Q: how to get rid of pop ups flash mall
-
Oct 26, 2015 1:48 PMby therealmacylove,Start time: 16:36:19 10/26/15
Revision: 1166
Model Identifier: MacBookAir7,2
System Version: OS X 10.10.4 (14E46)
Kernel Version: Darwin 14.4.0
Time since boot: 18 minutes
System load
combined level = Bad
- battery level = Bad
FileVault: On
Diagnostic reports
2015-10-25 ApplicationManager crash x5
2015-10-26 ApplicationManager crash x20
Log
Oct 26 00:34:26 com.apple.xpc.launchd.domain.pid.MediaLibraryService.88892: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/Frameworks/MediaLibrary.framework/Versions/A/XPCServices/com.ap ple.MediaLibraryService.xpc
Oct 26 00:41:48 com.jdibackup.ZipCloud.notify: Service exited with abnormal code: 1
Oct 26 01:01:48 com.jdibackup.ZipCloud.notify: Service exited with abnormal code: 1
Oct 26 01:21:48 com.jdibackup.ZipCloud.notify: Service exited with abnormal code: 1
Oct 26 10:36:01 SIOCPROTODETACH_IN6: utun0 error=6
Oct 26 10:36:58 com.jdibackup.ZipCloud.notify: Service exited with abnormal code: 1
Oct 26 12:22:59 SIOCPROTODETACH_IN6: utun0 error=6
Oct 26 12:25:49 com.jdibackup.ZipCloud.notify: Service exited with abnormal code: 1
Oct 26 15:28:30 SIOCPROTODETACH_IN6: utun0 error=6
Oct 26 15:45:28 ARPT: 55439.464956: MacAuthEvent en0 Auth result for: d8:c7:c8:29:f9:a0 Auth request tx failed
Oct 26 16:01:41 com.jdibackup.ZipCloud.notify: Service exited with abnormal code: 1
Oct 26 16:02:36 com.spigot.ApplicationManager: Service setup event to handle failure and will not launch until it fires.
Oct 26 16:02:52 com.apple.iTunesHelper.56548: Service exited with abnormal code: 1
Oct 26 16:09:03 process xvpnd[384] caught causing excessive wakeups. EXC_RESOURCE supressed due to audio playback
Oct 26 16:18:04 ARPT: 806.805901: MacAuthEvent en0 Auth result for: d8:c7:c8:29:f9:a8 Auth request tx failed
Oct 26 16:18:11 com.apple.xpc.launchd.domain.pid.BKAgentService.1781: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/PrivateFrameworks/BookKit.framework/Versions/A/XPCServices/com. apple.BKAgentService.xpc
Oct 26 16:18:11 com.apple.xpc.launchd.domain.pid.BKAgentService.1781: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/PrivateFrameworks/BookKit.framework/Versions/A/XPCServices/com. apple.BKAgentService.xpc
Oct 26 16:18:12 com.apple.iTunesHelper.56548: Service exited with abnormal code: 1
Oct 26 16:18:57 com.apple.xpc.launchd.domain.pid.BKAgentService.382: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/PrivateFrameworks/BookKit.framework/Versions/A/XPCServices/com. apple.BKAgentService.xpc
Oct 26 16:18:57 com.apple.xpc.launchd.domain.pid.BKAgentService.382: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/PrivateFrameworks/BookKit.framework/Versions/A/XPCServices/com. apple.BKAgentService.xpc
Oct 26 16:19:01 com.apple.xpc.launchd.domain.pid.MediaLibraryService.405: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/Frameworks/MediaLibrary.framework/Versions/A/XPCServices/com.ap ple.MediaLibraryService.xpc
Oct 26 16:19:01 com.apple.xpc.launchd.domain.pid.MediaLibraryService.405: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/Frameworks/MediaLibrary.framework/Versions/A/XPCServices/com.ap ple.MediaLibraryService.xpc
Oct 26 16:19:07 com.apple.xpc.launchd.domain.pid.MediaLibraryService.429: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/Frameworks/MediaLibrary.framework/Versions/A/XPCServices/com.ap ple.MediaLibraryService.xpc
Oct 26 16:19:07 com.apple.xpc.launchd.domain.pid.MediaLibraryService.429: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/Frameworks/MediaLibrary.framework/Versions/A/XPCServices/com.ap ple.MediaLibraryService.xpc
Oct 26 16:22:21 process xvpnd[365] caught causing excessive wakeups. Observed wakeups rate (per sec): 217; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45001
Activity
CPU: user 12%, system 7%
Loaded kernel extensions
expressvpn.tun (1.0)
Daemons
com.adobe.fpsaud
com.bradfordnetworks.daemon
com.ea.origin.ESHelper
com.expressvpn.tap
com.expressvpn.tun
com.google.keystone.daemon
com.malwarebytes.MBAMHelperTool
Agents
com.WebShoppers.agent
com.apple.AirPortBaseStationAgent
com.google.keystone.system.agent
com.spotify.webhelper
Extensions
/Library/Extensions/tap.kext
- expressvpn.tap
/Library/Extensions/tun.kext
- expressvpn.tun
Applications
/Applications/BitTorrent.app
- com.bittorrent.BitTorrent
/Applications/ESPN/ESPN Offline Draft.app
- ESPNOfflineDraft
/Applications/ExpressVPN.app
- com.expressvpn.ExpressVPN
/Applications/Firefox.app
- org.mozilla.firefox
/Applications/Google Chrome.app
- com.google.Chrome
/Applications/Malwarebytes Anti-Malware.app
- com.malwarebytes.antimalware
/Applications/NicePlayer.app
- indy.jt.niceplayer
/Applications/Origin.app
- com.ea.Origin
/Applications/Perfetnight/Uninstall Perfetnight.app
- com.ezrah.AppEH
/Applications/Popcorn-Time.app
- io.nwjs.nw
/Applications/Skype.app
- com.skype.skype
/Applications/Spotify.app
- com.spotify.client
/Applications/Utilities/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Applications/Utilities/Adobe AIR Uninstaller.app
- com.adobe.air.Installer
/Applications/Utilities/Adobe Flash Player Install Manager.app
- com.adobe.flashplayer.installmanager
/Applications/VLC.app
- org.videolan.vlc
/Library/Application Support/Bradford Networks/Persistent Agent/CSA.app
- com.bradfordnetworks.bncsaui
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Adobe AIR Updater.app
- com.adobe.air.Installer
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app
- com.adobe.air.Template
/Library/Image Capture/Devices/Canon IJScanner13f.app
- jp.co.canon.ij.ica.scanner13f
/Library/Image Capture/Devices/Canon IJScanner14s.app
- jp.co.canon.ij.ica.scanner14s
/Library/Image Capture/Devices/Canon IJScanner2.app
- jp.co.canon.ijscanner2.scanner.ica
/Library/Image Capture/Devices/Canon IJScanner3.app
- jp.co.canon.ij.ica.scanner3
/Library/Image Capture/Devices/Canon IJScanner4.app
- jp.co.canon.ij.ica.scanner4
/Library/Image Capture/Devices/EPSON Scanner.app
- com.epson.scanner.ica
/Library/Printers/Canon/BJPrinter/Utilities/CIJAutoSetupTool.app
- jp.co.canon.ij.print.cijautosetuptool
/Library/Printers/Canon/BJPrinter/Utilities/CanonIJPrinterUtility.app
- jp.co.canon.bj.print.app.canonijprinterutility
/Library/Printers/EPSON/Fax/AutoSetupTool/EPFaxAutoSetupTool.app
- com.epson.ijfax.app.EPFaxAutoSetupTool
/Library/Printers/EPSON/Fax/FaxIOSupport/epsonfax.app
- com.epson.ijfax.app.epsonfax
/Library/Printers/EPSON/Fax/Filter/commandFilter.app
- com.epson.ijfax.filter.commandFilter
/Library/Printers/EPSON/Fax/Filter/rastertoepfax.app
- com.epson.ijfax.filter.rastertoepfax
/Library/Printers/EPSON/Fax/Utility/FAX Utility.app
- com.epson.ijfax.utility.FAXUtility
/Library/Printers/EPSON/Fax/Utility/Fax Receive Monitor.app
- com.epson.ijfax.app.FaxReceiveMonitor
/Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf
/Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo
/Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf
/Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia
/Users/USER/Downloads/Install Spotify.app
- com.spotify.installer
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
Frameworks
/Library/Frameworks/Adobe AIR.framework
- com.adobe.AIR
PrefPane
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
Bundles
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.6.plugin
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash
/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
dylibs
/Library/Application Support/Bradford Networks/Persistent Agent/libbnpolicy.dylib
/Library/Application Support/Bradford Networks/Persistent Agent/libxerces-c.dylib
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib
/Library/undermountUpd/Contents/PlugIns/accessible/libqtaccessiblewidgets.dylib
/Library/undermountUpd/Contents/PlugIns/bearer/libqcorewlanbearer.dylib
/Library/undermountUpd/Contents/PlugIns/bearer/libqgenericbearer.dylib
/Library/undermountUpd/Contents/PlugIns/codecs/libqcncodecs.dylib
/Library/undermountUpd/Contents/PlugIns/codecs/libqjpcodecs.dylib
/Library/undermountUpd/Contents/PlugIns/codecs/libqkrcodecs.dylib
/Library/undermountUpd/Contents/PlugIns/codecs/libqtwcodecs.dylib
/Library/undermountUpd/Contents/PlugIns/imageformats/libqgif.dylib
/Library/undermountUpd/Contents/PlugIns/imageformats/libqico.dylib
/Library/undermountUpd/Contents/PlugIns/imageformats/libqjpeg.dylib
/Library/undermountUpd/Contents/PlugIns/imageformats/libqmng.dylib
/Library/undermountUpd/Contents/PlugIns/imageformats/libqtga.dylib
/Library/undermountUpd/Contents/PlugIns/imageformats/libqtiff.dylib
/Users/USER/Library/Application Support/Firefox/Profiles/vt0qp7tp.default/gmp-gmpopenh264/1.4/libgmpopenh264.dy lib
/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.824/_platform_specific/mac_x64/libwidev inecdm.dylib
App extensions
com.evernote.Evernote.SharingExtension
Contents of /Library/LaunchAgents/com.WebShoppers.agent.plist
- mod date: Oct 23 19:45:48 2015
- checksum: 1708165605
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.WebShoppers.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/WebShoppers/WebShoppers</string>
<string>-guid</string>
<string>44844386704770322</string>
<string>-source</string>
<string>mm-1543</string>
<string>-brand</string>
<string>WebShoppers</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
...and 7 more line(s)
Contents of /Library/LaunchDaemons/com.bradfordnetworks.agent.plist
- mod date: Feb 23 15:51:23 2015
- checksum: 3999500278
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.bradfordnetworks.daemon</string>
<key>Program</key>
<string>/Library/Application Support/Bradford Networks/Persistent Agent/bndaemon</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Bradford Networks/Persistent Agent/bndaemon</string>
</array>
<key>OnDemand</key>
<false/>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<string>240</string>
<key>WorkingDirectory</key>
<string>/Library/Application Support/Bradford Networks/Persistent Agent</string>
<key>ServiceDescription</key>
<string>Bradford Networks Agent Daemon</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.ea.origin.ESHelper.plist
- mod date: Jul 29 13:57:05 2015
- checksum: 2003327398
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Debug</key>
<true/>
<key>Label</key>
<string>com.ea.origin.ESHelper</string>
<key>Program</key>
<string>/Library/PrivilegedHelperTools/com.ea.origin.ESHelper</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.ea.origin.ESHelper</string>
</array>
<key>Sockets</key>
<dict>
<key>com.ea.origin.ESHelper.sock</key>
<dict>
<key>SockFamily</key>
<string>Unix</string>
<key>SockPathMode</key>
<integer>438</integer>
<key>SockPathName</key>
<string>/var/run/com.ea.origin.eshelper.sock</string>
</dict>
...and 5 more line(s)
Contents of /Library/LaunchDaemons/com.expressvpn.tap.plist
- mod date: Oct 23 19:21:32 2015
- checksum: 817119708
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.expressvpn.tap</string>
<key>ProgramArguments</key>
<array>
<string>/sbin/kextload</string>
<string>/Library/Extensions/tun.kext</string>
</array>
<key>KeepAlive</key>
<false/>
<key>RunAtLoad</key>
<true/>
<key>UserName</key>
<string>root</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.expressvpn.tun.plist
- mod date: Oct 23 19:21:32 2015
- checksum: 1693864539
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.expressvpn.tun</string>
<key>ProgramArguments</key>
<array>
<string>/sbin/kextload</string>
<string>/Library/Extensions/tun.kext</string>
</array>
<key>KeepAlive</key>
<false/>
<key>RunAtLoad</key>
<true/>
<key>UserName</key>
<string>root</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.malwarebytes.MBAMHelperTool.plist
- mod date: Oct 26 16:01:33 2015
- checksum: 2299099766
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.malwarebytes.MBAMHelperTool</string>
<key>MachServices</key>
<dict>
<key>com.malwarebytes.MBAMHelperTool</key>
<true/>
</dict>
<key>Program</key>
<string>/Library/PrivilegedHelperTools/com.malwarebytes.MBAMHelperTool</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.malwarebytes.MBAMHelperTool</string>
</array>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: Jul 22 13:14:02 2015
- checksum: 3012644940
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>EnvironmentVariables</key>
<dict>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd-wrapper</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Profiles: 1
Global login items
/Library/Application Support/Bradford Networks/Persistent Agent/CSA.app
Wi-Fi
Privacy: NONE
User login items
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
Spotify
- /Applications/Spotify.app
Google Chrome
- /Applications/Google Chrome.app
BitTorrent
- /Applications/BitTorrent.app
Advanced Mac Cleaner 8.13.41 PM
- missing value
ExpressVPN
- /Applications/ExpressVPN.app
CSA
- /Library/Application Support/Bradford Networks/Persistent Agent/CSA.app
iCloud errors
Finder: 3
Spotlight: 3
storedownloadd: 1
Restricted files: 4
Lockfiles: 5
Elapsed time (sec): 330
-
Oct 26, 2015 2:42 PMby thomas_r.,I notice you've got Malwarebytes Anti-Malware for Mac installed. We'd like to help you with this issue. If you could choose Contact Support from the Help menu and include a description of a problem, as well as a link to this discussion and a reference to my name (Thomas R.), I'll get back to you personally after I've reviewed the information about your system sent with the support request.
-
by Linc Davis,Oct 26, 2015 6:06 PM
Linc Davis
Oct 26, 2015 6:06 PM
in response to therealmacylove
Level 10
(207,995 points)
ApplicationsFirst, never use any kind of "anti-virus" or "anti-malware" software on a Mac. That's how you create problems, not how you solve them. You've already discovered that the "malwarebytes" product is incapable of solving your problem.
You installed the "WebShoppers" adware. Like all adware, it can easily be removed using only the Finder and a web browser. To remove it, start by backing up all data.
1. Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents
Right-click or control-click the highlighted line and select
Services ▹ Open
from the contextual menu.* A folder named "LaunchAgents" should open.
In the folder, there may be a file with this name:
com.WebShoppers.agent.plist
Move that file to the Trash. You may be prompted for your administrator password.
2. Log out or restart the computer.
3. Open the Applications folder in the Finder and drag the subfolder named "WebShoppers" to the Trash. Empty the Trash.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.
-
Oct 27, 2015 9:56 PMby thejorkid,I've searched everywhere on the internet for an explanation of how to get rid of the stupid FlashMall ad pop-ups and banners and I've finally figured it out on my own;
I simply went to "Applications" and near the bottom I found a folder called WebShopper and I dragged its "exec" file and that folder both into the trash and then restarted my mac and then emptied the trash and then BAM just like magic everything was perfect again.
Going back to Apple Discussions I found this and specifically this reply by Linc which I find to be the most helpful reply, however, you need not to overdo some many steps to delete Flashmall. Just drag the WebShopper folder from Applications to the Trash and restart your mac and then empty your trash.
Linc Davis is saying the same thing, just more technical. Thanks man, and good job.
-
Nov 1, 2015 4:22 PMby Tech4Me,Please help me! I can't seem to find anyway to make the flashmall go away.
Start time: 19:00:05 11/01/15
Revision: 1166
Model Identifier: iMac14,1
System Version: OS X 10.10.5 (14F1021)
Kernel Version: Darwin 14.5.0
Time since boot: 37 minutes
USB
Mass Storage Device (Alcor Micro, Corp.)
Bluetooth
Apple Wireless Keyboard
Apple Magic Mouse
Diagnostic reports
2015-10-26 Roblox crash
2015-10-26 galileod crash x3
2015-10-28 RobloxStudio crash
2015-10-28 Roblox crash x2
2015-10-28 galileod crash x2
2015-10-30 galileod crash
2015-11-01 galileod crash x2
Log
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:23:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.209: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Nov 1 18:24:04 com.apple.spindump: Service exited with abnormal code: 75
Nov 1 18:24:14 com.apple.spindump: Service exited with abnormal code: 75
Nov 1 18:24:14 com.apple.xpc.launchd.domain.pid.om.apple.photostream-agent.306: Path not allowed in target domain: type = pid, path = /Applications/iPhoto.app/Contents/Frameworks/PhotoFoundation.framework/Versions /A/XPCServices/com.apple.PhotoApps.DevicePropertyReader.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app
Nov 1 18:24:14 com.apple.xpc.launchd.domain.pid.om.apple.photostream-agent.306: Path not allowed in target domain: type = pid, path = /Applications/iPhoto.app/Contents/Frameworks/PhotoFoundation.framework/Versions /A/XPCServices/com.apple.PhotoApps.DevicePropertyReader.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app
Nov 1 18:24:24 com.apple.spindump: Service exited with abnormal code: 75
Nov 1 18:24:34 com.apple.spindump: Service exited with abnormal code: 75
Nov 1 18:24:44 com.apple.spindump: Service exited with abnormal code: 75
Nov 1 18:24:54 com.apple.spindump: Service exited with abnormal code: 75
Daemons
com.apple.installer.osmessagetracing
com.apple.spindump
- status: 75
com.fitbit.galileod
com.microsoft.office.licensing.helper
Agents
com.SoftwareUpdater.agent
com.WebShoppers.agent
com.apple.AirPortBaseStationAgent
com.apple.photostream-agent
com.coupons.coupond
com.google.keystone.user.agent
com.megabackup.MegaBackupAgent
com.mint.quickview-launcher
com.valvesoftware.steamclean
Extensions
/System/Library/Extensions/JMicronATA.kext
- com.jmicron.JMicronATA
Applications
/Applications/BookWright.app
- com.blurb.bookwright
/Applications/Dropbox.app
- com.getdropbox.dropbox
/Applications/Fitbit Connect.app
- com.fitbit.GalileoClient
/Applications/Google Chrome.app
- com.google.Chrome
/Applications/MacKeeper.app
- com.mackeeper.MacKeeper
/Applications/MegaBackup.app
- com.megabackup.MegaBackup
/Applications/Microsoft Office 2011/Additional Tools/Microsoft Language Register/Microsoft Language Register.app
- com.microsoft.languageregister
/Applications/Microsoft Office 2011/Microsoft Document Connection.app
- com.microsoft.DocumentConnection
/Applications/Microsoft Office 2011/Microsoft Excel.app
- com.microsoft.Excel
/Applications/Microsoft Office 2011/Microsoft Outlook.app
- com.microsoft.Outlook
/Applications/Microsoft Office 2011/Microsoft PowerPoint.app
- com.microsoft.Powerpoint
/Applications/Microsoft Office 2011/Microsoft Word.app
- com.microsoft.Word
/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app
- com.microsoft.ASApplication
/Applications/Microsoft Office 2011/Office/Equation Editor.app
- com.microsoft.EquationEditor
/Applications/Microsoft Office 2011/Office/Microsoft Alerts Daemon.app
- com.microsoft.alerts.daemon
/Applications/Microsoft Office 2011/Office/Microsoft Chart Converter.app
- com.microsoft.openxml.chart.app
/Applications/Microsoft Office 2011/Office/Microsoft Clip Gallery.app
- com.microsoft.ClipGallery
/Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app
- com.microsoft.outlook.databasedaemon
/Applications/Microsoft Office 2011/Office/Microsoft Database Utility.app
- com.microsoft.outlook.databaseutility
/Applications/Microsoft Office 2011/Office/Microsoft Graph.app
- com.microsoft.Graph
/Applications/Microsoft Office 2011/Office/Microsoft Office Reminders.app
- com.microsoft.outlook.officereminders
/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app
- com.microsoft.office.setupassistant
/Applications/Microsoft Office 2011/Office/Microsoft Query.app
- com.microsoft.Query
/Applications/Microsoft Office 2011/Office/Microsoft Upload Center.app
- com.microsoft.office.uploadcenter
/Applications/Microsoft Office 2011/Office/My Day.app
- com.microsoft.myday
/Applications/Microsoft Office 2011/Office/Office365Service.app
- com.microsoft.Office365Service
/Applications/Microsoft Office 2011/Office/Open XML for Excel.app
- com.microsoft.openxml.excel.app
/Applications/Microsoft Office 2011/Office/SyncServicesAgent.app
- com.microsoft.SyncServicesAgent
/Applications/Roblox.app
- com.roblox.RobloxPlayer
/Applications/RobloxStudio.app
- com.Roblox.RobloxStudio
/Applications/Steam 2.app
- com.valvesoftware.steam
/Applications/Steam 3.app
- com.valvesoftware.steam
/Applications/Steam 4.app
- com.valvesoftware.steam
/Applications/Steam.app
- com.valvesoftware.steam
/Applications/mediaDownloader.app
- com.yourcompany.mediaDownloader
/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app
- com.microsoft.autoupdate2
/Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app
- com.microsoft.error_reporting
/Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app
- com.microsoft.netlib.shipassertprocess
/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app
- com.microsoft.silverlight.sllauncher
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Library/Application Support/coupons/uninstall coupon printing software.app
- com.coupons.uninstaller
/Library/Image Capture/Devices/Canon IJScanner2.app
- jp.co.canon.ijscanner2.scanner.ica
/Library/Image Capture/Devices/Canon IJScanner4.app
- jp.co.canon.ij.ica.scanner4
/Library/Image Capture/Devices/EPSON Scanner.app
- com.epson.scanner.ica
/Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf
/Users/USER/Applications/Chrome Apps.localized/Default nbhibnjbbdkflfklbdpgbifkhcielgcm.app
- com.google.Chrome.app.Default-nbhibnjbbdkflfklbdpgbifkhcielgcm
/Users/USER/Documents/My Stuff/WIRELESS/OSX Wireless Connect.app
- N/A
/Users/USER/Library/Application Support/Blurb/Blurb Updater.app
- com.blurb.blurb_updater
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nbhibnjbbdkflfklbdpgbifkhcielgcm/Default nbhibnjbbdkflfklbdpgbifkhcielgcm.app
- com.google.Chrome.app.Default-nbhibnjbbdkflfklbdpgbifkhcielgcm-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app
- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
Frameworks
- N/A
PrefPane
- N/A
Bundles
/Library/Internet Plug-Ins/CouponPrinter-FireFox_v2.plugin
- com.coupons.plugin.mozilla-plugin
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Internet Plug-Ins/Silverlight.plugin
- com.microsoft.SilverlightPlugin
/Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin
- jp.co.canon.scangear.ag07.09
/Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin
- jp.co.canon.scangear.ag08.09
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_bjnp.plugin
- jp.co.canon.ij.scangear.cijsdl.bjnp
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_iom.plugin
- jp.co.canon.ij.scangear.cijsdl.iom
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_lld.plugin
- jp.co.canon.ij.scangear.cijsdl.lld
/Library/Printers/Canon/IJScanner/Plugins/cijsds_ag.plugin
- jp.co.canon.ij.scangear.cijsds.ag
/Library/Printers/Canon/IJScanner/Plugins/cijsds_ijfsh.plugin
- jp.co.canon.ij.scangear.cijsds.ijfsh
/Library/Printers/Canon/IJScanner/Plugins/cijsds_mldv0.plugin
- jp.co.canon.ij.scangear.cijsds.mldv0
/Library/Printers/Canon/IJScanner/Plugins/cijsds_os106.plugin
- jp.co.canon.ij.scangear.cijsds.os106
/Library/Printers/Canon/IJScanner/Plugins/cijsds_racs2.plugin
- jp.co.canon.ij.scangear.cijsds.racs2
/Library/Printers/Canon/IJScanner/Plugins/cijsds_rotate.plugin
- jp.co.canon.ij.scangear.cijsds.rotate
/Library/Printers/Canon/IJScanner/Plugins/cijsds_smac.plugin
- jp.co.canon.ij.scangear.cijsds.smac
/Library/Printers/Canon/IJScanner/Plugins/cijsds_zoom.plugin
- jp.co.canon.ij.scangear.cijsds.zoom
/Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin
- jp.co.canon.scangear.lld09.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin
- jp.co.canon.scanner.cnq2413.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin
- jp.co.canon.scanner.cnq2414.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin
- jp.co.canon.scanner.cnq4807.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin
- jp.co.canon.scanner.cnq4808.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin
- jp.co.canon.scanner.cnq4809.09
/Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin
- jp.co.canon.scanner.cnq9601.09
/Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin
- jp.co.canon.scangear.ijfshlib.09
/Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin
- jp.co.canon.scangear.mld07.09
/Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin
- jp.co.canon.scangear.mld08.09
/Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin
- jp.co.canon.scangear.mld09.09
/Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin
- jp.co.canon.scangear.mld9601.09
/Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin
- jp.co.canon.sf.scanner.sfusb.09
/Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin
- jp.co.canon.scangear.usb.09
/Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin
- jp.co.canon.scangear.smac.09
/Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin
- jp.co.canon.scangear.zoom.09
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin
- com.macromedia.PepperFlashPlayer.pepper
/Users/USER/Library/Internet Plug-Ins/NPRoblox.plugin
- com.Roblox.RobloxLauncherPlugin
/Users/USER/Library/Internet Plug-Ins/bjninstallpluginx64_2.100.102.8.plugin
- com.bjninstallpluginLib.bjninstallpluginx64
/Users/USER/Library/Internet Plug-Ins/bjnpluginx64_2.100.102.8.plugin
- com.bjnpluginLib.bjnpluginx64
dylibs
/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib
/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib
/Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.824/_platform_specific/mac_x64/libwidev inecdm.dylib
/usr/local/ssl/lib/libcrypto.1.0.0.dylib
/usr/local/ssl/lib/libssl.1.0.0.dylib
App extensions
com.getdropbox.dropbox.garcon
com.wunderkinder.wunderlistdesktop.sharingextension
com.wunderkinder.wunderlistdesktop.todayextension
Contents of /Library/LaunchAgents/com.SoftwareUpdater.agent.plist
- mod date: Oct 27 16:29:54 2015
- checksum: 638879705
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.SoftwareUpdater.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/SoftwareUpdater/SoftwareUpdater</string>
<string>-guid</string>
<string>49887291845238137</string>
<string>-source</string>
<string>mm-1544</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
...and 7 more line(s)
Contents of /Library/LaunchAgents/com.WebShoppers.agent.plist
- mod date: Oct 27 16:29:53 2015
- checksum: 3378066472
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.WebShoppers.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/WebShoppers/WebShoppers</string>
<string>-guid</string>
<string>49887291845238137</string>
<string>-source</string>
<string>mm-1544</string>
<string>-brand</string>
<string>WebShoppers</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
...and 7 more line(s)
Contents of /Library/LaunchAgents/com.coupons.coupond.plist
- mod date: Feb 19 20:43:05 2014
- checksum: 371175040
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.coupons.coupond</string>
<key>Debug</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Coupons/coupond</string>
<string>launchd</string>
</array>
<key>Sockets</key>
<dict>
<key>SecondaryListeningSocket</key>
<dict>
<key>SockServiceName</key>
<string>26876</string>
<key>SockNodeName</key>
<string>localhost</string>
<key>SockFamily</key>
<string>IPv4</string>
</dict>
<key>PrimaryListeningSocket</key>
...and 11 more line(s)
Contents of /Library/LaunchDaemons/com.fitbit.galileod.plist
- mod date: Oct 22 06:34:04 2013
- checksum: 333804614
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Program</key>
<string>/usr/local/bin/galileod</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/bin/galileod</string>
</array>
<key>Label</key>
<string>com.fitbit.galileod</string>
<key>UserName</key>
<string>root</string>
<key>GroupName</key>
<string>daemon</string>
<key>InitGroups</key>
<true/>
<key>OnDemand</key>
<false/>
<key>ServiceIPC</key>
<true/>
<key>Sockets</key>
<dict>
<key>UserClients</key>
...and 27 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.SafariPlugInUpdateNotifier.plist
- mod date: Oct 2 01:48:16 2015
- checksum: 941105980
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnablePressuredExit</key>
<true/>
<key>Label</key>
<string>com.apple.SafariPlugInUpdateNotifier</string>
<key>Program</key>
<string>/usr/libexec/SafariPlugInUpdateNotifier</string>
<key>LaunchEvents</key>
<dict>
<key>com.apple.fsevents.matching</key>
<dict>
<key>UserFlashPlugInModified</key>
<dict>
<key>Path</key>
<string>~/Library/Internet Plug-Ins/Flash Player.plugin</string>
</dict>
<key>SystemFlashPlugInModified</key>
<dict>
<key>Path</key>
<string>/Library/Internet Plug-Ins/Flash Player.plugin</string>
</dict>
</dict>
...and 3 more line(s)
Contents of Library/LaunchAgents/com.SoftwareUpdater.agent.plist
- mod date: Oct 27 16:29:54 2015
- checksum: 638879705
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableGlobbing</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.SoftwareUpdater.agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/SoftwareUpdater/SoftwareUpdater</string>
<string>-guid</string>
<string>49887291845238137</string>
<string>-source</string>
<string>mm-1544</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
...and 7 more line(s)
Contents of Library/LaunchAgents/com.google.keystone.agent.plist
- mod date: Sep 21 20:32:22 2015
- checksum: 3939487083
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.google.keystone.user.agent</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
<string>-runMode</string>
<string>ifneeded</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3523</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.valvesoftware.steamclean.plist
- mod date: Jun 30 14:29:22 2015
- checksum: 1161759749
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.valvesoftware.steamclean</string>
<key>Program</key>
<string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>
<string>Public</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>SteamContentPaths</key>
<array>
<string>/Users/USER/Library/Application Support/Steam/SteamApps</string>
</array>
<key>ThrottleInterval</key>
<integer>60</integer>
<key>WatchPaths</key>
<array>
<string>/Applications/Steam.app</string>
<string>/Applications/Steam 2.app</string>
...and 3 more line(s)
User login items
Steam
- /Applications/Steam.app
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
Dropbox
- /Applications/Dropbox.app
SpeechSynthesisServer
- /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app
Fitbit Connect Menubar Helper
- /Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app
Safari extensions
SearchTrust
- com.searchtrust.safariext
iCloud errors
CallHistorySyncHelper: 2
Finder: 1
Spotlight: 1
accountsd: 4
storedownloadd: 10
Restricted files: 50
Elapsed time (sec): 345
