How to remove trovi adware

Question

dngoody Author

Level 1

0 points

How to remove trovi adware

Need help removing trovi adware

iMac, OS X Mavericks (10.9.5)

Posted on Nov 12, 2014 6:29 AM

Reply

Answer 1

Nov 12, 2014 6:31 AM in response to dngoody

Try http://www.thesafemac.com/admedic/

Reply

Answer 2

Linc Davis

Level 10

209,739 points

Nov 12, 2014 8:16 PM in response to dngoody

There is no need to download anything to solve this problem.

You may have installed the "SearchProtect" trojan. Remove it as follows.

Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/Library/LaunchDaemons/com.perion.searchprotectd.plist

Right-click or control-click the line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with an item named "com.perion.searchprotectd.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.

Restart the computer and empty the Trash. Then delete the following items in the same way:

/Applications/SearchProtect
~/Library/Application Support/Firefox/searchplugins/MyBrand.xml
~/Library/Application Support/Google/Chrome/External Extensions/fjadmdmahkpbhgbmmkiiaanlnlekelmn.json
~/Library/Application Support/Mozilla/Extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/deacruzemiliano@outlook.com
~/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin
~/Trovi

Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.

Quit and relaunch Safari. From the menu bar, select

Safari ▹ Preferences... ▹ Extensions

Uninstall any extensions you don't know you need, including any that have the word "Trovi" or "palmall" in the description. If in doubt, uninstall all extensions.

Reset the default search engine and home page to what it was before.

"SearchProtect" may be distributed along with two other applications: "MacKeeper," which is a scam, and "ZipCloud," which, if not actually a scam, has a dubious reputation. Ask if you need instructions to remove those items.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Reply

Answer 3

curey

Level 1

0 points

Dec 6, 2014 11:40 PM in response to Linc Davis

Thank you, Linc Davis! This solved the problem.

Reply

Answer 4

May 20, 2015 4:28 PM in response to Linc Davis

Hi Linc,

I'm having trouble with Searchberry, Trovi and Bing popping up in my searchbar (Safari and Google Chrome), and tons of popups. I've gone through the Library removing items noted, but I still am having trouble. In another post, you gave instructions to run a Terminal check; I ran it and the results are below. Can you advise any further on what to do?

Many thanks,

Kim

Start time: 15:53:47 05/20/15

Revision: 1251

Model Identifier: MacBookPro11,1

System Version: OS X 10.10.3 (14D136)

Kernel Version: Darwin 14.3.0

Time since boot: 21 minutes

UID: 501

Activity

CPU: user 12%, system 13%

en0: in 3202, out 75 (KiB/s)

CPU usage (%)

cloudphotosd (UID 501): 44.0

I/O requests (KiB/s)

cloudphotosd (UID 501): 3344

File opens (per sec)

mds_stores (UID 0) => . (status 0): 6

osascript (UID 501) => /Applications/Safari.app/Contents/Resources (status 0): 5

osascript (UID 501) => /.vol/16777220/8140581/osascript/..namedfork/rsrc (status 0): 5

osascript (UID 501) => /Applications/Google Chrome.app/Contents/Resources (status 0): 4

osascript (UID 501) => /usr/bin/osascript (status 0): 3

osascript (UID 501) => /usr/bin (status 0): 3

osascript (UID 501) => /System/Library/PrivateFrameworks/AppleScript.framework/Resources (status 0): 3

osascript (UID 501) => /System/Library/CoreServices/SystemVersion.bundle (status 0): 3

osascript (UID 501) => /Applications/Safari.app/Contents/Info.plist (status 0): 3

osascript (UID 501) => /Applications/Safari.app/Contents (status 0): 3

osascript (UID 501) => /Applications/Safari.app (status 0): 3

osascript (UID 501) => /Applications/Safari.app/Contents/Resources/English.lproj (status 0): 2

osascript (UID 501) => /Applications/Safari.app/Contents/Resources/Base.lproj (status 0): 2

osascript (UID 501) => /Applications/Google Chrome.app/Contents/Resources/en.lproj (status 0): 2

osascript (UID 501) => /Applications/Google Chrome.app/Contents/Resources/Base.lproj (status 0): 2

osascript (UID 501) => /Applications/Google Chrome.app/Contents/Info.plist (status 0): 2

osascript (UID 501) => /Applications/Google Chrome.app/Contents (status 0): 2

osascript (UID 501) => /Applications/Google Chrome.app (status 0): 2

osascript (UID 501) => /System/Library/ScriptingAdditions/StandardAdditions.osax/Contents/MacOS/Standa rdAdditions (status 0): 2

osascript (UID 501) => /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources (status 0): 2

cloudphotosd (UID 501) => /private/var/folders/v0/_jlf55711fx0m1dcc03f_xv80000gn/T/com.apple.cloudphotosd /TemporaryItems/(A Document Being Saved By cloudphotosd)/manifest.plist (status 0): 2

taskgated (UID 0) => /usr/bin (status 0): 2

osascript (UID 501) => /Users/USER/Library/ScriptingAdditions/BrowserHelper.osax/Contents/PkgInfo (status 0): 2

osascript (UID 501) => /Users/USER/.CFUserTextEncoding (status 0): 2

osascript (UID 501) => /System/Library/ScriptingAdditions/StandardAdditions.osax/Contents/Resources (status 0): 2

osascript (UID 501) => /System/Library/ScriptingAdditions/StandardAdditions.osax/Contents/PkgInfo (status 0): 2

osascript (UID 501) => /System/Library/ScriptingAdditions/Digital Hub Scripting.osax/Contents/Resources (status 0): 2

osascript (UID 501) => /System/Library/ScriptingAdditions/Digital Hub Scripting.osax/Contents/PkgInfo (status 0): 2

osascript (UID 501) => /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fra mework/Resources (status 0): 2

osascript (UID 501) => /System/Library/CoreServices/SystemVersion.plist (status 0): 2

osascript (UID 501) => /System/Library/Components/AppleScript.component/Contents/MacOS/AppleScript (status 0): 2

osascript (UID 501) => /.vol/16777220/8211095 (status 0): 2

osascript (UID 501) => /.vol/16777220/8210205 (status 0): 2

osascript (UID 501) => /.vol/16777220/8210179/Localized.rsrc (status 0): 2

osascript (UID 501) => /.vol/16777220/8210177/AppleScript.rsrc (status 0): 2

osascript (UID 501) => /.vol/16777220/8151504/Safari/..namedfork/rsrc (status 0): 2

osascript (UID 501) => /.vol/16777220/13721936 (status 0): 2

launchservicesd (UID 0) => /usr/bin (status 0): 2

com.apple.CodeS (UID 0) => /usr/bin (status 0): 2

System errors (per sec)

cloudphotosd (UID 501, error 35): 455

Listeners

kdc: kerberos

launchd: afpovertcp

launchd: microsoft-ds

System caches/logs

3548 MB:

Diagnostic reports

2015-04-21 discoveryd crash

2015-04-28 Microsoft Word hang

2015-04-28 discoveryd crash

2015-05-02 cloudphotosd crash

2015-05-05 cloudphotosd crash

2015-05-05 deleted crash

2015-05-05 nsurlsessiond crash

2015-05-10 deleted crash

2015-05-11 Google Chrome crash

2015-05-11 iPhoto hang

2015-05-20 VTDecoderXPCService crash

HID errors: 6

Kernel log

May 20 13:54:17 Google Chrome He (map: 0xffffff80295553c0) triggered DYLD shared region unnest for map: 0xffffff80295553c0, region 0x7fff8f600000->0x7fff8f800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 13:54:37 Google Chrome He (map: 0xffffff802d0c1870) triggered DYLD shared region unnest for map: 0xffffff802d0c1870, region 0x7fff8f600000->0x7fff8f800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:02:11 Google Chrome He (map: 0xffffff8029555870) triggered DYLD shared region unnest for map: 0xffffff8029555870, region 0x7fff8f600000->0x7fff8f800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:14:07 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

May 20 14:14:45 Google Chrome (map: 0xffffff80275a6b40) triggered DYLD shared region unnest for map: 0xffffff80275a6b40, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:14:47 Google Chrome He (map: 0xffffff80274f0b40) triggered DYLD shared region unnest for map: 0xffffff80274f0b40, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:14:47 Google Chrome He (map: 0xffffff802a7405a0) triggered DYLD shared region unnest for map: 0xffffff802a7405a0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:14:48 Google Chrome He (map: 0xffffff802d8aa3c0) triggered DYLD shared region unnest for map: 0xffffff802d8aa3c0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:14:49 Google Chrome He (map: 0xffffff802d9372d0) triggered DYLD shared region unnest for map: 0xffffff802d9372d0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:14:49 Google Chrome He (map: 0xffffff802d9373c0) triggered DYLD shared region unnest for map: 0xffffff802d9373c0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:14:49 Google Chrome He (map: 0xffffff802d9371e0) triggered DYLD shared region unnest for map: 0xffffff802d9371e0, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 14:18:56 Google Chrome He (map: 0xffffff80297ebc30) triggered DYLD shared region unnest for map: 0xffffff80297ebc30, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:03:04 Google Chrome He (map: 0xffffff802d937a50) triggered DYLD shared region unnest for map: 0xffffff802d937a50, region 0x7fff98000000->0x7fff98200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:16 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

May 20 15:19:17 USBF: 4. 58 USBF: 4. 58 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying againIOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again

May 20 15:19:18 USBF: 4.389 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again

May 20 15:19:18 USBF: 4.390 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again

May 20 15:19:30 Google Chrome (map: 0xffffff8027bcf4b0) triggered DYLD shared region unnest for map: 0xffffff8027bcf4b0, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:36 Google Chrome He (map: 0xffffff802c18f0f0) triggered DYLD shared region unnest for map: 0xffffff802c18f0f0, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:37 Google Chrome He (map: 0xffffff802cedcc30) triggered DYLD shared region unnest for map: 0xffffff802cedcc30, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:38 Google Chrome He (map: 0xffffff802cedc960) triggered DYLD shared region unnest for map: 0xffffff802cedc960, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:39 Google Chrome He (map: 0xffffff802cedc780) triggered DYLD shared region unnest for map: 0xffffff802cedc780, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:39 Google Chrome He (map: 0xffffff802dbfae10) triggered DYLD shared region unnest for map: 0xffffff802dbfae10, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:39 Google Chrome He (map: 0xffffff802dbfac30) triggered DYLD shared region unnest for map: 0xffffff802dbfac30, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

May 20 15:19:40 Google Chrome He (map: 0xffffff802cedc3c0) triggered DYLD shared region unnest for map: 0xffffff802cedc3c0, region 0x7fff94200000->0x7fff94400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

System log

May 20 15:34:35 cloudd: Stream 0x7fce425e8880 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce426e93e0 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce425e8880 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce425e8cf0 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce425e9c90 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce425e5830 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce425e8cf0 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce424d6280 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce426dfe10 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce425e9c90 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce425e5830 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce424d6280 is sending an event before being opened

May 20 15:34:35 cloudd: Stream 0x7fce426dfe10 is sending an event before being opened

May 20 15:34:36 cloudd: Stream 0x7fce424d6280 is sending an event before being opened

May 20 15:34:36 cloudd: Stream 0x7fce426dfe10 is sending an event before being opened

May 20 15:34:37 secd: SecOSStatusWith error:[-50] The operation couldn’t be completed. (OSStatus error -50 - applier: key v_Ref has NULL value)

May 20 15:34:37 secd: SOSPeerCoderInitializeForPeer Found data but couldn't make coder for vhhVOFycnGRWAr/OikWyUCK7/p: (null)

May 20 15:34:44 Service: AppleEvents: Send port for process has no send right, port=( port:32271/0x7e0f rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

May 20 15:34:46 Service: AppleEvents: Send port for process has no send right, port=( port:32271/0x7e0f rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread

May 20 15:34:49 cloudphotosd: Unable to get asset collection UUID from shared streams model

May 20 15:34:49 cloudphotosd: Import downloaded assets: stream UUID unable to create import request for item UUID: Error Domain=ICPPhotoErrorDomain Code=9 "The operation couldn’t be completed. (ICPPhotoErrorDomain error 9.)"

May 20 15:39:55 WindowServer: WSGetSurfaceInWindow Invalid surface 943567576 for window 86

May 20 15:49:52 WindowServer: window 60 is already attached to window 5e

May 20 15:49:53 WindowServer: window 60 is already attached to window 5e

Console log

May 14 06:25:47 nsurlstoraged: Process 2009 does not have access to path /Users/USER/Library/Caches/com.apple.AddressBookSourceSync/Cache.db

May 19 17:44:23 ReportCrash: Invoking spindump for pid=7143 wakeups_rate=522 duration=87 because of excessive wakeups

May 19 17:59:36 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

May 19 18:01:32 nsurlstoraged: Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=PRAGMA auto_vacuum = 2;, error-code=8, error-message=attempt to write a readonly database

May 20 07:39:29 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

May 20 13:36:38 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

May 20 14:14:38 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

May 20 15:19:33 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

May 20 15:34:34 nsurlstoraged: The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

Daemons

com.adobe.fpsaud

com.apple.watchdogd

com.intego.BackupAssistant.daemon

com.microsoft.office.licensing.helper

com.oracle.java.Helper-Tool

com.oracle.java.JavaUpdateHelper

com.period.searchprotectd

- status: 78

org.macosforge.xquartz.privileged_startx

Agents

com.Installer.completer.download

com.Installer.completer.ltvbit

com.Installer.completer.update

com.divx.dms.agent

com.divx.update.agent

com.extensions.updater67619.agent.plist

com.flashmall.agent

com.google.keystone.user.agent

com.intego.backupassistant.agent

com.jdibackup.ZipCloud.autostart

- status: 1

com.jdibackup.ZipCloud.notify

- status: 1

com.oracle.java.Java-Updater

com.webhelper

com.webtools.uninstaller.app

com.webtools.update.0.0.0.9.agent

org.macosforge.xquartz.startx

User overrides

com.evernote.EvernoteHelper

Startup items

/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/Info.plist

/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent

/Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon

/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngine

/Library/StartupItems/Intego Backup Assistant/PowerManagerTool

/Library/StartupItems/Intego Backup Assistant/uninstall.sh

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Google Chrome

- /Applications/Google Chrome.app

iCloud errors

cloudd 227

cloudphotosd 63

Finder 6

Mail 3

Continuity errors

lsuseractivityd 8

sharingd 2

Restricted files: 49

Lockfiles: 1

Accessibility

Scroll Zoom: On

Contents of /Library/LaunchAgents/com.divx.dms.agent.plist

- mod date: Dec 22 21:08:09 2013

- checksum: 3097025559

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.divx.dms.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/DivX/DMSLaunch.app/Contents/MacOS/DMSLaunch</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.divx.update.agent.plist

- mod date: Dec 28 00:20:27 2013

- checksum: 3867571547

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.divx.update.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/DivX/DivXUpdate.app/Contents/MacOS/DivXUpdate</string>

<string>/silent</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.intego.backupassistant.agent.plist

- mod date: Oct 24 08:08:04 2012

- checksum: 2485335348

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<key>Label</key>

<string>com.intego.backupassistant.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent</string>

<string>--launchd</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/.startAgent</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

- mod date: Sep 4 16:46:51 2014

- checksum: 2290330801

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.oracle.java.Java-Updater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

<string>-bgcheck</string>

</array>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

<key>Weekday</key>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

- mod date: Dec 3 23:22:56 2013

- checksum: 1581764341

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.teamviewer.teamviewer</string>

<key>LimitLoadToSessionType</key>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

<string>-RunAsAgent</string>

</array>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS/</string>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<key>Disabled</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

- mod date: Dec 3 23:22:56 2013

- checksum: 132335822

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.teamviewer.desktop</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/Resources/TeamViewer_Desktop</str ing>

<string>-RunAsAgent</string>

<string>-Module</string>

</array>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/Resources/</string>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

...and 4 more line(s)

Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist

- mod date: Aug 11 14:52:54 2014

- checksum: 2451978492

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>org.macosforge.xquartz.startx</string>

<key>ProgramArguments</key>

<array>

<string>/opt/X11/lib/X11/xinit/launchd_startx</string>

<string>/opt/X11/bin/startx</string>

<string>/opt/X11/bin/Xquartz</string>

</array>

<key>Sockets</key>

<dict>

<key>org.macosforge.xquartz:0</key>

<dict>

<key>SecureSocketWithKey</key>

<string>DISPLAY</string>

</dict>

<key>ServiceIPC</key>

<true/>

<key>EnableTransactions</key>

<true/>

...and 2 more line(s)

Contents of /Library/LaunchDaemons/com.intego.BackupAssistant.daemon.plist

- mod date: Oct 24 08:08:04 2012

- checksum: 107931800

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd >

<dict>

<key>Label</key>

<string>com.intego.BackupAssistant.daemon</string>

<key>ProgramArguments</key>

<array>

<string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon</string>

</array>

<key>OnDemand</key>

<key>RunAtLoad</key>

<true/>

<key>ServiceDescription</key>

<string>Allow Intego Backup Assistant tasks to be launched.</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

- mod date: Dec 3 23:22:56 2013

- checksum: 643960326

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.teamviewer.service</string>

<key>OnDemand</key>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/Resources/TeamViewer_Service</str ing>

<string>-Module</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/Resources</string>

</dict>

</plist>

Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

- mod date: Apr 29 02:06:02 2015

- checksum: 3012644940

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>org.apache.httpd</string>

<key>EnvironmentVariables</key>

<dict>

<key>XPC_SERVICES_UNAVAILABLE</key>

</dict>

<key>ProgramArguments</key>

<array>

<string>/usr/sbin/httpd-wrapper</string>

<string>FOREGROUND</string>

</array>

<key>OnDemand</key>

</dict>

</plist>

Contents of /private/etc/ssh_config

- mod date: Apr 14 13:19:28 2015

- checksum: 2841432291

Host *

SendEnv LANG LC_*

Host *

XAuthLocation /opt/X11/bin/xauth

Contents of /private/etc/sshd_config

- mod date: Apr 14 13:19:28 2015

- checksum: 2518667249

SyslogFacility AUTHPRIV

AuthorizedKeysFile .ssh/authorized_keys

UsePrivilegeSeparation sandbox # Default for new installations.

AcceptEnv LANG LC_*

Subsystem sftp /usr/libexec/sftp-server

XAuthLocation /opt/X11/bin/xauth

Contents of Library/LaunchAgents/com.Installer.completer.download.plist

- mod date: May 19 18:05:22 2015

- checksum: 1083347336

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.Installer.completer.download</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>

<string>-trigger</string>

<string>download</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Downloads</string>

</array>

<key>isAllowToSuggest</key>

<string>false</string>

</dict>

...and 1 more line(s)

Contents of Library/LaunchAgents/com.Installer.completer.ltvbit.plist

- mod date: May 19 18:05:23 2015

- checksum: 3969366706

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.Installer.completer.ltvbit</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>

<string>-trigger</string>

<string>ltvbit</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

</dict>

...and 2 more line(s)

Contents of Library/LaunchAgents/com.Installer.completer.update.plist

- mod date: May 19 18:05:22 2015

- checksum: 3997477700

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.Installer.completer.update</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>

<string>-trigger</string>

<string>update</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.extensions.updater67619.agent.plist

- mod date: May 19 18:05:28 2015

- checksum: 2586846941

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.extensions.updater67619.agent.plist</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/LaunchAgents/UpdateDownloader</string>

<string>cmpId=2498</string>

<string>verifier=UUID</string>

<string>extId=67619</string>

<string>updatejsondomain=http://update.staticclientstorage.com</string>

<string>statsdomain=http://stats.staticclientstorage.com</string>

<string>eventsdomain=http://logs.staticclientstorage.com</string>

<string>errorsdomain=http://errors.staticclientstorage.com</string>

<string>installerversion=01-27</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.flashmall.agent.plist

- mod date: May 19 17:36:33 2015

- checksum: 4294721044

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<key>Label</key>

<string>com.flashmall.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/flashmall/Service.app/Contents/MacOS/Service</strin g>

<string>--service</string>

<string>--unique_id=UUID</string>

<string>--unique_data=UUID</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.google.keystone.agent.plist

- mod date: Mar 10 13:17:12 2015

- checksum: 2428256042

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.google.keystone.user.agent</string>

<key>LimitLoadToSessionType</key>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.** ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

<string>-runMode</string>

<string>ifneeded</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

- mod date: Apr 14 13:24:46 2015

- checksum: 844851161

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.autostart</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

- mod date: Apr 14 13:24:46 2015

- checksum: 2802169871

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.notify</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>StartInterval</key>

<key>RunAtLoad</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.webhelper.plist

- mod date: May 19 18:05:21 2015

- checksum: 435810497

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.webhelper</string>

<key>EnableGlobbing</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>

<string>-source</string>

<string>-brand</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<true/>

<key>StandardErrorPath</key>

...and 6 more line(s)

Contents of Library/LaunchAgents/com.webtools.uninstaller.plist

- mod date: May 19 18:05:21 2015

- checksum: 2477764744

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.webtools.uninstaller.app</string>

<key>EnableGlobbing</key>

<true/>

<key>WatchPaths</key>

<array>

<string>/Applications/WebTools.app</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/uninstall</string>

</array>

</dict>

</plist>

Contents of Library/LaunchAgents/com.webtools.update.agent.plist

- mod date: May 19 17:36:32 2015

- checksum: 637836098

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>EnableGlobbing</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.webtools.update.0.0.0.9.agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

<key>StartInterval</key>

<key>ThrottleInterval</key>

...and 3 more line(s)

Extensions

/System/Library/Extensions/JMicronATA.kext

- com.jmicron.JMicronATA

Applications

/Applications/DivX/DivX Preferences.app

- com.divx.divxprefs

/Applications/DivX/Uninstall DivX for Mac.app

- com.divxinc.uninstalldivxformac

/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

- com.microsoft.ASApplication

/Applications/Microsoft Office 2011/Office/Equation Editor.app

- com.microsoft.EquationEditor

/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

- com.microsoft.office.setupassistant

/Applications/Microsoft Office 2011/Office/Microsoft Query.app

- com.microsoft.Query

/Applications/Utilities/XQuartz.app

- org.macosforge.xquartz.X11

/Applications/WebTools.app

- N/A

/Applications/mediaDownloader.app

- com.yourcompany.mediaDownloader

/Library/Application Support/DivX/DMSLaunch.app

- com.yourcompany.DMSLaunch

/Library/Application Support/DivX/DivXMediaServer.app

- com.divx.DivX_Media_Server

/Library/Application Support/DivX/DivXTransferWizard.app

- com.divx.TransferWizard

/Library/Application Support/DivX/DivXUpdate.app

- com.divx.DivXUpdate

/Library/Application Support/DivX/DivXUpdater.app

- com.divx.DivXUpdater

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

- com.microsoft.silverlight.sllauncher

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_ejjicmeblgpmajnghnpcppodonldlgfn/Default ejjicmeblgpmajnghnpcppodonldlgfn.app

- com.google.Chrome.app.Default-ejjicmeblgpmajnghnpcppodonldlgfn-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_gbchcmhmhahfdphkhkmpfmihenigjmpp/Default gbchcmhmhahfdphkhkmpfmihenigjmpp.app

- com.google.Chrome.app.Default-gbchcmhmhahfdphkhkmpfmihenigjmpp-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_mijlebbfndhelmdpmllgcfadlkankhok/Default mijlebbfndhelmdpmllgcfadlkankhok.app

- com.google.Chrome.app.Default-mijlebbfndhelmdpmllgcfadlkankhok-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

Frameworks

/Library/Frameworks/DivX Toolkit.framework

- com.divx.divxtoolkit

/Library/Frameworks/DivXInstallerUtilities.framework

- com.yourcompany.DivXInstallerUtilities

/Library/Frameworks/MacFUSE.framework

- com.google.MacFUSE

/Library/Frameworks/OSXFUSE.framework

- com.github.osxfuse.framework

PrefPane

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

- com.oracle.java.JavaControlPanel

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

/Library/PreferencePanes/OSXFUSE.prefPane

- com.github.osxfuse.OSXFUSEPrefPane

Bundles

/Library/Internet Plug-Ins/DivX Web Player.plugin

- com.divx.DivXWebPlayer

/Library/Internet Plug-Ins/Flash Player.plugin

- com.macromedia.Flash Player.plugin

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

- com.oracle.java.JavaAppletPlugin

/Library/Internet Plug-Ins/OVSHelper.plugin

- com.divx.OVSHelper

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

- com.microsoft.sharepoint.browserplugin

/Library/Internet Plug-Ins/Silverlight.plugin

- com.microsoft.SilverlightPlugin

/Library/Widgets/Intego Backup Assistant Widget.wdgt

- com.intego.widget.backupassistant

/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/12.0.0.70/PepperFlashPlayer.plugin

- com.macromedia.PepperFlashPlayer.pepper

Bundles (new)

/Applications/Adobe Photoshop Lightroom 5.app

- com.adobe.Lightroom5

/Applications/MPlayerX.app

- org.niltsh.MPlayerX

/Applications/WebTools.app

-

/Applications/iMovie.app

- com.apple.iMovieApp

/Applications/mediaDownloader.app

- com.yourcompany.mediaDownloader

/Library/Internet Plug-Ins/Flash Player.plugin

- com.macromedia.Flash Player.plugin

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

/Users/USER/Applications/flashmall.app

- com.flashmall.AppHelper

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_mijlebbfndhelmdpmllgcfadlkankhok/Default mijlebbfndhelmdpmllgcfadlkankhok.app

- com.google.Chrome.app.Default-mijlebbfndhelmdpmllgcfadlkankhok-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

/Users/USER/Library/Application Support/IM.Installer/Completer.app

- com.tabatoo.InstallerT

/Users/USER/Library/flashmall/Service.app

- com.flashmall.Service

Library paths

/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

/Library/Application Support/DivX/DesktopService/libDivXDownloadManager.dylib

/Library/Application Support/DivX/Libraries/DivXUpdateCheckDll.dylib

/Library/Application Support/DivX/Libraries/libDivXDesktopSupport.dylib

/Library/Application Support/DivX/Libraries/libicudata.40.1.dylib

/Library/Application Support/DivX/Libraries/libicuuc.40.1.dylib

/Library/Application Support/DivX/QtPlugins/accessible/libqtaccessiblewidgets.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqcncodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqjpcodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqkrcodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqtwcodecs.dylib

/Library/Application Support/DivX/QtPlugins/iconengines/libqsvgicon.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqgif.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqico.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqjpeg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqmng.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqsvg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqtiff.dylib

/Library/Application Support/DivX/QtPlugins/sqldrivers/libqsqlite.dylib

/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libmacfuse_i32 .2.dylib.dSYM/Contents/Resources/DWARF/libmacfuse_i32.2.dylib

/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libmacfuse_i64 .2.dylib.dSYM/Contents/Resources/DWARF/libmacfuse_i64.2.dylib

/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libosxfuse_i32 .dylib.dSYM/Contents/Resources/DWARF/libosxfuse_i32.dylib

/Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libosxfuse_i64 .dylib.dSYM/Contents/Resources/DWARF/libosxfuse_i64.dylib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.7.796/_platform_specific/mac_x64/libwidev inecdm.dylib

/opt/X11/lib/libAppleWM.7.dylib

/opt/X11/lib/libFS.6.dylib

/opt/X11/lib/libGL.1.dylib

/opt/X11/lib/libGLU.1.dylib

/opt/X11/lib/libICE.6.dylib

/opt/X11/lib/libOSMesa.8.dylib

/opt/X11/lib/libOpenVG.1.dylib

/opt/X11/lib/libSM.6.dylib

/opt/X11/lib/libX11-xcb.1.dylib

/opt/X11/lib/libX11.6.dylib

/opt/X11/lib/libXRes.1.dylib

/opt/X11/lib/libXTrap.6.dylib

/opt/X11/lib/libXau.6.dylib

/opt/X11/lib/libXaw3d.8.dylib

/opt/X11/lib/libXaw6.6.dylib

/opt/X11/lib/libXaw7.7.dylib

/opt/X11/lib/libXaw8.8.dylib

/opt/X11/lib/libXcomposite.1.dylib

/opt/X11/lib/libXcursor.1.dylib

/opt/X11/lib/libXdamage.1.dylib

/opt/X11/lib/libXdmcp.6.dylib

/opt/X11/lib/libXevie.1.dylib

/opt/X11/lib/libXext.6.dylib

/opt/X11/lib/libXfixes.3.dylib

/opt/X11/lib/libXfont.1.dylib

/opt/X11/lib/libXfontcache.1.dylib

/opt/X11/lib/libXft.2.dylib

/opt/X11/lib/libXi.6.dylib

/opt/X11/lib/libXinerama.1.dylib

/opt/X11/lib/libXmu.6.dylib

/opt/X11/lib/libXmuu.1.dylib

/opt/X11/lib/libXp.6.dylib

/opt/X11/lib/libXplugin.1.dylib

/opt/X11/lib/libXpm.4.dylib

/opt/X11/lib/libXrandr.2.dylib

/opt/X11/lib/libXrender.1.dylib

/opt/X11/lib/libXss.1.dylib

/opt/X11/lib/libXt.6.dylib

/opt/X11/lib/libXtst.6.dylib

/opt/X11/lib/libXv.1.dylib

/opt/X11/lib/libXvMC.1.dylib

/opt/X11/lib/libXvMCW.1.dylib

/opt/X11/lib/libXxf86misc.1.dylib

/opt/X11/lib/libXxf86vm.1.dylib

/opt/X11/lib/libcairo-script-interpreter.2.dylib

/opt/X11/lib/libcairo.2.dylib

/opt/X11/lib/libdmx.1.dylib

/opt/X11/lib/libfontconfig.1.dylib

/opt/X11/lib/libfontenc.1.dylib

/opt/X11/lib/libfreetype.6.dylib

/opt/X11/lib/libglut.3.dylib

/opt/X11/lib/libpixman-1.0.dylib

/opt/X11/lib/libpng.3.dylib

/opt/X11/lib/libpng12.0.dylib

/opt/X11/lib/libpng14.14.dylib

/opt/X11/lib/libpng15.15.dylib

/opt/X11/lib/libxcb-composite.0.dylib

/opt/X11/lib/libxcb-cursor.0.dylib

/opt/X11/lib/libxcb-damage.0.dylib

/opt/X11/lib/libxcb-dpms.0.dylib

/opt/X11/lib/libxcb-dri2.0.dylib

/opt/X11/lib/libxcb-dri3.0.dylib

/opt/X11/lib/libxcb-ewmh.2.dylib

/opt/X11/lib/libxcb-glx.0.dylib

/opt/X11/lib/libxcb-icccm.4.dylib

/opt/X11/lib/libxcb-image.0.dylib

/opt/X11/lib/libxcb-keysyms.1.dylib

/opt/X11/lib/libxcb-present.0.dylib

/opt/X11/lib/libxcb-randr.0.dylib

/opt/X11/lib/libxcb-record.0.dylib

/opt/X11/lib/libxcb-render-util.0.dylib

/opt/X11/lib/libxcb-render.0.dylib

/opt/X11/lib/libxcb-res.0.dylib

/opt/X11/lib/libxcb-screensaver.0.dylib

/opt/X11/lib/libxcb-shape.0.dylib

/opt/X11/lib/libxcb-shm.0.dylib

/opt/X11/lib/libxcb-sync.1.dylib

/opt/X11/lib/libxcb-util.1.dylib

/opt/X11/lib/libxcb-xevie.0.dylib

/opt/X11/lib/libxcb-xf86dri.0.dylib

/opt/X11/lib/libxcb-xfixes.0.dylib

/opt/X11/lib/libxcb-xinerama.0.dylib

/opt/X11/lib/libxcb-xkb.1.dylib

/opt/X11/lib/libxcb-xprint.0.dylib

/opt/X11/lib/libxcb-xtest.0.dylib

/opt/X11/lib/libxcb-xv.0.dylib

/opt/X11/lib/libxcb-xvmc.0.dylib

/opt/X11/lib/libxcb.1.dylib

/opt/X11/lib/libxkbfile.1.dylib

/opt/X11/lib/libxkbui.1.dylib

/opt/X11/lib/libxshmfence.1.dylib

/usr/local/lib/libmacfuse_i32.2.dylib

/usr/local/lib/libmacfuse_i64.2.dylib

/usr/local/lib/libosxfuse_i32.2.dylib

/usr/local/lib/libosxfuse_i64.2.dylib

Installations

Xerox Printer: 1/17/14, 11:14

TeamViewer: 1/17/14, 10:58

DivX: 1/10/14, 10:25

Microsoft Office for Mac 2011: 1/7/14, 11:01

Adobe Flash Player: 12/31/13, 17:55

Elapsed time (sec): 414

Reply