Hi Leute,
ich brauche dringend eure Hilfe. Soeben gehe ich an meinem Mac und sehe, wie sich der Cursor fröhlich bewegt. Zuerst dachte ich, dass es vielleicht ein Grafikfehler ist, aber dann müsste ich zusehen, wie auf meine Festplatte zugegriffen wurde und sich im Finder öffnete!!!
Ich habe sofort mein MacBook Air ausgemacht.

Was mache ich nun als nächstes?

WLAN aus oder vom Netz nehmen und dann Passwörter ändern.
Wenn Dein Computer vom Netz ist, dann kann kein Anderer darauf zugreifen.
Die Suche wie und wer kannst Du dann in Ruhe durchführen.

Schau in den Systemeinstellungen unter "Freigaben" nach, ob die Bildschirmfreigabe aktiviert ist. Ggf. deaktivieren. "Entfernte Anmeldung" auch, wenn du das nicht selbst brauchst.
Dann würde ich dringend mein(e) Passwörter ändern.

Wie schon oben geschrieben:

Bei "Freigaben" schauen ob
"Entfernte Anmeldung"
"Bildschirmfreigabe" oder
"Entfernte Verwaltung" aktiviert ist und das deaktivieren.
Passwörter ändern auch bei deiner Apple ID

Bei iCloud schauen ob "Zugang zu meinem Mac" aktiviert ist.

Lass mal Etrecheck laufen und schau, welche Dienste aktiv sind bzw. was beim Start so geladen wird..

Vom Netzwerk trennen, also Airport aus und oder Ethernet per Adapter abstecken.

Hast du Teamviewer oder ähnliche Programme installiert? Wenn ja, dürfte da ein zu einfaches Paßwort eine Einfallstür sein. Auch in der Systemeinstellung Freigaben / Sharing gibt es screensharing, entfernte Anmeldung oder entfernte Verwaltung. Wenn da etwas an ist, dann kann man auch dadurch auf deinen Mac zugreifen. Hast du vor kurzem irgendetwas installiert?

Andererseits könnte es auch, sofern du in einem Büro mit mehreren Leuten arbeitest ein Scherz oder Versehen sein. Sprich jemand hat entweder deine Buetoothmaus vertauscht oder wollte eine neue bei sich anmelden und wundert sich nun das die Maus an seinem Rechner nicht funktioniert...

Wenn von dem alles nicht zutrifft dann brauchen wir ein Protokoll von Etrecheck. Da kann man so einiges sehen was bei dir alles installiert ist.

Dann wir es später auf eine Neuinstallation deines System und der Programme herauslaufen. Dann keine Wiederherstellung aus dem Backup sondern schön alles "zu Fuß" zurück kopieren damit nicht irgendeine Schadsoftware oder falsche Einstellung auch mit wiederhergestellt wird.

Hinweise auf Logins über Apple eigenes Sharing findest du übrigens auch in den Log Dateien.
Vielleicht ist hier auch ein Hinweis zu finden wer sich wie eingelogged hat.

Hast du ein Wacom Grafiktablett angeschlossen?

WLAN ist aus, jetzt sollte nichts passieren.

Total komisch: Ich wollte eben das Passwort vom MBA ändern, doch das alte Passwort wollte nicht mehr funktionieren und so konnte ich auch kein neues absenden. Dann habe ich gemerkt, dass ich beim Hochfahren kein Passwort wie sonst eingeben musste. Also hab ich den Bereich "altes Passwort" frei gelassen und könnte ein neues Passwort eingeben.

Bei den Freigaben ist nichts angeklickt.
Teamviewer oder sowas habe ich nicht.
Hab letztens nur Lidl-Fotos installiert auf der Windows VM.
Scherz von Kollegen kann ich sicher ausschließen.
Ein Grafiktablett habe ich nicht, jedoch seit gestern den Apple Pencil und das iPad pro.

Etrecheck hab ich gerade gemacht. Das Ergebnis muss ich jetzt nur noch hier rüber bekommen zum iPad.

michimaier: wo und wie komme ich an die log Dateien?

Dienstprogramme > Konsole

@ michi: und dann? Wonach suche ich wo? Sorry, hab da keinen Plan.

Nach dem Datum und der Zeit suchen, als das auftrat. Dann alles was da passierte posten.

Könnte es sein, dass du ein Passwort an verschieden stellen benutzt?
Mal eben kommt man nämlich nicht in ein system und steuert es fern.

Ist denn ARD (Apple Remote Desktop) aktiviert?

was ist denn mit Mouse over Effekten? Das sehe ich hin und wieder in Windows. Zusammen mit einer "Irritation" des Maussensors könnte sich so ein Fehlerbild ergeben.

Mouse over scheint´s auch für Mac zu geben...

ich hab das damals (10.10) gefunden, wenn ich in die Suche (oben rechts)
"screen" eingegeben habe.
Zusätzlich hat sich bei mir "root" angemeldet - somit habe ich auch mit der Suche nach "root" etwas gefunden.
Nimm dir mal "SYSTEMPROTOKOLLANFRAGEN" "Alle Meldungen"
Da müsstest du etwas finden...
Ich glaube in der "System.log" , weiter unten in der Liste waren auch Einträge drin.
Wenn du über den Punkt nichts findest, kannst du auch händisch in den Dateien suchen, die sind ja nach Uhrzeit sortiert.

edit:
Ich habe damals das Passwort geändert was funktioniert hat.
ABER:
manchmal wünschte ich ich hätte das Passwort gelassen und den Angreifer sozusagen beim nächsten Angriff zu beobachten (natürlich mit diversen Massnahmen)

Ansonsten habe ich gerade geschaut:
Such mal nach:

ARDAgent.app
screensharing

Hatte ich schon mal als ich einen Tag VNC laufen hatte ohne Passwort. Habe später rausgefunden dass sich jemand mit mexikanischer IP Adresse auf meinen Mac geschaltet hatte.

Hier sind mal die Etrecheck Daten:

EtreCheck version: 2.6.4 (224)
Report generated 17.12.15, 13:09
Runtime 1:32
Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.

Hardware Information: (What does this mean?)
13" MacBook Air (Mid 2012)
[Click for Technical Specifications]
[Click for User Guide]
MacBook Air - model: MacBookAir5,2
1 2 GHz Intel Core i7 CPU: 2-core
8 GB RAM Not upgradeable
BANK 0/DIMM0
4 GB DDR3 1600 MHz ok
BANK 1/DIMM0
4 GB DDR3 1600 MHz ok
Bluetooth: Good - Handoff/Airdrop2 supported
Wireless: Unknown Battery: Health = Check Battery - Cycle count = 191 - SN = D8624560JWKDKRNAN

Video Information: (What does this mean?)
Intel HD Graphics 4000
Color LCD 1440 x 900

System Software: (What does this mean?)
OS X El Capitan 10.11.2 (15C50) - Time since boot: less than an hour

Disk Information: (What does this mean?)
APPLE SSD SM256E disk0 : (251 GB) (Solid State - TRIM: Yes)
EFI (disk0s1) <not mounted> : 210 MB
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
Macintosh HD (disk1) / : 249.77 GB (46.32 GB free)
Core Storage: disk0s2 250.14 GB Online

USB Information: (What does this mean?)
Apple Inc. FaceTime HD Camera (Built-in)
Apple Card Reader
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: (What does this mean?)
Apple Inc. thunderbolt_bus

Gatekeeper: (What does this mean?)
Anywhere

Kernel Extensions: (What does this mean?)
/Applications/Boxcryptor.app
[loaded] com.boxcryptor.BCFS.filesystems.bcfs (3.0.9 - SDK 10.9) [Click for support]

/Applications/Parallels Desktop.app
[not loaded] com.parallels.kext.hypervisor (10.3.0 29227 - SDK 10.7) [Click for support]
[not loaded] com.parallels.kext.netbridge (10.3.0 29227 - SDK 10.7) [Click for support]
[not loaded] com.parallels.kext.usbconnect (10.3.0 29227 - SDK 10.7) [Click for support]
[not loaded] com.parallels.kext.vnic (10.3.0 29227 - SDK 10.7) [Click for support]

/Library/Extensions
[not loaded] com.rane.driver.sixtytwo.10.6 (1.2.3f1 - SDK 10.6) [Click for support]

/System/Library/Extensions
[not loaded] com.serato.usb.kext (2.3.0) [Click for support]

Launch Daemons: (What does this mean?)
[loaded] com.adobe.SC.FPFeedbackService-1.0.plist [Click for support]
[loaded] com.adobe.fpsaud.plist [Click for support]
[loaded] com.boxcryptor.BCFS.KextLoaderHelper.plist [Click for support]
[loaded] com.microsoft.office.licensing.helper.plist [Click for support]
[running] com.rane.sixtytwo.daemon.plist [Click for support]

User Login Items: (What does this mean?)
iTunesHelper Programm (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Boxcryptor Classic UNKNOWN (missing value)
Boxcryptor Programm (/Applications/Boxcryptor.app)

Other Apps: (What does this mean?)
[running] com.boxcryptor.osx.156192
[running] com.etresoft.EtreCheck.128992
[running] net.freemacsoft.AppCleaner-SmartDelete

Internet Plug-ins: (What does this mean?)
SharePointBrowserPlugin: Version: 14.5.9 - SDK 10.6 [Click for support]
FlashPlayer-10.6: Version: 20.0.0.235 - SDK 10.6 [Click for support]
QuickTime Plugin: Version: 7.7.3
Flash Player: Version: 20.0.0.235 - SDK 10.6 Cannot contact Adobe
Default Browser: Version: 601 - SDK 10.11

Safari Extensions: (What does this mean?)
Open in Internet Explorer

Audio Plug-ins: (What does this mean?)
SeratoVirtualAudioPlugIn: Version: 1.0.11 [Click for support]

3rd Party Preference Panes: (What does this mean?)
Flash Player [Click for support]
Sixty-Two Audio Control Panel [Click for support]

Time Machine: (What does this mean?)
Skip System Files: NO
Mobile backups: ON
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 249.77 GB Disk used: 203.45 GB
Destinations:
extern klein [Local]
Total size: 499.36 GB
Total number of backups: 72
Oldest backup: 09.12.14, 11:39
Last backup: 16.12.15, 17:20
Size of backup disk: Too small
Backup size 499.36 GB < (Disk used 203.45 GB X 3)

Top Processes by CPU: (What does this mean?)
6% WindowServer
2% kernel_task
2% fontd
0% askpermissiond

Top Processes by Memory: (What does this mean?)
724 MB kernel_task
164 MB mds_stores
115 MB mdworker(8)
66 MB WindowServer
57 MB Dock

Virtual Memory Information: (What does this mean?)
5.34 GB Free RAM
2.66 GB Used RAM (864 MB Cached)
0 B Swap Used

Diagnostics Information: (What does this mean?)
Dec 17, 2015, 12:57:19 PM Self test - passed
Dec 16, 2015, 11:42:53 AM /Library/Logs/DiagnosticReports/Microsoft Word_2015-12-16-114253_[redacted].cpu_resource.diag [Click for details]
Dec 14, 2015, 04:55:51 PM ~/Library/Logs/DiagnosticReports/Spotlight_2015-12-14-165551_[redacted].crash

Solltest mal evtl. die Seriennummer deines Macs zensieren...
Ansonsten sehe ich da nichts auffälliges, so lange du die Software die aufgelistet wird auch verwendest( Boxcryptor, zwei DJ-Programme, Parallels,...)

michimaier:
Systemprotokollanfragen "alle Meldungen":
Da gibt es so viele Zeilen. Keine Ahnung, was das alles bedeutet. Ich kann das als Normalo-User leider nicht lesen/verstehen?!

elBohu: nein. Das Passwort für den Mac benutze ich nur am Mac.

smuehli: Hab kein apple remote desktop installiert. Die ist ja sogar mit 80€ recht teuer.

michimaier: wo meinst du soll ich nach ARDAgent.app screensharing suchen? Bei mir auf dem Rechner oder im www?

Mr. Fuchs: Die Programme nutze ich. Das mit der SN ist mir in der Hektik entgangen.

Weil du, wie du sagst, es als "Normalo-User" nicht verstehst wurdest du gebeten das um den Zeitpunkt herum, wo du den "Eindringling" ertappt hast, hier einfach mal rein zu kopieren. Ohne Anhaltspunkte kann man sonst nur ins blaue rein tippen...

??? So einfach kommt man dann trotzdem nicht auf deinen Mac. Außer du warst in Mexiko oder woanders in einem öffentlichen WLAN unterwegs. Den daheim kommt außer bei grober Fehlkonfiguration deines Routers keiner von außen auf deinen Rechner, egal was bei dir auf deinem Rechner läuft.

habe dir deine fehler mal markiert

Wenn im Router PortForwarding entsprechend eingerichtet ist geht das. Und wenn man öfters VNC aus dem Internet heraus nutzen möchte, dann ist es durchaus möglich dass sich das jemand so einrichtet.

Nochmal ein paar andere Ansätze: Trackpad-Schaden? Flüssigkeitsschaden? Bläht sich vielleicht der Akku auf?

Noch ein Ansatz: War zu diesem Zeitpunkt die Windows-VM aktiv? Dann müsstest du auch unter Windows suchen.

Ich hatte dieses Phänomen beim Retina MBP. Es war schlicht und ergreifend ein aufblähender Akku, der von unten an das Trackpad drückte.

Das mit dem aufgeblähten Akku hatte ich auch einmal ... plötzlich hat sich der Mauszeiger selbständig gemacht.

Evtl mal als Tipp zum testen:
Trackpad deaktivieren bei angeschlossener Maus (Systemeinstellungen > Bedienungshilfen > Maus & Trackpad),
Maus benutzen und schauen, ob das "Eigenleben" immer noch existiert.

Noch eine Vermutung von mir: hast Du evtl. kurz vorher Dein Trackpad mit einem feuchten Tuch gereinigt? Bei mir war es danach mal der Fall, dass der Zeiger komische Sachen gemacht hat. Nach ein paar Stunden war der Spuk vorbei, als die Feuchtigkeit komplett verdunstet war.

Vielleicht noch erwähnenswert: Als ich den Cursor durch die Gegend habe wandern sehen, war der sehr "verpixelt" und nicht immer zu sehen (daher dachte ich auch zunächst an einen Grafikfehler). Wäre das noch eine wichtige Info?

->mac-mark: das war von der Herstellerseite. Da sollte ja eigentlich nichts sein O:-)

->arminhempel: Flüssigkeitsschaden definitiv nein. Trackpad oder Akku kann ich derzeit nicht bestätigen oder ausschließen. Was halt komisch war, dass die MacintoshHD geöffnet wurde und mein Benutzerpasswort gelöscht war?!

-> caMpi: Parallels war zu diesem Zeitpunkt nich gestartet.

so... und nun mal die logdateien von 10 Uhr gestern bis 10:55 Uhr als ich es bemerkte und die Kiste runterfuhr:

17.12.15 10:00:09,783 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:00:09,783 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:00:10,031 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:00:10,031 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:00:14,389 bird[290]: notify name "CKStatusReport" has been registered 20 times - this may be a leak
17.12.15 10:00:15,911 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:00:15,911 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:00:18,129 cloudd[335]: __mmcs_proxy_locator_exists_block_invoke:167 might have caching server returned with error: Error Domain=NSPOSIXErrorDomain Code=60 "Operation timed out" UserInfo={com.apple.AssetCacheLocator.tag=#855ae56b, NSLocalizedDescription=quick miss requested}
17.12.15 10:00:18,388 sandboxd[141]: ([905]) AssetCacheLocato(905) deny mach-lookup com.apple.cookied
17.12.15 10:00:19,205 AssetCacheLocatorService[905]: #0888580a [I:AssetCacheLocatorService.queue] found no caching servers
17.12.15 10:01:07,044 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:01:19,745 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x6c is not attached to window 0x73
17.12.15 10:01:23,000 syslogd[49]: ASL Sender Statistics
17.12.15 10:01:28,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:01:28,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:01:35,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:01:35,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:01:38,432 com.apple.spotlight.IndexAgent[465]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID
17.12.15 10:01:38,433 IMDPersistenceAgent[326]: [com.apple.corespotlight.log.index] Finished "index items"(26) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,435 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: indexing searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,438 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: indexing searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,439 com.apple.spotlight.IndexAgent[465]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID
17.12.15 10:01:38,440 IMDPersistenceAgent[326]: [com.apple.corespotlight.log.index] Finished "index items"(28) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,440 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: deleting message for searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,440 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: deleting message for searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,450 com.apple.spotlight.IndexAgent[465]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID
17.12.15 10:01:38,451 IMDPersistenceAgent[326]: [com.apple.corespotlight.log.index] Finished "index items"(30) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,451 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: indexing searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,451 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: indexing searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,452 com.apple.spotlight.IndexAgent[465]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID
17.12.15 10:01:38,452 IMDPersistenceAgent[326]: [com.apple.corespotlight.log.index] Finished "index items"(32) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,452 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: deleting message for searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:38,452 IMDPersistenceAgent[326]: [Warning] IMDChatAddMessageToSpotlight: deleting message for searchable items failed with error Error Domain=CSIndexErrorDomain Code=-1003 "(null)"
17.12.15 10:01:45,320 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x6c is not attached to window 0x73
17.12.15 10:02:32,023 Microsoft Outlook[489]: _DPSDiscardEvents: FlushEventsMatchingListFromQueue returned error (-50)
17.12.15 10:02:39,522 Microsoft Outlook[489]: ERROR: createEncodedCachedResponseAndRequestForXPCTransmission - Invalid protocol-property list - CFURLRequestRef. protoProps=<CFBasicHash 0x80337860 [0xa365b0b0]>{type = mutable dict, count = 2,
entries =>
0 : <CFString 0x2e184e0 [0xa365b0b0]>{contents = "NetworkBlockKey"} = <00>
1 : <CFString 0xa308f958 [0xa365b0b0]>{contents = "kCFURLRequestAllowAllPOSTCaching"} = <CFBoolean 0xa365b5f0 [0xa365b0b0]>{value = true}
}
17.12.15 10:02:43,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:02:44,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:02:53,323 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:02:58,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:02:58,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:03:01,659 com.apple.WebKit.WebContent[867]: [10:03:01.659] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:03:02,737 com.apple.WebKit.WebContent[867]: <<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 7979 bytes @ 13640 took 1.076023 secs. to complete, 1 reads >= 1 sec.
17.12.15 10:03:07,943 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:09,379 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:03:09,379 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:03:09,380 com.apple.WebKit.WebContent[867]: [10:03:09.380] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:03:09,380 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:03:09,380 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:03:09,380 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:03:09,380 com.apple.WebKit.WebContent[867]: [10:03:09.380] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:03:09,380 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:03:09,810 com.apple.WebKit.WebContent[867]: [10:03:09.810] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7f9d1d878a00) rejecting report of layer being serviced - IQ has not yet begun to update
17.12.15 10:03:10,381 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:16,853 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:03:16,853 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:03:21,441 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:23,853 com.apple.WebKit.WebContent[867]: [10:03:23.853] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:03:23,881 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:24,399 com.apple.WebKit.WebContent[867]: [10:03:24.399] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:03:28,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:03:29,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:03:29,359 com.apple.WebKit.WebContent[867]: [10:03:29.359] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:03:29,475 com.apple.WebKit.WebContent[867]: [10:03:29.475] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:03:29,829 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:30,984 com.apple.WebKit.WebContent[867]: [10:03:30.984] FigDiskCacheRepositoryGetFileSize signalled err=-12625 (kFigDiskCacheRepositoryError_UnregisteredID) (Specified id not in the cache.) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/DiskCacheRepository/DiskCacheRepository.c line 1089
17.12.15 10:03:30,984 com.apple.WebKit.WebContent[867]: [10:03:30.984] <<<< FDCP_Limited >>>> FigLimitedDiskCacheProvider_CopyProperty: Error getting available cache size - -12625
17.12.15 10:03:30,984 com.apple.WebKit.WebContent[867]: [10:03:30.984] <<< FigByteStreamFactory >>> fbfs_CreateURLStreamAsync: switch from disk to memory backed because of insufficient disk space
17.12.15 10:03:31,042 com.apple.WebKit.WebContent[867]: <<<< H264Bridge >>>> FigH264Bridge_GetSPS_VUI_AspectRatio: unexpected H.264 SPS VUI Sample Aspect Ratio code 211
17.12.15 10:03:31,042 com.apple.WebKit.WebContent[867]: [10:03:31.042] mv_CheckIfH264Playable signalled err=-12955 (kFigMediaValidatorError_VideoProfileNotSupported) (invalid H264 profile 244 and/or level 1.0) at line 1821
17.12.15 10:03:31,043 com.apple.WebKit.WebContent[867]: [10:03:31.043] mv_CheckIfH264Playable signalled err=-12955 (kFigMediaValidatorError_VideoProfileNotSupported) (invalid H264 profile 244 and/or level 1.0) at line 1821
17.12.15 10:03:32,520 com.apple.WebKit.WebContent[867]: [10:03:32.520] FigDiskCacheRepositoryGetFileSize signalled err=-12625 (kFigDiskCacheRepositoryError_UnregisteredID) (Specified id not in the cache.) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/DiskCacheRepository/DiskCacheRepository.c line 1089
17.12.15 10:03:32,520 com.apple.WebKit.WebContent[867]: [10:03:32.520] <<<< FDCP_Limited >>>> FigLimitedDiskCacheProvider_CopyProperty: Error getting available cache size - -12625
17.12.15 10:03:32,520 com.apple.WebKit.WebContent[867]: [10:03:32.520] <<< FigByteStreamFactory >>> fbfs_CreateURLStreamAsync: switch from disk to memory backed because of insufficient disk space
17.12.15 10:03:32,589 com.apple.WebKit.WebContent[867]: <<<< H264Bridge >>>> FigH264Bridge_GetSPS_VUI_AspectRatio: unexpected H.264 SPS VUI Sample Aspect Ratio code 211
17.12.15 10:03:32,589 com.apple.WebKit.WebContent[867]: [10:03:32.589] mv_CheckIfH264Playable signalled err=-12955 (kFigMediaValidatorError_VideoProfileNotSupported) (invalid H264 profile 244 and/or level 1.0) at line 1821
17.12.15 10:03:32,593 com.apple.WebKit.WebContent[867]: [10:03:32.593] mv_CheckIfH264Playable signalled err=-12955 (kFigMediaValidatorError_VideoProfileNotSupported) (invalid H264 profile 244 and/or level 1.0) at line 1821
17.12.15 10:03:37,853 Safari[506]: tcp_connection_destination_handle_tls_close_notify 50 closing socket due to TLS CLOSE_NOTIFY alert
17.12.15 10:03:37,853 Safari[506]: tcp_connection_tls_session_error_callback_imp 50 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32
17.12.15 10:03:37,854 Safari[506]: tcp_connection_destination_handle_tls_close_notify 52 closing socket due to TLS CLOSE_NOTIFY alert
17.12.15 10:03:37,854 Safari[506]: tcp_connection_tls_session_error_callback_imp 52 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32
17.12.15 10:03:37,881 Safari[506]: tcp_connection_destination_handle_tls_close_notify 55 closing socket due to TLS CLOSE_NOTIFY alert
17.12.15 10:03:37,882 Safari[506]: tcp_connection_tls_session_error_callback_imp 55 __tcp_connection_tls_session_callback_write_block_invoke.434 error 32
17.12.15 10:03:40,054 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:43,964 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:03:43,964 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:03:45,118 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:48,609 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:03:55,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:03:55,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:03:59,420 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:04:05,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:04:05,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:04:08,572 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:04:13,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:04:14,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:04:15,994 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:04:26,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:04:27,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:04:30,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:04:30,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:04:31,515 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:04:41,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:04:41,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:04:45,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:04:46,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:04:53,034 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:05:00,636 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:05:03,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:05:04,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:05:12,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:05:13,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:05:21,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:05:21,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:05:22,574 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:05:32,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:05:32,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:05:41,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:05:41,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:05:57,001 apsd[83]: BUG in libdispatch: 15C50 - 1631 - 0x0
17.12.15 10:06:32,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:06:32,764 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:06:32,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:06:43,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:06:44,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:07:15,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:07:15,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:07:21,684 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:07:23,264 com.apple.WebKit.WebContent[867]: [10:07:23.264] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:07:23,287 com.apple.WebKit.WebContent[867]: [10:07:23.287] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:07:23,288 com.apple.WebKit.WebContent[867]: [10:07:23.288] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:07:23,293 com.apple.WebKit.WebContent[867]: [10:07:23.293] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:07:23,293 com.apple.WebKit.WebContent[867]: [10:07:23.293] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:07:23,293 com.apple.WebKit.WebContent[867]: [10:07:23.293] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:07:23,293 com.apple.WebKit.WebContent[867]: [10:07:23.293] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:07:23,298 com.apple.WebKit.WebContent[867]: [10:07:23.298] <<<< FigFilePlayer >>>> itemfig_DeferredFirstVideoFrameEnqueued: invalid item
17.12.15 10:07:23,299 com.apple.WebKit.WebContent[867]: [10:07:23.299] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2092
17.12.15 10:07:23,299 com.apple.WebKit.WebContent[867]: [10:07:23.299] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2092
17.12.15 10:07:23,299 com.apple.WebKit.WebContent[867]: [10:07:23.299] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2092
17.12.15 10:07:30,469 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:07:30,469 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:07:35,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:07:35,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:07:44,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:07:44,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:07:46,269 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:07:46,269 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:07:47,147 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:07:55,395 com.apple.WebKit.Networking[508]: MessageTracer: load_domain_prefix_whitelist:115: Opening whitelist file: /Library/Application Support/CrashReporter/SubmitDiagInfo.domains
17.12.15 10:07:55,395 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:07:55,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:07:55,434 com.apple.WebKit.WebContent[867]: [10:07:55.434] FigDiskCacheRepositoryGetFileSize signalled err=-12625 (kFigDiskCacheRepositoryError_UnregisteredID) (Specified id not in the cache.) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/DiskCacheRepository/DiskCacheRepository.c line 1089
17.12.15 10:07:55,434 com.apple.WebKit.WebContent[867]: [10:07:55.434] <<<< FDCP_Limited >>>> FigLimitedDiskCacheProvider_CopyProperty: Error getting available cache size - -12625
17.12.15 10:07:55,434 com.apple.WebKit.WebContent[867]: [10:07:55.434] <<< FigByteStreamFactory >>> fbfs_CreateURLStreamAsync: switch from disk to memory backed because of insufficient disk space
17.12.15 10:07:55,440 sandboxd[141]: ([508]) com.apple.WebKit(508) deny file-read-data /Library/Application Support/CrashReporter/SubmitDiagInfo.domains
17.12.15 10:07:55,445 com.apple.WebKit.WebContent[867]: <<<< H264Bridge >>>> FigH264Bridge_GetSPS_VUI_AspectRatio: unexpected H.264 SPS VUI Sample Aspect Ratio code 211
17.12.15 10:07:55,445 com.apple.WebKit.WebContent[867]: [10:07:55.445] mv_CheckIfH264Playable signalled err=-12955 (kFigMediaValidatorError_VideoProfileNotSupported) (invalid H264 profile 244 and/or level 1.0) at line 1821
17.12.15 10:07:55,446 com.apple.WebKit.WebContent[867]: [10:07:55.446] mv_CheckIfH264Playable signalled err=-12955 (kFigMediaValidatorError_VideoProfileNotSupported) (invalid H264 profile 244 and/or level 1.0) at line 1821
17.12.15 10:07:55,598 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:07:55,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:07:56,066 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:07:56,067 com.apple.WebKit.Networking[508]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)
17.12.15 10:07:56,315 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:07:56,316 com.apple.WebKit.Networking[508]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)
17.12.15 10:07:56,582 com.apple.WebKit.WebContent[867]: [10:07:56.582] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:07:56,933 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:07:56,933 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:07:58,064 com.apple.WebKit.WebContent[867]: <<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 16798 bytes @ 12224 took 1.481642 secs. to complete, 1 reads >= 1 sec.
17.12.15 10:07:58,093 com.apple.WebKit.WebContent[867]: [10:07:58.093] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:07:58,114 com.apple.WebKit.WebContent[867]: [10:07:58.114] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:07:59,930 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:07:59,930 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:08:00,176 com.apple.WebKit.WebContent[867]: [10:08:00.176] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7f9d1c3cc800) rejecting report of layer being serviced - IQ has not yet begun to update
17.12.15 10:08:24,979 com.apple.WebKit.WebContent[867]: [10:08:24.979] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:08:24,980 com.apple.WebKit.WebContent[867]: [10:08:24.980] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7f9d1c449c00) rejecting report of layer being serviced - IQ has not yet begun to update
17.12.15 10:08:26,388 com.apple.WebKit.WebContent[867]: <<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 87067 bytes @ 3359 took 1.407787 secs. to complete, 1 reads >= 1 sec.
17.12.15 10:08:32,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:08:33,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:08:42,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:08:42,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:08:52,440 com.apple.WebKit.WebContent[867]: AVF error: Perf capability check failed: 0xe00002be
17.12.15 10:08:52,473 com.apple.WebKit.WebContent[867]: [10:08:52.473] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:08:52,475 com.apple.WebKit.WebContent[867]: [10:08:52.475] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7f9d1c10bc00) rejecting report of layer being serviced - IQ has not yet begun to update
17.12.15 10:08:54,384 com.apple.WebKit.WebContent[867]: <<<< FigByteStream >>>> FigByteStreamStatsLogOneRead: ByteStream read of 87067 bytes @ 3359 took 1.909937 secs. to complete, 1 reads >= 1 sec.
17.12.15 10:09:01,715 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:09:02,730 com.apple.WebKit.WebContent[867]: [10:09:02.730] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:02,827 com.apple.WebKit.WebContent[867]: [10:09:02.827] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:02,829 com.apple.WebKit.WebContent[867]: [10:09:02.829] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:02,951 com.apple.WebKit.WebContent[867]: [10:09:02.951] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:09:02,953 com.apple.WebKit.WebContent[867]: [10:09:02.953] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:02,967 com.apple.WebKit.WebContent[867]: [10:09:02.967] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:09:02,967 com.apple.WebKit.WebContent[867]: [10:09:02.967] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:09:02,967 com.apple.WebKit.WebContent[867]: [10:09:02.967] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:09:02,967 com.apple.WebKit.WebContent[867]: [10:09:02.967] itemasync_SetProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2306
17.12.15 10:09:03,025 com.apple.WebKit.WebContent[867]: [10:09:03.025] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:09:03,026 com.apple.WebKit.WebContent[867]: [10:09:03.026] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:09:04,539 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:09:05,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:09:06,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:09:10,359 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:09:10,359 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:09:12,932 com.apple.WebKit.WebContent[867]: [10:09:12.931] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:12,935 com.apple.WebKit.WebContent[867]: [10:09:12.935] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:12,959 com.apple.WebKit.WebContent[867]: [10:09:12.959] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:09:12,959 com.apple.WebKit.WebContent[867]: [10:09:12.959] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:09:12,962 com.apple.WebKit.WebContent[867]: [10:09:12.962] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:12,962 com.apple.WebKit.WebContent[867]: [10:09:12.962] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:12,978 com.apple.WebKit.WebContent[867]: [10:09:12.977] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:09:12,979 com.apple.WebKit.WebContent[867]: [10:09:12.979] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:12,986 com.apple.WebKit.WebContent[867]: [10:09:12.986] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:09:12,987 com.apple.WebKit.WebContent[867]: [10:09:12.987] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:13,059 com.apple.WebKit.WebContent[867]: [10:09:13.059] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:09:13,377 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:09:19,940 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:09:19,940 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:09:21,481 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:21,481 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:21,482 com.apple.WebKit.WebContent[867]: [10:09:21.481] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:21,482 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:09:21,482 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:21,482 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:21,482 com.apple.WebKit.WebContent[867]: [10:09:21.482] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:21,482 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:09:28,391 com.apple.WebKit.Plugin.64[639]: [10:09:28.390] vtDecompressionDuctCreate signalled err=-12913 (err) (Could not select and open decoder instance) at /Library/Caches/com.apple.xbs/Sources/CoreMedia_frameworks/CoreMedia-1731.15.33/Sources/VideoToolbox/VTDecompressionSession.c line 1290
17.12.15 10:09:39,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:09:39,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:09:43,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:09:44,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: [10:09:47.610] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: [10:09:47.610] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:47,610 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:09:52,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:09:52,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:09:54,196 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:54,196 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:55,232 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:55,233 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:55,460 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:55,460 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: [10:09:55.562] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: [10:09:55.562] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:55,562 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:09:58,396 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:58,396 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: [10:09:59.231] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: [10:09:59.231] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:09:59,231 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:02,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:10:03,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:10:04,825 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:10:04,825 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:10:07,517 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:10:07,517 com.apple.WebKit.Networking[508]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)
17.12.15 10:10:10,261 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:10,262 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:10,262 com.apple.WebKit.WebContent[867]: [10:10:10.262] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:10,262 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:10,262 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:10,262 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:10,262 com.apple.WebKit.WebContent[867]: [10:10:10.262] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:10,262 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:11,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:10:12,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: [10:10:17.561] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: [10:10:17.561] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:17,561 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:18,421 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:10:18,422 com.apple.WebKit.Networking[508]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)
17.12.15 10:10:20,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:10:20,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:10:23,183 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:10:25,716 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:10:25,717 com.apple.WebKit.Networking[508]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: [10:10:32.304] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: [10:10:32.304] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:32,304 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:39,255 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:10:41,066 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:41,066 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:41,066 com.apple.WebKit.WebContent[867]: [10:10:41.066] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:41,066 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:41,066 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:41,066 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:41,067 com.apple.WebKit.WebContent[867]: [10:10:41.067] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:41,067 com.apple.WebKit.WebContent[867]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:42,479 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:10:44,602 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:10:51,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:10:51,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:10:53,705 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:10:53,705 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:10:54,275 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:54,275 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:54,275 com.apple.WebKit.WebContent[637]: [10:10:54.275] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:54,347 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:54,347 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:10:54,347 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:10:54,347 com.apple.WebKit.WebContent[637]: [10:10:54.347] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:10:54,348 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:10:54,477 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:10:55,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:10:55,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:10:59,825 com.apple.WebKit.Networking[508]: CFNetwork SSLHandshake failed (-9847)
17.12.15 10:10:59,826 com.apple.WebKit.Networking[508]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)
17.12.15 10:11:01,073 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:11:01,073 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:11:06,523 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:09,413 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:12,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:11:12,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:11:15,295 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:17,667 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:18,282 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:18,283 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:18,283 com.apple.WebKit.WebContent[637]: [10:11:18.283] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:18,283 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:18,283 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:18,283 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:18,283 com.apple.WebKit.WebContent[637]: [10:11:18.283] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:18,283 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:20,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:11:21,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:11:23,000 syslogd[49]: ASL Sender Statistics
17.12.15 10:11:24,245 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:11:24,245 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:11:24,415 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:24,415 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:24,415 com.apple.WebKit.WebContent[637]: [10:11:24.415] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:24,415 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:24,415 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:24,415 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:24,416 com.apple.WebKit.WebContent[637]: [10:11:24.416] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:24,416 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:26,593 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:26,593 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:26,593 com.apple.WebKit.WebContent[637]: [10:11:26.593] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:26,593 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:26,593 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:26,594 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:26,594 com.apple.WebKit.WebContent[637]: [10:11:26.594] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:26,594 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:28,303 com.apple.WebKit.WebContent[637]: [10:11:28.303] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:11:28,306 com.apple.WebKit.WebContent[637]: [10:11:28.306] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fa942a87200) rejecting report of layer being serviced - IQ has not yet begun to update
17.12.15 10:11:33,488 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:38,107 com.apple.WebKit.WebContent[637]: [10:11:38.107] <<<< IQ-CA >>>> piqca_setUsePreQueue: (0x7fa942a87200) rejecting report of layer being serviced - IQ has not yet begun to update
17.12.15 10:11:40,305 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:41,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:11:41,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:11:45,352 com.apple.WebKit.WebContent[637]: [10:11:45.351] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:11:45,466 com.apple.WebKit.WebContent[637]: [10:11:45.466] FigAgglomeratorSetObjectForKey signalled err=-16020 (kFigStringConformerError_ParamErr) (NULL key) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/LegibleOutput/FigAgglomerator.c line 92
17.12.15 10:11:45,468 com.apple.WebKit.WebContent[637]: [10:11:45.467] <<<< Boss >>>> figPlaybackBossPrerollCompleted: unexpected preroll-complete notification
17.12.15 10:11:45,493 com.apple.WebKit.WebContent[637]: [10:11:45.493] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2092
17.12.15 10:11:45,493 com.apple.WebKit.WebContent[637]: [10:11:45.493] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2092
17.12.15 10:11:45,493 com.apple.WebKit.WebContent[637]: [10:11:45.493] itemasync_CopyProperty signalled err=-12785 (kFigBaseObjectError_Invalidated) (invalidated) at /Library/Caches/com.apple.xbs/Sources/CoreMedia/CoreMedia-1731.15.33/Prototypes/Player/FigPlayer_Async.c line 2092
17.12.15 10:11:46,712 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:46,712 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:46,712 com.apple.WebKit.WebContent[637]: [10:11:46.712] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:46,712 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:46,713 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:46,713 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:46,713 com.apple.WebKit.WebContent[637]: [10:11:46.713] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:46,713 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:47,573 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:55,242 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:11:56,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:11:57,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:11:59,872 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:59,872 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:59,872 com.apple.WebKit.WebContent[637]: [10:11:59.872] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:59,872 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:59,872 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_ValidateRFC4281CodecId: Unrecognized codec 1.(null). Failed codec specific check.
17.12.15 10:11:59,872 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_LookupCodecSupport: Unrecognized codec 1
17.12.15 10:11:59,873 com.apple.WebKit.WebContent[637]: [10:11:59.873] mv_LowLevelCheckIfVideoPlayableUsingDecoder signalled err=-12956 (kFigMediaValidatorError_VideoCodecNotSupported) (video codec 1) at line 1921
17.12.15 10:11:59,873 com.apple.WebKit.WebContent[637]: <<<< MediaValidator >>>> mv_TestCodecSupportUsingDecoders: Unrecognized codec 1
17.12.15 10:11:59,986 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:12:05,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:12:05,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:12:06,639 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:12:06,639 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:12:23,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1
17.12.15 10:12:23,000 kernel[0]: **** [IOBluetoothHostControllerUSBTransport][ClearFeatureInterruptEndpointHalt] -- successfully posting another read for the mInt0InterruptPipe -- mInterruptPipeInOutstandingIOCount = 1 -- this = 0x8000
17.12.15 10:12:28,328 Safari[506]: tcp_connection_tls_session_error_callback_imp 56 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22
17.12.15 10:12:29,628 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:12:32,451 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:12:34,739 WindowServer[185]: _CGXRemoveWindowFromWindowMovementGroup: window 0x55 is not attached to window 0x79
17.12.15 10:12:50,397 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:12:50,397 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:14:11,156 secd[276]: securityd_xpc_dictionary_handler cloudd[335] copy_matching Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:14:11,157 cloudd[335]: SecOSStatusWith error:[-50] Error Domain=NSOSStatusErrorDomain Code=-50 "query missing class name" (paramErr: error in user parameter list) UserInfo={NSDescription=query missing class name}
17.12.15 10:21:23,000 syslogd[49]: ASL Sender Statistics
17.12.15 10:27:28,554 Safari[506]: tcp_connection_tls_session_error_callback_imp 58 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22
17.12.15 10:31:26,000 syslogd[49]: ASL Sender Statistics
17.12.15 10:39:45,000 kernel[0]: nspace-handler-set-snapshot-time: 1450345187
17.12.15 10:39:45,807 com.apple.mtmd[195]: Set snapshot time: 2015-12-17 10:39:47 +0100 (current time: 2015-12-17 10:39:45 +0100)
17.12.15 10:41:27,000 syslogd[49]: ASL Sender Statistics
17.12.15 10:41:41,639 Boxcryptor[323]: No error.
17.12.15 10:42:32,352 com.apple.backupd-helper[194]: Not starting scheduled Time Machine backup: No destinations resolvable
17.12.15 10:42:48,841 Safari[506]: tcp_connection_tls_session_error_callback_imp 61 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22
17.12.15 10:51:48,000 syslogd[49]: ASL Sender Statistics
17.12.15 10:54:21,247 pkd[279]: enabling pid=299 for plug-in com.apple.ncplugin.WorldClock(1.0) B4F33911-ADB3-4E32-9AEC-AC6FC629711A /System/Library/Frameworks/NotificationCenter.framework/PlugIns/com.apple.ncplugin.WorldClock.appex
17.12.15 10:54:21,252 pkd[279]: enabling pid=299 for plug-in com.apple.iCal.CalendarNC(1.0) 66697970-8AF0-4081-B63E-75C13FCEDCEC /Applications/Calendar.app/Contents/PlugIns/com.apple.iCal.CalendarNC.appex
17.12.15 10:54:21,255 pkd[279]: enabling pid=299 for plug-in com.apple.ncplugin.calculator(1.0) 30DAEEF8-024A-4786-88E8-AD1DB9E9B4C6 /System/Library/Frameworks/NotificationCenter.framework/PlugIns/com.apple.ncplugin.calculator.appex
17.12.15 10:54:26,305 NotificationCenter[299]: plugin com.apple.ncplugin.WorldClock invalidated
17.12.15 10:54:26,306 com.apple.ncplugin.WorldClock[1147]: host connection <NSXPCConnection: 0x7ff899721780> connection from pid 299 invalidated
17.12.15 10:54:26,370 NotificationCenter[299]: plugin com.apple.ncplugin.calculator invalidated
17.12.15 10:54:26,370 NotificationCenter[299]: plugin com.apple.iCal.CalendarNC invalidated
17.12.15 10:54:26,371 com.apple.iCal.CalendarNC[1148]: host connection <NSXPCConnection: 0x7fc631f14420> connection from pid 299 invalidated
17.12.15 10:54:26,371 com.apple.ncplugin.calculator[1149]: host connection <NSXPCConnection: 0x7fc870516bd0> connection from pid 299 invalidated
17.12.15 10:54:51,012 lsd[259]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist
17.12.15 10:54:53,546 Safari[506]: KeychainGetICDPStatus: keychain: -25300
17.12.15 10:54:53,546 Safari[506]: KeychainGetICDPStatus: status: off
17.12.15 10:54:53,570 com.apple.xpc.launchd[1]: (com.apple.WebKit.Networking.1F25890B-B0C8-44E4-9483-0EA9CB3AC0F5[508]) Service exited with abnormal code: 1
17.12.15 10:54:53,588 com.apple.xpc.launchd[1]: (com.apple.WebKit.Databases.781799F4-EED2-455D-AE1A-D02B022510AD[950]) Service exited with abnormal code: 1
17.12.15 10:54:54,854 Rednif[486]: host connection <NSXPCConnection: 0x7fc6b1f21d30> connection from pid 266 invalidated
17.12.15 10:54:54,854 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,855 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,856 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,856 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,856 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,856 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,856 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,856 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,856 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,857 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,858 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,858 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,858 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,858 WindowServer[185]: CGXGetConnectionProperty: Invalid connection 51971
17.12.15 10:54:54,864 syncdefaultsd[1144]: SecTaskLoadEntitlements failed error=3
17.12.15 10:54:54,869 loginwindow[100]: Login Window point of no return
17.12.15 10:54:54,886 com.apple.xpc.launchd[1]: (net.freemacsoft.AppCleaner-SmartDelete[298]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,886 AirPlayXPCHelper[105]: 2015-12-17 10:54:54.885836 AM [APBrowser] IPv4 listener stopped.
17.12.15 10:54:54,893 com.apple.xpc.launchd[1]: (com.apple.AirPlayUIAgent[307]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,916 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0xc00c}
17.12.15 10:54:54,911 com.apple.xpc.launchd[1]: (com.apple.lateragent[497]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,918 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0x15015}
17.12.15 10:54:54,923 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0x28028}
17.12.15 10:54:54,931 com.apple.xpc.launchd[1]: (com.boxcryptor.osx.RednifManager[373]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,921 appleeventsd[57]: SecTaskLoadEntitlements failed error=3
17.12.15 10:54:54,932 loginwindow[100]: BUG in libdispatch client: kevent[EVFILT_PROC] enable: "No such file or directory" - 0x2
17.12.15 10:54:54,934 com.apple.xpc.launchd[1]: (com.apple.coreservices.uiagent[507]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,934 com.apple.xpc.launchd[1]: (com.apple.BezelUIServer[922]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,936 com.apple.xpc.launchd[1]: (com.apple.iTunesHelper.73632[318]) Service exited with abnormal code: 1
17.12.15 10:54:54,936 com.apple.xpc.launchd[1]: (com.microsoft.outlook.databasedaemon.53792[492]) Service exited due to signal: Terminated: 15
17.12.15 10:54:54,936 appleeventsd[57]: SecTaskLoadEntitlements failed error=3
17.12.15 10:54:54,937 appleeventsd[57]: SecTaskLoadEntitlements failed error=3
17.12.15 10:54:54,938 appleeventsd[57]: SecTaskLoadEntitlements failed error=3
17.12.15 10:54:54,938 appleeventsd[57]: SecTaskLoadEntitlements failed error=3
17.12.15 10:54:54,939 appleeventsd[57]: SecTaskLoadEntitlements failed error=3
17.12.15 10:54:54,945 com.apple.xpc.launchd[1]: (com.apple.noticeboard.agent[369]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,952 com.apple.xpc.launchd[1]: (com.apple.cloudphotosd[361]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,971 com.apple.xpc.launchd[1]: (com.apple.EscrowSecurityAlert[458]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,978 com.apple.xpc.launchd[1]: (com.apple.wifi.WiFiAgent[312]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,984 com.apple.xpc.launchd[1]: (com.apple.ViewBridgeAuxiliary[1150]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,996 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0x11011}
17.12.15 10:54:54,985 com.apple.xpc.launchd[1]: (com.apple.FolderActionsDispatcher[291]) Service exited due to signal: Killed: 9
17.12.15 10:54:54,996 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0x1c01c}
17.12.15 10:54:54,997 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0x1e01e}
17.12.15 10:54:54,998 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0x22022}
17.12.15 10:54:54,998 loginwindow[100]: ERROR | -[SessionLogoutManager allPrivateProcesses] | No LS dictionary found for LSASN: LSASN:{hi=0x0;lo=0x48048}
17.12.15 10:54:55,035 syncdefaultsd[1144]: com.apple.finder has been removed from syncing apps.
17.12.15 10:54:55,057 sessionlogoutd[1160]: sessionlogoutd Launched
17.12.15 10:54:55,083 sessionlogoutd[1160]: DEAD_PROCESS: 100 console
17.12.15 10:54:55,087 sharingd[278]: 10:54:55.086 : SCDynamicStoreCopyConsoleUser returned NULL
17.12.15 10:54:55,087 sharingd[278]: 10:54:55.086 : SDActivityAdvertiser::consoleUserChanged: Stopping for user 501 on logout
17.12.15 10:54:55,087 sharingd[278]: 10:54:55.087 : SCDynamicStoreCopyConsoleUser returned NULL
17.12.15 10:54:55,088 sharingd[278]: 10:54:55.087 : SCDynamicStoreCopyConsoleUser returned NULL
17.12.15 10:54:55,088 sharingd[278]: 10:54:55.088 : SCDynamicStoreCopyConsoleUser returned NULL
17.12.15 10:54:55,140 shutdown[1161]: halt by romanbastert:
17.12.15 10:54:55,000 kernel[0]: Kext loading now disabled.
17.12.15 10:54:55,000 kernel[0]: Kext unloading now disabled.
17.12.15 10:54:55,000 kernel[0]: Kext autounloading now disabled.
17.12.15 10:54:55,000 kernel[0]: Kernel requests now disabled.
17.12.15 10:54:55,000 kernel[0]: Process launchd [1] disabling system-wide I/O Throttling
17.12.15 10:54:55,000 kernel[0]: Process launchd [1] disabling system-wide CPU Throttling
17.12.15 10:54:55,140 shutdown[1161]: SHUTDOWN_TIME: 1450346095 140130
17.12.15 10:54:55,147 WindowServer[185]: CGXRestartSessionWorkspace: session workspace exited for session 257 (on console)
17.12.15 10:54:55,147 WindowServer[185]: Session 257 released (1 references)
17.12.15 10:54:55,147 WindowServer[185]: Session 257 released (0 references)
17.12.15 10:54:55,148 WindowServer[185]: loginwindow connection closed; closing server.

Ja kann man machen . Wäre aber grob fahrlässig und unheimlich dämlich. Für sowas gibt es VPN. Wem das nichts sagt der sollte die Finger von der Fernsteuerung lassen oder darf sich nicht wundern wenn andere seinen Rechner steuern.
Scheint hier aber nicht der Fall zu sein.

Was andere hier schrieben das eine Fernsteuerung des Macs aus der VM heraus erfolgte, so halte ich das für sehr unwahrscheinlich, wenn auch nicht ganz für unmöglich...

Es wäre sicherlich interessant gewesen dem Gast weiter zuzusehen und zu schauen wie er reagiert wenn man selber mit der Maus "dazwischen funkt".

Noch halte ich eine falsch verbundene Maus oder einen Defekt für die wahrscheinlichste Ursache.
Bin gespannt ob die wahre Ursache gefunden wird.

ist eigentlich noch niemand auf die idee gekommen, dass wenn der rechner so offen wie ein scheunentor ist, dass ein angreifer wesentlich eleganter auf den rechner zugreifen könnte als für den davor sitzenden user optisch sichtbar den cursor zu bewegen und direkt panik damit auszulösen?

und mikemuc hat vollkommen recht. wer vnc so offen nach aussen hin einrichtet ist ein fahrlässiger idiot.

John: Da ist was Wahres dran bezüglich der Eleganz des möglichen Eindringlings. Aber wieso war dann auf einmal mein Benutzerkennwort gelöscht?!

VNC habe / nutze ich übrigens nicht.

Gibt doch mal im Terminal den Befehl ein, dann werden die letzten 20 Logins angezeigt. Ggf. die 20 erhöhen, wenn der fragliche Zeitraum nicht dabei ist.

tranquility: folgendes Ergebnis für gestern:

shutdown ~ Thu Dec 17 21:16
romanbastert console Thu Dec 17 20:45 - 21:16 (00:31)
reboot ~ Thu Dec 17 20:44
shutdown ~ Thu Dec 17 16:59
romanbastert console Thu Dec 17 14:59 - 16:59 (02:00)
reboot ~ Thu Dec 17 14:50
shutdown ~ Thu Dec 17 14:07
romanbastert console Thu Dec 17 14:00 - 14:07 (00:06)
reboot ~ Thu Dec 17 14:00
shutdown ~ Thu Dec 17 13:44
romanbastert console Thu Dec 17 13:27 - 13:44 (00:16)
reboot ~ Thu Dec 17 13:27
shutdown ~ Thu Dec 17 13:26
romanbastert console Thu Dec 17 13:24 - 13:26 (00:02)
reboot ~ Thu Dec 17 13:23
shutdown ~ Thu Dec 17 13:23
romanbastert console Thu Dec 17 13:19 - 13:23 (00:03)
reboot ~ Thu Dec 17 13:19
shutdown ~ Thu Dec 17 13:19
romanbastert console Thu Dec 17 12:57 - 13:19 (00:21)
reboot ~ Thu Dec 17 12:57
shutdown ~ Thu Dec 17 10:54
romanbastert console Thu Dec 17 08:41 - 10:54 (02:13)
reboot ~ Thu Dec 17 08:39


...hmmmm.... und was verrät mir das jetzt?

nicht viel. und uns auch nicht. ausser wie du heisst und wenn du aus lampertheim bist auch was dein beruf ist. editier das lieber.

Ich denke, dass ich sicherheitshalber meine Daten sichere, das MBA zurücksetze und dann alles wieder händisch einstelle.
Wären auf diesem Wege alle eventuellen Schädlingsdateien auch weg oder könnten da Reste bleiben?

Genau so war es.

Sind die angegebenen Loginzeiten wirklich alle von dir?

Das hängt davon ab, wie sehr Dein Computer verseucht wurde. Es ist mittlerweile möglich (U)EFI Rootkits zu installieren, d.h. selbst eine Neuinstallation des Betriebssystem kann ein Rootkit nicht mehr entfernen. Hier müßte zuerst mit einem Hardware Lesegerät im stromlosen Zustand (Akku abklemmen) das FlashROM des System geprüft werden und ggf. mit diesem die FlashROMs neu geschrieben werden. Und im Worst Case Szenario sind noch andere Chips auf dem System betroffen und man müßte dazu analog verfahren. Dazu müßte der Mac zerlegt werden, um an die betreffenden Chips heran zu kommen. Als Nutzer bist Du nicht in der Lage das zu tun, und verfügst nicht über die notwendigen Werkzeuge (Software+Hardware) und das notwendige Wissen.

Vermutlich ist bei Dir kein EFI Rootkit installiert worden, so daß eine System Neuinstallation ausreichend sein sollte. Entscheidend ist, was es an Informationen auf Deinem Mac zu holen gibt. Wenn es um Industriespionage gehen könnte, lohnt sich das obige Szenario für einen Angreifer schon und dann hilft es nur noch das MBA wegzuwerfen.

tranquility: Ja, sind von mir. Entscheidend ist ja, dass ich mich um 08:39 Uhr angemeldet habe, gegen 10:52 Uhr das komische Verhalten bemerkt habe und das MBA um 10:54 Uhr ausgeschaltet habe. Danach habe ich es zu unterschiedlichen "Testungen" an und wieder aus gemacht.

gfhfkghfk: Bringt es dann etwas, das MBA mit einem Virenscanner oder ähnlichem mal zu durchleuchten?

Ich nehme es dann - da is nix drauf...

Möglich (und harmlos) wäre auch eine "versehentlich" verbundene Bluetooth-Maus aus einem anderen Raum/Stockwerk, etc. Bleibt meist in der Familie und kann eh nix sehen.

Ich glaube auch am ehesten an den aufgeblähten Akku oder einen anderen Hardware-Defekt.

Wie gezielt hat sich denn der Maus-Cursor bewegt? Oder war's eher chaotisch?

...und natürlich deine Login-Daten mal überprüfen. ("War ich das?")

Neben allem anderen, hilft aber (immer vorausgesetzt es war ein Angriff/eine Infektion) noch der Blick eines Fachmanns auf Deinen Router!
Vielleicht hat sich hier jemand Ports geöffnet über die er jederzeit auf Deinen Rechner zugreifen kann.

So könnte ich das auch sehen.

Teamviewer deinstallieren wenn drauf.

Whizzbizz:
Der Cursor bewegte sich ein paar mal von links nach rechts ungefähr im oberen Drittel des Bildchirms. Dann fuhr er nach rechts, wo auch die Verknüpfung zur Macintosh HD ist und dann öffnete sich (wie durch einen Doppelklick) die MacintoshHD im Finder und der Cursor bewegte sich Richtung Finderfenster. Dann habe ich leider direkt das MBA ausgeschaltet anstatt zu warten, was da noch passiert.

Zudem war bei anschließenden Hochfahren das Passwort weg. ich musste keins mehr eingeben? Wie kann das denn bitte sein???!!!
Ich musste erst ein neues Anlegen, damit es wieder abgefragt wird.

Insofern kann ich leider nicht so ganz an die Akku- oder Trackpad-Defekt-Variante glauben

Laut der Login-Daten habe nur ich mich angemeldet (08:39 Uhr) bis zum erschreckten Herunterfahren (10:54 Uhr).

Schon gespenstisch... Soviel ich weiß (bitte berichtigen, falls...) kann man auch ohne die Vollversion von ARD einen "fremden" Bildschirm steuern.
Das mache ich ab und zu mit dem MBP meiner Tochter, wenn ich ihr mal aushelfen muss. Dazu reicht für mich ihr User-Passwort und Login-Name (und natürlich ein Mac im gleichen Netz). Ich klinke mich dann sozusagen in ihre User-Session ein.
Jemand im gleichen Haus - oder über Internet (wie auch immer?) der das kennt?
Keine Ahnung, ob sowas im "last -20" mit erscheint.

Ein ähnliches Einloggen geht auch über FaceTime. (Hab' ich aber noch nie gemacht.)

Wenn jemand in den Anmeldeoptionen (SystemeinstellunenBenutzer) eingibt, dass der Mac beim Starten ohne Passwort in einen bestimmten Account einloggen soll, dann geht das. Bei mir ist das immer so. Würde ich allerdings bei einem portablen Mac nicht so machen.