05-31-2009 04:41 AM
Read previous posting on quick menu does not show
Activity Monitor indicates SymUIagent is not runni
CAH-Laptop:~ sysadmin$ defaults read /Library/Pref
{
privilegedlist = {
Controller = CustomListItems;
CustomListItems = (
{
Alias = <00000000 014a0003 00010000 c539b353 0000
CustomItemProperties = {
"com.apple.loginitem.legacyprefs" =
AliasData = 0;
Hide = 0;
Path = "/Applications/Utilities/TechTool\\U2122/T
};
};
Icon = <496d6752 0000001c 00000000 5359534c 00000
Name = TechToolProtection;
},
{
Alias = <00000000 00d60003 00010000 c539b353 0000
CustomItemProperties = {
"com.apple.loginitem.legacyprefs" =
Hide = 0;
Path = "/Library/Application Support/Symantec/Sym
};
};
Icon = <496d6752 0000001c 00000000 5359534c 00000
Name = SymUIAgent;
},
{
Alias = <00000000 00fe0003 00010000 c539b353 0000
CustomItemProperties = {
"com.apple.loginitem.legacyprefs" =
Hide = 0;
Path = "/Library/Application Support/Symantec/Sch
};
};
Icon = <496d6752 0000001c 00000000 5359534c 00000
Name = SymSecondaryLaunch;
}
);
};
}
CAH-Laptop:~ sysadmin$
06-01-2009 05:03 PM
Sorry for the problems. It sounds like UIAgent is crashing when it starts up. Please open the Console application (in your Application Utilities folder). In the list on the left please turn down the triangle for ~/Library then look for CrashReporter inside of there. Then look for the latest file that begins with SymUIAgent. Please open that file by selecting it, then copy & paste it to the forum here.
Thanks,
Ryan
06-04-2009 06:45 PM
Ryan --
Sorry for the delay.
In reviewing the console output for the current start-up, I have noted several security anomalies on start-up in the console log
6/4/09 8:12:38 PM kernel npvhash=4095
6/4/09 8:12:37 PM com.apple.launchctl.System[2] launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
6/4/09 8:12:37 PM com.apple.launchd[1] (com.symantec.Sched501-1.plist) Unknown key: SchedName
6/4/09 8:12:37 PM com.apple.launchd[1] (com.symantec.Sched502-3.plist) Unknown key: SchedName
6/4/09 8:12:37 PM com.apple.launchd[1] (com.symantec.Sched502-4.plist) Unknown key: SchedName
6/4/09 8:12:37 PM com.apple.launchd[1] (com.symantec.Sched502-5.plist) Unknown key: SchedName
6/4/09 8:12:37 PM com.apple.launchd[1] (com.symantec.Sched502-6.plist) Unknown key: SchedName
6/4/09 8:12:37 PM com.apple.launchd[1] (com.apple.blued) Unknown key for boolean: EnableTransactions
6/4/09 8:12:37 PM com.apple.launchd[1] (org.cups.cupsd) Unknown key: SHAuthorizationRight
6/4/09 8:12:37 PM com.apple.launchd[1] (org.ntp.ntpd) Unknown key: SHAuthorizationRight
6/4/09 8:12:37 PM com.apple.launchd[1] (org.x.privileged_startx) Unknown key for boolean: EnableTransactions
6/4/09 8:12:38 PM DirectoryService[11] Launched version 5.7 (v514.25)
6/4/09 8:12:38 PM kernel hi mem tramps at 0xffe00000
6/4/09 8:12:38 PM kernel PAE enabled
6/4/09 8:12:38 PM kernel 64 bit mode enabled
6/4/09 8:12:38 PM kernel Darwin Kernel Version 9.7.0: Tue Mar 31 22:52:17 PDT 2009; root:xnu-1228.12.14~1/RELEASE_I386
6/4/09 8:12:38 PM kernel standard timeslicing quantum is 10000 us
6/4/09 8:12:38 PM kernel vm_page_bootstrap: 445461 free pages and 13291 wired pages
6/4/09 8:12:38 PM kernel mig_table_max_displ = 79
6/4/09 8:12:38 PM kernel 105 prelinked modules
6/4/09 8:12:38 PM kernel AppleACPICPU: ProcessorApicId=0 LocalApicId=0 Enabled
6/4/09 8:12:38 PM kernel AppleACPICPU: ProcessorApicId=1 LocalApicId=1 Enabled
6/4/09 8:12:38 PM kernel Loading security extension com.apple.security.TMSafetyNet
6/4/09 8:12:38 PM kernel calling mpo_policy_init for TMSafetyNet
6/4/09 8:12:38 PM kernel Security policy loaded: Safety net for Time Machine (TMSafetyNet)
6/4/09 8:12:38 PM kernel Loading security extension com.apple.nke.applicationfirewall
6/4/09 8:12:38 PM kernel Loading security extension com.apple.security.seatbelt
6/4/09 8:12:38 PM kernel calling mpo_policy_init for mb
6/4/09 8:12:38 PM kernel Seatbelt MACF policy initialized
6/4/09 8:12:38 PM kernel Security policy loaded: Seatbelt Policy (mb)
6/4/09 8:12:38 PM kernel Copyright (c) 1982, 1986, 1989, 1991, 1993
6/4/09 8:12:38 PM kernel The Regents of the University of California. All rights reserved.
6/4/09 8:12:38 PM kernel MAC Framework successfully initialized
6/4/09 8:12:38 PM kernel using 9175 buffer headers and 4096 cluster IO buffer headers
6/4/09 8:12:38 PM kernel IOAPIC: Version 0x11 Vectors 64:87
6/4/09 8:12:38 PM kernel ACPI: System State [S0 S3 S4 S5] (S3)
6/4/09 8:12:38 PM kernel mbinit: done
6/4/09 8:12:38 PM kernel Security auditing service present
6/4/09 8:12:38 PM kernel BSM auditing present
6/4/09 8:12:38 PM kernel rooting via boot-uuid from /chosen: 18B3BABB-EE4A-3876-98AF-C0D62AB41029
6/4/09 8:12:38 PM kernel Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</k
6/4/09 8:12:38 PM kernel Could not enable ARP cache poisoning detection. Your computer will not be protected.
6/4/09 8:12:38 PM kernel BTCoexistence feature not supported!
6/4/09 8:12:38 PM kernel wl0: Broadcom BCM432b 802.11 Wireless Controller
6/4/09 8:12:38 PM kernel 5.10.38.35
6/4/09 8:12:38 PM kernel Got boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACP
6/4/09 8:12:38 PM kernel BSD root: disk0s2, major 14, minor 2
6/4/09 8:12:38 PM kernel FireWire (OHCI) Lucent ID 5901 built-in now active, GUID 0023dffffe92f0c4; max speed s800.
6/4/09 8:12:38 PM kernel AppleIntelCPUPowerManagement: initialization complete
6/4/09 8:12:38 PM kernel [HCIController][configurePM] power parent ready after 1 tries
6/4/09 8:12:38 PM kernel Jettisoning kernel linker.
6/4/09 8:12:38 PM kernel Resetting IOCatalogue.
6/4/09 8:12:38 PM kernel NVEthernet: Ethernet address 00:23:df:92:f0:c4
6/4/09 8:12:38 PM kernel AirPort_Brcm43xx: Ethernet address 00:23:6c:94:67:9a
6/4/09 8:12:38 PM mDNSResponder mDNSResponder-176.3 (Sep 30 2008 16:59:38)[16] starting
6/4/09 8:12:38 PM kernel GFX0: family specific matching fails
6/4/09 8:12:38 PM kernel IGPU: family specific matching fails
6/4/09 8:12:39 PM kernel Matching service count = 2
6/4/09 8:12:39 PM kernel Matching service count = 4
6/4/09 8:12:39 PM kernel Matching service count = 4
6/4/09 8:12:39 PM kernel Matching service count = 4
6/4/09 8:12:39 PM kernel Matching service count = 4
6/4/09 8:12:39 PM kernel Matching service count = 4
6/4/09 8:12:39 PM kernel Matching service count = 5
6/4/09 8:12:39 PM kextd[10] 422 cached, 0 uncached personalities to catalog
6/4/09 8:12:39 PM kernel NVDANV50HAL loaded and registered.
6/4/09 8:12:39 PM kernel Previous Shutdown Cause: -128
6/4/09 8:12:39 PM kernel IGPU: family specific matching fails
6/4/09 8:12:39 PM kernel AppleTyMCEDriver::probe(MacBookPro5,1)
6/4/09 8:12:39 PM kernel AppleTyMCEDriver::probe fails
6/4/09 8:12:39 PM kernel GFX0: family specific matching fails
6/4/09 8:12:39 PM kernel AGC: 2.8.11, HW version=1.7.3, flags:0, features:1
6/4/09 8:12:40 PM kernel GFX0: family specific matching fails
6/4/09 8:12:40 PM kernel IGPU: family specific matching fails
6/4/09 8:12:40 PM kernel AirPort: Link Down on en1
6/4/09 8:12:40 PM kernel KeyspanNHCI::init (0, 0, 1)
6/4/09 8:12:40 PM kernel KeyspanNHCI::probe (0)
6/4/09 8:12:40 PM kernel KeyspanNHCI::start (0)
6/4/09 8:12:40 PM kernel KeyspanNHCI::start provider location: NULL
6/4/09 8:12:40 PM kernel KeyspanNHCI::UIMInitialize
6/4/09 8:12:40 PM kernel KeyspanNHCI::setPowerState (0) (1)
6/4/09 8:12:40 PM kernel KeyspanNHCI::UIMCreateInterruptTransfer on Root Hub
6/4/09 8:12:40 PM kernel GFX0: family specific matching fails
6/4/09 8:12:40 PM kernel IGPU: family specific matching fails
6/4/09 8:12:40 PM kernel Matching service count = 0
6/4/09 8:12:40 PM kernel NVEthernet::mediaChanged - Link Down
6/4/09 8:12:40 PM configd[14] bootp_session_transmit: bpf_write(en1) failed: Network is down (50)
6/4/09 8:12:40 PM configd[14] DHCP en1: INIT transmit failed
6/4/09 8:12:40 PM configd[14] setting hostname to "CAH-Laptop.local"
6/4/09 8:12:41 PM kernel NVEthernet::mediaChanged - Link Up: Ctrl 1140, Adv 0de1-0200, Lpa 0020-0000 Autoneg capable 0
6/4/09 8:12:44 PM rpc.statd[30] statd.notify - no notifications needed
6/4/09 8:12:44 PM bootlog[45] BOOT_TIME: 1244164352 0
6/4/09 8:12:44 PM internetcleanupd[56] internetcleanupd starting up
6/4/09 8:12:44 PM /System/Library/CoreServices/loginwindow.app/Conte
6/4/09 8:12:44 PM /Library/Smith Micro/Common/schedulerdaemon[55] SmithMicro schedulerdaemon started.
6/4/09 8:12:44 PM fseventsd[38] bumping event counter to: 0x4f3ef8 (current 0x0) from log file '00000000004f0e99'
6/4/09 8:12:44 PM com.smithmicro.internetcleanupd[56] kextload serialization lock busy; sleeping (89 retries left)
6/4/09 8:12:44 PM SymSharedSettingsd[60] Settings server starting up.
6/4/09 8:12:45 PM com.symantec.navapdaemon[52] kextunload: unload kext /Library/Application Support/Symantec/AntiVirus/NortonAutoProtect.bundl
6/4/09 8:12:45 PM com.symantec.navapdaemon[52] kextload serialization lock busy; sleeping (89 retries left)
6/4/09 8:12:45 PM /usr/sbin/ocspd[69] starting
6/4/09 8:12:45 PM com.smithmicro.internetcleanupd[56] kextload: /System/Library/Extensions/NetworkSpyAlert.kext: no such bundle file exists
6/4/09 8:12:45 PM com.smithmicro.internetcleanupd[56] can't add kernel extension /System/Library/Extensions/NetworkSpyAlert.kext (file access/permissions) (run kextload on this kext with -t for diagnostic output)
6/4/09 8:12:46 PM com.symantec.navapdaemon[52] kextload: /Library/Application Support/Symantec/AntiVirus/NortonAutoProtect.bundl
6/4/09 8:12:48 PM com.apple.SystemStarter[28] Starting US-4A
6/4/09 8:12:48 PM org.ntp.ntpd[26] Error : nodename nor servname provided, or not known
6/4/09 8:12:48 PM ntpdate[87] can't find host time.apple.com
6/4/09 8:12:49 PM kernel KeyspanNHCI::setProperties systemName [Administrator’s MacBook Pro]
6/4/09 8:12:48 PM ntpdate[87] no servers can be used, exiting
6/4/09 8:12:49 PM kernel KeyspanNHCI::setProperties multicastAddr = 2ab0ffef
6/4/09 8:12:49 PM kernel KeyspanNHCI::setProperties udpPort = 3842
6/4/09 8:12:49 PM kernel KNUinitialize
6/4/09 8:12:49 PM kernel start Broadcast Listen (3842)
6/4/09 8:12:50 PM kernel NHCI: nbsQueryIdent on 3842
6/4/09 8:12:50 PM kernel KeyspanNHCI_UserClient::setServerAccess 0 items
6/4/09 8:12:50 PM kernel NHCI (3842) Status[10.25.47.42]: Query Ident
6/4/09 8:12:55 PM kernel NHCI: nbsQueryIdent on 3842
6/4/09 8:12:55 PM kernel NHCI (3842) Status[10.25.47.42]: Query Ident
6/4/09 8:12:57 PM kextd[10] writing kernel link data to /var/run/mach.sym
6/4/09 8:12:57 PM com.apple.SystemStarter[28] KeyspanNHCI driver found
6/4/09 8:12:57 PM com.apple.SystemStarter[28] starting KeyspanNHCI on port 3842 mA 2ab0ffef
6/4/09 8:12:59 PM loginwindow[33] Login Window Started Security Agent
6/4/09 8:12:59 PM kernel NHCI: nbsQueryIdent on 3842
6/4/09 8:12:59 PM /Library/StartupItems/NHCI/NHCImon[103] NHCImon 2.1b4 Oct 23 2007 10:01:45 starting
6/4/09 8:12:59 PM kernel NHCI (3842) Status[10.25.47.42]: Query Ident
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] initiate auto-connect on (4b8 813 2)
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] checking on printer (4b8 813 0 [RB0120412231643500]) on server 0 (0)
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] --- not found
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] KeyspanNHCI driver found
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] startUDPlisten
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] Driver table: vers: 1 receive: 1 UDPPort 3842 #servers 0 #dev 0
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] Getting UDP messages from driver...
6/4/09 8:13:00 PM NHCImon[103] 3891612: (connectAndCheck) Untrusted apps are not allowed to connect to or launch Window Server before login.
6/4/09 8:13:00 PM com.apple.SystemStarter[28] Thu Jun 4 20:13:00 CAH-Laptop.local NHCImon[103] <Warning>: 3891612: (connectAndCheck) Untrusted apps are not allowed to connect to or launch Window Server before login.
6/4/09 8:13:00 PM /Library/StartupItems/NHCI/NHCImon[103] _RegisterApplication(), FAILED TO establish the default connection to the WindowServer, _CGSDefaultConnection() is NULL.
6/4/09 8:13:00 PM com.apple.SystemStarter[28] _RegisterApplication(), FAILED TO establish the default connection to the WindowServer, _CGSDefaultConnection() is NULL.
6/4/09 8:13:04 PM kernel NHCI: nbsQueryIdent on 3842
6/4/09 8:13:04 PM /Library/StartupItems/NHCI/NHCImon[103] DrvrEvents returned unknown 0
6/4/09 8:13:04 PM kernel NHCI (3842) Status[10.25.47.42]: Query Ident
6/4/09 8:13:09 PM kernel NHCI: nbsQueryIdent on 3842
6/4/09 8:13:09 PM /Library/StartupItems/NHCI/NHCImon[103] DrvrEvents returned unknown 0
6/4/09 8:13:09 PM kernel NHCI (3842) Status[10.25.47.42]: Query Ident
6/4/09 8:13:15 PM internetcleanupd[56] com_allume_NSpySnDriverShim kernel service not found.
6/4/09 8:13:15 PM internetcleanupd[56] internetcleanupd: Network SpyAlert initialization failed. kext configuration failed.
6/4/09 8:13:30 PM loginwindow[33] Login Window - Returned from Security Agent
6/4/09 8:13:30 PM loginwindow[33] USER_PROCESS: 33 console
6/4/09 8:13:30 PM com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[98]) Exited: Terminated
6/4/09 8:13:30 PM com.apple.launchd[108] (org.x.startx) Unknown key for boolean: EnableTransactions
6/4/09 8:13:30 PM com.apple.launchd[1] (com.apple.aslmanager) Throttling respawn: Will start in 10 seconds
6/4/09 8:13:30 PM mDNSResponder[16] NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 172.16.2.5:53
6/4/09 8:13:30 PM InternetCleanupAgent[113] Error getting IOService iterator for NetBlockade.kext - kext is probably not loaded.
6/4/09 8:13:30 PM com.smithmicro.InternetCleanupAgent[113] InternetCleanupAgent: Unable to read Network SpyAlert settings from internetcleanupd
6/4/09 8:13:31 PM /System/Library/CoreServices/coreservicesd[61] SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(Carl Hubbard's Public Folder) returned -14135
6/4/09 8:13:31 PM /System/Library/CoreServices/coreservicesd[61] SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(Administrator's Public Folder) returned -14135
6/4/09 8:13:41 PM /Library/Application Support/Symantec/SymUIAgent/SymUIAgent.app/Content
6/4/09 8:13:44 PM NortonMissedTask - Child #1[143] About to launch child 1
6/4/09 8:13:44 PM /Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/
6/4/09 8:13:44 PM /Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/
6/4/09 8:13:44 PM /Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/
6/4/09 8:13:46 PM quicklookd[134] [QL ERROR] 'Creating thumbnail' timed out for '<QLThumbnailRequest /Users/carl/Desktop/Mid_Tenn_2009.pdf>'
6/4/09 8:13:48 PM -u[143] about to call FNNotifyByPath
6/4/09 8:13:48 PM -u[143] /Users/sysadmin/Library/Preferences/com.symantec.s
6/4/09 8:13:56 PM quicklookd[148] [QL ERROR] 'Creating thumbnail' timed out for '<QLThumbnailRequest /Users/carl/Desktop/Mid_Tenn_2009.pdf>'
6/4/09 8:14:03 PM ReportCrash[141] Formulating crash report for process SymUIAgent[133]
6/4/09 8:14:05 PM ReportCrash[141] Saved crashreport to /Users/carl/Library/Logs/CrashReporter/SymUIAgent_
6/4/09 8:14:04 PM com.apple.launchd[108] ([0x0-0xf00f].com.symantec.uiagent.application[133
6/4/09 8:14:43 PM mDNSResponder[16] NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 172.18.82.11:53
6/4/09 8:15:52 PM [0x0-0x18018].com.apple.Safari[153] Debugger() was called!
6/4/09 8:20:02 PM ntpd[26] time reset -3.637389 s
I am attaching the SymUIAgent crash report to a separate reply
06-04-2009 06:54 PM
Ryan --
Cannot append associated SymUIAgent crash report as it exceeds 20000 characters. How do I get it to you?
Thxs
CAH
06-05-2009 10:56 AM
06-09-2009 07:24 PM
Ryan --
Did you receive the crash logs? Sent them Friday.
Thxs
CAH
06-10-2009 05:02 PM
Sorry, I forgot to let you know I got them. I am at the Apple WWDC conference this week, and I am going on vacation the next week but I will try and look at them sometime before I go.
Thanks,
Ryan
07-06-2009 05:13 PM
Ryan --
Did you get an opportunity to review th crash logs
thxs
CAH Sr
07-07-2009 11:07 AM
Thanks for the crash logs. I think several people have had this same issue now. It appears that somehow, the Norton AutoProtect settings are becoming corrupted in some cases.
The easiest way to sovle this is to uninstall & reinstall, which will delete the offending settings file. If you don't want to uninstall, I can give you instructions on how to try and remove the corrupted file, but it may not work in all cases, so I would first suggest uninstalling and reinstalling the product unless that's not an option right now.
Sorry for the inconvienence.
