Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Is this the flashback malware?

Please look at these logs and tell me if these names and addresses look legit. Ever since january 12th I have had lots of problems with my computer. running slow, freezing up, my user permmisions changed, and sleep schedule changed, things like that. So I wiped my hard drive clean and reinstalled Lion using Lion's internet reinstall through the recovery partition and this is the very first few minutes of logs. Also I noticed after the HD wipe that partition still had 3 folders and 2 files and about 250mb of the drive unaccounted for not including the few gigs gone from formatting. pay close attention to the 3rd log a darwin kernel from January 12th and then half way through another log connecting to abidjan africa and then torward the end some wierd connections and like remote keyboard connections. By the way after the reinstall I still have the same problems and they're worse then before. Please help




4/12/12 7:56:39.000 PMbootlogBOOT_TIME 1334282199 0
4/12/12 7:56:40.000 PMkernelPMAP: PCID enabled
4/12/12 7:56:40.000 PMkernelDarwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64
4/12/12 7:56:40.000 PMkernelvm_page_bootstrap: 989369 free pages and 51015 wired pages
4/12/12 7:56:40.000 PMkernelkext submap [0xffffff7f8072f000 - 0xffffff8000000000], kernel text [0xffffff8000200000 - 0xffffff800072f000]
4/12/12 7:56:40.000 PMkernelzone leak detection enabled
4/12/12 7:56:40.000 PMkernelstandard timeslicing quantum is 10000 us
4/12/12 7:56:40.000 PMkernelmig_table_max_displ = 73
4/12/12 7:56:40.000 PMkernelTSC Deadline Timer supported and enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=1 LocalApicId=0 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=2 LocalApicId=2 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=3 LocalApicId=1 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=4 LocalApicId=3 Enabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=5 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=6 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=7 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelAppleACPICPU: ProcessorId=8 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PMkernelcalling mpo_policy_init for TMSafetyNet
4/12/12 7:56:40.000 PMkernelSecurity policy loaded: Safety net for Time Machine (TMSafetyNet)
4/12/12 7:56:40.000 PMkernelcalling mpo_policy_init for Sandbox
4/12/12 7:56:40.000 PMkernelSecurity policy loaded: Seatbelt sandbox policy (Sandbox)
4/12/12 7:56:40.000 PMkernelcalling mpo_policy_init for Quarantine
4/12/12 7:56:40.000 PMkernelSecurity policy loaded: Quarantine policy (Quarantine)
4/12/12 7:56:40.000 PMkernelCopyright (c) 1982, 1986, 1989, 1991, 1993
4/12/12 7:56:40.000 PMkernelThe Regents of the University of California. All rights reserved.
4/12/12 7:56:40.000 PMkernelMAC Framework successfully initialized
4/12/12 7:56:40.000 PMkernelusing 16384 buffer headers and 10240 cluster IO buffer headers
4/12/12 7:56:40.000 PMkernelIOAPIC: Version 0x20 Vectors 64:87
4/12/12 7:56:40.000 PMkernelACPI: System State [S0 S3 S4 S5] (S3)
4/12/12 7:56:40.000 PMkernelPFM64 (36 cpu) 0xf10000000, 0xf0000000
4/12/12 7:56:40.000 PMkernel[ PCI configuration begin ]
4/12/12 7:56:40.000 PMkernelAppleIntelCPUPowerManagement: Turbo Ratios 008B
4/12/12 7:56:40.000 PMkernelAppleIntelCPUPowerManagement: (built 18:56:37 Jan 12 2012) initialization complete
4/12/12 7:56:40.000 PMkernelconsole relocated to 0xf10000000
4/12/12 7:56:40.000 PMkernelPCI configuration changed (bridge=11 device=2 cardbus=0)
4/12/12 7:56:40.000 PMkernel[ PCI configuration end, bridges 8 devices 13 ]
4/12/12 7:56:40.000 PMkernelmbinit: done [64 MB total pool size, (42/21) split]
4/12/12 7:56:40.000 PMkernelPthread support ABORTS when sync kernel primitives misused
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeZlib kmod start
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeDataless kmod start
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeZlib load succeeded
4/12/12 7:56:40.000 PMkernelcom.apple.AppleFSCompressionTypeDataless load succeeded
4/12/12 7:56:40.000 PMkernelAppleIntelCPUPowerManagementClient: ready
4/12/12 7:56:40.000 PMkernelAppleUSBMultitouchDriver::checkStatus - received Status Packet, Payload 2: device was reinitialized
4/12/12 7:56:40.000 PMkernel[IOBluetoothHCIController::setConfigState] calling registerService
4/12/12 7:56:40.000 PMkernelrooting via boot-uuid from /chosen: D117A117-7012-3D6B-8C37-E0FE9BE60C49
4/12/12 7:56:40.000 PMkernelWaiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
4/12/12 7:56:40.000 PMkernelGot boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/SATA@1F,2/AppleIntelPchS eriesAHCI/PRT0@0/IOAHCIDevice@0/AppleAHCIDiskDriver/IOAHCIBlockStorageDevice/IOB lockStorageDriver/APPLE SSD TS128C Media/IOGUIDPartitionScheme/Macintosh HD@2
4/12/12 7:56:40.000 PMkernelBSD root: disk0s2, major 14, minor 2
4/12/12 7:56:40.000 PMkernelKernel is LP64
4/12/12 7:56:40.093 PMcom.apple.launchd*** launchd[1] has started up. ***
4/12/12 7:56:40.506 PMcom.apple.launchd(com.apple.sandboxd) Unknown value for key POSIXSpawnType: Interactive
4/12/12 7:56:40.773 PMfseventsdcould not open <</.fseventsd/fseventsd-uuid>> (No such file or directory)
4/12/12 7:56:40.773 PMfseventsdlog dir: /.fseventsd getting new uuid: BCF35C31-259F-46C6-85DF-204072F1471F
4/12/12 7:56:41.044 PMUserEventAgentstarting CaptiveNetworkSupport as SystemEventAgent built May 25 2011 12:27:35
4/12/12 7:56:41.050 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCCopyWiFiDevices:388 WiFi Device Name == NULL
4/12/12 7:56:42.246 PMcom.apple.SecurityServerSession 100000 created
4/12/12 7:56:42.342 PMcom.apple.SecurityServerEntering service
4/12/12 7:56:42.382 PMconfigdupdateConfiguration(): no preferences.
4/12/12 7:56:42.386 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCCopyWiFiDevices:388 WiFi Device Name == NULL
4/12/12 7:56:42.756 PMUserEventAgentServermgrdRegistration cannot load config data
4/12/12 7:56:42.764 PMUserEventAgentget_backup_share_points no AFP
4/12/12 7:56:44.000 PMkernelBTCOEXIST off
4/12/12 7:56:44.000 PMkernelwl0: Broadcom BCM4353 802.11 Wireless Controller
4/12/12 7:56:44.000 PMkernel5.100.98.75
4/12/12 7:56:45.000 PMkernelPrevious Shutdown Cause: 3
4/12/12 7:56:45.562 PMcom.apple.pfctlNo ALTQ support in kernel
4/12/12 7:56:45.562 PMcom.apple.pfctlALTQ related functions disabled
4/12/12 7:56:45.584 PMcom.apple.ucupdate.plistucupdate: Checked 1 update, no match found.
4/12/12 7:56:45.648 PMcom.apple.launchd(com.apple.bsd.dirhelper) Throttling respawn: Will start in 10 seconds
4/12/12 7:56:45.881 PMsystemkeychaindone file: /var/run/systemkeychaincheck.done
4/12/12 7:56:46.000 PMkernelmacx_swapon SUCCESS
4/12/12 7:56:46.000 PMkernelWaiting for DSMOS...
4/12/12 7:56:46.356 PMUpdateSettingsToolCGSLookupServerRootPort: Failed to look up the port for "com.apple.windowserver.active" (1102)
4/12/12 7:56:47.000 PMkernelDSMOS has arrived
4/12/12 7:56:47.019 PMloginwindowLogin Window Application Started
4/12/12 7:56:47.180 PMmds(Normal) FMW: FMW 0 0
4/12/12 7:56:47.305 PMcom.apple.launchd(com.apple.bsd.dirhelper) Throttling respawn: Will start in 9 seconds
4/12/12 7:56:47.537 PMairportd_processDLILEvent: en0 attached (down)
4/12/12 7:56:47.539 PMUserEventAgentCaptiveNetworkSupport:CreateInterfaceWatchList:2788 WiFi Devices Found. 🙂
4/12/12 7:56:47.539 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.540 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.540 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.540 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.541 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.542 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.548 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.549 PMUserEventAgentCaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.582 PMconfigdNew network configuration saved
4/12/12 7:56:47.594 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.000 PMkernelAirPort_Brcm4331: Ethernet address b8:8d:12:05:cd:30
4/12/12 7:56:47.000 PMkernelIO80211Controller::dataLinkLayerAttachComplete(): adding AppleEFINVRAM notification
4/12/12 7:56:47.000 PMkernelIO80211Interface::efiNVRAMPublished():
4/12/12 7:56:47.000 PMkernelCreated virtif 0xffffff800b0c2400 p2p0
4/12/12 7:56:47.000 PMkernelAirPort: Link Down on en0. Reason 1 (Unspecified).
4/12/12 7:56:47.605 PMconfigdnetwork configuration changed.
4/12/12 7:56:50.019 PMloginwindow**DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
4/12/12 7:56:50.191 PMcom.apple.launchctl.LoginWindowcom.apple.findmymacmessenger: Already loaded
4/12/12 7:56:50.270 PMloginwindowUSER_PROCESS: 52 console
4/12/12 7:56:53.000 PMkernelIOUserEthernetController: Ethernet address b8:8d:12:05:cd:31
4/12/12 7:56:54.767 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:54.767 PMconfigdnetwork configuration changed.
4/12/12 7:56:56.360 PMmDNSRespondermDNSResponder mDNSResponder-320.14.0 (Nov 16 2011 01:16:56) starting OSXVers 11
4/12/12 7:56:56.440 PMcom.apple.usbmuxdusbmuxd-263 on Aug 23 2011 at 00:44:06, running 64 bit
4/12/12 7:56:56.708 PMnetbiosdUnable to start NetBIOS name service:
4/12/12 7:56:56.878 PMcom.apple.SecurityServerSession 100004 created
4/12/12 7:56:56.883 PMSetup AssistantTask1
4/12/12 7:56:56.894 PMSetup AssistantTask2
4/12/12 7:56:56.909 PM[0x0-0x4004].com.apple.SetupAssistant...System identity already exists for domain com.apple.systemdefault. Done.
4/12/12 7:56:56.909 PMSetup Assistantcerttool systemdefault 0
4/12/12 7:56:56.937 PMSetup AssistantAdmin Auth : All clear, SetUpServerConnection now.
4/12/12 7:56:56.960 PMSetup AssistantStarting to discover USB Dongles.
4/12/12 7:56:57.023 PMSetup Assistantupdated network configuration
4/12/12 7:56:57.032 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:57.032 PMconfigdnetwork configuration changed.
4/12/12 7:56:57.041 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:56:57.057 PMSetup AssistantStartListeningForDefaultOutputDeviceChanging
4/12/12 7:56:57.057 PMSetup AssistantStartListeningForHeadphonesGettingPluggedIn
4/12/12 7:56:57.059 PMSetup AssistantsetVolume (34)
4/12/12 7:56:57.059 PMSetup AssistantHeadphones connected (0)
4/12/12 7:56:57.060 PMSetup AssistantmodelUID AppleHDA:98
4/12/12 7:56:57.062 PMSetup AssistantlayoutID 98
4/12/12 7:56:57.062 PMSetup AssistantsetSpeakerVolume
4/12/12 7:56:57.062 PMSetup AssistantTransportType 0 kIOAudioDeviceTransportTypeBuiltIn
4/12/12 7:56:57.062 PMSetup AssistantAudioObjectGetPropertyDataSize kAudioDevicePropertyVolumeDecibels for channel (0) : kAudioHardwareUnknownPropertyError
4/12/12 7:56:57.063 PMSetup AssistantSet volume for channel (1) -5.000000
4/12/12 7:56:57.064 PMSetup AssistantSet volume for channel (2) -5.000000
4/12/12 7:56:57.074 PMSetup AssistantNumberOfKeyboardHIDDevices 1
4/12/12 7:56:57.074 PMSetup AssistantNumberOfPointingHIDDevices 1
4/12/12 7:56:57.088 PMSetup Assistant----------

-> searchForValidSystems has arrived.

4/12/12 7:56:57.184 PMSetup Assistant. Found disk (diskIdentifier=disk0, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.190 PMSetup Assistant. Found disk (diskIdentifier=disk0, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.195 PMSetup Assistant. Found disk (diskIdentifier=disk0s1, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.203 PMSetup Assistant. Found disk (diskIdentifier=disk0s1, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.205 PMWindowServerkCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
4/12/12 7:56:57.209 PMSetup Assistant. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.220 PMSetup Assistant. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.232 PMSetup Assistant. Found disk (diskIdentifier=disk0s3, mountpoint=(null), isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.240 PMSetup Assistant. Found disk (diskIdentifier=disk0s3, mountpoint=(null), isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.250 PMSetup Assistant. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.852 PMgenatsdb*GENATSDB* FontObjects generated = 324
4/12/12 7:57:01.832 PMconfigdnetwork configuration changed.
4/12/12 7:57:01.834 PMconfigdnetwork configuration changed.
4/12/12 7:57:01.840 PMmDNSResponderD2D_IPC: Loaded
4/12/12 7:57:01.840 PMmDNSResponderD2DInitialize succeeded
4/12/12 7:57:01.858 PMSetup Assistant(Snoop) Listening on 14 / 221473790
4/12/12 7:57:13.845 PMSetup AssistantStopped VOT 0
4/12/12 7:57:13.880 PMSetup AssistantIntlSetValue(0, "AppleDateResID", 0) returned 0
4/12/12 7:57:13.882 PMSetup AssistantIntlSetValue(0, "AppleTimeResID", 0) returned 0
4/12/12 7:57:13.884 PMSetup AssistantIntlSetValue(0, "AppleNumberResID", 0) returned 0
4/12/12 7:57:13.886 PMSetup AssistantSMSizeFormatter : using `en_US'
4/12/12 7:57:13.886 PMSetup AssistantSMSizeFormatter : using `en_US'
4/12/12 7:57:13.886 PMSetup AssistantSMSizeFormatter : using `en_US'
4/12/12 7:57:13.906 PMSetup AssistantCurrent Iso LC = en, en
4/12/12 7:57:14.060 PMSetup AssistantTime to move from MBIntroCountry (Intro_Country) to MBRegisterKeyboard (Reg_Keyboard) was 0.215037s
4/12/12 7:57:17.486 PMSetup AssistantsetAsciiLayout currentInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.486 PMSetup AssistantcurrentSourceIsKBLayout
4/12/12 7:57:17.486 PMSetup AssistantisAsciiCapable
4/12/12 7:57:17.486 PMSetup AssistantdefaultAsciiKBLayout <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.486 PMSetup AssistantcurrentAsciiInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.487 PMSetup AssistantTISSetDefaultAsciiCapableKeyboardLayoutInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.489 PMSetup AssistantTISEnableInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.489 PMSetup AssistantTSMSetCurrentAsciiCapableInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.515 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:57:20.280 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:57:20.427 PMSetup AssistantTime to move from MBRegisterKeyboard (Reg_Keyboard) to MBWirelessPickNetwork (Wireless_Pick_Network) was 2.974510s
4/12/12 7:57:21.000 PMkernelen0: 802.11d country code set to 'US'.
4/12/12 7:57:21.000 PMkernelen0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 149 153 157 161 165
4/12/12 7:57:39.137 PMrpcsvchostsandbox_init: com.apple.msrpc.netlogon.sb succeeded
4/12/12 7:58:15.924 PMwarmd[warmctl_evt_timer_bc_activation_timeout:260] BC activation bcstop timer fired!
4/12/12 7:58:45.808 PMcom.apple.launchd(com.apple.xprotectupdater[35]) Exited with code: 255
4/12/12 7:59:50.279 PMhelpdCarbonCore.framework, Our status with coreservicesd is unusual, 2, and things likely will stop working.
4/12/12 7:59:50.279 PMhelpdCarbonCore.framework: Unable to connect to coreservicesd. Things likely won't work. Sorry.
4/12/12 8:02:53.288 PMSetup AssistantconfigureWithSettings: {

Connection = Wireless;

WirelessNetwork = LasVegas71;

}

4/12/12 8:02:53.297 PMSetup Assistantno TCPConfigureMethod specified, assuming DHCP
4/12/12 8:02:53.000 PMkernelMacAuthEvent en0 Auth result for: e0:91:f5:09:84:8e MAC AUTH succeeded
4/12/12 8:02:53.000 PMkernelwlEvent: en0 en0 Link UP
4/12/12 8:02:53.000 PMkernelAirPort: Link Up on en0
4/12/12 8:02:53.000 PMkernelen0: BSSID changed to e0:91:f5:09:84:8e
4/12/12 8:02:53.915 PMairportd_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:02:54.000 PMkernelAirPort: RSN handshake complete on en0
4/12/12 8:02:56.326 PMconfigdnetwork configuration changed.
4/12/12 8:02:56.345 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - Probe
4/12/12 8:02:56.345 PMUserEventAgentCaptiveNetworkSupport:CNSPreferences:60 Creating new preferences
4/12/12 8:02:56.346 PMUserEventAgentCaptiveNetworkSupport:CaptiveStartDetect:2343 Bypassing probe on LasVegas71 because it is protected and not on the exception list
4/12/12 8:02:56.349 PMUserEventAgentCaptiveNetworkSupport:CaptivePublishState:1211 en0 - Unknown
4/12/12 8:02:56.350 PMconfigdnetwork configuration changed.
4/12/12 8:02:57.932 PMSetup AssistantSCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 8:02:58.114 PMSetup AssistantTime to move from MBWirelessPickNetwork (Wireless_Pick_Network) to MBMigrateYN (migrationui) was 0.169636s
4/12/12 8:06:41.445 PMSetup AssistantTime to move from MBMigrateYN (migrationui) to MBRegisterAppleID (Reg_Apple_ID) was 0.096014s
4/12/12 8:07:03.791 PMcom.apple.kextcacheCreated prelinked kernel /System/Library/Caches/com.apple.kext.caches/Startup/kernelcache.
4/12/12 8:08:57.537 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:08:57.535 findNames[180:707] Database file is missing: /var/root/Library/Application Support/AddressBook/AddressBook-v22.abcddb
4/12/12 8:09:02.694 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:09:02.692 AddressBookSync[181:1f03] Error, could not create MachMessagePort for com.apple.AddressBook.abd
4/12/12 8:09:22.332 PMSetup AssistantReceived 761 bytes of data
4/12/12 8:09:22.332 PMSetup AssistantNo Error in responseDictionary
4/12/12 8:09:22.576 PMSetup AssistantTime to move from MBRegisterAppleID (Reg_Apple_ID) to MBRegisterUserInfo (Reg_United_States) was 0.101399s
4/12/12 8:09:27.973 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:09:27.971 AddressBookSync[181:707] [0x10831b320] |ISyncManager|Warning| SyncServer is unavailable: timed out trying to connect
4/12/12 8:09:27.974 PM[0x0-0x6006].com.apple.AppleSpell2012-04-12 19:09:27.973 AddressBookSync[181:707] AddressBookSync (client id: com.apple.AddressBook) error: Exception running AddressBookSync: Timed out waiting for the sync server
4/12/12 8:09:37.652 PM[0x0-0x4004].com.apple.SetupAssistant...System identity already exists for domain com.apple.systemdefault. Done.
4/12/12 8:09:37.652 PMSetup Assistantcerttool systemdefault 0
4/12/12 8:09:37.652 PMSetup AssistantThere is an existing Kerberos realm, [NOT] running configureLocalKDC.
4/12/12 8:09:37.654 PMSetup Assistantsearch paths: (

"/Local/Default"

)

4/12/12 8:09:37.753 PMSetup AssistantTime to move from MBRegisterUserInfo (Reg_United_States) to MBRegisterLocalAccount (Reg_Local_Account) was 0.147491s
4/12/12 8:10:22.498 PMSetup AssistantuniqueInParent:1 uniqueLocal:1
4/12/12 8:10:22.504 PMSetup AssistantuniqueInParent:1 uniqueLocal:1
4/12/12 8:10:24.677 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.681 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.684 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.688 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.692 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.695 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.699 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.702 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.707 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.711 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.715 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.720 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.724 PMUserEventAgentget_backup_share_points no AFP
4/12/12 8:10:24.779 PMSetup Assistantcreating loginKeychain for: David
4/12/12 8:10:24.818 PMSetup AssistantKeychain ON.
4/12/12 8:10:24.835 PMSetup AssistantAppleID Identity Linked: dbingham7@yahoo.com
4/12/12 8:10:24.835 PMSetup Assistant_CSAddAppleIDAccount Failed with error: -11
4/12/12 8:10:24.972 PMSetup AssistantAppleIDReset Enabled: dbingham7@yahoo.com
4/12/12 8:10:24.982 PMSetup Assistant/usr/sbin/locsetup does not exist [-country US -language en]
4/12/12 8:10:25.036 PMSetup AssistantNo username or no password
4/12/12 8:10:25.040 PMSetup Assistantcreating loginKeychain for: David
4/12/12 8:10:25.046 PMconfigdsetting hostname to "Davids-MacBook-Air.local"
4/12/12 8:10:25.078 PMSetup Assistant.Mac cert config scheduled
4/12/12 8:10:25.141 PMmDNSResponderUser updated Computer Name from “MacBookAir-B88D1205CD30” to “David’s MacBook Air”
4/12/12 8:10:25.141 PMmDNSResponderUser updated Local Hostname from “MacBookAir-B88D1205CD30” to “Davids-MacBook-Air”
4/12/12 8:10:26.078 PMSetup Assistant*********** _hadleNotification MBActivityBeganNotification
4/12/12 8:10:26.078 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.170 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.220 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.583 PMSetup AssistantReceived 234 bytes of data
4/12/12 8:10:26.584 PMSetup AssistantMBAppleRegTransaction: No Error in responseDictionary.
4/12/12 8:10:26.584 PMSetup AssistantGMTTime Fri, 13 Apr 2012 02:10:26 GMT
4/12/12 8:10:26.946 PM[0x0-0x4004].com.apple.SetupAssistantOffset: 0
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistantnames with offset: (
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Abidjan",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Accra",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Bamako",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Banjul",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Bissau",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Casablanca",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Conakry",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Dakar",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/El_Aaiun",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Freetown",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Lome",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Monrovia",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Nouakchott",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Ouagadougou",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Africa/Sao_Tome",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "America/Danmarkshavn",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "America/Scoresbysund",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Atlantic/Azores",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Atlantic/Reykjavik",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant "Atlantic/St_Helena",
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant GMT
4/12/12 8:10:26.963 PM[0x0-0x4004].com.apple.SetupAssistant)
4/12/12 8:10:27.028 PM[0x0-0x4004].com.apple.SetupAssistantCity found: "Abidjan - Côte d’Ivoire"
4/12/12 8:10:27.028 PM[0x0-0x4004].com.apple.SetupAssistantSelection in progress...
4/12/12 8:10:27.064 PM[0x0-0x4004].com.apple.SetupAssistantDONE - result: 0 (SUCCESS)
4/12/12 8:10:27.078 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:27.157 PMSetup Assistantzset (

"--osx",

"--verbose",

"--offset",

0

) : terminated with 0

4/12/12 8:10:27.163 PMSetup Assistant_setNTPServer Africa/Abidjan (GMT) offset 0 0
4/12/12 8:10:27.164 PMSetup AssistantGMTOffset -600 (-21600.000000 seconds)
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantCity: Orem
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantCountry: US
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantRegion: UT
4/12/12 8:10:27.208 PM[0x0-0x4004].com.apple.SetupAssistantReset to default: YES
4/12/12 8:10:27.538 PMntpdproto: precision = 1.000 usec
4/12/12 8:10:27.647 PM[0x0-0x4004].com.apple.SetupAssistantCity found: "Orem, UT - United States"
4/12/12 8:10:27.647 PM[0x0-0x4004].com.apple.SetupAssistantSelection in progress...
4/12/12 8:10:27.737 PM[0x0-0x4004].com.apple.SetupAssistantDONE - result: 0 (SUCCESS)
4/12/12 8:10:27.754 PMdiskmanagementdDM ->T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: inHostDiskUDS=0x10cd0ec20=disk0s2=Macintosh HD inWhatStr=RecoveryInfoBaseSystemVersion
4/12/12 8:10:27.800 PMSetup Assistantzset (

"--osx",

"--verbose",

"--country",

US,

"--region",

UT,

"--city",

Orem,

"--adaptive"

) : terminated with 0

4/12/12 8:10:27.801 PMSetup Assistant_setNTPServer America/Denver (MDT) offset -21600 (Daylight) 0
4/12/12 8:10:27.982 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did get booterRecoveryUDS=0x10cd0eae0=disk0s3=Recovery HD
4/12/12 8:10:28.016 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did mount nobrowse; MP=/Volumes/Recovery HD OMS=0x10c91b5c0
4/12/12 8:10:28.016 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: getting dict from file=/Volumes/Recovery HD/com.apple.recovery.boot/SystemVersion.plist
4/12/12 8:10:28.017 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: got dict (or NULL=will return err): oooInfoDict=0x7fba92a00c70
4/12/12 8:10:28.019 PMSetup Assistant. Found disk (diskIdentifier=disk0s3, mountpoint=/Volumes/Recovery HD, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 8:10:28.065 PMfseventsdLogging disabled completely for device:1: /Volumes/Recovery HD
4/12/12 8:10:28.110 PMSetup Assistant*********** _hadleNotification MBActivityDidSucceedNotification
4/12/12 8:10:28.115 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:28.118 PMdiskmanagementdDM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did if-needed-best-effort unmount
4/12/12 8:10:28.118 PMdiskmanagementdDM <-T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: retErr=0 outInfoDict={

ProductBuildVersion = 11D50;

ProductCopyright = "1983-2012 Apple Inc.";

ProductName = "Mac OS X";

ProductUserVisibleVersion = "10.7.3";

ProductVersion = "10.7.3";

}

4/12/12 8:10:28.499 PMSetup AssistantReceived 309 bytes of data
4/12/12 8:10:28.499 PMSetup AssistantfirstPage is not html
4/12/12 8:10:34.529 PMSetup Assistant*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:34.579 PMSetup Assistant*********** _hadleNotification MBActivityDidFailNotification
4/12/12 8:10:35.065 PMSetup AssistantTime to move from MBChooseHasCameraOrNot (Reg__HasCameraOrNot) to MBRegisterAccountPicture (Reg_Account_Picture) was 0.484633s
4/12/12 8:10:35.065 PMSetup Assistant*********** _hadleNotification MBActivityEndedNotification
4/12/12 8:10:53.000 PMkernelMacAuthEvent en0 Auth result for: e0:91:f5:09:84:8e MAC AUTH succeeded
4/12/12 8:10:53.000 PMkernelwlEvent: en0 en0 Link UP
4/12/12 8:10:53.000 PMkernelAirPort: RSN handshake complete on en0
4/12/12 8:10:54.000 PMkernelen0: BSSID changed to e0:91:f5:09:84:8e
4/12/12 8:11:19.779 PMSetup AssistantTime to move from MBRegisterAccountPicture (Reg_Account_Picture) to MBFinishGestureTrap (Configured_And_Sent) was 0.598393s
4/12/12 8:11:23.814 PM[0x0-0x4004].com.apple.SetupAssistantFound USB Ethernet Device named = IOEthernetInterface
4/12/12 8:11:23.814 PM[0x0-0x4004].com.apple.SetupAssistantFound USB Ethernet Device named = AirPort_Brcm4331_Interface
4/12/12 8:11:23.814 PM[0x0-0x4004].com.apple.SetupAssistantFound USB Ethernet Device named = AirPort_Brcm4331_Interface
4/12/12 8:11:23.922 PMloginwindowDEAD_PROCESS: 52 console
4/12/12 8:11:24.976 PMloginwindowLogin Window Application Started
4/12/12 8:11:24.985 PMloginwindow**DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
4/12/12 8:11:25.058 PMcom.apple.launchctl.LoginWindowcom.apple.findmymacmessenger: Already loaded
4/12/12 8:11:25.093 PMcom.apple.SecurityServerSession 100009 created
4/12/12 8:11:25.095 PMloginwindowLogin Window Started Security Agent
4/12/12 8:11:25.133 PMairportd_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:11:25.196 PMSecurityAgentEcho enabled
4/12/12 8:11:25.196 PMSecurityAgentEcho enabled
4/12/12 8:11:25.918 PMcom.apple.loginwindowCan't find file://localhost/Users/David/Library/Preferences/com.apple.finder.plist
4/12/12 8:11:25.918 PMcom.apple.loginwindowPre-generating cache file for user 501
4/12/12 8:11:25.918 PMcom.apple.loginwindowHome: /Users/David
4/12/12 8:11:25.918 PMcom.apple.loginwindowCache folder: /var/folders/y1/xy4qjyrj7k1d8982jk1nhyd80000gn/C/com.apple.QuickLook.thumbnailc ache
4/12/12 8:11:25.918 PMcom.apple.loginwindowNo thumbnails found
4/12/12 8:11:30.604 PMSecurityAgentUser info context values set for David
4/12/12 8:11:30.604 PMSecurityAgentUser info context values set for David
4/12/12 8:11:30.728 PMSecurityAgentLogin Window login proceeding
4/12/12 8:11:30.728 PMSecurityAgentLogin Window login proceeding
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | name = David, path = /Users/David, homeLoc = (null)
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter setNeedsToUnmountDirVolumeAtLogout:] | mounter calling mechanism to setNeedsToUnmountDirVolumeAtLogout to 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | urlAttribute = null
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | homeDirPath did NOT follow a symlink, keeping original path of: /Users/David
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | homeDirMajorType = 1
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountStandardDirectoryForUser:atPath:attributes:] | name = David, path = /Users/David, homeLoc = (null)
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism isGuestAccount] | enter
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism isGuestAccount] | Guest account check returning 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter setHomeDirType:] | setHomeDirType to 1
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountStandardDirectoryForUser:atPath:attributes:] | returning 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | returning 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism invoke] | mountHomeDirectoryForUser returns 0
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism updateAndUnlockKeychain] | updateAndUnlockKeychain
4/12/12 8:11:30.740 PMauthorizationhostDEBUGLOG | -[HomeDirMechanism launchHomeDirFixerToolIfNeeded:] | launchHomeDirFixerToolIfNeeded called with 0
4/12/12 8:11:30.983 PMloginwindowLogin Window - Returned from Security Agent
4/12/12 8:11:30.990 PMloginwindowUSER_PROCESS: 242 console
4/12/12 8:11:31.027 PMairportd_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:11:31.050 PMcom.apple.launchd.peruser.501(com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
4/12/12 8:11:31.053 PMcom.apple.launchctl.Aquaload: option requires an argument -- D
4/12/12 8:11:31.053 PMcom.apple.launchctl.Aquausage: launchctl load [-wF] [-D <user|local|network|system|all>] paths...
4/12/12 8:11:31.161 PMcom.apple.launchd.peruser.501(com.apple.launchctl.Aqua[266]) Exited with code: 1
4/12/12 8:11:31.390 PMMiniLauncherLaunching iCloud prefs for user 501
4/12/12 8:11:31.517 PMMiniLauncherLaunch IncompatibleAppDisplay.app (1)
4/12/12 8:11:31.533 PMUserEventAgentCaptiveNetworkSupport:CNSServerRegisterUserAgent:187 new user agent port: 25875
4/12/12 8:11:32.818 PMSystem PreferencesDatabase file is missing: /Users/David/Library/Application Support/AddressBook/AddressBook-v22.abcddb
4/12/12 8:11:32.897 PMDockBookmark failed to issue extension for item /Developer/Applications (depth=1): No such file or directory
4/12/12 8:11:32.928 PMcom.apple.launchd.peruser.501(com.apple.CSConfigDotMacCert-dbingham7@me.com-SharedServices[308]) Exited with code: 1
4/12/12 8:11:32.969 PMcoreservicesd*** process 28 exceeded 500 log message per second limit - remaining messages this second discarded ***
4/12/12 8:11:33.464 PMSystem PreferencesCould not find Meta Data for persistent Store
4/12/12 8:11:33.788 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extra2012-04-12 20:11:33.577 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extra2012-04-12 20:11:33.789 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.792 PMcom.apple.dock.extra2012-04-12 20:11:33.791 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.792 PMcom.apple.dock.extraCould not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.793 PMcom.apple.dock.extra2012-04-12 20:11:33.792 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.829 PMSystem PreferencesThe IAAccountDiscovery completed notification
4/12/12 8:11:33.977 PMSystem PreferenceskCGErrorIllegalArgument: CGSDeviceCreate: Invalid window
4/12/12 8:11:33.977 PMSystem PreferenceskCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
4/12/12 8:11:33.977 PMSystem PreferencesFailed to create window context device
4/12/12 8:11:33.978 PMSystem PreferencesCGWindowContextCreate: failed to create window context delegate.
4/12/12 8:11:33.978 PMSystem Preferences_initWithWindowNumber: error creating graphics ctxt object for ctxt:0x9a03, window:0x0
4/12/12 8:11:33.978 PMSystem PreferencesCGPixelAccessLock failed!
4/12/12 8:11:33.979 PM[0x0-0x11011].com.apple.systempreferencesApr 12 20:11:33 Davids-MacBook-Air.local System Preferences[285] <Error>: Failed to create window context device
4/12/12 8:11:33.979 PM[0x0-0x11011].com.apple.systempreferencesApr 12 20:11:33 Davids-MacBook-Air.local System Preferences[285] <Error>: CGWindowContextCreate: failed to create window context delegate.
4/12/12 8:11:35.060 PMgenatsdb*GENATSDB* FontObjects generated = 324
4/12/12 8:11:49.294 PMauthorizationhostSFBuiltinEntitled: System Preferences.app is not entitled for system.preferences.security.remotepair
4/12/12 8:11:49.567 PMcoreservicesd*** process 28 exceeded 500 log message per second limit - remaining messages this second discarded ***
4/12/12 8:11:50.750 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x10f627000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:12:31.366 PMcom.apple.SecurityServerSession 100007 created
4/12/12 8:12:42.011 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x11084f000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:13:35.534 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:14:32.734 PMhelpdCarbonCore.framework, Our status with coreservicesd is unusual, 2, and things likely will stop working.
4/12/12 8:14:32.734 PMhelpdCarbonCore.framework: Unable to connect to coreservicesd. Things likely won't work. Sorry.
4/12/12 8:14:40.049 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:15:24.095 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:15:36.170 PMFirewallStealth Mode connection attempt to UDP 192.168.1.47:61447 from 192.168.1.1:53
4/12/12 8:16:09.963 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:16:51.859 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x117812000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:16:55.839 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:17:14.307 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x1109c9000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:17:44.585 PMFirewallDeny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:18:48.322 PM[0x0-0x11011].com.apple.systempreferencesSystem Preferences(285,0x110fcf000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:18:58.899 PMrpcsvchostsandbox_init: com.apple.msrpc.netlogon.sb succeeded
4/12/12 8:18:58.940 PMFirewallDeny netbiosd data in from 192.168.1.47:137 to port 137 proto=17
4/12/12 8:18:58.987 PMFirewallDeny netbio

Posted on Apr 13, 2012 10:17 AM

Reply
Question marked as Best reply

Posted on Apr 13, 2012 10:20 AM

This thread took me an hour to get started. Updated info I now know it is malware I know where its located I just dont know how to delete it.

32 replies

Apr 13, 2012 10:36 AM in response to dbingham7

also 2 thumb drives and an older macbook that were pluged into to my macbook air have the same hidden files and wont let you do disk permmisions repair and wont do secure delete the two thumbdrives wont even reformat and they all have 3 folders and 2 files and 220mb unaccounted for thats not from formatting and not the recovery partition

Apr 13, 2012 10:48 AM in response to dbingham7

None of this sounds remotely unusual. I'm not sure why you're looking in that cache folder, but there is no malware I'm aware of that puts anything there. Certainly not Flashback. You can only do disk permissions repair on drives that have a system installed on them, because it only repairs system files. I'm not sure what's going on with the flash drives, but that has nothing to do with malware.

Apr 13, 2012 11:16 AM in response to Andreasapple

Ive tried that but when Im logged in I dont have all the permmisions I should have so it just runs the test for my usernames own little virtual world. Ive been using macs for over a decade now and I have never had my computer do anything like this. while sitting in front of my screen I watched the mouse go to some personal files and change the permissions and then covered their tracks by changing the timestamp on the file dates back. I watched it happpen while all internet conections were off. I had my identity stolen, my facebook password changed, my email accounts closed out. and my firmware password changed all within two weeks of the origninal boot date

Apr 13, 2012 11:31 AM in response to dbingham7

Last login: Fri Apr 13 10:39:32 on console

Davids-MacBook-Air:~ David$ defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

2012-04-13 12:03:56.914 defaults[538:707]

The domain/default pair of (/Users/David/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist

Davids-MacBook-Air:~ David$

Davids-MacBook-Air:~ David$


when I open the boot file I was talking about earlier my terminal opened up on its own and displayed one of the tests I ran earlier but now it showed the 12:03 date with defaults 538 707

Is this the flashback malware?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.