Q: Mackeeper Takerpver

I just posted this issue in detail here - Ad Pop ups coming in all browsers on Mac

Tried all those links from AdwareMedic, didn't work, I m still seeing the pop ups occasionally clicking a link of a clean website opens a new tab to some **** site.

Hi,

I'm trying the advice you offered to tinyaly on Feb. 15, 2015 helping to get rid of Mackeeper.  I have run the test you suggested, and the results follow.   Thank you for your insight.

Start time: 13:59:53 03/01/15

Revision: 1240

Model Identifier: iMac11,2

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 13 days 5:22

UID: 501

SerialATA

    WDC WD5000AAKS-40V6A0                  

FireWire

    My Passport 071D (WD)

FileVault 2: FileVault master keychain appears to be installed

Memory (MB)

    kernel_task (UID 0): 1028

Font issues: 4

DNS: 205.171.3.25 (static)

Listeners

    kdc: kerberos

    launchd: afpovertcp

System caches/logs

    1422 MB: /System/Library/Caches/com.apple.coresymbolicationd/data

Diagnostic reports

    2015-01-31 soagent crash

    2015-01-31 txtrUpdater crash

    2015-02-07 AdobeReader crash

    2015-02-08 AdobeReader crash

    2015-02-10 com.apple.AmbientDisplayAgent crash

Kernel log

    Feb 23 16:25:15 Failed to get hibernate image filename

    Feb 23 17:43:39 Failed to get hibernate image filename

    Feb 24 07:39:24 Failed to get hibernate image filename

    Feb 24 17:36:14 Failed to get hibernate image filename

    Feb 24 18:49:18 Failed to get hibernate image filename

    Feb 25 08:11:31 Failed to get hibernate image filename

    Feb 25 10:19:07 Failed to get hibernate image filename

    Feb 25 15:20:21 Failed to get hibernate image filename

    Feb 25 17:46:08 Failed to get hibernate image filename

    Feb 26 11:10:10 Failed to get hibernate image filename

    Feb 26 11:20:55 Failed to get hibernate image filename

    Feb 26 14:02:37 Failed to get hibernate image filename

    Feb 26 15:47:47 Failed to get hibernate image filename

    Feb 26 16:54:40 Failed to get hibernate image filename

    Feb 26 17:17:29 Failed to get hibernate image filename

    Feb 27 07:54:45 Failed to get hibernate image filename

    Feb 27 15:38:49 Failed to get hibernate image filename

    Feb 27 16:50:19 Failed to get hibernate image filename

    Feb 27 20:56:48 Failed to get hibernate image filename

    Feb 28 07:52:10 Failed to get hibernate image filename

    Feb 28 14:00:50 Failed to get hibernate image filename

    Feb 28 17:02:51 Failed to get hibernate image filename

    Feb 28 18:59:16 Failed to get hibernate image filename

    Mar  1 08:45:55 Failed to get hibernate image filename

    Mar  1 13:18:55 Failed to get hibernate image filename

System log

    Mar  1 13:47:11 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:11 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:11 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:12 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:12 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:12 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:12 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:13 PluginProcess Error loading /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr:  dlopen(/Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr, 262): Symbol not found: _OTGetEndpointState

     Referenced from: /Library/Application Support/Adobe/Shockwave 12/Xtras/Multiusr.xtra/Contents/MacOS/Multiusr

     Expected in: /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon

    Mar  1 13:47:38 helpd Cannot find executable for CFBundle 0x7fb9e8e5e5c0 </Library/Documentation/Help/iWorkFunctionsHelp.help> (not loaded)

Console log

    Feb 23 10:22:21 ReportCrash Invoking spindump for pid=10719 wakeups_rate=163 duration=277 because of excessive wakeups

    Feb 23 17:05:08 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

    Feb 23 17:05:08 nsurlstoraged The read-connection to the DB=/Users/USER/Library/Caches/com.apple.icloud.fmfd/Cache.db is NOT valid.  Unable to determine schema version.

    Feb 23 17:05:08 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

    Feb 23 17:05:08 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

    Feb 23 17:05:11 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

    Feb 23 17:06:13 nsurlstoraged realpath() returned NULL for /Users/USER/Library/Caches/com.apple.icloud.fmfd

    Feb 26 10:25:02 nsurlstoraged ERROR: unable to get the receiver data from the DB!

    Feb 26 11:19:11 nsurlstoraged asyncCacheDirectoryRemove - failed to remove old cache dir /var/folders/th/vx3zbnjd3r17dmhdw77kb7p00000gn/T/fsCachedData_remove.  Errno=2

Daemons

    com.adobe.fpsaud

    com.apple.Kerberos.kdc

    - status: 1

    com.apple.installer.osmessagetracing

    com.apple.security.syspolicy

    - status: -15

    com.apple.watchdogd

Agents

    com.adobe.ARM.UUID

    com.apple.AirPortBaseStationAgent

    com.apple.MailServiceAgent

    - status: -9

    com.apple.geod

    - status: -9

User login items

    Dropbox

    - /Applications/Dropbox.app

Safari extensions

    Dashlane

    - com.dashlane.dashlanesafari

    Disconnect

    - me.disconnect.disconnect

    DuckDuckGo

    - com.duckduckgo.safari

    InvisibleHand

    - com.forward.invisiblehand

    Omnibar

    - com.genieo.safari

iCloud errors

    bird 50

    comapple.InputMethodKit.UserDictionary 35

    cloudd 16

Continuity errors

    sharingd 5

Restricted files: 377

Lockfiles: 12

Accessibility

  Cursor Magnification: On

  Keyboard Zoom: On

Contents of /System/Library/Security/authorization.plist

    - mod date: Oct  9 03:17:00 2014

    - checksum: 2720110640

    <?xml version="1.0" encoding="UTF-8"?>

    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

    <plist version="1.0">

    <dict>

    <key>comment</key>

    <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

    allow rule: this is always allowed

    &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

    &lt;string&gt;allow&lt;/string&gt;

    deny rule: this is always denied

    &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

    &lt;string&gt;deny&lt;/string&gt;

    user rule: successful authentication as a user in the specified group(5) allows the associated right.

    The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

    The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

    The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

    See remaining rules for examples.

    </string>

    <key>rights</key>

    <dict>

    <key></key>

    <dict>

    <key>class</key>

    <string>rule</string>

    <key>comment</key>

    ...and 1850 more line(s)

Contents of /private/etc/authorization.deprecated

    - mod date: Mar 23 07:25:42 2014

    - checksum: 1594017318

    <?xml version="1.0" encoding="UTF-8"?>

    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

    <plist version="1.0">

    <dict>

    <key>comment</key>

    <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.

    allow rule: this is always allowed

    &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;

    &lt;string&gt;allow&lt;/string&gt;

    deny rule: this is always denied

    &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;

    &lt;string&gt;deny&lt;/string&gt;

    user rule: successful authentication as a user in the specified group(5) allows the associated right.

    The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.

    The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.

    The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.

    See remaining rules for examples.

    </string>

    <key>rights</key>

    <dict>

    <key></key>

    <dict>

    <key>class</key>

    <string>rule</string>

    <key>comment</key>

    ...and 893 more line(s)

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

    - mod date: Dec  9 20:56:28 2014

    - checksum: 739925657

    <?xml version="1.0" encoding="UTF-8"?>

    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

    <plist version="1.0">

    <dict>

    <key>Label</key>

    <string>com.adobe.ARM.UUID</string>

    <key>ProgramArguments</key>

    <array>

    <string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

    <string>semi-manual</string>

    </array>

    <key>RunAtLoad</key>

    <true/>

    <key>StartInterval</key>

    <integer>12600</integer>

    </dict>

    </plist>

Bad plists

    /Library/Preferences/com.gen.framework.plist

Bundles (new)

    /Applications/TurboTax Premier 2014.app

    - com.intuit.turbotax.2014

Library paths

    /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

    /Users/USER/Library/Application Support/Firefox/Profiles/80i8za5y.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

    /Users/USER/Library/Application Support/NCH Software/Components/ffmpeg15/libavcodec.53.dylib

    /Users/USER/Library/Application Support/NCH Software/Components/ffmpeg15/libavdevice.53.dylib

    /Users/USER/Library/Application Support/NCH Software/Components/ffmpeg15/libavfilter.2.dylib

    /Users/USER/Library/Application Support/NCH Software/Components/ffmpeg15/libavformat.53.dylib

    /Users/USER/Library/Application Support/NCH Software/Components/ffmpeg15/libavutil.51.dylib

    /Users/USER/Library/Application Support/NCH Software/Components/ffmpeg15/libswscale.2.dylib

App extensions

    com.getdropbox.dropbox.garcon

Installations

    HP Ink Widget 9/17/10

    HP Message Center 9/17/10

    HP Photosmart D110 series Instantiation files 9/17/10

    HP SMARTX 64 9/17/10

    HP DeviceModel Framework 9/17/10

Bad kernel extensions

    /System/Library/Extensions/BJUSBLoad.kext

Elapsed time (sec): 384

Hi guys, I have the mackeeper problem also and tried to find answers from other's solutions but I failed. Could Linc or anyone else advice me further?

Here is my scan result,

Thanks a lot

Start time: 11:44:26 03/02/15

Model Identifier: MacBookAir6,2

System Version: OS X 10.10.2 (14C109)

Kernel Version: Darwin 14.1.0

Time since boot: 31 days 14:45

Log

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:31 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:33 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:33 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:33 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:33 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:33 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:33 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:37 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:37 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:37 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:37 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:37 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:37 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  1 22:02:39 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   Mar  2 11:01:17 com.apple.xpc.launchd.domain.pid.quicklookd.21360: Path not allowed in target domain: type = pid, path = /Library/Frameworks/iTunesLibrary.framework/Versions/A/XPCServices/com.apple.iT unesLibraryService.xpc error = 147: The specified service did not ship in the requestor's bundle, origin = /System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd. app

Swap (MiB): 19820

CPU per process: Google Chrome He (UID 501) is using 30.9 percent

Daemons

   com.adobe.fpsaud

   com.apple.installer.osmessagetracing

   com.disc-soft.DAEMONTools.PrivilegedHelper

   com.intego.BackupAssistant.daemon

   com.microsoft.office.licensing.helper

Agents

   com.apple.AirPortBaseStationAgent

   com.google.keystone.user.agent

   com.intego.backupassistant.agent

   com.spotify.webhelper

Startup items

   /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/Info.plist

   /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent

   /Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon

   /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngine

   /Library/StartupItems/Intego Backup Assistant/PowerManagerTool

   /Library/StartupItems/Intego Backup Assistant/uninstall.sh

Extensions

   /System/Library/Extensions/JMicronATA.kext

   - com.jmicron.JMicronATA

Applications

   /Applications/BetterTouchTool.app

   - com.hegenberg.BetterTouchTool

   /Applications/DAEMON Tools Lite.app

   - com.disc-soft.DAEMONToolsLite

   /Applications/Firefox.app

   - org.mozilla.firefox

   /Applications/Google Chrome.app

   - com.google.Chrome

   /Applications/HandBrake.app

   - fr.handbrake.HandBrake

   /Applications/Intego Backup Assistant Uninstall.app

   - com.intego.backupassistant.uninstaller

   /Applications/Intego Backup Assistant.app

   - com.intego.BackupAssistant

   /Applications/Microsoft Office 2011/Additional Tools/Microsoft Language Register/Microsoft Language Register.app

   - com.microsoft.language_register

   /Applications/Microsoft Office 2011/Microsoft Document Connection.app

   - com.microsoft.DocumentConnection

   /Applications/Microsoft Office 2011/Microsoft Excel.app

   - com.microsoft.Excel

   /Applications/Microsoft Office 2011/Microsoft Outlook.app

   - com.microsoft.Outlook

   /Applications/Microsoft Office 2011/Microsoft PowerPoint.app

   - com.microsoft.Powerpoint

   /Applications/Microsoft Office 2011/Microsoft Word.app

   - com.microsoft.Word

   /Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

   - com.apple.ASApplication

   /Applications/Microsoft Office 2011/Office/Alerts Daemon.app

   - null

   /Applications/Microsoft Office 2011/Office/Equation Editor.app

   - com.microsoft.EquationEditor

   /Applications/Microsoft Office 2011/Office/Microsoft Alerts Daemon.app

   - com.microsoft.alerts.daemon

   /Applications/Microsoft Office 2011/Office/Microsoft Chart Converter.app

   - com.microsoft.openxml.chart.app

   /Applications/Microsoft Office 2011/Office/Microsoft Clip Gallery.app

   - com.microsoft.ClipGallery

   /Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app

   - com.microsoft.outlook.database_daemon

   /Applications/Microsoft Office 2011/Office/Microsoft Database Utility.app

   - com.microsoft.outlook.database_utility

   /Applications/Microsoft Office 2011/Office/Microsoft Graph.app

   - com.microsoft.Graph

   /Applications/Microsoft Office 2011/Office/Microsoft Office Reminders.app

   - com.microsoft.outlook.office_reminders

   /Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

   - com.microsoft.office.setupassistant

   /Applications/Microsoft Office 2011/Office/Microsoft Query.app

   - N/A

   /Applications/Microsoft Office 2011/Office/Microsoft Upload Center.app

   - com.microsoft.office.uploadcenter

   /Applications/Microsoft Office 2011/Office/My Day.app

   - com.microsoft.myday

   /Applications/Microsoft Office 2011/Office/Open XML for Excel.app

   - com.microsoft.openxml.excel.app

   /Applications/Microsoft Office 2011/Office/SyncServicesAgent.app

   - com.microsoft.SyncServicesAgent

   /Applications/Skype.app

   - com.skype.skype

   /Applications/SopCast.app

   - com.sopcast.SopCast

   /Applications/Spotify.app

   - com.spotify.client

   /Applications/Utilities/Adobe Flash Player Install Manager.app

   - com.adobe.flashplayer.installmanager

   /Applications/VLC.app

   - org.videolan.vlc

   /Applications/Xee.app

   - cx.c3.xee

   /Applications/uTorrent.app

   - com.bittorrent.uTorrent

   /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

   - com.microsoft.autoupdate2

   /Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

   - com.microsoft.error_reporting

   /Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

   - com.microsoft.netlib.shipassertprocess

   /Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

   - com.microsoft.silverlight.sllauncher

   /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app

   - com.intego.backupassistant.agent

   /Users/USER/Applications/Chrome Apps.localized/Default cgnklfhofbcfndknbonklnijndoeknal.app

   - com.google.Chrome.app.Default-cgnklfhofbcfndknbonklnijndoeknal

   /Users/USER/Applications/Chrome Apps.localized/app_list.app

   - com.google.Chrome.app.Default-app_list

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aapocclcgogkmnckokdopfmhonfmgoek/Default aapocclcgogkmnckokdopfmhonfmgoek.app

   - com.google.Chrome.app.Default-aapocclcgogkmnckokdopfmhonfmgoek-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

   - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

   - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

   - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_cgnklfhofbcfndknbonklnijndoeknal/Default cgnklfhofbcfndknbonklnijndoeknal.app

   - com.google.Chrome.app.Default-cgnklfhofbcfndknbonklnijndoeknal-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

   - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_felcaaldnbdncclmgdcncolpebgiejap/Default felcaaldnbdncclmgdcncolpebgiejap.app

   - com.google.Chrome.app.Default-felcaaldnbdncclmgdcncolpebgiejap-internal

   /Users/USER/Library/Application Support/Wineskin/Wrapper/Wineskin-2.6.0.app

   - WineskinWineskinDefault3345.Wineskin.prefs

Frameworks

   /Library/Frameworks/MacFUSE.framework

   - com.google.MacFUSE

   /Library/Frameworks/OSXFUSE.framework

   - com.github.osxfuse.framework

PrefPane

   /Library/PreferencePanes/Flash Player.prefPane

   - com.adobe.flashplayerpreferences

   /Library/PreferencePanes/OSXFUSE.prefPane

   - com.github.osxfuse.OSXFUSEPrefPane

Bundles

   /Library/Internet Plug-Ins/Flash Player.plugin

   - com.macromedia.Flash

   /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

   - com.microsoft.sharepoint.browserplugin

   /Library/Internet Plug-Ins/Silverlight.plugin

   - com.microsoft.SilverlightPlugin

   /Library/Widgets/Intego Backup Assistant Widget.wdgt

   - com.intego.widget.backupassistant

dylibs

   /Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

   /Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

   /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

   /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

   /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

   /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

   /Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libmacfuse_i32 .2.dylib.dSYM/Contents/Resources/DWARF/libmacfuse_i32.2.dylib

   /Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libmacfuse_i64 .2.dylib.dSYM/Contents/Resources/DWARF/libmacfuse_i64.2.dylib

   /Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libosxfuse_i32 .dylib.dSYM/Contents/Resources/DWARF/libosxfuse_i32.dylib

   /Library/Frameworks/OSXFUSE.framework/Versions/A/Resources/Debug/libosxfuse_i64 .dylib.dSYM/Contents/Resources/DWARF/libosxfuse_i64.dylib

   /Users/USER/Library/Application Support/Firefox/Profiles/i5jpkmau.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

   /Users/USER/Library/Application Support/Firefox/Profiles/i5jpkmau.default/gmp-gmpopenh264/1.3/libgmpopenh264.dy lib

   /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.6.758/_platform_specific/mac_x64/libwidev inecdm.dylib

   /usr/local/lib/libmacfuse_i32.2.dylib

   /usr/local/lib/libmacfuse_i64.2.dylib

   /usr/local/lib/libosxfuse_i32.2.dylib

   /usr/local/lib/libosxfuse_i64.2.dylib

Contents of /Library/LaunchAgents/com.intego.backupassistant.agent.plist

   - mod date: Jul 30 21:18:03 2014

   - checksum: 2485335348

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>KeepAlive</key>

    <false/>

    <key>Label</key>

    <string>com.intego.backupassistant.agent</string>

    <key>ProgramArguments</key>

    <array>

    <string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent</string>

    <string>--launchd</string>

    </array>

    <key>WatchPaths</key>

    <array>

    <string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/.startAgent</string>

    </array>

   </dict>

   </plist>

Contents of /Library/LaunchDaemons/com.disc-soft.DAEMONTools.PrivilegedHelper.plist

   - mod date: Sep 14 19:02:03 2014

   - checksum: 1837019057

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>EnableTransactions</key>

    <false/>

    <key>GroupName</key>

    <string>wheel</string>

    <key>Label</key>

    <string>com.disc-soft.DAEMONTools.PrivilegedHelper</string>

    <key>ProgramArguments</key>

    <array>

    <string>/Library/PrivilegedHelperTools/com.disc-soft.DAEMONTools.PrivilegedHelp er</string>

    </array>

    <key>Sockets</key>

    <dict>

    <key>MasterSocket</key>

    <dict>

    <key>SockFamily</key>

    <string>Unix</string>

    <key>SockPathMode</key>

    <integer>438</integer>

    <key>SockPathName</key>

    <string>/var/run/com.disc-soft.DAEMONTools.PrivilegedHelper.socket</string>

    <key>SockType</key>

   ...and 7 more line(s)

Contents of /Library/LaunchDaemons/com.intego.BackupAssistant.daemon.plist

   - mod date: Jul 30 21:18:03 2014

   - checksum: 107931800

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd >

   <plist version="1.0">

   <dict>

    <key>Label</key>

    <string>com.intego.BackupAssistant.daemon</string>

    <key>ProgramArguments</key>

       <array>

        <string>/Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon</string>

       </array>

       <key>OnDemand</key>

       <false/>

       <key>RunAtLoad</key>

       <true/>

      <key>ServiceDescription</key>

    <string>Allow Intego Backup Assistant tasks to be launched.</string>

   </dict>

   </plist>

Contents of Library/LaunchAgents/com.google.keystone.agent.plist

   - mod date: Jan 30 23:39:32 2015

   - checksum: 3612455284

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Label</key>

    <string>com.google.keystone.user.agent</string>

    <key>LimitLoadToSessionType</key>

    <string>Aqua</string>

    <key>ProgramArguments</key>

    <array>

     <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

     <string>-runMode</string>

     <string>ifneeded</string>

    </array>

    <key>RunAtLoad</key>

    <true/>

    <key>StartInterval</key>

    <integer>3523</integer>

    <key>StandardErrorPath</key>

    <string>/dev/null</string>

    <key>StandardOutPath</key>

    <string>/dev/null</string>

   </dict>

   </plist>

Contents of Library/LaunchAgents/com.spotify.webhelper.plist

   - mod date: Mar  1 22:15:47 2015

   - checksum: 410026182

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Label</key>

    <string>com.spotify.webhelper</string>

    <key>KeepAlive</key>

    <dict>

     <key>NetworkState</key>

     <true/>

    </dict>

    <key>RunAtLoad</key>

    <true/>

    <key>Program</key>

    <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

    <key>SpotifyPath</key>

    <string>/Applications/Spotify.app</string></dict>

   </plist>

DNS: 195.197.54.100

User login items

   iTunesHelper

   - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Restricted files: 366

Elapsed time (s): 218

Hi Linc,

Could you maybe help me as well?

This is my results: http://pastebin.com/2AJu8DG3

I had to do this a year or so ago when MacKeeper was destroying my Mac. Deleted and uninstalled every single item that even resembled a MacKeeper file. This is the worst and most dangerous thing that has been mass marketed to Apple customers. I tell everyone to stay away, do not install.

One couple said it worked fine and I explained what will come so hopefully they follow my instructions.

It may have been your post that helped me out a while back, whoever it was that gave the info for removing all Mackeeper items did an amazing service to us all. Man, that program is the devil if not a scruffy plague flea eaten rat.