Can boot 10.15 only in Safe Mode - normal boot hangs after file vault pw

Beta 1. I assume kernel ext from 3rd parties. What’s best way to narrow down?

Answered by marcsheep in 362758022

I had to remove LaunchDaemons for Sentinel One (via terminal in recovery). Are you running any sort of anti-virus scanning application like Sentinel One, Sophos, PAN Traps, Cylance, etc?

Only in Safe Mode here as well! 😟 Lots of kernel panics:



EtreCheck version: 5.2 (5C006)

Report generated: 2019-06-04 02:51:08

Download EtreCheck from https://etrecheck.com

Runtime: 2:47

Performance: Excellent


Problem: Other problem

Description:

Booting only on Safe Mode


Major Issues:

Anything that appears on this list needs immediate attention.


Kernel panics - This system has experienced kernel panics. This could be a sign of hardware failure.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.


Small backup drive - Time Machine backup drive is too small.

Apps crashing - There have been numerous app crashes.

Clean up - There are orphan files that could be removed.

Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.

System modifications - There are a large number of system modifications running in the background.


Hardware Information:

iMac (Retina 5K, 27-inch, 2017)

iMac Model: iMac18,3

1 3.4 GHz Intel Core i5 (i5-7500) CPU: 4-core

16 GB RAM - Upgradeable

BANK 0/DIMM0 - 4 GB DDR4 2400 ok

BANK 0/DIMM1 - 8 GB DDR4 2400 ok

BANK 1/DIMM0 - 4 GB DDR4 2400 ok

BANK 1/DIMM1 - Empty


Video Information:

Radeon Pro 570 - VRAM: 4 GB

iMac 5120 x 2880


Drives:

disk0 - APPLE HDD ST1000DM003 1.00 TB (Mechanical - 7200 RPM)

Internal SATA 6 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 793.02 GB

disk2 [APFS Virtual drive] 820.70 GB (Shared by 5 volumes)

disk2s1 - M*****************a (APFS) (Shared - 639.43 GB used)

disk2s2 - Preboot (APFS) [APFS Preboot] (Shared - 44 MB used)

disk2s3 - Recovery (APFS) [Recovery] (Shared - 520 MB used)

disk2s4 - VM (APFS) [APFS VM] (Shared - 1 MB used)

disk2s5 - Macintosh HD (APFS) (Shared - 10.04 GB used)

disk0s3 - B******P (MS-DOS FAT12) 206.46 GB

disk0s4 518 MB


disk1 - APPLE SSD SM0032L 28.00 GB (Solid State - TRIM: Yes)

Internal PCI-Express 8.0 GT/s x2 NVM Express

disk1s1 - EFI [EFI] 315 MB

disk1s2 [APFS Container] 27.69 GB


Mounted Volumes:

disk2s1 - M*****************a 820.70 GB (166.16 GB free)

APFS

Mount point: /S****m/Volumes/D**a


disk2s4 - VM [APFS VM] (Shared - 1 MB used)

APFS

Mount point: /private/var/vm


disk2s5 - Macintosh HD 820.70 GB (166.16 GB free)

APFS

Mount point: /


Network:

Interface en0: Ethernet

Interface en6: iPhone

Interface en7: iPhone 2

Interface en5: iPad

Interface en9: iPad 2

Interface en1: Wi-Fi

802.11 a/b/g/n/ac

Proxy Auto Config

Interface en8: iPhone 3

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge


System Software:

10.15 10.15 (19A471t)

Time since boot: Less than an hour

Safe Mode: Enabled


Notifications:

/Applications/Transmission.app

one notification

~/Downloads/EtreCheckPro.app

one notification

/Applications/Qbserve.app

4 notifications

/Library/Application Support/Paragon Software/com.paragon-software.ntfs.notification-agent.app

5 notifications


Security:

Gatekeeper: Enabled

System Integrity Protection: Enabled

Antivirus apps: MalwareBytes


Unsigned Files:

Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist

Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart

Details: Exact match found in the whitelist - probably OK


Launchd: ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist

Executable: ~/Library/Application Support/Steam/SteamApps/steamclean Public

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/org.chromium.chromoting.plist

Executable: /Library/PrivilegedHelperTools/org.chromium.chromoting.me2me.sh --run-from-launchd

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.chaos_group.swrm.plist

Executable: /Applications/ChaosGroup/V-Ray/Swarm 1.4/swrm.bin

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.mingjie.mjrecorder.agent.plist

Executable: /Library/Audio/Plug-Ins/HAL/MJRecorderDevice.driver/Contents/MacOS/MJRecorder-agent

Details: Exact match found in the whitelist - probably OK


Kernel Extensions:

/Library/Application Support/VirtualBox

[Not Loaded] VBoxDrv.kext (Oracle America, Inc., 5.2.14)

[Not Loaded] VBoxNetAdp.kext (Oracle America, Inc., 5.2.14)

[Not Loaded] VBoxNetFlt.kext (Oracle America, Inc., 5.2.14)

[Not Loaded] VBoxUSB.kext (Oracle America, Inc., 5.2.14)


/Library/Extensions

[Not Loaded] EnergyDriver.kext (Intel Corporation Apps, 2.0 - SDK 10.12)

[Not Loaded] ufsd_NTFS.kext (Paragon Software GmbH, 15.1.26 - SDK 10.10)

[Not Loaded] MSMFramebuffer.kext (SHAPE GmbH, 3.5 - SDK 10.13)

[Not Loaded] MSMVideoDevice.kext (SHAPE GmbH, 3.5 - SDK 10.13)


System Launch Agents:

[Not Loaded] 16 Apple tasks

[Loaded] 172 Apple tasks

[Running] 120 Apple tasks


System Launch Daemons:

[Not Loaded] 35 Apple tasks

[Loaded] 186 Apple tasks

[Running] 114 Apple tasks

[Other] 2 Apple tasks


Launch Agents:

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-01-04)

[Not Loaded] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2018-01-04)

[Not Loaded] com.adobe.CS5ServiceManager.plist (? 40cdc1ff - installed 2011-03-02)

[Not Loaded] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-05-20)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-05-20)

[Not Loaded] com.bjango.istatmenus.agent.plist (Bjango Pty Ltd - installed 2018-11-23)

[Not Loaded] com.bjango.istatmenus.status.plist (Bjango Pty Ltd - installed 2018-11-23)

[Not Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-05-20)

[Not Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-05-20)

[Not Loaded] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-11-09)

[Not Loaded] com.oracle.java.Java-Updater.plist (? 5e11b3eb - installed 2013-12-10)

[Not Loaded] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2017-10-30)

[Not Loaded] com.radiosilenceapp.agent.plist (Juuso Salonen - installed 2016-05-04)

[Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2018-08-03)

[Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2018-08-03)

[Not Loaded] org.chromium.chromoting.plist (? 81572da9 - installed 2001-01-01)

[Not Loaded] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-10-26)

[Not Loaded] virtualcdrw.daemon.plist (? 806348a7 - installed 2009-11-29)


Launch Daemons:

[Not Loaded] com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - installed 2019-01-10)

[Not Loaded] com.adobe.SwitchBoard.plist (? 856489a3 - installed 2012-01-28)

[Not Loaded] com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2018-01-04)

[Not Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-05-20)

[Not Loaded] com.apple.installer.osmessagetracing.plist (? dbb717cc - installed 2019-05-01)

[Not Loaded] com.bjango.istatmenus.daemon.plist (Bjango Pty Ltd - installed 2018-11-23)

[Not Loaded] com.bjango.istatmenus.fans.plist (? 9a713d46 - installed 2018-11-23)

[Not Loaded] com.bjango.istatmenus.installerhelper.plist (Bjango Pty Ltd - installed 2017-12-16)

[Not Loaded] com.chaos_group.swrm.plist (? 42c94799 - installed 2018-11-11)

[Not Loaded] com.chaos_group.vrol.plist (CHAOS SOFTWARE OOD - installed 2018-11-11)

[Not Loaded] com.disc-soft.DAEMONTools.PrivilegedHelper.plist (? e2dccff8 - installed 2014-09-05)

[Not Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2019-05-20)

[Not Loaded] com.icyblaze.iDocumentHelper.plist (? edbdffed - installed 2011-11-11)

[Not Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-19)

[Not Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25)

[Not Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2015-10-08)

[Not Loaded] com.mingjie.mjrecorder.agent.plist (? 8ce67b23 - installed 2017-06-14)

[Not Loaded] com.oracle.java.Helper-Tool.plist (? faaa5b2d - installed 2013-12-10)

[Not Loaded] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2018-06-28)

[Not Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2019-05-31)

[Not Loaded] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2017-10-30)

[Not Loaded] com.radiosilenceapp.nke.plist (Apple - installed 2019-05-31)

[Not Loaded] com.spotflux.Spotflux.plist (? c3e7a673 - installed 2013-04-30)

[Not Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2018-07-24)

[Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2018-08-03)

[Not Loaded] com.tunnelbear.mac.tbeard.plist (TunnelBear, Inc. - installed 2019-01-27)

[Not Loaded] org.cindori.CCAuth.plist (? c06c94d2 - installed 2014-05-08)

[Not Loaded] org.eyebeam.SelfControl.plist (Charlie Stigler - installed 2019-05-30)

[Not Loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-10-26)

[Not Loaded] org.virtualbox.startup.plist (? 700b9385 - installed 2019-01-10)


User Launch Agents:

[Not Loaded] com.BlueStacks.AppPlayer.Service.plist (? 0 - installed 2019-01-10)

[Not Loaded] com.BlueStacks.AppPlayer.UninstallWatcher.plist (BlueStack Systems, Inc. - installed 2019-05-31)

[Not Loaded] com.BlueStacks.AppPlayer.Updater.plist (BlueStack Systems, Inc. - installed 2019-01-10)

[Not Loaded] com.adobe.ARM.***.plist (? 0 - installed 2014-03-12)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-05-20)

[Not Loaded] com.facebook.videochat.***.plist (Apple - installed 2019-06-03)

[Not Loaded] com.hp.devicemonitor.plist (HP Inc. - installed 2019-05-31)

[Not Loaded] com.hp.productresearch.plist (HP Inc. - installed 2019-05-31)

[Not Loaded] com.skype.skype.shareagent.plist (? 0 - installed 2017-11-23)

[Not Loaded] com.spotify.webhelper.plist (Spotify - installed 2019-05-31)

[Not Loaded] com.sucofyeh.agent.plist (? 0 - installed 2018-11-04)

[Not Loaded] com.tunnelbear.mac.tbeara.plist (TunnelBear, Inc. - installed 2018-07-01)

[Not Loaded] com.valvesoftware.steamclean.plist (? 0 - installed 2019-01-17)

[Not Loaded] org.virtualbox.vboxwebsrv.plist (Oracle America, Inc. - installed 2018-06-29)


User Login Items:

NightOwl.app (Benjamin Kramser - installed 2018-10-13)

(Application - /Applications/NightOwl.app)


Qbserve.app (Ivan Miroshnichenko - installed 2019-05-27)

(Application - /Applications/Qbserve.app)


Things3.app (App Store - installed 2018-12-07)

(Application - /Applications/Things3.app)


Internet Plug-ins:

AdobeExManDetect: AdobeExManDetect 1.1.0.0 (? - installed 2017-12-14)

AdobeAAMDetect: 3.0.0.0 (Adobe Systems, Inc. - installed 2018-01-04)

FlashPlayer-10.6: 22.0.0.192 (? - installed 2017-12-14)

Flash Player: 22.0.0.192 (? - installed 2017-12-14)

AdobePDFViewer: 11.0.0 (? - installed 2017-12-14)

Flip4Mac WMV Plugin: 3.2.0.16 (? - installed 2017-12-14)

iPhotoPhotocast: 7.0 (Apple - installed 2017-12-14)

SharePointBrowserPlugin: 14.4.4 (? - installed 2017-12-14)

Silverlight: 4.0.60531.0 (? - installed 2017-12-14)

Mathematica: 9.0.1.4092152 (? - installed 2017-12-14)

JavaAppletPlugin: Java 8 Update 102 build 14 (? - installed 2017-12-14)


User Internet Plug-ins:

thinkorswim plugin_x86_64: thinkorswim_x86_64 1.0.0.0 (? - installed 2016-05-25)

tossc plugin_x86_64: TOS Sharing Center plugin_x86_64 1.0.0.0 (? - installed 2016-05-25)


Audio Plug-ins:

MJRecorderDevice: 1.1 (? - installed 2017-12-14)

MMAudio Device: 1.0.0 (? - installed 2017-12-14)


Safari Extensions:

AdBlock.safariextz - BetaFish, Inc. - https://getadblock.com (installed 2018-10-04)

Adblock Plus.safariextz - Eyeo GmbH - https://adblockplus.org/ (installed 2017-01-10)

Evernote Web Clipper.safariextz - Evernote Corp. - http://evernote.com (installed 2017-11-13)

FastestTube.safariextz - Kwizzu - http://fastesttube.kwizzu.com/ (installed 2016-04-03)

FreeStyler.safariextz - FreeStyler.WS - https://freestyler.ws/ (installed 2016-06-04)

Grammarly for Safari.safariextz - Grammarly - https://www.grammarly.com (installed 2017-11-22)

Ka-Block!.safariextz - David Graham & Josh Peek - http://kablock.com (installed 2018-02-05)

Mindful Browsing.safariextz - Robin Barooah - http://www.mindfulbrowsing.com (installed 2014-05-26)

Newsfeed Blocker for Facebook.safariextz - Nolan Dey - https://github.com/ndey96/FBNewsfeedBlocker (installed 2017-11-17)

OpenIE.safariextz - Parallels - http://www.parallels.com (installed 2016-05-20)

WasteNoTime.safariextz - Bumblebee Systems, Inc. - http://www.bumblebeesystems.com/ (installed 2018-08-06)

WebSnapperProExtension - App Store (installed )

YouTube5.safariextz - Connor McKay - http://www.verticalforest.com/youtube5-extension/ (installed 2014-05-13)

uBlock.safariextz - The uBlock Development Team - https://www.ublock.org/ (installed 2018-05-28)

uBlock Origin.safariextz - Raymond Hill/Ellis Tsung - https://www.github.com/el1t/uBlock-Safari (installed 2018-09-03)


3rd Party Preference Panes:

AirServer Preferences (installed 2017-12-14)

Authoxy (installed 2017-12-14)

Flash Player (installed 2017-12-14)

Flip4Mac WMV (installed 2017-12-14)

FUSE (installed 2018-06-17)

Hosts (installed 2014-09-19)

MacFUSE (installed 2017-12-14)

NTFS (installed 2017-10-30)

Perian (installed 2011-07-23)


Time Machine:

Skip System Files: No

Auto backup: Yes

Volumes being backed up:

M*****************a: Disk size: 820.70 GB - Disk used: 654.54 GB

Destinations:

S*****G [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 76

Oldest backup: 2017-07-24 13:52:22

Last backup: 2019-05-31 11:03:32

3 local snapshots

Oldest local snapshot:

Last local snapshot:


Performance:

System Load: 2.44 (1 min ago) 1.36 (5 min ago) 0.60 (15 min ago)

Nominal I/O speed: 5.04 MB/s

File system: 24.17 seconds

Write speed: 282 MB/s

Read speed: 1120 MB/s


Top Processes Snapshot by CPU:

Process (count) CPU (Source - Location)

accountsd 62.50 % (Apple)

CalendarAgent 32.54 % (Apple)

IMDPersistenceAgent 14.48 % (Apple)

secd 12.76 % (Apple)

securityd 10.24 % (Apple)


Top Processes Snapshot by Memory:

Process (count) RAM usage (Source - Location)

EtreCheckPro 583 MB (Etresoft, Inc.)

CVMCompiler (2) 274 MB (Apple)

WindowServer 114 MB (Apple)

iconservicesagent (2) 104 MB (Apple)

softwareupdated 95 MB (Apple)


Top Processes Snapshot by Network Use:

Process Input / Output (Source - Location)

syncdefaultsd 621 KB / 6 MB (Apple)

mDNSResponder 232 KB / 79 KB (Apple)

CalendarAgent 95 KB / 109 KB (Apple)

apsd 22 KB / 32 KB (Apple)

cloudd 31 KB / 16 KB (Apple)


Top Processes Snapshot by Energy Use:

Process (count) Energy (0-100) (Source - Location)

accountsd 25 (Apple)

CalendarAgent 17 (Apple)

IMDPersistenceAgent 12 (Apple)

suggestd 5 (Apple)

CalNCService 5 (Apple)


Virtual Memory Information:

Physical RAM: 16 GB


Free RAM: 9.13 GB

Used RAM: 3.83 GB

Cached files: 3.04 GB


Available RAM: 12.17 GB

Swap Used: 0 B


Software Installs (past 30 days):

Install Date Name (Version)

2019-06-04 XProtectPlistConfigData (2103)


Clean up:

/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

/Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Executable not found

/Library/LaunchAgents/virtualcdrw.daemon.plist

/usr/bin/virtualcdrwd

Executable not found

~/Library/LaunchAgents/com.adobe.ARM.***.plist

/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

Executable not found

/Library/LaunchDaemons/com.disc-soft.DAEMONTools.PrivilegedHelper.plist

/Library/PrivilegedHelperTools/com.disc-soft.DAEMONTools.PrivilegedHelper

Executable not found

/Library/LaunchAgents/com.adobe.CS5ServiceManager.plist

/Library/Application Support/Adobe/CS5ServiceManager/CS5ServiceManager.app/Contents/MacOS/CS5ServiceManager

Executable not found

/Library/LaunchDaemons/com.icyblaze.iDocumentHelper.plist

/Library/Application Support/iDocument/iDocumentHelper

Executable not found

~/Library/LaunchAgents/com.skype.skype.shareagent.plist

/Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent

Executable not found

/Library/LaunchDaemons/org.cindori.CCAuth.plist

/Library/PrivilegedHelperTools/org.cindori.CCAuth

Executable not found

~/Library/LaunchAgents/com.sucofyeh.agent.plist

/Applications/Focus.app/Contents/MacOS/Agent.app/Contents/MacOS/Agent

Executable not found

/Library/LaunchDaemons/com.apple.installer.osmessagetracing.plist

/System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer

Executable not found

/Library/LaunchDaemons/com.adobe.SwitchBoard.plist

/Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

Executable not found

/Library/LaunchDaemons/com.spotflux.Spotflux.plist

/Library/PrivilegedHelperTools/com.spotflux.Spotflux

Executable not found

~/Library/LaunchAgents/com.BlueStacks.AppPlayer.Service.plist

/Applications/BlueStacks.app/Contents/MacOS/bstservice

Executable not found



Diagnostics Information (past 7 days):

2019-06-04 02:42:35 WindowServer Crash (38 times)

Executable: /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer


2019-06-04 02:03:11 com.malwarebytes.HelperTool CPU

Executable: /Library/PrivilegedHelperTools/com.malwarebytes.HelperTool


2019-06-03 23:31:02 systemmigrationd Crash

Executable: /System/Library/PrivateFrameworks/SystemMigration.framework/Versions/A/Resources/systemmigrationd

Details:

dyld3 mode

*** Terminating app due to uncaught exception 'NSInvalidArgumentExcept

ion', reason: '*** -[NSURL initFileURLWithPath:isDirectory:]: nil stri

ng parameter'

terminating with uncaught exception of type NSException

abort() called



2019-06-03 23:28:30 Kernel Panic


2019-06-03 20:01:32 Setup Assistant.app Crash

Executable: /System/Library/CoreServices/Setup Assistant.app

Details:

dyld3 mode

*** Terminating app due to uncaught exception 'NSInternalInconsistency

Exception', reason: 'Invalid parameter not satisfying: !isnan(newOrigi

n.x)'

terminating with uncaught exception of type NSException

abort() called



2019-06-03 17:23:31 Google Chrome.app Crash

Executable: /Applications/Google Chrome.app


2019-05-31 11:45:37 Bartender 3.app Crash (2 times)

Executable: /Applications/Bartender 3.app

Details:

dyld: launch, loading dependent libraries




End of report

I’m having the same issue, I log in and the progress bar goes to 66% then the spinning wheel comes up and hangs. I have booted to safe mode and deleted any launch items from Library and ~/Library but still no joy


Tried setting up a clean account but that only shows in safe mode boot so thats not helpful to diagnose an issue.


Any other thoughts fromn anyone?

I’m facing the same exact problem On my iMac 5K. Safe mode only, and a very laggy safe mode with photoanalysisid hogging all the resources.

Accepted Answer
Can boot 10.15 only in Safe Mode - normal boot hangs after file vault pw
 
 
Q