EXC_BAD_ACCESS (SIGSEGV) and KERN_INVALID_ADDRESS

i am getting this error when I try to open safari.


Software: Yosemite 10.10.2


I tried rebooting using safe mode. But still didn't help


Regards,

Tintin

MacBook Air (13-inch Mid 2013), OS X Yosemite (10.10.2)

Posted on Feb 15, 2015 5:38 PM

Reply
13 replies

Feb 16, 2015 4:51 AM in response to Linc Davis

Process: Safari [2534]

Path: /Applications/Safari.app/Contents/MacOS/Safari

Identifier: com.apple.Safari

Version: 8.0.3 (10600.3.18)

Build Info: WebBrowser-7600003018000000~1

Code Type: X86-64 (Native)

Parent Process: ??? [1]

Responsible: Safari [2534]

User ID: 501



Date/Time: 2015-02-16 07:49:28.671 -0500

OS Version: Mac OS X 10.10.2 (14C109)

Report Version: 11

Anonymous UUID: 146CE042-DFD0-AA90-1520-D3A24F991898



Sleep/Wake UUID: 37403422-E7BB-4845-9CEA-A8923462C5C6



Time Awake Since Boot: 3900 seconds

Time Since Wake: 22 seconds



Crashed Thread: 22



Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000020



External Modification Warnings:

Thread creation by external task.



VM Regions Near 0x20:

-->

__TEXT 00000001022aa000-00000001022ab000 [ 4K] r-x/rwx SM=COW /Applications/Safari.app/Contents/MacOS/Safari



Application Specific Information:

Process Model:

Multiple Web Processes




Thread 0:: Dispatch queue: com.apple.main-thread

0 libsystem_kernel.dylib 0x00007fff975734de mach_msg_trap + 10

1 libsystem_kernel.dylib 0x00007fff9757264f mach_msg + 55

2 com.apple.CoreFoundation 0x00007fff8a07fb34 __CFRunLoopServiceMachPort + 212

3 com.apple.CoreFoundation 0x00007fff8a07effb __CFRunLoopRun + 1371

4 com.apple.CoreFoundation 0x00007fff8a07e858 CFRunLoopRunSpecific + 296

5 com.apple.HIToolbox 0x00007fff9778caef RunCurrentEventLoopInMode + 235

6 com.apple.HIToolbox 0x00007fff9778c86a ReceiveNextEventCommon + 431

7 com.apple.HIToolbox 0x00007fff9778c6ab _BlockUntilNextEventMatchingListInModeWithFilter + 71

8 com.apple.AppKit 0x00007fff8f360f81 _DPSNextEvent + 964

9 com.apple.AppKit 0x00007fff8f360730 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 194

10 com.apple.Safari.framework 0x00007fff917e1710 -[BrowserApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 246

11 com.apple.AppKit 0x00007fff8f665f67 -[NSApplication _realDoModalLoop:peek:] + 666

12 com.apple.AppKit 0x00007fff8f664516 -[NSApplication runModalForWindow:] + 119

13 com.apple.AppKit 0x00007fff8f6640e3 -[NSAlert runModal] + 144

14 com.apple.AppKit 0x00007fff8f365f1d __55-[NSPersistentUIRestorer promptToIgnorePersistentState]_block_invoke + 1037

15 com.apple.AppKit 0x00007fff8f365ace -[NSApplication _suppressFinishLaunchingFromEventHandlersWhilePerformingBlock:] + 28

16 com.apple.AppKit 0x00007fff8f365a6d -[NSPersistentUIRestorer promptToIgnorePersistentState] + 247

17 com.apple.AppKit 0x00007fff8f36575a -[NSApplication _reopenWindowsAsNecessaryIncludingRestorableState:registeringAsReady:completion Handler:] + 255

18 com.apple.AppKit 0x00007fff8f365529 -[NSApplication(NSAppleEventHandling) _handleAEOpenEvent:] + 561

19 com.apple.AppKit 0x00007fff8f364f75 -[NSApplication(NSAppleEventHandling) _handleCoreEvent:withReplyEvent:] + 244

20 com.apple.Foundation 0x00007fff97e1b1e8 -[NSAppleEventManager dispatchRawAppleEvent:withRawReply:handlerRefCon:] + 290

21 com.apple.Foundation 0x00007fff97e1b059 _NSAppleEventManagerGenericHandler + 102

22 com.apple.AE 0x00007fff9383499c aeDispatchAppleEvent(AEDesc const*, AEDesc*, unsigned int, unsigned char*) + 531

23 com.apple.AE 0x00007fff93834719 dispatchEventAndSendReply(AEDesc const*, AEDesc*) + 31

24 com.apple.AE 0x00007fff93834623 aeProcessAppleEvent + 295

25 com.apple.HIToolbox 0x00007fff97799a2e AEProcessAppleEvent + 56

26 com.apple.AppKit 0x00007fff8f361626 _DPSNextEvent + 2665

27 com.apple.AppKit 0x00007fff8f360730 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 194

28 com.apple.Safari.framework 0x00007fff917e1710 -[BrowserApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 246

29 com.apple.AppKit 0x00007fff8f354593 -[NSApplication run] + 594

30 com.apple.AppKit 0x00007fff8f33fa14 NSApplicationMain + 1832

31 libdyld.dylib 0x00007fff98b4d5c9 start + 1



Thread 1:: Dispatch queue: com.apple.libdispatch-manager

0 libsystem_kernel.dylib 0x00007fff97579232 kevent64 + 10

1 libdispatch.dylib 0x00007fff8b114a6a _dispatch_mgr_thread + 52



Thread 2:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 3:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 4:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 5:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 6:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 7:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 8:: WebCore: IconDatabase

0 libsystem_kernel.dylib 0x00007fff97578136 __psynch_cvwait + 10

1 com.apple.WebCore 0x00007fff8b18453b WebCore::IconDatabase::syncThreadMainLoop() + 411

2 com.apple.WebCore 0x00007fff8b181689 WebCore::IconDatabase::iconDatabaseSyncThread() + 361

3 com.apple.JavaScriptCore 0x00007fff8d0a914f ***::wtfThreadEntryPoint(void*) + 15

4 libsystem_pthread.dylib 0x00007fff89fec268 _pthread_body + 131

5 libsystem_pthread.dylib 0x00007fff89fec1e5 _pthread_start + 176

6 libsystem_pthread.dylib 0x00007fff89fea41d thread_start + 13



Thread 9:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 10:: com.apple.CoreAnimation.render-server

0 libsystem_kernel.dylib 0x00007fff975734de mach_msg_trap + 10

1 libsystem_kernel.dylib 0x00007fff9757264f mach_msg + 55

2 com.apple.QuartzCore 0x00007fff9819dabb CA::Render::Server::server_thread(void*) + 198

3 com.apple.QuartzCore 0x00007fff9819d9ee thread_fun + 25

4 libsystem_pthread.dylib 0x00007fff89fec268 _pthread_body + 131

5 libsystem_pthread.dylib 0x00007fff89fec1e5 _pthread_start + 176

6 libsystem_pthread.dylib 0x00007fff89fea41d thread_start + 13



Thread 11:: com.apple.NSURLConnectionLoader

0 libsystem_platform.dylib 0x00007fff92bee348 OSAtomicCompareAndSwapPtrBarrier$VARIANT$mp + 8

1 com.apple.security 0x00007fff93888315 Security::Mutex::lock() + 9

2 com.apple.security 0x00007fff9388b99d Security::MappingHandle<long>::State::find(long, int) + 33

3 com.apple.security 0x00007fff93a2eb67 Attachment& Security::MappingHandle<long>::find<Attachment>(long, int) + 39

4 com.apple.security 0x00007fff93a2e7b9 Attachment::upcallMalloc(long, unsigned long) + 19

5 com.apple.security 0x00007fff9389854a Security::PluginSession::malloc(unsigned long) + 22

6 com.apple.security 0x00007fff9389e0b9 Security::DLPluginSession::malloc(unsigned long) + 9

7 com.apple.security 0x00007fff9388fbb5 Security::TrackingAllocator::malloc(unsigned long) + 27

8 com.apple.security 0x00007fff9388fae4 Security::MetaAttribute::unpackAttribute(Security::ReadSection const&, Security::Allocator&, unsigned int&, cssm_data*&) const + 74

9 com.apple.security 0x00007fff9388f7b7 Security::MetaRecord::unpackRecord(Security::ReadSection const&, Security::Allocator&, cssm_db_record_attribute_data*, Security::CssmData*, unsigned int) const + 309

10 com.apple.security 0x00007fff93890c18 Security::LinearCursor::next(unsigned int&, cssm_db_record_attribute_data*, Security::CssmData*, Security::Allocator&, Security::RecordId&) + 228

11 com.apple.security 0x00007fff9398e9e5 Security::AppleDatabase::dataGetFirst(Security::DbContext&, Security::CssmQuery const*, cssm_db_record_attribute_data*, Security::CssmData*, cssm_db_unique_record*&) + 103

12 com.apple.security 0x00007fff93a25576 Security::DatabaseSession::DataGetFirst(long, Security::CssmQuery const*, cssm_db_record_attribute_data*, Security::CssmData*, cssm_db_unique_record*&) + 108

13 com.apple.security 0x00007fff9389df4a cssm_DataGetFirst(cssm_dl_db_handle, cssm_query const*, long*, cssm_db_record_attribute_data*, cssm_data*, cssm_db_unique_record**) + 126

14 com.apple.security 0x00007fff9389ddf7 CSSM_DL_DataGetFirst + 113

15 com.apple.security 0x00007fff9392ab09 SSDLSession::DataGetFirst(long, Security::CssmQuery const*, cssm_db_record_attribute_data*, Security::CssmData*, cssm_db_unique_record*&) + 277

16 com.apple.security 0x00007fff9389df4a cssm_DataGetFirst(cssm_dl_db_handle, cssm_query const*, long*, cssm_db_record_attribute_data*, cssm_data*, cssm_db_unique_record**) + 126

17 com.apple.security 0x00007fff9389ddf7 CSSM_DL_DataGetFirst + 113

18 com.apple.security 0x00007fff9389d735 Security::CssmClient::DbDbCursorImpl::next(Security::CssmClient::DbAttributes*, Security::CssmDataContainer*, Security::CssmClient::DbUniqueRecord&) + 595

19 com.apple.security 0x00007fff9394412c Security::CssmClient::SSDbCursorImpl::next(Security::CssmClient::DbAttributes*, Security::CssmDataContainer*, Security::CssmClient::DbUniqueRecord&, cssm_access_credentials const*) + 342

20 com.apple.security 0x00007fff938a080b Security::KeychainCore::KeychainSchemaImpl::KeychainSchemaImpl(Security::CssmCl ient::Db const&) + 755

21 com.apple.security 0x00007fff938a04f0 Security::KeychainCore::KeychainSchema::KeychainSchema(Security::CssmClient::Db const&) + 40

22 com.apple.security 0x00007fff938a0448 Security::KeychainCore::KeychainImpl::keychainSchema() + 86

23 com.apple.security 0x00007fff9389ff1a Security::KeychainCore::DefaultCredentials::operator()(Security::CssmClient::Db ) + 70

24 com.apple.security 0x00007fff9389fd5a Security::KeychainCore::KeychainImpl::defaultCredentials() + 186

25 com.apple.security 0x00007fff9389b6b0 Security::CssmClient::DbImpl::open() + 262

26 com.apple.security 0x00007fff938a476b Security::KeychainCore::KCCursorImpl::next(Security::KeychainCore::Item&) + 577

27 com.apple.security 0x00007fff938d56eb SecIdentityCopyPreference + 724

28 com.apple.CFNetwork 0x00007fff90ffcdaf HTTPProtocolSSLSupport::getSSLCertsCached(__CFString const*) + 237

29 com.apple.CFNetwork 0x00007fff9109baf0 HTTPProtocol::copyProtocolPropertiesForStream() + 620

30 com.apple.CFNetwork 0x00007fff91092cef ___ZN4Tube11prepStreamsEU13block_pointerFvvEU13block_pointerFvlE_block_invoke44 + 58

31 com.apple.CFNetwork 0x00007fff90fe633c RunloopBlockContext::_invoke_block(void const*, void*) + 72

32 com.apple.CoreFoundation 0x00007fff8a059274 CFArrayApplyFunction + 68

33 com.apple.CFNetwork 0x00007fff90fe61fd RunloopBlockContext::perform() + 133

34 com.apple.CFNetwork 0x00007fff90fe609e MultiplexerSource::perform() + 282

35 com.apple.CFNetwork 0x00007fff90fe5ec0 MultiplexerSource::_perform(void*) + 72

36 com.apple.CoreFoundation 0x00007fff8a08d681 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17

37 com.apple.CoreFoundation 0x00007fff8a07f80d __CFRunLoopDoSources0 + 269

38 com.apple.CoreFoundation 0x00007fff8a07ee3f __CFRunLoopRun + 927

39 com.apple.CoreFoundation 0x00007fff8a07e858 CFRunLoopRunSpecific + 296

40 com.apple.CFNetwork 0x00007fff9106ac80 +[NSURLConnection(Loader) _resourceLoadLoop:] + 434

41 com.apple.Foundation 0x00007fff97e6190a __NSThread__main__ + 1345

42 libsystem_pthread.dylib 0x00007fff89fec268 _pthread_body + 131

43 libsystem_pthread.dylib 0x00007fff89fec1e5 _pthread_start + 176

44 libsystem_pthread.dylib 0x00007fff89fea41d thread_start + 13



Thread 12:: Safari: WBSParsecSearchClient location

0 libsystem_kernel.dylib 0x00007fff975734de mach_msg_trap + 10

1 libsystem_kernel.dylib 0x00007fff9757264f mach_msg + 55

2 com.apple.CoreFoundation 0x00007fff8a07fb34 __CFRunLoopServiceMachPort + 212

3 com.apple.CoreFoundation 0x00007fff8a07effb __CFRunLoopRun + 1371

4 com.apple.CoreFoundation 0x00007fff8a07e858 CFRunLoopRunSpecific + 296

5 com.apple.Safari.framework 0x00007fff91d5da7e -[WBSParsecSearchClient _locationThread] + 43

6 com.apple.Foundation 0x00007fff97e6190a __NSThread__main__ + 1345

7 libsystem_pthread.dylib 0x00007fff89fec268 _pthread_body + 131

8 libsystem_pthread.dylib 0x00007fff89fec1e5 _pthread_start + 176

9 libsystem_pthread.dylib 0x00007fff89fea41d thread_start + 13



Thread 13:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 14:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 15:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 16:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 17:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 18:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 19:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 20:

0 libsystem_kernel.dylib 0x00007fff9757894a __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff89fea40d start_wqthread + 13



Thread 21:: Safari: HistoryTextCache caching

0 libsystem_kernel.dylib 0x00007fff975735da syscall_thread_switch + 10

1 libsystem_platform.dylib 0x00007fff92beece0 _os_lock_handoff_lock_slow + 98

2 libobjc.A.dylib 0x00007fff99389906 objc_object::sidetable_clearDeallocating() + 64

3 libobjc.A.dylib 0x00007fff9936f651 objc_destructInstance + 145

4 com.apple.CoreFoundation 0x00007fff8a025c99 CFRelease + 1033

5 com.apple.CoreFoundation 0x00007fff8a0df733 CFURLCreateAbsoluteURLWithBytes + 1395

6 com.apple.WebCore 0x00007fff8b185fea WebCore::URLWithData(NSData*, NSURL*) + 138

7 com.apple.Safari.framework 0x00007fff919b7316 -[HistoryTextCache(FileInternal) _removeCachedPageTextForURLStringWithoutFlushing:] + 115

8 com.apple.Safari.framework 0x00007fff919b6c10 -[HistoryTextCache(FileInternal) _runCachingThread] + 649

9 com.apple.Foundation 0x00007fff97e6190a __NSThread__main__ + 1345

10 libsystem_pthread.dylib 0x00007fff89fec268 _pthread_body + 131

11 libsystem_pthread.dylib 0x00007fff89fec1e5 _pthread_start + 176

12 libsystem_pthread.dylib 0x00007fff89fea41d thread_start + 13



Thread 22 Crashed:

0 libsystem_pthread.dylib 0x00007fff89fea601 _pthread_mutex_lock + 87

1 libsystem_c.dylib 0x00007fff96229b58 vfprintf_l + 28

2 libsystem_c.dylib 0x00007fff96222600 fprintf + 186

3 ??? 0x00000001488225dc 0 + 5511456220



Thread 22 crashed with X86 Thread State (64-bit):

rax: 0x0000000000000000 rbx: 0x00007fff7ba7b1d8 rcx: 0x00007fff7ba7b1f0 rdx: 0x00000000000000a0

rdi: 0x00007fff7ba7b1f0 rsi: 0x00007fff89feaa80 rbp: 0x00000001487ffe30 rsp: 0x00000001487ffdb0

r8: 0x0000000144041000 r9: 0x0000000000000054 r10: 0x0000000000000000 r11: 0x0000000000000206

r12: 0x00007fff7ba7a6b8 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000000

rip: 0x00007fff89fea601 rfl: 0x0000000000010246 cr2: 0x0000000000000020


Logical CPU: 2

Error Code: 0x00000004

Trap Number: 14





Binary Images:

0x1022aa000 - 0x1022aafff com.apple.Safari (8.0.3 - 10600.3.18) <077913F2-AB05-3133-B24E-2CA948D313E6> /Applications/Safari.app/Contents/MacOS/Safari

0x146cd6000 - 0x146cd6ff5 +cl_kernels (???) <EC2C03D0-BB1D-482F-8888-3EA4DCF996AF> cl_kernels

0x147860000 - 0x147860fef +cl_kernels (???) <3A123A21-FD30-49A4-801A-7C15C43C480D> cl_kernels

0x147a67000 - 0x147b4dfef unorm8_bgra.dylib (2.4.5) <9423FFD4-6EF3-31BF-9DE9-6D55BA76D59E> /System/Library/Frameworks/OpenCL.framework/Versions/A/Libraries/ImageFormats/u norm8_bgra.dylib

0x7fff6e25e000 - 0x7fff6e294837 dyld (353.2.1) <65DCCB06-339C-3E25-9702-600A28291D0E> /usr/lib/dyld

0x7fff89d46000 - 0x7fff89dbcfe7 libcorecrypto.dylib (233.1.2) <E1789801-3985-3949-B736-6B3378873301> /usr/lib/system/libcorecrypto.dylib

0x7fff89dc4000 - 0x7fff89dcdfff libGFXShared.dylib (11.1.1) <7AE7D152-597E-3B27-A52C-8DA76760B61C> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.d ylib

0x7fff89dce000 - 0x7fff89e8efff com.apple.backup.framework (1.6.2 - 1.6.2) <63E8CA47-B7B8-3A63-B505-D1622CE52527> /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup

0x7fff89e8f000 - 0x7fff89ed1fff com.apple.sociald.Social (87 - 87) <A32F7CCA-6D52-3F4E-8779-548E07A84738> /System/Library/Frameworks/Social.framework/Versions/A/Social

0x7fff89ed2000 - 0x7fff89ee8ff7 libsystem_asl.dylib (267) <F153AC5B-0542-356E-88C8-20A62CA704E2> /usr/lib/system/libsystem_asl.dylib

0x7fff89fa8000 - 0x7fff89fc3fff com.apple.PackageKit.PackageUIKit (3.0 - 436) <A9D85786-9323-3C2D-A6A0-83443014A750> /System/Library/PrivateFrameworks/PackageKit.framework/Frameworks/PackageUIKit. framework/Versions/A/PackageUIKit

0x7fff89fe9000 - 0x7fff89ff2fff libsystem_pthread.dylib (105.10.1) <3103AA7F-3BAE-3673-9649-47FFD7E15C97> /usr/lib/system/libsystem_pthread.dylib

0x7fff8a00d000 - 0x7fff8a3a3fff com.apple.CoreFoundation (6.9 - 1152) <CBD1591C-405E-376E-87E9-B264610EBF49> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation

0x7fff8a408000 - 0x7fff8a40eff7 libsystem_networkextension.dylib (167.1.10) <29AB225B-D7FB-30ED-9600-65D44B9A9442> /usr/lib/system/libsystem_networkextension.dylib

0x7fff8a40f000 - 0x7fff8a410ff7 com.apple.AddressBook.ContactsData (9.0 - 1563) <2A4BD452-4279-38AA-A4EE-761903795B05> /System/Library/PrivateFrameworks/ContactsData.framework/Versions/A/ContactsDat a

0x7fff8a414000 - 0x7fff8a434fff com.apple.IconServices (47.1 - 47.1) <E83DFE3B-6541-3736-96BB-26DC5D0100F1> /System/Library/PrivateFrameworks/IconServices.framework/Versions/A/IconService s

0x7fff8a435000 - 0x7fff8a463fff com.apple.CoreServicesInternal (221.2.2 - 221.2.2) <16F7A7F1-CF1D-35AD-A91F-690A814048DF> /System/Library/PrivateFrameworks/CoreServicesInternal.framework/Versions/A/Cor eServicesInternal

0x7fff8a464000 - 0x7fff8a7cffff com.apple.VideoToolbox (1.0 - 1562.107) <2EAFB008-7F19-34C2-A5A6-43B4CD35FEF3> /System/Library/Frameworks/VideoToolbox.framework/Versions/A/VideoToolbox

0x7fff8a7d0000 - 0x7fff8a7ecff7 com.apple.pluginkit.framework (1.0 - 1) <FEB6FF0B-A688-37C9-93CF-E886E7ED3141> /System/Library/PrivateFrameworks/PlugInKit.framework/Versions/A/PlugInKit

0x7fff8a7ed000 - 0x7fff8a7fbfff libIASAuthReboot.dylib (920) <B165E345-197F-3DC7-A52B-64C34FD95D0A> /usr/lib/libIASAuthReboot.dylib

0x7fff8a7fc000 - 0x7fff8a7fcfff com.apple.Accelerate.vecLib (3.10 - vecLib 3.10) <9D749502-A228-3BF1-B52F-A182DEEB2C4D> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/vecLib

0x7fff8a807000 - 0x7fff8a80bfff libpam.2.dylib (20) <E805398D-9A92-31F8-8005-8DC188BD8B6E> /usr/lib/libpam.2.dylib

0x7fff8a81f000 - 0x7fff8ab52fff libmecabra.dylib (666.2) <F757CABA-3EDB-3ABA-A378-A7C574EA233B> /usr/lib/libmecabra.dylib

0x7fff8ab53000 - 0x7fff8ad94fff com.apple.AddressBook.framework (9.0 - 1563) <63953D92-FB0D-31B1-A449-07BA64D08BA9> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook

0x7fff8ad95000 - 0x7fff8adbafff libPng.dylib (1232) <10DC46CC-A4FD-3B1A-AA23-E4F12938BC13> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib

0x7fff8adec000 - 0x7fff8adeeff7 com.apple.securityhi (9.0 - 55006) <1F40ECF1-6AEF-3E64-9DAD-ADC646CCEA98> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.fr amework/Versions/A/SecurityHI

0x7fff8adef000 - 0x7fff8adf5fff libsystem_trace.dylib (72.1.3) <A9E6B7D8-C327-3742-AC54-86C94218B1DF> /usr/lib/system/libsystem_trace.dylib

0x7fff8adf6000 - 0x7fff8adfdff7 libcompiler_rt.dylib (35) <BF8FC133-EE10-3DA6-9B90-92039E28678F> /usr/lib/system/libcompiler_rt.dylib

0x7fff8adfe000 - 0x7fff8adfffff com.apple.TrustEvaluationAgent (2.0 - 25) <2D61A2C3-C83E-3A3F-8EC1-736DBEC250AB> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/Tru stEvaluationAgent

0x7fff8ae00000 - 0x7fff8ae4dff3 com.apple.CoreMediaIO (601.0 - 4749) <ED45B200-08A1-3E72-8DE9-9901C94A7BCA> /System/Library/Frameworks/CoreMediaIO.framework/Versions/A/CoreMediaIO

0x7fff8ae4e000 - 0x7fff8ae5bff7 libbz2.1.0.dylib (36) <2DF83FBC-5C08-39E1-94F5-C28653791B5F> /usr/lib/libbz2.1.0.dylib

0x7fff8af92000 - 0x7fff8afbefff libsandbox.1.dylib (358.1.1) <BA84BDAF-2C59-3CED-8970-9FB029BD7442> /usr/lib/libsandbox.1.dylib

0x7fff8b110000 - 0x7fff8b13aff7 libdispatch.dylib (442.1.4) <502CF32B-669B-3709-8862-08188225E4F0> /usr/lib/system/libdispatch.dylib

0x7fff8b13b000 - 0x7fff8b17cfff libGLU.dylib (11.1.1) <E9ADAD30-0133-320D-A60E-D1A7F91A7795> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib

0x7fff8b17d000 - 0x7fff8c134ffb com.apple.WebCore (10600 - 10600.3.15) <59A28076-26E4-3CE2-B6FC-AF59308C0B95> /System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/WebCore.frame work/Versions/A/WebCore

0x7fff8c135000 - 0x7fff8c14afff com.apple.ToneKit (1.0 - 1) <CA375645-8DE1-3DE8-A2E0-0537849DF59B> /System/Library/PrivateFrameworks/ToneKit.framework/Versions/A/ToneKit

0x7fff8c14b000 - 0x7fff8c14dfff libCVMSPluginSupport.dylib (11.1.1) <DA0706C5-F02A-3F3D-8EBA-18C04313CA2C> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginS upport.dylib

0x7fff8c14e000 - 0x7fff8c169ff7 com.apple.aps.framework (4.0 - 4.0) <F3C3C246-101E-3E81-9608-D2D6E9352532> /System/Library/PrivateFrameworks/ApplePushService.framework/Versions/A/ApplePu shService

0x7fff8c16a000 - 0x7fff8c577ff7 libLAPACK.dylib (1128) <F9201AE7-B031-36DB-BCF8-971E994EF7C1> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libLAPACK.dylib

0x7fff8c578000 - 0x7fff8c57afff com.apple.loginsupport (1.0 - 1) <21DBC18C-F260-39FC-B52F-04A5AA84523A> /System/Library/PrivateFrameworks/login.framework/Versions/A/Frameworks/loginsu pport.framework/Versions/A/loginsupport

0x7fff8c57b000 - 0x7fff8cdb4fe3 com.apple.CoreGraphics (1.600.0 - 775.16) <A7BA30E6-A15F-3E48-9718-3837949A0E2E> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics

0x7fff8cdb5000 - 0x7fff8cdbcfff com.apple.network.statistics.framework (1.2 - 1) <61B311D1-7F15-35B3-80D4-99B8BE90ACD9> /System/Library/PrivateFrameworks/NetworkStatistics.framework/Versions/A/Networ kStatistics

0x7fff8cdbd000 - 0x7fff8cdedfff libsystem_m.dylib (3086.1) <1E12AB45-6D96-36D0-A226-F24D9FB0D9D6> /usr/lib/system/libsystem_m.dylib

0x7fff8ce75000 - 0x7fff8ceaefff com.apple.AirPlaySupport (2.0 - 215.15) <C36CC8AF-27CC-3B18-9C3C-3F845B35FDEC> /System/Library/PrivateFrameworks/AirPlaySupport.framework/Versions/A/AirPlaySu pport

0x7fff8ceaf000 - 0x7fff8cf55ff7 com.apple.PDFKit (3.1 - 3.1) <D2D019DD-5DCA-3C0D-B9B7-0F919A6CD1DD> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/PDFKit.framew ork/Versions/A/PDFKit

0x7fff8cf56000 - 0x7fff8cfc4ffb com.apple.Heimdal (4.0 - 2.0) <3E5DA653-A343-3257-ADE1-BA879BAE280F> /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal

0x7fff8cfc5000 - 0x7fff8cff5fff com.apple.GSS (4.0 - 2.0) <FD154E62-F4CF-339D-B66C-AF4AED6A94A6> /System/Library/Frameworks/GSS.framework/Versions/A/GSS

0x7fff8cff6000 - 0x7fff8d007ff7 libsystem_coretls.dylib (35.1.2) <BC691CD1-17B6-39A5-BD02-AF973695FD1D> /usr/lib/system/libsystem_coretls.dylib

0x7fff8d096000 - 0x7fff8d09eff7 com.apple.AppleSRP (5.0 - 1) <01EC5144-D09A-3D6A-AE35-F6D48585F154> /System/Library/PrivateFrameworks/AppleSRP.framework/Versions/A/AppleSRP

0x7fff8d09f000 - 0x7fff8d5b2ff3 com.apple.JavaScriptCore (10600 - 10600.3.13) <C0C3246C-D26F-3440-AC75-81CFFA4F9C91> /System/Library/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore

0x7fff8d5b3000 - 0x7fff8d5d6ff7 com.apple.framework.familycontrols (4.1 - 410) <153DC4C9-3C06-3147-8AC6-024AB4819C00> /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyCon trols

0x7fff8d5d7000 - 0x7fff8d6ffff7 com.apple.coreui (2.1 - 305.6.1) <B56EC212-73C1-326F-B78C-EB856386296E> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI

0x7fff8d700000 - 0x7fff8d719fff com.apple.openscripting (1.4 - 162) <80DFF366-B950-3F79-903F-99DA0FFDB570> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting .framework/Versions/A/OpenScripting

0x7fff8d71a000 - 0x7fff8d832ffb com.apple.CoreText (352.0 - 454.3) <B3B8C775-14FA-38F3-9CD5-830422AE9C49> /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText

0x7fff8d833000 - 0x7fff8d838ff7 com.apple.ServerInformation (2.0 - 1) <78FDEDE5-202A-3A65-BE75-B0F44A811C80> /System/Library/PrivateFrameworks/ServerInformation.framework/Versions/A/Server Information

0x7fff8d873000 - 0x7fff8d87bff7 com.apple.icloud.FindMyDevice (1.0 - 1) <D198E170-3610-3727-BC87-73AD249CA097> /System/Library/PrivateFrameworks/FindMyDevice.framework/Versions/A/FindMyDevic e

0x7fff8dfa1000 - 0x7fff8dfc5ff7 com.apple.quartzfilters (1.10.0 - 1.10.0) <1AE50F4A-0098-34E7-B24D-DF7CB94073CE> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzFilters .framework/Versions/A/QuartzFilters

0x7fff8e3c4000 - 0x7fff8e3c7fff com.apple.IOSurface (97 - 97) <D4B4D2B2-7B16-3174-9EA6-55E0A10B452D> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface

0x7fff8e3c8000 - 0x7fff8e3e2fff com.apple.AppleVPAFramework (1.2.10 - 1.2.10) <DC3D5A44-AB1E-32A9-9D22-FC922B52346A> /System/Library/PrivateFrameworks/AppleVPA.framework/Versions/A/AppleVPA

0x7fff8e3e3000 - 0x7fff8e415ff3 com.apple.frameworks.CoreDaemon (1.3 - 1.3) <C6DB0A07-F8E4-3837-BCA9-225F460EDA81> /System/Library/PrivateFrameworks/CoreDaemon.framework/Versions/B/CoreDaemon

0x7fff8e416000 - 0x7fff8e48eff7 com.apple.SystemConfiguration (1.14 - 1.14) <E0495F7D-5624-3EF7-B7E5-DA0EE708B6E4> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfi guration

0x7fff8e48f000 - 0x7fff8e4a3ff7 com.apple.MultitouchSupport.framework (262.33.1 - 262.33.1) <62DF9340-01A1-3E12-A604-C90F6361FD9E> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/Multit ouchSupport

0x7fff8e4a4000 - 0x7fff8e50bff7 com.apple.framework.CoreWiFi (3.0 - 300.4) <19269C1D-EB29-384A-83F3-7DDDEB7D9DAD> /System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFi

0x7fff8e50c000 - 0x7fff8e517ff7 com.apple.speech.synthesis.framework (5.3.3 - 5.3.3) <7DF3C68C-B219-3E13-AE72-24B8606A1560> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesis

0x7fff8e536000 - 0x7fff8e536fff com.apple.Carbon (154 - 157) <0DF27AD6-ED64-34D7-825D-65297D276652> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

0x7fff8e570000 - 0x7fff8e5cbfef libTIFF.dylib (1232) <56D444B7-A37A-30BC-80B5-5E702FFAAAAB> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib

0x7fff8e5cc000 - 0x7fff8e5cdff7 libodfde.dylib (22) <52D0ABCD-F464-362C-86EA-ACA10993F556> /usr/lib/libodfde.dylib

0x7fff8e5ce000 - 0x7fff8e5d2fff libspindump.dylib (182) <085978DC-A34D-3B72-BC7B-025C35A0A373> /usr/lib/libspindump.dylib

0x7fff8e5d3000 - 0x7fff8e62bff7 com.apple.accounts.AccountsDaemon (113 - 113) <30F83BF7-2BAE-3BAD-B111-224346AF4B52> /System/Library/PrivateFrameworks/AccountsDaemon.framework/Versions/A/AccountsD aemon

0x7fff8e62c000 - 0x7fff8e62dfff libquit.dylib (182) <9C30277D-0220-381E-8543-51227DE5D23F> /usr/lib/libquit.dylib

0x7fff8e62e000 - 0x7fff8e638fff com.apple.IntlPreferences (2.0 - 150.1) <C62C6F4F-38B9-340B-82A6-1F82AFE1D724> /System/Library/PrivateFrameworks/IntlPreferences.framework/Versions/A/IntlPref erences

0x7fff8e68f000 - 0x7fff8e720ff7 com.apple.cloudkit.CloudKit (259.2.5 - 259.2.5) <241EB647-C917-32F7-956A-6E505827048C> /System/Library/Frameworks/CloudKit.framework/Versions/A/CloudKit

0x7fff8e721000 - 0x7fff8e7afff7 com.apple.CorePDF (4.0 - 4) <9CD7EC6D-3593-3D60-B04F-75F612CCB99A> /System/Library/PrivateFrameworks/CorePDF.framework/Versions/A/CorePDF

0x7fff8e7b0000 - 0x7fff8ea2cff3 com.apple.RawCamera.bundle (6.02 - 769) <1F0F0047-682F-39E3-BE26-2467BF5F0E22> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera

0x7fff8ea2d000 - 0x7fff8eac3ffb com.apple.CoreMedia (1.0 - 1562.107) <FE18102D-8D7A-3500-A400-747AA8C0B3D0> /System/Library/Frameworks/CoreMedia.framework/Versions/A/CoreMedia

0x7fff8eac4000 - 0x7fff8eb18fff libc++.1.dylib (120) <1B9530FD-989B-3174-BB1C-BDC159501710> /usr/lib/libc++.1.dylib

0x7fff8eb19000 - 0x7fff8eb22ff3 com.apple.CommonAuth (4.0 - 2.0) <BA9F5A09-D200-3D18-9F4A-20C789291A30> /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth

0x7fff8ec17000 - 0x7fff8ec22ff7 com.apple.DirectoryService.Framework (10.10 - 187) <29F7A48C-D8DD-33EB-B9E3-863DA7DBB421> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryServi ce

0x7fff8ec26000 - 0x7fff8eeecfff com.apple.WebKit (10600 - 10600.3.18) <F8E36318-4F4C-348B-B1DE-D4BE035036AD> /System/Library/Frameworks/WebKit.framework/Versions/A/WebKit

0x7fff8ef1b000 - 0x7fff8ef56fff com.apple.Symbolication (1.4 - 56045) <D64571B1-4483-3FE2-BD67-A91360F79727> /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolicat ion

0x7fff8ef57000 - 0x7fff8ef59fff libsystem_configuration.dylib (699.1.5) <5E14864E-089A-3D84-85A4-980B776427A8> /usr/lib/system/libsystem_configuration.dylib

0x7fff8ef5d000 - 0x7fff8ef5dff7 libunc.dylib (29) <5676F7EA-C1DF-329F-B006-D2C3022B7D70> /usr/lib/system/libunc.dylib

0x7fff8f2c8000 - 0x7fff8f311ff3 com.apple.HIServices (1.22 - 520.12) <8EAC82AB-6A7D-3606-AF6F-60A9410D1278> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ HIServices.framework/Versions/A/HIServices

0x7fff8f312000 - 0x7fff8f32fffb libresolv.9.dylib (57) <26B38E61-298A-3C3A-82C1-3B5E98AD5E29> /usr/lib/libresolv.9.dylib

0x7fff8f330000 - 0x7fff8f33cff7 com.apple.OpenDirectory (10.10 - 187) <8B98ECCB-7EFA-3A58-BD2B-A0835D869B1A> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory

0x7fff8f33d000 - 0x7fff8fe87ff7 com.apple.AppKit (6.9 - 1344.72) <44EF7DEB-3072-3515-9F34-2857D557E828> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit

0x7fff8fe88000 - 0x7fff8ff68fff com.apple.QuickLookUIFramework (5.0 - 675.13) <A4B5E57E-F363-3C63-8861-4DCEAC3FB23B> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuickLookUI.f ramework/Versions/A/QuickLookUI

0x7fff8ff71000 - 0x7fff8ff8bff7 com.apple.Kerberos (3.0 - 1) <7760E0C2-A222-3709-B2A6-B692D900CEB1> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos

0x7fff8ff8c000 - 0x7fff90062ff3 com.apple.DiskImagesFramework (10.10.1 - 396) <E7478685-E829-372A-A945-A512730D3312> /System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/DiskImages

0x7fff90063000 - 0x7fff90074ff7 libz.1.dylib (55) <88C7C7DE-04B8-316F-8B74-ACD9F3DE1AA1> /usr/lib/libz.1.dylib

0x7fff901b7000 - 0x7fff901b9ff7 libquarantine.dylib (76) <DC041627-2D92-361C-BABF-A869A5C72293> /usr/lib/system/libquarantine.dylib

0x7fff901ba000 - 0x7fff90325ff7 com.apple.audio.toolbox.AudioToolbox (1.12 - 1.12) <5C6DBEB4-F2EA-3262-B9FC-AFB89404C1DA> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox

0x7fff9032d000 - 0x7fff90338fdb com.apple.AppleFSCompression (68.1.1 - 1.0) <F30E8CA3-50B3-3B44-90A0-803C5C308BFE> /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/Apple FSCompression

0x7fff9033e000 - 0x7fff90343ff7 libmacho.dylib (862) <126CA2ED-DE91-308F-8881-B9DAEC3C63B6> /usr/lib/system/libmacho.dylib

0x7fff90344000 - 0x7fff90344fff com.apple.ApplicationServices (48 - 48) <5BF7910B-C328-3BF8-BA4F-CE52B574CE01> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Application Services

0x7fff90394000 - 0x7fff90395fff liblangid.dylib (117) <B54A4AA0-2E53-3671-90F5-AFF711C0EB9E> /usr/lib/liblangid.dylib

0x7fff903df000 - 0x7fff903f9ff3 com.apple.Ubiquity (1.3 - 313) <DF56A657-CC6E-3BE2-86A0-71F07127724C> /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity

0x7fff903fa000 - 0x7fff9049cff7 com.apple.Bluetooth (4.3.2 - 4.3.2f6) <95676652-21AB-3FFA-B53D-EBC8BF4E913E> /System/Library/Frameworks/IOBluetooth.framework/Versions/A/IOBluetooth

0x7fff9049d000 - 0x7fff90707fff com.apple.imageKit (2.6.1 - 840) <8C974E7D-2258-3FBC-948C-D93226F42DCA> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/ImageKit.fram ework/Versions/A/ImageKit

0x7fff90898000 - 0x7fff90c6ffe7 com.apple.CoreAUC (211.0.0 - 211.0.0) <C8B2470F-3994-37B8-BE10-6F78667604AC> /System/Library/PrivateFrameworks/CoreAUC.framework/Versions/A/CoreAUC

0x7fff90c70000 - 0x7fff90db6fef libsqlite3.dylib (168) <8B78BED1-7B9B-3943-80DC-0871015AEAC4> /usr/lib/libsqlite3.dylib

0x7fff90dce000 - 0x7fff90ebefef libJP2.dylib (1232) <13BFC6A7-E24E-3F29-AD3C-E2D382A1223A> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib

0x7fff90ebf000 - 0x7fff90ecdff7 com.apple.ToneLibrary (1.0 - 1) <3E6D130D-77B0-31E1-98E3-A6052AB09824> /System/Library/PrivateFrameworks/ToneLibrary.framework/Versions/A/ToneLibrary

0x7fff90ece000 - 0x7fff90ed6fff libMatch.1.dylib (24) <C917279D-33C2-38A8-9BDD-18F3B24E6FBD> /usr/lib/libMatch.1.dylib

0x7fff90ed7000 - 0x7fff90edbfff com.apple.CommonPanels (1.2.6 - 96) <F9ECC8AF-D9CA-3350-AFB4-5113A9B789A5> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels. framework/Versions/A/CommonPanels

0x7fff90edc000 - 0x7fff90f2dff7 com.apple.audio.CoreAudio (4.3.0 - 4.3.0) <AF72B06E-C6C1-3FAE-8B47-AF461CAE0E22> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio

0x7fff90f2e000 - 0x7fff90f34fff com.apple.speech.recognition.framework (5.0.9 - 5.0.9) <BB2D573F-0A01-379F-A2BA-3C454EDCB111> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecogni tion.framework/Versions/A/SpeechRecognition

0x7fff90f35000 - 0x7fff90f37ff7 libsystem_coreservices.dylib (9) <41B7C578-5A53-31C8-A96F-C73E030B0938> /usr/lib/system/libsystem_coreservices.dylib

0x7fff90f5a000 - 0x7fff90f63fff com.apple.DisplayServicesFW (2.9 - 372.1) <30E61754-D83C-330A-AE60-533F27BEBFF5> /System/Library/PrivateFrameworks/DisplayServices.framework/Versions/A/DisplayS ervices

0x7fff90f64000 - 0x7fff90fb3ff7 com.apple.opencl (2.4.2 - 2.4.2) <D16CFDE6-B5F7-301A-995E-8B583D8C675A> /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL

0x7fff90fc9000 - 0x7fff90fc9ff7 liblaunch.dylib (559.10.3) <DFCDEBDF-8247-3DC7-9879-E7E497DDA4B4> /usr/lib/system/liblaunch.dylib

0x7fff90fca000 - 0x7fff911cdff3 com.apple.CFNetwork (720.2.4 - 720.2.4) <E550C671-930F-3B12-8798-23898473E179> /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork

0x7fff911e3000 - 0x7fff911e5fff com.apple.OAuth (25 - 25) <EE765AF0-2BB6-3689-9EAA-689BF1F02A0D> /System/Library/PrivateFrameworks/OAuth.framework/Versions/A/OAuth

0x7fff911e6000 - 0x7fff911e7fff libDiagnosticMessagesClient.dylib (100) <2EE8E436-5CDC-34C5-9959-5BA218D507FB> /usr/lib/libDiagnosticMessagesClient.dylib

0x7fff911e8000 - 0x7fff911eafff com.apple.EFILogin (2.0 - 2) <39895ACB-E756-342C-ABE5-DB7100EF0A69> /System/Library/PrivateFrameworks/EFILogin.framework/Versions/A/EFILogin

0x7fff911eb000 - 0x7fff91213fff libxpc.dylib (559.10.3) <876216DC-D5D3-381E-8AF9-49AE464E5107> /usr/lib/system/libxpc.dylib

0x7fff91418000 - 0x7fff91448ff3 com.apple.CoreAVCHD (5.7.5 - 5750.4.1) <3E51287C-E97D-3886-BE88-8F6872400876> /System/Library/PrivateFrameworks/CoreAVCHD.framework/Versions/A/CoreAVCHD

0x7fff91449000 - 0x7fff91454fff libGL.dylib (11.1.1) <1F0EB9FB-4B0F-349B-80DD-93FD3F45B9C7> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib

0x7fff914b4000 - 0x7fff914b4fff com.apple.audio.units.AudioUnit (1.12 - 1.12) <76EF1C9D-DEA4-3E55-A134-4099B2FD2CF2> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit

0x7fff915f5000 - 0x7fff91620fff com.apple.DictionaryServices (1.2 - 229) <6789EC43-CADA-394D-8FE8-FC3A2DD136B9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/DictionaryServices

0x7fff91621000 - 0x7fff91769ff7 com.apple.WebKitLegacy (10600 - 10600.3.18) <91B3E705-1378-3F73-B079-3223E838B629> /System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/WebKitLegacy. framework/Versions/A/WebKitLegacy

0x7fff9176a000 - 0x7fff920abfff com.apple.Safari.framework (10600 - 10600.3.18) <E32F3139-F84B-3ED7-B5B0-9821D22998F7> /System/Library/PrivateFrameworks/Safari.framework/Versions/A/Safari

0x7fff920bf000 - 0x7fff920cefff com.apple.LangAnalysis (1.7.0 - 1.7.0) <D1E527E4-C561-352F-9457-E8C50232793C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ LangAnalysis.framework/Versions/A/LangAnalysis

0x7fff920cf000 - 0x7fff921c3fff libFontParser.dylib (134.1) <EA8452DB-9221-3608-95BF-496F58106313> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontParser.dylib

0x7fff92244000 - 0x7fff92261fff com.apple.DistributionKit (700 - 920) <E0ED0C5F-6C97-3AB5-A33C-58DE0C1100A3> /System/Library/PrivateFrameworks/Install.framework/Frameworks/DistributionKit. framework/Versions/A/DistributionKit

0x7fff92262000 - 0x7fff92270ff7 com.apple.opengl (11.1.1 - 11.1.1) <F79F5FFF-372E-329E-81FB-EE9BD6A2A7A7> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL

0x7fff924af000 - 0x7fff925dffff com.apple.UIFoundation (1.0 - 1) <8E030D93-441C-3997-9CD2-55C8DFAC8B84> /System/Library/PrivateFrameworks/UIFoundation.framework/Versions/A/UIFoundatio n

0x7fff9268d000 - 0x7fff926e9fff com.apple.QuickLookFramework (5.0 - 675.13) <70196DC4-E71B-37E8-AA15-B7FD21EC1012> /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook

0x7fff926ea000 - 0x7fff926fcff7 com.apple.CoreDuetDaemonProtocol (1.0 - 1) <CE9FABB4-1C5D-3F9B-9BB8-5CC50C3E5E31> /System/Library/PrivateFrameworks/CoreDuetDaemonProtocol.framework/Versions/A/C oreDuetDaemonProtocol

0x7fff926fd000 - 0x7fff926fffff libRadiance.dylib (1232) <9C2DBBDF-0F0B-36BF-84D0-13E0086F793A> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.d ylib

0x7fff92714000 - 0x7fff92773ff7 com.apple.StoreFoundation (1.0 - 1) <2F4B0037-C611-3561-A381-4FFFE4182830> /System/Library/PrivateFrameworks/StoreFoundation.framework/Versions/A/StoreFou ndation

0x7fff927b5000 - 0x7fff9285dff7 com.apple.PackageKit (3.0 - 436) <2EB311B0-89DC-3667-B5B6-8CE240411EC5> /System/Library/PrivateFrameworks/PackageKit.framework/Versions/A/PackageKit

0x7fff92897000 - 0x7fff928bdff7 com.apple.ChunkingLibrary (2.1 - 163.1) <3514F2A4-38BD-3849-9286-B3B991057742> /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/Chunking Library

0x7fff928be000 - 0x7fff928c9ff7 libcsfde.dylib (471.10.6) <E1BF5816-3CE6-30CE-B3EE-F68CB6BA1378> /usr/lib/libcsfde.dylib

0x7fff928ca000 - 0x7fff928cffff com.apple.DiskArbitration (2.6 - 2.6) <0DFF4D9B-2AC3-3B82-B5C5-30F4EFBD2DB9> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration

0x7fff928fc000 - 0x7fff9292fff7 com.apple.MediaKit (16 - 757) <345EDAFE-3E39-3B0F-8D84-54657EC4396D> /System/Library/PrivateFrameworks/MediaKit.framework/Versions/A/MediaKit

0x7fff92930000 - 0x7fff929a4fff com.apple.ShareKit (1.0 - 323) <92C947CC-FD6B-39D4-919D-9ABD7701384C> /System/Library/PrivateFrameworks/ShareKit.framework/Versions/A/ShareKit

0x7fff92a5a000 - 0x7fff92a62ffb libcopyfile.dylib (118.1.2) <0C68D3A6-ACDD-3EF3-991A-CC82C32AB836> /usr/lib/system/libcopyfile.dylib

0x7fff92afc000 - 0x7fff92b2dfff libtidy.A.dylib (15.15) <37FC944D-271A-386A-9ADD-FA33AD48F96D> /usr/lib/libtidy.A.dylib

0x7fff92b2e000 - 0x7fff92ba0ff7 com.apple.framework.IOKit (2.0.2 - 1050.10.8) <FDFB1FBE-6A0E-3D63-828C-CD53500FCB0F> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

0x7fff92ba1000 - 0x7fff92bb4ff7 com.apple.CoreBluetooth (1.0 - 1) <FA9B43B3-E183-3040-AE25-66EF9870CF35> /System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth

0x7fff92beb000 - 0x7fff92bf3fff libsystem_platform.dylib (63) <64E34079-D712-3D66-9CE2-418624A5C040> /usr/lib/system/libsystem_platform.dylib

0x7fff92bf4000 - 0x7fff92bfcfff libsystem_dnssd.dylib (561.1.1) <62B70ECA-E40D-3C63-896E-7F00EC386DDB> /usr/lib/system/libsystem_dnssd.dylib

0x7fff92c15000 - 0x7fff92c89ff3 com.apple.securityfoundation (6.0 - 55126) <DEC91795-7754-334A-8CDA-B429F41B922D> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoun dation

0x7fff92ccb000 - 0x7fff92cd0ff7 libunwind.dylib (35.3) <BE7E51A0-B6EA-3A54-9CCA-9D88F683A6D6> /usr/lib/system/libunwind.dylib

0x7fff92cd1000 - 0x7fff92d11ff7 libGLImage.dylib (11.1.1) <3986BFA3-4F55-380F-B01D-91BA9785D70C> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dyl ib

0x7fff92d12000 - 0x7fff92d17ff7 libsystem_stats.dylib (163.10.18) <9B8CCF24-DDDB-399A-9237-4BEC225D2E8C> /usr/lib/system/libsystem_stats.dylib

0x7fff93059000 - 0x7fff932d4ff7 com.apple.CoreData (111 - 526.1) <DC4F037B-B7F4-381A-B939-4414489D76BF> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData

0x7fff932d5000 - 0x7fff93367fff com.apple.SoftwareUpdate.framework (6 - 744.3.1) <5D93AF83-C519-3B20-A7B5-6BB3D4E9516D> /System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/SoftwareU pdate

0x7fff933a5000 - 0x7fff93674ff3 com.apple.CoreImage (10.0.33) <6E3DDA29-718B-3BDB-BFAF-F8C201BF93A4> /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/CoreImage .framework/Versions/A/CoreImage

0x7fff93675000 - 0x7fff936c2ff3 com.apple.print.framework.PrintCore (10.0 - 451) <3CA58254-D14F-3913-9DFB-CAC499570CC7> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ PrintCore.framework/Versions/A/PrintCore

0x7fff936c3000 - 0x7fff93758ff7 com.apple.ColorSync (4.9.0 - 4.9.0) <F06733BD-A10C-3DB3-B050-825351130392> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ColorSync.framework/Versions/A/ColorSync

0x7fff93759000 - 0x7fff9379fffb libFontRegistry.dylib (134) <01B8034A-45FD-3360-A347-A1896F591363> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontRegistry.dylib

0x7fff937a0000 - 0x7fff937d7ffb com.apple.LDAPFramework (2.4.28 - 194.5) <D22234AA-8B30-3010-8CF0-67516D52CC33> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP

0x7fff937d8000 - 0x7fff93826fff libcurl.4.dylib (83.1.2) <337A1FF8-E8B1-3173-9F29-C0D4C851D8E1> /usr/lib/libcurl.4.dylib

0x7fff93827000 - 0x7fff93886ff3 com.apple.AE (681 - 681) <7F544183-A515-31A8-B45F-89A167F56216> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.fram ework/Versions/A/AE

0x7fff93887000 - 0x7fff93aefff3 com.apple.security (7.0 - 57031.10.10) <79C37E73-271B-3BEF-A96E-CDB83FF12CF0> /System/Library/Frameworks/Security.framework/Versions/A/Security

0x7fff93b08000 - 0x7fff93b27fff com.apple.CoreDuet (1.0 - 1) <36AA9FD5-2685-314D-B364-3FA4688D86BD> /System/Library/PrivateFrameworks/CoreDuet.framework/Versions/A/CoreDuet

0x7fff93b28000 - 0x7fff94051ff7 com.apple.QuartzComposer (5.1 - 325.1) <ABCC8B0F-9961-37D3-B231-9F2B9E027411> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzCompose r.framework/Versions/A/QuartzComposer

0x7fff948db000 - 0x7fff948e0ffb libheimdal-asn1.dylib (398.10.1) <A7B6447A-6680-3625-83C3-993B58D5C43F> /usr/lib/libheimdal-asn1.dylib

0x7fff948e1000 - 0x7fff948e3ffb libCGXType.A.dylib (775.16) <B2DC78CA-179F-39A7-8D0B-873DC0ACFE96> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXTy pe.A.dylib

0x7fff948e4000 - 0x7fff9492aff7 libauto.dylib (186) <A260789B-D4D8-316A-9490-254767B8A5F1> /usr/lib/libauto.dylib

0x7fff9492b000 - 0x7fff9497effb libAVFAudio.dylib (118.3) <CC124063-34DF-39E3-921A-2BA3EA8D6F38> /System/Library/Frameworks/AVFoundation.framework/Versions/A/Resources/libAVFAu dio.dylib

0x7fff9497f000 - 0x7fff949aaff3 libarchive.2.dylib (30) <8CBB4416-EBE9-3574-8ADC-44655D245F39> /usr/lib/libarchive.2.dylib

0x7fff949ab000 - 0x7fff949fcff7 com.apple.AppleVAFramework (5.0.31 - 5.0.31) <56AA4060-63DF-3DF0-AB8A-880D0DD6F075> /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA

0x7fff949fd000 - 0x7fff94a2afff com.apple.Accounts (113 - 113) <990F0F61-6AC5-3076-932E-02A9A7F75AC4> /System/Library/Frameworks/Accounts.framework/Versions/A/Accounts

0x7fff94a2b000 - 0x7fff94a39fff com.apple.AddressBook.ContactsFoundation (9.0 - 1563) <CCAB74BF-947C-384D-B4C8-E2118145555B> /System/Library/PrivateFrameworks/ContactsFoundation.framework/Versions/A/Conta ctsFoundation

0x7fff94a3a000 - 0x7fff94ae9fe7 libvMisc.dylib (516) <A82F9FE8-70ED-3BC9-9184-1A2B9EE3C010> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libvMisc.dylib

0x7fff94aea000 - 0x7fff94aedfff libScreenReader.dylib (390.21) <364E0A52-4076-3F55-8C77-7CC5E085E4C4> /usr/lib/libScreenReader.dylib

0x7fff94aee000 - 0x7fff94b04ff7 com.apple.CoreMediaAuthoring (2.2 - 951) <3EAFC9D1-8D7C-30CF-92C7-903A5C241763> /System/Library/PrivateFrameworks/CoreMediaAuthoring.framework/Versions/A/CoreM ediaAuthoring

0x7fff94b05000 - 0x7fff94b05fff com.apple.WebKit2 (10600 - 10600.3.18) <798960DA-4067-34CB-910A-56CCFEEBC072> /System/Library/PrivateFrameworks/WebKit2.framework/Versions/A/WebKit2

0x7fff94b06000 - 0x7fff94b50fff com.apple.DiskManagement (7.1 - 847.1) <DC68FBAD-CAC1-30EA-B979-FFED401ADA21> /System/Library/PrivateFrameworks/DiskManagement.framework/Versions/A/DiskManag ement

0x7fff94b51000 - 0x7fff94b5cfff com.apple.AppSandbox (4.0 - 238.10.1) <4C171026-DC9A-3CEE-AB42-110859674F61> /System/Library/PrivateFrameworks/AppSandbox.framework/Versions/A/AppSandbox

0x7fff94b5d000 - 0x7fff94b6ffff libsasl2.2.dylib (193) <E523DD05-544B-3430-8AA9-672408A5AF8B> /usr/lib/libsasl2.2.dylib

0x7fff94c08000 - 0x7fff94c33fff libc++abi.dylib (125) <88A22A0F-87C6-3002-BFBA-AC0F2808B8B9> /usr/lib/libc++abi.dylib

0x7fff94c34000 - 0x7fff94c38fff libCoreVMClient.dylib (79) <FC4E08E3-749E-32FF-B5E9-211F29864831> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClien t.dylib

0x7fff94c39000 - 0x7fff94c3aff7 com.apple.print.framework.Print (10.0 - 265) <3BC4FE7F-78A0-3E57-8F4C-520E7EFD36FA> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framewo rk/Versions/A/Print

0x7fff94c3b000 - 0x7fff94c63ffb libRIP.A.dylib (775.16) <7711F7A7-1813-3024-AE42-75CA7C5422B7> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A .dylib

0x7fff94c64000 - 0x7fff94c6aff7 com.apple.XPCService (2.0 - 1) <AA4A5393-1F5D-3465-A417-0414B95DC052> /System/Library/PrivateFrameworks/XPCService.framework/Versions/A/XPCService

0x7fff94c6b000 - 0x7fff94c73fe7 libcldcpuengine.dylib (2.4.5) <F9EF8060-5E40-3E88-BC38-7452649672B2> /System/Library/Frameworks/OpenCL.framework/Versions/A/Libraries/libcldcpuengin e.dylib

0x7fff94c76000 - 0x7fff94c7dfff libCGCMS.A.dylib (775.16) <8A173E74-7123-35F1-B160-853528C144ED> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGCMS .A.dylib

0x7fff94c7e000 - 0x7fff94c95ff7 libLinearAlgebra.dylib (1128) <E78CCBAA-A999-3B65-8EC9-06DB15E67C37> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libLinearAlgebra.dylib

0x7fff94c96000 - 0x7fff94ce2ff7 com.apple.corelocation (1486.17 - 1615.21.1) <B81BC475-E215-3491-A750-8B23F05ABF5B> /System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation

0x7fff94cec000 - 0x7fff94d00ff7 com.apple.ProtectedCloudStorage (1.0 - 1) <52CFE68A-0663-3756-AB5B-B42195026052> /System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Versions/A/Pr otectedCloudStorage

0x7fff94d01000 - 0x7fff94d06ff7 com.apple.MediaAccessibility (1.0 - 61) <00A3E0B6-79AC-387E-B282-AADFBD5722F6> /System/Library/Frameworks/MediaAccessibility.framework/Versions/A/MediaAccessi bility

0x7fff94d07000 - 0x7fff94df9ff7 libiconv.2.dylib (42) <2A06D02F-8B76-3864-8D96-64EF5B40BC6C> /usr/lib/libiconv.2.dylib

0x7fff94dfa000 - 0x7fff94e1dfff com.apple.Sharing (328.3.2 - 328.3.2) <F555679F-1CD1-3EB2-8E01-FCB80EF07330> /System/Library/PrivateFrameworks/Sharing.framework/Versions/A/Sharing

0x7fff94e1e000 - 0x7fff94ebddf7 com.apple.AppleJPEG (1.0 - 1) <9BB3D7DF-630A-3E1C-A124-12D6C4D0DE70> /System/Library/PrivateFrameworks/AppleJPEG.framework/Versions/A/AppleJPEG

0x7fff94ebe000 - 0x7fff95002ff7 com.apple.QTKit (7.7.3 - 2890) <6F6CD79F-CFBB-3FE4-82C6-47991346FB17> /System/Library/Frameworks/QTKit.framework/Versions/A/QTKit

0x7fff95076000 - 0x7fff9507efff com.apple.xpcobjects (103 - 103) <A202ACEF-7A3D-303E-BB07-29FF49DE279D> /System/Library/PrivateFrameworks/XPCObjects.framework/Versions/A/XPCObjects

0x7fff9507f000 - 0x7fff9507ffff com.apple.Cocoa (6.8 - 21) <EAC0EA1E-3C62-3B28-A941-5D8B1E085FF8> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa

0x7fff95080000 - 0x7fff9508dfff com.apple.ProtocolBuffer (1 - 225.1) <2D502FBB-D2A0-3937-A5C5-385FA65B3874> /System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolB uffer

0x7fff9508e000 - 0x7fff951c0ff7 com.apple.MediaControlSender (2.0 - 215.15) <454420EB-E6FE-3074-8D58-67471E1D61E5> /System/Library/PrivateFrameworks/MediaControlSender.framework/Versions/A/Media ControlSender

0x7fff951c1000 - 0x7fff95228ffb com.apple.datadetectorscore (6.0 - 396.1.1) <80379385-A4EC-3F9B-AFED-9B1DF781943D> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDe tectorsCore

0x7fff95229000 - 0x7fff95229ff7 libkeymgr.dylib (28) <77845842-DE70-3CC5-BD01-C3D14227CED5> /usr/lib/system/libkeymgr.dylib

0x7fff9522a000 - 0x7fff95262fff com.apple.RemoteViewServices (2.0 - 99) <C9A62691-B0D9-34B7-B71C-A48B5F4DC553> /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/Remot eViewServices

0x7fff95263000 - 0x7fff9526bffb com.apple.CoreServices.FSEvents (1210 - 1210) <782A9C69-7A45-31A7-8960-D08A36CBD0A7> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvent s.framework/Versions/A/FSEvents

0x7fff9526c000 - 0x7fff95270fff libcache.dylib (69) <45E9A2E7-99C4-36B2-BEE3-0C4E11614AD1> /usr/lib/system/libcache.dylib

0x7fff95273000 - 0x7fff95275ff3 com.apple.SafariServices.framework (10600 - 10600.3.18) <2C2F0A8D-CC06-30CF-B247-93A96A25F0D5> /System/Library/PrivateFrameworks/SafariServices.framework/Versions/A/SafariSer vices

0x7fff952b8000 - 0x7fff9532cfff com.apple.ApplicationServices.ATS (360 - 375) <2824D38D-460D-353C-9D18-499B4BEEABB7> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/ATS

0x7fff953ac000 - 0x7fff953b6ff7 com.apple.NetAuth (5.0 - 5.0) <B9EC5425-D38D-308C-865F-207E0A98BAC7> /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth

0x7fff953b7000 - 0x7fff95440fff com.apple.CoreSymbolication (3.1 - 57020) <FDF8F348-164D-38F9-90EB-F42585DD2C77> /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSy mbolication

0x7fff95d87000 - 0x7fff95db6fff com.apple.securityinterface (10.0 - 55058) <21F38170-2D3D-3FA2-B0EC-379482AFA5E4> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInter face

0x7fff95db7000 - 0x7fff95db8fff libsystem_secinit.dylib (18) <581DAD0F-6B63-3A48-B63B-917AF799ABAA> /usr/lib/system/libsystem_secinit.dylib

0x7fff95e27000 - 0x7fff95e96fff com.apple.SearchKit (1.4.0 - 1.4.0) <BFD6D876-36BA-3A3B-9F15-3E2F7DE6E89D> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchK it.framework/Versions/A/SearchKit

0x7fff95e97000 - 0x7fff95ea2fff com.apple.CommerceCore (1.0 - 376.6.2) <3FD9A3A6-C12F-31E0-B90E-5E325B595750> /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/C ommerceCore.framework/Versions/A/CommerceCore

0x7fff95ea3000 - 0x7fff95ec7fef libJPEG.dylib (1232) <638302B6-369F-3C50-BF63-F8D19C393F47> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib

0x7fff95ec8000 - 0x7fff95f4cfff com.apple.ViewBridge (103.1 - 103.1) <BABD572C-58AA-362C-B246-D45DCD990D16> /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/ViewBridge

0x7fff95f4d000 - 0x7fff95f69ff7 libsystem_malloc.dylib (53.1.1) <19BCC257-5717-3502-A71F-95D65AFA861B> /usr/lib/system/libsystem_malloc.dylib

0x7fff95f6a000 - 0x7fff95f77fff com.apple.SpeechRecognitionCore (2.0.32 - 2.0.32) <87F0C88D-502D-3217-8B4A-8388288568BA> /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/Sp eechRecognitionCore

0x7fff95f91000 - 0x7fff96176ff3 libicucore.A.dylib (531.31) <B08E00D5-13C6-3391-AB3A-8DE693D3B42E> /usr/lib/libicucore.A.dylib

0x7fff96177000 - 0x7fff96179ff7 libsystem_sandbox.dylib (358.1.1) <95312E09-DA28-324A-A084-F3E574D0210E> /usr/lib/system/libsystem_sandbox.dylib

0x7fff9617a000 - 0x7fff96196fff com.apple.GenerationalStorage (2.0 - 209.11) <9FF8DD11-25FB-3047-A5BF-9415339B3EEC> /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Gene rationalStorage

0x7fff96197000 - 0x7fff961e4fff com.apple.ImageCaptureCore (6.0 - 6.0) <C2DED299-7E2B-3501-9FD6-74892A7484B3> /System/Library/Frameworks/ImageCaptureCore.framework/Versions/A/ImageCaptureCo re

0x7fff961e5000 - 0x7fff96271ff7 libsystem_c.dylib (1044.10.1) <199ED5EB-77A1-3D43-AA51-81779CE0A742> /usr/lib/system/libsystem_c.dylib

0x7fff96272000 - 0x7fff9628bff7 com.apple.CFOpenDirectory (10.10 - 187) <0F9747EF-12A3-3694-984D-0B8352CA6C0F> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpen Directory.framework/Versions/A/CFOpenDirectory

0x7fff9628c000 - 0x7fff96293ff7 com.apple.phonenumbers (1.1.1 - 105) <AE39B6FE-05AB-3181-BB2A-4D50A8B392F2> /System/Library/PrivateFrameworks/PhoneNumbers.framework/Versions/A/PhoneNumber s

0x7fff96294000 - 0x7fff96540fff com.apple.GeoServices (1.0 - 982.4.10) <8A7FE04A-2785-30E7-A6E2-DC15D170DAF5> /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/GeoServices

0x7fff96541000 - 0x7fff9658dff7 libcups.2.dylib (408) <9CECCDE3-51D7-3028-830C-F58BD36E3317> /usr/lib/libcups.2.dylib

0x7fff9658e000 - 0x7fff966ecffb com.apple.avfoundation (2.0 - 889.102) <7D2E62AF-CDEA-394C-84B2-656629F00197> /System/Library/Frameworks/AVFoundation.framework/Versions/A/AVFoundation

0x7fff966ed000 - 0x7fff96708ff7 libCRFSuite.dylib (34) <D64842BE-7BD4-3D0C-9842-1D202F7C2A51> /usr/lib/libCRFSuite.dylib

0x7fff9674b000 - 0x7fff9675bff7 libbsm.0.dylib (34) <A3A2E56C-2B65-37C7-B43A-A1F926E1A0BB> /usr/lib/libbsm.0.dylib

0x7fff9675c000 - 0x7fff967d9fff com.apple.CoreServices.OSServices (640.3 - 640.3) <84A91B00-0ED4-350C-B30A-AEAE437AE02A> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServi ces.framework/Versions/A/OSServices

0x7fff96838000 - 0x7fff96852ff7 libextension.dylib (55.1) <6D0CF094-85E8-3F5B-A3F1-25ECF60F80D9> /usr/lib/libextension.dylib

0x7fff96853000 - 0x7fff96975ff7 com.apple.LaunchServices (644.12.4 - 644.12.4) <59E909E8-ED4A-33EA-B85D-D409BADDF854> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchS ervices.framework/Versions/A/LaunchServices

0x7fff96976000 - 0x7fff9697afff com.apple.LoginUICore (3.0 - 3.0) <035C8626-9E66-3E3F-9976-BA4BCD9646F3> /System/Library/PrivateFrameworks/LoginUIKit.framework/Versions/A/Frameworks/Lo ginUICore.framework/Versions/A/LoginUICore

0x7fff9697b000 - 0x7fff96b09fff libBLAS.dylib (1128) <497912C1-A98E-3281-BED7-E9C751552F61> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libBLAS.dylib

0x7fff96b0a000 - 0x7fff96b0afff com.apple.Accelerate (1.10 - Accelerate 1.10) <2C8AF258-4F11-3BEC-A826-22D7199B3975> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate

0x7fff96b0b000 - 0x7fff96df2ffb com.apple.CoreServices.CarbonCore (1108.2 - 1108.2) <FD87F83F-301A-3BD6-8262-5692FC1B4457> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonC ore.framework/Versions/A/CarbonCore

0x7fff96df3000 - 0x7fff96e2dffb com.apple.DebugSymbols (115 - 115) <6F03761D-7C3A-3C80-8031-AA1C1AD7C706> /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbol s

0x7fff96e2e000 - 0x7fff96e2fff7 libsystem_blocks.dylib (65) <9615D10A-FCA7-3BE4-AA1A-1B195DACE1A1> /usr/lib/system/libsystem_blocks.dylib

0x7fff96e30000 - 0x7fff96e58fff libsystem_info.dylib (459) <B85A85D5-8530-3A93-B0C3-4DEC41F79478> /usr/lib/system/libsystem_info.dylib

0x7fff96e62000 - 0x7fff96e8efff com.apple.framework.SystemAdministration (1.0 - 1.0) <F2A164C7-4813-3F27-ABF7-810A5F4FA51D> /System/Library/PrivateFrameworks/SystemAdministration.framework/Versions/A/Sys temAdministration

0x7fff96e8f000 - 0x7fff96e9cff7 libxar.1.dylib (254) <CE10EFED-3066-3749-838A-6A15AC0DBCB6> /usr/lib/libxar.1.dylib

0x7fff96e9d000 - 0x7fff97389ff7 com.apple.MediaToolbox (1.0 - 1562.107) <F0888EAC-FB6D-35C5-B2FB-AC9A72FE4650> /System/Library/Frameworks/MediaToolbox.framework/Versions/A/MediaToolbox

0x7fff9738a000 - 0x7fff9739cff7 com.apple.ImageCapture (9.0 - 9.0) <7FB65DD4-56B5-35C4-862C-7A2DED991D1F> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture. framework/Versions/A/ImageCapture

0x7fff9739d000 - 0x7fff9748ffff libxml2.2.dylib (26) <B834E7C8-EC3E-3382-BC5A-DA38DC4D720C> /usr/lib/libxml2.2.dylib

0x7fff97490000 - 0x7fff97499ff7 libsystem_notify.dylib (133.1.1) <61147800-F320-3DAA-850C-BADF33855F29> /usr/lib/system/libsystem_notify.dylib

0x7fff9749a000 - 0x7fff97555ff7 com.apple.DiscRecording (9.0 - 9000.4.2) <9BB46993-311A-3F2E-BD77-3CBEFB71C1F0> /System/Library/Frameworks/DiscRecording.framework/Versions/A/DiscRecording

0x7fff97556000 - 0x7fff97561fff libcommonCrypto.dylib (60061) <D381EBC6-69D8-31D3-8084-5A80A32CB748> /usr/lib/system/libcommonCrypto.dylib

0x7fff97562000 - 0x7fff9757ffff libsystem_kernel.dylib (2782.10.72) <97CD7ACD-EA0C-3434-BEFC-FCD013D6BB73> /usr/lib/system/libsystem_kernel.dylib

0x7fff97580000 - 0x7fff97595ff7 com.apple.AppContainer (4.0 - 238.10.1) <24A43E31-BCD3-32DB-8023-DE7EEA912E89> /System/Library/PrivateFrameworks/AppContainer.framework/Versions/A/AppContaine r

0x7fff97596000 - 0x7fff975a0ff7 com.apple.CrashReporterSupport (10.10 - 629) <4BCAA6B5-EC7F-365F-9D3F-BC483B7E956C> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/Cra shReporterSupport

0x7fff975b0000 - 0x7fff976befff com.apple.desktopservices (1.9.2 - 1.9.2) <8670FD3B-8A5B-3D84-B21E-DF21140545A2> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/Desk topServicesPriv

0x7fff976bf000 - 0x7fff9775dfff com.apple.Metadata (10.7.0 - 917.1) <46BE997C-B1F4-3BED-9332-FAC87297C87A> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadat a.framework/Versions/A/Metadata

0x7fff9775e000 - 0x7fff97a62ffb com.apple.HIToolbox (2.1.1 - 757.3) <D827FC03-5668-3AA4-AF0E-46EEF7358EEA> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fra mework/Versions/A/HIToolbox

0x7fff97a63000 - 0x7fff97abdff7 com.apple.LanguageModeling (1.0 - 1) <ACA93FE0-A0E3-333E-AE3C-8EB7DE5F362F> /System/Library/PrivateFrameworks/LanguageModeling.framework/Versions/A/Languag eModeling

0x7fff97b61000 - 0x7fff97b65fff com.apple.TCC (1.0 - 1) <61F36A72-B983-3A2D-9D37-A2F194D31E7D> /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC

0x7fff97b82000 - 0x7fff97b86ff7 libGIF.dylib (1232) <3C70FBBC-FBA5-3013-A440-05D68B63885F> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib

0x7fff97b87000 - 0x7fff97bc4ff3 com.apple.bom (14.0 - 193.6) <3CE5593D-DB28-3BFD-943E-6261006FA292> /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom

0x7fff97bc5000 - 0x7fff97bc6ffb libremovefile.dylib (35) <3485B5F4-6CE8-3C62-8DFD-8736ED6E8531> /usr/lib/system/libremovefile.dylib

0x7fff97bc7000 - 0x7fff97c48ff3 com.apple.CoreUtils (1.0 - 101.1) <45E5E51B-947E-3F2D-BD9C-480E72555C23> /System/Library/PrivateFrameworks/CoreUtils.framework/Versions/A/CoreUtils

0x7fff97c49000 - 0x7fff97c76fff com.apple.CoreVideo (1.8 - 145.1) <18DB07E0-B927-3260-A234-636F298D1917> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo

0x7fff97c86000 - 0x7fff97c86fff com.apple.quartzframework (1.5 - 1.5) <4944127A-F319-3689-AAEC-58591D3CAC07> /System/Library/Frameworks/Quartz.framework/Versions/A/Quartz

0x7fff97cba000 - 0x7fff97cbafff libOpenScriptingUtil.dylib (162) <EFD79173-A9DA-3AE6-BE15-3948938204A6> /usr/lib/libOpenScriptingUtil.dylib

0x7fff97cbb000 - 0x7fff97cbdfff com.apple.SecCodeWrapper (4.0 - 238.10.1) <8DAF71DB-C99A-3B72-A639-2C8CBEA84B93> /System/Library/PrivateFrameworks/SecCodeWrapper.framework/Versions/A/SecCodeWr apper

0x7fff97cbe000 - 0x7fff97df8ff7 com.apple.ImageIO.framework (3.3.0 - 1232) <A9682E9F-4917-3926-A035-7FEE7FF9D2AB> /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO

0x7fff97df9000 - 0x7fff98127fff com.apple.Foundation (6.9 - 1152.14) <E3746EDD-DFB1-3ECB-88ED-A91AC0EF3AAA> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation

0x7fff98128000 - 0x7fff98156ff7 com.apple.CommerceKit (1.2.0 - 376.6.2) <684FCA6B-0F93-35EA-8174-63FEFFE05202> /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/CommerceKit

0x7fff98157000 - 0x7fff98168fff libcmph.dylib (1) <46EC3997-DB5E-38AE-BBBB-A035A54AD3C0> /usr/lib/libcmph.dylib

0x7fff98176000 - 0x7fff98326ff7 com.apple.QuartzCore (1.10 - 361.15) <72A78C43-30DF-3748-9015-4B28119DB27B> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore

0x7fff98327000 - 0x7fff9832aff7 com.apple.Mangrove (1.0 - 1) <2AF1CAE9-8BF9-33C4-9C1B-123DBAF1522B> /System/Library/PrivateFrameworks/Mangrove.framework/Versions/A/Mangrove

0x7fff9835a000 - 0x7fff983ebff7 libCoreStorage.dylib (471.10.6) <892DEEE7-C8C7-35EA-931D-FF9862BDEB2B> /usr/lib/libCoreStorage.dylib

0x7fff983ec000 - 0x7fff98707fcf com.apple.vImage (8.0 - 8.0) <1183FE6A-FDB6-3B3B-928D-50C7909F2308> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.fr amework/Versions/A/vImage

0x7fff98708000 - 0x7fff98b38fff com.apple.vision.FaceCore (3.1.6 - 3.1.6) <C3B823AA-C261-37D3-B4AC-C59CE91C8241> /System/Library/PrivateFrameworks/FaceCore.framework/Versions/A/FaceCore

0x7fff98b3a000 - 0x7fff98b45ff7 libkxld.dylib (2782.10.72) <68E07A32-28F5-3FBB-9D74-00B4F53C2FD4> /usr/lib/system/libkxld.dylib

0x7fff98b46000 - 0x7fff98b49fff com.apple.xpc.ServiceManagement (1.0 - 1) <5EFD45BF-B0CD-39F2-8232-6BA33E63E5D4> /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManage ment

0x7fff98b4a000 - 0x7fff98b4dff7 libdyld.dylib (353.2.1) <4E33E416-F1D8-3598-B8CC-6863E2ECD0E6> /usr/lib/system/libdyld.dylib

0x7fff98b4e000 - 0x7fff98b55fff com.apple.NetFS (6.0 - 4.0) <1581D25F-CC07-39B0-90E8-5D4F3CF84EBA> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS

0x7fff98b56000 - 0x7fff98b91fff com.apple.QD (301 - 301) <C4D2AD03-B839-350A-AAF0-B4A08F8BED77> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ QD.framework/Versions/A/QD

0x7fff98b92000 - 0x7fff98b95fff com.apple.help (1.3.3 - 46) <CA4541F4-CEF5-355C-8F1F-EA65DC1B400F> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framewor k/Versions/A/Help

0x7fff98bac000 - 0x7fff98bacfff com.apple.CoreServices (62 - 62) <9E4577CA-3FC3-300D-AB00-87ADBDDA2E37> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices

0x7fff98e3d000 - 0x7fff98ed1fff com.apple.ink.framework (10.9 - 213) <8E029630-1530-3734-A446-13353F0E7AC5> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework /Versions/A/Ink

0x7fff98ed2000 - 0x7fff98fe4ff7 libvDSP.dylib (516) <151B3CCB-77D3-3715-A3D0-7C74CD5C7FFC> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libvDSP.dylib

0x7fff98fe5000 - 0x7fff990c9fff libcrypto.0.9.8.dylib (52.10.1) <2A2924DE-63FB-37F6-B102-84D69240675B> /usr/lib/libcrypto.0.9.8.dylib

0x7fff990ca000 - 0x7fff99136fff com.apple.framework.CoreWLAN (5.0 - 500.35.2) <37551DDD-C07C-31EB-923A-9721F03D7E29> /System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLAN

0x7fff99137000 - 0x7fff99158fff com.apple.framework.Apple80211 (10.1 - 1010.64) <A7378C4B-FFD3-35B9-93E8-0534A2A7B51F> /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Apple80211

0x7fff99166000 - 0x7fff99167fff libSystem.B.dylib (1213) <90B107BC-FF74-32CC-B1CF-4E02F544D957> /usr/lib/libSystem.B.dylib

0x7fff99168000 - 0x7fff991a8ff7 com.apple.CloudDocs (1.0 - 280.6) <C1179CEF-E058-3E16-BF90-C059FE7CDE77> /System/Library/PrivateFrameworks/CloudDocs.framework/Versions/A/CloudDocs

0x7fff991a9000 - 0x7fff9922bfff com.apple.PerformanceAnalysis (1.0 - 1) <94F08B1A-F6AF-38D5-BE92-4FED34742966> /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/Perf ormanceAnalysis

0x7fff9922c000 - 0x7fff9924aff7 com.apple.addressbook.vCard (9.0 - 1563) <370F3435-855E-3C60-9CC9-B3F24AC1AF97> /System/Library/PrivateFrameworks/vCard.framework/Versions/A/vCard

0x7fff9924b000 - 0x7fff99262fff com.apple.login (3.0 - 3.0) <85DEFDD5-FC3E-3AA1-8037-12F2DCE6BE3D> /System/Library/PrivateFrameworks/login.framework/Versions/A/login

0x7fff99263000 - 0x7fff99265ff7 libutil.dylib (38) <471AD65E-B86E-3C4A-8ABD-B8665A2BCE3F> /usr/lib/libutil.dylib

0x7fff9933b000 - 0x7fff9933dfff com.apple.CoreDuetDebugLogging (1.0 - 1) <9A6E5710-EA99-366E-BF40-9A65EC1B46A1> /System/Library/PrivateFrameworks/CoreDuetDebugLogging.framework/Versions/A/Cor eDuetDebugLogging

0x7fff9933e000 - 0x7fff99367ffb libxslt.1.dylib (13) <AED1143F-B848-3E73-81ED-71356F25F084> /usr/lib/libxslt.1.dylib

0x7fff99368000 - 0x7fff9956246f libobjc.A.dylib (647) <759E155D-BC42-3D4E-869B-6F57D477177C> /usr/lib/libobjc.A.dylib

0x7fff99563000 - 0x7fff9957dff7 liblzma.5.dylib (7) <1D03E875-A7C0-3028-814C-3C27F7B7C079> /usr/lib/liblzma.5.dylib

0x7fff9957e000 - 0x7fff99581ff7 com.apple.AppleSystemInfo (3.1 - 3.1) <B40B3737-42A5-3D57-9E87-D3905EE5BADB> /System/Library/PrivateFrameworks/AppleSystemInfo.framework/Versions/A/AppleSys temInfo

0x7fff99582000 - 0x7fff995baffb libsystem_network.dylib (411.1) <2EC3A005-473F-3C36-A665-F88B5BACC7F0> /usr/lib/system/libsystem_network.dylib



External Modification Summary:

Calls made by other processes targeting this process:

task_for_pid: 2

thread_create: 1

thread_set_state: 0

Calls made by this process:

task_for_pid: 0

thread_create: 0

thread_set_state: 0

Calls made by all processes on this machine:

task_for_pid: 3751

thread_create: 9

thread_set_state: 0



VM Region Summary:

ReadOnly portion of Libraries: Total=255.2M resident=229.7M(90%) swapped_out_or_unallocated=25.5M(10%)

Writable regions: Total=1.1G written=12.6M(1%) resident=17.9M(2%) swapped_out=4K(0%) unallocated=1.1G(98%)


REGION TYPE VIRTUAL

=========== =======

Activity Tracing 2048K

CG backing stores 576K

CG image 12K

CG shared images 240K

CoreAnimation 12K

CoreImage 8K

CoreUI image data 60K

Image IO 16K

JS JIT generated code 8K

JS JIT generated code (reserved) 1.0G reserved VM address space (unallocated)

Kernel Alloc Once 8K

MALLOC 53.6M

MALLOC (admin) 32K

Memory Tag 242 12K

Memory Tag 251 32K

OpenCL 16K

SQLite page cache 3072K

STACK GUARD 56.1M

Stack 18.2M

VM_ALLOCATE 17.2M

WebKit Malloc 1640K

__DATA 26.4M

__IMAGE 528K

__LINKEDIT 70.4M

__TEXT 184.8M

__UNICODE 544K

mapped file 64.2M

shared memory 4K

=========== =======

TOTAL 1.5G

TOTAL, minus reserved VM space 499.5M




Model: MacBookAir6,2, BootROM MBA61.0099.B18, 2 processors, Intel Core i5, 1.3 GHz, 4 GB, SMC 2.13f15

Graphics: Intel HD Graphics 5000, Intel HD Graphics 5000, Built-In

Memory Module: BANK 0/DIMM0, 2 GB, DDR3, 1600 MHz, 0x02FE, 0x45424A3230554638454455302D474E2D4620

Memory Module: BANK 1/DIMM0, 2 GB, DDR3, 1600 MHz, 0x02FE, 0x45424A3230554638454455302D474E2D4620

AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x117), Broadcom BCM43xx 1.0 (7.15.159.13.12)

Bluetooth: Version 4.3.2f6 15235, 3 services, 27 devices, 1 incoming serial ports

Network Service: Wi-Fi 2, AirPort, en0

Serial ATA Device: APPLE SSD SM0256F, 251 GB

USB Device: Internal Memory Card Reader

USB Device: BRCM20702 Hub

USB Device: Bluetooth USB Host Controller

Thunderbolt Bus: MacBook Air, Apple Inc., 23.6

Feb 16, 2015 11:33 AM in response to lucky_tintin

If Safari crashes on launch and you don't have another web browser, you should be able to launch Safari by starting up in safe mode.

You may have installed the "Genieo" or "InstallMac" ad-injection malware. Follow the instructions on this Apple Support page to remove it.

Back up all data before making any changes.

One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.

After removing the malware, remember to reset your home page in all the web browsers affected, if it was changed.

If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.

If you find Apple's instructions too hard to follow, ask for an alternative that doesn't require you to trust a black-box application without knowing what it does.

Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

Feb 17, 2015 9:40 AM in response to lucky_tintin

The problem is not caused by Yosemite, but rather by some incompatible third-party system modification that you installed.

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a summary of what you need to do, if you choose to proceed:

☞ Copy a line of text in this window to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

Triple-click anywhere in the line of text below on this page to select it:

PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(1241 ' 0.5 0.25 10 1000 15 5120 1000 25000 1 1 0 100 ' 51 25600 4 10 25 5120 102400 1000 25 1000 80 40 500 300 85 25 20480 262144 20 2000 524288 604800 5 );k=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays PCI UniversalAccess InstallHistory ConfigurationProfile AirPort 'com\.apple\.' -\\t N\\/A 'AES|atr|udit|msa|dnse|ax|ensh|fami|FileS|fing|ft[pw]|gedC|kdu|etS|is\.|alk|ODSA|otp|htt|pcas|ps-lp|rexe|rlo|rsh|smb|snm|teln|upd-[aw]|uuc|vix|webf' OSBundle{Require,AllowUserLoa}d 'Mb/s:per sec:ms/s:KiB/s:%:total:MB:total' 'Net in:Net out:I/O wait time:I/O requests:CPU usage:Open files:Memory:Mach ports:File opens:Forks:Failed forks:System errors' 'tsA|[ST]M[HL]' PlistBuddy{,' 2>&1'}' -c Print' 'Info\.plist' CFBundleIdentifier );f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' '%s %s\n' '%s\n'"${k[22]}"'%s\n' '\nContents of %s\n '"${k[22]}"'mod date: %s\n '"${k[22]}"'checksum: %s\n%s\n' '%d MB: %s\n' '\n ...and %s more line(s)\n' );c=(879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 3374894509 1051159591 892310726 1707497389 523110921 2883943871 3873345487 );s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[4]} ' s/:$//;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[9]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' BEGIN { FS=":";if(system("sw_vers -productVersion|grep -q ^10\.1")) d="^'"${k[21]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' { sub(/ :/,"");print|"tail -n'${p[10]}'";} ' ' NR==2&&$4<='${p[7]}' { print $4;} ' ' ($1~"wir"&&$2>'${p[22]}')||($1~/P.+ts:/&&$2>'${p[19]}') { print $1" "int($2);} ' '/YLD/s/=/ /p' ' { q=$1;$1="";u=$NF;$NF="";gsub(/ +$/,"");print q":"$0":"u;} ' ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' ' !/ /{print};END{if(NR<'{${p[12]},${p[13]}}')printf("^'"${k[21]}"'.+")} ' '|uniq' ' 1;END { if(NR<'{${p[14]},${p[21]}}') printf("^/[Sp].+|'${k[21]}'");} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p;' '&&echo On' '/\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/p' '/\.dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".","");print $0"$";} END { split("'"${c[*]}"'",c);for(i in c) print "\t"c[i]"$";} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' $2=="=" { gsub(/[()"]/,"",$3);print $3;} ' ' /^\// { sub("/dev/","",$1);printf("%s: %s\n",$1,$9);} ' '>&-||echo No' '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[2]}'{$2=$2-1;print}' ' BEGIN { M1='${p[16]}';M2='${p[18]}';M3='${p[8]}';M4='${p[3]}';} !/^A/{next};/%/ { getline;if($5<M1) o["CPU"]="CPU: user "$2"%, system "$4"%";next;} $2~/^disk/&&$4>M2 { o[$2]=$2": "$3" ops/s, "$4" blocks/s";next;} $2~/^(en[0-9]|bridg)/ { if(o[$2]) { e=$3+$4+$5+$6;if(e) o[$2]=o[$2]"; errors "e"/s";next;};if($4>M3||$6>M4) o[$2]=$2": in "int($4/1024)", out "int($6/1024)" (KiB/s)";} END { for(i in o) print o[i];} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' BEGIN{FS=": "} /^ {10}O/ {exit} /^ {0,12}[^ ]/ {next} $1~"Ne"&&$2!~/^In/{print} $1~"Si" { split($2,a," ");if(a[1]-a[4]<'${p[5]}') print;};$1~"T"&&$2<'${p[20]}'{print};$1~"Se"&&$2!~"2"{print};' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1;} ' ' BEGIN { split("'"${p[1]}"'",m);FS=":";} $2<=m[$1]{next} $1<9 { o[$1]=o[$1]"\n "$3" (UID "$4"): "$2;} $1==9&&$5!~"^/dev" { o[$1]=o[$1]"\n "$3" (UID "$4") => "$5" (status "$6"): "$2;} $1==10&&$5 { p="ps -c -ocomm -p"$5"|sed 1d";p|getline n;close(p);if(n) $5=n;o[$1]=o[$1]"\n "$5" => "$3" UID ("$4"): "$2;} $1~/1[12]/ { o[$1]=o[$1]"\n "$3" (UID "$4", error "$5"): "$2;} END { n=split("'"${k[27]}"'",u,":");for(i=n+1;i<n+5;i++)u[i]=u[2];split("'"${k[28]}"'",l,":");for(i in o) print "\n"l[i]" ("u[i]")\n"o[i];} ' ' /^ {8}[^ ]/{print} ' ' BEGIN { L='${p[17]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${k[30]}"' "F|getline g) { l++;if(l<=L) f=f"\n "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n '"${k[22]}"'"T;printf("'"${f[5]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' 's/^.{52}(.+) <.+/\1/p' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");p=a[1];k[S]='${k[25]}';k[U]='${k[26]}';v[S]="Safe";v[U]="true";for(i in k) { s=system("'"${k[30]}"'\\ :"k[i]" \""p"\"/*/I*|grep -qw "v[i]);if(!s) a[1]=a[1]" "i;};if(!a[2]) a[2]="'"${k[23]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${k[31]}"'\\ :'"${k[33]}"' \""$0"\"/*/'${k[32]}'";p|getline b;close(p);if(b~/ /||b=="") b="'"${k[23]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR>=13 { gsub(/[^0-9]/,"",$1);print;} ' ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${k[32]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ / [VY]/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' '/^find: /!p;' ' /^p/{ s/.//g;x;s/\nu/:/;s/(\n)c/\1:/;s/\n\n//;p;};H;' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;p;' ' s/^.+ |\(.+\)$//g;p;' '1;END{if(NR<'${p[15]}')printf("^/(S|usr/(X|li))")}' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END{ if(i>1)print n} ' s/{'\.|jnl: ','P.+:'}'//;s/ +([0-9]+)(.+)/\2 \1/p' ' /es: ./{ s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(B2|[my]): /H;d;:0'$'\n'' x;/[my]: [AM]|m: I.+p$|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/:(0|-(4[34])?)$/p' '|sort'{'|uniq'{,\ -c},\ -nr} ' s/^/'{5,6,7,8}':/;s/ *: */:/g;p;' '/e:/{print $2}' ' /^[(]/{ s/....//;s/$/:/;N;/: [)]$/d;s/\n.+ ([^ ]+).$/\1/;H;};${ g;p;} ' 's/:.+$//p' '|wc -l' /{\\.{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'Info,'Launch[AD].+'}'\.plist$/p' 's/([-+.?])/\\\1/g;p' 's/, /\'$'\n/g;p' ' BEGIN{FS=":"} { printf("'"${f[6]}"'",$1/1048576,$2);} ' ' /= D/&&$1!~/'{${k[24]},${k[29]}}'/ { getline d;if(d~"t") D=D"\n"$1;} END { print D;} ' ' NR>1&&$3!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $3":"$2;} ' '|tail -n'${p[6]} ' $1>1 { $NF=$NF" x"$1;} /\*/ { if(!f) f="\n\t* Code injection";} { $1="";} 1;END { print f;} ' ' s/.+bus /Bus: /;s/,.+[(]/ /;s/,.+//p;' ' { $NF=$NF" Errors: "$1;$1="";} 1 ' ' 1s/^/\'$'\n''/;/^ +(([MNPRSV]|De|Li).+|Bus): .|d: Y/d;s/:$//;$d;p;' ' BEGIN { RS=",";FS=":";} $1~"name" { gsub("\"","",$2);print $2;} ' '|grep -q e:/' '/[^ .]/p' '{ print $1}' ' BEGIN{ FS=": "} /^C/ { getline t;if(a[split(t,a)]) print $2;} ' ' 3,4d;/^ +D|Of|Fu| [0B]/d;s/^ |:$//g;$!H;${ x;/:/p;} ' ' BEGIN { FS=": ";} NR==1 { sub(":","");h="\n"$1"\n";} /:$/ { l=$1;next;} $1~"S"&&$2!~3 { getline;next;} /^ {6}I/ { i++;L[i]=l" "$2;if(i=='${p[24]}') nextfile;} END { if(i) print h;for(j=0;j<i;j++) print L[i-j];} ' ' /services =/,/[\}]/!d;/[=\}]/!p ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${k[30]}\\" echo cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin' env pluginkit scutil 'dtrace -q -x aggsortrev -n' security sed\ -En awk 'dscl . -read' networksetup mdutil lsof test osascript\ -e netstat mdls route cat );c2=(${k[21]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'" 'L*/Ca*/'${k[21]}'Saf*/E* -d 2 -name '${k[32]} '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility Req "'${k[21]}'('{'bird|.*i?clou','lsu|sha'}')"' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message CRne '0xdc008012|(allow|call)ing|(mplet|nabl)ed|ry HD|safe b' -k Message CReq 'bad |Can.t l|corru|dead|fail|GPU |hfs: Ru|inval|Limiti|v_c|NVDA[(]|pagin|Purg(ed|in)|error|Refus|TCON|tim(ed? ?|ing )o|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o%cpu,comm,ruid' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0<0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno!=0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000000);normalize(@h,10240);printa(\"1:%@d:%s:%d\n\",@a);printa(\"2:%@d:%s:%d\n\",@b);printa(\"9:%@d:%s:%d:%s:%d\n\",@c);printa(\"10:%@d:%s:%d:%d\n\",@d);printa(\"11:%@d:%s:%d:%d\n\",@e);printa(\"12:%@d:%s:%d:%d\n\",@f);printa(\"3:%@d:%s:%d\n\",@g);printa(\"4:%@d:%s:%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;' '/S*/*/Ca*/*xpc*' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' /\ kMDItemContentTypeTree=${k[21]}{bundle,mach-o-dylib} :Label "/p*/e*/{aut*,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {/p*,/usr/local}/e*/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/{Lau,Sec}*/*t .launchd.conf" list '-F "" -k Sender hidd -k Nle 3' /Library/Preferences/${k[21]}alf\ globalstate --proxy '-n get default' print\ system --dns -get{dnsservers,info} dump-trust-settings\ {-s,} '' -n1 '-R -ce -l1 -n5 -o'{'prt -stats prt','mem -stats mem'}',command,uid' -kl -l -s\ / '--regexp --files '${k[21]}'pkg.*' '+c0 -i4TCP:0-1023' ${k[21]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER' '-app Safari WebKitDNSPrefetchingEnabled' '-Fcu +c0 -l' -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','(a und|I/O |jnl_io.+)err','USBF:.+bus'}'"' -name\ kMDItem${k[33]} -T\ hfs '-n get default' -listnetworkserviceorder :${k[33]} :CFBundleDisplayName $EUID {,'/{S*/,}'}'L*/{,Co*/*/*/L*/}{Cache,Log}s $TMPDIR../C -type f -size +'${p[11]}'M -exec stat -f'%z:%N' {} \;' \ /v*/d*/*/*l*d{,.*.$UID}/* '-app Safari UserStyleSheetEnabled' 'L*/A*/Fi*/P*/*/a*.json' users/$USER\ HomeDirectory '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' ' -F "\$Time \$Sender \$(RefProc): \$Message" -k Level Nle 3 -k Facility R'{'ne "user|','eq "'}'console" -k Message CRne "^[^A-Z]|deprec|sandbox ex" ' getenv '/ "kMDItemDateAdded>=\$time.now(-'${p[23]}')&&kMDItem'${k[33]}'=*"' -m\ / );N1=${#c2[@]};for j in {0..20};do c2[N1+j]=SP${k[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel,Firefox}\ extensions System\ load boot\ args FileVault\ {2,1} {Kernel,System,Console}\ log Activity SMC Login\ hook 'I/O per process' 'High file counts' UID Daemons Agents XPC\ cache Startup\ items {Admin,Root}\ access Stylesheet Library\ paths{,' ('{shell,launchd}\)} Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory\ pressure Listeners Widgets Parental\ Controls Prefetching Nets Volumes {Continuity,I/O,iCloud,HID,HCI}\ errors {User,System}\ {caches/logs,overrides} Shutdown\ codes Heat Diagnostic\ reports Bad\ plists Free\ space VM Bundles{,' (new)'} 'Trusted certs ('{system,user}\) );N3=${#l[@]};for i in {0..8};do l[N3+i]=${k[5+i]};done;F() { local x="${s[$1]}";[[ "$x" =~ ^([\&\|\<\>]|$) ]]&&{ printf "$x";return;};:|${c1[30]} "$x" 2>&-;printf "%s \'%s\'" "|${c1[30+$?]}" "$x";};A0() { Q=6;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[0]};};A1() { local c="${c1[$1]} ${c2[$2]}";shift 2;c="$c ` while [[ "$1" ]];do F $1;shift;done`";((P2))&&{ c="sudo $c";P2=;};v=`eval "$c"`;[[ "$v" ]];};A2() { local c="${c1[$1]}";[[ "$c" =~ ^(awk|sed ) ]]&&c="$c '${s[$2]}'"||c="$c ${c2[$2]}";shift 2;local d=` while [[ "$1" ]];do F $1;shift;done`;((P2))&&{ c="sudo $c";P2=;};local a;v=` while read a;do eval "$c '$a' $d";done<<<"$v";`;[[ "$v" ]];};A3(){ v=$((`date +%s`-v[3]));};B1() { v=No;! ((v[1]))&&{ v=;P1=1;};};eval "`type -a B1|sed '1d;s/1/2/'`";B3(){ v[$1]="$v";};B4() { local i=$1;local j=$2;shift 2;local c="cat` while [[ "$1" ]];do F $1;shift;done`";v[j]=`eval "{ $c;}"<<<"${v[i]}"`;};B5(){ v="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`egrep -v "${v[$1]}"<<<"$v"|sort`;};eval "`type -a B7|sed '1d;s/7/8/;s/-v //'`";C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { B4 0 0 63&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";printf '\n\tThe test results are on the Clipboard.\n\n\tPlease close this window.\n';exit 2>&-;};for i in 1 2;do eval D$((i-1))'() { A'$i' $@;C0;};';for j in 2 3;do eval D$((i+2*j-3))'() { local x=$1;shift;A'$i' $@;C'$j' $x;};';done;done;trap C5 2;o=$({ A0;D0 0 N1+1 2;D0 0 $N1 1;B1;C2 27;B1&&! B2&&C2 28;D2 22 15 63;D0 0 N1+2 3;D0 0 N1+15 17;D4 3 0 N1+3 4;D4 4 0 N1+4 5;D4 N3+4 0 N1+9 59;D0 0 N1+16 99; for i in 0 1 2;do D4 N3+i 0 N1+5+i 6;done;D4 N3+3 0 N1+8 71;D4 62 1 10 7;D4 10 1 11 8;B2&&D4 18 19 53 67;D2 11 2 12 9;D2 12 3 13 10;D2 13 32 70 101 25;D2 65 6 76 13;D2 45 20 52 66;D4 66 7 37 14;D4 17 8 15 38;D0 9 16 16 77 45;C4;B2&&D0 35 49 61 75 76 78 45;B2&&{ D0 28 17 45;C4;};D0 12 40 54 16 79 45;D0 12 39 54 16 80 45;D4 31 25 37 15&&{ B4 0 8 103;B4 8 0;A2 18 74;B6 8 0 3;C3 32;};B2&&D4 19 21 0;B2&&D4 40 10 42;D2 2 0 N1+19 46 84;D2 44 34 43 53;D2 25 22 20 32;D2 33 0 N1+14 51;D4 69 29 35 104 75 96;D4 70 29 36 104 75 96;D2 34 21 28 35;D4 35 27 29 36;A1 40 59 81;B3 18;A1 33 60 82;B8 18;B4 0 19 83;A1 27 32 39&&{ B3 20;B4 19 0;A2 33 33 40;B3 21;B6 20 21 3;};C2 36;D4 50 38 5 68;B4 19 0;D5 37 33 34 42;B2&&D4 46 35 45 55;D4 38 0 N1+20 43;B2&&D4 59 4 65 76 91;D4 63 4 19 44 75 95 96;B1&&{ D4 53 5 55 75 69&&D4 51 6 58 31;D4 56 5 56 97 75 98&&D0 0 N1+7 99;D2 55 5 27 84;D4 61 5 54 75 70;D4 14 5 14 12;D4 15 5 72 12;C4;};D4 16 5 73 12;A1 13 44 74 18;C4;B3 4;B4 4 0 85;A2 14 61 89;B4 0 5 19 102;A1 17 41 50;B7 5;C3 8;B4 4 0 88;A2 14 24 89;C4;B4 0 6 19 102;B4 4 0 86;A2 14 61 89;B4 0 7 19 102;B5 6 7;B4 0 11 73 102;A1 18 31 107 94 74||{ B2&&A1 18 26 94 74;}&&{ B7 11;B4 0 0 11;C3 23;};A1 18 26 94;B7 11;B4 0 0 11;C3 24;D4 60 14 66 92;D4 58 14 67 93;D4 26 4 21 24;D4 42 14 1 62;D4 43 37 2 90 48;D4 41 10 42;D2 48 36 47 25;A1 4 3 60&&{ B3 9;A2 14 61;B4 0 10 21;B4 9 0;A2 14 62;B4 0 0 21;B6 0 10 4;C3 5;};D4 9 41 69 100;D2 29 21 68 35;D2 49 21 48 49;B4 4 22 57 102;A1 21 46 56 74;B7 22;B4 0 0 58;C3 47;D4 54 5 7 75 76 69;D4 52 5 8 75 76 69;D4 57 4 64 76 91;D2 0 4 4 84;D2 1 4 51 84;D4 21 22 9 37;D0 0 N1+17 105; A1 23 18 28 89;B4 0 16 22 102;A1 16 25 33;B7 16;B4 0 0 34;D1 31 47;D4 64 4 71 41;C4;B4 4 12 26 89 23 102;for i in {0..3};do A1 0 N1+10+i 72 74;B7 12;B4 0 0 52;C3 N3+5+i;((i))||C4;done;A1 24 22 29;B7 12;B3 14;A2 39 57 30;B3 15;B6 14 15 4;C3 67;A1 24 75 74;B3 23;A2 39 57 30;B3 24;B6 23 24 4;C3 68;B4 4 13 27 89 65;A1 24 23;B7 13;C3 30;B4 4 0 87;A2 14 61 89 20;B4 0 17;A1 26 50 64;B7 17;C3 6;D0 0 N1+18 106;D4 7 11 6;A3;C2 39;C4;} 4>&2 2>/dev/null;);C5

Copy the selected text to the Clipboard by pressing the key combination command-C.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec

Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I may not agree with them.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Feb 18, 2015 3:54 PM in response to lucky_tintin

Start time: 18:43:44 02/18/15



Revision: 1241



Model Identifier: MacBookAir6,2

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 1 day22:33



UID: 501



System errors (per sec)



Google Chrome H (UID 501, error 35): 197

Google Chrome (UID 501, error 35): 136



Firewall: On



TCP/IP



Subnet mask: 255.248.0.0



Listeners



cupsd: ipp

kdc: kerberos

launchd: afpovertcp

launchd: ssh



Wi-Fi



Security: None



System caches/logs



2249 MB: /System/Library/Caches/com.apple.coresymbolicationd/data



Diagnostic reports



2015-01-21 KiesViaWiFiAgent crash

2015-01-21 Safari crash* x10

2015-01-23 Safari crash*

2015-01-23 adb.osx crash

2015-01-25 KiesViaWiFiAgent crash x2

2015-01-26 Safari crash*

2015-02-01 Finder crash*

2015-02-01 Safari crash* x3

2015-02-06 InstallAssistant crash

2015-02-06 Safari crash*

2015-02-09 Safari crash*

2015-02-13 Mint QuickView crash

2015-02-15 Safari crash* x3

2015-02-16 Safari crash* x9

* Code injection



Kernel log



Feb 15 14:59:24 hfs: clear LowDisk: vol:Macintosh HD 2, freeblks:102240, warninglimit:38400, desiredlevel:51200

Feb 15 15:26:15 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Feb 15 15:26:24 utun_start: ifnet_disable_output returned error 12

Feb 15 15:26:44 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Feb 15 15:26:52 utun_start: ifnet_disable_output returned error 12

Feb 15 15:27:14 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Feb 15 15:27:23 utun_start: ifnet_disable_output returned error 12

Feb 15 15:28:39 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Feb 15 15:28:50 utun_start: ifnet_disable_output returned error 12

Feb 15 15:33:26 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Feb 15 15:33:36 utun_start: ifnet_disable_output returned error 12

Feb 16 07:49:10 WARNING: hibernate_page_list_setall skipped 28453 xpmapped pages

Feb 16 07:49:39 ARPT: 3971.148156: MacAuthEvent en0 Auth result for: 6e:19:8f:11:db:0b Auth request tx failed

Feb 16 11:04:24 ARPT: 4855.895612: MacAuthEvent en0 Auth result for: b2:c5:54:c1:09:51 Auth request tx failed

Feb 16 11:04:26 WARNING: hibernate_page_list_setall skipped 28453 xpmapped pages

Feb 16 19:07:24 WARNING: hibernate_page_list_setall skipped 39495 xpmapped pages

Feb 16 19:19:28 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Feb 16 19:19:50 utun_start: ifnet_disable_output returned error 12

Feb 16 19:47:54 nfs connect socket error 61 for localhost:/HCwgthagufjSzZIbomA7Lm

Feb 16 19:48:08 nfs server localhost:/HCwgthagufjSzZIbomA7Lm: can not connect, error 61

Feb 16 19:48:40 nfs server localhost:/HCwgthagufjSzZIbomA7Lm: can not connect, error 61

Feb 16 19:49:02 nfs server localhost:/HCwgthagufjSzZIbomA7Lm: dead

Feb 16 20:10:49 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Feb 16 20:11:09 utun_start: ifnet_disable_output returned error 12

Feb 18 18:40:21 WARNING: hibernate_page_list_setall skipped 10729 xpmapped pages



System log



label = "2.5.4.6";

"localized label" = "2.5.4.6";

type = string;

value = US;

}, {

label = "2.5.4.8";

"localized label" = "2.5.4.8";

type = string;

value = California;

}, {

label = "2.5.4.7";

"localized label" = "2.5.4.7";

type = string;

value = Cupertino;

}, {

label = "2.5.4.10";

"localized label" = "2.5.4.10";

type = string;

value = "Apple Inc.";

}, {

label = "2.5.4.3";

"localized label" = "2.5.4.3";

type = string;

value = "courier.sandbox.push.apple.com";

})



Console log



Feb 15 12:20:53 ReportCrash Invoking spindump for pid=17612 wakeups_rate=368 duration=123 because of excessive wakeups

Feb 15 12:31:48 ReportCrash Invoking spindump for pid=17144 wakeups_rate=158 duration=285 because of excessive wakeups

Feb 15 15:29:07 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

Feb 15 15:29:07 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid. Unable to determine schema version.

Feb 15 15:29:07 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

Feb 15 15:29:07 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

Feb 15 15:33:41 fontd Failed to open read-only database, regenerating DB

Feb 15 23:47:22 ReportCrash Invoking spindump for pid=801 thread=11435 percent_cpu=56 duration=161 because of excessive cpu utilization

Feb 16 20:10:04 nsurlstoraged asyncCacheDirectoryRemove - failed to remove old cache dir /var/folders/pp/k49r5gts727dk5dslwsd6tfr0000gn/T/fsCachedData_remove. Errno=66

Feb 16 20:10:27 nsurlstoraged asyncCacheDirectoryRemove - failed to remove old cache dir /var/folders/pp/k49r5gts727dk5dslwsd6tfr0000gn/T/fsCachedData_remove. Errno=2

Feb 16 20:11:02 fontd Failed to open read-only database, regenerating DB



Daemons



com.adobe.fpsaud

com.apple.installer.osmessagetracing

com.apple.watchdogd

com.genieoinnovation.macextension.client

com.google.keystone.daemon

com.microsoft.office.licensing.helper



Agents



com.apple.AirPortBaseStationAgent

com.apple.photostream-agent

com.facebook.videochat.NAME.updater

com.genieo.completer.download

com.genieo.completer.ltvbit

com.genieo.completer.update

com.genieoinnovation.macextension

com.google.keystone.system.agent

com.mint.quickview-launcher



User overrides



com.evernote.EvernoteHelper



User login items



iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Box Sync

- /Applications/Box Sync.app

KiesAgent

- /Applications/Kies.app/Contents/MacOS/KiesAgent.app

fuspredownloader

- /Users/USER/Library/Application Support/.FUS/fuspredownloader.app



Firefox extensions



Firebug

robcee

FirebugWorkingGroup



iCloud errors



cloudd 72

bird 12

comapple.InputMethodKit.UserDictionary 2



Continuity errors



sharingd 12



Restricted files: 43



Lockfiles: 2



Contents of /Library/LaunchAgents/com.genieoinnovation.macextension.plist

- mod date: Jan 19 20:42:06 2015

- checksum: 1626655917



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieoinnovation.macextension</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Frameworks/GenieoExtra.framework/Contents/MacOS/Application</s tring>

</array>

<key>KeepAlive</key>

<true/>

<key>UseLMILaunchAgentFixer</key>

<true/>

<key>WorkingDirectory</key>

<string>/Library/Frameworks/GenieoExtra.framework/Contents/MacOS</string>

</dict>

</plist>



Contents of /Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist

- mod date: Jan 19 20:42:06 2015

- checksum: 118043911



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieoinnovation.macextension.client</string>

<key>MachServices</key>

<dict>

<key>com.genieoinnovation.macextension.client.mach</key>

<true/>

<key>com.genieoinnovation.macextension.client.runnow</key>

<true/>

</dict>

<key>Program</key>

<string>/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client </string>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client </string>

</array>

</dict>

</plist>



Contents of /System/Library/Security/authorization.plist

- mod date: Oct 9 05:17:00 2014

- checksum: 2720110640



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>comment</key>

<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

allow rule: this is always allowed

&lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

&lt;string&gt;allow&lt;/string&gt;

deny rule: this is always denied

&lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

&lt;string&gt;deny&lt;/string&gt;

user rule: successful authentication as a user in the specified group(5) allows the associated right.

The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.

See remaining rules for examples.

</string>

<key>rights</key>

<dict>

<key></key>

<dict>

<key>class</key>

<string>rule</string>

<key>comment</key>



...and 1850 more line(s)



Contents of /private/etc/authorization.deprecated

- mod date: Sep 27 23:40:24 2013

- checksum: 2760000159



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>comment</key>

<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

allow rule: this is always allowed

&lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

&lt;string&gt;allow&lt;/string&gt;

deny rule: this is always denied

&lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

&lt;string&gt;deny&lt;/string&gt;

user rule: successful authentication as a user in the specified group(5) allows the associated right.

The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.

See remaining rules for examples.

</string>

<key>rights</key>

<dict>

<key></key>

<dict>

<key>class</key>

<string>rule</string>

<key>comment</key>



...and 9582 more line(s)



Contents of Library/LaunchAgents/com.facebook.videochat.NAME.plist

- mod date: Aug 9 10:13:10 2014

- checksum: 2009530727



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.facebook.videochat.NAME.updater</string>

<key>ProgramArguments</key>

<array>

<string>/usr/bin/java</string>

<string>-cp</string>

<string>/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookUpdate.jar</string>

<string>FacebookUpdate</string>

<string>com.facebook.peep</string>

<string>3.1.0.522</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>10800</integer>

<key>StandardErrorPath</key>

<string>/dev/null</string>

<key>StandardOutPath</key>

<string>/dev/null</string>

</dict>

</plist>



Contents of Library/LaunchAgents/com.genieo.completer.download.plist

- mod date: Jan 19 20:42:18 2015

- checksum: 1765174459



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.download</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>

<string>-trigger</string>

<string>download</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>13140009</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Downloads</string>

</array>

</dict>

</plist>



Contents of Library/LaunchAgents/com.genieo.completer.ltvbit.plist

- mod date: Jan 19 20:42:18 2015

- checksum: 3630521258



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.ltvbit</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>

<string>-trigger</string>

<string>ltvbit</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>13140009</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>4</integer>

<key>Minute</key>

<integer>15</integer>

</dict>



...and 2 more line(s)



Contents of Library/LaunchAgents/com.genieo.completer.update.plist

- mod date: Jan 19 20:42:18 2015

- checksum: 2081183285



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.genieo.completer.update</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/com.genieoinnovation.Installer/Completer.app/Contents/MacOS/InstallerS< /string>

<string>-trigger</string>

<string>update</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>17046</string>

<string>-firstAppId</string>

<string>13140009</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>20</integer>

<key>Minute</key>



...and 4 more line(s)



Bad plists



/Library/Preferences/com.gen.framework.plist



Bundles (new)



/Applications/Box Sync.app

- com.box.sync

/Applications/Evernote.app

- com.evernote.Evernote

/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app

- null

/Users/USER/Library/Application Support/Box/Box Sync/FinderPlugin.bundle

- com.box.sync



Installations



JDK 7 Update 25: 7/12/13, 11:24 AM

Google Voice and Video: 7/10/13, 11:21 PM

Google Voice and Video: 6/29/13, 10:23 PM

Google Voice and Video: 6/29/13, 10:23 PM

PlugIn: 6/28/13, 11:00 PM



Elapsed time (sec): 466

Feb 18, 2015 4:17 PM in response to lucky_tintin

"Genieo" is installed and is causing the crashes. If you couldn't follow the instructions in the Apple Support article that I linked to earlier, please describe what you did and what happened. Or, if you prefer, see below.

I strongly recommend following the instructions in the Apple Support article to remove "Genieo." But if you find those instructions too hard to follow, there are other options that you may prefer, and that don't involve trusting a black-box application without knowing what it does.

Back up all data before doing anything else. Remember that if there is no working web browser on the infected computer, you should be able to use Safari by starting the computer in safe mode.

One option for removing Genieo is to click the "Support" link at the top of this page and schedule a call from Apple Support. If you're past the 90-day complimentary support period after buying a new Mac, and you don't have AppleCare, you will probably be charged for the call. According to reports, an Apple Support representative will be able to talk you through the process of removing Genieo and perhaps other kinds of adware. He or she can even take control of your computer remotely—with your permission, of course—and do the work for you.

If you're going to do this, contact Apple Support via the link on this page. Do not search Google, Bing, or Yahoo for any kind of tech support, because you'll very likely be directed to a scam. Don't allow anyone to control your computer remotely unless you're absolutely sure you're dealing with an Apple representative.

This solution is only practical if you're confident that you won't repeat the mistake that led you to install malware.

A second option is to make a "Genius" appointment at an Apple Store. That's a free service, but maybe not as convenient. You'll have to bring the computer with you to the appointment.

There's a third option that I mention as a last resort, but don't encourage otherwise. It's better than running an unknown application on blind faith, and perhaps easier than manual removal, but it still involves some effort and an element of trust.

Download the Bitdefender Genieo Removal Tool. Please note:

I am not suggesting you run this application. Just download it and then see below.

I am not endorsing Bitdefender or any other "anti-virus" product. You should not use such products.

Don't expect this procedure to remove any adware other than Genieo. It does remove an old variant of the "VSearch" adware that is probably no longer circulating.

When you download the tool, you'll get a file named "Adware Removal Tool.zip". Open it and you'll get an application named "Adware Removal Tool." You do not need to, and should not, run this application. I have not tested it and I don't know what it does, if anything, besides removing Genieo. I have tested the instructions below.

Instead of double-clicking the Adware Removal Tool icon to launch the application, right-click or control-click it and select

Show Package Contents

from the popup menu. Now you'll see a folder named "Contents," and inside that, a folder named "Resources."

Inside the Resources folder, you'll find files with these names:

finishUninstall.scpt

uninstall.scpt

Each is a very simple AppleScript. The key point is that, unlike an application, the scripts are transparent. You can read them and know what they will do before you run them.

Double-click the file named "uninstall.scpt". It will open in a built-in application called "Script Editor." This application is part of OS X; it's not something you downloaded from Bitdefender.

Read the script. You'll see that it contains several lines like the following, and not much else:

do shell script "rm -rf ~/Library/Application\\ Support/com.genieoinnovation.Installer"

This is where the element of trust comes in. You may be able to convince yourself that this instruction removes ("rm") a file. If you're satisfied that the script removes some (not all) of the files that are listed in the Apple Support article as components of Genieo, and does nothing else, then click the icon in the toolbar of the Script Editor window that looks like an arrowhead pointing to the right. That will run the script. You'll be prompted for your administrator login password.

There will be no feedback when the script runs. After a few seconds at most, the word "Result" should appear below the script text. Below that, there will be a blank space. Close the Script Editor window and restart the computer.

You have now inactivated Genieo permanently, as long as you never reinstall it. You could stop here, but ideally you should finish cleaning up by running the script named "finishUninstall.scpt" in the same way as above. There's no need to restart after running the second script.

You can then quit Script Editor. Delete Adware Removal Tool and Adware Removal Tool.zip.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

EXC_BAD_ACCESS (SIGSEGV) and KERN_INVALID_ADDRESS

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.