You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Adwaremedic is it safe ?

Hello everyone .. I would like to ask if the adwaremedic program is the safest way to remove adware from the mac. Lately I m having some pop up advertisements from a specific site called mac keeper. I have no idea how this ad came up since I am not downloading torrents nor visiting any suspicious site .

So is this the only way to permanently remove the adware? Is it safe , since this is a third party program? Thanks in advance everyone

Posted on Nov 16, 2014 3:22 AM

Reply
240 replies

Mar 18, 2015 10:14 PM in response to Linc Davis

Start time: 00:43:41 03/19/15



Model Identifier: MacBookAir6,1

System Version: OS X 10.10.2 (14C1510)

Kernel Version: Darwin 14.1.0

Time since boot: 10:27



Diagnostic reports



2015-03-11 mdworker crash x3

2015-03-18 PhotoStreamAgent crash

2015-03-18 com.apple.WebKit.WebContent crash



Log



Mar 18 10:48:54 [[0xffffff8035de1000] OpCode 0x0C01 (Set Event Mask) from: kernel_task (0) Synchronous status: 0x00 (kIOReturnSuccess) state: 2 (BUSY) timeout: 5000] Bluetooth warning: An HCI Req timeout occurred.

Mar 18 13:39:10 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 13:39:10 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 13:48:13 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 13:48:13 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 14:15:26 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 14:15:32 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 18 14:19:13 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 18 14:19:14 com.apple.cfnetwork.cfnetworkagent: Service exited with abnormal code: 15

Mar 18 14:22:44 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 15:29:08 process firefox[480] caught causing excessive wakeups. EXC_RESOURCE supressed due to audio playback

Mar 18 15:53:26 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 15:53:26 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 16:04:23 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 16:04:23 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 18:04:34 process com.apple.WebKit[723] caught causing excessive wakeups. Observed wakeups rate (per sec): 165; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 109715

Mar 18 19:50:08 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.Plugin.64.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.Plugin.64.UUID: Service exited with abnormal code: 1

Mar 19 00:13:16 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 19 00:13:16 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 19 00:19:04 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 19 00:19:17 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1



Daemons



com.adobe.fpsaud



Agents



com.apple.photostream-agent

com.apple.AirPortBaseStationAgent



Bundles



/Library/Internet Plug-Ins/Flash Player.plugin

- N/A

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences



Restricted files: 5



Elapsed time (s): 199

Start time: 00:43:41 03/19/15



Model Identifier: MacBookAir6,1

System Version: OS X 10.10.2 (14C1510)

Kernel Version: Darwin 14.1.0

Time since boot: 10:27



Diagnostic reports



2015-03-11 mdworker crash x3

2015-03-18 PhotoStreamAgent crash

2015-03-18 com.apple.WebKit.WebContent crash



Log



Mar 18 10:48:54 [[0xffffff8035de1000] OpCode 0x0C01 (Set Event Mask) from: kernel_task (0) Synchronous status: 0x00 (kIOReturnSuccess) state: 2 (BUSY) timeout: 5000] Bluetooth warning: An HCI Req timeout occurred.

Mar 18 13:39:10 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 13:39:10 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 13:48:13 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 13:48:13 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 14:15:26 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 14:15:32 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 18 14:19:13 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 18 14:19:14 com.apple.cfnetwork.cfnetworkagent: Service exited with abnormal code: 15

Mar 18 14:22:44 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 15:29:08 process firefox[480] caught causing excessive wakeups. EXC_RESOURCE supressed due to audio playback

Mar 18 15:53:26 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 15:53:26 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 16:04:23 0 0 AppleUSBCDCACMData: start - createSerialStream failed

Mar 18 16:04:23 0 0 AppleUSBCDCECMData: start - Find CDC driver for ECM data interface failed

Mar 18 18:04:34 process com.apple.WebKit[723] caught causing excessive wakeups. Observed wakeups rate (per sec): 165; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 109715

Mar 18 19:50:08 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.Plugin.64.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 18 19:50:08 com.apple.WebKit.Plugin.64.UUID: Service exited with abnormal code: 1

Mar 19 00:13:16 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 19 00:13:16 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

Mar 19 00:19:04 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

Mar 19 00:19:17 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1



Daemons



com.adobe.fpsaud



Agents



com.apple.photostream-agent

com.apple.AirPortBaseStationAgent



Bundles



/Library/Internet Plug-Ins/Flash Player.plugin

- N/A

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences



Restricted files: 5



Elapsed time (s): 199

Mar 19, 2015 6:31 AM in response to zaglool12

Your problem, whatever it is, is not related to the one that was being discussed here. The right way to get help on this site is not to post a comment in a discussion started by someone else months ago. Nor should you post a diagnostic test that no one asked for, without a description of the problem. That particular test should never be used unless requested by me.


Search the site for answered questions similar to yours, and if you don't find a solution that way, start your own discussion with a full description of the problem and whatever you've already done to try to solve it. You'll have as much chance as anyone else of getting a useful response.

Mar 19, 2015 11:24 AM in response to Linc Davis

OK, I did run that test because ,I thought ,from reading the thread, I have similar problem.I had a 1 week old macbook air and did opened a link from FB posted by a friend and kept getting pop-ups and a messages from my mac about being infected by adware/malware and have to call this number urgently .(I have tried adawremedic before in a similar problem and the adware seems to overcome it,have to take it to apple store and the supervisor,chief tech spend 1 hour to remove that,in a different laptop ).

Did not open a knew post because of time factor(heading in few hours overseas where I have no access to apple stuff( a country in africa that is sanctioned by US and have to use VPN to access apple store/I tunes,etc), beside I felt If I have the same issues why duplicating posts.

I did not knew that the test is a personal property,is it?.I thought this a common form where common people can get help and share knowledge.

Anyway, I I have few hours left and will try adwaremedic now or through VPN.

Mar 19, 2015 11:35 AM in response to zaglool12

zaglool12 wrote:


kept getting pop-ups and a messages from my mac about being infected by adware/malware and have to call this number urgently


That doesn't sound like something that is typically caused by adware, and as such, it's unlikely that AdwareMedic or any other adware removal instructions will help. What you describe sounds like a tech support scam. See:


Tech support scam pop-ups


(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)


I did not knew that the test is a personal property,is it?.I thought this a common form where common people can get help and share knowledge.


Yes, that's the intent of the site, and Linc really doesn't have any right to tell you that you can't run his script. He's publishing it freely, over and over on this site, as open-source code. I'm sure that there are copyright laws controlling your ability to copy, modify and republish his script (I'm no lawyer, of course), but there's no reason you shouldn't be allowed to run his script whenever you like, and do whatever you like with the output. If he wishes otherwise, he would need to package the script with a license agreement dictating how it is to be used.


Contrary to what he says, he's not the only person capable of understanding the output of his script.

Mar 19, 2015 3:09 PM in response to zaglool12

I did not knew that the test is a personal property,is it?

Yes, it is. Almost everything that is published anywhere is owned by someone. You own your comments on this site, and I own mine.


Strangely, other people seem to think, not only that they understand the results of the test, but also that they can speak for me in telling you what your rights to it are. You can, of course, run the test without permission from me or anyone else. I never said you could not. I said you should not, or at least, you should not post the results here, because I don't want to be morally responsible, even indirectly, for the consequences.

Apr 11, 2015 2:36 AM in response to thomas_r.

I made the stupid mistake today of somehow installing this mackeeper adware. In a panic I found AdwareMedic, and yes, as you guessed, I was also wary about installing it, thinking I was fighting fire with fire. But then I found this discussion. I downloaded your software, ran it, and now, am back to being a happy camper with my clean Mac. Thank you so much! I will definitely donate as my time is worth money and you have just saved me a lot of time. Thanks again. Yes, Adware Medic is safe, and it works! - Elyssa

Apr 16, 2015 3:40 PM in response to AggelakasK

Start time: 17:24:01 04/16/15



Model Identifier: MacBookPro6,2

System Version: OS X 10.9.5 (13F1066)

Kernel Version: Darwin 13.4.0

Time since boot: 30 minutes



SATA



Hitachi HTS545032B9SA02



USB



EPSON DS-510 (Seiko Epson Corp.)



SMC



ReadKey for key ALP0 failed with SMC error code 0xb7.

ReadKey for key ALP1 failed with SMC error code 0xb7.

ReadKey for key BILO failed with SMC error code 0xb7.

ReadKey for key LEID failed with SMC error code 0xb7.



Diagnostic reports



2015-04-02 CleanMyMacHelperTool crash x2

2015-04-05 CleanMyMacHelperTool crash x2

2015-04-05 com.apple.WebKit.WebContent crash x4

2015-04-06 CleanMyMacHelperTool crash

2015-04-07 CleanMyMacHelperTool crash

2015-04-08 CleanMyMacHelperTool crash x3

2015-04-09 CleanMyMacHelperTool crash

2015-04-12 CleanMyMacHelperTool crash x2

2015-04-14 CleanMyMacHelperTool crash x2

2015-04-15 CleanMyMacHelperTool crash x2

2015-04-16 CleanMyMacHelperTool crash x2

2015-04-16 PluginProcess crash x3



Log



Apr 16 17:15:55 root : TTY=unknown ; PWD=/ ; USER=donaldwood ; COMMAND=/bin/launchctl list

Apr 16 17:15:55 root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/launchctl list

Apr 16 17:17:36 root : TTY=unknown ; PWD=/ ; USER=donaldwood ; COMMAND=/bin/launchctl list

Apr 16 17:17:36 root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/launchctl list

Apr 16 17:19:18 root : TTY=unknown ; PWD=/ ; USER=donaldwood ; COMMAND=/bin/launchctl list

Apr 16 17:19:18 root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/launchctl list

Apr 16 17:20:59 root : TTY=unknown ; PWD=/ ; USER=donaldwood ; COMMAND=/bin/launchctl list

Apr 16 17:20:59 root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/launchctl list

Apr 16 17:22:40 root : TTY=unknown ; PWD=/ ; USER=donaldwood ; COMMAND=/bin/launchctl list

Apr 16 17:22:40 root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/launchctl list

Apr 16 17:23:01 USER_PROCESS: 540 ttys000

Apr 16 17:24:01 donaldwood : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/bin/true

Apr 16 17:24:04 donaldwood : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/libexec/smcDiagnose

Apr 16 17:24:22 root : TTY=unknown ; PWD=/ ; USER=donaldwood ; COMMAND=/bin/launchctl list

Apr 16 17:24:22 root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/launchctl list

Apr 16 17:24:24 SMC::smcReadKeyAction ERROR ALP0 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8011d85000

Apr 16 17:24:24 process smcDiagnose[656] caught causing excessive wakeups. Observed wakeups rate (per sec): 52062; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 1008462

Apr 16 17:24:45 Saved wakeups_resource.spin report for smcDiagnose version ??? (???) to /Library/Logs/DiagnosticReports/smcDiagnose_2015-04-16-172445_DON-WOODs-MacBook -Pro.wakeups_resource.spin

Apr 16 17:25:02 SMC::smcReadKeyAction ERROR ALP1 kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8011d85000

Apr 16 17:25:40 SMC::smcReadKeyAction ERROR BILO kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8011d85000

Apr 16 17:26:03 root : TTY=unknown ; PWD=/ ; USER=donaldwood ; COMMAND=/bin/launchctl list

Apr 16 17:26:03 root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/launchctl list

Apr 16 17:26:19 SMC::smcReadKeyAction ERROR LEID kSMCTimeoutError(0xb7) fKeyHashTable=0x0xffffff8011d85000

Apr 16 17:26:39 SMC::smcReadKeyAction ERROR: smcReadData8 failed for key MACR (kSMCKeyNotReadable)

Apr 16 17:26:39 SMC::smcReadKeyAction ERROR MACR kSMCKeyNotReadable(0x85) fKeyHashTable=0x0xffffff8011d85000



Daemons



com.apple.WebKit.Databases

com.apple.WebKit.Databases.UUID

com.zeobit.MacKeeper.plugin.AntiTheft.daemon

com.microsoft.office.licensing.helper

com.google.keystone.daemon

com.carbonite.watcher

com.carbonite.monitor

com.carbonite.daemon

com.carbonite.installhelper

com.adobe.fpsaud



Agents



com.epson.scanner.ica.35232.UUID

com.apple.ssinvitationagent

com.apple.java.updateSharing

com.apple.java.InstallOnDemandAgent

com.apple.AirPortBaseStationAgent

com.google.keystone.system.agent

com.epson.esua.launcher

com.carbonite.status

com.zeobit.MacKeeper.Helper

com.nds.pcshow.uninstall

com.nds.pcshow

com.macpaw.CleanMyMac.volumeWatcher

com.macpaw.CleanMyMac.trashSizeWatcher

com.macpaw.CleanMyMac.helperTool

com.apple.CSConfigDotMacCert-EMAIL-SharedServices

com.adobe.ARM.UUID



Bundles



/System/Library/Extensions/hp_Inkjet3_io_enabler.kext

- com.hp.print.hpio.Inkjet3.kext

/System/Library/Extensions/hp_Inkjet4_io_enabler.kext

- com.hp.print.hpio.Inkjet4.kext

/System/Library/Extensions/hp_Inkjet5_io_enabler.kext

- com.hp.print.hpio.Inkjet5.kext

/System/Library/Extensions/hp_Inkjet7_io_enabler.kext

- com.hp.print.hpio.inkjet7.kext

/System/Library/Extensions/hp_Inkjet8_io_enabler.kext

- com.hp.print.hpio.inkjet8.kext

/System/Library/Extensions/hp_io_printerclassdriver_enabler.kext

- com.hp.hpio.hp_io_printerclassdriver_enabler

/System/Library/Extensions/hp_Laserjet_io_enabler.kext

- com.hp.print.hpio.Laserjet.kext

/System/Library/Extensions/hp_Officejet_io_enabler.kext

- com.hp.print.hpio.Officejet.kext

/System/Library/Extensions/hp_Photosmart_io_enabler.kext

- com.hp.print.hpio.Photosmart.kext

/System/Library/Extensions/hp_PhotosmartPro_io_enabler.kext

- com.hp.print.hpio.PhotosmartPro.kext

/System/Library/Extensions/hp_qc_io_enabler.kext

- com.hp.hpio.hp_psa530_630_io_enabler

/System/Library/Extensions/LexmarkUSBMerge.kext

- com.lexmark.print.usbmerge

/Library/Audio/MIDI Drivers/EmagicUSBMIDIDriver.plugin

- info.emagic.driver.unitor

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

- com.adobe.acrobat.pdfviewer

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

- com.adobe.acrobat.pdfviewerNPAPI

/Library/Internet Plug-Ins/Flash Player.plugin

- N/A

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

- net.telestream.wmv.plugin

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin

- net.telestream.wmv.webplugin

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

- com.google.googletalkbrowserplugin

/Library/Internet Plug-Ins/huludesktop.webplugin

- com.hulu.desktop.plugin

/Library/Internet Plug-Ins/iPhotoPhotocast.plugin

- com.apple.plugin.iPhotoPhotocast

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

- com.google.o1dbrowserplugin

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

- com.microsoft.sharepoint.browserplugin

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

- com.microsoft.sharepoint.webkitplugin

/Library/Internet Plug-Ins/Silverlight.plugin

- com.microsoft.SilverlightPlugin

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

/Library/PreferencePanes/Flip4Mac WMV.prefPane

- net.telestream.wmv.prefpane

/Library/Spotlight/GBSpotlightImporter.mdimporter

- com.apple.garageband.spotlightimporter

/Library/Spotlight/Keynote.mdimporter

- com.apple.MDImporter.iWork.Keynote

/Library/Spotlight/Numbers.mdimporter

- com.apple.MDImporter.iWork.Numbers

/Library/Spotlight/Pages.mdimporter

- com.apple.MDImporter.iWork.Pages

Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

Library/Address Book Plug-Ins/YMsgrCallABPlugin.bundle

- com.yahoo.YMsgrCallABPlugin

Library/Address Book Plug-Ins/YMsgrMsnABPlugin.bundle

- com.yahoo.YMsgrMsnABPlugin

Library/Address Book Plug-Ins/YMsgrSmsABPlugin.bundle

- com.yahoo.YMsgrSmsABPlugin

Library/Address Book Plug-Ins/YMsgrYimABPlugin.bundle

- com.yahoo.YMsgrYimABPlugin

Library/Internet Plug-Ins/PlayerPlugin.bundle

- com.nds.pcshow.player

Library/PreferencePanes/MusicManager.prefPane

- com.google.musicmanager.pref



Contents of /Library/LaunchAgents/com.carbonite.launchd.status.plist (checksum 929323009)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.carbonite.status</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Carbonite.app/Contents/CarboniteStatus.app/Contents/MacOS /CarboniteStatus</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>



Contents of /Library/LaunchAgents/com.epson.esua.launcher.plist (checksum 1726226152)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>StartInterval</key>

<integer>3600</integer>

<key>ProgramArguments</key>

<array>

<string>/Applications/Epson Software/EPSON Software Updater.app/Contents/EPSON Software Updater Agent.app/Contents/MacOS/EPSON Software Updater Agent</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>Label</key>

<string>com.epson.esua.launcher</string>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.carbonite.installhelper.plist (checksum 1436033388)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.carbonite.installhelper</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.carbonite.installhelper</string>

</array>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<string>Unix</string>

<key>SockPathMode</key>

<integer>438</integer>

<key>SockPathName</key>

<string>/var/run/com.carbonite.installhelper.socket</string>

<key>SockType</key>

<string>Stream</string>

</dict>

</dict>

<key>StandardErrorPath</key>



...and 5 more line(s)



Contents of /Library/LaunchDaemons/com.carbonite.launchd.daemon.plist (checksum 769579485)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.carbonite.daemon</string>

<key>KeepAlive</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Applications/Carbonite.app/Contents/MacOS/CarboniteDaemon</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<string>/Library/Logs/Carbonite/Carbonite2.log</string>

<key>StandardOutPath</key>

<string>/Library/Logs/Carbonite/Carbonite1.log</string>

<key>WorkingDirectory</key>

<string>/Library/Application Support/Carbonite</string>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.carbonite.launchd.monitor.plist (checksum 3242225599)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.carbonite.monitor</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Carbonite.app/Contents/Resources/monitor/carbonite_monito r.py</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<string>/Library/Logs/Carbonite/Monitor.log</string>

<key>StandardOutPath</key>

<string>/Library/Logs/Carbonite/MonitorStats.csv</string>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.carbonite.launchd.watcher.plist (checksum 3967123637)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.carbonite.watcher</string>

<key>WatchPaths</key>

<array>

<string>/Applications/Carbonite.app</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.carbonite.installhelper</string>

<string>watcher</string>

<string>9495233</string>

</array>

<key>RunAtLoad</key>

<false/>

<key>KeepAlive</key>

<false/>

<key>StandardErrorPath</key>

<string>/Library/Logs/Carbonite/Carbonite2.log</string>

<key>StandardOutPath</key>

<string>/Library/Logs/Carbonite/Carbonite1.log</string>

<key>WorkingDirectory</key>



...and 3 more line(s)



Contents of /Library/LaunchDaemons/com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist (checksum 3798729423)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>Label</key>

<string>com.zeobit.MacKeeper.plugin.AntiTheft.daemon</string>

<key>Program</key>

<string>/Library/Application Support/MacKeeper/MacKeeperATd</string>

<key>OnDemand</key>

<false/>

</dict>

</plist>



Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist (checksum 394026997)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

<string>semi-auto</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>12600</integer>

</dict>

</plist>



Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist (checksum 481551912)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.apple.CSConfigDotMacCert-EMAIL-SharedServices</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>LowPriorityIO</key>

<true/>

<key>Nice</key>

<integer>10</integer>

<key>ProgramArguments</key>

<array>

<string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>

<string>-l</string>

<string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>

<string>-u</string>

<string>EMAIL</string>

<string>-t</string>

<string>SharedServices</string>

<string>-s</string>

</array>



...and 4 more line(s)



Contents of Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist (checksum 3960180976)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.macpaw.CleanMyMac.helperTool</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/CleanMyMac/CleanMyMacHelperTool</string>

</array>

<key>RunAtLoad</key>

<false/>

<key>WatchPaths</key>

<array>

<string>/Users/USER/.Trash</string>

</array>

</dict>

</plist>



Contents of Library/LaunchAgents/com.macpaw.CleanMyMac.trashSizeWatcher.plist (checksum 1617618756)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.macpaw.CleanMyMac.trashSizeWatcher</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/CleanMyMac/CleanMyMacHelperTool</string>

<string>-watchTrashSize</string>

</array>

<key>RunAtLoad</key>

<false/>

<key>StartInterval</key>

<integer>21600</integer>

</dict>

</plist>



Contents of Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist (checksum 474379634)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.macpaw.CleanMyMac.volumeWatcher</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/CleanMyMac/CleanMyMacHelperTool</string>

<string>-cleanWinJunk</string>

<string>-cleanTrashes</string>

<string>-cleanMacOSJunk</string>

</array>

<key>RunAtLoad</key>

<false/>

<key>StartOnMount</key>

<true/>

</dict>

</plist>



Contents of Library/LaunchAgents/com.nds.pcshow.plist (checksum 715407001)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.nds.pcshow</string>

<key>OnDemand</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>sh</string>

<string>-c</string>

<string>$HOME/Library/NDSPCShowServer/NDSPCShowServer.bundle/Contents/Resources /launch.sh</string>

</array>

</dict>

</plist>



Contents of Library/LaunchAgents/com.nds.pcshow.uninstall.plist (checksum 2971053301)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.nds.pcshow.uninstall</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Library/NDSPCShowServer</string>

<string>/Users/USER/Library/Internet Plug-Ins/PlayerPlugin.bundle</string>

</array>

<key>ProgramArguments</key>

<array>

<string>sh</string>

<string>-c</string>

<string>/tmp/vgconnect/condUninstall.sh</string>

</array>

</dict>

</plist>



Contents of Library/LaunchAgents/com.spotify.webhelper.plist (checksum 2767232724)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.spotify.webhelper</string>

<key>KeepAlive</key>

<dict>

<key>NetworkState</key>

<true/>

</dict>

<key>RunAtLoad</key>

<true/>

<key>Program</key>

<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

<key>SpotifyPath</key>

<string>/Applications/Spotify.app</string></dict>

</plist>



Contents of Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist (checksum 2672891206)



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>EnvironmentVariables</key>

<dict>

<key>ZBTimeStamp</key>

<string>20121206123834</string>

</dict>

<key>Label</key>

<string>com.zeobit.MacKeeper.Helper</string>

<key>OnDemand</key>

<false/>

<key>Program</key>

<string>/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper</string>

</dict>

</plist>



Font issues: 45



Bad plists



/Library/Preferences/com.epson.Document Capture.UnInstallList.plist

/Library/Preferences/com.epson.EPSON Scan.UnInstallList.plist

/Library/Preferences/com.epson.EPSON Software Updater.UnInstallList.plist



DNS: 64.253.208.121



Listeners



cupsd: ipp



User login items



Google Drive

- missing value

Amazon Cloud Drive

- missing value

Dropbox

- missing value

AdobeResourceSynchronizer

- /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app

Music Manager

- missing value

Music Manager

- /Users/USER/Library/PreferencePanes/MusicManager.prefPane/Contents/Helpers/Musi cManagerHelper.app



Hidden apps



.magicJack/Softphone/magicJack.app

.magicJack/Softphone/splash.app



Widgets



iCal



Restricted files: 240



Lockfiles: 64



Elapsed time (s): 393

Apr 22, 2015 1:10 AM in response to Linc Davis

Linc Davis' script worked exceptionally well! Thank you so much! By the way, I do not in anyway trust an download that was repeatedly advertised to me, while I had the malware on my computer and was looking for solutions. That just seemed sketchy. Plus, I knew there was no need to download more junk when that's what got me into this mess in the first place. Linc

Davis, you are a life saver!!!

Adwaremedic is it safe ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.