Data recovery after 'clean install'

Hello,
My daughter's Macbook Air suffered the 'hinge' problem, and was returned to Apple for service. Some idiot at the Apple Depot did a clean install of OS X for absolutely NO reason.
I'm looking for the best way to access the hard drive externally (via USB only) so I can run Data Rescue and attempt to rescue her files.
Obviously I'd use Firewire target disk mode if the Airbook has Firewire port.
Any ideas?
thanks much

There is no way to directly access the hard drive via USB like Target Disk Mode. If you have Data Rescue on a bootable DVD, then you can attempt to boot the computer from an optical drive just as you would to install OS X. Alternatively, if you have an 8 or 16 GB flash drive you can install OS X on it then copy Data Rescue to it. Then boot the computer from the USB flash drive. If Data Rescue is on a bootable DVD you can clone the DVD to a flash drive.
Note that having installed OS X on the erased drive as well as having used the drive compromises the ability to rescue files. Once files are overwritten they cannot be recovered.

Similar Messages

Bookmarks recovery after clean install of OS

My computer crashed and i have to do a clean install of the operating system (win xp pro). And lost all my previous bookmarks. I was running firefox 3.6. Is there a way to recover my bookmarks?
== This happened ==
Just once or twice
== Just when i reinstalled the operating system and reinstall firefox

Can anyone kindly help please.

MBP 2012 still slow after clean install of Yosemite

Hello,
I'm hoping someone can help me, I've done just about everything I can find online to get my MBP to work like it used to. After unsuccessful attempts at different workarounds, I decided to wipe everything perform a clean install of Yosemite.
Still no luck!! #nobueno
Problem description:
After clean install of Yosemite, my MacBook Pro (2012) continues to run at a snailspace. Very slow!
EtreCheck version: 2.1.8 (121)
Report generated February 18, 2015 at 11:51:42 AM PST
Download EtreCheck from http://etresoft.com/etrecheck
Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.
Hardware Information: ℹ️
    MacBook Pro (13-inch, Mid 2012) (Technical Specifications)
    MacBook Pro - model: MacBookPro9,2
    1 2.9 GHz Intel Core i7 CPU: 2-core
    8 GB RAM Upgradeable
        BANK 0/DIMM0
            4 GB DDR3 1600 MHz ok
        BANK 1/DIMM0
            4 GB DDR3 1600 MHz ok
    Bluetooth: Good - Handoff/Airdrop2 supported
    Wireless: en1: 802.11 a/b/g/n
    Battery Health: Normal - Cycle count 294
Video Information: ℹ️
    Intel HD Graphics 4000
        Color LCD 1280 x 800
System Software: ℹ️
    OS X 10.10.2 (14C109) - Time since boot: 1:41:54
Disk Information: ℹ️
    TOSHIBA MK7559GSXF disk0 : (750.16 GB)
        EFI (disk0s1) <not mounted> : 210 MB
        Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
        Macintosh HD (disk1) / : 748.93 GB (735.33 GB free)
            Core Storage: disk0s2 749.30 GB Online
    MATSHITADVD-R   UJ-8A8
USB Information: ℹ️
    Apple Inc. FaceTime HD Camera (Built-in)
    Apple Inc. Apple Internal Keyboard / Trackpad
    Apple Computer, Inc. IR Receiver
    Apple Inc. BRCM20702 Hub
        Apple Inc. Bluetooth USB Host Controller
Thunderbolt Information: ℹ️
    Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
    Mac App Store and identified developers
User Login Items: ℹ️
    None
Internet Plug-ins: ℹ️
    Default Browser: Version: 600 - SDK 10.10
    QuickTime Plugin: Version: 7.7.3
3rd Party Preference Panes: ℹ️
    None
Time Machine: ℹ️
    Time Machine not configured!
Top Processes by CPU: ℹ️
         4%    WindowServer
         1%    Finder
         1%    mds
         1%    mds_stores
         0%    deleted
Top Processes by Memory: ℹ️
    163 MB    mds_stores
    86 MB    com.apple.WebKit.WebContent
    77 MB    Finder
    69 MB    WindowServer
    52 MB    mds
Virtual Memory Information: ℹ️
    4.90 GB    Free RAM
    1.86 GB    Active RAM
    868 MB    Inactive RAM
    954 MB    Wired RAM
    2.28 GB    Page-ins
    0 B    Page-outs
Diagnostics Information: ℹ️
    Feb 18, 2015, 10:03:37 AM    Self test - passed
    Feb 18, 2015, 09:55:07 AM    /Library/Logs/DiagnosticReports/mbpluginhost_2015-02-18-095507_[redacted].crash

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.
Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.
Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
4. Here's a summary of what you need to do, if you choose to proceed:
☞ Copy a line of text in this window to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.
You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
Triple-click anywhere in the line of text below on this page to select it:
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(1248 ' 0.5 0.25 10 1000 15 5120 1000 25000 1 1 0 100 ' 51 25600 4 10 25 5120 102400 1000 25 1000 150 40 500 300 85 25 20480 262144 20 2000 524288 604800 5 );k=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays PCI UniversalAccess InstallHistory ConfigurationProfile AirPort 'com\.apple\.' -\\t N\\/A 'AES|atr|udit|msa|dnse|ax|ensh|fami|FileS|fing|ft[pw]|gedC|kdu|etS|is\.|alk|ODSA|otp|htt|pcas|ps-lp|rexe|rlo|rsh|smb|snm|teln|upd-[aw]|uuc|vix|webf' OSBundle{Require,AllowUserLoa}d 'Mb/s:per sec:ms/s:KiB/s:%:total:MB:total' 'Net in:Net out:I/O wait time:I/O requests:CPU usage:Open files:Memory:Mach ports:File opens:Forks:Failed forks:System errors' 'tsA|[ST]M[HL]' PlistBuddy{,' 2>&1'}' -c Print' 'Info\.plist' CFBundleIdentifier );f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' %s{' ','\n'{"${k[22]}",}}'%s\n' '%d MB: %s\n' '\n    ...and %s more line(s)\n' '\nContents of %s\n    '"${k[22]}"'mod date: %s\n    '"${k[22]}"'checksum: %s\n%s\n' );c=(879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 3374894509 1051159591 892310726 1707497389 523110921 2883943871 3873345487 );s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[4]} ' s/:$//;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[9]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' BEGIN { FS=":";if(system("sw_vers -productVersion|grep -q ^10\.1")) d="^'"${k[21]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' { sub(/ :/,"");print|"tail -n'${p[10]}'";} ' ' NR==2&&$4<='${p[7]}' { print $4;} ' ' ($1~"wir"&&$2>'${p[22]}')||($1~/P.+ts:/&&$2>'${p[19]}') { print $1" "int($2);} ' '/YLD/s/=/ /p' ' { q=$1;$1="";u=$NF;$NF="";gsub(/ +$/,"");print q":"$0":"u;} ' ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' ' !/, .+:/{print};END{if(NR<'{${p[12]},${p[13]}}')printf("^'"${k[21]}"'.+")} ' '|uniq' ' 1;END { print "/L.+/Scr.+/Templ.+\.app$";print "/L.+/Pri.+\.plugin$";if(NR<'{${p[14]},${p[21]}}') print "^/[Sp].+|'${k[21]}'";} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p;' '&&echo On' '/\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/p' '/\.dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".","");print $0"$";} END { split("'"${c[*]}"'",c);for(i in c) print "\t"c[i]"$";} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' BEGIN{ FS="= "} $2 { gsub(/[()"]/,"",$2);print $2;} ' ' /^\//!d;s/^.{5}//;s/ [^/]+\//: \//p;' '>&-||echo No' '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[2]}'{$2=$2-1;print}' ' BEGIN { M1='${p[16]}';M2='${p[18]}';M3='${p[8]}';M4='${p[3]}';} !/^A/{next};/%/ { getline;if($5<M1) o["CPU"]="CPU: user "$2"%, system "$4"%";next;} $2~/^disk/&&$4>M2 { o[$2]=$2": "$3" ops/s, "$4" blocks/s";next;} $2~/^(en[0-9]|bridg)/ { if(o[$2]) { e=$3+$4+$5+$6;if(e) o[$2]=o[$2]"; errors "e"/s";next;};if($4>M3||$6>M4) o[$2]=$2": in "int($4/1024)", out "int($6/1024)" (KiB/s)";} END { for(i in o) print o[i];} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' BEGIN{FS=": "} /^ {10}O/ {exit} /^ {0,12}[^ ]/ {next} $1~"Ne"&&$2!~/^In/{print} $1~"Si" { split($2,a," ");if(a[1]-a[4]<'${p[5]}') print;};$1~"T"&&$2<'${p[20]}'{print};$1~"Se"&&$2!~"2"{print};' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1;} ' ' BEGIN { split("'"${p[1]}"'",m);FS=":";} $2<=m[$1]{next} $1<9 { o[$1]=o[$1]"\n    "$3" (UID "$4"): "$2;} $1==9&&$5!~"^/dev" { o[$1]=o[$1]"\n    "$3" (UID "$4") => "$5" (status "$6"): "$2;} $1==10&&$5 { p="ps -c -ocomm -p"$5"|sed 1d";p|getline n;close(p);if(n) $5=n;o[$1]=o[$1]"\n    "$5" => "$3" (UID "$4"): "$2;} $1~/1[12]/ { o[$1]=o[$1]"\n    "$3" (UID "$4", error "$5"): "$2;} END { n=split("'"${k[27]}"'",u,":");for(i=n+1;i<n+5;i++)u[i]=u[2];split("'"${k[28]}"'",l,":");for(i in o) print "\n"l[i]" ("u[i]")\n"o[i];} ' ' /^ {8}[^ ]/{print} ' ' BEGIN { L='${p[17]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n    "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n    [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${k[30]}"' "F|getline g) { l++;if(l<=L) f=f"\n    "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n    '"${k[22]}"'"T;printf("'"${f[8]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' 's/^.{52}(.+) <.+/\1/p' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");p=a[1];k[S]='${k[25]}';k[U]='${k[26]}';v[S]="Safe";v[U]="true";for(i in k) { s=system("'"${k[30]}"'\\ :"k[i]" \""p"\"/*/I*|grep -qw "v[i]);if(!s) a[1]=a[1]" "i;};if(!a[2]) a[2]="'"${k[23]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${k[31]}"'\\ :'"${k[33]}"' \""$0"\"/*/'${k[32]}'";p|getline b;close(p);if(b~/, .+:/||b=="") b="'"${k[23]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR>=13 { gsub(/[^0-9]/,"",$1);print;} ' ' $10~/$L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${k[32]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ / [VY]/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' '/^find: /!p;' ' /^p/{ s/.//g;x;s/\nu/:/;s/(\n)c/\1:/;s/\n\n//;p;};H;' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */    /;p;' ' s/^.+ |\(.+$$//g;p;' '1;END{if(NR<'${p[15]}')printf("^/(S|usr/(X|li))")}' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END{ if(i>1)print n} ' s/{'\.|jnl: ','P.+:'}'//;s/ +([0-9]+)(.+)/\2 \1/p' ' /es: ./{ s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(B2|[my]): /H;d;:0'$'\n'' x;/[my]: [AM]|m: I.+p$|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/:(0|-(4[34])?)$/p' '|sort'{'|uniq'{,\ -c},\ -nr} ' s/^/'{5,6,7,8}':/;s/ *: */:/g;p;' '/e:/{print $2}' ' /^[(]/{ s/....//;s/$/:/;N;/: [)]$/d;s/\n.+ ([^ ]+).$/\1/;H;};${ g;p;} ' 's/:.+$//p' '|wc -l' /{\\.{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'Info,'Launch[AD].+'}'\.plist$/p' 's/([-+.?])/\\\1/g;p' 's/, /\'$'\n/g;p' ' BEGIN{FS=":"} { printf("'"${f[6]}"'",$1/1048576,$2);} ' ' /= D/&&$1!~/'{${k[24]},${k[29]}}'/ { getline d;if(d~"t") D=D"\n"$1;} END { print D;} ' ' NR>1&&$3!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $3":"$2;} ' '|tail -n'${p[6]} ' $1>1 { $NF=$NF" x"$1;} /\*/ { if(!f) f="\n\t* Code injection";} { $1="";} 1;END { print f;} ' ' s/.+bus /Bus: /;s/,.+[(]/ /;s/,.+//p;' ' { $NF=$NF" Errors: "$1;$1="";} 1 ' ' 1s/^/\'$'\n''/;/^ +(([MNPRSV]|De|Li).+|Bus): .|d: Y/d;s/:$//;$d;p;' ' BEGIN { RS=",";FS=":";} $1~"name" { gsub("\"","",$2);print $2;} ' '|grep -q e:/' '/[^ .]/p' '{ print $1}' ' /^ +N.+: [1-9]/ { i++;} END { if(i) print "system: "i;} ' ' NF { print "'{admin,user}' "$NF;exit;} ' ' /se.+ =/,/[\}]/!d;/[=\}]/!p ' ' 3,4d;/^ +D|Of|Fu| [0B]/d;s/^ |:$//g;$!H;${ x;/:/p;} ' ' BEGIN { FS=": ";} NR==1 { sub(":","");h="\n"$1"\n";} /:$/ { l=$1;next;} $1~"S"&&$2!~3 { getline;next;} /^ {6}I/ { i++;L[i]=l" "$2;if(i=='${p[24]}') nextfile;} END { if(i) print h;for(j=0;j<i;j++) print L[i-j];} ' ' /./H;${ x;s/\n//;s/\n/, /g;/,/p;} ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${k[30]}\\" echo cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin' env pluginkit scutil 'dtrace -q -x aggsortrev -n' security sed\ -En awk 'dscl . -read' networksetup mdutil lsof test osascript\ -e netstat mdls route cat );c2=(${k[21]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'" 'L*/Ca*/'${k[21]}'Saf*/E* -d 2 -name '${k[32]} '~ $TMPDIR.. $ -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility Req "'${k[21]}'('{'bird|.*i?clou','lsu|sha'}')"' "-f'%N: %l' Desktop {/,}L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message CRne '0xdc008012|(allow|call)ing|(mplet|nabl)ed|ry HD|safe b|xpm' -k Message CReq 'bad |Can.t l|corru|dead|fail|GPU |hfs: Ru|inval|Limiti|v_c|NVDA[(]|pagin|Purg(ed|in)|error|Refus|TCON|tim(ed? ?|ing )o|trig|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o%cpu,comm,ruid' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0<0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno!=0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000000);normalize(@h,10240);printa(\"1:%@d:%s:%d\n\",@a);printa(\"2:%@d:%s:%d\n\",@b);printa(\"9:%@d:%s:%d:%s:%d\n\",@c);printa(\"10:%@d:%s:%d:%d\n\",@d);printa(\"11:%@d:%s:%d:%d\n\",@e);printa(\"12:%@d:%s:%d:%d\n\",@f);printa(\"3:%@d:%s:%d\n\",@g);printa(\"4:%@d:%s:%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag $ -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true $ -execdir stat -f:%Sc:%N -t%F {} \;' '/S*/*/Ca*/*xpc*' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' /\ kMDItemContentTypeTree=${k[21]}{bundle,mach-o-dylib} :Label "/p*/e*/{aut*,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {/p*,/usr/local}/e*/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/{Lau,Sec}*/*t .launchd.conf" list '-F "" -k Sender hidd -k Nle 3' /Library/Preferences/${k[21]}alf\ globalstate --proxy '-n get default' print\ system --dns -get{dnsservers,info} dump-trust-settings\ {-s,-d,} -n1 '-R -ce -l1 -n5 -o'{'prt -stats prt','mem -stats mem'}',command,uid' -kl -l -s\ / '--regexp --files '${k[21]}'pkg.*' '+c0 -i4TCP:0-1023' ${k[21]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER' '-app Safari WebKitDNSPrefetchingEnabled' '-Fcu +c0 -l' -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','(a und|I/O |jnl_io.+)err','USBF:.+bus'}'"' -name\ kMDItem${k[33]} -T\ hfs '-n get default' -listnetworkserviceorder :${k[33]} :CFBundleDisplayName $EUID {,'/{S*/,}'}'L*/{,Co*/*/*/L*/}{Cache,Log}s $TMPDIR../C -type f -size +'${p[11]}'M -exec stat -f'%z:%N' {} \;' \ /v*/d*/*/*l*d{,.*.$UID}/* '-app Safari UserStyleSheetEnabled' 'L*/A*/Fi*/P*/*/a*.json' users/$USER\ HomeDirectory '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' ' -F "\$Time \$(Sender): \$Message" -k Level Nle 3 -k Facility R'{'ne "user|','eq "'}'console" -k Message CRne "[{}<>]|commit - no t|deprec|Goog|realp|sandbox ex|/root" ' getenv '/ "kMDItemDateAdded>=\$time.now(-'${p[23]}')&&kMDItem'${k[33]}'=*"' -m\ / '' );N1=${#c2[@]};for j in {0..20};do c2[N1+j]=SP${k[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel,Firefox}\ extensions System\ load boot\ args FileVault\ {2,1} {Kernel,System,Console}\ log Activity SMC Login\ hook 'I/O per process' 'High file counts' UID Daemons Agents XPC\ cache Startup\ items {Admin,Root}\ access Stylesheet Library\ paths{,' ('{shell,launchd}\)} Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory\ pressure Listeners Widgets Parental\ Controls Prefetching Nets Volumes {Continuity,I/O,iCloud,HID,HCI}\ errors {User,System}\ {caches/logs,overrides} Shutdown\ codes Heat Diagnostic\ reports Bad\ plists Free\ space VM Bundles{,' (new)'} Trust\ settings );N3=${#l[@]};for i in {0..8};do l[N3+i]=${k[5+i]};done;F() { local x="${s[$1]}";[[ "$x" =~ ^([\&\|\<\>]|$) ]]&&{ printf "$x";return;};:|${c1[30]} "$x" 2>&-;printf "%s \'%s\'" "|${c1[30+$?]}" "$x";};A0() { Q=6;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[0]};};A1() { local c="${c1[$1]} ${c2[$2]}";shift 2;c="$c ` while [[ "$1" ]];do F $1;shift;done`";((P2))&&{ c="sudo $c";P2=;};v=`eval "$c"`;[[ "$v" ]];};A2() { local c="${c1[$1]}";[[ "$c" =~ ^(awk|sed ) ]]&&c="$c '${s[$2]}'"||c="$c ${c2[$2]}";shift 2;local d=` while [[ "$1" ]];do F $1;shift;done`;((P2))&&{ c="sudo $c";P2=;};local a;v=` while read a;do eval "$c '$a' $d";done<<<"$v";`;[[ "$v" ]];};A3(){ v=$((`date +%s`-v[3]));};B1() { v=No;! ((v[1]))&&{ v=;P1=1;};};eval "`type -a B1|sed '1d;s/1/2/'`";B3(){ v[$1]="$v";};B4() { local i=$1;local j=$2;shift 2;local c="cat` while [[ "$1" ]];do F $1;shift;done`";v[j]=`eval "{ $c;}"<<<"${v[i]}"`;};B5(){ v="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d$'\e' <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F$'\e' ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`egrep -v "${v[$1]}"<<<"$v"|sort`;};eval "`type -a B7|sed '1d;s/7/8/;s/-v //'`";C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { B4 0 0 63&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";printf '\n\tThe test results are on the Clipboard.\n\n\tPlease close this window.\n';exit 2>&-;};for i in 1 2;do eval D$((i-1))'() { A'$i' $@;C0;};';for j in 2 3;do eval D$((i+2*j-3))'() { local x=$1;shift;A'$i' $@;C'$j' $x;};';done;done;trap C5 2;o=$({ A0;D0 0 N1+1 2;D0 0 $N1 1;B1;C2 27;B1&&! B2&&C2 28;D2 22 15 63;D0 0 N1+2 3;D0 0 N1+15 17;D4 3 0 N1+3 4;D4 4 0 N1+4 5;D4 N3+4 0 N1+9 59;D0 0 N1+16 99; for i in 0 1 2;do D4 N3+i 0 N1+5+i 6;done;D4 N3+3 0 N1+8 71;D4 62 1 10 7;D4 10 1 11 8;B2&&D4 18 19 53 67;D2 11 2 12 9;D2 12 3 13 10;D2 13 32 70 101 25;D2 65 6 76 13;D2 45 20 52 66;D4 66 7 77 14;D4 17 8 15 38;D0 9 16 16 77 45;C4;B2&&D0 35 49 61 75 76 78 45;B2&&{ D0 28 17 45;C4;};D0 12 40 54 16 79 45;D0 12 39 54 16 80 45;D4 31 25 77 15&&{ B4 0 8 103;B4 8 0;A2 18 74;B6 8 0 3;C3 32;};B2&&D4 19 21 0;B2&&D4 40 10 42;D2 2 0 N1+19 46 84;D2 44 34 43 53;D2 25 22 20 32;D2 33 0 N1+14 51;for i in {0..2};do A1 29 35+i 104+i;B3 25+i;done;B6 25 27 5;B6 0 26 5;B4 0 0 110;C2 69;D2 34 21 28 35;D4 35 27 29 36;A1 40 59 81;B3 18;A1 33 60 82;B8 18;B4 0 19 83;A1 27 32 39&&{ B3 20;B4 19 0;A2 33 33 40;B3 21;B6 20 21 3;};C2 36;D4 50 38 5 68;B4 19 0;D5 37 33 34 42;B2&&D4 46 35 45 55;D4 38 0 N1+20 43;B2&&D4 59 4 65 76 91;D4 63 4 19 44 75 95 96;B1&&{ D4 53 5 55 75 69&&D4 51 6 58 31;D4 56 5 56 97 75 98&&D0 0 N1+7 99;D2 55 5 27 84;D4 61 5 54 75 70;D4 14 5 14 12;D4 15 5 72 12;C4;};D4 16 5 73 12;A1 13 44 74 18;C4;B3 4;B4 4 0 85;A2 14 61 89;B4 0 5 19 102;A1 17 41 50;B7 5;C3 8;B4 4 0 88;A2 14 24 89;C4;B4 0 6 19 102;B4 4 0 86;A2 14 61 89;B4 0 7 19 102;B5 6 7;B4 0 11 73 102;A1 18 31 107 94 74||{ B2&&A1 18 26 94 74;}&&{ B7 11;B4 0 0 11;C3 23;};A1 18 26 94;B7 11;B4 0 0 11;C3 24;D4 60 14 66 92;D4 58 14 67 93;D4 26 4 21 24;D4 42 14 1 62;D4 43 37 2 90 48;D4 41 10 42;D2 48 36 47 25;A1 4 3 60&&{ B3 9;A2 14 61;B4 0 10 21;B4 9 0;A2 14 62;B4 0 0 21;B6 0 10 4;C3 5;};D4 9 41 69 100;D2 29 21 68 35;D2 49 21 48 49;B4 4 22 57 102;A1 21 46 56 74;B7 22;B4 0 0 58;C3 47;D4 54 5 7 75 76 69;D4 52 5 8 75 76 69;D4 57 4 64 76 91;D2 0 4 4 84;D2 1 4 51 84;D4 21 22 9 37;D0 0 N1+17 108; A1 23 18 28 89;B4 0 16 22 102;A1 16 25 33;B7 16;B4 0 0 34;D1 31 47;D4 64 4 71 41;C4;B4 4 12 26 89 23 102;for i in {0..3};do A1 0 N1+10+i 72 74;B7 12;B4 0 0 52;C3 N3+5+i;((i))||C4;done;A1 24 22 29;B7 12;B3 14;A2 39 57 30;B3 15;B6 14 15 4;C3 67;A1 24 75 74;B3 23;A2 39 57 30;B3 24;B6 23 24 4;C3 68;B4 4 13 27 89 65;A1 24 23;B7 13;C3 30;B4 4 0 87;A2 14 61 89 20;B4 0 17;A1 26 50 64;B7 17;C3 6;D0 0 N1+18 109;D4 7 11 6;A3;C2 39;C4;} 4>&2 2>/dev/null;);C5
Copy the selected text to the Clipboard by pressing the key combination command-C.
8. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:
[Process started]
        Part 1 of 8 done at … sec
        Part 8 of 8 done at … sec
        The test results are on the Clipboard.
        Please close this window.
[Process completed]
The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.
Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.
12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I may not agree with them.
Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

How to restore files from Time Machine after Clean Install of Mavericks

How to restore files from Time Machine after Clean Install of Mavericks. I know the data is there but seems unaccessable because I may have changed the Computer or Owner name. Is there any way to fix that now?

Hi Linc,
my back-up data is managed by Time Machine; the actual data is on a second internal Hard Drive with a capacity of 1TB - not partitioned. I am using Time Machine and have access to all data backed up since Mavericks Clean Install but not the data prior to this date.
When I open the 1TB drive in Finder I can see a folder "Backups.backupdb/Sigi's Mac Pro/ followed by many folders of backup dates going back to 2010-09-20-103441 and up to 2014-02-07-142414 all followed with folder Macintosh HD. February 7th 2014 was the date of the clean install.
These Backups are followed by backup date folder 2014-02-08-075554 with a subfolder of MacPro-320GB (this is the name I assigned to my Boot Drive during formatting; I suspect I should have assigned the same name as before ie. Macintosh HD) and 2014-02-11 with a subfolder Macintosh HD, these are the ones I get access to by way of Time Machine > Restore.
Weird thing is on Febr 11 when I relised my possible mistake and renamed the Bootdrive back to what it was initially ie. Macintosh HD despite this I have access to all backup data since the Clean Install in both folders MacPro-320GB as well as Macintosh HD but not to any data prior to the Clean Install.
Is there something that Time Machine knows and prevents access or is it simply a matter of renaming the subfolder 2014-02-08-07554/MacPro-320GB to ........./Macintosh HD?
I like to restore selectively and not everything - It was hard work reinstalling apps that were supposed to be the troublemakers (ref my discussion on Maverick problems) but I now need to get onto data specific to some of these apps as well as other data I may have missed. Long story? Yes and sorry.
Sigi

Sluggish and Slowness MacBookPro after clean install Mavericks

Hi,
My MacBook Pro 2012 become slow and sluggish after clean install Mavericks. I have to longgg waiting for applications to run ( even my old laptop can run Windows faster!! ). Compare I bought this MBP with Mountain Lion , this one is much slower with Mavericks. There are audible harddrive activity.
I already done with NVAM & SMC reset but still nothing change on performance.
Hope anybody here can help me since a quite a fews days i keep thinking to resolve this matter.
Hardware Information:
          MacBook Pro (13-inch, Mid 2012)
          MacBook Pro - model: MacBookPro9,2
          1 2.5 GHz Intel Core i5 CPU: 2 cores
          4 GB RAM
Video Information:
          Intel HD Graphics 4000 - VRAM: 1024 MB
System Software:
          OS X 10.9.1 (13B42) - Uptime: 0 days 2:58:42
Disk Information:
          APPLE HDD ST500LM012 disk0 : (500.11 GB)
                    EFI (disk0s1) <not mounted>: 209.7 MB
                    Macintosh HD (disk0s2) /: 499.25 GB (480.26 GB free)
                    Recovery HD (disk0s3) <not mounted>: 650 MB
          MATSHITADVD-R   UJ-8A8
USB Information:
          Apple Inc. FaceTime HD Camera (Built-in)
          Apple Computer, Inc. IR Receiver
          Apple Inc. BRCM20702 Hub
                    Apple Inc. Bluetooth USB Host Controller
          Apple Inc. Apple Internal Keyboard / Trackpad
FireWire Information:
Thunderbolt Information:
          Apple Inc. thunderbolt_bus
Kernel Extensions:
Problem System Launch Daemons:
Problem System Launch Agents:
Launch Daemons:
Launch Agents:
User Launch Agents:
User Login Items:
          None
Internet Plug-ins:
          Default Browser: Version: 537 - SDK 10.9
          QuickTime Plugin: Version: 7.7.3
Audio Plug-ins:
          BluetoothAudioPlugIn: Version: 1.0 - SDK 10.9
          AirPlay: Version: 1.9 - SDK 10.9
          AppleAVBAudio: Version: 2.0.0 - SDK 10.9
          iSightAudio: Version: 7.7.3 - SDK 10.9
3rd Party Preference Panes:
          None
Bad Fonts:
          None
Old Applications:
          None
Time Machine:
          Auto backup: YES
          Volumes being backed up:
                    Macintosh HD: Disk size: 464.96 GB Disk used: 17.68 GB
          Destinations:
                    WD My Passport [Local] (Last used)
                    Total size: 465.41 GB
                    Total number of backups: 2
                    Oldest backup: 2014-01-31 14:48:18 +0000
                    Last backup: 2014-02-01 07:31:57 +0000
                    Size of backup disk: Adequate
                              Backup size 465.41 GB > (Disk used 17.68 GB X 3)
          Time Machine details may not be accurate.
          All volumes being backed up may not be listed.
Top Processes by CPU:
               3%          WindowServer
               1%          EtreCheck
               0%          imagent
Top Processes by Memory:
          127 MB          com.apple.IconServicesAgent
          70 MB          mds_stores
          37 MB          mds
          37 MB          WindowServer
          29 MB          Activity Monitor
Virtual Memory Information:
          2.23 GB          Free RAM
          941 MB          Active RAM
          222 MB          Inactive RAM
          644 MB          Wired RAM
          257 MB          Page-ins
          0 B          Page-outs

@mamatcyber @ Linc Davis
Same issue here I have done clean installs using Super Duper (Back-up All Fresh clean slate...)
and still Mavericks is getting slower and slower.....
Using Gimp it now takes 5 mins to export a .jpeg file 500k !
OSX 10.9.1
Processor 2.26ghz
Ram 2gb
250gb HD 196gbfree
Even just now I did a clean install and i'm seeing the spinning beach ball with Firefox, and it's slow to opening up volumes.
This is Ridiculous Apple!

Would it still be possible to retrieve encrypted files from a Mac OS X 10.8.5 after clean install and performing command p and r?

I'm just wondering, if it would still be possible to retrieve encrypted files (such as home folders using legacy filevault) from Mac OS X 10.8.5 after clean install of new OS and performing command-p and -r during bootup? Any help would be greatly appreciated.

Something to know. All of these tools have two things in common:
1) You must have another drive to save the recovered data to. You cannot save it back to the same partition you are recovering from since doing so could overwrite data you are trying to save.
2) They take forever to complete. In Windows, a deleted file or folder simply has a flag changed on its entry in the file table so the OS knows the space it used to occupy is free to use for other data. To unerase, the software simply changes the flag back to "live". That's why they work so easily and fast in Windows. How long an item has been marked as erased determines whether or not the space it sat on has since been used by new data.
On a Unix system (which OS X sits on top of), deleted data has its file table entry removed. The only way then to find deleted data is to scour the entire drive for BOF (beginning of file) markers and reading the data of each one it finds to its EOF (end of file) marker.
So be prepared to wait for hours for a search to complete. It could take more than a day for a terabyte or larger drive. It also doesn't help that recovered data rarely has any of the original names.
Edit: Also, did you do a simple erase of the drive, or a zero write erase? If the latter, your chances of recovering anything is virtually nil.

Can't get iWork 09 functional after clean install...

Can't get iWork 09 functional after clean install. Could use migration assistant and restore from TM, but don't want to bring all apps...just iWork suite. Original purchased iWork via a trial download, then paid for license. Here is my error message when trying to open Pages:
Process:         Pages [2838]
Path:            /Applications/iWork '09/Pages.app/Contents/MacOS/Pages
Identifier:      com.apple.iWork.Pages
Version:         4.3 (1048)
Build Info:      Pages-10480000~1
Code Type:       X86 (Native)
Parent Process: launchd [173]
Date/Time:       2013-01-18 19:59:57.810 -0600
OS Version:      Mac OS X 10.7.5 (11G63)
Report Version: 9
Interval Since Last Report:          62361 sec
Crashes Since Last Report:           13
Per-App Crashes Since Last Report:   4
Anonymous UUID:                      33AE1986-2E77-4022-B824-C159014BAFF2
Crashed Thread: 0
Exception Type: EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000002, 0x0000000000000000
Application Specific Information:
dyld: launch, loading dependent libraries
Dyld Error Message:
Library not loaded: @rpath/Inventor.framework/Versions/C/Inventor
Referenced from: /Applications/iWork '09/Pages.app/Contents/MacOS/Pages
Reason: image not found
Binary Images:
    0x1000 -   0x354fe3 com.apple.iWork.Pages (4.3 - 1048) <3F2BE397-E81E-3355-C0DE-8B0F014E897B> /Applications/iWork '09/Pages.app/Contents/MacOS/Pages
0x3ec000 -   0xefdffb com.apple.sfcompatibility (1.0 - 0.0.1d1) <2237C99F-3144-0918-47A2-403A125BA9D0> /Library/Application Support/iWork '09/*/SFCompatibility.framework/Versions/A/SFCompatibility
0x15e6000 - 0x15ffff7 com.apple.Keynote.sfstyles (1.0 - 1.0) <25A20E06-8C1E-1BD9-7F0C-8B4027676DFD> /Library/Application Support/iWork '09/*/SFStyles.framework/Versions/A/SFStyles
0x1610000 - 0x1acbfeb com.apple.SFTabular (1.0 - 1.0) <BB41B4DC-2F8E-B7E3-6274-7A92437B8FF4> /Library/Application Support/iWork '09/*/SFTabular.framework/Versions/A/SFTabular
0x1c8b000 - 0x1d45ff3 com.apple.Keynote.sfutility (1.0 - 0.0.1d1) <ED93C91F-C30E-541E-BDD3-04A25579EAFB> /Library/Application Support/iWork '09/*/SFUtility.framework/Versions/A/SFUtility
0x1db7000 - 0x1f48ff3 com.apple.Keynote.sfdrawables (2.0 - 2.0) <7D531D66-A640-D293-817E-6D5C8D15E26D> /Library/Application Support/iWork '09/*/SFDrawables.framework/Versions/A/SFDrawables
0x2005000 - 0x2278fef com.apple.Keynote.SFWordProcessing (1.0 - 20030221_1) <F7952C77-8CF1-30F4-7FA7-A3A45FA2E184> /Library/Application Support/iWork '09/*/SFWordProcessing.framework/Versions/A/SFWordProcessing
0x2397000 - 0x23e2ff7 com.apple.Keynote.SFControls (1.0 - 20030306_1) <37F86C48-E752-688E-9A75-3F4D3BA5C054> /Library/Application Support/iWork '09/*/SFControls.framework/Versions/A/SFControls
0x240f000 - 0x2468ff7 com.apple.Keynote.sfarchiving (1.0 - 0.0.1d1) <E489EE3A-D0D0-749C-E38B-C9E87AA2BEE3> /Library/Application Support/iWork '09/*/SFArchiving.framework/Versions/A/SFArchiving
0x249a000 - 0x25a8fef com.apple.Keynote.sfrendering (1.0 - 1.0) <A817A67F-149D-85C4-4625-5DB753E8A4FF> /Library/Application Support/iWork '09/*/SFRendering.framework/Versions/A/SFRendering
0x260a000 - 0x2692fff com.apple.Keynote.proofreader (0 - 1) <6442D80E-854E-F13A-0C69-AFF7F7D927F7> /Library/Application Support/iWork '09/*/SFProofReader.framework/Versions/A/SFProofReader
0x26a0000 - 0x275afef com.apple.Keynote.sfinspectors (1.0 - 1.0) <B9BB5F5B-F7CE-8F1A-F308-43A11E6617A5> /Library/Application Support/iWork '09/*/SFInspectors.framework/Versions/A/SFInspectors
0x27b6000 - 0x2b20ff7 com.apple.Keynote.sfcharts (2.0 - 2.0) <0A1A116C-2AE2-7C65-E93B-1A54B1153626> /Library/Application Support/iWork '09/*/SFCharts.framework/Versions/A/SFCharts
0x2d52000 - 0x2d97fe7 com.apple.Keynote.SFAnimation (1.0 - 0.0.1d1) <057D09D4-072E-995E-D3D0-42D1E0AAC07C> /Library/Application Support/iWork '09/*/SFAnimation.framework/Versions/A/SFAnimation
0x2dc2000 - 0x2decfe3 com.apple.Keynote.sflicense (1.0 - 0.0.1d1) <6399F656-7AD7-1357-F477-CB6128248032> /Library/Application Support/iWork '09/*/SFLicense.framework/Versions/A/SFLicense
0x8fe6e000 - 0x8fea0aa7 dyld (195.6 - ???) <60FD3471-A1D7-342E-99A7-3EDECDAEC6EC> /usr/lib/dyld
0x91f32000 - 0x921e4ff7 com.apple.AddressBook.framework (6.1.3 - 1091) <B8CC707C-6368-3CDD-BE38-D2335B7CC2DE> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x928f0000 - 0x928f0ff0 com.apple.ApplicationServices (41 - 41) <C48EF6B2-ABF9-35BD-A07A-A38EC0008294> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Application Services
0x95317000 - 0x95396ff7 com.apple.iLifeMediaBrowser (2.6.4 - 502.4.5) <5C10CC72-586E-3497-9873-A0ACFB6156C3> /System/Library/PrivateFrameworks/iLifeMediaBrowser.framework/Versions/A/iLifeM ediaBrowser
0x95fe4000 - 0x96a79ff6 com.apple.AppKit (6.7.5 - 1138.51) <B9D3DCA0-9765-354E-9730-75A45A97DDFD> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x972ab000 - 0x972f3ff7 com.apple.SystemConfiguration (1.11.3 - 1.11) <C8DE66D7-0880-3F5F-A4BA-215B52DEFC74> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfi guration
0x97c14000 - 0x97debfe7 com.apple.CoreFoundation (6.7.2 - 635.21) <4D1D2BAF-1332-32DF-A81B-7E79D4F0A6CB> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x98162000 - 0x9846cff3 com.apple.Foundation (6.7.2 - 833.25) <4C52ED74-A1FD-3087-A2E1-035AB3CF9610> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x999db000 - 0x999dbfff com.apple.Carbon (153 - 153) <6CB9BB2F-2707-3B9D-8F3F-0BFEEDE96494> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x9a61b000 - 0x9a629fff com.apple.opengl (1.8.1 - 1.8.1) <766AFB12-A2CB-3A55-B662-FC9FFCAE0008> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
Model: iMac11,2, BootROM IM112.0057.B01, 2 processors, Intel Core i3, 3.06 GHz, 4 GB, SMC 1.64f5
Graphics: ATI Radeon HD 4670, ATI Radeon HD 4670, PCIe, 256 MB
Memory Module: BANK 0/DIMM1, 2 GB, DDR3, 1333 MHz, 0x80CE, 0x4D34373142353637334648302D4348392020
Memory Module: BANK 1/DIMM1, 2 GB, DDR3, 1333 MHz, 0x80CE, 0x4D34373142353637334648302D4348392020
AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x8F), Atheros 9280: 4.0.67.5-P2P
Bluetooth: Version 4.0.8f17, 2 service, 18 devices, 1 incoming serial ports
Network Service: Wi-Fi, AirPort, en1
Serial ATA Device: WDC WD5000AAKS-40V6A0, 500.11 GB
Serial ATA Device: OPTIARC DVD RW AD-5680H
USB Device: hub_device, 0x0424 (SMSC), 0x2514, 0xfd100000 / 2
USB Device: USB 2.0 Hub [MTT], 0x1a40 (TERMINUS TECHNOLOGY INC.), 0x0201, 0xfd130000 / 5
USB Device: Mass Storage Device, 0x058f (Alcor Micro, Corp.), 0x6361, 0xfd133000 / 10
USB Device: DYMO LabelWriter 400 Turbo, 0x0922 (Dymo Corporation), 0x001a, 0xfd131000 / 9
USB Device: USB 2.0 Hub, 0x1a40 (TERMINUS TECHNOLOGY INC.), 0x0101, 0xfd137000 / 8
USB Device: PTZ-431W, 0x056a (WACOM Co., Ltd.), 0x00b7, 0xfd132000 / 7
USB Device: composite_device, 0x04f9 (Brother International Corporation), 0x01e5, 0xfd134000 / 6
USB Device: IR Receiver, apple_vendor_id, 0x8242, 0xfd120000 / 4
USB Device: Built-in iSight, apple_vendor_id, 0x8502, 0xfd110000 / 3
USB Device: hub_device, 0x0424 (SMSC), 0x2514, 0xfa100000 / 2
USB Device: UPS CP1000AVRLCD, 0x0764 (Cyber Power Systems, Inc.), 0x0501, 0xfa140000 / 6
USB Device: Keyboard Hub, apple_vendor_id, 0x1006, 0xfa130000 / 5
USB Device: Apple Keyboard, apple_vendor_id, 0x0220, 0xfa132000 / 7
USB Device: BRCM2046 Hub, 0x0a5c (Broadcom Corp.), 0x4500, 0xfa110000 / 4
USB Device: Bluetooth USB Host Controller, apple_vendor_id, 0x8215, 0xfa111000 / 9
USB Device: Internal Memory Card Reader, apple_vendor_id, 0x8403, 0xfa120000 / 3
FireWire Device: OneTouch III, Maxtor, 400mbit_speed
FireWire Device: HDD, Iomega, 400mbit_speed
FireWire Device: My Book 111D, WD, 800mbit_speed

You didn't save the iWork trial.dmg somewhere by any chance?
You have not move enough parts of iWork over to the new computer. There are files in
Users > your name > Library > Application support > iWork. Get the iWork folder
MacHD > Library > Application Support > iWork '09. Get the folder
To get into the users Library you have to on Mountain Lion in the Finder click on Go in the menu while pressing down the Option key.

Time machine doesn't recognize my old backups after clean install

Time machine doesn't recognize my old backups after clean install of OSX Lion
I also tried using migration assistant with no success.
I just want to use TM to restore files and folders SELECTIVELY.
Does anyone also know how to fully restore my iTunes data? (purchaces, music, iphone backups, etc)
Thank you in advance

Oh yeah, and the other thing is, now I CAN'T go back in time using my Time Machine back-up . . . It says I've never backed up now (I guess because this is a fresh install that's TECHNICALLY correct), but I restored from this Time Machine file . . . Surely I've done something wrong that can be fixed. Help, please?

Restore Library from TM backup, manually, after clean install

Because of numerous issues with my Yosemite upgrade, I decided to start the new year with a clean install. I ran Time Machine one last time, then proceeded with the clean install of Yosemite 10.10.1. I discovered, subsequently, that,when I ran Time Machine, the timeline showed each backup event but, when I clicked (any) one event, the Finder window showed only the sidebar and nothing else (except for Now on the timeline). I ran verify, which completed without any error messages.
After some researching, here, I discovered that if I went into the TM sparsebundle, I could manually copy the missing folders (data) to my clean install; i.e., I could copy all but the Library folder for which I received the error message:
     “Library” can’t be modified or deleted because it’s required by OS X.
I’m sure there’s a way using the Terminal app to perform the copy, but have no clue how to do it, safely.
Would someone please provide the lines I need to enter into the Terminal to perform the task?
Here’s the path info:
     From:
        file:///Volumes/Time%20Machine%20Backups/Backups.backupdb/MBA2015/2014-12-31-004210/Macintosh%20HD/Users/tom/library/
    To:
        /Users/Tom/Library/
Thanks.

You can't modify the Library folder for the currently logged in user. Also you don't want to do the copy from the TimeMachine folders - those files have special permissions and ACL attributes that the real Library doesn't need and will likely cause problems.
What I would do if I were you would be to restore the Library folder to a temporary location, then logout and with another admin type user (create another if you don't already have a spare admin user) and then use this (assume xxx is first user with problematic Library and yyy is second admin type user and that the temporary Library restore folder is located in ~/xxx/templibraryfolder)
     cd ~/xxx
     sudo mv Library Library-xxx
     sudo ditto templibraryfolder ~/xxx/Library
sudo will prompt for password
then logout of yyy account/user and login as original xxx account/user
or even better would be to use Time Machine to restore the ~/xxx/Library folder while logged in as the yyy user (after renaming the ~/xxx/Library folder to ~/xxx/Library-xxx
Then logout from yyy and login as xxx and if everything looks ok, remove the ~/Library-xxx folder as they can be quite large (will need to do
     sudo rm -rf ~/xxx/Library
Don't do the above until you know things are working fine - so wait a while till you use all apps (or a lot of them especially licensed software like Adobe or other difficult to install apps)
~ is just a shortcut for the current users home folder -- e.g. if you logged in as Tom it would be /Users/Tom
Is that clear?? - don't proceed if you have any questions -- you're about to make a change that if not done correctly will cause lots of problems, so type carefully and have fun...and pat yourself on the back for making backups!!

SLOW and SLUGGISH after clean install PLEASE HELP!

My Macbook Pro started acting slugggish a few nights ago, and it seemed after a reboot that it ran better, but quickly slowed down. I ran permissions, disk repair, reset the PRAM the SMC and etc... nothing helped. I tried to do a Time Machine restore and after 10 hours of SLOW restoration (it still had 70 hours left) i decided to do a CLEAN INSTAL of Yosemite 10.10.
Same thing, takes over 10 minutes to boot up and i click on something and the beach ball will spin for a minute.
Disk Utility says everything is OK.... but even the internet is sluggish as if the entire machine is not processing the information fast enough.
ANY HELP is greatly appreciated as this is on day 4.
Thanks
Steve

CLEAN INSTALL took over 8 hours to complete, as if everything is running in slow mode.
Also, i ran this app as i see most ask for it.
Problem description:
Clean Install - OS very sluggish and slow before and after clean install
EtreCheck version: 2.1.6 (109)
Report generated January 17, 2015 at 7:29:07 AM EST
Download EtreCheck from http://etresoft.com/etrecheck
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.
Hardware Information: ℹ️
MacBook Pro (13-inch, Mid 2012) (Technical Specifications)
MacBook Pro - model: MacBookPro9,2
1 2.9 GHz Intel Core i7 CPU: 2-core
8 GB RAM Upgradeable
BANK 0/DIMM0
4 GB DDR3 1600 MHz ok
BANK 1/DIMM0
4 GB DDR3 1600 MHz ok
Bluetooth: Good - Handoff/Airdrop2 supported
Wireless: en1: 802.11 a/b/g/n
Battery Health: Normal - Cycle count 550
Video Information: ℹ️
Intel HD Graphics 4000
Color LCD 1280 x 800
System Software: ℹ️
OS X 10.10 (14A389) - Time since boot: 10:53:5
Disk Information: ℹ️
APPLE HDD TOSHIBA MK7559GSXF disk0 : (750.16 GB)
EFI (disk0s1) <not mounted> : 210 MB
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
Mac (disk1) / : 748.93 GB (735.15 GB free)
Core Storage: disk0s2 749.30 GB Online
HL-DT-ST DVDRW GS31N
USB Information: ℹ️
Apple Computer, Inc. IR Receiver
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. FaceTime HD Camera (Built-in)
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Mac App Store and identified developers
User Login Items: ℹ️
None
Internet Plug-ins: ℹ️
Default Browser: Version: 600 - SDK 10.10
QuickTime Plugin: Version: 7.7.3
3rd Party Preference Panes: ℹ️
None
Time Machine: ℹ️
Time Machine not configured!
Top Processes by CPU: ℹ️
      4% WindowServer
      0% mds_stores
      0% mds
      0% Finder
      0% launchd
Top Processes by Memory: ℹ️
258 MB com.apple.WebKit.WebContent
155 MB loginwindow
129 MB mds_stores
120 MB Finder
69 MB WindowServer
Virtual Memory Information: ℹ️
3.55 GB Free RAM
2.71 GB Active RAM
1.37 GB Inactive RAM
961 MB Wired RAM
2.65 GB Page-ins
0 B Page-outs
Diagnostics Information: ℹ️
Jan 16, 2015, 08:36:59 PM Self test - passed

After clean install of Snow Leopard, Time Machine did not restore all files. When I try to restore these files I get "Not enough disk space" error. What do I need to do to get these important files back onto my Mac from my external hard drive??

After clean install of Snow Leopard, Time Machine did not restore all files. When I try to restore these files I get "Not enough disk space" error. What do I need to do to get these important files back onto my Mac from my external hard drive??

Janet.b wrote:
About 3 years old...pretty dated now I guess. Am thinking I may just need to have it upgraded by a Mac tech.
For what the Apple Store's charge you can buy almost buy a new computer.
Just for giggles I brought my old laptop in for a drive upgrade and asked, they wanted $600 for a drive that only cost $120 at the time and it was a slow 5,400 RPM drive. The new Mac's of a similar make were going for $1000.
I did the drive replacement myself, got a faster drive of better quality for $300 instead.
Then another time I asked for a RAM upgrade from 4GB to 8GB, they wanted to charge $400 + $35 for the labor.
The same RAM is on Crucial.com for $90 and all I need is a 00 micro phillips screwdriver.
So you see what's going on here.
I think what you should do, if your out of warranty/AppleCare, is to call up the local PC tech guy who also does Mac's and have them fix you right up.
They can offer more personalized care which you need. Clone your old drive to the new and everything.
With Apple they are overworked at the Genius Bar and just place roadblocks so you buy a new machine instead.
For instance, all new iMac's now have proprietary drive software installed on the hard drives for heat monitoring. So now the only choice a user has is to bring their iMac into a Apple Store for a very expensive drive upgrade, which a person then decides the money is better spent buying a new machine.

Booting in Recovery HD after clean install of Lion

I just deleted my hard drive to do a clean install of Lion, but after I downloaded Lion from the recovery HD, my Macbook Pro will only boot in Recovery HD, and not in the Lion install manager as i was expecting.
When I try to select the Macintosh HD from the boot menu, it is not there, although I can see that I have 6 GB used space on the hard drive. (so I assume that is Lion)

Not sure what you are doing but you need at least 15GBs of space to download and install Lion.
You say you Deleted your hard drive? You can't delete the drive, it is a physical thing. You can remove the Macintosh HD partition using Disk Utility and that is what I think you did. You have to Re-Create that partition to install Lion on.
With Disk Utility open from the Recovery HD go to the Partition tab and highlight the partition box and click the Plus sign as the bottom. Or select One partition from the drop down list. Name it Macintosh HD and use Mac Extended (Journaled) as the format. Click Apply.
Then go back and select Install OS X. Then Continue.

Can I migrate data from "old" user account to new user after clean install?

I've just done a clean install of Snow Leopard on a MacBook Pro (I erased system drive before install). I've upgraded SL to 10.6.2 using a generic administrator account. And I have an exact bootable clone of my old data (SuperDuper backup on external drive).
I don't care about migrating all my old software; I'll reinstall it. But I would like to migrate system preferences, mail accounts, iCal calendars, and keychains etc. And some silly part of me wants to REname my username. (Also: I can't use Setup Assistant or Migration Assistant because some part of the old image has Microsoft Entourage hooks in Mail and MobileMe that I want to get rid of.)
So here's my question: if I create a new account with the NEW user name I want to start using, can I STILL then copy over my old data? I don't know which of the below stuff has my old user name embedded in the data. Here's the list:
Your data in ~/Documents
~/Library/Application Support/AddressBook (copy the whole folder)
~/Library/Calendars (copy the whole folder)
Also in ~/Library/Application Support (copy whatever else you need)
~ /Library/Keychains (copy the whole folder)
~/Library/Mail (copy the whole folder)
~/Library/Preferences/com.apple.mail.plist *This is a very important file which contains all email account settings and general mail preferences.
~ /Library/iTunes (copy the whole folder)
~/Library/Application Support/Safari (copy the whole folder)
~/Library/Application Support/iMovie (copy the whole folder)
~/Pictures/iPhoto library
~/Music/iTunes
~/Movies/iMovie
Thanks for any input! I know a lot of people here have done clean installs, so I appreciate anything you can share.

santranyc wrote:
I've just done a clean install of Snow Leopard on a MacBook Pro (I erased system drive before install). I've upgraded SL to 10.6.2 using a generic administrator account. And I have an exact bootable clone of my old data (SuperDuper backup on external drive).
I don't care about migrating all my old software; I'll reinstall it. But I would like to migrate system preferences, mail accounts, iCal calendars, and keychains etc. And some silly part of me wants to REname my username. (Also: I can't use Setup Assistant or Migration Assistant because some part of the old image has Microsoft Entourage hooks in Mail and MobileMe that I want to get rid of.)
what exactly do you mean by that? you can use Migration Assistant to migrate your user only (no applications). that should most likely suffice and i don't think Entourage will be a problem. you'll have to delete various entourage folders in your documents folder afterward if you don't plan on using it anymore.
So here's my question: if I create a new account with the NEW user name I want to start using, can I STILL then copy over my old data?
yes, as bdmarsha said, your user name is not mentioned anywhere in your home directory.
I don't know which of the below stuff has my old user name embedded in the data. Here's the list:
Your data in ~/Documents
~/Library/Application Support/AddressBook (copy the whole folder)
~/Library/Calendars (copy the whole folder)
Also in ~/Library/Application Support (copy whatever else you need)
~ /Library/Keychains (copy the whole folder)
~/Library/Mail (copy the whole folder)
~/Library/Preferences/com.apple.mail.plist *This is a very important file which contains all email account settings and general mail preferences.
~ /Library/iTunes (copy the whole folder)
~/Library/Application Support/Safari (copy the whole folder)
~/Library/Application Support/iMovie (copy the whole folder)
~/Pictures/iPhoto library
~/Music/iTunes
~/Movies/iMovie
Thanks for any input! I know a lot of people here have done clean installs, so I appreciate anything you can share.

IPhoto won't open after clean install followed by Time Machine restoration of data.

Hello.
I've just completed a clean install of OS X Yosemite followed by a restoration of my data from a Time Machine backup on my Mid 2010 iMac i3 3.2GHz.
Since the install iPhoto will no longer open. The icon in the dock bounces for a short while and then I receive the following error: iPhoto cannot be opened because of a problem. It then shows problem details and system configuration, the top part of which I post below:
Process:               iPhoto [466]
Path:                  /Applications/iPhoto.app/Contents/MacOS/iPhoto
Identifier:            com.apple.iPhoto
Version:               ???
Build Info:            iPhotoProject-910029000000000~1
App Item ID:           408981381
App External ID:       729712666
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
Responsible:           iPhoto [466]
User ID:               501
Date/Time:             2014-11-15 16:52:59.886 +0000
OS Version:            Mac OS X 10.10 (14A389)
Report Version:        11
Anonymous UUID:        34962211-17B1-3442-0D78-C0F697641981
Time Awake Since Boot: 920 seconds
Crashed Thread:        0
Exception Type:        EXC_BREAKPOINT (SIGTRAP)
Exception Codes:       0x0000000000000002, 0x0000000000000000
Application Specific Information:
dyld: launch, loading dependent libraries
Dyld Error Message:
Symbol not found: _OBJC_CLASS_$_RKMigratedLibrary
Referenced from: /Applications/iPhoto.app/Contents/MacOS/iPhoto
Expected in: /Applications/iPhoto.app/Contents/MacOS/../Frameworks/RedRock.framework/Version s/A/RedRock
in /Applications/iPhoto.app/Contents/MacOS/iPhoto
I then get a long list of binary image data which I haven't posted here (but can if required).
I believe the version of iPhoto I have is 9.6 as that update was installed a short while before I did the clean install of the OS.
I would try reinstalling the iPhoto again but cannot see a way to uninstall or to download again from the app store.
Has anybody seen this behaviour before and/or know of a fix or workaround so I can get my iPhoto program working again please?
Many thanks for your time.
Alex

Looking at that report I would reinstall iPhoto as a first step:
To re-install iPhoto
1. Put the iPhoto.app in the trash (Drag it from your Applications Folder to the trash)
2. Download it from the App Store to reinstall It's on your Purchases List* there.
*Sometimes iPhoto is not visible on the Purchases List. it may be hidden. See this article for details on how to unhide it.
http://support.apple.com/kb/HT4928
One question often asked: Will I lose my Photos if I reinstall?
iPhoto the application and the iPhoto Library are two different parts of the iPhoto programme. So, reinstalling the app should not affect the Library. BUT you should always have a back up before doing this kind of work. Always.

After Clean install, TM will see old backups, but not backup new data

I am having a problem with time machine. I was having problems with Mac and I ended up doing a re-install of leopard because I was having some issues with my OS and wanted a clean install. Now when I hook up my external HD that TM was using, it sees my old backups, and I can do restores from them, but it will not do any new backups. Any idea how to fix this?
Thanks

Aren't you better off to wipe out those old backups, and start a fresh new TM run?

Data recovery after 'clean install'

Similar Messages

Maybe you are looking for