-
All replies
-
Helpful answers
-
Mar 1, 2015 11:29 AM in response to Linc Davisby Eng.Qutub,Please help me out doing the rest of the steps to get rid of these annoying pop-ups
Step 1
com.globaldelight.driver.BoomDevice (1.1)
net.kromtech.kext.Firewall (2.3.7)
net.kromtech.kext.AVKauth (2.3.7)
Step 2
No possible password
Step 3
com.zeobit.MacKeeper.42916
com.globaldelight.BoomDaemon.100852
com.microsoft.autoupdate.fba.5144
com.v.agent
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
OpenObject.fuspredownloader.71884
com.yourcompany.KiesAgent.80688
com.alfredapp.Alfred.32692
com.getdropbox.dropbox.88356
com.adobe.ARM.2872
com.globaldelight.Boom.19060
com.zeobit.MacKeeper.Helper
Step 4
/Library/Components:
/Library/Extensions:
ACS6x.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
PromiseSTEX.kext
SoftRAID.kext
hp_io_enabler_compound.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AudioMixEngine.framework
HPPml.framework
HPServicesInterface.framework
HPSmartX.framework
Mono.framework
NyxAudioAnalysis.framework
PluginManager.framework
Python.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Default Browser.plugin
Flash Player.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
flashplayer.xpt
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.9d8c52b1e59f8af0.agent.plist
com.oracle.java.Java-Updater.plist
/Library/LaunchDaemons:
com.9d8c52b1e59f8af0.daemon.plist
com.9d8c52b1e59f8af0.helper.plist
com.GLArab.service.plist
com.adobe.fpsaud.plist
com.anchorfree.ajaxserver.plist
com.iobit.AMCDaemon.plist
com.mackeeper.AntiVirus.plist
com.microsoft.office.licensing.helper.plist
com.oracle.java.Helper-Tool.plist
com.perion.searchprotectd.plist
com.tunnelbear.mac.tbeard.plist
com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist
/Library/PreferencePanes:
Flash Player.prefPane
JavaControlPanel.prefPane
/Library/PrivilegedHelperTools:
com.genieoinnovation.macextension.client
com.microsoft.office.licensing.helper
com.tunnelbear.mac.tbeard
/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
HP IO
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
Library/Frameworks:
SamsungKiesFoundation.framework
SamsungKiesSerialPort.framework
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
.DS_Store
Library/Keyboard Layouts:
Library/LanguageModeling:
de-dynamic.lm
en-dynamic.lm
es-dynamic.lm
fr-dynamic.lm
it-dynamic.lm
nl-dynamic.lm
pt-dynamic.lm
sv-dynamic.lm
Library/LaunchAgents:
.DS_Store
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.zeobit.MacKeeper.Helper.plist
Library/PreferencePanes:
Library/ScriptingAdditions:
.DS_Store
Library/Services:
.localized
Step 5
Boom, iTunesHelper, AdobeResourceSynchronizer, Alfred, Dropbox, K9-MacOptimizer, KiesAgent, fuspredownloader
-
Mar 7, 2015 1:44 AM in response to Linc Davisby mn oceanview,hey I'm having the same issue so i just started doing what you said and after entering the first line of code into terminal i got this in another box
com.sophos.nke.swi (9.2.50)
com.sophos.kext.sav (9.2.50)
-
Mar 7, 2015 1:47 AM in response to Linc Davisby mn oceanview,step 2
com.sophos.webd
com.v.daemon
com.sophos.scan
com.sophos.intercheck
com.sophos.common.servicemanager
com.oracle.java.Helper-Tool
com.sophos.autoupdate
com.sophos.sxld
com.sophos.notification
com.sophos.configuration
-
Mar 7, 2015 1:48 AM in response to Linc Davisby mn oceanview,step3
com.mackeeper.MacKeeper.service.clean
com.sophos.uiserver
com.sophos.macendpoint.Sophos-Anti-Virus.75292
com.oracle.java.Java-Updater
org.niltsh.MPlayerX.48312
com.google.keystone.user.agent
-
Mar 7, 2015 1:50 AM in response to Linc Davisby mn oceanview,step 4
/Library/Components:
/Library/Extensions:
ACS6x.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
PromiseSTEX.kext
SoftRAID.kext
SophosNetworkInterceptor.kext
SophosOnAccessInterceptor.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
SAVI.framework
SUMScanKit.framework
SophosGenericsCommon.framework
SophosGenericsCore.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
Default Browser.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.71bfe26da1a51ad9.agent.plist
com.oracle.java.Java-Updater.plist
com.sophos.uiserver.plist
/Library/LaunchDaemons:
com.71bfe26da1a51ad9.daemon.plist
com.71bfe26da1a51ad9.helper.plist
com.oracle.java.Helper-Tool.plist
com.sophos.common.servicemanager.plist
/Library/PreferencePanes:
JavaControlPanel.prefPane
/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LanguageModeling:
en-dynamic.lm
es-dynamic.lm
pt-dynamic.lm
Library/LaunchAgents:
com.apple.FolderActions.folders.plist
com.google.keystone.agent.plist
Library/PreferencePanes:
Library/Services:
-
-
Mar 7, 2015 1:54 AM in response to Linc Davisby mn oceanview,can you please help me out I just bought it a week ago and a few hours ago i have been getting constant pop ups
-
Mar 7, 2015 2:24 AM in response to Eng.Qutubby mn oceanview,did you fix it if so how did you do it
-
Mar 7, 2015 5:49 AM in response to mn oceanviewby thomas_r.,mn oceanview wrote:
can you please help me out I just bought it a week ago and a few hours ago i have been getting constant pop ups
You have adware installed. See my Adware Removal Guide for help getting rid of it.
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)
-
May 26, 2015 7:00 AM in response to Linc Davisby yishafrommelbourne,/Library/Components:
/Library/Extensions:
ACS6x.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
PromiseSTEX.kext
SoftRAID.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
Adobe AIR.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
TSLicense.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobeAAMDetect.plugin
Default Browser.plugin
Flash Player.plugin
Flip4Mac WMV Plugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
flashplayer.xpt
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.6e66e40e5babea4a.agent.plist
com.adobe.AAM.Updater-1.0.plist
/Library/LaunchDaemons:
com.6e66e40e5babea4a.daemon.plist
com.6e66e40e5babea4a.helper.plist
com.adobe.fpsaud.plist
com.microsoft.office.licensing.helper.plist
/Library/PreferencePanes:
Flash Player.prefPane
Flip4Mac WMV.prefPane
/Library/PrivilegedHelperTools:
Google Drive Icon Helper
com.microsoft.office.licensing.helper
/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
Flip4Mac WMV Advanced.component
Flip4Mac WMV Export.component
Flip4Mac WMV Import.component
/Library/ScriptingAdditions:
Adobe Unit Types.osax
/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
.DS_Store
Library/Keyboard Layouts:
Library/LanguageModeling:
de-dynamic.lm
en-dynamic.lm
es-dynamic.lm
fr-dynamic.lm
it-dynamic.lm
ja-dynamic.lm
nl-dynamic.lm
pt-dynamic.lm
sv-dynamic.lm
zh_Hans-dynamic.lm
zh_Hant-dynamic.lm
Library/LaunchAgents:
Texiday.download.plist
Texiday.ltvbit.plist
Texiday.update.plist
com.adobe.AAM.Updater-1.0.plist
com.google.keystone.agent.plist
com.spotify.webhelper.plist
Library/PreferencePanes:
Library/Services:
iTunesHelper, SpeechSynthesisServer, Google Drive, RealPlayer Downloader Agent
Texiday.ltvbit
com.v.agent
com.adobe.AAM.Scheduler-1.0
com.realnetworks.realplayerdownloaderagent.66204
Texiday.update
com.spotify.webhelper
Texiday.download
com.google.keystone.user.agent
com.v.helper
com.microsoft.office.licensing.helper
com.adobe.fpsaud
after 5 step i still have pop ups
-
May 26, 2015 8:15 AM in response to yishafrommelbourneby thomas_r.,You still have adware installed, including some that is not yet included in Apple's instructions, or any of Linc's instructions (to my knowledge). See my Adware Removal Guide for help getting rid of it.
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)
-
by Linc Davis,May 26, 2015 8:29 AM in response to yishafrommelbourne
Linc Davis
May 26, 2015 8:29 AM
in response to yishafrommelbourne
Level 10 (207,990 points)
ApplicationsA
You installed the "Genieo" or "InstallMac" ad-injection malware. Follow the instructions on this Apple Support page to remove it.
Back up all data before proceeding.
Malware is always changing to get around the defenses against it. In addition to the files listed in the support article, you may also have some of the following:
~/Library/LaunchAgents/com.Installer.completer.download.plist
~/Library/LaunchAgents/com.Installer.completer.ltvbit.plist
~/Library/LaunchAgents/com.Installer.completer.update.plist
~/Library/LaunchAgents/Texiday.download.plist
~/Library/LaunchAgents/Texiday.ltvbit.plist
~/Library/LaunchAgents/Texiday.update.plist
~/Library/LaunchAgents/com.spigot.SearchProtection.plist
~/Library/Application Support/IM.Installer
Removing these files, if they exist, is optional if you've already followed Apple's instructions.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.
After removing the malware, remember to reset your home page in all the web browsers affected, if it was changed.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.
If you find Apple's instructions too hard to follow, ask for an alternative that doesn't require you to trust a black-box application without knowing what it does.
Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.
B
You also installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
If you have trouble following those instructions, see below.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
com.something.daemon.plist
and
com.something.helper.plist
Here something is a variable string of characters, which can be different in each VSearch infection. So far it has always been an alphanumeric string without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
com.something.agent.plist
where the string something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
something
where something is the same string you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may be an item named exactly
v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
-
Jul 29, 2015 4:54 PM in response to ika66by khairyfromcuritiba,Hi every body I have just read from here and I tried it and resolved every thing and no mor adds with program Malwarebytes
-
Oct 20, 2015 8:47 PM in response to Linc Davisby son of sesh,Step 1:
com.serato.usb.kext (2.3.0)
Step :
com.Moniker.helper
com.microsoft.office.licensing.helper
com.pref.config
com.v.helper
com.adobe.fpsaud
Step 3:
jp.co.pioneer.DJM-900nexus.autolauncher.45440
jp.co.pioneer.DJM-900SRT.autolauncher.40160
com.fiplab.RSSBotLoginHelper
com.Moniker.agent
com.v.agent
Texiday.update
Texiday.ltvbit
Texiday.download
Swissfist.update
Swissfist.ltvbit
Swissfist.download
Swissfist.AppRemoval
Qamails.update
Qamails.ltvbit
Qamails.download
Perfetnight.update
Perfetnight.ltvbit
Perfetnight.download
Perfetnight.AppRemoval
Otwexplain.update
Otwexplain.ltvbit
Otwexplain.download
Otwexplain.AppRemoval
Manroling.update
Listchack.update
Listchack.ltvbit
Listchack.download
Leperdvil.update
Leperdvil.ltvbit
Leperdvil.download
Javeview.update
com.extensions.updater69337.agent.plist
com.cinemapro1-2.agent
Step 4:
/Library/Components:
/Library/Extensions:
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
PromiseSTEX.kext
SoftRAID.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Default Browser.plugin
Flash Player.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
flashplayer.xpt
iPhotoPhotocast.plugin
nsIQTScriptablePlugin.xpt
/Library/Internet Plug-Ins (Disabled):
Flash Player.plugin
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.c78f50359a14ac36.agent.plist
com.moniker.agent.plist
/Library/LaunchDaemons:
com.SesbaniaUpd.plist
com.adobe.fpsaud.plist
com.c78f50359a14ac36.daemon.plist
com.c78f50359a14ac36.helper.plist
com.disheartenUpd.plist
com.expositionUpd.plist
com.kaleidoscopicallyUpd.plist
com.microsoft.office.licensing.helper.plist
com.moniker.daemon.plist
com.moniker.helper.plist
/Library/PreferencePanes:
Flash Player.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
GBQLGenerator.qlgenerator
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
GBSpotlightImporter.mdimporter
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LaunchAgents:
Javeview.update.plist
Leperdvil.download.plist
Leperdvil.ltvbit.plist
Leperdvil.update.plist
Listchack.download.plist
Listchack.ltvbit.plist
Listchack.update.plist
Manroling.update.plist
Otwexplain.AppRemoval.plist
Otwexplain.download.plist
Otwexplain.ltvbit.plist
Otwexplain.update.plist
Perfetnight.AppRemoval.plist
Perfetnight.download.plist
Perfetnight.ltvbit.plist
Perfetnight.update.plist
Qamails.download.plist
Qamails.ltvbit.plist
Qamails.update.plist
Swissfist.AppRemoval.plist
Swissfist.download.plist
Swissfist.ltvbit.plist
Swissfist.update.plist
Texiday.download.plist
Texiday.ltvbit.plist
Texiday.update.plist
UpdateDownloader
com.apple.CSConfigDotMacCert-paseoner@me.com-SharedServices.Agent.plist
com.cinemapro1-2.agent.plist
com.extensions.updater69337.agent.plist
com.extensions.updater69337.ver
Library/PreferencePanes:
Library/ScriptingAdditions:
BrowserHelper.osax
Library/Services:
.localized
Step 5:
iTunesHelper, DJM-900SRT AutoLauncher, DJM-900SRT AutoLauncher, DJM-900nexus AutoLauncher, DJM-900nexus AutoLauncher, DJM-900SRT AutoLauncher, DJM-900SRT AutoLauncher
-
Oct 21, 2015 4:31 PM in response to Linc Davisby lucanano,I got this
com.BabeldomSynchytriaceae.helper
cn.com.zte.PPPMonitor.plist
com.pref.config
com.adobe.fpsaud
com.nero.HSMMonitor
com.skype.skype.57116
com.yourcompany.KiesAgent.69896
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
com.alfredapp.Alfred.66204
OpenObject.fuspredownloader.69612
com.google.GoogleDrive.42632
com.getdropbox.dropbox.39792
com.adobe.ARM.f9a0e5473a85d95758402a4cc8509b05c99b4a04194e5f0c860cc3e0
com.adobe.ARM.87325f2911f4d23b3f9591050c37dac94f098b6946e9941cec840846
com.BabeldomSynchytriaceae.agent
com.google.keystone.user.agent
com.google.android.mtpagent.69328
com.garmin.renu.service.40076
/Library/Components:
/Library/Extensions:
ACS6x.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
PromiseSTEX.kext
SoftRAID.kext
hp_io_enabler_compound.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Default Browser.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
Silverlight.plugin
flashplayer.xpt
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
.DS_Store
cn.com.zte.usbswapper.plist
cn.com.zte.zConnectManager.plist
cn.com.zte.zLogging.plist
com.babeldomsynchytriaceae.agent.plist
/Library/LaunchDaemons:
.DS_Store
cn.com.zte.PPPMonitor.plist
cn.com.zte.zRestoreFiles.plist
com.adobe.fpsaud.plist
com.babeldomsynchytriaceae.daemon.plist
com.babeldomsynchytriaceae.helper.plist
com.sagacityUpd.plist
/Library/PreferencePanes:
Flash Player.prefPane
/Library/PrivilegedHelperTools:
Google Drive Icon Helper
/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
angelina.TTF
Library/Frameworks:
SamsungKiesFoundation.framework
SamsungKiesSerialPort.framework
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LanguageModeling:
de-dynamic.lm
en-dynamic.lm
es-dynamic.lm
fr-dynamic.lm
it-dynamic.lm
nl-dynamic.lm
pt-dynamic.lm
tr-dynamic.lm
Library/LaunchAgents:
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.adobe.ARM.87325f2911f4d23b3f9591050c37dac94f098b6946e9941cec840846.plist
com.adobe.ARM.f9a0e5473a85d95758402a4cc8509b05c99b4a04194e5f0c860cc3e0.plist
com.google.keystone.agent.plist
com.nero.HSMMonitor.plist
Library/PreferencePanes:
Perian.prefPane
Library/QuickTime:
AC3MovieImport.component
Perian.component
Library/Services:
.localized
iTunesHelper, Garmin Express Service, Alfred, Skype, Google Drive, Dropbox, AdobeResourceSynchronizer, Android File Transfer Agent, Google Chrome, KiesAgent, fuspredownloader