ANNOYING MACKEEPER TABS AND POPUP ADS

Level 5

5,227 points

Jun 29, 2015 7:20 PM in response to jlscott3

I suspect you are correct as such items are often not what they seem.

Interesting. I downloaded it twice, with and without the strings that followed "?" and got two slightly different .dmg files.

They do appear to have all the same code and it is a downloader app disguised as an installer package. They are relatively new (Jun 18). I uploaded both apps to VirusTotal and no scanner detected anything.

When I launched one it immediately asked for admin privileges so I bailed out. I don't have a proper test environment to go any further.

Thanks for your help. Hopefully thomas_r. can figure out the rest.

Reply

thomas_r.

Level 7

32,001 points

Jun 30, 2015 3:05 AM in response to jlscott3

Assuming that you got the same download that I did (a file named Setup.dmg), you haven't removed nearly everything. There are also components of the Vidx adware, as well as something new that I'd never seen before, called CustomSearchForSafari.

At this point, AdwareMedic will detect all of these things. (I added a signature for CustomSearch to the database.) However, if you are leery of downloading an app to solve this problem, see the manual removal instructions here:

http://www.thesafemac.com/arg-identification

(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)

Reply

jlscott3

Level 1

0 points

Jun 30, 2015 3:16 AM in response to thomas_r.

Thanks, Thomas. For what it's worth, I just installed and ran AdwareMedic 2.2.6 and it's not finding anything, even after I updated signatures. I don't see an evidence of VidX or CustomSearch on my system. So perhaps Setup.dmg has changed since it arrived on my system. I still have my copy of Setup.dmg if you want to see it.

Reply

thomas_r.

Level 7

32,001 points

Jun 30, 2015 3:23 AM in response to jlscott3

Sure, if you could e-mail it to me (thomas at thesafemac dot com), that would be great!

It's very likely that the install app may do some kind of customized install based on things like geolocation. So, what a person in one part of the world sees can be very different from what a person in another part of the world sees. It's also possible that the website served up a different Setup.dmg file to you, also based on geolocation or something similar, than it did to me.

This sort of thing is very common, but unfortunately makes it more difficult to track down and analyze adware. 😟

Reply

fgun

Level 1

0 points

Jul 7, 2015 5:09 PM in response to Linc Davis

Hello,

Here is my report.

How can I clean/improve my system. Do you have any suggestion?

Regards

Efgan

-----

Start time: 02:54:22 07/08/15

Model Identifier: iMac13,1

System Version: OS X 10.10.4 (14E46)

Kernel Version: Darwin 14.4.0

Time since boot: 38 minutes

USB

USB 3.0 Hi-Speed Bus (American Power Conversion)

Pioneer external optical drive (Pioneer Corporation)

Bluetooth

Apple Magic Mouse

Apple Wireless Keyboard

Apple Wireless Trackpad

Diagnostic reports

2015-06-12 Google Drive crash

2015-06-12 sharingd crash

2015-06-17 Google Drive crash

2015-06-17 Microsoft Excel crash

2015-06-19 com.apple.WebKit.WebContent crash

2015-06-25 com.apple.preference.network.remoteservice crash

2015-06-28 java crash

2015-07-02 AlertAll crash

Log

Jul 8 02:17:39 com.apple.xpc.launchd.domain.user.200: Failed to bootstrap path: path = /Library/LaunchAgents/com.canon.MFManager.plist, error = 122: Path had bad ownership/permissions

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:42 com.apple.xpc.launchd.domain.pid.SecurityAgent.230: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Jul 8 02:17:44 SIOCPROTODETACH_IN6: utun0 error=6

Jul 8 02:18:12 com.apple.xpc.launchd.domain.user.55: Caller specified a plist with bad ownership/permissions: path = /Library/LaunchAgents/com.canon.MFManager.plist, caller = appleeventsd.53

Jul 8 02:18:12 com.apple.xpc.launchd.domain.user.55: Failed to bootstrap path: path = /Library/LaunchAgents/com.canon.MFManager.plist, error = 122: Path had bad ownership/permissions

Current downstream data: acwebsecagent (UID 0) is using 35.3017 KiB/s

Current upstream data: acwebsecagent (UID 0) is using 114.265 KiB/s

kexts

com.cisco.kext.acsock (1.1.0)

com.dvdfab.kext.fabio (1)

Daemons

com.Iomega.pcloudd

com.adobe.fpsaud

com.apple.installer.osmessagetracing

com.cisco.anyconnect.vpnagentd

com.ea.origin.ESHelper

com.google.keystone.daemon

com.microsoft.office.licensing.helper

com.oracle.java.Helper-Tool

com.oracle.java.JavaUpdateHelper

com.teamviewer.Helper

Agents

Listchack.download

Listchack.ltvbit

Listchack.update

com.adobe.ARM.UUID

com.apple.AirPortBaseStationAgent

com.apple.PTPCamera.92616.UUID

com.canon.MFManager

com.cisco.anyconnect.gui

com.danny.cdwhelper

com.oracle.java.Java-Updater

com.symantec.quickmenusa.application

com.symantec.savdiskmountnotify.application

com.symantec.scannotification.application

com.symantec.symsecondarylaunch.application

com.valvesoftware.steamclean

com.vinnov.TMHelper

Startup items

/System/Library/StartupItems/ciscod/ciscod

/System/Library/StartupItems/ciscod/StartupParameters.plist

/Library/StartupItems/NortonMissedTasks/NortonMissedTasks

/Library/StartupItems/NortonMissedTasks/StartupParameters.plist

/Library/StartupItems/SMC/SMC

/Library/StartupItems/SMC/smcdaemon

/Library/StartupItems/SMC/smclient

/Library/StartupItems/SMC/StartupParameters.plist

/Library/StartupItems/SMC/syguard

/Library/StartupItems/SMC/SymantecALS

/Library/StartupItems/SymAutoProtect/SAVAPComm.kext/Contents/Info.plist

/Library/StartupItems/SymAutoProtect/SAVAPComm.kext/Contents/MacOS/SAVAPComm

/Library/StartupItems/SymAutoProtect/StartupParameters.plist

/Library/StartupItems/SymAutoProtect/SymAutoProtect

/Library/StartupItems/tap/StartupParameters.plist

/Library/StartupItems/tap/tap

/Library/StartupItems/tun/StartupParameters.plist

/Library/StartupItems/tun/tap

/Library/StartupItems/TuxeraNTFSUnmountHelper/StartupParameters.plist

/Library/StartupItems/TuxeraNTFSUnmountHelper/TuxeraNTFSUnmountHelper

Extensions

/Library/Extensions/tap.kext

- foo.tap

/Library/Extensions/tun.kext

- foo.tun

/System/Library/Extensions/Belcarra.USBLAN_netpart.kext

- com.Belcarra.iokit.USBLAN_netpart

/System/Library/Extensions/Belcarra.USBLAN_usbpart.kext

- com.Belcarra.iokit.USBLAN_usbpart

/System/Library/Extensions/RemoteControl.USBLAN_usbpart.kext

- com.RemoteControl.USBLAN.usbpart

/System/Library/Extensions/fabio.kext

- com.dvdfab.kext.fabio

Applications

/Applications/Adobe Reader.app

- com.adobe.Reader

/Applications/Canon Utilities/Auto Update Service/ReadMe(AutoUpdateService).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/Auto Update Service/UpdateChecker.app

- com.canon.UpdateChecker

/Applications/Canon Utilities/CameraWindow/CameraWindow.app

- com.canon.CameraWindow

/Applications/Canon Utilities/Digital Photo Professional 4/Digital Photo Professional 4.app

- com.canon.Digital-Photo-Professional-4

/Applications/Canon Utilities/Digital Photo Professional 4/Digital Photo Professional 4.app/Contents/Applications/Digital Photo Professional 4 Batch.app

- com.canon.Digital-Photo-Professional-4-Batch

/Applications/Canon Utilities/Digital Photo Professional 4/Digital Photo Professional 4.app/Contents/Applications/Dpp4LensDL.app

- com.canon.Dpp4LensDL

/Applications/Canon Utilities/Digital Photo Professional 4/Digital Photo Professional 4.app/Contents/Applications/Dpp4Printer.app

- com.canon.Dpp4Printer

/Applications/Canon Utilities/Digital Photo Professional 4/Digital Photo Professional 4.app/Contents/Applications/Dpp4Renamer.app

- com.canon.Dpp4Renamer

/Applications/Canon Utilities/Digital Photo Professional 4/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/Digital Photo Professional/Digital Photo Professional Batch.app

- com.canon.Digital

/Applications/Canon Utilities/Digital Photo Professional/Digital Photo Professional.app

- com.canon.Digital

/Applications/Canon Utilities/Digital Photo Professional/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/EOS Lens Registration Tool/EOS Lens Registration Tool.app

- com.canon.EOS-Lens-Registration-Tool

/Applications/Canon Utilities/EOS Sample Music/ReadMe(EOS Sample Music).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/EOS Utility/EOS Utility.app

- com.canon.EOS-Utility

/Applications/Canon Utilities/EOS Utility/EU2/EOS Utility 2.app

- com.canon.EOS

/Applications/Canon Utilities/EOS Utility/EU2/ReadMe(EOS Utility).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/EOS Web Service Registration Tool/EOS Web Service Registration Tool.app

- com.canon.EOS-Web-Service-Registration-Tool

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/AutoAdjustment Task.app

- com.canon.AutoAdjustment

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/ColorBrightnessAdjustment Task.app

- com.canon.ColorBrightnessAdjustment

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/EOS Video Snapshot Task.app

- jp.co.canon.EOS_VideoSnapshotTask

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/IndexPrint Task.app

- com.canon.IndexPrint

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/InsertText Task.app

- com.canon.InsertText

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/LevelAdjustment Task.app

- com.canon.LevelAdjustment

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/MCU.app

- com.canon.MCU

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/MFManager.app

- com.canon.MFManager

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/MovieBinder.app

- com.canon.MovieBinder

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/MovieEdit Task.app

- jp.co.canon.MovieEditTask4

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/MovieFrame Task.app

- jp.co.canon.MovieFrameTask3

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/OnePagePrint Task.app

- com.canon.OnePagePrint

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/RedEyeCorrection Task.app

- com.canon.RedEyeCorrection

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/SendEmail Task.app

- com.canon.SendEmail

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/Sharpness Task.app

- com.canon.Sharpness

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/SlideShowViewer.app

- com.canon.ExtSlideShowViewer

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/ToneCurveAdjustment Task.app

- com.canon.ToneCurveAdjustment

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/Trimming Task.app

- com.canon.Trimming

/Applications/Canon Utilities/ImageBrowser EX/ExtApp/Uploader for Facebook.app

- com.canon.Uploader_for_Facebook

/Applications/Canon Utilities/ImageBrowser EX/ImageBrowser EX.app

- com.canon.ImageBrowserEX

/Applications/Canon Utilities/ImageBrowser EX/ReadMe(EOS Video Snapshot Task).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser EX/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser EX/ReadMe(ImageBrowser EX).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser EX/ReadMe(MovieEdit Task).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser/DVCUtility/CIGUpload.app

- com.canon.dummycigupload

/Applications/Canon Utilities/ImageBrowser/DVCUtility/EOS Video Snapshot Task.app

- jp.co.canon.EOS_VideoSnapshotTask

/Applications/Canon Utilities/ImageBrowser/DVCUtility/MovieEdit Task.app

- jp.co.canon.MovieEditTask

/Applications/Canon Utilities/ImageBrowser/DVCUtility/MovieFrame Task.app

- jp.co.canon.MovieFrameTask

/Applications/Canon Utilities/ImageBrowser/DVCUtility/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser/ImageBrowser.app

- com.canon.ImageBrowser

/Applications/Canon Utilities/ImageBrowser/ReadMe(EOS Video Snapshot Task).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser/ReadMe(ImageBrowser).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/ImageBrowser/ReadMe(MovieEdit Task).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/MapUtility/MapUtility.app

- com.canon.MapUtility

/Applications/Canon Utilities/MapUtility/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/MapUtility/ReadMe(MapUtility).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/MapUtility/Utility/GpsDeviceSetter.app

- com.canon.GpsDeviceSetter

/Applications/Canon Utilities/MapUtility/Utility/GpsLogFileImporter.app

- com.canon.GpsLogFileImporter

/Applications/Canon Utilities/Movie Uploader for YouTube/Movie Uploader for YouTube.app

- com.canon.Movie_Uploader_for_YouTube

/Applications/Canon Utilities/Movie Uploader for YouTube/ReadMe(Movie Uploader for YouTube).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/PhotoStitch/PhotoStitch Launcher.app

- com.canon.PhotoStitch

/Applications/Canon Utilities/PhotoStitch/Program/PhotoStitch.app

- com.canon.PhotoStitch

/Applications/Canon Utilities/PhotoStitch/Program/Viewer.app

- com.canon.Viewer

/Applications/Canon Utilities/PhotoStitch/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/PhotoStitch/ReadMe(PhotoStitch).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/Picture Style Editor/PictureStyleEditor.app

- com.canon.PictureStyleEditor

/Applications/Canon Utilities/Uploader for CANON iMAGE GATEWAY/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Applications/Canon Utilities/Uploader for CANON iMAGE GATEWAY/UploaderForCiG.app

- com.canon_ic.uploader_for_cig

/Applications/Cisco/Cisco AnyConnect DART.app

- com.cisco.Cisco-AnyConnect-DART

/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app

- com.cisco.Cisco-AnyConnect-Secure-Mobility-Client

/Applications/Cisco/Uninstall AnyConnect.app

- com.cisco.uninstaller

/Applications/Firefox.app

- org.mozilla.firefox

/Applications/Google Chrome.app

- com.google.Chrome

/Applications/Google Drive.app

- com.google.GoogleDrive

/Applications/Google Earth.app

- com.Google.GoogleEarthPlus

/Applications/LenovoEMC Storage Manager.app

- com.lenovoemc.manager

/Applications/Logitech Harmony Remote Software.app

- com.logitech.harmony.cappuccino.client.logitech

/Applications/MKVToolNix-7.7.0.app

- null

/Applications/Microsoft Lync.app

- com.microsoft.Lync

/Applications/Microsoft Office 2011/Additional Tools/Microsoft Language Register/Microsoft Language Register.app

- com.microsoft.languageregister

/Applications/Microsoft Office 2011/Microsoft Document Connection.app

- com.microsoft.DocumentConnection

/Applications/Microsoft Office 2011/Microsoft Excel.app

- com.microsoft.Excel

/Applications/Microsoft Office 2011/Microsoft Outlook.app

- com.microsoft.Outlook

/Applications/Microsoft Office 2011/Microsoft PowerPoint.app

- com.microsoft.Powerpoint

/Applications/Microsoft Office 2011/Microsoft Word.app

- com.microsoft.Word

/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

- com.microsoft.ASApplication

/Applications/Microsoft Office 2011/Office/Equation Editor.app

- com.microsoft.EquationEditor

/Applications/Microsoft Office 2011/Office/Microsoft Alerts Daemon.app

- com.microsoft.alerts.daemon

/Applications/Microsoft Office 2011/Office/Microsoft Chart Converter.app

- com.microsoft.openxml.chart.app

/Applications/Microsoft Office 2011/Office/Microsoft Clip Gallery.app

- com.microsoft.ClipGallery

/Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app

- com.microsoft.outlook.databasedaemon

/Applications/Microsoft Office 2011/Office/Microsoft Database Utility.app

- com.microsoft.outlook.databaseutility

/Applications/Microsoft Office 2011/Office/Microsoft Graph.app

- com.microsoft.Graph

/Applications/Microsoft Office 2011/Office/Microsoft Office Reminders.app

- com.microsoft.outlook.officereminders

/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

- com.microsoft.office.setupassistant

/Applications/Microsoft Office 2011/Office/Microsoft Query.app

- com.microsoft.Query

/Applications/Microsoft Office 2011/Office/Microsoft Upload Center.app

- com.microsoft.office.uploadcenter

/Applications/Microsoft Office 2011/Office/My Day.app

- com.microsoft.myday

/Applications/Microsoft Office 2011/Office/Office365Service.app

- com.microsoft.Office365Service

/Applications/Microsoft Office 2011/Office/Open XML for Excel.app

- com.microsoft.openxml.excel.app

/Applications/Microsoft Office 2011/Office/SyncServicesAgent.app

- com.microsoft.SyncServicesAgent

/Applications/Origin.app

- com.ea.Origin

/Applications/Picasa.app

- com.google.picasa

/Applications/ReadMe(EOS Utility).app

- jp.co.canon.DocumentLauncher

/Applications/Remote Desktop Connection.app

- com.microsoft.rdc

/Applications/RescuePRO Deluxe.app

- com.lc-tech.RescuePRO-Deluxe

/Applications/Send to Kindle/Send to Kindle.app

- com.amazon.SendToKindle

/Applications/Send to Kindle/Uninstall Send to Kindle.app

- com.amazon.SendToKindleUninstaller

/Applications/SketchUp 2014/LayOut.app

- com.sketchup.LayOut

/Applications/SketchUp 2014/SketchUp.app

- com.sketchup.SketchUp.2014

/Applications/SketchUp 2014/Style Builder.app

- com.sketchup.StyleBuilder

/Applications/Skype.app

- com.skype.skype

/Applications/Steam.app

- com.valvesoftware.steam

/Applications/Symantec Solutions/LiveUpdate.app

- com.Symantec.LiveUpdate

/Applications/Symantec Solutions/Symantec Endpoint Protection.app

- com.Symantec.NAVX

/Applications/Symantec Solutions/Symantec Scheduler.app

- com.Symantec.Scheduler

/Applications/TeamViewer.app

- com.teamviewer.TeamViewer

/Applications/Utilities/Adobe Flash Player Install Manager.app

- com.adobe.flashplayer.installmanager

/Applications/VLC.app

- org.videolan.vlc

/Applications/calibre.app

- net.kovidgoyal.calibre

/Applications/remotecore.app

- com.logitech.harmony.cappuccino.client.core

/Applications/uTorrent.app

- com.bittorrent.uTorrent

/Library/Application Support/Canon_Inc_IC/ImageBrowser EX/PreIBXuist.app

- com.canon.PreIBXuist

/Library/Application Support/Canon_Inc_IC/UniversalInstaller/Install/UniversalInstaller.app

- com.canon.SubInstaller

/Library/Application Support/Canon_Inc_IC/UniversalInstaller/Uninstall/Uninstaller/UniversalUninstal ler.app

- com.canon.SubInstaller

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

- com.microsoft.autoupdate2

/Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

- com.microsoft.error_reporting

/Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

- com.microsoft.netlib.shipassertprocess

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

- com.microsoft.silverlight.sllauncher

/Library/Application Support/Norton Solutions Support/LiveUpdate/IRTool.app

- null

/Library/Application Support/Norton Solutions Support/LiveUpdate/IRUI.app

- com.symantec.IRUI

/Library/Application Support/Norton Solutions Support/LiveUpdate/LiveUpdate.app

- com.Symantec.LiveUpdate.background

/Library/Application Support/Norton Solutions Support/Scheduler/SymSecondaryLaunch.app

- com.Symantec.SymSecondaryLaunch

/Library/Application Support/Symantec/AntiVirus/SAVDiskMountNotify.app

- com.symantec.diskMountNotify

/Library/Application Support/Symantec/AntiVirus/ScanNotification.app

- com.symantec.scanNotification

/Library/Application Support/Symantec/AntiVirus/SmallScanner.app

- com.symantec.app.SmallScanner

/Library/Application Support/Symantec/SymSAQuickMenu/SymQuickMenu.app

- com.symantec.quickmenu.app

/Library/Application Support/e0674b0960328004/Agent/agent.app

- com.someproduct.agent

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/lib/missioncont rol/Java Mission Control.app

- com.oracle.jmc

/Library/Services/ScanService.service

- com.symantec.ScanService

/Users/USER/Applications/Chrome Apps.localized/System Profile apdfllckaahabafndbhieahigkjlhalf.app

- com.google.Chrome.app.System-Profile-apdfllckaahabafndbhieahigkjlhalf

/Users/USER/Applications/Chrome Apps.localized/System Profile blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.System-Profile-blpcfgokakmgnkcojhhkbfbldkacnbeo

/Users/USER/Applications/Chrome Apps.localized/System Profile coobgpohoikkiipiblmjeljniedjpjpf.app

- com.google.Chrome.app.System-Profile-coobgpohoikkiipiblmjeljniedjpjpf

/Users/USER/Applications/Chrome Apps.localized/System Profile pjkljhegncpnkpknbcohdijeoejaedia.app

- com.google.Chrome.app.System-Profile-pjkljhegncpnkpknbcohdijeoejaedia

/Users/USER/Applications/Sid Meier's Civilization V.app

- null

/Users/USER/Desktop/Sid Meier's Civilization V.app

- null

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Canon EOS Digital Installer.app

- com.canon.MasterInstaller

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/EOS Utility/CloseWFT.app

- com.yourcompany.CloseWFT

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/Image Handling Library/SubItemReadMe/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/ImageBrowser/Install Files/ReadMe(ImageBrowser).app

- jp.co.canon.DocumentLauncher

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/MovieEdit Task/Install Files/ReadMe(MovieEdit Task).app

- jp.co.canon.DocumentLauncher

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/MovieUploaderForYouTube/Install Files/ReadMe(Movie Uploader for YouTube).app

- jp.co.canon.DocumentLauncher

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/PhotoStitch/Install Files/ReadMe(Image Handling Library).app

- jp.co.canon.DocumentLauncher

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/PhotoStitch/Install Files/ReadMe(PhotoStitch).app

- jp.co.canon.DocumentLauncher

/Users/USER/Documents/Cihazlar/Canon EOS 60D/_CD2/Install Files/VST/Install Files/ReadMe(EOS Video Snapshot Task).app

- jp.co.canon.DocumentLauncher

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_aapocclcgogkmnckokdopfmhonfmgoek/Profile 1 aapocclcgogkmnckokdopfmhonfmgoek.app

- com.google.Chrome.app.Profile-1-aapocclcgogkmnckokdopfmhonfmgoek-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Profile 1 aohghmighlieiainnegkcijnfilokake.app

- com.google.Chrome.app.Profile-1-aohghmighlieiainnegkcijnfilokake-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Profile 1 apdfllckaahabafndbhieahigkjlhalf.app

- com.google.Chrome.app.Profile-1-apdfllckaahabafndbhieahigkjlhalf-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Profile 1 blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.Profile-1-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Profile 1 coobgpohoikkiipiblmjeljniedjpjpf.app

- com.google.Chrome.app.Profile-1-coobgpohoikkiipiblmjeljniedjpjpf-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_felcaaldnbdncclmgdcncolpebgiejap/Profile 1 felcaaldnbdncclmgdcncolpebgiejap.app

- com.google.Chrome.app.Profile-1-felcaaldnbdncclmgdcncolpebgiejap-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Profile 1 nmmhkkegccagdldgiimedpiccmgmieda.app

- com.google.Chrome.app.Profile-1-nmmhkkegccagdldgiimedpiccmgmieda-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 1/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Profile 1 pjkljhegncpnkpknbcohdijeoejaedia.app

- com.google.Chrome.app.Profile-1-pjkljhegncpnkpknbcohdijeoejaedia-internal

/Users/USER/Library/Application Support/Google/Chrome/System Profile/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/System Profile aohghmighlieiainnegkcijnfilokake.app

- com.google.Chrome.app.System-Profile-aohghmighlieiainnegkcijnfilokake-internal

/Users/USER/Library/Application Support/Google/Chrome/System Profile/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/System Profile apdfllckaahabafndbhieahigkjlhalf.app

- com.google.Chrome.app.System-Profile-apdfllckaahabafndbhieahigkjlhalf-internal

/Users/USER/Library/Application Support/Google/Chrome/System Profile/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/System Profile blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.System-Profile-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

/Users/USER/Library/Application Support/Google/Chrome/System Profile/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/System Profile coobgpohoikkiipiblmjeljniedjpjpf.app

- com.google.Chrome.app.System-Profile-coobgpohoikkiipiblmjeljniedjpjpf-internal

/Users/USER/Library/Application Support/Google/Chrome/System Profile/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/System Profile pjkljhegncpnkpknbcohdijeoejaedia.app

- com.google.Chrome.app.System-Profile-pjkljhegncpnkpknbcohdijeoejaedia-internal

/Users/USER/Library/Application Support/Helper/Wondershare Helper Compact.app

- com.wondershare.helper_compact

/Users/USER/Library/Application Support/Helper/iSkysoft Helper Compact.app

- com.iskysoft.helper_compact

/Users/USER/Library/Application Support/Java/Java 1.8.40.26/Java 8 Update 40.app

- Oracle.MacJREInstaller

/Users/USER/Library/Application Support/Listchack/Listchack.app

- com.agord.AppAS

/Users/USER/Library/Application Support/Steam/SteamApps/common/Sid Meier's Civilization V/Civilization V.app

- com.aspyr.civ5xp.steam

/Users/efganefe/Library/Application Support/Ubiquity/peerUUIDv24/SharedPackageExtensions.app

- null

/Users/USER/Library/Application Support/WebEx Folder/1324/Meeting Center.app

- com.webex.meetingmanager

/Users/USER/Library/Application Support/WebEx Folder/1324/asannotation2.app

- com.webex.asannotation

/Users/USER/Library/Application Support/WebEx Folder/1324/atmsupload.app

- com.webex.atmsupload

/Users/USER/Library/Application Support/WebEx Folder/1324/convertpdf.app

- com.webex.convertpdf

/Users/USER/Library/Application Support/WebEx Folder/1325/Training Center.app

- com.webex.trainingcenter

/Users/USER/Library/Application Support/WebEx Folder/1325/asannotation2.app

- com.webex.asannotation

/Users/USER/Library/Application Support/WebEx Folder/1325/convertpdf.app

- com.webex.convertpdf

/Users/USER/Library/Application Support/WebEx Folder/1326/Event Center.app

- com.webex.eventcenter

/Users/USER/Library/Application Support/WebEx Folder/1326/asannotation2.app

- com.webex.asannotation

/Users/USER/Library/Application Support/WebEx Folder/1326/convertpdf.app

- com.webex.convertpdf

/Users/USER/Library/Application Support/WebEx Folder/Add-ons/Cisco WebEx Start.app

- com.cisco.webex.Cisco-WebEx-Start

/Users/USER/Uninstall LenovoEMC Storage Manager.app

- org.LenovoEMC.UninstallLenovoEMCStorageManager

/opt/cisco/anyconnect/bin/vpndownloader.app

- com.yourcompany.vpndownloader

Frameworks

/Library/Frameworks/MacFUSE.framework

- com.google.MacFUSE

PrefPane

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

- null

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

/Library/PreferencePanes/MacFUSE.prefPane

- com.google.MacFUSE

/Library/PreferencePanes/SymAutoProtect.prefPane

- SymAutoProtect

/Library/PreferencePanes/SymantecSAQuickMenu.prefPane

- com.symantec.quickmenusa.prefpane

/Library/PreferencePanes/Tuxera NTFS.prefPane

- com.tuxera.ntfs.mac.prefpane

Bundles

/Library/Contextual Menu Items/SAVCMPlugIn.plugin

- com.symantec.NAVCMPlugIn

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

- com.adobe.acrobat.pdfviewer

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

- com.adobe.acrobat.pdfviewerNPAPI

/Library/Internet Plug-Ins/Flash Player.plugin

- com.macromedia.Flash

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

- com.oracle.java.JavaAppletPlugin

/Library/Internet Plug-Ins/MeetingJoinPlugin.plugin

- com.microsoft.communicator.meetingjoinplugin

/Library/Internet Plug-Ins/NP_2020Player_IKEA.plugin

- com.2020technologies.2020Player-IKEA.NP

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

- com.microsoft.sharepoint.browserplugin

/Library/Internet Plug-Ins/Silverlight.plugin

- com.microsoft.SilverlightPlugin

/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkIOM.plugin

- jp.co.Canon.ij.print.iom.CIJNP

/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkPBM.plugin

- jp.co.Canon.ij.print.pbm.CIJNP

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBIOM.plugin

- jp.co.canon.bj.print.bjusbiom

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBPBM.plugin

- jp.co.canon.bj.print.pbm.USB

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver.plugin

- jp.co.canon.ij.print.CIJUSBClassDriver

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver2.plugin

- jp.co.canon.ij.print.CIJUSBClassDriver2

/Library/Printers/Canon/BJPrinter/Plugins/IJBluetooth/IJBluetoothIOM.plugin

- jp.co.canon.ij.print.ijbluetoothiom

/Users/USER/Library/Internet Plug-Ins/Picasa.plugin

- com.google.PicasaPlugin

/Users/USER/Library/Internet Plug-Ins/WebEx64.plugin

- com.cisco_webex.plugin.gpc64

dylibs

/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

/Library/Application Support/Symantec/AntiVirus/Engine/libecomlodr.dylib

/Library/Application Support/Symantec/AntiVirus/Engine20150703/libecomlodr.dylib

/Library/Application Support/Symantec/AntiVirus/Engine20150706/libecomlodr.dylib

/Library/Application Support/Symantec/AntiVirus/Hub/libecomlodr.dylib

/Library/Frameworks/MacFUSE.framework/Versions/A/Resources/Debug/libfuse.dylib. dSYM/Contents/Resources/DWARF/libfuse.dylib

/Library/Frameworks/MacFUSE.framework/Versions/A/Resources/Debug/libfuse_ino64. dylib.dSYM/Contents/Resources/DWARF/libfuse_ino64.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/fxplugi ns.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/headles s/libmawt.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/jli/lib jli.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libAppl eScriptEngine.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libatta ch.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libawt. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libdcpr .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libdeco ra-sse.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libdepl oy.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libdt_s ocket.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libfont manager.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libglas s.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libglib -2.0.0.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libgstp lugins-lite.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libgstr eamer-lite.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libhpro f.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libinst rument.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libj2gs s.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libj2pc sc.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libj2pk cs11.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjaas _unix.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjava .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjava _crw_demo.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjava fx-font.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjava fx-iio.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjawt .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjdwp .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjfr. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjfxm edia.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjfxw ebkit.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjpeg .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjsdt .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjsig .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libjsou nd.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libkcms .dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libmana gement.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libmlib _image.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libnet. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libnio. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libnpt. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libosx. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libosxa pp.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libosxk rb5.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libosxu i.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libpris m-es2.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libsapr oc.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libspla shscreen.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libsune c.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libt2k. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libunpa ck.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libveri fy.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/libzip. dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/lwawt/l iblwawt.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/server/ libjsig.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/server/ libjvm.dylib

/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/jre/lib/xawt/li bmawt.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/jli/lib jli.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libAppl eScriptEngine.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libatta ch.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libawt. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libawt_ lwawt.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libdcpr .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libdeco ra_sse.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libdepl oy.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libdt_s ocket.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libfont manager.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libfxpl ugins.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libglas s.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libglib -lite.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libgstr eamer-lite.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libhpro f.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libinst rument.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libj2gs s.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libj2pc sc.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libj2pk cs11.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjaas _unix.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjava .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjava _crw_demo.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjava fx_font.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjava fx_font_t2k.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjava fx_iio.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjawt .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjdwp .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjfr. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjfxm edia.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjfxw ebkit.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjpeg .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjsdt .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjsig .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libjsou nd.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libkcms .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/liblcms .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libmana gement.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libmlib _image.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libnet. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libnio. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libnpt. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libosx. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libosxa pp.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libosxk rb5.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libosxu i.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libpris m_common.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libpris m_es2.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libpris m_sw.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libsapr oc.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libspla shscreen.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libsune c.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libt2k. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libunpa ck.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libveri fy.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/libzip. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/server/ libjsig.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_20.jdk/Contents/Home/jre/lib/server/ libjvm.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/jli/lib jli.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libAppl eScriptEngine.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libatta ch.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libawt. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libawt_ lwawt.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libbci. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libdcpr .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libdeco ra_sse.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libdepl oy.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libdt_s ocket.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libfont manager.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libfxpl ugins.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libglas s.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libglib -lite.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libgstr eamer-lite.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libhpro f.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libinst rument.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libj2gs s.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libj2pc sc.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libj2pk cs11.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjaas _unix.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjava .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjava _crw_demo.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjava fx_font.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjava fx_font_t2k.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjava fx_iio.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjawt .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjdwp .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjfr. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjfxm edia.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjfxm edia_avf.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjfxm edia_qtkit.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjfxw ebkit.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjpeg .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjsdt .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjsig .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libjsou nd.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libkcms .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/liblcms .dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libmana gement.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libmlib _image.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libnet. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libnio. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libnpt. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libosx. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libosxa pp.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libosxk rb5.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libosxu i.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libpris m_common.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libpris m_es2.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libpris m_sw.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libreso urce.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libsapr oc.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libspla shscreen.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libsune c.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libt2k. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libunpa ck.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libveri fy.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/libzip. dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/server/ libjsig.dylib

/Library/Java/JavaVirtualMachines/jdk1.8.0_40.jdk/Contents/Home/jre/lib/server/ libjvm.dylib

/Users/USER/Library/Application Support/Firefox/Profiles/mhnaozjs.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

/Users/USER/Library/Application Support/Firefox/Profiles/mhnaozjs.default/gmp-gmpopenh264/1.4/libgmpopenh264.dy lib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.823/_platform_specific/mac_x64/libwidev inecdm.dylib

/Users/USER/Library/Application Support/WebEx Folder/1324/cmcrypto-1309.03.2812.2.dylib

/Users/USER/Library/Application Support/WebEx Folder/1324/xml-11.18.32.0.dylib

/Users/USER/Library/Application Support/WebEx Folder/1325/cmcrypto-1309.03.2812.2.dylib

/Users/USER/Library/Application Support/WebEx Folder/1325/xml-11.18.32.0.dylib

/Users/USER/Library/Application Support/WebEx Folder/1326/cmcrypto-1309.03.2812.2.dylib

/Users/USER/Library/Application Support/WebEx Folder/1326/rtp-10.20.23.0.dylib

/Users/USER/Library/Application Support/WebEx Folder/1326/xml-11.18.32.0.dylib

/opt/cisco/anyconnect/bin/plugins/libacfeedback.dylib

/opt/cisco/anyconnect/bin/plugins/libacwebsecapi.dylib

/opt/cisco/anyconnect/bin/plugins/libacwebsecctrl.dylib

/opt/cisco/anyconnect/bin/plugins/libvpnapishim.dylib

/opt/cisco/anyconnect/bin/plugins/libvpnipsec.dylib

/opt/cisco/anyconnect/lib/libac_sock_fltr_api.dylib

/opt/cisco/anyconnect/lib/libacciscocrypto.dylib

/opt/cisco/anyconnect/lib/libacciscossl.dylib

/opt/cisco/anyconnect/lib/libaccurl.4.dylib

/opt/cisco/anyconnect/lib/libboost_date_time.dylib

/opt/cisco/anyconnect/lib/libboost_filesystem.dylib

/opt/cisco/anyconnect/lib/libboost_system.dylib

/opt/cisco/anyconnect/lib/libboost_thread.dylib

/opt/cisco/anyconnect/lib/libvpnagentutilities.dylib

/opt/cisco/anyconnect/lib/libvpnapi.dylib

/opt/cisco/anyconnect/lib/libvpncommon.dylib

/opt/cisco/anyconnect/lib/libvpncommoncrypt.dylib

/opt/cisco/hostscan/lib/libacciscocrypto.dylib

/opt/cisco/hostscan/lib/libacciscossl.dylib

/opt/cisco/hostscan/lib/libaccurl.dylib

/opt/cisco/hostscan/lib/libcsd.dylib

/opt/cisco/hostscan/lib/libhostscan.dylib

/opt/cisco/hostscan/lib/libinspector.dylib

/usr/lib/libsymsea.1.1.0.dylib

/usr/local/lib/libfuse.2.dylib

/usr/local/lib/libfuse_ino64.2.dylib

App extensions

com.google.GoogleDrive.FinderSyncAPIExtension

Contents of /Library/LaunchAgents/com.canon.MFManager.plist

- mod date: May 22 13:23:32 2012

- checksum: 290641261

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.canon.MFManager</string>

<key>Program</key>

<string>/Applications/Canon Utilities/ImageBrowser EX/ExtApp/MFManager.app/Contents/MacOS/MFManager</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Canon Utilities/ImageBrowser EX/ExtApp/MFManager.app/Contents/MacOS/MFManager</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.cisco.anyconnect.gui.plist

- mod date: Mar 26 17:30:18 2013

- checksum: 1087717482

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<dict>

<key>PathState</key>

<dict>

<key>/opt/cisco/anyconnect/gui_keepalive</key>

<true/>

</dict>

<key>Label</key>

<string>com.cisco.anyconnect.gui</string>

<key>LimitLoadToSessionType</key>

<key>ProgramArguments</key>

<array>

<string>/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

- mod date: Mar 6 22:29:07 2013

- checksum: 396544530

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.oracle.java.Java-Updater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

<string>-bgcheck</string>

</array>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

<key>Weekday</key>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/com.symantec.quickmenusa.application.plist

- mod date: Oct 31 03:56:46 2011

- checksum: 182589944

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.symantec.quickmenusa.application</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/SymSAQuickMenu/SymQuickMenu.app/Contents/MacOS/SymQuickMenu</s tring>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.symantec.savdiskmountnotify.application.plist

- mod date: Mar 6 21:06:38 2013

- checksum: 1974089599

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.symantec.savdiskmountnotify.application</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/AntiVirus/SAVDiskMountNotify.app/Contents/MacOS/SAVDiskMountNo tify</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.symantec.scannotification.application.plist

- mod date: Mar 6 21:06:38 2013

- checksum: 898239945

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.symantec.scannotification.application</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/AntiVirus/ScanNotification.app/Contents/MacOS/ScanNotification </string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.symantec.symsecondarylaunch.application.plist

- mod date: Mar 6 21:06:39 2013

- checksum: 798050194

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.symantec.symsecondarylaunch.application</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/Contents/MacOS/SymSecondaryLa unch</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

- mod date: Dec 13 15:06:01 2014

- checksum: 2033408783

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.teamviewer</string>

<key>LimitLoadToSessionType</key>

<array>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

<string>-RunAsAgent</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS</string>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

- mod date: Dec 13 15:06:01 2014

- checksum: 2384203231

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.desktop</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>

<string>-RunAsAgent</string>

<string>-Module</string>

</array>

<key>RunAtLoad</key>

<true/>

...and 4 more line(s)

Contents of /Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist

- mod date: Mar 26 17:30:18 2013

- checksum: 2630047092

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN

http://www.apple.com/DTDs/PropertyList-1.0.dtd >

<dict>

<key>Label</key>

<string>com.cisco.anyconnect.vpnagentd</string>

<key>ProgramArguments</key>

<array>

<string>/opt/cisco/anyconnect/bin/vpnagentd</string>

<string>-execv_instance</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>AbandonProcessGroup</key>

<true/>

<key>EnableTransactions</key>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.ea.origin.ESHelper.plist

- mod date: Aug 31 02:43:19 2013

- checksum: 361206089

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Debug</key>

<true/>

<key>Label</key>

<string>com.ea.origin.ESHelper</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.ea.origin.ESHelper</string>

</array>

<key>Sockets</key>

<dict>

<key>com.ea.origin.ESHelper.sock</key>

<dict>

<key>SockFamily</key>

<key>SockPathMode</key>

<key>SockPathName</key>

<string>/var/run/com.ea.origin.eshelper.sock</string>

</dict>

<key>WaitForDebugger</key>

...and 3 more line(s)

Contents of /Library/LaunchDaemons/com.teamviewer.Helper.plist

- mod date: Oct 21 21:52:23 2014

- checksum: 668522044

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.teamviewer.Helper</string>

<key>MachServices</key>

<dict>

<key>com.teamviewer.Helper</key>

<true/>

</dict>

<key>Program</key>

<string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

- mod date: Dec 13 15:06:01 2014

- checksum: 1666586439

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.service</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

<string>-Module</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/pcloudd.plist

- mod date: Sep 25 17:22:55 2014

- checksum: 2233006452

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>RunAtLoad</key>

<true/>

<key>Label</key>

<string>com.Iomega.pcloudd</string>

<key>SocketServiceName</key>

<key>ProgramArguments</key>

<array>

<string>/Applications/LenovoEMC Storage Manager.app/Contents/Resources/pcloudd</string>

</array>

</dict>

</plist>

Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

- mod date: Mar 10 22:28:22 2015

- checksum: 3012644940

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>org.apache.httpd</string>

<key>EnvironmentVariables</key>

<dict>

<key>XPC_SERVICES_UNAVAILABLE</key>

</dict>

<key>ProgramArguments</key>

<array>

<string>/usr/sbin/httpd-wrapper</string>

<string>FOREGROUND</string>

</array>

<key>OnDemand</key>

</dict>

</plist>

Contents of /etc/hosts

- mod date: Oct 18 01:35:16 2014

- checksum: 519080319

127.0.0.1 localhost

255.255.255.255 broadcasthost

::1 localhost

fe80::1%lo0 localhost

Contents of Library/LaunchAgents/Listchack.download.plist

- mod date: Jul 4 23:16:11 2015

- checksum: 3003993674

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>Listchack.download</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Listchack/Listchack.app/Contents/MacOS/AppAS</string>

<string>-trigger</string>

<string>download</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

<string>-identity</string>

<string>Listchack</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Downloads</string>

</array>

<key>isAllowToSuggest</key>

...and 3 more line(s)

Contents of Library/LaunchAgents/Listchack.ltvbit.plist

- mod date: Jul 4 23:16:11 2015

- checksum: 3543592103

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>Listchack.ltvbit</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Listchack/Listchack.app/Contents/MacOS/AppAS</string>

<string>-trigger</string>

<string>ltvbit</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

<string>-identity</string>

<string>Listchack</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

...and 4 more line(s)

Contents of Library/LaunchAgents/Listchack.update.plist

- mod date: Jul 4 23:16:11 2015

- checksum: 3708947360

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>Listchack.update</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Listchack/Listchack.app/Contents/MacOS/AppAS</string>

<string>-trigger</string>

<string>update</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

<string>-identity</string>

<string>Listchack</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartCalendarInterval</key>

<dict>

...and 6 more line(s)

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Mar 21 23:40:11 2013

- checksum: 394026997

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.valvesoftware.steamclean.plist

- mod date: Aug 5 23:01:54 2013

- checksum: 1939581875

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.valvesoftware.steamclean</string>

<key>Program</key>

<string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>

<string>Public</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>SteamContentPaths</key>

<array>

<string>/Users/USER/Library/Application Support/Steam/SteamApps</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Applications/Steam.app</string>

</array>

</dict>

</plist>

Root crontab

#SqzS VERSION = 1.0.0

#SYMANTEC SCHEDULER CRON ENTRIES. THESE ENTRIES ARE AUTOMATICALLY GENERATED

#PLEASE DO NOT EDIT.

# Enc=1 Name=DefaultLiveUpdateSchedule EvType1=1 EvType2=1 Sched=5

24 */4 * * * "/Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/Contents/schedLauncher" -u 1 "/Library/Application Support/Norton Solutions Support/LiveUpdate/LiveUpdate.app/Contents/MacOS/LiveUpdate" " " "oapp" "aevt" "exAG" "-update LUal -liveupdatequiet YES -liveupdateautoquit YES"

#SqzS END SYMANTEC CRON ENTRIES

Firewall: On

DNS: 208.67.222.222 (static)

Listeners

kdc: kerberos

launchd: afpovertcp

launchd: microsoft-ds

User crontab

#SqzS VERSION = 1.0.0

#SYMANTEC SCHEDULER CRON ENTRIES. THESE ENTRIES ARE AUTOMATICALLY GENERATED

#PLEASE DO NOT EDIT.

# Enc=1 Name=Update EvType1=1 EvType2=0 Sched=2

0 20 * * 5 "/Library/Application Support/Symantec/Scheduler/SymSecondaryLaunch.app/Contents/schedLauncher" -u 2 "/Applications/Symantec Solutions/LiveUpdate.app/Contents/MacOS/LiveUpdate" " " "oapp" "aevt" "exAG" "-update LUal"

#SqzS END SYMANTEC CRON ENTRIES

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Google Drive

- /Applications/Google Drive.app

LenovoEMC Storage Manager

- /Applications/LenovoEMC Storage Manager.app

AdobeResourceSynchronizer

- /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app

calibre

- /Applications/calibre.app

Skype

- /Applications/Skype.app

EOS Utility

- /Applications/Canon Utilities/EOS Utility/EOS Utility.app

Restricted files: 139

Lockfiles: 41

Elapsed time (s): 517

-----

Reply

fgun

Level 1

0 points

Jul 7, 2015 5:12 PM in response to Linc Davis