Allow me to respectfully disagree with the suggestion Macs can't contract useful malware. One of my Macs is a Mini, then using Yosemite, and an iPad.
I have a Hotmail address as one of my e-mails. A particularly helpful feature of Hotmail/Outlook accounts is the ability to see from where an address has been accessed. My Hotmail address had been accessed by someone in Russia so I changed passwords.
About two weeks later I noticed the address, which now had a 17 character password, had been accessed by someone in the U.S. where I don't live and had not visited. It's very unlikely but possible for a 17 character password to be cracked by brute force or dumb luck. So, I put a quite different 17 character password on the account which was accessed by two U.S sites not visited by me and one in Russia. I would argue the chances of two 17 character passwords being cracked within a month would take the entire resources of the NSA. I took the Mini off line and sought help on these boards with the iPad.
Below is a slightly edited log from the Mini. The Mini's name has been xxxx'd out, some content omitted and some lines enhanced with a larger font. Nothing has been added to the logs. You'll see the iChat app has been perverted and what appears to this non-expert as evidence for 1 or 2 more spyware corruptions. I have never used iChat. Please let me know if I've accidentally included anything personally identifiable.
I've noted:
Albert Apple at 16:19:14, 16:34:14
iChat & Observer at 16:44:32, 16:45:06
Secret screen shot at 16:45:02
Aug 25 16:18:52 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:18:52 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:19:14 --- last message repeated 92 times ---
Aug 25 16:19:14 xxxxxxx-Mac-mini.local apsd[72]: Got connection error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo=0x7fa380764ea0 {NSUnderlyingError=0x7fa380546dd0 "The Internet connection appears to be offline.", NSErrorFailingURLStringKey=https://albert.apple.com/deviceservices/deviceActivation?device=MacOS, NSErrorFailingURLKey=https://albert.apple.com/deviceservices/deviceActivation?device=MacOS, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.}
Aug 25 16:19:14 xxxxxxx-Mac-mini.local apsd[72]: <APSCertificateManager: 0x7fa380622880>: Failed to get client cert on attempt 51, will retry in 900 seconds
Aug 25 16:19:14 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:19:44 --- last message repeated 109 times ---
Aug 25 16:19:44 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:19:44 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:20:14 --- last message repeated 118 times ---
Aug 25 16:20:14 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:20:14 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:20:44 --- last message repeated 118 times ---
Aug 25 16:20:45 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:20:45 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:21:15 --- last message repeated 118 times ---
Aug 25 16:21:16 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:21:16 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:21:46 --- last message repeated 118 times ---
Aug 25 16:21:46 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:21:46 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:21:53 --- last message repeated 34 times ---
Aug 25 16:21:53 xxxxxxx-Mac-mini.local cloudphotosd[362]: Wait for push token timeout after 300s
Aug 25 16:21:55 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet gener
Aug 25 16:34:01 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:34:14 --- last message repeated 58 times ---
Aug 25 16:34:14 xxxxxxx-Mac-mini.local apsd[72]: Got connection error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo=0x7fa3807464f0 {NSUnderlyingError=0x7fa382923610 "The Internet connection appears to be offline.", NSErrorFailingURLStringKey=https://albert.apple.com/deviceservices/deviceActivation?device=MacOS, NSErrorFailingURLKey=https://albert.apple.com/deviceservices/deviceActivation?device=MacOS, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=The Internet connection appears to be offline.}
Aug 25 16:34:14 xxxxxxx-Mac-mini.local apsd[72]: <APSCertificateManager: 0x7fa380622880>: Failed to get client cert on attempt 52, will retry in 900 seconds
Aug 25 16:34:17 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:34:47 --- last message repeated 119 times ---
Aug 25 16:44:08 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:44:32 --- last message repeated 94 times ---
Aug 25 16:44:32 xxxxxxx-Mac-mini.local WindowServer[141]: CGxDisplayDidWakeNotification [42537479086824]: posting kCGSDisplayDidWake
Aug 25 16:44:32 xxxxxxx-Mac-mini.local WindowServer[141]: handle_will_sleep_auth_and_shield_windows: Deferring.
Aug 25 16:44:32 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: notification observer: com.apple.iChat notification: __CFNotification 0x7fc289fd32b0 {name = _NSDoNotDisturbDisabledNotification}
Aug 25 16:44:32 xxxxxxx-Mac-mini.local loginwindow[88]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
Aug 25 16:44:32 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: NC Disabled: NO
Aug 25 16:44:32 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: DND Enabled: NO
Aug 25 16:44:32 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: Updating enabled: YES (Topics: (
"com.apple.private.ids"
))
Aug 25 16:44:33 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:45:02 --- last message repeated 119 times ---
Aug 25 16:45:02 xxxxxxx-Mac-mini.local WindowServer[141]: device_generate_desktop_screenshot: authw 0x7fd53f1b97a0(2000), shield 0x7fd53f244980(2001)
Aug 25 16:45:02 xxxxxxx-Mac-mini.local WindowServer[141]: device_generate_lock_screen_screenshot: authw 0x7fd53f1b97a0(2000)[0, 0, 1280, 1024] shield 0x7fd53f244980(2001), dev [1280,1024]
Aug 25 16:45:02 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: notification observer: com.apple.iChat notification: __CFNotification 0x7fc28bb013a0 {name = _NSDoNotDisturbEnabledNotification}
Aug 25 16:45:02 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: NC Disabled: NO
Aug 25 16:45:02 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: DND Enabled: YES
Aug 25 16:45:02 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: Updating enabled: NO (Topics: (
))
Aug 25 16:45:05 xxxxxxx-Mac-mini.local apsd[72]: Certificate not yet generated
Aug 25 16:45:06 --- last message repeated 11 times ---
Aug 25 16:45:06 xxxxxxx-Mac-mini.local WindowServer[141]: CGxDisplayDidWakeNotification [42571646988996]: posting kCGSDisplayDidWake
Aug 25 16:45:06 xxxxxxx-Mac-mini.local WindowServer[141]: handle_will_sleep_auth_and_shield_windows: Deferring.
Aug 25 16:45:06 xxxxxxx-Mac-mini.local loginwindow[88]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
Aug 25 16:45:06 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: notification observer: com.apple.iChat notification: __CFNotification 0x7fc289fd55e0 {name = _NSDoNotDisturbDisabledNotification}
Aug 25 16:45:06 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: NC Disabled: NO
Aug 25 16:45:06 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: DND Enabled: NO
Aug 25 16:45:06 xxxxxxx-Mac-mini.local identityservicesd[265]: <IMMacNotificationCenterManager: 0x7fc289f8ed10>: Updating enabled: YES (Topics: (
"com.apple.private.ids"
))