Socorro-Mac
Level 1 (4 points)
Mac OS X

Q: Help for iMac updates

Hello folks! After one year w/out internet; first thing I did was try to update my computer. It didn't work just using the automatic bar key. I then went to Apple site (https): download area and did it manually for the security package.  It worked: my buid now is 9L31a (for Leopard X5.8) The problems is that now I have problems to watch videos: it keeps asking me for Adobe Flash Player. Meanwhile, I keep getting the same software update over and over again: FlashBackRemovalUpdate. I read about sth on the subject of flash prblms and followed the instructions to see if I were infectected by using terminal: no problms. Everyth was apparently all right. I dind't even need to remove anything, but the Automatic Update did it by itself, but I don't get the link to download the good one furnished by Apple.Does anybody know it?  1b) I saw My firewall allows "Java Preferences.app" - though it blocket iTunes and real Player. Should I leave it this way?

 

2) I tried Disk utility. before updating mannually and got the info that some permissions are incorrect and could not be repaired. What sould I do?

iMac, Mac OS X (10.5.8)

Posted on Jul 22, 2012 10:30 AM

by Socorro-Mac,Solvedanswer
Socorro-Mac Socorro-Mac
Level 1 (4 points)
Mac OS X
A:

First of all, than you so much 4 ALL yr help. 2nd, sorry 4 my low knowledge and inexperience in this community. Tehn, clearing up again, When I say upperbar, I ean this that u wrote: "  -> System Preferences -> Software Updates" There is where I keep getting over and over again the same update already installed: Remove.... And now I've just repeated (to follow yr instructions ) and I got it again + another prblm: once again an iTunes update 4 Lion. Shouldn't it know by itself my system is not Lion?

Now, answering yr qstions: No, I did NOT find  "com.apple.pkg.FlashBackRemovalUpdate.bom" in the folder you said. I attached the image.

2) Yes, u're right abt the window 4 permission. Next time I allow it. Thx !  3) fo the Login - I got it and solved th problem. Now evrth is off. Thx again to you and another reading 4) Thax 4 the computername:  you explain things so well. Are you a teacher?

 

5) Concerning physical access.... well,... Why NO internet 4 a year?? --> cz  I had been broken in by "someone (from university community) who had material access to my machine and network provider ". How can I know I'm definitely rid of it/him/them?   I did not re-install the machine cause I wanted to track him; so, I moved away and changed the provider. is it enoughly safe to surf?

- Thank you so much for all help.

Posted on Jul 22, 2012 3:10 PM

Close
Socorro-Mac

Q: Help for iMac updates

  • All replies
  • Helpful answers

Previous Page 2 of 3 last Next

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 25, 2012 3:27 PM in response to Socorro-Mac
    Level 1 (4 points)
    Mac OS X
    Jul 25, 2012 3:27 PM in response to Socorro-Mac

    Hi Bad Mac, here it follows what you asked:  A lot of reading...

     

    <Edited by Host>

  • by MadMacs0,

    MadMacs0 MadMacs0 Jul 25, 2012 3:28 PM in response to Socorro-Mac
    Level 5 (4,801 points)
    Jul 25, 2012 3:28 PM in response to Socorro-Mac

    I was only looking for the entries where repair failed.

     

    Part of the delay in getting back to you was that I wanted to run Permission Repairs on my setup to see if I got the same errors, which I did not.

     

    In looking at those two files on my system using the Terminal app I have the following results:

    -r-sr-xr-x   1 root      wheel    46864 Mar 30  2011 authopen

    -r-sr-xr-x   1 root      wheel    43280 Mar 30  2011 load_hdi

    That probably doesn't mean much to you but it tells me the files belong to the root user and the wheel group, not unexpected for system files. The numbers are the file size in bytes followed by the creation date 6/30/11. The leading letters indicate that the file is read (r) and execute (s or x) by root, wheel and everybody. Nobody has write (w) access to either file.

     

    To see this information on your hard drive, launch the Terminal app (found in /Applications/Utilities/), copy and paste:

         ls -lA /usr/libexec/

    followed by the return key, then compare your results.

     

    I checked to see when they should have been updated last and it appears that both files were replaced by

    SecUpd2011-004.  If you didn't have any other issues, this could probably be fixed by reinstalling the update.

     

    But unfortunately, you also have at least one corrupt .plist and a corrupt catalog which Disk Utility cannot repair. The catalog repair must be your first priority. There may be a third party utility that can repair it. DiskWarrior is the most successful at doing this in my experience. Drive Genius has saved me once when DW could not. These are expensive investments, especially if they don't work. A cheaper solution would be to copy everything on the drive to an external, reformat the drive and copy eveything back. This cannot be a clone copy as the directory is damaged, so it would have to be a file copy.  Carbon Copy Cloner and SuperDuper! both have options which allow you to create a non-cloned backup.

     

    But you also need to consider the possibility that your hard drive is failing and needs to be replaced. Disk Utility will not necessarily be able to warn you, although it does conduct a first order S.M.A.R.T. test readout. Modern hard drives give very little early warning so you need to take action now if you value anything on it. That starts with having a reliable backup. Again, you won't be able to clone your hard drive until the directory damage is repaired or the drive replaced.

     

    After you have backed up all your critical files, install the OS from your original DVD's. Run Software Update until it says there is nothing more you need. Install all third party applications from a trusted source. Then restore your files from backup.

     

    Good luck.

     

    <Edited by Host>

  • by MadMacs0,

    MadMacs0 MadMacs0 Jul 24, 2012 12:19 AM in response to Socorro-Mac
    Level 5 (4,801 points)
    Jul 24, 2012 12:19 AM in response to Socorro-Mac

    I think I may have figured out why your Permissions check failed on those two files.

     

    Disk Utility uses the information in /Library/Receipts/boms/ to figure out what the permissions should be.  I suspect you installed SecUpd2011-004 but it didn't leave a receipt so it doesn't know what those premissions should be.

     

    See if you have /Library/Receipts/boms/com.apple.pkg.update.security.2011.004.leopard.bom?

     

    If not, that means you've had this problem with Software Update for over a year.

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 24, 2012 7:36 AM in response to MadMacs0
    Level 1 (4 points)
    Mac OS X
    Jul 24, 2012 7:36 AM in response to MadMacs0

    Hi MadMac!

    Thank you so much. I´m not home now, but I´ll do exactely as you advised me. Then, if I have any doubts can I ask again or would it be too much? I don´t want to be so abusive, but you have been so much helpful. I understand evrth you say clearly.

    ´t know why I can´t see the judging button today, but you really helped me a lot!

    Thank you very much!

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 24, 2012 7:09 PM in response to Socorro-Mac
    Level 1 (4 points)
    Mac OS X
    Jul 24, 2012 7:09 PM in response to Socorro-Mac

    I sent you what you asked, but How can I erase all this info abt my mac?

  • by MadMacs0,

    MadMacs0 MadMacs0 Jul 24, 2012 11:42 PM in response to Socorro-Mac
    Level 5 (4,801 points)
    Jul 24, 2012 11:42 PM in response to Socorro-Mac

    Socorro-Mac wrote:

     

    How can I erase all this info abt my mac?

    You can't. You get about 15 minutes after you post something to edit it and after that it stays.

     

    I believe I went over everything you posted here and I don't see any personal information whatsoever. Thousands of users here have posted much more than you have. If you can identify anything in particular that you need to have removed I can try and convince a host to do it for you, but I'm pretty sure there is nothing that could ever be improperly used here.

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 25, 2012 2:57 PM in response to MadMacs0
    Level 1 (4 points)
    Mac OS X
    Jul 25, 2012 2:57 PM in response to MadMacs0

    If you you can help me erase the info about my computer, I'd really be thankful forever. This has been too much visited. And also the other discussion whc has even the nome of my ... How could I help you back? Do you need any help  in French? Portuguese? Philosophy? Brazil?

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 25, 2012 3:29 PM in response to MadMacs0
    Level 1 (4 points)
    Mac OS X
    Jul 25, 2012 3:29 PM in response to MadMacs0

    Actually I guess I installed the last one 2012 which takes in charge the others. As I had said first of the coputer remained off line for over a year. First thing I did when reconnected it was to look for security updates.

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 25, 2012 4:20 PM in response to MadMacs0
    Level 1 (4 points)
    Mac OS X
    Jul 25, 2012 4:20 PM in response to MadMacs0

    Hi Mad Mac0 - I've already found a Moderator who edited the discussions taking off the over exposure. Thx

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 25, 2012 5:00 PM in response to MadMacs0
    Level 1 (4 points)
    Mac OS X
    Jul 25, 2012 5:00 PM in response to MadMacs0

    Hi Mad Mac!  I decided to redo things. 1) I did not find the software lock. I found the  softwareupdates.plist; I droped it to the desktop, I got a txt file, when I opened it and I got a black backgroud window :

     

     

    with the text: -

    bplist00Ô]AnonymousUUID_LastAttemptDate_LastSuccessfulDate^LastResultCode_$421E7 4F4-7403-4AB5-93D1-5028308C26CD3AµÀ·DYvŠ1FU|…‡

     

    - which, of course, I did not understand.

     

    2) The i AV prgrms I had ( ) found NO virus or trojans ; MacScan found some tracking cookies and 5 spywares, but I don't know what it did to it (I'm runnning the trying version). I downloaded ClamXav, but it didnt find anything, as far as I know; though it mentions quarentine in the log file. See below:

     

    2012-07-22 22:43:40.786 ClamXavSentry[1943:20b] clamd not running. Now trying to launch it...

    2012-07-22 22:43:46.323 ClamXavSentry[1943:20b] clamd launched successfully.  Continuing...

    2012-07-22 22:43:46.351 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:04:49.316 ClamXavSentry[1943:20b] restartWatcher

    2012-07-23 01:04:49.326 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:04:49.328 ClamXavSentry[1943:602b] termination status = 15

    2012-07-23 01:04:49.364 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:09:10.718 ClamXavSentry[1943:20b] restartWatcher

    2012-07-23 01:09:10.729 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:09:10.731 ClamXavSentry[1943:300f] termination status = 15

    2012-07-23 01:09:10.840 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:09:55.035 ClamXavSentry[1943:20b] restartWatcher

    2012-07-23 01:09:55.053 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:09:55.054 ClamXavSentry[1943:644b] termination status = 15

    2012-07-23 01:09:55.402 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:12:46.731 ClamXavSentry[1943:20b] The volume /Volumes/ClamXav was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 01:12:48 /Volumes/ClamXav/.Trashes: lstat() failed: Permission denied. ERROR

    2012-07-23 01:12:49 /Volumes/ClamXav/.DocumentRevisions-V100: lstat() failed: Permission denied. ERROR

    2012-07-23 01:12:52 Total errors: 2

    2012-07-23 01:13:09.278 ClamXavSentry[1943:20b] The volume /Volumes/ClamXav was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 01:13:10 /Volumes/ClamXav/.Trashes: lstat() failed: Permission denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/.DocumentRevisions-V100: lstat() failed: Permission denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/ClamXav.app/Contents/Resources/ko.lproj/PrefsWindow.nib: Access denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/ClamXav.app/Contents/Resources/ko.lproj/ServicesMenu.strings: Access denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/ClamXav.app/Contents/Resources/Spanish.lproj: lstat() failed: No such file or directory. ERROR

    2012-07-23 01:13:11 Total errors: 5

    The file /var/root/Library/Logs/ClamXavSentry-scan.log does not exist.

    2012-07-23 01:46:44.874 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:46:44.875 ClamXavSentry[1943:65b7] termination status = 15

    2012-07-23 07:10:56.770 ClamXavSentry[3711:20b] scan email files

    2012-07-23 08:42:43.325 ClamXavSentry[3711:20b] We're currently watching for changes, so stop and then register to know when we wake up again

    2012-07-23 08:42:43.357 ClamXavSentry[3711:20b] attempting to terminate gfslogger

    2012-07-23 08:42:43.359 ClamXavSentry[3711:320b] termination status = 15

    2012-07-23 08:42:43.364 ClamXavSentry[3711:20b] Nighty night!

    2012-07-23 14:34:56.919 ClamXavSentry[3711:20b] Wakey wakey!

    2012-07-23 14:34:58.471 ClamXavSentry[3711:20b] scan email files

    2012-07-23 17:42:10.054 ClamXavSentry[3711:20b] The volume /Volumes/Flashback Removal Security Update was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 17:42:24 /Volumes/Flashback Removal Security Update: OK

    2012-07-23 17:48:02.987 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:09:46.521 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:10:26.998 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:11:26.982 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:11:46.983 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:12:37.442 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:15:37.153 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:15:57.220 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:16:04.080 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:16:33.448 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:17:01.479 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:17:05.905 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:18:09.548 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:23:53.843 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:26:26.640 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:27:29.194 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:27:33.582 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:29:32.056 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:32:08.704 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:32:32.522 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:32:39.565 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:33:00.145 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:34:41.320 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:35:00.416 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:40:15.321 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:40:50.505 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:41:42.187 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:42:56.214 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:44:12.572 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:44:46.919 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:47:18.192 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:47:55.872 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:48:04.924 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:48:16.003 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:49:37.540 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:53:48.035 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:54:38.034 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:55:07.383 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:57:06.585 ClamXavSentry[3711:20b] The volume /Volumes/GPGTools was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 18:57:18 /Volumes/GPGTools: OK

    2012-07-23 18:58:03.330 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:59:33.018 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:59:49.612 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 19:00:07.318 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 19:00:10.588 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 19:00:50.797 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 19:01:06.310 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 19:02:17.828 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 19:03:14.375 ClamXavSentry[3711:20b] restartWatcher

    2012-07-23 19:03:14.391 ClamXavSentry[3711:20b] attempting to terminate gfslogger

    2012-07-23 19:03:14.394 ClamXavSentry[3711:310f] termination status = 15

    2012-07-23 19:03:15.169 ClamXavSentry[3711:20b] scan email files

    2012-07-23 19:05:11.804 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:05:22.722 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:09:09.781 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:09:53.704 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:14:35.604 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:16:01.882 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:16:39.802 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:17:45.598 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:20:21.613 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:23:22.798 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:23:27.469 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:24:40.196 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:24:44.885 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:28:20.894 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:29:24.976 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:35:00.477 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:35:05.015 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:37:21.317 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:40:42.245 ClamXavSentry[3711:20b] The volume /Volumes/Little Snitch 2.5.3 was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 19:40:43 ERROR: --file-list: Can't open file /tmp/ClamXavSentryScanList_firstPatientScanner.txt

    rm: /tmp/ClamXavSentryScanList_firstPatientScanner.txt: No such file or directory

    2012-07-23 19:41:14.588 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:41:32.260 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:42:34.830 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:47:43.746 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:48:43.169 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:53:06.463 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:53:20.540 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:54:37.841 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:57:15.036 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 20:02:44.493 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 20:03:24.173 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 20:06:20.548 ClamXavSentry[3711:20b] attempting to terminate gfslogger

    2012-07-23 20:06:20.601 ClamXavSentry[3711:3013] termination status = 15

    2012-07-23 20:10:15.198 ClamXavSentry[141:20b] clamd not running. Now trying to launch it...

    2012-07-23 20:10:51.419 ClamXavSentry[141:20b] clamd launched successfully.  Continuing...

    2012-07-23 20:10:51.445 ClamXavSentry[141:20b] scan email files

    2012-07-23 23:53:47.102 ClamXavSentry[141:20b] attempting to terminate gfslogger

    2012-07-23 23:53:47.159 ClamXavSentry[141:602b] termination status = 15

    2012-07-23 23:53:47.344 ClamXavSentry[141:20b] trying to quit clamd

    2012-07-24 19:25:03.456 ClamXavSentry[142:20b] clamd not running. Now trying to launch it...

    2012-07-24 19:25:42.167 ClamXavSentry[142:20b] clamd launched successfully.  Continuing...

    2012-07-24 19:25:42.321 ClamXavSentry[142:20b] scan email files

    2012-07-24 19:33:36.215 ClamXavSentry[142:20b] restartWatcher

    2012-07-24 19:33:36.215 ClamXavSentry[142:20b] attempting to terminate gfslogger

    2012-07-24 19:33:36.217 ClamXavSentry[142:602b] termination status = 15

    2012-07-24 19:33:36.242 ClamXavSentry[142:20b] scan email files

    2012-07-24 19:33:36.242 ClamXavSentry[142:20b] I will quarantine infected files

    2012-07-24 19:33:52.831 ClamXavSentry[142:20b] attempting to terminate gfslogger

    2012-07-25 19:11:15.565 ClamXavSentry[1296:20b] scan email files

    2012-07-25 19:11:15.613 ClamXavSentry[1296:20b] I will quarantine infected files

    2012-07-25 19:11:22.745 ClamXavSentry[1296:310b] termination status = 0

    2012-07-25 19:11:53.244 ClamXavSentry[1296:20b] restartWatcher

    2012-07-25 19:11:53.271 ClamXavSentry[1296:20b] attempting to terminate gfslogger

    2012-07-25 19:11:53.272 ClamXavSentry[1296:310b] termination status = 15

    2012-07-25 19:11:53.525 ClamXavSentry[1296:20b] scan email files

    2012-07-25 19:11:53.530 ClamXavSentry[1296:20b] I will quarantine infected files

    2012-07-25 19:13:03.490 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:13:23.679 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:13:45.115 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:16:14.673 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:16:46.894 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:18:16.617 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:20:43.673 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:21:20.907 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:22:49.652 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:23:18.401 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:23:57.237 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:25:06.410 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:26:17.473 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:30:16.605 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:30:45.097 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:31:03.355 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:31:54.363 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:34:16.623 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:34:34.319 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:36:36.466 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:37:58.805 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:38:58.975 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:39:39.596 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:40:54.987 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:42:45.393 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:44:19.265 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:45:57.476 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:46:40.453 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:47:36.198 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:48:40.191 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:54:07.957 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:54:33.499 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 20:03:14.062 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 20:19:38.604 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 20:28:16.028 ClamXavSentry[1296:20b] restartWatcher

    2012-07-25 20:28:16.029 ClamXavSentry[1296:20b] attempting to terminate gfslogger

    2012-07-25 20:28:16.030 ClamXavSentry[1296:650b] termination status = 15

    2012-07-25 20:28:16.228 ClamXavSentry[1296:20b] scan email files

    2012-07-25 20:28:16.229 ClamXavSentry[1296:20b] I will quarantine infected files

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 25, 2012 5:19 PM in response to MadMacs0
    Level 1 (4 points)
    Mac OS X
    Jul 25, 2012 5:19 PM in response to MadMacs0

    You asked me:

     

    See if you have /Library/Receipts/boms/com.apple.pkg.update.security.2011.004.leopard.bom?

     

     

    No I don't. I tried to download it, but I haven't succeeded yet. Will try again now, have dinner then let you know better.  Thanks for it all. Read you later

  • by MadMacs0,

    MadMacs0 MadMacs0 Jul 25, 2012 5:57 PM in response to Socorro-Mac
    Level 5 (4,801 points)
    Jul 25, 2012 5:57 PM in response to Socorro-Mac

    Socorro-Mac wrote:

     

    Hi Mad Mac!  I decided to redo things. 1) I did not find the software lock. I found the  softwareupdates.plist; I droped it to the desktop, I got a txt file, when I opened it and I got a black backgroud window :

     

     

    with the text: -

    bplist00Ô]AnonymousUUID_LastAttemptDate_LastSuccessfulDate^LastResultCode_$421E7 4F4-7403-4AB5-93D1-5028308C26CD3AµÀ·DYvŠ1FU|…‡

     

    - which, of course, I did not understand.

    Yes, I thought we covered that already. It's corrupt. Just leave it on your desktop, run Software Update, a new one will be created and your problems with updates should be over.

  • by MadMacs0,

    MadMacs0 MadMacs0 Jul 25, 2012 6:22 PM in response to Socorro-Mac
    Level 5 (4,801 points)
    Jul 25, 2012 6:22 PM in response to Socorro-Mac

    Socorro-Mac wrote:

     

    2) The i AV prgrms I had ( ?? ) found NO virus or trojans ; MacScan found some tracking cookies and 5 spywares, but I don't know what it did to it (I'm runnning the trying version).

     

    I am not able to see the images you posted, so I hope they are not important.

     

    You need to pay attention to the spyware. Everybody has tracking cookies. What type of spyware did MacScan tell you it found (exact name of the spyware and type, not the file name)? If you click on each name it will tell you the exact path to the file, but you apparently hit the isolate button which moved them from wherever they were found. Unfortunately, I don't think it logs it's results so you must copy them down right after the scan completes.

     

    You should have a direcgtory (folder) on your desktop called "MacScan Isolated Spyware" which should contain the isolated files.  I'm not certain what, if any, restrictions there are on the "trying" version.

     

    With ClamXav you should have seen a list of any malware it found followed by a summary, something like this:

    ----------- SCAN SUMMARY -----------

    Known viruses: 1278156

    Engine version: 0.97.5

    Scanned directories: 240

    Scanned files: 4526

    Infected files: 42

    Total errors: 1

    Data scanned: 186.79 MB

    Data read: 145.62 MB (ratio 1.28:1)

    Time: 254.147 sec (4 m 14 s)

    Focus on the "Infected files: line". If it's 0, then you have nothing to worry about. Ignore the "Total errors:" line as it's just files you don't have read access to. If it had found any infections they would have been listed in the ClamXav window, anyway.  Results can also be seen by clicking on the "Open Scan Log" button in the ClamXav window toolbar.

     

    I see you are also running Sentry. If it finds anything you will get a popup telling you about it. There is now a separate log for Sentry which you can open by clicking on the Sentry Icon in the menu bar and selecting "Open Scan Log".

  • by MadMacs0,

    MadMacs0 MadMacs0 Jul 25, 2012 6:26 PM in response to Socorro-Mac
    Level 5 (4,801 points)
    Jul 25, 2012 6:26 PM in response to Socorro-Mac

    Socorro-Mac wrote:

     

    You asked me:

    See if you have /Library/Receipts/boms/com.apple.pkg.update.security.2011.004.leopard.bom?

    No I don't. I tried to download it, but I haven't succeeded yet. Will try again now, have dinner then let you know better.  Thanks for it all. Read you later

    That explains why you got those two could not repair permissions messages.

     

    Don't try to download it. Many updates have to be installed in a certain order. Use Software Update which should be working now.

  • by Socorro-Mac,

    Socorro-Mac Socorro-Mac Jul 25, 2012 9:17 PM in response to MadMacs0
    Level 1 (4 points)
    Mac OS X
    Jul 25, 2012 9:17 PM in response to MadMacs0
    Focus on the "Infected files: line". If it's 0, then you have nothing to worry about. Ignore the "Total errors:"

     

    Here it follows. No probems, apparently. See it for yourself:

    ----------- SCAN SUMMARY -----------

    Known viruses: 1278159

    Engine version: 0.97.5

    Scanned directories: 95742

    Scanned files: 374694

    Infected files: 0

    Total errors: 218

    Data scanned: 43680.89 MB

    Data read: 97233.91 MB (ratio 0.45:1)

    Time: 73971.631 sec (1232 m 51 s)

    As for Sentry,  What's it?

    Ok I copied and glued it down here. You should erase it later:nothing especial:

    2012-07-22 22:43:40.786 ClamXavSentry[1943:20b] clamd not running. Now trying to launch it...

    2012-07-22 22:43:46.323 ClamXavSentry[1943:20b] clamd launched successfully.  Continuing...

    2012-07-22 22:43:46.351 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:04:49.316 ClamXavSentry[1943:20b] restartWatcher

    2012-07-23 01:04:49.326 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:04:49.328 ClamXavSentry[1943:602b] termination status = 15

    2012-07-23 01:04:49.364 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:09:10.718 ClamXavSentry[1943:20b] restartWatcher

    2012-07-23 01:09:10.729 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:09:10.731 ClamXavSentry[1943:300f] termination status = 15

    2012-07-23 01:09:10.840 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:09:55.035 ClamXavSentry[1943:20b] restartWatcher

    2012-07-23 01:09:55.053 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:09:55.054 ClamXavSentry[1943:644b] termination status = 15

    2012-07-23 01:09:55.402 ClamXavSentry[1943:20b] scan email files

    2012-07-23 01:12:46.731 ClamXavSentry[1943:20b] The volume /Volumes/ClamXav was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 01:12:48 /Volumes/ClamXav/.Trashes: lstat() failed: Permission denied. ERROR

    2012-07-23 01:12:49 /Volumes/ClamXav/.DocumentRevisions-V100: lstat() failed: Permission denied. ERROR

    2012-07-23 01:12:52 Total errors: 2

    2012-07-23 01:13:09.278 ClamXavSentry[1943:20b] The volume /Volumes/ClamXav was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 01:13:10 /Volumes/ClamXav/.Trashes: lstat() failed: Permission denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/.DocumentRevisions-V100: lstat() failed: Permission denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/ClamXav.app/Contents/Resources/ko.lproj/PrefsWindow.nib: Access denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/ClamXav.app/Contents/Resources/ko.lproj/ServicesMenu.strings: Access denied. ERROR

    2012-07-23 01:13:11 /Volumes/ClamXav/ClamXav.app/Contents/Resources/Spanish.lproj: lstat() failed: No such file or directory. ERROR

    2012-07-23 01:13:11 Total errors: 5

    The file /var/root/Library/Logs/ClamXavSentry-scan.log does not exist.

    2012-07-23 01:46:44.874 ClamXavSentry[1943:20b] attempting to terminate gfslogger

    2012-07-23 01:46:44.875 ClamXavSentry[1943:65b7] termination status = 15

    2012-07-23 07:10:56.770 ClamXavSentry[3711:20b] scan email files

    2012-07-23 08:42:43.325 ClamXavSentry[3711:20b] We're currently watching for changes, so stop and then register to know when we wake up again

    2012-07-23 08:42:43.357 ClamXavSentry[3711:20b] attempting to terminate gfslogger

    2012-07-23 08:42:43.359 ClamXavSentry[3711:320b] termination status = 15

    2012-07-23 08:42:43.364 ClamXavSentry[3711:20b] Nighty night!

    2012-07-23 14:34:56.919 ClamXavSentry[3711:20b] Wakey wakey!

    2012-07-23 14:34:58.471 ClamXavSentry[3711:20b] scan email files

    2012-07-23 17:42:10.054 ClamXavSentry[3711:20b] The volume /Volumes/Flashback Removal Security Update was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 17:42:24 /Volumes/Flashback Removal Security Update: OK

    2012-07-23 17:48:02.987 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:09:46.521 ClamXavSentry[3711:310f] termination status = 0

    and so it goes until:

    2012-07-23 18:55:07.383 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 18:57:06.585 ClamXavSentry[3711:20b] The volume /Volumes/GPGTools was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 18:57:18 /Volumes/GPGTools: OK

    2012-07-23 18:58:03.330 ClamXavSentry[3711:310f] termination status = 0

    the same until:

    2012-07-23 19:02:17.828 ClamXavSentry[3711:310f] termination status = 0

    2012-07-23 19:03:14.375 ClamXavSentry[3711:20b] restartWatcher

    2012-07-23 19:03:14.391 ClamXavSentry[3711:20b] attempting to terminate gfslogger

    2012-07-23 19:03:14.394 ClamXavSentry[3711:310f] termination status = 15

    2012-07-23 19:03:15.169 ClamXavSentry[3711:20b] scan email files

    2012-07-23 19:05:11.804 ClamXavSentry[3711:3013] termination status = 0

    the same until:

    2012-07-23 19:37:21.317 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:40:42.245 ClamXavSentry[3711:20b] The volume /Volumes/Little Snitch 2.5.3 was just mounted and we're not supposed to be monitoring it for new content, so just scan it immediately.

    2012-07-23 19:40:43 ERROR: --file-list: Can't open file /tmp/ClamXavSentryScanList_firstPatientScanner.txt

    rm: /tmp/ClamXavSentryScanList_firstPatientScanner.txt: No such file or directory

    2012-07-23 19:41:14.588 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 19:41:32.260 ClamXavSentry[3711:3013] termination status = 0

    the same until:

    2012-07-23 20:03:24.173 ClamXavSentry[3711:3013] termination status = 0

    2012-07-23 20:06:20.548 ClamXavSentry[3711:20b] attempting to terminate gfslogger

    2012-07-23 20:06:20.601 ClamXavSentry[3711:3013] termination status = 15

    2012-07-23 20:10:15.198 ClamXavSentry[141:20b] clamd not running. Now trying to launch it...

    2012-07-23 20:10:51.419 ClamXavSentry[141:20b] clamd launched successfully.  Continuing...

    2012-07-23 20:10:51.445 ClamXavSentry[141:20b] scan email files

    2012-07-23 23:53:47.102 ClamXavSentry[141:20b] attempting to terminate gfslogger

    2012-07-23 23:53:47.159 ClamXavSentry[141:602b] termination status = 15

    2012-07-23 23:53:47.344 ClamXavSentry[141:20b] trying to quit clamd

    2012-07-24 19:25:03.456 ClamXavSentry[142:20b] clamd not running. Now trying to launch it...

    2012-07-24 19:25:42.167 ClamXavSentry[142:20b] clamd launched successfully.  Continuing...

    2012-07-24 19:25:42.321 ClamXavSentry[142:20b] scan email files

    2012-07-24 19:33:36.215 ClamXavSentry[142:20b] restartWatcher

    2012-07-24 19:33:36.215 ClamXavSentry[142:20b] attempting to terminate gfslogger

    2012-07-24 19:33:36.217 ClamXavSentry[142:602b] termination status = 15

    2012-07-24 19:33:36.242 ClamXavSentry[142:20b] scan email files

    2012-07-24 19:33:36.242 ClamXavSentry[142:20b] I will quarantine infected files

    2012-07-24 19:33:52.831 ClamXavSentry[142:20b] attempting to terminate gfslogger

    2012-07-25 19:11:15.565 ClamXavSentry[1296:20b] scan email files

    2012-07-25 19:11:15.613 ClamXavSentry[1296:20b] I will quarantine infected files

    2012-07-25 19:11:22.745 ClamXavSentry[1296:310b] termination status = 0

    2012-07-25 19:11:53.244 ClamXavSentry[1296:20b] restartWatcher

    2012-07-25 19:11:53.271 ClamXavSentry[1296:20b] attempting to terminate gfslogger

    2012-07-25 19:11:53.272 ClamXavSentry[1296:310b] termination status = 15

    2012-07-25 19:11:53.525 ClamXavSentry[1296:20b] scan email files

    2012-07-25 19:11:53.530 ClamXavSentry[1296:20b] I will quarantine infected files

    2012-07-25 19:13:03.490 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:13:23.679 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:13:45.115 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:16:14.673 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 19:16:46.894 ClamXavSentry[1296:650b] termination status = 0

    THE same until:

    2012-07-25 20:19:38.604 ClamXavSentry[1296:650b] termination status = 0

    2012-07-25 20:28:16.028 ClamXavSentry[1296:20b] restartWatcher

    2012-07-25 20:28:16.029 ClamXavSentry[1296:20b] attempting to terminate gfslogger

    2012-07-25 20:28:16.030 ClamXavSentry[1296:650b] termination status = 15

    2012-07-25 20:28:16.228 ClamXavSentry[1296:20b] scan email files

    2012-07-25 20:28:16.229 ClamXavSentry[1296:20b] I will quarantine infected files

    2012-07-25 21:02:11.928 ClamXavSentry[1296:60e3] termination status = 0

    The same until:

    2012-07-25 23:16:00.177 ClamXavSentry[1296:60e3] termination status = 0

    2012-07-25 23:16:16.209 ClamXavSentry[1296:20b] We're currently watching for changes, so stop and then register to know when we wake up again

    2012-07-25 23:16:16.211 ClamXavSentry[1296:20b] attempting to terminate gfslogger

    2012-07-25 23:16:16.213 ClamXavSentry[1296:60e3] termination status = 15

    2012-07-25 23:16:16.221 ClamXavSentry[1296:20b] Nighty night!

    2012-07-25 23:16:27.833 ClamXavSentry[1296:20b] Wakey wakey!

    2012-07-25 23:16:28.213 ClamXavSentry[1296:20b] Nighty night!

    2012-07-25 23:16:29.264 ClamXavSentry[1296:20b] scan email files

    2012-07-25 23:16:29.265 ClamXavSentry[1296:20b] I will quarantine infected files

    2012-07-25 23:16:47.991 ClamXavSentry[1296:20b] Wakey wakey!

    2012-07-25 23:17:10.954 ClamXavSentry[1296:6b57] termination status = 0

    The same until:

    2012-07-26 01:10:06.458 ClamXavSentry[1296:6b57] termination status = 0

     

    Message was edited by: Socorro-Mac

Previous Page 2 of 3 last Next