Here you go!
Model Identifier: iMac10,1
System Version: OS X 10.9.2 (13C1021)
Kernel Version: Darwin 13.1.0
Boot Mode: Normal
Time since boot: 15:50
USB
My Passport 0748 (Western Digital Technologies, Inc.)
Back-UPS ES 550G FW:904.W1 .D USB FW:W1 (American Power Conversion)
Diagnostic reports
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 Finder crash *
2014-05-10 secd crash
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
2014-05-11 Finder crash *
* Code injection
Log
May 10 14:51:02 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=2974[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 14:51:04 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=2980[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 14:55:38 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=3409[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 14:55:38 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=3412[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 14:59:32 kernel[0]: 4.261020: Use hw queue 9 for beacons
May 10 15:02:42 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=255[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:02:50 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=262[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:05:08 kernel[0]: 2.508394: Use hw queue 9 for beacons
May 10 15:06:40 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=426[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:06:46 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=453[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:09:07 kernel[0]: 2.528743: Use hw queue 9 for beacons
May 10 15:10:14 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=408[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:10:15 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=414[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:18:28 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=1096[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:18:29 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=1103[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:19:56 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=1384[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 15:19:57 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=1386[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 16:38:37 kernel[0]: process WindowServer[1244] caught causing excessive wakeups. Observed wakeups rate (per sec): 338; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 108963
May 10 16:51:13 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=4531[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 16:51:16 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=4534[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 17:10:03 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=5286[ksadmin] final status 0x0, allowing (remove VALID) page
May 10 17:10:05 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=5289[ksadmin] final status 0x0, allowing (remove VALID) page
May 11 06:43:25 kernel[0]: process IDriveDaemon[70504] caught causing excessive wakeups. Observed wakeups rate (per sec): 2626; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45523
May 11 06:45:51 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=70828[ksadmin] final status 0x0, allowing (remove VALID) page
May 11 06:46:04 kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=70848[ksadmin] final status 0x0, allowing (remove VALID) page
Activity
Net: 9 in, 486 out (KiB/s)
launchd
/System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist
(com.apple.AirPortBaseStationAgent)
/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Startup-1.0)
/Library/LaunchAgents/com.adobe.CS4ServiceManager.plist
(com.adobe.CS4ServiceManager)
/Library/LaunchAgents/com.epson.eventmanager.agent.plist
(com.epson.eventmanager.agent)
/Library/LaunchAgents/com.motorola.MDMUpdater.plist
(com.motorola.MDMUpdaterPlist)
/Library/LaunchAgents/com.motorola.motohelper.plist
(com.motorola.motohelper)
/Library/LaunchAgents/com.motorola.motohelperUpdater.plist
(com.motorola.motohelperUpdater)
/Library/LaunchAgents/com.parallels.mobile.prl_deskctl_agent.launchagent.plist
(com.parallels.mobile.prl_deskctl_agent.launchagent)
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.adobe.SwitchBoard.plist
(com.adobe.SwitchBoard)
/Library/LaunchDaemons/com.barebones.textwrangler.plist
(com.barebones.textwrangler)
/Library/LaunchDaemons/com.motorola-mobility.mmcfgd.plist
(com.motorola-mobility.mmcfgd)
/Library/LaunchDaemons/com.parallels.mobile.dispatcher.launchdaemon.plist
(com.parallels.mobile.dispatcher.launchdaemon)
/Library/LaunchDaemons/com.parallels.mobile.kextloader.launchdaemon.plist
(com.parallels.mobile.kextloader.launchdaemon)
/Library/LaunchDaemons/com.prosoftnet.idrivedaemon.plist
(IDriveDaemon)
/Library/LaunchDaemons/com.prosoftnet.idsyncdaemon.plist
(IDSyncDaemon)
/Library/LaunchDaemons/com.prosoftnet.idwebdaemon.plist
(IDWebManagement)
Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Scheduler-1.0)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.akamai.single-user-client.plist
(com.akamai.single-user-client)
Library/LaunchAgents/com.parallels.mobile.startgui.launchagent.plist
(com.parallels.mobile.startgui.launchagent)
Library/LaunchAgents/ws.agile.1PasswordAgent.plist
(ws.agile.1PasswordAgent)
Bundles
/System/Library/Extensions/CiscoVPN.kext
(com.cisco.nke.ipsec)
/System/Library/Extensions/MotMobileUSB.kext
(com.motorola-mobility.driver.MotMobileUSB)
/System/Library/Extensions/RIMBBUSB.kext
(com.rim.driver.BlackBerryUSBDriverInt)
/System/Library/Extensions/RIMBBVSP.kext
(com.rim.driver.BlackBerryUSBDriverVSP)
/System/Library/Extensions/SiLabsUSBDriver.kext
(com.silabs.driver.CP210xVCPDriver)
/System/Library/Extensions/SiLabsUSBDriver64.kext
(com.silabs.driver.CP210xVCPDriver64)
/System/Library/Extensions/SLAB_USBtoUART.kext
(com.MCCI.SLAB_USBtoUART)
/Library/Audio/MIDI Drivers/EmagicUSBMIDIDriver.plugin
(info.emagic.driver.unitor)
/Library/Input Methods/ParallelsIM.app
(com.parallels.inputmethod.ParallelsIM)
/Library/Internet Plug-Ins/AdobeAAMDetect.plugin
(com.AdobeAAMDetectLib.AdobeAAMDetect)
/Library/Internet Plug-Ins/AdobeExManDetect.plugin
(com.AdobeExManDetectLib.AdobeExManDetect)
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
(com.adobe.acrobat.pdfviewer)
/Library/Internet Plug-Ins/CouponPrinter-FireFox.plugin
(com.coupons.application/couponsinc-printer-plugin)
/Library/Internet Plug-Ins/CouponPrinter-Safari.webplugin
(com.coupons.application/couponsinc-printer-plugin)
/Library/Internet Plug-Ins/Flash Player.plugin
(com.macromedia.Flash Player.plugin)
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
(net.telestream.wmv.plugin)
/Library/Internet Plug-Ins/GarminGpsControl.plugin
(com.garmin.GarminGpsControl)
/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin
(com.google.googletalkbrowserplugin)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.apple.java.JavaAppletPlugin)
/Library/Internet Plug-Ins/npgtpo3dautoplugin.plugin
(com.google.o3d)
/Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin
(com.microsoft.officelive.browserplugin)
/Library/Internet Plug-Ins/Silverlight.plugin
(com.microsoft.SilverlightPlugin)
/Library/Internet Plug-Ins/SkyCaddiePlugIn.plugin
(com.skyhawke.skycaddieplugin)
/Library/Internet Plug-Ins/Unity Web Player.plugin
(com.unity.UnityWebPlayer)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/PreferencePanes/Flip4Mac WMV.prefPane
(net.telestream.wmv.prefpane)
/Library/PreferencePanes/MacFUSE.prefPane
(com.google.MacFUSE)
/Library/QuickTime/SoundboothScoreCodec.component
(com.adobe.SoundboothScoreAudioCodec)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(N/A)
Library/Address Book Plug-Ins/SkypeABDialer.bundle
(com.skype.skypeabdialer)
Library/Address Book Plug-Ins/SkypeABSMS.bundle
(com.skype.skypeabsms)
Library/Internet Plug-Ins/fbplugin_1_0_1.plugin
(com.facebook.plugin)
Library/Internet Plug-Ins/fbplugin_1_0_3.plugin
(com.facebook.plugin)
Library/Internet Plug-Ins/Picasa.plugin
(com.google.PicasaPlugin)
Library/PreferencePanes/AkamaiNetSession.prefPane
(com.yourcompany.AkamaiNetSession)
Library/PreferencePanes/AkamaiNetSession.prefPane/Contents/Resources
(N/A)
Library/ScriptingAdditions/1Password Addition.osax
(ws.agile.1PasswordAddition)
Contents of /etc/hosts
127.0.0.1 localhost
255.255.255.255 broadcasthost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
::1 localhost
fe80::1%lo0 localhost
User login items
/Applications/iTunes.app/Contents/Resources/iTunesHelper.app
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/Resources/SpeechSynthesisServer.app
/Applications/IDriveforMac/IDriveMonitor.app
/Applications/RemoteSupportHost/RemoteSHC.app
/Applications/IDrive/IDriveMonitor.app
Safari extensions
Ultimate
OpenIE
Restricted files: 76350
Font issues: 40
Bad plists
/Library/Preferences/com.epson.Epson Event Manager.UnInstallList.plist
/Library/Preferences/com.epson.EPSON Scan.UnInstallList.plist
/Library/Preferences/com.epson.EpsonNet Config v4.UnInstallList.plist
/Library/Preferences/com.epson.PC-FAX Driver.UnInstallList.plist
Root crontab
#do not send mail
MAILTO=""
0 */2 * * * perl /Scripts/Interfacelift/interfaceliftAI.pl > /Scripts/Interfacelift/intlift.log
0 0 * * * rsync -avz --delete -e "ssh -i /var/root/rsync-key" backup@192.168.1.111:/var/www/localhost/htdocs/golf/ ~/Documents/golf.sugarvale.com.backup/
Firewall: On
Elapsed time (s): 331