1 Start time: 02:16:47 05/24/15
2
3 Revision: 1320
4
5 Model Identifier: MacBookPro11,3
6 System Version: OS X 10.10.3 (14D136)
7 Kernel Version: Darwin 14.3.0
8 Time since boot: 49 minutes
9
10 UID: 501
11
12 System load
13
14 combined level = Bad
15 - battery level = Bad
16
17 FileVault 2
18
19 FileVault is On.
20
21 Energy (lifetime)
22
23 WindowServer (UID 88): 26.00
24 kernel_task (UID 0): 10.41
25
26 Memory (MB)
27
28 kernel_task (UID 0): 1030
29
30 Trust settings: admin 1, user 10
31
32 Listeners
33
34 cupsd: ipp
35 launchd: ssh
36
37 System caches/logs
38
39 2.4 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data
40
41 Diagnostic reports
42
43 2015-05-14 Asphalt 6 crash
44 2015-05-14 MPlayerX hang
45 2015-05-14 adb crash
46 2015-05-14 com.apple.WebKit.WebContent crash
47 2015-05-15 assetsd crash
48 2015-05-15 cloudd crash
49 2015-05-16 Creative Cloud crash
50 2015-05-16 adb crash
51 2015-05-17 Tomb Raider Underworld crash x3
52 2015-05-18 Wireshark crash
53 2015-05-19 LuxMark hang
54 2015-05-19 com.apple.WebKit.WebContent hang x3
55 2015-05-20 Wireshark crash
56 2015-05-22 assetsd crash x2
57 2015-05-23 FaceTime crash
58 2015-05-23 Finder crash*
59 2015-05-23 MPlayerX hang x2
60 2015-05-23 WacomTabletDriver crash x4
61 2015-05-23 discoveryd crash
62 2015-05-24 WacomTabletDriver crash x3
63 * Code injection
64
65 I/O errors
66
67 disk3: close: journal 0xffffff802c1d5c20, is invalid. aborting outstanding transactions 1
68 disk3: do_jnl_io: strategy err 0x6 1
69
70 Volumes
71
72 disk1: /
73
74 HID errors: 11
75
76 Kernel log
77
78 May 23 23:17:31 utun_start: ifnet_disable_output returned error 12
79 May 23 23:20:05 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
80 May 23 23:20:05 com.deterministicnetworks.driver.dne: WARNING: DNE: Registry not ready
81 May 23 23:20:58 utun_start: ifnet_disable_output returned error 12
82 May 24 00:05:15 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
83 May 24 00:05:17 Kext com.deterministicnetworks.driver.dne failed to load (0xdc0Couldn't alloc class "AppleThunderboltEDMSink"
84 May 24 00:05:17 Failed to load kext com.deterministicnetworks.driver.dne (error 0xdc00Couldn't alloc class "AppleThunderboltIPService"
85 May 24 00:05:51 utun_start: ifnet_disable_output returned error 12
86 May 24 00:07:21 Failed to open the file
87 May 24 00:11:40 Failed to open the file
88 May 24 00:16:40 Failed to open the file
89 May 24 00:18:30 Failed to open the file
90 May 24 00:20:12 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
91 May 24 00:20:12 com.deterministicnetworks.driver.dne: WARNING: DNE: Registry not ready
92 May 24 00:20:49 utun_start: ifnet_disable_output returned error 12
93 May 24 00:40:50 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
94 May 24 00:40:50 com.deterministicnetworks.driver.dne: WARNING: DNE: Registry not ready
95 May 24 00:40:51 USBF: 3.449 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again
96 May 24 00:41:39 utun_start: ifnet_disable_output returned error 12
97 May 24 01:23:20 considerRebuildOfPrelinkedKernel com.apple.kext.OSvKernDSPLib triggered rebuild
98 May 24 01:28:14 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
99 May 24 01:28:14 com.deterministicnetworks.driver.dne: WARNING: DNE: Registry not ready
100 May 24 01:28:15 USBF: 3.857 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again
101 May 24 01:28:15 USBF: 4.186 IOUSBCompositeDriver(CompositeDevice)::GetConfigDescriptor - GetFullConfigDescriptor(0) #2 returned NULL, trying ResetDevice and then trying again
102 May 24 01:41:08 utun_start: ifnet_disable_output returned error 12
103
104 System log
105
106 May 24 01:28:56 SocialPushAgent: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
107 May 24 01:29:11 airportd: _handleLinkEvent: WiFi is not powered. Resetting state variables.
108 May 24 01:40:40 configd: [0x7f8401d23640] [m]DNS query timeout (query time = 12.216411), [TE]
109 May 24 01:41:08 racoon: failed to bind to address fdce:3da4:177:493:e001:1ee0:fa56:597b[500] (Can't assign requested address).
110 May 24 01:41:08 racoon: failed to bind to address fdce:3da4:177:493:e001:1ee0:fa56:597b[500]: because interface address is/was not ready (flags 2).
111 May 24 01:41:08 racoon: failed to bind to address fdce:3da4:177:493:e001:1ee0:fa56:597b[4500] (Can't assign requested address).
112 May 24 01:41:08 racoon: failed to bind to address fdce:3da4:177:493:e001:1ee0:fa56:597b[4500]: because interface address is/was not ready (flags 2).
113 May 24 01:41:27 airportd: _handleLinkEvent: WiFi is not powered. Resetting state variables.
114 May 24 01:57:04 configd: [0x7f8401f25a60] [m]DNS query timeout (query time = 5.992173), [TE]
115 May 24 01:57:21 AppleCameraAssistant: DeviceEventHandler: ISP_PowerOffCamera error: 0xe00002c0
116 May 24 01:57:22 CalendarAgent: Stream 0x7fb612d6c810 is sending an event before being opened
117 May 24 01:57:31 fseventsd: Logging disabled completely for device:1: /Volumes/Recovery HD
118 May 24 01:57:46 configd: [0x7f8403920e70] [m]DNS query timeout (query time = 35.029628), [TE]
119 May 24 01:58:00 AddressBookSourceSync: Stream 0x7f8258c88090 is sending an event before being opened
120 May 24 01:58:42 AddressBookSourceSync: Stream 0x7fa8f26ba420 is sending an event before being opened
121 May 24 01:58:56 WindowServer: WSGetSurfaceInWindow : Invalid surface 804770707 for window 102
122 May 24 01:58:56 WindowServer: WSGetSurfaceInWindow : Invalid surface 804770707 for window 102
123 May 24 01:58:56 WindowServer: WSGetSurfaceInWindow : Invalid surface 804770707 for window 102
124 May 24 02:00:47 fseventsd: Logging disabled completely for device:1: /Volumes/Recovery HD
125 May 24 02:00:54 WindowServer: WSGetSurfaceInWindow : Invalid surface 814754076 for window 121
126 May 24 02:00:54 WindowServer: WSGetSurfaceInWindow : Invalid surface 814754076 for window 121
127 May 24 02:00:54 WindowServer: WSGetSurfaceInWindow : Invalid surface 814754076 for window 121
128 May 24 02:01:22 racoon: Phase 1 negotiation failed due to time up. f5ef3472a0bae0aa:0000000000000000
129 May 24 02:11:55 CalendarAgent: Stream 0x7fb615c12a40 is sending an event before being opened
130 May 24 02:16:36 loginwindow: ERROR | -[LWBuiltInScreenLockAuthLion closeAuthAndReset:] | Attempted to remove an observer when not observing
131
132 launchd log
133
134 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted
135 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted
136 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted
137 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted
138 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted
139 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted
140 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
141 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
142 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
143 May 24 00:05:20 com.apple.xpc.launchd.domain.pid.SecurityAgent.235: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
144 May 24 00:20:15 com.apple.xpc.launchd.domain.user.loginwindow.98.4294967295: Could not import service from caller: caller = WacomTabletDriv.226, service = com.wacom.WacomTouchDriver.188608, error = 134: Service cannot load in requested session
145 May 24 00:20:17 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.251, service = com.apple.photostream-agent, error = 119: Service is disabled
146 May 24 00:20:17 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.251, service = com.dayoneapp.dayone-agent, error = 119: Service is disabled
147 May 24 00:20:17 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.251, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled
148 May 24 00:20:17 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.251, service = com.tunabellysoftware.TemperatureGaugeHelper, error = 119: Service is disabled
149 May 24 00:40:52 com.apple.xpc.launchd.domain.user.loginwindow.98.4294967295: Could not import service from caller: caller = WacomTabletDriv.228, service = com.wacom.WacomTouchDriver.188608, error = 134: Service cannot load in requested session
150 May 24 00:40:54 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.264, service = com.apple.photostream-agent, error = 119: Service is disabled
151 May 24 00:40:54 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.264, service = com.dayoneapp.dayone-agent, error = 119: Service is disabled
152 May 24 00:40:54 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.264, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled
153 May 24 00:40:54 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.264, service = com.tunabellysoftware.TemperatureGaugeHelper, error = 119: Service is disabled
154 May 24 01:28:17 com.apple.xpc.launchd.domain.user.loginwindow.98.4294967295: Could not import service from caller: caller = WacomTabletDriv.241, service = com.wacom.WacomTouchDriver.188608, error = 134: Service cannot load in requested session
155 May 24 01:28:18 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.262, service = com.apple.photostream-agent, error = 119: Service is disabled
156 May 24 01:28:18 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.262, service = com.dayoneapp.dayone-agent, error = 119: Service is disabled
157 May 24 01:28:18 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.262, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled
158 May 24 01:28:18 com.apple.xpc.launchd.user.501.100007.Aqua: Could not import service from caller: caller = otherbsd.262, service = com.tunabellysoftware.TemperatureGaugeHelper, error = 119: Service is disabled
159
160 Console log
161
162 May 24 00:20:16 fontd: Failed to open read-only database, regenerating DB
163
164 Loaded kernel extensions
165
166 com.citrix.driver.net6im (1.1.9)
167 com.deterministicnetworks.driver.dne (1.0.18)
168 com.deterministicnetworks.driver.dniregistry (1.0.7)
169 com.intel.kext.intelhaxm (1.1.1)
170
171 System services loaded
172
173 com.adobe.adobeupdatedaemon
174 com.apple.watchdogd
175 com.citrix.agadminservice
176 com.deterministicnetworks.daemon.dniregsvr
177 com.github.GitHub.GHInstallCLI
178 com.google.keystone.daemon
179 com.intel.haxm
180 com.microsoft.office.licensing.helper
181 com.oracle.java.Helper-Tool
182 com.prey.agent
183 org.gpgtools.gpgmail.uuid-patcher
184 org.macosforge.xquartz.privileged_startx
185 org.wireshark.ChmodBPF
186
187 Login services loaded
188
189 com.adobe.AAM.Scheduler-1.0
190 com.adobe.AdobeCreativeCloud
191 com.citrix.AuthManager_Mac
192 com.citrix.ReceiverHelper
193 com.citrix.ServiceRecords
194 com.citrixonline.GoToMeeting.G2MUpdate
195 com.google.keystone.system.agent
196 com.growl.GrowlLauncher
197 com.hp.devicemonitor
198 com.oracle.java.Java-Updater
199 com.paragon.ntfs.trial
200 com.paragon.updater
201 com.spotify.webhelper
202 com.valvesoftware.steamclean
203 com.wacom.wacomtablet
204 org.gpgtools.Libmacgpg.xpc
205 org.gpgtools.gpgmail.enable-bundles
206 org.gpgtools.gpgmail.updater
207 org.gpgtools.gpgmail.user-uuid-patcher
208 org.gpgtools.macgpg2.fix
209 org.gpgtools.macgpg2.shutdown-gpg-agent
210 org.gpgtools.macgpg2.updater
211 org.macosforge.xquartz.startx
212
213 Login services disabled
214
215 com.tunabellysoftware.TemperatureGaugeHelper
216 com.apple.photostream-agent
217
218 User services disabled
219
220 com.tunabellysoftware.TemperatureGaugeHelper
221 com.apple.photostream-agent
222
223 User login items
224
225 iTunesHelper
226 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
227 VMware Fusion Start Menu
228 - /Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app
229 Google Chrome
230 - /Applications/Google Chrome.app
231
232 Firefox extensions
233
234 Mozilla Firefox hotfix
235
236 iCloud errors
237
238 cloudd 181
239 Photos 59
240 bird 12
241 cloudphotosd 10
242 java 7
243 comapple.CloudPhotosConfiguration 5
244 comapple.InputMethodKit.UserDictionary 1
245
246 Continuity errors
247
248 lsuseractivityd 227
249 sharingd 27
250
251 Restricted files: 40090
252
253 Data packages
254
255 /Users/USER/Library/Developer/Xcode/DerivedData/Calculator-gnmjogffrdqecjfikfxg kzfnhoyh/Build/Products/Debug-iphonesimulator/Calculator.app.dSYM
256 /Users/USER/Library/Developer/Xcode/DerivedData/Calculator-gnmjogffrdqecjfikfxg kzfnhoyh/Build/Products/Debug-iphonesimulator/CalculatorTests.xctest.dSYM
257
258 Contents of /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist
259 - mod date: Mar 16 21:57:34 2015
260 - size (B): 607
261 - checksum: 1501830148
262
263 <?xml version="1.0" encoding="UTF-8"?>
264 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
265 <plist version="1.0">
266 <dict>
267 <key>MachServices</key>
268 <dict>
269 <key>com.citrix.AuthManager_Mac</key>
270 <true/>
271 </dict>
272 <key>Label</key>
273 <string>com.citrix.AuthManager_Mac</string>
274 <key>WaitForDebugger</key>
275 <false/>
276 <key>ProgramArguments</key>
277 <array>
278 <string>/usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac</ string>
279 </array>
280 <key>LimitLoadToSessionType</key>
281 <string>Aqua</string>
282 <key>Disabled</key>
283 <false/>
284 </dict>
285 </plist>
286
287 Contents of /Library/LaunchAgents/com.citrix.ServiceRecords.plist
288 - mod date: Mar 16 21:57:34 2015
289 - size (B): 707
290 - checksum: 827728504
291
292 <?xml version="1.0" encoding="UTF-8"?>
293 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
294 <plist version="1.0">
295 <dict>
296 <key>MachServices</key>
297 <dict>
298 <key>com.citrix.Beacons</key>
299 <true/>
300 <key>com.citrix.ServiceRecords</key>
301 <true/>
302 </dict>
303 <key>Label</key>
304 <string>com.citrix.ServiceRecords</string>
305 <key>RunAtLoad</key>
306 <true/>
307 <key>KeepAlive</key>
308 <true/>
309 <key>WaitForDebugger</key>
310 <false/>
311 <key>ProgramArguments</key>
312 <array>
313 <string>/usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords</st ring>
314 </array>
315 <key>LimitLoadToSessionType</key>
316 <string>Aqua</string>
317
318 ...and 4 more line(s)
319
320 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
321 - mod date: May 13 14:20:26 2015
322 - size (B): 104
323 - checksum: 776074961
324
325 <?xml version="1.0" encoding="UTF-8"?>
326 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
327 <plist version="1.0">
328 <dict>
329 <key>Label</key>
330 <string>com.oracle.java.Java-Updater</string>
331 <key>ProgramArguments</key>
332 <array>
333 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
334 <string>-bgcheck</string>
335 </array>
336 <key>StandardErrorPath</key>
337 <string>/dev/null</string>
338 <key>StandardOutPath</key>
339 <string>/dev/null</string>
340 <key>StartCalendarInterval</key>
341 <dict>
342 <key>Hour</key>
343 <integer>14</integer>
344 <key>Minute</key>
345 <integer>33</integer>
346 <key>Weekday</key>
347 <integer>1</integer>
348 </dict>
349 </dict>
350
351 ...and 1 more line(s)
352
353 Contents of /Library/LaunchAgents/com.paragon.updater.plist
354 - mod date: Mar 18 20:17:56 2015
355 - size (B): 548
356 - checksum: 962844124
357
358 <?xml version="1.0" encoding="UTF-8"?>
359 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
360 <plist version="1.0">
361 <dict>
362 <key>StartInterval</key>
363 <integer>86400</integer>
364 <key>ProgramArguments</key>
365 <array>
366 <string>/Library/Application Support/Paragon Updater/Paragon Updater.app/Contents/MacOS/Paragon Updater</string>
367 <string>--check</string>
368 <string>--delay=30</string>
369 </array>
370 <key>Label</key>
371 <string>com.paragon.updater</string>
372 <key>RunAtLoad</key>
373 <true/>
374 </dict>
375 </plist>
376
377 Contents of /Library/LaunchAgents/com.wacom.wacomtablet.plist
378 - mod date: Mar 5 23:39:52 2015
379 - size (B): 712
380 - checksum: 2972905917
381
382 <?xml version="1.0" encoding="UTF-8"?>
383 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
384 <plist version="1.0">
385 <dict>
386 <key>EnvironmentVariables</key>
387 <dict>
388 <key>RUN_WITH_LAUNCHD</key>
389 <string>1</string>
390 </dict>
391 <key>KeepAlive</key>
392 <dict>
393 <key>SuccessfulExit</key>
394 <true/>
395 </dict>
396 <key>Label</key>
397 <string>com.wacom.wacomtablet</string>
398 <key>LimitLoadToSessionType</key>
399 <array>
400 <string>Aqua</string>
401 <string>LoginWindow</string>
402 </array>
403 <key>Program</key>
404 <string>/Library/Application Support/Tablet/WacomTabletSpringboard</string>
405 <key>RunAtLoad</key>
406 <true/>
407
408 ...and 4 more line(s)
409
410 Contents of /Library/LaunchAgents/org.gpgtools.Libmacgpg.xpc.plist
411 - mod date: Mar 18 14:52:34 2015
412 - size (B): 556
413 - checksum: 2633516353
414
415 <?xml version="1.0" encoding="UTF-8"?>
416 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
417 <plist version="1.0">
418 <dict>
419 <key>EnableTransactions</key>
420 <true/>
421 <key>KeepAlive</key>
422 <false/>
423 <key>Label</key>
424 <string>org.gpgtools.Libmacgpg.xpc</string>
425 <key>MachServices</key>
426 <dict>
427 <key>org.gpgtools.Libmacgpg.xpc_OpenStep</key>
428 <true/>
429 </dict>
430 <key>ProgramArguments</key>
431 <array>
432 <string>/Library/Application Support/GPGTools/org.gpgtools.Libmacgpg.xpc</string>
433 </array>
434 </dict>
435 </plist>
436
437 Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.enable-bundles.plist
438 - mod date: Mar 8 15:03:00 2015
439 - size (B): 478
440 - checksum: 4256729205
441
442 <?xml version="1.0" encoding="UTF-8"?>
443 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
444 <plist version="1.0">
445 <dict>
446 <key>Label</key>
447 <string>org.gpgtools.gpgmail.enable-bundles</string>
448 <key>ProgramArguments</key>
449 <array>
450 <string>/Library/Application Support/GPGTools/uuid-patcher</string>
451 <string>enable-bundles</string>
452 </array>
453 <key>RunAtLoad</key>
454 <true/>
455 <key>KeepAlive</key>
456 <false/>
457 </dict>
458 </plist>
459
460 Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.patch-uuid-user.plist
461 - mod date: Mar 8 15:03:00 2015
462 - size (B): 415
463 - checksum: 2367346596
464
465 <?xml version="1.0" encoding="UTF-8"?>
466 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
467 <plist version="1.0">
468 <dict>
469 <key>Label</key>
470 <string>org.gpgtools.gpgmail.user-uuid-patcher</string>
471 <key>Program</key>
472 <string>/Library/Application Support/GPGTools/uuid-patcher</string>
473 <key>RunAtLoad</key>
474 <true/>
475 <key>KeepAlive</key>
476 <false/>
477 </dict>
478 </plist>
479
480 Contents of /Library/LaunchAgents/org.gpgtools.gpgmail.updater.plist
481 - mod date: Mar 18 14:58:17 2015
482 - size (B): 493
483 - checksum: 2804634747
484
485 <?xml version="1.0" encoding="UTF-8"?>
486 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
487 <plist version="1.0">
488 <dict>
489 <key>KeepAlive</key>
490 <false/>
491 <key>StartInterval</key>
492 <integer>10800</integer>
493 <key>Label</key>
494 <string>org.gpgtools.gpgmail.updater</string>
495 <key>ProgramArguments</key>
496 <array>
497 <string>/Library/Application Support/GPGTools/GPGMail_Updater.app/Contents/MacOS/GPGMail_Updater</string>
498 </array>
499 </dict>
500 </plist>
501
502 Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.fix.plist
503 - mod date: Mar 8 15:03:00 2015
504 - size (B): 417
505 - checksum: 3267088882
506
507 <?xml version="1.0" encoding="UTF-8"?>
508 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
509 <plist version="1.0">
510 <dict>
511 <key>KeepAlive</key>
512 <false/>
513 <key>Label</key>
514 <string>org.gpgtools.macgpg2.fix</string>
515 <key>ProgramArguments</key>
516 <array>
517 <string>/usr/local/MacGPG2/libexec/fixGpgHome</string>
518 </array>
519 <key>RunAtLoad</key>
520 <true/>
521 </dict>
522 </plist>
523
524 Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.shutdown-gpg-agent.plist
525 - mod date: Mar 8 15:03:00 2015
526 - size (B): 552
527 - checksum: 3222670079
528
529 <?xml version="1.0" encoding="UTF-8"?>
530 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
531 <plist version="1.0">
532 <dict>
533 <key>Label</key>
534 <string>org.gpgtools.macgpg2.shutdown-gpg-agent</string>
535 <key>Program</key>
536 <string>/usr/local/MacGPG2/libexec/shutdown-gpg-agent</string>
537 <key>RunAtLoad</key>
538 <true/>
539 <key>KeepAlive</key>
540 <dict>
541 <key>SuccessfulExit</key>
542 <true/>
543 </dict>
544 <key>ExitTimeOut</key>
545 <integer>5</integer>
546 </dict>
547 </plist>
548
549 Contents of /Library/LaunchAgents/org.gpgtools.macgpg2.updater.plist
550 - mod date: Mar 8 15:03:00 2015
551 - size (B): 482
552 - checksum: 1275281879
553
554 <?xml version="1.0" encoding="UTF-8"?>
555 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
556 <plist version="1.0">
557 <dict>
558 <key>KeepAlive</key>
559 <false/>
560 <key>StartInterval</key>
561 <integer>10800</integer>
562 <key>Label</key>
563 <string>org.gpgtools.macgpg2.updater</string>
564 <key>ProgramArguments</key>
565 <array>
566 <string>/usr/local/MacGPG2/libexec/MacGPG2_Updater.app/Contents/MacOS/MacGPG2_U pdater</string>
567 </array>
568 </dict>
569 </plist>
570
571 Contents of /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist
572 - mod date: May 13 13:31:08 2015
573 - size (B): 479
574 - checksum: 2254479735
575
576 <?xml version="1.0" encoding="UTF-8"?>
577 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
578 <plist version="1.0">
579 <dict>
580 <key>KeepAlive</key>
581 <true/>
582 <key>Label</key>
583 <string>com.adobe.adobeupdatedaemon</string>
584 <key>LaunchOnlyOnce</key>
585 <true/>
586 <key>Program</key>
587 <string>/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon</string>
588 <key>RunAtLoad</key>
589 <true/>
590 </dict>
591 </plist>
592
593 Contents of /Library/LaunchDaemons/com.citrix.agadminservice.plist
594 - mod date: Jun 16 11:28:53 2014
595 - size (B): 436
596 - checksum: 162341659
597
598 <?xml version="1.0" encoding="UTF-8"?>
599 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
600 <plist version="1.0">
601 <dict>
602 <key>Label</key>
603 <string>com.citrix.agadminservice</string>
604 <key>Program</key>
605 <string>/usr/sbin/AGAdminService</string>
606 <key>ProgramArguments</key>
607 <array>
608 <string>AGAdminService</string>
609 </array>
610 <key>OnDemand</key>
611 <false/>
612 </dict>
613 </plist>
614
615 Contents of /Library/LaunchDaemons/com.deterministicnetworks.daemon.dniregsvr.plist
616 - mod date: Jun 16 11:29:37 2014
617 - size (B): 788
618 - checksum: 79254072
619
620 <?xml version="1.0" encoding="UTF-8"?>
621 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
622 <plist version="1.0">
623 <dict>
624 <key>Debug</key>
625 <false/>
626 <key>Label</key>
627 <string>com.deterministicnetworks.daemon.dniregsvr</string>
628 <key>RunAtLoad</key>
629 <true/>
630 <key>ProgramArguments</key>
631 <array>
632 <string>/usr/sbin/dniregsvr</string>
633 </array>
634 <key>ServiceIPC</key>
635 <true/>
636 <key>Sockets</key>
637 <dict>
638 <key>RegistryDomainSocket</key>
639 <dict>
640 <key>SockFamily</key>
641 <string>Unix</string>
642 <key>SockPassive</key>
643 <true/>
644 <key>SockPathMode</key>
645
646 ...and 7 more line(s)
647
648 Contents of /Library/LaunchDaemons/com.github.GitHub.GHInstallCLI.plist
649 - mod date: May 15 22:10:28 2015
650 - size (B): 612
651 - checksum: 796956247
652
653 <?xml version="1.0" encoding="UTF-8"?>
654 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
655 <plist version="1.0">
656 <dict>
657 <key>KeepAlive</key>
658 <false/>
659 <key>Label</key>
660 <string>com.github.GitHub.GHInstallCLI</string>
661 <key>MachServices</key>
662 <dict>
663 <key>com.github.GitHub.GHInstallCLI</key>
664 <true/>
665 </dict>
666 <key>Program</key>
667 <string>/Library/PrivilegedHelperTools/com.github.GitHub.GHInstallCLI</string>
668 <key>ProgramArguments</key>
669 <array>
670 <string>/Library/PrivilegedHelperTools/com.github.GitHub.GHInstallCLI</string>
671 </array>
672 </dict>
673 </plist>
674
675 Contents of /Library/LaunchDaemons/com.prey.agent.plist
676 - mod date: May 13 21:14:04 2015
677 - size (B): 686
678 - checksum: 1193980917
679
680 <?xml version="1.0" encoding="UTF-8"?>
681 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
682 <plist version="1.0">
683 <dict>
684 <key>KeepAlive</key>
685 <dict>
686 <key>SuccessfulExit</key>
687 <false/>
688 </dict>
689 <key>Label</key>
690 <string>com.prey.agent</string>
691 <key>ProgramArguments</key>
692 <array>
693 <string>/usr/lib/prey/current/bin/prey</string>
694 </array>
695 <key>WorkingDirectory</key>
696 <string>/usr/lib/prey/current</string>
697 <key>RunAtLoad</key>
698 <true/>
699 <key>ExitTimeOut</key>
700 <integer>20</integer>
701 <key>UserName</key>
702 <string>prey</string>
703 <key>WatchPaths</key>
704 <array>
705
706 ...and 4 more line(s)
707
708 Contents of /Library/LaunchDaemons/org.gpgtools.gpgmail.patch-uuid.plist
709 - mod date: Mar 8 15:03:00 2015
710 - size (B): 410
711 - checksum: 4206690072
712
713 <?xml version="1.0" encoding="UTF-8"?>
714 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
715 <plist version="1.0">
716 <dict>
717 <key>Label</key>
718 <string>org.gpgtools.gpgmail.uuid-patcher</string>
719 <key>Program</key>
720 <string>/Library/Application Support/GPGTools/uuid-patcher</string>
721 <key>RunAtLoad</key>
722 <true/>
723 <key>KeepAlive</key>
724 <false/>
725 </dict>
726 </plist>
727
728 Contents of /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist
729 - mod date: May 16 18:58:25 2015
730 - size (B): 382
731 - checksum: 1346761329
732
733 <?xml version="1.0" encoding="UTF-8"?>
734 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
735 <plist version="1.0">
736 <dict>
737 <key>Label</key>
738 <string>org.wireshark.ChmodBPF</string>
739 <key>RunAtLoad</key>
740 <true/>
741 <key>Program</key>
742 <string>/Library/Application Support/Wireshark/ChmodBPF/ChmodBPF</string>
743 </dict>
744 </plist>
745
746 Contents of /System/Library/LaunchAgents/com.paragon.NTFS.notify.plist
747 - mod date: Mar 18 20:18:06 2015
748 - size (B): 487
749 - checksum: 3292335405
750
751 <?xml version="1.0" encoding="UTF-8"?>
752 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
753 <plist version="1.0">
754 <dict>
755 <key>Label</key>
756 <string>com.paragon.ntfs.trial</string>
757 <key>ProgramArguments</key>
758 <array>
759 <string>/Library/PreferencePanes/NTFSforMacOSX.prefPane/Contents/MacOS/notifica tor</string>
760 </array>
761 <key>RunAtLoad</key>
762 <true/>
763 <key>LimitLoadToSessionType</key>
764 <string>Aqua</string>
765 </dict>
766 </plist>
767
768 Contents of /System/Library/LaunchDaemons/com.intel.haxm.plist
769 - mod date: Oct 31 09:17:44 2014
770 - size (B): 567
771 - checksum: 1135390232
772
773 <?xml version="1.0" encoding="UTF-8"?>
774 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
775 <plist version="1.0">
776 <dict>
777 <key>KeepAlive</key>
778 <false/>
779 <key>Label</key>
780 <string>com.intel.haxm</string>
781 <key>ProgramArguments</key>
782 <array>
783 <string>/System/Library/Extensions/intelhaxm.kext/Contents/Resources/haxm_start .sh</string>
784 </array>
785 <key>RunAtLoad</key>
786 <true/>
787 <key>UserName</key>
788 <string>root</string>
789 </dict>
790 </plist>
791
792 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
793 - mod date: May 13 00:54:04 2015
794 - size (B): 554
795 - checksum: 3012644940
796
797 <?xml version="1.0" encoding="UTF-8"?>
798 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
799 <plist version="1.0">
800 <dict>
801 <key>Disabled</key>
802 <true/>
803 <key>Label</key>
804 <string>org.apache.httpd</string>
805 <key>EnvironmentVariables</key>
806 <dict>
807 <key>XPC_SERVICES_UNAVAILABLE</key>
808 <string>1</string>
809 </dict>
810 <key>ProgramArguments</key>
811 <array>
812 <string>/usr/sbin/httpd-wrapper</string>
813 <string>-D</string>
814 <string>FOREGROUND</string>
815 </array>
816 <key>OnDemand</key>
817 <false/>
818 </dict>
819 </plist>
820
821 Contents of /private/etc/ssh_config
822 - mod date: May 13 14:34:03 2015
823 - size (B): 3957
824 - checksum: 2841432291
825
826 Host *
827 SendEnv LANG LC_*
828 Host *
829 XAuthLocation /opt/X11/bin/xauth
830
831 Contents of /private/etc/sshd_config
832 - mod date: May 13 14:34:03 2015
833 - size (B): 4161
834 - checksum: 2518667249
835
836 SyslogFacility AUTHPRIV
837 AuthorizedKeysFile .ssh/authorized_keys
838 UsePrivilegeSeparation sandbox # Default for new installations.
839 AcceptEnv LANG LC_*
840 Subsystem sftp /usr/libexec/sftp-server
841 XAuthLocation /opt/X11/bin/xauth
842
843 Contents of Library/LaunchAgents/com.citrixonline.GoToMeeting.G2MUpdate.plist
844 - mod date: May 13 16:58:26 2015
845 - size (B): 455
846 - checksum: 848759568
847
848 <?xml version="1.0" encoding="UTF-8"?>
849 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
850 <plist version="1.0">
851 <dict>
852 <key>Label</key>
853 <string>com.citrixonline.GoToMeeting.G2MUpdate</string>
854 <key>ProgramArguments</key>
855 <array>
856 <string>/Users/USER/Library/Application Support/CitrixOnline/GoToMeeting/G2MUpdate</string>
857 </array>
858 <key>StartInterval</key>
859 <integer>3660</integer>
860 </dict>
861 </plist>
862
863 Contents of Library/LaunchAgents/com.spotify.webhelper.plist
864 - mod date: May 20 15:31:25 2015
865 - size (B): 530
866 - checksum: 984046890
867
868 <?xml version="1.0" encoding="UTF-8"?>
869 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
870 <plist version="1.0">
871 <dict>
872 <key>Label</key>
873 <string>com.spotify.webhelper</string>
874 <key>KeepAlive</key>
875 <dict>
876 <key>NetworkState</key>
877 <true/>
878 </dict>
879 <key>RunAtLoad</key>
880 <true/>
881 <key>Program</key>
882 <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
883 <key>SpotifyPath</key>
884 <string>/Applications/Spotify.app</string></dict>
885 </plist>
886
887 Contents of Library/LaunchAgents/com.valvesoftware.steamclean.plist
888 - mod date: May 22 22:00:35 2015
889 - size (B): 807
890 - checksum: 2986390274
891
892 <?xml version="1.0" encoding="UTF-8"?>
893 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
894 <plist version="1.0">
895 <dict>
896 <key>Label</key>
897 <string>com.valvesoftware.steamclean</string>
898 <key>Program</key>
899 <string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>
900 <key>ProgramArguments</key>
901 <array>
902 <string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>
903 <string>Public</string>
904 </array>
905 <key>RunAtLoad</key>
906 <true/>
907 <key>SteamContentPaths</key>
908 <array>
909 <string>/Users/USER/Library/Application Support/Steam/SteamApps</string>
910 </array>
911 <key>ThrottleInterval</key>
912 <integer>60</integer>
913 <key>WatchPaths</key>
914 <array>
915 <string>/Applications/Steam.app</string>
916 </array>
917
918 ...and 2 more line(s)
919
920 App extensions
921
922 com.dayoneapp.dayone.Day-One-Share-Extension
923 com.fiplab.batteryhealth.widget
924 com.pixelmatorteam.pixelmator.Repair-Tool-Action-Extension
925 com.readitlater.PocketMac.AddToPocketShareExtension
926
927 Modifications
928
929 file added: /Applications/Opera.app/Contents/Versions/29.0.1795.47/Opera Framework.framework/Resources/server_tracking_data
930 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat
931
932 Installations
933
934 Microsoft Remote Desktop: 5/22/15, 10:12 PM
935 PDF Toolkit+: 5/22/15, 12:49 PM
936 Citrix NetScaler Gateway Plug-in: 5/22/15, 1:15 AM
937 Temperature Gauge: 5/21/15, 2:27 AM
938 Growl: 5/21/15, 2:27 AM
939
940 Elapsed time (sec): 247