and how to kill it?
thank to all, k.
Yes, I know how it sounded. But it ddin't make sense to me that some tar app would be trying to launch on startup, when the OP does not know what tar even is. So, I suspected it may be some wierdness caused by system corruption somewhere. Also, I wasn't sure if he was getting that message each time or a variety of error messages.
See if you're launcing anything that's causing this in ->System Preferences->Users & Groups->Login Items.
Also check ~/Library/LaunchAgents/ and ~/Library/LaunchDaemons/
Please read this whole message before doing anything.
Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software -- potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions -- they’re easy to carry out and won’t change anything on your Mac.
These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.
Below are four lines of text in monospaced type, which are actually shell commands -- little programs. They’re harmless, but they must be used exactly as given in order to work.
First and most important, don’t run these commands until you have verified that they’re legitimate. Never execute shell commands from an untrusted source without knowing what they do, or at least that they don’t do anything harmful. I’ve posted these same commands, with minor variations, many times on this site. You should be able to find other discussions in which they were used without ill effects. Do that before proceeding.
Some of the commands will probably line-wrap in your browser, but each one is really just a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then either copy or drag it. The headings “Step 1” and so on are not part of the commands.
To begin, launch the Terminal application; e.g., by entering the first few letters of its name in a Spotlight search.
Step 1
Copy or drag -- do not type -- the line below into the Terminal window, then press return:
kextstat -kl | awk ' !/apple/ { print $6 $7 } '
Post the lines of output (if any) that appear below what you just entered (the text, please, not a screenshot.)
Step 2
Repeat with this line:
sudo launchctl list | sed 1d | awk ' !/0x|apple|com\.vix|edu\.|org\./ { print $3 } '
This time, you'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. You don't need to post the warning.
Step 3
launchctl list | sed 1d | awk ' !/0x|apple|edu\.|org\./ { print $3 } '
Step 4
ls -1A {,/}Library/{Ad,Compon,Ex,Fram,In,La,Mail/**,P*P,Priv,Qu,Scripti,Sta}* 2> /dev/null
Important: If you synchronize with a MobileMe account, your me.com email address will appear in the output of the above command. Change it to something like “user@me.com” before posting.
Remember, this is all drag-and-drop or copy-and-paste, whichever you prefer -- no typing, except your password.
You can then quit Terminal.
Hello macjack,
who says that I do not know what tar is?
I am wondering, why this alert comes whitout I am trying anything to compress/uncompress; yes, it is right I do not know the day or year I did ever use .tar
Meantime the consideration of all you specialists move to a misformed system (-complex in unix); first I had to start with admin account to get the sudo command; normally I get in as non-admin, and now I had therefore (for my less experience) to consider what the differences are. First: up to now, for several minutes, no „PowerPC“ alert has arised.
so starting terminal for further steps along post from orang 😉 Linc …
Thank you so far.
~k.
Hello Linc,
I started with my second account, as admin, and saw, there are no alerts;
calling the default account on the fly, *immediately* there where the alerts (identical as fast as the screen was updated);
backrotating to admin account there is no strange alert, no alert at all.
The first terminal output:
Last login: Sun Nov 13 08:08:44 on console
Macintosh:~ karl$ sudo kextstat -kl | awk ' !/apple/ { print $6 $7 } '
WARNING: Improper use of the sudo command could lead to data loss
or the deletion of important system files. Please double-check your
typing when using sudo. Type "man sudo" for more information.
To proceed, enter your password, or type Ctrl-C to abort.
Password:
com.intego.kext.NetBarrierKPI(10.5.7)
com.intego.kext.AppBarrierKPI(2.2)
com.AmbrosiaSW.AudioSupport(4.0)
com.parallels.kext.prl_netbridge(7.0
com.parallels.kext.prl_vnic(7.0
com.iospirit.driver.rbiokithelper(1.8.0)
com.silex.driver.sxuptp(1.5.1)
com.parallels.kext.prl_usb_connect(7.0
com.parallels.kext.prl_hypervisor(7.0
com.parallels.kext.prl_hid_hook(7.0
Macintosh:~ karl$
~k.
Now the exact followup of commands 😉
Macintosh:~ karl$
Last login: Sun Nov 13 08:41:30 on console
Macintosh:~ karl$ kextstat -kl | awk ' !/apple/ { print $6 $7 } '
com.intego.kext.NetBarrierKPI(10.5.7)
com.parallels.kext.prl_usb_connect(7.0
com.AmbrosiaSW.AudioSupport(4.0)
com.parallels.kext.prl_hid_hook(7.0
com.parallels.kext.prl_hypervisor(7.0
com.parallels.kext.prl_netbridge(7.0
com.parallels.kext.prl_vnic(7.0
com.iospirit.driver.rbiokithelper(1.8.0)
com.silex.driver.sxuptp(1.5.1)
com.intego.kext.AppBarrierKPI(2.2)
Macintosh:~ karl$
Macintosh:~ karl$ sudo launchctl list | sed 1d | awk ' !/0x|apple|com\.vix|edu\.|org\./ { print $3 } '
Password:
com.parallels.vm.prl_naptd
com.parallels.desktop.launchdaemon
com.micromat.TechToolProDaemon
com.kaspersky.kav
com.intego.task.manager.daemon
com.intego.netupdate.daemon
com.intego.netbarrier.daemon
com.intego.commonservices.icalserver
com.intego.commonservices.daemon
com.intego.BackupAssistant.daemon
com.DiscRotate.DiscRotateDaemon
com.barebones.textwrangler
com.barebones.bbedit
com.barebones.authd
com.Affinegy.InstaLANd
cn.com.zte.PPPMonitor.plist
Macintosh:~ karl$ launchctl list | sed 1d | awk ' !/0x|apple|edu\.|org\./ { print $3 } '
com.wacom.pentablet
com.parallels.vm.prl_pcproxy
com.parallels.DesktopControlAgent
com.parallels.desktop.client.launch
com.micromat.TechToolProAgent
com.kaspersky.kav.gui
com.intego.task.manager.notifier
com.intego.netupdate.agent
com.intego.netbarrier.alert
com.intego.commonservices.statusitem
com.intego.backupassistant.agent
cn.com.zte.usbswapper.plist
Macintosh:~ karl$ ls -1A {,/}Library/{Ad,Compon,Ex,Fram,In,La,Mail/**,P*P,Priv,Qu,Scripti,Sta}* 2> /dev/null
/Library/Components:
/Library/Extensions:
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AquaTerm.framework
AudioMixEngine.framework
CyberJack.framework
CyberJack_CTAPI.framework
EDWOCommon.framework
EDWOInternet.framework
EWSMac.framework
FreeType.framework
FxPlug.framework
HPDeviceModel.framework
HPPml.framework
HPServicesInterface.framework
HPSmartPrint.framework
IntegoiCalFramework.framework
MacFUSE.framework
NetUpdateShared.framework
NyxAudioAnalysis.framework
PluginManager.framework
ProFX.framework
ProMetadataSupport.framework
TSLicense.framework
/Library/Input Methods:
/Library/Intego:
.com.intego.netbarrier.alert.run
.netbarrier_info
IMailSenderTool
IntegoStatusItem.bundle
IntegoiCalServer
MIME.plist
TaskManager
integod
netbarrierd.bundle
netupdated.bundle
/Library/Internet Plug-Ins:
.DS_Store
AuthorwareWebPlayer
AuthorwareWebPlayer-PPC folder
Flash Player.plugin
Flip4Mac WMV Plugin.plugin
Google Earth Web Plug-in.plugin
Installer Log File
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
RealPlayer Plugin.plugin
Silverlight.plugin
flashplayer.xpt
iPhotoPhotocast.plugin
nsIQTScriptablePlugin.xpt
/Library/LaunchAgents:
cn.com.zte.usbswapper.plist
com.Affinegy.InstaLANa.plist
com.adobe.AAM.Updater-1.0.plist
com.intego.backupassistant.agent.plist
com.intego.commonservices.statusitem.plist
com.intego.netbarrier.alert.plist
com.intego.netupdate.agent.plist
com.intego.task.manager.notifier.plist
com.kaspersky.kav.gui.plist
com.micromat.TechToolProAgent.plist
com.parallels.DesktopControlAgent.plist
com.parallels.desktop.launch.plist
com.parallels.vm.prl_pcproxy.plist
com.wacom.pentablet.plist
/Library/LaunchDaemons:
cn.com.zte.PPPMonitor.plist
com.Affinegy.InstaLANd.plist
com.DiscRotate.DiscRotateDaemon.plist
com.apple.remotepairtool.plist
com.barebones.authd.plist
com.barebones.bbedit.plist
com.barebones.textwrangler.plist
com.intego.BackupAssistant.daemon.plist
com.intego.commonservices.daemon.plist
com.intego.commonservices.icalserver.plist
com.intego.netbarrier.daemon.plist
com.intego.netupdate.daemon.plist
com.intego.task.manager.daemon.plist
com.kaspersky.kav.plist
com.micromat.TechToolProDaemon.plist
com.parallels.desktop.launchdaemon.plist
/Library/PreferencePanes:
Candelair.prefPane
DejaVu.prefPane
Flip4Mac WMV.prefPane
Growl.prefPane
MacFUSE.prefPane
NetUpdate.prefPane
PenTablet.prefPane
Perian.prefPane
TechTool Protection.prefPane
/Library/PrivilegedHelperTools:
NetUpdateAgent.app
com.barebones.authd
com.barebones.bbedit
com.barebones.textwrangler
/Library/QuickLook:
GBQLGenerator.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AC3MovieImport.component
AppleIntermediateCodec.component
AppleMPEG2Codec.component
DesktopVideoOut.component
DivX 6 Decoder.component
DivX Decoder.component
FCP Uncompressed 422.component
Flip4Mac WMV Advanced.component
Flip4Mac WMV Export.component
Flip4Mac WMV Import.component
LiveType.component
Perian.component
/Library/ScriptingAdditions:
TotalFinder.osax
/Library/StartupItems:
CandelairPrefsTool
GT Network Tuning
HWNetMgr
HWPortDetect
Intego Backup Assistant
NetBarrierKPI
Library/Internet Plug-Ins:
Library/LaunchAgents:
Macintosh:~ karl$
~k.
Sorry, Linc, I did a mistake, I used a false account on the machine, thinking user default has just simple rights.
I performed the steps again from the account with which the troubles occur.
Here the output:
Last login: Sun Nov 13 08:53:14 on console
Macintosh:~ default$ kextstat -kl | awk ' !/apple/ { print $6 $7 } '
com.intego.kext.NetBarrierKPI(10.5.7)
com.parallels.kext.prl_usb_connect(7.0
com.AmbrosiaSW.AudioSupport(4.0)
com.parallels.kext.prl_hid_hook(7.0
com.parallels.kext.prl_hypervisor(7.0
com.parallels.kext.prl_netbridge(7.0
com.parallels.kext.prl_vnic(7.0
com.iospirit.driver.rbiokithelper(1.8.0)
com.silex.driver.sxuptp(1.5.1)
com.intego.kext.AppBarrierKPI(2.2)
Macintosh:~ default$ sudo launchctl list | sed 1d | awk ' !/0x|apple|com\.vix|edu\.|org\./ { print $3 } '
…
Password:
com.wacom.pentablet
com.parallels.DesktopControlAgent
com.intego.netupdate.agent
com.parallels.vm.prl_naptd
com.parallels.desktop.launchdaemon
com.micromat.TechToolProDaemon
com.kaspersky.kav
com.intego.task.manager.daemon
com.intego.netupdate.daemon
com.intego.netbarrier.daemon
com.intego.commonservices.icalserver
com.intego.commonservices.daemon
com.intego.BackupAssistant.daemon
com.DiscRotate.DiscRotateDaemon
com.barebones.textwrangler
com.barebones.bbedit
com.barebones.authd
com.Affinegy.InstaLANd
cn.com.zte.PPPMonitor.plist
Macintosh:~ default$ ls -1A {,/}Library/{Ad,Compon,Ex,Fram,In,La,Mail/**,P*P,Priv,Qu,Scripti,Sta}* 2> /dev/null
/Library/Components:
/Library/Extensions:
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AquaTerm.framework
AudioMixEngine.framework
CyberJack.framework
CyberJack_CTAPI.framework
EDWOCommon.framework
EDWOInternet.framework
EWSMac.framework
FreeType.framework
FxPlug.framework
HPDeviceModel.framework
HPPml.framework
HPServicesInterface.framework
HPSmartPrint.framework
IntegoiCalFramework.framework
MacFUSE.framework
NetUpdateShared.framework
NyxAudioAnalysis.framework
PluginManager.framework
ProFX.framework
ProMetadataSupport.framework
TSLicense.framework
/Library/Input Methods:
/Library/Intego:
.com.intego.netbarrier.alert.run
.netbarrier_info
IMailSenderTool
IntegoStatusItem.bundle
IntegoiCalServer
MIME.plist
TaskManager
integod
netbarrierd.bundle
netupdated.bundle
/Library/Internet Plug-Ins:
.DS_Store
AuthorwareWebPlayer
AuthorwareWebPlayer-PPC folder
Flash Player.plugin
Flip4Mac WMV Plugin.plugin
Google Earth Web Plug-in.plugin
Installer Log File
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
RealPlayer Plugin.plugin
Silverlight.plugin
flashplayer.xpt
iPhotoPhotocast.plugin
nsIQTScriptablePlugin.xpt
/Library/LaunchAgents:
cn.com.zte.usbswapper.plist
com.Affinegy.InstaLANa.plist
com.adobe.AAM.Updater-1.0.plist
com.intego.backupassistant.agent.plist
com.intego.commonservices.statusitem.plist
com.intego.netbarrier.alert.plist
com.intego.netupdate.agent.plist
com.intego.task.manager.notifier.plist
com.kaspersky.kav.gui.plist
com.micromat.TechToolProAgent.plist
com.parallels.DesktopControlAgent.plist
com.parallels.desktop.launch.plist
com.parallels.vm.prl_pcproxy.plist
com.wacom.pentablet.plist
/Library/LaunchDaemons:
cn.com.zte.PPPMonitor.plist
com.Affinegy.InstaLANd.plist
com.DiscRotate.DiscRotateDaemon.plist
com.apple.remotepairtool.plist
com.barebones.authd.plist
com.barebones.bbedit.plist
com.barebones.textwrangler.plist
com.intego.BackupAssistant.daemon.plist
com.intego.commonservices.daemon.plist
com.intego.commonservices.icalserver.plist
com.intego.netbarrier.daemon.plist
com.intego.netupdate.daemon.plist
com.intego.task.manager.daemon.plist
com.kaspersky.kav.plist
com.micromat.TechToolProDaemon.plist
com.parallels.desktop.launchdaemon.plist
/Library/PreferencePanes:
Candelair.prefPane
DejaVu.prefPane
Flip4Mac WMV.prefPane
Growl.prefPane
MacFUSE.prefPane
NetUpdate.prefPane
PenTablet.prefPane
Perian.prefPane
TechTool Protection.prefPane
/Library/PrivilegedHelperTools:
NetUpdateAgent.app
com.barebones.authd
com.barebones.bbedit
com.barebones.textwrangler
/Library/QuickLook:
GBQLGenerator.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AC3MovieImport.component
AppleIntermediateCodec.component
AppleMPEG2Codec.component
DesktopVideoOut.component
DivX 6 Decoder.component
DivX Decoder.component
FCP Uncompressed 422.component
Flip4Mac WMV Advanced.component
Flip4Mac WMV Export.component
Flip4Mac WMV Import.component
LiveType.component
Perian.component
/Library/ScriptingAdditions:
TotalFinder.osax
/Library/StartupItems:
CandelairPrefsTool
GT Network Tuning
HWNetMgr
HWPortDetect
Intego Backup Assistant
NetBarrierKPI
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Frameworks:
.DS_Store
EWSMac.framework
Library/Input Methods:
.localized
Library/InputManagers:
Smart Crash Reports
Library/Internet Plug-Ins:
Picasa.plugin
Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.akamai.client.plist
com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.DAE53B27-78A0-493A-8570-67B A7E208AE0.plist
com.apple.FolderActions.enabled.plist
com.apple.FolderActions.folders.plist
com.google.keystone.agent.plist
com.zeobit.MacKeeper.Helper
Library/PreferencePanes:
AkamaiNetSession.prefPane
Macintosh:~ default$
I am really sorry about the former post.
~k.
No need to apologize. Your Mac is infested with crapware, but that doesn't answer the original question. The least you have to do is uninstall the "MacKeeper" quasi-trojan. To do that, do not follow the developer's instructions. Instead, take the steps given here:
how to uninstall MacKeeper « Phil Stokes
This discussion, however, is not about decrapifying your Mac in general, but about getting rid of one specific error message. Please run the following shell command in Terminal (again, don't retype it):
find / -xdev \( -type f -o -type l \) -name tar -print -exec file -b {} \; 2> /dev/null
Do this in the account where you have the problem. It will take a few minutes to run. Post the output.
Karl,
Using the output that you got from "launchctl list | sed 1d | awk ' !/0x|apple|edu\.|org\./ { print $3 } '"
try unloading each to see when the problem stops.
For example:
launchctl unload ~/Library/LaunchAgents/com.intego.backupassistant.agent.plist
If you're still getting the error message, the re-load
launchctl load ~/Library/LaunchAgents/com.intego.backupassistant.agent.plist
and go on to the next
launchctl unload ~/Library/LaunchAgents/com.intego.commonservices.statusitem.plist
etc.....
The output with an extra line:
/Applications/Fetch.app/Contents/Frameworks/StuffItCore.framework/Versions/Curre nt/Plug-Ins/tar.bundle/Contents/MacOS/tar
Mach-O universal binary with 1 architecture
/Applications/Fetch.app/Contents/Frameworks/StuffItCore.framework/Versions/Curre nt/Plug-Ins/tar.bundle/Contents/MacOS/tar (for architecture i386): Mach-O bundle i386
/Applications/StuffIt 12/StuffIt Expander.app/Contents/Frameworks/StuffItCore.framework/Versions/A/Plug-Ins/tar. bundle/Contents/MacOS/tar
Mach-O universal binary with 2 architectures
/Applications/StuffIt 12/StuffIt Expander.app/Contents/Frameworks/StuffItCore.framework/Versions/A/Plug-Ins/tar. bundle/Contents/MacOS/tar (for architecture ppc): Mach-O bundle ppc
/Applications/StuffIt 12/StuffIt Expander.app/Contents/Frameworks/StuffItCore.framework/Versions/A/Plug-Ins/tar. bundle/Contents/MacOS/tar (for architecture i386): Mach-O bundle i386
/usr/bin/tar
Mach-O executable ppc
Macintosh:~ default$
Along with my simple brain the last entry (/usr/bin/tar) is mostly interesting, or?
(Mackeeper was found obviously in spring on the webpage of a wellknown audio-editing software; I dont know whether I downloaded…
For laughing look at https://discussions.apple.com/thread/3338799?tstart=0 )
~k.
What do you get from this command:
ls -l /usr/bin/tar
Macintosh:~ default$ ls -l /usr/bin/tar
-rwxr-xr-x 2 root wheel 174636 24 Sep 2003 /usr/bin/tar
For some reason, you have a binary from eight years ago where you should have a symbolic link to bsdtar. I am not comfortable with the suggestion that you merely restore the link, because I have no way of knowing what other damage has been done. So what I do suggest is that you delete /usr/bin/tar and then reinstall and re-update Lion by booting from your recovery partition and afterwards running Software Update. Back up all data first.
what is tar
