What is UninstallGuard and why is it causing crashes?
|
|
Thread rating:  |
John Chambers - 27 Nov 2006 20:27 GMT Since my PB's last upgrade (10.4.8), I've been getting a lot of crashes of what looks like random apps, and when I look in the Console log, what I see is stuff like these two most recent crashes:
UninstallGuard: TypeError: Components.classes['@mozilla.org/extensions/manager;1'] has no properties Nov 27 10:30:55 minya crashdump[1524]: firefox-bin crashed 2006-11-27 10:30:59.789 Talkback[1528] Could not find image named 'supportsoft'. 2006-11-27 10:30:59.798 Talkback[1528] Could not find image named 'firefox'. Nov 27 10:31:08 minya crashdump[1524]: crash report written to: /Users/jc/Library/Logs/CrashReporter/firefox-bin.crash.log UninstallGuard: TypeError: Components.classes['@mozilla.org/extensions/manager;1'] has no properties Nov 27 15:08:51 minya crashdump[1606]: Activity Monitor crashed Nov 27 15:08:52 minya crashdump[1606]: crash report written to: /Users/jc/Library/Logs/CrashReporter/Activity Monitor.crash.log
This doesn't seem to be associated with any particular app. And when I ask spotlight about UninstallGuard, it says "No Results". I also tried googling for it, and got only 6 matches, all pointing to some Symantec thing (which I hope didn't get installed somehow ;-). I even tried Apple Support, and their Search thing found no match for "UninstallGuard".
I did try the usual reboot, but that didn't seem to have any effect. I still get these crashes of random apps every few hours.
Steve W. Jackson - 27 Nov 2006 20:42 GMT > Since my PB's last upgrade (10.4.8), I've been getting a lot of crashes of > what looks like random apps, and when I look in the Console log, what [quoted text clipped - 22 lines] > I did try the usual reboot, but that didn't seem to have any effect. I still > get these crashes of random apps every few hours. That Google result suggests that it's part of Norton CrashGuard...part of the Norton Utilities for Macintosh. Has this particular PB *ever* had NUM installed? If so, it suggests that there are remnants out there somewhere and you should look into ways of finding all the remaining pieces and killing them -- permanently.
= Steve =
 Signature Steve W. Jackson Montgomery, Alabama
John Chambers - 27 Nov 2006 20:56 GMT > That Google result suggests that it's part of Norton CrashGuard...part > of the Norton Utilities for Macintosh. Has this particular PB *ever* > had NUM installed? If so, it suggests that there are remnants out there > somewhere and you should look into ways of finding all the remaining > pieces and killing them -- permanently. Not to my knowledge, or to Spotlight's. There's nothing with "CrashGuard" in its name on the system, and I'm guessing that Spotlight does a caseless comparison.
Actually, I have no idea what NUM might be. How would I recognize it or its pieces, if they are present?
Needless to say, Spotlight finds "NUM" all over, 679 of them, in things with names like "Raimo Nummela", "Dict_Chinese_num.utf8.html", etc., but I doubt if these have any relevance.
Dave Balderstone - 27 Nov 2006 21:54 GMT > Actually, I have no idea what NUM might be. How would I recognize it or > its pieces, if they are present? NUM = Norton Utilities for Macintosh, which should never,ever, be allowed within 100 yards of any Mac running OS X.
John Chambers - 28 Nov 2006 02:34 GMT >> Actually, I have no idea what NUM might be. How would I recognize it or >> its pieces, if they are present? > > NUM = Norton Utilities for Macintosh, which should never,ever, be > allowed within 100 yards of any Mac running OS X. Yeah; I've read that. So the question remains: Does this have something to do with the crashes that I described, and if so, how would I go about doing a hunt-and-destroy on the little beastie?
Or is this just a WAG, and it's actually something else? Recall that I've been getting messages from something called "UninstallGuard", which doesn't seem to correspond to any file name in my system. It's most likely something in a library, but I don't know a good way to go about finding all possible libraries and asking about names.
It's funny that google turns up so little for this character string. But what is turned up does mention Norton and symantec.com, so maybe they're the culprits. I just don't know what their files might be called.
Actually, looking at the 6 matches, I see that five are press releases and the other one is in Portuguese. I also see that the press releases are about something called "CrashGuard Deluxe". Spotlight doesn't find any match for "CrashGuard" on my system, either. If this were the culprit, you'd think that a few files would contain "CrashGuard".
Dave Balderstone - 28 Nov 2006 03:16 GMT > Spotlight doesn't > find any match for "CrashGuard" on my system, either. If this were > the culprit, you'd think that a few files would contain "CrashGuard". Spotlight doesn't show you nearly everything actually installed on your Mac.
Open Terminal, type:
man locate
John Chambers - 28 Nov 2006 17:43 GMT > Open Terminal, type: > > man locate Actually, I'd tried that, but did a few more tries. It didn't find anything for "*Install*Guard*". I tried just "Guard", and it found a bunch of files with names like NationalGuardsHornpipe.abc, QueensGuardsReel_1.abc and March_3rd_Regt_Dragoon_Guards_1.abc. They were under my "music" directory, so I know what they contain. There's also a SusanDeGuardiola file in my People directory, and you might guess what it contains.
I also tried "Install", and got a zillion matches, since nearly any package of any sort has a file with a name like that. (Actually, there were only 2241 matches; I exaggerated a bit. ;-)
So the obvious keywords don't work. Any suggestions for what I should try to locate?
"Norton" doesn't work, either. It finds only two files, versions of Norton's Favorite Hornpipe, inside my music directory.
Dave Balderstone - 28 Nov 2006 18:06 GMT > So the obvious keywords don't work. Any suggestions for what I should > try to locate? No, sorry.
Tom Harrington - 28 Nov 2006 18:38 GMT > > Open Terminal, type: > > [quoted text clipped - 13 lines] > So the obvious keywords don't work. Any suggestions for what I should > try to locate? Err, did you try "Uninstall"? Also note that locate is case-sensitive, so looking for "Install" is not going to find "Uninstall".
 Signature Tom "Tom" Harrington MondoMouse makes your mouse mightier See http://www.atomicbird.com/mondomouse/
John Chambers - 28 Nov 2006 19:33 GMT >> So the obvious keywords don't work. Any suggestions for what I should >> try to locate? > > Err, did you try "Uninstall"? Also note that locate is case-sensitive, > so looking for "Install" is not going to find "Uninstall". Yeah, but just to make sure, I tried it again and made sure that I had the capitalization correct. It found some matches, all in the directory "/Applications/Flip4Mac/Flip4Mac WMV Uninstaller.pkg/". I don't think that's the likely culprit.
Warren Oates - 28 Nov 2006 21:37 GMT > Yeah, but just to make sure, I tried it again and made sure that I had > the capitalization correct. It found some matches, all in the directory > "/Applications/Flip4Mac/Flip4Mac WMV Uninstaller.pkg/". I don't > think that's the likely culprit. Did you look in the various crash logs to see what it says? For instance in /Users/jc/Library/Logs/CrashReporter/firefox-bin.crash.log
You could try removing any extensions you've got for Firefox.
 Signature W. Oates
John Chambers - 29 Nov 2006 18:57 GMT > Did you look in the various crash logs to see what it says? For instance > in /Users/jc/Library/Logs/CrashReporter/firefox-bin.crash.log Yeah; the most interesting thing there are the lines near the top:
PID: 797 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_INVALID_ADDRESS (0x0001) at 0x0972e000
This makes it look like the top-level thread caused a mem fault inside the kernel. Oops!
> You could try removing any extensions you've got for Firefox. Well, yeah, but remember that this UninstallGuard only killed FF once. In the example I gave, it also killed Activity Monitor, which probably isn't any relative of FF. The other times, it killed random-looking other apps. So it probably isn't something inside FF. It could be something inside some library routine that they all call. (or it could be a kernel bug, since that's where both of these apps crashed, according to their *.crash.log files. ;-)
I wonder if I should send one of these crash.log files to someone? I do see that there a number of them in my Library/Logs directory, and I find that "KERN_INVALID_ADDRESS" string in 21 of them.
John Rethorst - 28 Nov 2006 03:56 GMT > I'm guessing that Spotlight does a caseless > comparison. Correct.
> NUM = Norton Utilities for Macintosh, which should never,ever, be > allowed within 100 yards of any Mac running OS X. Or a Mac running anything else. It was causing problems, e.g. causing Canvas to crash because of its illegal use of memory, back in system 7 days.
> It's funny that google turns up so little for this character string. But > what is turned up does mention Norton and symantec.com, so maybe > they're the culprits. That's a good guess.
> Spotlight doesn't show you nearly everything actually installed on your > Mac. > > Open Terminal, type: > > man locate Or d/l the nice free utility EasyFind. Doesn't index, but does find it (including invisibles) if it's there.
 Signature John Rethorst jrethorst at post dot com
|
|
|