1 Start time: 16:58:11 05/27/15
2
3 Revision: 1320
4
5 Model Identifier: iMac14,2
6 System Version: OS X 10.10.3 (14D136)
7 Kernel Version: Darwin 14.3.0
8 Time since boot: 3:19
9
10 UID: 501
11
12 Memory
13
14 BANK 0/DIMM0
15
16 Size: 8 GB
17 Speed: 1600 MHz
18 Status: OK
19 Manufacturer: 0x859B
20
21 BANK 1/DIMM0
22
23 Size: 8 GB
24 Speed: 1600 MHz
25 Status: OK
26 Manufacturer: 0x802C
27
28 BANK 0/DIMM1
29
30 Size: 8 GB
31 Speed: 1600 MHz
32 Status: OK
33 Manufacturer: 0x802C
34
35 BANK 1/DIMM1
36
37 Size: 8 GB
38 Speed: 1600 MHz
39 Status: OK
40 Manufacturer: 0x859B
41
42 USB
43
44 Backup+ BK (Seagate LLC)
45 USB3.0 Hub (VIA Labs, Inc.)
46 USB2.0 Hub (VIA Labs, Inc.)
47 Token 4.28.1.1 2.7.195 (Aladdin Knowledge Systems)
48 ANT USBStick2 (Dynastream Innovations Inc.)
49
50 Bluetooth
51
52 Apple Wireless Keyboard
53 Bluetooth Wireless Keyboard
54 Apple Magic Mouse
55
56 System errors (per sec)
57
58 Moveslink2 (UID 501, error 316): 838
59 plugin-containe (UID 501, error 316): 106
60
61 Energy (lifetime)
62
63 kernel_task (UID 0): 8.53
64 firefox (UID 501): 6.61
65
66 Energy (sampled)
67
68 WindowServer (UID 88): 6.03
69
70 Memory (MB)
71
72 kernel_task (UID 0): 1783
73
74 Trust settings: admin 1, user 1
75
76 DNS: 201.6.2.143
77
78 System caches/logs
79
80 3,4 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data
81
82 Diagnostic reports
83
84 2015-04-29 SACMonitor crash
85 2015-04-30 Mail hang x2
86 2015-05-09 Kernel gpuRestart x2
87 2015-05-10 Pages crash x2
88 2015-05-10 SACMonitor crash
89 2015-05-12 DocumentPopoverViewService hang
90 2015-05-13 Pages crash
91 2015-05-13 firefox hang x2
92 2015-05-14 firefox hang
93 2015-05-15 AdobeReader crash
94 2015-05-16 firefox hang
95 2015-05-18 Pages crash
96 2015-05-18 plugin-container crash x2
97 2015-05-19 AdobeReader hang
98 2015-05-19 firefox hang
99 2015-05-25 firefox hang
100 2015-05-25 plugin-container crash x3
101 2015-05-27 Garmin Express Service crash
102 2015-05-27 Safari hang
103 2015-05-27 firefox hang x2
104 2015-05-27 java crash
105 2015-05-27 plugin-container crash
106
107 HID errors: 4
108
109 Kernel log
110
111 May 26 18:31:13 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff807a1e6000
112 May 26 21:04:57 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff807a1e6000
113 May 26 23:17:41 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff807390eb88
114 May 27 01:33:42 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff8075cf7000
115 May 27 03:50:48 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff807a1d5b88
116 May 27 08:33:03 firefox (map: 0xffffff805bcb8690) triggered DYLD shared region unnest for map: 0xffffff805bcb8690, region 0x7fff90c00000->0x7fff90e00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
117 May 27 08:41:48 firefox (map: 0xffffff805bcb81e0) triggered DYLD shared region unnest for map: 0xffffff805bcb81e0, region 0x7fff90c00000->0x7fff90e00000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
118 May 27 08:46:42 pci pause: SDXC
119 May 27 08:50:53 firefox (map: 0xffffff804c32c1e0) triggered DYLD shared region unnest for map: 0xffffff804c32c1e0, region 0x7fff95600000->0x7fff95800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
120 May 27 09:14:26 vnic0: promiscuous mode enable failed
121 May 27 09:14:26 vnic1: promiscuous mode enable failed
122 May 27 09:43:09 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff8054bb4b88
123 May 27 11:33:28 ALF: ifnet_get_address_list_family error 12
124 May 27 12:12:21 ALF: ifnet_get_address_list_family error 12
125 May 27 13:30:33 firefox (map: 0xffffff805bafb3c0) triggered DYLD shared region unnest for map: 0xffffff805bafb3c0, region 0x7fff95600000->0x7fff95800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
126 May 27 13:32:07 firefox (map: 0xffffff805bafb5a0) triggered DYLD shared region unnest for map: 0xffffff805bafb5a0, region 0x7fff95600000->0x7fff95800000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
127 May 27 13:39:19 pci pause: SDXC
128 May 27 13:39:35 firefox (map: 0xffffff8051eebb40) triggered DYLD shared region unnest for map: 0xffffff8051eebb40, region 0x7fff94e00000->0x7fff95000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
129 May 27 13:40:34 ALF: ifnet_get_address_list_family error 12
130 May 27 13:44:14 ALF: ifnet_get_address_list_family error 12
131 May 27 14:18:49 firefox (map: 0xffffff804fa87780) triggered DYLD shared region unnest for map: 0xffffff804fa87780, region 0x7fff94e00000->0x7fff95000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
132 May 27 14:21:10 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff804c73a000
133 May 27 16:34:58 vnic0: promiscuous mode enable failed
134 May 27 16:34:58 vnic1: promiscuous mode enable failed
135 May 27 16:53:42 ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff804c6b4000
136
137 System log
138
139 May 27 16:23:19 WindowServer: : Modification of kCGSPermittedBeforeLoginTagBit (30) on a window 0x19c requiring rights kCGSWindowRightOwner by caller Pages
140 May 27 16:23:41 WindowServer: CGXWindowSetShadowProperties: Operation on a window 0x1a3 requiring rights kCGSWindowRightOwner by caller Pages
141 May 27 16:23:41 WindowServer: CGXWindowSetShadowProperties: Operation on a window 0x1a3 requiring rights kCGSWindowRightOwner by caller Pages
142 May 27 16:23:41 WindowServer: : Modification of kCGSPermittedBeforeLoginTagBit (30) on a window 0x1a3 requiring rights kCGSWindowRightOwner by caller Pages
143 May 27 16:26:01 Pages: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server
144 May 27 16:26:01 Pages: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server
145 May 27 16:32:13 NetAuthSysAgent: TUAMHandler::SetUAMType setting UAMType to 13
146 May 27 16:34:55 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Parallels Desktop" for over 1.00 seconds. Server has re-enabled them.
147 May 27 16:35:16 WindowServer: _CGXGetWindowOrderingGroup: Operation on a window 0x201 requiring rights 0x5 by caller Windows 8.1
148 May 27 16:38:53 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: Window not in group
149 May 27 16:38:55 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: Window not in group
150 May 27 16:39:30 WindowServer: CGXSetWindowFilter: Invalid window 0xffffffff
151 May 27 16:39:30 WindowServer: CGXSetWindowFilter: Invalid filter 0
152 May 27 16:39:32 WindowServer: CGXSetWindowFilter: Invalid filter 0
153 May 27 16:39:32 WindowServer: CGXReleaseCIFilter: Invalid filter 0
154 May 27 16:39:42 WindowServer: window 25b is already attached to window 259
155 May 27 16:39:42 WindowServer: window 25b is already attached to window 259
156 May 27 16:39:42 WindowServer: window 25b is already attached to window 259
157 May 27 16:43:27 WindowServer: _CGXGetWindowOrderingGroup: Operation on a window 0x288 requiring rights 0x5 by caller Firefox
158 May 27 16:43:44 WindowServer: _CGXGetWindowOrderingGroup: Operation on a window 0x295 requiring rights 0x5 by caller Firefox
159 May 27 16:47:12 WindowServer: CGXSetWindowFilter: Invalid window 0xffffffff
160 May 27 16:47:12 WindowServer: CGXSetWindowFilter: Invalid filter 0
161 May 27 16:47:20 WindowServer: CGXSetWindowFilter: Invalid filter 0
162 May 27 16:47:20 WindowServer: CGXReleaseCIFilter: Invalid filter 0
163 May 27 16:51:26 fseventsd: Logging disabled completely for device:1: /Volumes/Recovery HD
164
165 launchd log
166
167 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
168 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
169 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
170 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
171 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
172 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
173 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
174 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted
175 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted
176 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted
177 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted
178 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted
179 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted
180 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted
181 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
182 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
183 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
184 May 27 13:38:54 com.apple.xpc.launchd.domain.pid.SecurityAgent.214: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
185 May 27 13:39:14 com.apple.xpc.launchd.user.501.100008.Aqua: Could not import service from caller: caller = otherbsd.256, service = com.apple.photostream-agent, error = 119: Service is disabled
186 May 27 13:39:14 com.apple.xpc.launchd.user.501.100008.Aqua: Could not import service from caller: caller = otherbsd.256, service = com.garmin.renu.service, error = 119: Service is disabled
187 May 27 13:39:14 com.apple.xpc.launchd.user.501.100008.Aqua: Could not import service from caller: caller = otherbsd.256, service = com.svagant.sClockHelper, error = 119: Service is disabled
188 May 27 13:39:14 com.apple.xpc.launchd.user.501.100008.Aqua: Could not import service from caller: caller = otherbsd.256, service = com.tunabellysoftware.TemperatureGaugeHelper, error = 119: Service is disabled
189 May 27 13:39:17 com.apple.xpc.launchd.domain.pid.SACMonitor.340: Could not resolve origin of domain. XPC services in this domain's bundle will not be bootstrapped: error = 107: Malformed bundle, taint = missing executable
190 May 27 16:34:58 com.apple.xpc.launchd.user.501.100008.Aqua: Could not read path: path = /Library/LaunchAgents/com.parallels.vm.prl_pcproxy.plist, error = 2: No such file or directory
191 May 27 16:39:29 com.apple.xpc.launchd.domain.pid.eTokend.1346: Could not resolve origin of domain. XPC services in this domain's bundle will not be bootstrapped: error = 107: Malformed bundle, taint = missing executable
192
193 Loaded kernel extensions
194
195 com.parallels.kext.hypervisor (10.2.1 29006)
196 com.parallels.kext.netbridge (10.2.1 29006)
197 com.parallels.kext.usbconnect (10.2.1 29006)
198 com.parallels.kext.vnic (10.2.1 29006)
199 com.sophos.kext.sav (9.2.50)
200 com.sophos.nke.swi (9.2.50)
201
202 System services loaded
203
204 com.SafeNet.SACSrv
205 com.adobe.fpsaud
206 com.apple.spindump
207 - status: 75
208 com.apple.watchdogd
209 com.oracle.java.Helper-Tool
210 com.sophos.autoupdate
211 com.sophos.common.servicemanager
212 com.sophos.configuration
213 com.sophos.intercheck
214 com.sophos.notification
215 com.sophos.scan
216 com.sophos.sxld
217 com.sophos.webd
218
219 Login services loaded
220
221 com.SafeNet.SACMonitor
222 com.adobe.ARM.UUID
223 com.bittorrent.uTorrent
224 com.google.keystone.user.agent
225 com.hp.devicemonitor
226 com.oracle.java.Java-Updater
227 com.sophos.uiserver
228
229 Login services disabled
230
231 com.svagant.sClockHelper
232
233 User services disabled
234
235 com.svagant.sClockHelper
236
237 User login items
238
239 Moveslink2
240 - /Applications/Moveslink2.app
241 iTunesHelper
242 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
243 Garmin Express Service
244 - /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app
245
246 iCloud errors
247
248 Photos 17
249 cloudd 6
250 Spotlight 4
251 Finder 3
252 Mail 1
253
254 Continuity errors
255
256 sharingd 2
257
258 Restricted files: 263
259
260 Data packages
261
262 /Users/USER/Library/Mobile Documents/5UAR78B6YU~com~goodnotesapp~goodnotes/Documents/Notebook.goodnotes
263 /Users/USER/Library/Mobile Documents/5UAR78B6YU~com~goodnotesapp~goodnotes/Trash/Notebook (3).goodnotes
264 /Users/USER/Library/Mobile Documents/5UAR78B6YU~com~goodnotesapp~goodnotes/Trash/Notebook (2).goodnotes
265
266 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
267 - mod date: Apr 3 12:01:30 2015
268 - size (B): 104
269 - checksum: 272046515
270
271 <?xml version="1.0" encoding="UTF-8"?>
272 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
273 <plist version="1.0">
274 <dict>
275 <key>Label</key>
276 <string>com.oracle.java.Java-Updater</string>
277 <key>ProgramArguments</key>
278 <array>
279 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
280 <string>-bgcheck</string>
281 </array>
282 <key>StandardErrorPath</key>
283 <string>/dev/null</string>
284 <key>StandardOutPath</key>
285 <string>/dev/null</string>
286 <key>StartCalendarInterval</key>
287 <dict>
288 <key>Hour</key>
289 <integer>12</integer>
290 <key>Minute</key>
291 <integer>45</integer>
292 <key>Weekday</key>
293 <integer>7</integer>
294 </dict>
295 </dict>
296
297 ...and 1 more line(s)
298
299 Contents of /Library/LaunchAgents/com.safenet.SACMonitor.plist
300 - mod date: Apr 3 12:05:39 2015
301 - size (B): 82
302 - checksum: 1503696195
303
304 <?xml version="1.0" encoding="UTF-8"?>
305 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
306 <plist version="1.0">
307 <dict>
308 <key>KeepAlive</key>
309 <false/>
310 <key>RunAtLoad</key>
311 <true/>
312 <key>Label</key>
313 <string>com.SafeNet.SACMonitor</string>
314 <key>ProgramArguments</key>
315 <array>
316 <string>/Library/Frameworks/eToken.framework/Versions/Current/SACMonitor</strin g>
317 </array>
318 </dict>
319 </plist>
320
321 Contents of /Library/LaunchAgents/com.sophos.uiserver.plist
322 - mod date: Apr 4 17:03:19 2015
323 - size (B): 563
324 - checksum: 40276757
325
326 <?xml version="1.0" encoding="UTF-8"?>
327 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
328 <plist version="1.0">
329 <dict>
330 <key>KeepAlive</key>
331 <true/>
332 <key>Label</key>
333 <string>com.sophos.uiserver</string>
334 <key>ProgramArguments</key>
335 <array>
336 <string>/Library/Sophos Anti-Virus/SophosUIServer.app/Contents/MacOS/SophosUIServer</string>
337 </array>
338 <key>RunAtLoad</key>
339 <true/>
340 <key>StandardErrorPath</key>
341 <string>/dev/null</string>
342 <key>StandardOutPath</key>
343 <string>/dev/null</string>
344 </dict>
345 </plist>
346
347 Contents of /Library/LaunchDaemons/com.sophos.common.servicemanager.plist
348 - mod date: Apr 4 17:03:17 2015
349 - size (B): 560
350 - checksum: 1792128556
351
352 <?xml version="1.0" encoding="UTF-8"?>
353 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
354 <plist version="1.0">
355 <dict>
356 <key>StandardErrorPath</key>
357 <string>/dev/null</string>
358 <key>StandardOutPath</key>
359 <string>/dev/null</string>
360 <key>Label</key>
361 <string>com.sophos.common.servicemanager</string>
362 <key>ProgramArguments</key>
363 <array>
364 <string>/Library/Sophos Anti-Virus/SophosServiceManager.bundle/Contents/MacOS/SophosServiceManager</str ing>
365 </array>
366 <key>KeepAlive</key>
367 <true/>
368 </dict>
369 </plist>
370
371 Contents of /System/Library/LaunchDaemons/com.apple.securityd.plist
372 - mod date: Apr 3 12:05:39 2015
373 - size (B): 747
374 - checksum: 3781780268
375
376 <?xml version="1.0" encoding="UTF-8"?>
377 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
378 <plist version="1.0">
379 <dict>
380 <key>BeginTransactionAtShutdown</key>
381 <true/>
382 <key>EnableTransactions</key>
383 <true/>
384 <key>Label</key>
385 <string>com.apple.securityd</string>
386 <key>LaunchOnlyOnce</key>
387 <false/>
388 <key>MachServices</key>
389 <dict>
390 <key>com.apple.SecurityServer</key>
391 <dict>
392 <key>ResetAtClose</key>
393 <true/>
394 </dict>
395 </dict>
396 <key>POSIXSpawnType</key>
397 <string>Interactive</string>
398 <key>ProgramArguments</key>
399 <array>
400 <string>/usr/sbin/securityd</string>
401
402 ...and 8 more line(s)
403
404 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist
405 - mod date: Apr 21 10:34:04 2015
406 - size (B): 554
407 - checksum: 3012644940
408
409 <?xml version="1.0" encoding="UTF-8"?>
410 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
411 <plist version="1.0">
412 <dict>
413 <key>Disabled</key>
414 <true/>
415 <key>Label</key>
416 <string>org.apache.httpd</string>
417 <key>EnvironmentVariables</key>
418 <dict>
419 <key>XPC_SERVICES_UNAVAILABLE</key>
420 <string>1</string>
421 </dict>
422 <key>ProgramArguments</key>
423 <array>
424 <string>/usr/sbin/httpd-wrapper</string>
425 <string>-D</string>
426 <string>FOREGROUND</string>
427 </array>
428 <key>OnDemand</key>
429 <false/>
430 </dict>
431 </plist>
432
433 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist
434 - mod date: Apr 3 11:40:39 2015
435 - size (B): 603
436 - checksum: 394026997
437
438 <?xml version="1.0" encoding="UTF-8"?>
439 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
440 <plist version="1.0">
441 <dict>
442 <key>Label</key>
443 <string>com.adobe.ARM.UUID</string>
444 <key>ProgramArguments</key>
445 <array>
446 <string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>
447 <string>semi-auto</string>
448 </array>
449 <key>RunAtLoad</key>
450 <true/>
451 <key>StartInterval</key>
452 <integer>12600</integer>
453 </dict>
454 </plist>
455
456 Contents of Library/LaunchAgents/com.bittorrent.uTorrent.plist
457 - mod date: Apr 3 12:08:01 2015
458 - size (B): 511
459 - checksum: 68136511
460
461 <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd> <plist version="1.0"> <dict> <key>Label</key> <string>com.bittorrent.uTorrent</string> <key>ProgramArguments</key> <array> <string>/usr/bin/open</string> <string>-W</string> <string>-a</string> <string>/Applications/uTorrent.app</string> </array> <key>KeepAlive</key> <false/> <key>LaunchOnlyOnce</key> <true/> </dict> </plist>
462
463 Contents of Library/LaunchAgents/com.google.keystone.agent.plist
464 - mod date: May 26 11:15:27 2015
465 - size (B): 801
466 - checksum: 3690619750
467
468 <?xml version="1.0" encoding="UTF-8"?>
469 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
470 <plist version="1.0">
471 <dict>
472 <key>Label</key>
473 <string>com.google.keystone.user.agent</string>
474 <key>LimitLoadToSessionType</key>
475 <string>Aqua</string>
476 <key>ProgramArguments</key>
477 <array>
478 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
479 <string>-runMode</string>
480 <string>ifneeded</string>
481 </array>
482 <key>RunAtLoad</key>
483 <true/>
484 <key>StartInterval</key>
485 <integer>3523</integer>
486 <key>StandardErrorPath</key>
487 <string>/dev/null</string>
488 <key>StandardOutPath</key>
489 <string>/dev/null</string>
490 </dict>
491 </plist>
492
493 Extensions
494
495 /Library/Extensions/SophosNetworkInterceptor.kext
496 - com.sophos.nke.swi
497 /Library/Extensions/SophosOnAccessInterceptor.kext
498 - com.sophos.kext.sav
499 /Library/Extensions/hp_Inkjet3_io_enabler.kext
500 - com.hp.print.hpio.Inkjet3.kext
501 /System/Library/Extensions/hp_Inkjet3_io_enabler.kext
502 - com.hp.print.hpio.Inkjet3.kext
503 /System/Library/Extensions/hp_fax_io.kext
504 - com.hp.kext.hp-fax-io
505
506 Applications
507
508 /Applications/BoletoRcv.app
509 - com.ttrix.BoletoRcv
510 /Applications/DarkParables_TheLittleMermaidAndThePurpleTide_mac.app
511 - com.BigFishGames.F8455T2L1
512 /Applications/Haunted Manor - Queen of Death.app
513 - com.BigFishGames.F6836T2L1
514 /Applications/OpenOffice.app
515 - org.openoffice.script
516 /Applications/Programas RFB/Receitanet/Receitanet.app
517 - serpro.receitanet.gui.ReceitanetApp
518 /Applications/ProgramasRFB/IRPF2015/IRPF2015.app
519 - br.gov.fazenda.receita.irpf2015
520 /Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app
521 - com.microsoft.silverlight.sllauncher
522 /Library/Frameworks/eToken.framework/Versions/A/SafeNet Authentication Client Tools.app
523 - N/A
524 /Library/Frameworks/eToken.framework/Versions/A/SafeNet Authentication Client.app
525 - N/A
526 /Library/Printers/hp/Fax/fax.backend
527 - com.hp.fax
528 /Library/Printers/hp/Fax/rastertofax.filter
529 - com.hp.rastertofax
530 /Library/Printers/hp/cups/filters/commandtohp.filter
531 - com.hp.print.cups.filter.commandtohp
532 /Library/Printers/hp/cups/filters/pdftopdf.filter
533 - com.hp.print.cups.filter.pdftopdf
534 /Library/Printers/hp/cups/tools/autosetup.tool
535 - com.hp.print.autosetup
536 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Acessório Painel de Entrada de Expressões Matemáticas.app:́rio Painel de Entrada de Expressões Matemáticas:
537 - N/A
538 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Ajuda e Suporte da Microsoft.app
539 - com.parallels.winapp.UUID.UUID
540 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Ajuda+Dicas.app
541 - com.parallels.winapp.UUID.UUID
542 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Alarmes.app
543 - com.parallels.winapp.UUID.UUID
544 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Aplicativo Transferência Fácil do Windows.app:̂ncia Fácil do Windows:
545 - N/A
546 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Aplicativo Wordpad do Windows.app
547 - com.parallels.winapp.UUID.UUID
548 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Bing Viagem.app
549 - com.parallels.winapp.UUID.UUID
550 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Bloco de notas.app
551 - com.parallels.winapp.UUID.UUID
552 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Calculadora do Windows.app
553 - com.parallels.winapp.UUID.UUID
554 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Calculadora.app
555 - com.parallels.winapp.UUID.UUID
556 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Calendário.app:́rio:
557 - N/A
558 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Câmera.app:̂mera:
559 - N/A
560 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Clima.app
561 - com.parallels.winapp.UUID.UUID
562 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Conexão de Área de Trabalho Remota.app:̃o de Área de Trabalho Remota:
563 - N/A
564 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Configurações do computador [1].app:̧ões do computador [1]:
565 - N/A
566 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Configurações do computador.app:̧ões do computador:
567 - N/A
568 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Device Pairing Application.app
569 - com.parallels.winapp.UUID.UUID
570 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Diário do Windows.app:́rio do Windows:
571 - N/A
572 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Email.app
573 - com.parallels.winapp.UUID.UUID
574 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Esportes.app
575 - com.parallels.winapp.UUID.UUID
576 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Ferramenta de Captura.app
577 - com.parallels.winapp.UUID.UUID
578 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Ferramenta de Configuração do Iniciador Microsoft iSCSI.app:̧ão do Iniciador Microsoft iSCSI:
579 - N/A
580 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Ferramenta de Diagnóstico de Memória do Windows.app:́stico de Memória do Windows:
581 - N/A
582 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Finanças.app:̧as:
583 - N/A
584 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Firefox.app
585 - com.parallels.winapp.UUID.UUID
586 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Fotos.app
587 - com.parallels.winapp.UUID.UUID
588 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Gerenciador de Limpeza de Espaço em Disco para Windows.app:̧o em Disco para Windows:
589 - N/A
590 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Gerenciador de Tarefas.app
591 - com.parallels.winapp.UUID.UUID
592 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Google Chrome.app
593 - com.parallels.winapp.UUID.UUID
594 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Google Installer [1].app
595 - com.parallels.winapp.UUID.UUID
596 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Gravador de Passos.app
597 - com.parallels.winapp.UUID.UUID
598 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Gravador de Som do Windows.app
599 - com.parallels.winapp.UUID.UUID
600 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Gravador de Som.app
601 - com.parallels.winapp.UUID.UUID
602 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Informações do sistema.app:̧ões do sistema:
603 - N/A
604 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Internet Explorer [1].app
605 - com.parallels.winapp.UUID.UUID
606 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Internet Explorer.app
607 - com.parallels.winapp.UUID.UUID
608 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Java Control Panel.app
609 - com.parallels.winapp.UUID.UUID
610 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Java Update Checker.app
611 - com.parallels.winapp.UUID.UUID
612 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Java(TM) Platform SE binary [1].app
613 - com.parallels.winapp.UUID.UUID
614 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Java(TM) Platform SE binary [2].app
615 - com.parallels.winapp.UUID.UUID
616 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Java(TM) Platform SE binary.app
617 - com.parallels.winapp.UUID.UUID
618 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Jogos.app
619 - com.parallels.winapp.UUID.UUID
620 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Leitor.app
621 - com.parallels.winapp.UUID.UUID
622 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Lista de Leitura.app
623 - com.parallels.winapp.UUID.UUID
624 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Loja.app
625 - com.parallels.winapp.UUID.UUID
626 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Mapa de caracteres.app
627 - com.parallels.winapp.UUID.UUID
628 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Mapas.app
629 - com.parallels.winapp.UUID.UUID
630 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Microsoft Windows Fax and Scan.app
631 - com.parallels.winapp.UUID.UUID
632 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Microsoft Common Language Runtime native compiler.app
633 - com.parallels.winapp.UUID.UUID
634 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Microsoft Screen Magnifier.app
635 - com.parallels.winapp.UUID.UUID
636 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Miniaplicativos do 'Painel de controle' para mouse e teclado.app
637 - com.parallels.winapp.UUID.UUID
638 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Monitor de Recursos e Desempenho.app
639 - com.parallels.winapp.UUID.UUID
640 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Música.app:́sica:
641 - N/A
642 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Notas Autoadesivas.app
643 - com.parallels.winapp.UUID.UUID
644 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Notícias.app:́cias:
645 - N/A
646 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/ODBC Administrator x32.app
647 - com.parallels.winapp.UUID.UUID
648 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/ODBC Administrator.app
649 - com.parallels.winapp.UUID.UUID
650 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/OneDrive.app
651 - com.parallels.winapp.UUID.UUID
652 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/OneNote.app
653 - com.parallels.winapp.UUID.UUID
654 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Otimizador de Unidade da Microsoft®.app:®:
655 - N/A
656 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Paint.app
657 - com.parallels.winapp.UUID.UUID
658 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Pessoas.app
659 - com.parallels.winapp.UUID.UUID
660 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Processador de comandos do Windows x32.app
661 - com.parallels.winapp.UUID.UUID
662 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Processador de comandos do Windows.app
663 - com.parallels.winapp.UUID.UUID
664 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Processo de host do Windows (Rundll32).app
665 - com.parallels.winapp.UUID.UUID
666 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Project1 [1].app
667 - com.parallels.winapp.UUID.UUID
668 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Project1.app
669 - com.parallels.winapp.UUID.UUID
670 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Receitas e Bebidas.app
671 - com.parallels.winapp.UUID.UUID
672 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/SafeNet Authentication Client Tools.app
673 - com.parallels.winapp.UUID.UUID
674 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/SafeNet Authentication Client.app
675 - com.parallels.winapp.UUID.UUID
676 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Saúde e Bem-estar.app:́de e Bem-estar:
677 - N/A
678 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Scanner.app
679 - com.parallels.winapp.UUID.UUID
680 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Screen Reader.app
681 - com.parallels.winapp.UUID.UUID
682 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Skype.app
683 - com.parallels.winapp.UUID.UUID
684 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/SolSuite.exe [1].app
685 - com.parallels.winapp.UUID.UUID
686 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/SolSuite.exe.app
687 - com.parallels.winapp.UUID.UUID
688 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/SolSuite_Update.exe.app
689 - com.parallels.winapp.UUID.UUID
690 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Speech Recognition.app
691 - com.parallels.winapp.UUID.UUID
692 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Supervisor.app
693 - com.parallels.winapp.UUID.UUID
694 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Teclado Virtual para Acessibilidade.app
695 - com.parallels.winapp.UUID.UUID
696 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/UninstallInstaller.exe.app
697 - com.parallels.winapp.UUID.UUID
698 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Utilitário de Configuração do Sistema.app:́rio de Configuração do Sistema:
699 - N/A
700 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Visualizador XPS.app
701 - com.parallels.winapp.UUID.UUID
702 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Vídeo.app:́deo:
703 - N/A
704 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows Control Panel.app
705 - com.parallels.winapp.UUID.UUID
706 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows Defender User Interface.app
707 - com.parallels.winapp.UUID.UUID
708 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows Explorer.app
709 - com.parallels.winapp.UUID.UUID
710 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows Media Player.app
711 - com.parallels.winapp.UUID.UUID
712 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows PowerShell ISE x32.app
713 - com.parallels.winapp.UUID.UUID
714 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows PowerShell ISE.app
715 - com.parallels.winapp.UUID.UUID
716 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows PowerShell x32.app
717 - com.parallels.winapp.UUID.UUID
718 /Users/USER/Applications (Parallels)/{UUID} Applications.localized/Windows PowerShell.app
719 - com.parallels.winapp.UUID.UUID
720 /Users/USER/Applications/Windows 8.1 Applications.app
721 - com.parallels.ApplicationGroupBridge.{UUID}
722 /Users/USER/Desktop/Arquivos Diversos/Fotos Diversas/AirPrintActivator/AirPrintActivator.app
723 - com.netputing.AirPrintActivator
724 /Users/USER/Desktop/Documents/Virtual Machines.localized/Windows Vista.vmwarevm/Applications/Barra Lateral do Windows — Windows Vista.app:— Windows Vista:
725 - N/A
726 /Users/USER/Desktop/Documents/Virtual Machines.localized/Windows Vista.vmwarevm/Applications/DAEMON Tools Lite — Windows Vista.app:— Windows Vista:
727 - N/A
728 /Users/USER/Desktop/Documents/Virtual Machines.localized/Windows Vista.vmwarevm/Applications/Windows Explorer — Windows Vista.app:— Windows Vista:
729 - N/A
730 /Users/USER/Documents/Parallels/Windows 8.1.pvm/Windows 8.1.app
731 - com.parallels.winapp.UUID.UUID.fs
732 /Users/USER/Downloads/IRPF2015MacOS-Xv1.2.app
733 - N/A
734 /Users/USER/Downloads/Popcorn-Time.app
735 - com.intel.nw
736 /Users/USER/Downloads/Receitanet-1.07.app
737 - N/A
738 /Users/USER/Downloads/Sophos Remove.app
739 - com.sophos.removal
740 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app
741 - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal
742 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app
743 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal
744 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app
745 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal
746 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app
747 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal
748 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app
749 - com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal
750 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app
751 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal
752
753 Frameworks
754
755 /Library/Frameworks/SAVI.framework
756 - com.sophos.sav.savi
757 /Library/Frameworks/SUMScanKit.framework
758 - com.sophos.sum.scan.kit
759 /Library/Frameworks/SophosGenericsCommon.framework
760 - com.sophos.macendpoint.SophosGenericsCommon
761 /Library/Frameworks/SophosGenericsCore.framework
762 - com.sophos.macendpoint.SophosGenericsCore
763 /Library/Frameworks/eToken.framework
764 - com.Safenet.eTokenFramework
765
766 PrefPane
767
768 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane
769 - com.oracle.java.JavaControlPanel
770 /Library/PreferencePanes/Flash Player.prefPane
771 - com.adobe.flashplayerpreferences
772
773 Bundles
774
775 /Library/Frameworks/eToken.framework/Versions/A/aks-ifdh.bundle
776 - com.SafeNet.eTokenIfdh
777 /Library/Frameworks/eToken.framework/Versions/A/aks-vr.bundle
778 - com.SafeNet.eTokenVR
779 /Library/Frameworks/eToken.framework/Versions/A/ikey-ifdh.bundle
780 - null
781 /Library/Internet Plug-Ins/AdobePDFViewer.plugin
782 - com.adobe.acrobat.pdfviewer
783 /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
784 - com.adobe.acrobat.pdfviewerNPAPI
785 /Library/Internet Plug-Ins/Flash Player.plugin
786 - com.macromedia.Flash Player.plugin
787 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin
788 - com.oracle.java.JavaAppletPlugin
789 /Library/Internet Plug-Ins/Silverlight.plugin
790 - com.microsoft.SilverlightPlugin
791 /Users/USER/Library/Internet Plug-Ins/npsf_cef.plugin
792 - com.sfcefLib.sf
793
794 Bundles (new)
795
796 /Applications/DarkParables_TheLittleMermaidAndThePurpleTide_mac.app
797 - com.BigFishGames.F8455T2L1
798 /Applications/GameManager.app
799 - com.bigfishgames.bfgclient.exe
800 /Applications/Haunted Manor - Queen of Death.app
801 - com.BigFishGames.F6836T2L1
802 /Applications/Parallels Desktop.app
803 - com.parallels.desktop.console
804 /Applications/Parallels Desktop.app/Contents/Applications/Parallels Link.app
805 - com.parallels.SharedAppLink.Agent
806 /Applications/Parallels Desktop.app/Contents/Applications/Parallels Mounter.app
807 - com.parallels.desktop.mounter
808 /Library/Application Support/Sophos/he/Installer.app
809 - com.sophos.macendpoint.InstallationDeployer
810 /Library/Application Support/Sophos/he/Sophos Installer Components/savi.bundle
811 - com.sophos.macinstallpkg.savi
812 /Users/USER/Downloads/bigfishgames_p149976713_s1_l1.app
813 - com.bigfishgames.Stub
814 /Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle
815 - com.google.Keystone
816
817 Library paths
818
819 /Library/Frameworks/eToken.framework/Versions/A/libSACLog.dylib
820 /Library/Frameworks/eToken.framework/Versions/A/libSACUI.dylib
821 /Library/Frameworks/eToken.framework/Versions/A/libcardosTokenEngine.dylib
822 /Library/Frameworks/eToken.framework/Versions/A/libeToken.dylib
823 /Library/Frameworks/eToken.framework/Versions/A/libeTokenHID.dylib
824 /Library/Frameworks/eToken.framework/Versions/A/libeTokenIfdh.dylib
825 /Library/Frameworks/eToken.framework/Versions/A/libeTokenVR.dylib
826 /Library/Frameworks/eToken.framework/Versions/A/libetvTokenEngine.dylib
827 /Library/Frameworks/eToken.framework/Versions/A/libiKeyIfdh.dylib
828 /Library/Frameworks/eToken.framework/Versions/A/libikeyTokenEngine.dylib
829 /Library/Sophos Anti-Virus/Libraries/libSULObjC.dylib
830 /Library/Sophos Anti-Virus/Libraries/libcrypto.dylib
831 /Library/Sophos Anti-Virus/Libraries/libssl.dylib
832 /Users/USER/Library/Application Support/Firefox/Profiles/mr9icvbf.default/gmp-gmpopenh264/1.4/libgmpopenh264.dy lib
833 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.823/_platform_specific/mac_x64/libwidev inecdm.dylib
834
835 App extensions
836
837 com.parallels.desktop.console.Resource-Monitor
838
839 Modifications
840
841 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat
842
843 Installations
844
845 Adobe Reader XI (11.0.11): 14/05/15 13:15
846 Microsoft® Silverlight™ Browser Plug-In: 04/05/15 11:43
847 SimpleCleaner: 21/04/15 10:44
848 Duplicate Cleaner For iPhoto: 21/04/15 10:28
849 Garmin Express: 17/04/15 08:19
850
851 Elapsed time (sec): 289