-
All replies
-
Helpful answers
-
Nov 18, 2014 6:31 AM in response to AggelakasKby AggelakasK,Linc !! did I manage the hole idea?
Sorry Thomas I had to worked internal first without installing something new..
-
Nov 18, 2014 6:53 AM in response to AggelakasKby thomas_r.,AggelakasK wrote:
Sorry Thomas I had to worked internal first without installing something new..
Not a problem at all, you have to do what makes you most comfortable.
From the output generated, I don't see anything AdwareMedic would have removed anyway. It does not look like your problem is due to adware installed on your computer. Another alternative is that you may be on a network that has been compromised in some way. See:
http://www.adwaremedic.com/kb/baddns.php
http://www.adwaremedic.com/kb/hackedrouter.php
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)
-
Nov 18, 2014 9:07 AM in response to AggelakasKby Linc Davis,★HelpfulYou don't have adware. Probably you're just seeing normal web content; the "MacKeeper" scam is promoted very aggressively. Ad-blocking software such as "GlimmerBlocker" will help, but it can sometimes have unintended effects.
I doubt that your router has been compromised, but it is using the obsolete and insecure WPA encryption standard. You should change the encryption setting on the router to "WPA 2 Personal." I can't give you specific instructions, because all routers are different. If it doesn't support that standard, it should be replaced.
-
Nov 18, 2014 9:29 AM in response to Linc Davisby AggelakasK,It wasn't so difficult at last!!! i had to read your instructions very carefully over and over again to understand exactly the procedure. I was really felt that i was infected by this adware cause it is always pops up in different languages in different spots all the time whatever site i am visiting !!! I am very careful with what i am doing with the mac ..Thanks a lot for your useful advises and keep up the good work!
greetings from Greece and i have to apologize for my english ..
-
Nov 18, 2014 9:38 AM in response to AggelakasKby Linc Davis,Thanks for the kind words, and there is no need to apologize for your English. But I'm confused. Do you mean that you did remove VSearch? I ask because, if you did not have VSearch, but you have started to see ads on websites where you did not see them before, then maybe your router really is compromised, or (more likely) the DNS servers of your ISP have been compromised by a cache-poisoning attack.
-
Nov 18, 2014 9:42 AM in response to Linc Davisby Csound1,Linc Davis wrote:
You have been told that my shell script is "obfuscated," meaning that I am trying to conceal something in it. That's false, and it wouldn't be too strong to call the statement a lie. The truth is that the person who made that statement lacks the ability to understand the script.
As do the majority of people who will read it and Thomas's post.
There is no reason (lacking knowledge) to trust you any more than anyone else.
Heads or Tails?
-
Nov 18, 2014 9:43 AM in response to Linc Davisby AggelakasK,i didn't found Vsearch at all or i didn't search well enough? ...i thought that you said to me that i don't have an adware ! I am looking the possibility that its router's matter, since i see the same ads at my iPad ..
-
Nov 18, 2014 9:52 AM in response to AggelakasKby Linc Davis,Back up all data.
Unlock the Network preference pane, if necessary, by clicking the lock icon in the lower left corner and entering your password. Cllck Advanced, open the DNS tab, and change the server addresses to the following:
8.8.8.8
8.8.4.4
That's Google DNS. Click OK, then Apply.
In Safari, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
and confirm. If you’re using another browser, empty the cache. Test. Any difference?
Notes:
1. If you lose Internet access after making the above change to your network settings, delete the Google servers in the Network preference pane, then select the TCP/IP tab and click Renew DHCP Lease. That should restore the original DNS settings; otherwise restore them yourself. Remember that you must click Apply in order for any changes to take effect.
2. I don't use Google DNS myself, though I have tested it, and I'm not recommending it or any other DNS provider; the server addresses are offered merely for testing purposes. There may be privacy and technical issues involved in using that service, which you should investigate personally before you decide whether to keep the settings. Other public DNS services exist.
-
Nov 18, 2014 9:53 AM in response to Csound1by AggelakasK,Please we all trying to help each other as good as we can ! Linc had a solution , Thomas had his , i appreciate both because they helped me for free and immediately . There is no need trying to find who was more trustful ... They both having and sharing the same pation try to find a solution that in most cases will work!
-
Nov 18, 2014 9:56 AM in response to AggelakasKby Csound1,Linc's advice is no more and no less trustworthy than any other stranger. The choice is not Linc's, it's yours.
-
Nov 18, 2014 9:58 AM in response to AggelakasKby Linc Davis,This site is very noisy, and people who have nothing to contribute to solving your problem may make comments that have no point except to interfere. You just have to ignore them. Anyone who knows how to read also knows that I have not asked you to trust me, and that you don't have to trust me to follow my instructions without fear of the consequences.
-
Nov 18, 2014 10:24 AM in response to Linc Davisby Csound1,Linc Davis wrote:
I have not asked you to trust me, and that you don't have to trust me to follow my instructions without fear of the consequences.
Has no need to trust you, but should trust your instructions?
Doublespeak is back?
-
Nov 18, 2014 10:28 AM in response to Linc Davisby AggelakasK,I cleared the safari data....Now i m going to contact my internet provider to see the settings of the router and calibrate it if its needed. About DNS i changed the server addresses and i lost internet access. i had to restore it and now everything is smooth ..I will run the system for a day to see if this ad will show again.
Thanks again
i followed your procedure because i read several posts from you here in the community giving solutions .
-
Jan 12, 2015 6:22 AM in response to AggelakasKby Lexiepex,Peculiar:
you hesitate about AdwareMedic, and just run without any thought the things that a anonymous poster proposes....
Lex
-
Jan 17, 2015 10:58 AM in response to Linc Davisby mabelgladys,I just ran the diagnostics test and these were my results, any help?
Start time: 18:31:15 01/17/15
Model Identifier: iMac7,1
System Version: OS X 10.10.1 (14B25)
Kernel Version: Darwin 14.0.0
Time since boot: 4 days 5:52
Memory
BANK 0/DIMM0:
Size: 2 GB
Speed: 667 MHz
Status: OK
Manufacturer: 0xCE00000000000000
BANK 1/DIMM1:
Size: 2 GB
Speed: 667 MHz
Status: OK
Manufacturer: 0xCE00000000000000
SATA
Hitachi HDT721064SLA360
Diagnostic reports
2014-12-29 Adobe AIR Installer crash x15
2015-01-03 CoreServicesUIAgent crash
2015-01-03 MacKeeper hang
2015-01-06 CoreServicesUIAgent crash
2015-01-16 plugin-container crash
2015-01-17 Java Updater crash
Log
Jan 15 18:42:04 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1
Jan 15 20:45:21 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1
Jan 15 22:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 01:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 04:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 07:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 10:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 13:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 16:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 16:23:14 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1
Jan 16 17:01:43 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1
Jan 16 19:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 19:23:32 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1
Jan 16 22:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 16 22:41:11 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1
Jan 17 01:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 17 04:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 17 07:17:31 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 17 10:17:32 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 17 13:17:32 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 17 16:17:32 com.facebook.videochat.NAME.updater: Service exited with abnormal code: 1
Jan 17 17:23:38 process appleeventsd[24] caught causing excessive wakeups. Observed wakeups rate (per sec): 207; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 99154
Jan 17 17:26:52 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1
Jan 17 17:26:52 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1
Jan 17 17:35:07 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1
Swap (MiB): 1233
Activity
CPU: user 29%, system 14%
Net: 324 in, 27 out (KiB/s)
CPU per process: com.apple.WebKit (UID 501) is using 80.7 %
Daemons
com.period.searchprotectd
com.v.helper
com.adobe.versioncueCS3
com.adobe.versioncueCS4
com.apple.installer.osmessagetracing
com.microsoft.office.licensing.helper
com.google.keystone.daemon
com.oracle.java.Helper-Tool
com.apple.aelwriter
com.logmein.hamachi
com.adobe.fpsaud
org.macosforge.xquartz.privileged_startx
Agents
com.adobe.CS4ServiceManager
com.genieo.completer.ltvbit
com.crossrider.wss002505.agent.plist
com.v.agent
com.adobe.ARM.UUID
com.flashmall.updater
com.google.keystone.system.agent
com.facebook.videochat.NAME.updater
com.webtools.update.agent
com.genieo.completer.download
org.macosforge.xquartz.startx
com.genieo.completer.update
com.jdibackup.ZipCloud.autostart
com.oracle.java.Java-Updater
com.hp.help.tocgenerator
com.webhelper
com.adobe.ARM.UUID
com.apple.Safari
com.jdibackup.ZipCloud.notify
Startup items
/Library/StartupItems/IntegoCommon/IntegoCommon
/Library/StartupItems/IntegoCommon/StartupParameters.plist
/Library/StartupItems/VirusBarrier/StartupParameters.plist
/Library/StartupItems/VirusBarrier/VirusBarrier
/Library/StartupItems/VirusBarrier/VirusBarrier.kext/Contents/Info.plist
/Library/StartupItems/VirusBarrier/VirusBarrier.kext/Contents/MacOS/VirusBarrie r
/Library/StartupItems/VirusBarrier/virusbarriers
/Library/StartupItems/VirusBarrier/VirusBarrierService.kext/Contents/Info.plist
/Library/StartupItems/VirusBarrier/VirusBarrierService.kext/Contents/MacOS/Viru sBarrierService
Bundles
/System/Library/Extensions/HerculesAudioDriver.kext
- com.Hercules.driver.HerculesAudioDriver
/System/Library/Extensions/JMicronATA.kext
- com.jmicron.JMicronATA
/System/Library/Extensions/NIUSBAudio2DJ.kext
- com.caiaq.driver.NIUSBAudio2DJDriver
/System/Library/Extensions/NIUSBAudio4DJ.kext
- com.caiaq.driver.NIUSBAudio4DJDriver
/System/Library/Extensions/NIUSBAudioDriver.kext
- com.caiaq.driver.NIUSBHardwareDriver
/System/Library/Extensions/NIUSBDeviceHelper.kext
- com.native-instruments.driver.NIUSBDeviceHelper
/System/Library/Extensions/NIUSBTraktorAudio2.kext
- com.caiaq.driver.NIUSBTraktorAudio2Driver
/System/Library/Extensions/NIUSBTraktorKontrolS4.kext
- com.caiaq.driver.NIUSBTraktorKontrolS4Driver
/System/Library/Extensions/NIUSBTraktorKontrolX1.kext
- com.caiaq.driver.NIUSBTraktorKontrolX1Driver
/Library/Audio/MIDI Drivers/HerculesMIDIDriver.plugin
- com.Hercules.midi.driver.hercules
/Library/Audio/MIDI Drivers/NIUSBMIDIDriver.plugin
- N/A
/Library/Audio/MIDI Drivers/NIUSBTraktorKontrolS4MIDIDriver.plugin
- N/A
/Library/Audio/MIDI Drivers/NIUSBTraktorKontrolX1MIDIDriver.plugin
- N/A
/Library/Audio/Plug-Ins/Components/FreeAlpha.component
- com.linplug.au.FreeAlpha
/Library/Audio/Plug-Ins/VST/LinPlug/FreeAlpha.vst
- com.linplug.vst.FreeAlpha
/Library/Extensions/ham.kext
- com.logmein.hamachi
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
- com.adobe.acrobat.pdfviewer
/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
- com.adobe.acrobat.pdfviewerNPAPI
/Library/Internet Plug-Ins/CANONiMAGEGATEWAYDL.plugin
- jp.Canon.cig.npdownload
/Library/Internet Plug-Ins/CANONiMAGEGATEWAYLI.plugin
- jp.Canon.cig.nplogin
/Library/Internet Plug-Ins/DivXBrowserPlugin.plugin
- com.divx.DivXBrowserPlugin
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
- net.telestream.wmv.plugin
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin
- net.telestream.wmv.webplugin
/Library/Internet Plug-Ins/GarminGpsControl.plugin
- com.garmin.GarminGpsControl
/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin
- com.google.googletalkbrowserplugin
/Library/Internet Plug-Ins/Loki.plugin
- com.skyhook.lokiplugin
/Library/Internet Plug-Ins/o1dbrowserplugin.plugin
- com.google.o1dbrowserplugin
/Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin
- com.microsoft.officelive.browserplugin
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
- com.microsoft.sharepoint.webkitplugin
/Library/Internet Plug-Ins/Silverlight.plugin
- com.microsoft.SilverlightPlugin
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Library/PreferencePanes/Flip4Mac WMV.prefPane
- net.telestream.wmv.prefpane
/Library/PreferencePanes/JavaControlPanel.prefPane
- com.oracle.java.JavaControlPanel
/Library/PreferencePanes/NetUpdate.prefPane
- com.intego.preference.netupdate
/Library/PreferencePanes/NIUSBAudio.prefPane
- com.caiaq.NIUSBAudioPreferencePane
/Library/PreferencePanes/VersionCueCS3.prefPane
- com.adobe.versioncueCS3.VCPrefPane
/Library/PreferencePanes/VersionCueCS4.prefPane
- com.adobe.versioncueCS4.VCPrefPane
/Library/QuickTime/FLV.component
- com.macromedia.FLVExporter
/Library/QuickTime/FLV.component/Contents/Resources
- com.macromedia.FLVExporter
/Library/QuickTime/SoundboothScoreCodec.component
- com.adobe.SoundboothScoreAudioCodec
/Library/ScriptingAdditions/Adobe Unit Types.osax
- N/A
/Library/Spotlight/Microsoft Entourage.mdimporter
- com.microsoft.entourageMDImporter
/Library/Widgets/Intego Status.wdgt
- com.intego.widget
/Library/Widgets/NetUpdate.wdgt
- com.intego.widget.netupdate
/Library/Widgets/VirusBarrier X4.wdgt
- com.intego.widget.virusbarrierx4
Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
Library/Internet Plug-Ins/FacebookVideoCalling.bundle
- com.skype.FacebookVideoCalling
Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin
- com.Google.GoogleEarthPlugin.plugin
Library/Widgets/HP Ink Widget.wdgt
- com.hp.widget.inkwidget
Apps
/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app
/Applications/InstallMac/Reset Search.app
/Incompatible Software/GenieoExtra.framework/Contents/Resources/Payload.bundle
/Incompatible Software/GenieoExtra.framework/Contents/Frameworks/gen_ext_bundle.framework
/Incompatible Software/GenieoExtra.framework
Contents of /etc/ssh_config (checksum 2841432291)
Host *
SendEnv LANG LC_*
Host *
XAuthLocation /opt/X11/bin/xauth
Contents of /Library/LaunchAgents/com.hp.help.tocgenerator.plist (checksum 95484570)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>RunAtLoad</key>
<true/>
<key>WatchPaths</key>
<array>
<string>/Library/Documentation/Help/Hewlett-Packard</string>
<string>/Library/Documentation/Help/Hewlett-Packard/</string>
</array>
<key>ProgramArguments</key>
<array>
<string>/Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app/Contents/M acOS/TOCGenerator</string>
</array>
<key>Label</key>
<string>com.hp.help.tocgenerator</string>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist (checksum 2296908636)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.Java-Updater</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
</array>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>20</integer>
<key>Minute</key>
<integer>24</integer>
<key>Weekday</key>
<integer>5</integer>
</dict>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.saturn.agent.plist (checksum 3946252604)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.v.agent</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/saturn/Agent/agent.app/Contents/MacOS/agent</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ThrottleInterval</key>
<integer>10</integer>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist (checksum 2451978492)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.macosforge.xquartz.startx</string>
<key>ProgramArguments</key>
<array>
<string>/opt/X11/lib/X11/xinit/launchd_startx</string>
<string>/opt/X11/bin/startx</string>
<string>--</string>
<string>/opt/X11/bin/Xquartz</string>
</array>
<key>Sockets</key>
<dict>
<key>org.macosforge.xquartz:0</key>
<dict>
<key>SecureSocketWithKey</key>
<string>DISPLAY</string>
</dict>
</dict>
<key>ServiceIPC</key>
<true/>
<key>EnableTransactions</key>
<true/>
...and 2 more line(s)
Contents of /Library/LaunchDaemons/com.adobe.versioncueCS3.plist (checksum 714202969)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>GroupName</key>
<string>wheel</string>
<key>Label</key>
<string>com.adobe.versioncueCS3</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Adobe/Adobe Version Cue CS3/Server/bin/VersionCueCS3d</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>ServiceDescription</key>
<string>Adobe Version Cue CS3</string>
<key>UserName</key>
<string>root</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.adobe.versioncueCS4.plist (checksum 4003786817)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>GroupName</key>
<string>wheel</string>
<key>Label</key>
<string>com.adobe.versioncueCS4</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Adobe/Adobe Version Cue CS4/Server/bin/VersionCueCS4d</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>ServiceDescription</key>
<string>ServiceName</string>
<key>UserName</key>
<string>root</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.apple.qmaster.qmasterd.plist (checksum 681742547)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.qmaster.qmasterd</string>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/qmasterd</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.logmein.hamachi.plist (checksum 4265225024)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.logmein.hamachi</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/LogMeIn Hamachi/bin/hamachid</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/Library/Logs/LogMeIn Hamachi/stderr.log</string>
<key>StandardOutPath</key>
<string>/Library/Logs/LogMeIn Hamachi/stdout.log</string>
<key>WorkingDirectory</key>
<string>/Library/Application Support/LogMeIn Hamachi/</string>
<key>Debug</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.saturn.helper.plist (checksum 396646342)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.v.helper</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/saturn/Agent/agent.app/Contents/MacOS/agent</string>
<string>-helper</string>
</array>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>ThrottleInterval</key>
<integer>10</integer>
</dict>
</plist>
Contents of /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist (checksum 2883943871)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.macosforge.xquartz.privileged_startx</string>
<key>ProgramArguments</key>
<array>
<string>/opt/X11/lib/X11/xinit/privileged_startx</string>
<string>-d</string>
<string>/opt/X11/lib/X11/xinit/privileged_startx.d</string>
</array>
<key>MachServices</key>
<dict>
<key>org.macosforge.xquartz.privileged_startx</key>
<true/>
</dict>
<key>TimeOut</key>
<integer>120</integer>
<key>EnableTransactions</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist (checksum 394026997)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARM.UUID</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>
<string>semi-auto</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>12600</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist (checksum 2170691092)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARM.UUID</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/Adobe Reader 9/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>12600</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.apple.SafariBookmarksSyncer.plist (checksum 150542840)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.Safari</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/S afariSyncClient</string>
<string>--sync</string>
<string>com.apple.Safari</string>
<string>--entitynames</string>
<string>com.apple.bookmarks.Bookmark,com.apple.bookmarks.Folder</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>ThrottleInterval</key>
<integer>60</integer>
<key>WatchPaths</key>
<array>
<string>/Users/USER/Library/Safari/Bookmarks.plist</string>
</array>
</dict>
...and 1 more line(s)
Contents of Library/LaunchAgents/com.crossrider.wss002505.agent.plist (checksum 536811516)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.crossrider.wss002505.agent.plist</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/LaunchAgents/WebSocketServerApp</string>
<string>cmpId=2505</string>
<string>ibic=UUID</string>
<string>verifier=UUID</string>
<string>extId=67619</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.facebook.videochat.NAME.plist (checksum 552067689)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.facebook.videochat.NAME.updater</string>
<key>ProgramArguments</key>
<array>
<string>/usr/bin/java</string>
<string>-cp</string>
<string>/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookUpdate.jar</string>
<string>FacebookUpdate</string>
<string>com.facebook.peep</string>
<string>3.1.0.522</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>10800</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.genieo.completer.download.plist (checksum 1136178618)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.genieo.completer.download</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/Installer</ string>
<string>-trigger</string>
<string>download</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17046</string>
<string>-firstAppId</string>
<string>126901037</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Users/USER/Downloads</string>
</array>
</dict>
</plist>
Contents of Library/LaunchAgents/com.genieo.completer.ltvbit.plist (checksum 3007047868)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.genieo.completer.ltvbit</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/Installer</ string>
<string>-trigger</string>
<string>ltvbit</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17046</string>
<string>-firstAppId</string>
<string>126901037</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>4</integer>
<key>Minute</key>
<integer>30</integer>
</dict>
...and 2 more line(s)
Contents of Library/LaunchAgents/com.genieo.completer.update.plist (checksum 3099326387)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.genieo.completer.update</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/Installer</ string>
<string>-trigger</string>
<string>update</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17046</string>
<string>-firstAppId</string>
<string>126901037</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>15</integer>
<key>Minute</key>
...and 4 more line(s)
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist (checksum 3926172640)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.autostart</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>-n</string>
<string>--args</string>
<string>9</string>
<string>-l</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist (checksum 1466627969)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.notify</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>--args</string>
<string>7</string>
<string>1</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>StartInterval</key>
<integer>1200</integer>
<key>RunAtLoad</key>
<false/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.webhelper.plist (checksum 1901315574)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.webhelper</string>
<key>EnableGlobbing</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>
</array>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>OnDemand</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>ThrottleInterval</key>
<integer>10</integer>
</dict>
...and 1 more line(s)
Contents of Library/LaunchAgents/com.webtools.update.agent.plist (checksum 3353881656)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>Label</key>
<string>com.webtools.update.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3600</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/flashmall_updater.plist (Apple binary property list, checksum 333107266)
Font issues: 1
Bad plists
/Library/Preferences/com.gen.framework.plist
Library/Preferences/com.apple.iphotomosaic.plist
Listeners
kdc: kerberos
launchd: afpovertcp
launchd: printer
launchd: ssh
User login items
iTunesHelper
- missing value
uTorrent
- missing value
NIHardwareAgent
- missing value
HPEventHandler
- missing value
HP Product Research
- /Library/Application Support/Hewlett-Packard/Customer Participation/HP Product Research.app
Restricted files: 660
Lockfiles: 72
Elapsed time (s): 1389