-
All replies
-
Helpful answers
-
Jul 10, 2015 11:08 AM in response to Linc Davisby Keith Dvorak,Here are my results. I just got this, and it freaked me out. However, I saw some of your earlier advice and I can't find any of the files on my system. I did manage to keep it from launching on Safari after a couple fast force-quits. I hope I'm okay.
Start time: 10:42:16 07/10/15
Revision: 1241
Model Identifier: MacBookAir4,2
System Version: OS X 10.10.4 (14E46)
Kernel Version: Darwin 14.4.0
Time since boot: 1 day2:41
UID: 501
Font issues: 3
Trusted certs (user)
phvapr06.safeway.com
Firewall: On
TCP/IP
Subnet mask: 255.255.255.240
Listeners
kdc: kerberos
launchd: afpovertcp
launchd: ssh
Wi-Fi
Signal / Noise: -81 dBm / -85 dBm
Security: None
Security: None
Security: None
Security: None
Security: None
Security: None
Security: None
Security: None
Security: None
Security: None
System caches/logs
3549 MB: /System/Library/Caches/com.apple.coresymbolicationd/data
1252 MB: /var/folders/gv/gs_jk4xd3rgc24pl0nfk_5fr0000gn/T/../C/com.apple.iBooksX/5546385 79/mzbf.puztqtny..d2.dlv.d2.dlv.ibooks
Diagnostic reports
2015-06-14 discoveryd crash
2015-06-14 sharingd crash
2015-06-21 Fantastical 2 crash
2015-06-23 SystemUIServer crash
2015-07-02 SystemUIServer crash
2015-07-02 com.apple.WebKit.Networking crash
2015-07-05 AdobeCrashDaemon crash
2015-07-05 CalendarAgent crash
Kernel log
Jul 6 11:17:12 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0
Jul 7 07:30:10 AppleUSBEthernetHost::enable: failed to set alt interface 1, e00002ed
Jul 7 07:30:10 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0
Jul 7 11:32:35 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0
Jul 7 13:53:20 Warning: IOSurface 0000006f modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit
Jul 7 13:53:20 Warning: IOSurface 0000006f modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit
Jul 7 13:59:10 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0
Jul 7 15:09:31 WARNING: hibernate_page_list_setall skipped 13956 xpmapped pages
Jul 8 05:19:14 WARNING: hibernate_page_list_setall skipped 15038 xpmapped pages
Jul 8 07:14:07 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0
Jul 8 12:39:12 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0
Jul 8 13:49:37 WARNING: hibernate_page_list_setall skipped 15038 xpmapped pages
Jul 9 07:22:09 WARNING: hibernate_page_list_setall skipped 15794 xpmapped pages
Jul 9 08:01:55 utun_start: ifnet_disable_output returned error 12
Jul 9 08:02:36 OSUnserializeXML: syntax error near line 1
Jul 9 08:02:39 OSUnserializeXML: syntax error near line 1
Jul 9 08:02:45 OSUnserializeXML: syntax error near line 1
Jul 9 08:13:08 Warning: IOSurface 0000001d modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit
Jul 9 08:13:08 Warning: IOSurface 0000001d modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit
Jul 9 12:50:41 AppleUSBEthernetHost::enable: failed to set alt interface 1, e00002ed
Jul 9 12:50:41 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0
Jul 10 06:39:20 WARNING: hibernate_page_list_setall skipped 22567 xpmapped pages
Jul 10 07:18:18 esp6_input: mbuf allocation failed
Jul 10 07:18:19 esp6_input: mbuf allocation failed
Jul 10 07:20:15 esp6_input: mbuf allocation failed
System log
Jul 10 09:56:31 racoon IPv6 not supported for mode config.
Jul 10 09:56:31 racoon unable to allocate space for vpn control message.
Jul 10 10:08:33 launchservicesd Application App:"loginwindow" asn:0x0-1001 pid:89 refs=7 @ 0x7facf2f09580 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x14a14a pid=2644 "ScreenSaverEngine"")), so denying. : LASSession.cp #1521 SetFrontApplication() q=LSSession 100005/0x186a5 queue
Jul 10 10:08:33 launchservicesd Application App:"loginwindow" asn:0x0-1001 pid:89 refs=8 @ 0x7facf2f09580 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x14a14a pid=2644 "ScreenSaverEngine"")), so denying. : LASSession.cp #1521 SetFrontApplication() q=LSSession 100005/0x186a5 queue
Jul 10 10:08:36 powerd Activity changes from 0x1 to 0x9. Assertions:1 HidState:1
Jul 10 10:08:40 racoon IPv6 not supported for mode config.
Jul 10 10:08:40 racoon unable to allocate space for vpn control message.
Jul 10 10:08:46 powerd Activity changes from 0x9 to 0x1. Assertions:1 HidState:1
Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:20:56 racoon IPv6 not supported for mode config.
Jul 10 10:20:56 racoon unable to allocate space for vpn control message.
Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
Jul 10 10:32:59 racoon IPv6 not supported for mode config.
Jul 10 10:32:59 racoon unable to allocate space for vpn control message.
Jul 10 10:34:25 WindowServer WSGetSurfaceInWindow : Invalid surface 631221912 for window 1519
Console log
Jul 7 11:11:07 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 7 11:11:26 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/wine_notes/number_of_transactions?authentica tion_token=UUID&type=DELETE
Jul 7 11:11:26 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 7 11:11:26 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/wine_notes/number_of_transactions?authentica tion_token=UUID&type=CREATE
Jul 7 11:11:26 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/wine_notes/number_of_transactions?authentica tion_token=UUID&type=UPDATE
Jul 7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/beer_notes/number_of_transactions?authentica tion_token=UUID&type=DELETE
Jul 7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/beer_notes/number_of_transactions?authentica tion_token=UUID&type=CREATE
Jul 7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/beer_notes/number_of_transactions?authentica tion_token=UUID&type=UPDATE
Jul 7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 7 11:11:56 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/user/recipes88780015
Jul 7 11:11:56 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Jul 9 07:39:58 ReportCrash Invoking spindump for pid=5456 wakeups_rate=160 duration=282 because of excessive wakeups
Jul 9 08:02:41 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Jul 9 08:02:41 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
Jul 9 08:02:41 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Jul 9 08:02:41 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Jul 9 08:02:46 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Jul 9 08:02:46 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Jul 9 08:02:53 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Jul 9 08:04:03 ReportCrash Invoking spindump for pid=239 wakeups_rate=492 duration=92 because of excessive wakeups
Jul 9 09:44:31 ReportCrash Invoking spindump for pid=405 wakeups_rate=452 duration=100 because of excessive wakeups
Daemons
com.adobe.ARMDC.Communicator
com.adobe.ARMDC.SMJobBlessHelper
com.adobe.adobeupdatedaemon
com.adobe.fpsaud
com.apple.GSSCred
com.apple.awdd
com.apple.cmio.registerassistantservice
com.apple.corestorage.corestoragehelperd
com.apple.ctkd
com.apple.icloud.findmydeviced
com.apple.iconservices.iconservicesagent
com.apple.ifdreader
com.apple.installd
com.apple.installer.osmessagetracing
com.apple.nehelper
com.apple.nsurlsessiond_privileged
com.apple.sandboxd
com.apple.softwareupdated
com.apple.spindump
- status: 75
com.apple.systemadministration.writeconfig
com.apple.watchdogd
com.apple.wdhelper
com.apple.xpc.smd
com.barebones.authd
com.bjango.istatmenusdaemon
com.microsoft.office.licensing.helper
com.oracle.java.Helper-Tool
com.oracle.java.JavaUpdateHelper
Agents
2BUA8C4S2C.com.agilebits.onepassword4-helper
com.adobe.AAM.Scheduler-1.0
com.adobe.ARMDCHelper.UUID
- status: 111
com.adobe.AdobeCreativeCloud
com.akamai.single-user-client
com.apple.AirPortBaseStationAgent
com.apple.CSConfigDotMacCert-EMAIL-SharedServices
- status: 78
com.bjango.istatmenusagent
com.bjango.istatmenusnotifications
com.dayoneapp.dayone-agent
com.flexibits.fantastical2.mac.launcher
com.houdah.HoudahSpot4.HoudahSpotHelper
com.microsoft.OneDriveLauncher
com.omnigroup.OmniPresenceLauncher
com.oracle.java.Java-Updater
com.spotify.webhelper
User overrides
com.dayoneapp.dayone-agent
com.adobe.AAM.Scheduler-1.0
User login items
Bartender
- /Applications/Bartender.app
Default Folder X Helper
- /Library/PreferencePanes/Default Folder X.prefPane/Contents/Resources/Default Folder X Helper.app
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
OmniFocus
- /Applications/OmniFocus.app
TextExpander
- /Applications/TextExpander.app
BusyCalAlarm
- missing value
EvernoteHelper
- missing value
HoudahSpotHelper
- missing value
LaunchBar
- /Applications/LaunchBar.app
HazelHelper
- missing value
MailTagsHelper
- /Users/USER/Library/Application Support/Indev/MailTagsHelper.app
Fantastical
- missing value
Dropbox
- /Applications/Dropbox.app
AdobeResourceSynchronizer
- /Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app
MailTags Helper
- /Users/USER/Library/Application Support/Indev/MailTagsHelper.app
Safari extensions
1Password
- com.agilebits.onepassword4-safari
Delibar Button
- net.shinyfrog.delibarbutton
Evernote Web Clipper
- com.evernote.safari.clipper
Fontface Ninja
- com.creaktif.fontfaceninja
FontScope
- com.pjkh.fontscope
Instapaper
- com.instapaper.extension
iThoughtsX
- com.toketaware.ithoughtsx.safariextension
Sessions
- yoo.david.sessions
iCloud errors
Photos 25
comapple.CloudPhotosConfiguration 5
cloudphotosd 5
cloudd 4
Finder 2
Spotlight 1
Continuity errors
sharingd 2
User caches/logs
1252 MB: /var/folders/gv/gs_jk4xd3rgc24pl0nfk_5fr0000gn/T/../C/com.apple.iBooksX/5546385 79/mzbf.puztqtny..d2.dlv.d2.dlv.ibooks
Restricted files: 132
Lockfiles: 14
Contents of /Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist
- mod date: Apr 7 09:53:54 2015
- checksum: 2197523146
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARMDCHelper.UUID</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>12600</integer>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.bjango.istatmenusagent.plist
- mod date: Apr 9 07:50:06 2015
- checksum: 2262789825
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.bjango.istatmenusagent</key>
<true/>
</dict>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.bjango.istatmenusagent</string>
<key>Program</key>
<string>/Library/Application Support/iStat Menus 5/iStatMenusAgent.app/Contents/MacOS/iStatMenusAgent</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.bjango.istatmenusnotifications.plist
- mod date: Apr 9 07:50:06 2015
- checksum: 1266143884
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.bjango.istatmenusnotifications</key>
<true/>
</dict>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.bjango.istatmenusnotifications</string>
<key>Program</key>
<string>/Library/Application Support/iStat Menus 5/iStat Menus Notifications.app/Contents/MacOS/iStat Menus Notifications</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
- mod date: Jan 27 11:17:34 2013
- checksum: 366297641
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.Java-Updater</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
<string>-bgcheck</string>
</array>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>6</integer>
<key>Minute</key>
<integer>8</integer>
<key>Weekday</key>
<integer>7</integer>
</dict>
</dict>
...and 1 more line(s)
Contents of /Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist
- mod date: Apr 7 09:53:54 2015
- checksum: 3887726299
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARMDC.Communicator</string>
<key>MachServices</key>
<dict>
<key>com.adobe.ARMDC.Communicator</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist
- mod date: Apr 7 09:53:54 2015
- checksum: 930028549
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARMDC.SMJobBlessHelper</string>
<key>MachServices</key>
<dict>
<key>com.adobe.ARMDC.SMJobBlessHelper</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper</string >
</array>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist
- mod date: Jul 9 07:35:16 2015
- checksum: 2254479735
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.adobe.adobeupdatedaemon</string>
<key>LaunchOnlyOnce</key>
<true/>
<key>Program</key>
<string>/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.barebones.authd.plist
- mod date: Jan 19 14:11:25 2012
- checksum: 1995816654
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>Label</key>
<string>com.barebones.authd</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.barebones.authd</string>
</array>
<key>Sockets</key>
<dict>
<key>com.barebones.authd.socket</key>
<dict>
<key>SockPathMode</key>
<integer>438</integer>
<key>SockPathName</key>
<string>/var/tmp/com.barebones.authd.socket</string>
</dict>
</dict>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.bjango.istatmenusdaemon.plist
- mod date: Apr 9 07:50:06 2015
- checksum: 3697781966
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.bjango.istatmenusdaemon</key>
<true/>
</dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.bjango.istatmenusdaemon</string>
<key>Program</key>
<string>/Library/Application Support/iStat Menus 5/iStatMenusDaemon</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: Apr 9 06:22:19 2015
- checksum: 3012644940
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>EnvironmentVariables</key>
<dict>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd-wrapper</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /System/Library/Security/authorization.plist
- mod date: Oct 9 02:17:00 2014
- checksum: 2720110640
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 1850 more line(s)
Contents of /private/etc/authorization.deprecated
- mod date: Sep 19 13:15:38 2013
- checksum: 1780669285
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 9707 more line(s)
Contents of Library/LaunchAgents/com.akamai.single-user-client.plist
- mod date: Jun 9 10:34:23 2015
- checksum: 1151437036
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.akamai.single-user-client</string>
<key>Nice</key>
<integer>-18</integer>
<key>KeepAlive</key>
<dict>
<key>SuccessfulExit</key>
<false/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Applications/Akamai/netsession_mac</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>AbandonProcessGroup</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist
- mod date: Oct 9 12:41:32 2011
- checksum: 794059265
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.apple.CSConfigDotMacCert-EMAIL-SharedServices</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>LowPriorityIO</key>
<true/>
<key>Nice</key>
<integer>10</integer>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>
<string>-l</string>
<string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>
<string>-u</string>
<string>EMAIL</string>
<string>-t</string>
<string>SharedServices</string>
<string>-s</string>
</array>
...and 4 more line(s)
Contents of Library/LaunchAgents/com.spotify.webhelper.plist
- mod date: Aug 24 23:50:17 2013
- checksum: 2562137178
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.spotify.webhelper</string>
<key>KeepAlive</key>
<dict>
<key>NetworkState</key>
<true/>
</dict>
<key>RunAtLoad</key>
<true/>
<key>Program</key>
<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
<key>SpotifyPath</key>
<string>/Applications/Spotify.app</string></dict>
</plist>
Contents of Library/LaunchAgents/ws.agile.1PasswordAgent.plist
- mod date: Sep 26 23:36:09 2013
- checksum: 3525283474
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>OnDemand</key>
<false/>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>Label</key>
<string>ws.agile.1PasswordAgent</string>
<key>Program</key>
<string>/Users/USER/Library/Application Support/1Password/Agent/1PasswordAgent.app/Contents/MacOS/1PasswordAgent</strin g>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
</dict>
</plist>
Bad plists
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Common/Colors.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Science/Circuit Engineering.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Entity Relationship.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/ERD.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Flow Chart.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/FlowChart.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Garrett IA.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Konigi Wireframes.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-General.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-Sequence.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-State.gstencil/data.plist
Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-UseCase.gstencil/data.plist
Extensions
/System/Library/Extensions/JMicronATA.kext
- com.jmicron.JMicronATA
Applications
/Applications/AppZapper.app
- com.appzapper.AppZapper
/Applications/Kaleidoscope.app
- com.blackpixel.kaleidoscope
/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app
- com.microsoft.ASApplication
/Applications/Microsoft Office 2011/Office/Equation Editor.app
- com.microsoft.EquationEditor
/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app
- com.microsoft.office.setupassistant
/Applications/Microsoft Office 2011/Office/Microsoft Query.app
- com.microsoft.Query
/Applications/OmniGraphSketcher.app
- com.omnigroup.OmniGraphSketcher
/Applications/OnyX.app
- com.titanium.OnyX
/Applications/Skim.app
- net.sourceforge.skim-app.skim
/Applications/Utilities/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Applications/zoom.us.app
- us.zoom.xos
/Library/Application Support/Adobe/ARMDC/Application/Adobe Acrobat Updater.app
- com.adobe.ARMDC
/Library/Application Support/Adobe/Installers/AdobeInDesign11AppBase/ExtraFiles/INSTALLDIR_EXE/Adobe InDesign CC 2015.app
- N/A
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app
- com.adobe.air.Template
/Library/PDF Services/Save as Adobe PDF.app
- com.apple.automator.SaveasAdobePDF
/Library/Printers/hp/Fax/fax.backend
- com.hp.fax
/Library/Printers/hp/Fax/rastertofax.filter
- com.hp.rastertofax
/Library/Printers/hp/cups/filters/commandtohp.filter
- com.hp.print.cups.filter.commandtohp
/Library/Printers/hp/filter/hpPreProcessing.filter
- com.hp.print.cups.filter.hpPreProcessing
/Library/Services/Default Folder X Service.app
- com.stclairsoft.DefaultFolderX.service
/Users/USER/Dropbox/05 Projects/Freelance/CDI/05 Files/Keynote Tweet/Keynote Tweet.app
- N/A
/Users/USER/Dropbox/05 Projects/Freelance/CDI/IBM/State Street/05 Files/Keynote Tweet/Keynote Tweet.app
- N/A
/Users/USER/Dropbox/05 Projects/Precarious Audio Theater/Postcard/05 Files/Keynote Tweet/Keynote Tweet.app
- N/A
/Users/USER/Library/Application Support/Indev/MailTagsHelper.app
- ca.indev.MailTagsHelper
/Users/USER/Library/Mail/Bundles/MailActOn.mailbundle/Contents/Resources/MAOSpa rkleHelper.app
- ca.indev.MAOSparkleHelper
/Users/USER/Library/Mail/Bundles/MailActOn.mailbundle/Contents/Resources/MailAc tOnHelper.app
- ca.indev.MailActOnHelper
/Users/USER/Library/Mail/Bundles/MailTags.mailbundle/Contents/Resources/MailTag sHelper.app
- ca.indev.MailTagsHelper
/Users/USER/Library/Mail/Bundles/MailTags.mailbundle/Contents/Resources/MailTag sSparkleHelper.app
- ca.indev.MailTagsSparkleHelper
/Users/USER/Library/Services/OmniOutliner Professional.service
- com.omnigroup.OmniOutlinerPro3.ClippingService
Frameworks
/Library/Frameworks/Adobe AIR.framework
- com.adobe.AIR
/Users/USER/Library/Frameworks/EWSMac-GC.framework
- com.eSellerate.EWSMac67108872
/Users/USER/Library/Frameworks/EWSMac.framework
- com.eSellerate.EWSMac67108872
PrefPane
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane
- com.oracle.java.JavaControlPanel
/Library/PreferencePanes/Default Folder X.prefPane
- com.stclairsoft.prefpane.DefaultFolderX
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Library/PreferencePanes/Hazel.prefPane
- com.noodlesoft.Hazel
/Users/USER/Library/PreferencePanes/AkamaiNetSession.prefPane
- com.yourcompany.AkamaiNetSession
Bundles
/Library/Application Support/Adobe/Plug-Ins/CC/File Formats/Camera Raw.plugin
- com.adobe.CameraRaw
/Library/Application Support/MacPhun Software/Noiseless/Plug-Ins/NoiselessPlugin.plugin
- null
/Library/Application Support/MacPhun Software/Noiseless/Plug-Ins/NoiselessPlugin32.plugin
- null
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.6.plugin
/Library/Internet Plug-Ins/AdobeAAMDetect.plugin
- com.AdobeAAMDetectLib.AdobeAAMDetect
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
- com.adobe.acrobat.pdfviewer
/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
- com.adobe.acrobat.pdfviewerNPAPI
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
- com.oracle.java.JavaAppletPlugin
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkIOM.plugin
- jp.co.Canon.ij.print.iom.CIJNP
/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkPBM.plugin
- jp.co.Canon.ij.print.pbm.CIJNP
/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBIOM.plugin
- jp.co.canon.bj.print.bjusbiom
/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBPBM.plugin
- jp.co.canon.bj.print.pbm.USB
/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver.plugin
- jp.co.canon.ij.print.CIJUSBClassDriver
/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver2.plugin
- jp.co.canon.ij.print.CIJUSBClassDriver2
/Library/Printers/Canon/BJPrinter/Plugins/IJBluetooth/IJBluetoothIOM.plugin
- jp.co.canon.ij.print.ijbluetoothiom
/Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin
- jp.co.canon.scangear.ag07.09
/Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin
- jp.co.canon.scangear.ag08.09
/Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin
- jp.co.canon.scangear.lld09.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin
- jp.co.canon.scanner.cnq2413.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin
- jp.co.canon.scanner.cnq2414.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin
- jp.co.canon.scanner.cnq4807.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin
- jp.co.canon.scanner.cnq4808.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin
- jp.co.canon.scanner.cnq4809.09
/Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin
- jp.co.canon.scanner.cnq9601.09
/Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin
- jp.co.canon.scangear.ijfshlib.09
/Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin
- jp.co.canon.scangear.mld07.09
/Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin
- jp.co.canon.scangear.mld08.09
/Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin
- jp.co.canon.scangear.mld09.09
/Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin
- jp.co.canon.scangear.mld9601.09
/Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin
- jp.co.canon.sf.scanner.sfusb.09
/Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin
- jp.co.canon.scangear.usb.09
/Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin
- jp.co.canon.scangear.smac.09
/Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin
- jp.co.canon.scangear.zoom.09
/Library/Printers/EPSON/CIOSupport/CIOHelper.plugin
- com.epson.print.plugin.CIOHelper
/Library/Printers/EPSON/CIOSupport/EPSONUSBPrintClass.plugin
- com.epson.print.plugin.USBPrintClass
/Library/Printers/EPSON/CIOSupport/XIOP.plugin
- com.epson.print.plugin.XIOP
/Library/Printers/EPSON/CIOSupport/XIORemoteClient.plugin
- com.epson.print.plugin.XIORemoteClient
/Library/Printers/EPSON/CIOSupport/XIORemoteServer.plugin
- com.epson.print.plugin.XIORemoteServer
/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
/Users/USER/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin
- com.citrixonline.mac.WebDeploymentPlugin
/Users/USER/Library/Internet Plug-Ins/ZoomUsPlugIn.plugin
- us.zoom.plugin
Bundles (new)
/Applications/LaunchBar.app
- at.obdev.LaunchBar
/Applications/OmniFocus.app
- com.omnigroup.OmniFocus2
/Applications/PDFpenPro.app
- com.smileonmymac.PDFpenPro
/Applications/Utilities/Adobe Creative Cloud/ACC/ContainerUI.bundle
- com.adobe.acc.ContainerUI
/Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app
- com.adobe.acc.AdobeCreativeCloud
/Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelBL.bundle
- com.adobe.acc.appspanel
/Applications/Utilities/Adobe Creative Cloud/BehancePanel/BehancePanelBL.bundle
- com.adobe.acc.behancepanel
/Applications/Utilities/Adobe Creative Cloud/CoreSync/Core Sync.app
- com.adobe.accmac
/Applications/Utilities/Adobe Creative Cloud/CoreSyncExtension/ACCFinderBundleLoader_32.app
- Adobe.ACCFinderBundleLoader-32
/Applications/Utilities/Adobe Creative Cloud/CoreSyncExtension/ACCFinderBundleLoader_64.app
- Adobe.ACCFinderBundleLoader-64
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/CCSyncPlugin/CCSyncPlugin.framework
- com.adobe.CCSyncPlugin.framework
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/DesignLibraryPlugin/DesignLibraryPlugin.framework
- com.adobe.DesignLibraryPlugin
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/adobe_cap s.framework
- com.adobe.adobe_caps
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExchangePlugin.framework
- com.adobe.ExchangePlugin
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/LiveType/LiveType.framework
- com.adobe.livetype
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/SynKit/SynKit.framework
- com.adobe.SynKitPlugin
/Applications/Utilities/Adobe Creative Cloud/FilesPanel/FilesPanelBL.bundle
- com.adobe.acc.filespanel
/Applications/Utilities/Adobe Creative Cloud/FontsPanel/FontsPanelBL.bundle
- com.adobe.acc.fontspanel
/Applications/Utilities/Adobe Creative Cloud/HDCore/Uninstaller.app
- com.adobe.ACCC.Uninstaller
/Applications/Utilities/Adobe Creative Cloud/HomePanel/HomePanelBL.bundle
- com.adobe.acc.homepanel
/Applications/Utilities/Adobe Creative Cloud/Utils/AdobeAAMDetect.plugin
- com.AdobeAAMDetectLib.AdobeAAMDetect
/Applications/Utilities/Adobe Creative Cloud/Utils/Creative Cloud Installer.app
- com.adobe.Install
/Applications/Utilities/Adobe Creative Cloud/Utils/Creative Cloud Uninstaller.app
- com.adobe.ACCC.Uninstaller
/Applications/Utilities/Adobe Creative Cloud/Utils/CreativeCloud(URIHandler).app
- com.adobe.CreativeCloud-URIHandler-
/Applications/Utilities/Adobe Flash Player Install Manager.app
- com.adobe.flashplayer.installmanager
/Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app
- com.adobe.acc.AdobeDesktopService
/Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper EH.app
- com.adobe.acc.HEXHelper.EH
/Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper NP.app
- com.adobe.acc.HEXHelper.NP
/Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper.app
- com.adobe.acc.HEXHelper
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/adobe_caps.framework
- com.adobe.adobe_caps
/Library/Internet Plug-Ins/AdobeAAMDetect.plugin
- com.AdobeAAMDetectLib.AdobeAAMDetect
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Users/USER/Library/Application Support/eSellerate/457973200/EWSMac.framework
- com.eSellerate.EWSMac67108870
Library paths
/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib
/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib
/Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib
/Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib
/Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib
/Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib
/Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib
/Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib
/Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib
/Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib
/Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib
/Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib
/Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib
/Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib
/Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib
/Applications/Utilities/Adobe Application Manager/P6/axlib.dylib
/Applications/Utilities/Adobe Application Manager/P7/IMSLib.dylib
/Applications/Utilities/Adobe Application Manager/P7/P7Native.dylib
/Applications/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib
/Applications/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib
/Applications/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib
/Applications/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib
/Applications/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib
/Applications/Utilities/Adobe Application Manager/P7/axlibv7.dylib
/Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib
/Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/UWA_UI.dylib
/Applications/Utilities/Adobe Creative Cloud/ACC/ContainerBL.dylib
/Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib
/Applications/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib
/Applications/Utilities/Adobe Creative Cloud/HDCore/HDPIM.dylib
/Applications/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib
/Applications/Utilities/Adobe Creative Cloud/SPanel/SPanelBL.dylib
/Library/Application Support/Adobe/ARMDC/Application/AcrobatUpdateHelperLib.dylib
/Library/Application Support/Adobe/ARMNext/Application/AcrobatUpdateHelperLib.dylib
/Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/adobe_caps.dylib
/Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/adobe_oobelib.dylib
/Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/adobe_upgrade.dylib
/Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/axlibv7.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CEF/Chromium Embedded Framework.framework/Libraries/libcef.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CEF/libplugin_carbon_interpose.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Core/AdobePIM.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Core/Core.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/Analytics.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/LocManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/PrefsManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/ElevationManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/HEX/HEX.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Notifications/ANSClient.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Notifications/NotificationManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Notifications/TrayNotificationManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/SignInApp/SignInAppBL.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/CmdCntr.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanControl.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanMessage5.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanWrapper.dylib
/Library/Application Support/Adobe/SING/Mark II/TINthread.dylib
/Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86Extn.dyl ib
/Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86_64Extn. dylib
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib
/Users/USER/Library/Application Support/1Password/Extensions/31318/EMAIL/components/libosxform_xpcom.dylib
/Users/USER/Library/Application Support/1Password/Extensions/31318/EMAIL/components/libosxform_xpcom.dylib
/Users/USER/Library/Application Support/1Password/Extensions/31499/EMAIL/components/libosxform_xpcom.dylib
/Users/USER/Library/Application Support/1Password/Extensions/31499/EMAIL/components/libosxform_xpcom.dylib
/Users/USER/Library/Application Support/1Password/Extensions/32009/EMAIL/components/libosxform_xpcom.dylib
/Users/USER/Library/Application Support/1Password/Extensions/32009/EMAIL/components/libosxform_xpcom.dylib
App extensions
com.dayoneapp.dayone.Day-One-Share-Extension
com.evernote.Evernote.SharingExtension
com.flexibits.fantastical2.mac.action-extension
com.flexibits.fantastical2.mac.share-extension
com.flexibits.fantastical2.mac.today-widget
com.getdropbox.dropbox.garcon
com.omnigroup.OmniFocus2.Share
com.omnigroup.OmniFocus2.Today
Installations
Adobe Acrobat X Pro (10.1.2): 1/15/12, 10:44 AM
Adobe Acrobat X Pro (10.1.1): 12/14/11, 6:24 AM
Adobe Acrobat X Pro : 12/14/11, 5:50 AM
PlugIn: 12/3/11, 3:48 PM
PlugIn: 10/9/11, 1:01 PM
Elapsed time (sec): 415
-
Jul 10, 2015 11:12 AM in response to Linc Davisby Keith Dvorak,This just happened to me, but I never installed anything. I just went to a web page and it popped up almost immediately! It took a couple force-quits, but I was able to remove the page causing the problem. I couldn't find any of the files you tell us to find (in the older posts). I hope that means closing the web page was enough? Here's the link to my test results:
-
Jul 10, 2015 11:59 AM in response to Keith Dvorakby Kurt Lang,If what you saw was a popup insisting that your computer was infected with something and to call a phone number RIGHT NOW!, it was nothing but a scam. Nothing was ever downloaded to, or installed on your Mac. There's also no software anywhere in the world that can examine a remote computer through a web browser. Any message on any web site claiming it has done so is a flat out lie.
-
Jul 10, 2015 12:05 PM in response to Kurt Langby Keith Dvorak,Right. I know that. What was scary was that it blocked me from going into Preferences or shutting down the page. When I went into Activity Monitor to force quit Safari, it came back up on relaunch. When I tried to shut down the individual page using Activity Monitor to force quit it, it relaunched itself. Other than being super fast, I'm not sure how I managed to close it after restarting Safari a couple times. I lost complete control of Safari.
They should all be arrested and thrown in jail.
-
Jul 10, 2015 12:16 PM in response to Keith Dvorakby Kurt Lang,Yes, they aren't just obnoxious, they're very intimidating to users who don't have the computer knowledge to understand it's fake.
To fully explain how these popups work on the Mac (and Windows):
1) You hit a bad web site and the scary sounding popup appears.
2) You click OK or whatever button is there to try and dismiss it. The popup seems to be unresponsive, or comes back after a very brief time off the screen.
3) This happens because of a JavaScript action they're using. JavaScript (no relation at all to Java) is used extensively on the web. Much of what we take for granted wouldn't work if you turned it off in a web browser's preferences. Like the buttons across the top of this page. Anything on a page that changes when you move your mouse over or across it is JavaScript in action. In this case, the mouseover command.
4) What these scammers use is another JavaScript action to "do on exit". In the case of these popups, you really are closing it when you click the button, but the final HTML command of the popup is a JavaScript "do on exit". And the "what to do" is to display the same popup.
5) Safari, and pretty much all web browsers force you to attend to the button on a popup before it will let you do anything else. Which is why you can't get to the preferences or other tabs. So there you are, stuck in a loop of closing the popup, only to have it immediately display again. The crooks are using a simple built-in function of all web browsers to make your web browser appear to be stuck. No malware of any kind is necessary to accomplish this. Just a browser with JavaScript enabled. And it pretty much has to be on in order to use virtually any web site.
The general fix is to Force Quit Safari, then hold down the Shift key and relaunch it. Holding the Shift key tells Safari not to load any of the web sites from the previous session.
If that alone doesn't do it, the other possibility is that the user installed adware along with something else. Most adware is simply annoying. They display tons of ads whenever you're using your browser. Recently though, some nastier adware has also been causing similar threat popups to appear. They are again harmless on their own, but won't go away until you remove the adware that's causing them to appear.
Yosemite, 10.10.4 added a feature to Safari to make it easy to close these types of popups. Good idea, but the crooks very quickly came up with a way to block that by adding a bunch of blank lines to the text to force the popup box to be really tall. That runs the OKAY button (or whatever they called the button) to run out of view off the bottom of the screen.
-
Aug 3, 2015 12:04 PM in response to Linc Davisby NixInSF,Once your test is run, what should I be looking for in the result. I am having browser redirect issues. I've checked my LauchDaemon folders, etc. deleted questionable browser extensions, all to no avail.
Thank you for your help.
-
Aug 13, 2015 6:15 AM in response to Linc Davisby Black_Zeto_Smoked,Per your directives Linc Davis
All the best -Dan
Start time: 07:53:09 08/13/15
Revision: 1241
Model Identifier: MacBookPro8,1
System Version: OS X 10.9.5 (13F1096)
Kernel Version: Darwin 13.4.0
Time since boot: 16:35
UID: 502
Battery
Condition: Service Battery
SerialATA
TOSHIBA MK5065GSXF
SMC
ReadKey for key ALP0 failed with SMC error code 0xb7.
ReadKey for key ALP1 failed with SMC error code 0xb7.
ReadKey for key BILO failed with SMC error code 0xb7.
FileVault 2: FileVault master keychain appears to be installed
System errors (per sec)
Google Chrome H (UID 502, error 316): 235
Font issues: 4
Trusted certs (user)
com.apple.ubiquity.peer-uuid.UUID
com.apple.ubiquity.peer-uuid.UUID
com.apple.ubiquity.ssl-cert.UUID
Firewall: On
TCP/IP
Subnet mask: 255.255.252.0
Wi-Fi
Security: None
Diagnostic reports
2015-08-12 UserEventAgent crash x2
2015-08-13 Keychain Access crash
2015-08-13 UserEventAgent crash
Kernel log
Aug 12 15:20:55 SMC::smcReadKeyAction ERROR Tp3P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff8015cae000
Aug 12 15:20:55 SMC::smcReadKeyAction ERROR Tp4P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff8015cae000
Aug 12 15:20:55 SMC::smcReadKeyAction ERROR Tp5P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff8015cae000
Aug 12 15:32:23 WARNING: hibernate_page_list_setall skipped 7869 xpmapped pages
Aug 12 15:45:41 nfs connect socket error 61 for localhost:/0vyTEytQvO8_mSgYnpyN1F
Aug 12 15:45:55 nfs server localhost:/0vyTEytQvO8_mSgYnpyN1F: can not connect, error 61
Aug 12 15:46:27 nfs server localhost:/0vyTEytQvO8_mSgYnpyN1F: can not connect, error 61
Aug 12 15:46:55 nfs server localhost:/0vyTEytQvO8_mSgYnpyN1F: dead
Aug 12 18:01:13 WARNING: hibernate_page_list_setall skipped 7869 xpmapped pages
Aug 12 18:01:40 WARNING: hibernate_page_list_setall skipped 44063 xpmapped pages
Aug 13 03:07:07 WARNING: hibernate_page_list_setall skipped 44063 xpmapped pages
Aug 13 03:07:38 WARNING: hibernate_page_list_setall skipped 74713 xpmapped pages
Aug 13 03:10:54 MacAuthEvent en1 Auth result for: 6c:aa:b3:e4:00:6c Auth timed out
Aug 13 04:16:08 WARNING: hibernate_page_list_setall skipped 74713 xpmapped pages
Aug 13 04:16:36 WARNING: hibernate_page_list_setall skipped 115869 xpmapped pages
Aug 13 07:20:40 SMC::smcReadKeyAction ERROR ALP0 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000
Aug 13 07:21:33 SMC::smcReadKeyAction ERROR ALP1 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000
Aug 13 07:22:24 SMC::smcReadKeyAction ERROR BILO kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000
Aug 13 07:22:50 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key MACR (kSMCKeyNotReadable)
Aug 13 07:22:50 SMC::smcReadKeyAction ERROR MACR kSMCKeyNotReadable(0x85) fKeyHashTable=0x0xffffff8015cae000
Aug 13 07:53:40 SMC::smcReadKeyAction ERROR ALP0 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000
Aug 13 07:54:27 SMC::smcReadKeyAction ERROR ALP1 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000
Aug 13 07:55:15 SMC::smcReadKeyAction ERROR BILO kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000
Aug 13 07:55:40 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key MACR (kSMCKeyNotReadable)
Aug 13 07:55:40 SMC::smcReadKeyAction ERROR MACR kSMCKeyNotReadable(0x85) fKeyHashTable=0x0xffffff8015cae000
Console log
Aug 13 06:54:30 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots
Aug 13 06:54:30 apsd Failed to evaluate trust: No error. (0), result=5
Aug 13 06:54:30 apsd Untrusted peer, closing connection immediately
Aug 13 06:54:49 xpcproxy assertion failed: 13F1096: xpcproxy + 3438 [UUID]: 0x2
Aug 13 06:55:37 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional
Aug 13 06:55:37 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots
Aug 13 06:55:37 apsd Failed to evaluate trust: No error. (0), result=5
Aug 13 06:55:37 apsd Untrusted peer, closing connection immediately
Aug 13 06:56:51 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional
Aug 13 06:56:51 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots
Aug 13 06:56:51 apsd Failed to evaluate trust: No error. (0), result=5
Aug 13 06:56:51 apsd Untrusted peer, closing connection immediately
Aug 13 06:58:51 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional
Aug 13 06:58:51 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots
Aug 13 06:58:51 apsd Failed to evaluate trust: No error. (0), result=5
Aug 13 06:58:51 apsd Untrusted peer, closing connection immediately
Aug 13 07:04:22 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional
Aug 13 07:04:22 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots
Aug 13 07:04:22 apsd Failed to evaluate trust: No error. (0), result=5
Aug 13 07:04:22 apsd Untrusted peer, closing connection immediately
Aug 13 07:05:45 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional
Aug 13 07:05:45 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots
Aug 13 07:05:45 apsd Failed to evaluate trust: No error. (0), result=5
Aug 13 07:05:45 apsd Untrusted peer, closing connection immediately
Aug 13 07:45:15 xpcproxy assertion failed: 13F1096: xpcproxy + 3438 [UUID]: 0x2
Daemons
com.apple.PhotoApps.DevicePropertyReader
com.apple.photostream-agent.ImageConversionService
com.apple.photostream-agent.VideoConversionService
com.parallels.desktop.launchdaemon
- status: 2
Agents
com.adobe.ARM.UUID
com.apple.AirPortBaseStationAgent
com.apple.java.InstallOnDemandAgent
com.apple.java.updateSharing
com.apple.photostream-agent
com.apple.ssinvitationagent
com.google.keystone.user.agent
com.hp.help.tocgenerator
com.parallels.DesktopControlAgent
com.parallels.desktop.client.launch
- status: 2
com.parallels.vm.prl_pcproxy
- status: 2
com.rosettastone.rosettastonedaemon
- status: 1
User overrides
com.fiplab.MenuTabHelper
Safari extensions
Yontoo
- com.yontoo
Widgets
iStat Pro
Restricted files: 476
Lockfiles: 31
Accessibility
Keyboard Zoom: On
Contents of /Library/LaunchAgents/com.hp.help.tocgenerator.plist
- mod date: Jul 28 16:08:06 2009
- checksum: 95484570
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>RunAtLoad</key>
<true/>
<key>WatchPaths</key>
<array>
<string>/Library/Documentation/Help/Hewlett-Packard</string>
<string>/Library/Documentation/Help/Hewlett-Packard/</string>
</array>
<key>ProgramArguments</key>
<array>
<string>/Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app/Contents/M acOS/TOCGenerator</string>
</array>
<key>Label</key>
<string>com.hp.help.tocgenerator</string>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.parallels.DesktopControlAgent.plist
- mod date: Jul 10 12:53:27 2012
- checksum: 1014615141
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>KeepAlive</key>
<dict>
<key>PathState</key>
<dict>
<key>/etc/parallels.DesktopControlAgent.launchd</key>
<true/>
</dict>
</dict>
<key>Label</key>
<string>com.parallels.DesktopControlAgent</string>
<key>LimitLoadToSessionType</key>
<array>
<string>Aqua</string>
<string>LoginWindow</string>
</array>
<key>Program</key>
<string>/Library/Parallels/Parallels Service.app/Contents/PlugIns/Parallels Desktop Control Agent.app/Contents/MacOS/prl_deskctl_agent</string>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.parallels.desktop.launch.plist
- mod date: Jul 10 12:53:14 2012
- checksum: 402548574
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.parallels.desktop.client.launch</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/Parallels Desktop.app/Contents/PlugIns/PD_Starter.app/Contents/MacOS/prl_client_app</stri ng>
<string>--mode</string>
<string>cache</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.parallels.vm.prl_pcproxy.plist
- mod date: Jul 10 12:52:56 2012
- checksum: 1060318951
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.parallels.vm.prl_pcproxy</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Parallels/Parallels Service.app/Contents/PlugIns/Parallels NAPT Service.app/Contents/MacOS/prl_naptd</string>
<string>proxy</string>
</array>
<key>EnvironmentVariables</key>
<dict>
<key>DYLD_LIBRARY_PATH</key>
<string>/Library/Parallels/Parallels Service.app/Contents/MacOS</string>
<key>PARALLELS_NAPT_APP_MODE</key>
<string>desktop</string>
</dict>
<key>KeepAlive</key>
<dict>
<key>SuccessfulExit</key>
<false/>
</dict>
<key>RunAtLoad</key>
<true/>
...and 2 more line(s)
Contents of /Library/LaunchAgents/com.rosettastone.rosettastonedaemon.plist
- mod date: Jul 16 10:26:30 2012
- checksum: 49023104
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.rosettastone.rosettastonedaemon</string>
<key>TimeOut</key>
<integer>5</integer>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/RosettaStoneDaemon/bin/RosettaStoneDaemon</string>
<string>--config</string>
<string>/Library/Application Support/RosettaStoneDaemon/bin/RosettaStoneDaemonConfiguration.txt</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.parallels.desktop.launchdaemon.plist
- mod date: Jul 10 12:53:07 2012
- checksum: 384749228
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>ExitTimeOut</key>
<integer>150</integer>
<key>HopefullyExitsFirst</key>
<true/>
<key>Label</key>
<string>com.parallels.desktop.launchdaemon</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Parallels/Parallels Service.app/Contents/Resources/ParallelsDispatcherService</string>
<string>start</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /System/Library/Security/authorization.plist
- mod date: Mar 29 17:06:48 2015
- checksum: 522460902
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 1700 more line(s)
Contents of /private/etc/authorization.deprecated
- mod date: Jul 16 07:19:50 2012
- checksum: 467832030
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 8716 more line(s)
Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist
- mod date: Oct 16 17:21:58 2013
- checksum: 408149527
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARM.UUID</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>12600</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.google.keystone.agent.plist
- mod date: Aug 11 23:25:03 2015
- checksum: 1758702564
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.google.keystone.user.agent</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER Flores/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents /Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgen t</string>
<string>-runMode</string>
<string>ifneeded</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3523</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Applications
/Applications/Canon Utilities/IJ Network Scanner Selector EX/Canon IJ Network Scanner Selector EX.app
- jp.co.canon.ij.NetworkScannerSelectorEX
/Applications/Canon Utilities/IJ Network Tool/Canon IJ Network Tool.app
- jp.co.canon.IJNetworkTool
/Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app
- jp.co.canon.Inkjet_Extended_Survey_Program
/Applications/Canon Utilities/Solution Menu EX/Canon Solution Menu EX.app
- jp.co.canon.SolutionMenuEX
/Applications/Firefox.app
- org.mozilla.firefox
/Applications/Network Connect.app
- net.juniper.NetworkConnect
/Applications/OpenOffice.org.app
- org.openoffice.script
/Applications/Pod to Mac.app
- com.macroplant.Pod_to_Mac
/Applications/Rosetta Stone TOTALe.app
- com.rosettastone.rosettastonetotale
/Applications/uninstall HSDPA 3G Modem.app
- N/A
/Library/Application Support/Hewlett-Packard/StudioScan/HPStudioScan.app
- com.hp.scan.HPStudioScan
/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Add Image Files to iPhoto Library.app
- com.apple.automator.Add_Image_Files_to_iPhoto_Library
/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email Image Files.app
- com.apple.automator.Email_Image_Files
/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email PDF Files.app
- com.apple.automator.Email_PDF_Files
/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open Image Files in Preview.app
- com.apple.automator.Open_Image_Files_in_Preview
/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open PDF Files in Preview.app
- com.apple.automator.Open_PDF_Files_in_Preview
/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save Image Files in Pictures Folder.app
- com.apple.automator.Save_Image_Files_in_Pictures_Folder
/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save PDF Files in Documents Folder.app
- com.apple.automator.Save_PDF_Files_in_Documents_Folder
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Add to iPhoto Library.app
- com.apple.automator.Add_to_iPhoto_Library
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email Image.app
- com.apple.automator.Email_Image
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email PDF.app
- com.apple.automator.Email_PDF
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open HP Scan.app
- com.apple.automator.Open_HP_Scan
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open PDF in Preview.app
- com.apple.automator.Open_PDF_in_Preview
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open in Preview.app
- com.apple.automator.Open_in_Preview
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save PDF in Documents.app
- com.apple.automator.Save_PDF_in_Documents
/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save in Pictures.app
- com.apple.automator.Save_in_Pictures
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Attach Document Files to Email.app
- com.apple.automator.Attach_Document_Files_to_Email
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Attach Image Files to Email.app
- com.apple.automator.Attach_Image_Files_to_Email
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Open Files in Application.app
- com.apple.automator.Open_Files_in_Application
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Save Files in Folder.app
- com.apple.automator.Save_Files_in_Folder
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Attach Scanned Documents to Email.app
- com.apple.automator.Attach_Scanned_Documents_to_Email
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Attach Scanned Images to Email.app
- com.apple.automator.Attach_Scanned_Images_to_Email
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Open Scanned Items in Application.app
- com.apple.automator.Open_Scanned_Items_in_Application
/Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Save Scanned Items in Folder.app
- com.apple.automator.Save_Scanned_Items_in_Folder
/Library/Application Support/Hewlett-Packard/hpAutomation.app
- com.hp.Automation
/Library/Application Support/Hewlett-Packard/iPhoto Support/Jpeg to iPhoto.app
- com.hp.photo.jpgtoiphoto
/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app
- com.microsoft.silverlight.sllauncher
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app
- com.hp.dynamicTOCGenerator
/Library/Documentation/Help/Hewlett-Packard/shrd/flashplayer
- N/A
/Library/Documentation/Help/Hewlett-Packard/shrd/hpplayer.app
- N/A
/Library/Frameworks/Adobe AIR.framework/Resources/Template.app
- com.adobe.air.Template
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app
- com.adobe.air.Template
/Library/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app
- com.adobe.air.Installer
/Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Template.app
- com.adobe.air.Template
/Library/Frameworks/net.juniper.DSApplicationServices.framework/Versions/7.0.0/ Log Viewer.app
- net.juniper.LogViewer
/Library/Frameworks/net.juniper.DSApplicationServices.framework/Versions/7.0.0/ Session Timer.app
- net.juniper.SessionTimer
/Library/Frameworks/net.juniper.DSNetworkDiagnostics.framework/Versions/7.0.0/N etwork Diagnostic Utility.app
- net.juniper.NetworkDiagnosticUtility
/Library/Image Capture/TWAIN Data Sources/Canon MG3100 series Network.ds
- jp.co.canon.scangear.twainds.mg3100.network
/Library/Image Capture/TWAIN Data Sources/Canon MG3100 series.ds
- jp.co.canon.scangear.twainds.mg3100
/Library/Printers/hp/Fax/fax.backend
- com.hp.fax
/Library/Printers/hp/Fax/rastertofax.filter
- com.hp.rastertofax
/Library/Printers/hp/cups/filters/pdftopdf.filter
- com.hp.print.cups.filter.pdftopdf
/Users/USER Flores/Downloads/redsn0w_mac_0.9.10b1/redsn0w.app
- com.devteam.redsn0w
/Users/USER Flores/Downloads/redsn0w_mac_0.9.10b6b/redsn0w.app
- com.devteam.redsn0w
/Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app
- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal
/Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Add Image Files to iPhoto Library.app
- com.apple.automator.Add_Image_Files_to_iPhoto_Library
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email Image Files.app
- com.apple.automator.Email_Image_Files
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email PDF Files.app
- com.apple.automator.Email_PDF_Files
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open Image Files in Preview.app
- com.apple.automator.Open_Image_Files_in_Preview
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open PDF Files in Preview.app
- com.apple.automator.Open_PDF_Files_in_Preview
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save Image Files in Pictures Folder.app
- com.apple.automator.Save_Image_Files_in_Pictures_Folder
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save PDF Files in Documents Folder.app
- com.apple.automator.Save_PDF_Files_in_Documents_Folder
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Add to iPhoto Library.app
- com.apple.automator.Add_to_iPhoto_Library
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email Image.app
- com.apple.automator.Email_Image
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email PDF.app
- com.apple.automator.Email_PDF
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open HP Scan.app
- com.apple.automator.Open_HP_Scan
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open PDF in Preview.app
- com.apple.automator.Open_PDF_in_Preview
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open in Preview.app
- com.apple.automator.Open_in_Preview
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save PDF in Documents.app
- com.apple.automator.Save_PDF_in_Documents
/Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save in Pictures.app
- com.apple.automator.Save_in_Pictures
Frameworks
/Library/Frameworks/Adobe AIR.framework
- com.adobe.AIR
/Library/Frameworks/Snapfish.framework
- com.hp.snapfishframework
/Library/Frameworks/iLifePageLayout.framework
- com.apple.iLifePageLayout
/Library/Frameworks/net.juniper.DSApplicationServices.framework
- net.juniper.framework.DSApplicationServices
/Library/Frameworks/net.juniper.DSCoreServices.framework
- net.juniper.framework.DSCoreServices
/Library/Frameworks/net.juniper.DSNetworkDiagnostics.framework
- net.juniper.framework.DSNetworkDiagnostics
PrefPane
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
Bundles
/Library/Frameworks/Adobe AIR.framework/Resources/AdobeCP15.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.4-10.5.plugin
/Library/Frameworks/Adobe AIR.framework/Resources/adobecp.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.4-10.5.plugin
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/adobecp.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/AdobeCP15.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.4-10.5.plugin
/Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/adobecp.plugin
- com.adobe.adobecp
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
- com.adobe.acrobat.pdfviewer
/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
- com.adobe.acrobat.pdfviewerNPAPI
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash
/Library/Internet Plug-Ins/Silverlight.plugin
- com.microsoft.SilverlightPlugin
/Library/Internet Plug-Ins/iPhotoPhotocast.plugin
- com.apple.plugin.iPhotoPhotocast
/Library/Internet Plug-Ins/net.juniper.DSSafariExtensions.plugin
- net.juniper.DSSafariExtensions.plugin
/Library/Printers/Canon/IJScanner/Plugins/ausm_09.plugin
- jp.co.canon.scangear.ausm.09
/Library/Printers/Canon/IJScanner/Plugins/autocrop_09.plugin
- jp.co.canon.scangear.acrop.09
/Library/Printers/Canon/IJScanner/Plugins/balco_09.plugin
- jp.co.canon.scangear.balco.09
/Library/Printers/Canon/IJScanner/Plugins/calctone_09.plugin
- jp.co.canon.ScanGear.calctone.09
/Library/Printers/Canon/IJScanner/Plugins/cib_10.plugin
- jp.co.canon.scangear.cib.10
/Library/Printers/Canon/IJScanner/Plugins/cubs_09.plugin
- jp.co.canon.scangear.cubs.09
/Library/Printers/Canon/IJScanner/Plugins/ddt_09.plugin
- jp.co.canon.scangear.ddt.09
/Library/Printers/Canon/IJScanner/Plugins/descreen_09.plugin
- jp.co.canon.scangear.descreen.09
/Library/Printers/Canon/IJScanner/Plugins/gercc_11.plugin
- jp.co.canon.scangear.gercc.11
/Library/Printers/Canon/IJScanner/Plugins/gercg_09.plugin
- jp.co.canon.scangear.gercg.09
/Library/Printers/Canon/IJScanner/Plugins/hsl_09.plugin
- jp.co.canon.scangear.hsl.09
/Library/Printers/Canon/IJScanner/Plugins/jlb.plugin
- jp.co.canon.scangear.jlb
/Library/Printers/Canon/IJScanner/Plugins/mc2_09.plugin
- jp.co.canon.scangear.mc2.09
/Library/Printers/Canon/IJScanner/Plugins/mc2p_09.plugin
- jp.co.canon.scangear.mc2.09
/Library/Printers/Canon/IJScanner/Plugins/os104_08_4.plugin
- jp.co.canon.scangear.os104_08_4
/Library/Printers/Canon/IJScanner/Plugins/os105_08_4.plugin
- jp.co.canon.scangear.os105_08_4
/Library/Printers/Canon/IJScanner/Plugins/qare_09.plugin
- jp.co.canon.scangear.qare.09
/Library/Printers/Canon/IJScanner/Plugins/racs_09.plugin
- jp.co.canon.scangear.racs.09
/Library/Printers/Canon/IJScanner/Plugins/tdg_11.plugin
- jp.co.canon.scangear.tdg.11
/Library/Printers/Lexmark/PDEs/Job Routing 3.plugin
- com.lexmark.print.pde.JobRouting
/Library/Widgets/Network Connect.wdgt
- net.juniper.widget.NetworkConnect
/System/Library/Screen Savers/FloatingMessage.saver
- com.apple.ScreenSaver.FloatingMessage
/System/Library/Screen Savers/Flurry.saver
- com.apple.Flurry
/System/Library/Screen Savers/Random.saver
- com.apple.ScreenSaver.Random
/System/Library/Screen Savers/iTunes Artwork.saver
- com.apple.screensaver.iTunesArtwork
/Users/USER Flores/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
/Users/USER Flores/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
/Users/USER Flores/Library/Application Support/Google/Chrome/PepperFlash/18.0.0.209/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/plugins/Default Plugin.plugin
- null
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/plugins/MRJPlugin.plugin
- null
/Users/USER Flores/Library/Widgets/PEMDAS 3.wdgt
- com.donkeyentertainment.widget.PEMDAS
/Users/USER Flores/Library/Widgets/Wikipedia.wdgt
- com.whatsinthehouse.widget.wikipedia
/Users/USER Flores/Library/Widgets/iStat Pro.wdgt
- com.iSlayer.iStatpro4.widget
Bundles (new)
-
-0 Use NUL (``
-
-attr <attr> Fetches the value of the specified attribute
-
-count Query only reports matching items count
-
-live Query should stay active
-
-name <name> Search on file name only
-
-onlyin <dir> Search only within given directory
-
-reprint Reprint results on live update
-
-s <name> Show contents of smart folder <name>
-
Usage
- mdfind [-live] [-count] [-onlyin directory] [-name fileName | -s smartFolderName | query]
example
- mdfind "kMDItemAuthor == '*MyFavoriteAuthor*'"
example
- mdfind -live MyFavoriteAuthor
example
- mdfind -name stdlib.h
example
- mdfind -onlyin ~ image
example
- mdfind image
list the files matching the query
-
mdfind
- no query specified.
query can be an expression or a sequence of words
-
Library paths
/Library/Application Support/RosettaStoneDaemon/Libraries/FNInterface_libFNP.dylib
/Library/Application Support/RosettaStoneDaemon/Libraries/FnpCommsSoap.dylib
/Library/Application Support/RosettaStoneDaemon/bin/ActivationDaemonPlugin.dylib
/Library/Application Support/RosettaStoneDaemon/bin/DataInstaller.dylib
/Library/Application Support/RosettaStoneDaemon/bin/DataInstallerDaemonPlugin.dylib
/Library/Application Support/RosettaStoneDaemon/bin/SREDaemonPlugin.dylib
/Library/Application Support/RosettaStoneDaemon/bin/libRosettaStoneDaemon.dylib
/Library/Frameworks/Adobe AIR.framework/Resources/WebKit.dylib
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib
/Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/WebKit.dylib
/Library/Printers/Samsung/CLP-620/SCMS/libscmssc.dylib
/Library/Printers/Samsung/CLP-670/SCMS/libscmssc.dylib
/Library/Printers/Samsung/CLX-6220/SCMS/libscmssc.dylib
/Library/Printers/Samsung/CLX-6250/SCMS/libscmssc.dylib
/Library/Printers/Samsung/ML-2525W/SCMS/libscmssc.dylib
/Library/Printers/Samsung/ML-2525W/SCMS/libscmssf.dylib
/Library/Printers/Samsung/ML-2580/SCMS/libscmssc.dylib
/Library/Printers/Samsung/ML-2580/SCMS/libscmssf.dylib
/Library/Printers/Samsung/SCMS/libscmssc.dylib
/Library/Printers/Samsung/SCMS/libscmssf.dylib
/System/Library/StagedFrameworks/Safari/JavaScriptCore.framework/Versions/A/Lib raries/libllvmForJSC.dylib
/Users/USER Flores/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.823/_platform_specific/mac_x64/libwidev inecdm.dylib
/Users/USER Flores/Library/Application Support/OpenOffice.org/3/user/extensions/bundled/presentation-minimizer.oxt/Sun PresentationMinimizer.uno.dylib
/Users/USER Flores/Library/Application Support/OpenOffice.org/3/user/extensions/bundled/presenter-screen.oxt/Presenter Screen.uno.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/components/libalerts_s.dy lib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libfreebl3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libmozjs.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnspr4.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnss3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnssckbi.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnssdbm3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnssutil3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libplc4.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libplds4.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libsmime3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libsoftokn3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libsqlite3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libssl3.dylib
/Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libxpcom.dylib
/usr/X11/lib/libAppleWM.7.dylib
/usr/X11/lib/libFS.6.dylib
/usr/X11/lib/libGL.1.dylib
/usr/X11/lib/libGLU.1.dylib
/usr/X11/lib/libICE.6.dylib
/usr/X11/lib/libOSMesa.7.dylib
/usr/X11/lib/libSM.6.dylib
/usr/X11/lib/libX11-xcb.1.dylib
/usr/X11/lib/libX11.6.dylib
/usr/X11/lib/libXRes.1.dylib
/usr/X11/lib/libXTrap.6.dylib
/usr/X11/lib/libXau.6.dylib
/usr/X11/lib/libXaw.6.dylib
/usr/X11/lib/libXaw.7.dylib
/usr/X11/lib/libXaw8.8.dylib
/usr/X11/lib/libXcomposite.1.dylib
/usr/X11/lib/libXcursor.1.dylib
/usr/X11/lib/libXdamage.1.dylib
/usr/X11/lib/libXdmcp.6.dylib
/usr/X11/lib/libXevie.1.dylib
/usr/X11/lib/libXext.6.dylib
/usr/X11/lib/libXfixes.3.dylib
/usr/X11/lib/libXfont.1.dylib
/usr/X11/lib/libXfontcache.1.dylib
/usr/X11/lib/libXft.2.dylib
/usr/X11/lib/libXi.6.dylib
/usr/X11/lib/libXinerama.1.dylib
/usr/X11/lib/libXmu.6.dylib
/usr/X11/lib/libXmuu.1.dylib
/usr/X11/lib/libXp.6.dylib
/usr/X11/lib/libXpm.4.dylib
/usr/X11/lib/libXrandr.2.dylib
/usr/X11/lib/libXrender.1.dylib
/usr/X11/lib/libXss.1.dylib
/usr/X11/lib/libXt.6.dylib
/usr/X11/lib/libXtst.6.dylib
/usr/X11/lib/libXv.1.dylib
/usr/X11/lib/libXvMC.1.dylib
/usr/X11/lib/libXvMCW.1.dylib
/usr/X11/lib/libXxf86misc.1.dylib
/usr/X11/lib/libXxf86vm.1.dylib
/usr/X11/lib/libcairo-script-interpreter.2.dylib
/usr/X11/lib/libcairo.2.dylib
/usr/X11/lib/libdmx.1.dylib
/usr/X11/lib/libfontconfig.1.dylib
/usr/X11/lib/libfontenc.1.dylib
/usr/X11/lib/libfreetype.6.dylib
/usr/X11/lib/libglut.3.dylib
/usr/X11/lib/libpixman-1.0.dylib
/usr/X11/lib/libpng.3.dylib
/usr/X11/lib/libpng12.0.dylib
/usr/X11/lib/libpng15.15.dylib
/usr/X11/lib/libxcb-atom.1.dylib
/usr/X11/lib/libxcb-aux.0.dylib
/usr/X11/lib/libxcb-composite.0.dylib
/usr/X11/lib/libxcb-damage.0.dylib
/usr/X11/lib/libxcb-dpms.0.dylib
/usr/X11/lib/libxcb-dri2.0.dylib
/usr/X11/lib/libxcb-event.1.dylib
/usr/X11/lib/libxcb-glx.0.dylib
/usr/X11/lib/libxcb-icccm.1.dylib
/usr/X11/lib/libxcb-image.0.dylib
/usr/X11/lib/libxcb-keysyms.1.dylib
/usr/X11/lib/libxcb-property.1.dylib
/usr/X11/lib/libxcb-randr.0.dylib
/usr/X11/lib/libxcb-record.0.dylib
/usr/X11/lib/libxcb-render-util.0.dylib
/usr/X11/lib/libxcb-render.0.dylib
/usr/X11/lib/libxcb-reply.1.dylib
/usr/X11/lib/libxcb-res.0.dylib
/usr/X11/lib/libxcb-screensaver.0.dylib
/usr/X11/lib/libxcb-shape.0.dylib
/usr/X11/lib/libxcb-shm.0.dylib
/usr/X11/lib/libxcb-sync.0.dylib
/usr/X11/lib/libxcb-xevie.0.dylib
/usr/X11/lib/libxcb-xf86dri.0.dylib
/usr/X11/lib/libxcb-xfixes.0.dylib
/usr/X11/lib/libxcb-xinerama.0.dylib
/usr/X11/lib/libxcb-xprint.0.dylib
/usr/X11/lib/libxcb-xtest.0.dylib
/usr/X11/lib/libxcb-xv.0.dylib
/usr/X11/lib/libxcb-xvmc.0.dylib
/usr/X11/lib/libxcb.1.dylib
/usr/X11/lib/libxkbfile.1.dylib
/usr/X11/lib/libxkbui.1.dylib
/usr/X11/lib/libxstub.dylib
Installations
MacKeeper 2012: 7/31/12, 12:55 PM
MacKeeper 2012: 7/31/12, 12:39 PM
Rosetta Stone TOTALe 4.1.15 Update.pkg: 7/16/12, 10:50 AM
Rosetta Stone TOTALe: 7/16/12, 10:26 AM
Parallels Desktop: 7/15/12, 11:11 AM
Elapsed time (sec): 503
-
Aug 18, 2015 9:31 AM in response to icamenscicby Quigdoc,I just dealt with this with Mac Support. They identified this as adware, had me download malwarebytes for free and run it. 2 malware files were deleted. Worked like a charm on my iMac with Yosemite running.
-
Oct 20, 2015 2:16 PM in response to Linc Davisby lucia sol,Start time: 16:06:54 10/20/15
Revision: 1241
Model Identifier: iMac14,4
System Version: OS X 10.10.5 (14F27)
Kernel Version: Darwin 14.5.0
Time since boot: 1 day6:11
UID: 501
Bluetooth
Apple Magic Mouse
Apple Wireless Keyboard
Activity
CPU: user 13%, system 12%
CPU usage (%)
com.apple.WebKit (UID 501): 62.1
com.apple.WebKit (UID 501): 51.1
com.apple.WebKit (UID 501): 47.2
WindowServer (UID 0): 25.0
nsurlstoraged (UID 501): 19.1
System errors (per sec)
com.apple.WebKi (UID 501, error 2): 973
nsurlstoraged (UID 501, error 1): 947
com.apple.WebKi (UID 501, error 1): 135
Listeners
kdc: kerberos
launchd: ssh
Diagnostic reports
2015-09-23 com.apple.security.pboxd crash
2015-09-30 cloudd crash x4
2015-10-07 Mail hang
2015-10-07 com.apple.WebKit.WebContent hang x3
2015-10-15 Mail hang
2015-10-19 Adobe Photoshop CS5 crash x2
2015-10-19 Mail hang
2015-10-20 com.apple.preference.startupdisk.remoteservice crash
Kernel log
Oct 16 16:25:54 Limiting closed port RST response from 314 to 250 packets per second
Oct 16 16:27:06 Limiting closed port RST response from 286 to 250 packets per second
Oct 16 16:27:11 Limiting closed port RST response from 259 to 250 packets per second
Oct 19 11:07:58 Limiting closed port RST response from 279 to 250 packets per second
Oct 19 12:24:08 Limiting closed port RST response from 481 to 250 packets per second
Oct 19 14:19:58 Limiting closed port RST response from 275 to 250 packets per second
Oct 19 15:35:22 Limiting closed port RST response from 543 to 250 packets per second
System log
Oct 20 14:45:53 WindowServer window 5dc is already attached to window 5cf
Oct 20 14:45:53 WindowServer window 5dc is already attached to window 5cf
Oct 20 14:54:48 WindowServer WSGetSurfaceInWindow : Invalid surface 461116112 for window 1487
Oct 20 14:54:48 WindowServer WSGetSurfaceInWindow : Invalid surface 461116112 for window 1487
Oct 20 14:54:50 WindowServer WSGetSurfaceInWindow : Invalid surface 829074005 for window 1485
Oct 20 14:54:50 WindowServer WSGetSurfaceInWindow : Invalid surface 829074005 for window 1485
Oct 20 14:54:50 WindowServer WSGetSurfaceInWindow : Invalid surface 829074005 for window 1485
Oct 20 15:00:51 mDNSResponderHelper do_mDNSSendWakeupPacket write failed Device not configured
Oct 20 15:00:52 mDNSResponderHelper do_mDNSSendWakeupPacket write failed Device not configured
Oct 20 15:00:53 iTunes ApplePushService: APSConnection being used without a delegate queue
Oct 20 15:00:54 com.apple.usbmuxd LOCKDOWN_V2_BONJOUR_SERVICE_NAME is _apple-mobdev2._tcp,90be07e4
Oct 20 15:00:55 mDNSResponderHelper do_mDNSSendWakeupPacket write failed Device not configured
Oct 20 15:08:03 WindowServer WSGetSurfaceInWindow : Invalid surface 722566599 for window 1602
Oct 20 15:13:47 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.
Oct 20 15:13:51 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.
Oct 20 15:13:54 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.
Oct 20 15:39:25 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.
Oct 20 15:39:57 WindowServer WSBindSurface : Invalid surface 462443015 for window 1686
Oct 20 15:40:48 WindowServer window 6a1 is already attached to window 69d
Oct 20 15:40:48 WindowServer window 6a1 is already attached to window 69d
Oct 20 15:40:48 WindowServer window 6a1 is already attached to window 69d
Oct 20 15:40:54 WindowServer window 6a7 is already attached to window 69d
Oct 20 15:40:54 WindowServer window 6a7 is already attached to window 69d
Oct 20 15:40:54 WindowServer window 6a7 is already attached to window 69d
Oct 20 15:41:18 WindowServer WSGetSurfaceInWindow : Invalid surface 506430097 for window 1692
Console log
Oct 16 16:25:48 ReportCrash Invoking spindump for pid=379 wakeups_rate=3091 duration=15 because of excessive wakeups
Oct 16 16:25:50 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:01 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:07 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:11 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:17 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:28 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:39 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:40 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:50 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:26:50 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:00 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:01 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:10 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:11 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:21 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:22 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:32 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:32 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 16 16:27:42 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 19 09:58:08 ReportCrash Invoking spindump for pid=387 wakeups_rate=4358 duration=11 because of excessive wakeups
Oct 19 15:54:40 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 19 15:54:51 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Oct 19 15:55:01 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Loaded kernel extensions
com.Cycling74.driver.Soundflower (1.6.6)
Daemons
com.adobe.SwitchBoard
com.adobe.fpsaud
com.apple.Kerberos.kdc
- status: 1
com.apple.dpd
- status: 75
com.apple.installer.osmessagetracing
com.apple.spindump
- status: 75
com.apple.watchdogd
com.google.keystone.daemon
com.microsoft.office.licensing.helper
Agents
com.adobe.AAM.Scheduler-1.0
com.adobe.CS5ServiceManager
com.apple.AirPortBaseStationAgent
com.apple.SafariNotificationAgent
- status: -9
com.apple.helpd
- status: -15
com.apple.photostream-agent
com.apple.pluginkit.pkd
- status: -9
com.google.keystone.system.agent
com.hp.printerAgent
User login items
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
Dropbox
- /Applications/Dropbox.app
iCloud errors
cloudd 8
comapple.CloudPhotosConfiguration 4
cloudphotosd 2
Spotlight 2
Mail 2
Finder 2
bird 1
Numbers 1
Continuity errors
lsuseractivityd 40
sharingd 5
Restricted files: 59
Lockfiles: 17
Contents of /System/Library/LaunchAgents/com.apple.SafariPlugInUpdateNotifier.plist
- mod date: Sep 11 03:55:18 2015
- checksum: 941105980
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnablePressuredExit</key>
<true/>
<key>Label</key>
<string>com.apple.SafariPlugInUpdateNotifier</string>
<key>Program</key>
<string>/usr/libexec/SafariPlugInUpdateNotifier</string>
<key>LaunchEvents</key>
<dict>
<key>com.apple.fsevents.matching</key>
<dict>
<key>UserFlashPlugInModified</key>
<dict>
<key>Path</key>
<string>~/Library/Internet Plug-Ins/Flash Player.plugin</string>
</dict>
<key>SystemFlashPlugInModified</key>
<dict>
<key>Path</key>
<string>/Library/Internet Plug-Ins/Flash Player.plugin</string>
</dict>
</dict>
...and 3 more line(s)
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: May 7 16:44:13 2015
- checksum: 3012644940
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>EnvironmentVariables</key>
<dict>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd-wrapper</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /System/Library/Security/authorization.plist
- mod date: Aug 1 19:42:40 2015
- checksum: 4180344262
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 1865 more line(s)
Contents of /private/etc/hosts
- mod date: Jun 19 13:57:04 2015
- checksum: 4035001010
127.0.0.1 localhost
255.255.255.255 broadcasthost
::1 localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
...and 38 more line(s)
Contents of /private/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist
- mod date: Jun 17 12:55:16 2015
- checksum: 3469280363
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<string>/Library/Application\ Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/switchboard.sh</string >
<key>OnDemand</key>
<false/>
<key>ServiceName</key>
<string>com.adobe.SwitchBoard.monitor</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.hp.printerAgent.plist
- mod date: Sep 4 20:49:50 2012
- checksum: 2038933932
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.hp.printerAgent</string>
<key>OnDemand</key>
<false/>
<key>Program</key>
<string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>
<key>ProgramArguments</key>
<array>
<string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>
</array>
<key>RunAtLoad</key>
<true/>
<key>ServiceIPC</key>
<true/>
<key>Sockets</key>
<dict>
<key>MyListenerSocket</key>
<dict>
<key>SockServiceName</key>
<string>51100</string>
</dict>
...and 3 more line(s)
Extensions
/System/Library/Extensions/JMicronATA.kext
- com.jmicron.JMicronATA
/System/Library/Extensions/Soundflower.kext
- com.Cycling74.driver.Soundflower
/System/Library/Extensions/USBGenericPrinterClass.kext
- com.marvell.kext.USBGenericPrinterClass
/System/Library/Extensions/hamns.kext
- com.logmein.hamachi
Applications
/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app
- com.microsoft.ASApplication
/Applications/Microsoft Office 2011/Office/Complementos/Solver.app
- com.microsoft.ASApplication
/Applications/Microsoft Office 2011/Office/Equation Editor.app
- com.microsoft.EquationEditor
/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app
- com.microsoft.office.setupassistant
/Applications/Microsoft Office 2011/Office/Microsoft Query.app
- com.microsoft.Query
/Applications/OBS.app
- com.obsproject.obs-studio
/Applications/Soundflower/Soundflowerbed.app
- com.cycling74.Soundflowerbed
/Applications/SyphonInject.app
- zakk.lol.SyphonInject
/Applications/ZipCloud.app
- com.jdibackup.ZipCloud
/Library/Application Support/Adobe/CS5ServiceManager/CS5ServiceManager.app
- com.adobe.csi.CS5ServiceManager
/Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app
- com.adobe.switchboard-2.0
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Library/Application Support/hp/P1100_1560_1600Series/HP Firmware Upgrade Utility.app
- com.yourcompany.HP_Firmware_Upgrade_Utility
/Library/Application Support/hp/P1100_1560_1600Series/HP ePrint.app
- com.yourcompany.HP_ePrint
/Library/Printers/hp/laserjet/p1100_1560_1600series/HP Uninstaller.app
- com.yourcompany.Uninstaller
/Library/Printers/hp/laserjet/p1100_1560_1600series/StatusMonitor.app
- com.yourcompany.StatusMonitor
/Library/Printers/hp/laserjet/p1100_1560_1600series/hp LaserJet Utility.app
- com.Marvell.print.HP1100.HPUtilityapp
/Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app
- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
PrefPane
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Library/PreferencePanes/Growl.prefPane
- com.growl.prefpanel
Bundles
/Library/Application Support/Adobe/APE/3.1/adbeapecore.framework/Versions/A/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.4-10.5.plugin
/Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin
- com.adobe.CameraRaw
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash
/Library/Internet Plug-Ins/MeetingJoinPlugin.plugin
- com.microsoft.communicator.meetingjoinplugin
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin
- com.google.googletalkbrowserplugin
/Library/Internet Plug-Ins/o1dbrowserplugin.plugin
- com.google.o1dbrowserplugin
/Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin
- jp.co.canon.scangear.ag07.09
/Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin
- jp.co.canon.scangear.ag08.09
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_bjnp.plugin
- jp.co.canon.ij.scangear.cijsdl.bjnp
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_iom.plugin
- jp.co.canon.ij.scangear.cijsdl.iom
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_lld.plugin
- jp.co.canon.ij.scangear.cijsdl.lld
/Library/Printers/Canon/IJScanner/Plugins/cijsds_ag.plugin
- jp.co.canon.ij.scangear.cijsds.ag
/Library/Printers/Canon/IJScanner/Plugins/cijsds_ijfsh.plugin
- jp.co.canon.ij.scangear.cijsds.ijfsh
/Library/Printers/Canon/IJScanner/Plugins/cijsds_mldv0.plugin
- jp.co.canon.ij.scangear.cijsds.mldv0
/Library/Printers/Canon/IJScanner/Plugins/cijsds_os106.plugin
- jp.co.canon.ij.scangear.cijsds.os106
/Library/Printers/Canon/IJScanner/Plugins/cijsds_racs2.plugin
- jp.co.canon.ij.scangear.cijsds.racs2
/Library/Printers/Canon/IJScanner/Plugins/cijsds_rotate.plugin
- jp.co.canon.ij.scangear.cijsds.rotate
/Library/Printers/Canon/IJScanner/Plugins/cijsds_smac.plugin
- jp.co.canon.ij.scangear.cijsds.smac
/Library/Printers/Canon/IJScanner/Plugins/cijsds_zoom.plugin
- jp.co.canon.ij.scangear.cijsds.zoom
/Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin
- jp.co.canon.scangear.lld09.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin
- jp.co.canon.scanner.cnq2413.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin
- jp.co.canon.scanner.cnq2414.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin
- jp.co.canon.scanner.cnq4807.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin
- jp.co.canon.scanner.cnq4808.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin
- jp.co.canon.scanner.cnq4809.09
/Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin
- jp.co.canon.scanner.cnq9601.09
/Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin
- jp.co.canon.scangear.ijfshlib.09
/Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin
- jp.co.canon.scangear.mld07.09
/Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin
- jp.co.canon.scangear.mld08.09
/Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin
- jp.co.canon.scangear.mld09.09
/Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin
- jp.co.canon.scangear.mld9601.09
/Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin
- jp.co.canon.sf.scanner.sfusb.09
/Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin
- jp.co.canon.scangear.usb.09
/Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin
- jp.co.canon.scangear.smac.09
/Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin
- jp.co.canon.scangear.zoom.09
/Library/Printers/hp/hpio/USBGenericPrinterClass.plugin
- com.marvell.cups.classdriver
/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
Bundles (new)
/Applications/Keynote.app
- com.apple.iWork.Keynote
/Applications/Numbers.app
- com.apple.iWork.Numbers
/Applications/Pages.app
- com.apple.iWork.Pages
/Applications/Utilities/Adobe Flash Player Install Manager.app
- com.adobe.flashplayer.installmanager
/Applications/iMovie.app
- com.apple.iMovieApp
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/System/Library/PrivateFrameworks/SafariShared.framework
- com.apple.Safari.Shared
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/DatabasePro cess.app
- com.apple.WebKit.DatabaseProcess
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/NetworkProc ess.app
- com.apple.WebKit.NetworkProcess
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/PluginProce ss.app
- com.apple.WebKit.PluginProcess
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/WebProcess. app
- com.apple.WebProcess
/System/Library/StagedFrameworks/Safari/WebKitLegacy.framework/Versions/A/WebKi tPluginHost.app
- com.apple.WebKit.PluginHost
/Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
Library paths
/Applications/Adobe Photoshop CS5/MATLAB/Required/psmatlab.dylib
/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib
/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib
/Library/Application Support/Adobe/APE/3.1/adbeapecore.framework/Versions/A/Resources/WebKit.dylib
/Library/Application Support/Adobe/CS5ServiceManager/lib/CSXS-Installer-Hook.dylib
/Library/Application Support/Adobe/CS5ServiceManager/lib/ServiceManager-Launcher.dylib
/Library/Application Support/Adobe/OOBE/PDApp/DWA/DWANative.dylib
/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdCaps.dylib
/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdFS.dylib
/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKEngine.dylib
/Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/AdobePIM.dylib
/Library/Application Support/Adobe/OOBE/PDApp/LWA/PWANative.dylib
/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_caps.dylib
/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_oobelib.dylib
/Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_upgrade.dylib
/Library/Application Support/Adobe/OOBE/PDApp/UWA/UWANative.dylib
/Library/Application Support/Adobe/OOBE/PDApp/core/AdobePIM.dylib
/System/Library/StagedFrameworks/Safari/WebKit.framework/NetworkProcess.app 1/Contents/MacOS/SecItemShim.dylib
/System/Library/StagedFrameworks/Safari/WebKit.framework/PluginProcess.app 1/Contents/MacOS/PluginProcessShim.dylib
/System/Library/StagedFrameworks/Safari/WebKit.framework/WebProcess.app 1/Contents/MacOS/WebProcessShim.dylib
/System/Library/StagedFrameworks/Safari/WebKitLegacy.framework/WebKitPluginHost .app 1/Contents/MacOS/WebKitPluginHostShim.dylib
/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.824/_platform_specific/mac_x64/libwidev inecdm.dylib
App extensions
com.getdropbox.dropbox.garcon
Installations
Adobe Flash Player: 11/12/14, 08:54
Adobe Flash Player: 10/29/14, 16:43
Adobe Flash Player: 9/10/14, 11:13
Adobe Flash Player: 8/13/14, 09:10
Microsoft Office for Mac 2011: 8/7/14, 08:03
Elapsed time (sec): 459
-
Oct 20, 2015 4:48 PM in response to icamenscicby stuart35,Find the folder it's in and send it to trash and delete.
-
Nov 24, 2015 1:32 AM in response to Linc Davisby KawaiiOline,Thank you so much! It works with me as well
-
Mar 17, 2016 2:59 AM in response to icamenscicby Voyzeck,Hi,
I am desperate too:(
Start time: 22:48:45 03/17/16
Revision: 1241
Model Identifier: MacBookPro12,1
System Version: OS X 10.10.5 (14F1605)
Kernel Version: Darwin 14.5.0
Time since boot: 11:28
UID: 501
FileVault 2: On
File opens (per sec)
Google Chrome (UID 501) => /Users/USER/Library/Application Support/Google/Chrome/Default/Pepper Data/Shockwave Flash/WritableRoot/#SharedObjects/Y9RFL23A/cdncache-a.akamaihd.net/items/e6a00/ storage.swf/gpl.sol (status 0): 13
AdobeUpdateDaem (UID 0) => /tmp/UUID_OUT (status 60): 5
System errors (per sec)
Google Chrome H (UID 501, error 316): 330
Google Chrome H (UID 501, error 35): 329
Google Chrome (UID 501, error 35): 117
System caches/logs
1809 MB: /System/Library/Caches/com.apple.coresymbolicationd/data
Diagnostic reports
2016-02-22 Creative Cloud crash
Kernel log
Mar 15 21:18:24 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020
Mar 15 21:18:24 Error: AppleHSSPIHIDDriver::HandleInterrupt returned 0xe00002d7
Mar 15 21:18:24 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200
Mar 16 01:11:57 WARNING: hibernate_page_list_setall skipped 18893 xpmapped pages
Mar 16 05:07:38 WARNING: hibernate_page_list_setall skipped 8651 xpmapped pages
Mar 16 05:07:38 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020
Mar 16 05:07:38 Error: AppleHSSPIHIDDriver::HandleInterrupt returned 0xe00002d7
Mar 16 05:07:38 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200
Mar 16 05:07:40 **** [BroadcomBluetoothHostControllerUSBTransport][probe] -- Not IOUSBCompositeDriver -- found BroadcomBluetoothHostControllerUSBTransport -- 0x5000
Mar 16 08:08:29 WARNING: hibernate_page_list_setall skipped 8651 xpmapped pages
Mar 16 08:53:33 WARNING: hibernate_page_list_setall skipped 4934 xpmapped pages
Mar 16 08:53:33 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020
Mar 16 08:53:33 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200
Mar 16 12:25:54 WARNING: hibernate_page_list_setall skipped 4934 xpmapped pages
Mar 16 14:53:49 WARNING: hibernate_page_list_setall skipped 6070 xpmapped pages
Mar 16 14:53:49 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020
Mar 16 14:53:49 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200
Mar 16 19:31:19 WARNING: hibernate_page_list_setall skipped 6070 xpmapped pages
Mar 16 21:09:37 WARNING: hibernate_page_list_setall skipped 11374 xpmapped pages
Mar 16 21:09:37 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020
Mar 16 21:09:37 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200
Mar 17 11:21:11 Sleep failure code 0x00000000 0x1f006c00
Mar 17 11:21:12 **** [BroadcomBluetoothHostControllerUSBTransport][probe] -- Found IOUSBCompositeDriver -- 0x1000
Mar 17 11:21:12 **** [BroadcomBluetoothHostControllerUSBTransport][start] -- Found IOUSBCompositeDriver -- 0x1000
Mar 17 18:28:53 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020
System log
Mar 17 21:59:24 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:12:09 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:12:09 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:17:40 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:23:37 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:40:13 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:40:15 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:40:39 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:42:22 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:42:22 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:42:22 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:42:28 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:43:16 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:43:16 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:43:17 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:44:04 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:44:06 Google Chrome Helper CGAffineTransformInvert: singular matrix.
Mar 17 22:44:16 WindowServer window 1f7 is already attached to window 1ef
Mar 17 22:46:51 WindowServer WSGetSurfaceInWindow : Invalid surface 478244564 for window 493
Mar 17 22:46:51 WindowServer WSGetSurfaceInWindow : Invalid surface 478244564 for window 493
Mar 17 22:46:51 WindowServer WSGetSurfaceInWindow : Invalid surface 478244564 for window 493
Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727
Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727
Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727
Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727
Console log
Mar 14 21:52:01 ReportCrash Invoking spindump for pid=226 wakeups_rate=181 duration=249 because of excessive wakeups
Mar 14 21:55:13 ReportCrash Invoking spindump for pid=226 thread=4960 percent_cpu=51 duration=177 because of excessive cpu utilization
Mar 17 11:21:19 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Mar 17 11:21:19 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
Mar 17 11:21:19 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Mar 17 11:21:19 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Mar 17 11:25:40 ReportCrash Invoking spindump for pid=392 wakeups_rate=181 duration=249 because of excessive wakeups
Daemons
Adobe_Genuine_Software_Integrity_Service
com.5e275556e95e3ba9.config
com.Kawaka.helper
com.adobe.adobeupdatedaemon
com.apple.spindump
- status: 75
com.apple.watchdogd
Agents
com.EasyShopper.agent
- status: 78
com.Kawaka.agent
com.SoftwareUpdater.agent
- status: 78
com.adobe.AAM.Scheduler-1.0
com.adobe.AdobeCreativeCloud
com.apple.AirPortBaseStationAgent
com.google.keystone.user.agent
com.jdibackup.ZipCloud.autostart
- status: 1
com.jdibackup.ZipCloud.notify
- status: 1
User login items
Flux
- /Applications/Flux.app
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
Safari extensions
SaveFrom.net helper
- com.savefrom.helper
iCloud errors
cloudd 16
comapple.CloudPhotosConfiguration 4
cloudphotosd 3
Restricted files: 34878
Contents of /Library/LaunchAgents/com.EasyShopper.agent.plist
- mod date: Feb 21 20:05:57 2016
- checksum: 3827187131
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.EasyShopper.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/EasyShopper/EasyShopper</string>
<string>-guid</string>
<string>7345177795063732</string>
<string>-source</string>
<string>pic-1607</string>
<string>-brand</string>
<string>EasyShopper</string>
<string>-dt</string>
<string>1456038356</string>
</array>
<key>RunAtLoad</key>
...and 9 more line(s)
Contents of /Library/LaunchAgents/com.SoftwareUpdater.agent.plist
- mod date: Feb 21 20:05:59 2016
- checksum: 1898839021
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.SoftwareUpdater.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/SoftwareUpdater/SoftwareUpdater</string>
<string>-guid</string>
<string>7345177795063732</string>
<string>-source</string>
<string>pic-1607</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
...and 7 more line(s)
Contents of /Library/LaunchAgents/com.kawaka.agent.plist
- mod date: Feb 21 22:58:55 2016
- checksum: 1949639174
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Kawaka.agent</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Kawaka/Agent/agent.app/Contents/MacOS/agent</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ThrottleInterval</key>
<integer>10</integer>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist
- mod date: Feb 21 22:35:58 2016
- checksum: 2254479735
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.adobe.adobeupdatedaemon</string>
<key>LaunchOnlyOnce</key>
<true/>
<key>Program</key>
<string>/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.adobe.agsservice.plist
- mod date: Feb 21 22:35:46 2016
- checksum: 364192525
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>Adobe_Genuine_Software_Integrity_Service</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Adobe/AdobeGCClient/AGSService</string>
</array>
<key>Nice</key>
<integer>1</integer>
<key>StartInterval</key>
<integer>86400</integer>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/tmp/AlTest1.err</string>
<key>StandardOutPath</key>
<string>/tmp/AlTest1.out</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.kawaka.daemon.plist
- mod date: Feb 21 22:58:55 2016
- checksum: 2626268746
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>com.Kawaka.daemon</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Kawaka/Agent/agent.app/Contents/MacOS/agent</string>
<string>-update</string>
</array>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>ThrottleInterval</key>
<integer>10</integer>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.kawaka.helper.plist
- mod date: Feb 21 22:58:55 2016
- checksum: 157909938
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Kawaka.helper</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Kawaka/Agent/agent.app/Contents/MacOS/agent</string>
<string>-helper</string>
</array>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>ThrottleInterval</key>
<integer>10</integer>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.rufoferruginousUpd.plist
- mod date: Feb 21 22:59:14 2016
- checksum: 1481949985
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>UserName</key>
<string>root</string>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.5e275556e95e3ba9.config</string>
<key>RunAtLoad</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/etc/run_upd.sh</string>
</array>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.SafariPlugInUpdateNotifier.plist
- mod date: Dec 21 20:57:59 2015
- checksum: 941105980
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnablePressuredExit</key>
<true/>
<key>Label</key>
<string>com.apple.SafariPlugInUpdateNotifier</string>
<key>Program</key>
<string>/usr/libexec/SafariPlugInUpdateNotifier</string>
<key>LaunchEvents</key>
<dict>
<key>com.apple.fsevents.matching</key>
<dict>
<key>UserFlashPlugInModified</key>
<dict>
<key>Path</key>
<string>~/Library/Internet Plug-Ins/Flash Player.plugin</string>
</dict>
<key>SystemFlashPlugInModified</key>
<dict>
<key>Path</key>
<string>/Library/Internet Plug-Ins/Flash Player.plugin</string>
</dict>
</dict>
...and 3 more line(s)
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: Jan 4 09:54:23 2016
- checksum: 3012644940
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>EnvironmentVariables</key>
<dict>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd-wrapper</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /System/Library/Security/authorization.plist
- mod date: Aug 2 12:42:40 2015
- checksum: 4180344262
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 1865 more line(s)
Contents of /private/etc/hosts
- ASCII English text, with CRLF, CR, LF line terminators
- mod date: Jan 7 06:31:41 2016
- checksum: 4216390941
127.0.0.1 localhost
255.255.255.255 broadcasthost
::1 localhost
Contents of /private/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist
- mod date: Jan 7 06:21:22 2016
- checksum: 3469280363
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<string>/Library/Application\ Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/switchboard.sh</string >
<key>OnDemand</key>
<false/>
<key>ServiceName</key>
<string>com.adobe.SwitchBoard.monitor</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.EasyShopper.agent.plist
- mod date: Feb 21 20:05:57 2016
- checksum: 3827187131
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.EasyShopper.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/EasyShopper/EasyShopper</string>
<string>-guid</string>
<string>7345177795063732</string>
<string>-source</string>
<string>pic-1607</string>
<string>-brand</string>
<string>EasyShopper</string>
<string>-dt</string>
<string>1456038356</string>
</array>
<key>RunAtLoad</key>
...and 9 more line(s)
Contents of Library/LaunchAgents/com.SoftwareUpdater.agent.plist
- mod date: Feb 21 20:05:59 2016
- checksum: 1898839021
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.SoftwareUpdater.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/SoftwareUpdater/SoftwareUpdater</string>
<string>-guid</string>
<string>7345177795063732</string>
<string>-source</string>
<string>pic-1607</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
...and 7 more line(s)
Contents of Library/LaunchAgents/com.apple.FolderActions.folders.plist
- mod date: Jan 31 01:33:44 2016
- checksum: 1189540302
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.FolderActions.folders</string>
<key>Program</key>
<string>/usr/bin/osascript</string>
<key>ProgramArguments</key>
<array>
<string>osascript</string>
<string>-e</string>
<string>tell application "Folder Actions Dispatcher" to tick</string>
</array>
<key>WatchPaths</key>
<array/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.google.keystone.agent.plist
- mod date: Mar 6 19:02:38 2016
- checksum: 3504134591
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.google.keystone.user.agent</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
<string>-runMode</string>
<string>ifneeded</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3623</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
- mod date: Feb 21 20:07:30 2016
- checksum: 2269878537
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.autostart</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>-n</string>
<string>--args</string>
<string>9</string>
<string>-l</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
- mod date: Feb 21 20:07:29 2016
- checksum: 2650475567
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.notify</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>--args</string>
<string>7</string>
<string>1</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>StartInterval</key>
<integer>1200</integer>
<key>RunAtLoad</key>
<false/>
</dict>
</plist>
Applications
/Applications/BalTax 2015/BalTax 2015 Deinstallationsprogramm.app
- com.install4j.9428-7321-0755-7683.uninstaller
/Applications/BalTax 2015/BalTax 2015.app
- com.install4j.9428-7321-0755-7683.2
/Applications/PDFelement.app
- com.wondershare.PDFelement
/Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app
- com.adobe.switchboard-2.0
/Library/Application Support/Kawaka/Agent/agent.app
- com.someproduct.agent
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf
/Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo
/Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf
/Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia
/Users/USER/Documents/Cris /Adobe Photoshop CS6 [Mac] xCYBERPIRATENx/Hoste Patch.app
- N/A
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
Frameworks
/System/Library/Frameworks/Kawaka.framework
- N/A
Bundles
/Library/Application Support/Adobe/APE/3.3/adbeapecore.framework/Versions/A/Libraries/Flash Player.plugin
- com.macromedia.FlashPlayer-10.4-10.5.plugin
/Library/Application Support/Adobe/Plug-Ins/CS6/File Formats/Camera Raw.plugin
- com.adobe.CameraRaw
/Library/Internet Plug-Ins/AdobeAAMDetect.plugin
- com.AdobeAAMDetectLib.AdobeAAMDetect
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/Utils/AdobeAAMDetect.plugin
- com.AdobeAAMDetectLib.AdobeAAMDetect
/Users/USER/Library/Address Book Plug-Ins/SkypeABCaller.bundle
- com.skype.SkypeABCaller
/Users/USER/Library/Address Book Plug-Ins/SkypeABChatter.bundle
- com.skype.SkypeABChatter
/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.SkypeABDialer
/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.SkypeABSMS
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/21.0.0.182/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
Bundles (new)
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/21.0.0.182/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
Library paths
/Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib
/Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib
/Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib
/Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib
/Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib
/Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib
/Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib
/Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib
/Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib
/Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib
/Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib
/Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib
/Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib
/Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib
/Applications/Utilities/Adobe Application Manager/P6/axlib.dylib
/Applications/Utilities/Adobe Application Manager/P7/IMSLib.dylib
/Applications/Utilities/Adobe Application Manager/P7/P7Native.dylib
/Applications/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib
/Applications/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib
/Applications/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib
/Applications/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib
/Applications/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib
/Applications/Utilities/Adobe Application Manager/P7/axlibv7.dylib
/Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib
/Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib
/Applications/Utilities/Adobe Application Manager/core/switcher/UWA_UI.dylib
/Applications/Utilities/Adobe Creative Cloud/ACC/ContainerBL.dylib
/Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib
/Applications/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib
/Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib
/Applications/Utilities/Adobe Creative Cloud/HDCore/HDPIM.dylib
/Applications/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib
/Applications/Utilities/Adobe Creative Cloud/SPanel/SPanelBL.dylib
/Library/Application Support/Adobe/APE/3.3/adbeapecore.framework/Versions/A/Libraries/WebKit.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Core/AdobePIM.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Core/Core.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/Analytics.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/LocManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/PrefsManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/ElevationManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/HEX/HEX.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Notifications/ANSClient.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Notifications/NotificationManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/Notifications/TrayNotificationManager.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/SignInApp/SignInAppBL.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/CmdCntr.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanControl.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanMessage5.dylib
/Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanWrapper.dylib
/Library/Application Support/Adobe/AdobeGCClient/gcupdater.dylib
/Library/Application Support/Adobe/CS6ServiceManager/lib/CSXS-Installer-Hook.dylib
/Library/Application Support/Adobe/CS6ServiceManager/lib/ServiceManager-Launcher.dylib
/Library/Application Support/Kawaka/Kawaka/Versions/A/Libraries/libLoader.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/accessible/libqtaccessiblewidgets. dylib
/Library/rufoferruginousUpd/Contents/PlugIns/bearer/libqcorewlanbearer.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/bearer/libqgenericbearer.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqcncodecs.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqjpcodecs.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqkrcodecs.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqtwcodecs.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqgif.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqico.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqjpeg.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqmng.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqtga.dylib
/Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqtiff.dylib
/System/Library/Frameworks/Kawaka.framework/Versions/A/Libraries/libLoader.dyli b
/Users/USER/Downloads/Utilities/Adobe Application Manager/D6/D6Native.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/DWA/DWANative.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/PWANative.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P6/IMSLib.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P6/P6Native.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P6/axlib.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/IMSLib.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/P7Native.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/P7/axlibv7.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/UWA/UWANative.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/core/AdobePIM.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib
/Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/UWA_UI.dylib
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/ACC/ContainerBL.dylib
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/HDCore/HDPIM.dylib
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib
/Users/USER/Downloads/Utilities/Adobe Creative Cloud/SPanel/SPanelBL.dylib
/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/libwidev inecdm.dylib
App extensions
com.adobe.accmac.ACCFinderSync
com.pixelmatorteam.pixelmator.trial.Repair-Tool-Action-Extension
Installations
MacKeeper: 21/02/2016 22:59
MacKeeper: 21/02/2016 22:59
ZipCloud: 21/02/2016 20:07
Adobe Photoshop Lightroom 4.4: 09/01/2016 00:53
Elapsed time (sec): 207
-
May 31, 2016 5:46 PM in response to Linc Davisby frankp1024,you are a god!!!!!! thank you so much for the help linc.
-
Sep 15, 2016 6:32 AM in response to Linc Davisby zitanicole,hey so when i click reveal in finder my finder just opens and thats it nothing happens ;alksjg;laksdjg my mac is brand spankin and its being slow....?
-
Sep 15, 2016 8:36 AM in response to zitanicoleby Eric Root,You might want to consider starting a new discussion. Since this one is a couple of years old, less people are likely to look at it. A new post would be much more visible. You can link to this one.
Try running this program and then copy and paste the output in a new post. The program was created by Etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.
