Linc,
I realized my pastebin is private so I figured I'd try to post in 2 parts. here goes... Search benny has taken over safari and chrome's homepage. I have tried changing the homepage and deleting all extensions. Goldenboy was deleted from Safari. Chrome's extensions seemed legit, but I deleted them all anyways. I actually installed avast and adblock to chrome to see if they would help, but deleted both of them after. I found a suspicious program which if I am remember correctly was "Installmac" or at least had that as part of the file. I was able to quit the program by quitting chrome and safari and then putting it in the trash (although this may have been a mistake, based on later reading). I also used adware medic and it found some files which it also removed. Search Benny seems to be gone (at least for now from chrome, but it remains as the homepage on safari (despite changing it in settings) and oddly enough when I open safari search benny comes up along with two tabs of apple safari extension gallery (I clicked this twice while monkeying around in the settings). Quitting safari and reopening yields the same 3 tabs. Also I noticed certain websites will not work on the individuals network, but do work on others (i.e. friend's personal hotspot) so is it possible the individuals router has also been hacked?
Below are the results of the computer I am helping with (not my computer).
Start time: 13:52:40 06/21/15
Revision: 1271
Model Identifier: iMac11,3
System Version: OS X 10.10.3 (14D136)
Kernel Version: Darwin 14.3.0
Time since boot: 31 minutes
UID: 501
SerialATA
Hitachi HDS722020ALA330
USB
P'9230 Desktop Drive (LaCie)
USB Receiver (Logitech Inc.)
Activity
en1: in 6, out 194 (KiB/s)
Font issues: 4
TCP/IP
Subnet mask: 255.255.255.240
System caches/logs
4.3 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data
Diagnostic reports
2015-05-27 Finder crash
2015-05-29 AppAS crash
2015-06-03 AppAS crash x3
2015-06-04 AppAS crash
2015-06-05 AppAS crash
2015-06-08 AppAS crash x7
2015-06-11 UserKernel crash
2015-06-12 UserKernel crash
2015-06-14 UserKernel crash x2
2015-06-16 AppAS crash
2015-06-17 AppAS crash
2015-06-19 AppAS crash x3
2015-06-19 LolClient crash
2015-06-19 UserKernel crash
2015-06-21 AppAS crash
Kernel log
Jun 15 15:54:30 Failed to get hibernate image filename
Jun 15 18:29:30 Failed to get hibernate image filename
Jun 15 20:39:16 Failed to get hibernate image filename
Jun 15 22:16:41 Failed to get hibernate image filename
Jun 16 10:56:21 Failed to get hibernate image filename
Jun 16 12:01:24 Failed to get hibernate image filename
Jun 16 17:21:51 Failed to get hibernate image filename
Jun 16 19:26:47 Failed to get hibernate image filename
Jun 16 22:43:18 Failed to get hibernate image filename
Jun 17 12:05:46 Failed to get hibernate image filename
Jun 17 16:30:48 Failed to get hibernate image filename
Jun 18 12:02:03 Failed to get hibernate image filename
Jun 19 00:44:20 Failed to get hibernate image filename
Jun 19 17:04:16 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)
Jun 19 17:05:16 ALF: ifnet_get_address_list_family error 12
Jun 19 21:33:13 Failed to get hibernate image filename
Jun 21 11:32:43 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)
Jun 21 11:49:41 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)
Jun 21 11:56:03 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)
Jun 21 12:07:02 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)
Jun 21 12:08:28 ALF: ifnet_get_address_list_family error 12
Jun 21 12:12:20 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)
Jun 21 13:22:10 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)
Jun 21 13:24:57 considerRebuildOfPrelinkedKernel com.apple.kext.OSvKernDSPLib triggered rebuild
Jun 21 13:35:12 Limiting icmp unreach response from 440 to 250 packets per second
System log
Jun 21 13:23:18 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'
Jun 21 13:23:20 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'
Jun 21 13:23:21 com.apple.iCloudHelper: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'
Jun 21 13:23:21 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'
Jun 21 13:23:21 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Finder" for over 1.00 seconds. Server has re-enabled them.
Jun 21 13:23:22 com.apple.iCloudHelper: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'
Jun 21 13:23:22 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'
Jun 21 13:23:29 cloudd: Could not create primary backing account
Jun 21 13:23:39 WindowServer: WSGetSurfaceInWindow : Invalid surface 691504325 for window 49
Jun 21 13:23:39 WindowServer: WSGetSurfaceInWindow : Invalid surface 691504325 for window 49
Jun 21 13:23:41 WindowServer: WSGetSurfaceInWindow : Invalid surface 611572559 for window 51
Jun 21 13:25:31 UserEventAgent: Captive: [wispr_detect_http_done:295] Network Error: Failed to retry probe. Giving up after retrying 10 times
Jun 21 13:25:38 CalendarAgent: Stream 0x7fb8f4a40fa0 is sending an event before being opened
Jun 21 13:25:38 CalendarAgent: Stream 0x7fb8f494d120 is sending an event before being opened
Jun 21 13:25:39 CalendarAgent: Stream 0x7fb8f492c450 is sending an event before being opened
Jun 21 13:25:39 CalendarAgent: Stream 0x7fb8f25e8820 is sending an event before being opened
Jun 21 13:25:39 CalendarAgent: Stream 0x7fb8f4858c90 is sending an event before being opened
Jun 21 13:25:40 CalendarAgent: Stream 0x7fb8f4a47180 is sending an event before being opened
Jun 21 13:25:50 AddressBookSourceSync: Stream 0x7fed8a804f80 is sending an event before being opened
Jun 21 13:25:51 AddressBookSourceSync: Stream 0x7fed887a8c70 is sending an event before being opened
Jun 21 13:35:17 com.apple.kextcache: kext file:///System/Library/Extensions/JMicronATA.kext/ is in hash exception list, allowing to load
Jun 21 13:37:02 CalendarAgent: Stream 0x7fb8f485a120 is sending an event before being opened
Jun 21 13:37:02 CalendarAgent: Stream 0x7fb8f485a120 is sending an event before being opened
Jun 21 13:37:03 CalendarAgent: Stream 0x7fb8f492b160 is sending an event before being opened
Jun 21 13:37:04 CalendarAgent: Stream 0x7fb8f4864d80 is sending an event before being opened
launchd log
Jun 21 13:11:15 com.apple.xpc.launchd.domain.pid.SecurityAgent.225: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:23 com.apple.xpc.launchd.domain.pid.SecurityAgent.199: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
Jun 21 13:22:59 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.234, service = 2BUA8C4S2C.com.agilebits.onepassword-osx-helper, error = 119: Service is disabled
Jun 21 13:22:59 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.234, service = com.apple.photostream-agent, error = 119: Service is disabled
Jun 21 13:22:59 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.234, service = QA2G25RMZ4.com.wunderkinder.wunderlist-helper, error = 119: Service is disabled
Console log
Jun 21 13:22:57 fontd: Failed to open read-only database, regenerating DB
Daemons loaded
com.adobe.fpsaud
com.apple.spindump
- status: 75
com.apple.watchdogd
com.google.keystone.daemon
com.microsoft.office.licensing.helper
com.skype.skypeinstaller
com.vix.cron
org.cups.cupsd
org.ntp.ntpd
org.postfix.master
Agents disabled
com.apple.apsd-ft
com.apple.FTMonitor
com.apple.photostream-agent
com.apple.imagent.monaco
2BUA8C4S2C.com.agilebits.onepassword-osx-helper
User login items
iTunesHelper
- missing value
FaceTab for Facebook
- missing value
iCloud errors
cloudd 8
Spotlight 3
Finder 1
Continuity errors
sharingd 4
Restricted files: 152
Lockfiles: 17
High file counts
Desktop: 108
Accessibility
Keyboard Zoom: On
Contents of /Library/LaunchAgents/com.avast.secureline.update-agent.plist
- mod date: Jun 21 11:03:44 2015
- checksum: 981257146
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.avast.secureline.update-agent</string>
<key>Program</key>
<string>/Library/Application Support/AvastSecureLine/components/update/com.avast.secureline.update-agent</st ring>
<key>RunAtLoad</key>
<true/>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.skype.skypeinstaller.plist
- mod date: May 10 22:26:47 2015
- checksum: 483910120
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.skype.skypeinstaller</string>
<key>Program</key>
<string>/Library/PrivilegedHelperTools/com.skype.skypeinstaller</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.skype.skypeinstaller</string>
</array>
<key>Sockets</key>
<dict>
<key>com.skype.skypeinstaller.socket</key>
<dict>
<key>SockFamily</key>
<string>Unix</string>
<key>SockPathMode</key>
<integer>438</integer>
<key>SockPathName</key>
<string>/var/run/com.skype.skypeinstaller.socket</string>
<key>SockType</key>
<string>Stream</string>
</dict>
...and 3 more line(s)
Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
- mod date: Apr 13 11:30:51 2015
- checksum: 3012644940
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<true/>
<key>Label</key>
<string>org.apache.httpd</string>
<key>EnvironmentVariables</key>
<dict>
<key>XPC_SERVICES_UNAVAILABLE</key>
<string>1</string>
</dict>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/httpd-wrapper</string>
<string>-D</string>
<string>FOREGROUND</string>
</array>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /private/etc/hosts
- mod date: Nov 3 23:29:17 2011
- checksum: 3027866010
127.0.0.1 localhost
255.255.255.255 broadcasthost
::1 localhost
fe80::1%lo0 localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 hl2rcv.adobe.com
Contents of Library/LaunchAgents/com.facebook.videochat.NAME.plist
- mod date: Aug 10 23:08:33 2014
- checksum: 3165945179
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.facebook.videochat.NAME.updater</string>
<key>ProgramArguments</key>
<array>
<string>/usr/bin/java</string>
<string>-cp</string>
<string>/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookUpdate.jar</string>
<string>FacebookUpdate</string>
<string>com.facebook.peep</string>
<string>3.1.0.522</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>10800</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.shoebox.launched.plist
- mod date: Dec 7 15:04:32 2014
- checksum: 306368129
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.shoebox.launched</string>
<key>SoftResourceLimits</key>
<dict>
<key>Stack</key>
<integer>52428800</integer>
</dict>
<key>HardResourceLimits</key>
<dict>
<key>Stack</key>
<integer>52428800</integer>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Applications/MyShoebox.app/Contents/MacOS/MyShoebox</string>
<string>upload</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
...and 5 more line(s)
Contents of Library/LaunchAgents/com.spotify.webhelper.plist
- mod date: May 5 09:33:34 2014
- checksum: 1545379913
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.spotify.webhelper</string>
<key>KeepAlive</key>
<dict>
<key>NetworkState</key>
<true/>
</dict>
<key>RunAtLoad</key>
<true/>
<key>Program</key>
<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
<key>SpotifyPath</key>
<string>/Applications/Spotify.app</string></dict>
</plist>
Bad plists
Library/Preferences/com.apple.iphotomosaic.plist
Library/Preferences/com.NetsSystemsInc.ZWork.plist
Library/Preferences/com.utilineau.syllabub.plist
Extensions
/Library/Extensions/hp_io_enabler_compound.kext
- com.hp.kext.io.enabler.compound
Applications
/Applications/Adobe Bridge CS5.1/Adobe Bridge CS5.1.app
- com.adobe.bridge4.1
/Applications/Adobe Download Assistant.app
- com.adobe.downloadassistant.AdobeDownloadAssistant
/Applications/Adobe Dreamweaver CS5.5/Adobe Dreamweaver CS5.5.app
- com.adobe.dreamweaver-11.5
/Applications/Adobe Illustrator CS5/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Analyze Documents.localized/Analyze Documents.app
- N/A
/Applications/Adobe Illustrator CS5/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Calendar.localized/Make Calendar.app
- N/A
/Applications/Adobe Illustrator CS5/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Contact Sheet Demo.localized/Contact Sheets.app
- N/A
/Applications/Adobe Illustrator CS5/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Export Flash Animation.localized/Export Flash Animation.app
- N/A
/Applications/Adobe Illustrator CS5/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Web Gallery.localized/Web Gallery.app
- N/A
/Applications/Adobe Media Player.app
- com.adobe.amp.UUID.1
/Applications/Adobe/Adobe Content Viewer.app
- com.adobe.dmp.contentviewer
/Applications/Adobe/Adobe Help.app
- chc.UUID.1
/Applications/Adobe/Adobe Widget Browser.app
- com.adobe.WidgetBrowser.UUID.1
/Applications/Adobe/AdobePatchFiles/{UUID}/UUID
- N/A
/Applications/Adobe/PhotoshopdotcomInspirationBrowser.app
- PhotoshopdotcomInspirationBrowser.UUID.1
/Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app
- com.microsoft.ASApplication
/Applications/Microsoft Office 2011/Office/Equation Editor.app
- com.microsoft.EquationEditor
/Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app
- com.microsoft.office.setupassistant
/Applications/Microsoft Office 2011/Office/Microsoft Query.app
- com.microsoft.Query
/Applications/Remote Desktop Connection.app
- com.microsoft.rdc
/Applications/Utilities/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Applications/Utilities/Adobe AIR Uninstaller.app
- com.adobe.air.Installer
/Library/Application Support/Adobe/CS5ServiceManager/CS5ServiceManager.app
- com.adobe.csi.CS5ServiceManager
/Library/Application Support/Adobe/Common/dynamiclink/CS5.5/dynamiclinkmanager.app
- com.adobe.dynamiclinkmanager
/Library/Application Support/Adobe/Installers/AdobeInDesign7AppBase/ExtraFiles/INSTALLDIR_EXE/Adobe InDesign CS5.app
- N/A
/Library/Application Support/Adobe/Installers/AdobeInDesign7xAppBase/ExtraFiles/INSTALLDIR_EXE/Adobe InDesign CS5.5.app
- N/A
/Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app
- com.adobe.switchboard-2.0
/Library/Documentation/User Guides And Information.localized/Apple Hardware Test Read Me.app
- com.apple.AppleHardwareTestReadMe
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app
- com.adobe.air.ApplicationInstaller
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Adobe AIR Updater.app
- com.adobe.air.Installer
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app
- com.adobe.air.Template
/Library/Printers/hp/Fax/fax.backend
- com.hp.fax
/Library/Printers/hp/Fax/rastertofax.filter
- com.hp.rastertofax
/Library/Printers/hp/cups/filters/commandtohp.filter
- com.hp.print.cups.filter.commandtohp
/Library/Printers/hp/cups/filters/pdftopdf.filter
- com.hp.print.cups.filter.pdftopdf
/Library/Printers/hp/cups/tools/autosetup.tool
- com.hp.print.autosetup
/Users/USER/Desktop/Kims Stuff/Warcraft III Folder/BNUpdate
- N/A
/Users/USER/Desktop/Kims Stuff/Warcraft III Folder/Warcraft III
- N/A
/Users/USER/Desktop/Kims Stuff/Warcraft III Folder/Warcraft III Folder/BNUpdate
- N/A
/Users/USER/Desktop/Kims Stuff/Warcraft III Folder/Warcraft III Folder/The Frozen Throne
- N/A
/Users/USER/Desktop/Kims Stuff/Warcraft III Folder/Warcraft III Folder/Warcraft III
- N/A
/Users/USER/Desktop/Kims Stuff/Warcraft III Folder/Warcraft III Folder/Warcraft III World Editor
- N/A
/Users/USER/Desktop/Kims Stuff/Warcraft III Folder/Warcraft III World Editor
- N/A
/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookVideoCalling.app
- com.Skype.FacebookVideoCalling
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
- com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
- com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
- com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app
- com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal
/Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
- com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
/Volumes/LaCie/LaCie Setup/LaCie Setup.app
- N/A
/Volumes/LaCie/Kara's Clients/Extra Video Stuff/Burns and Looks/mBurns/mBurns for FCPX.app
- com.yourcompany.mBurns-for-FCPX
/Volumes/LaCie/Warcraft III Folder/BNUpdate
- N/A
/Volumes/LaCie/Warcraft III Folder/Warcraft III
- N/A
/Volumes/LaCie/Warcraft III Folder/Warcraft III Folder/BNUpdate
- N/A
/Volumes/LaCie/Warcraft III Folder/Warcraft III Folder/The Frozen Throne
- N/A
/Volumes/LaCie/Warcraft III Folder/Warcraft III Folder/Warcraft III
- N/A
/Volumes/LaCie/Warcraft III Folder/Warcraft III Folder/Warcraft III World Editor
- N/A
/Volumes/LaCie/Warcraft III Folder/Warcraft III World Editor
- N/A
Frameworks
/Library/Frameworks/Adobe AIR.framework
- com.adobe.AIR
/Library/Frameworks/iLifePageLayout.framework
- com.apple.iLifePageLayout
PrefPane
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Library/PreferencePanes/Growl.prefPane
- com.growl.prefpanel
Bundles
/Library/Application Support/Adobe/APE/3.1/adbeapecore.framework/Versions/A/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.4-10.5.plugin
/Library/Application Support/Adobe/APE/3.101/adbeapecore.framework/Versions/A/Resources/Flash Player.plugin
- com.macromedia.FlashPlayer-10.4-10.5.plugin
/Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin
- com.adobe.CameraRaw
/Library/Application Support/Adobe/Plug-Ins/Elements 10/File Formats/Camera Raw.plugin
- com.adobe.CameraRaw
/Library/Application Support/Apple/BezelServices/AppleBluetoothHIDKeyboard.plugin
- com.apple.BezelServices.AppleBluetoothHIDKeyboard
/Library/Application Support/Apple/BezelServices/AppleBluetoothHIDMouse.plugin
- com.apple.AppleBluetoothHIDMouse
/Library/Application Support/Apple/BezelServices/AppleBluetoothMultitouch.plugin
- com.apple.BezelServices.AppleBluetoothMultitouch
/Library/Application Support/Apple/BezelServices/AppleHIDMouse.plugin
- com.apple.AppleHIDMouse
/Library/Application Support/Apple/BezelServices/AppleHSBluetooth.plugin
- null
/Library/Application Support/Apple/BezelServices/AppleIRController.plugin
- com.apple.AppleIRController
/Library/Application Support/Apple/BezelServices/AppleTopCase.plugin
- com.apple.BezelServices.AppleTopCase
/Library/Application Support/Apple/BezelServices/AppleTopCaseHIDEventDriver.plugin
- com.apple.BezelServices.AppleTopCaseHIDEventDriver
/Library/Application Support/Apple/BezelServices/IOAppleBluetoothHIDDriver.plugin
- com.apple.BezelServices.IOAppleBluetoothHIDDriver
/Library/Application Support/Apple/BezelServices/IOBluetoothHIDDriverGeneric.plugin
- com.apple.IOBluetoothHIDDriverGeneric
/Library/Application Support/Apple/BezelServices/IOBluetoothHIDDriverKeyboard.plugin
-
- com.apple.BezelServices.IOBluetoothHIDDriverKeyboard
/Library/Application Support/Apple/BezelServices/IOBluetoothHIDDriverMouse.plugin
- com.apple.IOBluetoothHIDDriverMouse
/Library/Application Support/iWork '09/Frameworks/SFRendering.framework/Versions/A/Resources/SFImageUnit.plugin
- com.apple.cmio.DAL.AppleCamera
/Library/CoreMediaIO/Plug-Ins/DAL/AppleCamera.plugin
- com.apple.cmio.DAL.iOSScreenCapture
/Library/CoreMediaIO/Plug-Ins/DAL/iOSScreenCapture.plugin
- com.apple.cmio.FCP-DAL.AppleCamera
/Library/CoreMediaIO/Plug-Ins/FCP-DAL/AppleCamera.plugin
- com.apple.cmio.DAL.iOSScreenCapture
/Library/CoreMediaIO/Plug-Ins/FCP-DAL/iOSScreenCapture.plugin
- com.adobe.adobecp
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin
- com.macromedia.FlashPlayer-10.6.plugin
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin
- com.adobe.adobecp20
/Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/adobecp.plugin
- com.macromedia.Flash Player.plugin
/Library/Internet Plug-Ins (Disabled)/Flash Player.plugin
- com.apple.DefaultBrowser.PlugIn
/Library/Internet Plug-Ins/Default Browser.plugin
- com.macromedia.Flash Player.plugin
/Library/Internet Plug-Ins/Flash Player.plugin
- com.apple.QuickTime Plugin.plugin
/Library/Internet Plug-Ins/QuickTime Plugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.google.googletalkbrowserplugin
/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin
- com.apple.plugin.iPhotoPhotocast
/Library/Internet Plug-Ins/iPhotoPhotocast.plugin
- com.google.o1dbrowserplugin
/Library/Internet Plug-Ins/o1dbrowserplugin.plugin
- com.makemusic.qlgenerator.Finale
/Library/QuickLook/Finale.qlgenerator
- com.apple.garageband.quicklookgenerator
/Library/QuickLook/GBQLGenerator.qlgenerator
- com.apple.iBooksAuthor.iBooksAuthorQuickLookGenerator
/Library/QuickLook/iBooksAuthor.qlgenerator
- com.apple.iWork.iWorkQuickLookGenerator
/Library/QuickLook/iWork.qlgenerator
- com.makemusic.MDImporter.Finale
/Library/Spotlight/Finale.mdimporter
- com.apple.garageband.spotlightimporter
/Library/Spotlight/GBSpotlightImporter.mdimporter
- null
/Library/Spotlight/LogicPro.mdimporter
- com.microsoft.MDImporter.Office
/Library/Spotlight/Microsoft Office.mdimporter
- com.apple.MDImporter.iBooksAuthor
/Library/Spotlight/iBooksAuthor.mdimporter
- com.apple.MDImporter.iWork
/Library/Spotlight/iWork.mdimporter
- com.apple.QuartzComposer.iTunesPlugIn
/Library/iTunes/iTunes Plug-ins/Quartz Composer Visualizer.bundle
- com.skype.skypeabdialer
/Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabsms
/Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.macromedia.PepperFlashPlayer.pepper
/Users/USER/Library/Application Support/Google/Chrome/PepperFlash/12.0.0.70/PepperFlashPlayer.plugin
- com.citrixonline.mac.WebDeploymentPlugin
/Users/USER/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin
-