Step 1:
unknown70568193bb6d:~ Charles$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
at.obdev.nke.LittleSnitch (3878)
com.displaylink.driver.DisplayLinkDriver (1.8)
com.Cycling74.driver.Soundflower (1.5.2)
com.splashtop.driver.SRXDisplayCard (1.5)
com.splashtop.driver.SRXFrameBufferConnector (1.5)
com.parallels.kext.prl_usb_connect (7.0
com.parallels.kext.prl_hypervisor (7.0
com.parallels.kext.prl_hid_hook (7.0
com.parallels.kext.prl_netbridge (7.0
com.parallels.kext.prl_vnic (7.0
Step 2:
com.parallels.vm.prl_naptd
com.trusteer.rooks.rooksd
com.parallels.desktop.launchdaemon
com.oracle.java.Helper-Tool
com.microsoft.office.licensing.helper
com.micromat.TechToolProDaemon
com.google.keystone.daemon
com.displaylink.usbnivolistener
com.adobe.SwitchBoard
com.adobe.fpsaud
at.obdev.littlesnitchd
Step 3:
launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
com.trusteer.rapport.rapportd
com.parallels.vm.prl_pcproxy
com.parallels.DesktopControlAgent
com.oracle.java.Java-Updater
com.micromat.TechToolProAgent
com.maintain.CocktailSystemEvents
com.google.keystone.system.agent
com.divx.update.agent
com.divx.dms.agent
com.displaylink.useragent
com.brother.LOGINserver
at.obdev.LittleSnitchUIAgent
ws.agile.1PasswordAgent
com.spotify.webhelper
com.mlbam.nexdef
com.macpaw.CleanMyMac.volumeWatcher
com.macpaw.CleanMyMac.helperTool
com.hp.printerAgent
com.facebook.videochat.Charles.updater
com.divx.agent.postinstall
com.adobe.ARM.df0ab5bbe6f698196fcc21e3c1e66dcb758bd911f4d637272d9d8109
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
Step 4:
ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null
/Library/Components:
/Library/Extensions:
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AudioMixEngine.framework
DivX Toolkit.framework
NyxAudioAnalysis.framework
PluginManager.framework
SRFrameBufferConnection.framework
iLifeFaceRecognition.framework
iLifeKit.framework
iLifePageLayout.framework
iLifeSQLAccess.framework
iLifeSlideshow.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
DivXBrowserPlugin.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
OVSHelper.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
flashplayer.xpt
googletalkbrowserplugin.plugin
iPhotoPhotocast.plugin
npgtpo3dautoplugin.plugin
nsIQTScriptablePlugin.xpt
webplugin.plugin
/Library/Keyboard Layouts:
/Library/LaunchAgents:
at.obdev.LittleSnitchUIAgent.plist
com.adobe.AAM.Updater-1.0.plist
com.brother.LOGINserver.plist
com.displaylink.useragent.plist
com.divx.dms.agent.plist
com.divx.update.agent.plist
com.google.keystone.agent.plist
com.maintain.CocktailPurgeInactiveMemory.plist
com.maintain.CocktailSystemEvents.plist
com.micromat.TechToolProAgent.plist
com.oracle.java.Java-Updater.plist
com.parallels.DesktopControlAgent.plist
com.parallels.vm.prl_pcproxy.plist
com.trusteer.rapport.rapportd.plist
/Library/LaunchDaemons:
at.obdev.littlesnitchd.plist
com.adobe.SwitchBoard.plist
com.adobe.fpsaud.plist
com.displaylink.usbnivolistener.plist
com.google.keystone.daemon.plist
com.maintain.CocktailScheduler.plist
com.micromat.TechToolProDaemon.plist
com.microsoft.office.licensing.helper.plist
com.oracle.java.Helper-Tool.plist
com.parallels.desktop.launchdaemon.plist
com.trusteer.rooks.rooksd.plist
/Library/PreferencePanes:
DivX.prefPane
Flash Player.prefPane
JavaControlPanel.prefPane
RapportPreferences.prefPane
TechTool Protection.prefPane
/Library/PrivilegedHelperTools:
Google Drive Icon Helper
com.microsoft.office.licensing.helper
/Library/QuickLook:
ParallelsQL.qlgenerator
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
DivX Decoder.component
DivX Encoder.component
/Library/ScriptingAdditions:
Adobe Unit Types.osax
TotalFinder.osax
/Library/Spotlight:
Microsoft Office.mdimporter
ParallelsMD.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Accounts:
V1
Library/Internet Plug-Ins:
CitrixOnlineWebDeploymentPlugin.plugin
FacebookVideoCalling.bundle
Google Earth Web Plug-in.plugin
WebEx64.plugin
Library/Keyboard Layouts:
Library/LaunchAgents:
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.adobe.ARM.df0ab5bbe6f698196fcc21e3c1e66dcb758bd911f4d637272d9d8109.plist
com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.080342B5-98E5-4526-B1B0-2D9 79A4907C8.plist
com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.4772010E-8AF7-4EA1-824C-220 8804A0351.plist
com.divx.agent.postinstall.plist
com.facebook.videochat.Charles.plist
com.hp.printerAgent.plist
com.macpaw.CleanMyMac.helperTool.plist
com.macpaw.CleanMyMac.volumeWatcher.plist
com.mlbam.nexdef.plist
com.spotify.webhelper.plist
ws.agile.1PasswordAgent.plist
Library/PreferencePanes:
Library/Services:
AppDelete.workflow
Step 5:
osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
iTunesHelper, Google Notifier, uTorrent, Messages, Reminders, AdobeResourceSynchronizer, Google Drive, Caffeine, TotalFinder, Dropbox, WeatherHDMenu