh oh.....if so, I hope we're talking about a piece of USB attached hardware.

ryck

That is easy enough to prove or disprove. Simply disconnect all USB devices, including USB hubs, and see if the problem goes away. If it does go away then start swapping out the USB devices beginning with the least expensive, the USB cables, going from there to any hubs, and keep going until the only thing left is the logric board. If Hal's "Hmm" is on target, and it sounds reasonable to me, this type of error is notoriously hard to pin down so have patience.

Well i see Sophos is an early riser (and also mentioned in post #1).
I would say disabling AV until the current mystery is solved might be wise.
[we Macsters don't need it that badly.]

Interestingly enough, a google on your "com.hzsystems.driver" there finds a few threads about KPs.




The only thing along those lines i can think of is: sudo dmesg
...which gets us a look at some very early system messages.

Done.



Below is what sudo dmesg just generated. It's too back I couldn't get a list by entering a specific time, as I know the boot time...17:59 on Friday (I was in a hurry to catch the lead story on the news).

ryck

Last login: Sun Jun 12 16:03:37 on console
firstname-lastnames-imac:~ firstnamelastname$ sudo dmesg
Password:
ID 5901 built-in now active, GUID 002332fffe011862; max speed s800.
Warning - com.olympus.CamFWSerialBusProtocolTransport declares no kernel dependencies; using com.apple.kernel.6.0.
AppleYukon2: Marvell Yukon Gigabit Adapter 88E8055 Singleport Copper SA
AppleYukon2: RxRingSize <= 1024, TxRingSize 256, RX_MAX_LE 1024, TX_MAX_LE 768, ST_MAX_LE 3328
USBMSC Identifier (non-unique): 000A27001D39685E 0x5ac 0x1263 0x1
yukon: Ethernet address 00:23:32:95:1e:c4
AirPort_Brcm43224: Ethernet address 00:22:41:fa:ac:5b
IO80211Controller::dataLinkLayerAttachComplete(): adding AppleEFINVRAM notification
Waiting for DSMOS...
systemShutdown false
AirPort: Link Down on en1. Reason 8 (Disassociated because station leaving).
Previous Shutdown Cause: 5
DSMOS has arrived
IPv6 packet filtering initialized, default to accept, logging disabled
** Device in slot: SLOT--1 **
Ethernet [AppleYukon2]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,af08,0de1,0200,cde1,2800]
jnl: disk2s2: journal start/end pointers reset! (jnl 0x54a1d08; s 0x1a1000 e 0x1a1000)
0 [Time 1307881074] [Message System Sleep
Wake reason = EHC2
System Wake
Previous Sleep Cause: 5
The USB device Keyboard Hub (Port 2 of Hub at 0xfa000000) may have caused a wake by issuing a remote wakeup (2)
The USB device Apple Keyboard (Port 2 of Hub at 0xfa200000) may have caused a wake by issuing a remote wakeup (3)
Ethernet [AppleYukon2]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,af08,0de1,0200,cde1,2800]
0 [Time 1307892210] [Message System Sleep
Wake reason = EHC1
System Wake
Previous Sleep Cause: 5
The USB device USB2.0 Hub (Port 1 of Hub at 0xfd000000) may have caused a wake by issuing a remote wakeup (2)
The USB device USB2.0 Hub (Port 3 of Hub at 0xfd100000) may have caused a wake by issuing a remote wakeup (3)
The USB device Kensington Eagle Trackball (Port 3 of Hub at 0xfd130000) may have caused a wake by issuing a remote wakeup (3)
Ethernet [AppleYukon2]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,af48,0de1,0200,cde1,2800]
USBMSC Identifier (non-unique): 000A27001D39685E 0x5ac 0x1263 0x1
jnl: disk2s2: journal start/end pointers reset! (jnl 0x54a1d08; s 0x1e6000 e 0x1e6000)
0 [Time 1307898132] [Message System Sleep
Wake reason = EHC2
System Wake
Previous Sleep Cause: 5
The USB device Keyboard Hub (Port 2 of Hub at 0xfa000000) may have caused a wake by issuing a remote wakeup (2)
The USB device Apple Keyboard (Port 2 of Hub at 0xfa200000) may have caused a wake by issuing a remote wakeup (3)
Ethernet [AppleYukon2]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,af48,0de1,0200,cde1,2800]
0 [Time 1307905122] [Message System Sleep
Wake reason = EHC2
System Wake
Previous Sleep Cause: 5
The USB device Keyboard Hub (Port 2 of Hub at 0xfa000000) may have caused a wake by issuing a remote wakeup (2)
The USB device Apple Keyboard (Port 2 of Hub at 0xfa200000) may have caused a wake by issuing a remote wakeup (3)
Ethernet [AppleYukon2]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,af48,0de1,0200,cde1,2800]
0 [Time 1307909214] [Message System Sleep
Wake reason = EHC2
System Wake
Previous Sleep Cause: 5
The USB device Keyboard Hub (Port 2 of Hub at 0xfa000000) may have caused a wake by issuing a remote wakeup (2)
The USB device Apple Keyboard (Port 2 of Hub at 0xfa200000) may have caused a wake by issuing a remote wakeup (3)
Ethernet [AppleYukon2]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,af08,0de1,0200,cde1,2800]
0 [Time 1307910382] [Message System Sleep
Wake reason = EHC2
System Wake
Previous Sleep Cause: 5
The USB device Keyboard Hub (Port 2 of Hub at 0xfa000000) may have caused a wake by issuing a remote wakeup (2)
The USB device Apple Keyboard (Port 2 of Hub at 0xfa200000) may have caused a wake by issuing a remote wakeup (3)
Ethernet [AppleYukon2]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,af08,0de1,0200,cde1,2800]
firstname-lastnames-imac:~ firstnamelastname$

Sorry, seems i was wrong about dmesg. (i always thought it retained a view the startup chatter... but i guess not, unless we run it shortly after initially booting up and logging in).

Not to worry......I'm quite pleased about two things. I'm up-and-running again without any apparent hitches (although I am watching for signs) and, secondly, I've learned a couple more things about Terminal - both from you and dkmarsh - so I'm ahead of the game.

ryck

So that "com.hzsystems.driver" item never panned out to be anything relevant? (as i indicated, teh google on that string produced several threads about kernel panics for me [but i never followed them to see what was there]).

I did Google it, and looked through quite a few of the results, but didn't see anything that was meaningful to me.

I have also entered the Terminal command again and com.hzsystems.driver still shows. However, everything seems to be going okay.

ryck

So, I've been back to the "com.hzsystems.driver" Google list and spent a bit more time. It seems that "com.hzsystems.driver" is a non-Apple kernel extension. The second part of the name "CDSDAudioCaptureSupport 1.5 indicates that it belongs to Spin Doctor.

Spin Doctor is a program that comes with Roxio Toast Titanium and is used for digitizing analogue audio. I don't use Spin Doctor (preferring Amadeus Pro) but I do keep all the Toast software up to date.

I looked in Library/Application Support/Roxio and only saw one Kernel extension "TDIXController.kext", so I have no idea where "com.hzsystems.driver" is located. Even Spotlight doesn't see it.

Sorry for the delays in responding but I've been dealing with a City Council and they aren't the brightest bunch....about as thick as two short planks.

ryck

For what it is worthm, I have SpinDoctor on my system and as far as I can discern there is no file by that name on my system.

I am not terribly surprised Spotlight did not find it since kernel extensions are by definition drivers you have to intentionally include system files before Spotlight will find them and Spotlight will not find package contents. However EasyFind, which uses an entirely different search mechanism and will find both system files and package contents did not find it either. I also used EasyFInd to search the contents of the files in the system and the applications folders for a reference to com.hzsystems.driver with no result.

Condolences on having to deal with a city council. Been there, done that, burned the t-shirt.

Since it turned up for the kextstat command, its location is bound to be inside: /System/Library/Extensions/

[yes... there.]

I looked there but there isn't anything called "com.hzsystems.driver.CDSDAudioCaptureSupport (1.5) <95 5 4 3 1". However, there is one with only some of the second part of the name, and it is called: "CDSDAudioCaptureSupport.kext"

I did an experiment and entered the Terminal command without the "|grep -v com.apple".

Entering only "kextstat" generated a list of 125 items and each of them, except one, begins with "com.apple. "

The one that does not is: "com.hzsystems.driver.CDSDAudioCaptureSupport (1.5) <101 5 4 3 1>"

ryck

The full name 'com.com.hzsystems.driver.CDSDAudioCaptureSupport" is the bundle identifier, as specified in the Info.plist from inside the kext.

Enter the command:

defaults read /System/Library/Extensions/CDSDAudioCaptureSupport.kext/Contents/Info

and you should see (among other things)

CFBundleIdentifier = "com.hzsystems.driver.CDSDAudioCaptureSupport";

The "(1.5)" is coming, I would guess, from

CFBundleShortVersionString = "1.5";

but that's not important. The important thing is that the matching bundle identifier confirms that you're looking at the right file.

I do see the full name and "1.5" appears four times.

Note to all: I'm not sure what I'm tossing on the table here so, if it isn't helpful and just occupying space, don't be bashful about saying so.

ryck

Last login: Tue Jun 14 09:16:39 on console
firstname-lastnames-imac:~ firstnamelastname$ defaults read /System/Library/Extensions/CDSDAudioCaptureSupport.kext/Contents/Info
{
CFBundleDevelopmentRegion = English;
CFBundleExecutable = CDSDAudioCaptureSupport;
CFBundleGetInfoString = "Version 1.5";
CFBundleIdentifier = "com.hzsystems.driver.CDSDAudioCaptureSupport";
CFBundleInfoDictionaryVersion = "6.0";
CFBundleName = CDSDAudioCaptureSupport;
CFBundlePackageType = KEXT;
CFBundleShortVersionString = "1.5";
CFBundleSignature = "????";
CFBundleVersion = "1.5";
IOKitPersonalities = {
CDSDAudioCaptureSupport = {
AudioEngines = (
{
BlockSize = 8192;
Description = "CD Spin Doctor Capture Support";
Formats = (
{
IOAudioStreamAlignment = 1;
IOAudioStreamBitDepth = 32;
IOAudioStreamBitWidth = 32;
IOAudioStreamByteOrder = 0;
IOAudioStreamDriverTag = 0;
IOAudioStreamIsMixable = 1;
IOAudioStreamNumChannels = 2;
IOAudioStreamNumericRepresentation = 1936289396;
IOAudioStreamSampleFormat = 1819304813;
}
);
NumBlocks = 2;
NumStreams = 1;
SampleRates = (
44100,
48000,
96000
);
}
);
CFBundleIdentifier = "com.hzsystems.driver.CDSDAudioCaptureSupport";
IOClass = "com_hzsystems_driver_CDSDAudioCaptureDevice";
IOMatchCategory = "com_hzsystems_driver_CDSDAudioCaptureDevice";
IOProviderClass = IOResources;
IOResourceMatch = IOBSD;
IOUserClientClass = CDSDUserClient;
};
};
OSBundleLibraries = {
"com.apple.iokit.IOAudioFamily" = "1.5";
"com.apple.kpi.bsd" = "8.0";
"com.apple.kpi.iokit" = "8.0";
"com.apple.kpi.libkern" = "8.0";
"com.apple.kpi.mach" = "8.0";
};
}
firstname-lastnames-imac:~ firstnamelastname$

No surprise(s) there.



No surprise(s) there.

So, I'll take that as a "time to stop worrying about the software side of things" and thank everyone for the time spent. Everything is working fine and totally back to normal but I will:

1. Keep an eye out for a hardware issue.

2. Avoid loading Eye TV until the boot cycle is finished.

ryck

No... i just meant that i wasn't surprised that kextstat didn't list the exact filename in a clear format. Nor were the results of that experiment (omitting grep -v) of an unexpected nature.

TBH, i have no clue what zapped your Mac that day. (stuff happens... randomly and singularly sometimes)

BTW, is Sophos still on the disabled list... or is it back in the mix?

It's still disabled. Maybe I should pop it back in to see what happens. I've never had issues with it before and my gut, hardly a scientific approach, is telling me that the problem was the early start to Eye TV.

ryck

NOTEL Carpe Diem's thread has been removed to a new thread new thread entitled Another Kernel Panic? It is sufficiently significant to stand on its own.

That's for sure. It's baaaack....

This morning, after opening from the log-in window, the left side of the menu bar loaded but the right side stopped at the Sophos Icon. I waited a while but nothing further happened.

1) The right side menu bar stuff was working so I did a Shutdown - which took about two minutes to complete. On reboot, the log-in window was frozen.

2) I rebooted and after about 7 minutes of blue screen tried to force a shutdown using the AC button. After a few seconds the log-in screen appeared....but was frozen.

3) I held the AC until I got a complete shutdown and then unplugged the machine for about a minute.

4) A reboot got the chime...about 2 minutes until the blue screen...then, after 3 minutes of blue screen I tried to force a shutdown and got a repeat of #2 above.

5) I again did a forced Shutdown but rebooted using the Option key. I selected the main drive but still got to a frozen log-in window. I repeated Option key and tried booting from my backup drive. Frozen log-in window.

6) I started with an NVRAM clear but that didn't help.

7) I did a Safe Boot but the log-in window was still frozen.

8) I booted with Disk Warrior 4.3 and did a directory rebuild. NADA.

9) I tried booting with my grey iMac disk but after an interminably long time I gave up. Forced shutdown and rebooted with trackball button to eject disk.

10) Rebooted with Snow Leopard 10.6 and did a reinstall. Restart got me to my drive but the audio wasn't working. A check of the sound output showed it had been switched to "CD Spin Doctor Capture Support" rather than Internal Speakers.

My Mail program was no longer accepting Mail.

Everything else seemed to be working so I took the opportunity to delete Sophos using Clean App.

I figured things would improve if I got the system up to date so I did the entire 10.6.8 update. Mistake.

11) A reboot got me back to a frozen log-in window.

12) I did another re-install of SL 10.6 and was able to boot but there were a couple of curiosities.

Sophos was back. Have no idea how.

My mail port was set to the wrong number.

As the top right of the menu bar was loading a white block appeared as if it was the second item loading, and then went away.


I am now operating with SN 10.6 and have no intention of shutting off the machine until I finish a project that has to get out the door by end of day tomorrow.

Meanwhile I entered a few Terminal commands (per earlier in this thread) not knowing whether they'll be helpful or not. I guess they can't hurt.

ryck


Terminal Command: defaults read ~/Library/Preferences/com.apple.loginitems


SessionItems = {
Controller = CustomListItems;
CustomListItems = (
{
Alias = <00000000 00ce0003 00010000 c752ba30 0000482b 00000000 00a4dd3e 00043eb8 0000c5e4 4d740000 00000920 fffe0000 00000000 0000ffff ffff0001 000c00a4 dd3e009f 2fb1009f 2622000e 00220010 00450079 00650054 00560020 00480065 006c0070 00650072 002e0061 00700070 000f001a 000c004d 00610063 0069006e 0074006f 00730068 00200048 00440012 00324c69 62726172 792f4170 706c6963 6174696f 6e205375 70706f72 742f4579 6554562f 45796554 56204865 6c706572 2e617070 00130001 2f00ffff 0000>;
CustomItemProperties = {
"com.apple.loginitem.HideOnLaunch" = 1;
"com.apple.loginitem.legacyprefs" = {
Hide = 1;
Path = "/Library/Application Support/EyeTV/EyeTV Helper.app";
};
};
Icon = <496d6752 00000108 00000000 4642494c 000000fc 00000002 00000000 00000000 00ec0003 00000000 c752ba30 0000482b 00000000 00043ec1 000b3282 0000c74e c3f40000 00000920 fffe0000 00000000 0000ffff ffff0001 00180004 3ec10004 3eb90004 3eb800a4 dd3e009f 2fb1009f 2622000e 0016000a 00650079 00650074 0076002e 00690063 006e0073 000f001a 000c004d 00610063 0069006e 0074006f 00730068 00200048 00440012 00504c69 62726172 792f4170 706c6963 6174696f 6e205375 70706f72 742f4579 6554562f 45796554 56204865 6c706572 2e617070 2f436f6e 74656e74 732f5265 736f7572 6365732f 65796574 762e6963 6e730013 00012f00 ffff0000>;
Name = "EyeTV Helper";
},
{
Alias = <00000000 00fa0003 00010000 c752ba30 0000482b 00000000 0002c700 0002c701 0000bdc6 d06a0000 00000920 fffe0000 00000000 0000ffff ffff0001 00100002 c7000002 c6fe0002 c6fd0000 00f0000e 00300017 004d0069 00630072 006f0073 006f0066 00740020 00410055 00200044 00610065 006d006f 006e002e 00610070 0070000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012004c 4170706c 69636174 696f6e73 2f4d6963 726f736f 66742041 75746f55 70646174 652e6170 702f436f 6e74656e 74732f4d 61634f53 2f4d6963 726f736f 66742041 55204461 656d6f6e 2e617070 00130001 2f00ffff 0000>;
CustomItemProperties = {
"com.apple.loginitem.legacyprefs" = {
Hide = 0;
Path = "/Applications/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft AU Daemon.app";
};
};
Icon = <496d6752 00000136 00000000 4642494c 0000012a 00000002 00000000 00000000 011a0003 00000000 c752ba30 0000482b 00000000 009f4025 009f4062 0000c696 debb0000 00000920 fffe0000 00000000 0000ffff ffff0001 0018009f 4025009f 4023009f 4022009f 25b6009f 2573009f 2572000e 0038001b 00470065 006e0065 00720069 00630041 00700070 006c0069 00630061 00740069 006f006e 00490063 006f006e 002e0069 0063006e 0073000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012005b 53797374 656d2f4c 69627261 72792f43 6f726553 65727669 6365732f 436f7265 54797065 732e6275 6e646c65 2f436f6e 74656e74 732f5265 736f7572 6365732f 47656e65 72696341 70706c69 63617469 6f6e4963 6f6e2e69 636e7300 00130001 2f00ffff 0000>;
Name = "Microsoft AU Daemon.app";
},
{
Alias = <00000000 01060003 00010000 c752ba30 0000482b 00000000 0057ae71 0057ae72 0000c8eb a0410000 00000920 fffe0000 00000000 0000ffff ffff0001 00100057 ae710057 a8560057 a8550000 00f0000e 003c001d 00410064 006f0062 00650052 00650073 006f0075 00720063 00650053 0079006e 00630068 0072006f 006e0069 007a0065 0072002e 00610070 0070000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012004c 4170706c 69636174 696f6e73 2f41646f 62652052 65616465 722e6170 702f436f 6e74656e 74732f53 7570706f 72742f41 646f6265 5265736f 75726365 53796e63 68726f6e 697a6572 2e617070 00130001 2f00ffff 0000>;
CustomItemProperties = {
"com.apple.loginitem.HideOnLaunch" = 1;
"com.apple.loginitem.legacyprefs" = {
AliasData = <00000000 01060003 00010000 c752ba30 0000482b 00000000 0057ae71 0057ae72 0000c8eb a0410000 00000920 fffe0000 00000000 0000ffff ffff0001 00100057 ae710057 a8560057 a8550000 00f0000e 003c001d 00410064 006f0062 00650052 00650073 006f0075 00720063 00650053 0079006e 00630068 0072006f 006e0069 007a0065 0072002e 00610070 0070000f 001a000c 004d0061 00630069 006e0074 006f0073 00680020 00480044 0012004c 4170706c 69636174 696f6e73 2f41646f 62652052 65616465 722e6170 702f436f 6e74656e 74732f53 7570706f 72742f41 646f6265 5265736f 75726365 53796e63 68726f6e 697a6572 2e617070 00130001 2f00ffff 0000>;
Hide = 1;
Path = "/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app";
};
};
Icon = <496d6752 0000001c 00000000 5359534c 00000010 00000000 4150504c>;
Name = AdobeResourceSynchronizer;
}
);
};
}



Terminal Command: kextstat |grep -v com.apple


Index Refs Address Size Wired Name (Version) <Linked Against>
106 0 0x2e782000 0x5000 0x4000 com.hzsystems.driver.CDSDAudioCaptureSupport (1.5) <98 5 4 3 1>



Terminal Command: defaults read /System/Library/Extensions/CDSDAudioCaptureSupport.kext/Contents/Info

CFBundleDevelopmentRegion = English;
CFBundleExecutable = CDSDAudioCaptureSupport;
CFBundleGetInfoString = "Version 1.5";
CFBundleIdentifier = "com.hzsystems.driver.CDSDAudioCaptureSupport";
CFBundleInfoDictionaryVersion = "6.0";
CFBundleName = CDSDAudioCaptureSupport;
CFBundlePackageType = KEXT;
CFBundleShortVersionString = "1.5";
CFBundleSignature = "????";
CFBundleVersion = "1.5";
IOKitPersonalities = {
CDSDAudioCaptureSupport = {
AudioEngines = (
{
BlockSize = 8192;
Description = "CD Spin Doctor Capture Support";
Formats = (
{
IOAudioStreamAlignment = 1;
IOAudioStreamBitDepth = 32;
IOAudioStreamBitWidth = 32;
IOAudioStreamByteOrder = 0;
IOAudioStreamDriverTag = 0;
IOAudioStreamIsMixable = 1;
IOAudioStreamNumChannels = 2;
IOAudioStreamNumericRepresentation = 1936289396;
IOAudioStreamSampleFormat = 1819304813;
}
);
NumBlocks = 2;
NumStreams = 1;
SampleRates = (
44100,
48000,
96000
);
}
);
CFBundleIdentifier = "com.hzsystems.driver.CDSDAudioCaptureSupport";
IOClass = "com_hzsystems_driver_CDSDAudioCaptureDevice";
IOMatchCategory = "com_hzsystems_driver_CDSDAudioCaptureDevice";
IOProviderClass = IOResources;
IOResourceMatch = IOBSD;
IOUserClientClass = CDSDUserClient;
};
};
OSBundleLibraries = {
"com.apple.iokit.IOAudioFamily" = "1.5";
"com.apple.kpi.bsd" = "8.0";
"com.apple.kpi.iokit" = "8.0";
"com.apple.kpi.libkern" = "8.0";
"com.apple.kpi.mach" = "8.0";
};
}

Information Update:

I've left the machine on all night and this morning I see that the information on the right side of the Menu Bar is frozen.

The icons for Bluetooth, Time Machine and Airport are greyed out That information was wrong. Bluetooth is black and, now that my brain is awake, the other two should be grey because they are currently turned off. However, the clock is stopped at 01:11:18.

When cursor is placed over the area, the rotating beachball appears. The items on the left side on the menu all function.

Edit: Is there a terminal Command that will provide information on this development?

ryck

This may help, ryck:

Try moving /Users/Your short name/Library/Preferences/com.apple.systemuiserver.plist to your desktop, then restart your Mac; OS X will create a new file either immediately or as needed.

If your problem is resolved, trash the original file and reset any associated preferences; if not, restore the original to from whence it came by overwriting the new one.

Thanks artie.

I'll give that a try but it may be a couple of hours before I'm able to do so, as I'm working on a project with a deadline and will make sure it's okay and sent before taking a chance on shutting the machine down.

It'd be just my luck I couldn't get back and the project would be stuck in the machine.

ryck

Wise decision!

By way of clarification, SystemUIServer controls the right side of your menu bar; if you select the plist and hit your space bar you should be able to get an idea.

I did that although the display did not allow me to copy the information. A double-click on the plist gave the information below.

Just to double-check..........I actually can't get to see the menu bar until I'm past the log-in window, which is freezing. Should this plist rebuild address the log-in window issue?

ryck


bplist00â—Š


_!NSNavPanelExpandedSizeForOpenMode_ __NSEnableTSMDocumentWindowLevel_NSNavLastRootDirectory_NSNavLastCurrentDirectory_&NSNavBrowserPreferedColumnContentWidth_NSWindow Frame Closed NetworkZmenuExtrasZ{537, 400} ]/Applications_/Applications/Toast 10 Titanium#@g@_495 477 450 250 0 0 1440 878 ¶
_7/System/Library/CoreServices/Menu Extras/Bluetooth.menu_9/System/Library/CoreServices/Menu
Extras/TimeMachine.menu_5/System/Library/CoreServices/Menu
Extras/AirPort.menu_7/System/Library/CoreServices/Menu
Extras/TextInput.menu_4/System/Library/CoreServices/Menu
Extras/Volume.menu_3/System/Library/CoreServices/Menu
Extras/Clock.menu;^w캋ÁÚÛ#,LSç…;r®

I'm not sure if this is another clue but.....

An internet site said it needed Flash so I went to Adobe for the download. The installation got as far as 95% and has locked up. The red button doesn't make it go away and going to the menu bar to use "Quit Adobe Flash Manager" does nothing.

ryck

EDIT: I wonder if there is something wrong with Library Folders. Here's the deal...I have two drives running - the main drive on which all this activity has been taking place, and my Super Duper backup drive which has a clone from a few days ago.

Main Drive.

I noticed that, at the drive level, I have a Library folder that has the same symbol (Building with pillars) as the Library folder in a User folder.

It is 7.94 GB with 57,178 items

Inside the System Folder, the Library Folder is 4.45 GB with 100,056 items

Inside my User folder, the Library folder is 6.51 GB with 43,794 items

Backup Drive.

At the drive level, the Library folder does NOT have the same symbol (Building with pillars) as the Library folder in a User folder.

It is 8.42 GB with 58,643 items

Inside the System Folder, the Library Folder is 4.77 GB with 112,461 items

Inside my User folder, the Library folder is 6.51 GB with 43,794 items (same as the one on the main drive)

That seems to have had the desired effect....although I will admit to "dipping a toe in the water" first. That is, I moved the plist to the desktop but did a restart with my Super Duper clone, as it's the one system I know is complete et cetera.

Well, the machine booted with the backup and my mail program worked properly and promptly downloaded a pile.

I then restarted with the main drive and it booted fine. However, it means I am now sitting with 10.6 on the main drive and a mail program that has isn't working. So, I assume I should be able to update to 10.6.8 without worry.

At that point, I assume that I should boot from my clone in order to fix my mail program. I also assume that will be a matter of dragging/dropping the right things.

Yes? No?

ryck

I'll do the best I can, which won't be 100%, so you'll probably have to wait for someone to pick up the pieces I leave behind.

1. System/Library/CoreServices/MenuExtras/Clock.menu;^w캋ÁÚÛ#,LSç…;r®

I assume that was your file corruption...the cause of your clock having frozen; mine looks like this: System/Library/CoreServices/Menu Extras/Clock.menu_\

2. > Should this plist rebuild address the log-in window issue?

My guess would be no, but, judging from your post, it seems to no longer be an issue, so...

3. My clone shows OS X custom icons only when I'm booted from it, so yours is behaving consistently with mine.

4. I've never figured out why, but I always see some disparity between file sizes on my main drive and my clone.

5. Your Flash issue is beyond me, but if you really need to install it I suggest that you wait until all of your other issues are resolved and you've updated before addressing the need again.

6. > ...I am now sitting with 10.6 on the main drive and a mail program that has isn't working. So, I assume I should be able to update to 10.6.8 without worry.

At that point, I assume that I should boot from my clone in order to fix my mail program. I also assume that will be a matter of dragging/dropping the right things.

I suggest that you restate your Mail issue and wait for some response before doing anything about it, but, at the same time, I urge you to run your diagnostic tools...Disk Utility, DiskWarrior, TechTool Pro, Drive Genius, whatever, before updating to 10.6.8.

Hope this has been helpful.

I always get that behavior with the AFP installer, except that the installation hangs for just a few seconds after stopping at 95%. Then, it finishes successfully.

Ryck the library folder will have the library icon (pillars) only on the boot drive. So in order to see the pillars on your clone, you will have to boot from the clone but then the Library folder on your normal boot drive will not have the pillars.

This has nothing to do with the health or lack thereof of the Library folder it is normal behavior.

I don't think so. I think the "gibberish" apparently appended to the clock.menu string in ryck's systemuiserver.plist is really just the textual representation of binary information that comes at the tail end of the plist.

Though ryck doesn't say what application opened systemuiserver.plist when he double-clicked it (and I can't replicate his experience without hiding the several instances of Property List Editor I've got on various mounted volumes, since that's the app which opens the file when I double-click it), I'll note that the output from the Terminal command defaults read com.apple.systemuiserver is


and the content of the file when opened with TextWrangler is


but the content of the file when opened in TextEdit is

bplist00Ã’
ZmenuExtras_ __NSEnableTSMDocumentWindowLevel§ _=/System/Library/CoreServices/Menu Extras/UniversalAccess.menu_9/System/Library/CoreServices/Menu Extras/Script Menu.menu_4/System/Library/CoreServices/Menu Extras/Volume.menu_7/System/Library/CoreServices/Menu Extras/TextInput.menu_3/System/Library/CoreServices/Menu Extras/Clock.menu_L/Applications/Utilities/Keychain Access.app/Contents/Resources/Keychain.menu_2/System/Library/CoreServices/Menu Extras/User.menu  ;Cƒ¿ö
0
f
µ
ê

ë

(This isn't to say that ryck's systemuiserver.plist wasn't corrupt, just that the apparently nonsensical characters you noticed are unlikely to have been the manifestation thereof.)

Well, I'm back up and running this morning but I'll continue to keep an eye on things. Sophos is back in place although i'm somewhat "wondering about it".

As Hal once said "It's an early riser", and it is where the menu bar stopped loading.

I wonder if a preventive use of something like Preferential Treatment would have avoided some problems.

ryck

In this case it was stopped for quite a while and, in the end, I used opt/command/esc to get rid of it.

ryck

It was Text Edit. Interestingly, I just did a double-click on com.apple.systemuiserver.plist and this time Text Edit says only:

bplist00—_ __NSEnableTSMDocumentWindowLevel
./

ryck

I just logged in and the right side of the menu bar stopped loading with only the Sophos and Spotlight icons in view. I immediately opened Sophos Remove and uninstalled it. Everything loaded after that.

ryck

> I wonder if a preventive use of something like Preferential Treatment would have avoided some problems.

I don't know whether it would have saved you...

Preferential Treatment checks for non-compliant XML code, which, I believe think, is not the issue over which you tripped.

Further, non-compliant XML code does not even necessarily mean that a plist will not function as intended.

That's odd.

Have you either restarted or logged out/in since trashing your original plist?

Did you try leaving Sophos installed but with its menu bar icon de-activated?

Edit: Hmmm... I don't see Sophos included in the plist you posted; I wonder what's up with that?

Hmmm... Perhaps I was thrown by ryck's "gibberish's" appearing to be an integral part of his string...the "normally appended" "gibberish" seemingly MIA, and perhaps what I reacted to actually was the corruption.

My own plist, opened in TextEdit, looks like so:

bplist00“
_ __NSEnableTSMDocumentWindowLevelZmenuExtras • _R~/Library/PreferencePanes/MenuMeters.prefPane/Contents/Resources/MenuMeterCPU.menu_5/System/Library/CoreServices/Menu Extras/AirPort.menu_7/System/Library/CoreServices/Menu Extras/TextInput.menu_3/System/Library/CoreServices/Menu Extras/Clock.menu_\/Users/artie/Library/PreferencePanes/MenuMeters.prefPane/Contents/Resources/MenuCracker.menu
0;<Bóœ

?


û

Yours looks different than mine (Edit 2: although your "gibberish" is separated from the final string, same as mine), but I believe you're not running OS X 10.6.8 as ryck and I are?

Edit: Aside removed in favor of its own post.

Yes. That was the case and, to double-check, I've done it again (trashed the plist, shutdown, and restarted) and just got this same result.

bplist00—_ __NSEnableTSMDocumentWindowLevel
./

I note that the menu bar loading pretty close to instantaneous. I've just entered Hal's command kextstat |grep -v com.apple into Terminal and got this:

Last login: Fri Aug 12 03:09:59 on console
user-names-imac:~ username$ kextstat |grep -v com.apple
Index Refs Address Size Wired Name (Version) <Linked Against>
104 0 0x1670000 0x5000 0x4000 com.hzsystems.driver.CDSDAudioCaptureSupport (1.5) <102 5 4 3 1>
user-inames-imac:~ username$


I assume you mean the plist info in Post #16925. If so, and I'm only guessing here - is it meaningful that "Toast 10 Titanium#@g@_495 477 450 250 0 0 1440 878" is there, although it's not something that appears in the bar?

Note that in Post #16916, Item 10, I mentioned that my audio stopped working and that: "A check of the sound output showed it had been switched to "CD Spin Doctor Capture Support" rather than Internal Speakers."

Earlier in the thread there were references to "com.hzsystems.driver" - a non-Apple kernel extension which seemed to be connected to CD Spin Doctor, an app that comes with Roxio Toast.

joemike mentioned he has CD Spin Doctor but doesn't have that driver.

So I went to the extensions folder just now and removed "CDSDAudioCaptureSupport.kext", rebooted, and entered kextstat |grep -v com.apple into Terminal. I got the same result as above. I also found that the extension was back in the Extensions Folder.

I have just used Clean App to remove CD Spin (there were 2 versions) and the associated files, including plists. I also went back to the Systems Extensions folder and again removed "CDSDAudioCaptureSupport.kext".

I have restarted and entered kextstat |grep -v com.apple into Terminal, getting this result:

Last login: Fri Aug 12 04:14:39 on console
user-names-imac:~ username$ kextstat |grep -v com.apple
Index Refs Address Size Wired Name (Version) <Linked Against>
55 0 0x354ca000 0x3000 0x2000 com.olympus.CamFWSerialBusProtocolTransport (2.0.0) <54 53 49 37 8 5 4 3 1>
user-ingliss-imac:~ username$

A quick check of Extensions Folder - and "CDSDAudioCaptureSupport.kext" remains gone.

So I'm going back to bed. I just got up for a drink of water and thought I'd do a 'quick perusal of FTM'. Sigh.

ryck


Updated plist information (10:52):

Double-click gets:

bplist00—_ __NSEnableTSMDocumentWindowLevel
./

kextstat |grep -v com.apple gets:

Last login: Fri Aug 12 09:51:58 on console
user-names-imac:~ username$ kextstat |grep -v com.apple
Index Refs Address Size Wired Name (Version) <Linked Against>
user-names-imac:~ username$

Another log-in, just now, returns the same Terminal information as above except for a changed log-in time.

Note: Just guessing, but perhaps this is logical as the only items in the right side of the Menu Bar are Apple functions - Time Machine, Bluetooth, Audio, Clock, Spotlight.

> Note: Just guessing, but perhaps this is logical as the only items in the right side of the Menu Bar are Apple functions - Time Machine, Bluetooth, Audio, Clock, Spotlight.

1. I tried to fix my own plist to include nothing but Apple functions, but I couldn't figure out how to get rid of MenuMeters's MenuCracker, so...

2. After looking at my own menu bar I realized that app related items do not (necessarily?) appear in com.apple.systemuiserver.plist, so Sophos's not being there is not unexpected.

3. I can't even translate Hal's command into English, so I've got no idea what its output means.

4. Toast...

Sorry, ryck, but I'm out of ideas.

Why the ? I've got a because I'm up and running again. Thanks for all your time and help


My bad. I should have been clearer. I removed Sophos using the "Remove Sophos" tool provided with by Sophos. However, I am thinking I will pop it back in as it was only a "suspect" and may not have been the cause. No one else in the Forum has reported any Sophos problems.

Besides, removing the other suspect, CD Spin Doctor extension "CDSDAudioCaptureSupport.kext", seems to have made the most difference. I am even seeing a general improvement in the speed with which applications like Safari and Mail load.


I am going to toss out a couple of observations for any passers by, only because I am getting different results than others get and I wonder if I should be concerned.

I have wondered why, after deleting the "CDSDAudioCaptureSupport.kext" extension, why I got the information 55 0 0x354ca000 0x3000 0x2000 com.olympus.CamFWSerialBusProtocolTransport (2.0.0) <54 53 49 37 8 5 4 3 1> using Hals' command kextstat |grep -v com.apple

It has only happened that one time. Since then, the result has consistently been:

Last login: Sat Aug 13 04:11:48 on console
douglas-ingliss-imac:~ douglasinglis$ kextstat |grep -v com.apple
Index Refs Address Size Wired Name (Version) <Linked Against>
douglas-ingliss-imac:~ douglasinglis$

I have also used dkmarsh's command defaults read com.apple.systemuiserver and got this short result.

Last login: Sat Aug 13 04:21:19 on ttys000
user-names-imac:~ username$ defaults read com.apple.systemuiserver
{
"__NSEnableTSMDocumentWindowLevel" = 1;
}
user-names-imac:~ username$


However, when dkmarsh used the same command the result included a bunch of additional information

I think what's happening with systemuiserver.plist is this: when you delete the file, a new one is created on your next restart, consisting of simply the NSEnableTSMDocumentWindowLevel entry.

Meanwhile, the actual items displayed on the right side of the menu bar consist of any third-party items you've placed there (whose inclusion in the menu bar is not governed by systemuiserver.plist) and a default set of Apple Menu Extras which varies according to other system components and preferences you've set. (For instance, your default set includes Bluetooth and Time Machine, while mine does not—no doubt because my Mac isn't Bluetooth-equipped, and I have System Preferences -> Time Machine -> Show Time Machine status in the menu bar unchecked; folks with laptops would see a Battery menu, etc.)

Until you make a change to the configuration of Apple Menu Extras, you'll continue to see this nearly-empty plist; once you make such a change, though, all the Apple Menu Extras will show up in the plist. I'm not sure why this is so, but it's not atypical: there are many so-called "hidden" preferences in OS X which don't show up in plists until you change the value of the attribute they control.

Great. Thanks. I'll stop worrying about it.

ryck

Sure...my pleasure!


I followed what you originally posted; I was just answering my own question about why Sophos wasn't included in your original plist.

Let us know how Sophos behaves when you reinstall it.

> Meanwhile, the actual items displayed on the right side of the menu bar consist of any third-party items you've placed there (whose inclusion in the menu bar is not governed by systemuiserver.plist) and a default set of Apple Menu Extras which varies according to other system components and preferences you've set.

(OS X 10.6.8) I just moved com.apple.systemuiserver.plist to my Desktop and restarted, and my newly-created (*) plist looked like what you and ryck have posted, but the only right-side icons that appeared were my third-party icons and Spotlight; no "default" Apple icons appeared.

(Edit: (*) The plist wasn't even recreated until I clicked on one of my third-party icons.)

We may have a new wrinkle. I have reinstalled Sophos, updated it, and done a restart. After that I entered the two commands into Terminal but the results didn't include the list of Apple Menu items.

Entering defaults read com.apple.systemuiserver got this result:

Last login: Mon Aug 15 04:23:04 on console
user-names-imac:~ username$ defaults read com.apple.systemuiserver
{
"__NSEnableTSMDocumentWindowLevel" = 1;
}
user-names-imac:~ username$



Entering kextstat |grep -v com.apple got this result:

Last login: Mon Aug 15 04:25:05 on ttys000
user-names-imac:~ douglasname$ kextstat |grep -v com.apple
Index Refs Address Size Wired Name (Version) <Linked Against>
129 0 0x36c07000 0x4000 0x3000 com.sophos.kext.sav (7.3.0) <5 4 1>
user-names-imac:~ user inglis$

ryck

I'm lost... What icons are on the right hand side of your menu bar right now?

If you only alter third-party menu "extras" (i.e. Sophos), I don't think the plist will change, since, as I said above, their presence in the menu bar doesn't seem to be controlled by that plist.

In this order - left to right - Sophos, Time Machine, Blue Tooth, Airport, Audio Volume, Calendar/Clock (in 24 hour mode), Spotlight.

ryck

Ah (as the light slowly comes on), I guess I misunderstood what was meant by "Until you make a change to the configuration of Apple Menu Extras". Do you have an example of what that might be?

Thanks

ryck

Well, any of the items found in /System/Library/CoreServices/Menu Extras/. You might try, for example, double-clicking on Ink.menu, which will put a pen icon in your menu bar (assuming that menu extra is still present in Snow Leopard). Or try command-dragging the Volume icon out of the menu bar.

If my hypothesis is correct, either of these actions should cause systemuiserver.plist to list all the Apple-provided menu extras you've currently got displayed in the menu bar.

I removed the Volume Control and restarted. Entering defaults read com.apple.systemuiserver into Terminal confirmed your hypothesis and I can now lay claim to a few more lumens as another light goes on.

Thanks

ryck

Which Apple Menu Extras, if any, do you ordinarily have in your menu bar? Since the volume control, input menu, Time Machine, date and time, Spaces, displays, MobileMe syncing, PPPoE status, Universal Access status, and Fast User Switching menus can all individually be enabled/disabled from within System Preferences, it's possible that what appears when you delete systemuiserver.plist is a default set of icons minus any you've disabled.

All I know is that when I delete the plist, the input menu and Script menu disappear from my menu bar, but the volume control and date and time remain. This leads me to believe that by default, those two items appear in the menu bar. And indeed, a Fast User Switch into my standard account reveals, in addition to the Spotlight icon and Fast User Switching menu, the volume control, date and time, and the Time Machine menu extras.

I've never done anything to the right side of the menu in that account (the Fast User Switching menu appears because that's a universal preference set in an Administrator account); the Time Machine icon appears because that's the default, and in that account, unlike my regular account, its appearance is not disabled in the Time Machine prefpane.

You're obviously correct about a default set of icons, because, after all, the right side of a menu bar is always populated straight out of the box. (If my memory serves me, it's populated with volume, date and time, and Time Machine.)

The only Apple Menu Extras I normally keep in my menu bar are Input menu and (date and) time, and neither reappears on its own after I delete com.apple.systemuiserver.plist and either restart or shut down and start up. Perhaps it's because I've customized date and time so it displays only 12 hour time and seconds (i.e. 1:33:40 at 1:33:40 AM), but neither AM/PM, day, nor date. (I'll assume that your hypothesis about Input menu is correct.)

If you tell me what the default date and time configuration is I can test the possibility that only a maintained default configuration reappears. If not, please tell me what your particular configuration is, and I'll experiment with it.

Edit:

1. I enabled volume and Time Machine in my menu bar, trashed my plist, restarted, and neither reappeared.
2. I then Safe Booted...nothing but Spotlight.
3. I then logged in to my test user account, and BINGO...default set!

OK... So it looks like one of my non-Apple menulets is somehow throttling the default set, MenuMeters/MenuCracker being the most likely candidate.

Got it! I thought it was odd that I didn't get the default set by Safe-Booting after trashing the plist, so I repeated the experiment, took a look in Console, and found that even though MenuMeters (which, by the way, lives at ~/Library/Preference Panes) doesn't load, MenuCracker does!

And that's the story, Jerry... Whew!

The quick way to see what your default menubar looks like (or the default for anything else), just log into your Guest account. It always starts with everything set to the default.

com.apple.systemuiserver.plist is one way to populate the menubar at login, but it's not the only way. They can also be added from your login items (System Preferences -> Users & Groups -> Login Items), or as launch agents ({~,,/System}/Library/LaunchAgents), or (rarely) added dynamically by any application you run.

Thanks, but I figured out the former and was aware of the latter before you posted, although my test user or, as the case may be, guest account would not have started at default if MenuMeters lived in /Library/Preference Panes rather than ~/Library/Preference Panes.

But what does {~,,/... mean? I've never seen that convention before.

{~,,/System}/Library/LaunchAgents is a shorthand way of saying ~/Library/LaunchAgents, /Library/LaunchAgents, and /System/Library/LaunchAgents.

Thanks.

Sorry, that was a bit terse. Grouping elements within curly brackets that are individually to be treated identically in a larger syntactic structure is a convention in various programming/scripting languages, presumably to promote more compact code.

As an example, if you want a list of the contents of each of the three Library folders on your machine (assuming for the sake of argument that you don't have a /Network/Library to worry about), in Terminal you can simply enter this single command:

ls {~,,/System}/Library

> Sorry, that was a bit terse.

It got the point across, but I do appreciate the clarification.

The intent was pretty obvious, but I found the ,, part confusing.

Knowing that it's something I can use in Terminal is additionally helpful.

New Development

The typical status of my machine, when not in use, is the Log-in window followed by Sleep. Then, either my wife or I awake the machine and log in to our respective accounts.

I noticed earlier this morning that when I logged in the Sophos icon was grey for a while before turning black (its usual colour). Just now I woke the machine and logged in as usual. However, none of the menu bar (either left or right) appeared.

After about 20 seconds or so, the left side of the menu locked up with only two icons, left to right, Sophos and Spotlight. Using Sophos Remove I deleted Sophos. Immediately all icons (left and right) appeared.

Question: I suppose I should restart but is there something I should do first?

ryck

Edit to update information

I have run Permissions Repair (which seemed to go much faster than normal - about 4 minutes compared to 15). Afterward I went to Apple Support and most of the repairs seemed to be those that can be ignored.

However, I did have a couple that I don't recall seeing before:

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Support/LockScreen.app/Contents/Resources/English.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Repaired "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Support/LockScreen.app/Contents/Resources/English.lproj/MainMenu.nib".

Yet another edit to update information

Before taking my dog for a walk I forgot to say to my wife "Don't log me out." So I assumed the fact that she did, and I've logged back in successfully, was a good sign....so I did a restart and it was fine. I've run both of the Terminal instructions and they didn't indicate anything except the Apple default stuff. I also ran Preferential Treatment and it said prefs were fine.

I guess I'll leave Sophos in the garage for now.

> I guess I'll leave Sophos in the garage for now.

Does Sophos offer you an option to run it sans menulet?

Good question....I don't know but I'll check after I finish running my machine sans Sophos for a while. Maybe another Sophos user knows.

Since the last time I have booted my from Super Duper clone drive and used Disk Utility to repair Permissions. I noticed that it did so without that "lockscreen.app" repair mentioned above.

I then used Disk Warrior (4.3) to fix all files & folders, followed by a directory rebuild.

A curious thing happened this morning just after the login. The desktop, including Dock et cetera, loaded but neither side of the menu bar loaded. After about thirty seconds I clicked the desktop and both sides of the menu bar popped in.

ryck

1. Until Apple plagued us with all the "of no consequence" stuff we deal with now, that's the way Repair Permissions worked; it fixed stuff and that stuff remained fixed.

2. I believe that DiskWarrior's "Check All files & Folders" functionality does little, if anything, more than Preferential Treatment does... Confirmation?

3. This thread is too long to reread, so I'll just ask whether you've cleared and repopulated /Apps/Sys Prefs > Users > Login Items during the course of this ordeal? (It may also pay you to rerun the Combo again.)

Well, you have me on that one. I assume that is DW doing something of value based on what it says it checks and corrects. For example it checks "resource forks". As a person who wouldn't know a resource fork from a barbecue fork that sounds beneficial to me.


No. I looked in and there are three items, none of which I put there, so I assume there is some automaticity involved. Does repopulate mean I should remove them all and restart.....with the expectation that they will return automatically ....like plists?

ryck

The empirical strikes back!â„¢ Again... I just took a look and found that DW's "Checking property list files" functionality duplicates PT's functionality, but the rest of "Check All Files & Folders" goes beyond it.


I can't answer without knowing which three items you've got in there, because iTunes, for instance, places iTunes Helper automatically, and some other apps act similarly.

Since Login Items do not regenerate, I don't want to tell you to clear something that I may not be able to tell you how to restore.

The three are:

EyeTV Helper
Microsoft AU Daemon
AdobeResourceSynchronizer

The EyeTV Helper has an icon that is the same as EyeTV's icon in the Dock while the other two have the same icon - the one that looks like two sheets of paper with the pencil, brush and ruler forming an A.

For some reason, only the EyeTV Helper and AdobeResourceSynchronizer have the boxes checked.

ryck

I'm not familiar with any of those items, so I won't suggest that you mess with them.

You can, however, try moving

~/Library/Preferences/com.apple.loginitems.plist
~/Library/Preferences/com.apple.loginwindow.plist
~/Library/Preferences/loginwindow.plist

to your desktop and restarting to see what happens.

(Edited) If you don't see any changes in your situation you can simply restore them to ~/Library/Preferences and overwrite any new files (only the 3rd one, but unpopulated, in my instance) that have been created.

If, however, you see positive changes, we can take it from there.

Note: It didn't occurr to me until just now to mention that when you ran the OS X 10.6.8 Combo it overwrote Safari 5.1 with Safari 5.0.5 (which, for some unknown reason, Software Update doesn't pick up on), so you need to d/l and install the v 5.1 standalone to get current if you haven't already done so. (Edit: You can check your current version of Safari at Safari > menu bar > Safari > About Safari.)

Edit: The checked boxes tell OS X to hide the applications when you log in, so I guess the unchecked box means that that app isn't visible under any circumstances.

I did that and interestingly, on restart, only com.apple.loginwindow.plist appeared in the Prefs Folder. I figured that having the other prefs might require some change, so I removed and re-added the Volume Control.

However, on re-start I still have only com.apple.loginwindow.plist. The Terminal instruction defaults read com.apple.systemuiserver shows a list with the Volume Control.

I then did the same as above in my User Library except that it only contained:

com.apple.loginitems.plist
loginwindow.plist

and on restart only com.apple.loginitems.plist appeared in the Prefs Folder.

The non-appearance of the other Prefs doesn't seem to be having any adverse effects so I'll just leave them out and let the system restore them when it thinks they're necessary. Since everything seems to be okay, and the Menu Bar is not only loading okay but also loading more quickly, I'll press on.

Thanks for everything so far.


I'm running Safari 5.1

Thanks for the heads-up.

ryck

Update:

At this log-in the machine took a moment to pop in my All Sites pages so I checked toe Prefs folder and the User Library now has loginwindow.plist. So it appears: "Just leave them alone and they'll come home, wagging their tails behind them".

Aside from the fact that what you've reported does not jive with my (repeated) experience, while researching another issue I just deleted ~/Library/Preferences/com.apple.loginwindow.plist and it hasn't been recreated after multiple restarts, so I'm assuming that it became a redundant leftover when I upgraded from Leopard to Snow Leopard.


Whoa there! You've gotten your apples and oranges confused... SystemUIServer has nothing to do with Login Items; the former controls the icons on the right side of your menu bar, while your Login Items are the apps and/or utilities that automatically launch at log-in.


I dunno, ryck... Under the same circumstances, I just moved both files to my desktop and restarted, and, again, only loginwindow.plist was recreated. I'm , but I don't think it's critical.


You've got your apples and oranges confused again... If you look in /Apps/Sys Prefs > Accounts > Login Items you'll likely find that it has not repopulated itself fully, if at all, and whichever of

EyeTV Helper
Microsoft AU Daemon
AdobeResourceSynchronizer

is/are not present is/are not launching at login, which is probably costing you functionality. Further, I not only doubt that OS X will restore them, I've got no idea how to restore them (which is why I didn't suggest that you mess with them), so it may be helpful if you've still got the original files that you moved.

On the other hand, though, it seems like one of those three items was affecting the loading of your menu bar!

> I'm running Safari 5.1

Thanks for the heads-up.

Aaah! I just searched this thread and found that you've apparently never rerun the OS X 10.6.8 Combo, so my heads-up was moot.

> Update:

At this log-in the machine took a moment to pop in my All Sites pages so I checked toe Prefs folder and the User Library now has loginwindow.plist. So it appears: "Just leave them alone and they'll come home, wagging their tails behind them".

Thoroughly in addition to not even knowing what your "All Sites pages" are.

When I moved the three plists in question, my experience duplicated rycks's—only com.apple.loginwindow.plist reappeared during the restart.

Isn't that interesting. Even though I'm also Snow Leopard 10.6.8, I get different results.

~Hard Drive/Library/Preferences ....still only has com.apple.loginwindow.plist and things are working fine.

The only change, and it's cosmetic, is that the picture behind the login window reverted to that purple, cosmos thing that the OS comes with. However, even after restoring it to one of Apple's Nature images, no other plist has yet appeared. I thought that changing a "preference" might create a plist to keep track of it.


Another interesting one. In my case ~User/Library/Preferences ....has com.apple.loginwindow.plist and loginwindow.plist.


Actually, I didn't realize that would happen by removing a plist....however it's not an issue. I did keep the previous plists but I don't think I'll need them.

I started EyeTV and opened the Help file. The EyeTV Helper was restored in Login Items.

I checked around and learned that Microsoft AU Daemon is associated with MS Office 2004 and allows for checking updates automatically. I opened the MS Updater and set it to Automatic and Microsoft AU Daemon is back in Login Items.

The AdobeResourceSynchronizer is another story. It seems this has been a problem for a few people (a real CPU hog). Now, the plot thickens.

I located AdobeResourceSynchronizer (Applications Folder - right click on Adobe Reader - Show Package Contents/Contents/Support) and dragged it to the trash. Then my CleanApp opened and it had nearly 20 entries called:

AdobeResourceSynchronizer_Date and File number_User-Names-iMac.crash

They are all in a document called:

/Users/usernames/Library/Logs/CrashReporter/AdobeResourceSynchronizer...et cetera


My bad. Terminology failure...I meant the Top Sites...that little grid near the top left of Safari that provides images of the sites you most often frequent.

ryck

Got me beat!

I just did it again...moved com.apple.loginitems.plist and loginwindow.plist to my desktop and restarted, and once again, loginwindow.plist was recreated, and I've got my expected functionality; how about you in your circumstances?

Note: As I mentioned, com.apple.loginwindow.plist has not been recreated, so on the assumption that it's no longer necessary, I trashed it.

Correction: only loginwindow.plist reappears.

I note that my Tiger volume has no com.apple.loginitems.plist; login items in Tiger appear to be maintained by loginwindow.plist. In Leopard, that functionality appears to have been taken on by com.apple.loginitems.plist—its contents are similar to those of loginwindow.plist, but include redundant data and "com.apple.loginitems.legacypref" entries.

However, since my Leopard installations have all been completely fresh, loginwindow.plist cannot have been a holdover from Tiger, so apparently it still plays some necessary role in Leopard.

So we're left with ryck's anomaly.

I was confused by the fact that loginwindow.plist and com.apple.loginitems.plist seem to have overlapping functionality, but since the former is recreated and the latter follows on its heels I've just accepted the fact that that's the way it is.

The rest of your analysis agrees with my own conclusions.

And, on my machine, this morning ~Hard Drive/Library/Preferences ....continues to have only com.apple.loginwindow.plist.

However ~User/Library/Preferences now has three .... com.apple.loginwindow.plist, loginwindow.plist, and com.apple.loginitems.plist.

Perhaps that's a result of restoring EyeTV Helper and Microsoft AU Daemon.


....and ryck is happy at this point, so I wouldn't lose too much sleep over it. Everything is working well and I probably should let things go along until something happens that provides a meaningful clue. There is also the possibility that, even with an anomaly, things are fixed.

FYI....I opened the last of those AdobeResourceSynchronizer logs that CleanApp found and, in case it's of interest, the contents follow.

ryck


Process: AdobeResourceSynchronizer [150]
Path: /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app/Contents/MacOS/AdobeResourceSynchronizer
Identifier: com.adobe.AdobeResourceSynchronizer
Version: ??? (10.1)
Code Type: X86 (Native)
Parent Process: launchd [113]

Date/Time: 2011-08-21 09:52:15.350 -0700
OS Version: Mac OS X 10.6.8 (10K549)
Report Version: 6

Exception Type: EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000000
Crashed Thread: 0 Dispatch queue: com.apple.main-thread

Thread 0 Crashed: Dispatch queue: com.apple.main-thread
0 com.apple.CoreFoundation 0x9a0bfc13 CFSetGetValue + 83
1 com.apple.CoreFoundation 0x9a0c5bb9 __CFRunLoopFindMode + 137
2 com.apple.CoreFoundation 0x9a0efaae CFRunLoopRemoveSource + 158
3 ...e.AdobeResourceSynchronizer 0x0003030f CNetWatcher::Stop() + 97
4 ...e.AdobeResourceSynchronizer 0x0000c7da CSynchronizerApp::shutdownNetChangeNotifier() + 46
5 ...e.AdobeResourceSynchronizer 0x0000d9bb CSynchronizerStartupGuard::~CSynchronizerStartupGuard() + 39
6 ...e.AdobeResourceSynchronizer 0x0000dd0c CSynchronizerApp::run() + 786
7 ...e.AdobeResourceSynchronizer 0x0000c73d main + 169
8 ...e.AdobeResourceSynchronizer 0x0000c676 start + 54

Thread 1: Dispatch queue: com.apple.libdispatch-manager
0 libSystem.B.dylib 0x93828382 kevent + 10
1 libSystem.B.dylib 0x93828a9c _dispatch_mgr_invoke + 215
2 libSystem.B.dylib 0x93827f59 _dispatch_queue_invoke + 163
3 libSystem.B.dylib 0x93827cfe _dispatch_worker_thread2 + 240
4 libSystem.B.dylib 0x93827781 _pthread_wqthread + 390
5 libSystem.B.dylib 0x938275c6 start_wqthread + 30

Thread 2:
0 libSystem.B.dylib 0x93827412 __workq_kernreturn + 10
1 libSystem.B.dylib 0x938279a8 _pthread_wqthread + 941
2 libSystem.B.dylib 0x938275c6 start_wqthread + 30

Thread 0 crashed with X86 Thread State (32-bit):
eax: 0x00000000 ebx: 0x9a0bfbcc ecx: 0x00000028 edx: 0x00000010
edi: 0xbffff6ec esi: 0xbffff6b8 ebp: 0xbffff678 esp: 0xbffff640
ss: 0x0000001f efl: 0x00010283 eip: 0x9a0bfc13 cs: 0x00000017
ds: 0x0000001f es: 0x0000001f fs: 0x00000000 gs: 0x00000037
cr2: 0x00000000

Binary Images:
0x1000 - 0xfcfe7 +com.adobe.AdobeResourceSynchronizer ??? (10.1) <281A4BD0-8496-A9C3-ED3E-59051F3398E6> /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app/Contents/MacOS/AdobeResourceSynchronizer
0x162000 - 0x217fe7 libcrypto.0.9.7.dylib 0.9.7 (compatibility 0.9.7) <AACC86C0-86B4-B1A7-003F-2A0AF68973A2> /usr/lib/libcrypto.0.9.7.dylib
0x25d000 - 0x283fff libssl.0.9.7.dylib 0.9.7 (compatibility 0.9.7) <9203FADE-F4F2-2245-A32E-BD88819D314D> /usr/lib/libssl.0.9.7.dylib
0x292000 - 0x2bafff +AdobeAXE8SharedExpat ??? (???) <6DE8E2CA-91EC-77D7-E674-D336B7D09AF5> /Applications/Adobe Reader.app/Contents/Frameworks/AdobeAXE8SharedExpat.framework/Versions/A/AdobeAXE8SharedExpat
0x2c1000 - 0x2deff7 +AdobeBIB ??? (???) <83F5EE67-C9F9-DC7C-681B-F2EEA04DD6D1> /Applications/Adobe Reader.app/Contents/Frameworks/AdobeBIB.framework/Versions/A/AdobeBIB
0x2e5000 - 0x344fe7 +AcroSQLite ??? (???) <5C62F963-9742-B74F-CC84-E734E1DC7610> /Applications/Adobe Reader.app/Contents/Frameworks/AcroSQLite.framework/Versions/A/AcroSQLite
0x8fe00000 - 0x8fe4163b dyld 132.1 (???) <4CDE4F04-0DD6-224E-ACE5-3C06E169A801> /usr/lib/dyld
0x90003000 - 0x90027ff7 libJPEG.dylib ??? (???) <EA97DEC5-6E16-B51C-BF55-F6E8D23526AD> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x9003b000 - 0x90041fff com.apple.CommonPanels 1.2.4 (91) <2438AF5D-067B-B9FD-1248-2C9987F360BA> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x90223000 - 0x902cbffb com.apple.QD 3.36 (???) <FA2785A4-BB69-DCB4-3BA3-7C89A82CAB41> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x90383000 - 0x90387ff7 libGIF.dylib ??? (???) <2123645B-AC89-C4E2-8757-85834CAE3DD2> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x90388000 - 0x903ceff7 libauto.dylib ??? (???) <29422A70-87CF-10E2-CE59-FEE1234CFAAE> /usr/lib/libauto.dylib
0x9053b000 - 0x90545fe7 com.apple.audio.SoundManager 3.9.3 (3.9.3) <5F494955-7290-2D91-DA94-44B590191771> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x9055a000 - 0x905aaff7 com.apple.framework.familycontrols 2.0.2 (2020) <596ADD85-79F5-A613-537B-F83B6E19013C> /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls
0x905b3000 - 0x9065ffe7 com.apple.CFNetwork 454.12.4 (454.12.4) <DEDCD006-389F-967F-3405-EDF541F406D7> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90660000 - 0x90686ffb com.apple.DictionaryServices 1.1.2 (1.1.2) <43E1D565-6E01-3681-F2E5-72AE4C3A097A> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x90687000 - 0x90724fe3 com.apple.LaunchServices 362.3 (362.3) <15B47388-16C8-97DA-EEBB-1709E136169E> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x90769000 - 0x90817ff3 com.apple.ink.framework 1.3.3 (107) <233A981E-A2F9-56FB-8BDE-C2DEC3F20784> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x90818000 - 0x9090cff7 libiconv.2.dylib 7.0.0 (compatibility 7.0.0) <061ABF36-8BA9-79C1-6CE7-EC69A4998F51> /usr/lib/libiconv.2.dylib
0x90f7d000 - 0x9129dff3 com.apple.CoreServices.CarbonCore 861.39 (861.39) <5C59805C-AF39-9010-B8B5-D673C9C38538> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x912af000 - 0x91347fe7 edu.mit.Kerberos 6.5.11 (6.5.11) <F36DB665-A88B-7F5B-6244-6A2E7FFFF668> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x913df000 - 0x913e8ff7 com.apple.DiskArbitration 2.3 (2.3) <E9C40767-DA6A-6CCB-8B00-2D5706753000> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913f0000 - 0x913f0ff7 com.apple.Accelerate.vecLib 3.6 (vecLib 3.6) <ABF97DA4-3BDF-6FFD-6239-B023CA1F7974> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x9226c000 - 0x922a6fe7 libssl.0.9.8.dylib 0.9.8 (compatibility 0.9.8) <C62A7753-99A2-6782-92E7-6628A6190A90> /usr/lib/libssl.0.9.8.dylib
0x922a7000 - 0x922bbffb com.apple.speech.synthesis.framework 3.10.35 (3.10.35) <57DD5458-4F24-DA7D-0927-C3321A65D743> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x922bc000 - 0x922bffe7 libmathCommon.A.dylib 315.0.0 (compatibility 1.0.0) <1622A54F-1A98-2CBE-B6A4-2122981A500E> /usr/lib/system/libmathCommon.A.dylib
0x92470000 - 0x92475ff7 com.apple.OpenDirectory 10.6 (10.6) <0603680A-A002-D294-DE83-0D028C6BE884> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory
0x924bc000 - 0x924c6ffb com.apple.speech.recognition.framework 3.11.1 (3.11.1) <7486003F-8FDB-BD6C-CB34-DE45315BD82C> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x924ee000 - 0x92510fef com.apple.DirectoryService.Framework 3.6 (621.12) <A4A47C88-138C-A237-88A5-877E5CAB4494> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x9258b000 - 0x925f5fe7 libstdc++.6.dylib 7.9.0 (compatibility 7.0.0) <411D87F4-B7E1-44EB-F201-F8B4F9227213> /usr/lib/libstdc++.6.dylib
0x926cb000 - 0x926d1fe7 com.apple.CommerceCore 1.0 (9.1) <521D067B-3BDA-D04E-E1FA-CFA526C87EB5> /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/CommerceCore
0x926d3000 - 0x92737ffb com.apple.htmlrendering 72 (1.1.4) <4D451A35-FAB6-1288-71F6-F24A4B6E2371> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x92738000 - 0x9273fff3 com.apple.print.framework.Print 6.1 (237.1) <F5AAE53D-5530-9004-A9E3-2C1690C5328E> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x92740000 - 0x927a1fe7 com.apple.CoreText 151.10 (???) <5C2DEFBE-D54B-4DC7-D456-9ED02880BE98> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x927a6000 - 0x928a7fe7 libxml2.2.dylib 10.3.0 (compatibility 10.0.0) <C75F921C-F027-6372-A0A1-EDB8A6234331> /usr/lib/libxml2.2.dylib
0x928a8000 - 0x928a8ff7 com.apple.vecLib 3.6 (vecLib 3.6) <FF4DC8B6-0AB0-DEE8-ADA8-7B57645A1F36> /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x928a9000 - 0x92a2bfe7 libicucore.A.dylib 40.0.0 (compatibility 1.0.0) <D5980817-6D19-9636-51C3-E82BAE26776B> /usr/lib/libicucore.A.dylib
0x92ef1000 - 0x92efffe7 libz.1.dylib 1.2.3 (compatibility 1.0.0) <33C1B260-ED05-945D-FC33-EF56EC791E2E> /usr/lib/libz.1.dylib
0x92f00000 - 0x92fb9fe7 libsqlite3.dylib 9.6.0 (compatibility 9.0.0) <52438E77-55D1-C231-1936-76F1369518E4> /usr/lib/libsqlite3.dylib
0x92fba000 - 0x92fbeff7 IOSurface ??? (???) <89D859B7-A26A-A5AB-8401-FC1E01AC7A60> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface
0x93043000 - 0x93459ff7 libBLAS.dylib 219.0.0 (compatibility 1.0.0) <C4FB303A-DB4D-F9E8-181C-129585E59603> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x93539000 - 0x93561ff7 libxslt.1.dylib 3.24.0 (compatibility 3.0.0) <315D97C2-4E1F-A95F-A759-4A3FA5639E75> /usr/lib/libxslt.1.dylib
0x93745000 - 0x937c7ffb SecurityFoundation ??? (???) <C4506287-1AE2-5380-675D-95B0291AA425> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x937c8000 - 0x93800fe7 libcurl.4.dylib 6.1.0 (compatibility 6.0.0) <242954AD-3BE1-29E8-E2E0-08063201F105> /usr/lib/libcurl.4.dylib
0x93801000 - 0x939a8ff7 libSystem.B.dylib 125.2.11 (compatibility 1.0.0) <2DCD13E3-1BD1-6F25-119A-3863A3848B90> /usr/lib/libSystem.B.dylib
0x939a9000 - 0x93a29feb com.apple.SearchKit 1.3.0 (1.3.0) <9E18AEA5-F4B4-8BE5-EEA9-818FC4F46FD9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x93a2a000 - 0x93a36ff7 libkxld.dylib ??? (???) <9A441C48-2D18-E716-5F38-CBEAE6A0BB3E> /usr/lib/system/libkxld.dylib
0x93a37000 - 0x93ca8fef com.apple.Foundation 6.6.7 (751.62) <5C995C7F-2EA9-50DC-9F2A-30237CDB31B1> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x93ca9000 - 0x93de6fe7 com.apple.audio.toolbox.AudioToolbox 1.6.7 (1.6.7) <2D31CC6F-32CC-72FF-34EC-AB40CEE496A7> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x93de7000 - 0x9410bfef com.apple.HIToolbox 1.6.5 (???) <21164164-41CE-61DE-C567-32E89755CB34> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x942e9000 - 0x943c3fff com.apple.DesktopServices 1.5.11 (1.5.11) <800F2040-9211-81A7-B438-7712BF51DEE3> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x945e0000 - 0x945f2ff7 com.apple.MultitouchSupport.framework 207.11 (207.11) <6FF4F2D6-B8CD-AE13-56CB-17437EE5B741> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport
0x94a42000 - 0x94a45ff7 libCoreVMClient.dylib ??? (???) <F58BDFC1-7408-53C8-0B08-48BA2F25CA43> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib
0x94bce000 - 0x94bd2ff7 libGFXShared.dylib ??? (???) <801B2C2C-1692-475A-BAD6-99F85B6E7C25> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib
0x94bd3000 - 0x94f3eff7 com.apple.QuartzCore 1.6.3 (227.37) <E323A5CC-499E-CA9E-9BC3-537231449CAA> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x950c8000 - 0x950e8fe7 libresolv.9.dylib 41.0.0 (compatibility 1.0.0) <BF7FF2F6-5FD3-D78F-77BC-9E2CB2A5E309> /usr/lib/libresolv.9.dylib
0x950e9000 - 0x951ebfe7 libcrypto.0.9.8.dylib 0.9.8 (compatibility 0.9.8) <015563C4-81E2-8C8A-82AC-31B38D904A42> /usr/lib/libcrypto.0.9.8.dylib
0x951ec000 - 0x95266fff com.apple.audio.CoreAudio 3.2.6 (3.2.6) <156A532C-0B60-55B0-EE27-D02B82AA6217> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x954c8000 - 0x95cb7557 com.apple.CoreGraphics 1.545.0 (???) <1D9DC7A5-228B-42CB-7018-66F42C3A9BB3> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x95cba000 - 0x95cfefe7 com.apple.Metadata 10.6.3 (507.15) <460BEF23-B89F-6F4C-4940-45556C0671B5> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x961c3000 - 0x961deff7 libPng.dylib ??? (???) <25DF2360-BFD3-0165-51AC-0BDAF7899DEC> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x9632d000 - 0x9639cff7 libvMisc.dylib 268.0.1 (compatibility 1.0.0) <595A5539-9F54-63E6-7AAC-C04E1574B050> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x96487000 - 0x9649bfe7 libbsm.0.dylib ??? (???) <14CB053A-7C47-96DA-E415-0906BA1B78C9> /usr/lib/libbsm.0.dylib
0x9649c000 - 0x968d1ff7 libLAPACK.dylib 219.0.0 (compatibility 1.0.0) <5E2D2283-57DE-9A49-1DB0-CD027FEFA6C2> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x96a01000 - 0x96a03ff7 com.apple.securityhi 4.0 (36638) <6118C361-61E7-B34E-93DB-1B88108F8F18> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x96b59000 - 0x96ba2fe7 libTIFF.dylib ??? (???) <579DC328-567D-A74C-4BCE-1D1C729E3F6D> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x96c75000 - 0x96d22fe7 libobjc.A.dylib 227.0.0 (compatibility 1.0.0) <9F8413A6-736D-37D9-8EB3-7986D4699957> /usr/lib/libobjc.A.dylib
0x96dd9000 - 0x96dd9ff7 com.apple.Carbon 150 (152) <095157D7-B4EE-F73D-72E9-6C5EF55C55E2> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x978c6000 - 0x978c6ff7 com.apple.ApplicationServices 38 (38) <8012B504-3D83-BFBB-DA65-065E061CFE03> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x978c7000 - 0x978ffff7 com.apple.LDAPFramework 2.0 (120.1) <131ED804-DD88-D84F-13F8-D48E0012B96F> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x97900000 - 0x97902ff7 libRadiance.dylib ??? (???) <5920EB69-8D7F-5EFD-70AD-590FCB5C9E6C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x97c7a000 - 0x97d32feb libFontParser.dylib ??? (???) <D57D3834-9395-FD58-092A-49B3708E8C89> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib
0x98c86000 - 0x98cc9ff7 libGLU.dylib ??? (???) <FB26DD53-03F4-A7D7-8804-EBC5B3B37FA3> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x98d48000 - 0x98e28fe7 com.apple.vImage 4.1 (4.1) <D029C515-08E1-93A6-3705-DD062A3A672C> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x98e29000 - 0x98febfeb com.apple.ImageIO.framework 3.0.4 (3.0.4) <027F55DF-7E4E-2310-1536-3F470CB8847B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x98fec000 - 0x9901dff7 libGLImage.dylib ??? (???) <0EE86397-A867-0BBA-E5B1-B800E43FC5CF> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x9903b000 - 0x9903cff7 com.apple.audio.units.AudioUnit 1.6.7 (1.6.7) <838E1760-F7D9-3239-B3A8-20E25EFD1379> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x9904b000 - 0x99060fff com.apple.ImageCapture 6.1 (6.1) <B909459A-EAC9-A7C8-F2A9-CD757CDB59E8> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x99081000 - 0x990b4ff7 com.apple.AE 496.5 (496.5) <BF9673D5-2419-7120-26A3-83D264C75222> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x990b5000 - 0x99180fef com.apple.CoreServices.OSServices 359.2 (359.2) <7C16D9C8-6F41-5754-17F7-2659D9DD9579> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x99181000 - 0x991c5ff3 com.apple.coreui 2 (114) <2234855E-3BED-717F-0BFA-D1A289ECDBDA> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x991c6000 - 0x99213feb com.apple.DirectoryService.PasswordServerFramework 6.1 (6.1) <00A1A83B-0E7D-D0F4-A643-8C5675C2BB21> /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer
0x99214000 - 0x99267ff7 com.apple.HIServices 1.8.3 (???) <1D3C4587-6318-C339-BD0F-1988F246BE2E> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x99268000 - 0x992abff7 com.apple.NavigationServices 3.5.4 (182) <8DC6FD4A-6C74-9C23-A4C3-715B44A8D28C> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x992ac000 - 0x992acff7 com.apple.Accelerate 1.6 (Accelerate 1.6) <3891A689-4F38-FACD-38B2-4BF937DE30CF> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x99348000 - 0x99355ff7 com.apple.NetFS 3.2.2 (3.2.2) <DDC9C397-C35F-8D7A-BB24-3D1B42FA5FAB> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS
0x993f7000 - 0x99431ff7 libcups.2.dylib 2.8.0 (compatibility 2.0.0) <038731B1-CC44-3943-E3DE-4BAAA203EB72> /usr/lib/libcups.2.dylib
0x99432000 - 0x99435ffb com.apple.help 1.3.2 (41.1) <8AC20B01-4A3B-94BA-D8AF-E39034B97D8C> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x99436000 - 0x99473ff7 com.apple.SystemConfiguration 1.10.8 (1.10.2) <50E4D49B-4F61-446F-1C21-1B2BA814713D> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x99474000 - 0x99493ff7 com.apple.CoreVideo 1.6.2 (45.6) <EB53CAA4-5EE2-C356-A954-5775F7DDD493> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x99494000 - 0x994b5fe7 com.apple.opencl 12.3.6 (12.3.6) <B4104B80-1CB3-191C-AFD3-697843C6BCFF> /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL
0x994b6000 - 0x99572fff com.apple.ColorSync 4.6.6 (4.6.6) <7CD8B191-039A-02C3-EA5E-4194EC59995B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x99581000 - 0x99582ff7 com.apple.TrustEvaluationAgent 1.1 (1) <2D970A9B-77E8-EDC0-BEC6-7580D78B2843> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent
0x9958e000 - 0x99629fe7 com.apple.ApplicationServices.ATS 275.16 (???) <873C8B8A-B563-50F7-7628-524EE9E8DF0F> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x996c7000 - 0x9992dff7 com.apple.security 6.1.2 (55002) <64A20CEB-E614-D35F-7B9F-246BCB25BA23> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x99fd8000 - 0x99fe3ff7 libGL.dylib ??? (???) <3E34468F-E9A7-8EFB-FF66-5204BD5B4E21> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x9a04e000 - 0x9a04eff7 com.apple.CoreServices 44 (44) <51CFA89A-33DB-90ED-26A8-67D461718A4A> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x9a08d000 - 0x9a208fe7 com.apple.CoreFoundation 6.6.5 (550.43) <10B8470A-88B7-FC74-1C2F-E5CBD966C051> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x9a252000 - 0x9a263ff7 com.apple.LangAnalysis 1.6.6 (1.6.6) <3036AD83-4F1D-1028-54EE-54165E562650> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x9a55f000 - 0x9a5f1fe7 com.apple.print.framework.PrintCore 6.3 (312.7) <7410D1B2-655D-68DA-D4B9-2C65747B6817> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9a614000 - 0x9a622ff7 com.apple.opengl 1.6.13 (1.6.13) <025A905D-C1A3-B24A-1585-37C328D77148> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x9a62e000 - 0x9a64afe3 com.apple.openscripting 1.3.1 (???) <2A748037-D1C0-6D47-2C4A-0562AF799AC9> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x9a681000 - 0x9a6c3ff7 libvDSP.dylib 268.0.1 (compatibility 1.0.0) <8A4721DE-25C4-C8AA-EA90-9DA7812E3EBA> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x9a6c4000 - 0x9a6dcff7 com.apple.CFOpenDirectory 10.6 (10.6) <D1CF5881-0AF7-D164-4156-9E9067B7FA37> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x9a6dd000 - 0x9a6edff7 libsasl2.2.dylib 3.15.0 (compatibility 3.0.0) <C8744EA3-0AB7-CD03-E639-C4F2B910BE5D> /usr/lib/libsasl2.2.dylib
0x9a93f000 - 0x9a99cff7 com.apple.framework.IOKit 2.0 (???) <3DABAB9C-4949-F441-B077-0498F8E47A35> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x9a9b6000 - 0x9aac2ff7 libGLProgrammability.dylib ??? (???) <04D7E5C3-B0C3-054B-DF49-3B333DCDEE22> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0xffff0000 - 0xffff1fff libSystem.B.dylib ??? (???) <2DCD13E3-1BD1-6F25-119A-3863A3848B90> /usr/lib/libSystem.B.dylib

Well, part of the confusion is due to differing uses of the tilde character (~). In Unix, the tilde is used as shorthand for /Users/your_short_username/, so when artie suggested moving those three prefs files, he was explicitly referring to those found in your user Library: ~/Library/Preferences, not the boot volume level Library: /Library/Preferences.

Ah, thanks, yet more lumens. Good to "see things" better.

ryck

I got lazy recently and began using the tilde rather than /Users/Your short name as had been my habit...short-lived exercise that was!

> ~Hard Drive/Library/Preferences ....still only has com.apple.loginwindow.plist and things are working fine.

dkmarsh has discussed the nomenclature issue, but not the file, itself... I've got the same file in /Library/Preferences, and its functionality (in my instance, anyhow) doesn't include anything that has any apparent connection to any of your issues.

> The only change, and it's cosmetic, is that the picture behind the login window reverted to that purple, cosmos thing that the OS comes with. However, even after restoring it to one of Apple's Nature images, no other plist has yet appeared. I thought that changing a "preference" might create a plist to keep track of it.

I'm totally confused by that... The default "Cosmos" image behind the login window can be changed only by a 3rd party app, not by a preference; Apple's "Nature" images (Those located at /Apps/SysPrefs > Desktop & Screensaver > Desktop > Apple are the only such items of which I'm aware.) are desktop images that affect only the default "Cosmos" desktop image.

> At this log-in the machine took a moment to pop in my All Sites pages so I checked toe Prefs folder and the User Library now has loginwindow.plist. So it appears: "Just leave them alone and they'll come home, wagging their tails behind them".

Confused again... How does Safari's "Top Sites" (Terminology failure...I meant the Top Sites...[....]) functionality fit into this discussion?

> The AdobeResourceSynchronizer is another story. It seems this has been a problem for a few people (a real CPU hog).

And that sounds like the answer to your slow-loading menu bar issue... If AdobeResourceSynchronizer was hogging resources when it loaded it would, in all likelihood, have slowed down the entire login process, and if you haven't restored ARS as a Login Item and you're no longer experiencing menu bar hangs, you've got corroborating evidence.

And, finally, please humor me, because the nomenclature issue discussed by dkmarsh has cast a bit of a shadow on your earlier reports.

You've now got com.apple.loginitems.plist,
loginwindow.plist, and
com.apple.loginwindow.plist in /Users/Your short name/Library/Preferences.

Pleeeze, just one last time, move those three files to your desktop, restart, and post which of the three is immediately recreated in /Users/Your short name/Library/Preferences. (Afterwards, you can restore the first two files to /Users/Your short name/Library/Preferences and leave the third one on your desktop; its absence should not have any adverse effects, and it should not be recreated, as it's apparently an unneeded Leopard leftover.)

Many thanks for that last.

Not sure whence comes your vehemence regarding one's ability to change the login window's default image without a third-party app, but you're incorrect.

I currently have displaying at the login window may_tomatoes.jpg, and this is maintained in /Library/Preferences/loginwindow.plist as follows:


To effect such a change, copy the desired image to /Library/Desktop Pictures, and then in Terminal enter this command:

defaults write /Library/Preferences/com.apple.loginwindow DesktopPicture "/Library/Desktop\ Pictures/image_name"

To assure yourself that this preference is really maintained by this plist, after having made such a change via a third-party app, drag the plist to the Desktop and visit the login window; it will have reverted to cosmos.jpg.

(Further note: I don't think the desired replacement picture needs to be in /Library/Desktop Pictures, but I wasn't able to change the picture to one located in my Pictures folder, apparently because the permissions on an image located there (correctly) preclude its being read by other users.)

BTW, I have plists in /Library/Preferences with the same three names as those we've been discussing in the user's prefs folder. Once again, loginwindow.plist and com.apple.loginitems.plist seem to cover the same territory—in this case, some HP login items of uncertain function which were part of my AIO software installation.

Neither do I understand why it happened, except that it did, so I thought I should report it in case it might shed some light.


Again, I didn't know whether or not it would shed any light. However, since it occurred concurrent with everything else that was being done, I thought I should report it. I don't have sufficient knowledge to know fully what may or may not be important, so I just throw it all in.


I hope so. Right now I'm not running either Adobe Reader or Flash but, should I decide to re-install I will check to see if Adobe has popped AdobeResourceSynchronizer back in. If so, I'll just pop it back out.


Done and you're welcome. There was now only one and it was: loginwindow.plist

A check of Apps/System Prefs/Accounts/Login Items showed that EyeTV Helper and Microsoft AU Daemon were gone which, I assume, was expected.

Both EyeTV Helper and Microsoft AU Daemon have been restored and I now have the addition of com.apple.loginitems.plist

ryck

I took a little longer route as I did not know how to do it with software. I opened the Nature pictures file and copied the one I wanted. I did not make any changes to it at all, leaving it exactly the same as Apple has created it.

I opened HD/System/Library/CoreServices and removed DefaultDesktop.jpg and then renamed my Nature jpg as DefaultDesktop.jpg

I put the new DefaultDesktop.jpg into the CoreServices Folder.

Thanks for the Terminal tip.

ryck

As I indicated in my previous post, your selection for the login window picture is maintained in /Library/Preferences/com.apple.loginwindow.plist, so when you moved that file the selection reverted to the default.

When you restored it to your preferred image, no additional plist appeared because /Library/Preferences/com.apple.loginwindow.plist was already in existence. I suspect you'll see the path to that Nature image you restored to the login window if you enter the Terminal command

defaults read /Library/Preferences/com.apple.loginwindow DesktopPicture

Edited to add: That command is the Terminal equivalent to opening /Library/Preferences/com.apple.loginwindow.plist and examining the value of the Desktop Picture attribute; my point in mentioning it is just to show that the change you made is in fact recorded in that plist (assuming that it is!).

It appears to be elusive. Entering the command generated the following.

2011-08-23 17:35:36.578 defaults[1344:903]
The domain/default pair of (com.apple.loginwindow, DesktopPicture) does not exist
user-names-imac:~ username$

ryck

> Not sure whence comes your vehemence....

Nor am I; I thought I had picked up the info somewhere waaay back in MFIF.

Thanks for correcting me.

> BTW, I have plists in /Library/Preferences with the same three names as those we've been discussing in the user's prefs folder. Once again, loginwindow.plist and com.apple.loginitems.plist seem to cover the same territory—in this case, some HP login items of uncertain function which were part of my AIO software installation.

I've got only com.apple.loginwindow.plist.

It happened because you moved the plist in /Library rather than the one in /Users/Your short name/Library, and thanks for reporting what happened; I learned something new.


I wonder whether it was AdobeResourceSynchronizer, per se, that was at the root of your issue (assuming it's gone) or whether it was a corrupt ARS? I guess you'll find out if it's ever resurrected as a Login Item.

For the moment, though, this thread has apparently reached its logical conclusion.


Great... We've now got consistency, between you, me, and dk, anyhow, on the apparent loginwindow.plist anomaly.

Also, your assumption is correct, and the recreation of com.apple.loginitems.plist is consistent with what I've experienced.

Hopefully, "Case Closed!" is not unwarranted optimism.

Amen. And thanks to you and dk.

ryck

You're very welcome, ryck.

And now that this episode has, hopefully, reached its conclusion, I'm wondering whether our excursion into the world of SystemUIServer was necessary? I hope we never find out!