how to get rid of pop ups flash mall

There is no need to download anything to solve this problem.

You may have installed the "Crossrider" trojan. Take the steps below to disable it.

Back up all data before continuing.

1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.

2. Inside the folder you just opened, there may be files with any of the following names:

com.crossrider.wss*.agent.plist

flashmall_updater.plist

flashmall_updater.sh

com.webhelper.plist

com.webtools.update.agent.plist

WebSocketServerApp

Here * stands for a variable six-digit number. Some of these files may be absent. Move any that you have to the Trash and close the Finder window. Log out or restart the computer. The trojan will now be inactive, but there are a few more components of it that should be cleaned up.

3. Do as in Step 1 with this line:

~/Library/Application Support

A folder named "Application Support" will open. Inside it there may be a subfolder with this name:

webHelperApp

If so, move that subfolder—not the "Application Support" folder—to the Trash.

4. Finally, open this folder in the same way as above:

~/Library

Look for a subfolder with this name:

WebTools

and move it to the Trash, if present. Finally, empty the Trash.

This does look extremely daunting.

This is confusing: "1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days."

If these steps are only providing a diagnostic test, does it also rid the computer of the FlashMall virus? That's all I want. 😉

I have the address of the offending site where I downloaded the virus that I can provide to Mac Tech help. As well, I took a screen shot of the page. A png / simple screen shot with no associated link. I will post this.

I've disabled extensions on both Safari and Chrome. That's helped immensely. However does not remove the virus.

So to simplify, consolidated questions:

If I go through all the steps provided:

1) IF I back up first won't it also back up the virus?

2) If I go through all these steps will it actually rid my computer of the virus? or is this an exercise in diagnostics only.

Screenshot (only no links attached) of virus FlashMall download popup: (Canadian site with Videos of Alberta) go figure!

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts 1024 85 percent 20480 1 MB/s 25000 ports KiB/s DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH 10 "` route -n get default|awk '/e:/{print $2}' `" 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB 'com.adobe.AAM.Updater-1.0 com.adobe.AAM.Updater-1.0 com.adobe.AdobeCreativeCloud com.adobe.CS4ServiceManager com.adobe.CS5ServiceManager com.adobe.fpsaud com.adobe.SwitchBoard com.adobe.SwitchBoard com.apple.aelwriter com.apple.AirPortBaseStationAgent com.apple.FolderActions.enabled com.apple.installer.osmessagetracing com.apple.mrt.uiagent com.apple.ReportCrash.Self com.apple.rpmuxd com.apple.SafariNotificationAgent com.apple.usbmuxd com.citrixonline.GoToMeeting.G2MUpdate com.google.keystone.agent com.google.keystone.daemon com.microsoft.office.licensing.helper com.oracle.java.Helper-Tool com.oracle.java.JavaUpdateHelper com.oracle.java.JavaUpdateHelper org.macosforge.xquartz.privileged_startx org.macosforge.xquartz.privileged_startx org.macosforge.xquartz.startx' '879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 3694147963 1233118628 2456546649 2806998573 2778718105 2636415542 842973933 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 523110921 2883943871 3873345487' 51 5120 files 4 1000 25 5120 -\\t PlistBuddy{,' 2>&1'}' -c Print' OSBundleRequired 1166 20 ' function f() { n++;sub(/^/,"^");gsub(/\./,"\\.");gsub(/\+/,"\\+");gsub(/\-/,"\\-");gsub(/\?/,"\\?");print|"sort|uniq";};function g(N,d) { if(n<N) print d;};' Info.plist );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=(\\n%s{:\ ,\\n\\n}%s\\n '\nRAM details\n%s\n' %s\ %s '%s\n'"${p[50]}"'%s\n' '%s (UID %s) is using %s %s' '\nContents of %s\n '"${p[50]}"'mod date: %s\n '"${p[50]}"'checksum: %s\n%s\n' '\n ...and %s more line(s)\n' 'RSSI: %s\nNoise: %s\nTx rate: %s\n' {Privacy,Mode}': %s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("'"${f[5]}"'",$0,u,q,"'${p[$2]}'");} ';};s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[46]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[47]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' "${p[56]}"\ ' $0&&!/ /{f()} END{g(10,"^com\.apple\.")} ' ' { sub(/ :/,"");print|"tail -n'${p[48]}'";} ' ' NR==2&&$4<='${p[49]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p;' '/\.kext\/(Contents\/)?'${p[57]}'$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?'${p[57]}'$/p' ' NR>1&&$3!~/0x|\.([0-9]{3,}|[-0-9A-F]{36}|apple\.launchctl\.(Aqua|Background|System))$/ { print $3":"$2;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p ' '/^root$/p' "${p[56]}"\ ' /\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/{f()} END{g(900,"^/System/")} ' ' /\.dylib$/!d;s/(\.|\+|\-|\?)/\\\1/g;s/^/^/p;' "${p[56]}"\ ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");f();} END { split("'"${p[41]}"'",b);split("'"${p[42]}"'",c);for(i in b) print b[i]"\.plist\t"c[i];g(500,"Launch");} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/(ok.+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' 's/Pr.+n //p' ' BEGIN{FS=":"};{ if($1~/\.kext$/) { s=system("'"${p[51]}"'\\ :'${p[53]}' "$1"/*/I*|grep -q Sa");if(!s) $1=$1" S";if(!$2) $2="'"${p[28]}"'";printf("'"${f[4]}"'",$1,$2);} else print;} ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&& $3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' $1=="op" {m=$3};$1~"lN" {N=$2};$1~"lR" {S=$2};$1~"Tx" {T=$2};$1~/^st/ {s=$2};$1~"li"&&$3!~"wpa2" {printf("'"${f[9]}"'",toupper($3))};END { if(S*N*T&&(S-N<'${p[25]}'||T<'${p[55]}')) printf("'"${f[8]}"'",S,N,T);if(s~/^r/&&m!~/^st/) printf("'"${f[10]}"'",m);} ' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\\([0-9]+\\)\\(.+\\)/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p);if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 23`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${p[51]}"' "F|getline g) { l++;if(l<=L) f=f"\n "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n '"${p[50]}"'"T;printf("'"${f[6]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' { p="'"${p[52]}"'\\ :'"${p[35]}"' \""$0"\"/*/'${p[57]}'";p|getline;close(p);if($0~/ /||$0=="") $0="'"${p[28]}"'";};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${p[57]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;' ' s/^.+ |\(.+\)$//g;p ' '/\.(appex|pluginkit)\/Contents\/'${p[57]}'$/p' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END { if(i>1) print n;} ' ' s/:[^:]+$//;s/ +([0-9]+)(.+)/\2: \1/p;' ' { gsub(/[()"]/,"",$3);if($2!="="||!$3) $3="N/A";print $3;} ' ' /es: ./{ s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(By|m): /H;d;:0'$'\n'' x;/[my]: [AM]|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/:(0|\-(4[34])?)$/p' ' BEGIN{FS=":"};{ if($2) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else print $1;} ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab iotop top pkgutil "${p[52]}\\" whoami cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin /' ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' pluginkit scutil dtrace profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil lsof test osascript\ -e netstat mdls kextfind );S1() { printf kMDItemContentTypeTree=com.apple.$1;};S2() { printf 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name '${p[57]}' -exec '"${c1[14]}"' :'$1' {} \;|uniq';};c2=(com.apple.loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'|tr , \\\n" "`S2 CFBundleDisplayName`" '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '-F \$Message -k Sender kernel -k Message CReq "a underr|I/O e"|sort|uniq -c' :${p[35]} :Label '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$(RefProc): \$Message' -k Sender Req 'fsev|kern|launchd' -k RefProc Rne 'Aq|WebK' -k Message Rne '08012|Goog|ksadm|probe|Roame|SMC:|smcD|sserti|suhel| VALI|ver-r|xpma' -k Message Req 'abn|bad |Beac|caug|corru|dead[^bl]|FAIL|fail|GPU |hfs: Ru|idle ex|inval|jnl:|last value [1-9]|NVDA\(|pagin|pci pa|proc: t|Roamed|rror|SL|TCON|Throttli|tim(ed? ?|ing )o|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '/S*/*/Ca*/*xpc* >&- ||echo No' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' "`S1 "{bundle,mach-o-dylib}"`" "`S2 ${p[35]}`" "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -get{dnsservers,info}\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'|sort|uniq -c|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????|wc -l' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' " -F '\$Time \$Message' -k Sender kernel -k Message CSeq 'n Cause: -' " -i '-app Safari UserStyleSheetEnabled' -name\ kMDItem${p[35]} '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility CReq "apple\.(bird|i?clou)"|sort|uniq -c' );N1=${#c2[@]};for j in {0..14};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel}\ extensions Heat System\ load boot\ args FileVault Diagnostic\ reports Log {Free\ space,Swap}' (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports User Daemons Agents XPC\ cache Startup\ items {Admin,Root}\ access Bundles {,Inserted\ }dylibs Stylesheet Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching Nets Descriptors Bad\ plists {I/O,iCloud}\ errors SMC Shutdowns 'High file counts' Memory\ pressure );N3=${#l[@]};for i in {0..8};do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { Q=5;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo true;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';printf '[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[54]};};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};A'$((7+i))'() { v=` eval sudo "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};';done;A9(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=No;((v['$((i+1))']==0))&&v=;};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Ev "${v[$1]}"<<<"$v"|sort`;};C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "${s[63]}"<<<"$v"`&&C1 1 $1;};C4() { echo "Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { pbcopy<<<"$o";exit 2>&-;};for i in 1 2 7 8;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;trap C5 2;o=$({ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 22;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 $((N3+4));for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 0 $((N1+8)) 71 $((N3+3));D13 1 10 7 9;D13 1 11 8 10;B1&&D73 19 53 67 55;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;B0&&{ D13 5 5 69 53;D13 5 54 30 56;C4;D23 5 14 12 14;C4;};D22 6 36 13 15;D22 20 52 66 58;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;C4;B1&&{ D82 35 49 61 51;D82 11 17 17 20;for i in 0 1;do D82 28 $((N2+i)) 45 $((N4+i));done;C4;};D22 12 44 54 45;D22 12 39 15 21;D13 40 58 32 7;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;C4;A1 17 41 20;B7 5;C3 8;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B3 7 7 73;B1&&{ A8 18 26 23;B7 7;B4 0 0 74;C3 23;};A2 18 26 23;B7 7;B4 0 0 74;C3 24;D13 4 21 24 26;B4 4 12 26;C4;for i in {0..3};do A1 0 $((N1+10+i)) 72;B7 12;B4 0 0 31;((i))&&{ B2 14;B4 14 15 52;B6 14 15 4;};C3 $((N3+5+i));done;A1 24 22 29;B7 12;B2 14;A4 39 57 70 0;B2 15;B6 14 15 4;C3 29;C4;B3 4 13 27;A1 24 23 32;B7 13;C3 30;B3 4 0 65;A3 14 6 32 0;B4 0 16 11;A1 26 50 64;B7 16;C3 6;D13 25 37 32 31;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D73 21 0 32 19;D73 10 42 32 40;D82 29 35 46 2;};D23 14 1 62 42;D12 34 43 53 44;D12 22 20 32 25;D22 0 $((N1+14)) 51 33;D13 4 8 41 52;D12 21 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 38 55 68 50;D23 33 34 42 37;B1&&D83 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 10 42 32 41;D13 37 2 48 43;A1 4 3 60;B2 30;A1 4 24 60;B2 31;B6 30 31 4;C3 5;D12 21 56 35 32;D12 21 48 49 49;B3 4 22 57;A1 21 46 56;B7 22;B3 0 0 58;C3 47;D13 5 59 69 54;D22 4 4 50 0;D12 4 51 32 1;D23 22 9 37 57;A9;C2 39;C4;} 4>&2 2>/dev/null;);C5

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be a series of messages in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

[Process completed]

The messages won't be spaced equally apart in time, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Start time: 21:51:13 01/20/15

Revision: 1166

Model Identifier: MacBookAir4,1

Memory: 2 GB

System Version: OS X 10.10.1 (14B25)

Kernel Version: Darwin 14.0.0

Time since boot: 12 minutes

USB

USB Keyboard (Logitech Inc.)

USB2.0 MFP(Hi-Speed) (Seiko Epson Corp.)

Targus Wireless Optical Mouse (reserved)

Diagnostic reports

2015-01-13 com.apple.security.pboxd crash

Shutdowns

Jan 19 23:28:20 cause: -60

Jan 20 13:53:14 cause: -60

Jan 20 19:36:20 cause: -60

Jan 20 21:39:28 cause: -60

Log

Jan 20 21:40:55 memorystatus_thread: idle exiting pid 411 [nsurlstoraged]

Jan 20 21:40:56 memorystatus_thread: idle exiting pid 375 [diagnosticd]

Jan 20 21:40:57 memorystatus_thread: idle exiting pid 279 [pbs]

Jan 20 21:40:58 memorystatus_thread: idle exiting pid 423 [iconservicesd]

Jan 20 21:40:58 com.apple.spindump: Service exited with abnormal code: 75

Jan 20 21:40:59 memorystatus_thread: idle exiting pid 421 [iconservicesagen]

Jan 20 21:41:00 memorystatus_thread: idle exiting pid 429 [com.apple.iTunes]

Jan 20 21:41:01 memorystatus_thread: idle exiting pid 428 [QuickLookSatelli]

Jan 20 21:41:02 memorystatus_thread: idle exiting pid 419 [QuickLookSatelli]

Jan 20 21:41:03 memorystatus_thread: idle exiting pid 222 [bird]

Jan 20 21:41:04 memorystatus_thread: idle exiting pid 446 [IMDPersistenceAg]

Jan 20 21:41:05 memorystatus_thread: idle exiting pid 445 [IMDMessageServic]

Jan 20 21:41:06 memorystatus_thread: idle exiting pid 220 [tccd]

Jan 20 21:41:07 memorystatus_thread: idle exiting pid 437 [deleted]

Jan 20 21:41:08 memorystatus_thread: idle exiting pid 468 [secinitd]

Jan 20 21:41:08 com.apple.spindump: Service exited with abnormal code: 75

Jan 20 21:41:09 memorystatus_thread: idle exiting pid 471 [DataDetectorsDyn]

Jan 20 21:41:10 memorystatus_thread: idle exiting pid 467 [soagent]

Jan 20 21:41:11 memorystatus_thread: idle exiting pid 478 [nsurlstoraged]

Jan 20 21:41:12 memorystatus_thread: idle exiting pid 486 [nsurlstoraged]

Jan 20 21:41:13 memorystatus_thread: idle exiting pid 179 [com.apple.CodeSi]

Jan 20 21:41:14 memorystatus_thread: idle exiting pid 79 [cfprefsd]

Jan 20 21:41:15 memorystatus_thread: idle exiting pid 192 [cfprefsd]

Jan 20 21:41:16 memorystatus_thread: idle exiting pid 41 [coreduetd]

Jan 20 21:41:18 com.apple.spindump: Service exited with abnormal code: 75

Memory pressure: WARN

I/O per process: coresymbolicati (UID 0) is using 4 MB/s

Daemons

com.adobe.fpsaud

com.apple.installer.osmessagetracing

com.apple.spindump

- status: 75

Agents

com.apple.AirPortBaseStationAgent

com.apple.photostream-agent

com.citrixonline.GoToMeeting.G2MUpdate

com.coupons.coupond

com.crossrider.wss002498.agent.plist

com.facebook.videochat.NAME.updater

- status: 1

com.flashmall.updater

com.genieo.completer.download

com.genieo.completer.ltvbit

com.genieo.completer.update

com.google.keystone.user.agent

com.webhelper

com.webtools.update.agent

Extensions

/System/Library/Extensions/JMicronATA.kext

- com.jmicron.JMicronATA

Applications

/Applications/Design&Print.app

- DesktopDPOUUID

/Applications/Garmin Express.app

- com.garmin.renu.client

/Applications/GoToMeeting (1350).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1440).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1468).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1555).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1558).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1669).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1694).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1767).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1796).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1831).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1848).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1865).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1960).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (1963).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (2031).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (2033).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (2128).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (2130).app

- com.citrixonline.GoToMeeting

/Applications/GoToMeeting (2152).app

- com.citrixonline.GoToMeeting

/Applications/Google Chrome.app

- com.google.Chrome

/Applications/InstallMac/Reset Search.app

- com.somoto.InstallerS

/Applications/JDownloader.app

- com.install4j.5513-1208-7298-9440.26

/Applications/Skype.app

- com.skype.skype

/Applications/Utilities/Adobe Flash Player Install Manager.app

- com.adobe.flashplayer.installmanager

/Library/Application Support/Coupons/Uninstall Coupon Printing Software.app

- com.coupons.uninstaller

/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

- com.apple.ScriptEditor.id.cocoa-applet-template

/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

- com.apple.ScriptEditor.id.droplet-with-settable-properties-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

- com.apple.ScriptEditor.id.file-processing-droplet-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

- com.apple.ScriptEditor.id.image-file-processing-droplet-template

/Library/Image Capture/Devices/Canon IJScanner2.app

- jp.co.canon.ijscanner2.scanner.ica

/Library/Image Capture/Devices/Canon IJScanner4.app

- jp.co.canon.ij.ica.scanner4

/Library/Image Capture/Devices/EPSON Scanner.app

- com.epson.scanner.ica

/Library/Printers/EPSON/InkjetPrinter2/AutoSetupTool/EPIJAutoSetupTool2.app

- com.epson.ijprinter.EPIJAutoSetupTool2

/Library/Printers/EPSON/InkjetPrinter2/Filter/commandtoescp.app

- com.epson.ijprinter.commandtoescp

/Library/Printers/EPSON/InkjetPrinter2/Filter/pdftopdf2.app

- com.epson.ijprinter.pdftopdf2

/Library/Printers/EPSON/InkjetPrinter2/Filter/rastertoescpII.app

- com.epson.ijprinter.rastertoescpII

/Library/Printers/EPSON/InkjetPrinter2/Utility/UT4/Epson Printer Utility 4.app

- com.epson.ijprinter.EpsonPrinterUtility4

/Library/Printers/EPSON/InkjetPrinter2/Utility/UTL/Epson Printer Utility Lite.app

- com.epson.ijprinter.EpsonPrinterUtilityLite

/Users/USER/Downloads/Citrix Online Launcher.app

- com.citrixonline.mac.WebDeploymentApp

/Users/USER/Downloads/DesignPrint-1.5.0.app

- com.bitrock.appinstaller

/Users/USER/Downloads/MagTool.app

- com.iForgotSystems.MagTool

/Users/USER/Downloads/Support-LogMeInRescue 2.app

- com.logmein.Rescue

/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookVideoCalling.app

- com.Skype.FacebookVideoCalling

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_bepbmhgboaologfdajaanbcjmnhjmhfn/Default bepbmhgboaologfdajaanbcjmnhjmhfn.app

- com.google.Chrome.app.Default-bepbmhgboaologfdajaanbcjmnhjmhfn-internal

/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app

- com.somoto.InstallerS

Frameworks

- N/A

PrefPane

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

Bundles

/Library/Internet Plug-Ins/CouponPrinter-FireFox_v2.plugin

- com.coupons.plugin.mozilla-plugin

/Library/Internet Plug-Ins/Flash Player.plugin

- com.macromedia.Flash

/Library/Internet Plug-Ins/GarminGpsControl.plugin

- com.garmin.GarminGpsControl

/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkIOM.plugin

- jp.co.Canon.ij.print.iom.CIJNP

/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkPBM.plugin

- jp.co.Canon.ij.print.pbm.CIJNP

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBIOM.plugin

- jp.co.canon.bj.print.bjusbiom

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBPBM.plugin

- jp.co.canon.bj.print.pbm.USB

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver.plugin

- jp.co.canon.ij.print.CIJUSBClassDriver

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver2.plugin

- jp.co.canon.ij.print.CIJUSBClassDriver2

/Library/Printers/Canon/BJPrinter/Plugins/IJBluetooth/IJBluetoothIOM.plugin

- jp.co.canon.ij.print.ijbluetoothiom

/Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin

- jp.co.canon.scangear.ag07.09

/Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin

- jp.co.canon.scangear.ag08.09

/Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin

- jp.co.canon.scangear.lld09.09

/Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin

- jp.co.canon.scanner.cnq2413.09

/Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin

- jp.co.canon.scanner.cnq2414.09

/Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin

- jp.co.canon.scanner.cnq4807.09

/Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin

- jp.co.canon.scanner.cnq4808.09

/Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin

- jp.co.canon.scanner.cnq4809.09

/Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin

- jp.co.canon.scanner.cnq9601.09

/Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin

- jp.co.canon.scangear.ijfshlib.09

/Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin

- jp.co.canon.scangear.mld07.09

/Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin

- jp.co.canon.scangear.mld08.09

/Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin

- jp.co.canon.scangear.mld09.09

/Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin

- jp.co.canon.scangear.mld9601.09

/Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin

- jp.co.canon.sf.scanner.sfusb.09

/Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin

- jp.co.canon.scangear.usb.09

/Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin

- jp.co.canon.scangear.smac.09

/Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin

- jp.co.canon.scangear.zoom.09

/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/12.0.0.70/PepperFlashPlayer.plugin

- com.macromedia.PepperFlashPlayer.pepper

/Users/USER/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin

- com.citrixonline.mac.WebDeploymentPlugin

dylibs

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.703/_platform_specific/mac_x64/libwidev inecdm.dylib

Contents of /Library/LaunchAgents/com.coupons.coupond.plist

- mod date: Oct 16 13:23:40 2014

- checksum: 371175040

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.coupons.coupond</string>

<key>Debug</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Coupons/coupond</string>

<string>launchd</string>

</array>

<key>Sockets</key>

<dict>

<key>SecondaryListeningSocket</key>

<dict>

<key>SockServiceName</key>

<string>26876</string>

<key>SockNodeName</key>

<string>localhost</string>

<key>SockFamily</key>

<string>IPv4</string>

</dict>

<key>PrimaryListeningSocket</key>

...and 11 more line(s)

Contents of Library/LaunchAgents/com.crossrider.wss002498.agent.plist

- mod date: Jan 17 19:56:51 2015

- checksum: 711170777

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.crossrider.wss002498.agent.plist</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/LaunchAgents/WebSocketServerApp</string>

<string>cmpId=2498</string>

<string>ibic=UUID</string>

<string>verifier=UUID</string>

<string>extId=67619</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.facebook.videochat.NAME.plist

- mod date: Aug 8 21:30:37 2014

- checksum: 3225313511

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.facebook.videochat.NAME.updater</string>

<key>ProgramArguments</key>

<array>

<string>/usr/bin/java</string>

<string>-cp</string>

<string>/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookUpdate.jar</string>

<string>FacebookUpdate</string>

<string>com.facebook.peep</string>

<string>3.1.0.522</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>10800</integer>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>

Contents of Library/LaunchAgents/com.genieo.completer.download.plist

- mod date: Jan 9 20:05:45 2015

- checksum: 4246280172

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.download</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>

<string>-trigger</string>

<string>download</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>97963554</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Downloads</string>

</array>

</dict>

</plist>

Contents of Library/LaunchAgents/com.genieo.completer.ltvbit.plist

- mod date: Jan 9 20:05:45 2015

- checksum: 190735042

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.ltvbit</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>

<string>-trigger</string>

<string>ltvbit</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>97963554</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>4</integer>

<key>Minute</key>

<integer>47</integer>

</dict>

...and 2 more line(s)

Contents of Library/LaunchAgents/com.genieo.completer.update.plist

- mod date: Jan 9 20:05:45 2015

- checksum: 3729778754

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.update</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>

<string>-trigger</string>

<string>update</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>97963554</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>20</integer>

<key>Minute</key>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.google.keystone.agent.plist

- mod date: Dec 5 00:46:16 2014

- checksum: 849423004

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.google.keystone.user.agent</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

<string>-runMode</string>

<string>ifneeded</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3523</integer>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>

Contents of Library/LaunchAgents/com.webhelper.plist

- mod date: Jan 17 19:56:57 2015

- checksum: 3894936944

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.webhelper</string>

<key>EnableGlobbing</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>

<string>-guid</string>

<string>UUID</string>

<string>-source</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.webtools.update.agent.plist

- mod date: Jan 17 19:56:57 2015

- checksum: 71484624

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableGlobbing</key>

<true/>

<key>Label</key>

<string>com.webtools.update.agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/flashmall_updater.plist

- Apple binary property list

- mod date: Jan 17 19:54:20 2015

- checksum: 1728710255

Dict {

StartInterval = 86400

ProgramArguments = Array {

bash

/Users/USER/Library/LaunchAgents/flashmall_updater.sh

}

Label = com.flashmall.updater

}

Bad plists

/Library/Preferences/com.gen.framework.plist

DNS: 75.75.75.75

User login items

Garmin Express Service

- /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Safari extensions

Omnibar

- com.genieo.safari

iCloud errors

Automator: 6

bird: 288

storedownloadd: 6

Restricted files: 244

Lockfiles: 1

Elapsed time (sec): 354

Start time: 08:50:03 01/24/15

Revision: 1166

Model Identifier: MacBookPro9,2

System Version: OS X 10.9.4 (13E28)

Kernel Version: Darwin 13.3.0

Time since boot: 29 minutes

System load

combined level = Bad

- battery level = Bad

Diagnostic reports

2015-01-07 Mail hang

Log

Jan 24 08:45:41 com.flashmall.enabler: Throttling respawn: Will start in 7 seconds

Jan 24 08:45:51 com.flashmall.enabler: Throttling respawn: Will start in 8 seconds

Jan 24 08:46:01 com.flashmall.enabler: Throttling respawn: Will start in 8 seconds

Jan 24 08:46:11 com.flashmall.enabler: Throttling respawn: Will start in 9 seconds

Jan 24 08:46:21 com.flashmall.enabler: Throttling respawn: Will start in 9 seconds

Jan 24 08:46:31 com.flashmall.enabler: Throttling respawn: Will start in 10 seconds

Jan 24 08:46:51 com.flashmall.enabler: Throttling respawn: Will start in 1 seconds

Jan 24 08:47:01 com.flashmall.enabler: Throttling respawn: Will start in 2 seconds

Jan 24 08:47:11 com.flashmall.enabler: Throttling respawn: Will start in 3 seconds

Jan 24 08:47:21 com.flashmall.enabler: Throttling respawn: Will start in 4 seconds

Jan 24 08:47:31 com.flashmall.enabler: Throttling respawn: Will start in 4 seconds

Jan 24 08:47:41 com.flashmall.enabler: Throttling respawn: Will start in 5 seconds

Jan 24 08:47:51 com.flashmall.enabler: Throttling respawn: Will start in 6 seconds

Jan 24 08:48:01 com.flashmall.enabler: Throttling respawn: Will start in 6 seconds

Jan 24 08:48:11 com.flashmall.enabler: Throttling respawn: Will start in 7 seconds

Jan 24 08:48:21 com.flashmall.enabler: Throttling respawn: Will start in 8 seconds

Jan 24 08:48:31 com.flashmall.enabler: Throttling respawn: Will start in 9 seconds

Jan 24 08:48:41 com.flashmall.enabler: Throttling respawn: Will start in 10 seconds

Jan 24 08:49:01 com.flashmall.enabler: Throttling respawn: Will start in 1 seconds

Jan 24 08:49:11 com.flashmall.enabler: Throttling respawn: Will start in 2 seconds

Jan 24 08:49:21 com.flashmall.enabler: Throttling respawn: Will start in 3 seconds

Jan 24 08:49:31 com.flashmall.enabler: Throttling respawn: Will start in 4 seconds

Jan 24 08:49:41 com.flashmall.enabler: Throttling respawn: Will start in 5 seconds

Jan 24 08:49:51 com.flashmall.enabler: Throttling respawn: Will start in 6 seconds

Jan 24 08:50:01 com.flashmall.enabler: Throttling respawn: Will start in 7 seconds

Activity

CPU: user 24%, system 5%

I/O per process: bash (UID 501) is using 4 MB/s

Daemons

com.adobe.fpsaud

com.apple.launchd.peruser.0

com.apple.launchd.peruser.55

com.apple.launchd.peruser.89

- status: -

com.apple.launchd.peruser.92

com.microsoft.office.licensing.helper

Agents

com.apple.AirPortBaseStationAgent

com.apple.photostream-agent

- status: -

com.crossrider.wss002499.agent.plist

- status: -

com.flashmall.enabler

- status: 5

com.flashmall.updater

com.genieo.completer.download

com.genieo.completer.ltvbit

com.genieo.completer.update

- status: -

com.jdibackup.ZipCloud.autostart

- status: 1

com.jdibackup.ZipCloud.notify

- status: 1

com.webhelper

- status: -

com.webtools.update.agent

com.zeobit.MacKeeper.Helper

- status: 2

Applications

/Applications/Microsoft Communicator.app

- com.microsoft.Communicator

/Applications/Microsoft Messenger.app

- com.microsoft.Messenger

/Applications/Microsoft Office 2011/Additional Tools/Microsoft Language Register/Microsoft Language Register.app

- com.microsoft.language_register

/Applications/Microsoft Office 2011/Microsoft Document Connection.app

- com.microsoft.DocumentConnection

/Applications/Microsoft Office 2011/Microsoft Excel.app

- com.microsoft.Excel

/Applications/Microsoft Office 2011/Microsoft Outlook.app

- com.microsoft.Outlook

/Applications/Microsoft Office 2011/Microsoft PowerPoint.app

- com.microsoft.Powerpoint

/Applications/Microsoft Office 2011/Microsoft Word.app

- com.microsoft.Word

/Applications/Microsoft Office 2011/Office/Alerts Daemon.app

- com.microsoft.AlertsDaemon

/Applications/Microsoft Office 2011/Office/Equation Editor.app

- com.microsoft.EquationEditor

/Applications/Microsoft Office 2011/Office/Microsoft Chart Converter.app

- com.microsoft.openxml.chart.app

/Applications/Microsoft Office 2011/Office/Microsoft Clip Gallery.app

- com.microsoft.ClipGallery

/Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app

- com.microsoft.outlook.database_daemon

/Applications/Microsoft Office 2011/Office/Microsoft Database Utility.app

- com.microsoft.outlook.database_utility

/Applications/Microsoft Office 2011/Office/Microsoft Graph.app

- com.microsoft.Graph

/Applications/Microsoft Office 2011/Office/Microsoft Office Reminders.app

- com.microsoft.outlook.office_reminders

/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

- com.microsoft.office.setupassistant

/Applications/Microsoft Office 2011/Office/Microsoft Query

- N/A

/Applications/Microsoft Office 2011/Office/Microsoft Upload Center.app

- com.microsoft.office.uploadcenter

/Applications/Microsoft Office 2011/Office/My Day.app

- com.microsoft.myday

/Applications/Microsoft Office 2011/Office/Open XML for Excel.app

- com.microsoft.openxml.excel.app

/Applications/Microsoft Office 2011/Office/SyncServicesAgent.app

- com.microsoft.SyncServicesAgent

/Applications/Remote Desktop Connection.app

- com.microsoft.rdc

/Applications/Utilities/Adobe Flash Player Install Manager.app

- com.adobe.flashplayer.installmanager

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

- com.microsoft.autoupdate2

/Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

- com.microsoft.error_reporting

/Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

- com.microsoft.netlib.shipassertprocess

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

- com.microsoft.silverlight.sllauncher

/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

- com.apple.ScriptEditor.id.cocoa-applet-template

/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

- com.apple.ScriptEditor.id.droplet-with-settable-properties-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

- com.apple.ScriptEditor.id.file-processing-droplet-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

- com.apple.ScriptEditor.id.image-file-processing-droplet-template

/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app

- com.genieoinnovation.Installer

Frameworks

- N/A

PrefPane

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

Bundles

/Library/Internet Plug-Ins/Flash Player.plugin

- com.macromedia.Flash

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

- com.microsoft.sharepoint.browserplugin

/Library/Internet Plug-Ins/Silverlight.plugin

- com.microsoft.SilverlightPlugin

/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkIOM.plugin

- jp.co.Canon.ij.print.iom.CIJNP

/Library/Printers/Canon/BJPrinter/Plugins/BJNP/CIJNetworkPBM.plugin

- jp.co.Canon.ij.print.pbm.CIJNP

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBIOM.plugin

- jp.co.canon.bj.print.bjusbiom

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/BJUSBPBM.plugin

- jp.co.canon.bj.print.pbm.USB

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver.plugin

- jp.co.canon.ij.print.CIJUSBClassDriver

/Library/Printers/Canon/BJPrinter/Plugins/BJUSB/CIJUSBClassDriver2.plugin

- jp.co.canon.ij.print.CIJUSBClassDriver2

/Library/Printers/Canon/BJPrinter/Plugins/IJBluetooth/IJBluetoothIOM.plugin

- jp.co.canon.ij.print.ijbluetoothiom

/Users/USER/Library/Application Support/MacKeeper Helper/NoticeEngine.plugin

- com.zeobit.MacKeeper.plugin.NoticeEngine

dylibs

/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

Contents of Library/LaunchAgents/com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID. plist

- mod date: Dec 24 22:02:01 2013

- checksum: 2813489753

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/System/Library/Frameworks/AddressBook.framework/Resources/AddressBookS ourceSyncScheduleHelper</string>

<string>-scheduleSync</string>

<string>UUID</string>

</array>

<key>StartInterval</key>

<integer>120000</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/com.crossrider.wss002499.agent.plist

- mod date: Jan 12 17:19:32 2015

- checksum: 1857680244

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.crossrider.wss002499.agent.plist</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/LaunchAgents/WebSocketServerApp</string>

<string>cmpId=2499</string>

<string>ibic=UUID</string>

<string>verifier=UUID</string>

<string>extId=67619</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.genieo.completer.download.plist

- mod date: Jan 12 17:19:40 2015

- checksum: 1204726108

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.download</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/Installer</ string>

<string>-trigger</string>

<string>download</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>544680028</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Downloads</string>

</array>

</dict>

</plist>

Contents of Library/LaunchAgents/com.genieo.completer.ltvbit.plist

- mod date: Jan 12 17:19:40 2015

- checksum: 3467800756

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.ltvbit</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/Installer</ string>

<string>-trigger</string>

<string>ltvbit</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>544680028</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>4</integer>

<key>Minute</key>

<integer>49</integer>

</dict>

...and 2 more line(s)

Contents of Library/LaunchAgents/com.genieo.completer.update.plist

- mod date: Jan 12 17:19:40 2015

- checksum: 3427018206

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.update</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/Installer</ string>

<string>-trigger</string>

<string>update</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>544680028</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>17</integer>

<key>Minute</key>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

- mod date: Jan 12 19:06:15 2015

- checksum: 1743767591

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.autostart</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

<string>-n</string>

<string>--args</string>

<string>9</string>

<string>-l</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

- mod date: Jan 12 19:06:15 2015

- checksum: 3094544410

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.notify</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

<string>--args</string>

<string>7</string>

<string>1</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>StartInterval</key>

<integer>1200</integer>

<key>RunAtLoad</key>

<false/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.webhelper.plist

- mod date: Jan 12 17:19:37 2015

- checksum: 3699927138

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.webhelper</string>

<key>EnableGlobbing</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

<key>ThrottleInterval</key>

<integer>10</integer>

</dict>

...and 1 more line(s)

Contents of Library/LaunchAgents/com.webtools.update.agent.plist

- mod date: Jan 12 17:19:37 2015

- checksum: 813197096

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableGlobbing</key>

<true/>

<key>Label</key>

<string>com.webtools.update.agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist

- mod date: Jan 12 17:09:20 2015

- checksum: 538894142

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>EnvironmentVariables</key>

<dict>

<key>ZBTimeStamp</key>

<string>20141211123146</string>

</dict>

<key>Label</key>

<string>com.zeobit.MacKeeper.Helper</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>OnDemand</key>

<false/>

<key>Program</key>

<string>/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper</string>

</dict>

</plist>

Contents of Library/LaunchAgents/flashmall_enabler.plist

- Apple binary property list

- mod date: Jan 12 17:19:27 2015

- checksum: 3262511565

Dict {

StartInterval = 10

ProgramArguments = Array {

bash

/Users/USER/Library/LaunchAgents/flashmall_enabler.sh

}

Label = com.flashmall.enabler

}

Contents of Library/LaunchAgents/flashmall_updater.plist

- Apple binary property list

- mod date: Jan 12 17:19:27 2015

- checksum: 3105339505

Dict {

StartInterval = 86400

ProgramArguments = Array {

bash

/Users/USER/Library/LaunchAgents/flashmall_updater.sh

}

Label = com.flashmall.updater

}

Font issues: 21

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

BitTorrent

- missing value

Restricted files: 684

Lockfiles: 31

Elapsed time (sec): 226

Start time: 16:23:05 01/26/15

Revision: 1166

Model Identifier: iMac14,1

System Version: OS X 10.9.5 (13F34)

Kernel Version: Darwin 13.4.0

Time since boot: 1 day2:11

USB

HID FootSwitch RS Series (Olympus Optical Co., Ltd.)

Bluetooth

Apple Magic Mouse

Apple Wireless Keyboard

Diagnostic reports

2015-01-16 Google Chrome hang

Log

Jan 22 13:02:35 pci pause: SDXC

Jan 22 14:09:41 pci pause: SDXC

Jan 22 15:15:03 pci pause: SDXC

Jan 22 17:00:24 com.apple.PackageKit.InstallStatus: Throttling respawn: Will start in 10 seconds

Jan 23 08:31:37 pci pause: SDXC

Jan 23 13:25:01 pci pause: SDXC

Jan 23 16:18:39 com.apple.PackageKit.InstallStatus: Throttling respawn: Will start in 10 seconds

Jan 25 14:12:44 pci pause: SDXC

Jan 25 16:34:13 pci pause: SDXC

Jan 25 18:35:02 pci pause: SDXC

Jan 25 20:35:50 pci pause: SDXC

Jan 25 22:36:38 pci pause: SDXC

Jan 26 00:37:26 pci pause: SDXC

Jan 26 02:38:15 pci pause: SDXC

Jan 26 04:39:04 pci pause: SDXC

Jan 26 06:39:52 pci pause: SDXC

Jan 26 08:33:45 pci pause: SDXC

Jan 26 08:38:53 pci pause: SDXC

Jan 26 09:56:47 pci pause: SDXC

Jan 26 12:14:48 pci pause: SDXC

Jan 26 12:32:19 pci pause: SDXC

Jan 26 12:59:15 pci pause: SDXC

Jan 26 15:08:13 pci pause: SDXC

Jan 26 15:30:50 pci pause: SDXC

Jan 26 15:46:54 pci pause: SDXC

Daemons

com.apple.launchd.peruser.0

- status: -

com.apple.launchd.peruser.26

com.apple.launchd.peruser.55

com.apple.launchd.peruser.89

- status: -

com.apple.launchd.peruser.92

com.filemaker.PSConversionHelper

com.teamviewer.Helper

Agents

com.adobe.ARM.UUID

com.apple.AirPortBaseStationAgent

com.apple.mrt.uiagent

- status: 255

com.cinema-+-hd.updater

com.crossrider.wss002503.agent.plist

- status: -

com.flashmall.updater

com.google.keystone.user.agent

com.iobit.AMCUpdate

com.jdibackup.ZipCloud.autostart

- status: 1

com.jdibackup.ZipCloud.notify

- status: 1

com.v.agent

- status: -

com.webhelper

- status: -

com.webtools.update.agent

Extensions

/System/Library/Extensions/OlympusDSSDriver.kext

- N/A

Applications

/Applications/Adobe Reader.app

- com.adobe.Reader

/Applications/DSS Player/DSS Player.app

- com.olympus.DSSPlayerV7

/Applications/FileMaker Pro 13/Extensions/Registration/Registration.app

- com.leadertech.powerReg.FMK1

/Applications/FileMaker Pro 13/FileMaker Pro.app

- com.filemaker.client.pro12

/Applications/Google Chrome.app

- com.google.Chrome

/Applications/Microsoft Communicator.app

- com.microsoft.Communicator

/Applications/Microsoft Messenger.app

- com.microsoft.Messenger

/Applications/Microsoft Office 2011/Additional Tools/Microsoft Language Register/Microsoft Language Register.app

- com.microsoft.language_register

/Applications/Microsoft Office 2011/Microsoft Document Connection.app

- com.microsoft.DocumentConnection

/Applications/Microsoft Office 2011/Microsoft Excel.app

- com.microsoft.Excel

/Applications/Microsoft Office 2011/Microsoft Outlook.app

- com.microsoft.Outlook

/Applications/Microsoft Office 2011/Microsoft PowerPoint.app

- com.microsoft.Powerpoint

/Applications/Microsoft Office 2011/Microsoft Word.app

- com.microsoft.Word

/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

- com.apple.ASApplication

/Applications/Microsoft Office 2011/Office/Alerts Daemon.app

- com.microsoft.AlertsDaemon

/Applications/Microsoft Office 2011/Office/Equation Editor.app

- com.microsoft.EquationEditor

/Applications/Microsoft Office 2011/Office/Microsoft Chart Converter.app

- com.microsoft.openxml.chart.app

/Applications/Microsoft Office 2011/Office/Microsoft Clip Gallery.app

- com.microsoft.ClipGallery

/Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app

- com.microsoft.outlook.database_daemon

/Applications/Microsoft Office 2011/Office/Microsoft Database Utility.app

- com.microsoft.outlook.database_utility

/Applications/Microsoft Office 2011/Office/Microsoft Graph.app

- com.microsoft.Graph

/Applications/Microsoft Office 2011/Office/Microsoft Office Reminders.app

- com.microsoft.outlook.office_reminders

/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

- com.microsoft.office.setupassistant

/Applications/Microsoft Office 2011/Office/Microsoft Query

- N/A

/Applications/Microsoft Office 2011/Office/Microsoft Upload Center.app

- com.microsoft.office.uploadcenter

/Applications/Microsoft Office 2011/Office/My Day.app

- com.microsoft.myday

/Applications/Microsoft Office 2011/Office/Open XML for Excel.app

- com.microsoft.openxml.excel.app

/Applications/Microsoft Office 2011/Office/SyncServicesAgent.app

- com.microsoft.SyncServicesAgent

/Applications/Remote Desktop Connection.app

- com.microsoft.rdc

/Applications/Skype.app

- com.skype.skype

/Applications/VLC.app

- org.videolan.vlc

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

- com.microsoft.autoupdate2

/Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

- com.microsoft.error_reporting

/Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

- com.microsoft.netlib.shipassertprocess

/Library/Application Support/OLYMPUS/DSSPlayer/Device Detector/Device Detector.app

- com.olympus.DeviceDetector

/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

- com.apple.ScriptEditor.id.cocoa-applet-template

/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

- com.apple.ScriptEditor.id.droplet-with-settable-properties-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

- com.apple.ScriptEditor.id.file-processing-droplet-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

- com.apple.ScriptEditor.id.image-file-processing-droplet-template

/Library/Application Support/cruise/Agent/agent.app

- com.someproduct.agent

/Library/Printers/Canon/CUPS_Printer/Utilities/Canon Office Printer Utility.app

- jp.co.canon.CUPSPrinter.PrinterUtility

/Library/Printers/Canon/CUPS_Printer/Utilities/autoSetupTool.app

- jp.co.canon.CUPSPrinter.autoSetupTool

/Users/USER/Library/Application Support/AMC/AMCMenu.app

- com.iobit.AMCMenu

/Users/USER/Library/Application Support/ErrorReporter/UninstallAD.app

- com.user.UninstallAD

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

Frameworks

/Library/Frameworks/OlympusDSSFile.framework

- com.OlympusSys.OlympusDSSFile

/Library/Frameworks/OlympusDeviceManager.framework

- com.yourcompany.yourcocoaframework

/Library/Frameworks/OlympusServiceProvider.framework

- com.yourcompany.yourcocoaframework

/System/Library/Frameworks/v.framework

- N/A

PrefPane

/Library/PreferencePanes/Device Detector.prefPane

- com.olympus.DSSPreferencePane

Bundles

/Library/Audio/Plug-Ins/Components/OlympusDSSEffect.component

- com.Olympus.OlympusDSSEffect

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

- com.adobe.acrobat.pdfviewer

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

- com.adobe.acrobat.pdfviewerNPAPI

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

- com.microsoft.sharepoint.browserplugin

/Library/Printers/Canon/CUPS_Printer/Info/PrinterInfo.plugin

- jp.co.canon.CUPSPrinter.CUPSUFR2PrinterInfo

/Library/Printers/Canon/CUPS_Printer/PBMs/IOM_LPRv6.plugin

- jp.co.canon.CUPSPrinter.IOM_LPRv6

/Library/Printers/Canon/CUPS_Printer/PBMs/PBM_LPRv6.plugin

- jp.co.canon.print.CUPSPrinter.PBM_LPRv6

/Library/Printers/Canon/CUPS_Printer/PDEs/FinishingPDE.plugin

- jp.co.canon.CUPSPrinter.PDEs.Finishing

/Library/Printers/Canon/CUPS_Printer/PDEs/PaperSourcePDE.plugin

- jp.co.canon.CUPSPrinter.PDEs.PaperSource

/Library/Printers/Canon/CUPS_Printer/PDEs/QualityPDE.plugin

- jp.co.canon.CUPSPrinter.PDEs.Quality

/Library/Printers/Canon/CUPS_Printer/PDEs/SpecialFeaturesPDE.plugin

- jp.co.canon.CUPSPrinter.PDEs.SpecialFeatures

/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

/Users/USER/Library/Application Support/MacKeeper Helper/NoticeEngine.plugin

- com.zeobit.MacKeeper.plugin.NoticeEngine

dylibs

/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

/Library/Application Support/OLYMPUS/DSSPlayer/lib/DSSAES.dylib

/Library/Application Support/OLYMPUS/DSSPlayer/lib/LongPlay.dylib

/Library/Application Support/OLYMPUS/DSSPlayer/lib/QualityPlay.dylib

/Library/Application Support/OLYMPUS/DSSPlayer/lib/StandardPlay.dylib

/System/Library/Frameworks/v.framework/Versions/A/Libraries/libLoader.dylib

/Users/USER/Library/Application Support/Firefox/Profiles/bxr0fff3.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.758/_platform_specific/mac_x64/libwidev inecdm.dylib

/usr/local/lib/libNS_WiNE_flt.dylib

Contents of /Library/LaunchAgents/com.cruise.agent.plist

- mod date: Jan 14 15:20:33 2015

- checksum: 684831234

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.v.agent</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/cruise/Agent/agent.app/Contents/MacOS/agent</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ThrottleInterval</key>

<integer>10</integer>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

- mod date: Jan 12 02:36:09 2015

- checksum: 1602219417

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.teamviewer.teamviewer</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

<string>-RunAsAgent</string>

<string>YES</string>

</array>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS/</string>

<key>RunAtLoad</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Disabled</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

- mod date: Jan 12 02:36:09 2015

- checksum: 2466887275

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.teamviewer.desktop</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

<string>Aqua</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>

<string>-RunAsAgent</string>

<string>YES</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/Helpers/</string>

<key>RunAtLoad</key>

<true/>

<key>KeepAlive</key>

<true/>

...and 4 more line(s)

Contents of /Library/LaunchDaemons/com.teamviewer.Helper.plist

- mod date: Jan 12 02:36:09 2015

- checksum: 3374894509

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.teamviewer.Helper</string>

<key>MachServices</key>

<dict>

<key>com.teamviewer.Helper</key>

<true/>

</dict>

<key>Program</key>

<string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

- mod date: Jan 12 02:36:09 2015

- checksum: 2586050363

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.teamviewer.service</string>

<key>KeepAlive</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS</string>

</dict>

</plist>

Contents of Library/LaunchAgents/cinema-+-hd_updater.plist

- Apple binary property list

- mod date: Jan 16 09:32:55 2015

- checksum: 2472122823

Dict {

StartInterval = 86400

ProgramArguments = Array {

bash

/Users/USER/Library/LaunchAgents/cinema-+-hd_updater.sh

}

Label = com.cinema-+-hd.updater

}

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Dec 10 12:01:44 2014

- checksum: 394026997

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

<string>semi-auto</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>12600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/com.crossrider.wss002503.agent.plist

- mod date: Jan 14 15:16:25 2015

- checksum: 2887153565

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.crossrider.wss002503.agent.plist</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/LaunchAgents/WebSocketServerApp</string>

<string>cmpId=2503</string>

<string>ibic=UUID</string>

<string>verifier=UUID</string>

<string>extId=67619</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.google.keystone.agent.plist

- mod date: Dec 1 08:21:54 2014

- checksum: 4221715500

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.google.keystone.user.agent</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

<string>-runMode</string>

<string>ifneeded</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3523</integer>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>

Contents of Library/LaunchAgents/com.iobit.AMCUpdate.plist

- mod date: Jan 15 16:55:54 2015

- checksum: 1001793537

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.iobit.AMCUpdate</string>

<key>LaunchOnlyOnce</key>

<true/>

<key>Program</key>

<string>/Applications/MacBooster.app/Contents/Resources/AMCUpdate.app/Contents/ MacOS/AMCUpdate</string>

</dict>

</plist>

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

- mod date: Jan 16 08:38:32 2015

- checksum: 4253745940

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.autostart</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

<string>-n</string>

<string>--args</string>

<string>9</string>

<string>-l</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

- mod date: Jan 16 08:38:32 2015

- checksum: 3204376910

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.notify</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

<string>--args</string>

<string>7</string>

<string>1</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>StartInterval</key>

<integer>1200</integer>

<key>RunAtLoad</key>

<false/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.user.UninstallAD.plist

- mod date: Jan 16 08:49:08 2015

- checksum: 3714617127

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.user.UninstallAD</string>

<key>LaunchOnlyOnce</key>

<true/>

<key>OnDemand</key>

<false/>

<key>Program</key>

<string>/Users/USER/Library/Application Support/ErrorReporter/UninstallAD.app/Contents/MacOS/UninstallAD</string>

</dict>

</plist>

Contents of Library/LaunchAgents/com.webhelper.plist

- mod date: Jan 14 15:16:27 2015

- checksum: 2525666056

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.webhelper</string>

<key>EnableGlobbing</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>

<string>-guid</string>

<string>UUID</string>

<string>-source</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.webtools.update.agent.plist

- mod date: Jan 14 15:16:26 2015

- checksum: 1811044898

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableGlobbing</key>

<true/>

<key>Label</key>

<string>com.webtools.update.agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/flashmall_updater.plist

- Apple binary property list

- mod date: Jan 14 15:16:19 2015

- checksum: 3214937232

Dict {

StartInterval = 86400

ProgramArguments = Array {

bash

/Users/USER/Library/LaunchAgents/flashmall_updater.sh

}

Label = com.flashmall.updater

}

Font issues: 21

DNS: 24.92.226.11 (static)

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Restricted files: 41

Lockfiles: 4

Elapsed time (sec): 215

barifree wrote:

SNIP... No idea how it got there ..endSNIP

I do... you visited a website that was in cahoots (paid$?) to piggyback the critter(s) on their own content.

a very good primer on How to install adware | Apple Support Communities <[ it is NOT really a HowTo DO it, but how it is done... hint: it happens between the chair and the screen ]

http://www.thesafemac.com/arg-buca-apps/

An excellent preventative measure for popUp/IUnders is using Firefox + P.U.K a rude PopUp/Under Killer(prev: killjasmin) :: Add-ons for Firefox - there MAY be something like it available for Safari, etc., but I have not looked. I have not seen one of these varmints (except to add one to the Kill List) after employing it.

be careful out there

ÇÇÇ

Start time: 17:48:53 01/30/15

Revision: 1166

Model Identifier: MacBookPro9,2

System Version: OS X 10.9.5 (13F34)

Kernel Version: Darwin 13.4.0

Time since boot: 7 days 21:03

USB

Backup+ BK (Seagate LLC)

Bluetooth

Apple Magic Mouse

FileVault: FileVault master keychain appears to be installed

Diagnostic reports

2015-01-30 qmasterd crash x25

Log

Jan 30 17:47:03 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:10 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:13 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:20 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:23 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:31 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:33 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:41 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:43 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:51 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:47:53 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:02 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:03 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:12 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:13 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:22 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:23 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:33 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:33 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:43 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:44 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:53 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Jan 30 17:48:54 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:49:04 com.edb.launchd.postgresql-8.4: Throttling respawn: Will start in 10 seconds

Jan 30 17:49:04 com.apple.qmaster.qmasterd: Throttling respawn: Will start in 10 seconds

Swap (MiB): 1163

I/O per process: pkgutil (UID 501) is using 2 MB/s

Memory: pkgutil (UID 501) is using 1463 MB

Bad kernel extensions

/System/Library/Extensions/CMD646Root.kext

/System/Library/Extensions/RoxioBluRaySupport.kext

Loaded kernel extensions

com.nvidia.CUDA (1.1.0)

com.symantec.internetSecurity.kext (6.1.1f213)

com.symantec.ips.kext (6.1.1f213)

com.symantec.nfm.kext (6.1.1f213)

Daemons

com.adobe.fpsaud

com.adobe.versioncueCS4

com.apple.aelwriter

com.apple.appstore.PluginXPCService

- status: -9

com.apple.cmio.registerassistantservice

- status: -9

com.apple.launchd.peruser.0

- status: -

com.apple.launchd.peruser.26

com.apple.launchd.peruser.55

com.apple.launchd.peruser.89

- status: -

com.apple.launchd.peruser.92

com.apple.launchd.peruser.99

- status: -

com.apple.qmaster.qmasterd

com.apple.rquotad

- status: -

com.apple.statd

- status: -

com.apple.wdhelper

- status: -9

com.barebones.authd

com.barebones.textwrangler

com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService

com.blackmagic-design.desktopvideo.helper

- status: -

com.blackmagic-design.streaming.server

- status: -

com.edb.launchd.postgresql-8.4

- status: 2

com.google.keystone.daemon

com.microsoft.office.licensing.helper

com.noiseindustries.FxFactory.helper

com.period.searchprotectd

- status: 2

com.symantec.SymLUHelper.NFM

com.symantec.UninstallerToolHelper

com.symantec.deepsight-extractor

- status: -

com.symantec.errorreporting.NFM.periodic

com.symantec.liveupdate.daemon.NFM

com.symantec.sharedsettings.NFM

- status: -

com.symantec.symdaemon.NFM

- status: -

com.teamviewer.Helper

Agents

com.adobe.ARM.UUID

com.adobe.CS4ServiceManager

com.apple.AirPortBaseStationAgent

com.apple.mrt.uiagent

- status: 255

com.apple.photostream-agent

- status: -

com.blackmagic-design.DesktopVideoFirmwareUpdater

- status: -

com.crossrider.wss002497.agent.plist

- status: -

com.digitalrebellion.PreferenceManagerAutoSave

com.flashmall.updater

com.google.keystone.system.agent

com.nvidia.CUDASoftwareUpdate

com.redgiantsoftware.updater.plist

- status: 1

com.symantec.errorreporting.NFM.periodic-agent

com.symantec.uiagent.application.NFM

- status: -

com.wacom.wacomtablet

- status: -

com.webhelper

- status: -

com.webtools.update.agent

Startup items

/System/Library/StartupItems/CUDA/CUDA

/System/Library/StartupItems/CUDA/StartupParameters.plist

/Library/StartupItems/ProTec6/DemoOver

/Library/StartupItems/ProTec6/Nalpeirond6

/Library/StartupItems/ProTec6/ProTec6

/Library/StartupItems/ProTec6/StartupParameters.plist

/Library/StartupItems/ProTecVb/DemoOver

/Library/StartupItems/ProTecVb/obsolete.NalpeirondVb

/Library/StartupItems/ProTecVb/obsolete.ProTecVb

/Library/StartupItems/ProTecVb/obsolete.StartupParameters.plist

/Library/StartupItems/Qmaster/Qmaster

/Library/StartupItems/Qmaster/StartupParameters.plist

Applications

- N/A

Frameworks

- N/A

PrefPane

- N/A

dylibs

/Applications/Adobe After Effects 6.5/Plug-ins/Professional/Format/(AAF)/libdl.1.dylib

/Applications/Adobe After Effects 6.5/Plug-ins/Professional/Format/(AAF)/libxerces-c.24.dylib

/Applications/Adobe Contribute CS4/libCoreTypes_IBE.dylib

/Applications/Adobe Dreamweaver CS4/configuration/browsers/webkit/WebKit.dylib

/Applications/Adobe Dreamweaver CS4/libCocoa.dylib

/Applications/Adobe Fireworks CS4/Configuration/Mac/Shared/AdobeAIR/SDK/runtimes/air/mac/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

/Applications/Adobe Fireworks CS4/TempAirPackages/SDK/runtimes/air/mac/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

/Applications/Adobe Flash CS4/AIK1.1/runtimes/air/mac/Adobe AIR.framework/Resources/WebKit.dylib

/Applications/Adobe Flash CS4/AIK1.1/runtimes/air/mac/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

/Applications/Adobe Flash CS4/AIK1.1/runtimes/air/mac/Adobe AIR.framework/Versions/Current/Resources/WebKit.dylib

/Applications/Adobe Flash CS4/AIK1.5/runtimes/air/mac/Adobe AIR.framework/Resources/WebKit.dylib

/Applications/Adobe Flash CS4/AIK1.5/runtimes/air/mac/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

/Applications/Adobe Flash CS4/AIK1.5/runtimes/air/mac/Adobe AIR.framework/Versions/Current/Resources/WebKit.dylib

/Applications/Adobe Photoshop CS4/MATLAB/Required/psmatlab.dylib

/Applications/MAMP/Library/lib/libasprintf.0.dylib

/Applications/MAMP/Library/lib/libcharset.1.dylib

/Applications/MAMP/Library/lib/libcurl.4.dylib

/Applications/MAMP/Library/lib/libexpat.1.5.2.dylib

/Applications/MAMP/Library/lib/libexslt.0.dylib

/Applications/MAMP/Library/lib/libfreetype.6.dylib

/Applications/MAMP/Library/lib/libgettextlib-0.18.1.dylib

/Applications/MAMP/Library/lib/libgettextpo.0.dylib

/Applications/MAMP/Library/lib/libgettextsrc-0.18.1.dylib

/Applications/MAMP/Library/lib/libiconv.2.dylib

/Applications/MAMP/Library/lib/libidn.11.dylib

/Applications/MAMP/Library/lib/libintl.8.dylib

/Applications/MAMP/Library/lib/libjpeg.8.dylib

/Applications/MAMP/Library/lib/libltdl.7.dylib

/Applications/MAMP/Library/lib/libmcrypt.4.4.8.dylib

/Applications/MAMP/Library/lib/libpng16.16.dylib

/Applications/MAMP/Library/lib/libsablot.0.100.3.dylib

/Applications/MAMP/Library/lib/libt1.5.1.2.dylib

/Applications/MAMP/Library/lib/libtiff.5.dylib

/Applications/MAMP/Library/lib/libxml2.2.dylib

/Applications/MAMP/Library/lib/libxslt.1.dylib

/Applications/MAMP/Library/lib/libyaz.4.dylib

/Applications/MAMP/Library/lib/libyaz_icu.4.dylib

/Applications/MAMP/Library/lib/libyaz_server.4.dylib

/Applications/MAMP/Library/pg/lib/libpq.5.2.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libapr-0.0.9.17.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libaprutil-0.0.9.17.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libasprintf.0.0.0.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libcharset.1.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libcurl.4.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libexpat.1.5.2.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libexslt.0.8.13.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libfreetype.6.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libgettextlib-0.17.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libgettextpo.0.4.0.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libgettextsrc-0.17.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libiconv.2.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libidn.11.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libintl.8.0.2.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libjpeg.7.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libltdl.7.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libmcrypt.4.4.8.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libpng.3.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libpng12.0.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libsablot.0.100.3.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libt1.5.1.2.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libxml2.2.7.3.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libxslt.1.1.24.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libyaz.3.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libyaz_icu.3.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/lib/libyaz_server.3.dylib

/Applications/MAMP_2014-01-23_10-29-06/Library/pg/lib/libpq.5.2.dylib

/Applications/MAMP_old/Library/lib/libapr-0.0.9.12.dylib

/Applications/MAMP_old/Library/lib/libaprutil-0.0.9.12.dylib

/Applications/MAMP_old/Library/lib/libasprintf.0.0.0.dylib

/Applications/MAMP_old/Library/lib/libcharset.1.0.0.dylib

/Applications/MAMP_old/Library/lib/libcurl.4.1.0.dylib

/Applications/MAMP_old/Library/lib/libexpat.0.1.0.dylib

/Applications/MAMP_old/Library/lib/libexslt.0.8.13.dylib

/Applications/MAMP_old/Library/lib/libfreetype.6.3.15.dylib

/Applications/MAMP_old/Library/lib/libgettextlib-0.17.dylib

/Applications/MAMP_old/Library/lib/libgettextpo.0.4.0.dylib

/Applications/MAMP_old/Library/lib/libgettextsrc-0.17.dylib

/Applications/MAMP_old/Library/lib/libiconv.2.4.0.dylib

/Applications/MAMP_old/Library/lib/libidn.11.5.38.dylib

/Applications/MAMP_old/Library/lib/libintl.8.0.2.dylib

/Applications/MAMP_old/Library/lib/libjpeg.62.0.0.dylib

/Applications/MAMP_old/Library/lib/libltdl.3.1.5.dylib

/Applications/MAMP_old/Library/lib/libmcrypt.4.4.8.dylib

/Applications/MAMP_old/Library/lib/libpng.3.18.0.dylib

/Applications/MAMP_old/Library/lib/libpng12.0.18.0.dylib

/Applications/MAMP_old/Library/lib/libsablot.0.100.3.dylib

/Applications/MAMP_old/Library/lib/libt1.5.1.1.dylib

/Applications/MAMP_old/Library/lib/libxml2.2.6.32.dylib

/Applications/MAMP_old/Library/lib/libxslt.1.1.24.dylib

/Applications/MAMP_old/Library/lib/libyaz.3.0.0.dylib

/Applications/MAMP_old/Library/lib/libyaz_icu.3.0.0.dylib

/Applications/MAMP_old/Library/lib/libyaz_server.3.0.0.dylib

/Applications/MAMP_old/Library/pg/lib/libpq.5.0.dylib

/Applications/Macromedia Fireworks MX 2004/Fireworks MX 2004/Contents/MacOS/cfmsupport.dylib

/Applications/Macromedia Fireworks MX 2004/Fireworks MX 2004/Contents/MacOS/mv.dylib

/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

/Library/Application Support/Adobe/Adobe Drive CS4/Drive-Hooks.dylib

/Library/Application Support/Adobe/CS4ServiceManager/CSI-Hooks.dylib

/Library/Application Support/Adobe/CS4ServiceManager/CSI-Launcher.dylib

/Library/Application Support/Adobe/Camera Raw 5/InstallerData/CustomHooks.dylib

/Library/Application Support/Adobe/SING/TINthread.dylib

/Library/Application Support/Adobe/Updater/Plugins/indesign4.dylib

/Library/Application Support/CineformX/Libs/CFHDMetadataDictionary.dylib

/Library/Application Support/CineformX/Libs/libCFHDDecoder.dylib

/Library/Application Support/CineformX/Libs/libCFHDEncoder.dylib

/Library/Application Support/Symantec/Silo/NFM/Definitions/virusdefs/20150129.033/libsymavping.dylib

/Library/Application Support/Symantec/Silo/NFM/Frameworks/SymLicensing.framework/Versions/A/Resource s/LMUI.dylib

/Library/Application Support/Symantec/Silo/NFM/Frameworks/libprotobuf.8.dylib

/Library/Application Support/Symantec/Silo/NFM/LiveUpdate/lib/libAntiPhishingCallBack.dylib

/Library/Application Support/Symantec/Silo/NFM/LiveUpdate/lib/libnlucallback.dylib

/Library/Application Support/Symantec/Silo/NFM/WebProtection/libWebProtectionUtils.dylib

/Library/Application Support/Symantec/Silo/NFM/WebProtection/libshastacomm.dylib

/Library/Application Support/red/plugins/accessible/libqtaccessiblewidgets.dylib

/Library/Application Support/red/plugins/bearer/libqgenericbearer.dylib

/Library/Application Support/red/plugins/codecs/libqcncodecs.dylib

/Library/Application Support/red/plugins/codecs/libqjpcodecs.dylib

/Library/Application Support/red/plugins/codecs/libqkrcodecs.dylib

/Library/Application Support/red/plugins/codecs/libqtwcodecs.dylib

/Library/Application Support/red/plugins/graphicssystems/libqglgraphicssystem.dylib

/Library/Application Support/red/plugins/graphicssystems/libqtracegraphicssystem.dylib

/Library/Application Support/red/plugins/imageformats/libqgif.dylib

/Library/Application Support/red/plugins/imageformats/libqico.dylib

/Library/Application Support/red/plugins/imageformats/libqjpeg.dylib

/Library/Application Support/red/plugins/imageformats/libqmng.dylib

/Library/Application Support/red/plugins/imageformats/libqtga.dylib

/Library/Application Support/red/plugins/imageformats/libqtiff.dylib

/Library/Audio/Plug-Ins/Vamp/MTG-HPCP 1.0 (OSX)/vamp-hpcp-mtg.dylib

/Library/Audio/Plug-Ins/Vamp/MTG-MELODIA 1.0 (OSX universal)/mtg-melodia.dylib

/Library/Audio/Plug-Ins/Vamp/UAVampOSX/ua-vamp-plugins.dylib

/Library/Audio/Plug-Ins/Vamp/match-vamp-plugin-0.2.1-osx-universal-intel/match- vamp-plugin.dylib

/Library/Audio/Plug-Ins/Vamp/mvamp-ibt-plugin-1.0-osx/mvamp-ibt-plugin-1.0-osx/ mvamp-ibt.dylib

/Library/Audio/Plug-Ins/Vamp/nnls-chroma-osx-intel-32-and-64-bit/nnls-chroma.dy lib

/Library/Audio/Plug-Ins/Vamp/qm-vamp-plugins-1.7-osx-universal/qm-vamp-plugins. dylib

/Library/Audio/Plug-Ins/Vamp/vamp-aubio-plugins-0.4.0-osx/vamp-aubio.dylib

/Library/Audio/Plug-Ins/Vamp/vamp-example-plugins-2.2.1-osx-universal/vamp-exam ple-plugins.dylib

/Library/Audio/Plug-Ins/Vamp/vamp-libxtract-plugins-0.6.6.20121204-osx/vamp-lib xtract.dylib

/Library/Audio/Plug-Ins/Vamp/vamp-onsetsds-plugin-0.2-osx-universal/vamp-onsets ds.dylib

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_270.00.00.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_270.05.00.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_270.05.05.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_270.05.10.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_270.05.20.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_270.05.25.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_295.00.05.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_295.10.05.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_295.10.10.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_295.10.15.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_295.10.20.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_295.30.00.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_295.30.20.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_304.00.00.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_304.00.05.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_304.10.10.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_304.10.20.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_304.10.65.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_310.40.00.05.dy lib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_310.40.00.10.dy lib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_310.40.00.15.dy lib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_310.40.00.20.dy lib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_310.40.05.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_310.40.15.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_313.01.01.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_313.01.02.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libcuda_313.01.03.dylib

/Library/Frameworks/CUDA.framework/Versions/A/Libraries/libgpgpucomp.dylib

/Library/Frameworks/MacFUSE.framework/Versions/A/Resources/Debug/libfuse.dylib. dSYM/Contents/Resources/DWARF/libfuse.dylib

/Library/Frameworks/MacFUSE.framework/Versions/A/Resources/Debug/libfuse_ino64. dylib.dSYM/Contents/Resources/DWARF/libfuse_ino64.dylib

/Library/PostgreSQL/8.4/lib/libecpg.6.1.dylib

/Library/PostgreSQL/8.4/lib/libecpg_compat.3.1.dylib

/Library/PostgreSQL/8.4/lib/libpgtypes.3.1.dylib

/Library/PostgreSQL/8.4/lib/libpq.5.2.dylib

/Library/PostgreSQL/8.4/lib/libuuid.16.dylib

/Library/PostgreSQL/8.4/lib/libuuid.dylib

/Library/PostgreSQL/8.4/lib/libxml2.2.7.1.dylib

/Library/PostgreSQL/8.4/lib/libxml2.2.dylib

/Library/PostgreSQL/8.4/lib/libxml2.dylib

/Users/USER/Library/Application Support/Firefox/Profiles/a1hb6mdk.default/extensions/EMAIL/platform/Darwin/comp onents/lpxpcom.dylib

/Users/USER/Library/Application Support/Firefox/Profiles/a1hb6mdk.default/extensions/EMAIL/platform/Darwin_x86_ 64-gcc3/components/lpxpcom_x86_64.dylib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.758/_platform_specific/mac_x64/libwidev inecdm.dylib

/usr/X11R6 1/lib/libOSMesa.4.0.dylib

/usr/X11R6 1/lib/libX11.6.2.dylib

/usr/X11R6 1/lib/libXfont.1.5.dylib

/usr/X11R6 1/lib/libXft.1.1.dylib

/usr/X11R6 1/lib/libexpat.0.4.dylib

/usr/X11R6 1/lib/libfontconfig.1.0.dylib

/usr/X11R6 1/lib/libfreetype.6.3.dylib

/usr/discreet/lib32/2013.1.pr16/libpng-1.4.1/libpng14.14.dylib

/usr/lib/libPrintServiceQuota.1.dylib

/usr/lib/libbz2.1.0.3.dylib

/usr/lib/libdvdcss.2.dylib

/usr/local/clamXav/lib/libclamav.6.dylib

/usr/local/clamXav/lib/libclamunrar.6.dylib

/usr/local/cuda/lib/libcuda.dylib

/usr/local/lib/libavcodec.52.0.0.dylib

/usr/local/lib/libavformat.52.22.1.dylib

/usr/local/lib/libavutil.49.10.0.dylib

/usr/local/lib/libecomlodr.dylib

/usr/local/lib/libfuse.2.dylib

/usr/local/lib/libfuse_ino64.2.dylib

/usr/local/lib/libntfs-3g.80.dylib

/usr/local/lib/libntfs.9.0.0.dylib

/usr/local/lib/libublio.1.dylib

/usr/local/php5/lib/libasprintf.0.0.0.dylib

/usr/local/php5/lib/libct.4.0.0.dylib

/usr/local/php5/lib/libcurl.3.0.0.dylib

/usr/local/php5/lib/libexslt.0.8.13.dylib

/usr/local/php5/lib/libfreetype.6.3.8.dylib

/usr/local/php5/lib/libgettextlib-0.14.5.dylib

/usr/local/php5/lib/libgettextpo.0.1.0.dylib

/usr/local/php5/lib/libgettextsrc-0.14.5.dylib

/usr/local/php5/lib/libintl.3.4.3.dylib

/usr/local/php5/lib/libmcrypt.4.4.7.dylib

/usr/local/php5/lib/libmhash.2.0.0.dylib

/usr/local/php5/lib/libming.0.3.0.dylib

/usr/local/php5/lib/libpdf.5.0.3.dylib

/usr/local/php5/lib/libpgtypes.2.1.dylib

/usr/local/php5/lib/libpng.3.0.0.dylib

/usr/local/php5/lib/libpng12.0.0.0.dylib

/usr/local/php5/lib/libpq.4.1.dylib

/usr/local/php5/lib/libsybdb.5.0.0.dylib

/usr/local/php5/lib/libt1.5.1.0.dylib

/usr/local/php5/lib/libtds.5.0.0.dylib

/usr/local/php5/lib/libtdssrv.2.0.0.dylib

/usr/local/php5/lib/libxml2.2.6.26.dylib

/usr/local/php5/lib/libxslt.1.1.17.dylib

/usr/local/php5/lib/mysql/libmysqlclient.15.0.0.dylib

/usr/local/php5/oracle/libnnz10.dylib

/usr/local/php5/oracle/libociei.dylib

Contents of /Library/LaunchAgents/com.blackmagic-design.DesktopVideoFirmwareUpdater.plist

- mod date: Sep 4 00:10:17 2014

- checksum: 4077194330

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.blackmagic-design.DesktopVideoFirmwareUpdater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Blackmagic Design/Blackmagic DeckLink/Desktop Video Firmware Updater.app/Contents/MacOS/Desktop Video Firmware Updater</string>

</array>

<key>KeepAlive</key>

<dict>

<key>SuccessfulExit</key>

<false/>

</dict>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.nvidia.CUDASoftwareUpdate.plist

- mod date: Jan 22 20:47:00 2015

- checksum: 572360244

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnvironmentVariables</key>

<dict>

<key>COM_NVIDIA_CUDAPREF_FROM_LAUNCH_AGENT</key>

<string>TRUE</string>

</dict>

<key>Label</key>

<string>com.nvidia.CUDASoftwareUpdate</string>

<key>LimitLoadToSessionType</key>

<array>

<string>Aqua</string>

</array>

<key>Program</key>

<string>/usr/bin/open</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>file:///Library/PreferencePanes/CUDA%20Preferences.prefPane</string>

</array>

<key>RunAtLoad</key>

<false/>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/com.symantec.errorreporter-periodicagent.NFM.plist

- mod date: Jan 17 19:41:30 2015

- checksum: 781312751

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>Label</key>

<string>com.symantec.errorreporting.NFM.periodic-agent</string>

<key>Nice</key>

<integer>10</integer>

<key>LowPriorityIO</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>86400</integer>

<key>StartCalendarInterval</key>

<array>

<dict>

<key>Minute</key>

<integer>27</integer>

<key>Hour</key>

<integer>16</integer>

<key>Weekday</key>

<integer>3</integer>

...and 28 more line(s)

Contents of /Library/LaunchAgents/com.symantec.uiagent.application.NFM.plist

- mod date: Sep 10 19:51:49 2014

- checksum: 2503817938

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.symantec.uiagent.application.NFM</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/Silo/NFM/SymUIAgent/Norton.app/Contents/MacOS/Norton</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

- mod date: Jan 22 20:46:20 2015

- checksum: 1051159591

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.teamviewer</string>

<key>LimitLoadToSessionType</key>

<array>

<string>Aqua</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

<string>-RunAsAgent</string>

<string>YES</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS</string>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

- mod date: Jan 22 20:46:20 2015

- checksum: 892310726

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.desktop</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

<string>Aqua</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>

<string>-RunAsAgent</string>

<string>YES</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>RunAtLoad</key>

<true/>

...and 4 more line(s)

Contents of /Library/LaunchAgents/com.wacom.wacomtablet.plist

- mod date: Mar 18 16:30:38 2009

- checksum: 3979771536

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnvironmentVariables</key>

<dict>

<key>RUN_WITH_LAUNCHD</key>

<string>1</string>

</dict>

<key>KeepAlive</key>

<dict>

<key>SuccessfulExit</key>

<true/>

</dict>

<key>Label</key>

<string>com.wacom.wacomtablet</string>

<key>LimitLoadToSessionType</key>

<array>

<string>Aqua</string>

<string>LoginWindow</string>

</array>

<key>Program</key>

<string>/Library/Application Support/Tablet/WacomTabletDriver.app/Contents/MacOS/WacomTabletDriver</string>

<key>RunAtLoad</key>

<true/>

...and 4 more line(s)

Contents of /Library/LaunchDaemons/com.adobe.versioncueCS4.plist

- mod date: Apr 28 14:50:45 2009

- checksum: 2976441341

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>GroupName</key>

<string>wheel</string>

<key>Label</key>

<string>com.adobe.versioncueCS4</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Adobe/Adobe Version Cue CS4/Server/bin/VersionCueCS4d</string>

</array>

<key>RunAtLoad</key>

<false/>

<key>ServiceDescription</key>

<string>Adobe Version Cue CS4</string>

<key>UserName</key>

<string>root</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.apple.qmaster.qmasterd.plist

- mod date: Aug 25 18:24:23 2010

- checksum: 681742547

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.apple.qmaster.qmasterd</string>

<key>ProgramArguments</key>

<array>

<string>/usr/sbin/qmasterd</string>

</array>

<key>OnDemand</key>

<false/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.barebones.authd.plist

- mod date: Jul 11 21:52:45 2012

- checksum: 1995816654

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableTransactions</key>

<true/>

<key>Label</key>

<string>com.barebones.authd</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

</array>

<key>Sockets</key>

<dict>

<key>com.barebones.authd.socket</key>

<dict>

<key>SockPathMode</key>

<integer>438</integer>

<key>SockPathName</key>

<string>/var/tmp/com.barebones.authd.socket</string>

</dict>

</dict>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.barebones.textwrangler.plist

- mod date: Feb 16 19:14:13 2012

- checksum: 1770634273

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.barebones.textwrangler</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.barebones.textwrangler</string>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<string>Unix</string>

<key>SockPathMode</key>

<integer>438</integer>

<key>SockPathName</key>

<string>/var/run/com.barebones.textwrangler.socket</string>

<key>SockType</key>

...and 5 more line(s)

Contents of /Library/LaunchDaemons/com.blackmagic-design.DesktopVideoHelper.plist

- mod date: Sep 4 00:10:17 2014

- checksum: 2140071404

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.blackmagic-design.desktopvideo.helper</string>

<key>Program</key>

<string>/Library/Application Support/Blackmagic Design/Blackmagic DeckLink/DesktopVideoHelper</string>

<key>KeepAlive</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.blackmagic-design.desktopvideo.XPCService.plist

- mod date: Sep 4 00:10:17 2014

- checksum: 385415019

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService</string>

<key>Program</key>

<string>/Library/Application Support/Blackmagic Design/Blackmagic DeckLink/com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService.xpc/Cont ents/MacOS/com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService</string >

<key>MachServices</key>

<dict>

<key>com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService</key>

<true/>

</dict>

<key>EnableTransactions</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.blackmagic-design.streaming.BMDStreamingServer.plist

- mod date: Sep 4 00:10:17 2014

- checksum: 668803479

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.blackmagic-design.streaming.server</string>

<key>Program</key>

<string>/Library/Application Support/Blackmagic Design/Streaming/BMDStreamingAPI.bundle/Contents/Resources/BMDStreamingServer</ string>

<key>KeepAlive</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.ciscosystems.ciscoconnect.daemon.plist

- mod date: Jul 25 18:59:40 2013

- checksum: 274202097

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.ciscosystems.ciscoconnect.daemon</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.ciscosystems.ciscoconnect.daemon</st ring>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<string>Unix</string>

<key>SockPathMode</key>

<integer>438</integer>

<key>SockPathName</key>

<string>/var/run/com.ciscosystems.ciscoconnect.daemon.socket</string>

<key>SockType</key>

...and 5 more line(s)

Contents of /Library/LaunchDaemons/com.edb.launchd.postgresql-8.4.plist

- mod date: Jun 23 17:08:00 2013

- checksum: 320603455

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"

"http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>Label</key>

<string>com.edb.launchd.postgresql-8.4</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PostgreSQL/8.4/bin/postmaster</string>

<string>-D/Library/PostgreSQL/8.4/data</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>UserName</key>

<string>postgres</string>

<key>KeepAlive</key>

<dict>

<key>SuccessfulExit</key>

<false/>

</dict>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.gopro.stereomodestatus.plist

- mod date: Sep 9 21:15:20 2013

- checksum: 2319101607

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.gopro.stereomodestatus</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>RunAtLoad</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Applications/GoPro/Tools/StereoModeStatus.app/Contents/MacOS/StereoMod eStatus</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.noiseindustries.FxFactory.helper.plist

- mod date: Jul 26 13:37:36 2013

- checksum: 2551532774

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.noiseindustries.FxFactory.helper</string>

<key>MachServices</key>

<dict>

<key>com.noiseindustries.FxFactory.helper</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.noiseindustries.FxFactory.helper</st ring>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.perion.searchprotectd.plist

- mod date: Jan 15 19:23:14 2015

- checksum: 1209345832

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>AbandonProcessGroup</key>

<true/>

<key>EnableTransactions</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Applications/SearchProtect/SearchProtect.app/Contents/MacOS/SearchProt ect</string>

<string>-execv_instance</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>Label</key>

<string>com.period.searchprotectd</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.symantec.SymLUHelper.NFM.plist

- mod date: Sep 10 19:51:49 2014

- checksum: 3809300053

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>LowPriorityIO</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/Silo/NFM/LiveUpdate/com.symantec.SymLUHelper</string>

</array>

<key>Label</key>

<string>com.symantec.SymLUHelper.NFM</string>

<key>MachServices</key>

<dict>

<key>com.symantec.SymLUHelper.NFM</key>

<true/>

</dict>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.symantec.UninstallerToolHelper.plist

- mod date: Sep 9 19:35:39 2014

- checksum: 202567606

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/Silo/NFM/Daemon/SymDaemon.bundle/Contents/PlugIns/NortonM.bund le/Contents/Resources/com.symantec.UninstallerToolHelper</string>

</array>

<key>Label</key>

<string>com.symantec.UninstallerToolHelper</string>

<key>MachServices</key>

<dict>

<key>com.symantec.UninstallerToolHelper</key>

<true/>

</dict>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.symantec.deepsight-extractor.NFM.plist

- mod date: Sep 10 20:26:38 2014

- checksum: 1310121499

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.symantec.deepsight-extractor</string>

<key>OnDemand</key>

<true/>

<key>KeepAlive</key>

<dict>

<key>NetworkState</key>

<true/>

</dict>

<key>RunAtLoad</key>

<true/>

<key>LowPriorityIO</key>

<true/>

<key>Nice</key>

<integer>10</integer>

<key>StandardOutPath</key>

<string>/dev/null</string>

<key>StandardErrorPath</key>

<string>/Library/Application Support/Symantec/Silo/NFM/DeepSight/errors.log</string>

...and 13 more line(s)

Contents of /Library/LaunchDaemons/com.symantec.errorreporter-periodic.NFM.plist

- mod date: Jan 17 19:41:30 2015

- checksum: 4166912891

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>Label</key>

<string>com.symantec.errorreporting.NFM.periodic</string>

<key>Nice</key>

<integer>10</integer>

<key>LowPriorityIO</key>

<true/>

<key>RunAtLoad</key>

<false/>

<key>StartInterval</key>

<integer>43200</integer>

<key>StartCalendarInterval</key>

<array>

<dict>

<key>Minute</key>

<integer>27</integer>

<key>Hour</key>

<integer>12</integer>

<key>Weekday</key>

<integer>3</integer>

...and 30 more line(s)

Contents of /Library/LaunchDaemons/com.symantec.liveupdate.daemon.NFM.plist

- mod date: Sep 10 19:51:49 2014

- checksum: 1580778071

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>Label</key>

<string>com.symantec.liveupdate.daemon.NFM</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/Silo/NFM/LiveUpdate/LUTool</string>

</array>

<key>StartInterval</key>

<integer>7200</integer>

<key>TimeOut</key>

<integer>15</integer>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.symantec.sharedsettings.NFM.plist

- mod date: Sep 10 19:51:49 2014

- checksum: 61615991

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.symantec.sharedsettings.NFM</string>

<key>MachServices</key>

<dict>

<key>com.symantec.sharedsettings.NFM</key>

<true/>

</dict>

<key>Program</key>

<string>/Library/Application Support/Symantec/Silo/NFM/Frameworks/SymSharedSettings.framework/Tools/SymShare dSettingsd</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.symantec.symdaemon.NFM.plist

- mod date: Sep 10 19:51:49 2014

- checksum: 3208510331

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.symantec.symdaemon.NFM</string>

<key>OnDemand</key>

<false/>

<key>KeepAlive</key>

<dict>

<key>SuccessfulExit</key>

<false/>

</dict>

<key>RunAtLoad</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Symantec/Silo/NFM/Daemon/SymDaemon.bundle/Contents/MacOS/SymDaemon</str ing>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.teamviewer.Helper.plist

- mod date: Dec 1 17:37:40 2014

- checksum: 3407596625

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.teamviewer.Helper</string>

<key>MachServices</key>

<dict>

<key>com.teamviewer.Helper</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

- mod date: Jan 22 20:46:20 2015

- checksum: 1707497389

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.service</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS</string>

</dict>

</plist>

Contents of /System/Library/LaunchAgents/com.apple.coremedia.videodecoder.plist

- mod date: Apr 11 18:02:30 2011

- checksum: 2926607402

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.apple.coremedia.videodecoder</string>

<key>MachServices</key>

<dict>

<key>com.apple.coremedia.videodecoder</key>

<dict>

<key>ResetAtClose</key>

<true/>

</dict>

</dict>

<key>ProgramArguments</key>

<array>

<string>/System/Library/PrivateFrameworks/VideoToolbox.framework/Resources/VTDe codeServer</string>

</array>

</dict>

</plist>

Contents of /etc/crontab

- mod date: Jan 30 10:49:47 2006

- checksum: 795173808

[N/A]

Contents of /etc/periodic/daily/500.daily.applesaved

- mod date: Sep 23 12:46:59 2011

- checksum: 3221875874

PATH=/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin

host=`hostname -s`

bak=/var/backups

echo ""

echo "Removing scratch and junk files:"

if [ -d /var/rwho ] ; then

cd /var/rwho && {

find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }

fi

if [ -d /tmp ]; then

cd /tmp && {

find -x . -fstype local -type f -atime +3 -ctime +3 -exec rm -f -- {} \;

find -x -d . -fstype local ! -name . -type d -mtime +1 -exec rmdir -- {} \; \

>/dev/null 2>&1; }

fi

if [ -d /var/spool/fax ]; then

echo ""

echo "Removing scratch fax files"

cd /var/spool/fax && \

find . -type f -name '[0-9]*.[0-9][0-9][0-9]' -mtime +7 -delete >/dev/null 2>&1;

fi

msgs -c

if [ -f /var/account/acct ] ; then

if [ -x /usr/bin/gzip ]; then gzext=".gz"; else gzext=""; fi

echo ""

...and 72 more line(s)

Contents of /etc/periodic/monthly/500.monthly.applesaved

- mod date: Sep 23 12:46:59 2011

- checksum: 3474890855

PATH=/bin:/usr/bin:/sbin:/usr/sbin

host=`hostname -s`

echo ""

echo "Doing login accounting:"

if type sort>/dev/null; then

ac -p | sort -nr +1

else

ac -p

fi

echo ""

printf %s "Rotating log files:"

cd /var/log

for i in wtmp install.log; do

if [ -f "${i}" ]; then

printf %s " $i"

if [ -x /usr/bin/gzip ]; then gzext=".gz"; else gzext=""; fi

if [ -f "${i}.3${gzext}" ]; then mv -f "${i}.3${gzext}" "${i}.4${gzext}"; fi

if [ -f "${i}.2${gzext}" ]; then mv -f "${i}.2${gzext}" "${i}.3${gzext}"; fi

if [ -f "${i}.1${gzext}" ]; then mv -f "${i}.1${gzext}" "${i}.2${gzext}"; fi

if [ -f "${i}.0${gzext}" ]; then mv -f "${i}.0${gzext}" "${i}.1${gzext}"; fi

if [ -f "${i}" ]; then mv -f "${i}" "${i}.0" && if [ -x /usr/bin/gzip ]; then gzip -9 "${i}.0"; fi; fi

touch "${i}" && chmod 644 "${i}" && chown root:admin "${i}"

fi

done

if [ -f /var/run/syslog.pid ]; then kill -HUP $(cat /var/run/syslog.pid | head -1); fi

...and 22 more line(s)

Contents of /etc/sysctl.conf

- mod date: Jun 23 17:07:54 2013

- checksum: 3705018686

kern.sysv.shmmax=33554432

kern.sysv.shmmni=256

kern.sysv.shmseg=64

kern.sysv.shmall=8192

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Dec 20 09:34:40 2013

- checksum: 1251035989

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Acrobat 9 Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>12600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/com.crossrider.wss002497.agent.plist

- mod date: Jan 15 18:52:28 2015

- checksum: 2353117327

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.crossrider.wss002497.agent.plist</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/LaunchAgents/WebSocketServerApp</string>

<string>cmpId=2497</string>

<string>ibic=UUID</string>

<string>verifier=UUID</string>

<string>extId=67619</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.digitalrebellion.PreferenceManagerAutoSave.plist

- mod date: Jun 7 15:47:23 2014

- checksum: 1312245395

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.digitalrebellion.PreferenceManagerAutoSave</string>

<key>Program</key>

<string>/Applications/Preference Manager.app/Contents/MacOS/Preference Manager</string>

<key>ProgramArguments</key>

<array>

<string>Preference Manager</string>

<string>-autobackup</string>

</array>

<key>StartInterval</key>

<integer>604800</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/com.redgiantsoftware.updater.plist

- mod date: Mar 14 15:30:35 2014

- checksum: 467082827

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.redgiantsoftware.updater.plist</string>

<key>Program</key>

<string>/usr/bin/open</string>

<key>ProgramArguments</key>

<array>

<string>-a</string>

<string>/Applications/Red Giant Link.app</string>

<string>--args</string>

<string>--silent</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>15</integer>

<key>Minute</key>

<integer>58</integer>

<key>Weekday</key>

<integer>4</integer>

</dict>

</dict>

...and 1 more line(s)

Contents of Library/LaunchAgents/com.webhelper.plist

- mod date: Jan 15 18:52:35 2015

- checksum: 3568313035

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.webhelper</string>

<key>EnableGlobbing</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>

<string>-guid</string>

<string>UUID</string>

<string>-source</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.webtools.update.agent.plist

- mod date: Jan 15 18:52:35 2015

- checksum: 3484720990

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableGlobbing</key>

<true/>

<key>Label</key>

<string>com.webtools.update.agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>3600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/flashmall_updater.plist

- Apple binary property list

- mod date: Jan 15 18:52:10 2015

- checksum: 2203422901

Dict {

StartInterval = 86400

ProgramArguments = Array {

bash

/Users/USER/Library/LaunchAgents/flashmall_updater.sh

}

Label = com.flashmall.updater

}

Login hook

/Library/Application Support/Blackmagic Design/Blackmagic DeckLink/DeckLinkLoginItem.sh

Global login items

/Library/Application Support/Norton Solutions Support/Scheduler/SymSecondaryLaunch.app

/Library/Application Support/Memeo/WD Anywhere Backup/Agents/WDMemeoAgent.app

/Library/Application Support/Symantec/AntiVirus/DiskMountNotify.app

/Library/Application Support/Symantec/AntiVirus/ScanNotification.app

/Library/Application Support/Symantec/SymQuickMenu/SymQuickMenu.app

Font issues: 84

Bad plists

/Library/Preferences/com.epson.Inkjet Printer Driver.UnInstallList.plist

/Library/Preferences/com.techspansion.audialhub.plist

Listeners

kdc: kerberos

launchd: afpovertcp

launchd: microsoft-ds

nfsd: 1023

rpc.lockd: 1017

rpc.rquotad: garcon

rpc.statd: exp1

rpcbind: sunrpc

User login items

RED Watchdog

- /Applications/REDCINE-X Professional/Utilities/RED Watchdog.app

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Dropbox

- /Applications/Dropbox.app

Google Drive

- /Applications/Google Drive.app

Google Chrome

- /Applications/Google Chrome.app

SymSecondaryLaunch

- /Library/Application Support/Norton Solutions Support/Scheduler/SymSecondaryLaunch.app

WDMemeoAgent

- /Library/Application Support/Memeo/WD Anywhere Backup/Agents/WDMemeoAgent.app

DiskMountNotify

- /Library/Application Support/Norton Solutions Support/Norton AntiVirus/DiskMountNotify.app

ScanNotification

- /Library/Application Support/Norton Solutions Support/Norton AntiVirus/ScanNotification.app

SymQuickMenu

- /Library/Application Support/Norton Solutions Support/SymQuickMenu/SymQuickMenu.app

Safari extensions

LastPass

- com.lastpass.lpsafariextension

Norton Security

- com.symantec.NortonInternetSecurityBF

Restricted files: 4006

Lockfiles: 19

Elapsed time (sec): 632

DFWliving wrote:

SNIP ...wonder what we're doing that lets it in.

from my post a couple down from this one...

"a very good primer on How to install adware | Apple Support Communities <[ it is NOT really a HowTo DO it, but how it is done... hint: it happens between the chair and the screen ] "

welcome to the community - judging from your UserName, we are VERY close neighbors (ÇÇÇ=BigD)

Thanks Linc and all the others for being so helpful, unfortunately it hasnt solved my issue. I'm having an issue with Flashmall adds and a popup for scam mac security alerts on both chrome and safari.

There are no culprit browser extensions, nothing in ~/library or library folder of launchAgents, LaunchDaemons, Application support, or suspect folders in ~/library or /library that I can find. I ran Linc's script for diagnostics and it is attached below. I did find mackeeper and deleted that, and noticed crossrider and flashmallupdater under agents but can't find where they are located. I am using teamviewer to fix my sister's computer, so that might be any ssh or tunneling that shows up. Thanks for the help.

Start time: 16:23:33 02/05/15

Revision: 1166

Model Identifier: MacBookPro11,1

System Version: OS X 10.9.5 (13F34)

Kernel Version: Darwin 13.4.0

Time since boot: 3 days 19:28

Diagnostic reports

2015-02-05 Safari crash

2015-02-05 SophosAVAgent crash

2015-02-05 com.apple.WebKit.WebContent crash

Shutdowns

Jan 30 11:16:07 Cause: -60

Jan 31 10:32:48 Cause: -60

Feb 1 14:38:15 Cause: -60

Log

Feb 4 19:31:11 PM notification timeout (pid 34205, Spotify Helper)

Feb 4 19:31:11 PM notification timeout (pid 83347, Spotify Helper)

Feb 4 20:37:32 PM notification timeout (pid 34161, Spotify)

Feb 4 20:37:32 PM notification timeout (pid 34175, Spotify Helper)

Feb 4 20:37:32 PM notification timeout (pid 34174, Spotify Helper)

Feb 4 20:37:32 PM notification timeout (pid 34176, Spotify Helper)

Feb 4 20:37:32 PM notification timeout (pid 34201, Spotify Helper)

Feb 4 20:37:32 PM notification timeout (pid 34205, Spotify Helper)

Feb 4 20:37:32 PM notification timeout (pid 83347, Spotify Helper)

Feb 5 11:00:08 PM notification timeout (pid 34161, Spotify)

Feb 5 11:00:08 PM notification timeout (pid 34175, Spotify Helper)

Feb 5 11:00:08 PM notification timeout (pid 34174, Spotify Helper)

Feb 5 11:00:08 PM notification timeout (pid 34176, Spotify Helper)

Feb 5 11:00:08 PM notification timeout (pid 34201, Spotify Helper)

Feb 5 11:00:08 PM notification timeout (pid 34205, Spotify Helper)

Feb 5 11:00:08 PM notification timeout (pid 83347, Spotify Helper)

Feb 5 11:11:18 PM notification timeout (pid 34161, Spotify)

Feb 5 11:11:18 PM notification timeout (pid 34175, Spotify Helper)

Feb 5 11:11:18 PM notification timeout (pid 34174, Spotify Helper)

Feb 5 11:11:18 PM notification timeout (pid 34176, Spotify Helper)

Feb 5 11:11:18 PM notification timeout (pid 34201, Spotify Helper)

Feb 5 11:11:18 PM notification timeout (pid 34205, Spotify Helper)

Feb 5 11:11:18 PM notification timeout (pid 83347, Spotify Helper)

Feb 5 12:51:53 process TeamViewer_Deskt[83251] thread 1390679 caught burning CPU! It used more than 50% CPU (Actual recent usage: 50%) over 180 seconds. thread lifetime cpu usage 177.756063 seconds, (110.708878 user, 67.047185 system) ledger info: balance: 90009322006 credit: 177652294917 debit: 87642972911 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 177174342850

Feb 5 14:32:18 com.adobe.Reader.39280: Exited abnormally: Interrupt: 2

Swap (MiB): 4779

Activity

CPU: user 14%, system 23%

Net: 1 in, 29 out (KiB/s)

CPU per process: TeamViewer_Deskt (UID 501) is using 77.5 percent

Current downstream data: InterCheck (UID 0) is using 736.662 KiB/s

Loaded kernel extensions

com.avg.Antivirus.OnAccess.kext (2015.0)

com.sophos.kext.sav (9.2.50)

com.sophos.nke.swi (9.2.50)

Daemons

com.adobe.fpsaud

com.apple.launchd.peruser.0

- status: -

com.apple.launchd.peruser.55

com.apple.launchd.peruser.89

- status: -

com.apple.launchd.peruser.92

- status: -

com.avg.Antivirus.infosd

- status: -

com.avg.Antivirus

- status: -

com.google.keystone.daemon

com.sophos.autoupdate

- status: -

com.sophos.common.servicemanager

- status: -

com.sophos.configuration

- status: -

com.sophos.intercheck

- status: -

com.sophos.notification

- status: -

com.sophos.scan

- status: -

com.sophos.sxld

- status: -

com.sophos.webd

- status: -

com.teamviewer.Helper

com.teamviewer.service

- status: -

Agents

com.apple.AirPortBaseStationAgent

com.apple.photostream-agent

- status: -

com.avg.Antivirus

- status: -

com.crossrider.wss002498.agent.plist

- status: -

com.flashmall.updater

- status: 127

com.google.keystone.system.agent

com.jdibackup.ZipCloud.autostart

com.jdibackup.ZipCloud.notify

- status: 1

com.sophos.uiserver

- status: -

com.spotify.webhelper

- status: -

com.teamviewer.desktop

- status: -

com.teamviewer.teamviewer

- status: -

com.webhelper

- status: -

com.webtools.update.agent

- status: -

Extensions

/Library/Extensions/SophosNetworkInterceptor.kext

- N/A

/Library/Extensions/SophosOnAccessInterceptor.kext

- N/A

Applications

/Applications/AVG AntiVirus.app

- com.avg.Antivirus

/Applications/AdwareMedic.app

- com.thesafemac.adwaremedic

/Applications/Google Chrome.app

- com.google.Chrome

/Applications/Remove Sophos Anti-Virus.app

- com.sophos.macendpoint.Remove-Sophos-Anti-Virus

/Applications/Skype.app

- com.skype.skype

/Applications/Sophos Anti-Virus.app

- com.sophos.macendpoint.Sophos-Anti-Virus

/Applications/Spotify.app

- com.spotify.client

/Applications/TeamViewer.app

- com.teamviewer.TeamViewer

/Library/Application Support/Google/GoogleTalkPlugin.app

- com.google.GoogleTalkPluginD

/Library/Application Support/Google/GoogleVoiceAndVideoUninstaller.app

- com.google.GoogleTalkPluginUninstaller

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

- com.microsoft.silverlight.sllauncher

/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

- com.apple.ScriptEditor.id.cocoa-applet-template

/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

- com.apple.ScriptEditor.id.droplet-with-settable-properties-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

- com.apple.ScriptEditor.id.file-processing-droplet-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

- com.apple.ScriptEditor.id.image-file-processing-droplet-template

/Library/Application Support/Sophos/he/Installer.app

- com.sophos.macendpoint.InstallationDeployer

/Library/Image Capture/Devices/HP Scanner 3.app

- com.hp.scanModule3

/Library/Printers/hp/Fax/fax.backend

- com.hp.fax

/Library/Printers/hp/Fax/rastertofax.filter

- com.hp.rastertofax

/Library/Printers/hp/Utilities/HP Utility.app

- com.hp.printerutility

/Library/Printers/hp/Utilities/Handlers/ScanEventHandler.app

- com.hp.scan.button.handler.generic

/Library/Printers/hp/cups/filters/commandtohp.filter

- com.hp.print.cups.filter.commandtohp

/Library/Printers/hp/cups/filters/pdftopdf.filter

- com.hp.print.cups.filter.pdftopdf

/Library/Printers/hp/cups/tools/autosetup.tool

- com.hp.print.autosetup

/Library/Sophos Anti-Virus/InterCheck.app

- com.sophos.sav.ic

/Library/Sophos Anti-Virus/SophosAntiVirus.app

- com.sophos.SophosAntiVirus

/Library/Sophos Anti-Virus/SophosAutoUpdate.app

- com.sophos.autoupdate

/Library/Sophos Anti-Virus/SophosSXLD.app

- com.Sophos.macendpoint.SophosSXLD

/Library/Sophos Anti-Virus/SophosScanD.app

- com.sophos.SophosScanD

/Library/Sophos Anti-Virus/SophosUIServer.app

- com.sophos.ui

/Library/Sophos Anti-Virus/Tools/SDU4OSX.app

- com.sophos.SDU4OSX

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aapocclcgogkmnckokdopfmhonfmgoek/Default aapocclcgogkmnckokdopfmhonfmgoek.app

- com.google.Chrome.app.Default-aapocclcgogkmnckokdopfmhonfmgoek-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_felcaaldnbdncclmgdcncolpebgiejap/Default felcaaldnbdncclmgdcncolpebgiejap.app

- com.google.Chrome.app.Default-felcaaldnbdncclmgdcncolpebgiejap-internal

/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

Frameworks

/Library/Frameworks/SAVI.framework

- com.sophos.sav.savi

/Library/Frameworks/SUMScanKit.framework

- com.sophos.sum.scan.kit

/Library/Frameworks/SophosGenericsCommon.framework

- com.sophos.macendpoint.SophosGenericsCommon

/Library/Frameworks/SophosGenericsCore.framework

- com.sophos.macendpoint.SophosGenericsCore

PrefPane

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

Bundles

/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

/Users/USER/Library/Application Support/MacKeeper Helper/NoticeEngine.plugin

- com.zeobit.MacKeeper.plugin.NoticeEngine

dylibs

/Library/Application Support/com.avg.Antivirus/update/backup/#Applications#AVG AntiVirus.app#Contents#Backend##lib#libavgcore.dylib

/Library/Sophos Anti-Virus/Libraries/libSULObjC.dylib

/Library/Sophos Anti-Virus/Libraries/libcrypto.dylib

/Library/Sophos Anti-Virus/Libraries/libssl.dylib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.758/_platform_specific/mac_x64/libwidev inecdm.dylib

/usr/local/clamXav/lib/libclamav.6.dylib

/usr/local/clamXav/lib/libclamunrar.6.dylib

/usr/local/clamXav/lib/x86_64/libclamav.6.dylib

/usr/local/clamXav/lib/x86_64/libclamunrar.6.dylib

Contents of /Library/LaunchAgents/com.avg.Antivirus.gui.plist

- mod date: Feb 3 15:13:12 2015

- checksum: 1737179676

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.avg.Antivirus</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/AVG AntiVirus.app/Contents/MacOS/AVG AntiVirus</string>

<string>-AVGStandaloneInstanceAllowed</string>

<string>YES</string>

</array>

<key>EnvironmentVariables</key>

<dict>

<key>AVGINSTDIR</key>

<string>/Applications/AVG AntiVirus.app/Contents/Backend/</string>

<key>AVGPRODUCTID</key>

<string>com.avg.Antivirus</string>

<key>DYLD_LIBRARY_PATH</key>

<string>/Applications/AVG AntiVirus.app/Contents/Backend/lib</string>

</dict>

<key>KeepAlive</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

...and 6 more line(s)

Contents of /Library/LaunchAgents/com.sophos.uiserver.plist

- mod date: Feb 5 15:18:48 2015

- checksum: 40276757

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.sophos.uiserver</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Sophos Anti-Virus/SophosUIServer.app/Contents/MacOS/SophosUIServer</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

- mod date: Feb 5 12:36:59 2015

- checksum: 1051159591

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.teamviewer</string>

<key>LimitLoadToSessionType</key>

<array>

<string>Aqua</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

<string>-RunAsAgent</string>

<string>YES</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS</string>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

- mod date: Feb 5 12:36:59 2015

- checksum: 892310726

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.desktop</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

<string>Aqua</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>

<string>-RunAsAgent</string>

<string>YES</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>RunAtLoad</key>

<true/>

...and 4 more line(s)

Contents of /Library/LaunchDaemons/com.avg.Antivirus.infosd.plist

- mod date: Feb 3 15:13:12 2015

- checksum: 2229474660

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.avg.Antivirus.infosd</string>

<key>Program</key>

<string>/Applications/AVG AntiVirus.app/Contents/Daemons/infosd</string>

<key>EnvironmentVariables</key>

<dict>

<key>AVGINSTDIR</key>

<string>/Applications/AVG AntiVirus.app/Contents/Backend/</string>

<key>AVGPRODUCTID</key>

<string>com.avg.Antivirus</string>

<key>DYLD_LIBRARY_PATH</key>

<string>/Applications/AVG AntiVirus.app/Contents/Backend/lib</string>

</dict>

<key>KeepAlive</key>

<true/>

<key>MachServices</key>

<dict>

<key>com.avg.Antivirus.infosd</key>

<true/>

</dict>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchDaemons/com.avg.Antivirus.services.plist

- mod date: Feb 3 15:13:12 2015

- checksum: 1676278726

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnvironmentVariables</key>

<dict>

<key>AVGINSTDIR</key>

<string>/Applications/AVG AntiVirus.app/Contents/Backend/</string>

<key>AVGPRODUCTID</key>

<string>com.avg.Antivirus</string>

<key>DYLD_LIBRARY_PATH</key>

<string>/Applications/AVG AntiVirus.app/Contents/Backend/lib</string>

</dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.avg.Antivirus</string>

<key>Program</key>

<string>/Applications/AVG AntiVirus.app/Contents/Backend/bin/avgd.sh</string>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.sophos.common.servicemanager.plist

- mod date: Feb 5 15:18:45 2015

- checksum: 1792128556

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

<key>Label</key>

<string>com.sophos.common.servicemanager</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Sophos Anti-Virus/SophosServiceManager.bundle/Contents/MacOS/SophosServiceManager</str ing>

</array>

<key>KeepAlive</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.teamviewer.Helper.plist

- mod date: Jan 12 02:36:09 2015

- checksum: 3374894509

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.teamviewer.Helper</string>

<key>MachServices</key>

<dict>

<key>com.teamviewer.Helper</key>

<true/>

</dict>

<key>Program</key>

<string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

- mod date: Feb 5 12:36:59 2015

- checksum: 1707497389

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Disabled</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.teamviewer.service</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

<string>-Module</string>

<string>Full</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WorkingDirectory</key>

<string>/Applications/TeamViewer.app/Contents/MacOS</string>

</dict>

</plist>

Contents of /etc/sysctl.conf

- mod date: Feb 3 15:13:12 2015

- checksum: 2295721791

kern.sysv.shmall=65536

kern.sysv.shmmax=268435456

kern.sysv.shmmni=64

kern.sysv.shmseg=64

Contents of Library/LaunchAgents/com.spotify.webhelper.plist

- mod date: Feb 5 12:37:20 2015

- checksum: 1669267066

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.spotify.webhelper</string>

<key>KeepAlive</key>

<dict>

<key>NetworkState</key>

<true/>

</dict>

<key>RunAtLoad</key>

<true/>

<key>Program</key>

<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

<key>SpotifyPath</key>

<string>/Applications/Spotify.app</string></dict>

</plist>

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Spotify

- /Applications/Spotify.app

Safari extensions

AdBlock

- com.betafish.adblockforsafari

Restricted files: 254

Elapsed time (sec): 275

Hello gents and ladies,

I'm having the same issue. I did the scan and I got the following results:

Start time: 10:32:47 02/11/15

Revision: 1166

Model Identifier: MacBookPro9,2

System Version: Mac OS X 10.7.5 (11G63b)

Kernel Version: Darwin 11.4.2

64-bit Kernel and Extensions: Yes

Time since boot: 1:20

Diagnostic reports

2015-02-04 AddressBookSourceSync crash

2015-02-04 SearchProtect crash

2015-02-04 quicklookd crash

Shutdowns

Feb 9 10:19:08 Cause: -60

Feb 10 13:13:34 Cause: -60

Log

Feb 5 23:41:40 PM notification timeout (pid 20, cupsd)

Feb 8 11:49:20 PM notification timeout (pid 20, cupsd)

Feb 8 18:26:57 PM notification timeout (pid 20, cupsd)

Feb 9 08:53:16 FAILURE: Could not send MIG reply: 0x10000003

Feb 9 09:46:53 PM notification timeout (pid 20, cupsd)

Feb 9 10:20:52 BootCache: could not terminate cache on bad hitrate

Feb 9 11:13:08 PM notification timeout (pid 20, cupsd)

Feb 9 18:40:48 PM notification timeout (pid 20, cupsd)

Feb 9 19:21:46 PM notification timeout (pid 20, cupsd)

Feb 9 20:15:57 check_vol_last_mod_time:XXX failed to get mount time (25; &mount_time == 0x10bb42538)

Feb 9 20:17:05 msdosfs_fat_uninit_vol: error 6 from msdosfs_fat_cache_flush

Feb 9 20:17:12 check_vol_last_mod_time:XXX failed to get mount time (25; &mount_time == 0x10bb42538)

Feb 9 20:35:25 msdosfs_fat_uninit_vol: error 6 from msdosfs_fat_cache_flush

Feb 9 23:40:34 PM notification timeout (pid 20, cupsd)

Feb 10 13:39:59 PM notification timeout (pid 20, cupsd)

Feb 10 20:58:41 PM notification timeout (pid 20, cupsd)

Daemons

com.adobe.fpsaud

com.apple.launchd.peruser.0

com.apple.launchd.peruser.26

com.apple.launchd.peruser.89

- status: -

com.apple.launchd.peruser.92

com.google.keystone.daemon

com.microsoft.office.licensing.helper

com.oracle.java.Helper-Tool

com.oracle.java.JavaUpdateHelper

Agents

com.adobe.ARM.UUID

com.apple.AirPortBaseStationAgent

com.apple.CSConfigDotMacCert--EMAIL-SharedServices

- status: 1

com.apple.mrt.uiagent

- status: 255

com.divx.agent.postinstall

com.divx.dms.agent

com.divx.update.agent

com.epson.eventmanager.agent

- status: -

com.facebook.videochat.NAME.updater

com.google.keystone.system.agent

com.hp.printerAgent

- status: -

com.jdibackup.ZipCloud.autostart

- status: 1

com.jdibackup.ZipCloud.notify

- status: 1

com.oracle.java.Java-Updater

com.webhelper

- status: -

com.webtools.update.agent

- status: -

Applications

/Applications/Address Book.app

- com.apple.AddressBook

/Applications/Adobe Reader.app

- com.adobe.Reader

/Applications/App Store.app

- com.apple.appstore

/Applications/Automator.app

- com.apple.Automator

/Applications/BitTorrent.app

- com.bittorrent.BitTorrent

/Applications/Calculator.app

- com.apple.calculator

/Applications/Chess.app

- com.apple.Chess

/Applications/DVD Player.app

- com.apple.DVDPlayer

/Applications/Dashboard.app

- com.apple.dashboardlauncher

/Applications/Dictionary.app

- com.apple.Dictionary

/Applications/Dropbox.app

- com.getdropbox.dropbox

/Applications/Epson Software/Event Manager.app

- com.epson.ProjectManager

/Applications/FaceTime.app

- com.apple.FaceTime

/Applications/Flip Player.app

- net.telestream.Flip-Player

/Applications/Font Book.app

- com.apple.FontBook

/Applications/GarageBand.app

- com.apple.garageband

/Applications/Google Chrome.app

- com.google.Chrome

/Applications/Image Capture.app

- com.apple.Image_Capture

/Applications/Launchpad.app

- com.apple.launchpad.launcher

/Applications/Mail.app

- com.apple.mail

/Applications/Microsoft Communicator.app

- com.microsoft.Communicator

/Applications/Microsoft Messenger.app

- com.microsoft.Messenger

/Applications/Microsoft Office 2011/Additional Tools/Microsoft Language Register/Microsoft Language Register.app

- com.microsoft.language_register

/Applications/Microsoft Office 2011/Microsoft Document Connection.app

- com.microsoft.DocumentConnection

/Applications/Microsoft Office 2011/Microsoft Excel.app

- com.microsoft.Excel

/Applications/Microsoft Office 2011/Microsoft Outlook.app

- com.microsoft.Outlook

/Applications/Microsoft Office 2011/Microsoft PowerPoint.app

- com.microsoft.Powerpoint

/Applications/Microsoft Office 2011/Microsoft Word.app

- com.microsoft.Word

/Applications/Microsoft Office 2011/Office/Alerts Daemon.app

- com.microsoft.AlertsDaemon

/Applications/Microsoft Office 2011/Office/Equation Editor.app

- com.microsoft.EquationEditor

/Applications/Microsoft Office 2011/Office/Microsoft Chart Converter.app

- com.microsoft.openxml.chart.app

/Applications/Microsoft Office 2011/Office/Microsoft Clip Gallery.app

- com.microsoft.ClipGallery

/Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app

- com.microsoft.outlook.database_daemon

/Applications/Microsoft Office 2011/Office/Microsoft Database Utility.app

- com.microsoft.outlook.database_utility

/Applications/Microsoft Office 2011/Office/Microsoft Graph.app

- com.microsoft.Graph

/Applications/Microsoft Office 2011/Office/Microsoft Office Reminders.app

- com.microsoft.outlook.office_reminders

/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

- com.microsoft.office.setupassistant

/Applications/Microsoft Office 2011/Office/Microsoft Query

- N/A

/Applications/Microsoft Office 2011/Office/Microsoft Upload Center.app

- com.microsoft.office.uploadcenter

/Applications/Microsoft Office 2011/Office/My Day.app

- com.microsoft.myday

/Applications/Microsoft Office 2011/Office/Open XML for Excel.app

- com.microsoft.openxml.excel.app

/Applications/Microsoft Office 2011/Office/SyncServicesAgent.app

- com.microsoft.SyncServicesAgent

/Applications/Mission Control.app

- com.apple.exposelauncher

/Applications/Photo Booth.app

- com.apple.PhotoBooth

/Applications/Preview.app

- com.apple.Preview

/Applications/QuickTime Player.app

- com.apple.QuickTimePlayerX

/Applications/Safari.app

- com.apple.Safari

/Applications/Skype.app

- com.skype.skype

/Applications/Stickies.app

- com.apple.Stickies

/Applications/System Preferences.app

- com.apple.systempreferences

/Applications/TextEdit.app

- com.apple.TextEdit

/Applications/Time Machine.app

- com.apple.backup.launcher

/Applications/Utilities/Activity Monitor.app

- com.apple.ActivityMonitor

/Applications/Utilities/Adobe Flash Player Install Manager.app

- com.adobe.flashplayer.installmanager

/Applications/Utilities/AirPort Utility.app

- com.apple.airport.airportutility

/Applications/Utilities/AppleScript Editor.app

- com.apple.ScriptEditor2

/Applications/Utilities/Audio MIDI Setup.app

- com.apple.audio.AudioMIDISetup

/Applications/Utilities/Bluetooth File Exchange.app

- com.apple.BluetoothFileExchange

/Applications/Utilities/Boot Camp Assistant.app

- com.apple.bootcampassistant

/Applications/Utilities/ColorSync Utility.app

- com.apple.ColorSyncUtility

/Applications/Utilities/Console.app

- com.apple.Console

/Applications/Utilities/DigitalColor Meter.app

- com.apple.DigitalColorMeter

/Applications/Utilities/Disk Utility.app

- com.apple.DiskUtility

/Applications/Utilities/Grab.app

- com.apple.Grab

/Applications/Utilities/Grapher.app

- com.apple.grapher

/Applications/Utilities/Keychain Access.app

- com.apple.keychainaccess

/Applications/Utilities/Migration Assistant.app

- com.apple.MigrateAssistant

/Applications/Utilities/Network Utility.app

- com.apple.NetworkUtility

/Applications/Utilities/Podcast Capture.app

- com.apple.PodcastCapture

/Applications/Utilities/Podcast Publisher.app

- com.apple.PodcastPublisher

/Applications/Utilities/RAID Utility.app

- com.apple.RAIDUtility

/Applications/Utilities/System Information.app

- com.apple.SystemProfiler

/Applications/Utilities/Terminal.app

- com.apple.Terminal

/Applications/Utilities/VoiceOver Utility.app

- com.apple.VoiceOverUtility

/Applications/Utilities/X11.app

- org.x.X11

/Applications/VLC.app

- org.videolan.vlc

/Applications/iCal.app

- com.apple.iCal

/Applications/iChat.app

- com.apple.iChat

/Applications/iMovie.app

- com.apple.iMovieApp

/Applications/iPhoto.app

- com.apple.iPhoto

/Applications/iTunes.app

- com.apple.iTunes

/Applications/uTorrent.app

- com.bittorrent.uTorrent

/Library/Application Support/DivX/DMSLaunch.app

- com.yourcompany.DMSLaunch

/Library/Application Support/DivX/DivXMediaServer.app

- com.divx.DivX_Media_Server

/Library/Application Support/DivX/DivXTransferWizard.app

- com.divx.TransferWizard

/Library/Application Support/DivX/DivXUpdate.app

- com.divx.DivXUpdate

/Library/Application Support/DivX/DivXUpdater.app

- com.divx.DivXUpdater

/Library/Application Support/Google/GoogleTalkPlugin.app

- com.google.GoogleTalkPluginD

/Library/Application Support/Google/GoogleVoiceAndVideoUninstaller.app

- com.google.GoogleTalkPluginUninstaller

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

- com.microsoft.autoupdate2

/Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

- com.microsoft.error_reporting

/Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

- com.microsoft.netlib.shipassertprocess

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

- com.microsoft.silverlight.sllauncher

/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

- com.apple.ScriptEditor.id.cocoa-applet-template

/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

- com.apple.ScriptEditor.id.droplet-with-settable-properties-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

- com.apple.ScriptEditor.id.file-processing-droplet-template

/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

- com.apple.ScriptEditor.id.image-file-processing-droplet-template

/Library/Application Support/hp/P1100_1560_1600Series/HP Firmware Upgrade Utility.app

- com.yourcompany.HP_Firmware_Upgrade_Utility

/Library/Application Support/hp/P1100_1560_1600Series/HP ePrint.app

- com.yourcompany.HP_ePrint

/Library/Image Capture/Devices/Canon IJScanner2.app

- jp.co.canon.ijscanner2.scanner.ica

/Library/Image Capture/Devices/EPSON Scanner.app

- com.epson.scanner.ica

/Library/Printers/Canon/BJPrinter/Utilities/BJPrinterUtility2.app

- jp.co.canon.bj.print.app.bjprinterutility2

/Library/Printers/Canon/BJPrinter/Utilities/CanonIJPrinterUtility.app

- jp.co.canon.bj.print.app.canonijprinterutility

/Library/Printers/EPSON/Fax/AutoSetupTool/EPFaxAutoSetupTool.app

- com.epson.ijfax.app.EPFaxAutoSetupTool

/Library/Printers/EPSON/Fax/FaxIOSupport/epsonfax.app

- com.epson.ijfax.app.epsonfax

/Library/Printers/EPSON/Fax/Filter/commandFilter.app

- com.epson.ijfax.filter.commandFilter

/Library/Printers/EPSON/Fax/Filter/rastertoepfax.app

- com.epson.ijfax.filter.rastertoepfax

/Library/Printers/EPSON/Fax/Utility/FAX Utility.app

- com.epson.ijfax.utility.FAXUtility

/Library/Printers/EPSON/Fax/Utility/Fax Receive Monitor.app

- com.epson.ijfax.app.FaxReceiveMonitor

/Library/Printers/EPSON/InkjetPrinter2/AutoSetupTool/EPIJAutoSetupTool2.app

- com.epson.ijprinter.EPIJAutoSetupTool2

/Library/Printers/EPSON/InkjetPrinter2/Filter/commandtoescp.app

- com.epson.ijprinter.commandtoescp

/Library/Printers/EPSON/InkjetPrinter2/Filter/pdftopdf2.app

- com.epson.ijprinter.pdftopdf2

/Library/Printers/EPSON/InkjetPrinter2/Filter/rastertoescpII.app

- com.epson.ijprinter.rastertoescpII

/Library/Printers/EPSON/InkjetPrinter2/Utility/UT4/Epson Printer Utility 4.app

- com.epson.ijprinter.EpsonPrinterUtility4

/Library/Printers/EPSON/InkjetPrinter2/Utility/UTL/Epson Printer Utility Lite.app

- com.epson.ijprinter.EpsonPrinterUtilityLite

/Library/Printers/hp/laserjet/P1100_1560_1600Series/HP LaserJet Professional Utility.app

- com.hp.HP_LaserJet_Professional_Utility

/Library/Printers/hp/laserjet/P1100_1560_1600Series/HP Uninstaller.app

- com.yourcompany.Uninstaller

/Library/Printers/hp/laserjet/P1100_1560_1600Series/HtmlConfig.app

- com.yourcompany.HtmlConfig

/Library/Printers/hp/laserjet/P1100_1560_1600Series/StatusMonitor.app

- com.yourcompany.StatusMonitor

/Library/Printers/hp/laserjet/P1100_1560_1600Series/hp LaserJet Utility.app

- com.Marvell.print.HP1100.HPUtilityapp

/Library/Scripts/ColorSync/Embed.app

- N/A

/Library/Scripts/ColorSync/Extract.app

- N/A

/Library/Scripts/ColorSync/Match.app

- N/A

/Library/Scripts/ColorSync/Proof.app

- N/A

/Library/Scripts/ColorSync/Remove.app

- N/A

/Library/Scripts/ColorSync/Rename.app

- N/A

/Library/Scripts/ColorSync/Set Info.app

- N/A

/Library/Scripts/ColorSync/Show Info.app

- N/A

/System/Library/ColorSync/Calibrators/Display Calibrator.app

- com.apple.ColorSyncCalibrator

/System/Library/CoreServices/AVRCPAgent.app

- com.apple.AVRCPAgent

/System/Library/CoreServices/AddPrinter.app

- com.apple.print.add

/System/Library/CoreServices/AddressBookUrlForwarder.app

- com.apple.AddressBook.UrlForwarder

/System/Library/CoreServices/AirPort Base Station Agent.app

- com.apple.AirPortBaseStationAgent

/System/Library/CoreServices/Apple80211Agent.app

- com.apple.airport.helper

/System/Library/CoreServices/AppleFileServer.app

- N/A

/System/Library/CoreServices/AppleGraphicsWarning.app

- com.apple.AppleGraphicsWarning

/System/Library/CoreServices/AppleScript Runner.app

- com.apple.AppleScriptRunner

/System/Library/CoreServices/AppleScript Utility.app

- com.apple.AppleScriptUtility

/System/Library/CoreServices/Archive Utility.app

- com.apple.archiveutility

/System/Library/CoreServices/Automator Launcher.app

- com.apple.Automator_Launcher

/System/Library/CoreServices/Automator Runner.app

- com.apple.AutomatorRunner

/System/Library/CoreServices/Bluetooth Setup Assistant.app

- com.apple.BluetoothSetupAssistant

/System/Library/CoreServices/BluetoothAudioAgent.app

- com.apple.BluetoothAudioAgent

/System/Library/CoreServices/BluetoothUIServer.app

- com.apple.BluetoothUIServer

/System/Library/CoreServices/Captive Network Assistant.app

- com.apple.CaptiveNetworkAssistant

/System/Library/CoreServices/Certificate Assistant.app

- com.apple.CertificateAssistant

/System/Library/CoreServices/CoreLocationAgent.app

- com.apple.CoreLocationAgent

/System/Library/CoreServices/CoreServicesUIAgent.app

- com.apple.coreservices.uiagent

/System/Library/CoreServices/Database Events.app

- com.apple.databaseevents

/System/Library/CoreServices/Directory Utility.app

- com.apple.DirectoryUtility

/System/Library/CoreServices/DiskImageMounter.app

- com.apple.DiskImageMounter

/System/Library/CoreServices/Dock.app

- com.apple.dock

/System/Library/CoreServices/Expansion Slot Utility.app

- com.apple.ExpansionSlotUtility

/System/Library/CoreServices/File Sync.app

- com.apple.FileSyncUI

/System/Library/CoreServices/FileSyncAgent.app

- com.apple.FileSyncAgent

/System/Library/CoreServices/Finder.app

- com.apple.finder

/System/Library/CoreServices/Folder Actions Dispatcher.app

- com.apple.FolderActionsDispatcher

/System/Library/CoreServices/Folder Actions Setup.app

- com.apple.FolderActionsSetup

/System/Library/CoreServices/HelpViewer.app

- com.apple.helpviewer

/System/Library/CoreServices/Image Events.app

- com.apple.imageevents

/System/Library/CoreServices/Installer.app

- com.apple.installer

/System/Library/CoreServices/Jar Launcher.app

- com.apple.JarLauncher

/System/Library/CoreServices/Java Web Start.app

- com.apple.JavaWebStart

/System/Library/CoreServices/KeyboardSetupAssistant.app

- com.apple.KeyboardSetupAssistant

/System/Library/CoreServices/Language Chooser.app

- com.apple.LanguageChooser

/System/Library/CoreServices/LocationMenu.app

- com.apple.locationmenu

/System/Library/CoreServices/MRTAgent.app

- com.apple.mrt.uiagent

/System/Library/CoreServices/ManagedClient.app

- com.apple.ManagedClient

/System/Library/CoreServices/Memory Slot Utility.app

- com.apple.MemorySlotUtility

/System/Library/CoreServices/NetAuthAgent.app

- com.apple.NetAuthAgent

/System/Library/CoreServices/Network Diagnostics.app

- com.apple.NetworkDiagnostics

/System/Library/CoreServices/Network Setup Assistant.app

- com.apple.NetworkSetupAssistant

/System/Library/CoreServices/OBEXAgent.app

- com.apple.OBEXAgent

/System/Library/CoreServices/ODSAgent.app

- com.apple.ODSAgent

/System/Library/CoreServices/PreferenceSyncClient.app

- com.apple.PreferenceSync

/System/Library/CoreServices/Printer Setup Utility.app

- com.apple.print.PrintCenter

/System/Library/CoreServices/Problem Reporter.app

- com.apple.ProblemReporter

/System/Library/CoreServices/RegisterPluginIMApp.app

- com.apple.pluginIM.pluginIMRegistrator

/System/Library/CoreServices/RemoteManagement/ARDAgent.app

- com.apple.RemoteDesktopAgent

/System/Library/CoreServices/Screen Sharing.app

- com.apple.ScreenSharing

/System/Library/CoreServices/SecurityAgent.app

- com.apple.securityagent

/System/Library/CoreServices/SecurityFixer.app

- com.apple.SecurityFixer

/System/Library/CoreServices/Setup Assistant.app

- com.apple.SetupAssistant

/System/Library/CoreServices/Software Update.app

- com.apple.SoftwareUpdate

/System/Library/CoreServices/System Events.app

- com.apple.systemevents

/System/Library/CoreServices/SystemUIServer.app

- com.apple.systemuiserver

/System/Library/CoreServices/Ticket Viewer.app

- com.apple.Ticket-Viewer

/System/Library/CoreServices/UnmountAssistantAgent.app

- com.apple.UnmountAssistantAgent

/System/Library/CoreServices/UserNotificationCenter.app

- com.apple.UserNotificationCenter

/System/Library/CoreServices/VoiceOver.app

- com.apple.VoiceOver

/System/Library/CoreServices/Wi-Fi Diagnostics.app

- com.apple.wifi.diagnostics

/System/Library/CoreServices/ZoomWindow.app

- com.apple.ZoomWindow.app

/System/Library/CoreServices/iCalAlarm.app

- com.apple.iCal.Alarm

/System/Library/CoreServices/loginwindow.app

- com.apple.loginwindow

/System/Library/CoreServices/rcd.app

- com.apple.rcd

/System/Library/Filesystems/AppleShare/check_afp.app

- com.apple.check_afp

/System/Library/Filesystems/webdav.fs/Support/webdav_cert_ui.app

- com.apple.WebDAVFS.webdav_cert_ui

/System/Library/Image Capture/Automatic Tasks/Build Web Page.app

- com.apple.BuildWebPage

/System/Library/Image Capture/Automatic Tasks/MakePDF.app

- com.apple.MakePDF

/System/Library/Image Capture/Devices/MassStorageCamera.app

- com.apple.MassStorageCamera

/System/Library/Image Capture/Devices/PTPCamera.app

- com.apple.PTPCamera

/System/Library/Image Capture/Devices/TWAINBridge.app

- com.apple.TWAINBridge

/System/Library/Image Capture/Devices/Type4Camera.app

- com.apple.Type4Camera

/System/Library/Image Capture/Devices/Type5Camera.app

- com.apple.Type5Camera

/System/Library/Image Capture/Devices/Type8Camera.app

- com.apple.Type8Camera

/System/Library/Image Capture/Devices/VirtualScanner.app

- com.apple.VirtualScanner

/System/Library/Image Capture/Support/Application/AutoImporter.app

- com.apple.AutoImporter

/System/Library/Image Capture/Support/Image Capture Extension.app

- com.apple.ImageCaptureExtension2

/System/Library/Input Methods/50onPaletteServer.app

- com.apple.50onPaletteIM

/System/Library/Input Methods/CharacterPalette.app

- com.apple.CharacterPaletteIM

/System/Library/Input Methods/InkServer.app

- com.apple.ink.inkserver

/System/Library/Input Methods/KeyboardViewer.app

- com.apple.KeyboardViewer

/System/Library/Input Methods/KoreanIM.app

- com.apple.inputmethod.Korean

/System/Library/Input Methods/Kotoeri.app

- com.apple.inputmethod.Kotoeri

/System/Library/Input Methods/PluginIM.app

- com.apple.inputmethod.PluginIM

/System/Library/Input Methods/PressAndHold.app

- com.apple.PressAndHold

/System/Library/Input Methods/SCIM.app

- com.apple.inputmethod.SCIM

/System/Library/Input Methods/TCIM.app

- com.apple.inputmethod.TCIM

/System/Library/Input Methods/TamilIM.app

- com.apple.inputmethod.Tamil

/System/Library/Input Methods/TrackpadIM.app

- com.apple.inputmethod.ChineseHandwriting

/System/Library/Input Methods/VietnameseIM.app

- com.apple.inputmethod.VietnameseIM

/System/Library/Services/ChineseTextConverterService.app

- com.apple.ChineseTextConverterService

/System/Library/Services/ImageCaptureService.app

- com.apple.ImageCaptureService

/System/Library/Services/SpeechService.service

- com.apple.speech.SpeechService

/System/Library/Services/Spotlight.service

- com.apple.SpotlightService

/System/Library/Services/SummaryService.app

- com.apple.SummaryService

/System/Library/Speech/Recognizers/AppleSpeakableItems.SpeechRecognizer/Content s/PlugIns/SpeakableItems.app

- com.apple.speech.recognition.SpeakableItemsApp

/Users/USER/Applications/Chrome Apps.localized/app_list.app

- com.google.Chrome.app.Profile-1-app_list

/Users/USER/Downloads/Cuevana Storm.app

- com.intel.nw

/Users/USER/Downloads/Popcorn-Time 2.app

- com.intel.nw

/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookVideoCalling.app

- com.Skype.FacebookVideoCalling

/Users/USER/Library/Application Support/Google/Chrome/Profile 2/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Profile 2 aohghmighlieiainnegkcijnfilokake.app

- com.google.Chrome.app.Profile-2-aohghmighlieiainnegkcijnfilokake-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 2/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Profile 2 apdfllckaahabafndbhieahigkjlhalf.app

- com.google.Chrome.app.Profile-2-apdfllckaahabafndbhieahigkjlhalf-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 2/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Profile 2 blpcfgokakmgnkcojhhkbfbldkacnbeo.app

- com.google.Chrome.app.Profile-2-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 2/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Profile 2 coobgpohoikkiipiblmjeljniedjpjpf.app

- com.google.Chrome.app.Profile-2-coobgpohoikkiipiblmjeljniedjpjpf-internal

/Users/USER/Library/Application Support/Google/Chrome/Profile 2/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Profile 2 pjkljhegncpnkpknbcohdijeoejaedia.app

- com.google.Chrome.app.Profile-2-pjkljhegncpnkpknbcohdijeoejaedia-internal

/Users/USER/Library/Printers/EPSON XP-610 Series.app

- com.apple.print.PrinterProxy

/usr/libexec/MiniTerm.app

- com.apple.pppminiterm

/usr/share/java/Tools/Applet Launcher.app

- com.apple.AppletLauncher

/usr/share/java/Tools/Jar Bundler.app

- com.apple.JarBundler

/usr/share/java/Tools/Java VisualVM.app

- com.apple.java.VisualVM.launcher

Frameworks

/Library/Frameworks/DivX Toolkit.framework

- com.divx.divxtoolkit

/Library/Frameworks/TSLicense.framework

- net.telestream.license

/System/Library/PrivateFrameworks/CSLogging.framework

- N/A

/System/Library/PrivateFrameworks/PostgreSQLClient.framework

- N/A

/System/Library/PrivateFrameworks/SpnegoApache.framework

- N/A

PrefPane

/Library/PreferencePanes/Flash Player.prefPane

- com.adobe.flashplayerpreferences

/Library/PreferencePanes/Flip4Mac WMV.prefPane

- net.telestream.wmv.prefpane

Bundles

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

- com.adobe.acrobat.pdfviewer

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

- com.adobe.acrobat.pdfviewerNPAPI

/Library/Internet Plug-Ins/DivXBrowserPlugin.plugin

- com.divx.DivXBrowserPlugin

/Library/Internet Plug-Ins/Flash Player.plugin

- com.macromedia.Flash

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

- net.telestream.wmv.plugin

/Library/Internet Plug-Ins/OVSHelper.plugin

- com.divx.OVSHelper

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

- com.microsoft.sharepoint.browserplugin

/Library/Internet Plug-Ins/Silverlight.plugin

- com.microsoft.SilverlightPlugin

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

- com.google.googletalkbrowserplugin

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

- com.google.o1dbrowserplugin

/Library/Printers/EPSON/InkjetPrinter2/PDE/PDECPlugin01.plugin

- com.epson.ijprinter.PDECPlugin01

/Library/Printers/hp/hpio/USBGenericPrinterClass.plugin

- com.marvell.cups.classdriver

/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/14.0.0.145/PepperFlashPlayer.plugin

- com.macromedia.PepperFlashPlayer.pepper

/Users/USER/Library/Application Support/MacKeeper Helper/NoticeEngine.plugin

- com.zeobit.MacKeeper.plugin.NoticeEngine

/usr/share/servermgrd/bundles/servermgr_addressbook.bundle

- null

dylibs

/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

/Library/Application Support/DivX/DesktopService/libDivXDownloadManager.dylib

/Library/Application Support/DivX/Libraries/DivXUpdateCheckDll.dylib

/Library/Application Support/DivX/Libraries/libDivXDesktopSupport.dylib

/Library/Application Support/DivX/Libraries/libicudata.40.1.dylib

/Library/Application Support/DivX/Libraries/libicuuc.40.1.dylib

/Library/Application Support/DivX/QtPlugins/accessible/libqtaccessiblewidgets.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqcncodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqjpcodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqkrcodecs.dylib

/Library/Application Support/DivX/QtPlugins/codecs/libqtwcodecs.dylib

/Library/Application Support/DivX/QtPlugins/iconengines/libqsvgicon.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqgif.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqico.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqjpeg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqmng.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqsvg.dylib

/Library/Application Support/DivX/QtPlugins/imageformats/libqtiff.dylib

/Library/Application Support/DivX/QtPlugins/script/libqtscriptdbus.dylib

/Library/Application Support/DivX/QtPlugins/sqldrivers/libqsqlite.dylib

/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.758/_platform_specific/mac_x64/libwidev inecdm.dylib

Contents of /Library/LaunchAgents/com.divx.dms.agent.plist

- mod date: Feb 7 03:05:51 2013

- checksum: 3097025559

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.divx.dms.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/DivX/DMSLaunch.app/Contents/MacOS/DMSLaunch</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.divx.update.agent.plist

- mod date: Feb 7 03:07:25 2013

- checksum: 3867571547

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.divx.update.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/DivX/DivXUpdate.app/Contents/MacOS/DivXUpdate</string>

<string>/silent</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>10800</integer>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.epson.eventmanager.agent.plist

- mod date: Sep 21 11:00:00 2014

- checksum: 1862971771

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<dict>

<key>PathState</key>

<dict>

<key>/Applications/Epson Software/Event Manager.app/Contents/Resources/Assistants/Event Manager/EEventManager.app</key>

<true/>

</dict>

</dict>

<key>Label</key>

<string>com.epson.eventmanager.agent</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Epson Software/Event Manager.app/Contents/Resources/Assistants/Event Manager/EEventManager.app/Contents/MacOS/EEventManager</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

- mod date: Feb 24 21:51:15 2013

- checksum: 529522755

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.oracle.java.Java-Updater</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

<string>-bgcheck</string>

</array>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>10</integer>

<key>Minute</key>

<integer>20</integer>

<key>Weekday</key>

<integer>2</integer>

</dict>

</dict>

...and 1 more line(s)

Contents of /System/Library/LaunchAgents/com.apple.iCalPush.plist

- mod date: May 8 19:40:06 2012

- checksum: 2684394709

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.apple.iCalPush</string>

<key>LimitLoadToSessionType</key>

<array>

<string>LoginWindow</string>

<string>Aqua</string>

</array>

<key>MachServices</key>

<dict>

<key>com.apple.iCalPush</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Applications/iCal.app/Contents/Resources/iCalPush</string>

</array>

</dict>

</plist>

Contents of /System/Library/LaunchAgents/org.x.startx.plist

- mod date: May 8 19:43:37 2012

- checksum: 355348819

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>org.x.startx</string>

<key>ProgramArguments</key>

<array>

<string>/usr/X11/bin/startx</string>

</array>

<key>Sockets</key>

<dict>

<key>org.x:0</key>

<dict>

<key>SecureSocketWithKey</key>

<string>DISPLAY</string>

</dict>

</dict>

<key>ServiceIPC</key>

<true/>

<key>EnableTransactions</key>

<true/>

</dict>

</plist>

Contents of /System/Library/LaunchDaemons/com.apple.xprotectupdater.plist

- mod date: Jan 28 19:32:52 2014

- checksum: 2661649342

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.apple.xprotectupdater</string>

<key>ProgramArguments</key>

<array>

<string>/usr/libexec/XProtectUpdater</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>18</integer>

<key>Minute</key>

<integer>46</integer>

</dict>

</dict>

</plist>

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: Jul 9 12:09:33 2012

- checksum: 408149527

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>12600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert--EMAIL-SharedServices.Agent.p list

- mod date: Jun 28 18:01:21 2012

- checksum: 3384124396

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.apple.CSConfigDotMacCert--EMAIL-SharedServices</string>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>LowPriorityIO</key>

<true/>

<key>Nice</key>

<integer>10</integer>

<key>ProgramArguments</key>

<array>

<string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>

<string>-l</string>

<string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>

<string>-u</string>

<string>-EMAIL</string>

<string>-t</string>

<string>SharedServices</string>

<string>-s</string>

</array>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.divx.agent.postinstall.plist

- mod date: Mar 10 22:50:04 2013

- checksum: 3163907459

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.divx.agent.postinstall</string>

<key>LimitToSessionType</key>

<string>Aqua</string>

<key>LaunchOnlyOnce</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>//Library/Internet Plug-Ins/DivXBrowserPlugin.plugin/Contents/Resources/extensions-installer</stri ng>

<string>install</string>

<string>safari</string>

<string>DivXHTML5</string>

<string>//Library/Internet Plug-Ins/DivXBrowserPlugin.plugin/Contents/Resources/DivXHTML5.safariextz</stri ng>

</array>

</dict>

</plist>

Contents of Library/LaunchAgents/com.facebook.videochat.NAME.plist

- mod date: Aug 12 20:29:19 2014

- checksum: 1295163495

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.facebook.videochat.NAME.updater</string>

<key>ProgramArguments</key>

<array>

<string>/usr/bin/java</string>

<string>-cp</string>

<string>/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookUpdate.jar</string>

<string>FacebookUpdate</string>

<string>com.facebook.peep</string>

<string>3.1.0.522</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>10800</integer>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>

Contents of Library/LaunchAgents/com.hp.printerAgent.plist

- mod date: Aug 30 05:10:29 2011

- checksum: 2038933932

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.hp.printerAgent</string>

<key>OnDemand</key>

<false/>

<key>Program</key>

<string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>

<key>ProgramArguments</key>

<array>

<string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>

</array>

<key>RunAtLoad</key>

<true/>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MyListenerSocket</key>

<dict>

<key>SockServiceName</key>

<string>51100</string>

</dict>

...and 3 more line(s)

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

- mod date: Jan 18 10:27:59 2015

- checksum: 4222549128

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.autostart</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

<string>-n</string>

<string>--args</string>

<string>9</string>

<string>-l</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

- mod date: Jan 18 10:27:59 2015

- checksum: 58284622

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.jdibackup.ZipCloud.notify</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>

<string>--args</string>

<string>7</string>

<string>1</string>

</array>

<key>StandardOutPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>

<key>StandardErrorPath</key>

<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>

<key>StartInterval</key>

<integer>1200</integer>

<key>RunAtLoad</key>

<false/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.webhelper.plist

- mod date: Feb 3 09:48:01 2015

- checksum: 2986989531

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.webhelper</string>

<key>EnableGlobbing</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>

<string>-guid</string>

<string>UUID</string>

<string>-source</string>

<string>u1506</string>

<string>-brand</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

...and 6 more line(s)

Contents of Library/LaunchAgents/com.webtools.update.agent.plist

- mod date: Feb 3 09:48:19 2015

- checksum: 4241038862

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnableGlobbing</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.webtools.update.agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/WebTools/UpdateAgent/scheduler.sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

<key>ThrottleInterval</key>

<integer>10</integer>

</dict>

...and 1 more line(s)

Font issues: 20

Bad plists

/Library/Preferences/com.epson.Epson Event Manager.UnInstallList.plist

/Library/Preferences/com.epson.Epson Scanner ICA Driver.UnInstallList.plist

/Library/Preferences/com.epson.Inkjet Printer Driver.UnInstallList.plist

Library/Preferences/com.solidstatenetworks.awkhost.plist

Library/Preferences/com.solidstatenetworks.host.plist

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

AdobeResourceSynchronizer

- /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app

Dropbox

- /Applications/Dropbox.app

Safari extensions

AdBlock

- com.betafish.adblockforsafari

DivX Plus Web Player HTML5 <video>

- com.divx.DivXHTML5

Restricted files: 127

Lockfiles: 2

Elapsed time (sec): 289

Start time: 15:07:38 02/16/15

Revision: 1166

Model Identifier: MacBook3,1

Memory: 2 GB

System Version: Mac OS X 10.6.8 (10K549)

Kernel Version: Darwin 10.8.0

64-bit Kernel and Extensions: No

Time since boot: 49 minutes

Root access: No

Memory

BANK 0/DIMM0:

Size: 1 GB

Speed: 667 MHz

Status: OK

Manufacturer: 0xCE00000000000000

BANK 1/DIMM1:

Size: 1 GB

Speed: 667 MHz

Status: OK

Manufacturer: 0xAD00000000000000

SerialATA

ST9160310AS

USB

USB 2.0 Hub [MTT] (TERMINUS TECHNOLOGY INC.)

2300 Series (Lexmark International Inc.)

Diagnostic reports

2015-02-11 system_profiler crash x3

2015-02-11 update.2RNuveIh crash

2015-02-11 update.Glk1Z30f crash

2015-02-11 update.Lr8kXw9K crash

2015-02-11 update.MPGRwdpH crash

2015-02-11 update.RaoXqURz crash

2015-02-11 update.UjMxExm5 crash

2015-02-11 update.V1Tw1lG3 crash

2015-02-11 update.YRrkyupY crash

2015-02-11 update.ZYblVTl0 crash

2015-02-11 update.b2tLuq1w crash

2015-02-11 update.xCD43rK3 crash

2015-02-11 update.za7pA4fX crash

2015-02-12 update.oahvyuFy crash

2015-02-13 Safari crash x2

2015-02-13 WebProcess crash

2015-02-13 update.X6HNc79e crash

2015-02-14 update.e8mnQgiv crash

2015-02-15 WebProcess crash x2

2015-02-15 update.VuMnXe7B crash

2015-02-16 update.zH1u3R8l crash

Log

Mon Feb 16 15:04:36 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:04:46 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:04:56 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:05:06 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:05:16 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:05:26 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:05:36 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:05:46 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:05:56 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:06:06 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:06:16 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:06:26 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:06:36 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:06:46 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:06:56 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:07:06 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:07:16 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:07:26 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:07:36 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:07:46 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:07:56 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:08:06 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:08:16 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:08:26 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Mon Feb 16 15:08:36 com.zeobit.MacKeeper.Helper: Throttling respawn: Will start in 10 seconds

Activity

CPU: user 31%, system 10%

Bad kernel extensions

/System/Library/Extensions/AppleUSBEthernetHost.kext

Loaded kernel extensions

e.AppleFSCompression.AppleFSCompressionTypeZlib (1.0.0d1)

e.BootCache (31.1)

e.Dont_Steal_Mac_OS_X (7.0.0)

e.driver.ACPI_SMC_PlatformPlugin (4.7.0a1)

e.driver.AirPortBrcm43224 (428.42.4)

e.driver.AppleACPIButtons (1.3.6)

e.driver.AppleACPIEC (1.3.6)

e.driver.AppleACPIPlatform (1.3.6)

e.driver.AppleAHCIPort (2.1.7)

e.driver.AppleAPIC (1.4)

e.driver.AppleBacklight (170.0.46)

e.driver.AppleBacklightExpert (1.0.1)

e.driver.AppleEFINVRAM (1.4.0)

e.driver.AppleEFIRuntime (1.4.0)

e.driver.AppleFWOHCI (4.7.3)

e.driver.AppleHDA (2.0.5f14)

e.driver.AppleHDAController (2.0.5f14)

e.driver.AppleHPET (1.5)

e.driver.AppleHWSensor (1.9.3d0)

e.driver.AppleIntelCPUPowerManagement (142.6.0)

e.driver.AppleIntelCPUPowerManagementClient (142.6.0)

e.driver.AppleIntelGMAX3100 (6.3.6)

e.driver.AppleIntelGMAX3100FB (6.3.6)

e.driver.AppleIntelMeromProfile (19)

e.driver.AppleIntelPIIXATA (2.5.1)

e.driver.AppleLPC (1.5.1)

e.driver.AppleMCCSControl (1.0.20)

e.driver.AppleProfileCallstackAction (20)

e.driver.AppleProfileKEventAction (10)

e.driver.AppleProfileReadCounterAction (17)

e.driver.AppleProfileRegisterStateAction (10)

e.driver.AppleProfileThreadInfoAction (14)

e.driver.AppleProfileTimestampAction (10)

e.driver.AppleRTC (1.3.1)

e.driver.AppleSMBIOS (1.7)

e.driver.AppleSMC (3.1.0d5)

e.driver.AppleSmartBatteryManager (160.0.0)

e.driver.AppleUSBBluetoothHCIController (2.4.5f3)

e.driver.AppleUSBComposite (3.9.0)

e.driver.AppleUSBEHCI (4.2.4)

e.driver.AppleUSBHub (4.2.4)

e.driver.AppleUSBMergeNub (4.2.4)

e.driver.AppleUSBTCKeyEventDriver (201.6)

e.driver.AppleUSBTCKeyboard (201.6)

e.driver.AppleUSBTrackpad (201.6)

e.driver.AppleUSBUHCI (4.2.0)

e.driver.AppleUpstreamUserClient (3.5.7)

e.driver.AudioAUUC (1.57)

e.driver.AudioIPCDriver (1.1.6)

e.driver.CSRUSBBluetoothHCIController (2.4.5f3)

e.driver.DiskImages (289)

e.driver.DspFuncLib (2.0.5f14)

e.driver.IOPlatformPluginFamily (4.7.0a1)

e.driver.SMCMotionSensor (3.0.1d2)

e.driver.XsanFilter (402.1)

e.filesystems.autofs (2.1.0)

e.iokit.AppleProfileFamily (41)

e.iokit.AppleYukon2 (3.2.1b1)

e.iokit.IO80211Family (320.1)

e.iokit.IOACPIFamily (1.3.0)

e.iokit.IOAHCIBlockStorage (1.6.4)

e.iokit.IOAHCIFamily (2.0.6)

e.iokit.IOATAFamily (2.5.1)

e.iokit.IOATAPIProtocolTransport (2.5.1)

e.iokit.IOAudioFamily (1.8.3fc2)

e.iokit.IOBDStorageFamily (1.6)

e.iokit.IOBluetoothFamily (2.4.5f3)

e.iokit.IOBluetoothSerialManager (2.4.5f3)

e.iokit.IOCDStorageFamily (1.6.1)

e.iokit.IODVDStorageFamily (1.6)

e.iokit.IOFireWireFamily (4.2.6)

e.iokit.IOFireWireIP (2.0.3)

e.iokit.IOGraphicsFamily (2.2.1)

e.iokit.IOHDAFamily (2.0.5f14)

e.iokit.IOHIDFamily (1.6.6)

e.iokit.IONDRVSupport (2.2.1)

e.iokit.IONetworkingFamily (1.10)

e.iokit.IOPCIFamily (2.6.5)

e.iokit.IOSCSIArchitectureModelFamily (2.6.8)

e.iokit.IOSCSIMultimediaCommandsDevice (2.6.8)

e.iokit.IOSMBusFamily (1.1)

e.iokit.IOSerialFamily (10.0.3)

e.iokit.IOStorageFamily (1.6.3)

e.iokit.IOSurface (74.2)

e.iokit.IOUSBFamily (4.2.4)

e.iokit.IOUSBHIDDriver (4.2.0)

e.iokit.IOUSBUserClient (4.2.4)

e.iokit.SCSITaskUserClient (2.6.8)

e.kext.AppleMatch (1.0.0d1)

e.kext.OSvKernDSPLib (1.3)

e.nke.applicationfirewall (2.1.14)

e.security.TMSafetyNet (6)

e.security.quarantine (0)

e.security.sandbox (1)

ing74.driver.Soundflower (1.5.1)

irit.driver.rbiokithelper (1.9.1)

Agents

com.abbott.mal.launchclient

- status: -

com.apple.AirPortBaseStationAgent

- status: -

com.apple.Kerberos.renew.plist

- status: 1

com.apple.ServiceManagement.LoginItems

com.apple.mrt.uiagent

- status: 255

com.apple.servernotifyd

com.apple.store_helper

com.apple.storeagent

com.google.keystone.user.agent

com.webhelper

- status: -

com.webtools.update.agent

- status: -

com.zeobit.MacKeeper.Helper

- status: 1

org.x.startx

Startup items

/Library/StartupItems/CandelairPrefsTool/CandelairPrefsTool

/Library/StartupItems/CandelairPrefsTool/StartupParameters.plist

Extensions

/System/Library/Extensions/AppleBacklightExpert.kext

- N/A

/System/Library/Extensions/AppleMCCSControl.kext

- N/A

/System/Library/Extensions/AudioAUUC.kext

- N/A

/System/Library/Extensions/RBIOKitHelper.kext

- N/A

/System/Library/Extensions/Soundflower.kext

- N/A

Applications

/Applications/3Connect/3Connect Setup Assistant.app

- com.birdstep.easyconnect.assistant

/Applications/3Connect/3Connect.app

- com.birdstep.easyconnect.controlpanel

/Applications/3Connect/Uninstaller.app

- N/A

/Applications/Address Book.app

- com.apple.AddressBook

/Applications/App Store.app

- com.apple.appstore

/Applications/Automator.app

- com.apple.Automator

/Applications/BBC iPlayer Desktop.app

- BBCiPlayerDesktop.UUID.1

/Applications/Calculator.app

- com.apple.calculator

/Applications/Carbon Copy Cloner.app

- com.bombich.ccc

/Applications/Chess.app

- com.apple.Chess

/Applications/DVD Player.app

- com.apple.DVDPlayer

/Applications/Dashboard.app

- com.apple.dashboardlauncher

/Applications/Dictionary.app

- com.apple.Dictionary

/Applications/Dropbox.app

- com.getdropbox.dropbox

/Applications/Font Book.app

- com.apple.FontBook

/Applications/FreeStyle Auto-Assist/FreeStyle Auto-Assist.app

- com.abbott.FreeStyleAuto-Assist

/Applications/Front Row.app

- com.apple.frontrowlauncher

/Applications/GarageBand.app

- com.apple.garageband

/Applications/Image Capture.app

- com.apple.Image_Capture

/Applications/Mail.app

- com.apple.mail

/Applications/Microsoft AutoUpdate.app

- com.microsoft.autoupdate

/Applications/Microsoft Office 2004/Additional Tools/Handheld Sync Installer

- com.MindVision.VISEX

/Applications/Microsoft Office 2004/Additional Tools/Microsoft Language Register/Microsoft Language Register

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Remote Desktop Connection/Remote Desktop Connection

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Remove Office/Remove Office

- N/A

/Applications/Microsoft Office 2004/Additional Tools/Windows Media Installer

- N/A

/Applications/Microsoft Office 2004/MSN Messenger.app

- Microsoft/com.microsoft.Messenger

/Applications/Microsoft Office 2004/Microsoft Entourage

- N/A

/Applications/Microsoft Office 2004/Microsoft Excel

- N/A

/Applications/Microsoft Office 2004/Microsoft PowerPoint

- N/A

/Applications/Microsoft Office 2004/Microsoft Word

- N/A

/Applications/Microsoft Office 2004/Office/Alerts Daemon.app

- Microsoft/com.microsoft.AlertsDaemon

/Applications/Microsoft Office 2004/Office/Database Utility

- N/A

/Applications/Microsoft Office 2004/Office/Equation Editor

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Cert Manager.app

- com.microsoft.certmgr

/Applications/Microsoft Office 2004/Office/Microsoft Clip Gallery

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Database Daemon

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Error Reporting.app

- com.microsoft.error_reporting

/Applications/Microsoft Office 2004/Office/Microsoft Graph

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Office Notifications

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Query

- N/A

/Applications/Microsoft Office 2004/Office/Microsoft Sync Services.app

- com.microsoft.entourage.syncservices

/Applications/Microsoft Office 2004/Office/Organization Chart

- N/A

/Applications/Microsoft Office 2004/Office/Project Gallery Launcher

- N/A

/Applications/Open XML Converter.app

- com.microsoft.OfficeConverter

/Applications/Photo Booth.app

- com.apple.PhotoBooth

/Applications/Plex.app

- com.plexsquared.Plex

/Applications/Preview.app

- com.apple.Preview

/Applications/QuickTime Player.app

- com.apple.QuickTimePlayerX

/Applications/Remote Mouse.app

- com.remotemouse.remotemouseserver

/Applications/Safari.app

- com.apple.Safari

/Applications/Skype.app

- com.skype.skype

/Applications/Stickies.app

- com.apple.Stickies

/Applications/System Preferences.app

- com.apple.systempreferences

/Applications/TextEdit.app

- com.apple.TextEdit

/Applications/Time Machine.app

- com.apple.backup.launcher

/Applications/Utilities/Activity Monitor.app

- com.apple.ActivityMonitor

/Applications/Utilities/Adobe AIR Application Installer.app

- com.adobe.air.ApplicationInstaller

/Applications/Utilities/Adobe AIR Uninstaller.app

- com.adobe.air.Installer

/Applications/Utilities/AirPort Utility.app

- com.apple.airport.airportutility

/Applications/Utilities/AppleScript Editor.app

- com.apple.ScriptEditor2

/Applications/Utilities/Audio MIDI Setup.app

- com.apple.audio.AudioMIDISetup

/Applications/Utilities/Bluetooth File Exchange.app

- com.apple.BluetoothFileExchange

/Applications/Utilities/Boot Camp Assistant.app

- com.apple.bootcampassistant

/Applications/Utilities/ColorSync Utility.app

- com.apple.ColorSyncUtility

/Applications/Utilities/Console.app

- com.apple.Console

/Applications/Utilities/DigitalColor Meter.app

- com.apple.DigitalColorMeter

/Applications/Utilities/Disk Utility.app

- com.apple.DiskUtility

/Applications/Utilities/Expose.app

- ́

/Applications/Utilities/Grab.app

- com.apple.Grab

/Applications/Utilities/Grapher.app

- com.apple.grapher

/Applications/Utilities/Java Preferences.app

- com.apple.java.JavaPreferences

/Applications/Utilities/Keychain Access.app

- com.apple.keychainaccess

/Applications/Utilities/Migration Assistant.app

- com.apple.MigrateAssistant

/Applications/Utilities/Network Utility.app

- com.apple.NetworkUtility

/Applications/Utilities/Podcast Capture.app

- com.apple.PodcastCapture

/Applications/Utilities/RAID Utility.app

- com.apple.RAIDUtility

/Applications/Utilities/Remote Install Mac OS X.app

- com.apple.remoteinstallmacosx

/Applications/Utilities/Spaces.app

- com.apple.spaceslauncher

/Applications/Utilities/System Profiler.app

- com.apple.SystemProfiler

/Applications/Utilities/Terminal.app

- com.apple.Terminal

/Applications/Utilities/VoiceOver Utility.app

- com.apple.VoiceOverUtility

/Applications/Utilities/X11.app

- org.x.X11

/Applications/VLC.app

- org.videolan.vlc

/Applications/iCal.app

- com.apple.iCal

/Applications/iChat.app

- com.apple.iChat

/Applications/iDVD.app

- com.apple.iDVD

/Applications/iMovie.app

- com.apple.iMovieApp

/Applications/iPhoto.app

- com.apple.iPhoto

/Applications/iSync.app

- com.apple.isync

/Applications/iTunes.app

- com.apple.iTunes

/Applications/iWeb.app

- com.apple.iWeb

/Applications/iWork '09/Keynote.app

- com.apple.iWork.Keynote

/Applications/iWork '09/Numbers.app

- com.apple.iWork.Numbers

/Applications/iWork '09/Pages.app

- com.apple.iWork.Pages

/Google Chrome.app

- com.google.Chrome

/Google Earth.app

- com.Google.GoogleEarthPlus

/Library/Application Support/Microsoft/HV1.0/Microsoft Help Viewer.app

- com.microsoft.helpviewer

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

- com.microsoft.autoupdate2

/Library/Application Support/Microsoft/Office Converter Support/Open XML for Charts.app

- com.microsoft.openxml.chartconverter.app

/Library/Application Support/Microsoft/Office Converter Support/Open XML for Excel.app

- com.microsoft.openxml.excel.app

/Library/Application Support/Microsoft/Office Converter Support/Open XML for Word.app

- com.microsoft.openxml.word.app

/Library/Application Support/Microsoft/Office Converter Support/pptfc.app

- com.microsoft.openxml.powerpoint.app

/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

- com.microsoft.silverlight.sllauncher

/Library/Application Support/iPhoto/iPhoto Library Upgrader.app

- com.apple.iPhotoLibraryUpgrader

/Library/Documentation/Applications/iDVD/iDVD Getting Started.app

- com.apple.iDVDGettingStarted

/Library/Documentation/License.app

- com.apple.License

/Library/Documentation/User Guides And Information.localized/Apple Hardware Test Read Me.app

- com.apple.AppleHardwareTestReadMe

/Library/Documentation/User Guides And Information.localized/Welcome to Leopard.app

- com.apple.WelcometoLeopard

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app

- com.adobe.air.ApplicationInstaller

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Adobe AIR Updater.app

- com.adobe.air.Installer

/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app

- com.adobe.air.Template

/Library/Image Capture/Devices/Brother Scanner.app

- com.brother.scanner.ica

/Library/Image Capture/Devices/Canon IJScanner1.app

- jp.co.canon.ijscanner1.scanner.ica

/Library/Image Capture/Devices/Canon IJScanner2.app

- jp.co.canon.ijscanner2.scanner.ica

/Library/Image Capture/Devices/EPSON Scanner.app

- com.epson.scanner.ica

/Library/Image Capture/Devices/HP Scanner 3.app

- com.hp.scanModule3

/Library/Image Capture/Devices/HPScanner.app

- com.hp.scanModule

/Library/Image Capture/Devices/Lexmark Scanner.app

- com.lexmark.scanner.ica

/Library/Image Capture/Devices/Samsung Scanner.app

- com.samsung.imagecapture.scanner.app

/Library/Image Capture/Support/LegacyDeviceDiscoveryHelpers/CIJScannerRegister.app

- jp.co.canon.cijscannerregister

/Library/Printers/Brother/Utilities/BrStatusMonitor.app

- com.brother.utility.BrStatusMonitor

/Library/Printers/Canon/BJPrinter/Utilities/BJPrinterUtility2.app

- jp.co.canon.bj.print.app.bjprinterutility2

/Library/Printers/Canon/BJPrinter/Utilities/CIJAutoSetupTool.app

- jp.co.canon.ij.print.cijautosetuptool

/Library/Printers/EPSON/InkjetPrinter2/AutoSetupTool/EPIJAutoSetupTool2.app

- com.epson.ijprinter.EPIJAutoSetupTool2

/Library/Printers/EPSON/InkjetPrinter2/Filter/commandtoescp.app

- com.epson.ijprinter.commandtoescp

/Library/Printers/EPSON/InkjetPrinter2/Filter/pdftopdf2.app

- com.epson.ijprinter.pdftopdf2

/Library/Printers/EPSON/InkjetPrinter2/Filter/rastertoescpII.app

- com.epson.ijprinter.rastertoescpII

/Library/Printers/EPSON/InkjetPrinter2/Utility/UTL/Epson Printer Utility Lite.app

- com.epson.ijprinter.EpsonPrinterUtilityLite

/Library/Printers/Lexmark/Drivers/Lexmark Printer Utility.app

- com.lexmark.print.lexmarkutility.2009

/Library/Printers/Lexmark/Utilities.localized/UtilityLogger.app

- com.lexmark.UtilityLogger

/Library/Printers/Lexmark/filter/CUPSDriver.app

- com.lexmark.CUPSDriver

/Library/Printers/hp/Fax/HPFaxBackend.app

- com.hp.CupsFaxBackend

/Library/Printers/hp/Utilities/HP Utility.app

- com.hp.printerutility

/Library/Printers/hp/cups/Deskjet.driver

- com.hp.print.cups.filter.deskjet

/Library/Printers/hp/cups/Inkjet.driver

- com.hp.print.cups.filter.inkjet

/Library/Printers/hp/cups/Inkjet1.driver

- com.hp.print.cups.filter.inkjet1

/Library/Printers/hp/cups/Inkjet3.driver

- com.hp.print.cups.filter.inkjet3

/Library/Printers/hp/cups/Inkjet4.driver

- com.hp.print.cups.filter.inkjet4

/Library/Printers/hp/cups/Inkjet5.driver

- com.hp.print.cups.filter.inkjet5

/Library/Printers/hp/cups/Inkjet6.driver

- com.hp.print.cups.filter.inkjet6

/Library/Printers/hp/cups/Inkjet8.driver

- com.hp.print.cups.filter.inkjet8

/Library/Printers/hp/cups/Laserjet.driver

- com.hp.print.cups.filter.laserjet

/Library/Printers/hp/cups/Officejet.driver

- com.hp.print.cups.filter.officejet

/Library/Printers/hp/cups/Photosmart.driver

- com.hp.print.cups.filter.photosmart

/Library/Printers/hp/cups/PhotosmartPro.driver

- com.hp.print.driver.cups.photosmart_pro

/Library/Printers/hp/cups/filters/commandtohp.filter

- com.hp.print.cups.filter.commandtohp

/Library/Printers/hp/cups/filters/pdftopdf.filter

- com.hp.print.cups.filter.pdftopdf

/Library/Printers/hp/cups/tools/autosetup.tool

- com.hp.print.autosetup

/Library/Printers/hp/filter/hprastertojpeg.driver

- com.hp.quick.connect.software.cups.filter

/Library/Scripts/ColorSync/Embed.app

- N/A

/Library/Scripts/ColorSync/Extract.app

- N/A

/Library/Scripts/ColorSync/Match.app

- N/A

/Library/Scripts/ColorSync/Proof.app

- N/A

/Library/Scripts/ColorSync/Remove.app

- N/A

/Library/Scripts/ColorSync/Rename.app

- N/A

/Library/Scripts/ColorSync/Set Info.app

- N/A

/Library/Scripts/ColorSync/Show Info.app

- N/A

/System/Library/ColorSync/Calibrators/Display Calibrator.app

- com.apple.ColorSyncCalibrator

/System/Library/CoreServices/AVRCPAgent.app

- com.apple.AVRCPAgent

/System/Library/CoreServices/AddPrinter.app

- com.apple.print.add

/System/Library/CoreServices/AirPort Base Station Agent.app

- com.apple.AirPortBaseStationAgent

/System/Library/CoreServices/Apple80211Agent.app

- com.apple.airport.helper

/System/Library/CoreServices/AppleFileServer.app

- N/A

/System/Library/CoreServices/AppleGraphicsWarning.app

- com.apple.AppleGraphicsWarning

/System/Library/CoreServices/AppleScript Runner.app

- com.apple.AppleScriptRunner

/System/Library/CoreServices/AppleScript Utility.app

- com.apple.AppleScriptUtility

/System/Library/CoreServices/Archive Utility.app

- com.apple.archiveutility

/System/Library/CoreServices/Automator Launcher.app

- com.apple.Automator_Launcher

/System/Library/CoreServices/Automator Runner.app

- com.apple.AutomatorRunner

/System/Library/CoreServices/Bluetooth Setup Assistant.app

- com.apple.BluetoothSetupAssistant

/System/Library/CoreServices/BluetoothAudioAgent.app

- com.apple.BluetoothAudioAgent

/System/Library/CoreServices/BluetoothUIServer.app

- com.apple.BluetoothUIServer

/System/Library/CoreServices/CCacheServer.app

- edu.mit.Kerberos.CCacheServer

/System/Library/CoreServices/Certificate Assistant.app

- com.apple.CertificateAssistant

/System/Library/CoreServices/CoreLocationAgent.app

- com.apple.CoreLocationAgent.plist

/System/Library/CoreServices/CoreServicesUIAgent.app

- com.apple.coreservices.uiagent

/System/Library/CoreServices/Database Events.app

- com.apple.databaseevents

/System/Library/CoreServices/Directory Utility.app

- com.apple.DirectoryUtility

/System/Library/CoreServices/DiskImageMounter.app

- com.apple.DiskImageMounter

/System/Library/CoreServices/Dock.app

- com.apple.dock

/System/Library/CoreServices/Expansion Slot Utility.app

- com.apple.ExpansionSlotUtility

/System/Library/CoreServices/File Sync.app

- com.apple.FileSyncUI

/System/Library/CoreServices/FileSyncAgent.app

- com.apple.FileSyncAgent

/System/Library/CoreServices/Finder.app

- com.apple.finder

/System/Library/CoreServices/Folder Actions Dispatcher.app

- com.apple.FolderActionsDispatcher

/System/Library/CoreServices/Folder Actions Setup.app

- com.apple.FolderActionsSetup

/System/Library/CoreServices/Front Row.app

- com.apple.frontrow

/System/Library/CoreServices/HelpViewer.app

- com.apple.helpviewer

/System/Library/CoreServices/Image Events.app

- com.apple.imageevents

/System/Library/CoreServices/Installer.app

- com.apple.installer

/System/Library/CoreServices/Jar Launcher.app

- com.apple.JarLauncher

/System/Library/CoreServices/Java Web Start.app

- com.apple.JavaWebStart

/System/Library/CoreServices/KerberosAgent.app

- edu.mit.Kerberos.KerberosAgent

/System/Library/CoreServices/KeyboardSetupAssistant.app

- com.apple.KeyboardSetupAssistant

/System/Library/CoreServices/Language Chooser.app

- com.apple.LanguageChooser

/System/Library/CoreServices/MRTAgent.app

- com.apple.mrt.uiagent

/System/Library/CoreServices/ManagedClient.app

- com.apple.ManagedClient

/System/Library/CoreServices/Memory Slot Utility.app

- com.apple.MemorySlotUtility

/System/Library/CoreServices/NetAuthAgent.app

- com.apple.NetAuthAgent

/System/Library/CoreServices/Network Diagnostics.app