Hitman247m

Q: Strange message in verbose shutdown

Hi everyone,

 

I have an early 2012 Macbook Pro and  a 2014 Macbook Air. I have been experiencing a strange issue for as long as I can remember, but now the problem has started happening on my new Macbook air as well.

 

When I shut down my computer, I receive the following message:

 

Lord Gilbert, Baron of England by the grace of his majesty, King Henry II, seized upon the person of a priest of the Holy Church and unlawfully did hold him in custody. Furthermore, in the presence of Lord Gilbert, and by his command, his men seized upon this priest when he tried to escape and put him to death. This is the sin of murder and sacrilege. In that Lord Gilbert has rendered no act of contrition or repentance, and is at the moment, at liberty in the land, we do, here and now, separate him from the precious body and blood of Christ, and from the society of all Christians. We exclude him from our Holy Mother Church and all her sacraments, in heaven, or on Earth. We declare him excommunicate and anathema. We cast him into the outer darkness. We judge him damned with the devil and his fallen angels and all the reprobate, to eternal fire and everlasting pain!

 

I am not running any pirated applications on my computer, and I am also running an up-to-date version of ESET Cyber Security Pro on both machines. I have a feeling that this text is related to one of the applications I have installed, but I don't want to spend a ton of time removing applications one-by-one to see which one is producing this message.

 

I've gone through the console, but I am unable to locate any mention of this anywhere.

 

Any help with this issue would be greatly appreciated.

Posted on Mar 13, 2015 8:29 AM

Close

Q: Strange message in verbose shutdown

  • All replies
  • Helpful answers

  • by Linc Davis,

    Linc Davis Linc Davis Mar 13, 2015 9:03 AM in response to Hitman247m
    Level 10 (207,990 points)
    Applications
    Mar 13, 2015 9:03 AM in response to Hitman247m

    1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

    The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

    Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

    2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

    There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

    3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

    You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

    In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

    You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

    Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

    4. Here's a summary of what you need to do, if you choose to proceed:

    ☞ Copy a line of text in this window to the Clipboard.

    ☞ Paste into the window of another application.

    ☞ Wait for the test to run. It usually takes a few minutes.

    ☞ Paste the results, which will have been copied automatically, back into a reply on this page.

    The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.

    5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

    You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

    6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

    7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.

    Triple-click anywhere in the line of text below on this page to select it:

    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(1289 ' 0.5 0.25 50 1000 15 5120 1000 25000 6 6 5 1 0 100 ' 51 25600 4 10 25 5120 102400 1000 25 1 400 40 500 300 85 25 20480 262144 20 2000 524288 604800 5 1024 );k=({Soft,Hard}ware Memory Diagnostics Power FireWire Thunderbolt USB Bluetooth SerialATA Extensions Applications Frameworks PrefPane Fonts Displays PCI UniversalAccess InstallHistory ConfigurationProfile AirPort 'com\.apple\.' -\\t N\\/A 'AES|atr|udit|msa|dnse|ax|ensh|fami|FileS|fing|ft[pw]|gedC|kdu|etS|is\.|alk|ODSA|otp|htt|pace|pcas|ps-lp|rexe|rlo|rsh|smb|snm|teln|upd-[aw]|uuc|vix|webf' OSBundle{Require,AllowUserLoa}d 'Mb/s:Mb/s:ms/s:KiB/s:%:total:MB:total:lifetime:sampled:per sec' 'Net in:Net out:I/O wait time:I/O requests:CPU usage:Open files:Memory:Mach ports:Energy:Energy:File opens:Forks:Failed forks:System errors' 'tsA|[ST]M[HL]' PlistBuddy{,' 2>&1'}' -c Print' 'Info\.plist' CFBundleIdentifier );f=('\n%s'{': ','\n\n'}'%s\n' '\nRAM details\n%s\n' %s{' ','\n'{"${k[22]}",}}'%s\n' '%.1f GiB: %s\n' '\n    ...and %s more line(s)\n' '\nContents of %s\n    '"${k[22]}"'mod date: %s\n    '"${k[22]}"'checksum: %s\n%s\n' );c=(879294308 4071182229 461455494 216630318 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 2636415542 3694147963 1233118628 2456546649 2806998573 2778718105 842973933 1383871077 1591517921 676087606 1445213025 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 3374894509 1051159591 892310726 1707497389 523110921 2883943871 3873345487 );s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[4]} ' s/:$//;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[9]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of|yc/!{ s/^.+is |\.//g;p;q;} ' ' BEGIN { FS="\f";if(system("A1 42 83 114")) d="^'"${k[21]}"'launch(d\.peruser\.[0-9]+|ctl\.(Aqua|Background|System))$";} { if($2~/[1-9]/) { $2="status: "$2;printf("'"${f[4]}"'",$1,$2);} else if(!d||$1!~d) print $1;} ' ' $1>1{$NF=$NF" x"$1} /\*/{if(!f)f="\n\t* Code injection"} {$1=""} 1;END{print f} ' ' NR==2&&$4<='${p[7]}'{print $4} ' ' BEGIN{FS=":"} ($1~"wir"&&$2>'${p[22]}') {printf("wired %.1f\n",$2/2^18)} ($1~/P.+ts/&&$2>'${p[19]}') {printf("paged %.1f\n",$2/2^18)} ' '/YLD/s/=/ /p' ' { q=$1;$1="";u=$NF;$NF="";gsub(/ +$/,"");print q"\f"$0"\f"u;} ' ' /^ {6}[^ ]/d;s/:$//;/([^ey]|[^n]e):/d;/e: Y/d;s/: Y.+//g;H;${ g;s/ \n (\n)/\1/g;s/\n +(M[^ ]+)[ -~]+/ (\1)/;s/\n$//;/( {8}[^ ].*){2,}/p;} ' 's:^:/:p;' ' !/, .+:/ { print;n++;} END{if(n<'{${p[12]},${p[13]}}')printf("^'"${k[21]}"'.+")} ' '|uniq' ' 1;END { print "/L.+/Scr.+/Templ.+\.app$";print "/L.+/Pri.+\.plugin$";if(NR<'{${p[14]},${p[21]}}') print "^/[Sp].+|'${k[21]}'";} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:.+//p;' '&&echo On' '/\.(bundle|component|framework|kext|mdimporter|plugin|qlgenerator|saver|wdgt)$/p' '/\.dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".","");print $0"$";} END { split("'"${c[*]}"'",c);for(i in c) print "\t"c[i]"$";} ' ' /^\/(Ap|Dev|Inc|Prev)/d;/((iTu|ok).+dle|\.(component|mailbundle|mdimporter|plugin|qlgenerator|saver|wdgt))$/p;' ' BEGIN{ FS="= "} $2 { gsub(/[()"]/,"",$2);print $2;} !/:/&&!$2{print "'${k[23]}'"} ' ' /^\//!d;s/^.{5}//;s/ [^/]+\//: \//p;' '>&-||echo No' '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[2]}'{$2=$2-1;print}' ' BEGIN { M1='${p[16]}';M2='${p[18]}';M3='${p[8]}';M4='${p[3]}';} !/^A/{next};/%/ { getline;if($5<M1) o["CPU"]="CPU: user "$2"%, system "$4"%";next;} $2~/^disk/&&$4>M2 { o[$2]=$2": "$3" ops/s, "$4" blocks/s";next;} $2~/^(en[0-9]|bridg)/ { if(o[$2]) { e=$3+$4+$5+$6;if(e) o[$2]=o[$2]"; errors "e"/s";next;};if($4>M3||$6>M4) o[$2]=$2": in "int($4/1024)", out "int($6/1024)" (KiB/s)";} END { for(i in o) print o[i];} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/)||(/v6:/&&$2!~/A/) ' ' BEGIN{FS=": "} /^ {10}O/ {exit} /^ {0,12}[^ ]/ {next} $1~"Ne"&&$2!~/^In/{print} $1~"Si" { split($2,a," ");if(a[1]-a[4]<'${p[5]}') print;};$1~"T"&&$2<'${p[20]}'{print};$1~"Se"&&$2!~"2"{print};' ' BEGIN { FS="\f";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1;} ' ' BEGIN { split("'"${p[1]}"'",m);FS="\f";} $2<=m[$1]{next} $1==9||$1==10 { "ps -c -ouid -p"$4"|sed 1d"|getline $4;} $1<11 { o[$1]=o[$1]"\n    "$3" (UID "int($4)"): "$2;} $1==11&&$5!~"^/dev" { o[$1]=o[$1]"\n    "$3" (UID "$4") => "$5" (status "$6"): "$2;} $1==12&&$5 { "ps -c -ocomm -p"$5"|sed 1d"|getline n;if(n) $5=n;o[$1]=o[$1]"\n    "$5" => "$3" (UID "$4"): "$2;} $1~/1[34]/ { o[$1]=o[$1]"\n    "$3" (UID "$4", error "$5"): "$2;} END { n=split("'"${k[27]}"'",u,":");for(i=n+1;i<n+4;i++)u[i]=u[n];split("'"${k[28]}"'",l,":");for(i=1;i<15;i++) if(o[i])print "\n"l[i]" ("u[i]")\n"o[i];} ' ' /^ {8}[^ ]/{print} ' ' BEGIN { L='${p[17]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n    "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n    [N/A]";"cksum "F|getline C;split(C, A);C=A[1];"stat -f%Sm "F|getline D;"file -b "F|getline T;if(T~/^Apple b/) { f="";l=0;while("'"${k[30]}"' "F|getline g) { l++;if(l<=L) f=f"\n    "g;};};if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F"\n    '"${k[22]}"'"T;printf("'"${f[8]}"'",F,D,C,f);if(l>L) printf("'"${f[7]}"'",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' 's/^.{52}(.+) <.+/\1/p' ' /id: N|te: Y/{i++} END{print i} ' ' /kext:/ { split($0,a,":");p=a[1];k[S]='${k[25]}';k[U]='${k[26]}';v[S]="Safe";v[U]="true";for(i in k) { s=system("'"${k[30]}"'\\ :"k[i]" \""p"\"/*/I*|grep -qw "v[i]);if(!s) a[1]=a[1]" "i;};if(!a[2]) a[2]="'"${k[23]}"'";printf("'"${f[4]}"'",a[1],a[2]);next;} !/^ *$/ { p="'"${k[31]}"'\\ :'"${k[33]}"' \""$0"\"/*/'${k[32]}'";p|getline b;close(p);if(b~/, .+:/||b=="") b="'"${k[23]}"'";printf("'"${f[4]}"'",$0,b);} ' '/ en/!s/\.//p' ' NR>=13 { gsub(/[^0-9]/,"",$1);print;} ' ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?'${k[32]}'$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ / [VY]/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' '/^find: /!p;' ' /^p/{ s/.//g;x;s/\nu/'$'\f''/;s/(\n)c/\1'$'\f''/;s/\n\n//;p;};H;' ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */    /;p;' ' s/^.+ |\(.+\)$//g;p;' '1;END{if(NR<'${p[15]}')printf("^/(S|usr/(X|li))")}' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR|^s/d;s/^.+: //p;' ' $3~/^[1-9][0-9]{0,2}(\.[1-9][0-9]{0,2}){2}$/ { i++;n=n"\n"$1"\t"$3;} END{ if(i>1)print n} ' s/{'\.|jnl: ','P.+:'}'//;s/ +([0-9]+)(.+)/\2'$'\t\t''\1/p' ' /^ +iP.+:$/{ s/://;b0'$'\n'' };/es: ./{ /iOS/d;s/^.+://;b0'$'\n'' };/^ +C.+ted: +[NY]/H;/:$/b0'$'\n'' d;:0'$'\n'' x;/: +N/d;s/\n.+//p;' ' 1d;/:$/b0'$'\n'' $b0'$'\n'' /(D|^ *Loc.+): /{ s/^.+: //;H;};/(B2|[my]): /H;d;:0'$'\n'' x;/[my]: [AM]|m: I.+p$|^\/Vo/d;s/(^|\n) [ -~]+//g;s/(.+)\n(.+)/\2:\1/;s/\n//g;/[ -~]/p;' 's/$/'$'\f''(0|-(4[34])?)$/p' '|sort'{'|uniq'{,\ -c},\ -nr} ' s/^/'{5,6,7,8,9,10}$'\f''/;s/ *'$'\f'' */'$'\f''/g;p;' 's/:.+$//p' '|wc -l' /{\\.{kext,xpc,'(appex|pluginkit)'}'\/(Contents\/)?'Info,'Launch[AD].+'}'\.plist$/p' 's/([-+.?])/\\\1/g;p' 's/, /\'$'\n/g;p' ' BEGIN{FS="\f"} { printf("'"${f[6]}"'",$1/2^30,$2);} ' ' /= D/&&$1!~/'{${k[24]},${k[29]}}'/ { getline d;if(d~"t") print $1;} ' ' BEGIN{FS="\t"} NR>1&&$NF!~/0x|\.([0-9]{3,}|[-0-9A-F]{36})$/ { print $NF"\f"a[split($(NF-1),a," ")];} ' '|tail -n'{${p[6]},${p[10]}} ' s/.+bus /Bus: /;s/,.+[(]/ /;s/,.+//p;' ' { $NF=$NF" Errors: "$1;$1="";} 1 ' ' 1s/^/\'$'\n''/;/^ +(([MNPRSV]|De|Li|Tu).+|Bus): .|d: Y/d;s/:$//;$d;p;' ' BEGIN { RS=",";FS=":";} $1~"name" { gsub("\"","",$2);print $2;} ' '|grep -q e:/' '/[^ .]/p' '{ print $1}' ' /^ +N.+: [1-9]/ { i++;} END { if(i) print "system: "i;} ' ' NF { print "'{admin,user}' "$NF;exit;} ' ' /se.+ =/,/[\}]/!d;/[=\}]/!p ' ' 3,4d;/^ +D|Of|Fu| [0B]/d;s/^  |:$//g;$!H;${ x;/:/p;} ' ' BEGIN { FS=": ";} NR==1 { sub(":","");h="\n"$1"\n";} /:$/ { l=$1;next;} $1~"S"&&$2!~3 { getline;next;} /^ {6}I/ { i++;L[i]=l" "$2;if(i=='${p[24]}') nextfile;} END { if(i) print h;for(j=0;j<i;j++) print L[i-j];} ' ' /./H;${ x;s/\n//;s/\n/, /g;/,/p;} ' ' {if(int($6)>'${p[25]}')printf("swap used %.1f\n",$6/1024)} ' ' BEGIN{FS="\""} $3~/ t/&&$2!~/'{${k[24]},${k[29]}}'/{print $2} ' ' int($1)>13 ' p ' BEGIN{FS="DB="} { sub(/\.db.*/,".db",$2);print $2;} ' {,1d\;}'/r%/,/^$/p' ' NR==1{next} NR>11||!$0{exit} {print $NF"\f"substr($0,1,32)"\f"$(NF-7)} ' '/e:/{print $2}' ' /^[(]/{ s/....//;s/$/:/;N;/: [)]$/d;s/\n.+ ([^ ]+).$/\1/;H;};${ g;p;} ' '1;END { exit "find /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom -mtime -'${p[23]}'s"|getline;} ' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab kextfind top pkgutil "${k[30]}\\" echo cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom 'mdfind -onlyin' env pluginkit scutil 'dtrace -q -x aggsortrev -n' security sed\ -En awk 'dscl . -read' networksetup mdutil lsof test osascript\ -e netstat mdls route cat uname powermetrics );c2=(${k[21]}loginwindow\ LoginHook ' /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'" 'L*/Ca*/'${k[21]}'Saf*/E* -d 2 -name '${k[32]} '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' -i '-nl -print' '-F \$Sender -k Level Nle 3 -k Facility Req "'${k[21]}'('{'bird|.*i?clou','lsu|sha'}')"' "-f'%N: %l' Desktop {/,}L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message CRne '0xdc008012|(allow|call)ing|Goog|(mplet|nabl)ed|ry HD|safe b|xpm' -k Message CReq 'bad |Can.t l|corru|dead|fail|GPU |hfs: Ru|inval|Limiti|v_c|NVDA[(]|pagin|Purg(ed|in)|error|Refus|TCON|tim(ed? ?|ing )o|trig|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o%cpu,comm,ruid' "' syscall::recvfrom:return {@a[execname,uid]=sum(arg0)} syscall::sendto:return {@b[execname,uid]=sum(arg0)} syscall::open*:entry {@c[execname,uid,copyinstr(arg0),errno]=count()} syscall::execve:return, syscall::posix_spawn:return {@d[execname,uid,ppid]=count()} syscall::fork:return, syscall::vfork:return, syscall::posix_spawn:return /arg0<0/ {@e[execname,uid,arg0]=count()} syscall:::return /errno!=0/ {@f[execname,uid,errno]=count()} io:::wait-start {self->t=timestamp} io:::wait-done /self->t/ { this->T=timestamp - self->t;@g[execname,uid]=sum(this->T);self->t=0;} io:::start {@h[execname,uid]=sum(args[0]->b_bcount)} tick-10sec { normalize(@a,2560000);normalize(@b,2560000);normalize(@c,10);normalize(@d,10);normalize(@e,10);normalize(@f,10);normalize(@g,10000000);normalize(@h,10240);printa(\"1\f%@d\f%s\f%d\n\",@a);printa(\"2\f%@d\f%s\f%d\n\",@b);printa(\"11\f%@d\f%s\f%d\f%s\f%d\n\",@c);printa(\"12\f%@d\f%s\f%d\f%d\n\",@d);printa(\"13\f%@d\f%s\f%d\f%d\n\",@e);printa(\"14\f%@d\f%s\f%d\f%d\n\",@f);printa(\"3\f%@d\f%s\f%d\n\",@g);printa(\"4\f%@d\f%s\f%d\n\",@h);exit(0);} '" '-f -pfc /var/db/r*/'${k[21]}'*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f'$'\f''%Sc'$'\f''%N -t%F {} \;' '/S*/*/Ca*/*xpc*' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' /\ kMDItemContentTypeTree=${k[21]}{bundle,mach-o-dylib} :Label "/p*/e*/{auto*,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {/p*,/usr/local}/e*/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list '-F "" -k Sender hidd -k Level Nle 3' /Library/Preferences/${k[21]}alf\ globalstate --proxy '-n get default' vm.swapusage --dns -get{dnsservers,info} dump-trust-settings\ {-s,-d,} -n1 '-R -ce -l1 -n5 -o'{'prt -stats prt','mem -stats mem'}',command,uid' -kl -l -s\ / '--regexp --files '${k[21]}'pkg.*' '+c0 -i4TCP:0-1023' ${k[21]}dashboard\ layer-gadgets '-d /L*/Mana*/$USER' '-app Safari WebKitDNSPrefetchingEnabled' '-Fcu +c0 -l' -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' '-F \$Message -k Sender kernel -k Message CReq "'{'n Cause: -','(a und|I/O |jnl_io.+)err|disk.+abo','USBF:.+bus'}'"' -name\ kMDItem${k[33]} -T\ hfs '-n get default' -listnetworkserviceorder :${k[33]} :CFBundleDisplayName $EUID {'$TMPDIR../C ','/{S*/,}'}'L*/{,Co*/*/*/L*/}{Cache,Log}s -type f -size +'${p[11]}'G -exec stat -f%z'$'\f''%N {} \;' \ /v*/d*/*/*l*d{,.*.$UID}/* '-app Safari UserStyleSheetEnabled' 'L*/A*/Fi*/P*/*/a*.json' users/$USER\ HomeDirectory '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' ' -F "\$Time \$(Sender): \$Message" -k Sender Rne "launchd|nsurls" -k Level Nle 3 -k Facility R'{'ne "user|','eq "'}'console" -k Message CRne "[{}<>]|asser|commit - no t|deprec|done |fmfd|Goog|ksho|ndum|obso|realp|rned f|/root|sandbox ex|sudo:" ' getenv '/ "kMDItemDateAdded>=\$time.now(-'${p[23]}')&&kMDItem'${k[33]}'=*"' -m\ / '' ' -F "\$Time \$(RefProc): \$Message" -k Sender Req launchd -k Level Nle 3 -k Message Rne "asse|bug|File ex|hij|Ig|Jet|key is|lid t|Plea|ship" ' print{,-disabled}\ {system,{gui,user}/$UID} '-n1 --show-initial-usage --show-process-energy' -r ' -F "\$Message" -k Sender nsurlstoraged -k Time ge -1h -k Level Nle 4 -k Message Req "^(ER|IN)" ' '~ "kMDItemKind=Package"' );N1=${#c2[@]};for j in {0..20};do c2[N1+j]=SP${k[j]}DataType;done;l=({Restricted\ ,Lock,Pro}files POST Battery {Safari,App,{Bad,Loaded}\ kernel,Firefox}\ extensions System\ load boot\ args FileVault\ {2,1} {Kernel,System,Console,launchd}\ log SMC Login\ hook 'I/O per process' 'High file counts' UID {System,Login,Agent,User}' services '{load,disabl}ed {Admin,Root}\ access Font\ issues Firewall Proxies DNS TCP/IP Wi-Fi 'Elapsed time (sec)' {Root,User}\ crontab {Global,User}' login items' Spotlight Memory\ pressure Listeners Widgets Parental\ Controls Prefetching Nets Volumes {Continuity,I/O,iCloud,HID,HCI}\ errors {User,System}\ caches/logs XPC\ cache Startup\ items Shutdown\ codes Heat Diagnostic\ reports Bad\ {plist,cache}s 'VM (GiB)' Bundles{,' (new)'} Trust\ settings Activity Free\ space Stylesheet Library\ paths{,' ('{shell,launchd}\)} Data\ packages );N3=${#l[@]};for i in {0..8};do l[N3+i]=${k[5+i]};done;F() { local x="${s[$1]}";[[ "$x" =~ ^([\&\|\<\>]|$) ]]&&{ printf "$x";return;};:|${c1[30]} "$x" 2>&-;printf "%s \'%s\'" "|${c1[30+$?]}" "$x";};A0() { Q=6;v[2]=1;id -G|grep -qw 80;v[1]=$?;((v[1]))||{ Q=7;sudo -v;v[2]=$?;((v[2]))||Q=8;};v[3]=`date +%s`;date '+Start time: %T %D%n';printf '\n[Process started]\n\n'>&4;printf 'Revision: %s\n\n' ${p[0]};};A1() { local c="${c1[$1]} ${c2[$2]}";shift 2;c="$c ` while [[ "$1" ]];do F $1;shift;done`";((P2))&&{ c="sudo $c";P2=;};v=`eval "$c"`;[[ "$v" ]];};A2() { local c="${c1[$1]}";[[ "$c" =~ ^(awk|sed ) ]]&&c="$c '${s[$2]}'"||c="$c ${c2[$2]}";shift 2;local d=` while [[ "$1" ]];do F $1;shift;done`;((P2))&&{ c="sudo $c";P2=;};local a;v=` while read a;do eval "$c '$a' $d";done<<<"$v";`;[[ "$v" ]];};A3(){ v=$((`date +%s`-v[3]));};export -f A1 A2 F;B1() { v=No;! ((v[1]))&&{ v=;P1=1;};};eval "`type -a B1|sed '1d;s/1/2/'`";B3(){ v[$1]="$v";};B4() { local i=$1;local j=$2;shift 2;local c="cat` while [[ "$1" ]];do F $1;shift;done`";v[j]=`eval "{ $c;}"<<<"${v[i]}"`;};B5(){ v="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d$'\e' <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F$'\e' ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`egrep -v "${v[$1]}"<<<"$v"|sort`;};eval "`type -a B7|sed '1d;s/7/8/;s/-v //'`";C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { B4 0 0 63&&C1 1 $1;};C4() { echo $'\t'"Part $((++P)) of $Q done at $((`date +%s`-v[3])) sec">&4;};C5() { sudo -k;pbcopy<<<"$o";printf '\n\tThe test results are on the Clipboard.\n\n\tPlease close this window.\n';exit 2>&-;};for i in 1 2;do eval D$((i-1))'() { A'$i' $@;C0;};';for j in 2 3;do eval D$((i+2*j-3))'() { local x=$1;shift;A'$i' $@;C'$j' $x;};';done;done;trap C5 2;o=$({ A0;D0 0 N1+1 2;D0 0 $N1 1;B1;C2 31;B1&&! B2&&C2 32;D2 22 15 63;D0 0 N1+2 3;D0 0 N1+15 17;D4 3 0 N1+3 4;D4 4 0 N1+4 5;D4 N3+4 0 N1+9 59;D0 0 N1+16 99;for i in 0 1 2;do D4 N3+i 0 N1+5+i 6;done;D4 N3+3 0 N1+8 71;D4 62 1 10 7;D4 10 1 11 8;B2&&D4 18 19 53 67;D2 11 2 12 9;D2 12 3 13 10;D2 13 32 70 101 25;D2 71 6 76 13;D2 45 20 52 66;A1 7 77 14;B3 28;A1 20 31 111;B6 0 28 5;B4 0 0 110;C2 66;D4 70 8 15 38;D0 9 16 16 77 45;C4;B2&&D0 35 49 61 75 76 78 45;B2&&{ D0 28 17 45;C4;};B2&&{ A1 43 85 117;B3 29;B4 0 0 119 76 81 45;C0;B4 29 0 118 119 76 82 45;C0;    };D0 12 40 54 16 79 45;D0 12 39 54 16 80 45;D4 74 25 77 15&&{ B4 0 8 103;B4 8 0;A2 18 74;B6 8 0 3;C3 75;};B2&&D4 19 21 0;B2&&D4 40 10 42;D2 2 0 N1+19 46 84;D2 44 34 43 53;D2 59 22 20 32;D2 33 0 N1+14 51;for i in {0..2};do A1 29 35+i 104+i;B3 25+i;done;B6 25 27 5;B6 0 26 5;B4 0 0 110;C2 69;D2 34 21 28 35;D4 35 27 29 36;A1 40 59 120;B3 18;A1 33 60 121;B8 18;B4 0 19 83;A1 27 32 39&&{ B3 20;B4 19 0;A2 33 33 40;B3 21;B6 20 21 3;};C2 36;D4 50 38 5 68;B4 19 0;D5 37 33 34 42;B2&&D4 46 35 45 55;D4 38 0 N1+20 43;B2&&D4 58 4 65 76 91;D4 63 4 19 44 75 95 12;B1&&{ D4 53 5 55 75 69&&D4 51 6 58 31;D4 56 5 56 97 75 98&&D0 0 N1+7 99;D2 55 5 27 84;D4 61 5 54 75 70;D4 14 5 14 96;D4 15 5 72 96;D4 17 5 78 96;C4;};D4 16 5 73 96;A1 13 44 74 18;C4;B3 4;B4 4 0 85;A2 14 61 89;B4 0 5 19 102;A1 17 41 50;B7 5;C3 8;B4 4 0 88;A2 14 24 89;C4;B4 0 6 19 102;B4 4 0 86;A2 14 61 89;B4 0 7 19 102;B5 6 7;B4 0 11 73 102;A1 42 86 114;j=$?;for i in 0 1 2;do ((! j))||((i))||B2&&A1 18 $((79+i-(i+53)*j)) 107+8*j 94 74||continue;((PIPESTATUS))&&break;B7 11;B4 0 0 11;C3 $((23+i*(1+i+2*j)));D4 $((24+i*(1+i+2*j))) 18-4*j 82+i-16*j $((112+((3-i)*i-40*j)/2));done;D4 60 4 21 24;D4 42 14 1 62;D4 43 37 2 90 48;D4 41 10 42;D2 48 36 47 25;A1 4 3 60&&{ B3 9;A2 14 61;B4 0 10 21;B4 9 0;A2 14 62;B4 0 0 21;B6 0 10 4;C3 5;};D4 9 41 69 100;D2 72 21 68 35;D2 49 21 48 49;B4 4 22 57 102;A1 21 46 56 74;B7 22;B4 0 0 58;C3 47;D4 54 5 7 75 76 69;D4 52 5 8 75 76 69;D4 57 4 64 76 91;D2 0 4 4 84;D2 1 4 51 84;D4 21 22 9 37;D0 0 N1+17 108;D4 76 24 88;A1 23 18 28 89;B4 0 16 22 102;A1 16 25 33;B7 16;B4 0 0 34;D1 31 47;D4 64 4 71 41;D4 65 5 87 116 74;C4;B4 4 12 26 89 23 102;for i in {0..3};do A1 0 N1+10+i 72 74;B7 12;B4 0 0 52;C3 N3+5+i;((i))||C4;done;A1 24 22 29;B7 12;B3 14;A2 39 57 30;B3 15;B6 14 15 4;C3 67;A1 24 75 74;B4 1 1 122||B7 12;B3 23;A2 39 57 30;B3 24;B6 23 24 4;C3 68;B4 4 13 27 89 65;A1 24 23;B7 13;C3 73;B4 4 0 87;A2 14 61 89 20;B4 0 17;A1 26 50 64;B7 17;C3 6;D0 0 N1+18 109;D4 7 11 6;A3;C2 39;C4;} 4>&2 2>/dev/null;);C5

    Copy the selected text to the Clipboard by pressing the key combination command-C.

    8. Launch the built-in Terminal application in any of the following ways:

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad and start typing the name.

    Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.

    9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

    exec bash

    and press return. Then paste the script again.

    10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

    If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

    11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

    [Process started]
            Part 1 of 8 done at … sec
            …
            Part 8 of 8 done at … sec
            The test results are on the Clipboard.
            Please close this window.
    [Process completed]

    The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

    Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

    12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

    At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

    If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

    13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

    14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

    ______________________________________________________________

    Copyright © 2014, 2015 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

  • by Hitman247m,

    Hitman247m Hitman247m Mar 13, 2015 9:24 AM in response to Linc Davis
    Level 1 (0 points)
    Mar 13, 2015 9:24 AM in response to Linc Davis

    Start time: 12:07:39 03/13/15

     

     

    Revision: 1289

     

     

    Model Identifier: MacBookPro8,1

    System Version: OS X 10.10.2 (14C1510)

    Kernel Version: Darwin 14.1.0

    Time since boot: 3 days 13:33

     

     

    UID: 501

     

     

    Memory

     

     

     

     

        BANK 0/DIMM0

     

     

          Size: 8 GB

          Speed: 1333 MHz

          Status: OK

          Manufacturer: 0x029E

     

     

        BANK 1/DIMM0

     

     

          Size: 8 GB

          Speed: 1333 MHz

          Status: OK

          Manufacturer: 0x029E

     

     

    SerialATA

     

     

        Crucial_CT960M500SSD1                  

     

     

    PCI

     

     

        Apple 57761-B0

     

     

          Type: Ethernet Controller

     

     

        pci11c1,5901

     

     

          Type: IEEE 1394 Open HCI

     

     

        scsi

     

     

          Type: SCSI Bus Controller

     

     

        pci12d8,400e

     

     

          Type: USB Open Host Controller

          Driver Installed: No

     

     

        pci12d8,400e

     

     

          Type: USB Open Host Controller

          Driver Installed: No

     

     

        pci12d8,400f

     

     

          Type: USB Enhanced Host Controller

     

     

    Thunderbolt

     

     

        Mini (Drobo)

     

     

    USB

     

     

        Voyager Legend (Plantronics, Inc.)

        Neat Mobile Scanner (The Neat Company)

        daskeyboard (Holtek Semiconductor, Inc.)

        Bose USB Audio (Bose Corporation)

        USB Receiver (Logitech Inc.)

     

     

    Bluetooth

     

     

        Apple Wireless Trackpad

     

     

    FileVault 2: On

     

     

    Activity

     

     

        CPU: user 84%, system 14%

        en0: in 134, out 193 (KiB/s)

     

     

    CPU usage (%)

     

     

        filezilla (UID 501): 94.4

        esets_daemon (UID 0): 71.1

        CalendarAgent (UID 501): 71.1

        CrashPlanService (UID 0): 50.7

        Itsycal (UID 501): 31.5

     

     

    Net in (Mb/s)

     

     

        fzsftp (UID 501): 1

     

     

    File opens (per sec)

     

     

        mdworker (UID 501) => /Users/USER/Library/Calendars/UUID.caldav/UUID.calendar/Events/.DS_Store (status 2): 44

        esets_daemon (UID 0) => /Library/Application Support/ESET/esets/modules/data/updfiles/upd.ver (status 0): 25

     

     

    System errors (per sec)

     

     

        mdworker (UID 501, error 2): 230

        Itsycal (UID 501, error 1): 190

     

     

    Energy (lifetime)

     

     

        filezilla (UID 501): 67.72

        kernel_task (UID 0): 6.63

        CrashPlanService (UID 0): 6.33

     

     

    Energy (sampled)

     

     

        esets_daemon (UID 0): 86.45

        filezilla (UID 501): 81.10

        CalendarAgent (UID 501): 70.08

        Itsycal (UID 501): 30.66

        CrashPlanService (UID 0): 27.46

        kernel_task (UID 0): 10.83

        WindowServer (UID 88): 9.18

        mds_stores (UID 0): 7.72

        mds (UID 0): 7.53

        mdworker32 (UID 501): 7.27

     

     

    Memory (MB)

     

     

        kernel_task (UID 0): 1388

     

     

    DNS: 8.8.8.8 (static)

     

     

    Listeners

     

     

        kdc: kerberos

     

     

    System caches/logs

     

     

        4.5 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data

     

     

    Diagnostic reports

     

     

        2014-12-18 Little_Snitch_Agent_370.spindump.txt txt

        2014-12-25 Little_Snitch_Agent_38459.2.spindump.txt txt

        2014-12-25 Little_Snitch_Agent_38459.spindump.txt txt

        2015-02-13 garcon crash

        2015-02-16 NeatScannersICDriver crash

        2015-02-16 garcon crash

        2015-02-20 NeatScannersICDriver crash

        2015-02-22 NeatScannersICDriver crash

        2015-02-23 garcon crash

        2015-02-24 NeatScannersICDriver crash

        2015-03-02 NeatScannersICDriver crash

        2015-03-04 EvernoteHelper crash

        2015-03-04 NeatScannersICDriver crash

        2015-03-06 NeatScannersICDriver crash

        2015-03-09 CrashPlan menu bar crash

        2015-03-09 EvernoteHelper crash

        2015-03-09 NeatScannersICDriver crash

        2015-03-09 garcon crash

        2015-03-10 EvernoteHelper crash

        2015-03-10 esets_proxy crash

        2015-03-11 NeatScannersICDriver crash

     

     

    HID errors: 2

     

     

    Kernel log

     

     

        Mar 10 00:47:24 0xffffff804bdf91a0 : 1532153743744 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 10 00:47:36 0xffffff80565a5390 : 1544165430466 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 10 00:47:36 0xffffff80565a5390 : 1544166089897 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 10 11:45:00 OSUnserializeXML: syntax error near line 1

        Mar 10 14:49:44 OSUnserializeXML: syntax error near line 1

        Mar 10 18:52:40 0xffffff8057b002c0 : 27458919524565 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 10 18:52:40 0xffffff8057b002c0 : 27458919628275 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 10 18:52:40 0xffffff8057b002c0 : 27458920247895 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 10 18:52:40 0xffffff8057b002c0 : 27458920784920 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 11 09:10:17 0xffffff804c080390 : 33422748387852 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 11 09:10:17 0xffffff804c080390 : 33422772558753 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 11 09:10:17 0xffffff804c080390 : 33422796785486 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 11 09:10:17 0xffffff8047dfa4b0 : 33422821034752 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 11 21:20:12 OSUnserializeXML: syntax error near line 1

        Mar 11 22:48:46 OSUnserializeXML: syntax error near line 1

        Mar 13 02:01:37 0xffffff8047d894b0 : 68698107225985 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 02:01:53 0xffffff804f6821a0 : 68714005888480 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 05:39:38 0xffffff804d6cecf0 : 68857775783245 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 05:39:38 0xffffff804b78d770 : 68857778045333 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 07:28:16 0xffffff804d6cecf0 : 68913743788155 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 09:17:09 0xffffff804d6cecf0 : 68985170268202 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 11:06:02 0xffffff804d6cecf0 : 69058046122357 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 11:06:18 0xffffff8057df74b0 : 69073855471311 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 11:06:18 0xffffff8057df74b0 : 69073855517659 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

        Mar 13 11:06:18 0xffffff8057df74b0 : 69073855548871 ns - com_drobo_SCSI_ThunderBoltController::ProcessParallelTask() - Driver in sleep mode

     

     

    System log

     

     

        Mar 13 11:30:42 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:30:42 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:31:22 Todoist: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:31:22 Todoist: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:31:22 Todoist: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:31:22 Todoist: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:35:50 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:35:50 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:36:08 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:36:08 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:36:09 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:36:09 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:10 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:10 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:12 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:12 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:16 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:16 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:17 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:17 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:17 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:17 Google Chrome Helper: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server

        Mar 13 11:46:17 Google Chrome Helper: CGAffineTransformInvert: singular matrix.

        Mar 13 11:49:30 Google Chrome Helper: CGAffineTransformInvert: singular matrix.

        Mar 13 11:49:55 Google Chrome Helper: CGAffineTransformInvert: singular matrix.

     

     

    launchd log

     

     

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = com.lastpass.LPLaunchAtLoginHelperApp, error = 119: Service is disabled

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = J8RPQ294UB.com.skitch.SkitchHelper, error = 119: Service is disabled

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = com.authy.AuthyLauncher, error = 119: Service is disabled

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = com.techsmith.snagit.SnagitLaunchAtLogin, error = 119: Service is disabled

        Mar  8 18:43:41 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.259, service = com.garmin.renu.service, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = com.lastpass.LPLaunchAtLoginHelperApp, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = J8RPQ294UB.com.skitch.SkitchHelper, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = com.authy.AuthyLauncher, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = com.techsmith.snagit.SnagitLaunchAtLogin, error = 119: Service is disabled

        Mar  9 22:35:33 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.298, service = com.garmin.renu.service, error = 119: Service is disabled

     

     

    Console log

     

     

        Mar 10 08:29:21 Mailbox (Beta): Displaying item TUUID_1495216217468967267

        Mar 10 08:29:28 Mailbox (Beta): Displaying item TUUID_1495217909490112300

        Mar 10 08:29:30 Mailbox (Beta): Displaying item TUUID_1488217956233899454

        Mar 10 08:29:31 Mailbox (Beta): Displaying item TUUID_1495216217468967267

        Mar 10 13:00:10 mdworker: Error loading /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/EvernoteSpotlightImporter:  dlopen(/Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightI mporter.mdimporter/Contents/MacOS/EvernoteSpotlightImporter, 262): Library not loaded: @rpath/ENSharedUtilities.framework/Versions/A/ENSharedUtilities

         Referenced from: /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/EvernoteSpotlightImporter

         Reason: no suitable image found.  Did find:

        /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/../../../../../Frameworks//ENSharedUtilities.framewor k/Versions/A/ENSharedUtilities: open() failed with errno=1

        Mar 10 14:46:26 mdworker: Error loading /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/EvernoteSpotlightImporter:  dlopen(/Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightI mporter.mdimporter/Contents/MacOS/EvernoteSpotlightImporter, 262): Library not loaded: @rpath/ENSharedUtilities.framework/Versions/A/ENSharedUtilities

         Referenced from: /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/EvernoteSpotlightImporter

         Reason: no suitable image found.  Did find:

        /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/../../../../../Frameworks//ENSharedUtilities.framewor k/Versions/A/ENSharedUtilities: open() failed with errno=1

        Mar 11 22:18:37 Mailbox (Beta): Logger instance installed

        Mar 11 22:18:37 Mailbox (Beta): Logger instance installed

        Mar 11 22:18:37 Mailbox (Beta): Logger instance installed

        Mar 11 22:18:42 Mailbox (Beta): Displaying item TUUID_1495176332415233230

        Mar 11 22:18:42 Mailbox (Beta): Marking Deferred Item TUUID_1495176332415233230 as read

        Mar 11 22:18:42 Mailbox (Beta): Displaying item TUUID_1495176332415233230

        Mar 11 22:18:42 Mailbox (Beta): Displaying item TUUID_1495176332415233230

        Mar 11 22:18:42 Mailbox (Beta): Displaying item TUUID_1495176332415233230

        Mar 11 22:18:49 Mailbox (Beta): Displaying item TUUID_1488217956233899454

        Mar 13 11:14:29 mdworker: Error loading /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/EvernoteSpotlightImporter:  dlopen(/Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightI mporter.mdimporter/Contents/MacOS/EvernoteSpotlightImporter, 262): Library not loaded: @rpath/ENSharedUtilities.framework/Versions/A/ENSharedUtilities

         Referenced from: /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/EvernoteSpotlightImporter

         Reason: no suitable image found.  Did find:

        /Applications/Evernote.app/Contents/Library/Spotlight/EvernoteSpotlightImporter .mdimporter/Contents/MacOS/../../../../../Frameworks//ENSharedUtilities.framewor k/Versions/A/ENSharedUtilities: open() failed with errno=1

     

     

    Loaded kernel extensions

     

     

        at.obdev.nke.LittleSnitch (4234)

        com.Logitech.Control Center.HID Driver (3.9.1)

        com.Logitech.Unifying.HID Driver (1.3.1)

        com.TrustedData.driver.VendorSpecificType00 (1.7.0)

        com.attotech.driver.ATTOiSCSI (3.4.1b1)

        com.drobo.SCSI.ThunderBolt (1.1 [70504])

        com.eset.kext.esets_kac (600.01.40f01)

        com.eset.kext.esets_pfw (600.01.40f01)

        com.karios.driver.DuetDisplay (1)

        com.techsmith.TACC (1.0.2)

     

     

    System services loaded

     

     

        at.obdev.littlesnitchd

        com.apple.watchdogd

        com.attotech.iscsid

        com.barebones.authd

        com.bjango.istatmenusdaemon

        com.datarobotics.ddservice64d

        com.datarobotics.ddserviced

        com.eset.esets_daemon

        com.fitbit.galileod

        com.google.keystone.daemon

        com.micromat.TechToolProDaemon

        com.microsoft.office.licensing.helper

        com.oracle.java.Helper-Tool

        com.oracle.java.JavaUpdateHelper

        com.teamviewer.Helper

        org.gpgtools.gpgmail.uuid-patcher

        org.macosforge.xquartz.privileged_startx

        org.wireshark.ChmodBPF

     

     

    System services disabled

     

     

        com.apple.mrt

     

     

    Login services loaded

     

     

        at.obdev.LittleSnitchUIAgent

        com.Logitech.Control Center.Daemon

        com.adobe.AAM.Scheduler-1.0

        com.adobe.ARM.UUID

        com.adobe.AdobeCreativeCloud

        com.apple.mrt.uiagent

        com.binaryfruit.DriveDxLoginItemHelper

        com.bjango.istatmenusagent

        com.bjango.istatmenusnotifications

        com.citrix.AuthManager_Mac

        com.citrix.ReceiverHelper

        com.citrix.ServiceRecords

        com.google.keystone.system.agent

        com.junecloud.mac.Deliveries.Launcher

        com.micromat.TechToolProAgent

        com.oracle.java.Java-Updater

        com.paragon.ntfs.trial

        com.paragon.updater

        com.pushbullet.macapp-notifications

        com.spotify.webhelper

        com.valvesoftware.steamclean

        de.metaquark.appfresh

        org.gpgtools.Libmacgpg.xpc

        org.gpgtools.gpgmail.enable-bundles

        org.gpgtools.gpgmail.updater

        org.gpgtools.gpgmail.user-uuid-patcher

        org.gpgtools.macgpg2.fix

        org.gpgtools.macgpg2.shutdown-gpg-agent

        org.gpgtools.macgpg2.updater

        org.macosforge.xquartz.startx

     

     

    Login services disabled

     

     

        com.microsoft.OneDriveLauncher

     

     

    User services loaded

     

     

        com.valvesoftware.steam.ipctool

     

     

    User services disabled

     

     

        com.microsoft.OneDriveLauncher

     

     

    Startup items

     

     

        /Library/StartupItems/tap/StartupParameters.plist

        /Library/StartupItems/tap/tap

        /Library/StartupItems/tun/StartupParameters.plist

        /Library/StartupItems/tun/tun

     

     

    Global login items

     

     

        /Applications/ESET Cyber Security Pro.app

     

     

    User login items

     

     

        duet

        - /Applications/Duet.app

        Flux

        - /Applications/Flux.app

        Steam

        - /Applications/Steam.app

        iTunesHelper

        - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

        Bartender

        - /Applications/Bartender.app

        Google Chrome

        - /Applications/Google Chrome.app

        BetterSnapTool

        - /Applications/BetterSnapTool.app

        CrashPlan menu bar

        - /Applications/CrashPlan.app/Contents/Helpers/CrashPlan menu bar.app

        Dropbox

        - /Applications/Dropbox.app

        VMware Fusion Start Menu

        - /Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app

        GeekTool Helper

        - /Applications/GeekTool.app/Contents/PlugIns/GeekTool.prefPane/Contents/Resource s/GeekTool Helper.app

        Google Drive

        - /Applications/Google Drive.app

        Itsycal

        - /Applications/Itsycal.app

        Fitbit Connect Menubar Helper

        - /Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app

        DDAssist

        - /Applications/Drobo Dashboard.app/Contents/Resources/DDAssist.app

        CrossOver CD Helper

        - /Applications/CrossOver.app/Contents/Resources/CrossOver CD Helper.app

        HazelHelper

        - /Library/PreferencePanes/Hazel.prefPane/Contents/MacOS/HazelHelper.app

        ESET Cyber Security Pro

        - /Applications/ESET Cyber Security Pro.app

     

     

    iCloud errors

     

     

        bird 173

        cloudd 92

        accountsd 1

        Deliveries 1

     

     

    Restricted files: 178

     

     

    Data packages

     

     

        /Users/USER/Library/Mobile Documents/62UF8HAVJA~com~creaceed~mas~prizmo2/Documents/Business Card Sample.pzdoc

        /Users/USER/Library/Mobile Documents/62UF8HAVJA~com~creaceed~mas~prizmo2/Documents/Regular Text Sample.pzdoc

        /Users/USER/Library/Mobile Documents/62UF8HAVJA~com~creaceed~mas~prizmo2/Documents/Image Extraction Sample.pzdoc

        /Users/USER/Library/Mobile Documents/62UF8HAVJA~com~creaceed~mas~prizmo2/Documents/Image.pzdoc

     

     

    Contents of /Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist

        - mod date: Jan  7 22:10:32 2015

        - checksum: 2014742307

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>at.obdev.LittleSnitchUIAgent</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Little Snitch/Little Snitch Agent.app/Contents/MacOS/Little Snitch Agent</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.bjango.istatmenusagent.plist

        - mod date: Oct 23 20:38:00 2014

        - checksum: 1701899968

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.bjango.istatmenusagent</string>

        <key>Program</key>

        <string>/Library/Application Support/iStat Menus 5/iStatMenusAgent.app/Contents/MacOS/iStatMenusAgent</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.bjango.istatmenusnotifications.plist

        - mod date: Oct 23 20:38:00 2014

        - checksum: 3879995847

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.bjango.istatmenusnotifications</string>

        <key>Program</key>

        <string>/Library/Application Support/iStat Menus 5/iStat Menus Notifications.app/Contents/MacOS/iStat Menus Notifications</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.micromat.TechToolProAgent.plist

        - mod date: Oct 18 16:33:31 2014

        - checksum: 3739071072

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>RunAtLoad</key>

        <true/>

        <key>KeepAlive</key>

        <dict>

        <key>OtherJobEnabled</key>

        <dict>

        <key>com.apple.loginwindow</key>

        <true/>

        </dict>

        </dict>

        <key>Label</key>

        <string>com.micromat.TechToolProAgent</string>

        <key>Program</key>

        <string>/Library/PreferencePanes/TechTool Protection.prefPane/Contents/PlugIns/TechToolProAgent.app/Contents/MacOS/TechTo olProAgent</string>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

        - mod date: Oct 18 15:13:14 2014

        - checksum: 2523376749

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.oracle.java.Java-Updater</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

        <string>-bgcheck</string>

        </array>

        <key>StandardErrorPath</key>

        <string>/dev/null</string>

        <key>StandardOutPath</key>

        <string>/dev/null</string>

        <key>StartCalendarInterval</key>

        <dict>

        <key>Hour</key>

        <integer>15</integer>

        <key>Minute</key>

        <integer>14</integer>

        <key>Weekday</key>

        <integer>7</integer>

        </dict>

        </dict>

     

     

        ...and 1 more line(s)

     

     

    Contents of /Library/LaunchAgents/com.paragon.updater.plist

        - mod date: Oct 31 10:52:50 2014

        - checksum: 962844124

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>StartInterval</key>

        <integer>86400</integer>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Application Support/Paragon Updater/Paragon Updater.app/Contents/MacOS/Paragon Updater</string>

        <string>--check</string>

        <string>--delay=30</string>

        </array>

        <key>Label</key>

        <string>com.paragon.updater</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

        - mod date: Aug  8 02:34:37 2014

        - checksum: 1602219417

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.teamviewer.teamviewer</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

        <string>-RunAsAgent</string>

        <string>YES</string>

        </array>

        <key>WorkingDirectory</key>

        <string>/Applications/TeamViewer.app/Contents/MacOS/</string>

        <key>RunAtLoad</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

        <key>Disabled</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

        - mod date: Aug 22 10:30:07 2014

        - checksum: 2466887275

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.teamviewer.desktop</string>

        <key>LimitLoadToSessionType</key>

        <array>

        <string>LoginWindow</string>

        <string>Aqua</string>

        </array>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>

        <string>-RunAsAgent</string>

        <string>YES</string>

        <string>-Module</string>

        <string>Full</string>

        </array>

        <key>WorkingDirectory</key>

        <string>/Applications/TeamViewer.app/Contents/Helpers/</string>

        <key>RunAtLoad</key>

        <true/>

        <key>KeepAlive</key>

        <true/>

     

     

        ...and 4 more line(s)

     

     

    Contents of /Library/LaunchAgents/org.gpgtools.Libmacgpg.xpc.plist

        - mod date: Feb  6 20:51:29 2015

        - checksum: 2633516353

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableTransactions</key>

        <true/>

        <key>KeepAlive</key>

        <false/>

        <key>Label</key>

        <string>org.gpgtools.Libmacgpg.xpc</string>

        <key>MachServices</key>

        <dict>

        <key>org.gpgtools.Libmacgpg.xpc_OpenStep</key>

        <true/>

        </dict>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Application Support/GPGTools/org.gpgtools.Libmacgpg.xpc</string>

        </array>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.enable-bundles.plist

        - mod date: Feb  7 16:27:10 2015

        - checksum: 4256729205

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>org.gpgtools.gpgmail.enable-bundles</string>

        <key>ProgramArguments</key>

        <array>

         <string>/Library/Application Support/GPGTools/uuid-patcher</string>

         <string>enable-bundles</string>

          </array>

        <key>RunAtLoad</key>

        <true/>

        <key>KeepAlive</key>

        <false/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.patch-uuid-user.plist

        - mod date: Feb  7 16:27:10 2015

        - checksum: 2367346596

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>org.gpgtools.gpgmail.user-uuid-patcher</string>

        <key>Program</key>

        <string>/Library/Application Support/GPGTools/uuid-patcher</string>

        <key>RunAtLoad</key>

        <true/>

        <key>KeepAlive</key>

        <false/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.updater.plist

        - mod date: Feb  7 16:27:08 2015

        - checksum: 1478458542

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <false/>

        <key>StartInterval</key>

        <integer>10800</integer>

        <key>Label</key>

        <string>org.gpgtools.gpgmail.updater</string>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/local/MacGPG2/libexec/MacGPG2_Updater.app/Contents/MacOS/MacGPG2_U pdater</string>

        <string>/Library/Application Support/GPGTools/GPGMail_Updater.app/Contents/MacOS/GPGMail_Updater</string>

        </array>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.fix.plist

        - mod date: Feb  6 22:46:33 2015

        - checksum: 3267088882

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <false/>

        <key>Label</key>

        <string>org.gpgtools.macgpg2.fix</string>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/local/MacGPG2/libexec/fixGpgHome</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.shutdown-gpg-agent.plist

        - mod date: Feb  6 22:46:33 2015

        - checksum: 3222670079

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

          <dict>

            <key>Label</key>

            <string>org.gpgtools.macgpg2.shutdown-gpg-agent</string>

            <key>Program</key>

            <string>/usr/local/MacGPG2/libexec/shutdown-gpg-agent</string>

            <key>RunAtLoad</key>

            <true/>

            <key>KeepAlive</key>

            <dict>

              <key>SuccessfulExit</key>

              <true/>

            </dict>

            <key>ExitTimeOut</key>

            <integer>5</integer>

          </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.updater.plist

        - mod date: Feb  6 22:46:33 2015

        - checksum: 1275281879

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <false/>

        <key>StartInterval</key>

        <integer>10800</integer>

        <key>Label</key>

        <string>org.gpgtools.macgpg2.updater</string>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/local/MacGPG2/libexec/MacGPG2_Updater.app/Contents/MacOS/MacGPG2_U pdater</string>

        </array>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist

        - mod date: Aug 11 17:52:54 2014

        - checksum: 2451978492

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>org.macosforge.xquartz.startx</string>

        <key>ProgramArguments</key>

        <array>

        <string>/opt/X11/lib/X11/xinit/launchd_startx</string>

        <string>/opt/X11/bin/startx</string>

        <string>--</string>

        <string>/opt/X11/bin/Xquartz</string>

        </array>

        <key>Sockets</key>

        <dict>

        <key>org.macosforge.xquartz:0</key>

        <dict>

        <key>SecureSocketWithKey</key>

        <string>DISPLAY</string>

        </dict>

        </dict>

        <key>ServiceIPC</key>

        <true/>

        <key>EnableTransactions</key>

        <true/>

     

     

        ...and 2 more line(s)

     

     

    Contents of /Library/LaunchDaemons/at.obdev.littlesnitchd.plist

        - mod date: Jan  7 22:10:32 2015

        - checksum: 4174275850

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>at.obdev.littlesnitchd</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Little Snitch/Little Snitch Daemon.bundle/Contents/MacOS/Little Snitch Daemon</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StandardErrorPath</key>

        <string>/Library/Logs/LittleSnitchDaemon.log</string>

        <key>StandardOutPath</key>

        <string>/Library/Logs/LittleSnitchDaemon.log</string>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.attotech.iscsid.plist

        - mod date: Oct 18 15:11:20 2014

        - checksum: 4278398742

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>GroupName</key>

        <string>wheel</string>

        <key>KeepAlive</key>

        <dict>

        <key>SuccessfulExit</key>

        <true/>

        </dict>

        <key>Label</key>

        <string>com.attotech.iscsid</string>

        <key>LaunchOnlyOnce</key>

        <true/>

        <key>OnDemand</key>

        <false/>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/sbin/xtendsan/iscsid</string>

        <string>-d</string>

        <string>-J-Djava.security.policy=/usr/sbin/xtendsan/iscsid.sec</string>

        <string>-J-Dcom.attotech.iscsid.discovery.verbose=true</string>

        <string>--J-Dcom.attotech.iscsid.logLevel=VERBOSE</string>

        <string>--J-Dcom.attotech.iscsid.discovery.MaxRecvDataSegmentLength=512</string >

     

     

        ...and 12 more line(s)

     

     

    Contents of /Library/LaunchDaemons/com.barebones.authd.plist

        - mod date: Oct 18 16:26:07 2014

        - checksum: 3743051555

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>EnableTransactions</key>

        <true/>

        <key>Label</key>

        <string>com.barebones.authd</string>

        <key>Program</key>

        <string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

        </array>

        <key>Sockets</key>

        <dict>

        <key>com.barebones.authd.socket</key>

        <dict>

        <key>SockPathMode</key>

        <integer>438</integer>

        <key>SockPathName</key>

        <string>/var/tmp/com.barebones.authd.socket</string>

        </dict>

        </dict>

        </dict>

     

     

        ...and 1 more line(s)

     

     

    Contents of /Library/LaunchDaemons/com.bjango.istatmenusdaemon.plist

        - mod date: Oct 23 20:38:00 2014

        - checksum: 3935573610

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>KeepAlive</key>

        <true/>

        <key>Label</key>

        <string>com.bjango.istatmenusdaemon</string>

        <key>Program</key>

        <string>/Library/Application Support/iStat Menus 5/iStatMenusDaemon</string>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.crashplan.engine.plist

        - mod date: Jan 13 22:25:16 2015

        - checksum: 757054163

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.crashplan.engine</string>

        <key>UserName</key>

        <string>root</string>

        <key>GroupName</key>

        <string>wheel</string>

        <key>Nice</key>

        <integer>20</integer>

        <key>KeepAlive</key>

        <true/>

        <key>OnDemand</key>

        <false/>

        <key>RunAtLoad</key>

        <true/>

        <key>AbandonProcessGroup</key>

        <true/>

        <key>WorkingDirectory</key>

        <string>/Applications/CrashPlan.app/Contents/Resources/Java</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/CrashPlan.app/Contents/MacOS/CrashPlanService</string>

     

     

        ...and 26 more line(s)

     

     

    Contents of /Library/LaunchDaemons/com.datarobotics.ddservice64d.plist

        - mod date: Oct 16 18:14:02 2014

        - checksum: 1751270588

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.datarobotics.ddservice64d</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Application Support/Data Robotics/Drobo Dashboard/DDService64d</string>

        </array>

        <key>ServiceIPC</key>

        <false/>

        <key>OnDemand</key>

        <false/>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.datarobotics.ddserviced.plist

        - mod date: Oct 16 18:14:02 2014

        - checksum: 2807134579

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.datarobotics.ddserviced</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/Application Support/Data Robotics/Drobo Dashboard/DDServiced</string>

        </array>

        <key>ServiceIPC</key>

        <false/>

        <key>OnDemand</key>

        <false/>

        <key>RunAtLoad</key>

        <true/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/com.eset.esets_daemon.plist

        - mod date: Oct 20 14:33:12 2014

        - checksum: 2980619549

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.eset.esets_daemon</string>

        <key>Program</key>

        <string>/Applications/.esets/Contents/MacOS/esets_ctl</string>

        <key>RunAtLoad</key>

        <true/>

        <key>RootDirectory</key>

        <string>/</string>

        <key>KeepAlive</key>

        <false/>

        <key>AbandonProcessGroup</key>

        <false/>

        <key>ExitTimeOut</key>

        <integer>65</integer>

        <key>SoftResourceLimits</key>

        <dict>

        <key>NumberOfFiles</key>

        <integer>1024</integer>

        </dict>

        <key>HardResourceLimits</key>

        <dict>

     

     

        ...and 5 more line(s)

     

     

    Contents of /Library/LaunchDaemons/com.fitbit.galileod.plist

        - mod date: Oct 22 06:34:04 2013

        - checksum: 333804614

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Program</key>

        <string>/usr/local/bin/galileod</string>

        <key>ProgramArguments</key>

        <array>

        <string>/usr/local/bin/galileod</string>

        </array>

        <key>Label</key>

        <string>com.fitbit.galileod</string>

        <key>UserName</key>

        <string>root</string>

        <key>GroupName</key>

        <string>daemon</string>

        <key>InitGroups</key>

        <true/>

        <key>OnDemand</key>

        <false/>

        <key>ServiceIPC</key>

        <true/>

        <key>Sockets</key>

        <dict>

        <key>UserClients</key>

     

     

        ...and 27 more line(s)

     

     

    Contents of /Library/LaunchDaemons/com.micromat.TechToolProDaemon.plist

        - mod date: Oct 18 16:33:31 2014

        - checksum: 3183027065

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.micromat.TechToolProDaemon</string>

        <key>StartInterval</key>

        <integer>5</integer>

        <key>RunAtLoad</key>

        <false/>

        <key>OnDemand</key>

        <false/>

        <key>KeepAlive</key>

        <dict>

        <key>OtherJobEnabled</key>

        <dict>

        <key>com.apple.loginwindow</key>

        <true/>

        <key>com.apple.WindowServer</key>

        <true/>

        <key>com.apple.windowserver.active</key>

        <true/>

        </dict>

        </dict>

        <key>LowPriorityIO</key>

     

     

        ...and 11 more line(s)

     

     

    Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

        - mod date: Aug  8 02:34:37 2014

        - checksum: 2586050363

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Disabled</key>

        <true/>

        <key>Label</key>

        <string>com.teamviewer.service</string>

        <key>KeepAlive</key>

        <true/>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

        <string>-Module</string>

        <string>Full</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>WorkingDirectory</key>

        <string>/Applications/TeamViewer.app/Contents/MacOS</string>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/org.gpgtools.gpgmail.patch-uuid.plist

        - mod date: Feb  7 16:27:10 2015

        - checksum: 4206690072

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>org.gpgtools.gpgmail.uuid-patcher</string>

        <key>Program</key>

        <string>/Library/Application Support/GPGTools/uuid-patcher</string>

        <key>RunAtLoad</key>

        <true/>

        <key>KeepAlive</key>

        <false/>

        </dict>

        </plist>

     

     

    Contents of /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist

        - mod date: Oct 18 23:08:33 2014

        - checksum: 1346761329

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>org.wireshark.ChmodBPF</string>

        <key>RunAtLoad</key>

        <true/>

        <key>Program</key>

        <string>/Library/Application Support/Wireshark/ChmodBPF/ChmodBPF</string>

        </dict>

        </plist>

     

     

    Contents of /System/Library/LaunchAgents/com.paragon.NTFS.notify.plist

        - mod date: Oct 31 10:53:00 2014

        - checksum: 3292335405

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.paragon.ntfs.trial</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Library/PreferencePanes/NTFSforMacOSX.prefPane/Contents/MacOS/notifica tor</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        </dict>

        </plist>

     

     

    Contents of /private/etc/hosts

        - mod date: Dec  4 12:27:10 2014

        - checksum: 2864788327

     

     

        127.0.0.1 localhost

        255.255.255.255 broadcasthost

        ::1             localhost

     

     

    Contents of /private/etc/ssh_config

        - mod date: Oct 18 23:11:37 2014

        - checksum: 2841432291

     

     

         Host *

           SendEnv LANG LC_*

        Host *

            XAuthLocation /opt/X11/bin/xauth

     

     

    Contents of /private/etc/sshd_config

        - mod date: Oct 18 23:11:37 2014

        - checksum: 2518667249

     

     

        SyslogFacility AUTHPRIV

        AuthorizedKeysFile .ssh/authorized_keys

        UsePrivilegeSeparation sandbox # Default for new installations.

        AcceptEnv LANG LC_*

        Subsystem sftp /usr/libexec/sftp-server

        XAuthLocation /opt/X11/bin/xauth

     

     

    Contents of /private/etc/syslog.conf

        - mod date: Jan  7 22:19:43 2015

        - checksum: 755542752

     

     

        install.* @127.0.0.1:32376

        *usbmux* /dev/null

     

     

    Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

        - mod date: Oct 18 16:36:33 2014

        - checksum: 394026997

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.adobe.ARM.UUID</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

        <string>semi-auto</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StartInterval</key>

        <integer>12600</integer>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

        - mod date: Nov  2 08:28:23 2014

        - checksum: 4116814193

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.adobe.ARM.UUID</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

        <string>semi-auto</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>StartInterval</key>

        <integer>12600</integer>

        </dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.spotify.webhelper.plist

        - mod date: Feb 21 11:21:39 2015

        - checksum: 3159161532

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

         <key>Label</key>

         <string>com.spotify.webhelper</string>

         <key>KeepAlive</key>

         <dict>

          <key>NetworkState</key>

          <true/>

         </dict>

         <key>RunAtLoad</key>

         <true/>

         <key>Program</key>

         <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

         <key>SpotifyPath</key>

         <string>/Applications/Spotify.app</string></dict>

        </plist>

     

     

    Contents of Library/LaunchAgents/com.valvesoftware.steamclean.plist

        - mod date: Mar  9 22:35:52 2015

        - checksum: 1719906726

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>com.valvesoftware.steamclean</string>

        <key>Program</key>

        <string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>

        <key>ProgramArguments</key>

        <array>

        <string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>

        <string>Public</string>

        </array>

        <key>RunAtLoad</key>

        <true/>

        <key>SteamContentPaths</key>

        <array>

        <string>/Users/USER/Library/Application Support/Steam/SteamApps</string>

        </array>

        <key>ThrottleInterval</key>

        <integer>60</integer>

        <key>WatchPaths</key>

        <array>

        <string>/Applications/Steam.app</string>

        </array>

     

     

        ...and 2 more line(s)

     

     

    Contents of Library/LaunchAgents/de.metaquark.appfresh.plist

        - mod date: Nov  1 09:45:58 2014

        - checksum: 884952174

     

     

        <?xml version="1.0" encoding="UTF-8"?>

        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

        <plist version="1.0">

        <dict>

        <key>Label</key>

        <string>de.metaquark.appfresh</string>

        <key>LimitLoadToSessionType</key>

        <string>Aqua</string>

        <key>LowPriorityIO</key>

        <true/>

        <key>Nice</key>

        <integer>10</integer>

        <key>ProgramArguments</key>

        <array>

        <string>/Applications/AppFresh.app/Contents/Resources/AppFreshDaemon</string>

        <string>/Applications/AppFresh.app</string>

        </array>

        <key>StartInterval</key>

        <integer>604800</integer>

        </dict>

        </plist>

     

     

    Bad plists

     

     

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Common/Colors.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Science/Circuit Engineering.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/ERD.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/FlowChart.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Garrett IA.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/Konigi Wireframes.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-General.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-Sequence.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-State.gstencil/data.plist

        Library/Containers/com.omnigroup.OmniGraffle6/Data/Library/Application Support/The Omni Group/OmniGraffle/Stencils/Software/UML-UseCase.gstencil/data.plist

     

     

    Library paths

     

     

        /Applications/Adobe Dreamweaver CC 2014/Configuration/browsers/webkit/WebKitDw.dylib

        /Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

        /Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

        /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

        /Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib

        /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib

        /Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib

        /Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib

        /Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib

        /Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P6/axlib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/IMSLib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/P7Native.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib

        /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib

        /Applications/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib

        /Applications/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib

        /Applications/Utilities/Adobe Application Manager/P7/axlibv7.dylib

        /Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib

        /Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib

        /Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib

        /Applications/Utilities/Adobe Creative Cloud/ACC/C3ContainerBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib

        /Applications/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/BehancePanel/BehancePanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/CEF/Chromium Embedded Framework.framework/Libraries/libcef.dylib

        /Applications/Utilities/Adobe Creative Cloud/CEF/libplugin_carbon_interpose.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/ANSClient.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/Analytics.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/C3Prefs.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/CmdCntr.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/ElevationManager.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/LocManager.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/NotificationManager.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/VulcanMessage5.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreExt/VulcanWrapper.dylib

        /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib

        /Applications/Utilities/Adobe Creative Cloud/HEX/HEX.dylib

        /Applications/Utilities/Adobe Creative Cloud/HomePanel/HomePanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib

        /Applications/Utilities/Adobe Creative Cloud/NEX/NEX.dylib

        /Applications/Utilities/Adobe Creative Cloud/NEX/NEXUILibrary.dylib

        /Applications/Utilities/Adobe Creative Cloud/Utils/AdobePIM.dylib

        /Applications/Utilities/Adobe Creative Cloud/core/NXGCore.dylib

        /Library/Application Support/Adobe/APE/3.4/adbeapecore.framework/Versions/A/Libraries/WebKit.dylib

        /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/adobe_caps.dylib

        /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/adobe_oobelib.dylib

        /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/adobe_upgrade.dylib

        /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/axlib.dylib

        /Library/Application Support/Adobe/CEPServiceManager4/lib/CSXS-Installer-Hook.dylib

        /Library/Application Support/Adobe/CEPServiceManager4/lib/ServiceManager-Launcher.dylib

        /Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86Extn.dyl ib

        /Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86_64Extn. dylib

        /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.7.771/_platform_specific/mac_x64/libwidev inecdm.dylib

        /Users/USER/jagexcache/runescape/LIVE/libhw3d.dylib

        /Users/USER/jagexcache/runescape/LIVE/libjaclib.dylib

        /Users/USER/jagexcache/runescape/LIVE/libjaggl.dylib

        /Users/USER/jagexcache/runescape/LIVE/libsw3d.dylib

        /opt/X11/lib/libAppleWM.7.dylib

        /opt/X11/lib/libFS.6.dylib

        /opt/X11/lib/libGL.1.dylib

        /opt/X11/lib/libGLU.1.dylib

        /opt/X11/lib/libICE.6.dylib

        /opt/X11/lib/libOSMesa.8.dylib

        /opt/X11/lib/libOpenVG.1.dylib

        /opt/X11/lib/libSM.6.dylib

        /opt/X11/lib/libX11-xcb.1.dylib

        /opt/X11/lib/libX11.6.dylib

        /opt/X11/lib/libXRes.1.dylib

        /opt/X11/lib/libXTrap.6.dylib

        /opt/X11/lib/libXau.6.dylib

        /opt/X11/lib/libXaw3d.8.dylib

        /opt/X11/lib/libXaw6.6.dylib

        /opt/X11/lib/libXaw7.7.dylib

        /opt/X11/lib/libXaw8.8.dylib

        /opt/X11/lib/libXcomposite.1.dylib

        /opt/X11/lib/libXcursor.1.dylib

        /opt/X11/lib/libXdamage.1.dylib

        /opt/X11/lib/libXdmcp.6.dylib

        /opt/X11/lib/libXevie.1.dylib

        /opt/X11/lib/libXext.6.dylib

        /opt/X11/lib/libXfixes.3.dylib

        /opt/X11/lib/libXfont.1.dylib

        /opt/X11/lib/libXfontcache.1.dylib

        /opt/X11/lib/libXft.2.dylib

        /opt/X11/lib/libXi.6.dylib

        /opt/X11/lib/libXinerama.1.dylib

        /opt/X11/lib/libXmu.6.dylib

        /opt/X11/lib/libXmuu.1.dylib

        /opt/X11/lib/libXp.6.dylib

        /opt/X11/lib/libXplugin.1.dylib

        /opt/X11/lib/libXpm.4.dylib

        /opt/X11/lib/libXrandr.2.dylib

        /opt/X11/lib/libXrender.1.dylib

        /opt/X11/lib/libXss.1.dylib

        /opt/X11/lib/libXt.6.dylib

        /opt/X11/lib/libXtst.6.dylib

        /opt/X11/lib/libXv.1.dylib

        /opt/X11/lib/libXvMC.1.dylib

        /opt/X11/lib/libXvMCW.1.dylib

        /opt/X11/lib/libXxf86misc.1.dylib

        /opt/X11/lib/libXxf86vm.1.dylib

        /opt/X11/lib/libcairo-script-interpreter.2.dylib

        /opt/X11/lib/libcairo.2.dylib

        /opt/X11/lib/libdmx.1.dylib

        /opt/X11/lib/libfontconfig.1.dylib

        /opt/X11/lib/libfontenc.1.dylib

        /opt/X11/lib/libfreetype.6.dylib

        /opt/X11/lib/libglut.3.dylib

        /opt/X11/lib/libpixman-1.0.dylib

        /opt/X11/lib/libpng.3.dylib

        /opt/X11/lib/libpng12.0.dylib

        /opt/X11/lib/libpng14.14.dylib

        /opt/X11/lib/libpng15.15.dylib

        /opt/X11/lib/libxcb-composite.0.dylib

        /opt/X11/lib/libxcb-cursor.0.dylib

        /opt/X11/lib/libxcb-damage.0.dylib

        /opt/X11/lib/libxcb-dpms.0.dylib

        /opt/X11/lib/libxcb-dri2.0.dylib

        /opt/X11/lib/libxcb-dri3.0.dylib

        /opt/X11/lib/libxcb-ewmh.2.dylib

        /opt/X11/lib/libxcb-glx.0.dylib

        /opt/X11/lib/libxcb-icccm.4.dylib

        /opt/X11/lib/libxcb-image.0.dylib

        /opt/X11/lib/libxcb-keysyms.1.dylib

        /opt/X11/lib/libxcb-present.0.dylib

        /opt/X11/lib/libxcb-randr.0.dylib

        /opt/X11/lib/libxcb-record.0.dylib

        /opt/X11/lib/libxcb-render-util.0.dylib

        /opt/X11/lib/libxcb-render.0.dylib

        /opt/X11/lib/libxcb-res.0.dylib

        /opt/X11/lib/libxcb-screensaver.0.dylib

        /opt/X11/lib/libxcb-shape.0.dylib

        /opt/X11/lib/libxcb-shm.0.dylib

        /opt/X11/lib/libxcb-sync.1.dylib

        /opt/X11/lib/libxcb-util.1.dylib

        /opt/X11/lib/libxcb-xevie.0.dylib

        /opt/X11/lib/libxcb-xf86dri.0.dylib

        /opt/X11/lib/libxcb-xfixes.0.dylib

        /opt/X11/lib/libxcb-xinerama.0.dylib

        /opt/X11/lib/libxcb-xkb.1.dylib

        /opt/X11/lib/libxcb-xprint.0.dylib

        /opt/X11/lib/libxcb-xtest.0.dylib

        /opt/X11/lib/libxcb-xv.0.dylib

        /opt/X11/lib/libxcb-xvmc.0.dylib

        /opt/X11/lib/libxcb.1.dylib

        /opt/X11/lib/libxkbfile.1.dylib

        /opt/X11/lib/libxkbui.1.dylib

        /opt/X11/lib/libxshmfence.1.dylib

        /usr/lib/libUFSDNTFS.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/lib4758cca.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libaep.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libatalla.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libcapi.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libchil.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libcswift.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libgmp.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libgost.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libnuron.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libpadlock.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libsureware.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/engines/libubsec.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/libcrypto.1.0.0.dylib

        /usr/local/Cellar/openssl/1.0.1j/lib/libssl.1.0.0.dylib

        /usr/local/Library/Homebrew/test/mach/fat.dylib

        /usr/local/Library/Homebrew/test/mach/i386.dylib

        /usr/local/Library/Homebrew/test/mach/x86_64.dylib

        /usr/local/MacGPG2/lib/libasprintf.0.dylib

        /usr/local/MacGPG2/lib/libassuan.0.dylib

        /usr/local/MacGPG2/lib/libcharset.1.dylib

        /usr/local/MacGPG2/lib/libcurl.4.dylib

        /usr/local/MacGPG2/lib/libgcrypt.20.dylib

        /usr/local/MacGPG2/lib/libgmp.10.dylib

        /usr/local/MacGPG2/lib/libgnutls.28.dylib

        /usr/local/MacGPG2/lib/libgpg-error.0.dylib

        /usr/local/MacGPG2/lib/libhogweed.2.5.dylib

        /usr/local/MacGPG2/lib/libiconv.2.dylib

        /usr/local/MacGPG2/lib/libintl.8.dylib

        /usr/local/MacGPG2/lib/libksba.8.dylib

        /usr/local/MacGPG2/lib/liblzma.5.dylib

        /usr/local/MacGPG2/lib/libnettle.4.7.dylib

        /usr/local/MacGPG2/lib/libpth.20.0.27.dylib

        /usr/local/MacGPG2/lib/libtasn1.6.dylib

        /usr/local/MacGPG2/lib/libusb-0.1.4.dylib

        /usr/local/MacGPG2/lib/libusb-1.0.0.dylib

        /usr/local/MacGPG2/lib/libz.1.2.8.dylib

        /usr/local/lib/graphviz/libgvplugin_core.6.dylib

        /usr/local/lib/graphviz/libgvplugin_dot_layout.6.dylib

        /usr/local/lib/graphviz/libgvplugin_neato_layout.6.dylib

        /usr/local/lib/graphviz/libgvplugin_pango.6.dylib

        /usr/local/lib/graphviz/libgvplugin_quartz.6.dylib

        /usr/local/lib/graphviz/libgvplugin_xlib.6.dylib

        /usr/local/lib/graphviz/tcl/libtcldot.0.dylib

        /usr/local/lib/graphviz/tcl/libtclplan.0.dylib

        /usr/local/lib/graphviz/tcl/libtkspline.0.dylib

        /usr/local/lib/libcdt.5.dylib

        /usr/local/lib/libcgraph.6.dylib

        /usr/local/lib/libgvc.6.dylib

        /usr/local/lib/libgvpr.2.dylib

        /usr/local/lib/libpathplan.4.dylib

        /usr/local/lib/libxdot.4.dylib

        /usr/local/ssl/lib/libcrypto.1.0.0.dylib

        /usr/local/ssl/lib/libssl.1.0.0.dylib

     

     

    App extensions

     

     

        com.Monity.Widget

        com.bjango.iStatMini.iStat-Mini-Extension

        com.getdropbox.dropbox.garcon

        com.google.GoogleDrive.FinderSyncAPIExtension

        com.junecloud.mac.Deliveries.Add

        com.junecloud.mac.Deliveries.Today

        com.todoist.mac.Todoist.TodoistShare

        com.todoist.mac.Todoist.TodoistToday

        de.msmix.countdown.osx.widget

        org.samroth.Today-Scripts.Widget

     

     

    Installations

     

     

        Microsoft Remote Desktop: 2014-10-18, 2:15 PM

        BetterSnapTool: 2014-10-18, 2:15 PM

        inSSIDer: 2014-10-18, 2:15 PM

        LanScan Pro: 2014-10-18, 2:15 PM

        Sunrise: 2014-10-18, 2:14 PM

     

     

    Elapsed time (sec): 793

  • by Linc Davis,Helpful

    Linc Davis Linc Davis Mar 13, 2015 1:00 PM in response to Hitman247m
    Level 10 (207,990 points)
    Applications
    Mar 13, 2015 1:00 PM in response to Hitman247m

    This is some kind of Easter egg in one of the many third-party system modifications you installed. I have no way of knowing which one. If I were you, I would just ignore it. The worthless ESET product is slowing down and destabilizing the system, as it always does, but that wasn't the question.

  • by Hitman247m,

    Hitman247m Hitman247m Mar 13, 2015 2:03 PM in response to Linc Davis
    Level 1 (0 points)
    Mar 13, 2015 2:03 PM in response to Linc Davis

    Hi Linc,

     

    I appreciate the response.

     

    Do you know of anywhere where I can see a log of the verbose shutdown messages?

  • by Linc Davis,

    Linc Davis Linc Davis Mar 13, 2015 2:16 PM in response to Hitman247m
    Level 10 (207,990 points)
    Applications
    Mar 13, 2015 2:16 PM in response to Hitman247m

    If they're not in the system log, they're being generated by a kernel extension after the syslogd process has shut down and will not be saved at all.

  • by Hitman247m,

    Hitman247m Hitman247m Mar 13, 2015 2:19 PM in response to Linc Davis
    Level 1 (0 points)
    Mar 13, 2015 2:19 PM in response to Linc Davis

    In that case, is there a central location where there kernel extensions reside that I might dig through?

  • by Linc Davis,Solvedanswer

    Linc Davis Linc Davis Mar 13, 2015 5:17 PM in response to Hitman247m
    Level 10 (207,990 points)
    Applications
    Mar 13, 2015 5:17 PM in response to Hitman247m

    The following system modifications include at least one kernel extension:

     

        LittleSnitch

        Logitech Control Center

        Drobo

        iSCSI

        ESET

        DuetDisplay

        Snagit or Camtasia

    Any third-party software that doesn't install by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

    Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

    I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

    Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

    Back up all data before making any changes.

    You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

    If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

    Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

  • by Hitman247m,

    Hitman247m Hitman247m Mar 15, 2015 6:47 PM in response to Linc Davis
    Level 1 (0 points)
    Mar 15, 2015 6:47 PM in response to Linc Davis

    Thanks for your help, I'll look into this.

  • by HHove,

    HHove HHove May 8, 2015 2:32 AM in response to Hitman247m
    Level 1 (0 points)
    May 8, 2015 2:32 AM in response to Hitman247m

    Though it won't help directly identify the offending kernel extension, the text appears to be a quote from the 1964 film "Becket".  I've got it too.

    Looking at the KEXT list, we may have the com.Logitech.Unifying.HID Driver in common, so that may be the culprit! 

  • by pjslover,

    pjslover pjslover Jun 12, 2015 2:35 AM in response to HHove
    Level 1 (4 points)
    Desktops
    Jun 12, 2015 2:35 AM in response to HHove

    I had this problem, removed the logitech control panel using the remove software they provide and the problem went away. You would think a big legit company like logitech would NOT have junk like this buried in their code.....

  • by CoreAppl,

    CoreAppl CoreAppl Sep 6, 2015 9:14 AM in response to pjslover
    Level 1 (0 points)
    Sep 6, 2015 9:14 AM in response to pjslover

    You'd be surprised, pjslover, that this message isn't coming from Logitech but from /sbin/launchd itself, when an errant service doesn't cooperate during shutdown. In your case, Logitech's didn't, and then launchd fumed. You removed logitech, you placated launchd.

     

    This is hardly "junk". It's actually a rather funny easter egg referring to a quote from a 1964 movie (Google "Becket") which can really make you laugh, especially when you dig it up after hours of reverse engineering. Apple is a bigger company than Logitech, and looks like they have a sense of humor. Keep it up, Applytes (and bring back the fury of mobile_obliterator, while you're at it ). And grow a sense of humor, pjs.