Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: zap3
zap3 Author
User level: Level 1
0 points

Can anybody help? My Safari browser keeps crashing. The whole window just turns grey.

Can anybody help? My Safari browser keeps crashing on iMac 10.7.5. The whole window just turns grey. It started happening around the time of the new bookmarks menu upgrade recently which changed the bookmarks to be only on the side and makes it so you can see all your bookmarks while browsing. I know I have a lot of bookmarks, so I tried hiding them, but it still happens. I ALREADY TRIED CLEARING MY HISTORY, AND THAT DID NOT HELP, AND I HAVE NO EXTENSIONS FOR THIS BROWSER.


Does the fact that I am in Brasil have anything to do with it?


Thank you to anyone who can help. In case no one can come up with an answer, is there an easy way to transfer my bookmarks from safari to either firefox or chrome?


Much appreciated.

iMac, Mac OS X (10.7.5)

Posted on Dec 11, 2013 9:44 AM

Reply
23 replies
User profile for user: Linc Davis
Linc Davis
User level: Level 10
209,547 points

Dec 11, 2013 11:11 AM in response to zap3

Launch the Console application in any of the following ways:


☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


☞ Open LaunchPad. Click Utilities, then Console in the icon grid.


In the Console window, look under the heading DIAGNOSTIC AND USAGE INFORMATION on the left for crash or panic reports. If you don't see that heading, select

View ▹ Show Log List

from the menu bar.

A crash report has a name that begins with the name of the crashed process and ends in ".crash". It may be under either of the two subcategories, "System" and "User." A panic report has a name that begins with "Kernel" and ends in ".panic".

Select the most recent of each and post the entire contents — the text, please, not a screenshot. In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)


Please don’t post any other kind of diagnostic report, such as a hang log — they're very long and not helpful.

Reply
User profile for user: zap3
zap3 Author
User level: Level 1
0 points

Dec 12, 2013 10:06 AM in response to Linc Davis

Thank you for the help.

I think this is the most recent .crash report. There were 9 crashes under User and 1 under System. The most recent was the one under System, so I am giving that one to you.


I had 4 with the name FireWorks and 4 with the name DreamWeaver in the file name. I use these often. I am a web designer.


I didn't see anything that clearly matched your description of a UUID that being a long string of letters numbers and dashes, so I deleted what I thought might have been what you were describing or might have been something private. Please let me know if I need to supply some of the information in the three points where I deleted info and in it's placed wrote, "I DELETED THIS."


Thank you for your help.




Process: socketfilterfw [10067]

Path: I DELETED THIS

Identifier: I DELETED THIS

Version: ??? (???)

Code Type: X86-64 (Native)

Parent Process: perl5.12 [10066]



Date/Time: 2013-12-09 15:26:29.975 -0400

OS Version: Mac OS X 10.7.5 (11G63)

Report Version: 9



Crashed Thread: 0 Dispatch queue: com.apple.main-thread



Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000000



VM Regions Near 0:

-->

__TEXT I DELETED THIS


Application Specific Information:

objc[10067]: garbage collection is OFF



Thread 0 Crashed:: Dispatch queue: com.apple.main-thread

0 libsystem_c.dylib 0x00007fff8b51c870 strcmp + 80

1 socketfilterfw 0x0000000106f4f8aa 0x106f45000 + 43178

2 socketfilterfw 0x0000000106f4a64d 0x106f45000 + 22093

3 socketfilterfw 0x0000000106f45e3c 0x106f45000 + 3644



Thread 1:: Dispatch queue: com.apple.libdispatch-manager

0 libsystem_kernel.dylib 0x00007fff8ccb97e6 kevent + 10

1 libdispatch.dylib 0x00007fff9596c786 _dispatch_mgr_invoke + 923

2 libdispatch.dylib 0x00007fff9596b316 _dispatch_mgr_thread + 54



Thread 2:

0 libsystem_kernel.dylib 0x00007fff8ccb9192 __workq_kernreturn + 10

1 libsystem_c.dylib 0x00007fff8b4cb594 _pthread_wqthread + 758

2 libsystem_c.dylib 0x00007fff8b4ccb85 start_wqthread + 13



Thread 3:

0 libsystem_kernel.dylib 0x00007fff8ccb9192 __workq_kernreturn + 10

1 libsystem_c.dylib 0x00007fff8b4cb594 _pthread_wqthread + 758

2 libsystem_c.dylib 0x00007fff8b4ccb85 start_wqthread + 13



Thread 0 crashed with X86 Thread State (64-bit):

rax: 0x0000000000000160 rbx: 0x00000000ffffffff rcx: 0x0000000000000960 rdx: 0x0000000000000016

rdi: 0x0000000000000000 rsi: 0x00007fadd4a02ea0 rbp: 0x00007fff66b44a00 rsp: 0x00007fff66b449b8

r8: 0x0000000015a77309 r9: 0x0000000015a77309 r10: 0x00000000000003c0 r11: 0xffffffffffffffff

r12: 0x00007fadd4a02ea0 r13: 0x00007fadd4a08c20 r14: 0x0000000000000000 r15: 0x000000000000000b

rip: 0x00007fff8b51c870 rfl: 0x0000000000010202 cr2: 0x0000000000000000

Logical CPU: 2



Binary Images:

0x106f45000 - 0x106f56fff socketfilterfw (??? - ???) <1F265600-7E9B-3912-A794-2A4404CB42BD> /usr/libexec/ApplicationFirewall/socketfilterfw

0x7fff66b45000 - 0x7fff66b79baf dyld (195.6 - ???) <0CD1B35B-A28F-32DA-B72E-452EAD609613> /usr/lib/dyld

0x7fff88bc9000 - 0x7fff88bc9fff libOpenScriptingUtil.dylib (??? - ???) <A7847713-F410-39C0-884F-A7188A18E742> /usr/lib/libOpenScriptingUtil.dylib

0x7fff89363000 - 0x7fff89367fff libmathCommon.A.dylib (2026.0.0 - compatibility 1.0.0) <FF83AFF7-42B2-306E-90AF-D539C51A4542> /usr/lib/system/libmathCommon.A.dylib

0x7fff89d25000 - 0x7fff89d2afff com.apple.OpenDirectory (10.7 - 146) <A674AB55-6E3D-39AE-9F9B-9865D0193020> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory

0x7fff89d2b000 - 0x7fff8a020ff7 com.apple.security (7.0 - 55148.6) <4535E500-973A-3BA7-AF65-DF5CF0658F02> /System/Library/Frameworks/Security.framework/Versions/A/Security

0x7fff8a7ca000 - 0x7fff8a7d8fff com.apple.NetAuth (3.1 - 3.1) <FE7EC4D7-5632-3B8D-9094-A0AC8D60EDEE> /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth

0x7fff8a814000 - 0x7fff8a815fff liblangid.dylib (??? - ???) <CACBE3C3-2F7B-3EED-B50E-EDB73F473B77> /usr/lib/liblangid.dylib

0x7fff8a8d1000 - 0x7fff8a8d6fff libcache.dylib (47.0.0 - compatibility 1.0.0) <1571C3AB-BCB2-38CD-B3B2-C5FC3F927C6A> /usr/lib/system/libcache.dylib

0x7fff8a907000 - 0x7fff8a909fff libquarantine.dylib (36.7.0 - compatibility 1.0.0) <8D9832F9-E4A9-38C3-B880-E5210B2353C7> /usr/lib/system/libquarantine.dylib

0x7fff8aa02000 - 0x7fff8aa14ff7 libbsm.0.dylib (??? - ???) <349BB16F-75FA-363F-8D98-7A9C3FA90A0D> /usr/lib/libbsm.0.dylib

0x7fff8aa15000 - 0x7fff8aff9fff libBLAS.dylib (??? - ???) <C34F6D88-187F-33DC-8A68-C0C9D1FA36DF> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libBLAS.dylib

0x7fff8affa000 - 0x7fff8b01bfff libPng.dylib (??? - ???) <E2B52527-4D0C-3595-BB13-8E8EF364E998> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libPng.dylib

0x7fff8b064000 - 0x7fff8b0c4fff libvDSP.dylib (325.4.0 - compatibility 1.0.0) <3A7521E6-5510-3FA7-AB65-79693A7A5839> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libvDSP.dylib

0x7fff8b0ec000 - 0x7fff8b11cff7 com.apple.DictionaryServices (1.2.1 - 158.3) <5E2EBBFD-D520-3379-A431-11DAA844B8D6> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/DictionaryServices

0x7fff8b11d000 - 0x7fff8b11dfff com.apple.Accelerate.vecLib (3.7 - vecLib 3.7) <C06A140F-6114-3B8B-B080-E509303145B8> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/vecLib

0x7fff8b187000 - 0x7fff8b28cfff libFontParser.dylib (??? - ???) <D2E56B6E-3182-3667-A78C-4172C435523A> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontParser.dylib

0x7fff8b29c000 - 0x7fff8b29dfff libDiagnosticMessagesClient.dylib (??? - ???) <3DCF577B-F126-302B-BCE2-4DB9A95B8598> /usr/lib/libDiagnosticMessagesClient.dylib

0x7fff8b29e000 - 0x7fff8b2a3fff libcompiler_rt.dylib (6.0.0 - compatibility 1.0.0) <98ECD5F6-E85C-32A5-98CD-8911230CB66A> /usr/lib/system/libcompiler_rt.dylib

0x7fff8b2a4000 - 0x7fff8b2c3fff libresolv.9.dylib (46.1.0 - compatibility 1.0.0) <0635C52D-DD53-3721-A488-4C6E95607A74> /usr/lib/libresolv.9.dylib

0x7fff8b377000 - 0x7fff8b479fff libxml2.2.dylib (10.3.0 - compatibility 10.0.0) <AFBB22B7-07AE-3F2E-B88C-70BEEBFB8A86> /usr/lib/libxml2.2.dylib

0x7fff8b47a000 - 0x7fff8b47afff libkeymgr.dylib (23.0.0 - compatibility 1.0.0) <61EFED6A-A407-301E-B454-CD18314F0075> /usr/lib/system/libkeymgr.dylib

0x7fff8b47b000 - 0x7fff8b558fef libsystem_c.dylib (763.13.0 - compatibility 1.0.0) <41B43515-2806-3FBC-ACF1-A16F35B7E290> /usr/lib/system/libsystem_c.dylib

0x7fff8b56e000 - 0x7fff8b635ff7 com.apple.ColorSync (4.7.4 - 4.7.4) <590AFCDA-F10E-31FE-9B01-DA5FFE74C2BB> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ColorSync.framework/Versions/A/ColorSync

0x7fff8b7cd000 - 0x7fff8b7d3fff com.apple.DiskArbitration (2.4.1 - 2.4.1) <CEA34337-63DE-302E-81AA-10D717E1F699> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration

0x7fff8b7f4000 - 0x7fff8b86aff7 libc++.1.dylib (28.4.0 - compatibility 1.0.0) <A24FC3DA-4FFA-3DD2-9DCC-2B8D1B3BF97C> /usr/lib/libc++.1.dylib

0x7fff8b86b000 - 0x7fff8b871fff libmacho.dylib (800.0.0 - compatibility 1.0.0) <165514D7-1BFA-38EF-A151-676DCD21FB64> /usr/lib/system/libmacho.dylib

0x7fff8b872000 - 0x7fff8b8c6fff libFontRegistry.dylib (??? - ???) <60FF9C2C-5E44-3C49-8A08-F26101898F21> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontRegistry.dylib

0x7fff8b90d000 - 0x7fff8b97dfff com.apple.datadetectorscore (3.0 - 179.4) <9C01D16F-75A9-3BDD-B91A-F0F32261A2E7> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDe tectorsCore

0x7fff8b97e000 - 0x7fff8ba73fff libiconv.2.dylib (7.0.0 - compatibility 7.0.0) <5C40E880-0706-378F-B864-3C2BD922D926> /usr/lib/libiconv.2.dylib

0x7fff8c12c000 - 0x7fff8c149fff libxpc.dylib (77.19.0 - compatibility 1.0.0) <9F57891B-D7EF-3050-BEDD-21E7C6668248> /usr/lib/system/libxpc.dylib

0x7fff8c14a000 - 0x7fff8c466fff com.apple.CoreServices.CarbonCore (960.25 - 960.25) <4FC1AB30-022C-3C67-AC46-FDCBFCB7EEDE> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonC ore.framework/Versions/A/CarbonCore

0x7fff8c467000 - 0x7fff8c4d2ff7 com.apple.framework.IOKit (2.0 - ???) <FE838BB6-D42E-3291-A1A0-6F53FC970261> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

0x7fff8c4df000 - 0x7fff8c5ecfff libJP2.dylib (??? - ???) <6AF1F5FC-34D4-3278-BEBB-0712B81890B4> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libJP2.dylib

0x7fff8c63f000 - 0x7fff8c680fff com.apple.QD (3.40.1 - ???) <13ACC7F4-B004-3370-B575-6D06447EE428> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ QD.framework/Versions/A/QD

0x7fff8c681000 - 0x7fff8c696fff com.apple.speech.synthesis.framework (4.0.74 - 4.0.74) <C061ECBB-7061-3A43-8A18-90633F943295> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesis

0x7fff8c697000 - 0x7fff8c71bff7 com.apple.ApplicationServices.ATS (317.12.0 - ???) <BE3C156D-8326-37AA-BC4E-D3C0D31BF976> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/ATS

0x7fff8c71c000 - 0x7fff8c828fef libcrypto.0.9.8.dylib (49.1.0 - compatibility 0.9.8) <FB999E54-C9BC-3A6D-9FE5-BFCC236775ED> /usr/lib/libcrypto.0.9.8.dylib

0x7fff8cc4f000 - 0x7fff8cc7aff7 libxslt.1.dylib (3.24.0 - compatibility 3.0.0) <E71220D3-8015-38EC-B97D-7FDB383C2BDC> /usr/lib/libxslt.1.dylib

0x7fff8cc7b000 - 0x7fff8cc84ff7 libsystem_notify.dylib (80.1.0 - compatibility 1.0.0) <A4D651E3-D1C6-3934-AD49-7A104FD14596> /usr/lib/system/libsystem_notify.dylib

0x7fff8cc85000 - 0x7fff8cca1ff7 com.apple.GenerationalStorage (1.0 - 126.1) <509F52ED-E54B-3FEF-B3C2-759387B826E6> /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Gene rationalStorage

0x7fff8cca2000 - 0x7fff8ccc2fff libsystem_kernel.dylib (1699.32.7 - compatibility 1.0.0) <66C9F9BD-C7B3-30D4-B1A0-03C8A6392351> /usr/lib/system/libsystem_kernel.dylib

0x7fff8cd38000 - 0x7fff8cd3efff IOSurface (??? - ???) <77C6757B-D357-3E34-9424-48F962B5CC9C> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface

0x7fff8dc07000 - 0x7fff8dcebff7 com.apple.CoreServices.OSServices (478.50 - 478.50) <3D6AA4EF-C601-36C7-8F3A-A00964F01759> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServi ces.framework/Versions/A/OSServices

0x7fff8dcff000 - 0x7fff8dd3afff libsystem_info.dylib (??? - ???) <35F90252-2AE1-32C5-8D34-782C614D9639> /usr/lib/system/libsystem_info.dylib

0x7fff8dd42000 - 0x7fff8dd75ff7 com.apple.GSS (2.2 - 2.0) <C86012C5-B613-3199-B1B3-A1494EE5E43C> /System/Library/Frameworks/GSS.framework/Versions/A/GSS

0x7fff8eb92000 - 0x7fff8eb96fff libdyld.dylib (195.5.0 - compatibility 1.0.0) <380C3F44-0CA7-3514-8080-46D1C9DF4FCD> /usr/lib/system/libdyld.dylib

0x7fff8effc000 - 0x7fff8effdfff libunc.dylib (24.0.0 - compatibility 1.0.0) <337960EE-0A85-3DD0-A760-7134CF4C0AFF> /usr/lib/system/libunc.dylib

0x7fff8effe000 - 0x7fff8f134fff com.apple.vImage (5.1 - 5.1) <A08B7582-67BC-3EED-813A-4833645964A7> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.fr amework/Versions/A/vImage

0x7fff8f338000 - 0x7fff8f3d2ff7 com.apple.SearchKit (1.4.0 - 1.4.0) <4E70C394-773E-3A4B-A93C-59A88ABA9509> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchK it.framework/Versions/A/SearchKit

0x7fff8f454000 - 0x7fff8f45bfff libcopyfile.dylib (85.1.0 - compatibility 1.0.0) <0AB51EE2-E914-358C-AC19-47BC024BDAE7> /usr/lib/system/libcopyfile.dylib

0x7fff8f52e000 - 0x7fff8f702ff7 com.apple.CoreFoundation (6.7.2 - 635.21) <62A3402E-A4E7-391F-AD20-1EF20236CE1B> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation

0x7fff8f9c8000 - 0x7fff8f9dcff7 com.apple.LangAnalysis (1.7.0 - 1.7.0) <04C31EF0-912A-3004-A08F-CEC27030E0B2> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ LangAnalysis.framework/Versions/A/LangAnalysis

0x7fff8f9dd000 - 0x7fff8fa60fef com.apple.Metadata (10.7.0 - 627.37) <B9BEB598-B6F2-3BFF-A8F3-C3C87CD076AB> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadat a.framework/Versions/A/Metadata

0x7fff8fd8f000 - 0x7fff8fd9aff7 libc++abi.dylib (14.0.0 - compatibility 1.0.0) <8FF3D766-D678-36F6-84AC-423C878E6D14> /usr/lib/libc++abi.dylib

0x7fff8fd9b000 - 0x7fff8fda5ff7 liblaunch.dylib (392.39.0 - compatibility 1.0.0) <8C235D13-2928-30E5-9E12-2CC3D6324AE2> /usr/lib/system/liblaunch.dylib

0x7fff8fdbf000 - 0x7fff8fea3e5f libobjc.A.dylib (228.0.0 - compatibility 1.0.0) <871E688B-CF57-3BC7-80D6-F6476DFF109B> /usr/lib/libobjc.A.dylib

0x7fff8ffcc000 - 0x7fff8ffccfff com.apple.CoreServices (53 - 53) <043C8026-8EDD-3241-B090-F589E24062EF> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices

0x7fff8ffcd000 - 0x7fff8ffd8fff com.apple.CommonAuth (2.2 - 2.0) <4F5302A5-867A-3F2E-9E4B-98FA011678F8> /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth

0x7fff9006b000 - 0x7fff90384fff com.apple.Foundation (6.7.2 - 833.25) <22AAC369-B63C-3C55-8AC6-C3ECBA44DA7B> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation

0x7fff90385000 - 0x7fff903c7ff7 libcommonCrypto.dylib (55010.0.0 - compatibility 1.0.0) <BB770C22-8C57-365A-8716-4A3C36AE7BFB> /usr/lib/system/libcommonCrypto.dylib

0x7fff90507000 - 0x7fff9058cff7 com.apple.Heimdal (2.2 - 2.0) <52B0F371-D272-3C8E-B42F-04D3FDD8AD0D> /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal

0x7fff905e0000 - 0x7fff905f3ff7 libCRFSuite.dylib (??? - ???) <0B76941F-218E-30C8-B6DE-E15919F8DBEB> /usr/lib/libCRFSuite.dylib

0x7fff905f5000 - 0x7fff90619fff com.apple.Kerberos (1.0 - 1) <1F826BCE-DA8F-381D-9C4C-A36AA0EA1CB9> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos

0x7fff9061a000 - 0x7fff90676ff7 com.apple.HIServices (1.21 - ???) <B012EE97-D1CD-3F4B-812D-9AC7E6852FE6> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ HIServices.framework/Versions/A/HIServices

0x7fff90677000 - 0x7fff906a0fff libJPEG.dylib (??? - ???) <64D079F9-256A-323B-A837-84628B172F21> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libJPEG.dylib

0x7fff906a1000 - 0x7fff906a1fff com.apple.ApplicationServices (41 - 41) <89B6AD5B-5C75-3E83-8C2B-AA7F4C55E400> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Application Services

0x7fff90dc6000 - 0x7fff90dc8fff com.apple.TrustEvaluationAgent (2.0 - 1) <1F31CAFF-C1C6-33D3-94E9-11B721761DDF> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/Tru stEvaluationAgent

0x7fff90e23000 - 0x7fff90e2bfff libsystem_dnssd.dylib (??? - ???) <584B321E-5159-37CD-B2E7-82E069C70AFB> /usr/lib/system/libsystem_dnssd.dylib

0x7fff90e88000 - 0x7fff90e89fff libdnsinfo.dylib (395.11.0 - compatibility 1.0.0) <853BAAA5-270F-3FDC-B025-D448DB72E1C3> /usr/lib/system/libdnsinfo.dylib

0x7fff91080000 - 0x7fff91085fff libGIF.dylib (??? - ???) <58A4492D-AAE7-3B8F-8B06-62867471A3EE> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libGIF.dylib

0x7fff910d2000 - 0x7fff91a70a27 com.apple.CoreGraphics (1.600.0 - ???) <576777EA-921B-3D94-98C3-40A9CF8EBD18> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/CoreGraphics

0x7fff91d5f000 - 0x7fff91d8cfe7 libSystem.B.dylib (159.1.0 - compatibility 1.0.0) <7BEBB139-50BB-3112-947A-F4AA168F991C> /usr/lib/libSystem.B.dylib

0x7fff91d8d000 - 0x7fff91d9fff7 libz.1.dylib (1.2.5 - compatibility 1.0.0) <30CBEF15-4978-3DED-8629-7109880A19D4> /usr/lib/libz.1.dylib

0x7fff91e56000 - 0x7fff91e95fff com.apple.AE (527.7 - 527.7) <B82F7ABC-AC8B-3507-B029-969DD5CA813D> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.fram ework/Versions/A/AE

0x7fff91ee0000 - 0x7fff91ee1ff7 libremovefile.dylib (21.1.0 - compatibility 1.0.0) <739E6C83-AA52-3C6C-A680-B37FE2888A04> /usr/lib/system/libremovefile.dylib

0x7fff91ee2000 - 0x7fff91ee9fff com.apple.NetFS (4.0 - 4.0) <433EEE54-E383-3505-9154-45B909FD3AF0> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS

0x7fff91eea000 - 0x7fff91f5dfff libstdc++.6.dylib (52.0.0 - compatibility 7.0.0) <6BDD43E4-A4B1-379E-9ED5-8C713653DFF2> /usr/lib/libstdc++.6.dylib

0x7fff92072000 - 0x7fff921d9fff com.apple.CFNetwork (520.5.1 - 520.5.1) <08F70E26-5456-3BFB-8192-00D3CE40D3C9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwo rk.framework/Versions/A/CFNetwork

0x7fff921da000 - 0x7fff92232ff7 libTIFF.dylib (??? - ???) <59353B7F-EA9A-32D5-A501-283443B30C60> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libTIFF.dylib

0x7fff92233000 - 0x7fff92238ff7 libsystem_network.dylib (??? - ???) <5DE7024E-1D2D-34A2-80F4-08326331A75B> /usr/lib/system/libsystem_network.dylib

0x7fff92239000 - 0x7fff92246ff7 libbz2.1.0.dylib (1.0.5 - compatibility 1.0.0) <3373D310-3B10-3DD1-B754-B7B138CD448D> /usr/lib/libbz2.1.0.dylib

0x7fff93436000 - 0x7fff93437ff7 libsystem_sandbox.dylib (??? - ???) <5459F293-E1F2-33B3-B9B2-2ABB7B915B62> /usr/lib/system/libsystem_sandbox.dylib

0x7fff938c9000 - 0x7fff93944ff7 com.apple.print.framework.PrintCore (7.1 - 366.3) <C5F39A82-0E77-3AD6-906A-20DD2EE8D374> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ PrintCore.framework/Versions/A/PrintCore

0x7fff9395e000 - 0x7fff93963fff libpam.2.dylib (3.0.0 - compatibility 3.0.0) <D952F17B-200A-3A23-B9B2-7C1F7AC19189> /usr/lib/libpam.2.dylib

0x7fff93b70000 - 0x7fff93b70fff com.apple.Accelerate (1.7 - Accelerate 1.7) <82DDF6F5-FBC3-323D-B71D-CF7ABC5CF568> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate

0x7fff93b73000 - 0x7fff93bc1fff libauto.dylib (??? - ???) <D8AC8458-DDD0-3939-8B96-B6CED81613EF> /usr/lib/libauto.dylib

0x7fff93bc2000 - 0x7fff93bc8ff7 libunwind.dylib (30.0.0 - compatibility 1.0.0) <1E9C6C8C-CBE8-3F4B-A5B5-E03E3AB53231> /usr/lib/system/libunwind.dylib

0x7fff94484000 - 0x7fff94525fff com.apple.LaunchServices (480.40 - 480.40) <C936A07F-0CF8-3F8E-BDB3-76AA7611B4CA> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchS ervices.framework/Versions/A/LaunchServices

0x7fff949d6000 - 0x7fff949d7ff7 libsystem_blocks.dylib (53.0.0 - compatibility 1.0.0) <8BCA214A-8992-34B2-A8B9-B74DEACA1869> /usr/lib/system/libsystem_blocks.dylib

0x7fff94d5f000 - 0x7fff9518cfff libLAPACK.dylib (??? - ???) <4F2E1055-2207-340B-BB45-E4F16171EE0D> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libLAPACK.dylib

0x7fff9518d000 - 0x7fff9519cff7 libxar-nossl.dylib (??? - ???) <A6ABBFB9-E4ED-38AD-BBBB-F9958B9CEFB5> /usr/lib/libxar-nossl.dylib

0x7fff953e5000 - 0x7fff953fcfff com.apple.CFOpenDirectory (10.7 - 146) <E71AE4A2-F72B-35F2-9043-9F45CF75F11A> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpen Directory.framework/Versions/A/CFOpenDirectory

0x7fff9545a000 - 0x7fff9565cfff libicucore.A.dylib (46.1.0 - compatibility 1.0.0) <0176782F-9526-3905-813A-7A5676EC2C86> /usr/lib/libicucore.A.dylib

0x7fff9565d000 - 0x7fff9566bff7 libkxld.dylib (??? - ???) <01161870-E3B3-3F87-BA4A-0AA7A081F409> /usr/lib/system/libkxld.dylib

0x7fff956f5000 - 0x7fff957fcfe7 libsqlite3.dylib (9.6.0 - compatibility 9.0.0) <EE02BB01-64C9-304D-9719-A35F5CD6D04C> /usr/lib/libsqlite3.dylib

0x7fff9581a000 - 0x7fff958cdff7 com.apple.CoreText (220.22.0 - ???) <A7A1096F-A211-3775-BA33-08FE98D27F08> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreText.framework/Versions/A/CoreText

0x7fff95969000 - 0x7fff95977fff libdispatch.dylib (187.10.0 - compatibility 1.0.0) <8E03C652-922A-3399-93DE-9EA0CBFA0039> /usr/lib/system/libdispatch.dylib

0x7fff95978000 - 0x7fff95a57fff com.apple.ImageIO.framework (3.1.2 - 3.1.2) <047DFE61-500F-3F11-9881-D0844D2FCE5F> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/ImageIO

0x7fff95a58000 - 0x7fff95aa4ff7 com.apple.SystemConfiguration (1.11.3 - 1.11) <0A7F1982-B4EA-3424-A0C7-FE46C6224F03> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfi guration

0x7fff95aa5000 - 0x7fff95b3bff7 libvMisc.dylib (325.4.0 - compatibility 1.0.0) <642D8D54-F9F5-3FBB-A96C-EEFE94C6278B> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libvMisc.dylib

0x7fff95b3e000 - 0x7fff95b7eff7 libcups.2.dylib (2.9.0 - compatibility 2.0.0) <7D2E5016-A960-3ADE-B042-F74063E79550> /usr/lib/libcups.2.dylib

0x7fff95b83000 - 0x7fff95b86fff libRadiance.dylib (??? - ???) <CD89D70D-F177-3BAE-8A26-644EA7D5E28E> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libRadiance.dylib



External Modification Summary:

Calls made by other processes targeting this process:

task_for_pid: 1

thread_create: 0

thread_set_state: 0

Calls made by this process:

task_for_pid: 0

thread_create: 0

thread_set_state: 0

Calls made by all processes on this machine:

task_for_pid: 38174

thread_create: 1

thread_set_state: 0



VM Region Summary:

ReadOnly portion of Libraries: Total=108.0M resident=41.9M(39%) swapped_out_or_unallocated=66.0M(61%)

Writable regions: Total=50.1M written=412K(1%) resident=644K(1%) swapped_out=0K(0%) unallocated=49.5M(99%)


REGION TYPE VIRTUAL

=========== =======

MALLOC 40.3M

MALLOC guard page 32K

STACK GUARD 56.0M

Stack 9752K

VM_ALLOCATE 36K

__DATA 4168K

__LINKEDIT 49.1M

__TEXT 58.8M

__UNICODE 544K

mapped file 15.6M

shared memory 308K

=========== =======

TOTAL 234.4M

Reply
User profile for user: Linc Davis
Linc Davis
User level: Level 10
209,547 points

Dec 12, 2013 10:40 AM in response to zap3

Please read this whole message before doing anything.

This procedure is a diagnostic test. It changes nothing, and therefore will not, in itself, solve your problem.

Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The procedure will help identify which such modifications you've installed, as well as certain other aspects of the configuration that may have a bearing on the problem. Don’t be alarmed by the apparent complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.


These steps are to be taken while booted in “normal” mode, not in safe mode, if possible. If you’re now running in safe mode, reboot as usual before continuing. If you can only boot in safe mode, you can still use this procedure, but not all of it will work. Be sure to mention that in your reply, if you haven't already done so.


Below are instructions to enter UNIX shell commands. The commands are safe and do nothing but produce human-readable text output, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects. I am not asking you to trust me. If you can't satisfy yourself that these instructions are safe, don't follow them.

The commands will line-wrap or scroll in your browser, but each one is really just a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it.

Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. Step 1 should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.

Launch the Terminal application in any of the following ways:


☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.


When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.


Step 1


Triple-click anywhere in the line of text below on this page to select it:

PB="/u*/*/Pl* -c Print"; { echo Loaded kernel extensions:; kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'; echo $'\nLoaded user agents:'; launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)|\.[0-9]+$/{print $3}'; echo $'\nInserted libraries:'; launchctl getenv DYLD_INSERT_LIBRARIES; echo $'\nUser cron tasks:'; crontab -l; echo $'\nGlobal launchd configuration:'; cat /e*/lau*; echo $'\nPer-user launchd configuration:'; cat .lau*; echo $'\nGlobal login items:'; $PB /L*/P*/loginwindow.plist | awk -F'= ' '/Path/{print $2}'; echo $'\nPer-user login items:'; $PB L*/P*/com.apple.loginitems.plist | awk -F'= ' '/Path/{print $2}'; echo $'\nSafari extensions:'; $PB L*/Saf*/*/E*.plist | awk -F'= ' '/Bundl/{print $2}' | sed 's/\..*$//;s/-[1-9]$//'; printf "\nRestricted user files: %s\n" $(find ~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \) | wc -l); echo $'\nExtrinsic loadable bundles:'; cd; find -L /S*/L*/E* {,/}L*/{Ad,Compon,Ex,In,Keyb,Mail/Bu,P*P,Qu,Scripti,Servi,Spo}* -type d -name Contents -prune | while read d; do /usr/libexec/PlistBuddy -c 'Print :CFBundleIdentifier' "$d/Info.plist" | egrep -qv "^com\.apple\.[^x]|Accusys|ArcMSR|ATTO|HDPro|HighPoint|driver\.stex|hp-fax|JMicron|print|SoftRAID" && echo ${d%/Contents}; done; echo $'\nUnsigned shared libraries:'; find /u*/{,*/}lib -type f -exec sh -c 'file -b $1 | grep -qw shared && ! codesign -v $1' {} {} \; -print; echo; ls -A {,/}L*/{La,Priv,Sta}* L*/Fonts; } 2> /dev/null | open -ef


Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.

The command may take up to a few minutes to run, depending on how many files you have and the speed of the computer. A TextEdit window will open with the output. Post the contents of the TextEdit window (not the Terminal window) — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.

Step 2


Remember that you must be logged in as an administrator for this step. Do as in Step 1 with this line:

{ echo "Loaded system agents:"; sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; echo $'\n'"Login hook:"; sudo defaults read com.apple.loginwindow LoginHook; echo $'\n'"Root cron tasks:"; sudo crontab -l; echo $'\n'"Log check:"; syslog -k Sender kernel -k Message CReq 'GPU |hfs: Ru|I/O e|find tok|n Cause: -|NVDA\(|pagin|timed? ?o' | tail | awk '/:/{$4=""; print}'; } 2> /dev/null | open -ef

This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

You can then quit Terminal.

To prevent confusion, I'll repeat: When you type your password in the Terminal window, you won't see what you're typing.

Note: If you don’t have a login password, set one before taking Step 2. If that’s not possible, skip the step.

Important: If any personal information, such as your name or email address, appears in the output of these commands, anonymize it before posting. Usually that won't be necessary.

Remember, Steps 1 and 2 are all copy-and-paste — no typing, except your password. Also remember to post the output as text, not as a screenshot.

Please post the contents of the TextEdit window, not the Terminal window.
Reply
User profile for user: zap3
zap3 Author
User level: Level 1
0 points

Dec 12, 2013 11:12 AM in response to Linc Davis

Loaded kernel extensions:

com.parallels.kext.prl_usb_connect (7.0

com.parallels.kext.prl_hypervisor (7.0

com.parallels.kext.prl_hid_hook (7.0

com.parallels.kext.prl_netbridge (7.0

com.parallels.kext.prl_vnic (7.0

com.trendmicro.kext.filehook (1.1.0)

com.trendmicro.kext.KERedirect (1.0.0)



Loaded user agents:

com.trendmicro.itis.loginmgr.agent

com.parallels.vm.prl_pcproxy

com.parallels.DesktopControlAgent

com.parallels.desktop.client.launch

com.oracle.java.Java-Updater

com.hp.messagecenter.launcher

com.google.keystone.system.agent

com.adobe.AdobeCreativeCloud

com.facebook.videochat.kristofermoore.updater

com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae



Inserted libraries:



User cron tasks:



Global launchd configuration:



Per-user launchd configuration:



Global login items:

/Library/Application Support/TrendMicro/TmccMac/TmLoginMgr.app

/Library/Application Support/Hewlett-Packard/Customer Participation/HP Product Research.app/



Per-user login items:

/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

/Applications/QuickTime Player.app



Safari extensions:



Restricted user files: 537



Extrinsic loadable bundles:

/System/Library/Extensions/hp_psa640_io_enabler.kext

/System/Library/Extensions/hp_qc_io_enabler.kext

/System/Library/Extensions/prl_usb_connect.kext

Library/Address Book Plug-Ins/SkypeABDialer.bundle

Library/Address Book Plug-Ins/SkypeABSMS.bundle

Library/Address Book Plug-Ins/YMsgrCallABPlugin.bundle

Library/Address Book Plug-Ins/YMsgrMsnABPlugin.bundle

Library/Address Book Plug-Ins/YMsgrSmsABPlugin.bundle

Library/Address Book Plug-Ins/YMsgrYimABPlugin.bundle

Library/Internet Plug-Ins/FacebookVideoCalling.bundle

/Library/Internet Plug-Ins/AdobeAAMDetect.plugin

/Library/Internet Plug-Ins/AdobeExManCCDetect_x86_64.plugin

/Library/Internet Plug-Ins/AdobeExManDetect.plugin

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

/Library/Internet Plug-Ins/Flash Player.plugin

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

/Library/Internet Plug-Ins/npgtpo3dautoplugin.plugin

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

/Library/PreferencePanes/Flash Player.prefPane

/Library/PreferencePanes/JavaControlPanel.prefPane

/Library/QuickLook/ParallelsQL.qlgenerator

/Library/Spotlight/Microsoft Office.mdimporter

/Library/Spotlight/ParallelsMD.mdimporter



Unsigned shared libraries:

/usr/local/lib/libfreetype.6.3.16.dylib

/usr/local/lib/libfreetype.6.dylib

/usr/local/lib/libfreetype.dylib

/usr/local/lib/vcomponents/libvclient_fat_release.dylib

/usr/local/lib/vcomponents/libvkernel_fat_release.dylib

/usr/local/lib/vcomponents/libvreport_fat_release.dylib

/usr/local/lib/vcomponents/libvshared_fat_release.dylib



/Library/LaunchAgents:

com.adobe.AAM.Updater-1.0.plist

com.adobe.AdobeCreativeCloud.plist

com.google.keystone.agent.plist

com.hp.messagecenter.launcher.plist

com.oracle.java.Java-Updater.plist

com.parallels.DesktopControlAgent.plist

com.parallels.desktop.launch.plist

com.parallels.vm.prl_pcproxy.plist

com.trendmicro.itis.loginmgr.agent.plist



/Library/LaunchDaemons:

com.adobe.SwitchBoard.plist

com.adobe.fpsaud.plist

com.apple.remotepairtool.plist

com.google.keystone.daemon.plist

com.oracle.java.Helper-Tool.plist

com.parallels.desktop.launchdaemon.plist

com.trendmicro.itis.icore.agent.plist



/Library/PrivilegedHelperTools:



/Library/StartupItems:

iCoreService



Library/Fonts:

BSTGreek.ttf

Cardo99s.ttf

GalSILR.ttf

Helena Bold.dfont

Helena BoldItalic.dfont

Helena Italic.dfont

Helena.dfont

MSS Bold Italic.dfont

MSS Bold.dfont

MSS BoldItalic.dfont

MSS Italic.dfont

MSS.dfont

Peshitta Bold.dfont

Peshitta.dfont

Rosetta Bold Italic.dfont

Rosetta Bold.dfont

Rosetta BoldItalic.dfont

Rosetta Italic.dfont

Rosetta.dfont

SILEOT.ttf

Salaam Bold.dfont

Salaam.dfont

Sylvanus Bold.dfont

Sylvanus BoldItalic.dfont

Sylvanus Italic.dfont

Sylvanus.dfont

SyrCOMTalada.ttf

TekniaGreek

TekniaGreek.ttf

TekniaHebrew.ttf

Yehudit Bold.dfont

Yehudit.dfont

encodings.dir

fonts.dir

fonts.list

fonts.scale

newathu.ttf

newathu403.ttf



Library/LaunchAgents:

com.adobe.AAM.Updater-1.0.plist

com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist

com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.5E89E7EC-C0B9-4E99-BDE7-ECC 0DA6DAB55.plist

com.facebook.videochat.kristofermoore.plist




Loaded system agents:

com.parallels.vm.prl_naptd

com.trendmicro.itis.icore.agent

com.parallels.desktop.launchdaemon

com.oracle.java.Helper-Tool

com.google.keystone.daemon

com.adobe.SwitchBoard

com.adobe.fpsaud



Login hook:



Root cron tasks:



Log check:

Reply
User profile for user: Linc Davis
Linc Davis
User level: Level 10
209,547 points

Dec 12, 2013 11:38 AM in response to zap3

1. This is a comment on what you should and should not do to protect yourself from malicious software ("malware") that circulates on the Internet. It does not apply to software, such as keystroke loggers, that may be installed deliberately by an intruder who has hands-on access to the victim's computer. That threat is in a different category, and there's no easy way to defend against it. If you have reason to suspect that you're the target of such an attack, you need expert help.

If you find this comment too long or too technical, read only sections 5, 6, and 10.

OS X now implements three layers of built-in protection specifically against malware, not counting runtime protections such as execute disable, sandboxing, system library randomization, and address space layout randomization that may also guard against other kinds of exploits.

2. All versions of OS X since 10.6.7 have been able to detect known Mac malware in downloaded files, and to block insecure web plugins. This feature is transparent to the user, but internally Apple calls it "XProtect." The malware recognition database is automatically checked for updates once a day; however, you shouldn't rely on it, because the attackers are always at least a day ahead of the defenders.

The following caveats apply to XProtect:

  • It can be bypassed by some third-party networking software, such as BitTorrent clients and Java applets.
  • It only applies to software downloaded from the network. Software installed from a CD or other media is not checked.
As new versions of OS X are released, it's not clear whether Apple will indefinitely continue to maintain the XProtect database of older versions such as 10.6. The security of obsolete system versions may eventually be degraded. Security updates to the code of obsolete systems will stop being released at some point, and that may leave them open to other kinds of attack besides malware.

3. Starting with OS X 10.7.5, there has been a second layer of built-in malware protection, designated " Gatekeeper" by Apple. By default, applications and Installer packages downloaded from the network will only run if they're digitally signed by a developer with a certificate issued by Apple. Software certified in this way hasn't necessarily been tested by Apple, but you can be reasonably sure that it hasn't been modified by anyone other than the developer. His identity is known to Apple, so he could be held legally responsible if he distributed malware. That may not mean much if the developer lives in a country with a weak legal system (see below.)

Gatekeeper doesn't depend on a database of known malware. It has, however, the same limitations as XProtect, and in addition the following:

  • It can easily be disabled or overridden by the user.
  • A malware attacker could get control of a code-signing certificate under false pretenses, or could simply ignore the consequences of distributing codesigned malware.
  • An App Store developer could find a way to bypass Apple's oversight, or the oversight could fail due to human error.

For the reasons given above, App Store products, and other applications recognized by Gatekeeper as signed, are safer than others, but they can't be considered absolutely safe. "Sandboxed" applications may prompt for access to private data, such as your contacts, or for access to the network. Think before granting that access. OS X security is based on user input. Never click through any request for authorization without thinking.

4. Starting with OS X 10.8.3, a third layer of protection has been added: a "Malware Removal Tool" (MRT). MRT runs automatically in the background when you update the OS. It checks for, and removes, malware that may have evaded the other protections via a Java exploit (see below.) MRT also runs when you install or update the Apple-supplied Java runtime (but not the Oracle runtime.) Like XProtect, MRT is effective against known threats, but not against unknown ones. It notifies you if it finds malware, but otherwise there's no user interface to MRT.


5. The built-in security features of OS X reduce the risk of malware attack, but they're not absolute protection. The first and best line of defense is always going to be your own intelligence. With the possible exception of Java exploits, all known malware circulating on the Internet that affects a fully-updated installation of OS X 10.6 or later takes the form of so-called " Trojan horses," which can only have an effect if the victim is duped into running them. The threat therefore amounts to a battle of wits between you and the malware attacker. If you're smarter than he thinks you are, you'll win.

That means, in practice, that you always stay within a safe harbor of computing practices. How do you know what is safe?
  • Any website that prompts you to install a “codec,” “plug-in,” "player," "extractor," or “certificate” that comes from that same site, or an unknown one, is unsafe.
  • A web operator who tells you that you have a “virus,” or that anything else is wrong with your computer, or that you have won a prize in a contest you never entered, is trying to commit a crime with you as the victim. (Some reputable websites did legitimately warn visitors who were infected with the "DNSChanger" malware. That exception to this rule no longer applies.)
  • Pirated copies or "cracks" of commercial software, no matter where they come from, are unsafe.
  • Software of any kind downloaded from a BitTorrent or from a Usenet binary newsgroup is unsafe.
  • Software that purports to help you do something that's illegal or that infringes copyright, such as saving streamed audio or video for reuse without permission, is unsafe. All YouTube "downloaders" are outside the safe harbor, though not all are necessarily harmful.
  • Software with a corporate brand, such as Adobe Flash Player, must be downloaded directly from the developer’s website. If it comes from any other source, it's unsafe. For instance, if a web page warns you that Flash is out of date, do not follow an offered link to an update. Go to the Adobe website to download it, if you need it at all.
  • Even signed applications, no matter what the source, should not be trusted if they do something unexpected, such as asking for permission to access your contacts, your location, or the Internet for no obvious reason.
  • "FREE WI-FI !!!" networks in public places are unsafe unless you can verify that the network is not a trap (which you probably can't.) Even then, do not download any software or transmit any private information while connected to such a network, regardless of where it seems to come from or go to.
6. Java on the Web ( not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.

Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.

Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it — not JavaScript — in your browsers.

Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a lock icon in the address bar with the abbreviation "https" when visiting a secure site.
Follow the above guidelines, and you’ll be as safe from malware as you can practically be. The rest of this comment concerns what you should not do to protect yourself from malware.

7. Never install any commercial "anti-virus" or "Internet security" products for the Mac, as they all do more harm than good, if they do any good at all. Any database of known threats is always going to be out of date. Most of the danger is from unknown threats. If you need to be able to detect Windows malware in your files, use one of the free anti-virus products in the Mac App Store — nothing else.

Why shouldn't you use commercial "anti-virus" products?
  • Their design is predicated on the nonexistent threat that malware may be injected at any time, anywhere in the file system. Malware is downloaded from the network; it doesn't materialize from nowhere.
  • In order to meet that nonexistent threat, the software modifies or duplicates low-level functions of the operating system, which is a waste of resources and a common cause of instability, bugs, and poor performance.
  • To recognize malware, the software depends on a database of known threats, which is always at least a day out of date. Most of the real-world danger of malware attack comes from highly targeted "zero-day" exploits that are not yet recognized.
  • By modifying the operating system, the software itself may create weaknesses that could be exploited by malware attackers.

8. An anti-malware product from the App Store, such as "ClamXav," doesn't have these drawbacks. That doesn't mean it's entirely safe. It may report email messages that have "phishing" links in the body, or Windows malware in attachments, as infected files, and offer to delete or move them. Doing so will corrupt the Mail database. The messages should be deleted from within the Mail application.

An anti-virus app is not needed, and should not be relied upon, for protection against OS X malware. It's useful only for detecting Windows malware. Windows malware can't harm you directly (unless, of course, you use Windows.) Just don't pass it on to anyone else.

A Windows malware attachment in email is usually easy to recognize. The file name will often be targeted at people who aren't very bright; for example:

♥♥♥♥♥♥♥♥♥♥♥♥♥♥!!!!!!!H0TBABEZ4U!!!!!!!.AVI♥♥♥♥♥♥♥♥♥♥♥♥♥♥.exe

Anti-virus software may be able to tell you which particular virus or trojan it is, but do you care? In practice, there's seldom a reason to use the software unless a network administrator requires you to do it.

The ClamXav developer won't try to "upsell" you to a paid version of the product. Other developers may do that. Don't be upsold. For one thing, you should not pay to protect Windows users from the consequences of their choice of computing platform. For another, a paid upgrade from a free app will probably have the disadvantages mentioned in section 7.

9. It seems to be a common belief that the built-in Application Firewall acts as a barrier to infection, or prevents malware from functioning. It does neither. It blocks inbound connections to certain network services you're running, such as file sharing. It's disabled by default and you should leave it that way if you're behind a router on a private home or office network. Activate it only when you're on an untrusted network, for instance a public Wi-Fi hotspot, where you don't want to provide services. Disable any services you don't use in the Sharing preference pane. All are disabled by default.

10. As a Mac user you don't have to live in fear that your computer is going to be infected every time you install an application, read email, or visit a web page. But neither should you have the false idea that you will always be safe, no matter what you do. The greatest harm done by security software is precisely its selling point: it makes people feel safe. They may then feel safe enough to take risks from which the software doesn't protect them. Nothing can lessen the need for safe computing practices.
Reply
User profile for user: zap3
zap3 Author
User level: Level 1
0 points

Dec 12, 2013 11:38 AM in response to Linc Davis

So that is going to take some time. I don't even have a large data storage device. How do I just do a complete data back-up efficiently? I have Adobe creative cloud so I have lots of adobe products installed, plus bible programs and a bunch of files for my business.


Can you tell me how to do this efficiently?

Reply
User profile for user: zap3
zap3 Author
User level: Level 1
0 points

Dec 12, 2013 12:56 PM in response to Linc Davis

But I still don't understand. Why do I need to back up my entire computer right now- just because I will remove the antivirus software. I have to go buy a large backup device for this. How is backing up my computer related to removing this program?


Why are you saying that I am going to lose my data inevitably? Is something going to happen that I am not aware of? I am confused.


Do I need to back up all my data before removing the surfing antivirus software?

Reply

Can anybody help? My Safari browser keeps crashing. The whole window just turns grey.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.
Learn more Sign up