How to remove Adware?

Linc,

Here is my Terminal info. You mentioned that if we added it here you may be able to help/give some insight on how to resolve.

Troubleshooting so far:

Ran three different virus scans, Malware bytes, Avast, Bitdefender

Ran CCleaner

Reset browser to defaults

Please help (if you can)

Terminal results:

Boot Mode: Normal

Model: iMac12,2

Thunderbolt

GoFlex Desk Adapter Thunderbolt (Seagate)

USB

DYMO LabelWriter 400 Turbo (Dymo Corporation)

CTH-661 (WACOM Co., Ltd.)

System diagnostics

2016-09-08 PenTabletDriver crash

2016-09-18 PenTabletDriver crash

2016-09-21 MPlayer OSX Extended hang

2016-09-28 PenTabletDriver crash

2016-09-29 PenTabletDriver crash

2016-09-29 PenTabletDriver crash

2016-09-29 PenTabletDriver crash

Kernel messages

Sep 25 12:34:43 PM notification timeout (pid 9999, Spotify)

--- last message repeated 6 times ---

Sep 27 22:01:47 process com.avast.daemon[11828] thread 5392121 caught burning CPU! It used more than 50% CPU (Actual recent usage: 53%) over 180 seconds. thread lifetime cpu usage 90.011009 seconds, (60.780425 user, 29.230584 system) ledger info: balance: 90001270667 credit: 90001270667 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 168267065362

Sep 28 23:15:36 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)

--- last message repeated 2 times ---

Sep 29 21:44:46 process BDLDaemon[1397] thread 58222 caught burning CPU! It used more than 50% CPU (Actual recent usage: 70%) over 180 seconds. thread lifetime cpu usage 90.115463 seconds, (78.646529 user, 11.468934 system) ledger info: balance: 90002725893 credit: 90002725893 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 126987259972

Sep 29 22:56:47 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)

Sep 29 23:03:58 process BDLDaemon[705] thread 14077 caught burning CPU! It used more than 50% CPU (Actual recent usage: 67%) over 180 seconds. thread lifetime cpu usage 90.037552 seconds, (16.228619 user, 73.808933 system) ledger info: balance: 90010168833 credit: 90010168833 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 132957091031

Sep 30 08:23:50 process com.avast.daemon[208] thread 130772 caught burning CPU! It used more than 50% CPU (Actual recent usage: 60%) over 180 seconds. thread lifetime cpu usage 178.656747 seconds, (111.632010 user, 67.024737 system) ledger info: balance: 90069493353 credit: 178640119803 debit: 88570626450 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 149206964437

Sep 30 13:59:09 AFP_VFS afpfs_DoReconnect: Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/Data

--- last message repeated 6 times ---

Loaded extrinsic kernel extensions

com.bitdefender.SelfProtect (1.1)

com.bitdefender.TMProtection (5.0.0)

com.avast.PacketForwarder (2.1)

com.avast.AvastFileShield (3.0.0)

Extrinsic daemons

com.avast.secureline.update

/Library/akgfcvcelpfb/akgfcvcelpfb

com.avast.uninstall

/Library/qVhdbCXK/qVhdbCXK.app/Contents/MacOS/qVhdbCXK

com.bitdefender.AuthHelperTool

com.bitdefender.CoreIssues

com.avast.daemon

com.adobe.ARMDC.Communicator

com.dymo.pnpd

com.malwarebytes.HelperTool

com.adobe.versioncueCS4

com.avast.update

com.avast.secureline.uninstall

com.avast.proxy

com.google.keystone.daemon

/Library/boastful/boastful

Adobe_Genuine_Software_Integrity_Service

com.oracle.java.Helper-Tool

com.bitdefender.UpdDaemon

com.avast.service

com.avast.fileshield

com.bitdefender.Daemon

com.avast.account

/Library/sue/sue

com.adobe.SwitchBoard

com.bitdefender.upgrade

com.adobe.fpsaud

com.adobe.ARMDC.SMJobBlessHelper

com.avast.secureline.service

com.avast.secureline.init

com.avast.secureline.burger

com.bitdefender.agent

com.avast.init

Extrinsic agents

6H4HRTU5E3.com.avast.osx.secureline.avastsecurelinehelper

com.epson.esua.launcher

com.avast.home.userinit

com.avast.userinit

com.avast.helper

com.avast.secureline.userinit

com.bittorrent.uTorrent

com.citrix.ServiceRecords

com.google.keystone.system.agent

com.epson.Epson_Low_Ink_Reminder.launcher

com.avast.secureline.home.userinit

com.citrix.ReceiverHelper

com.bittorrent.BitTorrent

com.adobe.ARMDCHelper.UUID

com.citrix.AuthManager_Mac

com.epson.ecrp.launcher.plist

com.oracle.java.Java-Updater

com.avast.update-agent

com.citrixonline.GoToMeeting.G2MUpdate

com.adobe.ARM.UUID

com.spotify.webhelper

com.bitdefender.antivirusformac

com.avast.secureline.update-agent

com.epson.eventmanager.agent

com.wacom.pentablet

launchd items

/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

(com.adobe.AAM.Startup-1.0)

/Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist

(com.adobe.ARMDCHelper.UUID)

/Library/LaunchAgents/com.adobe.CS4ServiceManager.plist

(com.adobe.CS4ServiceManager)

/Library/LaunchAgents/com.avast.secureline.update-agent.plist

(com.avast.secureline.update-agent)

/Library/LaunchAgents/com.avast.secureline.userinit.plist

(com.avast.secureline.userinit)

/Library/LaunchAgents/com.avast.update-agent.plist

(com.avast.update-agent)

/Library/LaunchAgents/com.avast.userinit.plist

(com.avast.userinit)

/Library/LaunchAgents/com.bitdefender.antivirusformac.plist

(com.bitdefender.antivirusformac)

/Library/LaunchAgents/com.citrix.AuthManager_Mac.plist

(com.citrix.AuthManager_Mac)

/Library/LaunchAgents/com.citrix.ReceiverHelper.plist

(com.citrix.ReceiverHelper)

/Library/LaunchAgents/com.citrix.ServiceRecords.plist

(com.citrix.ServiceRecords)

/Library/LaunchAgents/com.epson.ecrp.launcher.plist

(com.epson.ecrp.launcher.plist)

/Library/LaunchAgents/com.epson.Epson_Low_Ink_Reminder.launcher.plist

(com.epson.Epson_Low_Ink_Reminder.launcher)

/Library/LaunchAgents/com.epson.esua.launcher.plist

(com.epson.esua.launcher)

/Library/LaunchAgents/com.epson.eventmanager.agent.plist

(com.epson.eventmanager.agent)

/Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.system.agent)

/Library/LaunchAgents/com.oracle.java.Java-Updater.plist

(com.oracle.java.Java-Updater)

/Library/LaunchAgents/com.wacom.pentablet.plist

(com.wacom.pentablet)

/Library/LaunchDaemons/com.adobe.agsservice.plist

(Adobe_Genuine_Software_Integrity_Service)

/Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist

(com.adobe.ARMDC.Communicator)

/Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist

(com.adobe.ARMDC.SMJobBlessHelper)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.adobe.SwitchBoard.plist

(com.adobe.SwitchBoard)

/Library/LaunchDaemons/com.adobe.versioncueCS4.plist

(com.adobe.versioncueCS4)

/Library/LaunchDaemons/com.avast.init.plist

(com.avast.init)

/Library/LaunchDaemons/com.avast.secureline.init.plist

(com.avast.secureline.init)

/Library/LaunchDaemons/com.avast.secureline.uninstall.plist

(com.avast.secureline.uninstall)

/Library/LaunchDaemons/com.avast.secureline.update.plist

(com.avast.secureline.update)

/Library/LaunchDaemons/com.avast.uninstall.plist

(com.avast.uninstall)

/Library/LaunchDaemons/com.avast.update.plist

(com.avast.update)

/Library/LaunchDaemons/com.bitdefender.agent.plist

(com.bitdefender.agent)

/Library/LaunchDaemons/com.bitdefender.AuthHelperTool.plist

(com.bitdefender.AuthHelperTool)

/Library/LaunchDaemons/com.bitdefender.upgrade.plist

(com.bitdefender.upgrade)

/Library/LaunchDaemons/com.google.keystone.daemon.plist

(com.google.keystone.daemon)

/Library/LaunchDaemons/com.malwarebytes.HelperTool.plist

(com.malwarebytes.HelperTool)

/Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

(com.oracle.java.Helper-Tool)

Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

(com.adobe.AAM.Scheduler-1.0)

Library/LaunchAgents/com.adobe.ARM.UUID.plist

(com.adobe.ARM.UUID)

Library/LaunchAgents/com.apple.FolderActions.folders.plist

(com.apple.FolderActions.folders)

Library/LaunchAgents/com.avast.home.userinit.plist

(com.avast.home.userinit)

Library/LaunchAgents/com.avast.secureline.home.userinit.plist

(com.avast.secureline.home.userinit)

Library/LaunchAgents/com.bittorrent.BitTorrent.plist

(com.bittorrent.BitTorrent)

Library/LaunchAgents/com.bittorrent.uTorrent.plist

(com.bittorrent.uTorrent)

Library/LaunchAgents/com.citrixonline.GoToMeeting.G2MUpdate.plist

(com.citrixonline.GoToMeeting.G2MUpdate)

Library/LaunchAgents/com.spotify.webhelper.plist

(com.spotify.webhelper)

Extrinsic loadable bundles

/System/Library/Extensions/DymoUsbPrinterClassDriver.kext

(com.dymo.usbprinterclassdriver.kext)

/System/Library/Extensions/EPSONUSBPrintClass.kext

(com.epson.print.kext.USBPrintClass)

/System/Library/Extensions/Pen Tablet.kext

(com.wacom.kext.pentablet)

/Library/Address Book Plug-Ins/DYMO Address Book Addin.bundle

(com.dymo.dls.addressbook.plugin)

/Library/Extensions/EPSONUSBPrintClass.kext

(com.epson.print.kext.USBPrintClass)

/Library/Extensions/SelfProtect.kext

(com.bitdefender.SelfProtect)

/Library/Extensions/TMProtection.kext

(com.bitdefender.TMProtection)

/Library/Internet Plug-Ins/AdobeAAMDetect.plugin

(com.AdobeAAMDetectLib.AdobeAAMDetect)

/Library/Internet Plug-Ins/AdobeExManDetect.plugin

(com.AdobeExManDetectLib.AdobeExManDetect)

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

(com.adobe.acrobat.pdfviewer)

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

(com.adobe.acrobat.pdfviewerNPAPI)

/Library/Internet Plug-Ins/CitrixICAClientPlugIn.plugin

(com.citrix.citrixicaclientplugIn)

/Library/Internet Plug-Ins/DYMO NPAPI Addin.plugin

(com.dymo.dls.npapi.plugin)

/Library/Internet Plug-Ins/DYMO Safari Addin.plugin

(com.dymo.dls.safari.plugin)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/FuzeLaunchPlugin.bundle

(com.fuzemeeting.Plugin)

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

(com.oracle.java.JavaAppletPlugin)

/Library/Internet Plug-Ins/npContributeMac.bundle

(com.adobe.npContributeMacBundle)

/Library/Internet Plug-Ins/PepperFlashPlayer/PepperFlashPlayer.plugin

(com.macromedia.PepperFlashPlayer.pepper)

/Library/Internet Plug-Ins/Silverlight.plugin

(com.microsoft.SilverlightPlugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/PreferencePanes/JavaControlPanel.prefPane

(com.oracle.java.JavaControlPanel)

/Library/PreferencePanes/PenTablet.prefPane

(com.wacom.PenTabletSettingsPrefPane)

/Library/PreferencePanes/VersionCueCS4.prefPane

(com.adobe.versioncueCS4.VCPrefPane)

/Library/QuickTime/SoundboothScoreCodec.component

(com.adobe.SoundboothScoreAudioCodec)

/Library/ScriptingAdditions/Adobe Unit Types.osax

(No bundle ID)

Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin

(com.citrixonline.mac.WebDeploymentPlugin)

Library/Internet Plug-Ins/FuzeLaunchPlugin.bundle

(com.fuzemeeting.Plugin)

DNS (from DHCP): 75.114.81.1

Application check

com.google.GoogleDrive

User login items

iTunesHelper

Google Chrome

Spotify

AdobeResourceSynchronizer

SpeechSynthesisServer

VMware Fusion Start Menu

uTorrent

BitTorrent

Advanced Mac Cleaner

Restricted user files: 33

Desktop file count: 69

Elapsed time (s): 90

Hi, I've noticed some abnormal behavior with my mac recently and was wondering if I caught some unwanted adware. I followed the instructions you described above and this is what I have. Thanks in advance.

Boot Mode: Normal

Model: MacBookPro11,3

Battery cycles: 319

System load advisory

combined level = Bad

- user level = OK

- battery level = Bad

- thermal level = Great

System diagnostics

2016-11-10 Microsoft Excel hang

User diagnostics

2016-10-18 Microsoft Remote Desktop crash

2016-11-09 Adobe Flash Player Install Manager crash

2016-11-09 iTunes crash

Total CPU usage: user %, system %

CPU usage by process "notifyd" with UID 0: 2.6%

Extrinsic daemons

com.cisco.anyconnect.vpnagentd

com.motive.mgmt-agent.system

com.microsoft.autoupdate.helpertool

com.microsoft.office.licensingV2.helper

com.adobe.fpsaud

org.macosforge.xquartz.privileged_startx

Extrinsic agents

com.motive.alertDetectorHost

com.openssh.ssh-agent

com.adobe.ARM.UUID

com.motive.mgmt-agent.user

org.macosforge.xquartz.startx

com.cisco.anyconnect.gui

com.google.keystone.user.agent

launchd items

/Library/LaunchAgents/com.cisco.anyconnect.gui.plist

(com.cisco.anyconnect.gui)

/Library/LaunchAgents/com.motive.alertDetectorHost.plist

(com.motive.alertDetectorHost)

/Library/LaunchAgents/com.motive.userAgent.plist

(com.motive.mgmt-agent.user)

/Library/LaunchAgents/org.macosforge.xquartz.startx.plist

(org.macosforge.xquartz.startx)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist

(com.cisco.anyconnect.vpnagentd)

/Library/LaunchDaemons/com.microsoft.autoupdate.helpertool.plist

(com.microsoft.autoupdate.helpertool)

/Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist

(com.microsoft.office.licensingV2.helper)

/Library/LaunchDaemons/com.motive.systemDaemon.plist

(com.motive.mgmt-agent.system)

/Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist

(org.macosforge.xquartz.privileged_startx)

Library/LaunchAgents/com.adobe.ARM.UUID.plist

(com.adobe.ARM.UUID)

Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.user.agent)

Extrinsic loadable bundles

/System/Library/Extensions/cdc.kext

(com.zte.driver.cdc_usb_bus)

/System/Library/Extensions/cdc_ecm_qmi.kext

(com.zte.driver.cdc_ecm_qmi)

/System/Library/Extensions/HuaweiDataCardDriver.kext

(com.huawei.driver.HuaweiDataCardDriver)

/System/Library/Extensions/ICZTUSBCDC1060.kext

(com.icera.zte.ICZTUSBCDC1060)

/System/Library/Extensions/ICZTUSBCDC1060ACMControl.kext

(com.icera.zte.ICZTUSBCDC1060ACMControl)

/System/Library/Extensions/ICZTUSBCDC1060ACMData.kext

(com.icera.zte.ICZTUSBCDC1060ACMData)

/System/Library/Extensions/ICZTUSBCDC1060ECMControl.kext

(com.icera.zte.ICZTUSBCDC1060ECMControl)

/System/Library/Extensions/ICZTUSBCDC1060ECMData.kext

(com.icera.zte.ICZTUSBCDC1060ECMData)

/System/Library/Extensions/ICZTUSBCDC1060ModeChange.kext

(com.icera.zte.ICZTUSBCDC1060ModeChange)

/System/Library/Extensions/JMicronATA.kext

(com.jmicron.JMicronATA)

/System/Library/Extensions/USBExpressCardCantWake_Huawei.kext

(com.apple.dts.driver.USBExpressCardCantWake)

/System/Library/Extensions/ZTEUSBCDCACMData.kext

(com.ZTE.driver.ZTEUSBCDCACMData)

/System/Library/Extensions/ZTEUSBMassStorageFilter.kext

(com.ZTE.driver.ZTEUSBMassStorageFilter)

/Library/Extensions/hp_io_enabler_compound.kext

(com.hp.kext.io.enabler.compound)

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

(com.adobe.acrobat.pdfviewer)

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

(com.adobe.acrobat.pdfviewerNPAPI)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

(com.apple.java.JavaAppletPlugin)

/Library/Internet Plug-Ins/npMotive.plugin

(com.motive.npMotive)

/Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin

(com.microsoft.officelive.browserplugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

Library/Address Book Plug-Ins/SkypeABCaller.bundle

(com.skype.SkypeABCaller)

Library/Address Book Plug-Ins/SkypeABChatter.bundle

(com.skype.SkypeABChatter)

Library/Address Book Plug-Ins/SkypeABDialer.bundle

(com.skype.SkypeABDialer)

Library/Address Book Plug-Ins/SkypeABSMS.bundle

(com.skype.SkypeABSMS)

Library/Internet Plug-Ins/WebEx64.plugin

(com.cisco.webex.plugin.gpc64)

hosts format: ASCII text

User login items

iTunesHelper

Box Sync

AdobeResourceSynchronizer

Restricted user files: 94

Keychains file count: 8

Elapsed time (s): 81

1. Start time: 09:22:25 12/06/16
3. Model Identifier: iMac10,1
4. System Version: OS X 10.11.6 (15G1108)
5. Kernel Version: Darwin 15.6.0
6. Log
8. Dec 5 04:03:57 024210.985632 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
9. Dec 5 06:04:49 024268.440728 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
10. Dec 5 08:05:41 024326.021740 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
11. Dec 5 08:23:00 com.adobe.ARMDCHelper.UUID: Service exited with abnormal code: 110
12. Dec 5 08:54:18 027236.724513 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
13. Dec 5 09:52:43 027858.652382 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
14. Dec 5 10:40:08 030720.717852 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
15. Dec 5 12:11:44 disk2: alignment error.
16. Dec 5 12:11:44 disk2: alignment error.
17. Dec 5 12:12:07 disk2: alignment error.
18. Dec 5 12:12:07 disk2: alignment error.
19. Dec 5 12:41:09 com.adobe.ARMDCHelper.UUID: Service exited with abnormal code: 110
20. Dec 5 15:56:43 046571.971003 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
21. Dec 5 17:03:50 com.adobe.ARMDCHelper.UUID: Service exited with abnormal code: 110
22. Dec 5 20:34:05 com.adobe.ARMDCHelper.UUID: Service exited with abnormal code: 110
23. Dec 5 22:10:20 065167.005785 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
24. Dec 6 00:11:12 065224.747021 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
25. Dec 6 02:12:04 065282.330954 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
26. Dec 6 04:12:56 065339.873789 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
27. Dec 6 06:13:48 065396.872394 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
28. Dec 6 07:42:17 065454.525131 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
29. Dec 6 08:05:12 066180.669916 AppleUSB20HubPort@26430000: AppleUSB20HubPort::resetAndCreateDevice: asserting Reset
30. Dec 6 09:09:10 disk2: alignment error.
31. Dec 6 09:09:10 disk2: alignment error.
32. Dec 6 09:22:30 process smcDiagnose[9543] caught causing excessive wakeups. Observed wakeups rate (per sec): 57269; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 46455
34. Swap (MiB): 3344
36. Activity
38. CPU: user 13%, system 13%
40. Daemons
42. com.adobe.ARMDC.Communicator
43. com.microsoft.office.licensing.helper
44. com.adobe.fpsaud
45. com.adobe.ARMDC.SMJobBlessHelper
47. Agents
49. com.brother.LOGINserver
50. com.adobe.ARM.UUID
51. com.brother.scanner.ica.74592.UUID
52. com.adobe.ARMDCHelper.UUID
53. com.newwellnesssolutions.DLconnectMonitor
54. com.citrixonline.GoToMeeting.G2MUpdate
55. com.apple.CSConfigDotMacCert-EMAIL-SharedServices
56. com.google.keystone.user.agent
57. com.apple.AirPortBaseStationAgent
59. Bundles
61. /System/Library/Extensions/DLconnect.kext
62. - com.philips.iokit.DLconnect
63. /Library/Extensions/EPSONUSBPrintClass.kext
64. - com.epson.print.kext.USBPrintClass
65. /Library/Internet Plug-Ins/AdobePDFViewer.plugin
66. - com.adobe.acrobat.pdfviewer
67. /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
68. - com.adobe.acrobat.pdfviewerNPAPI
69. /Library/Internet Plug-Ins/F5 Inspection Host Plugin.plugin
70. - com.f5.inspectionhostplugin
71. /Library/Internet Plug-Ins/F5 SSL VPN Plugin.plugin
72. - com.f5.sslvpnplugin
73. /Library/Internet Plug-Ins/Flash Player.plugin
74. - N/A
75. /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
76. - net.telestream.wmv.plugin
77. /Library/Internet Plug-Ins/JavaAppletPlugin.plugin
78. - com.apple.java.JavaAppletPlugin
79. /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
80. - com.microsoft.sharepoint.browserplugin
81. /Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
82. - com.microsoft.sharepoint.webkitplugin
83. /Library/Internet Plug-Ins/Silverlight.plugin
84. - com.microsoft.SilverlightPlugin
85. /Library/Internet Plug-Ins (Disabled)/Flash Player.plugin
86. - N/A
87. /Library/PreferencePanes/Flash Player.prefPane
88. - com.adobe.flashplayerpreferences
89. /Library/PreferencePanes/Flip4Mac WMV.prefPane
90. - net.telestream.wmv.prefpane
91. Library/Address Book Plug-Ins/SkypeABCaller.bundle
92. - com.skype.SkypeABCaller
93. Library/Address Book Plug-Ins/SkypeABChatter.bundle
94. - com.skype.SkypeABChatter
95. Library/Address Book Plug-Ins/SkypeABDialer.bundle
96. - com.skype.skypeabdialer
97. Library/Address Book Plug-Ins/SkypeABSMS.bundle
98. - com.skype.skypeabsms
99. Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin
100. - com.citrixonline.mac.WebDeploymentPlugin
101. Library/Internet Plug-Ins/F5 Inspection Host Plugin.plugin
102. - com.f5.inspectionhostplugin
103. Library/Internet Plug-Ins/WebEx64.plugin
104. - com.cisco_webex.plugin.gpc64
106. App extensions
108. com.getdropbox.dropbox.garcon
110. Apps
112. /Applications/Dropbox.app
114. Contents of /etc/hosts (checksum 85078130)
116. 127.0.0.1 localhost
117. 255.255.255.255 broadcasthost
118. ::1 localhost
119. fe80::1%lo0 localhost
121. Contents of /etc/pf.conf (checksum 2891177609)
123. scrub-anchor "com.apple/*"
124. nat-anchor "com.apple/*"
125. rdr-anchor "com.apple/*"
126. dummynet-anchor "com.apple/*"
127. anchor "com.apple/*"
128. load anchor "com.apple" from "/etc/pf.anchors/com.apple"
130. Contents of /etc/syslog.conf (checksum 2399118465)
132. install.* @127.0.0.1:32376
134. Contents of /etc/pam.d/authorization (checksum 1288902703)
136. auth optional pam_krb5.so use_first_pass use_kcminit
137. auth optional pam_ntlm.so use_first_pass
138. auth required pam_opendirectory.so use_first_pass nullok
139. account required pam_opendirectory.so
141. Contents of /etc/pam.d/checkpw (checksum 2672765862)
143. auth required pam_opendirectory.so use_first_pass nullok
144. account required pam_opendirectory.so no_check_home no_check_shell
146. Contents of /etc/pam.d/chkpasswd (checksum 335781771)
148. auth required pam_opendirectory.so
149. account required pam_opendirectory.so
150. password required pam_permit.so
151. session required pam_permit.so
153. Contents of /etc/pam.d/cups (checksum 2842188894)
155. auth required pam_opendirectory.so
156. account required pam_permit.so
157. password required pam_deny.so
158. session required pam_permit.so
160. Contents of /etc/pam.d/ftpd (checksum 2001169128)
162. auth required pam_opendirectory.so
163. account required pam_permit.so
164. password required pam_deny.so
165. session required pam_permit.so
167. Contents of /etc/pam.d/login (checksum 1242678644)
169. auth optional pam_krb5.so use_kcminit
170. auth optional pam_ntlm.so try_first_pass
171. auth optional pam_mount.so try_first_pass
172. auth required pam_opendirectory.so try_first_pass
173. account required pam_nologin.so
174. account required pam_opendirectory.so
175. password required pam_opendirectory.so
176. session required pam_launchd.so
177. session required pam_uwtmp.so
178. session optional pam_mount.so
180. Contents of /etc/pam.d/login.term (checksum 3930746290)
182. account required pam_nologin.so
183. account required pam_opendirectory.so
184. session required pam_uwtmp.so
186. Contents of /etc/pam.d/other (checksum 2748091512)
188. auth required pam_deny.so
189. account required pam_deny.so
190. password required pam_deny.so
191. session required pam_deny.so
193. Contents of /etc/pam.d/passwd (checksum 1026516346)
195. auth required pam_permit.so
196. account required pam_opendirectory.so
197. password required pam_opendirectory.so
198. session required pam_permit.so
200. Contents of /etc/pam.d/rshd (checksum 1553764881)
202. auth required pam_permit.so
203. account required pam_nologin.so
204. account required pam_opendirectory.so
205. session required pam_launchd.so
207. Contents of /etc/pam.d/screensaver (checksum 3141704602)
209. auth optional pam_krb5.so use_first_pass use_kcminit
210. auth required pam_opendirectory.so use_first_pass nullok
211. account required pam_opendirectory.so
212. account sufficient pam_self.so
213. account required pam_group.so no_warn group=admin,wheel fail_safe
214. account required pam_group.so no_warn deny group=admin,wheel ruser fail_safe
216. Contents of /etc/pam.d/smbd (checksum 2516643123)
218. account required pam_sacl.so sacl_service=smb allow_trustacct
219. session required pam_permit.so
221. Contents of /etc/pam.d/sshd (checksum 2989478361)
223. auth optional pam_krb5.so use_kcminit
224. auth optional pam_ntlm.so try_first_pass
225. auth optional pam_mount.so try_first_pass
226. auth required pam_opendirectory.so try_first_pass
227. account required pam_nologin.so
228. account required pam_sacl.so sacl_service=ssh
229. account required pam_opendirectory.so
230. password required pam_opendirectory.so
231. session required pam_launchd.so
232. session optional pam_mount.so
234. Contents of /etc/pam.d/su (checksum 2045483434)
236. auth sufficient pam_rootok.so
237. auth required pam_opendirectory.so
238. account required pam_group.so no_warn group=admin,wheel ruser root_only fail_safe
239. account required pam_opendirectory.so no_check_shell
240. password required pam_opendirectory.so
241. session required pam_launchd.so
243. Contents of /etc/pam.d/sudo (checksum 3515993703)
245. auth required pam_opendirectory.so
246. account required pam_permit.so
247. password required pam_deny.so
248. session required pam_permit.so
250. Contents of /etc/periodic/daily/110.clean-tmps (checksum 4099837049)
252. if [ -r /etc/defaults/periodic.conf ]
253. then
254. . /etc/defaults/periodic.conf
255. source_periodic_confs
256. fi
257. case "$daily_clean_tmps_enable" in
258. [Yy][Ee][Ss])
259. if [ -z "$daily_clean_tmps_days" ]
260. then
261. echo '$daily_clean_tmps_enable is set but' \
262. '$daily_clean_tmps_days is not'
263. rc=2
264. else
265. echo ""
266. echo "Removing old temporary files:"
267. set -f noglob
268. args="-atime +$daily_clean_tmps_days -mtime +$daily_clean_tmps_days"
269. args="${args} -ctime +$daily_clean_tmps_days"
270. dargs="-empty -mtime +$daily_clean_tmps_days"
271. dargs="${dargs} ! -name .vfs_rsrc_streams_*"
272. [ -n "$daily_clean_tmps_ignore" ] && {
273. args="$args "`echo " ${daily_clean_tmps_ignore% }" |
274. sed 's/[ ][ ]*/ ! -name /g'`
275. dargs="$dargs "`echo " ${daily_clean_tmps_ignore% }" |
276. sed 's/[ ][ ]*/ ! -name /g'`
278. ...and 21 more line(s)
280. Contents of /etc/periodic/daily/130.clean-msgs (checksum 4292599426)
282. if [ -r /etc/defaults/periodic.conf ]
283. then
284. . /etc/defaults/periodic.conf
285. source_periodic_confs
286. fi
287. case "$daily_clean_msgs_enable" in
288. [Yy][Ee][Ss])
289. if [ ! -d /var/msgs ]
290. then
291. echo '$daily_clean_msgs_enable is set but /var/msgs' \
292. "doesn't exist"
293. rc=2
294. else
295. echo ""
296. echo "Cleaning out old system announcements:"
297. [ -n "$daily_clean_msgs_days" ] &&
298. arg=-${daily_clean_msgs_days#-} || arg=
299. msgs -c $arg && rc=0 || rc=3
300. fi;;
301. *) rc=0;;
302. esac
303. exit $rc
305. Contents of /etc/periodic/daily/140.clean-rwho (checksum 659374794)
307. if [ -r /etc/defaults/periodic.conf ]
308. then
309. . /etc/defaults/periodic.conf
310. source_periodic_confs
311. fi
312. case "$daily_clean_rwho_enable" in
313. [Yy][Ee][Ss])
314. if [ -z "$daily_clean_rwho_days" ]
315. then
316. echo '$daily_clean_rwho_enable is enabled but' \
317. '$daily_clean_rwho_days is not set'
318. rc=2
319. elif [ ! -d /var/rwho ]
320. then
321. echo '$daily_clean_rwho_enable is enabled but /var/rwho' \
322. "doesn't exist"
323. rc=2
324. else
325. echo ""
326. echo "Removing stale files from /var/rwho:"
327. case "$daily_clean_rwho_verbose" in
328. [Yy][Ee][Ss])
329. print=-print;;
330. *)
331. print=;;
333. ...and 14 more line(s)
335. Contents of /etc/periodic/daily/199.clean-fax (checksum 1104983357)
337. if [ -r /etc/defaults/periodic.conf ]
338. then
339. . /etc/defaults/periodic.conf
340. source_periodic_confs
341. fi
342. if [ -d /var/spool/fax ]; then
343. echo ""
344. echo "Removing scratch fax files"
345. cd /var/spool/fax && \
346. find . -type f -name '[0-9]*.[0-9][0-9][0-9]' -mtime +7 -delete >/dev/null 2>&1;
347. fi
349. Contents of /etc/periodic/daily/310.accounting (checksum 3208203734)
351. if [ -r /etc/defaults/periodic.conf ]
352. then
353. . /etc/defaults/periodic.conf
354. source_periodic_confs
355. fi
356. case "$daily_accounting_enable" in
357. [Yy][Ee][Ss])
358. if [ ! -f /var/account/acct ]
359. then
360. echo '$daily_accounting_enable is set but /var/account/acct' \
361. "doesn't exist"
362. rc=2
363. elif [ -z "$daily_accounting_save" ]
364. then
365. echo '$daily_accounting_enable is set but ' \
366. '$daily_accounting_save is not'
367. rc=2
368. else
369. echo ""
370. echo "Rotating accounting logs and gathering statistics:"
371. cd /var/account
372. rc=0
373. n=$daily_accounting_save
374. rm -f acct.$n.gz acct.$n || rc=3
375. m=$n
377. ...and 18 more line(s)
379. Contents of /etc/periodic/daily/400.status-disks (checksum 1480768650)
381. if [ -r /etc/defaults/periodic.conf ]
382. then
383. . /etc/defaults/periodic.conf
384. source_periodic_confs
385. fi
386. case "$daily_status_disks_enable" in
387. [Yy][Ee][Ss])
388. echo ""
389. echo "Disk status:"
390. df $daily_status_disks_df_flags && rc=1 || rc=3
391. ;;
392. *) rc=0;;
393. esac
394. exit $rc
396. Contents of /etc/periodic/daily/420.status-network (checksum 2730873650)
398. if [ -r /etc/defaults/periodic.conf ]
399. then
400. . /etc/defaults/periodic.conf
401. source_periodic_confs
402. fi
403. case "$daily_status_network_enable" in
404. [Yy][Ee][Ss])
405. echo ""
406. echo "Network interface status:"
407. case "$daily_status_network_usedns" in
408. [Yy][Ee][Ss])
409. netstat -i && rc=0 || rc=3;;
410. *)
411. netstat -in && rc=0 || rc=3;;
412. esac;;
413. *) rc=0;;
414. esac
415. exit $rc
417. Contents of /etc/periodic/daily/430.status-rwho (checksum 3455351261)
419. if [ -r /etc/defaults/periodic.conf ]
420. then
421. . /etc/defaults/periodic.conf
422. source_periodic_confs
423. fi
424. case "$daily_status_rwho_enable" in
425. [Yy][Ee][Ss])
426. rwho=$(echo /var/rwho/*)
427. if [ -f "${rwho%% *}" ]
428. then
429. echo ""
430. echo "Local network system status:"
431. prog=ruptime
432. else
433. echo ""
434. echo "Local system status:"
435. prog=uptime
436. fi
437. rc=$($prog | tee /dev/stderr | wc -l)
438. if [ $? -eq 0 ]
439. then
440. [ $rc -gt 1 ] && rc=1
441. else
442. rc=3
443. fi;;
445. ...and 3 more line(s)
447. Contents of /etc/periodic/daily/999.local (checksum 2319755381)
449. if [ -r /etc/defaults/periodic.conf ]
450. then
451. . /etc/defaults/periodic.conf
452. source_periodic_confs
453. fi
454. rc=0
455. for script in $daily_local
456. do
457. echo ''
458. case "$script" in
459. /*)
460. if [ -f "$script" ]
461. then
462. echo "Running $script:"
463. sh $script || rc=3
464. else
465. echo "$script: No such file"
466. [ $rc -lt 2 ] && rc=2
467. fi;;
468. *)
469. echo "$script: Not an absolute path"
470. [ $rc -lt 2 ] && rc=2;;
471. esac
472. done
473. exit $rc
475. Contents of /etc/periodic/monthly/199.rotate-fax (checksum 3437454680)
477. if [ -r /etc/defaults/periodic.conf ]
478. then
479. . /etc/defaults/periodic.conf
480. source_periodic_confs
481. fi
482. echo ""
483. printf %s "Rotating fax log files:"
484. cd /var/log/fax
485. for i in *.log; do
486. if [ -f "${i}" ]; then
487. echo -n " $i"
488. if [ -x /usr/bin/gzip ]; then gzext=".gz"; else gzext=""; fi
489. if [ -f "${i}.3${gzext}" ]; then mv -f "${i}.3${gzext}" "${i}.4${gzext}"; fi
490. if [ -f "${i}.2${gzext}" ]; then mv -f "${i}.2${gzext}" "${i}.3${gzext}"; fi
491. if [ -f "${i}.1${gzext}" ]; then mv -f "${i}.1${gzext}" "${i}.2${gzext}"; fi
492. if [ -f "${i}.0${gzext}" ]; then mv -f "${i}.0${gzext}" "${i}.1${gzext}"; fi
493. if [ -f "${i}" ]; then mv -f "${i}" "${i}.0" && if [ -x /usr/bin/gzip ]; then gzip -9 "${i}.0"; fi; fi
494. touch "${i}" && chmod 640 "${i}" && chown root:admin "${i}"
495. fi
496. done
497. echo ""
499. Contents of /etc/periodic/monthly/200.accounting (checksum 3541581936)
501. if [ -r /etc/defaults/periodic.conf ]
502. then
503. . /etc/defaults/periodic.conf
504. source_periodic_confs
505. fi
506. oldmask=$(umask)
507. umask 066
508. case "$monthly_accounting_enable" in
509. [Yy][Ee][Ss])
510. W=/var/log/wtmp
511. rc=0
512. remove=NO
513. if [ $rc -eq 0 ]
514. then
515. echo ""
516. echo "Doing login accounting:"
517. rc=$(ac -p | sort -nr -k 2 | tee /dev/stderr | wc -l)
518. [ $rc -gt 0 ] && rc=1
519. fi
520. [ $remove = YES ] && rm -f $W.0;;
521. *) rc=0;;
522. esac
523. umask $oldmask
524. exit $rc
526. Contents of /etc/periodic/monthly/999.local (checksum 2355967272)
528. if [ -r /etc/defaults/periodic.conf ]
529. then
530. . /etc/defaults/periodic.conf
531. source_periodic_confs
532. fi
533. rc=0
534. for script in $monthly_local
535. do
536. echo ''
537. case "$script" in
538. /*)
539. if [ -f "$script" ]
540. then
541. echo "Running $script:"
542. sh $script || rc=3
543. else
544. echo "$script: No such file"
545. [ $rc -lt 2 ] && rc=2
546. fi;;
547. *)
548. echo "$script: Not an absolute path"
549. [ $rc -lt 2 ] && rc=2;;
550. esac
551. done
552. exit $rc
554. Contents of /etc/periodic/weekly/320.whatis (checksum 922328658)
556. if [ -r /etc/defaults/periodic.conf ]
557. then
558. . /etc/defaults/periodic.conf
559. source_periodic_confs
560. fi
561. case "$weekly_whatis_enable" in
562. [Yy][Ee][Ss])
563. echo ""
564. echo "Rebuilding whatis database:"
565. MANPATH=`/usr/bin/manpath -q`
566. if [ $? = 0 ]
567. then
568. if [ -z "${MANPATH}" ]
569. then
570. echo "manpath failed to find any manpage directories"
571. rc=3
572. else
573. rc=0
574. /usr/libexec/makewhatis.local "${MANPATH}" || rc=3
575. if [ X"${man_locales}" != X ]
576. then
577. for i in ${man_locales}
578. do
579. LC_ALL=$i /usr/libexec/makewhatis.local -a \
580. -L "${MANPATH}" || rc=3
582. ...and 9 more line(s)
584. Contents of /etc/periodic/weekly/999.local (checksum 3078968429)
586. if [ -r /etc/defaults/periodic.conf ]
587. then
588. . /etc/defaults/periodic.conf
589. source_periodic_confs
590. fi
591. rc=0
592. for script in $weekly_local
593. do
594. echo ''
595. case "$script" in
596. /*)
597. if [ -f "$script" ]
598. then
599. echo "Running $script:"
600. sh $script || rc=3
601. else
602. echo "$script: No such file"
603. [ $rc -lt 2 ] && rc=2
604. fi;;
605. *)
606. echo "$script: Not an absolute path"
607. [ $rc -lt 2 ] && rc=2;;
608. esac
609. done
610. exit $rc
612. Contents of /Library/Preferences/com.apple.security.appsandbox.plist (checksum 2599182411)
614. <?xml version="1.0" encoding="UTF-8"?>
615. <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
616. <plist version="1.0">
617. <dict>
618. <key>UnrestrictSpotlightContainerScope</key>
619. <true/>
620. </dict>
621. </plist>
623. Contents of /Library/Preferences/SystemConfiguration/com.apple.Boot.plist (checksum 1199119104)
625. <?xml version="1.0" encoding="UTF-8"?>
626. <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
627. <plist version="1.0">
628. <dict>
629. <key>Kernel Flags</key>
630. <string></string>
631. </dict>
632. </plist>
634. Global login items
636. /Applications/Epson Software/Epson Low Ink Reminder.app/Contents/EpsonLowInkReminderAgent.app
638. Font issues: 4
640. Bad plists
642. /Library/Preferences/com.epson.Epson Scanner ICA Driver.UnInstallList.plist
643. /Library/Preferences/com.epson.Inkjet Printer Driver.UnInstallList.plist
644. /Library/Preferences/com.epson.PC-FAX Driver.UnInstallList.plist
646. Listeners
648. cupsd: ipp
650. User login items
652. iTunesHelper
653. - missing value
654. Dropbox
655. - /Applications/Dropbox.app
656. AdobeResourceSynchronizer
657. - missing value
658. Google Chrome
659. - /Applications/Google Chrome.app
660. EpsonLowInkReminderAgent
661. - /Applications/Epson Software/Epson Low Ink Reminder.app/Contents/EpsonLowInkReminderAgent.app
663. Hidden apps
665. .magicJack/Softphone/magicJack.app
666. .magicJack/Softphone/splash.app
668. Restricted files: 205
670. Lockfiles: 7
672. Elapsed time (s): 301
673. System Integrity Protection: Enabled

You might want to consider starting a new discussion. Since this one is marked solved and a couple of years old, less people are likely to look at it. A new post would be much more visible. You can link to this one.