Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 120 replies
  • Subscribers 6 subscribers
  • Views 1044613 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos 9 causes Mavericks to freeze

symt

Hi Everyone,

I recently got the top of the line iMac, which I was very happy with.

As I was a Mac user before, I knew which software is great and Sophos Anti-Virus for Mac was one of those.

So I had Sophos installed, from the beginning and over the time I noticed one big annoying issue:

The Mac froze from time to time. Whenever the Mac was running the whole day, it wouldn't survive without a hard-reboot any day.

It always showed the same behavior:

 1. Internet connectivity drops

 2. The beachball begins to appear, when hovering some icons in the top menu bar

 3. Programs that are connected to the internet begin to freeze (beachball)

I can't open any other programs after the Mac is in that state, the only way out is a hard reboot.

One of the last entries in the console after such a freeze is always from Sophos, like:


 

30.11.13 13:41:04,607    SophosWebD[106]    <SMENode: 0x7fedaac7a6d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
30.11.13 13:42:16,742    SophosWebD[106]    <SMENode: 0x7fedac51d7d0> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
30.11.13 13:43:34,626    SophosSXLD[107]    20131130 124334.626 P       107 T      1522 ------ 2             - Warning: EARLY TIMEOUT: dns context 31 has 9568 ms before it should time out\n
30.11.13 13:43:36,420    SophosSXLD[107]    20131130 124336.419 P       107 T      1522      2 2   - sxe_write_to(): Error writing to socket=7: (64) Host is down
30.11.13 13:43:36,420    SophosSXLD[107]    20131130 124336.419 P       107 T      1522 ------ 1   - Failed to send SXL request 4097: error=ERROR_INTERNAL
30.11.13 13:44:37,225    SophosSXLD[107]    20131130 124437.224 P       107 T      1522 ------ 2             - Warning: EARLY TIMEOUT: dns context 29 has 9275 ms before it should time out\n
30.11.13 13:44:38,652    SophosSXLD[107]    20131130 124438.652 P       107 T      1522      2 2   - sxe_write_to(): Error writing to socket=7: (64) Host is down
30.11.13 13:44:38,652    SophosSXLD[107]    20131130 124438.652 P       107 T      1522 ------ 1   - Failed to send SXL request 4097: error=ERROR_INTERNAL
23.11.13 11:48:54,983    SophosWebD[92]    <SMENode: 0x7fa7a141c300> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 11:53:45,719    SophosWebD[92]    <SMENode: 0x7fa7a4500160> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 11:53:45,727    SophosWebD[92]    <SMENode: 0x7fa7a400c410> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 11:53:45,735    SophosWebD[92]    <SMENode: 0x7fa7a444acd0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 12:16:44,382    SophosWebIntelligence[92]    tcp_connection_destination_prepare_complete 6783 connectx to IP_REMOVED_BY_ME#80 failed: 65 - No route to host
23.11.13 12:16:44,382    SophosWebIntelligence[92]    tcp_connection_handle_destination_prepare_complete 6783 failed to connect
23.11.13 12:28:19,935    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:19,937    SophosSXLD[107]    daemon is running
23.11.13 12:28:21,593    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:24,000    kernel[0]    Notice - new kext com.sophos.kext.sav, v9.0.53 matches prelinked kext but can't determine if executables are the same (no UUIDs).
23.11.13 12:28:25,373    SophosAutoUpdate[112]    AlreadyRegistered
23.11.13 12:28:25,857    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:25,857    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:25,860    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:25,869    SophosSXLD[107]    sxl started
23.11.13 12:28:25,870    SophosSXLD[107]    sxl configuration succeeded
23.11.13 12:28:28,000    kernel[0]    Sophos Anti-Virus on-access kext activated
23.11.13 12:28:59,660    SophosWebD[106]    <SMENode: 0x7ff010d031e0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
...
23.11.13 12:29:24,610    SophosWebD[106]    <SMENode: 0x7ff012a1e070> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 12:29:26,116    SophosWebD[106]    <SMENode: 0x7ff01290e8d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 12:29:26,123    SophosWebD[106]    <SMENode: 0x7ff0128550f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=54 "Der Vorgang konnte nicht abgeschlossen werden. Verbindung wurde von der Gegenstelle zurückgesetzt"
23.11.13 12:29:26,130    SophosWebD[106]    <SMENode: 0x7ff010c1e1f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
...

   ("Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe" means "The operation couldn't be completed. Broken pipe.")

I was hoping desperately, that Sophos isn't the root cause for that freeze-behavior. I tried to remove it completely, and then re-installed again - this did not solve the issue. I then completely removed Sophos again, this appeared to be the solution. Sophos is gone, and I'm not experiencing the freezes anymore.

I'm now using a different Mac AV product, not from Sophos (:smileysad: which I'm not too happy about).

So my question: Has anyone experienced the same behavior, is this a known issue?


Another thing I'm not too happy about, is that there are still residues from the Sophos AV on my system.

For example, I'm getting those errors in the console:

08.12.13 15:08:11,860 com.apple.security.XPCKeychainSandboxCheck[1735]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
08.12.13 15:08:11,860 com.apple.security.XPCKeychainSandboxCheck[1735]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
08.12.13 15:12:31,672 com.apple.security.XPCKeychainSandboxCheck[1973]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
08.12.13 15:12:31,672 com.apple.security.XPCKeychainSandboxCheck[1973]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
09.12.13 14:06:40,338 com.apple.security.XPCKeychainSandboxCheck[280]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
09.12.13 14:06:40,338 com.apple.security.XPCKeychainSandboxCheck[280]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
...

  And there is a keychain access object, which is read only and can't be removed at all!

  I tried everything - also from /System/Library/Keychains I can't remove it, as it's not listed.

Does anyone know, how to remove those leftovers?

Many thanks & best regards,
symt

 

:1014893


This thread was automatically locked due to age.
  • 0

    As I said in a previous post I had the same problem. I did not uninstall sophos 9, I only turned both options in web protection off and everything was fine. After a while the same problem started happening again and I discovered that sophos was updated to version 9.0.7 and both options in web protection were automatically turned on. So I turned them off and everything was back to normal again. So I guess there is something wrong with web protection and watching flash videos or maybe safari extensions. I hope it gets solved soon.

    :1015841
  • 0

    I am occasionally experiencing system freezes on my MacBook, and the messages in my /var/log/system.log brought me here, because they are quite similar to csdibiase's experience described earlier in this thread on Feb 6.

    By freeze I mean programs attempting to do I/O are blocking for several minutes. If a program does not do I/O, such as an SSH connection, it does not freeze... though before long the system becomes unusable as lower-level programs like Finder get stuck trying to do I/O. This occurs perhaps a couple times per week. I haven't been able to correlate it with anything in particular.

    If I wait long enough, the freeze apparently ends and the system comes back just fine. The last time took about 10 minutes, which is just what csdibiase reported recently. I'm not sure if it's always 10 minutes or not...most times I am not patient enough and I just force the power off and on.

    I have run hardware diagnostics on my Macbook, but all pass. I have been using Sophos on my Mac for a couple years now without issues. I am not certain Sophos is the cause, but it's now one of my top suspects.

    Details:

    MacBook 5,1 with 8 GB of RAM

    OS X 10.9.2

    Sophos Anti-Virus for Mac (Home Edition) version 8.0.23C

    Internal SSD that I installed a couple years ago

    Time Machine (over a network to a Time Capsule)

    Running all the time: Dropbox, Google Chrome, iTerm2 running ssh

    The last time the freeze occurred was earlier today. I had just opened my Macbook at 13:23. The freeze started at about 13:25 and ended at about 13:35. After the freeze I looked in /var/log and noticed that there were new messages in system.log. I was away from home at the time, and so my Macbook could not reach my TimeCapsule to do its backup... I wonder if that is related somehow. Note the "sav" messages near the end, which are similar to what csdibiase reported.

    Mar 5 13:23:41 mymacbook SophosAntiVirus[16659]: reloading scheduled scans...
    Mar 5 13:24:49 mymacbook com.apple.backupd[17181]: Starting automatic backup
    Mar 5 13:24:49 mymacbook kernel[0]: nspace-handler-set-snapshot-time: 1394051091
    Mar 5 13:24:49 mymacbook com.apple.mtmd[61]: Set snapshot time: 2014-03-05 13:24:51 -0700 (current time: 2014-03-05 13:24:49 -0700)
    Mar 5 13:25:19 mymacbook com.apple.backupd[17181]: Attempting to mount network destination URL: afp://John%20Smith;AUTH=SRP@TimeCapsule._afpovertcp._tcp.local/Data
    Mar 5 13:30:12 mymacbook PressAndHold[17117]: Exception in proxy <IMKTextInput> respondsToSelector: uniqueClientIdentifierString
    name = NSPortTimeoutException
    reason = connection timeout: did not receive reply
    userInfo = (null)
    (
    0 CoreFoundation 0x00007fff8b00225c __exceptionPreprocess + 172
    1 libobjc.A.dylib 0x00007fff926f4e75 objc_exception_throw + 43
    2 CoreFoundation 0x00007fff8b00210c +[NSException raise:format:] + 204
    3 Foundation 0x00007fff932ac222 -[NSConnection sendInvocation:internal:] + 2401
    4 Foundation 0x00007fff932b57b2 -[NSProxy respondsToSelector:] + 102
    5 InputMethodKit 0x00000001071d392d -[IPMDServerClientWrapper _clientTryRespondsToSelector:] + 71
    6 InputMethodKit 0x00000001071d968d -[IPMDServerClientWrapper uniqueClientIdentifierString] + 57
    7 InputMethodKit 0x00000001071db1bd -[IMKServer paletteWillTerminate] + 315
    8 PressAndHold 0x00000001071bdd6c PressAndHold + 7532
    9 Foundation 0x00007fff9328e0f4 __NSFireTimer + 96
    10 CoreFoundation 0x00007fff8af69564 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
    11 CoreFoundation 0x00007fff8af6909f __CFRunLoopDoTimer + 1151
    12 CoreFoundation 0x00007fff8afda5aa __CFRunLoopDoTimers + 298
    13 CoreFoundation 0x00007fff8af248e5 __CFRunLoopRun + 1525
    14 CoreFoundation 0x00007fff8af240b5 CFRunLoopRunSpecific + 309
    15 HIToolbox 0x00007fff8defba0d RunCurrentEventLoopInMode + 226
    16 HIToolbox 0x00007fff8defb7b7 ReceiveNextEventCommon + 479
    17 HIToolbox 0x00007fff8defb5bc _BlockUntilNextEventMatchingListInModeWithFilter + 65
    18 AppKit 0x00007fff915123de _DPSNextEvent + 1434
    19 AppKit 0x00007fff91511a2b -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 122
    20 AppKit 0x00007fff91505b2c -[NSApplication run] + 553
    21 AppKit 0x00007fff914f0913 NSApplicationMain + 940
    22 libdyld.dylib 0x00007fff8d6655fd start + 1
    )
    Mar 5 13:30:12 mymacbook PressAndHold[17117]: IMK Exception in client(wrapper):[0x60000026b8c0] InputController:[0x600000272f00]
    Mar 5 13:30:14 mymacbook PressAndHold[17117]: Exception in proxy <IMKTextInput> -[IPMDServerClientWrapper bundleIdentifier]
    name = NSPortTimeoutException
    reason = connection timeout: did not receive reply
    userInfo = (null)
    (
    0 CoreFoundation 0x00007fff8b00225c __exceptionPreprocess + 172
    1 libobjc.A.dylib 0x00007fff926f4e75 objc_exception_throw + 43
    2 CoreFoundation 0x00007fff8b00210c +[NSException raise:format:] + 204
    3 Foundation 0x00007fff932ac222 -[NSConnection sendInvocation:internal:] + 2401
    4 CoreFoundation 0x00007fff8af601c4 ___forwarding___ + 452
    5 CoreFoundation 0x00007fff8af5ff78 _CF_forwarding_prep_0 + 120
    6 InputMethodKit 0x00000001071d7270 -[IPMDServerClientWrapper bundleIdentifier] + 65
    7 InputMethodKit 0x00000001071d99c2 -[IPMDServerClientWrapper uniqueClientIdentifierString] + 878
    8 InputMethodKit 0x00000001071db1bd -[IMKServer paletteWillTerminate] + 315
    9 PressAndHold 0x00000001071bdd6c PressAndHold + 7532
    10 Foundation 0x00007fff9328e0f4 __NSFireTimer + 96
    11 CoreFoundation 0x00007fff8af69564 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
    12 CoreFoundation 0x00007fff8af6909f __CFRunLoopDoTimer + 1151
    13 CoreFoundation 0x00007fff8afda5aa __CFRunLoopDoTimers + 298
    14 CoreFoundation 0x00007fff8af248e5 __CFRunLoopRun + 1525
    15 CoreFoundation 0x00007fff8af240b5 CFRunLoopRunSpecific + 309
    16 HIToolbox 0x00007fff8defba0d RunCurrentEventLoopInMode + 226
    17 HIToolbox 0x00007fff8defb7b7 ReceiveNextEventCommon + 479
    18 HIToolbox 0x00007fff8defb5bc _BlockUntilNextEventMatchingListInModeWithFilter + 65
    19 AppKit 0x00007fff915123de _DPSNextEvent + 1434
    20 AppKit 0x00007fff91511a2b -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 122
    21 AppKit 0x00007fff91505b2c -[NSApplication run] + 553
    22 AppKit 0x00007fff914f0913 NSApplicationMain + 940
    23 libdyld.dylib 0x00007fff8d6655fd start + 1
    )
    Mar 5 13:30:14 mymacbook PressAndHold[17117]: IMK Exception in client(wrapper):[0x60000026b8c0] InputController:[0x600000272f00]
    Mar 5 13:30:14 mymacbook PressAndHold[17117]: -[IMKServer paletteWillTerminate] : NSInvalidArgumentException : *** -[__NSSetM addObject:]: object cannot be nil
    Mar 5 13:34:50 mymacbook kernel[0]: sav: [EWOULDBLOCK][vnode:0xffffff803130d690][original:0xffffff803130d690][callback: 0 count:262 ] onaccessctl_check:1717 result:0 disconnected:0
    Mar 5 13:34:50 mymacbook kernel[0]: sav: current scan list:
    Mar 5 13:34:50 mymacbook kernel[0]: sav: (pid 61 [mtmd], vnode 0xffffff803130d690 [/Users/mday/Library/Application Support/Google/Chrome/Default/Session Storage/003418.log], [context 0xffffff80258d7930] [result 0] [setup 0] [disconnected 0] [vfsbusy 0]) - 1 waiter(s)
    Mar 5 13:34:50 mymacbook kernel[0]: sav: available kctl entries: 9
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: NULL target or context; request:0 kctl_entry:0xffffff8030738000
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: not SAV_KCTL_REQ_COMPLETE, return ENOMEM
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: NULL target or context; request:0 kctl_entry:0xffffff8030738000
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: not SAV_KCTL_REQ_COMPLETE, return ENOMEM
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: NULL target or context; request:0 kctl_entry:0xffffff8030738000
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: not SAV_KCTL_REQ_COMPLETE, return ENOMEM
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: NULL target or context; request:0 kctl_entry:0xffffff8030738000
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: not SAV_KCTL_REQ_COMPLETE, return ENOMEM
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: NULL target or context; request:3 kctl_entry:0xffffff8030738000
    Mar 5 13:34:50 mymacbook kernel[0]: sav: onaccess_send: SAV_KCTL_REQ_COMPLETE, intercheck_done()
    Mar 5 13:34:51 mymacbook kernel[0]: nspace-handler-unblock: did not find token 125644
    Mar 5 13:34:51 mymacbook com.apple.mtmd[61]: handler unblock failed. (status=-1/errno=2/token=125644/fd=5)

    :1016157
  • 0

    After Mavericks 10.9.2 the situation continues with Sophos 9. I also found my other Mavericks Mac, which is rock solid, is actually running Sophos 8.

    With the beach ball spinning I managed to capture my lastest system panic. http://pastebin.com/BXNTsBrm

    Of note is 

    21 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 (CoreFoundation) [0x7fff9503f731]

    Steming from

    Safari

    1. PID:             474
    2. Event:           hang
       
       
       
       
       
       
    :1016243
  • 0

    From my own observations of this issue over both Mountain Lion and Mavericks with various at-the-time-updated installations of Sophos:

    Removing sophos fixes all issues!

    the issue appears to be a correlation between sophos autoupdate and time machine backup happening simultaneously (or the offline equivalent that is included in mavericks for when the TM disc is not present - it saves to your primary hard disc when TM isn't available so even without TM the issue will still occur on Mavericks when sophos is installed!) Whenever I have the issue I can usually see that Time Machine is running a backup and opening the sophos autoupdate window usually informs me that an update is in progress (once the system becomes usable again after the ~10 minute IO freeze).

    :1016279
  • 0

    I have the automatic time machine switched off, but still the freeze happens to me.

    Today, when the computer froze,

    I tried to plug in a new keyboard and voila the beachball went away. Don't know, if that will work again, though.

    :1016387
  • 0

    Now that one got my attention.  I have been getting Mac crashes ever since upgrading to Mavericks.  The latest crash report I sent to Apple actually sent me to a page saying Sophos on-access protection may be causing it.

    Well, what seemed to trigger the crashes most reliably was a USB interaction - specifically, plugging in a USB drive (which drive does not matter, I have many).  I turned off on-access scanning and the problem vanished; I turned it back on and it came back.  I'm hoping there is a fix somewhere; I like Sophos but I like stability better.

    :1016425
  • 0

    Thanks for all the posts.  The "me too" type posts show it's affecting several users - anyone who is reading this, who is also affected, and hasn't posted may want to do so to increase awareness and add some insight.

    As a reminder of what  said on page three regarding how to troubleshoot this issue...

    bobcook wrote:
    • turn off all of the features that interact with the network: Web Protection (both settings) and Live Protection. This will rule out any issues that involve the network.
    • Run in this configuration long enough to convince yourself its either better, worse, or no different.
    • Assuming its different (and perhaps better), turn on one feature at a time to see which is the culprit.

    Example showing disabling Live and Web Protection options in preferences

    Disable network scanning features in SAV 

     

    Important:

     

    • If this resolves the problem switch on only one feature at a time and do not switch on more until you can 100% say if the problem is, or is not, being caused.  If the problem is definitely not seen then move on to the next feature.
    • Once you reach the point where the issue is created (consistently) ensure you have tried various combinations of the settings (both on and off) so you know the minium about that needs to be enabled to create the problem: post to the forum what you have found out.
    • Doing this will help narrow down the which part of SAV needs to be enabled to cause the error.
    • We can't create this in the lab (as it sounds like you need to be using the Mac like a regular user would) so it's better to request users from the community become testers and help out (Linus' Law!).
    • Until there is more information on exactly when/where/how you create the problem we won't be able to re-create the issue and implement a fix.

    Thanks for all you help on this.

    :1016431

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0

    First time chipping in.

    I've had this problem for the last few days.

    Last time I had this problem, I had only disabled the first setting in Web protection. I've now disabled only the second setting, will report in if that fixes it.

    :1016481
  • 0

    I just want to report that I just spent most of my morning with this exact freeze scenario described in the first thread.  

    Installed Sophos last night, started a scan and went to bed.  Woke up at 6am noticed the scan stopped not even halfway through, decided to scan later and dismissed the scan progress window.

    Then the freezes started, 3 in a row, less than an hour apart.

    basically applications would stop responding, beachball, then after 10 mintues I had to kill the machine with the power button.

    I also noticed that in at least one instance the wifi seemed to die before the freeze and in another instance, the TimeMachine backup was in progress.

    Uninstalled Sophos and it's not been a couple of hours with no freezes.

    Running  OSX 10.9.2 on a MBP 15 retina late 2013.

     

    Attached is my entire system log for today (with the 3 reboots).

    :1016519
  • 0

    Hi pepelucho,

    Sorry to you and everyone experieincing this problem. Thank you for attaching your system log files. It helps in determinig what the system contention is. 

    Looking through your logs it seems that Memory Dialog by RockySand Studios (com.rockysandstudio.Memory-Diag.Launch-Helper). I don't believe this application has any role to play in the system freezing but if I may ask, can you kindly disable it? I would like to know if and how the scanner affects its operation.

    Also can your logs kindkly send me the log files that end with or contain the words "shutdown or stalls"?  In addition, if it is no trouble at all kindly send me the Sophos Anti-Virus log files.

    Thanks for your assistance. 

    :1016535
Unfiltered HTML