Browers taken over by "search.searchbenny…

Level 10

209,547 points

Mar 6, 2015 1:31 PM in response to 10 Lorcan

I strongly recommend following the instructions in the Apple Support article to remove "Genieo." But if you find those instructions too hard to follow, there are other options that you may prefer, and that don't involve trusting a black-box application without knowing what it does.

Back up all data before doing anything else. Remember that if there is no working web browser on the infected computer, you should be able to use Safari by starting the computer in safe mode.

One option for removing Genieo is to click the "Support" link at the top of this page and schedule a call from Apple Support. If you're past the 90-day complimentary support period after buying a new Mac, and you don't have AppleCare, you will probably be charged for the call. According to reports, an Apple Support representative will be able to talk you through the process of removing Genieo and perhaps other kinds of adware. He or she can even take control of your computer remotely—with your permission, of course—and do the work for you.

If you're going to do this, contact Apple Support via the link on this page. Do not search Google, Bing, or Yahoo for any kind of tech support, because you'll very likely be directed to a scam. Don't allow anyone to control your computer remotely unless you're absolutely sure you're dealing with an Apple representative.

This solution is only practical if you're confident that you won't repeat the mistake that led you to install malware.

A second option is to make a "Genius" a ppointment at an Apple Store. That's a free service, but maybe not as convenient. You'll have to bring the computer with you to the appointment.

There's a third option that I mention as a last resort, but don't encourage otherwise. It's better than running an unknown application on blind faith, and perhaps easier than manual removal, but it still involves some effort and an element of trust.

Download the Bitdefender Genieo Removal Tool. Please note:

☞ I am not suggesting you run this application. Just download it and then see below.

☞ I am not endorsing Bitdefender or any other "anti-virus" product. You should not use such products.

☞ Don't expect this procedure to remove any adware other than Genieo. It does remove an old variant of the "VSearch" adware that is probably no longer circulating.

When you download the tool, you'll get a file named "Adware Removal Tool.zip". Open it and you'll get an application named "Adware Removal Tool." You do not need to, and should not, run this application. I have not tested it and I don't know what it does, if anything, besides removing Genieo. I have tested the instructions below.

Instead of double-clicking the Adware Removal Tool icon to launch the application, right-click or control-click it and select

Show Package Contents

from the popup menu. Now you'll see a folder named "Contents," and inside that, a folder named "Resources."

Inside the Resources folder, you'll find files with these names:

finishUninstall.scpt

uninstall.scpt

Each is a very simple AppleScript. The key point is that, unlike an application, the scripts are transparent. You can read them and know what they will do before you run them.

Double-click the file named "uninstall.scpt". It will open in a built-in application called "Script Editor." This application is part of OS X; it's not something you downloaded from Bitdefender.

Read the script. You'll see that it contains several lines like the following, and not much else:

do shell script "rm -rf ~/Library/Application\\ Support/com.genieoinnovation.Installer"

This is where the element of trust comes in. You may be able to convince yourself that this instruction removes ("rm") a file. If you're satisfied that the script removes some (not all) of the files that are listed in the Apple Support article as components of Genieo, and does nothing else, then click the icon in the toolbar of the Script Editor window that looks like an arrowhead pointing to the right. That will run the script. You'll be prompted for your administrator login password.

There will be no feedback when the script runs. After a few seconds at most, the word "Result" should appear below the script text. Below that, there will be a blank space. Close the Script Editor window and restart the computer.

You have now inactivated Genieo permanently, as long as you never reinstall it. You could stop here, but ideally you should finish cleaning up by running the script named "finishUninstall.scpt" in the same way as above. There's no need to restart after running the second script.

You can then quit Script Editor. Delete Adware Removal Tool and Adware Removal Tool.zip.

Reply

thomas_r.

Level 7

31,989 points

Mar 7, 2015 5:08 AM in response to 10 Lorcan

10 Lorcan wrote:

I got rid of goldenly extension. However I cannot find any genie or cinema pro files to dump and I'm still getting the unwanted ads.

You can find manual removal instructions for the Genieo and CinemaPro items here:

http://www.thesafemac.com/arg-genieo/

http://www.thesafemac.com/arg-buca-apps/

If you have difficulty with those instructions, you can use AdwareMedic instead. Note that the BitDefender Adware Removal Tool will remove Genieo, but it will not remove the CinemaPro items as of the last time I tested it.

(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)

Reply

Mar 10, 2015 7:32 AM in response to Linc Davis

To Linc and all of this community - Thanks.

I had managed to get rid of genio and goldenboy. But I was still troubled by malware. So I took your advice and got help from Apple Support, using another Mac to schedule the support as the malware was preventing access to the particular support pages in the corrupted Safari. The cinemapro was the problem and Apple helped me to find their locations and to remove them.

My Mac is now clean and ready to go.

Thanks again.

Reply

Mar 11, 2015 1:20 PM in response to Geogprof96

So far, none of this has address the “search benny issues”. I’m familiar with the removal of malware on mac, But can not seem to find anything related to the original issues the the original poster has discuss. I have seen information about removing Genieo and other Malware.

Reply

Linc Davis

Level 10

209,547 points

Mar 11, 2015 1:53 PM in response to Dj_McBain

none of this has address the “search benny issues”

Is that the issue you have, and if so, have you tried to remove "CinemaPro?"

Reply

thomas_r.

Level 7

31,989 points

Mar 11, 2015 5:32 PM in response to Dj_McBain

Dj_McBain wrote:

So far, none of this has address the “search benny issues”.

Sure it does. I have seen multiple cases of the GoldenBoy Safari extension causing "search benny issues," and GoldenBoy has been referred to several times now.

Reply

Mar 11, 2015 5:43 PM in response to thomas_r.

May I act as an example of why you do not work with tech when frustrated. 😊

Reply

Mar 12, 2015 1:21 PM in response to Geogprof96

I am still have a search-benny appearing in my address bar, I’m working with a 2007 macbook running 10.6.8. I have checked every area that Buca apps refers to and I am unable to resolve this this piece of malware. I have updated my current home page as well, many of times.

Reply

SeaPapp

Level 7

26,486 points

Mar 12, 2015 1:22 PM in response to Dj_McBain

Maybe on your case a reinstall of OS X is the answer.

Reply

Mar 12, 2015 1:52 PM in response to SeaPapp

Been there, done that, tried that after reading all the stuff on Golden boy. Didn’t help, I’m assuming there is some file, but I can’t find it. I’ve checked all the folders listed for Buca Apps, there is no reference to Goldenboy or search benny.

Reply

SeaPapp

Level 7

26,486 points

Mar 12, 2015 2:58 PM in response to Dj_McBain

Then perhaps you've got to wipe your hard drive, reinstall OS X, reinstall your apps from either they're original discs or the App Store and restore your files from your backup.

You've gotta ask yourself " how long are you going to fool around with this"?

Reply

May 7, 2015 4:31 PM in response to SeaPapp

Just wanted to say the link you provided http://www.adwaremedic.com/index.php totally led me to solve all my search benny issues.

Thank you so very much!

To anyone still struggling, this is what my extension looked like: OpenH264 Video Codec provided by Cisco Systems, Inc

I got caught with a phony Adobe Updater. That won't happen again. ;-)

I removed the library files as instructed in the link above, restarted, reset my default search engine, disabled the extension and all is well. I'm running 10.6.8 on a 2008 MacBook Pro, so I had to do it manually.

Thank you again!

Reply

May 23, 2015 7:52 AM in response to Linc Davis

I'm having the same issue... have quite a report as well. suspect there may be more going on than searchbenny:

Start time: 10:33:19 05/23/15

Revision: 1271

Model Identifier: MacBookAir6,2

System Version: OS X 10.10.3 (14D136)

Kernel Version: Darwin 14.3.0

Boot Mode: Safe

Time since boot: 27 minutes

UID: 502

USB

My Passport 0820 (Western Digital Technologies, Inc.)

System load

combined level = Bad

- battery level = Bad

Spotlight: Indexing and searching disabled

Listeners

kdc: kerberos

launchd: afpovertcp

launchd: microsoft-ds

nfsd: 1023

rpc.lockd: 1015

rpc.rquotad: maitrd

rpc.statd: 1019

rpcbind: sunrpc

System caches/logs

5.7 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data

Diagnostic reports

2015-04-26 Microsoft Error Reporting hang

2015-04-26 Microsoft Excel hang

2015-04-29 AvidMediaComposer hang

2015-05-04 FaceTime crash

2015-05-05 AdobeCrashDaemon crash

2015-05-05 com.apple.MailServiceAgent crash

2015-05-08 deleted crash

2015-05-11 Creative Cloud crash

2015-05-11 cloudd crash

2015-05-13 AdobeAcrobat crash

2015-05-14 AvidMediaComposer hang

2015-05-18 Adobe Premiere Pro CC hang

2015-05-18 DashlanePluginService crash

2015-05-18 com.apple.WebKit.WebContent crash

2015-05-18 discoveryd crash

2015-05-19 mds crash

2015-05-21 DashlanePluginService crash

2015-05-21 com.apple.WebKit.WebContent crash

HID errors: 3

Kernel log

May 19 13:15:12 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

May 19 13:21:13 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

May 19 19:10:37 Limiting icmp unreach response from 450 to 250 packets per second

May 20 15:10:45 utun_start: ifnet_disable_output returned error 12

May 22 12:37:27 msdosfs_fat_uninit_vol: error 6 from msdosfs_fat_cache_flush

May 23 10:08:19 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

May 23 10:08:22 Failed to loCouldn't alloc class "AppleUpstreamUserClientDriver"

System log

May 23 10:32:41 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:32:41 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:32:41 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

May 23 10:32:51 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:32:51 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:32:51 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

May 23 10:33:01 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:33:01 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:33:01 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

May 23 10:33:03 com.apple.backupd: Waiting for index to be ready (100)

May 23 10:33:11 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:33:11 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:33:11 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

May 23 10:33:21 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:33:21 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:33:21 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

May 23 10:33:31 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:33:31 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:33:31 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

May 23 10:33:41 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:33:41 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:33:41 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

May 23 10:33:51 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

May 23 10:33:51 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not initialize the hardware watchdog

May 23 10:33:51 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

launchd log

May 23 09:13:42 com.apple.xpc.launchd.user.502.100005.Aqua: Could not read path: path = /Library/LaunchDaemons/com.webhelper.plist, error = 2: No such file or directory

May 23 09:13:43 com.apple.xpc.launchd.user.502.100005.Aqua: Could not read path: path = /Users/USER/Library/LaunchAgents/com.Installer.completer.download.plist, error = 2: No such file or directory

May 23 09:13:43 com.apple.xpc.launchd.user.502.100005.Aqua: Could not read path: path = /Users/USER/Library/LaunchAgents/com.Installer.completer.update.plist, error = 2: No such file or directory

May 23 09:13:43 com.apple.xpc.launchd.user.502.100005.Aqua: Could not read path: path = /Users/USER/Library/LaunchAgents/com.Installer.completer.ltvbit.plist, error = 2: No such file or directory

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

May 23 10:08:25 com.apple.xpc.launchd.domain.pid.SecurityAgent.227: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

Console log

May 19 10:53:30 storeassetd: Metadata.framework [Error]: server port invalidated for uid 502

May 19 10:53:30 storedownloadd: Metadata.framework [Error]: server port invalidated for uid 502

May 20 10:49:22 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fd090e43740

May 20 12:19:11 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d207b0

May 20 12:19:19 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899c14b80

May 20 12:19:25 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899c41df0

May 20 12:19:28 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899c42c40

May 20 12:19:35 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899c37a60

May 20 12:19:37 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d1fd40

May 20 12:19:37 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d1c730

May 20 12:20:13 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899c13490

May 20 12:20:20 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899e10970

May 20 12:20:57 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d262b0

May 20 12:21:05 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d237e0

May 20 12:21:27 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899e153d0

May 20 12:21:36 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d20dc0

May 20 12:22:21 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899c47b40

May 20 12:22:35 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899c15930

May 20 12:26:22 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d24950

May 20 12:26:24 mdworker: -[NSManagedObject updated]: unrecognized selector sent to instance 0x7fe899d23400

Daemons loaded

com.apple.Kerberos.kdc

- status: 1

com.apple.watchdogd

Startup items

/Library/StartupItems/Qmaster/Qmaster

/Library/StartupItems/Qmaster/StartupParameters.plist

Global login items

/Library/Application Support/XDCAM Drive/Helpers/XDMSetupHelper.app

User login items

TomTom MySports Connect

- /Applications/TomTom MySports Connect.app

AirPort Base Station Agent

- /System/Library/CoreServices/AirPort Base Station Agent.app

iTunesHelper

- missing value

EvernoteHelper

- missing value

Dropbox

- /Applications/Dropbox.app

AdobeResourceSynchronizer

- /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app

TuneupMyMac

- missing value

XDCAM Drive Monitor

- /Applications/XDCAM Drive/XDCAM Drive Monitor.app

AdobeResourceSynchronizer

- /Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app

XDMSetupHelper

- /Library/Application Support/XDCAM Drive/Helpers/XDMSetupHelper.app

Safari extensions

Dashlane

- com.dashlane.dashlanesafari

Greenhouse

- com.nicholasrubin.greenhouse

Widgets

Epicurious

GoogleNews

Local Weather

SiriusTracker

Twidget

iTinyURL

iCloud errors

cloudphotosd 152

comapple.CloudPhotosConfiguration 9

cloudd 7

bird 1

Continuity errors

lsuseractivityd 19

sharingd 11

Restricted files: 85

Lockfiles: 140

Accessibility

Scroll Zoom: On

Contents of /Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist

- mod date: Apr 9 13:02:02 2015

- checksum: 2197523146

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARMDCHelper.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.avid.backgroundservicesmanager.plist

- mod date: Dec 18 06:19:54 2013

- checksum: 3554184398

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.avid.backgroundservicesmanager</string>

<key>EnvironmentVariables</key>

<dict>

<key>DYLD_LIBRARY_PATH</key>

<string>/Applications/Avid Media Composer/AvidMediaComposer.app/Contents/MacOS</string>

<key>DYLD_FRAMEWORK_PATH</key>

<string>/Applications/Avid Media Composer/AvidMediaComposer.app/Contents/Frameworks</string>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Applications/Avid Media Composer/AvidMediaComposer.app/Contents/MacOS/AvidBackgroundServicesManager.app /Contents/MacOS/AvidBackgroundServicesManager</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>WatchPaths</key>

<array>

<string>/Users/Shared/Avid/GlobalControl</string>

</array>

<key>Sockets</key>

<dict>

...and 14 more line(s)

Contents of /Library/LaunchAgents/com.avid.dmfsupportsvc.plist

- mod date: Dec 15 19:54:48 2013

- checksum: 18225124

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Debug</key>

<true/>

<key>Label</key>

<string>com.avid.aviddmfsupportsvc</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Avid Media Composer/AvidMediaComposer.app/Contents/MacOS/AvidDMFSupportSvc.app/Contents/Ma cOS/AvidDMFSupportSvc</string>

</array>

<key>QueueDirectories</key>

<key>KeepAlive</key>

<key>RunAtLoad</key>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.avid.interplay.dmfservice.plist

- mod date: Dec 15 19:54:48 2013

- checksum: 559561128

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Debug</key>

<true/>

<key>Label</key>

<string>com.avid.interplay.dmfservice</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Avid Media Composer/DMFService.app/Contents/MacOS/DMFService</string>

</array>

<key>QueueDirectories</key>

<key>RunAtLoad</key>

<key>WatchPaths</key>

<key>StandardOutPath</key>

<string>~/Avid/Dynamic Media Folders/transcode_out.log</string>

<key>StandardErrorPath</key>

<string>/~Avid/Dynamic Media Folders/transcode_err.log</string>

<key>WorkingDirectory</key>

<string>/Applications/Avid Media Composer/DMFService.app/Contents/MacOS</string>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/com.avid.interplay.editortranscode.plist

- mod date: Dec 15 20:03:24 2013

- checksum: 3183632745

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Debug</key>

<true/>

<key>Label</key>

<string>com.avid.interplay.editortranscode</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Avid/EditorTranscode/TranscodeService/EditorTranscode.app /Contents/MacOS/RunEditorTranscode.bash</string>

</array>

<key>QueueDirectories</key>

<key>KeepAlive</key>

<key>RunAtLoad</key>

<key>WatchPaths</key>

<key>StandardOutPath</key>

<string>/var/log/Avid/EditorTranscode/transcode_out.log</string>

<key>StandardErrorPath</key>

<string>/var/log/Avid/EditorTranscode/transcode_err.log</string>

<key>WorkingDirectory</key>

...and 3 more line(s)

Contents of /Library/LaunchAgents/com.avid.transcodeserviceworker.plist

- mod date: Dec 15 20:03:24 2013

- checksum: 584772294

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<key>Debug</key>

<true/>

<key>Label</key>

<string>com.avid.transcodeserviceworker</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Avid/EditorTranscode/TranscodeService/TranscodeServiceWor ker.app/Contents/MacOS/TranscodeServiceWorker</string>

<string>/Applications/Avid/EditorTranscode/TranscodeService</string>

</array>

<key>QueueDirectories</key>

<key>RunAtLoad</key>

<key>WatchPaths</key>

<key>WorkingDirectory</key>

<string>/Applications/Avid/EditorTranscode/TranscodeService</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/PACESupport.plist

- mod date: Feb 1 03:00:00 2013

- checksum: 1658798800

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"

"http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.paceap.pacesupport</string>

<key>ProgramArguments</key>

<array>

<string>/System/Library/Extensions/PACESupportFamily.kext/Contents/Resources/pa ceload</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist

- mod date: Apr 9 13:02:02 2015

- checksum: 3887726299

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARMDC.Communicator</string>

<key>MachServices</key>

<dict>

<key>com.adobe.ARMDC.Communicator</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist

- mod date: Apr 9 13:02:02 2015

- checksum: 930028549

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARMDC.SMJobBlessHelper</string>

<key>MachServices</key>

<dict>

<key>com.adobe.ARMDC.SMJobBlessHelper</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper</string >

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist

- mod date: May 5 13:21:38 2015

- checksum: 2254479735

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.adobe.adobeupdatedaemon</string>

<key>LaunchOnlyOnce</key>

<true/>

<key>Program</key>

<string>/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.ambrosiasw.ambrosiaaudiosupporthelper.daemon.plist

- mod date: Nov 19 16:25:57 2012

- checksum: 1980407752

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.ambrosiasw.ambrosiaaudiosupporthelper.daemon</string>

<key>ProgramArguments</key>

<array>

<string>/System/Library/Extensions/AmbrosiaAudioSupport.kext/Contents/MacOS/amb rosiaaudiosupporthelper</string>

</array>

<key>KeepAlive</key>

<key>Disabled</key>

<key>LaunchEvents</key>

<dict>

<key>com.apple.iokit.matching</key>

<dict>

<key>AmbrosiaAudioSupport</key>

<dict>

<key>IOMatchLaunchStream</key>

<true/>

<key>IOProviderClass</key>

<string>com_AmbrosiaSW_AudioSupport</string>

</dict>

...and 4 more line(s)

Contents of /Library/LaunchDaemons/com.avid.AMCUninstaller.plist

- mod date: Jan 3 10:57:43 2014

- checksum: 1252904978

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.avid.AMCUninstaller</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.avid.AMCUninstaller</string>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<key>SockPathMode</key>

<key>SockPathName</key>

...and 7 more line(s)

Contents of /Library/LaunchDaemons/com.avid.AvidUninstaller.plist

- mod date: Apr 29 16:53:07 2015

- checksum: 27554069

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>com.avid.AvidUninstaller</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/com.avid.AvidUninstaller</string>

</array>

<key>ServiceIPC</key>

<true/>

<key>Sockets</key>

<dict>

<key>MasterSocket</key>

<dict>

<key>SockFamily</key>

<key>SockPathMode</key>

<key>SockPathName</key>

...and 7 more line(s)

Contents of /Library/LaunchDaemons/com.avid.interplay.editorbroker.plist

- mod date: Dec 15 20:03:24 2013

- checksum: 1326835633

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Debug</key>

<true/>

<key>Label</key>

<string>com.avid.interplay.editorbroker</string>

<key>ProgramArguments</key>

<array>

<string>./RunAvidEditorBroker.bash</string>

<string>/Applications/Avid/EditorTranscode/DBScript</string>

</array>

<key>QueueDirectories</key>

<key>RunAtLoad</key>

<true/>

<key>WatchPaths</key>

<key>WorkingDirectory</key>

<string>/Applications/Avid/EditorTranscode/DBScript</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.avid.interplay.editortranscodestatus.plist

- mod date: Dec 15 20:03:24 2013

- checksum: 2657995767

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Debug</key>

<true/>

<key>Label</key>

<string>com.avid.interplay.editortranscodestatus</string>

<key>ProgramArguments</key>

<array>

<string>./AvidEditorTranscodeStatusMac.bash</string>

<string>/Applications/Avid/EditorTranscode/rnc-central</string>

</array>

<key>QueueDirectories</key>

<key>RunAtLoad</key>

<true/>

<key>WatchPaths</key>

<key>WorkingDirectory</key>

<string>/Applications/Avid/EditorTranscode/rnc-central</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.paceap.eden.licensed.plist

- mod date: Jun 7 00:02:51 2013

- checksum: 2749352660

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.paceap.eden.licensed</string>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/licenseDaemon.app/Contents/MacOS/license Daemon</string>

<string>--backurl</string>

<string>https://activation.paceap.com/InitiateActivation</string>

</array>

<key>SoftResourceLimits</key>

<dict>

<key>NumberOfFiles</key>

</dict>

<key>HardResourceLimits</key>

<dict>

<key>NumberOfFiles</key>

...and 15 more line(s)

Contents of /Library/LaunchDaemons/net.sourceforge.MonolingualHelper.plist

- mod date: Dec 29 20:29:10 2012

- checksum: 4229206510

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>net.sourceforge.MonolingualHelper</string>

<key>MachServices</key>

<dict>

<key>net.sourceforge.MonolingualHelper</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/net.sourceforge.MonolingualHelper</strin g>

</array>

</dict>

</plist>

Contents of /Library/Preferences/SystemConfiguration/com.apple.Boot.plist

- mod date: May 11 16:29:44 2015

- checksum: 266964533

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Kernel Architecture</key>

<key>Kernel Flags</key>

</dict>

</plist>

Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

- mod date: May 5 13:12:30 2015

- checksum: 3012644940

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<true/>

<key>Label</key>

<string>org.apache.httpd</string>

<key>EnvironmentVariables</key>

<dict>

<key>XPC_SERVICES_UNAVAILABLE</key>

</dict>

<key>ProgramArguments</key>

<array>

<string>/usr/sbin/httpd-wrapper</string>

<string>FOREGROUND</string>

</array>

<key>OnDemand</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.Installer.completer.download.plist

- mod date: May 23 09:13:44 2015

- checksum: 1630888925

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.Installer.completer.download</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>

<string>-trigger</string>

<string>download</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Downloads</string>

</array>

<key>isAllowToSuggest</key>

<string>false</string>

</dict>

...and 1 more line(s)

Contents of Library/LaunchAgents/com.Installer.completer.ltvbit.plist

- mod date: May 23 09:13:44 2015

- checksum: 1208302036

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.Installer.completer.ltvbit</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>

<string>-trigger</string>

<string>ltvbit</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

</dict>

...and 2 more line(s)

Contents of Library/LaunchAgents/com.Installer.completer.update.plist

- mod date: May 23 09:13:44 2015

- checksum: 148741594

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.Installer.completer.update</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>

<string>-trigger</string>

<string>update</string>

<string>-isDev</string>

<string>-installVersion</string>

<string>-firstAppId</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

...and 4 more line(s)

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

- mod date: May 15 12:02:14 2012

- checksum: 408149527

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.akamai.single-user-client.plist

- mod date: Nov 14 10:09:40 2014

- checksum: 1548503754

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.akamai.single-user-client</string>

<key>KeepAlive</key>

<dict>

<key>SuccessfulExit</key>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Applications/Akamai/netsession_mac</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>AbandonProcessGroup</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/com.apple.FolderActions.folders.plist

- mod date: Jan 21 11:58:31 2015

- checksum: 1189540302

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.apple.FolderActions.folders</string>

<key>Program</key>

<string>/usr/bin/osascript</string>

<key>ProgramArguments</key>

<array>

<string>osascript</string>

<string>tell application "Folder Actions Dispatcher" to tick</string>

</array>

<key>WatchPaths</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.apple.MobileMeSyncClientAgent.plist

- mod date: Jan 22 15:25:34 2011

- checksum: 1629790972

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.apple.MobileMeSyncClientAgent</string>

<key>LimitLoadToSessionType</key>

<key>ProgramArguments</key>

<array>

<string>/System/Library/PrivateFrameworks/DotMacSyncManager.framework/Resources /mobilemesyncclient</string>

<string>--periodic</string>

</array>

<key>StartInterval</key>

</dict>

</plist>

Contents of Library/LaunchAgents/com.apple.SafariBookmarksSyncer.plist

- mod date: Aug 3 10:28:38 2009

- checksum: 3317739781

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.apple.Safari</string>

<key>LimitLoadToSessionType</key>

<key>ProgramArguments</key>

<array>

<string>/Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/S afariSyncClient</string>

<string>com.apple.Safari</string>

<string>--entitynames</string>

<string>com.apple.bookmarks.Bookmark,com.apple.bookmarks.Folder</string>

</array>

<key>RunAtLoad</key>

<key>ThrottleInterval</key>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Library/Safari/Bookmarks.plist</string>

</array>

</dict>

...and 1 more line(s)

Contents of Library/LaunchAgents/com.mackeeper.MacKeeper.Helper.plist

- mod date: May 23 09:14:10 2015

- checksum: 2605203230

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Disabled</key>

<key>EnvironmentVariables</key>

<dict>

<key>ZBTimeStamp</key>

</dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.mackeeper.MacKeeper.Helper</string>

<key>LimitLoadToSessionType</key>

<key>Program</key>

<string>/Applications/MacKeeper.app/Contents/Services/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper</string>

</dict>

</plist>

Contents of Library/LaunchAgents/com.redgiantsoftware.updater.plist

- mod date: Feb 25 18:15:03 2014

- checksum: 3882546531

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.redgiantsoftware.updater.plist</string>

<key>Program</key>

<key>ProgramArguments</key>

<array>

<string>/Applications/Red Giant Link.app</string>

<string>--silent</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Minute</key>

<key>Weekday</key>

</dict>

...and 1 more line(s)

Contents of Library/LaunchAgents/com.spotify.webhelper.plist

- mod date: Mar 22 12:13:01 2014

- checksum: 1409072538

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.spotify.webhelper</string>

<key>KeepAlive</key>

<dict>

<key>NetworkState</key>

<true/>

</dict>

<key>RunAtLoad</key>

<true/>

<key>Program</key>

<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

<key>SpotifyPath</key>

<string>/Applications/Spotify.app</string></dict>

</plist>

Contents of Library/LaunchAgents/com.webhelper.plist

- mod date: May 23 09:13:42 2015

- checksum: 3798168018

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.webhelper</string>

<key>EnableGlobbing</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/launch</string>

<string>-source</string>

<string>-brand</string>

</array>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>OnDemand</key>

<true/>

<key>StandardErrorPath</key>

...and 6 more line(s)

Contents of Library/LaunchAgents/com.webtools.uninstaller.plist

- mod date: May 23 09:13:42 2015

- checksum: 3522786579

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>Label</key>

<string>com.webtools.uninstaller.app</string>

<key>EnableGlobbing</key>

<true/>

<key>WatchPaths</key>

<array>

<string>/Applications/WebTools.app</string>

</array>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/webHelperApp/uninstall</string>

</array>

</dict>

</plist>

Contents of Library/LaunchAgents/com.webtools.update.agent.plist

- mod date: May 23 09:13:42 2015

- checksum: 1425278215

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>EnableGlobbing</key>

<true/>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.webtools.update.0.0.0.9.agent</string>

<key>OnDemand</key>

<true/>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/WebTools/UpdateAgent/run_update.sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<key>StandardOutPath</key>

<key>StartInterval</key>

<key>ThrottleInterval</key>

...and 3 more line(s)

Bad plists

/Library/Preferences/com.epson.EPSON Scan.UnInstallList.plist

/Library/Preferences/com.gen.framework.plist

Library/Preferences/com.atems.haploid.plist

Library/Preferences/com.infradynia.eclecticism.plist

Library/Preferences/com.micrologyasia.enterprisedigital.plist

App extensions

com.getdropbox.dropbox.garcon

Installations

Google Voice and Video: 11/18/14, 9:30 AM

Google Voice and Video: 11/17/14, 6:58 PM

Google Voice and Video: 11/17/14, 1:28 PM

Google Voice and Video: 11/17/14, 8:16 AM

Google Voice and Video: 11/16/14, 2:28 PM

Bad kernel extensions

/System/Library/Extensions/CMSLogicalUnitDriver.kext

/System/Library/Extensions/CMSLogicalUnitDriver2.kext

/System/Library/Extensions/IOFireWireMxBt.kext

/System/Library/Extensions/KTUM.kext

/System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns/PACESupportP anther.kext

/System/Library/Extensions/SymEvent.kext

/System/Library/Extensions/SymOSXKernelUtilities.kext

Elapsed time (sec): 292

Reply

May 23, 2015 7:55 AM in response to Linc Davis