how do you uninstall ad pop ups from cinemapro1-2?
whenever I go to a web page I now get popup adds all over the page due to this cinemapro1-2 being downloaded from somewhere...help
MacBook Air, OS X Yosemite (10.10.2)
Apple Event: May 7th at 7 am PT
whenever I go to a web page I now get popup adds all over the page due to this cinemapro1-2 being downloaded from somewhere...help
MacBook Air, OS X Yosemite (10.10.2)
Start time: 10:08:12 03/01/15
Revision: 1237
Model Identifier: MacBookPro8,2
System Version: OS X 10.10.3 (14D87h)
Kernel Version: Darwin 14.3.0
Time since boot: 1 day19:16
UID: 502
Memory
BANK 0/DIMM0
Size: 8 GB
Speed: 1333 MHz
Status: OK
Manufacturer: 0x859B
BANK 1/DIMM0
Size: 8 GB
Speed: 1333 MHz
Status: OK
Manufacturer: 0x859B
SerialATA
Hitachi HTS725050A9A362
Memory (MB)
kernel_task (UID 0): 1150
Login hook
/usr/local/cdm/bin/onboot_loginhook
Profiles: 6
Trusted certs (user)
mail.seattleserver.com x2
DNS: 75.75.75.75
TCP/IP
IPv6: Off
Listeners
kdc: kerberos
launchd: ssh
System caches/logs
3851 MB: /System/Library/Caches/com.apple.coresymbolicationd/data
Diagnostic reports
2015-02-20 Mail crash
2015-02-22 Final Cut Pro hang
2015-02-27 Safari crash
2015-02-28 soagent crash
Kernel log
Feb 28 22:10:32 WARNING: hibernate_page_list_setall skipped 42377 xpmapped pages
Feb 28 23:58:56 could discard act 318683 inact 194445 purgeable 30802 spec 1020957 cleaned 0
Feb 28 23:58:56 WARNING: hibernate_page_list_setall skipped 42377 xpmapped pages
Feb 28 23:59:24 could discard act 278683 inact 194443 purgeable 30802 spec 1020956 cleaned 0
Feb 28 23:59:24 WARNING: hibernate_page_list_setall skipped 42377 xpmapped pages
Mar 1 01:47:49 could discard act 322094 inact 199418 purgeable 31302 spec 1021253 cleaned 0
Mar 1 01:47:49 WARNING: hibernate_page_list_setall skipped 42377 xpmapped pages
Mar 1 01:48:17 could discard act 282094 inact 199417 purgeable 31302 spec 1021253 cleaned 0
Mar 1 01:48:17 WARNING: hibernate_page_list_setall skipped 42397 xpmapped pages
Mar 1 03:36:42 could discard act 322023 inact 199593 purgeable 31277 spec 1021771 cleaned 0
Mar 1 03:36:42 WARNING: hibernate_page_list_setall skipped 42397 xpmapped pages
Mar 1 03:37:10 could discard act 282023 inact 199593 purgeable 31277 spec 1021771 cleaned 0
Mar 1 03:37:10 WARNING: hibernate_page_list_setall skipped 42404 xpmapped pages
Mar 1 05:25:35 could discard act 322033 inact 200262 purgeable 31299 spec 1022112 cleaned 0
Mar 1 05:25:35 WARNING: hibernate_page_list_setall skipped 42404 xpmapped pages
Mar 1 05:26:03 could discard act 282033 inact 200260 purgeable 31299 spec 1022111 cleaned 0
Mar 1 05:26:03 WARNING: hibernate_page_list_setall skipped 42405 xpmapped pages
Mar 1 07:14:28 could discard act 321993 inact 199910 purgeable 31306 spec 1022068 cleaned 0
Mar 1 07:14:28 WARNING: hibernate_page_list_setall skipped 42405 xpmapped pages
Mar 1 07:14:56 could discard act 281993 inact 199910 purgeable 31306 spec 1022068 cleaned 0
Mar 1 07:14:56 WARNING: hibernate_page_list_setall skipped 42405 xpmapped pages
Mar 1 09:03:21 could discard act 321302 inact 200155 purgeable 31294 spec 1021669 cleaned 0
Mar 1 09:03:21 WARNING: hibernate_page_list_setall skipped 42405 xpmapped pages
Mar 1 09:03:49 could discard act 281302 inact 200155 purgeable 31294 spec 1021669 cleaned 0
Mar 1 09:03:49 WARNING: hibernate_page_list_setall skipped 42406 xpmapped pages
System log
Reason: no suitable image found. Did find:
/Library/Application Support/ProApps/SharedA/Frameworks/LiveType.framework/Versions/A/LiveType: open() failed with errno=1
Mar 1 09:42:57 com.apple.WebKit.Plugin.32 Error loading /Library/QuickTime/Motion.component/Contents/MacOS/Motion: dlopen(/Library/QuickTime/Motion.component/Contents/MacOS/Motion, 262): Library not loaded: /Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore
Referenced from: /Library/QuickTime/Motion.component/Contents/MacOS/Motion
Reason: no suitable image found. Did find:
/Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore: open() failed with errno=1
Mar 1 09:42:57 com.apple.WebKit.Plugin.32 Error loading /Library/QuickTime/Motion.component/Contents/MacOS/Motion: dlopen(/Library/QuickTime/Motion.component/Contents/MacOS/Motion, 262): Library not loaded: /Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore
Referenced from: /Library/QuickTime/Motion.component/Contents/MacOS/Motion
Reason: no suitable image found. Did find:
/Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore: open() failed with errno=1
Mar 1 09:50:25 WindowServer WSGetSurfaceInWindow : Invalid surface 1615104095 for window 1477
Mar 1 09:50:25 WindowServer WSGetSurfaceInWindow : Invalid surface 1615104095 for window 1477
Mar 1 09:53:39 com.apple.WebKit.Plugin.32 Error loading /Library/QuickTime/LiveType.component/Contents/MacOS/LiveType: dlopen(/Library/QuickTime/LiveType.component/Contents/MacOS/LiveType, 262): Library not loaded: /Library/Application Support/ProApps/SharedA/Frameworks/LiveType.framework/Versions/A/LiveType
Referenced from: /Library/QuickTime/LiveType.component/Contents/MacOS/LiveType
Reason: no suitable image found. Did find:
/Library/Application Support/ProApps/SharedA/Frameworks/LiveType.framework/Versions/A/LiveType: open() failed with errno=1
Mar 1 09:53:39 com.apple.WebKit.Plugin.32 Error loading /Library/QuickTime/Motion.component/Contents/MacOS/Motion: dlopen(/Library/QuickTime/Motion.component/Contents/MacOS/Motion, 262): Library not loaded: /Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore
Referenced from: /Library/QuickTime/Motion.component/Contents/MacOS/Motion
Reason: no suitable image found. Did find:
/Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore: open() failed with errno=1
Mar 1 09:53:39 com.apple.WebKit.Plugin.32 Error loading /Library/QuickTime/Motion.component/Contents/MacOS/Motion: dlopen(/Library/QuickTime/Motion.component/Contents/MacOS/Motion, 262): Library not loaded: /Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore
Referenced from: /Library/QuickTime/Motion.component/Contents/MacOS/Motion
Reason: no suitable image found. Did find:
/Library/Application Support/ProApps/SharedA/Frameworks/ProCore.framework/Versions/A/ProCore: open() failed with errno=1
Mar 1 10:08:19 spindump No microstackshots found
Console log
Feb 25 08:27:31 nsurlstoraged purgeEntireFileSystemStore - failed to remove existing target dir /var/folders/dj/vn6g_53x4f93jw35zvdlmft80000gp/T/fsCachedData_remove. Errno=2
Feb 25 08:27:31 nsurlstoraged purgeEntireFileSystemStore - failed to remove existing target dir /var/folders/dj/vn6g_53x4f93jw35zvdlmft80000gp/T/fsCachedData_remove. Errno=2
Feb 25 08:27:31 nsurlstoraged asyncCacheDirectoryRemove - failed to remove old cache dir /var/folders/dj/vn6g_53x4f93jw35zvdlmft80000gp/T/fsCachedData_remove. Errno=2
Feb 25 08:27:32 nsurlstoraged purgeEntireFileSystemStore - failed to rename the current cache dir /Users/USER/Library/Caches/storeaccountd/fsCachedData to new cache dir /var/folders/dj/vn6g_53x4f93jw35zvdlmft80000gp/T/fsCachedData_remove. Errno=66
Feb 25 19:33:01 callservicesd Error loading /Library/Audio/Plug-Ins/HAL/DVCPROHDAudio.plugin/Contents/MacOS/DVCPROHDAudio: dlopen(/Library/Audio/Plug-Ins/HAL/DVCPROHDAudio.plugin/Contents/MacOS/DVCPROHD Audio, 262): no suitable image found. Did find:
/Library/Audio/Plug-Ins/HAL/DVCPROHDAudio.plugin/Contents/MacOS/DVCPROHDAudio: no matching architecture in universal wrapper
Feb 25 19:33:01 callservicesd Cannot find function pointer NewPlugIn for factory UUID in CFBundle/CFPlugIn 0x7fc772d01d60 </Library/Audio/Plug-Ins/HAL/DVCPROHDAudio.plugin> (bundle, not loaded)
Feb 25 20:53:17 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 26 02:16:29 ReportCrash Invoking spindump for pid=2314 wakeups_rate=5362 duration=9 because of excessive wakeups
Feb 26 04:25:08 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 27 08:48:01 ReportCrash Invoking spindump for pid=3313 wakeups_rate=9388 duration=5 because of excessive wakeups
Feb 27 08:48:08 ReportCrash Invoking spindump for pid=3313 wakeups_rate=141962 duration=1 because of excessive wakeups
Feb 27 08:48:35 ReportCrash Invoking spindump for pid=3351 wakeups_rate=9856 duration=5 because of excessive wakeups
Feb 27 08:49:18 ReportCrash Invoking spindump for pid=3351 wakeups_rate=1106 duration=41 because of excessive wakeups
Feb 27 09:19:00 ReportCrash Invoking spindump for pid=3598 thread=652060 percent_cpu=62 duration=146 because of excessive cpu utilization
Feb 27 09:25:02 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 28 10:43:14 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 28 10:43:14 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
Feb 28 10:43:15 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 28 10:43:15 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 28 10:43:17 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 28 10:43:18 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 28 10:43:30 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Feb 28 10:43:32 ReportCrash Invoking spindump for pid=699 wakeups_rate=458 duration=99 because of excessive wakeups
Feb 28 10:43:35 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
Daemons
com.adobe.SwitchBoard
com.adobe.fpsaud
com.apple.CrashReporterSupportHelper
com.apple.Kerberos.kdc
- status: 1
com.apple.aelwriter
com.apple.bluetoothReporter
com.apple.cdm.set_ipfw
com.apple.cdm.sethostname
com.apple.dpaudiothru
com.apple.iBooksX-SecureUserDefaults
com.apple.locationd
- status: 1
com.apple.mtrecorder
- status: 78
com.apple.noticeboard.state
com.apple.watchdogd
com.google.keystone.daemon
com.macpaw.CleanMyMac2.Agent
com.microsoft.office.licensing.helper
com.oracle.java.Helper-Tool
com.oracle.java.JavaUpdateHelper
com.vmware.launchd.vmware
- status: 71
org.gpgtools.gpgmail.uuid-patcher
org.macosforge.xquartz.privileged_startx
Agents
2BUA8C4S2C.com.agilebits.onepassword-osx-helper
com.adobe.AAM.Scheduler-1.0
com.adobe.ARM.UUID
com.akamai.single-user-client
com.amazon.sendtokindle.launcher
com.apple.AirPortBaseStationAgent
com.apple.CallHistoryPluginHelper
com.apple.noticeboard.agent
com.apple.photostream-agent
com.apple.pluginkit.pkreporter
com.apple.soagent
- status: -11
com.apple.xpc.loginitemregisterd
com.cinemapro1-2.agent
com.citrixonline.GoToMeeting.G2MUpdate
- status: 78
com.extensions.updater69337.agent.plist
com.google.keystone.system.agent
com.hp.printerAgent
com.jdibackup.ZipCloud.autostart
com.jdibackup.ZipCloud.notify
com.mackeeper.MacKeeper.Helper
com.mackeeper.MacKeeper.service.clean
com.macpaw.CleanMyMac2Helper.diskSpaceWatcher
com.macpaw.CleanMyMac2Helper.scheduledScan
com.macpaw.CleanMyMac2Helper.trashWatcher
com.oracle.java.Java-Updater
com.sony.SonyAutoLauncher.agent
com.spotify.webhelper
com.zimbra.UUID
- status: 9
com.zimbra.desktop
net.culater.SIMBL.Agent
org.gpgtools.Libmacgpg.xpc
org.gpgtools.gpgmail.enable-bundles
org.gpgtools.gpgmail.updater
org.gpgtools.gpgmail.user-uuid-patcher
org.gpgtools.macgpg2.fix
org.gpgtools.macgpg2.shutdown-gpg-agent
org.macosforge.xquartz.startx
User overrides
com.evernote.EvernoteHelper
2BUA8C4S2C.com.agilebits.onepassword4-helper
org.gpgtools.macgpg2.updater
com.apple.Compressor.SharingHelper
com.apple.Safari
Startup items
/Library/StartupItems/AltirisAgent/AltirisAgent
/Library/StartupItems/AltirisAgent/StartupParameters.plist
Global login items
/Applications/Nikon Software/Nikon Message Center 2/Nikon Message Center 2.app/Contents/SharedSupport/Launch Nikon Message Center 2.app
User login items
smcFanControl
- /Applications/smcfancontrol_2_4/smcFanControl.app
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
SOHOCalendarsService
- /Applications/SOHO Organizer 9/SOHO Organizer.app/Contents/MacOS/SOHOCalendarsService.app
AdobeResourceSynchronizer
- /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app
Dropbox
- /Applications/Dropbox.app
Safari extensions
1Password
- com.agilebits.onepassword4-safari
DuckDuckGo
- com.duckduckgo.safari
DuckDuckGoBar
- com.vaporstun.duckduckgobar
feedly
- com.devhd.feedly
Reload Button
- org.siracusafamily.reloadbutton
searchtab
- com.searchtab.safariext
Subscribe To Feed
- com.red-sweater.safari.subscribetofeed
Firefox extensions
Mozilla Firefox hotfix
Widgets
LaunchWebex
iCloud errors
cloudd 4
comapple.CloudPhotosConfiguration 3
Spotlight 3
cloudphotosd 2
Mail 1
Finder 1
CallHistorySyncHelper 1
Continuity errors
sharingd 10
Restricted files: 6472
Lockfiles: 108
Accessibility
Contents of /Library/LaunchAgents/com.amazon.sendtokindle.launcher.plist
- mod date: Oct 28 16:40:40 2014
- checksum: 200870336
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.amazon.sendtokindle.launcher</string>
<key>ProgramArguments</key>
<array>
<string>/usr/bin/stkLaunchAgent.sh</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
- mod date: Jan 25 18:52:53 2013
- checksum: 2531989602
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.Java-Updater</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
<string>-bgcheck</string>
</array>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>15</integer>
<key>Minute</key>
<integer>22</integer>
<key>Weekday</key>
<integer>6</integer>
</dict>
</dict>
...and 1 more line(s)
Contents of /Library/LaunchAgents/com.sony.SonyAutoLauncher.agent.plist
- mod date: Dec 16 00:30:55 2014
- checksum: 2500863703
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.sony.SonyAutoLauncher.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/Sony Application Launcher/SonyAutoLauncher.app/Contents/MacOS/SonyAutoLauncher</string>
</array>
<key>KeepAlive</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/net.culater.SIMBL.Agent.plist
- mod date: Jan 8 14:30:46 2012
- checksum: 1107421619
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>net.culater.SIMBL.Agent</string>
<key>Program</key>
<string>/Library/ScriptingAdditions/SIMBL.osax/Contents/Resources/SIMBL Agent.app/Contents/MacOS/SIMBL Agent</string>
<key>RunAtLoad</key>
<false/>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.gpgtools.Libmacgpg.xpc.plist
- mod date: Feb 6 17:51:29 2015
- checksum: 2633516353
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>org.gpgtools.Libmacgpg.xpc</string>
<key>MachServices</key>
<dict>
<key>org.gpgtools.Libmacgpg.xpc_OpenStep</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/GPGTools/org.gpgtools.Libmacgpg.xpc</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.enable-bundles.plist
- mod date: Feb 7 13:27:10 2015
- checksum: 4256729205
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.gpgtools.gpgmail.enable-bundles</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/GPGTools/uuid-patcher</string>
<string>enable-bundles</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.patch-uuid-user.plist
- mod date: Feb 7 13:27:10 2015
- checksum: 2367346596
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.gpgtools.gpgmail.user-uuid-patcher</string>
<key>Program</key>
<string>/Library/Application Support/GPGTools/uuid-patcher</string>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.updater.plist
- mod date: Feb 7 13:27:08 2015
- checksum: 1478458542
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>StartInterval</key>
<integer>10800</integer>
<key>Label</key>
<string>org.gpgtools.gpgmail.updater</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/MacGPG2/libexec/MacGPG2_Updater.app/Contents/MacOS/MacGPG2_U pdater</string>
<string>/Library/Application Support/GPGTools/GPGMail_Updater.app/Contents/MacOS/GPGMail_Updater</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.fix.plist
- mod date: Feb 6 19:46:33 2015
- checksum: 3267088882
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>org.gpgtools.macgpg2.fix</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/MacGPG2/libexec/fixGpgHome</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.shutdown-gpg-agent.plist
- mod date: Feb 6 19:46:33 2015
- checksum: 3222670079
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.gpgtools.macgpg2.shutdown-gpg-agent</string>
<key>Program</key>
<string>/usr/local/MacGPG2/libexec/shutdown-gpg-agent</string>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<dict>
<key>SuccessfulExit</key>
<true/>
</dict>
<key>ExitTimeOut</key>
<integer>5</integer>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.updater.plist
- mod date: Feb 6 19:46:33 2015
- checksum: 1275281879
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>StartInterval</key>
<integer>10800</integer>
<key>Label</key>
<string>org.gpgtools.macgpg2.updater</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/MacGPG2/libexec/MacGPG2_Updater.app/Contents/MacOS/MacGPG2_U pdater</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist
- mod date: Aug 11 14:52:54 2014
- checksum: 2451978492
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.macosforge.xquartz.startx</string>
<key>ProgramArguments</key>
<array>
<string>/opt/X11/lib/X11/xinit/launchd_startx</string>
<string>/opt/X11/bin/startx</string>
<string>--</string>
<string>/opt/X11/bin/Xquartz</string>
</array>
<key>Sockets</key>
<dict>
<key>org.macosforge.xquartz:0</key>
<dict>
<key>SecureSocketWithKey</key>
<string>DISPLAY</string>
</dict>
</dict>
<key>ServiceIPC</key>
<true/>
<key>EnableTransactions</key>
<true/>
...and 2 more line(s)
Contents of /Library/LaunchDaemons/com.apple.cdm.ofpw.plist
- mod date: Jul 16 13:23:26 2010
- checksum: 1970530025
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.apple.cdm.ofpw</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/cdm/bin/onboot_ofpw.sh</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.apple.cdm.set_ipfw.plist
- mod date: Oct 20 15:17:41 2008
- checksum: 2977799171
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.cdm.set_ipfw</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/cdm/bin/onboot_set_ipfw</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.apple.cdm.set_screen_sharing_acl.plist
- mod date: Sep 6 17:17:54 2011
- checksum: 4058183494
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.apple.cdm.set_screen_sharing_acl</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/cdm/bin/onboot_set_screen_sharing_acl</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.apple.cdm.setcomputername.plist
- mod date: Jan 25 16:55:15 2010
- checksum: 3537285482
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.apple.cdm.setcomputername</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/cdm/bin/onboot_setcomputername.py</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.apple.cdm.sethostname.plist
- mod date: Sep 9 15:05:29 2008
- checksum: 3317775009
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.cdm.sethostname</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/cdm/bin/onboot_hostname</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.apple.qmaster.qmasterd.plist
- mod date: Aug 25 18:24:23 2010
- checksum: 681742547
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.qmaster.qmasterd</string>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/qmasterd</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.macpaw.CleanMyMac2.Agent.plist
- mod date: Feb 9 23:32:20 2015
- checksum: 2453449774
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.macpaw.CleanMyMac2.Agent</string>
<key>MachServices</key>
<dict>
<key>com.macpaw.CleanMyMac2.Agent</key>
<true/>
</dict>
<key>Program</key>
<string>/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent</string>
</array>
<key>Sockets</key>
<dict>
<key>MasterSocket</key>
<dict>
<key>SockFamily</key>
<string>Unix</string>
<key>SockPathMode</key>
<integer>438</integer>
...and 8 more line(s)
Contents of /Library/LaunchDaemons/com.vmware.launchd.vmware.plist
- mod date: May 21 17:17:40 2011
- checksum: 1467462916
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"
"http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.vmware.launchd.vmware</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/VMware Fusion/boot.sh</string>
<string>--start</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/org.gpgtools.gpgmail.patch-uuid.plist
- mod date: Feb 7 13:27:10 2015
- checksum: 4206690072
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>org.gpgtools.gpgmail.uuid-patcher</string>
<key>Program</key>
<string>/Library/Application Support/GPGTools/uuid-patcher</string>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<false/>
</dict>
</plist>
Contents of /Library/Preferences/SystemConfiguration/com.apple.Boot.plist
- mod date: Sep 15 12:11:19 2014
- checksum: 1064686563
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Kernel Architecture</key>
<string>i386</string>
<key>Kernel Flags</key>
<string></string>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.AOSHeartbeat.plist
- mod date: Sep 7 23:47:46 2014
- checksum: 931332229
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>RunAtLoad</key>
<true/>
<key>Label</key>
<string>com.apple.AOSHeartbeat</string>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/AOSKit.framework/Helpers/AOSHeartbeat .app/Contents/MacOS/AOSHeartbeat</string>
<key>EnvironmentVariables</key>
<dict>
<key>NSRunningFromLaunchd</key>
<string>1</string>
</dict>
<key>EnableTransactions</key>
<true/>
<key>LaunchEvents</key>
<dict>
<key>com.apple.xpc.activity</key>
<dict>
<key>com.apple.AOSHeartbeat.daily</key>
<dict>
<key>Priority</key>
<string>Utility</string>
...and 9 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.CallHistoryPluginHelper.plist
- Apple binary property list
- mod date: Aug 20 22:24:36 2014
- checksum: 2622390109
Dict {
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.CallHistoryPluginHelper = true
}
EnableTransactions = true
ProgramArguments = Array {
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPlug inHelper
}
LaunchEvents = Dict {
com.apple.notifyd.matching = Dict {
com.apple.CallHistoryPluginHelper.launchnotification = Dict {
Notification = com.apple.CallHistoryPluginHelper.launchnotification
}
}
}
EnablePressuredExit = true
Label = com.apple.CallHistoryPluginHelper
}
Contents of /System/Library/LaunchAgents/com.apple.CallHistorySyncHelper.plist
- Apple binary property list
- mod date: Aug 12 23:14:47 2014
- checksum: 3198114220
Dict {
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.CallHistorySyncHelper.aps = true
com.apple.CallHistorySyncHelper = true
}
EnableTransactions = true
ProgramArguments = Array {
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySync Helper
}
LaunchEvents = Dict {
com.apple.notifyd.matching = Dict {
com.apple.callhistorysync.idslaunchnotification = Dict {
Notification = com.apple.callhistorysync.idslaunchnotification
}
}
}
EnablePressuredExit = true
Label = com.apple.CallHistorySyncHelper
}
Contents of /System/Library/LaunchAgents/com.apple.CoreAuthentication.daemon.plist
- Apple binary property list
- mod date: Jul 12 00:05:42 2014
- checksum: 922473943
Dict {
ProgramArguments = Array {
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
}
EnablePressuredExit = true
MachServices = Dict {
com.apple.CoreAuthentication.daemon = Dict {
}
com.apple.CoreAuthentication.daemon.libxpc = Dict {
}
}
Label = com.apple.CoreAuthentication.daemon
EnableTransactions = true
}
Contents of /System/Library/LaunchAgents/com.apple.EscrowSecurityAlert.plist
- Apple binary property list
- mod date: Jun 30 12:16:19 2014
- checksum: 4017230740
Dict {
seatbelt-profiles = SecureBackupAlert
ProcessType = Background
EnableTransactions = true
ProgramArguments = Array {
/System/Library/PrivateFrameworks/CloudServices.framework/Resources/EscrowSecur ityAlert.app/Contents/MacOS/EscrowSecurityAlert
}
LaunchEvents = Dict {
com.apple.notifyd.matching = Dict {
com.apple.EscrowSecurityAlert.server = Dict {
Notification = com.apple.EscrowSecurityAlert.server
}
com.apple.EscrowSecurityAlert.record = Dict {
Notification = com.apple.EscrowSecurityAlert.record
}
com.apple.EscrowSecurityAlert.reset = Dict {
Notification = com.apple.EscrowSecurityAlert.reset
}
}
com.apple.xpc.activity = Dict {
com.apple.EscrowSecurityAlert.daily = Dict {
Priority = Utility
AllowBattery = true
PowerNap = true
Interval = 86400
...and 6 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.FileStatsAgent.plist
- mod date: May 31 08:45:21 2014
- checksum: 2415498289
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>CFBundleIdentifier</key>
<string>com.apple.FileStatsAgent.launcher</string>
<key>Label</key>
<string>com.apple.FileStatsAgent</string>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/FileStatsAgent</string>
</array>
<key>LaunchEvents</key>
<dict>
<key>com.apple.xpc.activity</key>
<dict>
<key>com.apple.FileStatsAgent</key>
<dict>
<key>Interval</key>
<real>604800</real>
<key>AllowBattery</key>
<false/>
<key>PowerNap</key>
<true/>
<key>Priority</key>
...and 12 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.FontWorker.plist
- mod date: Jun 6 00:03:52 2014
- checksum: 2995792598
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnablePressuredExit</key>
<false/>
<key>Label</key>
<string>com.apple.FontWorker</string>
<key>MachServices</key>
<dict>
<key>com.apple.FontWorker</key>
<true/>
<key>com.apple.FontWorker.ATS</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Fra meworks/ATS.framework/Versions/A/Support/fontworker</string>
<key>EnableTransactions</key>
<true/>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.ManagedClientAgent.agent.plist
- mod date: Jun 30 12:08:07 2014
- checksum: 1154198691
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.ManagedClientAgent.agent</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/ManagedClient.app/Contents/Resources/Manag edClientAgent</string>
<string>-a</string>
</array>
<key>LaunchEvents</key>
<dict>
<key>com.apple.distnoted.matching</key>
<dict>
<key>com.apple.ManagedClient.agentNotifications.screenlock</key>
<dict>
<key>Name</key>
<string>CPProfileScreenLockChangedNotification</string>
</dict>
<key>com.apple.ManagedClient.agentNotifications.KickUniversalAccessAgent</key>
<dict>
<key>Name</key>
<string>MCX_KickUniversalAccessAgentNotification</string>
</dict>
...and 14 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.ReportCrash.Self.plist
- mod date: Jun 30 11:56:04 2014
- checksum: 1095448497
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.ReportCrash.Self</string>
<key>MachServices</key>
<dict>
<key>com.apple.ReportCrash.Self</key>
<dict>
<key>DrainMessagesOnCrash</key>
<string>All</string>
</dict>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/ReportCrash</string>
</array>
<key>MachExceptionHandler</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>ProcessType</key>
<string>Interactive</string>
</dict>
...and 1 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.ReportCrash.plist
- mod date: Jun 30 11:56:04 2014
- checksum: 2343421155
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.ReportCrash</string>
<key>MachServices</key>
<dict>
<key>com.apple.ReportCrash</key>
<dict>
<key>DrainMessagesOnCrash</key>
<string>All</string>
<key>ExceptionServer</key>
<dict/>
</dict>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/ReportCrash</string>
</array>
<key>MachExceptionHandler</key>
<string>com.apple.ReportCrash.Self</string>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>ProcessType</key>
...and 3 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.accountsd.plist
- Apple binary property list
- mod date: Jun 21 15:52:25 2014
- checksum: 368635125
Dict {
ProgramArguments = Array {
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
}
MachServices = Dict {
com.apple.accountsd.accountmanager = true
com.apple.accountsd.oauthsigner = true
}
POSIXSpawnType = Adaptive
LimitLoadToSessionType = Array {
Aqua
}
Label = com.apple.accountsd
}
Contents of /System/Library/LaunchAgents/com.apple.assistantd.plist
- mod date: Jun 26 19:27:38 2014
- checksum: 830393579
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.apple.assistant.client</key>
<true/>
<key>com.apple.assistant.dictation</key>
<true/>
<key>com.apple.assistant.sync</key>
<true/>
<key>com.apple.assistant.settings</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/PrivateFrameworks/AssistantServices.framework/assistant d</string>
</array>
<key>Label</key>
<string>com.apple.assistantd</string>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.cfprefsd.xpc.agent.plist
- Apple binary property list
- mod date: Aug 27 17:40:05 2014
- checksum: 2120227459
Dict {
POSIXSpawnType = Adaptive
LimitLoadToSessionType = Background
MachServices = Dict {
com.apple.cfprefsd.agent = true
}
DrainMessagesOnFailedInit = true
EnableTransactions = true
ProgramArguments = Array {
/usr/sbin/cfprefsd
agent
}
EnablePressuredExit = true
Label = com.apple.cfprefsd.xpc.agent
}
Contents of /System/Library/LaunchAgents/com.apple.coreservices.lsactivity.plist
- Apple binary property list
- mod date: Jul 1 00:36:42 2014
- checksum: 4012745375
Dict {
Label = com.apple.coreservices.lsactivity
POSIXSpawnType = Adaptive
LimitLoadToSessionType = Array {
Aqua
LoginWindow
}
MachServices = Dict {
com.apple.coreservices.lsbestappsuggestionmanager.xpc = true
com.apple.coreservices.lsactivitymanager.xpc = true
com.apple.coreservices.lsuseractivitymanager.xpc = true
com.apple.coreservices.lsuseractivity.simulatorsupport = true
com.apple.coreservices.lsuseractivityadministration.xpc = true
com.apple.coreservices.lssuggestedactionmanager.xpc = true
}
ProgramArguments = Array {
/System/Library/CoreServices/lsuseractivityd
}
RunAtLoad = false
DrainMessagesAfterFailedInit = true
}
Contents of /System/Library/LaunchAgents/com.apple.coreservices.uiagent.plist
- mod date: Jun 5 20:25:11 2014
- checksum: 169029494
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.coreservices.uiagent</string>
<key>Program</key>
<string>/System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/Cor eServicesUIAgent</string>
<key>MachServices</key>
<dict>
<key>com.apple.coreservices.quarantine-resolver</key>
<true/>
</dict>
<key>OnDemand</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
<key>EnableTransactions</key>
<true/>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.csuseragent.plist
- mod date: Jun 27 23:47:06 2014
- checksum: 2171834995
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.csuseragent</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/CSUserAgent</string>
</array>
<key>MachServices</key>
<dict>
<key>com.apple.csuseragent</key>
<true/>
</dict>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.familynotificationd.plist
- mod date: Jun 30 12:16:57 2014
- checksum: 557551559
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.familynotificationd</string>
<key>MachServices</key>
<dict>
<key>com.apple.familynotification.agent</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/FamilyNotification.framework/Versions /A/Resources/Family.app/Contents/MacOS/Family</string>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>LaunchEvents</key>
<dict>
<key>com.apple.usernotificationcenter.matching</key>
<dict>
<key>FamilyNotification</key>
...and 39 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.helpd.plist
- mod date: Jun 25 19:26:22 2014
- checksum: 837896068
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>WatchPaths</key>
<array>
<string>/Applications/</string>
<string>/Applications/Utilities/</string>
</array>
<key>Label</key>
<string>com.apple.helpd</string>
<key>MachServices</key>
<dict>
<key>com.apple.helpd</key>
<true/>
</dict>
<key>OnDemand</key>
<true/>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/HelpData.framework/Versions/A/Resourc es/helpd</string>
<key>EnableTransactions</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>LimitLoadToSessionType</key>
...and 13 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.icloud.fmfd.plist
- Apple binary property list
- mod date: Aug 20 18:53:47 2014
- checksum: 1376544387
Dict {
Umask = 23
Label = com.apple.icloud.fmfd
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.icloud.fmfd.aps = true
com.apple.icloud.fmfd = true
}
EnableTransactions = true
WorkingDirectory = /var/empty
EnablePressuredExit = true
Program = /usr/libexec/fmfd
}
Contents of /System/Library/LaunchAgents/com.apple.iconservices.iconservicesagent.plist
- mod date: Jun 5 20:34:59 2014
- checksum: 2233617483
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.iconservices.iconservicesagent</string>
<key>MachServices</key>
<dict>
<key>com.apple.iconservices</key>
<true/>
</dict>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/iconservicesagent</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>EnableTransactions</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.identityservicesd.plist
- Apple binary property list
- mod date: Jun 27 01:25:17 2014
- checksum: 1642670039
Dict {
ProgramArguments = Array {
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/ MacOS/identityservicesd
}
KeepAlive = Dict {
SuccessfulExit = false
}
Label = com.apple.identityservicesd
MachServices = Dict {
com.apple.identityservicesd.idquery.desktop.auth = true
com.apple.identityservicesd.desktop.auth = true
}
POSIXSpawnType = Interactive
EnvironmentVariables = Dict {
NSRunningFromLaunchd = 1
}
}
Contents of /System/Library/LaunchAgents/com.apple.midiserver.plist
- mod date: Jun 26 22:35:27 2014
- checksum: 481507669
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.midiserver</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/CoreMIDI.framework/MIDIServer</string>
</array>
<key>ProcessType</key>
<string>Interactive</string>
<key>MachServices</key>
<dict>
<key>com.apple.midiserver</key>
<true/>
<key>com.apple.midiserver.io</key>
<dict>
<key>HideUntilCheckIn</key>
<true/>
</dict>
</dict>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.noticeboard.agent.plist
- mod date: Jun 6 22:08:16 2014
- checksum: 2662890537
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.noticeboard.agent</string>
<key>MachServices</key>
<dict>
<key>com.apple.noticeboard.agent</key>
<true/>
</dict>
<key>OnDemand</key>
<true/>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Reso urces/nbagent.app/Contents/MacOS/nbagent</string>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>LaunchEvents</key>
<dict>
<key>com.apple.usernotificationcenter.matching</key>
...and 39 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.notificationcenterui.plist
- mod date: Jun 30 12:07:26 2014
- checksum: 839355068
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.apple.notificationcenterui.agent</string>
<key>Program</key>
<string>/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/Noti ficationCenter</string>
<key>ThrottleInterval</key>
<integer>1</integer>
<key>MachServices</key>
<dict>
<key>com.apple.notificationcetnerui.ping</key>
<true/>
<key>com.apple.notificationcenterui.alerts</key>
<dict>
<key>HideUntilCheckIn</key>
<true/>
</dict>
<key>com.apple.notificationcenterui.tcc</key>
<dict>
<key>HideUntilCheckIn</key>
<true/>
...and 12 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.pluginkit.pkreporter.plist
- mod date: Jun 30 12:00:44 2014
- checksum: 1549027084
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.pluginkit.pkreporter</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/pkreporter</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Minute</key>
<integer>10</integer>
<key>Hour</key>
<integer>6</integer>
<key>Weekday</key>
<integer>6</integer>
</dict>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.quicklook.plist
- mod date: Jul 12 00:04:16 2014
- checksum: 506771843
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.quicklook</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app /Contents/MacOS/quicklookd</string>
</array>
<key>MachServices</key>
<dict>
<key>com.apple.quicklook</key>
<true/>
</dict>
<key>WorkingDirectory</key>
<string>/tmp</string>
<key>ThrottleInterval</key>
<integer>1</integer>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>Aqua</string>
<string>LoginWindow</string>
...and 20 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.recentsd.plist
- Apple binary property list
- mod date: Jun 24 18:40:53 2014
- checksum: 3029805605
Dict {
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.corerecents.recentsd = true
}
EnableTransactions = true
ProgramArguments = Array {
/System/Library/PrivateFrameworks/CoreRecents.framework/Versions/A/Support/rece ntsd
}
LaunchEvents = Dict {
com.apple.notifyd.matching = Dict {
com.apple.corerecents.recentsd.kvstorechange = Dict {
Notification = com.apple.corerecents.recentsd.kvstorechange
}
}
}
EnablePressuredExit = true
Label = com.apple.recentsd
}
Contents of /System/Library/LaunchAgents/com.apple.rtcreportingd.plist
- mod date: Jul 1 23:46:17 2014
- checksum: 1612546414
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.apple.rtcreportingd</key>
<true/>
</dict>
<key>Label</key>
<string>com.apple.rtcreportingd</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/rtcreportingd</string>
</array>
<key>UserName</key>
<string>mobile</string>
<key>KeepAlive</key>
<false/>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.sbd.plist
- Apple binary property list
- mod date: Jun 30 12:15:38 2014
- checksum: 939665927
Dict {
ProcessType = Adaptive
LimitLoadToSessionType = Background
MachServices = Dict {
com.apple.securebackupd = true
}
EnableTransactions = true
ProgramArguments = Array {
/System/Library/PrivateFrameworks/CloudServices.framework/Resources/com.apple.s bd
}
LaunchEvents = Dict {
com.apple.notifyd.matching = Dict {
com.apple.security.keychainchanged = Dict {
Notification = com.apple.security.keychainchanged
}
com.apple.sbd.kvstorechange = Dict {
Notification = com.apple.sbd.kvstorechange
}
com.apple.security.secureobjectsync.circlechanged = Dict {
Notification = com.apple.security.secureobjectsync.circlechanged
}
}
}
EnablePressuredExit = true
Label = com.apple.sbd
...and 1 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.secd.plist
- mod date: Jul 31 03:25:35 2014
- checksum: 2685676326
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnablePressuredExit</key>
<true/>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<string>Background</string>
<key>POSIXSpawnType</key>
<string>Interactive</string>
<key>Label</key>
<string>com.apple.secd</string>
<key>MachServices</key>
<dict>
<key>com.apple.secd</key>
<true/>
<key>com.apple.securityd.xpc</key>
<true/>
</dict>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
...and 15 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.secinitd.plist
- mod date: Jun 30 12:51:27 2014
- checksum: 3908536107
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>EnvironmentVariables</key>
<dict/>
<key>Label</key>
<string>com.apple.secinitd</string>
<key>LimitLoadToSessionType</key>
<string>Background</string>
<key>MachServices</key>
<dict>
<key>com.apple.secinitd</key>
<true/>
</dict>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>Program</key>
<string>/usr/libexec/secinitd</string>
<key>ThrottleInterval</key>
<integer>1</integer>
</dict>
</plist>
Contents of /System/Library/LaunchAgents/com.apple.security.cloudkeychainproxy.plist
- mod date: Jun 6 22:10:11 2014
- checksum: 1597814055
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>ProcessType</key>
<string>Adaptive</string>
<key>LimitLoadToSessionType</key>
<string>Background</string>
<key>EnablePressuredExit</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/Security.framework/Versions/A/Resources/Clou dKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy</string>
</array>
<key>MachServices</key>
<dict>
<key>com.apple.security.cloudkeychainproxy3</key>
<true/>
</dict>
<key>RunAtLoad</key>
<false/>
<key>KeepAlive</key>
<false/>
<key>Program</key>
<string>/System/Library/Frameworks/Security.framework/Versions/A/Resources/Clou dKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy</string>
...and 32 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.soagent.plist
- Apple binary property list
- mod date: Jun 8 22:39:05 2014
- checksum: 735540544
Dict {
KeepAlive = Dict {
SuccessfulExit = false
}
Label = com.apple.soagent
EnvironmentVariables = Dict {
NSRunningFromLaunchd = 1
}
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.soagent = Dict {
ResetAtClose = true
}
}
ProgramArguments = Array {
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/C ontents/MacOS/soagent
}
RunAtLoad = true
EnablePressuredExit = true
LaunchEvents = Dict {
ichat = Dict {
bundleid = com.apple.ichat
events = Array {
didDeliverNotification
didActivateNotification
...and 8 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.spindump_agent.plist
- mod date: Jun 30 17:37:15 2014
- checksum: 894787029
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>EnableTransactions</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
<key>Label</key>
<string>com.apple.spindump_agent</string>
<key>MachServices</key>
<dict>
<key>com.apple.spinreporteragent</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/spindump_agent</string>
</array>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>RunAtLoad</key>
<true/>
...and 2 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.storeaccountd.plist
- mod date: Jun 7 04:17:04 2014
- checksum: 3670097190
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.storeaccountd</string>
<key>MachServices</key>
<dict>
<key>com.apple.storeaccountd</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Reso urces/storeaccountd</string>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>POSIXSpawnType</key>
<string>_AdaptiveUtility</string>
<key>ExitTimeOut</key>
<integer>1</integer>
</dict>
...and 1 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.storeassetd.plist
- mod date: Jun 7 04:16:47 2014
- checksum: 2465740781
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.storeassetd</string>
<key>MachServices</key>
<dict>
<key>com.apple.storeassetd</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Reso urces/storeassetd</string>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>POSIXSpawnType</key>
<string>_AdaptiveUtility</string>
<key>ExitTimeOut</key>
<integer>1</integer>
</dict>
...and 1 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.storedownloadd.plist
- mod date: Jun 7 04:16:59 2014
- checksum: 3703490721
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.storedownloadd</string>
<key>MachServices</key>
<dict>
<key>com.apple.storedownloadd</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Reso urces/storedownloadd</string>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>POSIXSpawnType</key>
<string>_AdaptiveUtility</string>
<key>ExitTimeOut</key>
<integer>1</integer>
</dict>
...and 1 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.storeinappd.plist
- mod date: Jun 7 04:17:07 2014
- checksum: 2615416634
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.storeinappd</string>
<key>MachServices</key>
<dict>
<key>com.apple.storeagent.storekit</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Reso urces/storeinappd</string>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>POSIXSpawnType</key>
<string>_AdaptiveUtility</string>
<key>ExitTimeOut</key>
<integer>1</integer>
</dict>
...and 1 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.storeuid.plist
- mod date: Jun 7 04:17:33 2014
- checksum: 1007171865
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.storeuid</string>
<key>MachServices</key>
<dict>
<key>com.apple.storeuid</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Reso urces/storeuid.app/Contents/MacOS/storeuid</string>
<key>EnableTransactions</key>
<true/>
<key>LimitLoadToSessionType</key>
<array>
<string>LoginWindow</string>
<string>Aqua</string>
</array>
<key>POSIXSpawnType</key>
<string>_AdaptiveUtility</string>
<key>ExitTimeOut</key>
<integer>1</integer>
</dict>
...and 1 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.universalaccessAuthWarn.plist
- mod date: Jul 25 22:43:28 2014
- checksum: 1975769629
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.universalaccessAuthWarn</string>
<key>MachServices</key>
<dict>
<key>com.apple.universalaccessAuthWarn</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/PrivateFrameworks/UniversalAccess.framework/Versions/A/ Resources/universalAccessAuthWarn.app/Contents/MacOS/universalAccessAuthWarn</st ring>
<string>launchd</string>
<string>-s</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>EnableTransactions</key>
<true/>
<key>ThrottleInterval</key>
<integer>5</integer>
<key>POSIXSpawnType</key>
<string>App</string>
...and 6 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.wifi.WiFiAgent.plist
- mod date: Sep 18 23:01:07 2014
- checksum: 1487835276
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>LimitLoadToSessionType</key>
<array>
<string>Aqua</string>
<string>LoginWindow</string>
</array>
<key>Label</key>
<string>com.apple.wifi.WiFiAgent</string>
<key>KeepAlive</key>
<dict>
<key>SuccessfulExit</key>
<false/>
<key>Crashed</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent</st ring>
<key>MachServices</key>
<dict>
<key>com.apple.wifi.WiFiAgent</key>
<true/>
</dict>
...and 10 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.xpc.loginitemregisterd.plist
- mod date: Aug 9 00:42:09 2014
- checksum: 2819274882
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.xpc.loginitemregisterd</string>
<key>EnablePressuredExit</key>
<true/>
<key>Program</key>
<string>/usr/libexec/loginitemregisterd</string>
<key>MachServices</key>
<dict>
<key>com.apple.xpc.loginitemregisterd</key>
<true/>
</dict>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.CrashReporterSupportHelper.plist
- mod date: Sep 8 23:39:33 2014
- checksum: 328361227
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.CrashReporterSupportHelper</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/CrashReporterSupportHelper</string>
<string>server-init</string>
</array>
<key>EnableTransactions</key>
<true/>
<key>ProcessType</key>
<string>Adaptive</string>
<key>MachServices</key>
<dict>
<key>com.apple.CrashReporterSupportHelper</key>
<true/>
</dict>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.FontWorker.plist
- mod date: Jun 6 00:03:52 2014
- checksum: 2995792598
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnablePressuredExit</key>
<false/>
<key>Label</key>
<string>com.apple.FontWorker</string>
<key>MachServices</key>
<dict>
<key>com.apple.FontWorker</key>
<true/>
<key>com.apple.FontWorker.ATS</key>
<true/>
</dict>
<key>Program</key>
<string>/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Fra meworks/ATS.framework/Versions/A/Support/fontworker</string>
<key>EnableTransactions</key>
<true/>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.GSSCred.plist
- mod date: Jun 6 22:23:13 2014
- checksum: 3862236337
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
<key>Label</key>
<string>com.apple.GSSCred</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred</str ing>
</array>
<key>MachServices</key>
<dict>
<key>com.apple.GSSCred</key>
<true/>
</dict>
<key>MultipleInstances</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.MobileFileIntegrity.plist
- mod date: Jun 11 17:57:41 2014
- checksum: 2253202411
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.MobileFileIntegrity</string>
<key>MachServices</key>
<dict>
<key>com.apple.MobileFileIntegrity</key>
<dict>
<key>HostSpecialPort</key>
<integer>18</integer>
</dict>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/amfid</string>
</array>
<key>POSIXSpawnType</key>
<string>Interactive</string>
<key>EnablePressuredExit</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.applessdstatistics.plist
- mod date: Jun 3 18:51:39 2014
- checksum: 1177982634
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
<key>Label</key>
<string>com.apple.applessdstatistics</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/applessdstatistics</string>
</array>
<key>LaunchEvents</key>
<dict>
<key>com.apple.xpc.activity</key>
<dict>
<key>com.apple.applessdstatistics.activity</key>
<dict>
<key>Repeating</key>
<true/>
<key>Interval</key>
<integer>604800</integer>
<key>Priority</key>
...and 6 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.awdd.plist
- mod date: Jul 2 23:47:57 2014
- checksum: 551734160
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>EnablePressuredExit</key>
<true/>
<key>KeepAlive</key>
<dict>
<key>SuccessfulExit</key>
<false/>
</dict>
<key>Label</key>
<string>com.apple.awdd</string>
<key>LaunchEvents</key>
<dict>
<key>com.apple.notifyd.matching</key>
<dict>
<key>com.apple.awdd.ConfigChange</key>
<dict>
<key>Notification</key>
<string>com.apple.awdd.ConfigChange</string>
</dict>
<key>com.apple.awdd.AnonymityChangedCommandLine</key>
...and 17 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.backupd-auto.plist
- mod date: Jun 12 22:03:33 2014
- checksum: 2563204588
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.apple.backupd-helper.status</key>
<dict>
<key>HideUntilCheckIn</key>
<true/>
</dict>
<key>com.apple.backupd-auto</key>
<true/>
</dict>
<key>CFBundleIdentifier</key>
<string>com.apple.backup.launcher</string>
<key>Label</key>
<string>com.apple.backupd-auto</string>
<key>Disabled</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd- helper</string>
<string>-launchd</string>
</array>
...and 35 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.bluetoothReporter.plist
- mod date: Jun 30 12:10:02 2014
- checksum: 68754618
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.bluetoothReporter</string>
<key>PosixSpawnType</key>
<string>Interactive</string>
<key>MachServices</key>
<dict>
<key>com.apple.bluetoothReporter</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/IOBluetooth.framework/Versions/A/Resources/B luetoothReporter</string>
<string>--dumpPacketLog</string>
<string>/private/var/log/bluetooth.pklg</string>
</array>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.cache_delete.plist
- Apple binary property list
- mod date: Jun 5 22:48:47 2014
- checksum: 2436055207
Dict {
ProcessType = Adaptive
MachServices = Dict {
com.apple.cache_delete = true
}
EnableTransactions = true
ProgramArguments = Array {
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
}
LaunchEvents = Dict {
com.apple.xpc.activity = Dict {
com.apple.CacheDelete.daily = Dict {
Priority = Utility
Repeating = true
Interval = 86400
}
}
com.apple.dispatch.vfs = Dict {
Monitor Low Disk Conditions = Dict {
LowDisk = 0
VeryLowDisk = 0
}
}
}
EnablePressuredExit = true
...and 2 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.cmio.AVCAssistant.plist
- mod date: Jun 30 19:23:14 2014
- checksum: 1722169947
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.cmio.AVCAssistant</string>
<key>MachServices</key>
<dict>
<key>com.apple.cmio.AVCAssistant</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/CoreMediaIO.framework/Resources/AVC.plugin/C ontents/Resources/AVCAssistant</string>
</array>
<key>ThrottleInterval</key>
<integer>0</integer>
<key>EnableTransactions</key>
<true/>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.cmio.IIDCVideoAssistant.plist
- mod date: Jun 30 19:23:48 2014
- checksum: 4065205813
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.cmio.IIDCVideoAssistant</string>
<key>MachServices</key>
<dict>
<key>com.apple.cmio.IIDCVideoAssistant</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/CoreMediaIO.framework/Resources/IIDC.plugin/ Contents/Resources/IIDCVideoAssistant</string>
</array>
<key>ThrottleInterval</key>
<integer>0</integer>
<key>EnableTransactions</key>
<true/>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.cmio.VDCAssistant.plist
- mod date: Jun 30 19:24:25 2014
- checksum: 944973157
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.cmio.VDCAssistant</string>
<key>MachServices</key>
<dict>
<key>com.apple.cmio.VDCAssistant</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/CoreMediaIO.framework/Resources/VDC.plugin/C ontents/Resources/VDCAssistant</string>
</array>
<key>ThrottleInterval</key>
<integer>0</integer>
<key>EnableTransactions</key>
<true/>
<key>LaunchEvents</key>
<dict>
<key>com.apple.iokit.matching</key>
<dict>
<key>com.apple.device-attach-1</key>
<dict>
...and 36 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.cmio.iOSScreenCaptureAssistant.plist
- mod date: Jun 30 19:24:53 2014
- checksum: 1372635624
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.cmio.iOSScreenCaptureAssistant</string>
<key>MachServices</key>
<dict>
<key>com.apple.cmio.iOSScreenCaptureAssistant</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Library/CoreMediaIO/Plug-Ins/DAL/iOSScreenCapture.plugin/Contents/Reso urces/iOSScreenCaptureAssistant</string>
</array>
<key>EnableTransactions</key>
<true/>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.coreduetd.osx.plist
- mod date: Jun 30 17:38:19 2014
- checksum: 2821668381
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
<key>ProcessType</key>
<string>Adaptive</string>
<key>Label</key>
<string>com.apple.coreduetd</string>
<key>MachServices</key>
<dict>
<key>com.apple.coreduetd</key>
<true/>
</dict>
<key>Program</key>
<string>/usr/libexec/coreduetd</string>
<key>StandardErrorPath</key>
<string>/var/log/coreduetd.log</string>
<key>StandardOutPath</key>
<string>/var/log/coreduetd.log</string>
<key>RunAtLoad</key>
<true/>
...and 4 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.diagnosticd.plist
- Apple binary property list
- mod date: Jul 26 03:31:45 2014
- checksum: 3339321460
Dict {
Label = com.apple.diagnosticd
EnvironmentVariables = Dict {
__CF_USER_TEXT_ENCODING = 0x0:0:0
__CFPREFERENCES_AVOID_DAEMON = 1
}
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.diagnosticd = true
}
EnableTransactions = true
LaunchEvents = Dict {
com.apple.diagnosticd.events = Dict {
Events = Dict {
}
}
}
EnablePressuredExit = true
Program = /usr/libexec/diagnosticd
}
Contents of /System/Library/LaunchDaemons/com.apple.diskmanagementd.plist
- mod date: Jul 1 21:14:46 2014
- checksum: 199139800
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>POSIXSpawnType</key>
<string>Interactive</string>
<key>TimeOut</key>
<integer>16</integer>
<key>ThrottleInterval</key>
<integer>0</integer>
<key>Label</key>
<string>com.apple.diskmanagementd</string>
<key>MachServices</key>
<dict>
<key>com.apple.diskmanagementd</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/diskmanagementd</string>
</array>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.dpaudiothru.plist
- mod date: Jun 6 22:18:34 2014
- checksum: 961108723
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.dpaudiothru</string>
<key>MachServices</key>
<dict>
<key>com.apple.dpaudiothru</key>
<true/>
</dict>
<key>Program</key>
<string>/usr/libexec/dpaudiothru</string>
<key>ProgramArguments</key>
<array>
<string>dpaudiothru</string>
<string>-service</string>
</array>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.dpd.plist
- mod date: Jun 6 22:18:30 2014
- checksum: 3061530361
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.dpd</string>
<key>MachServices</key>
<dict>
<key>com.apple.dpd</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/dpd</string>
</array>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>LaunchEvents</key>
<dict>
<key>com.apple.iokit.matching</key>
<dict>
<key>com.apple.device-attach</key>
<dict>
<key>IOProviderClass</key>
<string>IOACPIPlatformDevice</string>
...and 16 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.fontmover.plist
- mod date: Jun 6 00:04:02 2014
- checksum: 1596262637
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnablePressuredExit</key>
<false/>
<key>Label</key>
<string>com.apple.fontmover</string>
<key>MachServices</key>
<dict>
<key>com.apple.fontmover</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Fra meworks/ATS.framework/Versions/A/Support/fontmover</string>
<string>-d</string>
</array>
<key>POSIXSpawnType</key>
<string>Interactive</string>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.iconservices.iconservicesagent.plist
- mod date: Jun 5 20:34:59 2014
- checksum: 2233617483
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.iconservices.iconservicesagent</string>
<key>MachServices</key>
<dict>
<key>com.apple.iconservices</key>
<true/>
</dict>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/iconservicesagent</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>EnableTransactions</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.iconservices.iconservicesd.plist
- mod date: Jun 5 20:35:04 2014
- checksum: 3505114131
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.iconservices.iconservicesd</string>
<key>MachServices</key>
<dict>
<key>com.apple.iconservices.store</key>
<true/>
</dict>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/iconservicesd</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>EnableTransactions</key>
<true/>
<key>EnablePressuredExit</key>
<true/>
<key>LaunchEvents</key>
<dict>
...and 20 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.networkd.plist
- Apple binary property list
- mod date: Aug 8 07:12:35 2014
- checksum: 1217832652
Dict {
Program = /usr/libexec/networkd
EnablePressuredExit = true
GroupName = _networkd
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.symptoms.symptomsd.managed_events = true
com.apple.usymptomsd = true
com.apple.networkd = true
com.apple.symptom_analytics = true
}
EnableTransactions = true
UserName = _networkd
LaunchEvents = Dict {
com.apple.notifyd.matching = Dict {
com.apple.airport.userNotification = Dict {
Notification = com.apple.airport.userNotification
}
}
}
WatchPaths = Array {
/Library/Managed Preferences/mobile/com.apple.networkd.plist
/Library/Preferences/com.apple.networkd.plist
}
Label = com.apple.networkd
...and 1 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.noticeboard.state.plist
- mod date: Jun 6 22:08:24 2014
- checksum: 354368500
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>UserName</key>
<string>root</string>
<key>Label</key>
<string>com.apple.noticeboard.state</string>
<key>MachServices</key>
<dict>
<key>com.apple.noticeboard.state</key>
<true/>
</dict>
<key>OnDemand</key>
<true/>
<key>Program</key>
<string>/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Reso urces/nbstated</string>
<key>EnableTransactions</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.nsurlstoraged.plist
- Apple binary property list
- mod date: Jun 6 22:19:00 2014
- checksum: 3923258509
Dict {
GroupName = _nsurlstoraged
Label = com.apple.nsurlstoraged
POSIXSpawnType = Adaptive
MachServices = Dict {
com.apple.cookied = true
com.apple.nsurlstorage-cache = true
}
EnableTransactions = true
UserName = _nsurlstoraged
EnablePressuredExit = true
Program = /usr/libexec/nsurlstoraged
}
Contents of /System/Library/LaunchDaemons/com.apple.sandboxd.plist
- mod date: Jul 16 00:04:00 2014
- checksum: 817681141
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.sandboxd</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/sandboxd</string>
<string>-n</string>
<string>PluginProcess</string>
<string>-n</string>
<string></string>
</array>
<key>EnableTransactions</key>
<true/>
<key>OnDemand</key>
<true/>
<key>MachServices</key>
<dict>
<key>com.apple.sandboxd</key>
<dict>
<key>HostSpecialPort</key>
<integer>14</integer>
</dict>
...and 7 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.secinitd.plist
- mod date: Jun 30 12:51:27 2014
- checksum: 3274153505
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>Label</key>
<string>com.apple.secinitd</string>
<key>LaunchEvents</key>
<dict>
<key>com.apple.OpenDirectory.ODTrigger</key>
<dict>
<key>Record Deletion</key>
<dict>
<key>Events</key>
<string>Delete</string>
<key>Nodes</key>
<string>/Local/Default</string>
<key>RecordTypes</key>
<string>dsRecTypeStandard:Users</string>
<key>TriggerType</key>
<string>Records</string>
</dict>
<key>Record Modification</key>
<dict>
...and 28 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.security.FDERecoveryAgent.plist
- mod date: Jul 12 00:32:13 2014
- checksum: 634260068
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.security.FDERecoveryAgent</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/FDERecoveryAgent</string>
</array>
<key>EnvironmentVariables</key>
<dict/>
<key>Disabled</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>LaunchOnlyOnce</key>
<false/>
<key>AbandonProcessGroup</key>
<true/>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.security.syspolicy.plist
- mod date: Sep 16 23:15:36 2014
- checksum: 3053564149
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<false/>
<key>EnableTransactions</key>
<false/>
<key>Label</key>
<string>com.apple.security.syspolicy</string>
<key>MachServices</key>
<dict>
<key>com.apple.security.syspolicy</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/syspolicyd</string>
</array>
<key>POSIXSpawnType</key>
<string>Adaptive</string>
<key>LaunchEvents</key>
<dict>
<key>com.apple.xpc.activity</key>
<dict>
...and 15 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.smbd.plist
- mod date: Jun 6 22:10:15 2014
- checksum: 3204441074
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>com.apple.smbd</string>
<key>MachServices</key>
<dict>
<key>com.apple.smbd</key>
<dict>
<key>HideUntilCheckIn</key>
<true/>
</dict>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/smbd</string>
</array>
<key>Sockets</key>
<dict>
<key>direct</key>
...and 11 more line(s)
Contents of /System/Library/LaunchDaemons/com.apple.stackshot.plist
- mod date: Jun 30 17:37:23 2014
- checksum: 1526954354
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.stackshot</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/stackshot</string>
<string>-t</string>
<string>-O</string>
</array>
<key>OnDemand</key>
<false/>
<key>ServiceIPC</key>
<false/>
<key>EnableTransactions</key>
<true/>
<key>HopefullyExitsLast</key>
<true/>
<key>POSIXSpawnType</key>
<string>Interactive</string>
<key>Disabled</key>
<false/>
</dict>
...and 1 more line(s)
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: Feb 6 09:38:07 2015
- checksum: 3012644940
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>EnvironmentVariables</key>
<dict>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd-wrapper</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /System/Library/Security/authorization.plist
- mod date: Aug 12 18:59:06 2014
- checksum: 2720110640
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 1850 more line(s)
Contents of /private/etc/authorization.deprecated
- mod date: Jul 3 15:24:09 2013
- checksum: 2033270462
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 9717 more line(s)
Contents of /private/etc/ssh_config
- mod date: Sep 7 14:02:01 2012
- checksum: 1281775184
Host *
SendEnv LANG LC_*
Host *
XAuthLocation /opt/X11/bin/xauth
Contents of /private/etc/sshd_config
- mod date: Nov 5 22:10:09 2014
- checksum: 2518667249
SyslogFacility AUTHPRIV
AuthorizedKeysFile .ssh/authorized_keys
UsePrivilegeSeparation sandbox # Default for new installations.
AcceptEnv LANG LC_*
Subsystem sftp /usr/libexec/sftp-server
XAuthLocation /opt/X11/bin/xauth
Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist
- mod date: Oct 7 22:05:59 2011
- checksum: 408149527
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARM.UUID</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>12600</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.akamai.single-user-client.plist
- mod date: Nov 13 20:25:42 2014
- checksum: 2507561157
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.akamai.single-user-client</string>
<key>Nice</key>
<integer>-18</integer>
<key>KeepAlive</key>
<dict>
<key>SuccessfulExit</key>
<false/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Applications/Akamai/netsession_mac</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>AbandonProcessGroup</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.cinemapro1-2.agent.plist
- mod date: Feb 24 15:11:38 2015
- checksum: 3446548811
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.cinemapro1-2.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/cinemapro1-2/Service.app/Contents/MacOS/Service</st ring>
<string>--service</string>
<string>--unique_id=UUID</string>
<string>--unique_data=UUID</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.extensions.updater69337.agent.plist
- mod date: Feb 24 15:11:40 2015
- checksum: 659907812
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.extensions.updater69337.agent.plist</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/LaunchAgents/UpdateDownloader</string>
<string>cmpId=2702</string>
<string>ibic=UUID</string>
<string>verifier=UUID</string>
<string>extId=69337</string>
<string>updatejsondomain=http://update.ourgendataservice.com</string>
<string>statsdomain=http://stats.ourgendataservice.com</string>
<string>eventsdomain=http://logs.ourgendataservice.com</string>
<string>errorsdomain=http://errors.ourgendataservice.com</string>
<string>installerversion=01-27</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>86400</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.hp.printerAgent.plist
- mod date: Oct 21 02:20:29 2011
- checksum: 2038933932
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.hp.printerAgent</string>
<key>OnDemand</key>
<false/>
<key>Program</key>
<string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>
<key>ProgramArguments</key>
<array>
<string>/Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent</strin g>
</array>
<key>RunAtLoad</key>
<true/>
<key>ServiceIPC</key>
<true/>
<key>Sockets</key>
<dict>
<key>MyListenerSocket</key>
<dict>
<key>SockServiceName</key>
<string>51100</string>
</dict>
...and 3 more line(s)
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
- mod date: Feb 28 10:43:47 2015
- checksum: 1858598780
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.autostart</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>-n</string>
<string>--args</string>
<string>9</string>
<string>-l</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
- mod date: Feb 28 10:43:47 2015
- checksum: 322081983
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.notify</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>--args</string>
<string>7</string>
<string>1</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>StartInterval</key>
<integer>1200</integer>
<key>RunAtLoad</key>
<false/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.mackeeper.MacKeeper.Helper.plist
- mod date: Feb 24 15:12:16 2015
- checksum: 2935705903
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<false/>
<key>EnvironmentVariables</key>
<dict>
<key>ZBTimeStamp</key>
<string>20150204171851</string>
</dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.mackeeper.MacKeeper.Helper</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>Program</key>
<string>/Applications/MacKeeper.app/Contents/Services/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.macpaw.CleanMyMac2Helper.diskSpaceWatcher.plist
- mod date: Feb 27 08:48:35 2015
- checksum: 1814162684
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.macpaw.CleanMyMac2Helper.diskSpaceWatcher</string>
<key>ProgramArguments</key>
<array>
<string>/usr/bin/open</string>
<string>-F</string>
<string>-g</string>
<string>/Users/USER/Library/Application Support/CleanMyMac 2/CleanMyMac 2 Helper.app</string>
<string>--args</string>
<string>-watchDiskSpace</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>StartInterval</key>
<integer>3600</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.macpaw.CleanMyMac2Helper.scheduledScan.plist
- mod date: Feb 27 08:48:35 2015
- checksum: 3792845859
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.macpaw.CleanMyMac2Helper.scheduledScan</string>
<key>ProgramArguments</key>
<array>
<string>/usr/bin/open</string>
<string>-F</string>
<string>-g</string>
<string>-n</string>
<string>/Users/USER/Library/Application Support/CleanMyMac 2/CleanMyMac 2 Helper.app</string>
<string>--args</string>
<string>-scheduled</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>23</integer>
<key>Minute</key>
<integer>36</integer>
</dict>
...and 2 more line(s)
Contents of Library/LaunchAgents/com.macpaw.CleanMyMac2Helper.trashWatcher.plist
- mod date: Feb 27 08:48:35 2015
- checksum: 461415091
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.macpaw.CleanMyMac2Helper.trashWatcher</string>
<key>ProgramArguments</key>
<array>
<string>/usr/bin/open</string>
<string>-F</string>
<string>-g</string>
<string>/Users/USER/Library/Application Support/CleanMyMac 2/CleanMyMac 2 Helper.app</string>
<string>--args</string>
<string>-watchTrash</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>WatchPaths</key>
<array>
<string>/Users/USER/.Trash</string>
</array>
</dict>
</plist>
Contents of Library/LaunchAgents/com.spotify.webhelper.plist
- mod date: Feb 25 19:52:31 2015
- checksum: 1081590196
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.spotify.webhelper</string>
<key>KeepAlive</key>
<dict>
<key>NetworkState</key>
<true/>
</dict>
<key>RunAtLoad</key>
<true/>
<key>Program</key>
<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
<key>SpotifyPath</key>
<string>/Applications/Spotify.app</string></dict>
</plist>
Contents of Library/LaunchAgents/com.zimbra.UUID.plist
- mod date: Jul 8 17:27:41 2012
- checksum: 2382550439
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.zimbra.UUID</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PreferencePanes/Zimbra.prefPane/Contents/Resources/ZimbraHelpe r</string>
<string>--sync</string>
<string>com.zimbra.UUID</string>
</array>
<key>ServiceDescription</key>
<string>Run Zimbra iSync Connector</string>
<key>StartInterval</key>
<integer>300</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.zimbra.desktop.plist
- mod date: May 27 11:28:35 2014
- checksum: 1777623906
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.zimbra.desktop</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Zimbra Desktop/bin/zdesktop</string>
<string>start</string>
<string>-w</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>WorkingDirectory</key>
<string>/Users/USER/Library/Zimbra Desktop/log</string>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Zimbra Desktop/log/zdesktop.out</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Zimbra Desktop/log/zdesktop.out</string>
</dict>
</plist>
Bad plists
Library/Containers/de.meteogroup.meteoearthx/Data/Library/storeURL.plist
Bundles (new)
/Applications/MacKeeper.app
- com.mackeeper.MacKeeper
/Applications/Yahoo! Messenger.app
- com.yahoo.messenger3
/Applications/ZipCloud.app
- com.jdibackup.ZipCloud
/System/Library/CoreServices/cloudphotosd.app
- com.apple.cloudphotosd
/Users/USER/Applications/cinemapro1-2.app
- com.cinemapro1-2.AppHelper
/Users/USER/Library/Application Support/MacKeeper Helper/NoticeEngine.plugin
- com.mackeeper.MacKeeper.plugin.NoticeEngine
/Users/USER/Library/cinemapro1-2/Service.app
- com.cinemapro1-2.Service
App extensions
com.getdropbox.dropbox.garcon
com.omnigroup.OmniFocus2.MacAppStore.Share
com.omnigroup.OmniFocus2.MacAppStore.Today
it.bloop.airmail2.Airmail-Compose
it.bloop.airmail2.Airmail-Share
it.bloop.airmail2.Airmail-Today
uk.co.tla-systems.pcalc.widget
Installations
Google Voice and Video 10/24/11
PlugIn 10/8/11
Adobe Reader X (10.1.1) 10/7/11
GPGMail 10/6/11
GPGTools 10/6/11
Bad kernel extensions
/System/Library/Extensions/RoxioBluRaySupport.kext
/System/Library/Extensions/UsbEthernetGadget.kext
Elapsed time (sec): 1234
Instructions for removing "CinemaPro," which you have, were already posted in this thread. You also installed a bunch of other scam and junk software that is not adware, such as "MacKeeper," "CleanMyMac," "SIMBL," and "Zip Cloud." Instructions for removing those can be found by searching the site. If I were you, I would erase the startup volume and start fresh with nothing but OS X and my documents restored from a backup. Reinstall only the software you really need, which does not include anything like the above.
Start time: 19:58:14 03/29/15
Revision: 1237
Model Identifier: MacBookPro9,2
System Version: OS X 10.9.5 (13F1066)
Kernel Version: Darwin 13.4.0
Time since boot: 1 day35 minutes
UID: 501
Font issues: 21
DNS: 75.75.76.76
Listeners
kdc: kerberos
launchd: afpovertcp
launchd: microsoft-ds
System caches/logs
1396 MB: /var/folders/1c/5dkspbm53j36rc94wjtw0ztw0000gn/T/../C/com.apple.appstore/408981 434/mzps1978240767023282714.pkg
Diagnostic reports
2015-03-11 AiOFirmwareUpdater crash
2015-03-23 com.apple.WebKit.Plugin.64 crash
2015-03-26 AiOFirmwareUpdater crash
2015-03-28 com.apple.WebKit.WebContent crash
Shutdown codes
-60 4
Kernel log
Mar 29 09:05:25 did discard act 71445 inact 30785 purgeable 12674 spec 285561 cleaned 0
Mar 29 09:05:25 WARNING: hibernate_page_list_setall skipped 181065 xpmapped pages
Mar 29 09:05:46 **** [IOBluetoothHostControllerUSBTransport][SuspendDevice] -- Suspend -- suspendDeviceCallResult = 0x0000 (kIOReturnSuccess) -- 0x6400 ****
Mar 29 09:14:13 could discard act 64345 inact 28624 purgeable 1724 spec 57257 cleaned 0
Mar 29 09:14:13 WARNING: hibernate_page_list_setall skipped 181065 xpmapped pages
Mar 29 09:14:19 could discard act 84090 inact 28626 purgeable 1724 spec 88532 cleaned 0
Mar 29 09:14:19 WARNING: hibernate_page_list_setall skipped 208908 xpmapped pages
Mar 29 11:15:01 could discard act 67645 inact 29230 purgeable 4123 spec 88666 cleaned 0
Mar 29 11:15:01 WARNING: hibernate_page_list_setall skipped 208908 xpmapped pages
Mar 29 11:15:07 could discard act 67645 inact 29230 purgeable 4123 spec 88666 cleaned 0
Mar 29 11:15:07 WARNING: hibernate_page_list_setall skipped 236953 xpmapped pages
Mar 29 13:15:07 could discard act 70187 inact 29271 purgeable 4128 spec 88682 cleaned 0
Mar 29 13:15:07 WARNING: hibernate_page_list_setall skipped 236953 xpmapped pages
Mar 29 16:48:02 did discard act 70187 inact 29270 purgeable 4128 spec 88682 cleaned 0
Mar 29 16:48:02 WARNING: hibernate_page_list_setall skipped 265079 xpmapped pages
Mar 29 16:48:22 **** [IOBluetoothHostControllerUSBTransport][SuspendDevice] -- Suspend -- suspendDeviceCallResult = 0x0000 (kIOReturnSuccess) -- 0xf400 ****
Mar 29 17:19:10 could discard act 49142 inact 22521 purgeable 3488 spec 72294 cleaned 0
Mar 29 17:19:10 WARNING: hibernate_page_list_setall skipped 265079 xpmapped pages
Mar 29 17:19:16 could discard act 49142 inact 22521 purgeable 3488 spec 72294 cleaned 0
Mar 29 17:19:16 WARNING: hibernate_page_list_setall skipped 293758 xpmapped pages
Mar 29 19:42:34 could discard act 123320 inact 41983 purgeable 25614 spec 89773 cleaned 0
Mar 29 19:42:34 WARNING: hibernate_page_list_setall skipped 293758 xpmapped pages
Mar 29 19:42:45 could discard act 123166 inact 41983 purgeable 25614 spec 89774 cleaned 0
Mar 29 19:42:45 WARNING: hibernate_page_list_setall skipped 329137 xpmapped pages
Mar 29 19:58:21 SMC::smcReadKeyAction ERROR MACR kSMCKeyNotReadable(0x85) fKeyHashTable=0x0xffffff800df62000
System log
Mar 28 20:25:49 launchservicesd Application App:"Safari" asn:0x0-11011 pid:270 refs=7 @ 0x7fc37b610910 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x1001 pid=41 "loginwindow"")), so denying. : LASSession.cp #1481 SetFrontApplication() q=LSSession 100004/0x186a4 queue
Mar 28 20:44:25 loginwindow ERROR | -[LWBuiltInScreenLockAuthLion closeAuthAndReset:] | Attempted to remove an observer when not observing
Mar 28 20:44:25 com.apple.WebKit.Networking tcp_connection_destination_prepare_complete 59 connectx to 2607:f8b0:4006:80f::200e#443 failed: 50 - Network is down
Mar 28 20:44:25 com.apple.WebKit.Networking tcp_connection_destination_prepare_complete 59 connectx to 216.58.219.206#443 failed: 50 - Network is down
Mar 28 20:44:25 com.apple.WebKit.Networking tcp_connection_handle_destination_prepare_complete 59 failed to connect
Mar 28 20:44:25 com.apple.WebKit.Networking tcp_connection_handle_destination_prepare_complete 59 failed to connect
Mar 28 20:44:25 com.apple.WebKit.Networking tcp_connection_destination_prepare_complete 60 connectx to 216.58.219.206#443 failed: 51 - Network is unreachable
Mar 28 20:44:25 com.apple.WebKit.Networking tcp_connection_handle_destination_prepare_complete 60 failed to connect
Mar 28 20:58:29 loginwindow ERROR | -[LWBuiltInScreenLockAuthLion closeAuthAndReset:] | Attempted to remove an observer when not observing
Mar 28 21:16:16 launchservicesd Application App:"loginwindow" asn:0x0-1001 pid:41 refs=7 @ 0x7fc37b51cc20 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x29029 pid=621 "ScreenSaverEngine"")), so denying. : LASSession.cp #1481 SetFrontApplication() q=LSSession 100004/0x186a4 queue
Mar 28 21:21:15 launchservicesd Application App:"Safari" asn:0x0-11011 pid:270 refs=7 @ 0x7fc37b610910 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x1001 pid=41 "loginwindow"")), so denying. : LASSession.cp #1481 SetFrontApplication() q=LSSession 100004/0x186a4 queue
Mar 28 22:31:40 loginwindow ERROR | -[LWBuiltInScreenLockAuthLion closeAuthAndReset:] | Attempted to remove an observer when not observing
Mar 29 00:40:51 mDNSResponder mDNS_RegisterInterface: Frequent transitions for interface en1 (FE80:0000:0000:0000:AA86:DDFF:FE93:738E)
Mar 29 09:05:49 xpcproxy assertion failed: 13F1066: xpcproxy + 3438 [UUID]: 0x2
Mar 29 09:06:16 fseventsd Logging disabled completely for device:1: /Volumes/Recovery HD
Mar 29 09:06:20 parentalcontrolsd StartObservingFSEvents [849:] -- *** StartObservingFSEvents started event stream
Mar 29 11:14:14 mDNSResponder mDNS_RegisterInterface: Frequent transitions for interface en1 (FE80:0000:0000:0000:AA86:DDFF:FE93:738E)
Mar 29 16:48:21 parentalcontrolsd StartObservingFSEvents [849:] -- *** StartObservingFSEvents started event stream
Mar 29 16:48:26 xpcproxy assertion failed: 13F1066: xpcproxy + 3438 [UUID]: 0x2
Mar 29 17:03:26 xpcproxy assertion failed: 13F1066: xpcproxy + 3438 [UUID]: 0x2
Mar 29 17:18:50 loginwindow ERROR | -[LWBuiltInScreenLockAuthLion closeAuthAndReset:] | Attempted to remove an observer when not observing
Mar 29 17:55:05 loginwindow ERROR | -[LWBuiltInScreenLockAuthLion closeAuthAndReset:] | Attempted to remove an observer when not observing
Mar 29 18:19:07 fseventsd could not open <</Volumes/NO NAME/.fseventsd/fseventsd-uuid>> (No such file or directory)
Mar 29 18:19:07 fseventsd log dir: /Volumes/NO NAME/.fseventsd getting new uuid: UUID
Mar 29 19:43:50 loginwindow ERROR | -[LWBuiltInScreenLockAuthLion closeAuthAndReset:] | Attempted to remove an observer when not observing
Console log
Mar 28 11:15:28 com.apple.launchd com.apple.WebKit.Networking.UUID: Exited with code: 1
Mar 28 11:15:28 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Mar 28 11:15:29 com.apple.launchd com.apple.WebKit.Plugin.64.UUID: Exited with code: 1
Mar 28 12:22:14 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Mar 28 12:30:12 ReportCrash Invoking spindump for pid=1918 wakeups_rate=277 duration=163 because of excessive wakeups
Mar 28 12:36:30 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Mar 28 12:40:41 com.apple.launchd com.apple.qtkitserver: Could not terminate job: 3: No such process
Mar 28 12:49:00 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Mar 28 13:01:28 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Mar 28 13:12:57 com.apple.launchd com.apple.qtkitserver: Could not terminate job: 3: No such process
Mar 28 13:15:18 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Mar 28 18:30:39 com.apple.launchd com.apple.qtkitserver: Could not terminate job: 3: No such process
Mar 28 19:22:46 com.apple.launchd com.apple.WebKit.Networking.UUID: Could not terminate job: 3: No such process
Mar 28 19:22:46 com.apple.launchd com.apple.WebKit.Databases.UUID: Exited with code: 1
Mar 28 19:22:46 com.apple.launchd com.apple.WebKit.Plugin.64.UUID: Exited with code: 1
Mar 28 19:22:46 com.apple.launchd com.apple.WebKit.Networking.UUID: Exited with code: 1
Mar 28 19:22:47 com.apple.launchd.peruser.501 com.apple.iTunesHelper.30832: Exited with code: 1
Mar 28 19:23:37 com.apple.launchd com.apple.Kerberos.kdc: Exited with code: 1
Mar 29 09:14:02 com.apple.launchd com.apple.qtkitserver: Could not terminate job: 3: No such process
Mar 29 17:02:57 com.apple.launchd com.apple.WebKit.Networking.UUID: Exited with code: 1
Mar 29 17:18:58 com.apple.launchd com.apple.qtkitserver: Could not terminate job: 3: No such process
Mar 29 18:00:49 ReportCrash Invoking spindump for pid=1279 thread=74851 percent_cpu=55 duration=164 because of excessive cpu utilization
Mar 29 19:05:20 ReportCrash Invoking spindump for pid=1430 wakeups_rate=185 duration=244 because of excessive wakeups
Mar 29 19:08:24 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Mar 29 19:17:43 com.apple.launchd com.apple.WebKit.WebContent.UUID: Exited with code: 1
Daemons
com.adobe.fpsaud
com.leapfrog.connect.authdaemon
com.microsoft.office.licensing.helper
com.period.searchprotectd
Agents
com.apple.AirPortBaseStationAgent
com.cinemapro1-2.agent
com.extensions.updater69337.agent.plist
com.genieo.completer.download
com.genieo.completer.ltvbit
com.genieo.completer.update
com.kodak.BonjourAgent
com.kodak.KODAK
com.kodak.KODAK
com.kodak.StatisticCollection
com.leapfrog.connect.monitor
User login items
iTunesHelper
- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
Safari extensions
Omnibar
- com.genieo.safari
User caches/logs
1396 MB: /var/folders/1c/5dkspbm53j36rc94wjtw0ztw0000gn/T/../C/com.apple.appstore/408981 434/mzps1978240767023282714.pkg
Restricted files: 1749
Accessibility
Contents of /Library/LaunchAgents/com.kodak.BonjourAgent.plist
- mod date: Sep 21 02:39:00 2012
- checksum: 2625351456
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Kodak Version</key>
<string>7.1.6.10</string>
<key>Label</key>
<string>com.kodak.BonjourAgent</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Library/Printers/Kodak/AiO_Printers/KodakAiOBonjourAgent.app/Contents/ MacOS/KodakAiOBonjourAgent</string>
</array>
<key>ServiceIPC</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.leapfrog.connect.authdaemon.plist
- mod date: Jan 10 17:34:59 2015
- checksum: 886752062
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.leapfrog.connect.authdaemon</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.leapfrog.connect.authdaemon</string>
</array>
<key>ServiceIPC</key>
<true/>
<key>Sockets</key>
<dict>
<key>MasterSocket</key>
<dict>
<key>SockFamily</key>
<string>Unix</string>
<key>SockPathMode</key>
<integer>438</integer>
<key>SockPathName</key>
<string>/var/run/com.leapfrog.connect.authdaemon.socket</string>
<key>SockType</key>
...and 5 more line(s)
Contents of /Library/LaunchDaemons/com.perion.searchprotectd.plist
- mod date: Mar 23 17:34:16 2015
- checksum: 1209345832
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>AbandonProcessGroup</key>
<true/>
<key>EnableTransactions</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Applications/SearchProtect/SearchProtect.app/Contents/MacOS/SearchProt ect</string>
<string>-execv_instance</string>
</array>
<key>KeepAlive</key>
<true/>
<key>RunAtLoad</key>
<true/>
<key>Label</key>
<string>com.period.searchprotectd</string>
</dict>
</plist>
Contents of /System/Library/Security/authorization.plist
- mod date: Sep 27 08:35:08 2014
- checksum: 522460902
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 1700 more line(s)
Contents of Library/LaunchAgents/com.cinemapro1-2.agent.plist
- mod date: Mar 22 19:44:10 2015
- checksum: 3806006123
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.cinemapro1-2.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/cinemapro1-2/Service.app/Contents/MacOS/Service</st ring>
<string>--service</string>
<string>--unique_id=UUID</string>
<string>--unique_data=UUID</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.extensions.updater69337.agent.plist
- mod date: Mar 22 19:44:12 2015
- checksum: 1713231672
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.extensions.updater69337.agent.plist</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/LaunchAgents/UpdateDownloader</string>
<string>cmpId=2707</string>
<string>ibic=UUID</string>
<string>verifier=UUID</string>
<string>extId=69337</string>
<string>updatejsondomain=http://update.ourinputdatastorage.com</string>
<string>statsdomain=http://stats.ourinputdatastorage.com</string>
<string>eventsdomain=http://logs.ourinputdatastorage.com</string>
<string>errorsdomain=http://errors.ourinputdatastorage.com</string>
<string>installerversion=01-27</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>86400</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.genieo.completer.download.plist
- mod date: Jan 11 21:03:18 2015
- checksum: 1023693275
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.genieo.completer.download</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>
<string>-trigger</string>
<string>download</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17046</string>
<string>-firstAppId</string>
<string>386130005</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Users/USER/Downloads</string>
</array>
</dict>
</plist>
Contents of Library/LaunchAgents/com.genieo.completer.ltvbit.plist
- mod date: Jan 11 21:03:19 2015
- checksum: 926555445
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.genieo.completer.ltvbit</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>
<string>-trigger</string>
<string>ltvbit</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17046</string>
<string>-firstAppId</string>
<string>386130005</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>4</integer>
<key>Minute</key>
<integer>57</integer>
</dict>
...and 2 more line(s)
Contents of Library/LaunchAgents/com.genieo.completer.update.plist
- mod date: Jan 11 21:03:19 2015
- checksum: 2699771277
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.genieo.completer.update</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>
<string>-trigger</string>
<string>update</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17046</string>
<string>-firstAppId</string>
<string>386130005</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>21</integer>
<key>Minute</key>
...and 4 more line(s)
Contents of Library/LaunchAgents/com.kodak.StatisticCollection.plist
- mod date: Feb 2 14:38:27 2014
- checksum: 3132310684
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.kodak.StatisticCollection</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Library/Printers/Kodak/AiO_Printers/KodakStatisticsCollection</string>
<string>-s</string>
</array>
</dict>
</plist>
Contents of Library/LaunchAgents/com.leapfrog.connect.monitor.plist
- mod date: Jan 10 17:34:59 2015
- checksum: 2716922429
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.leapfrog.connect.monitor</string>
<key>Program</key>
<string>/Users/USER/Library/Application Support/LeapFrogConnect/LeapFrogMonitor.app/Contents/MacOS/LeapFrogMonitor</str ing>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Extensions
/Library/Extensions/LfConnectDriver.kext
- com.leapfrog.driver.LfConnectDriver
/System/Library/Extensions/LfConnectDriver.kext
- com.leapfrog.driver.LfConnectDriver
/System/Library/Extensions/LfEtherConfig.kext
- com.leapfrog.codeless.kext
Applications
/ 2500 Series.app
- N/A
/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app
- com.microsoft.ASApplication
/Applications/Microsoft Office 2011/Office/Equation Editor.app
- com.microsoft.EquationEditor
/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app
- com.microsoft.office.setupassistant
/Applications/Microsoft Office 2011/Office/Microsoft Query.app
- com.microsoft.Query
/Applications/SearchProtect/SearchProtect.app
- Perion.SearchProtect
/Applications/SearchProtect/Uninstaller.app
- com.sp4mac.perion.Uninstaller
/Applications/SearchProtect/takeOverSearchAssetsMac.app
- com.conduit.takeOverSearchAssetsMac
/KODAK ESP 5200 Series AiO.app
- N/A
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Library/Image Capture/Devices/KODAK AiO Scan Driver.app
- com.kodak.KodakAiOScanDriver
/Library/Image Capture/Devices/Kodak AiO2 Scan Driver.app
- N/A
/Library/Printers/Kodak/AiO_Printers/AiOFirmwareUpdater.app
- N/A
/Library/Printers/Kodak/AiO_Printers/KODAK AiO Home Center.app
- N/A
/Library/Printers/Kodak/AiO_Printers/KODAK AiO Scan.app
- N/A
/Library/Printers/Kodak/AiO_Printers/KODAK AiO Software Updater.app
- N/A
/Library/Printers/Kodak/AiO_Printers/KODAK AiO Uninstall.app
- com.kodak.EasyShareAiOSeriesUninstaller
/Library/Printers/Kodak/AiO_Printers/Kodak ESP 3 Camera Connection.app
- com.kodak.AiOPictbridgeMgr
/Library/Printers/Kodak/AiO_Printers/KodakAiOBonjourAgent.app
- N/A
/Library/Printers/Kodak/AiO_Printers/Registration.app
- com.kodak.Registration
/Library/Printers/Kodak/AiO_Printers/Tron/AiO2Driver.app
- com.kodak.aioprinter.cupsfilter
/Library/Printers/Kodak/AiO_Printers/Tron/Commander.app
- com.aioprinter.commander
/Library/Printers/Kodak/AiO_Printers/Utilities/ICA Scan To.app
- com.kodak.AiOscanning
/Library/Printers/Kodak/AiO_Printers/Utilities/Twain Scan To.app
- com.Kodak.AiOscan
PrefPane
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
Bundles
/Library/Internet Plug-Ins/CouponPrinter-FireFox_v2.plugin
- com.coupons.plugin.mozilla-plugin
/Library/Internet Plug-Ins/Flash Player.plugin
- com.macromedia.Flash
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Printers/Kodak/AiO_Printers/AIO2IO.plugin
- com.kodak.printer.3x00aio.io-plugin
/Library/Printers/Kodak/AiO_Printers/AIOIO.plugin
- com.kodak.printer.3x00aio.io-plugin
/Library/Printers/Kodak/AiO_Printers/PrinterOptionsCombo.plugin
- com.kodak.printer.5x00aio.printeroptionscombo
/Library/Printers/Kodak/AiO_Printers/Tron/AiO2PrinterOptions.plugin
- com.kodak.aioprinter.printeroptions
/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
/Users/USER/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin
- com.conduit.ConduitNPAPIPlugin
Bundles (new)
/Users/USER/Library/Application Support/Skype/EmoticonCache.bundle
- com.skype.skype.emoticoncache.bundle
Library paths
/Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib
/Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib
Installations
Microsoft Error Reporting for Mac 1/1/14
Coupon Printing Software 12/26/13
Adobe Flash Player 12/22/13
Microsoft AutoUpdate for Mac 12/21/13
Microsoft Office for Mac 2011 12/21/13
Elapsed time (sec): 289
<script src="http://pastebin.com/embed_js.php?i=V4Q83gq6"></script>
I think this is the link to my pastebin info .. thx
Start time: 09:53:03 05/28/15
Revision: 1237
Model Identifier: MacBookPro7,1
System Version: OS X 10.10.3 (14D136)
Kernel Version: Darwin 14.3.0
Time since boot: 11:37
UID: 501
Battery
Condition: Service Battery
SerialATA
Hitachi HTS545025B9SA02
USB
Fitbit Base Station (Fitbit Inc.)
Activity
CPU: user 24%, system 13%
CPU usage (%)
security (UID 501): 43.8
I/O wait time (ms/s)
launchd (UID 0): 16
System ERRORS (per sec)
Fitbit Connect (UID 501, error 3): 156
com.apple.WebKi (UID 501, error 316): 103
Bluetooth
eap.noc.ucdavis.edu
DNS: 169.237.250.250
TCP/IP
Subnet mask: 255.255.192.0
Diagnostic reports
1260 MB: /System/Library/Caches/com.apple.coresymbolicationd/data
Bundles
2015-05-06 com.apple.AmbientDisplayAgent crash
2015-05-08 discoveryd crash
2015-05-13 com.apple.WebKit.WebContent hang x4
2015-05-25 Microsoft Word hang
2015-05-27 AppT crash x6
2015-05-27 com.apple.WebKit.WebContent hang x2
Free space
-60 1
Kernel log
May 27 15:01:30 could discard act 26227 inact 187045 purgeable 1455 spec 121 cleaned 1280
May 27 15:01:30 WARNING: hibernate_page_list_setall skipped 11431 xpmapped pages
May 27 15:02:09 could discard act 17398 inact 156219 purgeable 1420 spec 116 cleaned 1280
May 27 15:02:09 WARNING: hibernate_page_list_setall skipped 14386 xpmapped pages
May 27 17:45:09 could discard act 22348 inact 99660 purgeable 20533 spec 10934 cleaned 0
May 27 17:45:09 WARNING: hibernate_page_list_setall skipped 14386 xpmapped pages
May 27 17:45:51 could discard act 20291 inact 67807 purgeable 20533 spec 10934 cleaned 0
May 27 21:00:24 Limiting closed port RST response from 505 to 250 packets per second
May 27 21:00:47 Limiting closed port RST response from 363 to 250 packets per second
May 27 21:03:03 Limiting closed port RST response from 396 to 250 packets per second
May 27 21:04:39 Limiting closed port RST response from 306 to 250 packets per second
May 27 21:11:36 Limiting closed port RST response from 313 to 250 packets per second
May 27 21:34:42 Limiting closed port RST response from 651 to 250 packets per second
May 27 22:13:04 Limiting closed port RST response from 292 to 250 packets per second
May 27 22:16:08 NVDAStartup: Official
May 27 22:16:08 NVDANV50HAL loaded and registered
May 27 22:16:16 [IOBluetoothHostControllerUSBTransport][ReceiveInterruptData] -- kIOReturnAborted, data size is 0, but data in buffer -- (data Length = 4, packet length = 6) Data Content:
May 27 22:44:53 could discard act 58974 inact 134458 purgeable 23604 spec 128028 cleaned 0
May 27 22:56:26 could discard act 80193 inact 136100 purgeable 23604 spec 128045 cleaned 0
May 27 22:56:26 WARNING: hibernate_page_list_setall skipped 22860 xpmapped pages
May 27 22:56:26 hibernate_page_list_discard time: 433 ms, discarded act 80193 inact 136100 purgeable 23604 spec 128045 cleaned 0
May 27 23:19:12 could discard act 63668 inact 13422 purgeable 487 spec 48368 cleaned 0
May 27 23:19:12 WARNING: hibernate_page_list_setall skipped 22860 xpmapped pages
May 27 23:19:31 could discard act 23668 inact 13423 purgeable 487 spec 48367 cleaned 0
May 27 23:19:31 WARNING: hibernate_page_list_setall skipped 8756 xpmapped pages
System log
}, {
label = "2.5.4.10";
"localized label" = "2.5.4.10";
type = string;
value = "Apple Inc.";
}, {
label = "2.5.4.3";
"localized label" = "2.5.4.3";
type = string;
value = "courier.sandbox.push.apple.com";
})
May 28 09:00:53 Service AppleEvents: Send port for process has no send right, port=( port:31251/0x7a13 rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
May 28 09:00:58 Service AppleEvents: Send port for process has no send right, port=( port:31251/0x7a13 rcv:1,send:0,d:0 limit:5) (findOrCreate()/AEMachUtils.cp #526) com.apple.main-thread
May 28 09:09:13 GoogleSoftwareUpdateAgent 2015-05-28 09:09:13.584 GoogleSoftwareUpdateAgent[587/0xb0219000] [lvl=3] -[KSAgentApp(KeystoneThread) runKeystonesInThreadWithArg:] Failed to connect to system engine.
May 28 09:09:15 GoogleSoftwareUpdateAgent 2015-05-28 09:09:15.316 GoogleSoftwareUpdateAgent[587/0xb0219000] [lvl=3] -[KSOmahaServer updateInfosForUpdateResponse:updateRequest:infoStore:upToDateTickets:errors:] Response did NOT pass CUP validation.
May 28 09:09:15 GoogleSoftwareUpdateAgent 2015-05-28 09:09:15.326 GoogleSoftwareUpdateAgent[587/0xb0219000] [lvl=3] -[KSOmahaServer updateInfosForUpdateResponse:updateRequest:infoStore:upToDateTickets:errors:] Request hash in ETag is the wrong size: "W/"UUID:UUID"" [com.google.UpdateEngine.CommonErrorDomain:1803 - 'KSCUPProtocol.m:95']
May 28 09:09:16 GoogleSoftwareUpdateAgent 2015-05-28 09:09:16.795 GoogleSoftwareUpdateAgent[587/0xb0219000] [lvl=3] -[KSOmahaServer updateInfosForUpdateResponse:updateRequest:infoStore:upToDateTickets:errors:] Response did NOT pass CUP validation.
May 28 09:09:16 GoogleSoftwareUpdateAgent 2015-05-28 09:09:16.819 GoogleSoftwareUpdateAgent[587/0xb0219000] [lvl=3] -[KSOmahaServer updateInfosForUpdateResponse:updateRequest:infoStore:upToDateTickets:errors:] Request hash in ETag is the wrong size: "W/"UUID:UUID"" [com.google.UpdateEngine.CommonErrorDomain:1803 - 'KSCUPProtocol.m:95']
May 28 09:11:13 WindowServer WSGetSurfaceInWindow : Invalid surface 571701767 for window 152
May 28 09:11:13 WindowServer WSGetSurfaceInWindow : Invalid surface 571701767 for window 152
May 28 09:11:13 WindowServer WSGetSurfaceInWindow : Invalid surface 571701767 for window 152
May 28 09:11:13 WindowServer _CGXGrantConnectionRightsOnWindowReserving: specified recipient connection (0x13d63) doesn't exist
May 28 09:23:40 WindowServer _CGXSetWindowHasKeyAppearance: Operation on a window 0x11 requiring rights kCGSWindowRightOwner by caller Dashboard
May 28 09:23:40 WindowServer _CGXSetWindowHasMainAppearance: Operation on a window 0x11 requiring rights kCGSWindowRightOwner by caller Dashboard
May 28 09:53:10 spindump No microstackshots found
Console log
May 26 11:17:40 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 26 11:48:51 ReportCrash Invoking spindump for pid=511 wakeups_rate=228 duration=198 because of excessive wakeups
May 26 12:27:11 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 26 12:40:44 ReportCrash Invoking spindump for pid=586 wakeups_rate=165 duration=273 because of excessive wakeups
May 26 12:40:53 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 26 12:52:15 ReportCrash Invoking spindump for pid=611 wakeups_rate=850 duration=53 because of excessive wakeups
May 26 19:01:17 ReportCrash Invoking spindump for pid=799 wakeups_rate=1128 duration=40 because of excessive wakeups
May 26 19:16:02 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple icloud.fmfd
May 27 05:00:38 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 09:02:05 ReportCrash Invoking spindump for pid=1468 wakeups_rate=327 duration=138 because of excessive wakeups
May 27 09:03:20 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
May 27 17:20:28 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 17:44:04 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 17:44:06 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 21:15:46 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 21:33:52 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 21:48:40 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 21:53:14 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
May 27 22:17:12 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple icloud.fmfd
May 27 22:17:12 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.
May 27 22:17:12 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
May 27 22:17:12 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
May 27 22:17:15 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
May 27 22:17:20 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd
May 28 09:03:02 nsurlstoraged Error: execSQLStatement:onConnection:toCompletionWithRetry - SQL=COMMIT;, error-code=1, error-message=cannot commit - no transaction is active
Daemons
com.apple.AccountPolicyHelper
com.apple.CodeSigningHelper
com.apple.MobileFileIntegrity
com.apple.PerformanceAnalysis.animationperfd
com.apple.awdd
com.apple.backupd-auto
com.apple.cache_delete
com.apple.cfprefsd.xpc.daemon
com.apple.cmio.registerassistantservice
com.apple.coreduetd
com.apple.coresymbolicationd
com.apple.ctkd
com.apple.diagnosticd
com.apple.icloud.findmydeviced
com.apple.iconservices.iconservicesagent
com.apple.iconservices.iconservicesd
com.apple.ifdreader
com.apple installer.osmessagetracing
com.apple.nehelper
com.apple.networkd_privileged
com.apple.nsurlsessiond_privileged
com.apple.nsurlstoraged
com.apple.sandboxd
com.apple.secinitd
com.apple.softwareupdated
com.apple.spindump
com apple.sysmond
com.apple.systemstatsd
com.apple.tccd.system
com.apple.watchdogd
com.apple.wdhelper
Agents
Oliverto download
- status: -11
Oliverto.ltvbit
Oliverto.update
com Installer.completer.download
- status: 78
com.Installer.completer.ltvbit
- status: 78
com.Installer.completer.update
- status: 78
com.apple.AirPortBaseStationAgent
com.apple.photostream-agent
com.cinemapro1-2.agent
com.extensions.updater69337.agent.plist
com.google.keystone.user.agent
com.oracle.java.Java Updater
com.spotify.webhelper
User login items
iTunesHelper
- Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
SpeechSynthesisServer
- /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app
Google Drive 2
- /Applications/Google Drive 2.app
Fitbit Connect Menubar Helper
- /Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app
Firefox extensions
Mozilla Firefox hotfix
User overrides
cloudd 34
bird 5
Finder 4
CONTINUITYI/O,iCloud,HID,HCI} errors
sharingd 1
Restricted files: 47
Lockfiles: 5
Accessibility
Contents of /Library/LaunchAgents/com.oracle java.Java-Updater.plist
- mod date: May 24 22:33:24 2015
- checksum: 2197832546
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.Java Updater</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
<string>-bgcheck</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>22</integer>
<key>Minute</key>
<integer>33</integer>
<key>Weekday</key>
<integer>2</integer>
</dict>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
...and 1 more line(s)
Contents of Library/LaunchAgents/Oliverto download.plist
- mod date: May 26 22:15:32 2015
- checksum: 1184735821
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>Oliverto.download</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/Oliverto/Oliverto.app/Contents/MacOS/AppT</string>
<string>-trigger</string>
<string download</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>18324</string>
<string>-firstAppId</string>
<string>544010071</string>
<string>-identity</string>
<string>Oliverto</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Users/USER Downloads</string>
</array>
<key>isAllowToSuggest</key>
...and 3 more line(s)
Contents of Library/LaunchAgents/Oliverto.ltvbit.plist
- mod date: May 26 22:15:32 2015
- checksum: 3169801324
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>Oliverto.ltvbit</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library Application Support/Oliverto/Oliverto.app/Contents/MacOS/AppT</string>
<string>-trigger</string>
<string>ltvbit</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>18324</string>
<string>-firstAppId</string>
<string>544010071</string>
<string>-identity</string>
<string>Oliverto</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>4</integer>
<key>Minute</key>
...and 4 more line(s)
Contents of Library/LaunchAgents/Oliverto update.plist
- mod date: May 26 22:15:32 2015
- checksum: 1562161301
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>Oliverto update</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library Application Support/Oliverto/Oliverto.app/Contents/MacOS/AppT</string>
<string>-trigger</string>
<string>update</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>18324</string>
<string>-firstAppId</string>
<string>544010071</string>
<string>-identity</string>
<string>Oliverto</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
...and 6 more line(s)
Contents of Library/LaunchAgents/com Installer.completer download.plist
- mod date: May 24 22:15:20 2015
- checksum: 384207368
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer.download</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>download</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544010071</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Users/USER Downloads</string>
</array>
<key>isAllowToSuggest</key>
<string>false</string>
</dict>
...and 1 more line(s)
Contents of Library/LaunchAgents/com Installer.completer.ltvbit.plist
- mod date: May 24 22:15:20 2015
- checksum: 2310936005
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com Installer.completer.ltvbit</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>ltvbit</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544010071</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>4</integer>
<key Minute</key>
<integer>51</integer>
</dict>
...and 2 more line(s)
Contents of Library/LaunchAgents/com Installer.completer update.plist
- mod date: May 24 22:15:20 2015
- checksum: 3278302281
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer update</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>update</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544010071</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>22</integer>
<key Minute</key>
...and 4 more line(s)
Contents of Library/LaunchAgents/com.cinemapro1-2.agent.plist
- mod date: May 24 22:15:09 2015
- checksum: 1121489894
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-/ Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.cinemapro1-2.agent</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/cinemapro1-2/Service.app/Contents/MacOS/Service</st ring>
<string>--service</string>
<string>--unique_id=UUID</string>
<string>--unique_data=UUID</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.extensions.updater69337.agent.plist
- mod date: May 24 22:15:12 2015
- checksum: 3867498071
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.extensions.updater69337.agent.plist</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/LaunchAgents/UpdateDownloader</string>
<string>cmpId=2676</string>
<string>ibic=UUID</string>
<string>verifier=UUID</string>
<string>extId=69337</string>
<string>updatejsondomain=http:/ update.staticclientstorage.com</string>
<string>statsdomain=http://stats.staticclientstorage.com</string>
<string>eventsdomain=http://logs.staticclientstorage.com</string>
<string>errorsdomain=http:/ errors.staticclientstorage.com</string>
<string>installerversion=01-27</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>86400</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.google.keystone.agent.plist
- mod date: May 12 22:00:53 2015
- checksum: 4018058899
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-/ Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.google.keystone.user.agent</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent app/Contents/MacOS/GoogleSoftwareUpdateAgent</string>
<string>-runMode</string>
<string>ifneeded</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3523</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.spotify.webhelper.plist
- mod date: May 27 20:58:43 2015
- checksum: 648733479
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-/ Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.spotify.webhelper</string>
<key>KeepAlive</key>
<dict>
<key>NetworkState</key>
<true/>
</dict>
<key>RunAtLoad</key>
<true/>
<key Program</key>
<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
<key>SpotifyPath</key>
<string> Applications/Spotify.app</string></dict>
</plist>
Extensions
/System/Library/Extensions/JMicronATA.kext
- com.jmicron.JMicronATA
/Applications Microsoft Office 2011/Office/Add-Ins/Solver.app
- com microsoft.ASApplication
/Applications Microsoft Office 2011/Office/Equation Editor.app
- com microsoft.EquationEditor
/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app
- com.microsoft.office.setupassistant
/Applications/Microsoft Office 2011/Office/Microsoft Query.app
- com.microsoft.Query
/Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app
- com.microsoft.silverlight.sllauncher
/Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app
- com.apple.ScriptEditor.id.cocoa-applet-template
/Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app
- com.apple.ScriptEditor.id.droplet-with-settable-properties-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app
- com.apple.ScriptEditor.id.file-processing-droplet-template
/Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app
- com.apple.ScriptEditor.id.image-file-processing-droplet-template
/Library/Printers/hp/Fax/fax.backend
- com.hp.fax
/Library/Printers/hp/Fax/rastertofax.filter
- com.hp.rastertofax
/Library/Printers/hp/cups/filters/commandtohp.filter
- com.hp.print.cups.filter.commandtohp
/Library/Printers/hp/cups/filters/pdftopdf.filter
- com.hp.print.cups.filter.pdftopdf
/Library/Printers/hp/cups/tools/autosetup.tool
- com.hp.print.autosetup
/Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf
/Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo
/Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf
/Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
PrefPane
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane
- com.oracle.java.JavaControlPanel
/Library/PreferencePanes Flash Player.prefPane
- com adobe.flashplayerpreferences
FireWire
/Library/Internet Plug-Ins Flash Player.plugin
- com.macromedia.Flash
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
- com.oracle.java.JavaAppletPlugin
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com microsoft.sharepoint.browserplugin
/Library/Internet Plug-Ins/Silverlight.plugin
- com microsoft.SilverlightPlugin
/Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin
- jp.co.canon.scangear.ag07.09
/Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin
- jp.co.canon.scangear.ag08.09
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_bjnp.plugin
- jp.co.canon.ij.scangear.cijsdl.bjnp
/Library Printers/Canon/IJScanner/Plugins/cijsdl_iom.plugin
- jp.co.canon.ij.scangear.cijsdl.iom
/Library/Printers/Canon/IJScanner/Plugins/cijsdl_lld.plugin
- jp.co.canon.ij.scangear.cijsdl.lld
/Library/Printers/Canon/IJScanner/Plugins/cijsds_ag.plugin
- jp.co.canon.ij.scangear.cijsds.ag
/Library/Printers/Canon/IJScanner/Plugins/cijsds_ijfsh.plugin
- jp.co.canon.ij.scangear.cijsds.ijfsh
/Library/Printers/Canon/IJScanner/Plugins/cijsds_mldv0.plugin
- jp.co.canon.ij.scangear.cijsds.mldv0
/Library/Printers/Canon/IJScanner/Plugins/cijsds_os106.plugin
- jp.co.canon.ij.scangear.cijsds.os106
/Library/Printers/Canon/IJScanner/Plugins/cijsds_racs2.plugin
- jp.co.canon.ij.scangear.cijsds.racs2
/Library/Printers/Canon/IJScanner/Plugins/cijsds_rotate.plugin
- jp.co.canon.ij.scangear.cijsds.rotate
/Library/Printers/Canon/IJScanner/Plugins/cijsds_smac.plugin
- jp.co.canon.ij.scangear.cijsds.smac
/Library/Printers/Canon/IJScanner/Plugins/cijsds zoom.plugin
- jp.co.canon.ij.scangear.cijsds.zoom
/Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin
- jp.co.canon.scangear.lld09.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin
- jp.co.canon.scanner.cnq2413.09
/Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin
- jp.co.canon.scanner.cnq2414.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin
- jp.co.canon.scanner.cnq4807.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin
- jp.co.canon.scanner.cnq4808.09
/Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin
- jp.co.canon.scanner.cnq4809.09
/Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin
- jp.co.canon.scanner.cnq9601.09
/Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin
- jp.co.canon.scangear.ijfshlib.09
/Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin
- jp.co.canon.scangear.mld07.09
/Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin
- jp.co.canon.scangear.mld08.09
/Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin
- jp.co.canon.scangear.mld09.09
/Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin
- jp.co.canon.scangear.mld9601.09
/Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin
- jp.co.canon.sf.scanner.sfusb.09
/Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin
- jp.co.canon.scangear.usb.09
/Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin
- jp.co.canon.scangear.smac.09
/Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin
- jp.co.canon.scangear.zoom.09
/Users/USER/Library/Spotlight/EndNote.mdimporter
- com.ThomsonResearchSoft.EndNote
Thunderbolt
Applications Google Chrome.app
- com.google.Chrome
/Applications Microsoft Office 2011/Office/Add-Ins/Solver.app
- com microsoft.ASApplication
/Applications Microsoft Office 2011/Office Microsoft Query.app
- com.microsoft.Query
/Applications/Spotify.app
- com.spotify.client
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
- com.oracle.java.JavaAppletPlugin
/Library/Internet Plug-Ins/Silverlight.plugin
- com.microsoft.SilverlightPlugin
/Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf
/Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo
/Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf
/Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia
/Users/USER/Applications/cinemapro1-2.app
- com.cinemapro1-2.AppHelper
/Users/USER/Library Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
- com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
/Users/USER/Library/Application Support/Oliverto/Oliverto.app
- com.tabatoo.AppT
/Users/USER/Library/cinemapro1-2/Service.app
- com.cinemapro1-2.Service
Library paths
/Applications Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib
/Applications Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib
/Applications Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib
/Applications Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib
/Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib
/Users/USER/Library/Application Support/Firefox/Profiles/sw5vad85.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib
/usr/local/ssl/lib/libcrypto.1.0.0.dylib
/usr/local/ssl/lib/libssl.1.0.0.dylib
App extensions
com.google.GoogleDrive.FinderSyncAPIExtension
Installations
Office 2011 14.4.5 Update 10/20/14
Microsoft® Silverlight™ Browser Plug-In 10/10/14
Office 2011 14.4.4 Update 10/4/14
Microsoft Office for Mac 2011 10/3/14
Adobe Flash Player 10/3/14
Elapsed time (sec): 806
A
You installed the "CinemaPro" trojan. Take the steps below to disable it.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The criminal behind this attack tries to make the malware difficult to remove by varying the names of the files it installs. Not all, or even most, of the files listed below will be present in any particular case. If you don't find any of the files listed in a step, skip that step and go on to the next one.
Back up all data before continuing.
1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
~/Library/LaunchAgents
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.
2. Inside the folder you just opened, there may be files with a name beginning in any of the following ways:
cinema-plus
cinemas-+-plus
com Installer
com.cinemapro
com.extensions
Safari Security
shopy-mate
UpdateDownloader
Move all such items to the Trash.
Log out or restart the computer. The trojan will now be inactive, but there are a few more components of it that should be cleaned up.
3. Do as in Step 1 with this line:
~/Library
A folder named "Library" will open. Inside it there may be a subfolder with a name beginning
cinemapro
If so, move that subfolder—not the Library folder—to the Trash.
4. Open this folder in the same way as above:
~/Library/Application Support
and remove an item named
IM.Installer
5. Open this folder in the same way as above:
~/Library/ScriptingAdditions
and remove an item named
BrowserHelper.osax
if present.
6. Open this folder in the same way as above:
~/Applications
This is not the usual Applications folder, but a different one inside your home folder. Look for an application with a name beginning like this:
cinemapro
and move it to the Trash, if present.
Empty the Trash.
7. From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall all extensions you don't know you need, including any with a name similar to "CinemaPro." If in doubt, remove all of them. None is required for normal operation. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.
B
Besides the above, you installed what seems to be a variant of the "Genieo" or "InstallMac" trojan. To disable it, from the folder you opened in Step A1 above, delete the items with a name beginning in "Oliverto". Then log out or restart.
Also, from the folder you opened in Step A4, delete the subfolder named "Oliverto".
how do you uninstall ad pop ups from cinemapro1-2?