My iMac has booting weirdness

OK to explain the situation and what I have done so far.
My iMac has been working fine for ages then out of the blue 4 days ago instead of booting up it went to a grey screen with a tiny folder icon in the center of page with the finder logo on it. This flashed and changed to a folder icon with a question mark in it and then back again to the finder icon and so on.
So I rebooted my machine and the same thing happened again.
Then the third time after an age the fan would kick into overdrive and I would reboot it it once again without getting into the mac osx.
This time it loaded straight in.
Each day since then it has been the same process to get into the machine to load up. Once loaded up it works fine although I notice each time the trash can is showing as having stuff in it on the dock although it was emptied last before I shut down.
i then went into the disk utility thing and ran a verify disk permissions and it came up with loads of errors. But it says you have to repair your start up disk using the install dvd and boot onto that. So I did just that and it would not let me. It highlighted my hard drive in red and said SMART failing - yet in disk utility when in osx is does not say that.
What should I do?
I have a spare hard drive that I can use to replace this one if it does sound like it is the drive that is knackered - although I would love to know what would have caused it?
But I will need advice on how to back up my programs and especially all my emails and folders from imail and favourites from firefox.
I have over 60gig left free space on my hard drive so it isn't that my drive is full.
Thanks in advance
Ben

Ok, the first thing you need to do is clone/backup your hard drive. You need a firewire drive for it to be bootable, then I recommend getting SuperDuper! to make the clone. What it does is make an exact copy of your drive, with all your folder, desktop, mail etc etc, so that when you boot from the external clone, it's as if you were working from your original machine.
The reason your get the file with the question mark at startup is that your computer can't find a start-up drive. Having your drive diagnosed as failing by your install disc is bad news, as you know, you can't repair a drive when you're booted from it, so the install disc is a more valid indicator of incipient failure.
There is no particular cause for a failed drive, it could be bad sectors, physical deterioration, or any number of other reasons.
If you are under warranty, or have Apple Care, I would suggest calling them, if not, get a new firewire drive, and put the spare drive into your machine.
Please post back,
Miriam

Similar Messages

  • Imac has white screen and spinning wheel and will not boot up---after lion install

    imac has white screen and spinning wheel and will not boot up---after lion install

    Please read Gray screen appears during startup.

  • My home imac has crashed and will not boot up.

    Hi
    My home imac has crashed and will not boot up and I'm not sure where to start.
    It wouldn't shut down properly so I turned off the power, and now it won't go beyond the apple logo and timeer when I try to restart it.
    It is an imac (4 years old), Intel, running OS X, not sure which version, but probably the latest.
    Thanks
    Carol

    I would first reset the SMC:
    Shut down and unplug the Mac.
    Keep the Mac unplugged for at least fifteen seconds.
    Plug the Mac back in and do not turn it back on for at least five seconds.
    Press the power button to turn the Mac back on.
    Then I would reset the PRAM by rebooting the iMac while simultaneously holding the Command-Option-P-R keys until the machine restarts a second time.
    Let us know if these two procedures don't solve the problems.
    Hope this helps

  • -refurbished iMac has a 20GB partition for Boot Vamp with FAT format.  I want to remove this and replace it with a much bigger format with NTFS formats?

    My (new to me) Apple refurbished iMac has a 1TB hard drive. Running OS 10.6.7 Snow Leopard.  When I tried to install a Boot Camp partition, prior to installling Windows 7- 64 bit, I discovered that the machine had a 20 GB Boot Camp partition, too small for what I need.  HOw do I remove the 20 GB partition, and replace it with a 500 GB partition?

    I have a number of PC and Mac Pro running Windows Pro, and the OS only needs 80GB partition, plus whatever data etc.
    New but used does not sound like Apple Store (refurbished) Specials which would be a 'virgin' OS.
    I would reformat and do your own clean install.
    There may be something wrong and why it was left that way for one thing. May be a problem with the partition table.
    Boot from OS X DVD and you can usually try Disk Utility to "-" remove and then repair and get back, and you of course normally should be able to just use Boot Camp Assistant which is one of its functions - not just to create partition.
    For normal resizing, or creating the free space you need has to be in one contiguous chunk and not be fragmented, which is hard to imagine that 500GB is going to be intact.
    And whatever you do, rule #1 in the pdf guide: backup before beginning.
    http://www.apple.com/support/bootcamp

  • Help? iMac has no access to files. Only grey Screen. Boots up to Browser.

    I need help! My iMac either has been attacked by Virus or Worm. I can boot up to a Firefox Browser but that is all. The iMac has no files accessable and the Desktop is just a grey screen. I tried inserting the Mountain Lion Disk but could not access it, and it can not be ejected. No external Disk is accessable.
    I don't know what to do?

    If you're running Mountain Lion (there isn't normally a separate install/restore disk unless you specifically made one from the downloaded installer file, so not sure what disk you put in the drive) try booting into the Recovery HD, select Disk Utility, click on Macintosh HD and select 'repair disk'. If any changes are made click on repair disk again until you get a clear pass. Restart as normal from the Apple menu.
    Restart holding Command=r to boot in the Recovery. More info here:
    http://support.apple.com/kb/HT4718
    To eject the disk try restarting holding down the mouse button until the disk is ejected. Other possibilities for ejecting a stuck disk here (although you obviously need a working machine to be able to try them):
    http://osxdaily.com/2009/08/28/eject-a-stuck-disk-from-your-mac-dvd-super-drive/

  • My imac has a grey screen wont boot from hhd pls help

    hello,
    I have an imac from late 2008 with snow leopard. Late saturday evening 24 Mar I had powered
    down my imac then later turned it on. Now only a grey screen appears, nothing more. If I leave
    the imac on a folder with a question mark appears and blinks.
    I have tried the following to fix the problem and ALL HAVE FAILED:
    they are:
    1. resetting the pram. it doesnt work.
    2. booting from the installation cd. The imac doesn't even READ the cd, the screen remains grey and doesn't
    read the cd at all.
    3. booting in the safe mode. nothing happens, the screen remains grey.
    4. booting in apple hardware test mode: nothing happens screen remains grey.
    5. boot with option key pressed, so as to choose mac HD or my windows partition. nothing
    happens, the screen remains grey.
    All of these have failed to fix the problem.
    When I power on my imac I heard the chord, a slight spin of the HHD I'm sure that's what it is,
    and then nothing.grey screen.
    I have tried unpluggling the power cord for 15 seconds, reconnecting it, waitiing five seconds
    and then powering up the imac. it doesn't do any good.
    any help anyone can provide will be appreciated.
    do you think it is a hard drive error or failure? 
    why doesn't it read or boot from the instllation CD??  and yes I am using the correct disk.
    thanks folks for yr help and opinions.
    Alfonso

    Ok. so you stated the screen remains gray. Is it just plain gray? Does it have a folder with a question mark on it? Do you see the little pin wheel thingy?
    You also stated you can't boot from the install disc. Turn the machine on and put the disc in the drive. Shut the machine down by holding down the start button for five seconds or so and wait a further 20 seconds. Restart the machine and hold down the 'C' key before the chime and keep holding it down until the machine boots form the disc. It can take up to three minutes to boot from the disc. Once it has booted from the disc select the language and go to the Utilities menu at the top and run the disc repair utility.
    The hardware test is built in and should work regardless. Turn the machine on and hold down the 'D' key before the chime and keep holding it down until the hardware test starts.
    I fear you have not given enough time or used the correct procedure to do the tests you state you have done.

  • IMac has a disk stuck and wont boot

    Hi all,
    My iMac has an installation disk stuck in the drive. Having been turned off, it now won't open in safe boot mood or some or the other short key problem solvers I have googled, and the disk won't eject. The opening screen doesn't even get to the spinning grey circle, just the main apple logo appears and the cd drive makes a repetitive noise.
    I dont know with where the problem lies, the non-booting computer or the non-ejecting disk. Please help.

    Have you tried booting up whilst holding down the mouse button until it ejects?

  • IMac has a blue screen does not boot up

    IMAC does boot up shows a blue screen

    iMac G5: Fails to startup
    http://support.apple.com/kb/HT2173?viewlocale=en_US

  • My iMac has been shutting down abruptly

    My new iMac has been shutting down abruptly the past week and after that I have to wait several minutes to try and see if it will turn on. At first I thought it was overheating, but even after being on less than an hour it shuts down. Does anyone know the reason why this is happenig? Oh, and I was just browsing on the internet, there were no weird programs runnig and the anti virus scan says it's clean.

    Back up all data immediately as your boot drive may be failing.
    This diagnostic procedure will query the system log for messages that may indicate a hardware fault. It changes nothing, and therefore will not, in itself, solve your problem.
    If you have more than one user account, these instructions must be carried out as an administrator. I've tested them only with the Safari web browser. If you use another browser, they may not work as described.
    Triple-click anywhere in the line below on this page to select it:
    syslog -k Sender kernel -k Message CReq 'GPU D|I/O|nspace-h|n Cause: -|timed? ?o' | tail | open -ef
    Copy the selected text to the Clipboard (command-C).
    Launch the Terminal application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
    Paste into the Terminal window (command-V).
    The command may take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear.
    A TextEdit window will open with the output of the command. Normally the command will produce no output, and the window will be empty. If the TextEdit window (not the Terminal window) has anything in it, post it — the text, please, not a screenshot. The title of the TextEdit window doesn't matter, and you don't need to post that.

  • I have no idea whether there is a causal relationship but since moving to Lion and iCloud, my iMac has become so slow that I wind up having to crash and restart most of the time.  This is true regardless of the app I am using at the time.  The specs of th

    I have no idea whether there is a causal relationship but since moving to Lion and iCloud, my iMac has become so unresponsive that I wind up having to crash and restart most of the time.  This is true regardless of the app I am using at the time.
    The specs of this iMac are:
    iMac 27 inch, late 2009 model with a 3.0 GHz Intel Core 2 Duo with 4 Gig 1067 Mhz DDR3, using OSX Lion 10.7.4 (11E53)
    I have Mackeeper installed and according to the scans I have run, everything is fine. No virus, no junk files . . . no problems at all . . .
    Except that for all practical purposes, my computer isn't working. 
    I am nearly totally deaf and live in an isolated, rural area of NW Missouri and this computer is what I mainly rely on to contact friends, relatives and business associtates!
    Any and all suggestions will be greatly appreciated!

    First, back up all data immediately, as your boot drive may be failing.
    If you have more than ten or so files or folders on your Desktop, move them, temporarily at least, somewhere else in your home folder.
    If iCloud is enabled, disable it.
    Disconnect all wired peripherals except keyboard, mouse, and monitor, if applicable. Launch the usual set of applications you use when you notice the problem.
    Step 1
    Launch the Activity Monitor application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Activity Monitor in the page that opens.
    Select the CPU tab of the Activity Monitor window.
    Select All Processes from the menu in the toolbar, if not already selected.
    Click the heading of the % CPU column in the process table to sort the entries by CPU usage. You may have to click it twice to get the highest value at the top. What is it, and what is the process? Also post the values for % User, % System, and % Idle at the bottom of the window.
    Select the System Memory tab. What values are shown in the bottom part of the window for Page outs and Swap used?
    Step 2
    You must be logged in as an administrator to carry out this step.
    Launch the Console application in the same way as above. Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left.
    Post the 50 or so most recent messages in the log — the text, please, not a screenshot.
    Important: Some personal information, such as your name, may appear in the log. Edit it out before posting.

  • I'm on a DD-WRT wireless internet service. Could this be causing my iMac to act weird ?

    I'm on a DD-WRT wireless internet service. Could this network be causing my iMac to act weird ?

    From reading this site and others, looks as if there could be thousands of possiblities/remedies.
    I agree. Aside from the very remote possibility that running Java for that "trusted" website allowed some kind of infection--and if it was some kind of exploit, I doubt it would manifest itself in any way you'd notice--there are just too many different things going on for me to give any help.
    Why were you thinking it was the router/DD-WRT? What if you connect directly by Ethernet?
    Some generic thrings to try.
    See if a Safe Boot helps. Shift at the startup chime and give it much longer to boot than normal. Don't open anything, leave it a minute or two and then restart normally.
    SMC reset
    http://support.apple.com/kb/ht3964
    You could try the shotgun approach and reinstall, but first you must be certain to have a completely reliable backup, in case you need to restore.

  • My iMac has a1T hard drive,and it is full!. So i look for archives and there are 6000 mailrecoveredfrom gmail, and i can not erase them. Is it a virus? What can i do?

    My iMac has a 1T hard drive and it is full ! So i look for the archives and there are6000 mails recovered from gmail and i can not erase them. Is it a virus?
    What can i do ?

    It sounds like a runaway process is filling up your volume.
    Boot in safe mode. First, disconnect all wired peripherals except keyboard, mouse, and monitor, if applicable, and remove all aftermarket expansion cards. The instructions provided by Apple are as follows:
    Be sure your Mac is shut down.
    Press the power button.
    Immediately after you hear the startup tone, hold the Shift key. The Shift key should be held as soon as possible after the startup tone, but not before the tone.
    Release the Shift key when you see the gray Apple icon and the progress indicator (looks like a spinning gear).
    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including your login items.
    Use a tool such as the one linked below to explore your volume and find out what's taking up the space:
    OmniDiskSweeper - Products - The Omni Group

  • HT5313 How can I check if my iMac has this update? OS X Lion v10.7.5 Update

    How can I check if my iMac has this update? OS X Lion v10.7.5 Update

    It's not technically challenging, but it isn't clearly necessary. In any case here's how:
    Reinstalling Lion/Mountain Lion Without Erasing the Drive
    Boot to the Recovery HD: Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
    Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the main menu. Repair the Hard Drive and Permissions as follows.
    When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list.  In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive.  If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu.
    Reinstall Lion/Mountain Lion: Select Reinstall Lion/Mountain Lion and click on the Continue button.
    Note: You will need an active Internet connection. I suggest using Ethernet if possible because it is three times faster than wireless.

  • Is it possible to see how many hours an iMac has been "running"?

    Is it possible to see how many hours an iMac has been "running"?

    From the Finder, click the Apple logo at top left, choose About This Mac and then from the window that opens choose System Report.
    Scroll down to the Software heading and in the System Siftware overview, you'll see Time since boot.

  • PLEASE HELP! How can I tell if my Imac has been hacked?

    PLEASE HELP! How can I tell if my Imac has been hacked? I see a few people have asked this question but the responses tended to be advice on what to do once you've been hacked, not what can done to find out if you have been hacked. I have a late 2012 model imac. My sharing was off and remote logging was off. I use an external router that send wireless to about 4 consoles in the flat. I don't think I have any firewalls up (now looking like a mistake). I think I'm possibly being hacked  due to abnormal behaviour and most recently my camera was turned off all day (no LED) then I went to record something on Photo Booth, the application popped up displaying an image of me getting dressed (nightmare!) which happened hours earlier when the camera was off. This image quickly then disappeared and the camera began working normally. Very strange and alarming. Please help me. Any advice would be very much appreciated. Thanks.

    1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
    Don't be put off merely by the seeming complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
    2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
    There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
    3. Below are instructions to run a UNIX shell script, a type of program. All it does is to collect information about the state of the computer. That information goes nowhere unless you choose to share it. However, you should be cautious about running any kind of program (not just a shell script) at the behest of a stranger. If you have doubts, search this site for other discussions in which this procedure has been followed without any report of ill effects. If you can't satisfy yourself that the instructions are safe, don't follow them. Ask for other options.
    Here's a summary of what you need to do, if you choose to proceed:
    Copy a line of text in this window to the Clipboard.
    Paste into the window of another application.
    Wait for the test to run. It usually takes a few minutes.
    Paste the results, which will have been copied automatically, back into a reply on this page.
    The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
    4. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
    5. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
    6. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
    Triple-click anywhere in the line of text below on this page to select it:
    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts 51 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports 'com.autodesk.AutoCad com.evenflow.dropbox com.google.GoogleDrive' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 ` route -n get default|awk '/e:/{print $2}' ` 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' /^ *$|CSConfigDot/d;s/^ */  /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/;/Shared/!s/\/Users\/[^/]+/~/g ' ' s/^ +//;5p;6p;8p;12p;' ' {sub(/^ +/,"")};NR==6;NR==13&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { if(n<200) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/root/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1000) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/d;/(etc|Preferences)\//s/^\.\/[^/]+//p;' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| ","||kMDItem'${p[35]}'=");sub("^.."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[9]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/ { next;} /%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]" "$1;b=b$1;} END { if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n  "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n  [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|POSIX sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n  ...and %s more line(s)\n",l-L);} ' ' /^ +[NP].+ =/h;/^( +D.+[{]|[}])/{ g;s/.+= //p;};' ' /^ +B/{ s/.+= |(-[0-9]+)?\.s.+//g;p;} ' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' 's/0/Off/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil PlistBuddy whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test );c2=(com.apple.loginwindow\ LoginHook '-c Print /L*/P*/loginw*' '-c Print L*/P*/*loginit*' '-c Print L*/Saf*/*/E*.plist' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' '-c Print\ :'${p[35]}' 2>&1' '-c Print\ :Label 2>&1' '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'Beac|caug|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cgh] ! -name *ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '-L {/{S*/,},}L*/Lau* -type f' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Ca*/*/Ex,Compon,Ex,In,iTu,Keyb,Mail/B,P*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,pam.d,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' -i4TCP:0-1023 com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' );N1=${#c2[@]};for j in {0..8};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents launchd Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0(){ [[ "$v" ]]&&echo "$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "$s"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;A2 0 $((N1+1)) 2;C0;A1 0 $N1 1;C0;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;A2 4 20 21;B7 6;B2 9;A4 14 7 52 9;B2 10;B6 9 10 4;C3 25;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;D13 24 24 32 31;D13 25 37 32 33;A1 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D23 14 1 48 42;D12 34 43 53 44;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 14 2 48 43;D13 4 5 32 1;D22 4 4 50 0;D13 14 3 49 5;D12 26 48 59 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
    Copy the selected text to the Clipboard by pressing the key combination command-C.
    7. Launch the built-in Terminal application in any of the following ways:
    Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    Open LaunchPad. Click Utilities, then Terminal in the icon grid.
    Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
    8. If you see an error message in the Terminal window such as "syntax error," enter
    exec bash
    and press return. Then paste the script again.
    9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
    If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
    10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
    [Process completed]
    to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report the results. No harm will be done.
    11. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
    At the top of the results, there will be a line that begins with the words "Start Time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
    If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
    12. When you post the results, you might see the message, "You have included content in your post that is not permitted." It means that the forum software has misidentified something in the post as a violation of the rules. If that happens, please post the test results on Pastebin, then post a link here to the page you created.
    Note: This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
    Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Maybe you are looking for

  • Serious problems with latest version of iTunes 12.1.0.71

    After updating to the latest version of iTunes 12.1.0.71,my ipad mini is not being picked up by itunes even though its showing its connected and i can see it  Explorer under My Computer!Even third party programs like Tong Bu assistant aren't working

  • 2LIS_02_ITM Delta field

    Hi , May I know on what basis (Which is the field in R/3) the following PO extractors will extract the Delta records. 1. 2LIS_02_ITM 2. 2LIS_02_HDR 3. 2LIS_02_SCL. Thanks Krishna

  • Ora-01097 error message in oracle 10g as

    Hi, This is the error message(below) that i am getting while restarting http server after modification. Thanks in advance. An error was encountered trying to retrieve configuration data. Failed to initialize configuration management user session.. An

  • Solaris JVM question

    Hi, I am a newbie on Solaris and have found that there is a significant degredation in performance when my java application is run on a Solaris JVM as opposed to a Windows JVM. I'm running with the -server option which has helped, but was wondering i

  • SAP_CCMS_MAPPING_SCHEDULER question

    Hi All our BI systems cancelling a job  SAP_CCMS_MAPPING_SCHEDULER  after patch apply. We gone through the OSS note 1154422 and it explains that Error in CCMS method definition settings. we need to login as system admin and use tcode RZ21 to restart