AggelakasK

Q: Adwaremedic is it safe ?

Hello everyone .. I would like to ask if the adwaremedic program is the safest way to remove adware from the mac. Lately I m having some pop up advertisements from a specific site called mac keeper. I have no idea how this ad came up since I am not downloading torrents nor visiting any suspicious site .

So is this the only way to permanently remove the adware? Is it safe , since this is a third party program? Thanks in advance everyone

Posted on Nov 16, 2014 3:22 AM

Close

Q: Adwaremedic is it safe ?

  • All replies
  • Helpful answers

first Previous Page 16 of 16
  • by lucille103,

    lucille103 lucille103 Apr 11, 2016 4:58 PM in response to Linc Davis
    Level 1 (4 points)
    Apr 11, 2016 4:58 PM in response to Linc Davis

    Start time: 19:41:06 04/11/16

     

     

    Model Identifier: MacBook8,1

    System Version: OS X 10.10.5 (14F27)

    Kernel Version: Darwin 14.5.0

    Time since boot: 69 days 4:56

     

     

    Heat

     

     

       2016-04-11 19:41:08 -0400 Thermal Warning Level = 0

       2016-04-11 19:41:08 -0400 Performance Warning Level = 0

       CPU_Scheduler_Limit = 100

       CPUs = 4

       CPU_Speed_Limit = 80

     

     

    FileVault: On

     

     

    Diagnostic reports

     

     

       2016-03-31 Installer crash

       2016-03-31 com.apple.preferences.users.remoteservice crash x3

       2016-04-09 launchservicesd crash

     

     

    Log

     

     

       Apr 11 19:23:05 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:28:40 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:28:40 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:28:40 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:28:40 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:28:40 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:28:42 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:17 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:17 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:17 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:17 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:17 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:18 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:18 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:18 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:18 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:18 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:18 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:20 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:20 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:20 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:20 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:20 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:20 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

       Apr 11 19:36:20 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d7)

     

     

    Swap (MiB): 192552

     

     

    Activity

     

     

       CPU: user 10%, system 14%

       Net: 2087 in, 53 out (KiB/s)

     

     

    CPU per process: Mail (UID 501) is using 25.2  %

     

     

    Memory: kernel_task (UID 0) is using 1168 MB

     

     

    Daemons

     

     

       com.adobe.fpsaud

     

     

    Agents

     

     

       com.pcv.hlpramcn

       com.SoftwareUpdater.agent

       com.ShoppyTool.agent

       com.apple.FolderActions.folders

       com.spotify.webhelper

       com.amazon.music

       com.google.keystone.user.agent

       com.apple.AirPortBaseStationAgent

     

     

    Bundles

     

     

       /Library/Internet Plug-Ins/Flash Player.plugin

       - N/A

       /Library/Internet Plug-Ins/Silverlight.plugin

       - com.microsoft.SilverlightPlugin

       /Library/PreferencePanes/Flash Player.prefPane

       - com.adobe.flashplayerpreferences

     

     

    Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist (checksum 3012644940)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>Disabled</key>

        <true/>

        <key>Label</key>

        <string>org.apache.httpd</string>

        <key>EnvironmentVariables</key>

        <dict>

        <key>XPC_SERVICES_UNAVAILABLE</key>

        <string>1</string>

        </dict>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/sbin/httpd-wrapper</string>

        <string>-D</string>

        <string>FOREGROUND</string>

        </array>

        <key>OnDemand</key>

        <false/>

       </dict>

       </plist>

     

     

    Contents of Library/LaunchAgents/com.ShoppyTool.agent.plist (checksum 3747694600)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>EnableGlobbing</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.ShoppyTool.agent</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/ShoppyTool/ShoppyTool</string>

        <string>-guid</string>

        <string>2719840733809260</string>

        <string>-source</string>

        <string>tgo-1613</string>

        <string>-brand</string>

        <string>ShoppyTool</string>

        <string>-dt</string>

        <string>1459295695</string>

        </array>

        <key>RunAtLoad</key>

     

     

       ...and 9 more line(s)

     

     

    Contents of Library/LaunchAgents/com.SoftwareUpdater.agent.plist (checksum 3604272161)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>EnableGlobbing</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.SoftwareUpdater.agent</string>

        <key>OnDemand</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/SoftwareUpdater/SoftwareUpdater</string>

        <string>-guid</string>

        <string>2719840733809260</string>

        <string>-source</string>

        <string>tgo-1613</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

     

     

       ...and 7 more line(s)

     

     

    Contents of Library/LaunchAgents/com.amazon.music.plist (checksum 3668832669)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>EnableTransactions</key>

        <false/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.amazon.music</string>

        <key>Program</key>

        <string>/Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper</string>

        <key>RunAtLoad</key>

        <true/>

       </dict>

       </plist>

     

     

    Contents of Library/LaunchAgents/com.google.keystone.agent.plist (checksum 924919330)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>Label</key>

        <string>com.google.keystone.user.agent</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>ProgramArguments</key>

        <array>

         <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

         <string>-runMode</string>

         <string>ifneeded</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StartInterval</key>

        <integer>3623</integer>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

        <string>/dev/null</string>

       </dict>

       </plist>

     

     

    Contents of Library/LaunchAgents/com.pcv.hlpramcn.plist (checksum 438857402)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>Disabled</key>

        <false/>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.pcv.hlpramcn</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>Program</key>

        <string>/Users/USER/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc</string>

       </dict>

       </plist>

     

     

    Contents of Library/LaunchAgents/com.spotify.webhelper.plist (checksum 765212253)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>Label</key>

        <string>com.spotify.webhelper</string>

        <key>KeepAlive</key>

        <dict>

         <key>NetworkState</key>

         <true/>

        </dict>

        <key>RunAtLoad</key>

        <true/>

        <key>Program</key>

        <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

        <key>SpotifyPath</key>

        <string>/Applications/Spotify.app</string></dict>

       </plist>

     

     

    DNS: 75.114.81.1 (static)

     

     

    Wi-Fi

     

     

       link auth: wpa-psk

     

     

    User login items

     

     

       iTunesHelper

       - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

       Advanced Mac Cleaner

       - missing value

     

     

    Restricted files: 11

     

     

    Elapsed time (s): 293

  • by Jeig Fugi,

    Jeig Fugi Jeig Fugi May 22, 2016 12:57 AM in response to Linc Davis
    Level 1 (4 points)
    May 22, 2016 12:57 AM in response to Linc Davis

    Start time: 09:31:53 05/22/16

     

     

    Model Identifier: MacBookPro11,1

    System Version: OS X 10.11.4 (15E65)

    Kernel Version: Darwin 15.4.0

    System Integrity Protection: Enabled

    Time since boot: 1 day 11:00

     

     

    USB

     

     

       Ultra Fit (SanDisk Corporation)

     

     

    FileVault: On

     

     

    Diagnostic reports

     

     

       2016-05-05 GrandPerspective crash

       2016-05-05 cloudd crash

       2016-05-08 GrandPerspective crash x2

       2016-05-16 Xcode crash

       2016-05-17 Xcode crash

       2016-05-22 VLC crash

     

     

    Log

     

     

       May 20 22:52:52 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       May 20 22:54:29 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       May 20 22:56:05 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       May 20 22:56:05 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       May 20 23:02:13 error 0xe00002db opening polled file

       May 20 23:26:28 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       May 21 00:43:39 error 0xe00002db opening polled file

       May 21 02:28:01 sync timed out: 60 sec

       May 21 03:26:55 AFP_VFS afpfs_DoReconnect:  Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/Data

       May 21 03:26:55 ASP_TCP asp_SetTCPQoS:  sock_settclassopt got error 57

       May 21 10:53:35 error 0xe00002db opening polled file

       May 21 21:14:25 AFP_VFS afpfs_DoReconnect:  Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/aMule Downloads

       May 21 21:14:25 AFP_VFS afpfs_DoReconnect:  connect on /Volumes/aMule Downloads failed 51.

       May 21 21:14:26 AFP_VFS afpfs_DoReconnect:  connect on /Volumes/aMule Downloads failed 51.

       May 21 22:25:17 error 0xe00002db opening polled file

       May 21 22:45:44 AFP_VFS afpfs_DoReconnect:  Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/aMule Downloads

       May 21 22:45:44 AFP_VFS afpfs_DoReconnect:  connect on /Volumes/aMule Downloads failed 51.

       May 21 23:50:06 error 0xe00002db opening polled file

       May 21 23:53:07 AFP_VFS afpfs_DoReconnect:  Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/aMule Downloads

       May 21 23:53:07 AFP_VFS afpfs_DoReconnect:  connect on /Volumes/aMule Downloads failed 51.

       May 22 01:01:16 error 0xe00002db opening polled file

       May 22 09:20:38 AFP_VFS afpfs_DoReconnect:  Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/aMule Downloads

       May 22 09:20:38 AFP_VFS afpfs_DoReconnect:  connect on /Volumes/aMule Downloads failed 51.

       May 22 09:20:40 ASP_TCP CancelOneRequest: cancelling slot 2 error 35 reqID 2236 flags 0x29 afpCmd 0x22 so 0xbfd0ef519003caf3

       May 22 09:25:22 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

     

     

    kexts

     

     

       com.disc-soft.DAEMONTools.VirtualSCSIBus (1.0.2) UUID

     

     

    Daemons

     

     

       com.pref.net-preferences

       com.oracle.java.JavaUpdateHelper

       com.apple.installer.osmessagetracing

       /Library/udannalmos/udannalmos.app/Contents/MacOS/udannalmos

       com.nisu.clauer

       com.microsoft.office.licensing.helper

       com.teamviewer.service

       com.oracle.java.Helper-Tool

       com.apple.sideb

       com.disc-soft.DAEMONTools.PrivilegedHelper

       com.adobe.fpsaud

       com.teamviewer.Helper

       com.apple.schiwarkin

     

     

    Agents

     

     

       net.freemacsoft.AppCleaner-SmartDelete

       com.mackeeper.MacKeeper.service.clean

       com.disc-soft.DAEMONTools.DAEMONToolsAgent

       jp.co.canon.UFR2.BackGrounder

       com.mackeeper.MacKeeper.Helper

       com.teamviewer.desktop

       com.oracle.java.Java-Updater

       com.spotify.webhelper

       com.teamviewer.teamviewer

     

     

    Startup items

     

     

       /Library/StartupItems/Fantom/Fantom

       /Library/StartupItems/Fantom/StartupParameters.plist

     

     

    Bundles

     

     

       /System/Library/Extensions/EPSONUSBPrintClass.kext

       - com.epson.print.kext.USBPrintClass

       /System/Library/Extensions/Fantom.kext

       - com.ni.Fantom.nxtfwdl

       /System/Library/Extensions/hp_fax_io.kext

       - com.hp.kext.hp-fax-io

       /System/Library/Extensions/hp_Inkjet8_io_enabler.kext

       - com.hp.print.hpio.inkjet8.kext

       /System/Library/Extensions/JMicronATA.kext

       - com.jmicron.JMicronATA

       /System/Library/Extensions/LogMeInSoundDriver64.kext

       - com.logmein.driver.LogMeInSoundDriver

       /Library/Audio/Plug-Ins/Components/A52Codec.component

       - com.shepmater.A52Codec

       /Library/Extensions/hp_io_enabler_compound.kext

       - com.hp.kext.io.enabler.compound

       /Library/Internet Plug-Ins/DirectorShockwave.plugin

       - com.adobe.shockwave.pluginshim

       /Library/Internet Plug-Ins/Disabled Plug-Ins/Windows Media Plugin

       - com.microsoft.WMP.defaultplugin

       /Library/Internet Plug-Ins/Disabled Plug-Ins/Windows Media Plugin/Contents/Resources/English.lproj

       - N/A

       /Library/Internet Plug-Ins/DRM Plugin.bundle

       - com.microsoft.DRMPlugin

       /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

       - net.telestream.wmv.plugin

       /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin

       - net.telestream.wmv.webplugin

       /Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin

       - com.Google.GoogleEarthPlugin.plugin

       /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

       - com.oracle.java.JavaAppletPlugin

       /Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin

       - com.microsoft.officelive.browserplugin

       /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

       - com.microsoft.sharepoint.browserplugin

       /Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

       - com.microsoft.sharepoint.webkitplugin

       /Library/Internet Plug-Ins/Silverlight.plugin

       - com.microsoft.SilverlightPlugin

       /Library/Internet Plug-Ins/VeetleBroadcast-0.9.16

       - com.netscape.vlc

       /Library/Internet Plug-Ins/VeetleTVCore-0.9.16

       - com.veetle.plugin

       /Library/Internet Plug-Ins/VeetleTVPlayer-0.9.16

       - com.netscape.vlc

       /Library/PreferencePanes/Flash Player.prefPane

       - com.adobe.flashplayerpreferences

       /Library/PreferencePanes/Flip4Mac WMV.prefPane

       - net.telestream.wmv.prefpane

       /Library/PreferencePanes/JavaControlPanel.prefPane

       - com.oracle.java.JavaControlPanel

       /Library/PreferencePanes/Perian.prefPane

       - org.perian.PerianPane

       /Library/QuickTime/AC3MovieImport.component

       - com.cod3r.ac3movieimport

       /Library/QuickTime/FLACImport.component

       - N/A

       /Library/QuickTime/Perian.component

       - org.perian.Perian

       /Library/QuickTime/XiphQT.component

       - org.xiph.xiph-qt.xiphqt

       /Library/ScriptingAdditions/Adobe Unit Types.osax

       - N/A

       /Library/Security/SecurityAgentPlugins/TeamViewerAuthPlugin.bundle

       - com.teamviewer.AuthorizationPlugin

       /Library/Widgets/CI Filter Browser.wdgt

       - com.apple.CIFilterBrowser

       Library/Internet Plug-Ins/ATTConnectEventEntry.plugin

       - N/A

     

     

    dylibs

     

     

       /usr/lib/libgutenprint.2.0.3.dylib

     

     

    App extensions

     

     

       com.parallels.desktop.console.Resource-Monitor

       com.box.sync.findersyncext

       com.getdropbox.dropbox.garcon

     

     

    Apps

     

     

       /Users/USER/Library/Application Support/Dropbox/Dropbox.app

       /Applications/Dropbox.app

     

     

    Contents of /etc/hosts (checksum 3164423663)

     

     

       127.0.0.1 localhost

       255.255.255.255 broadcasthost

       ::1             localhost

     

     

    Contents of /etc/pf.conf (checksum 2891177609)

     

     

       scrub-anchor "com.apple/*"

       nat-anchor "com.apple/*"

       rdr-anchor "com.apple/*"

       dummynet-anchor "com.apple/*"

       anchor "com.apple/*"

       load anchor "com.apple" from "/etc/pf.anchors/com.apple"

     

     

    Contents of /etc/syslog.conf (checksum 2399118465)

     

     

       install.* @127.0.0.1:32376

     

     

    Contents of /etc/pam.d/authorization (checksum 1288902703)

     

     

       auth       optional       pam_krb5.so use_first_pass use_kcminit

       auth       optional       pam_ntlm.so use_first_pass

       auth       required       pam_opendirectory.so use_first_pass nullok

       account    required       pam_opendirectory.so

     

     

    Contents of /etc/pam.d/checkpw (checksum 2672765862)

     

     

       auth       required       pam_opendirectory.so use_first_pass nullok

       account    required       pam_opendirectory.so no_check_home no_check_shell

     

     

    Contents of /etc/pam.d/chkpasswd (checksum 335781771)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_opendirectory.so

       password   required       pam_permit.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/cups (checksum 2842188894)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_permit.so

       password   required       pam_deny.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/ftpd (checksum 2001169128)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_permit.so

       password   required       pam_deny.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/login (checksum 1242678644)

     

     

       auth       optional       pam_krb5.so use_kcminit

       auth       optional       pam_ntlm.so try_first_pass

       auth       optional       pam_mount.so try_first_pass

       auth       required       pam_opendirectory.so try_first_pass

       account    required       pam_nologin.so

       account    required       pam_opendirectory.so

       password   required       pam_opendirectory.so

       session    required       pam_launchd.so

       session    required       pam_uwtmp.so

       session    optional       pam_mount.so

     

     

    Contents of /etc/pam.d/login.term (checksum 3930746290)

     

     

       account    required       pam_nologin.so

       account    required       pam_opendirectory.so

       session    required       pam_uwtmp.so

     

     

    Contents of /etc/pam.d/other (checksum 2748091512)

     

     

       auth       required       pam_deny.so

       account    required       pam_deny.so

       password   required       pam_deny.so

       session    required       pam_deny.so

     

     

    Contents of /etc/pam.d/passwd (checksum 1026516346)

     

     

       auth       required       pam_permit.so

       account    required       pam_opendirectory.so

       password   required       pam_opendirectory.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/rshd (checksum 1553764881)

     

     

       auth        required       pam_permit.so

       account     required       pam_nologin.so

       account     required       pam_opendirectory.so

       session     required       pam_launchd.so

     

     

    Contents of /etc/pam.d/screensaver (checksum 3141704602)

     

     

       auth       optional       pam_krb5.so use_first_pass use_kcminit

       auth       required       pam_opendirectory.so use_first_pass nullok

       account    required       pam_opendirectory.so

       account    sufficient     pam_self.so

       account    required       pam_group.so no_warn group=admin,wheel fail_safe

       account    required       pam_group.so no_warn deny group=admin,wheel ruser fail_safe

     

     

    Contents of /etc/pam.d/smbd (checksum 2516643123)

     

     

       account required pam_sacl.so sacl_service=smb allow_trustacct

       session required pam_permit.so

     

     

    Contents of /etc/pam.d/sshd (checksum 2989478361)

     

     

       auth       optional       pam_krb5.so use_kcminit

       auth       optional       pam_ntlm.so try_first_pass

       auth       optional       pam_mount.so try_first_pass

       auth       required       pam_opendirectory.so try_first_pass

       account    required       pam_nologin.so

       account    required       pam_sacl.so sacl_service=ssh

       account    required       pam_opendirectory.so

       password   required       pam_opendirectory.so

       session    required       pam_launchd.so

       session    optional       pam_mount.so

     

     

    Contents of /etc/pam.d/su (checksum 2045483434)

     

     

       auth       sufficient     pam_rootok.so

       auth       required       pam_opendirectory.so

       account    required       pam_group.so no_warn group=admin,wheel ruser root_only fail_safe

       account    required       pam_opendirectory.so no_check_shell

       password   required       pam_opendirectory.so

       session    required       pam_launchd.so

     

     

    Contents of /etc/pam.d/sudo (checksum 3515993703)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_permit.so

       password   required       pam_deny.so

       session    required       pam_permit.so

     

     

    Contents of /etc/periodic/daily/110.clean-tmps (checksum 4099837049)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_clean_tmps_enable" in

           [Yy][Ee][Ss])

        if [ -z "$daily_clean_tmps_days" ]

        then

           echo '$daily_clean_tmps_enable is set but' \

        '$daily_clean_tmps_days is not'

           rc=2

        else

           echo ""

           echo "Removing old temporary files:"

           set -f noglob

           args="-atime +$daily_clean_tmps_days -mtime +$daily_clean_tmps_days"

           args="${args} -ctime +$daily_clean_tmps_days"

           dargs="-empty -mtime +$daily_clean_tmps_days"

           dargs="${dargs} ! -name .vfs_rsrc_streams_*"

           [ -n "$daily_clean_tmps_ignore" ] && {

        args="$args "`echo " ${daily_clean_tmps_ignore% }" |

           sed 's/[ ][ ]*/ ! -name /g'`

        dargs="$dargs "`echo " ${daily_clean_tmps_ignore% }" |

           sed 's/[ ][ ]*/ ! -name /g'`

     

     

       ...and 21 more line(s)

     

     

    Contents of /etc/periodic/daily/130.clean-msgs (checksum 4292599426)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_clean_msgs_enable" in

           [Yy][Ee][Ss])

        if [ ! -d /var/msgs ]

        then

           echo '$daily_clean_msgs_enable is set but /var/msgs' \

        "doesn't exist"

           rc=2

        else

           echo ""

           echo "Cleaning out old system announcements:"

           [ -n "$daily_clean_msgs_days" ] &&

        arg=-${daily_clean_msgs_days#-} || arg=

           msgs -c $arg && rc=0 || rc=3

        fi;;

           *)  rc=0;;

       esac

       exit $rc

     

     

    Contents of /etc/periodic/daily/140.clean-rwho (checksum 659374794)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_clean_rwho_enable" in

           [Yy][Ee][Ss])

        if [ -z "$daily_clean_rwho_days" ]

        then

           echo '$daily_clean_rwho_enable is enabled but' \

        '$daily_clean_rwho_days is not set'

           rc=2

        elif [ ! -d /var/rwho ]

        then

           echo '$daily_clean_rwho_enable is enabled but /var/rwho' \

        "doesn't exist"

           rc=2

        else

           echo ""

           echo "Removing stale files from /var/rwho:"

           case "$daily_clean_rwho_verbose" in

        [Yy][Ee][Ss])

           print=-print;;

        *)

           print=;;

     

     

       ...and 14 more line(s)

     

     

    Contents of /etc/periodic/daily/199.clean-fax (checksum 1104983357)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       if [ -d /var/spool/fax ]; then

           echo ""

           echo "Removing scratch fax files"

           cd /var/spool/fax && \

           find . -type f -name '[0-9]*.[0-9][0-9][0-9]' -mtime +7 -delete >/dev/null 2>&1;

       fi

     

     

    Contents of /etc/periodic/daily/310.accounting (checksum 3208203734)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_accounting_enable" in

           [Yy][Ee][Ss])

        if [ ! -f /var/account/acct ]

        then

           echo '$daily_accounting_enable is set but /var/account/acct' \

        "doesn't exist"

           rc=2

        elif [ -z "$daily_accounting_save" ]

        then

           echo '$daily_accounting_enable is set but ' \

        '$daily_accounting_save is not'

           rc=2

        else

           echo ""

           echo "Rotating accounting logs and gathering statistics:"

           cd /var/account

           rc=0

           n=$daily_accounting_save

           rm -f acct.$n.gz acct.$n || rc=3

           m=$n

     

     

       ...and 18 more line(s)

     

     

    Contents of /etc/periodic/daily/400.status-disks (checksum 1480768650)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_status_disks_enable" in

           [Yy][Ee][Ss])

        echo ""

        echo "Disk status:"

        df $daily_status_disks_df_flags && rc=1 || rc=3

        ;;

           *)  rc=0;;

       esac

       exit $rc

     

     

    Contents of /etc/periodic/daily/420.status-network (checksum 2730873650)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_status_network_enable" in

           [Yy][Ee][Ss])

        echo ""

        echo "Network interface status:"

        case "$daily_status_network_usedns" in

           [Yy][Ee][Ss])

        netstat -i && rc=0 || rc=3;;

           *)

        netstat -in && rc=0 || rc=3;;

        esac;;

           *)  rc=0;;

       esac

       exit $rc

     

     

    Contents of /etc/periodic/daily/430.status-rwho (checksum 3455351261)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_status_rwho_enable" in

           [Yy][Ee][Ss])

        rwho=$(echo /var/rwho/*)

               if [ -f "${rwho%% *}" ]

               then

           echo ""

           echo "Local network system status:"

           prog=ruptime

        else

           echo ""

           echo "Local system status:"

           prog=uptime

        fi

        rc=$($prog | tee /dev/stderr | wc -l)

        if [ $? -eq 0 ]

        then

           [ $rc -gt 1 ] && rc=1

        else

           rc=3

        fi;;

     

     

       ...and 3 more line(s)

     

     

    Contents of /etc/periodic/daily/999.local (checksum 2319755381)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       rc=0

       for script in $daily_local

       do

           echo ''

           case "$script" in

        /*)

           if [ -f "$script" ]

           then

        echo "Running $script:"

        sh $script || rc=3

           else

        echo "$script: No such file"

        [ $rc -lt 2 ] && rc=2

           fi;;

        *)

           echo "$script: Not an absolute path"

           [ $rc -lt 2 ] && rc=2;;

           esac

       done

       exit $rc

     

     

    Contents of /etc/periodic/monthly/199.rotate-fax (checksum 3437454680)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       echo ""

       printf %s "Rotating fax log files:"

       cd /var/log/fax

       for i in *.log; do

           if [ -f "${i}" ]; then

           echo -n " $i"

           if [ -x /usr/bin/gzip ]; then gzext=".gz"; else gzext=""; fi

           if [ -f "${i}.3${gzext}" ]; then mv -f "${i}.3${gzext}" "${i}.4${gzext}"; fi

           if [ -f "${i}.2${gzext}" ]; then mv -f "${i}.2${gzext}" "${i}.3${gzext}"; fi

           if [ -f "${i}.1${gzext}" ]; then mv -f "${i}.1${gzext}" "${i}.2${gzext}"; fi

           if [ -f "${i}.0${gzext}" ]; then mv -f "${i}.0${gzext}" "${i}.1${gzext}"; fi

           if [ -f "${i}" ]; then mv -f "${i}" "${i}.0" && if [ -x /usr/bin/gzip ]; then gzip -9 "${i}.0"; fi; fi

           touch "${i}" && chmod 640 "${i}" && chown root:admin "${i}"

           fi

       done

       echo ""

     

     

    Contents of /etc/periodic/monthly/200.accounting (checksum 3541581936)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       oldmask=$(umask)

       umask 066

       case "$monthly_accounting_enable" in

           [Yy][Ee][Ss])

        W=/var/log/wtmp

        rc=0

        remove=NO

        if [ $rc -eq 0 ]

        then

           echo ""

           echo "Doing login accounting:"

           rc=$(ac -p | sort -nr -k 2 | tee /dev/stderr | wc -l)

           [ $rc -gt 0 ] && rc=1

        fi

        [ $remove = YES ] && rm -f $W.0;;

           *)  rc=0;;

       esac

       umask $oldmask

       exit $rc

     

     

    Contents of /etc/periodic/monthly/999.local (checksum 2355967272)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       rc=0

       for script in $monthly_local

       do

           echo ''

           case "$script" in

        /*)

           if [ -f "$script" ]

           then

        echo "Running $script:"

        sh $script || rc=3

           else

        echo "$script: No such file"

        [ $rc -lt 2 ] && rc=2

           fi;;

        *)

           echo "$script: Not an absolute path"

           [ $rc -lt 2 ] && rc=2;;

           esac

       done

       exit $rc

     

     

    Contents of /etc/periodic/weekly/320.whatis (checksum 922328658)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$weekly_whatis_enable" in

           [Yy][Ee][Ss])

        echo ""

        echo "Rebuilding whatis database:"

        MANPATH=`/usr/bin/manpath -q`

        if [ $? = 0 ]

        then

           if [ -z "${MANPATH}" ]

           then

        echo "manpath failed to find any manpage directories"

        rc=3

           else

        rc=0

        /usr/libexec/makewhatis.local "${MANPATH}" || rc=3

        if [ X"${man_locales}" != X ]

        then

           for i in ${man_locales}

           do

        LC_ALL=$i /usr/libexec/makewhatis.local -a \

           -L "${MANPATH}" || rc=3

     

     

       ...and 9 more line(s)

     

     

    Contents of /etc/periodic/weekly/999.local (checksum 3078968429)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       rc=0

       for script in $weekly_local

       do

           echo ''

           case "$script" in

        /*)

           if [ -f "$script" ]

           then

        echo "Running $script:"

        sh $script || rc=3

           else

        echo "$script: No such file"

        [ $rc -lt 2 ] && rc=2

           fi;;

        *)

           echo "$script: Not an absolute path"

           [ $rc -lt 2 ] && rc=2;;

           esac

       done

       exit $rc

     

     

    Contents of /Library/Preferences/com.apple.security.appsandbox.plist (checksum 2599182411)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

           <key>UnrestrictSpotlightContainerScope</key>

           <true/>

       </dict>

       </plist>

     

     

    Contents of /Library/Preferences/SystemConfiguration/com.apple.Boot.plist (checksum 1199119104)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>Kernel Flags</key>

        <string></string>

       </dict>

       </plist>

     

     

    Font issues: 5

     

     

    Bad plists

     

     

       /Library/Preferences/com.gen.framework.plist

     

     

    DNS: 80.58.61.254 (static)

     

     

    Listeners

     

     

       kdc: kerberos

       launchd: afpovertcp

       launchd: microsoft-ds

     

     

    User login items

     

     

       Box Sync

       - /Applications/Box Sync.app

       iTunesHelper

       - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

       Dropbox

       - /Applications/Dropbox.app

       Spotify

       - missing value

       Spotify

       - missing value

       CleanMyMac 3 Menu

       - missing value

     

     

    Restricted files: 2634

     

     

    Lockfiles: 8

     

     

    Elapsed time (s): 499

     

     

    Additionally to the MacKeeper pop up I have an icon at the top bar menu, and safari starts with trobit instead of google. When I change the initial page to google it crashes after a few time.

     

    Thanks for your help

  • by flynstar,

    flynstar flynstar Jul 17, 2016 3:32 AM in response to Linc Davis
    Level 1 (4 points)
    Jul 17, 2016 3:32 AM in response to Linc Davis

    Start time: 11:21:28 07/17/16

     

     

    Model Identifier: MacBookPro11,1

    System Version: OS X 10.11.5 (15F34)

    Kernel Version: Darwin 15.5.0

    System Integrity Protection: Enabled

    Time since boot: 22 minutes

     

     

    Diagnostic reports

     

     

       2016-06-13 cloudd crash

       2016-06-16 DataDetectorsActionService crash

       2016-07-03 QuickTime_OPServer crash

       2016-07-13 SpotlightNetHelper crash

       2016-07-17 depotentiate crash x20

     

     

    Log

     

     

       Jul 17 11:00:32 Process systemmigrationd [944] disabling system-wide I/O Throttling

       Jul 17 11:00:32 Process systemmigrationd [944] disabling system-wide CPU Throttling

       Jul 17 11:06:40 com.apple.xpc.launchd.oneshot.0x10000003.Mail: Service exited with abnormal code: 1

       Jul 17 11:06:52 com.apple.softwareupdate_notify_agent: Service exited with abnormal code: 1

       Jul 17 11:06:52 com.apple.softwareupdate_notify_agent: Service exited with abnormal code: 1

       Jul 17 11:08:35 AppleKeyStore: operation failed (pid: 2955 sel: 7 ret: e00002bc '-536870212')

       Jul 17 11:08:35 AppleKeyStore: operation failed (pid: 2955 sel: 7 ret: e00002bc '-536870212')

       Jul 17 11:09:03 com.apple.mdworker.single.UUID: Service exited with abnormal code: 1

       Jul 17 11:09:03 com.apple.mdworker.single.UUID: Service exited with abnormal code: 1

       Jul 17 11:09:04 com.apple.mdworker.single.UUID: Service exited with abnormal code: 1

       Jul 17 11:09:14 com.apple.mdworker.single.UUID: Service exited with abnormal code: 1

       Jul 17 11:09:14 com.apple.mdworker.single.UUID: Service exited with abnormal code: 1

       Jul 17 11:09:14 com.apple.mdworker.single.UUID: Service exited with abnormal code: 1

       Jul 17 11:12:21 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       Jul 17 11:15:14 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       Jul 17 11:19:47 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       Jul 17 11:19:50 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       Jul 17 11:19:54 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       Jul 17 11:19:58 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       Jul 17 11:20:09 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       Jul 17 11:20:09 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       Jul 17 11:20:17 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

       Jul 17 11:20:17 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       Jul 17 11:20:25 com.apple.WebKit.WebContent.UUID: Service exited with abnormal code: 1

       Jul 17 11:20:25 com.apple.WebKit.Networking.UUID: Service exited with abnormal code: 1

     

     

    Memory: kernel_task (UID 0) is using 1016 MB

     

     

    kexts

     

     

       com.paceap.kext.pacesupport.snowleopard (5.9.1) UUID

       com.McAfee.kext.AppProtection (3.8.0) UUID

       com.McAfee.AVKext (1) UUID

       com.McAfee.SFKext (1) UUID

     

     

    Daemons

     

     

       com.gynophore.plist

       com.mcafee.virusscan.ssm.ScanFactory

       com.pref.net-preferences

       com.Mandingan.plist

       com.paceap.pacesupport

       com.sandarac.plist

       com.wimble.plist

       com.unindicable.plist

       com.laceybark.plist

       com.expurgatory.plist

       com.oversheet.plist

       com.mediative.plist

       com.omentoplasty.plist

       com.pishu.plist

       com.avid.AMCUninstaller

       com.tenuifolious.plist

       com.tapsterlike.plist

       com.cyberghostsrl.CyberghostPrivilegedHelper

       /Library/umorkim/umorkim.app/Contents/MacOS/umorkim

       com.undigest.plist

       com.disordination.plist

       com.apple.tiavorurn

       com.Halitherium.plist

       com.mcafee.cspd

       com.preorder.plist

       com.oracle.java.Helper-Tool

       com.mcafee.virusscan.fmpd

       com.commemorate.plist

       com.finesse.plist

       com.Kenn.plist

       com.5e275556e95e3ba9.config

       com.appetite.plist

       com.bromomenorrhea.plist

       com.avid.interplay.editorbroker

       com.sync.plist

       com.riggite.plist

       com.unrepealably.plist

       com.incurvate.plist

       com.coupelet.plist

       com.nanny.plist

       com.adobe.fpsaud

       com.mcafee.ssm.ScanManager

       com.assortative.plist

       com.steepness.plist

       com.roughly.plist

       com.tetrastylous.plist

       com.depotentiate.plist

       com.apple.usktas

       com.apple.UpdateSettings

       com.Coelogyne.plist

       com.recompact.plist

       com.avid.interplay.editortranscodestatus

       com.paceap.eden.licensed

       com.chinching.plist

       com.infraspinate.plist

       com.arsenobismite.plist

     

     

    Agents

     

     

       com.avid.transcodeserviceworker

       com.avid.applicationmanager

       com.avid.backgroundservicesmanager

       com.avid.interplay.editortranscode

       com.avid.aviddmfsupportsvc

       com.canon.MFManager

       com.avid.interplay.dmfservice

       com.mcafee.reporter

       com.oracle.java.Java-Updater

       com.mcafee.menulet

       com.avid.ApplicationManagerHelper

       com.apple.AirPortBaseStationAgent

     

     

    Bundles

     

     

       /System/Library/Extensions/AvidDX.kext

       - com.Avid.driver.AvidDX

       /System/Library/Extensions/JMicronATA.kext

       - com.jmicron.JMicronATA

       /System/Library/Extensions/PACESupportFamily.kext

       - com.paceap.kext.pacesupport.master

       /System/Library/Extensions/Sentinel.kext

       - com.SafeNet.driver.Sentinel

       /Library/Audio/Plug-Ins/Components/iZInsightAUHook.component

       - com.izotope.audioplugins.AU.Insight

       /Library/Audio/Plug-Ins/Components/iZMeterTapAUHook.component

       - N/A

       /Library/Audio/Plug-Ins/VST/iZotope Insight.vst

       - com.izotope.audioplugins.VST.Insight

       /Library/Audio/Plug-Ins/VST/iZotope Meter Tap.vst

       - N/A

       /Library/Audio/Plug-Ins/VST3/iZotope Insight.vst3

       - com.izotope.audioplugins.VST.Insight

       /Library/Audio/Plug-Ins/VST3/iZotope Meter Tap.vst3

       - N/A

       /Library/Extensions/AvidDX.kext

       - com.Avid.driver.AvidDX

       /Library/Extensions/EPSONUSBPrintClass.kext

       - com.epson.print.kext.USBPrintClass

       /Library/Internet Plug-Ins/DirectorShockwave.plugin

       - com.adobe.director.shockwave.pluginshim

       /Library/Internet Plug-Ins/Flash Player.plugin

       - N/A

       /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

       - com.oracle.java.JavaAppletPlugin

       /Library/Internet Plug-Ins/NP_2020Player_IKEA.plugin

       - com.2020technologies.2020Player-IKEA.NP

       /Library/Internet Plug-Ins/Silverlight.plugin

       - com.microsoft.SilverlightPlugin

       /Library/Internet Plug-Ins/SiteAdvisor.plugin

       - com.mcafee.siteadvisor

       /Library/PreferencePanes/Flash Player.prefPane

       - com.adobe.flashplayerpreferences

       /Library/PreferencePanes/JavaControlPanel.prefPane

       - com.oracle.java.JavaControlPanel

       /Library/QuickTime/AvidAV1xCodec.component

       - com.avid.qtcodecs.AvidAV1xCodec

       /Library/QuickTime/AvidAVd1Codec.component

       - com.avid.qtcodecs.AvidAVd1Codec

       /Library/QuickTime/AvidAVDJCodec.component

       - com.avid.qtcodecs.AvidAVDJCodec

       /Library/QuickTime/AvidAVdnCodec.component

       - com.avid.qtcodecs.AvidAVdnCodec

       /Library/QuickTime/AvidAVdvCodec.component

       - com.avid.qtcodecs.AvidAVdvCodec

       /Library/QuickTime/AvidAVinCodec.component

       - com.avid.qtcodecs.AvidAVinCodec

       /Library/QuickTime/AvidAVj2Codec.component

       - com.avid.qtcodecs.AvidAVj2Codec

       /Library/QuickTime/AvidAVmpCodec.component

       - com.avid.qtcodecs.AvidAVmpCodec

       /Library/QuickTime/AvidAVpkCodec.component

       - com.avid.qtcodecs.AvidAVpkCodec

       /Library/QuickTime/AvidAVrpCodec.component

       - com.avid.qtcodecs.AvidAVrpCodec

       /Library/QuickTime/AvidAVUICodec.component

       - com.avid.qtcodecs.AvidAVUICodec

       /Library/QuickTime/CanonMJPEGAVI.component

       - jp.co.canon.MJPEGAVIExporter

       /Library/QuickTime/CanonMJPEGAVIDec.component

       - jp.co.canon.CanonMJPEGAVIDec

       /Library/QuickTime/CanonText.component

       - jp.co.canon.Text

       Library/Services/WinzipAdd.workflow

       - N/A

       Library/Services/WinzipEmail.workflow

       - N/A

       Library/Services/WinzipUnzip.workflow

       - N/A

     

     

    App extensions

     

     

       com.getdropbox.dropbox.garcon

     

     

    Apps

     

     

       /Applications/Dropbox.app

     

     

    Contents of /etc/hosts (checksum 3164423663)

     

     

       127.0.0.1 localhost

       255.255.255.255 broadcasthost

       ::1             localhost

     

     

    Contents of /etc/laceybark.conf (checksum 3119363491)

     

     

       rdr pass inet proto tcp from en0 to any port 80 -> 127.0.0.1 port 9882

       pass out on en0 route-to lo0  inet proto tcp from en0 to any port 80 keep state

       pass out proto tcp all user Carpocratian

     

     

    Contents of /etc/pf.conf (checksum 2891177609)

     

     

       scrub-anchor "com.apple/*"

       nat-anchor "com.apple/*"

       rdr-anchor "com.apple/*"

       dummynet-anchor "com.apple/*"

       anchor "com.apple/*"

       load anchor "com.apple" from "/etc/pf.anchors/com.apple"

     

     

    Contents of /etc/pishu.conf (checksum 1893535613)

     

     

       rdr pass inet proto tcp from en0 to any port 80 -> 127.0.0.1 port 9882

       pass out on en0 route-to lo0  inet proto tcp from en0 to any port 80 keep state

       pass out proto tcp all user terzo

     

     

    Contents of /etc/preorder.conf (checksum 2065430776)

     

     

       rdr pass inet proto tcp from en0 to any port 80 -> 127.0.0.1 port 9882

       pass out on en0 route-to lo0  inet proto tcp from en0 to any port 80 keep state

       pass out proto tcp all user bold

     

     

    Contents of /etc/syslog.conf (checksum 2399118465)

     

     

       install.* @127.0.0.1:32376

     

     

    Contents of /etc/pam.d/authorization (checksum 1288902703)

     

     

       auth       optional       pam_krb5.so use_first_pass use_kcminit

       auth       optional       pam_ntlm.so use_first_pass

       auth       required       pam_opendirectory.so use_first_pass nullok

       account    required       pam_opendirectory.so

     

     

    Contents of /etc/pam.d/checkpw (checksum 2672765862)

     

     

       auth       required       pam_opendirectory.so use_first_pass nullok

       account    required       pam_opendirectory.so no_check_home no_check_shell

     

     

    Contents of /etc/pam.d/chkpasswd (checksum 335781771)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_opendirectory.so

       password   required       pam_permit.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/cups (checksum 2842188894)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_permit.so

       password   required       pam_deny.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/ftpd (checksum 2001169128)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_permit.so

       password   required       pam_deny.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/login (checksum 1242678644)

     

     

       auth       optional       pam_krb5.so use_kcminit

       auth       optional       pam_ntlm.so try_first_pass

       auth       optional       pam_mount.so try_first_pass

       auth       required       pam_opendirectory.so try_first_pass

       account    required       pam_nologin.so

       account    required       pam_opendirectory.so

       password   required       pam_opendirectory.so

       session    required       pam_launchd.so

       session    required       pam_uwtmp.so

       session    optional       pam_mount.so

     

     

    Contents of /etc/pam.d/login.term (checksum 3930746290)

     

     

       account    required       pam_nologin.so

       account    required       pam_opendirectory.so

       session    required       pam_uwtmp.so

     

     

    Contents of /etc/pam.d/other (checksum 2748091512)

     

     

       auth       required       pam_deny.so

       account    required       pam_deny.so

       password   required       pam_deny.so

       session    required       pam_deny.so

     

     

    Contents of /etc/pam.d/passwd (checksum 1026516346)

     

     

       auth       required       pam_permit.so

       account    required       pam_opendirectory.so

       password   required       pam_opendirectory.so

       session    required       pam_permit.so

     

     

    Contents of /etc/pam.d/rshd (checksum 1553764881)

     

     

       auth        required       pam_permit.so

       account     required       pam_nologin.so

       account     required       pam_opendirectory.so

       session     required       pam_launchd.so

     

     

    Contents of /etc/pam.d/screensaver (checksum 3141704602)

     

     

       auth       optional       pam_krb5.so use_first_pass use_kcminit

       auth       required       pam_opendirectory.so use_first_pass nullok

       account    required       pam_opendirectory.so

       account    sufficient     pam_self.so

       account    required       pam_group.so no_warn group=admin,wheel fail_safe

       account    required       pam_group.so no_warn deny group=admin,wheel ruser fail_safe

     

     

    Contents of /etc/pam.d/smbd (checksum 2516643123)

     

     

       account required pam_sacl.so sacl_service=smb allow_trustacct

       session required pam_permit.so

     

     

    Contents of /etc/pam.d/sshd (checksum 2989478361)

     

     

       auth       optional       pam_krb5.so use_kcminit

       auth       optional       pam_ntlm.so try_first_pass

       auth       optional       pam_mount.so try_first_pass

       auth       required       pam_opendirectory.so try_first_pass

       account    required       pam_nologin.so

       account    required       pam_sacl.so sacl_service=ssh

       account    required       pam_opendirectory.so

       password   required       pam_opendirectory.so

       session    required       pam_launchd.so

       session    optional       pam_mount.so

     

     

    Contents of /etc/pam.d/su (checksum 2045483434)

     

     

       auth       sufficient     pam_rootok.so

       auth       required       pam_opendirectory.so

       account    required       pam_group.so no_warn group=admin,wheel ruser root_only fail_safe

       account    required       pam_opendirectory.so no_check_shell

       password   required       pam_opendirectory.so

       session    required       pam_launchd.so

     

     

    Contents of /etc/pam.d/sudo (checksum 3515993703)

     

     

       auth       required       pam_opendirectory.so

       account    required       pam_permit.so

       password   required       pam_deny.so

       session    required       pam_permit.so

     

     

    Contents of /etc/periodic/daily/110.clean-tmps (checksum 4099837049)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_clean_tmps_enable" in

           [Yy][Ee][Ss])

        if [ -z "$daily_clean_tmps_days" ]

        then

           echo '$daily_clean_tmps_enable is set but' \

        '$daily_clean_tmps_days is not'

           rc=2

        else

           echo ""

           echo "Removing old temporary files:"

           set -f noglob

           args="-atime +$daily_clean_tmps_days -mtime +$daily_clean_tmps_days"

           args="${args} -ctime +$daily_clean_tmps_days"

           dargs="-empty -mtime +$daily_clean_tmps_days"

           dargs="${dargs} ! -name .vfs_rsrc_streams_*"

           [ -n "$daily_clean_tmps_ignore" ] && {

        args="$args "`echo " ${daily_clean_tmps_ignore% }" |

           sed 's/[ ][ ]*/ ! -name /g'`

        dargs="$dargs "`echo " ${daily_clean_tmps_ignore% }" |

           sed 's/[ ][ ]*/ ! -name /g'`

     

     

       ...and 21 more line(s)

     

     

    Contents of /etc/periodic/daily/130.clean-msgs (checksum 4292599426)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_clean_msgs_enable" in

           [Yy][Ee][Ss])

        if [ ! -d /var/msgs ]

        then

           echo '$daily_clean_msgs_enable is set but /var/msgs' \

        "doesn't exist"

           rc=2

        else

           echo ""

           echo "Cleaning out old system announcements:"

           [ -n "$daily_clean_msgs_days" ] &&

        arg=-${daily_clean_msgs_days#-} || arg=

           msgs -c $arg && rc=0 || rc=3

        fi;;

           *)  rc=0;;

       esac

       exit $rc

     

     

    Contents of /etc/periodic/daily/140.clean-rwho (checksum 659374794)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_clean_rwho_enable" in

           [Yy][Ee][Ss])

        if [ -z "$daily_clean_rwho_days" ]

        then

           echo '$daily_clean_rwho_enable is enabled but' \

        '$daily_clean_rwho_days is not set'

           rc=2

        elif [ ! -d /var/rwho ]

        then

           echo '$daily_clean_rwho_enable is enabled but /var/rwho' \

        "doesn't exist"

           rc=2

        else

           echo ""

           echo "Removing stale files from /var/rwho:"

           case "$daily_clean_rwho_verbose" in

        [Yy][Ee][Ss])

           print=-print;;

        *)

           print=;;

     

     

       ...and 14 more line(s)

     

     

    Contents of /etc/periodic/daily/199.clean-fax (checksum 1104983357)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       if [ -d /var/spool/fax ]; then

           echo ""

           echo "Removing scratch fax files"

           cd /var/spool/fax && \

           find . -type f -name '[0-9]*.[0-9][0-9][0-9]' -mtime +7 -delete >/dev/null 2>&1;

       fi

     

     

    Contents of /etc/periodic/daily/310.accounting (checksum 3208203734)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_accounting_enable" in

           [Yy][Ee][Ss])

        if [ ! -f /var/account/acct ]

        then

           echo '$daily_accounting_enable is set but /var/account/acct' \

        "doesn't exist"

           rc=2

        elif [ -z "$daily_accounting_save" ]

        then

           echo '$daily_accounting_enable is set but ' \

        '$daily_accounting_save is not'

           rc=2

        else

           echo ""

           echo "Rotating accounting logs and gathering statistics:"

           cd /var/account

           rc=0

           n=$daily_accounting_save

           rm -f acct.$n.gz acct.$n || rc=3

           m=$n

     

     

       ...and 18 more line(s)

     

     

    Contents of /etc/periodic/daily/400.status-disks (checksum 1480768650)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_status_disks_enable" in

           [Yy][Ee][Ss])

        echo ""

        echo "Disk status:"

        df $daily_status_disks_df_flags && rc=1 || rc=3

        ;;

           *)  rc=0;;

       esac

       exit $rc

     

     

    Contents of /etc/periodic/daily/420.status-network (checksum 2730873650)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_status_network_enable" in

           [Yy][Ee][Ss])

        echo ""

        echo "Network interface status:"

        case "$daily_status_network_usedns" in

           [Yy][Ee][Ss])

        netstat -i && rc=0 || rc=3;;

           *)

        netstat -in && rc=0 || rc=3;;

        esac;;

           *)  rc=0;;

       esac

       exit $rc

     

     

    Contents of /etc/periodic/daily/430.status-rwho (checksum 3455351261)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$daily_status_rwho_enable" in

           [Yy][Ee][Ss])

        rwho=$(echo /var/rwho/*)

               if [ -f "${rwho%% *}" ]

               then

           echo ""

           echo "Local network system status:"

           prog=ruptime

        else

           echo ""

           echo "Local system status:"

           prog=uptime

        fi

        rc=$($prog | tee /dev/stderr | wc -l)

        if [ $? -eq 0 ]

        then

           [ $rc -gt 1 ] && rc=1

        else

           rc=3

        fi;;

     

     

       ...and 3 more line(s)

     

     

    Contents of /etc/periodic/daily/555.siteadvisor (checksum 653940657)

     

     

       /usr/local/McAfee/SiteAdvisor/saupkeep -su

     

     

    Contents of /etc/periodic/daily/999.local (checksum 2319755381)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       rc=0

       for script in $daily_local

       do

           echo ''

           case "$script" in

        /*)

           if [ -f "$script" ]

           then

        echo "Running $script:"

        sh $script || rc=3

           else

        echo "$script: No such file"

        [ $rc -lt 2 ] && rc=2

           fi;;

        *)

           echo "$script: Not an absolute path"

           [ $rc -lt 2 ] && rc=2;;

           esac

       done

       exit $rc

     

     

    Contents of /etc/periodic/monthly/199.rotate-fax (checksum 3437454680)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       echo ""

       printf %s "Rotating fax log files:"

       cd /var/log/fax

       for i in *.log; do

           if [ -f "${i}" ]; then

           echo -n " $i"

           if [ -x /usr/bin/gzip ]; then gzext=".gz"; else gzext=""; fi

           if [ -f "${i}.3${gzext}" ]; then mv -f "${i}.3${gzext}" "${i}.4${gzext}"; fi

           if [ -f "${i}.2${gzext}" ]; then mv -f "${i}.2${gzext}" "${i}.3${gzext}"; fi

           if [ -f "${i}.1${gzext}" ]; then mv -f "${i}.1${gzext}" "${i}.2${gzext}"; fi

           if [ -f "${i}.0${gzext}" ]; then mv -f "${i}.0${gzext}" "${i}.1${gzext}"; fi

           if [ -f "${i}" ]; then mv -f "${i}" "${i}.0" && if [ -x /usr/bin/gzip ]; then gzip -9 "${i}.0"; fi; fi

           touch "${i}" && chmod 640 "${i}" && chown root:admin "${i}"

           fi

       done

       echo ""

     

     

    Contents of /etc/periodic/monthly/200.accounting (checksum 3541581936)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       oldmask=$(umask)

       umask 066

       case "$monthly_accounting_enable" in

           [Yy][Ee][Ss])

        W=/var/log/wtmp

        rc=0

        remove=NO

        if [ $rc -eq 0 ]

        then

           echo ""

           echo "Doing login accounting:"

           rc=$(ac -p | sort -nr -k 2 | tee /dev/stderr | wc -l)

           [ $rc -gt 0 ] && rc=1

        fi

        [ $remove = YES ] && rm -f $W.0;;

           *)  rc=0;;

       esac

       umask $oldmask

       exit $rc

     

     

    Contents of /etc/periodic/monthly/999.local (checksum 2355967272)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       rc=0

       for script in $monthly_local

       do

           echo ''

           case "$script" in

        /*)

           if [ -f "$script" ]

           then

        echo "Running $script:"

        sh $script || rc=3

           else

        echo "$script: No such file"

        [ $rc -lt 2 ] && rc=2

           fi;;

        *)

           echo "$script: Not an absolute path"

           [ $rc -lt 2 ] && rc=2;;

           esac

       done

       exit $rc

     

     

    Contents of /etc/periodic/weekly/320.whatis (checksum 922328658)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       case "$weekly_whatis_enable" in

           [Yy][Ee][Ss])

        echo ""

        echo "Rebuilding whatis database:"

        MANPATH=`/usr/bin/manpath -q`

        if [ $? = 0 ]

        then

           if [ -z "${MANPATH}" ]

           then

        echo "manpath failed to find any manpage directories"

        rc=3

           else

        rc=0

        /usr/libexec/makewhatis.local "${MANPATH}" || rc=3

        if [ X"${man_locales}" != X ]

        then

           for i in ${man_locales}

           do

        LC_ALL=$i /usr/libexec/makewhatis.local -a \

           -L "${MANPATH}" || rc=3

     

     

       ...and 9 more line(s)

     

     

    Contents of /etc/periodic/weekly/999.local (checksum 3078968429)

     

     

       if [ -r /etc/defaults/periodic.conf ]

       then

           . /etc/defaults/periodic.conf

           source_periodic_confs

       fi

       rc=0

       for script in $weekly_local

       do

           echo ''

           case "$script" in

        /*)

           if [ -f "$script" ]

           then

        echo "Running $script:"

        sh $script || rc=3

           else

        echo "$script: No such file"

        [ $rc -lt 2 ] && rc=2

           fi;;

        *)

           echo "$script: Not an absolute path"

           [ $rc -lt 2 ] && rc=2;;

           esac

       done

       exit $rc

     

     

    Contents of /Library/Preferences/com.apple.security.appsandbox.plist (checksum 2599182411)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

           <key>UnrestrictSpotlightContainerScope</key>

           <true/>

       </dict>

       </plist>

     

     

    Contents of /Library/Preferences/SystemConfiguration/com.apple.Boot.plist (checksum 1199119104)

     

     

       <?xml version="1.0" encoding="UTF-8"?>

       <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

       <plist version="1.0">

       <dict>

        <key>Kernel Flags</key>

        <string></string>

       </dict>

       </plist>

     

     

    Root crontab

     

     

       0 */4 * * * /usr/local/McAfee/fmp/bin/UpdateHelper update >> /dev/null 2>&1

       10 23 * * * /usr/local/McAfee/fmp/bin/GenUtility 5 >> /dev/null 2>&1

     

     

    Bad plists

     

     

       Library/Preferences/com.medcrea.trophy.plist

       Library/Preferences/com.SectronGroup.e2001.plist

     

     

    Firewall: On

     

     

    Listeners

     

     

       cupsd: ipp

       kdc: kerberos

       launchd: afpovertcp

       launchd: microsoft-ds

       launchd: ssh

     

     

    User login items

     

     

       iTunesHelper

       - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

       Dropbox

       - /Applications/Dropbox.app

       EOS Utility

       - /Applications/Canon Utilities/EOS Utility/EOS Utility.app

     

     

    Lockfiles: 18

     

     

    Elapsed time (s): 226

first Previous Page 16 of 16