Q: How to remove trovi adware
-
Nov 12, 2014 8:16 PMby Linc Davis,There is no need to download anything to solve this problem.
You may have installed the "SearchProtect" trojan. Remove it as follows.
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchDaemons/com.perion.searchprotectd.plist
Right-click or control-click the line and select
Services â–¹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.perion.searchprotectd.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Applications/SearchProtect
~/Library/Application Support/Firefox/searchplugins/MyBrand.xml
~/Library/Application Support/Google/Chrome/External Extensions/fjadmdmahkpbhgbmmkiiaanlnlekelmn.json
~/Library/Application Support/Mozilla/Extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/deacruzemiliano@outlook.com
~/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin
~/TroviSome of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
Quit and relaunch Safari. From the menu bar, select
Safari â–¹ Preferences... â–¹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Trovi" or "palmall" in the description. If in doubt, uninstall all extensions.
Reset the default search engine and home page to what it was before.
"SearchProtect" may be distributed along with two other applications: "MacKeeper," which is a scam, and "ZipCloud," which, if not actually a scam, has a dubious reputation. Ask if you need instructions to remove those items.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go â–¹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
-
May 20, 2015 4:28 PMby kdecurtis,Hi Linc,
I'm having trouble with Searchberry, Trovi and Bing popping up in my searchbar (Safari and Google Chrome), and tons of popups. I've gone through the Library removing items noted, but I still am having trouble. In another post, you gave instructions to run a Terminal check; I ran it and the results are below. Can you advise any further on what to do?
Many thanks,
Kim
Start time: 15:53:47 05/20/15
Revision: 1251
Model Identifier: MacBookPro11,1
System Version: OS X 10.10.3 (14D136)
Kernel Version: Darwin 14.3.0
Time since boot: 21 minutes
UID: 501
Activity
CPU: user 12%, system 13%
en0: in 3202, out 75 (KiB/s)
CPU usage (%)
cloudphotosd (UID 501): 44.0
I/O requests (KiB/s)
cloudphotosd (UID 501): 3344
File opens (per sec)
mds_stores (UID 0) => . (status 0): 6
osascript (UID 501) => /Applications/Safari.app/Contents/Resources (status 0): 5
osascript (UID 501) => /.vol/16777220/8140581/osascript/..namedfork/rsrc (status 0): 5
osascript (UID 501) => /Applications/Google Chrome.app/Contents/Resources (status 0): 4
osascript (UID 501) => /usr/bin/osascript (status 0): 3
osascript (UID 501) => /usr/bin (status 0): 3
osascript (UID 501) => /System/Library/PrivateFrameworks/AppleScript.framework/Resources (status 0): 3
osascript (UID 501) => /System/Library/CoreServices/SystemVersion.bundle (status 0): 3
osascript (UID 501) => /Applications/Safari.app/Contents/Info.plist (status 0): 3
osascript (UID 501) => /Applications/Safari.app/Contents (status 0): 3
osascript (UID 501) => /Applications/Safari.app (status 0): 3
osascript (UID 501) => /Applications/Safari.app/Contents/Resources/English.lproj (status 0): 2
osascript (UID 501) => /Applications/Safari.app/Contents/Resources/Base.lproj (status 0): 2
osascript (UID 501) => /Applications/Google Chrome.app/Contents/Resources/en.lproj (status 0): 2
osascript (UID 501) => /Applications/Google Chrome.app/Contents/Resources/Base.lproj (status 0): 2
osascript (UID 501) => /Applications/Google Chrome.app/Contents/Info.plist (status 0): 2
osascript (UID 501) => /Applications/Google Chrome.app/Contents (status 0): 2
osascript (UID 501) => /Applications/Google Chrome.app (status 0): 2
osascript (UID 501) => /System/Library/ScriptingAdditions/StandardAdditions.osax/Contents/MacOS/Standa rdAdditions (status 0): 2
osascript (UID 501) => /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources (status 0): 2
cloudphotosd (UID 501) => /private/var/folders/v0/_jlf55711fx0m1dcc03f_xv80000gn/T/com.apple.cloudphotosd /TemporaryItems/(A Document Being Saved By cloudphotosd)/manifest.plist (status 0): 2
taskgated (UID 0) => /usr/bin (status 0): 2
osascript (UID 501) => /Users/USER/Library/ScriptingAdditions/BrowserHelper.osax/Contents/PkgInfo (status 0): 2
osascript (UID 501) => /Users/USER/.CFUserTextEncoding (status 0): 2
osascript (UID 501) => /System/Library/ScriptingAdditions/StandardAdditions.osax/Contents/Resources (status 0): 2
osascript (UID 501) => /System/Library/ScriptingAdditions/StandardAdditions.osax/Contents/PkgInfo (status 0): 2
osascript (UID 501) => /System/Library/ScriptingAdditions/Digital Hub Scripting.osax/Contents/Resources (status 0): 2
osascript (UID 501) => /System/Library/ScriptingAdditions/Digital Hub Scripting.osax/Contents/PkgInfo (status 0): 2
osascript (UID 501) => /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fra mework/Resources (status 0): 2
osascript (UID 501) => /System/Library/CoreServices/SystemVersion.plist (status 0): 2
osascript (UID 501) => /System/Library/Components/AppleScript.component/Contents/MacOS/AppleScript (status 0): 2
osascript (UID 501) => /.vol/16777220/8211095 (status 0): 2
osascript (UID 501) => /.vol/16777220/8210205 (status 0): 2
osascript (UID 501) => /.vol/16777220/8210179/Localized.rsrc (status 0): 2
osascript (UID 501) => /.vol/16777220/8210177/AppleScript.rsrc (status 0): 2
osascript (UID 501) => /.vol/16777220/8151504/Safari/..namedfork/rsrc (status 0): 2
osascript (UID 501) => /.vol/16777220/13721936 (status 0): 2
launchservicesd (UID 0) => /usr/bin (status 0): 2
com.apple.CodeS (UID 0) => /usr/bin (status 0): 2
System errors (per sec)
cloudphotosd (UID 501, error 35): 455
Listeners
kdc: kerberos
launchd: afpovertcp
launchd: microsoft-ds
System caches/logs
3548 MB:
Diagnostic reports
2015-04-21 discoveryd crash
2015-04-28 Microsoft Word hang
2015-04-28 discoveryd crash
2015-05-02 cloudphotosd crash
2015-05-05 cloudphotosd crash
2015-05-05 deleted crash
2015-05-05 nsurlsessiond crash
2015-05-10 deleted crash
2015-05-11 Google Chrome crash
2015-05-11 iPhoto hang
2015-05-20 VTDecoderXPCService crash
HID errors: 6
Kernel log
May 20 13:54:17 Google Chrome He (map: 0xffffff80295553c0) triggered DYLD shared region unnest for map: 0xffffff80295553c0, region 0x7fff8f600000->0x7fff8f800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 13:54:37 Google Chrome He (map: 0xffffff802d0c1870) triggered DYLD shared region unnest for map: 0xffffff802d0c1870, region 0x7fff8f600000->0x7fff8f800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:02:11 Google Chrome He (map: 0xffffff8029555870) triggered DYLD shared region unnest for map: 0xffffff8029555870, region 0x7fff8f600000->0x7fff8f800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:14:07 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
May 20 14:14:45 Google Chrome (map: 0xffffff80275a6b40) triggered DYLD shared region unnest for map: 0xffffff80275a6b40, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:14:47 Google Chrome He (map: 0xffffff80274f0b40) triggered DYLD shared region unnest for map: 0xffffff80274f0b40, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:14:47 Google Chrome He (map: 0xffffff802a7405a0) triggered DYLD shared region unnest for map: 0xffffff802a7405a0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:14:48 Google Chrome He (map: 0xffffff802d8aa3c0) triggered DYLD shared region unnest for map: 0xffffff802d8aa3c0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:14:49 Google Chrome He (map: 0xffffff802d9372d0) triggered DYLD shared region unnest for map: 0xffffff802d9372d0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:14:49 Google Chrome He (map: 0xffffff802d9373c0) triggered DYLD shared region unnest for map: 0xffffff802d9373c0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:14:49 Google Chrome He (map: 0xffffff802d9371e0) triggered DYLD shared region unnest for map: 0xffffff802d9371e0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 14:18:56 Google Chrome He (map: 0xffffff80297ebc30) triggered DYLD shared region unnest for map: 0xffffff80297ebc30, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:03:04 Google Chrome He (map: 0xffffff802d937a50) triggered DYLD shared region unnest for map: 0xffffff802d937a50, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:16 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
May 20 15:19:17 USBF: 4. 58 USBF: 4. 58 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying againIOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again
May 20 15:19:18 USBF: 4.389 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again
May 20 15:19:18 USBF: 4.390 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again
May 20 15:19:30 Google Chrome (map: 0xffffff8027bcf4b0) triggered DYLD shared region unnest for map: 0xffffff8027bcf4b0, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:36 Google Chrome He (map: 0xffffff802c18f0f0) triggered DYLD shared region unnest for map: 0xffffff802c18f0f0, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:37 Google Chrome He (map: 0xffffff802cedcc30) triggered DYLD shared region unnest for map: 0xffffff802cedcc30, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:38 Google Chrome He (map: 0xffffff802cedc960) triggered DYLD shared region unnest for map: 0xffffff802cedc960, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:39 Google Chrome He (map: 0xffffff802cedc780) triggered DYLD shared region unnest for map: 0xffffff802cedc780, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:39 Google Chrome He (map: 0xffffff802dbfae10) triggered DYLD shared region unnest for map: 0xffffff802dbfae10, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:39 Google Chrome He (map: 0xffffff802dbfac30) triggered DYLD shared region unnest for map: 0xffffff802dbfac30, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
May 20 15:19:40 Google Chrome He (map: 0xffffff802cedc3c0) triggered DYLD shared region unnest for map: 0xffffff802cedc3c0, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
System log
May 20 15:34:35 cloudd: Stream 0x7fce425e8880 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce426e93e0 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce425e8880 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce425e8cf0 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce425e9c90 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce425e5830 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce425e8cf0 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce424d6280 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce426dfe10 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce425e9c90 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce425e5830 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce424d6280 is sending an event before being opened
May 20 15:34:35 cloudd: Stream 0x7fce426dfe10 is sending an event before being opened
May 20 15:34:36 cloudd: Stream 0x7fce424d6280 is sending an event before being opened
May 20 15:34:36 cloudd: Stream 0x7fce426dfe10 is sending an event before being opened
May 20 15:34:37 secd: SecOSStatusWith error:[-50] The operation couldn’t be completed. (OSStatus error -50 - applier: key v_Ref has NULL value)
May 20 15:34:37 secd: SOSPeerCoderInitializeForPeer Found data but couldn't make coder for vhhVOFycnGRWAr/OikWyUCK7/p: (null)
May 20 15:34:44 Service: AppleEvents: Send port for process has no send right, port=( port:32271/0x7e0f rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
May 20 15:34:46 Service: AppleEvents: Send port for process has no send right, port=( port:32271/0x7e0f rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
May 20 15:34:49 cloudphotosd: Unable to get asset collection UUID from shared streams model
May 20 15:34:49 cloudphotosd: Import downloaded assets: stream UUID unable to create import request for item UUID: Error Domain=ICPPhotoErrorDomain Code=9 "The operation couldn’t be completed. (ICPPhotoErrorDomain error 9.)"
May 20 15:39:55 WindowServer: WSGetSurfaceInWindow Invalid surface 943567576 for window 86
May 20 15:49:52 WindowServer: window 60 is already attached to window 5e
May 20 15:49:53 WindowServer: window 60 is already attached to window 5e
May 20 15:49:53 WindowServer: window 60 is already attached to window 5e
Console log
May 14 06:25:47 nsurlstoraged: Process 2009 does not have access to path /Users/USER/Library/Caches/com.apple.AddressBookSourceSync/Cache.db
May 19 17:44:23 ReportCrash: Invoking spindump for pid=7143 wakeups_rate=522 duration=87 because of excessive wakeups
May 19 17:59:36 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
May 19 18:01:32 nsurlstoraged: Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=PRAGMA auto_vacuum = 2;, error-code=8, error-message=attempt to write a readonly database
May 20 07:39:29 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
May 20 13:36:38 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
May 20 14:14:38 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
May 20 15:19:33 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
May 20 15:34:34 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
Daemons
com.adobe.fpsaud
com.apple.watchdogd
com.intego.BackupAssistant.daemon
com.microsoft.office.licensing.helper
com.oracle.java.Helper-Tool
com.oracle.java.JavaUpdateHelper
com.period.searchprotectd
- status: 78
org.macosforge.xquartz.privileged_startx
Agents
com.Installer.completer.download
com.Installer.completer.ltvbit
com.Installer.completer.update
com.divx.dms.agent
com.divx.update.agent
com.extensions.updater67619.agent.plist
com.flashmall.agent
com.google.keystone.user.agent
com.intego.backupassistant.agent
com.jdibackup.ZipCloud.autostart
- status: 1
com.jdibackup.ZipCloud.notify
- status: 1
com.oracle.java.Java-Updater
com.webhelper
com.webtools.uninstaller.app
com.webtools.update.0.0.0.9.agent
org.macosforge.xquartz.startx
User overrides
com.evernote.EvernoteHelper
Startup items
/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/Info.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent
/Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngine
/Library/StartupItems/Intego Backup Assistant/PowerManagerTool
/Library/StartupItems/Intego Backup Assistant/uninstall.sh
User login items
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
Google Chrome
- /Applications/Google Chrome.app
iCloud errors
cloudd 227
cloudphotosd 63
Finder 6
Mail 3
Continuity errors
lsuseractivityd 8
sharingd 2
Restricted files: 49
Lockfiles: 1
Accessibility
Scroll Zoom: On
Contents of /Library/LaunchAgents/com.divx.dms.agent.plist
- mod date: Dec 22 21:08:09 2013
- checksum: 3097025559
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.divx.dms.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/DivX/DMSLaunch.app/Contents/MacOS/DMSLaunch</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.divx.update.agent.plist
- mod date: Dec 28 00:20:27 2013
- checksum: 3867571547
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.divx.update.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/DivX/DivXUpdate.app/Contents/MacOS/DivXUpdate</string>
<string>/silent</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>10800</integer>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.intego.backupassistant.agent.plist
- mod date: Oct 24 08:08:04 2012
- checksum: 2485335348
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.intego.backupassistant.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent</string>
<string>--launchd</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/.startAgent</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
- mod date: Sep 4 16:46:51 2014
- checksum: 2290330801
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.Java-Updater</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
<string>-bgcheck</string>
</array>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>18</integer>
<key>Minute</key>
<integer>34</integer>
<key>Weekday</key>
<integer>5</integer>
</dict>
</dict>
...and 1 more line(s)
Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist
- mod date: Dec 3 23:22:56 2013
- checksum: 1581764341
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.teamviewer.teamviewer</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>
<string>-RunAsAgent</string>
<string>YES</string>
</array>
<key>WorkingDirectory</key>
<string>/Applications/TeamViewer.app/Contents/MacOS/</string>
<key>RunAtLoad</key>
<true/>
<key>OnDemand</key>
<false/>
<key>Disabled</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist
- mod date: Dec 3 23:22:56 2013
- checksum: 132335822
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.teamviewer.desktop</string>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>ProgramArguments</key>
<array>
<string>/Applications/TeamViewer.app/Contents/Resources/TeamViewer_Desktop</str ing>
<string>-RunAsAgent</string>
<string>YES</string>
<string>-Module</string>
<string>Full</string>
</array>
<key>WorkingDirectory</key>
<string>/Applications/TeamViewer.app/Contents/Resources/</string>
<key>RunAtLoad</key>
<true/>
<key>OnDemand</key>
<false/>
...and 4 more line(s)
Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist
- mod date: Aug 11 14:52:54 2014
- checksum: 2451978492
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.macosforge.xquartz.startx</string>
<key>ProgramArguments</key>
<array>
<string>/opt/X11/lib/X11/xinit/launchd_startx</string>
<string>/opt/X11/bin/startx</string>
<string>--</string>
<string>/opt/X11/bin/Xquartz</string>
</array>
<key>Sockets</key>
<dict>
<key>org.macosforge.xquartz:0</key>
<dict>
<key>SecureSocketWithKey</key>
<string>DISPLAY</string>
</dict>
</dict>
<key>ServiceIPC</key>
<true/>
<key>EnableTransactions</key>
<true/>
...and 2 more line(s)
Contents of /Library/LaunchDaemons/com.intego.BackupAssistant.daemon.plist
- mod date: Oct 24 08:08:04 2012
- checksum: 107931800
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd >
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.intego.BackupAssistant.daemon</string>
<key>ProgramArguments</key>
<array>
<string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon</string>
</array>
<key>OnDemand</key>
<false/>
<key>RunAtLoad</key>
<true/>
<key>ServiceDescription</key>
<string>Allow Intego Backup Assistant tasks to be launched.</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist
- mod date: Dec 3 23:22:56 2013
- checksum: 643960326
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>com.teamviewer.service</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Applications/TeamViewer.app/Contents/Resources/TeamViewer_Service</str ing>
<string>-Module</string>
<string>Full</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>WorkingDirectory</key>
<string>/Applications/TeamViewer.app/Contents/Resources</string>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: Apr 29 02:06:02 2015
- checksum: 3012644940
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>EnvironmentVariables</key>
<dict>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd-wrapper</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /private/etc/ssh_config
- mod date: Apr 14 13:19:28 2015
- checksum: 2841432291
Host *
SendEnv LANG LC_*
Host *
XAuthLocation /opt/X11/bin/xauth
Contents of /private/etc/sshd_config
- mod date: Apr 14 13:19:28 2015
- checksum: 2518667249
SyslogFacility AUTHPRIV
AuthorizedKeysFile .ssh/authorized_keys
UsePrivilegeSeparation sandbox # Default for new installations.
AcceptEnv LANG LC_*
Subsystem sftp /usr/libexec/sftp-server
XAuthLocation /opt/X11/bin/xauth
Contents of Library/LaunchAgents/com.Installer.completer.download.plist
- mod date: May 19 18:05:22 2015
- checksum: 1083347336
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer.download</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>download</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544680028</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Users/USER/Downloads</string>
</array>
<key>isAllowToSuggest</key>
<string>false</string>
</dict>
...and 1 more line(s)
Contents of Library/LaunchAgents/com.Installer.completer.ltvbit.plist
- mod date: May 19 18:05:23 2015
- checksum: 3969366706
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer.ltvbit</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>ltvbit</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544680028</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>4</integer>
<key>Minute</key>
<integer>55</integer>
</dict>
...and 2 more line(s)
Contents of Library/LaunchAgents/com.Installer.completer.update.plist
- mod date: May 19 18:05:22 2015
- checksum: 3997477700
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer.update</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>update</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544680028</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>18</integer>
<key>Minute</key>
...and 4 more line(s)
Contents of Library/LaunchAgents/com.extensions.updater67619.agent.plist
- mod date: May 19 18:05:28 2015
- checksum: 2586846941
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.extensions.updater67619.agent.plist</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/LaunchAgents/UpdateDownloader</string>
<string>cmpId=2498</string>
<string>ibic=UUID</string>
<string>verifier=UUID</string>
<string>extId=67619</string>
<string>updatejsondomain=http://update.staticclientstorage.com</string>
<string>statsdomain=http://stats.staticclientstorage.com</string>
<string>eventsdomain=http://logs.staticclientstorage.com</string>
<string>errorsdomain=http://errors.staticclientstorage.com</string>
<string>installerversion=01-27</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>86400</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.flashmall.agent.plist
- mod date: May 19 17:36:33 2015
- checksum: 4294721044
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.flashmall.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/flashmall/Service.app/Contents/MacOS/Service</strin g>
<string>--service</string>
<string>--unique_id=UUID</string>
<string>--unique_data=UUID</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.google.keystone.agent.plist
- mod date: Mar 10 13:17:12 2015
- checksum: 2428256042
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.google.keystone.user.agent</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
<string>-runMode</string>
<string>ifneeded</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3523</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
- mod date: Apr 14 13:24:46 2015
- checksum: 844851161
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.autostart</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>-n</string>
<string>--args</string>
<string>9</string>
<string>-l</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
- mod date: Apr 14 13:24:46 2015
- checksum: 2802169871
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.notify</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>--args</string>
<string>7</string>
<string>1</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>StartInterval</key>
<integer>1200</integer>
<key>RunAtLoad</key>
<false/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.webhelper.plist
- mod date: May 19 18:05:21 2015
- checksum: 435810497
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.webhelper</string>
<key>EnableGlobbing</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>
<string>-guid</string>
<string>UUID</string>
<string>-source</string>
<string>mm-1521</string>
<string>-brand</string>
</array>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>OnDemand</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
...and 6 more line(s)
Contents of Library/LaunchAgents/com.webtools.uninstaller.plist
- mod date: May 19 18:05:21 2015
- checksum: 2477764744
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.webtools.uninstaller.app</string>
<key>EnableGlobbing</key>
<true/>
<key>WatchPaths</key>
<array>
<string>/Applications/WebTools.app</string>
</array>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/webHelperApp/uninstall</string>
</array>
</dict>
</plist>
Contents of Library/LaunchAgents/com.webtools.update.agent.plist
- mod date: May 19 17:36:32 2015
- checksum: 637836098
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.webtools.update.0.0.0.9.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>StartInterval</key>
<integer>600</integer>
<key>ThrottleInterval</key>
...and 3 more line(s)
Extensions
/System/Library/Extensions/JMicronATA.kext
- com.jmicron.JMicronATA
Applications
/Applications/DivX/DivX Preferences.app
- com.divx.divxprefs
/Applications/DivX/Uninstall DivX for Mac.app
- com.divxinc.uninstalldivxformac
/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app
- com.microsoft.ASApplication
/Applications/Microsoft Office 2011/Office/Equation Editor.app
- com.microsoft.EquationEditor
/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app
- com.microsoft.office.setupassistant
/Applications/Microsoft Office 2011/Office/Microsoft Query.app
- com.microsoft.Query
/Applications/Utilities/XQuartz.app
- org.macosforge.xquartz.X11
/Applications/WebTools.app
- N/A
/Applications/mediaDownloader.app
- com.yourcompany.mediaDownloader
/Library/Application Support/DivX/DMSLaunch.app
- com.yourcompany.DMSLaunch
/Library/Application Support/DivX/DivXMediaServer.app
- com.divx.DivX_Media_Server
/Library/Application Support/DivX/DivXTransferWizard.app
- com.divx.TransferWizard
/Library/Application Support/DivX/DivXUpdate.app
- com.divx.DivXUpdate
/Library/Application Support/DivX/DivXUpdater.app
- com.divx.DivXUpdater
/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app
- com.microsoft.silverlight.sllauncher
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_ejjicmeblgpmajnghnpcppodonldlgfn/Default ejjicmeblgpmajnghnpcppodonldlgfn.app
- com.google.Chrome.app.Default-ejjicmeblgpmajnghnpcppodonldlgfn-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_gbchcmhmhahfdphkhkmpfmihenigjmpp/Default gbchcmhmhahfdphkhkmpfmihenigjmpp.app
- com.google.Chrome.app.Default-gbchcmhmhahfdphkhkmpfmihenigjmpp-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_mijlebbfndhelmdpmllgcfadlkankhok/Default mijlebbfndhelmdpmllgcfadlkankhok.app
- com.google.Chrome.app.Default-mijlebbfndhelmdpmllgcfadlkankhok-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app
- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
Frameworks
/Library/Frameworks/DivX Toolkit.framework
- com.divx.divxtoolkit
/Library/Frameworks/DivXInstallerUtilities.framework
- com.yourcompany.DivXInstallerUtilities
/Library/Frameworks/MacFUSE.framework
- com.google.MacFUSE
/Library/Frameworks/OSXFUSE.framework
- com.github.osxfuse.framework
PrefPane
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane
- com.oracle.java.JavaControlPanel
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Library/PreferencePanes/OSXFUSE.prefPane
- com.github.osxfuse.OSXFUSEPrefPane
Bundles
/Library/Internet Plug-Ins/DivX Web Player.plugin
- com.divx.DivXWebPlayer
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash Player.plugin
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
- com.oracle.java.JavaAppletPlugin
/Library/Internet Plug-Ins/OVSHelper.plugin
- com.divx.OVSHelper
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Internet Plug-Ins/Silverlight.plugin
- com.microsoft.SilverlightPlugin
/Library/Widgets/Intego Backup Assistant Widget.wdgt
- com.intego.widget.backupassistant
/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/12.0.0.70/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
Bundles (new)
/Applications/Adobe Photoshop Lightroom 5.app
- com.adobe.Lightroom5
/Applications/MPlayerX.app
- org.niltsh.MPlayerX
/Applications/WebTools.app
-
/Applications/iMovie.app
- com.apple.iMovieApp
/Applications/mediaDownloader.app
- com.yourcompany.mediaDownloader
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash Player.plugin
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Users/USER/Applications/flashmall.app
- com.flashmall.AppHelper
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_mijlebbfndhelmdpmllgcfadlkankhok/Default mijlebbfndhelmdpmllgcfadlkankhok.app
- com.google.Chrome.app.Default-mijlebbfndhelmdpmllgcfadlkankhok-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app
- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal
/Users/USER/Library/Application Support/IM.Installer/Completer.app
- com.tabatoo.InstallerT
/Users/USER/Library/flashmall/Service.app
- com.flashmall.Service
Library paths
/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib
/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib
/Library/Application Support/DivX/DesktopService/libDivXDownloadManager.dylib
/Library/Application Support/DivX/Libraries/DivXUpdateCheckDll.dylib
/Library/Application Support/DivX/Libraries/libDivXDesktopSupport.dylib
/Library/Application Support/DivX/Libraries/libicudata.40.1.dylib
/Library/Application Support/DivX/Libraries/libicuuc.40.1.dylib
/Library/Application Support/DivX/QtPlugins/accessible/libqtaccessiblewidgets.dylib
/Library/Application Support/DivX/QtPlugins/codecs/libqcncodecs.dylib
/Library/Application Support/DivX/QtPlugins/codecs/libqjpcodecs.dylib
/Library/Application Support/DivX/QtPlugins/codecs/libqkrcodecs.dylib
/Library/Application Support/DivX/QtPlugins/codecs/libqtwcodecs.dylib
/Library/Application Support/DivX/QtPlugins/iconengines/libqsvgicon.dylib
/Library/Application Support/DivX/QtPlugins/imageformats/libqgif.dylib
/Library/Application Support/DivX/QtPlugins/imageformats/libqico.dylib
/Library/Application Support/DivX/QtPlugins/imageformats/libqjpeg.dylib
/Library/Application Support/DivX/QtPlugins/imageformats/libqmng.dylib
/Library/Application Support/DivX/QtPlugins/imageformats/libqsvg.dylib
/Library/Application Support/DivX/QtPlugins/imageformats/libqtiff.dylib
/Library/Application Support/DivX/QtPlugins/sqldrivers/libqsqlite.dylib
/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libmacfuse_i32 .2.dylib.dSYM/Contents/Resources/DWARF/libmacfuse_i32.2.dylib
/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libmacfuse_i64 .2.dylib.dSYM/Contents/Resources/DWARF/libmacfuse_i64.2.dylib
/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libosxfuse_i32 .dylib.dSYM/Contents/Resources/DWARF/libosxfuse_i32.dylib
/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libosxfuse_i64 .dylib.dSYM/Contents/Resources/DWARF/libosxfuse_i64.dylib
/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.7.796/_platform_specific/mac_x64/libwidev inecdm.dylib
/opt/X11/lib/libAppleWM.7.dylib
/opt/X11/lib/libFS.6.dylib
/opt/X11/lib/libGL.1.dylib
/opt/X11/lib/libGLU.1.dylib
/opt/X11/lib/libICE.6.dylib
/opt/X11/lib/libOSMesa.8.dylib
/opt/X11/lib/libOpenVG.1.dylib
/opt/X11/lib/libSM.6.dylib
/opt/X11/lib/libX11-xcb.1.dylib
/opt/X11/lib/libX11.6.dylib
/opt/X11/lib/libXRes.1.dylib
/opt/X11/lib/libXTrap.6.dylib
/opt/X11/lib/libXau.6.dylib
/opt/X11/lib/libXaw3d.8.dylib
/opt/X11/lib/libXaw6.6.dylib
/opt/X11/lib/libXaw7.7.dylib
/opt/X11/lib/libXaw8.8.dylib
/opt/X11/lib/libXcomposite.1.dylib
/opt/X11/lib/libXcursor.1.dylib
/opt/X11/lib/libXdamage.1.dylib
/opt/X11/lib/libXdmcp.6.dylib
/opt/X11/lib/libXevie.1.dylib
/opt/X11/lib/libXext.6.dylib
/opt/X11/lib/libXfixes.3.dylib
/opt/X11/lib/libXfont.1.dylib
/opt/X11/lib/libXfontcache.1.dylib
/opt/X11/lib/libXft.2.dylib
/opt/X11/lib/libXi.6.dylib
/opt/X11/lib/libXinerama.1.dylib
/opt/X11/lib/libXmu.6.dylib
/opt/X11/lib/libXmuu.1.dylib
/opt/X11/lib/libXp.6.dylib
/opt/X11/lib/libXplugin.1.dylib
/opt/X11/lib/libXpm.4.dylib
/opt/X11/lib/libXrandr.2.dylib
/opt/X11/lib/libXrender.1.dylib
/opt/X11/lib/libXss.1.dylib
/opt/X11/lib/libXt.6.dylib
/opt/X11/lib/libXtst.6.dylib
/opt/X11/lib/libXv.1.dylib
/opt/X11/lib/libXvMC.1.dylib
/opt/X11/lib/libXvMCW.1.dylib
/opt/X11/lib/libXxf86misc.1.dylib
/opt/X11/lib/libXxf86vm.1.dylib
/opt/X11/lib/libcairo-script-interpreter.2.dylib
/opt/X11/lib/libcairo.2.dylib
/opt/X11/lib/libdmx.1.dylib
/opt/X11/lib/libfontconfig.1.dylib
/opt/X11/lib/libfontenc.1.dylib
/opt/X11/lib/libfreetype.6.dylib
/opt/X11/lib/libglut.3.dylib
/opt/X11/lib/libpixman-1.0.dylib
/opt/X11/lib/libpng.3.dylib
/opt/X11/lib/libpng12.0.dylib
/opt/X11/lib/libpng14.14.dylib
/opt/X11/lib/libpng15.15.dylib
/opt/X11/lib/libxcb-composite.0.dylib
/opt/X11/lib/libxcb-cursor.0.dylib
/opt/X11/lib/libxcb-damage.0.dylib
/opt/X11/lib/libxcb-dpms.0.dylib
/opt/X11/lib/libxcb-dri2.0.dylib
/opt/X11/lib/libxcb-dri3.0.dylib
/opt/X11/lib/libxcb-ewmh.2.dylib
/opt/X11/lib/libxcb-glx.0.dylib
/opt/X11/lib/libxcb-icccm.4.dylib
/opt/X11/lib/libxcb-image.0.dylib
/opt/X11/lib/libxcb-keysyms.1.dylib
/opt/X11/lib/libxcb-present.0.dylib
/opt/X11/lib/libxcb-randr.0.dylib
/opt/X11/lib/libxcb-record.0.dylib
/opt/X11/lib/libxcb-render-util.0.dylib
/opt/X11/lib/libxcb-render.0.dylib
/opt/X11/lib/libxcb-res.0.dylib
/opt/X11/lib/libxcb-screensaver.0.dylib
/opt/X11/lib/libxcb-shape.0.dylib
/opt/X11/lib/libxcb-shm.0.dylib
/opt/X11/lib/libxcb-sync.1.dylib
/opt/X11/lib/libxcb-util.1.dylib
/opt/X11/lib/libxcb-xevie.0.dylib
/opt/X11/lib/libxcb-xf86dri.0.dylib
/opt/X11/lib/libxcb-xfixes.0.dylib
/opt/X11/lib/libxcb-xinerama.0.dylib
/opt/X11/lib/libxcb-xkb.1.dylib
/opt/X11/lib/libxcb-xprint.0.dylib
/opt/X11/lib/libxcb-xtest.0.dylib
/opt/X11/lib/libxcb-xv.0.dylib
/opt/X11/lib/libxcb-xvmc.0.dylib
/opt/X11/lib/libxcb.1.dylib
/opt/X11/lib/libxkbfile.1.dylib
/opt/X11/lib/libxkbui.1.dylib
/opt/X11/lib/libxshmfence.1.dylib
/usr/local/lib/libmacfuse_i32.2.dylib
/usr/local/lib/libmacfuse_i64.2.dylib
/usr/local/lib/libosxfuse_i32.2.dylib
/usr/local/lib/libosxfuse_i64.2.dylib
Installations
Xerox Printer: 1/17/14, 11:14
TeamViewer: 1/17/14, 10:58
DivX: 1/10/14, 10:25
Microsoft Office for Mac 2011: 1/7/14, 11:01
Adobe Flash Player: 12/31/13, 17:55
Elapsed time (sec): 414
