icamenscic

Q: Got a malware on OS X Yosemite, how do I get rid of it?

I have some kind of malware present on my MacBook Pro, mid 2014 with OS X Yosemite Version 10.10, from trying to download a "flash player". I get full page pop-up ads for "mackeeper" and the like nearly every time I click on a link, have annoying ads on pages that I know weren't there before I downloaded this "program", and am now seeing other pop-up ads. As soon as I downloaded this program, my search engine changed to "Conduit", if this info helps.What can I do to get rid of this?

MacBook Pro with Retina display, OS X Yosemite (10.10)

Posted on Nov 5, 2014 5:52 AM

Close

Q: Got a malware on OS X Yosemite, how do I get rid of it?

  • All replies
  • Helpful answers

first Previous Page 4 of 4
  • by Keith Dvorak,

    Keith Dvorak Keith Dvorak Jul 10, 2015 11:08 AM in response to Linc Davis
    Level 1 (0 points)
    Jul 10, 2015 11:08 AM in response to Linc Davis

    Here are my results. I just got this, and it freaked me out. However, I saw some of your earlier advice and I can't find any of the files on my system. I did manage to keep it from launching on Safari after a couple fast force-quits. I hope I'm okay.

     

    Start time: 10:42:16 07/10/15

     

     

    Revision: 1241

     

     

    Model Identifier: MacBookAir4,2

    System Version: OS X 10.10.4 (14E46)

    Kernel Version: Darwin 14.4.0

    Time since boot: 1 day2:41

     

     

    UID: 501

     

     

    Font issues: 3

     

     

    Trusted certs (user)

     

     

        phvapr06.safeway.com

     

     

    Firewall: On

     

     

    TCP/IP

     

     

        Subnet mask: 255.255.255.240

     

     

    Listeners

     

     

        kdc: kerberos

        launchd: afpovertcp

        launchd: ssh

     

     

    Wi-Fi

     

     

        Signal / Noise: -81 dBm / -85 dBm

        Security: None

        Security: None

        Security: None

        Security: None

        Security: None

        Security: None

        Security: None

        Security: None

        Security: None

        Security: None

     

     

    System caches/logs

     

     

        3549 MB: /System/Library/Caches/com.apple.coresymbolicationd/data

        1252 MB: /var/folders/gv/gs_jk4xd3rgc24pl0nfk_5fr0000gn/T/../C/com.apple.iBooksX/5546385 79/mzbf.puztqtny..d2.dlv.d2.dlv.ibooks

     

     

    Diagnostic reports

     

     

        2015-06-14 discoveryd crash

        2015-06-14 sharingd crash

        2015-06-21 Fantastical 2 crash

        2015-06-23 SystemUIServer crash

        2015-07-02 SystemUIServer crash

        2015-07-02 com.apple.WebKit.Networking crash

        2015-07-05 AdobeCrashDaemon crash

        2015-07-05 CalendarAgent crash

     

     

    Kernel log

     

     

        Jul  6 11:17:12 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0

        Jul  7 07:30:10 AppleUSBEthernetHost::enable: failed to set alt interface 1, e00002ed

        Jul  7 07:30:10 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0

        Jul  7 11:32:35 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0

        Jul  7 13:53:20 Warning: IOSurface 0000006f modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit

        Jul  7 13:53:20 Warning: IOSurface 0000006f modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit

        Jul  7 13:59:10 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0

        Jul  7 15:09:31 WARNING: hibernate_page_list_setall skipped 13956 xpmapped pages

        Jul  8 05:19:14 WARNING: hibernate_page_list_setall skipped 15038 xpmapped pages

        Jul  8 07:14:07 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0

        Jul  8 12:39:12 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0

        Jul  8 13:49:37 WARNING: hibernate_page_list_setall skipped 15038 xpmapped pages

        Jul  9 07:22:09 WARNING: hibernate_page_list_setall skipped 15794 xpmapped pages

        Jul  9 08:01:55 utun_start: ifnet_disable_output returned error 12

        Jul  9 08:02:36 OSUnserializeXML: syntax error near line 1

        Jul  9 08:02:39 OSUnserializeXML: syntax error near line 1

        Jul  9 08:02:45 OSUnserializeXML: syntax error near line 1

        Jul  9 08:13:08 Warning: IOSurface 0000001d modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit

        Jul  9 08:13:08 Warning: IOSurface 0000001d modified by process com.apple.WebKit using the GPU while surface is write locked by process com.apple.WebKit

        Jul  9 12:50:41 AppleUSBEthernetHost::enable: failed to set alt interface 1, e00002ed

        Jul  9 12:50:41 AppleUSBEthernetHost::disable: failed to set alt interface 0, e00002c0

        Jul 10 06:39:20 WARNING: hibernate_page_list_setall skipped 22567 xpmapped pages

        Jul 10 07:18:18 esp6_input: mbuf allocation failed

        Jul 10 07:18:19 esp6_input: mbuf allocation failed

        Jul 10 07:20:15 esp6_input: mbuf allocation failed

     

     

    System log

     

     

        Jul 10 09:56:31 racoon IPv6 not supported for mode config.

        Jul 10 09:56:31 racoon unable to allocate space for vpn control message.

        Jul 10 10:08:33 launchservicesd Application App:"loginwindow" asn:0x0-1001 pid:89 refs=7 @ 0x7facf2f09580 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x14a14a pid=2644 "ScreenSaverEngine"")), so denying. : LASSession.cp #1521 SetFrontApplication() q=LSSession 100005/0x186a5 queue

        Jul 10 10:08:33 launchservicesd Application App:"loginwindow" asn:0x0-1001 pid:89 refs=8 @ 0x7facf2f09580 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x14a14a pid=2644 "ScreenSaverEngine"")), so denying. : LASSession.cp #1521 SetFrontApplication() q=LSSession 100005/0x186a5 queue

        Jul 10 10:08:36 powerd Activity changes from 0x1 to 0x9. Assertions:1 HidState:1

        Jul 10 10:08:40 racoon IPv6 not supported for mode config.

        Jul 10 10:08:40 racoon unable to allocate space for vpn control message.

        Jul 10 10:08:46 powerd Activity changes from 0x9 to 0x1. Assertions:1 HidState:1

        Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:20:12 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:20:56 racoon IPv6 not supported for mode config.

        Jul 10 10:20:56 racoon unable to allocate space for vpn control message.

        Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:27:32 EvernoteHelper AppleEvents: Send port for process has no send right, port=( port:20475/0x4ffb rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

        Jul 10 10:32:59 racoon IPv6 not supported for mode config.

        Jul 10 10:32:59 racoon unable to allocate space for vpn control message.

        Jul 10 10:34:25 WindowServer WSGetSurfaceInWindow : Invalid surface 631221912 for window 1519

     

     

    Console log

     

     

        Jul  7 11:11:07 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  7 11:11:26 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/wine_notes/number_of_transactions?authentica tion_token=UUID&type=DELETE

        Jul  7 11:11:26 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  7 11:11:26 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/wine_notes/number_of_transactions?authentica tion_token=UUID&type=CREATE

        Jul  7 11:11:26 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/wine_notes/number_of_transactions?authentica tion_token=UUID&type=UPDATE

        Jul  7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/beer_notes/number_of_transactions?authentica tion_token=UUID&type=DELETE

        Jul  7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/beer_notes/number_of_transactions?authentica tion_token=UUID&type=CREATE

        Jul  7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  7 11:11:29 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/device/beer_notes/number_of_transactions?authentica tion_token=UUID&type=UPDATE

        Jul  7 11:11:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  7 11:11:56 nsurlstoraged writeDBwithCachedResponse-ERROR: task-mgr=MacGourmet Deluxe-write (_dbWriteConnection=0x7ff28bc9b310) insert SQL stmnt. is nil for item: https://www.marinercloud.com/user/recipes88780015

        Jul  7 11:11:56 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Jul  9 07:39:58 ReportCrash Invoking spindump for pid=5456 wakeups_rate=160 duration=282 because of excessive wakeups

        Jul  9 08:02:41 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Jul  9 08:02:41 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid.  Unable to determine schema version.

        Jul  9 08:02:41 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Jul  9 08:02:41 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Jul  9 08:02:46 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Jul  9 08:02:46 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Jul  9 08:02:53 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Jul  9 08:04:03 ReportCrash Invoking spindump for pid=239 wakeups_rate=492 duration=92 because of excessive wakeups

        Jul  9 09:44:31 ReportCrash Invoking spindump for pid=405 wakeups_rate=452 duration=100 because of excessive wakeups

     

     

    Daemons

     

     

        com.adobe.ARMDC.Communicator

        com.adobe.ARMDC.SMJobBlessHelper

        com.adobe.adobeupdatedaemon

        com.adobe.fpsaud

        com.apple.GSSCred

        com.apple.awdd

        com.apple.cmio.registerassistantservice

        com.apple.corestorage.corestoragehelperd

        com.apple.ctkd

        com.apple.icloud.findmydeviced

        com.apple.iconservices.iconservicesagent

        com.apple.ifdreader

        com.apple.installd

        com.apple.installer.osmessagetracing

        com.apple.nehelper

        com.apple.nsurlsessiond_privileged

        com.apple.sandboxd

        com.apple.softwareupdated

        com.apple.spindump

        - status: 75

        com.apple.systemadministration.writeconfig

        com.apple.watchdogd

        com.apple.wdhelper

        com.apple.xpc.smd

        com.barebones.authd

        com.bjango.istatmenusdaemon

        com.microsoft.office.licensing.helper

        com.oracle.java.Helper-Tool

        com.oracle.java.JavaUpdateHelper

     

     

    Agents

     

     

        2BUA8C4S2C.com.agilebits.onepassword4-helper

        com.adobe.AAM.Scheduler-1.0

        com.adobe.ARMDCHelper.UUID

        - status: 111

        com.adobe.AdobeCreativeCloud

        com.akamai.single-user-client

        com.apple.AirPortBaseStationAgent

        com.apple.CSConfigDotMacCert-EMAIL-SharedServices

        - status: 78

        com.bjango.istatmenusagent

        com.bjango.istatmenusnotifications

        com.dayoneapp.dayone-agent

        com.flexibits.fantastical2.mac.launcher

        com.houdah.HoudahSpot4.HoudahSpotHelper

        com.microsoft.OneDriveLauncher

        com.omnigroup.OmniPresenceLauncher

        com.oracle.java.Java-Updater

        com.spotify.webhelper

     

     

    User overrides

     

     

        com.dayoneapp.dayone-agent

        com.adobe.AAM.Scheduler-1.0

     

     

    User login items

     

     

        Bartender

        - /Applications/Bartender.app

        Default Folder X Helper

        - /Library/PreferencePanes/Default Folder X.prefPane/Contents/Resources/Default Folder X Helper.app

        iTunesHelper

        - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

        OmniFocus

        - /Applications/OmniFocus.app

        TextExpander

        - /Applications/TextExpander.app

        BusyCalAlarm

        - missing value

        EvernoteHelper

        - missing value

        HoudahSpotHelper

        - missing value

        LaunchBar

        - /Applications/LaunchBar.app

        HazelHelper

        - missing value

        MailTagsHelper

        - /Users/USER/Library/Application Support/Indev/MailTagsHelper.app

        Fantastical

        - missing value

        Dropbox

        - /Applications/Dropbox.app

        AdobeResourceSynchronizer

        - /Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app

        MailTags Helper

        - /Users/USER/Library/Application Support/Indev/MailTagsHelper.app

     

     

    Safari extensions

     

     

        1Password

        - com.agilebits.onepassword4-safari

        Delibar Button

        - net.shinyfrog.delibarbutton

        Evernote Web Clipper

        - com.evernote.safari.clipper

        Fontface Ninja

        - com.creaktif.fontfaceninja

        FontScope

        - com.pjkh.fontscope

        Instapaper

        - com.instapaper.extension

        iThoughtsX

        - com.toketaware.ithoughtsx.safariextension

        Sessions

        - yoo.david.sessions

     

     

    iCloud errors

     

     

        Photos 25

        comapple.CloudPhotosConfiguration 5

        cloudphotosd 5

        cloudd 4

        Finder 2

        Spotlight 1

     

     

    Continuity errors

     

     

        sharingd 2

     

     

    User caches/logs

     

     

        1252 MB: /var/folders/gv/gs_jk4xd3rgc24pl0nfk_5fr0000gn/T/../C/com.apple.iBooksX/5546385 79/mzbf.puztqtny..d2.dlv.d2.dlv.ibooks

     

     

    Restricted files: 132

     

     

    Lockfiles: 14

     

     

    Contents of /Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist

        - mod date: Apr  7 09:53:54 2015

        - checksum: 2197523146

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.adobe.ARMDCHelper.UUID</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StartInterval</key>

        <integer>12600</integer>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.bjango.istatmenusagent.plist

        - mod date: Apr  9 07:50:06 2015

        - checksum: 2262789825

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>MachServices</key>

        <dict>

        <key>com.bjango.istatmenusagent</key>

        <true/>

        </dict>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.bjango.istatmenusagent</string>

        <key>Program</key>

        <string>/Library/Application Support/iStat Menus 5/iStatMenusAgent.app/Contents/MacOS/iStatMenusAgent</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.bjango.istatmenusnotifications.plist

        - mod date: Apr  9 07:50:06 2015

        - checksum: 1266143884

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>MachServices</key>

        <dict>

        <key>com.bjango.istatmenusnotifications</key>

        <true/>

        </dict>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.bjango.istatmenusnotifications</string>

        <key>Program</key>

        <string>/Library/Application Support/iStat Menus 5/iStat Menus Notifications.app/Contents/MacOS/iStat Menus Notifications</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

        - mod date: Jan 27 11:17:34 2013

        - checksum: 366297641

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.oracle.java.Java-Updater</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

        <string>-bgcheck</string>

        </array>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

        <string>/dev/null</string>

        <key>StartCalendarInterval</key>

        <dict>

        <key>Hour</key>

        <integer>6</integer>

        <key>Minute</key>

        <integer>8</integer>

        <key>Weekday</key>

        <integer>7</integer>

        </dict>

        </dict>

     

     

        ...and 1 more line(s)

     

     

    Contents of /Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist

        - mod date: Apr  7 09:53:54 2015

        - checksum: 3887726299

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.adobe.ARMDC.Communicator</string>

        <key>MachServices</key>

        <dict>

        <key>com.adobe.ARMDC.Communicator</key>

        <true/>

        </dict>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator</string>

        </array>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist

        - mod date: Apr  7 09:53:54 2015

        - checksum: 930028549

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.adobe.ARMDC.SMJobBlessHelper</string>

        <key>MachServices</key>

        <dict>

        <key>com.adobe.ARMDC.SMJobBlessHelper</key>

        <true/>

        </dict>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper</string >

        </array>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist

        - mod date: Jul  9 07:35:16 2015

        - checksum: 2254479735

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.adobe.adobeupdatedaemon</string>

        <key>LaunchOnlyOnce</key>

        <true/>

        <key>Program</key>

        <string>/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.barebones.authd.plist

        - mod date: Jan 19 14:11:25 2012

        - checksum: 1995816654

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableTransactions</key>

        <true/>

        <key>Label</key>

        <string>com.barebones.authd</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

        </array>

        <key>Sockets</key>

        <dict>

        <key>com.barebones.authd.socket</key>

        <dict>

        <key>SockPathMode</key>

        <integer>438</integer>

        <key>SockPathName</key>

        <string>/var/tmp/com.barebones.authd.socket</string>

        </dict>

        </dict>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.bjango.istatmenusdaemon.plist

        - mod date: Apr  9 07:50:06 2015

        - checksum: 3697781966

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>MachServices</key>

        <dict>

        <key>com.bjango.istatmenusdaemon</key>

        <true/>

        </dict>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.bjango.istatmenusdaemon</string>

        <key>Program</key>

        <string>/Library/Application Support/iStat Menus 5/iStatMenusDaemon</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

        - mod date: Apr  9 06:22:19 2015

        - checksum: 3012644940

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Disabled</key>

        <true/>

        <key>Label</key>

        <string>org.apache.httpd</string>

        <key>EnvironmentVariables</key>

        <dict>

        <key>XPC_SERVICES_UNAVAILABLE</key>

        <string>1</string>

        </dict>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/sbin/httpd-wrapper</string>

        <string>-D</string>

        <string>FOREGROUND</string>

        </array>

        <key>OnDemand</key>

        <false/>

        </dict>

        </plist>

     

     

    Contents of /System/Library/Security/authorization.plist

        - mod date: Oct  9 02:17:00 2014

        - checksum: 2720110640

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>comment</key>

        <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

        allow rule: this is always allowed

        &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

        &lt;string&gt;allow&lt;/string&gt;

        deny rule: this is always denied

        &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

        &lt;string&gt;deny&lt;/string&gt;

        user rule: successful authentication as a user in the specified group(5) allows the associated right.

        The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

        The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

        The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

        See remaining rules for examples.

        </string>

        <key>rights</key>

        <dict>

        <key></key>

        <dict>

        <key>class</key>

        <string>rule</string>

        <key>comment</key>

     

     

        ...and 1850 more line(s)

     

     

    Contents of /private/etc/authorization.deprecated

        - mod date: Sep 19 13:15:38 2013

        - checksum: 1780669285

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>comment</key>

        <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

        allow rule: this is always allowed

        &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

        &lt;string&gt;allow&lt;/string&gt;

        deny rule: this is always denied

        &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

        &lt;string&gt;deny&lt;/string&gt;

        user rule: successful authentication as a user in the specified group(5) allows the associated right.

        The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

        The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

        The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

        See remaining rules for examples.

        </string>

        <key>rights</key>

        <dict>

        <key></key>

        <dict>

        <key>class</key>

        <string>rule</string>

        <key>comment</key>

     

     

        ...and 9707 more line(s)

     

     

    Contents of Library/LaunchAgents/com.akamai.single-user-client.plist

        - mod date: Jun  9 10:34:23 2015

        - checksum: 1151437036

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

          <dict>

            <key>Label</key>

            <string>com.akamai.single-user-client</string>

            <key>Nice</key>

            <integer>-18</integer>

            <key>KeepAlive</key>

            <dict>

              <key>SuccessfulExit</key>

              <false/>

            </dict>

            <key>ProgramArguments</key>

            <array>

              <string>/Users/USER/Applications/Akamai/netsession_mac</string>

            </array>

            <key>RunAtLoad</key>

            <true/>

            <key>AbandonProcessGroup</key>

            <true/>

          </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist

        - mod date: Oct  9 12:41:32 2011

        - checksum: 794059265

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <false/>

        <key>Label</key>

        <string>com.apple.CSConfigDotMacCert-EMAIL-SharedServices</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>LowPriorityIO</key>

        <true/>

        <key>Nice</key>

        <integer>10</integer>

        <key>ProgramArguments</key>

        <array>

        <string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>

        <string>-l</string>

        <string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>

        <string>-u</string>

        <string>EMAIL</string>

        <string>-t</string>

        <string>SharedServices</string>

        <string>-s</string>

        </array>

     

     

        ...and 4 more line(s)

     

     

    Contents of Library/LaunchAgents/com.spotify.webhelper.plist

        - mod date: Aug 24 23:50:17 2013

        - checksum: 2562137178

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

         <key>Label</key>

         <string>com.spotify.webhelper</string>

         <key>KeepAlive</key>

         <dict>

          <key>NetworkState</key>

          <true/>

         </dict>

         <key>RunAtLoad</key>

         <true/>

         <key>Program</key>

         <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

         <key>SpotifyPath</key>

         <string>/Applications/Spotify.app</string></dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/ws.agile.1PasswordAgent.plist

        - mod date: Sep 26 23:36:09 2013

        - checksum: 3525283474

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>OnDemand</key>

        <false/>

        <key>KeepAlive</key>

        <true/>

        <key>RunAtLoad</key>

        <true/>

        <key>Label</key>

        <string>ws.agile.1PasswordAgent</string>

        <key>Program</key>

        <string>/Users/USER/Library/Application Support/1Password/Agent/1PasswordAgent.app/Contents/MacOS/1PasswordAgent</strin g>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        </dict>

        </plist>

     

     

    Bad plists

     

     

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Common/Colors.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Science/Circuit Engineering.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Entity Relationship.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/ERD.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Flow Chart.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/FlowChart.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Garrett IA.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Konigi Wireframes.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-General.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-Sequence.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-State.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-UseCase.gstencil/data.plist

     

     

    Extensions

     

     

        /System/Library/Extensions/JMicronATA.kext

        - com.jmicron.JMicronATA

     

     

    Applications

     

     

        /Applications/AppZapper.app

        - com.appzapper.AppZapper

        /Applications/Kaleidoscope.app

        - com.blackpixel.kaleidoscope

        /Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

        - com.microsoft.ASApplication

        /Applications/Microsoft Office 2011/Office/Equation Editor.app

        - com.microsoft.EquationEditor

        /Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

        - com.microsoft.office.setupassistant

        /Applications/Microsoft Office 2011/Office/Microsoft Query.app

        - com.microsoft.Query

        /Applications/OmniGraphSketcher.app

        - com.omnigroup.OmniGraphSketcher

        /Applications/OnyX.app

        - com.titanium.OnyX

        /Applications/Skim.app

        - net.sourceforge.skim-app.skim

        /Applications/Utilities/Adobe AIR Application Installer.app

        - com.adobe.air.ApplicationInstaller

        /Applications/zoom.us.app

        - us.zoom.xos

        /Library/Application Support/Adobe/ARMDC/Application/Adobe Acrobat Updater.app

        - com.adobe.ARMDC

        /Library/Application Support/Adobe/Installers/AdobeInDesign11AppBase/ExtraFiles/INSTALLDIR_EXE/Adobe InDesign CC 2015.app

        - N/A

        /Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

        - com.apple.ScriptEditor.id.cocoa-applet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

        - com.apple.ScriptEditor.id.droplet-with-settable-properties-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

        - com.apple.ScriptEditor.id.file-processing-droplet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

        - com.apple.ScriptEditor.id.image-file-processing-droplet-template

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app

        - com.adobe.air.ApplicationInstaller

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app

        - com.adobe.air.Template

        /Library/PDF Services/Save as Adobe PDF.app

        - com.apple.automator.SaveasAdobePDF

        /Library/Printers/hp/Fax/fax.backend

        - com.hp.fax

        /Library/Printers/hp/Fax/rastertofax.filter

        - com.hp.rastertofax

        /Library/Printers/hp/cups/filters/commandtohp.filter

        - com.hp.print.cups.filter.commandtohp

        /Library/Printers/hp/filter/hpPreProcessing.filter

        - com.hp.print.cups.filter.hpPreProcessing

        /Library/Services/Default Folder X Service.app

        - com.stclairsoft.DefaultFolderX.service

        /Users/USER/Dropbox/05 Projects/Freelance/CDI/05 Files/Keynote Tweet/Keynote Tweet.app

        - N/A

        /Users/USER/Dropbox/05 Projects/Freelance/CDI/IBM/State Street/05 Files/Keynote Tweet/Keynote Tweet.app

        - N/A

        /Users/USER/Dropbox/05 Projects/Precarious Audio Theater/Postcard/05 Files/Keynote Tweet/Keynote Tweet.app

        - N/A

        /Users/USER/Library/Application Support/Indev/MailTagsHelper.app

        - ca.indev.MailTagsHelper

        /Users/USER/Library/Mail/Bundles/MailActOn.mailbundle/Contents/Resources/MAOSpa rkleHelper.app

        - ca.indev.MAOSparkleHelper

        /Users/USER/Library/Mail/Bundles/MailActOn.mailbundle/Contents/Resources/MailAc tOnHelper.app

        - ca.indev.MailActOnHelper

        /Users/USER/Library/Mail/Bundles/MailTags.mailbundle/Contents/Resources/MailTag sHelper.app

        - ca.indev.MailTagsHelper

        /Users/USER/Library/Mail/Bundles/MailTags.mailbundle/Contents/Resources/MailTag sSparkleHelper.app

        - ca.indev.MailTagsSparkleHelper

        /Users/USER/Library/Services/OmniOutliner Professional.service

        - com.omnigroup.OmniOutlinerPro3.ClippingService

     

     

    Frameworks

     

     

        /Library/Frameworks/Adobe AIR.framework

        - com.adobe.AIR

        /Users/USER/Library/Frameworks/EWSMac-GC.framework

        - com.eSellerate.EWSMac67108872

        /Users/USER/Library/Frameworks/EWSMac.framework

        - com.eSellerate.EWSMac67108872

     

     

    PrefPane

     

     

        /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

        - com.oracle.java.JavaControlPanel

        /Library/PreferencePanes/Default Folder X.prefPane

        - com.stclairsoft.prefpane.DefaultFolderX

        /Library/PreferencePanes/Flash Player.prefPane

        - com.adobe.flashplayerpreferences

        /Library/PreferencePanes/Hazel.prefPane

        - com.noodlesoft.Hazel

        /Users/USER/Library/PreferencePanes/AkamaiNetSession.prefPane

        - com.yourcompany.AkamaiNetSession

     

     

    Bundles

     

     

        /Library/Application Support/Adobe/Plug-Ins/CC/File Formats/Camera Raw.plugin

        - com.adobe.CameraRaw

        /Library/Application Support/MacPhun Software/Noiseless/Plug-Ins/NoiselessPlugin.plugin

        - null

        /Library/Application Support/MacPhun Software/Noiseless/Plug-Ins/NoiselessPlugin32.plugin

        - null

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

        - com.adobe.adobecp

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

        - com.macromedia.FlashPlayer-10.6.plugin

        /Library/Internet Plug-Ins/AdobeAAMDetect.plugin

        - com.AdobeAAMDetectLib.AdobeAAMDetect

        /Library/Internet Plug-Ins/AdobePDFViewer.plugin

        - com.adobe.acrobat.pdfviewer

        /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

        - com.adobe.acrobat.pdfviewerNPAPI

        /Library/Internet Plug-Ins/Flash Player.plugin

        - com.macromedia.Flash

        /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

        - com.oracle.java.JavaAppletPlugin

        /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

        - com.microsoft.sharepoint.browserplugin

        /Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkIOM.plugin

        - jp.co.Canon.ij.print.iom.CIJNP

        /Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkPBM.plugin

        - jp.co.Canon.ij.print.pbm.CIJNP

        /Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBIOM.plugin

        - jp.co.canon.bj.print.bjusbiom

        /Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBPBM.plugin

        - jp.co.canon.bj.print.pbm.USB

        /Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver.plugin

        - jp.co.canon.ij.print.CIJUSBClassDriver

        /Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver2.plugin

        - jp.co.canon.ij.print.CIJUSBClassDriver2

        /Library/Printers/Canon/BJPrinter/Plugins/IJBluetooth/IJBluetoothIOM.plugin

        - jp.co.canon.ij.print.ijbluetoothiom

        /Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin

        - jp.co.canon.scangear.ag07.09

        /Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin

        - jp.co.canon.scangear.ag08.09

        /Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin

        - jp.co.canon.scangear.lld09.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin

        - jp.co.canon.scanner.cnq2413.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin

        - jp.co.canon.scanner.cnq2414.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin

        - jp.co.canon.scanner.cnq4807.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin

        - jp.co.canon.scanner.cnq4808.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin

        - jp.co.canon.scanner.cnq4809.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin

        - jp.co.canon.scanner.cnq9601.09

        /Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin

        - jp.co.canon.scangear.ijfshlib.09

        /Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin

        - jp.co.canon.scangear.mld07.09

        /Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin

        - jp.co.canon.scangear.mld08.09

        /Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin

        - jp.co.canon.scangear.mld09.09

        /Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin

        - jp.co.canon.scangear.mld9601.09

        /Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin

        - jp.co.canon.sf.scanner.sfusb.09

        /Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin

        - jp.co.canon.scangear.usb.09

        /Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin

        - jp.co.canon.scangear.smac.09

        /Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin

        - jp.co.canon.scangear.zoom.09

        /Library/Printers/EPSON/CIOSupport/CIOHelper.plugin

        - com.epson.print.plugin.CIOHelper

        /Library/Printers/EPSON/CIOSupport/EPSONUSBPrintClass.plugin

        - com.epson.print.plugin.USBPrintClass

        /Library/Printers/EPSON/CIOSupport/XIOP.plugin

        - com.epson.print.plugin.XIOP

        /Library/Printers/EPSON/CIOSupport/XIORemoteClient.plugin

        - com.epson.print.plugin.XIORemoteClient

        /Library/Printers/EPSON/CIOSupport/XIORemoteServer.plugin

        - com.epson.print.plugin.XIORemoteServer

        /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

        - com.skype.skypeabdialer

        /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

        - com.skype.skypeabsms

        /Users/USER/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin

        - com.citrixonline.mac.WebDeploymentPlugin

        /Users/USER/Library/Internet Plug-Ins/ZoomUsPlugIn.plugin

        - us.zoom.plugin

     

     

    Bundles (new)

     

     

        /Applications/LaunchBar.app

        - at.obdev.LaunchBar

        /Applications/OmniFocus.app

        - com.omnigroup.OmniFocus2

        /Applications/PDFpenPro.app

        - com.smileonmymac.PDFpenPro

        /Applications/Utilities/Adobe Creative Cloud/ACC/ContainerUI.bundle

        - com.adobe.acc.ContainerUI

        /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app

        - com.adobe.acc.AdobeCreativeCloud

        /Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelBL.bundle

        - com.adobe.acc.appspanel

        /Applications/Utilities/Adobe Creative Cloud/BehancePanel/BehancePanelBL.bundle

        - com.adobe.acc.behancepanel

        /Applications/Utilities/Adobe Creative Cloud/CoreSync/Core Sync.app

        - com.adobe.accmac

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncExtension/ACCFinderBundleLoader_32.app

        - Adobe.ACCFinderBundleLoader-32

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncExtension/ACCFinderBundleLoader_64.app

        - Adobe.ACCFinderBundleLoader-64

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/CCSyncPlugin/CCSyncPlugin.framework

        - com.adobe.CCSyncPlugin.framework

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/DesignLibraryPlugin/DesignLibraryPlugin.framework

        - com.adobe.DesignLibraryPlugin

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/adobe_cap s.framework

        - com.adobe.adobe_caps

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExchangePlugin.framework

        - com.adobe.ExchangePlugin

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/LiveType/LiveType.framework

        - com.adobe.livetype

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/SynKit/SynKit.framework

        - com.adobe.SynKitPlugin

        /Applications/Utilities/Adobe Creative Cloud/FilesPanel/FilesPanelBL.bundle

        - com.adobe.acc.filespanel

        /Applications/Utilities/Adobe Creative Cloud/FontsPanel/FontsPanelBL.bundle

        - com.adobe.acc.fontspanel

        /Applications/Utilities/Adobe Creative Cloud/HDCore/Uninstaller.app

        - com.adobe.ACCC.Uninstaller

        /Applications/Utilities/Adobe Creative Cloud/HomePanel/HomePanelBL.bundle

        - com.adobe.acc.homepanel

        /Applications/Utilities/Adobe Creative Cloud/Utils/AdobeAAMDetect.plugin

        - com.AdobeAAMDetectLib.AdobeAAMDetect

        /Applications/Utilities/Adobe Creative Cloud/Utils/Creative Cloud Installer.app

        - com.adobe.Install

        /Applications/Utilities/Adobe Creative Cloud/Utils/Creative Cloud Uninstaller.app

        - com.adobe.ACCC.Uninstaller

        /Applications/Utilities/Adobe Creative Cloud/Utils/CreativeCloud(URIHandler).app

        - com.adobe.CreativeCloud-URIHandler-

        /Applications/Utilities/Adobe Flash Player Install Manager.app

        - com.adobe.flashplayer.installmanager

        /Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app

        - com.adobe.acc.AdobeDesktopService

        /Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper EH.app

        - com.adobe.acc.HEXHelper.EH

        /Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper NP.app

        - com.adobe.acc.HEXHelper.NP

        /Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper.app

        - com.adobe.acc.HEXHelper

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/adobe_caps.framework

        - com.adobe.adobe_caps

        /Library/Internet Plug-Ins/AdobeAAMDetect.plugin

        - com.AdobeAAMDetectLib.AdobeAAMDetect

        /Library/Internet Plug-Ins/Flash Player.plugin

        - com.macromedia.Flash

        /Library/PreferencePanes/Flash Player.prefPane

        - com.adobe.flashplayerpreferences

        /Users/USER/Library/Application Support/eSellerate/457973200/EWSMac.framework

        - com.eSellerate.EWSMac67108870

     

     

    Library paths

     

     

        /Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

        /Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

        /Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib

        /Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib

        /Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib

        /Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib

        /Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P6/axlib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/IMSLib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/P7Native.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib

        /Applications/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P7/axlibv7.dylib

        /Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib

        /Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/UWA_UI.dylib

        /Applications/Utilities/Adobe Creative Cloud/ACC/ContainerBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib

        /Applications/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib

        /Applications/Utilities/Adobe Creative Cloud/HDCore/HDPIM.dylib

        /Applications/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/SPanel/SPanelBL.dylib

        /Library/Application Support/Adobe/ARMDC/Application/AcrobatUpdateHelperLib.dylib

        /Library/Application Support/Adobe/ARMNext/Application/AcrobatUpdateHelperLib.dylib

        /Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/adobe_caps.dylib

        /Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/adobe_oobelib.dylib

        /Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/adobe_upgrade.dylib

        /Library/Application Support/Adobe/Acrobat DC Helper Frameworks/adobe_oobelib/axlibv7.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CEF/Chromium Embedded Framework.framework/Libraries/libcef.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CEF/libplugin_carbon_interpose.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Core/AdobePIM.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Core/Core.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/Analytics.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/LocManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/PrefsManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/ElevationManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/HEX/HEX.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Notifications/ANSClient.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Notifications/NotificationManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Notifications/TrayNotificationManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/SignInApp/SignInAppBL.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/CmdCntr.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanControl.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanMessage5.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanWrapper.dylib

        /Library/Application Support/Adobe/SING/Mark II/TINthread.dylib

        /Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86Extn.dyl ib

        /Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86_64Extn. dylib

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

        /Users/USER/Library/Application Support/1Password/Extensions/31318/EMAIL/components/libosxform_xpcom.dylib

        /Users/USER/Library/Application Support/1Password/Extensions/31318/EMAIL/components/libosxform_xpcom.dylib

        /Users/USER/Library/Application Support/1Password/Extensions/31499/EMAIL/components/libosxform_xpcom.dylib

        /Users/USER/Library/Application Support/1Password/Extensions/31499/EMAIL/components/libosxform_xpcom.dylib

        /Users/USER/Library/Application Support/1Password/Extensions/32009/EMAIL/components/libosxform_xpcom.dylib

        /Users/USER/Library/Application Support/1Password/Extensions/32009/EMAIL/components/libosxform_xpcom.dylib

     

     

    App extensions

     

     

        com.dayoneapp.dayone.Day-One-Share-Extension

        com.evernote.Evernote.SharingExtension

        com.flexibits.fantastical2.mac.action-extension

        com.flexibits.fantastical2.mac.share-extension

        com.flexibits.fantastical2.mac.today-widget

        com.getdropbox.dropbox.garcon

        com.omnigroup.OmniFocus2.Share

        com.omnigroup.OmniFocus2.Today

     

     

    Installations

     

     

        Adobe Acrobat X Pro (10.1.2): 1/15/12, 10:44 AM

        Adobe Acrobat X Pro (10.1.1): 12/14/11, 6:24 AM

         Adobe Acrobat X Pro : 12/14/11, 5:50 AM

        PlugIn: 12/3/11, 3:48 PM

        PlugIn: 10/9/11, 1:01 PM

     

     

    Elapsed time (sec): 415

  • by Keith Dvorak,

    Keith Dvorak Keith Dvorak Jul 10, 2015 11:12 AM in response to Linc Davis
    Level 1 (0 points)
    Jul 10, 2015 11:12 AM in response to Linc Davis

    This just happened to me, but I never installed anything. I just went to a web page and it popped up almost immediately! It took a couple force-quits, but I was able to remove the page causing the problem. I couldn't find any of the files you tell us to find (in the older posts). I hope that means closing the web page was enough? Here's the link to my test results:

     

    http://pastebin.com/q60ZJS6q

  • by Kurt Lang,

    Kurt Lang Kurt Lang Jul 10, 2015 11:59 AM in response to Keith Dvorak
    Level 8 (37,946 points)
    Mac OS X
    Jul 10, 2015 11:59 AM in response to Keith Dvorak

    If what you saw was a popup insisting that your computer was infected with something and to call a phone number RIGHT NOW!, it was nothing but a scam. Nothing was ever downloaded to, or installed on your Mac. There's also no software anywhere in the world that can examine a remote computer through a web browser. Any message on any web site claiming it has done so is a flat out lie.

  • by Keith Dvorak,

    Keith Dvorak Keith Dvorak Jul 10, 2015 12:05 PM in response to Kurt Lang
    Level 1 (0 points)
    Jul 10, 2015 12:05 PM in response to Kurt Lang

    Right. I know that. What was scary was that it blocked me from going into Preferences or shutting down the page. When I went into Activity Monitor to force quit Safari, it came back up on relaunch. When I tried to shut down the individual page using Activity Monitor to force quit it, it relaunched itself. Other than being super fast, I'm not sure how I managed to close it after restarting Safari a couple times. I lost complete control of Safari.

     

    They should all be arrested and thrown in jail.

  • by Kurt Lang,

    Kurt Lang Kurt Lang Jul 10, 2015 12:16 PM in response to Keith Dvorak
    Level 8 (37,946 points)
    Mac OS X
    Jul 10, 2015 12:16 PM in response to Keith Dvorak

    Yes, they aren't just obnoxious, they're very intimidating to users who don't have the computer knowledge to understand it's fake.

     

    To fully explain how these popups work on the Mac (and Windows):

     

    1) You hit a bad web site and the scary sounding popup appears.

     

    2) You click OK or whatever button is there to try and dismiss it. The popup seems to be unresponsive, or comes back after a very brief time off the screen.

     

    3) This happens because of a JavaScript action they're using. JavaScript (no relation at all to Java) is used extensively on the web. Much of what we take for granted wouldn't work if you turned it off in a web browser's preferences. Like the buttons across the top of this page. Anything on a page that changes when you move your mouse over or across it is JavaScript in action. In this case, the mouseover command.

     

    4) What these scammers use is another JavaScript action to "do on exit". In the case of these popups, you really are closing it when you click the button, but the final HTML command of the popup is a JavaScript "do on exit". And the "what to do" is to display the same popup.

     

    5) Safari, and pretty much all web browsers force you to attend to the button on a popup before it will let you do anything else. Which is why you can't get to the preferences or other tabs. So there you are, stuck in a loop of closing the popup, only to have it immediately display again. The crooks are using a simple built-in function of all web browsers to make your web browser appear to be stuck. No malware of any kind is necessary to accomplish this. Just a browser with JavaScript enabled. And it pretty much has to be on in order to use virtually any web site.

     

    The general fix is to Force Quit Safari, then hold down the Shift key and relaunch it. Holding the Shift key tells Safari not to load any of the web sites from the previous session.

     

    If that alone doesn't do it, the other possibility is that the user installed adware along with something else. Most adware is simply annoying. They display tons of ads whenever you're using your browser. Recently though, some nastier adware has also been causing similar threat popups to appear. They are again harmless on their own, but won't go away until you remove the adware that's causing them to appear.

     

    Yosemite, 10.10.4 added a feature to Safari to make it easy to close these types of popups. Good idea, but the crooks very quickly came up with a way to block that by adding a bunch of blank lines to the text to force the popup box to be really tall. That runs the OKAY button (or whatever they called the button) to run out of view off the bottom of the screen.

     

    mac-alret.png

  • by NixInSF,

    NixInSF NixInSF Aug 3, 2015 12:04 PM in response to Linc Davis
    Level 1 (0 points)
    Aug 3, 2015 12:04 PM in response to Linc Davis

    Once your test is run, what should I be looking for in the result.  I am having browser redirect issues.  I've checked my LauchDaemon folders, etc. deleted questionable browser extensions, all to no avail.

     

    Thank you for your help.

  • by Black_Zeto_Smoked,

    Black_Zeto_Smoked Black_Zeto_Smoked Aug 13, 2015 6:15 AM in response to Linc Davis
    Level 1 (0 points)
    Aug 13, 2015 6:15 AM in response to Linc Davis

    Per your directives Linc Davis

    All the best -Dan

     

     

    Start time: 07:53:09 08/13/15

     

     

    Revision: 1241

     

     

    Model Identifier: MacBookPro8,1

    System Version: OS X 10.9.5 (13F1096)

    Kernel Version: Darwin 13.4.0

    Time since boot: 16:35

     

     

    UID: 502

     

     

    Battery

     

     

        Condition: Service Battery

     

     

    SerialATA

     

     

        TOSHIBA MK5065GSXF                     

     

     

    SMC

     

     

        ReadKey for key ALP0 failed with SMC error code 0xb7.

        ReadKey for key ALP1 failed with SMC error code 0xb7.

        ReadKey for key BILO failed with SMC error code 0xb7.

     

     

    FileVault 2: FileVault master keychain appears to be installed

     

     

    System errors (per sec)

     

     

        Google Chrome H (UID 502, error 316): 235

     

     

    Font issues: 4

     

     

    Trusted certs (user)

     

     

        com.apple.ubiquity.peer-uuid.UUID

        com.apple.ubiquity.peer-uuid.UUID

        com.apple.ubiquity.ssl-cert.UUID

     

     

    Firewall: On

     

     

    TCP/IP

     

     

        Subnet mask: 255.255.252.0

     

     

    Wi-Fi

     

     

        Security: None

     

     

    Diagnostic reports

     

     

        2015-08-12 UserEventAgent crash x2

        2015-08-13 Keychain Access crash

        2015-08-13 UserEventAgent crash

     

     

    Kernel log

     

     

        Aug 12 15:20:55 SMC::smcReadKeyAction ERROR Tp3P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff8015cae000

        Aug 12 15:20:55 SMC::smcReadKeyAction ERROR Tp4P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff8015cae000

        Aug 12 15:20:55 SMC::smcReadKeyAction ERROR Tp5P kSMCBadArgumentError(0x89) fKeyHashTable=0x0xffffff8015cae000

        Aug 12 15:32:23 WARNING: hibernate_page_list_setall skipped 7869 xpmapped pages

        Aug 12 15:45:41 nfs connect socket error 61 for localhost:/0vyTEytQvO8_mSgYnpyN1F

        Aug 12 15:45:55 nfs server localhost:/0vyTEytQvO8_mSgYnpyN1F: can not connect, error 61

        Aug 12 15:46:27 nfs server localhost:/0vyTEytQvO8_mSgYnpyN1F: can not connect, error 61

        Aug 12 15:46:55 nfs server localhost:/0vyTEytQvO8_mSgYnpyN1F: dead

        Aug 12 18:01:13 WARNING: hibernate_page_list_setall skipped 7869 xpmapped pages

        Aug 12 18:01:40 WARNING: hibernate_page_list_setall skipped 44063 xpmapped pages

        Aug 13 03:07:07 WARNING: hibernate_page_list_setall skipped 44063 xpmapped pages

        Aug 13 03:07:38 WARNING: hibernate_page_list_setall skipped 74713 xpmapped pages

        Aug 13 03:10:54 MacAuthEvent en1   Auth result for: 6c:aa:b3:e4:00:6c Auth timed out

        Aug 13 04:16:08 WARNING: hibernate_page_list_setall skipped 74713 xpmapped pages

        Aug 13 04:16:36 WARNING: hibernate_page_list_setall skipped 115869 xpmapped pages

        Aug 13 07:20:40 SMC::smcReadKeyAction ERROR ALP0 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000

        Aug 13 07:21:33 SMC::smcReadKeyAction ERROR ALP1 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000

        Aug 13 07:22:24 SMC::smcReadKeyAction ERROR BILO kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000

        Aug 13 07:22:50 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key MACR (kSMCKeyNotReadable)

        Aug 13 07:22:50 SMC::smcReadKeyAction ERROR MACR kSMCKeyNotReadable(0x85) fKeyHashTable=0x0xffffff8015cae000

        Aug 13 07:53:40 SMC::smcReadKeyAction ERROR ALP0 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000

        Aug 13 07:54:27 SMC::smcReadKeyAction ERROR ALP1 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000

        Aug 13 07:55:15 SMC::smcReadKeyAction ERROR BILO kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8015cae000

        Aug 13 07:55:40 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key MACR (kSMCKeyNotReadable)

        Aug 13 07:55:40 SMC::smcReadKeyAction ERROR MACR kSMCKeyNotReadable(0x85) fKeyHashTable=0x0xffffff8015cae000

     

     

    Console log

     

     

        Aug 13 06:54:30 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots

        Aug 13 06:54:30 apsd Failed to evaluate trust: No error. (0), result=5

        Aug 13 06:54:30 apsd Untrusted peer, closing connection immediately

        Aug 13 06:54:49 xpcproxy assertion failed: 13F1096: xpcproxy + 3438 [UUID]: 0x2

        Aug 13 06:55:37 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional

        Aug 13 06:55:37 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots

        Aug 13 06:55:37 apsd Failed to evaluate trust: No error. (0), result=5

        Aug 13 06:55:37 apsd Untrusted peer, closing connection immediately

        Aug 13 06:56:51 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional

        Aug 13 06:56:51 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots

        Aug 13 06:56:51 apsd Failed to evaluate trust: No error. (0), result=5

        Aug 13 06:56:51 apsd Untrusted peer, closing connection immediately

        Aug 13 06:58:51 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional

        Aug 13 06:58:51 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots

        Aug 13 06:58:51 apsd Failed to evaluate trust: No error. (0), result=5

        Aug 13 06:58:51 apsd Untrusted peer, closing connection immediately

        Aug 13 07:04:22 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional

        Aug 13 07:04:22 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots

        Aug 13 07:04:22 apsd Failed to evaluate trust: No error. (0), result=5

        Aug 13 07:04:22 apsd Untrusted peer, closing connection immediately

        Aug 13 07:05:45 apsd Failed to evaluate trust: No error. (0), result=5; retrying with revocation checking optional

        Aug 13 07:05:45 apsd failed to evaluate trust: No error. (0), result=5; retrying with system roots

        Aug 13 07:05:45 apsd Failed to evaluate trust: No error. (0), result=5

        Aug 13 07:05:45 apsd Untrusted peer, closing connection immediately

        Aug 13 07:45:15 xpcproxy assertion failed: 13F1096: xpcproxy + 3438 [UUID]: 0x2

     

     

    Daemons

     

     

        com.apple.PhotoApps.DevicePropertyReader

        com.apple.photostream-agent.ImageConversionService

        com.apple.photostream-agent.VideoConversionService

        com.parallels.desktop.launchdaemon

        - status: 2

     

     

    Agents

     

     

        com.adobe.ARM.UUID

        com.apple.AirPortBaseStationAgent

        com.apple.java.InstallOnDemandAgent

        com.apple.java.updateSharing

        com.apple.photostream-agent

        com.apple.ssinvitationagent

        com.google.keystone.user.agent

        com.hp.help.tocgenerator

        com.parallels.DesktopControlAgent

        com.parallels.desktop.client.launch

        - status: 2

        com.parallels.vm.prl_pcproxy

        - status: 2

        com.rosettastone.rosettastonedaemon

        - status: 1

     

     

    User overrides

     

     

        com.fiplab.MenuTabHelper

     

     

    Safari extensions

     

     

        Yontoo

        - com.yontoo

     

     

    Widgets

     

     

        iStat Pro

     

     

    Restricted files: 476

     

     

    Lockfiles: 31

     

     

    Accessibility

     

     

        Keyboard Zoom: On

     

     

    Contents of /Library/LaunchAgents/com.hp.help.tocgenerator.plist

        - mod date: Jul 28 16:08:06 2009

        - checksum: 95484570

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>RunAtLoad</key>

        <true/>

        <key>WatchPaths</key>

        <array>

        <string>/Library/Documentation/Help/Hewlett-Packard</string>

        <string>/Library/Documentation/Help/Hewlett-Packard/</string>

        </array>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app/Contents/M acOS/TOCGenerator</string>

        </array>

        <key>Label</key>

        <string>com.hp.help.tocgenerator</string>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.parallels.DesktopControlAgent.plist

        - mod date: Jul 10 12:53:27 2012

        - checksum: 1014615141

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableTransactions</key>

        <true/>

        <key>KeepAlive</key>

        <dict>

        <key>PathState</key>

        <dict>

        <key>/etc/parallels.DesktopControlAgent.launchd</key>

        <true/>

        </dict>

        </dict>

        <key>Label</key>

        <string>com.parallels.DesktopControlAgent</string>

        <key>LimitLoadToSessionType</key>

        <array>

        <string>Aqua</string>

        <string>LoginWindow</string>

        </array>

        <key>Program</key>

        <string>/Library/Parallels/Parallels Service.app/Contents/PlugIns/Parallels Desktop Control Agent.app/Contents/MacOS/prl_deskctl_agent</string>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.parallels.desktop.launch.plist

        - mod date: Jul 10 12:53:14 2012

        - checksum: 402548574

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.parallels.desktop.client.launch</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/Parallels Desktop.app/Contents/PlugIns/PD_Starter.app/Contents/MacOS/prl_client_app</stri ng>

        <string>--mode</string>

        <string>cache</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.parallels.vm.prl_pcproxy.plist

        - mod date: Jul 10 12:52:56 2012

        - checksum: 1060318951

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.parallels.vm.prl_pcproxy</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Parallels/Parallels Service.app/Contents/PlugIns/Parallels NAPT Service.app/Contents/MacOS/prl_naptd</string>

        <string>proxy</string>

        </array>

        <key>EnvironmentVariables</key>

        <dict>

        <key>DYLD_LIBRARY_PATH</key>

        <string>/Library/Parallels/Parallels Service.app/Contents/MacOS</string>

        <key>PARALLELS_NAPT_APP_MODE</key>

        <string>desktop</string>

        </dict>

        <key>KeepAlive</key>

        <dict>

        <key>SuccessfulExit</key>

        <false/>

        </dict>

        <key>RunAtLoad</key>

        <true/>

     

     

        ...and 2 more line(s)

     

     

    Contents of /Library/LaunchAgents/com.rosettastone.rosettastonedaemon.plist

        - mod date: Jul 16 10:26:30 2012

        - checksum: 49023104

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.rosettastone.rosettastonedaemon</string>

        <key>TimeOut</key>

        <integer>5</integer>

        <key>KeepAlive</key>

        <true/>

        <key>RunAtLoad</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Application Support/RosettaStoneDaemon/bin/RosettaStoneDaemon</string>

        <string>--config</string>

        <string>/Library/Application Support/RosettaStoneDaemon/bin/RosettaStoneDaemonConfiguration.txt</string>

        </array>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.parallels.desktop.launchdaemon.plist

        - mod date: Jul 10 12:53:07 2012

        - checksum: 384749228

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>ExitTimeOut</key>

        <integer>150</integer>

        <key>HopefullyExitsFirst</key>

        <true/>

        <key>Label</key>

        <string>com.parallels.desktop.launchdaemon</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Parallels/Parallels Service.app/Contents/Resources/ParallelsDispatcherService</string>

        <string>start</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /System/Library/Security/authorization.plist

        - mod date: Mar 29 17:06:48 2015

        - checksum: 522460902

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>comment</key>

        <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

        allow rule: this is always allowed

        &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

        &lt;string&gt;allow&lt;/string&gt;

        deny rule: this is always denied

        &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

        &lt;string&gt;deny&lt;/string&gt;

        user rule: successful authentication as a user in the specified group(5) allows the associated right.

        The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

        The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

        The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

        See remaining rules for examples.

        </string>

        <key>rights</key>

        <dict>

        <key></key>

        <dict>

        <key>class</key>

        <string>rule</string>

        <key>comment</key>

     

     

        ...and 1700 more line(s)

     

     

    Contents of /private/etc/authorization.deprecated

        - mod date: Jul 16 07:19:50 2012

        - checksum: 467832030

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>comment</key>

        <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

        allow rule: this is always allowed

        &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

        &lt;string&gt;allow&lt;/string&gt;

        deny rule: this is always denied

        &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

        &lt;string&gt;deny&lt;/string&gt;

        user rule: successful authentication as a user in the specified group(5) allows the associated right.

        The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

        The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

        The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

        See remaining rules for examples.

        </string>

        <key>rights</key>

        <dict>

        <key></key>

        <dict>

        <key>class</key>

        <string>rule</string>

        <key>comment</key>

     

     

        ...and 8716 more line(s)

     

     

    Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

        - mod date: Oct 16 17:21:58 2013

        - checksum: 408149527

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.adobe.ARM.UUID</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StartInterval</key>

        <integer>12600</integer>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.google.keystone.agent.plist

        - mod date: Aug 11 23:25:03 2015

        - checksum: 1758702564

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.google.keystone.user.agent</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>ProgramArguments</key>

        <array>

         <string>/Users/USER Flores/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents /Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgen t</string>

         <string>-runMode</string>

         <string>ifneeded</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StartInterval</key>

        <integer>3523</integer>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

        <string>/dev/null</string>

        </dict>

        </plist>

     

     

    Applications

     

     

        /Applications/Canon Utilities/IJ Network Scanner Selector EX/Canon IJ Network Scanner Selector EX.app

        - jp.co.canon.ij.NetworkScannerSelectorEX

        /Applications/Canon Utilities/IJ Network Tool/Canon IJ Network Tool.app

        - jp.co.canon.IJNetworkTool

        /Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app

        - jp.co.canon.Inkjet_Extended_Survey_Program

        /Applications/Canon Utilities/Solution Menu EX/Canon Solution Menu EX.app

        - jp.co.canon.SolutionMenuEX

        /Applications/Firefox.app

        - org.mozilla.firefox

        /Applications/Network Connect.app

        - net.juniper.NetworkConnect

        /Applications/OpenOffice.org.app

        - org.openoffice.script

        /Applications/Pod to Mac.app

        - com.macroplant.Pod_to_Mac

        /Applications/Rosetta Stone TOTALe.app

        - com.rosettastone.rosettastonetotale

        /Applications/uninstall HSDPA 3G Modem.app

        - N/A

        /Library/Application Support/Hewlett-Packard/StudioScan/HPStudioScan.app

        - com.hp.scan.HPStudioScan

        /Library/Application Support/Hewlett-Packard/Workflows/Destinations/Add Image Files to iPhoto Library.app

        - com.apple.automator.Add_Image_Files_to_iPhoto_Library

        /Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email Image Files.app

        - com.apple.automator.Email_Image_Files

        /Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email PDF Files.app

        - com.apple.automator.Email_PDF_Files

        /Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open Image Files in Preview.app

        - com.apple.automator.Open_Image_Files_in_Preview

        /Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open PDF Files in Preview.app

        - com.apple.automator.Open_PDF_Files_in_Preview

        /Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save Image Files in Pictures Folder.app

        - com.apple.automator.Save_Image_Files_in_Pictures_Folder

        /Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save PDF Files in Documents Folder.app

        - com.apple.automator.Save_PDF_Files_in_Documents_Folder

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Add to iPhoto Library.app

        - com.apple.automator.Add_to_iPhoto_Library

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email Image.app

        - com.apple.automator.Email_Image

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email PDF.app

        - com.apple.automator.Email_PDF

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open HP Scan.app

        - com.apple.automator.Open_HP_Scan

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open PDF in Preview.app

        - com.apple.automator.Open_PDF_in_Preview

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open in Preview.app

        - com.apple.automator.Open_in_Preview

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save PDF in Documents.app

        - com.apple.automator.Save_PDF_in_Documents

        /Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save in Pictures.app

        - com.apple.automator.Save_in_Pictures

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Attach Document Files to Email.app

        - com.apple.automator.Attach_Document_Files_to_Email

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Attach Image Files to Email.app

        - com.apple.automator.Attach_Image_Files_to_Email

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Open Files in Application.app

        - com.apple.automator.Open_Files_in_Application

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Destinations/Save Files in Folder.app

        - com.apple.automator.Save_Files_in_Folder

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Attach Scanned Documents to Email.app

        - com.apple.automator.Attach_Scanned_Documents_to_Email

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Attach Scanned Images to Email.app

        - com.apple.automator.Attach_Scanned_Images_to_Email

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Open Scanned Items in Application.app

        - com.apple.automator.Open_Scanned_Items_in_Application

        /Library/Application Support/Hewlett-Packard/Workflows/Templates/Shortcuts/Save Scanned Items in Folder.app

        - com.apple.automator.Save_Scanned_Items_in_Folder

        /Library/Application Support/Hewlett-Packard/hpAutomation.app

        - com.hp.Automation

        /Library/Application Support/Hewlett-Packard/iPhoto Support/Jpeg to iPhoto.app

        - com.hp.photo.jpgtoiphoto

        /Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

        - com.microsoft.silverlight.sllauncher

        /Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

        - com.apple.ScriptEditor.id.cocoa-applet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

        - com.apple.ScriptEditor.id.droplet-with-settable-properties-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

        - com.apple.ScriptEditor.id.file-processing-droplet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

        - com.apple.ScriptEditor.id.image-file-processing-droplet-template

        /Library/Documentation/Help/Hewlett-Packard/TOCGenerator.app

        - com.hp.dynamicTOCGenerator

        /Library/Documentation/Help/Hewlett-Packard/shrd/flashplayer

        - N/A

        /Library/Documentation/Help/Hewlett-Packard/shrd/hpplayer.app

        - N/A

        /Library/Frameworks/Adobe AIR.framework/Resources/Template.app

        - com.adobe.air.Template

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app

        - com.adobe.air.ApplicationInstaller

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app

        - com.adobe.air.Template

        /Library/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIR Application Installer.app

        - com.adobe.air.ApplicationInstaller

        /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app

        - com.adobe.air.Installer

        /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Template.app

        - com.adobe.air.Template

        /Library/Frameworks/net.juniper.DSApplicationServices.framework/Versions/7.0.0/ Log Viewer.app

        - net.juniper.LogViewer

        /Library/Frameworks/net.juniper.DSApplicationServices.framework/Versions/7.0.0/ Session Timer.app

        - net.juniper.SessionTimer

        /Library/Frameworks/net.juniper.DSNetworkDiagnostics.framework/Versions/7.0.0/N etwork Diagnostic Utility.app

        - net.juniper.NetworkDiagnosticUtility

        /Library/Image Capture/TWAIN Data Sources/Canon MG3100 series Network.ds

        - jp.co.canon.scangear.twainds.mg3100.network

        /Library/Image Capture/TWAIN Data Sources/Canon MG3100 series.ds

        - jp.co.canon.scangear.twainds.mg3100

        /Library/Printers/hp/Fax/fax.backend

        - com.hp.fax

        /Library/Printers/hp/Fax/rastertofax.filter

        - com.hp.rastertofax

        /Library/Printers/hp/cups/filters/pdftopdf.filter

        - com.hp.print.cups.filter.pdftopdf

        /Users/USER Flores/Downloads/redsn0w_mac_0.9.10b1/redsn0w.app

        - com.devteam.redsn0w

        /Users/USER Flores/Downloads/redsn0w_mac_0.9.10b6b/redsn0w.app

        - com.devteam.redsn0w

        /Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

        - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

        /Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

        - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

        /Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

        - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

        /Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

        - com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

        /Users/USER Flores/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

        - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Add Image Files to iPhoto Library.app

        - com.apple.automator.Add_Image_Files_to_iPhoto_Library

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email Image Files.app

        - com.apple.automator.Email_Image_Files

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Email PDF Files.app

        - com.apple.automator.Email_PDF_Files

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open Image Files in Preview.app

        - com.apple.automator.Open_Image_Files_in_Preview

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Open PDF Files in Preview.app

        - com.apple.automator.Open_PDF_Files_in_Preview

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save Image Files in Pictures Folder.app

        - com.apple.automator.Save_Image_Files_in_Pictures_Folder

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Destinations/Save PDF Files in Documents Folder.app

        - com.apple.automator.Save_PDF_Files_in_Documents_Folder

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Add to iPhoto Library.app

        - com.apple.automator.Add_to_iPhoto_Library

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email Image.app

        - com.apple.automator.Email_Image

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Email PDF.app

        - com.apple.automator.Email_PDF

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open HP Scan.app

        - com.apple.automator.Open_HP_Scan

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open PDF in Preview.app

        - com.apple.automator.Open_PDF_in_Preview

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Open in Preview.app

        - com.apple.automator.Open_in_Preview

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save PDF in Documents.app

        - com.apple.automator.Save_PDF_in_Documents

        /Users/USER Flores/Library/Application Support/Hewlett-Packard/Workflows/Shortcuts/Save in Pictures.app

        - com.apple.automator.Save_in_Pictures

     

     

    Frameworks

     

     

        /Library/Frameworks/Adobe AIR.framework

        - com.adobe.AIR

        /Library/Frameworks/Snapfish.framework

        - com.hp.snapfishframework

        /Library/Frameworks/iLifePageLayout.framework

        - com.apple.iLifePageLayout

        /Library/Frameworks/net.juniper.DSApplicationServices.framework

        - net.juniper.framework.DSApplicationServices

        /Library/Frameworks/net.juniper.DSCoreServices.framework

        - net.juniper.framework.DSCoreServices

        /Library/Frameworks/net.juniper.DSNetworkDiagnostics.framework

        - net.juniper.framework.DSNetworkDiagnostics

     

     

    PrefPane

     

     

        /Library/PreferencePanes/Flash Player.prefPane

        - com.adobe.flashplayerpreferences

     

     

    Bundles

     

     

        /Library/Frameworks/Adobe AIR.framework/Resources/AdobeCP15.plugin

        - com.adobe.adobecp

        /Library/Frameworks/Adobe AIR.framework/Resources/Flash Player.plugin

        - com.macromedia.FlashPlayer-10.4-10.5.plugin

        /Library/Frameworks/Adobe AIR.framework/Resources/adobecp.plugin

        - com.adobe.adobecp

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

        - com.adobe.adobecp

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

        - com.macromedia.FlashPlayer-10.4-10.5.plugin

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/adobecp.plugin

        - com.adobe.adobecp

        /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/AdobeCP15.plugin

        - com.adobe.adobecp

        /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Flash Player.plugin

        - com.macromedia.FlashPlayer-10.4-10.5.plugin

        /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/adobecp.plugin

        - com.adobe.adobecp

        /Library/Internet Plug-Ins/AdobePDFViewer.plugin

        - com.adobe.acrobat.pdfviewer

        /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

        - com.adobe.acrobat.pdfviewerNPAPI

        /Library/Internet Plug-Ins/Flash Player.plugin

        - com.macromedia.Flash

        /Library/Internet Plug-Ins/Silverlight.plugin

        - com.microsoft.SilverlightPlugin

        /Library/Internet Plug-Ins/iPhotoPhotocast.plugin

        - com.apple.plugin.iPhotoPhotocast

        /Library/Internet Plug-Ins/net.juniper.DSSafariExtensions.plugin

        - net.juniper.DSSafariExtensions.plugin

        /Library/Printers/Canon/IJScanner/Plugins/ausm_09.plugin

        - jp.co.canon.scangear.ausm.09

        /Library/Printers/Canon/IJScanner/Plugins/autocrop_09.plugin

        - jp.co.canon.scangear.acrop.09

        /Library/Printers/Canon/IJScanner/Plugins/balco_09.plugin

        - jp.co.canon.scangear.balco.09

        /Library/Printers/Canon/IJScanner/Plugins/calctone_09.plugin

        - jp.co.canon.ScanGear.calctone.09

        /Library/Printers/Canon/IJScanner/Plugins/cib_10.plugin

        - jp.co.canon.scangear.cib.10

        /Library/Printers/Canon/IJScanner/Plugins/cubs_09.plugin

        - jp.co.canon.scangear.cubs.09

        /Library/Printers/Canon/IJScanner/Plugins/ddt_09.plugin

        - jp.co.canon.scangear.ddt.09

        /Library/Printers/Canon/IJScanner/Plugins/descreen_09.plugin

        - jp.co.canon.scangear.descreen.09

        /Library/Printers/Canon/IJScanner/Plugins/gercc_11.plugin

        - jp.co.canon.scangear.gercc.11

        /Library/Printers/Canon/IJScanner/Plugins/gercg_09.plugin

        - jp.co.canon.scangear.gercg.09

        /Library/Printers/Canon/IJScanner/Plugins/hsl_09.plugin

        - jp.co.canon.scangear.hsl.09

        /Library/Printers/Canon/IJScanner/Plugins/jlb.plugin

        - jp.co.canon.scangear.jlb

        /Library/Printers/Canon/IJScanner/Plugins/mc2_09.plugin

        - jp.co.canon.scangear.mc2.09

        /Library/Printers/Canon/IJScanner/Plugins/mc2p_09.plugin

        - jp.co.canon.scangear.mc2.09

        /Library/Printers/Canon/IJScanner/Plugins/os104_08_4.plugin

        - jp.co.canon.scangear.os104_08_4

        /Library/Printers/Canon/IJScanner/Plugins/os105_08_4.plugin

        - jp.co.canon.scangear.os105_08_4

        /Library/Printers/Canon/IJScanner/Plugins/qare_09.plugin

        - jp.co.canon.scangear.qare.09

        /Library/Printers/Canon/IJScanner/Plugins/racs_09.plugin

        - jp.co.canon.scangear.racs.09

        /Library/Printers/Canon/IJScanner/Plugins/tdg_11.plugin

        - jp.co.canon.scangear.tdg.11

        /Library/Printers/Lexmark/PDEs/Job Routing 3.plugin

        - com.lexmark.print.pde.JobRouting

        /Library/Widgets/Network Connect.wdgt

        - net.juniper.widget.NetworkConnect

        /System/Library/Screen Savers/FloatingMessage.saver

        - com.apple.ScreenSaver.FloatingMessage

        /System/Library/Screen Savers/Flurry.saver

        - com.apple.Flurry

        /System/Library/Screen Savers/Random.saver

        - com.apple.ScreenSaver.Random

        /System/Library/Screen Savers/iTunes Artwork.saver

        - com.apple.screensaver.iTunesArtwork

        /Users/USER Flores/Library/Address Book Plug-Ins/SkypeABDialer.bundle

        - com.skype.skypeabdialer

        /Users/USER Flores/Library/Address Book Plug-Ins/SkypeABSMS.bundle

        - com.skype.skypeabsms

        /Users/USER Flores/Library/Application Support/Google/Chrome/PepperFlash/18.0.0.209/PepperFlashPlayer.plugin

        - com.macromedia.PepperFlashPlayer.pepper

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/plugins/Default Plugin.plugin

        - null

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/plugins/MRJPlugin.plugin

        - null

        /Users/USER Flores/Library/Widgets/PEMDAS 3.wdgt

        - com.donkeyentertainment.widget.PEMDAS

        /Users/USER Flores/Library/Widgets/Wikipedia.wdgt

        - com.whatsinthehouse.widget.wikipedia

        /Users/USER Flores/Library/Widgets/iStat Pro.wdgt

        - com.iSlayer.iStatpro4.widget

     

     

    Bundles (new)

     

     

        -

        -0                Use NUL (``

        -

        -attr <attr>      Fetches the value of the specified attribute

        -

        -count            Query only reports matching items count

        -

        -live             Query should stay active

        -

        -name <name>      Search on file name only

        -

        -onlyin <dir>     Search only within given directory

        -

        -reprint          Reprint results on live update

        -

        -s <name>         Show contents of smart folder <name>

        -

        Usage

        - mdfind [-live] [-count] [-onlyin directory] [-name fileName | -s smartFolderName | query]

        example

        -  mdfind "kMDItemAuthor == '*MyFavoriteAuthor*'"

        example

        -  mdfind -live MyFavoriteAuthor

        example

        -  mdfind -name stdlib.h

        example

        -  mdfind -onlyin ~ image

        example

        -  mdfind image

        list the files matching the query

        -

        mdfind

        - no query specified.

        query can be an expression or a sequence of words

        -

     

     

    Library paths

     

     

        /Library/Application Support/RosettaStoneDaemon/Libraries/FNInterface_libFNP.dylib

        /Library/Application Support/RosettaStoneDaemon/Libraries/FnpCommsSoap.dylib

        /Library/Application Support/RosettaStoneDaemon/bin/ActivationDaemonPlugin.dylib

        /Library/Application Support/RosettaStoneDaemon/bin/DataInstaller.dylib

        /Library/Application Support/RosettaStoneDaemon/bin/DataInstallerDaemonPlugin.dylib

        /Library/Application Support/RosettaStoneDaemon/bin/SREDaemonPlugin.dylib

        /Library/Application Support/RosettaStoneDaemon/bin/libRosettaStoneDaemon.dylib

        /Library/Frameworks/Adobe AIR.framework/Resources/WebKit.dylib

        /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

        /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/WebKit.dylib

        /Library/Printers/Samsung/CLP-620/SCMS/libscmssc.dylib

        /Library/Printers/Samsung/CLP-670/SCMS/libscmssc.dylib

        /Library/Printers/Samsung/CLX-6220/SCMS/libscmssc.dylib

        /Library/Printers/Samsung/CLX-6250/SCMS/libscmssc.dylib

        /Library/Printers/Samsung/ML-2525W/SCMS/libscmssc.dylib

        /Library/Printers/Samsung/ML-2525W/SCMS/libscmssf.dylib

        /Library/Printers/Samsung/ML-2580/SCMS/libscmssc.dylib

        /Library/Printers/Samsung/ML-2580/SCMS/libscmssf.dylib

        /Library/Printers/Samsung/SCMS/libscmssc.dylib

        /Library/Printers/Samsung/SCMS/libscmssf.dylib

        /System/Library/StagedFrameworks/Safari/JavaScriptCore.framework/Versions/A/Lib raries/libllvmForJSC.dylib

        /Users/USER Flores/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.823/_platform_specific/mac_x64/libwidev inecdm.dylib

        /Users/USER Flores/Library/Application Support/OpenOffice.org/3/user/extensions/bundled/presentation-minimizer.oxt/Sun PresentationMinimizer.uno.dylib

        /Users/USER Flores/Library/Application Support/OpenOffice.org/3/user/extensions/bundled/presenter-screen.oxt/Presenter Screen.uno.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/components/libalerts_s.dy lib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libfreebl3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libmozjs.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnspr4.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnss3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnssckbi.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnssdbm3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libnssutil3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libplc4.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libplds4.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libsmime3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libsoftokn3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libsqlite3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libssl3.dylib

        /Users/USER Flores/Library/Preferences/LimeWire/browser/xulrunner/libxpcom.dylib

        /usr/X11/lib/libAppleWM.7.dylib

        /usr/X11/lib/libFS.6.dylib

        /usr/X11/lib/libGL.1.dylib

        /usr/X11/lib/libGLU.1.dylib

        /usr/X11/lib/libICE.6.dylib

        /usr/X11/lib/libOSMesa.7.dylib

        /usr/X11/lib/libSM.6.dylib

        /usr/X11/lib/libX11-xcb.1.dylib

        /usr/X11/lib/libX11.6.dylib

        /usr/X11/lib/libXRes.1.dylib

        /usr/X11/lib/libXTrap.6.dylib

        /usr/X11/lib/libXau.6.dylib

        /usr/X11/lib/libXaw.6.dylib

        /usr/X11/lib/libXaw.7.dylib

        /usr/X11/lib/libXaw8.8.dylib

        /usr/X11/lib/libXcomposite.1.dylib

        /usr/X11/lib/libXcursor.1.dylib

        /usr/X11/lib/libXdamage.1.dylib

        /usr/X11/lib/libXdmcp.6.dylib

        /usr/X11/lib/libXevie.1.dylib

        /usr/X11/lib/libXext.6.dylib

        /usr/X11/lib/libXfixes.3.dylib

        /usr/X11/lib/libXfont.1.dylib

        /usr/X11/lib/libXfontcache.1.dylib

        /usr/X11/lib/libXft.2.dylib

        /usr/X11/lib/libXi.6.dylib

        /usr/X11/lib/libXinerama.1.dylib

        /usr/X11/lib/libXmu.6.dylib

        /usr/X11/lib/libXmuu.1.dylib

        /usr/X11/lib/libXp.6.dylib

        /usr/X11/lib/libXpm.4.dylib

        /usr/X11/lib/libXrandr.2.dylib

        /usr/X11/lib/libXrender.1.dylib

        /usr/X11/lib/libXss.1.dylib

        /usr/X11/lib/libXt.6.dylib

        /usr/X11/lib/libXtst.6.dylib

        /usr/X11/lib/libXv.1.dylib

        /usr/X11/lib/libXvMC.1.dylib

        /usr/X11/lib/libXvMCW.1.dylib

        /usr/X11/lib/libXxf86misc.1.dylib

        /usr/X11/lib/libXxf86vm.1.dylib

        /usr/X11/lib/libcairo-script-interpreter.2.dylib

        /usr/X11/lib/libcairo.2.dylib

        /usr/X11/lib/libdmx.1.dylib

        /usr/X11/lib/libfontconfig.1.dylib

        /usr/X11/lib/libfontenc.1.dylib

        /usr/X11/lib/libfreetype.6.dylib

        /usr/X11/lib/libglut.3.dylib

        /usr/X11/lib/libpixman-1.0.dylib

        /usr/X11/lib/libpng.3.dylib

        /usr/X11/lib/libpng12.0.dylib

        /usr/X11/lib/libpng15.15.dylib

        /usr/X11/lib/libxcb-atom.1.dylib

        /usr/X11/lib/libxcb-aux.0.dylib

        /usr/X11/lib/libxcb-composite.0.dylib

        /usr/X11/lib/libxcb-damage.0.dylib

        /usr/X11/lib/libxcb-dpms.0.dylib

        /usr/X11/lib/libxcb-dri2.0.dylib

        /usr/X11/lib/libxcb-event.1.dylib

        /usr/X11/lib/libxcb-glx.0.dylib

        /usr/X11/lib/libxcb-icccm.1.dylib

        /usr/X11/lib/libxcb-image.0.dylib

        /usr/X11/lib/libxcb-keysyms.1.dylib

        /usr/X11/lib/libxcb-property.1.dylib

        /usr/X11/lib/libxcb-randr.0.dylib

        /usr/X11/lib/libxcb-record.0.dylib

        /usr/X11/lib/libxcb-render-util.0.dylib

        /usr/X11/lib/libxcb-render.0.dylib

        /usr/X11/lib/libxcb-reply.1.dylib

        /usr/X11/lib/libxcb-res.0.dylib

        /usr/X11/lib/libxcb-screensaver.0.dylib

        /usr/X11/lib/libxcb-shape.0.dylib

        /usr/X11/lib/libxcb-shm.0.dylib

        /usr/X11/lib/libxcb-sync.0.dylib

        /usr/X11/lib/libxcb-xevie.0.dylib

        /usr/X11/lib/libxcb-xf86dri.0.dylib

        /usr/X11/lib/libxcb-xfixes.0.dylib

        /usr/X11/lib/libxcb-xinerama.0.dylib

        /usr/X11/lib/libxcb-xprint.0.dylib

        /usr/X11/lib/libxcb-xtest.0.dylib

        /usr/X11/lib/libxcb-xv.0.dylib

        /usr/X11/lib/libxcb-xvmc.0.dylib

        /usr/X11/lib/libxcb.1.dylib

        /usr/X11/lib/libxkbfile.1.dylib

        /usr/X11/lib/libxkbui.1.dylib

        /usr/X11/lib/libxstub.dylib

     

     

    Installations

     

     

        MacKeeper 2012: 7/31/12, 12:55 PM

        MacKeeper 2012: 7/31/12, 12:39 PM

        Rosetta Stone TOTALe 4.1.15 Update.pkg: 7/16/12, 10:50 AM

        Rosetta Stone TOTALe: 7/16/12, 10:26 AM

        Parallels Desktop: 7/15/12, 11:11 AM

     

     

    Elapsed time (sec): 503

  • by Quigdoc,

    Quigdoc Quigdoc Aug 18, 2015 9:31 AM in response to icamenscic
    Level 1 (0 points)
    Aug 18, 2015 9:31 AM in response to icamenscic

    I just dealt with this with Mac Support.  They identified this as adware, had me download malwarebytes for free and run it.  2 malware files were deleted.  Worked like a charm on my iMac with Yosemite running.

  • by lucia sol,

    lucia sol lucia sol Oct 20, 2015 2:16 PM in response to Linc Davis
    Level 1 (0 points)
    Oct 20, 2015 2:16 PM in response to Linc Davis

    Start time: 16:06:54 10/20/15

     

     

    Revision: 1241

     

     

    Model Identifier: iMac14,4

    System Version: OS X 10.10.5 (14F27)

    Kernel Version: Darwin 14.5.0

    Time since boot: 1 day6:11

     

     

    UID: 501

     

     

    Bluetooth

     

     

        Apple Magic Mouse

        Apple Wireless Keyboard

     

     

    Activity

     

     

        CPU: user 13%, system 12%

     

     

    CPU usage (%)

     

     

        com.apple.WebKit (UID 501): 62.1

        com.apple.WebKit (UID 501): 51.1

        com.apple.WebKit (UID 501): 47.2

        WindowServer (UID 0): 25.0

        nsurlstoraged (UID 501): 19.1

     

     

    System errors (per sec)

     

     

        com.apple.WebKi (UID 501, error 2): 973

        nsurlstoraged (UID 501, error 1): 947

        com.apple.WebKi (UID 501, error 1): 135

     

     

    Listeners

     

     

        kdc: kerberos

        launchd: ssh

     

     

    Diagnostic reports

     

     

        2015-09-23 com.apple.security.pboxd crash

        2015-09-30 cloudd crash x4

        2015-10-07 Mail hang

        2015-10-07 com.apple.WebKit.WebContent hang x3

        2015-10-15 Mail hang

        2015-10-19 Adobe Photoshop CS5 crash x2

        2015-10-19 Mail hang

        2015-10-20 com.apple.preference.startupdisk.remoteservice crash

     

     

    Kernel log

     

     

        Oct 16 16:25:54 Limiting closed port RST response from 314 to 250 packets per second

        Oct 16 16:27:06 Limiting closed port RST response from 286 to 250 packets per second

        Oct 16 16:27:11 Limiting closed port RST response from 259 to 250 packets per second

        Oct 19 11:07:58 Limiting closed port RST response from 279 to 250 packets per second

        Oct 19 12:24:08 Limiting closed port RST response from 481 to 250 packets per second

        Oct 19 14:19:58 Limiting closed port RST response from 275 to 250 packets per second

        Oct 19 15:35:22 Limiting closed port RST response from 543 to 250 packets per second

     

     

    System log

     

     

        Oct 20 14:45:53 WindowServer window 5dc is already attached to window 5cf

        Oct 20 14:45:53 WindowServer window 5dc is already attached to window 5cf

        Oct 20 14:54:48 WindowServer WSGetSurfaceInWindow : Invalid surface 461116112 for window 1487

        Oct 20 14:54:48 WindowServer WSGetSurfaceInWindow : Invalid surface 461116112 for window 1487

        Oct 20 14:54:50 WindowServer WSGetSurfaceInWindow : Invalid surface 829074005 for window 1485

        Oct 20 14:54:50 WindowServer WSGetSurfaceInWindow : Invalid surface 829074005 for window 1485

        Oct 20 14:54:50 WindowServer WSGetSurfaceInWindow : Invalid surface 829074005 for window 1485

        Oct 20 15:00:51 mDNSResponderHelper do_mDNSSendWakeupPacket write failed Device not configured

        Oct 20 15:00:52 mDNSResponderHelper do_mDNSSendWakeupPacket write failed Device not configured

        Oct 20 15:00:53 iTunes ApplePushService: APSConnection being used without a delegate queue

        Oct 20 15:00:54 com.apple.usbmuxd LOCKDOWN_V2_BONJOUR_SERVICE_NAME is _apple-mobdev2._tcp,90be07e4

        Oct 20 15:00:55 mDNSResponderHelper do_mDNSSendWakeupPacket write failed Device not configured

        Oct 20 15:08:03 WindowServer WSGetSurfaceInWindow : Invalid surface 722566599 for window 1602

        Oct 20 15:13:47 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.

        Oct 20 15:13:51 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.

        Oct 20 15:13:54 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.

        Oct 20 15:39:25 WindowServer disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.

        Oct 20 15:39:57 WindowServer WSBindSurface : Invalid surface 462443015 for window 1686

        Oct 20 15:40:48 WindowServer window 6a1 is already attached to window 69d

        Oct 20 15:40:48 WindowServer window 6a1 is already attached to window 69d

        Oct 20 15:40:48 WindowServer window 6a1 is already attached to window 69d

        Oct 20 15:40:54 WindowServer window 6a7 is already attached to window 69d

        Oct 20 15:40:54 WindowServer window 6a7 is already attached to window 69d

        Oct 20 15:40:54 WindowServer window 6a7 is already attached to window 69d

        Oct 20 15:41:18 WindowServer WSGetSurfaceInWindow : Invalid surface 506430097 for window 1692

     

     

    Console log

     

     

        Oct 16 16:25:48 ReportCrash Invoking spindump for pid=379 wakeups_rate=3091 duration=15 because of excessive wakeups

        Oct 16 16:25:50 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:01 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:07 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:11 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:17 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:28 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:29 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:39 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:40 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:50 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:26:50 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:00 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:01 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:10 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:11 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:21 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:22 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:32 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:32 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 16 16:27:42 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 19 09:58:08 ReportCrash Invoking spindump for pid=387 wakeups_rate=4358 duration=11 because of excessive wakeups

        Oct 19 15:54:40 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 19 15:54:51 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

        Oct 19 15:55:01 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active

     

     

    Loaded kernel extensions

     

     

        com.Cycling74.driver.Soundflower (1.6.6)

     

     

    Daemons

     

     

        com.adobe.SwitchBoard

        com.adobe.fpsaud

        com.apple.Kerberos.kdc

        - status: 1

        com.apple.dpd

        - status: 75

        com.apple.installer.osmessagetracing

        com.apple.spindump

        - status: 75

        com.apple.watchdogd

        com.google.keystone.daemon

        com.microsoft.office.licensing.helper

     

     

    Agents

     

     

        com.adobe.AAM.Scheduler-1.0

        com.adobe.CS5ServiceManager

        com.apple.AirPortBaseStationAgent

        com.apple.SafariNotificationAgent

        - status: -9

        com.apple.helpd

        - status: -15

        com.apple.photostream-agent

        com.apple.pluginkit.pkd

        - status: -9

        com.google.keystone.system.agent

        com.hp.printerAgent

     

     

    User login items

     

     

        iTunesHelper

        - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

        Dropbox

        - /Applications/Dropbox.app

     

     

    iCloud errors

     

     

        cloudd 8

        comapple.CloudPhotosConfiguration 4

        cloudphotosd 2

        Spotlight 2

        Mail 2

        Finder 2

        bird 1

        Numbers 1

     

     

    Continuity errors

     

     

        lsuseractivityd 40

        sharingd 5

     

     

    Restricted files: 59

     

     

    Lockfiles: 17

     

     

    Contents of /System/Library/LaunchAgents/com.apple.SafariPlugInUpdateNotifier.plist

        - mod date: Sep 11 03:55:18 2015

        - checksum: 941105980

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnablePressuredExit</key>

        <true/>

        <key>Label</key>

        <string>com.apple.SafariPlugInUpdateNotifier</string>

        <key>Program</key>

        <string>/usr/libexec/SafariPlugInUpdateNotifier</string>

        <key>LaunchEvents</key>

        <dict>

        <key>com.apple.fsevents.matching</key>

        <dict>

        <key>UserFlashPlugInModified</key>

        <dict>

        <key>Path</key>

        <string>~/Library/Internet Plug-Ins/Flash Player.plugin</string>

        </dict>

        <key>SystemFlashPlugInModified</key>

        <dict>

        <key>Path</key>

        <string>/Library/Internet Plug-Ins/Flash Player.plugin</string>

        </dict>

        </dict>

     

     

        ...and 3 more line(s)

     

     

    Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

        - mod date: May  7 16:44:13 2015

        - checksum: 3012644940

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Disabled</key>

        <true/>

        <key>Label</key>

        <string>org.apache.httpd</string>

        <key>EnvironmentVariables</key>

        <dict>

        <key>XPC_SERVICES_UNAVAILABLE</key>

        <string>1</string>

        </dict>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/sbin/httpd-wrapper</string>

        <string>-D</string>

        <string>FOREGROUND</string>

        </array>

        <key>OnDemand</key>

        <false/>

        </dict>

        </plist>

     

     

    Contents of /System/Library/Security/authorization.plist

        - mod date: Aug  1 19:42:40 2015

        - checksum: 4180344262

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>comment</key>

        <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

        allow rule: this is always allowed

        &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

        &lt;string&gt;allow&lt;/string&gt;

        deny rule: this is always denied

        &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

        &lt;string&gt;deny&lt;/string&gt;

        user rule: successful authentication as a user in the specified group(5) allows the associated right.

        The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

        The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

        The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

        See remaining rules for examples.

        </string>

        <key>rights</key>

        <dict>

        <key></key>

        <dict>

        <key>class</key>

        <string>rule</string>

        <key>comment</key>

     

     

        ...and 1865 more line(s)

     

     

    Contents of /private/etc/hosts

        - mod date: Jun 19 13:57:04 2015

        - checksum: 4035001010

     

     

        127.0.0.1 localhost

        255.255.255.255 broadcasthost

        ::1             localhost

        127.0.0.1 activate.adobe.com

        127.0.0.1 practivate.adobe.com

        127.0.0.1 ereg.adobe.com

        127.0.0.1 activate.wip3.adobe.com

        127.0.0.1 wip3.adobe.com

        127.0.0.1 3dns-3.adobe.com

        127.0.0.1 3dns-2.adobe.com

        127.0.0.1 adobe-dns.adobe.com

        127.0.0.1 adobe-dns-2.adobe.com

        127.0.0.1 adobe-dns-3.adobe.com

        127.0.0.1 ereg.wip3.adobe.com

        127.0.0.1 activate-sea.adobe.com

        127.0.0.1 wwis-dubc1-vip60.adobe.com

        127.0.0.1 activate-sjc0.adobe.com

        127.0.0.1 hl2rcv.adobe.com

        127.0.0.1 activate.adobe.com

        127.0.0.1 practivate.adobe.com

        127.0.0.1 ereg.adobe.com

        127.0.0.1 activate.wip3.adobe.com

        127.0.0.1 wip3.adobe.com

        127.0.0.1 3dns-3.adobe.com

        127.0.0.1 3dns-2.adobe.com

     

     

        ...and 38 more line(s)

     

     

    Contents of /private/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist

        - mod date: Jun 17 12:55:16 2015

        - checksum: 3469280363

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Command</key>

        <string>/Library/Application\ Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/switchboard.sh</string >

        <key>OnDemand</key>

        <false/>

        <key>ServiceName</key>

        <string>com.adobe.SwitchBoard.monitor</string>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.hp.printerAgent.plist

        - mod date: Sep  4 20:49:50 2012

        - checksum: 2038933932

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.hp.printerAgent</string>

        <key>OnDemand</key>

        <false/>

        <key>Program</key>

        <string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>ServiceIPC</key>

        <true/>

        <key>Sockets</key>

        <dict>

        <key>MyListenerSocket</key>

        <dict>

        <key>SockServiceName</key>

        <string>51100</string>

        </dict>

     

     

        ...and 3 more line(s)

     

     

    Extensions

     

     

        /System/Library/Extensions/JMicronATA.kext

        - com.jmicron.JMicronATA

        /System/Library/Extensions/Soundflower.kext

        - com.Cycling74.driver.Soundflower

        /System/Library/Extensions/USBGenericPrinterClass.kext

        - com.marvell.kext.USBGenericPrinterClass

        /System/Library/Extensions/hamns.kext

        - com.logmein.hamachi

     

     

    Applications

     

     

        /Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

        - com.microsoft.ASApplication

        /Applications/Microsoft Office 2011/Office/Complementos/Solver.app

        - com.microsoft.ASApplication

        /Applications/Microsoft Office 2011/Office/Equation Editor.app

        - com.microsoft.EquationEditor

        /Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

        - com.microsoft.office.setupassistant

        /Applications/Microsoft Office 2011/Office/Microsoft Query.app

        - com.microsoft.Query

        /Applications/OBS.app

        - com.obsproject.obs-studio

        /Applications/Soundflower/Soundflowerbed.app

        - com.cycling74.Soundflowerbed

        /Applications/SyphonInject.app

        - zakk.lol.SyphonInject

        /Applications/ZipCloud.app

        - com.jdibackup.ZipCloud

        /Library/Application Support/Adobe/CS5ServiceManager/CS5ServiceManager.app

        - com.adobe.csi.CS5ServiceManager

        /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app

        - com.adobe.switchboard-2.0

        /Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

        - com.apple.ScriptEditor.id.cocoa-applet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

        - com.apple.ScriptEditor.id.droplet-with-settable-properties-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

        - com.apple.ScriptEditor.id.file-processing-droplet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

        - com.apple.ScriptEditor.id.image-file-processing-droplet-template

        /Library/Application Support/hp/P1100_1560_1600Series/HP Firmware Upgrade Utility.app

        - com.yourcompany.HP_Firmware_Upgrade_Utility

        /Library/Application Support/hp/P1100_1560_1600Series/HP ePrint.app

        - com.yourcompany.HP_ePrint

        /Library/Printers/hp/laserjet/p1100_1560_1600series/HP Uninstaller.app

        - com.yourcompany.Uninstaller

        /Library/Printers/hp/laserjet/p1100_1560_1600series/StatusMonitor.app

        - com.yourcompany.StatusMonitor

        /Library/Printers/hp/laserjet/p1100_1560_1600series/hp LaserJet Utility.app

        - com.Marvell.print.HP1100.HPUtilityapp

        /Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

        - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

        - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

        - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

        - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

        - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

        - com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

        - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

     

     

    PrefPane

     

     

        /Library/PreferencePanes/Flash Player.prefPane

        - com.adobe.flashplayerpreferences

        /Library/PreferencePanes/Growl.prefPane

        - com.growl.prefpanel

     

     

    Bundles

     

     

        /Library/Application Support/Adobe/APE/3.1/adbeapecore.framework/Versions/A/Resources/Flash Player.plugin

        - com.macromedia.FlashPlayer-10.4-10.5.plugin

        /Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin

        - com.adobe.CameraRaw

        /Library/Internet Plug-Ins/Flash Player.plugin

        - com.macromedia.Flash

        /Library/Internet Plug-Ins/MeetingJoinPlugin.plugin

        - com.microsoft.communicator.meetingjoinplugin

        /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

        - com.microsoft.sharepoint.browserplugin

        /Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

        - com.google.googletalkbrowserplugin

        /Library/Internet Plug-Ins/o1dbrowserplugin.plugin

        - com.google.o1dbrowserplugin

        /Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin

        - jp.co.canon.scangear.ag07.09

        /Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin

        - jp.co.canon.scangear.ag08.09

        /Library/Printers/Canon/IJScanner/Plugins/cijsdl_bjnp.plugin

        - jp.co.canon.ij.scangear.cijsdl.bjnp

        /Library/Printers/Canon/IJScanner/Plugins/cijsdl_iom.plugin

        - jp.co.canon.ij.scangear.cijsdl.iom

        /Library/Printers/Canon/IJScanner/Plugins/cijsdl_lld.plugin

        - jp.co.canon.ij.scangear.cijsdl.lld

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_ag.plugin

        - jp.co.canon.ij.scangear.cijsds.ag

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_ijfsh.plugin

        - jp.co.canon.ij.scangear.cijsds.ijfsh

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_mldv0.plugin

        - jp.co.canon.ij.scangear.cijsds.mldv0

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_os106.plugin

        - jp.co.canon.ij.scangear.cijsds.os106

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_racs2.plugin

        - jp.co.canon.ij.scangear.cijsds.racs2

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_rotate.plugin

        - jp.co.canon.ij.scangear.cijsds.rotate

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_smac.plugin

        - jp.co.canon.ij.scangear.cijsds.smac

        /Library/Printers/Canon/IJScanner/Plugins/cijsds_zoom.plugin

        - jp.co.canon.ij.scangear.cijsds.zoom

        /Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin

        - jp.co.canon.scangear.lld09.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin

        - jp.co.canon.scanner.cnq2413.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin

        - jp.co.canon.scanner.cnq2414.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin

        - jp.co.canon.scanner.cnq4807.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin

        - jp.co.canon.scanner.cnq4808.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin

        - jp.co.canon.scanner.cnq4809.09

        /Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin

        - jp.co.canon.scanner.cnq9601.09

        /Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin

        - jp.co.canon.scangear.ijfshlib.09

        /Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin

        - jp.co.canon.scangear.mld07.09

        /Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin

        - jp.co.canon.scangear.mld08.09

        /Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin

        - jp.co.canon.scangear.mld09.09

        /Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin

        - jp.co.canon.scangear.mld9601.09

        /Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin

        - jp.co.canon.sf.scanner.sfusb.09

        /Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin

        - jp.co.canon.scangear.usb.09

        /Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin

        - jp.co.canon.scangear.smac.09

        /Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin

        - jp.co.canon.scangear.zoom.09

        /Library/Printers/hp/hpio/USBGenericPrinterClass.plugin

        - com.marvell.cups.classdriver

        /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

        - com.skype.skypeabdialer

        /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

        - com.skype.skypeabsms

        /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin

        - com.macromedia.PepperFlashPlayer.pepper

     

     

    Bundles (new)

     

     

        /Applications/Keynote.app

        - com.apple.iWork.Keynote

        /Applications/Numbers.app

        - com.apple.iWork.Numbers

        /Applications/Pages.app

        - com.apple.iWork.Pages

        /Applications/Utilities/Adobe Flash Player Install Manager.app

        - com.adobe.flashplayer.installmanager

        /Applications/iMovie.app

        - com.apple.iMovieApp

        /Library/Internet Plug-Ins/Flash Player.plugin

        - com.macromedia.Flash

        /Library/PreferencePanes/Flash Player.prefPane

        - com.adobe.flashplayerpreferences

        /System/Library/PrivateFrameworks/SafariShared.framework

        - com.apple.Safari.Shared

        /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/DatabasePro cess.app

        - com.apple.WebKit.DatabaseProcess

        /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/NetworkProc ess.app

        - com.apple.WebKit.NetworkProcess

        /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/PluginProce ss.app

        - com.apple.WebKit.PluginProcess

        /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/WebProcess. app

        - com.apple.WebProcess

        /System/Library/StagedFrameworks/Safari/WebKitLegacy.framework/Versions/A/WebKi tPluginHost.app

        - com.apple.WebKit.PluginHost

        /Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

        - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

        - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

        /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin

        - com.macromedia.PepperFlashPlayer.pepper

     

     

    Library paths

     

     

        /Applications/Adobe Photoshop CS5/MATLAB/Required/psmatlab.dylib

        /Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

        /Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

        /Library/Application Support/Adobe/APE/3.1/adbeapecore.framework/Versions/A/Resources/WebKit.dylib

        /Library/Application Support/Adobe/CS5ServiceManager/lib/CSXS-Installer-Hook.dylib

        /Library/Application Support/Adobe/CS5ServiceManager/lib/ServiceManager-Launcher.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/DWA/DWANative.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdCaps.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKCmdFS.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/ARKEngine.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/DWA/resources/libraries/AdobePIM.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/LWA/PWANative.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_caps.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_oobelib.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/LWA/adobe_upgrade.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/UWA/UWANative.dylib

        /Library/Application Support/Adobe/OOBE/PDApp/core/AdobePIM.dylib

        /System/Library/StagedFrameworks/Safari/WebKit.framework/NetworkProcess.app 1/Contents/MacOS/SecItemShim.dylib

        /System/Library/StagedFrameworks/Safari/WebKit.framework/PluginProcess.app 1/Contents/MacOS/PluginProcessShim.dylib

        /System/Library/StagedFrameworks/Safari/WebKit.framework/WebProcess.app 1/Contents/MacOS/WebProcessShim.dylib

        /System/Library/StagedFrameworks/Safari/WebKitLegacy.framework/WebKitPluginHost .app 1/Contents/MacOS/WebKitPluginHostShim.dylib

        /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.824/_platform_specific/mac_x64/libwidev inecdm.dylib

     

     

    App extensions

     

     

        com.getdropbox.dropbox.garcon

     

     

    Installations

     

     

        Adobe Flash Player: 11/12/14, 08:54

        Adobe Flash Player: 10/29/14, 16:43

        Adobe Flash Player: 9/10/14, 11:13

        Adobe Flash Player: 8/13/14, 09:10

        Microsoft Office for Mac 2011: 8/7/14, 08:03

     

     

    Elapsed time (sec): 459

  • by stuart35,

    stuart35 stuart35 Oct 20, 2015 4:48 PM in response to icamenscic
    Level 1 (9 points)
    Video
    Oct 20, 2015 4:48 PM in response to icamenscic

    Find the folder it's in and send it to trash and delete.

  • by KawaiiOline,

    KawaiiOline KawaiiOline Nov 24, 2015 1:32 AM in response to Linc Davis
    Level 1 (0 points)
    Nov 24, 2015 1:32 AM in response to Linc Davis

    Thank you so much! It works with me as well

  • by Voyzeck,

    Voyzeck Voyzeck Mar 17, 2016 2:59 AM in response to icamenscic
    Level 1 (0 points)
    Mar 17, 2016 2:59 AM in response to icamenscic

    Hi,

     

    I am desperate too:(

     

    Start time: 22:48:45 03/17/16

     

     

    Revision: 1241

     

     

    Model Identifier: MacBookPro12,1

    System Version: OS X 10.10.5 (14F1605)

    Kernel Version: Darwin 14.5.0

    Time since boot: 11:28

     

     

    UID: 501

     

     

    FileVault 2: On

     

     

    File opens (per sec)

     

     

        Google Chrome (UID 501) => /Users/USER/Library/Application Support/Google/Chrome/Default/Pepper Data/Shockwave Flash/WritableRoot/#SharedObjects/Y9RFL23A/cdncache-a.akamaihd.net/items/e6a00/ storage.swf/gpl.sol (status 0): 13

        AdobeUpdateDaem (UID 0) => /tmp/UUID_OUT (status 60): 5

     

     

    System errors (per sec)

     

     

        Google Chrome H (UID 501, error 316): 330

        Google Chrome H (UID 501, error 35): 329

        Google Chrome (UID 501, error 35): 117

     

     

    System caches/logs

     

     

        1809 MB: /System/Library/Caches/com.apple.coresymbolicationd/data

     

     

    Diagnostic reports

     

     

        2016-02-22 Creative Cloud crash

     

     

    Kernel log

     

     

        Mar 15 21:18:24 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020

        Mar 15 21:18:24 Error: AppleHSSPIHIDDriver::HandleInterrupt returned 0xe00002d7

        Mar 15 21:18:24 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200

        Mar 16 01:11:57 WARNING: hibernate_page_list_setall skipped 18893 xpmapped pages

        Mar 16 05:07:38 WARNING: hibernate_page_list_setall skipped 8651 xpmapped pages

        Mar 16 05:07:38 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020

        Mar 16 05:07:38 Error: AppleHSSPIHIDDriver::HandleInterrupt returned 0xe00002d7

        Mar 16 05:07:38 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200

        Mar 16 05:07:40 **** [BroadcomBluetoothHostControllerUSBTransport][probe] -- Not IOUSBCompositeDriver -- found BroadcomBluetoothHostControllerUSBTransport -- 0x5000

        Mar 16 08:08:29 WARNING: hibernate_page_list_setall skipped 8651 xpmapped pages

        Mar 16 08:53:33 WARNING: hibernate_page_list_setall skipped 4934 xpmapped pages

        Mar 16 08:53:33 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020

        Mar 16 08:53:33 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200

        Mar 16 12:25:54 WARNING: hibernate_page_list_setall skipped 4934 xpmapped pages

        Mar 16 14:53:49 WARNING: hibernate_page_list_setall skipped 6070 xpmapped pages

        Mar 16 14:53:49 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020

        Mar 16 14:53:49 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200

        Mar 16 19:31:19 WARNING: hibernate_page_list_setall skipped 6070 xpmapped pages

        Mar 16 21:09:37 WARNING: hibernate_page_list_setall skipped 11374 xpmapped pages

        Mar 16 21:09:37 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020

        Mar 16 21:09:37 [AppleMultitouchDevice::decodeDeviceProperty] Device reports rCRITICAL_ERRORS 0x00000200

        Mar 17 11:21:11 Sleep failure code 0x00000000 0x1f006c00

        Mar 17 11:21:12 **** [BroadcomBluetoothHostControllerUSBTransport][probe] -- Found IOUSBCompositeDriver -- 0x1000

        Mar 17 11:21:12 **** [BroadcomBluetoothHostControllerUSBTransport][start] -- Found IOUSBCompositeDriver -- 0x1000

        Mar 17 18:28:53 AppleDeviceManagementHIDEventService::processCriticalError Received Critical Error: 0x00000020

     

     

    System log

     

     

        Mar 17 21:59:24 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:12:09 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:12:09 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:17:40 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:23:37 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:40:13 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:40:15 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:40:39 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:42:22 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:42:22 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:42:22 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:42:28 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:43:16 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:43:16 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:43:17 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:44:04 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:44:06 Google Chrome Helper CGAffineTransformInvert: singular matrix.

        Mar 17 22:44:16 WindowServer window 1f7 is already attached to window 1ef

        Mar 17 22:46:51 WindowServer WSGetSurfaceInWindow : Invalid surface 478244564 for window 493

        Mar 17 22:46:51 WindowServer WSGetSurfaceInWindow : Invalid surface 478244564 for window 493

        Mar 17 22:46:51 WindowServer WSGetSurfaceInWindow : Invalid surface 478244564 for window 493

        Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727

        Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727

        Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727

        Mar 17 22:49:01 BezelServices 250.15 ASSERTION FAILED: dvcAddrRef != ((void *)0) -[DriverServices getDeviceAddress:] line: 2727

     

     

    Console log

     

     

        Mar 14 21:52:01 ReportCrash Invoking spindump for pid=226 wakeups_rate=181 duration=249 because of excessive wakeups

        Mar 14 21:55:13 ReportCrash Invoking spindump for pid=226 thread=4960 percent_cpu=51 duration=177 because of excessive cpu utilization

        Mar 17 11:21:19 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Mar 17 11:21:19 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid.  Unable to determine schema version.

        Mar 17 11:21:19 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Mar 17 11:21:19 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

        Mar 17 11:25:40 ReportCrash Invoking spindump for pid=392 wakeups_rate=181 duration=249 because of excessive wakeups

     

     

    Daemons

     

     

        Adobe_Genuine_Software_Integrity_Service

        com.5e275556e95e3ba9.config

        com.Kawaka.helper

        com.adobe.adobeupdatedaemon

        com.apple.spindump

        - status: 75

        com.apple.watchdogd

     

     

    Agents

     

     

        com.EasyShopper.agent

        - status: 78

        com.Kawaka.agent

        com.SoftwareUpdater.agent

        - status: 78

        com.adobe.AAM.Scheduler-1.0

        com.adobe.AdobeCreativeCloud

        com.apple.AirPortBaseStationAgent

        com.google.keystone.user.agent

        com.jdibackup.ZipCloud.autostart

        - status: 1

        com.jdibackup.ZipCloud.notify

        - status: 1

     

     

    User login items

     

     

        Flux

        - /Applications/Flux.app

        iTunesHelper

        - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

     

     

    Safari extensions

     

     

        SaveFrom.net helper

        - com.savefrom.helper

     

     

    iCloud errors

     

     

        cloudd 16

        comapple.CloudPhotosConfiguration 4

        cloudphotosd 3

     

     

    Restricted files: 34878

     

     

    Contents of /Library/LaunchAgents/com.EasyShopper.agent.plist

        - mod date: Feb 21 20:05:57 2016

        - checksum: 3827187131

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableGlobbing</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.EasyShopper.agent</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/EasyShopper/EasyShopper</string>

        <string>-guid</string>

        <string>7345177795063732</string>

        <string>-source</string>

        <string>pic-1607</string>

        <string>-brand</string>

        <string>EasyShopper</string>

        <string>-dt</string>

        <string>1456038356</string>

        </array>

        <key>RunAtLoad</key>

     

     

        ...and 9 more line(s)

     

     

    Contents of /Library/LaunchAgents/com.SoftwareUpdater.agent.plist

        - mod date: Feb 21 20:05:59 2016

        - checksum: 1898839021

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableGlobbing</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.SoftwareUpdater.agent</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/SoftwareUpdater/SoftwareUpdater</string>

        <string>-guid</string>

        <string>7345177795063732</string>

        <string>-source</string>

        <string>pic-1607</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

     

     

        ...and 7 more line(s)

     

     

    Contents of /Library/LaunchAgents/com.kawaka.agent.plist

        - mod date: Feb 21 22:58:55 2016

        - checksum: 1949639174

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.Kawaka.agent</string>

        <key>OnDemand</key>

        <false/>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Application Support/Kawaka/Agent/agent.app/Contents/MacOS/agent</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>ThrottleInterval</key>

        <integer>10</integer>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist

        - mod date: Feb 21 22:35:58 2016

        - checksum: 2254479735

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.adobe.adobeupdatedaemon</string>

        <key>LaunchOnlyOnce</key>

        <true/>

        <key>Program</key>

        <string>/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.adobe.agsservice.plist

        - mod date: Feb 21 22:35:46 2016

        - checksum: 364192525

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

          <key>Label</key>

          <string>Adobe_Genuine_Software_Integrity_Service</string>

          <key>ProgramArguments</key>

          <array>

          <string>/Library/Application Support/Adobe/AdobeGCClient/AGSService</string>

          </array>

          <key>Nice</key>

          <integer>1</integer>

          <key>StartInterval</key>

          <integer>86400</integer>

          <key>RunAtLoad</key>

          <true/>

          <key>StandardErrorPath</key>

          <string>/tmp/AlTest1.err</string>

          <key>StandardOutPath</key>

          <string>/tmp/AlTest1.out</string>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.kawaka.daemon.plist

        - mod date: Feb 21 22:58:55 2016

        - checksum: 2626268746

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Disabled</key>

                <true/>

        <key>Label</key>

        <string>com.Kawaka.daemon</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

                <array>

                        <string>/Library/Application Support/Kawaka/Agent/agent.app/Contents/MacOS/agent</string>

        <string>-update</string>

                </array>

        <key>KeepAlive</key>

        <true/>

        <key>RunAtLoad</key>

        <true/>

        <key>ThrottleInterval</key>

        <integer>10</integer>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.kawaka.helper.plist

        - mod date: Feb 21 22:58:55 2016

        - checksum: 157909938

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.Kawaka.helper</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

                <array>

                        <string>/Library/Application Support/Kawaka/Agent/agent.app/Contents/MacOS/agent</string>

        <string>-helper</string>

                </array>

        <key>KeepAlive</key>

        <true/>

        <key>RunAtLoad</key>

        <true/>

        <key>ThrottleInterval</key>

        <integer>10</integer>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.rufoferruginousUpd.plist

        - mod date: Feb 21 22:59:14 2016

        - checksum: 1481949985

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>UserName</key>

        <string>root</string>

        <key>KeepAlive</key>

        <false/>

        <key>Label</key>

        <string>com.5e275556e95e3ba9.config</string>

        <key>RunAtLoad</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/etc/run_upd.sh</string>

        </array>

        </dict>

        </plist>

     

     

    Contents of /System/Library/LaunchAgents/com.apple.SafariPlugInUpdateNotifier.plist

        - mod date: Dec 21 20:57:59 2015

        - checksum: 941105980

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnablePressuredExit</key>

        <true/>

        <key>Label</key>

        <string>com.apple.SafariPlugInUpdateNotifier</string>

        <key>Program</key>

        <string>/usr/libexec/SafariPlugInUpdateNotifier</string>

        <key>LaunchEvents</key>

        <dict>

        <key>com.apple.fsevents.matching</key>

        <dict>

        <key>UserFlashPlugInModified</key>

        <dict>

        <key>Path</key>

        <string>~/Library/Internet Plug-Ins/Flash Player.plugin</string>

        </dict>

        <key>SystemFlashPlugInModified</key>

        <dict>

        <key>Path</key>

        <string>/Library/Internet Plug-Ins/Flash Player.plugin</string>

        </dict>

        </dict>

     

     

        ...and 3 more line(s)

     

     

    Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

        - mod date: Jan  4 09:54:23 2016

        - checksum: 3012644940

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Disabled</key>

        <true/>

        <key>Label</key>

        <string>org.apache.httpd</string>

        <key>EnvironmentVariables</key>

        <dict>

        <key>XPC_SERVICES_UNAVAILABLE</key>

        <string>1</string>

        </dict>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/sbin/httpd-wrapper</string>

        <string>-D</string>

        <string>FOREGROUND</string>

        </array>

        <key>OnDemand</key>

        <false/>

        </dict>

        </plist>

     

     

    Contents of /System/Library/Security/authorization.plist

        - mod date: Aug  2 12:42:40 2015

        - checksum: 4180344262

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>comment</key>

        <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

        allow rule: this is always allowed

        &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

        &lt;string&gt;allow&lt;/string&gt;

        deny rule: this is always denied

        &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

        &lt;string&gt;deny&lt;/string&gt;

        user rule: successful authentication as a user in the specified group(5) allows the associated right.

        The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

        The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

        The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

        See remaining rules for examples.

        </string>

        <key>rights</key>

        <dict>

        <key></key>

        <dict>

        <key>class</key>

        <string>rule</string>

        <key>comment</key>

     

     

        ...and 1865 more line(s)

     

     

    Contents of /private/etc/hosts

        - ASCII English text, with CRLF, CR, LF line terminators

        - mod date: Jan  7 06:31:41 2016

        - checksum: 4216390941

     

     

        127.0.0.1 localhost

        255.255.255.255 broadcasthost

        ::1             localhost

     

     

    Contents of /private/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist

        - mod date: Jan  7 06:21:22 2016

        - checksum: 3469280363

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Command</key>

        <string>/Library/Application\ Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/switchboard.sh</string >

        <key>OnDemand</key>

        <false/>

        <key>ServiceName</key>

        <string>com.adobe.SwitchBoard.monitor</string>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.EasyShopper.agent.plist

        - mod date: Feb 21 20:05:57 2016

        - checksum: 3827187131

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableGlobbing</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.EasyShopper.agent</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/EasyShopper/EasyShopper</string>

        <string>-guid</string>

        <string>7345177795063732</string>

        <string>-source</string>

        <string>pic-1607</string>

        <string>-brand</string>

        <string>EasyShopper</string>

        <string>-dt</string>

        <string>1456038356</string>

        </array>

        <key>RunAtLoad</key>

     

     

        ...and 9 more line(s)

     

     

    Contents of Library/LaunchAgents/com.SoftwareUpdater.agent.plist

        - mod date: Feb 21 20:05:59 2016

        - checksum: 1898839021

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableGlobbing</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.SoftwareUpdater.agent</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/SoftwareUpdater/SoftwareUpdater</string>

        <string>-guid</string>

        <string>7345177795063732</string>

        <string>-source</string>

        <string>pic-1607</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

     

     

        ...and 7 more line(s)

     

     

    Contents of Library/LaunchAgents/com.apple.FolderActions.folders.plist

        - mod date: Jan 31 01:33:44 2016

        - checksum: 1189540302

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.apple.FolderActions.folders</string>

        <key>Program</key>

        <string>/usr/bin/osascript</string>

        <key>ProgramArguments</key>

        <array>

        <string>osascript</string>

        <string>-e</string>

        <string>tell application "Folder Actions Dispatcher" to tick</string>

        </array>

        <key>WatchPaths</key>

        <array/>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.google.keystone.agent.plist

        - mod date: Mar  6 19:02:38 2016

        - checksum: 3504134591

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.google.keystone.user.agent</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>ProgramArguments</key>

        <array>

         <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

         <string>-runMode</string>

         <string>ifneeded</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StartInterval</key>

        <integer>3623</integer>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

        <string>/dev/null</string>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

        - mod date: Feb 21 20:07:30 2016

        - checksum: 2269878537

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

            <key>Label</key>

            <string>com.jdibackup.ZipCloud.autostart</string>

            <key>ProgramArguments</key>

            <array>

                <string>open</string>

                <string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

                <string>-n</string>

                <string>--args</string>

                <string>9</string>

                <string>-l</string>

            </array>

            <key>StandardOutPath</key>

            <string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

            <key>StandardErrorPath</key>

            <string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

            <key>RunAtLoad</key>

            <true/>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

        - mod date: Feb 21 20:07:29 2016

        - checksum: 2650475567

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

            <key>Label</key>

            <string>com.jdibackup.ZipCloud.notify</string>

            <key>ProgramArguments</key>

            <array>

                <string>open</string>

                <string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

                <string>--args</string>

                <string>7</string>

                <string>1</string>

            </array>

            <key>StandardOutPath</key>

            <string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

            <key>StandardErrorPath</key>

            <string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

            <key>StartInterval</key>

            <integer>1200</integer>

            <key>RunAtLoad</key>

            <false/>

        </dict>

        </plist>

     

     

    Applications

     

     

        /Applications/BalTax 2015/BalTax 2015 Deinstallationsprogramm.app

        - com.install4j.9428-7321-0755-7683.uninstaller

        /Applications/BalTax 2015/BalTax 2015.app

        - com.install4j.9428-7321-0755-7683.2

        /Applications/PDFelement.app

        - com.wondershare.PDFelement

        /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app

        - com.adobe.switchboard-2.0

        /Library/Application Support/Kawaka/Agent/agent.app

        - com.someproduct.agent

        /Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

        - com.apple.ScriptEditor.id.cocoa-applet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

        - com.apple.ScriptEditor.id.droplet-with-settable-properties-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

        - com.apple.ScriptEditor.id.file-processing-droplet-template

        /Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

        - com.apple.ScriptEditor.id.image-file-processing-droplet-template

        /Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app

        - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf

        /Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

        - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo

        /Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app

        - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf

        /Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app

        - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia

        /Users/USER/Documents/Cris /Adobe Photoshop  CS6 [Mac] xCYBERPIRATENx/Hoste Patch.app

        - N/A

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

        - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

        - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

        - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

        - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

        /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

        - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

     

     

    Frameworks

     

     

        /System/Library/Frameworks/Kawaka.framework

        - N/A

     

     

    Bundles

     

     

        /Library/Application Support/Adobe/APE/3.3/adbeapecore.framework/Versions/A/Libraries/Flash Player.plugin

        - com.macromedia.FlashPlayer-10.4-10.5.plugin

        /Library/Application Support/Adobe/Plug-Ins/CS6/File Formats/Camera Raw.plugin

        - com.adobe.CameraRaw

        /Library/Internet Plug-Ins/AdobeAAMDetect.plugin

        - com.AdobeAAMDetectLib.AdobeAAMDetect

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/Utils/AdobeAAMDetect.plugin

        - com.AdobeAAMDetectLib.AdobeAAMDetect

        /Users/USER/Library/Address Book Plug-Ins/SkypeABCaller.bundle

        - com.skype.SkypeABCaller

        /Users/USER/Library/Address Book Plug-Ins/SkypeABChatter.bundle

        - com.skype.SkypeABChatter

        /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

        - com.skype.SkypeABDialer

        /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

        - com.skype.SkypeABSMS

        /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/21.0.0.182/PepperFlashPlayer.plugin

        - com.macromedia.PepperFlashPlayer.pepper

     

     

    Bundles (new)

     

     

        /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/21.0.0.182/PepperFlashPlayer.plugin

        - com.macromedia.PepperFlashPlayer.pepper

     

     

    Library paths

     

     

        /Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib

        /Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib

        /Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib

        /Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib

        /Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P6/axlib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/IMSLib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/P7Native.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib

        /Applications/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P7/axlibv7.dylib

        /Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib

        /Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/UWA_UI.dylib

        /Applications/Utilities/Adobe Creative Cloud/ACC/ContainerBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib

        /Applications/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib

        /Applications/Utilities/Adobe Creative Cloud/HDCore/HDPIM.dylib

        /Applications/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/SPanel/SPanelBL.dylib

        /Library/Application Support/Adobe/APE/3.3/adbeapecore.framework/Versions/A/Libraries/WebKit.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Core/AdobePIM.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Core/Core.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/Analytics.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/LocManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/CoreExt/PrefsManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/ElevationManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/HEX/HEX.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Notifications/ANSClient.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Notifications/NotificationManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/Notifications/TrayNotificationManager.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/SignInApp/SignInAppBL.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/CmdCntr.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanControl.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanMessage5.dylib

        /Library/Application Support/Adobe/Adobe Desktop Common/TCC/VulcanWrapper.dylib

        /Library/Application Support/Adobe/AdobeGCClient/gcupdater.dylib

        /Library/Application Support/Adobe/CS6ServiceManager/lib/CSXS-Installer-Hook.dylib

        /Library/Application Support/Adobe/CS6ServiceManager/lib/ServiceManager-Launcher.dylib

        /Library/Application Support/Kawaka/Kawaka/Versions/A/Libraries/libLoader.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/accessible/libqtaccessiblewidgets. dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/bearer/libqcorewlanbearer.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/bearer/libqgenericbearer.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqcncodecs.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqjpcodecs.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqkrcodecs.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/codecs/libqtwcodecs.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqgif.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqico.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqjpeg.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqmng.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqtga.dylib

        /Library/rufoferruginousUpd/Contents/PlugIns/imageformats/libqtiff.dylib

        /System/Library/Frameworks/Kawaka.framework/Versions/A/Libraries/libLoader.dyli b

        /Users/USER/Downloads/Utilities/Adobe Application Manager/D6/D6Native.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/DWA/DWANative.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/PWANative.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P6/IMSLib.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P6/P6Native.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P6/axlib.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/IMSLib.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/P7Native.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/P7/axlibv7.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/UWA/UWANative.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/core/AdobePIM.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib

        /Users/USER/Downloads/Utilities/Adobe Application Manager/core/switcher/UWA_UI.dylib

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/ACC/ContainerBL.dylib

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/HDCore/HDPIM.dylib

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib

        /Users/USER/Downloads/Utilities/Adobe Creative Cloud/SPanel/SPanelBL.dylib

        /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/libwidev inecdm.dylib

     

     

    App extensions

     

     

        com.adobe.accmac.ACCFinderSync

        com.pixelmatorteam.pixelmator.trial.Repair-Tool-Action-Extension

     

     

    Installations

     

     

        MacKeeper: 21/02/2016 22:59

        MacKeeper: 21/02/2016 22:59

        ZipCloud: 21/02/2016 20:07

        Adobe Photoshop Lightroom 4.4: 09/01/2016 00:53

     

     

    Elapsed time (sec): 207

  • by frankp1024,

    frankp1024 frankp1024 May 31, 2016 5:46 PM in response to Linc Davis
    Level 1 (4 points)
    May 31, 2016 5:46 PM in response to Linc Davis

    you are a god!!!!!! thank you so much for the help linc.

  • by zitanicole,

    zitanicole zitanicole Sep 15, 2016 6:32 AM in response to Linc Davis
    Level 1 (4 points)
    Mac OS X
    Sep 15, 2016 6:32 AM in response to Linc Davis

    hey so when i click reveal in finder my finder just opens and thats it nothing happens ;alksjg;laksdjg my mac is brand spankin and its being slow....?

  • by Eric Root,

    Eric Root Eric Root Sep 15, 2016 8:36 AM in response to zitanicole
    Level 9 (72,578 points)
    iTunes
    Sep 15, 2016 8:36 AM in response to zitanicole

    You might want to consider starting a new discussion. Since this one is a couple of years old, less people are likely to look at it. A new post would be much more visible. You can link to this one.

     

    Try running this program and then copy and paste the output in a new post. The program was created by Etresoft, a frequent contributor.  Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.
      

    Etrecheck – System Information

first Previous Page 4 of 4