Hello. This is not probably the right place to post this question but I think I will do it anyway.
I started to observe my kernel log / system konsole for what's going on and I saw opendirectoryd - has made 9 logs of starting something and here's log outputs (first & last) these logs are under "fax" and that's why I get interested, becouse I do not have any attempts & software what would need this options:
2013-03-28 16:11:44.418 EET - opendirectoryd (build 172.17) launched...
2013-03-28 16:11:44.419 EET - Logging level limit changed to 'error'
2013-03-28 16:11:52.873 EET - Initialize trigger support
2013-03-28 16:11:52.874 EET - Registered node with name '/Active Directory' as hidden
2013-03-28 16:11:52.874 EET - Registered node with name '/Configure' as hidden
2013-03-28 16:11:52.875 EET - Discovered configuration for node name '/Contacts' at path '/Library/Preferences/OpenDirectory/Configurations//Contacts.plist'
2013-03-28 16:11:52.875 EET - Registered node with name '/Contacts'
2013-03-28 16:11:52.875 EET - Registered node with name '/LDAPv3' as hidden
2013-03-28 16:11:52.877 EET - Registered node with name '/Local' as hidden
2013-03-28 16:11:52.878 EET - Registered node with name '/NIS' as hidden
2013-03-28 16:11:52.879 EET - Discovered configuration for node name '/Search' at path '/Library/Preferences/OpenDirectory/Configurations//Search.plist'
2013-03-28 16:11:52.879 EET - Registered node with name '/Search'
2013-03-28 16:11:52.880 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/legacy.bundle'
2013-03-28 16:11:52.882 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/search.bundle'
2013-03-28 16:11:53.884 EET - '/Search' has registered, loading additional services
2013-03-28 16:11:53.884 EET - Initialize augmentation support
2013-03-28 16:11:53.887 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/SystemCache.bundle'
2013-03-28 16:11:53.891 EET - Successfully registered for Kernel identity service requests
2013-03-28 16:11:53.896 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/PlistFile.bundle'
2013-03-28 16:11:53.897 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/FDESupport.bundle'
2013-03-28 16:11:53.910 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ConfigurationProfiles.bundle'
2013-03-28 16:11:53.910 EET - Registered subnode with name '/Local/Default'
2013-03-28 16:12:10.289 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ldap.bundle'
2013-03-05 18:22:48.204 EET - opendirectoryd (build 172.17) launched...
2013-03-05 18:22:48.204 EET - Logging level limit changed to 'error'
2013-03-05 18:22:48.229 EET - Initialize trigger support
2013-03-05 18:22:48.230 EET - Registered node with name '/Active Directory' as hidden
2013-03-05 18:22:48.231 EET - Registered node with name '/Configure' as hidden
2013-03-05 18:22:48.232 EET - Discovered configuration for node name '/Contacts' at path '/Library/Preferences/OpenDirectory/Configurations//Contacts.plist'
2013-03-05 18:22:48.232 EET - Registered node with name '/Contacts'
2013-03-05 18:22:48.232 EET - Registered node with name '/LDAPv3' as hidden
2013-03-05 18:22:48.235 EET - Registered node with name '/Local' as hidden
2013-03-05 18:22:48.237 EET - Registered node with name '/NIS' as hidden
2013-03-05 18:22:48.238 EET - Discovered configuration for node name '/Search' at path '/Library/Preferences/OpenDirectory/Configurations//Search.plist'
2013-03-05 18:22:48.238 EET - Registered node with name '/Search'
2013-03-05 18:22:48.240 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/legacy.bundle'
2013-03-05 18:22:48.242 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/search.bundle'
2013-03-05 18:22:49.244 EET - '/Search' has registered, loading additional services
2013-03-05 18:22:49.244 EET - Initialize augmentation support
2013-03-05 18:22:49.248 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/SystemCache.bundle'
2013-03-05 18:22:49.252 EET - Successfully registered for Kernel identity service requests
2013-03-05 18:22:49.259 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/PlistFile.bundle'
2013-03-05 18:22:49.260 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/FDESupport.bundle'
2013-03-05 18:22:49.272 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ConfigurationProfiles.bundle'
2013-03-05 18:22:49.273 EET - Registered subnode with name '/Local/Default'
2013-03-05 18:23:23.981 EET - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ldap.bundle'
2013-03-05 18:37:30.017 EET - Starting shutdown process...
2013-03-05 18:37:30.017 EET - Deregistered with Kernel for identity service requests
I'm trying to debug why this process has started, no problems with softwares / installs. Everything works fine.
But I think my computer got hacked some time ago. After that I installed e.g. Little Snitch Network monitor (still using demo version) and Avira virus scanner.
No log / other unusual behavior after that.
Any suggestions where to look / where to dig?