1 Start time: 14:16:16 06/15/15
2
3 Revision: 1321
4
5 Model Identifier: MacBookAir7,2
6 System Version: OS X 10.10.3 (14D136)
7 Kernel Version: Darwin 14.3.0
8 Time since boot: 3 days 21:31
9
10 UID: 501
11
12 System load
13
14 combined level = Bad
15 - battery level = Bad
16
17 CPU usage (%)
18
19 iCoreService_av (UID 0): 55.0
20
21 I/O wait time (ms/s)
22
23 iCoreService (UID 0): 56
24
25 I/O requests (KiB/s)
26
27 iCoreService (UID 0): 1131
28
29 Energy (lifetime)
30
31 WindowServer (UID 88): 642.61
32 com.apple.WebKit.WebContent (UID 501): 589.54
33 kernel_task (UID 0): 221.79
34 Finder (UID 501): 12.45
35 iCoreService (UID 0): 10.97
36
37 Energy (sampled)
38
39 WindowServer (UID 88): 27421.65
40 iCoreService (UID 0): 58.14
41 com.apple.WebKit.WebContent (UID 501): 13.63
42 kernel_task (UID 0): 10.50
43 Safari (UID 501): 8.74
44
45 DNS: 75.75.75.75
46
47 Diagnostic reports
48
49 2015-06-13 com.apple.WebKit.Plugin.64 crash
50
51 HID errors: 3
52
53 Kernel log
54
55 Jun 15 14:17:53 TMCCFS 75 ERROR needToScanThisClose $$aps.db
56 Jun 15 14:17:53 TMCCFS 75 ERROR needToScanThisOpen ###aps.db
57 Jun 15 14:17:53 TMCCFS 75 ERROR needToScanThisOpen ###aps.db-wal
58 Jun 15 14:17:53 TMCCFS 75 ERROR needToScanThisOpen ###aps.db-shm
59 Jun 15 14:17:53 TMCCFS 75 ERROR needToScanThisOpen ###aps.db
60 Jun 15 14:17:53 TMCCFS 75 ERROR needToScanThisOpen ###aps.db-wal
61 Jun 15 14:17:54 TMCCFS 90 ERROR needToScanThisOpen ###EngineDefaults.plist
62 Jun 15 14:17:55 TMCCFS 4005 ERROR needToScanThisClose $$https_discussions.apple.com_0.localstorage-journal
63 Jun 15 14:17:56 TMCCFS 248 ERROR needToScanThisClose $$2015-06-15_AccountFetch.log
64 Jun 15 14:17:56 TMCCFS 248 ERROR needToScanThisClose $$2015-06-15_IMAPMailboxSyncEngine.log
65 Jun 15 14:17:57 TMCCFS 4005 ERROR needToScanThisClose $$https_discussions.apple.com_0.localstorage-journal
66 Jun 15 14:17:57 TMCCFS 4854 ERROR needToScanThisExecve ==sed
67 Jun 15 14:17:57 TMCCFS 4854 ERROR needToScanThisExecve ==dyld
68 Jun 15 14:17:57 TMCCFS 4854 ERROR needToScanThisOpen ###LC_CTYPE
69 Jun 15 14:17:57 TMCCFS 4855 ERROR needToScanThisOpen ###sh-thd-1434391948
70 Jun 15 14:17:57 TMCCFS 4855 ERROR needToScanThisClose $$sh-thd-1434391948
71 Jun 15 14:17:57 TMCCFS 4856 ERROR needToScanThisExecve ==cat
72 Jun 15 14:17:57 TMCCFS 4856 ERROR needToScanThisExecve ==dyld
73 Jun 15 14:17:57 TMCCFS 4857 ERROR needToScanThisExecve ==sed
74 Jun 15 14:17:57 TMCCFS 4857 ERROR needToScanThisExecve ==dyld
75 Jun 15 14:17:57 TMCCFS 4856 ERROR needToScanThisOpen ###LC_CTYPE
76 Jun 15 14:17:57 TMCCFS 4857 ERROR needToScanThisOpen ###LC_CTYPE
77 Jun 15 14:17:57 TMCCFS 4860 ERROR needToScanThisExecve ==syslog
78 Jun 15 14:17:57 TMCCFS 4860 ERROR needToScanThisExecve ==dyld
79 Jun 15 14:17:57 TMCCFS 4861 ERROR needToScanThisExecve ==dyld
80
81 System log
82
83 Jun 15 12:40:06 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
84 Jun 15 12:40:06 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
85 Jun 15 13:03:14 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
86 Jun 15 13:03:14 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
87 Jun 15 13:03:14 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
88 Jun 15 13:03:14 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
89 Jun 15 13:03:14 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
90 Jun 15 13:03:14 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
91 Jun 15 13:05:30 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
92 Jun 15 13:05:30 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
93 Jun 15 13:05:30 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
94 Jun 15 13:05:30 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
95 Jun 15 13:05:30 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
96 Jun 15 13:05:30 com.apple.WebKit.WebContent: AVF error: Perf capability check failed: 0xe00002be
97 Jun 15 13:16:14 WindowServer: window 4ea is already attached to window 4d7
98 Jun 15 13:16:15 WindowServer: window 4ea is already attached to window 4d7
99 Jun 15 13:16:15 WindowServer: window 4ea is already attached to window 4d7
100 Jun 15 13:16:15 WindowServer: WSGetSurfaceInWindow : Invalid surface 689954640 for window 1239
101 Jun 15 13:16:15 WindowServer: WSGetSurfaceInWindow : Invalid surface 689954640 for window 1239
102 Jun 15 13:16:20 WindowServer: _CGXGetWindowOrderingGroup: Operation on a window 0x4ea requiring rights 0x5 by caller System Preferences
103 Jun 15 13:23:12 AppleCameraAssistant: DeviceEventHandler: ISP_PowerOffCamera error: 0xe00002c0
104 Jun 15 13:54:54 WindowServer: WSGetSurfaceInWindow : Invalid surface 649332933 for window 1237
105 Jun 15 13:54:54 WindowServer: WSGetSurfaceInWindow : Invalid surface 649332933 for window 1237
106 Jun 15 13:54:54 WindowServer: WSGetSurfaceInWindow : Invalid surface 649332933 for window 1237
107 Jun 15 14:02:15 WindowServer: WSGetSurfaceInWindow : Invalid surface 657004806 for window 1649
108
109 launchd log
110
111 Jun 11 16:39:52 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
112 Jun 11 16:39:52 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
113 Jun 11 16:39:52 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
114 Jun 11 16:39:52 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
115 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
116 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
117 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
118 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
119 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
120 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
121 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
122 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
123 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
124 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
125 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted
126 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted
127 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted
128 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted
129 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted
130 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted
131 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted
132 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
133 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
134 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
135 Jun 11 16:45:43 com.apple.xpc.launchd.domain.pid.SecurityAgent.191: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc
136
137 Loaded kernel extensions
138
139 com.trendmicro.kext.KERedirect (1.0.0)
140 com.trendmicro.kext.filehook (1.5.0)
141
142 System services loaded
143
144 com.adobe.fpsaud
145 com.apple.AccountPolicyHelper
146 com.apple.AssetCacheLocatorService
147 com.apple.CodeSigningHelper
148 com.apple.MobileFileIntegrity
149 com.apple.PerformanceAnalysis.animationperfd
150 com.apple.awdd
151 com.apple.cache_delete
152 com.apple.cfprefsd.xpc.daemon
153 com.apple.cmio.registerassistantservice
154 com.apple.coreduetd
155 com.apple.coresymbolicationd
156 com.apple.ctkd
157 com.apple.diagnosticd
158 com.apple.emond.aslmanager
159 com.apple.iconservices.iconservicesagent
160 com.apple.iconservices.iconservicesd
161 com.apple.ifdreader
162 com.apple.installd
163 com.apple.mtrecorder
164 - status: 78
165 com.apple.nehelper
166 com.apple.networkd_privileged
167 com.apple.nsurlsessiond_privileged
168 com.apple.nsurlstoraged
169 com.apple.periodic-daily
170 com.apple.periodic-weekly
171 com.apple.sandboxd
172 com.apple.secinitd
173 com.apple.security.syspolicy
174 - status: -15
175 com.apple.softwareupdate_download_service
176 com.apple.softwareupdated
177 com.apple.spindump
178 com.apple.spirecorder
179 - status: 78
180 com.apple.sysmond
181 com.apple.systemstats.analysis
182 com.apple.systemstatsd
183 com.apple.tccd.system
184 com.apple.watchdogd
185 com.apple.wdhelper
186 com.oracle.java.Helper-Tool
187 com.trendmicro.icore.av
188 com.trendmicro.icore.main
189 com.trendmicro.icore.wp
190 com.trendmicro.itis.plugin
191
192 Login services loaded
193
194 com.apple.AirPlayUIAgent
195 com.apple.CalendarAgent
196 com.apple.CallHistoryPluginHelper
197 com.apple.CallHistorySyncHelper
198 com.apple.EscrowSecurityAlert
199 com.apple.Maps.mapspushd
200 com.apple.SafariNotificationAgent
201 com.apple.accountsd
202 com.apple.bird
203 com.apple.cloudd
204 com.apple.cloudphotosd
205 com.apple.coreservices.appleid.authentication
206 com.apple.coreservices.lsactivity
207 com.apple.icloud.fmfd
208 com.apple.iconservices.iconservicesagent
209 com.apple.nsurlsessiond
210 com.apple.pbs
211 com.apple.rcd
212 com.apple.scopedbookmarksagent.xpc
213 com.apple.soagent
214 com.apple.spindump_agent
215 com.apple.telephonyutilities.callservicesd
216 com.oracle.java.Java-Updater
217 com.trendmicro.itis.dca
218 com.trendmicro.itis.uimgmt.agent
219 com.trendmicro.itis.uninstaller
220
221 User services loaded
222
223 com.apple.BKAgentService
224 com.apple.CloudPhotosConfiguration
225 com.apple.DataDetectorsDynamicData
226 com.apple.InputMethodKit.UserDictionary
227 com.apple.cfprefsd.xpc.agent
228 com.apple.geod
229 com.apple.imdpersistence.IMDPersistenceAgent
230 com.apple.internetaccounts
231 com.apple.pluginkit.pkd
232 com.apple.secd
233 com.apple.secinitd
234 com.apple.security.cloudkeychainproxy3
235 com.apple.tccd
236
237 User login items
238
239 iTunesHelper
240 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
241 InKeepr
242 - missing value
243
244 Safari extensions
245
246 InKeepr
247 - com.inkeepr.safari
248 Trend Micro Toolbar
249 - com.trend.itistoolbar
250
251 iCloud errors
252
253 cloudd 3
254 Mail 1
255
256 Continuity errors
257
258 lsuseractivityd 10
259 sharingd 9
260
261 Restricted files: 5
262
263 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
264 - mod date: May 29 18:19:07 2015
265 - size (B): 104
266 - checksum: 2639933360
267
268 <?xml version="1.0" encoding="UTF-8"?>
269 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
270 <plist version="1.0">
271 <dict>
272 <key>Label</key>
273 <string>com.oracle.java.Java-Updater</string>
274 <key>ProgramArguments</key>
275 <array>
276 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
277 <string>-bgcheck</string>
278 </array>
279 <key>StartCalendarInterval</key>
280 <dict>
281 <key>Hour</key>
282 <integer>18</integer>
283 <key>Minute</key>
284 <integer>19</integer>
285 <key>Weekday</key>
286 <integer>3</integer>
287 </dict>
288 <key>StandardErrorPath</key>
289 <string>/dev/null</string>
290 <key>StandardOutPath</key>
291 <string>/dev/null</string>
292 </dict>
293
294 ...and 1 more line(s)
295
296 Contents of /Library/LaunchAgents/com.trendmicro.itis.dca.plist
297 - mod date: Sep 16 06:39:33 2014
298 - size (B): 545
299 - checksum: 861140230
300
301 <?xml version="1.0" encoding="UTF-8"?>
302 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
303 <plist version="1.0">
304 <dict>
305 <key>Label</key>
306 <string>com.trendmicro.itis.dca</string>
307 <key>Disabled</key>
308 <false/>
309 <key>ProgramArguments</key>
310 <array>
311 <string>/Library/Application Support/TrendMicro/DCA/DCAManager.app/Contents/MacOS/DCAManager</string>
312 </array>
313 <key>RunAtLoad</key>
314 <true/>
315 <key>KeepAlive</key>
316 <false/>
317 <key>StartInterval</key>
318 <integer>3600</integer>
319 </dict>
320 </plist>
321
322 Contents of /Library/LaunchAgents/com.trendmicro.itis.uimgmt.agent.plist
323 - mod date: Sep 16 06:46:29 2014
324 - size (B): 576
325 - checksum: 3243407766
326
327 <?xml version="1.0" encoding="UTF-8"?>
328 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
329 <plist version="1.0">
330 <dict>
331 <key>Label</key>
332 <string>com.trendmicro.itis.uimgmt.agent</string>
333 <key>Program</key>
334 <string>/Library/Application Support/TrendMicro/TmccMac/UIMgmt.app/Contents/MacOS/UIMgmt</string>
335 <key>RunAtLoad</key>
336 <true/>
337 <key>KeepAlive</key>
338 <dict>
339 <key>PathState</key>
340 <dict>
341 <key>/Library/Application Support/TrendMicro/common/var/UIMgmt.lock</key>
342 <true/>
343 </dict>
344 </dict>
345 </dict>
346 </plist>
347
348 Contents of /Library/LaunchDaemons/com.trendmicro.icore.av.plist
349 - mod date: Sep 4 23:54:24 2014
350 - size (B): 727
351 - checksum: 2321961422
352
353 <?xml version="1.0" encoding="UTF-8"?>
354 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
355 <plist version="1.0">
356 <dict>
357 <key>Label</key>
358 <string>com.trendmicro.icore.av</string>
359 <key>ProgramArguments</key>
360 <array>
361 <string>/Library/Application Support/TrendMicro/TmccMac/iCoreService_av</string>
362 <string>-p</string>
363 <string>61301</string>
364 <string>-n</string>
365 <string>61100</string>
366 <string>/Library/Application Support/TrendMicro/common/lib/libTmAntiMalware.dylib</string>
367 </array>
368 <key>RunAtLoad</key>
369 <true/>
370 <key>KeepAlive</key>
371 <dict>
372 <key>SuccessfulExit</key>
373 <false/>
374 </dict>
375 <key>ThrottleInterval</key>
376 <integer>60</integer>
377 </dict>
378
379 ...and 1 more line(s)
380
381 Contents of /Library/LaunchDaemons/com.trendmicro.icore.main.plist
382 - mod date: Sep 4 23:54:24 2014
383 - size (B): 1088
384 - checksum: 2874464546
385
386 <?xml version="1.0" encoding="UTF-8"?>
387 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
388 <plist version="1.0">
389 <dict>
390 <key>Label</key>
391 <string>com.trendmicro.icore.main</string>
392 <key>ProgramArguments</key>
393 <array>
394 <string>/Library/Application Support/TrendMicro/TmccMac/iCoreService</string>
395 <string>-p</string>
396 <string>61100</string>
397 <string>-n</string>
398 <string>61100</string>
399 <string>/Library/Application Support/TrendMicro/common/lib/libnamingService.dylib</string>
400 <string>/Library/Application Support/TrendMicro/common/lib/libtaskManager.dylib</string>
401 <string>/Library/Application Support/TrendMicro/common/lib/libnotificationService.dylib</string>
402 <string>/Library/Application Support/TrendMicro/common/lib/libTmUpdate.dylib</string>
403 <string>/Library/Application Support/TrendMicro/common/lib/libTmDb.dylib</string>
404 </array>
405 <key>RunAtLoad</key>
406 <true/>
407 <key>KeepAlive</key>
408 <dict>
409 <key>SuccessfulExit</key>
410 <false/>
411
412 ...and 5 more line(s)
413
414 Contents of /Library/LaunchDaemons/com.trendmicro.icore.wp.plist
415 - mod date: Sep 4 23:54:24 2014
416 - size (B): 721
417 - checksum: 3675704302
418
419 <?xml version="1.0" encoding="UTF-8"?>
420 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
421 <plist version="1.0">
422 <dict>
423 <key>Label</key>
424 <string>com.trendmicro.icore.wp</string>
425 <key>ProgramArguments</key>
426 <array>
427 <string>/Library/Application Support/TrendMicro/TmccMac/iCoreService_wp</string>
428 <string>-p</string>
429 <string>61201</string>
430 <string>-n</string>
431 <string>61100</string>
432 <string>/Library/Application Support/TrendMicro/common/lib/libTmProxy.dylib</string>
433 </array>
434 <key>RunAtLoad</key>
435 <true/>
436 <key>KeepAlive</key>
437 <dict>
438 <key>SuccessfulExit</key>
439 <false/>
440 </dict>
441 <key>ThrottleInterval</key>
442 <integer>60</integer>
443 </dict>
444
445 ...and 1 more line(s)
446
447 Contents of /Library/LaunchDaemons/com.trendmicro.itis.plugin.plist
448 - mod date: Sep 16 06:46:29 2014
449 - size (B): 733
450 - checksum: 2202558249
451
452 <?xml version="1.0" encoding="UTF-8"?>
453 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
454 <plist version="1.0">
455 <dict>
456 <key>Label</key>
457 <string>com.trendmicro.itis.plugin</string>
458 <key>ProgramArguments</key>
459 <array>
460 <string>/Library/Application Support/TrendMicro/TmccMac/iCoreService</string>
461 <string>-p</string>
462 <string>61401</string>
463 <string>-n</string>
464 <string>61100</string>
465 <string>/Library/Application Support/TrendMicro/Plug-in/iTISPlugin.framework/iTISPlugin</string>
466 </array>
467 <key>RunAtLoad</key>
468 <true/>
469 <key>KeepAlive</key>
470 <dict>
471 <key>SuccessfulExit</key>
472 <false/>
473 </dict>
474 <key>ThrottleInterval</key>
475 <integer>60</integer>
476 </dict>
477
478 ...and 1 more line(s)
479
480 Contents of Library/LaunchAgents/com.trendmicro.itis.uninstaller.plist
481 - mod date: May 28 18:53:04 2015
482 - size (B): 557
483 - checksum: 3079679674
484
485 <?xml version="1.0" encoding="UTF-8"?>
486 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
487 <plist version="1.0">
488 <dict>
489 <key>Label</key>
490 <string>com.trendmicro.itis.uninstaller</string>
491 <key>Program</key>
492 <string>/Library/Application Support/TrendMicro/TmccMac/TMMacUninstaller.app/Contents/Resources/uninstaller_ monitor.sh</string>
493 <key>RunAtLoad</key>
494 <false/>
495 <key>WatchPaths</key>
496 <array>
497 <string>/Users/USER/.Trash</string>
498 </array>
499 </dict>
500 </plist>
501
502 Frameworks
503
504 /Library/Frameworks/TMAppCommon.framework
505 - com.yourcompany.TMAppCommon
506 /Library/Frameworks/TMAppCore.framework
507 - com.yourcompany.TMAppCore
508 /Library/Frameworks/TMGUIUtil.framework
509 - com.trendmicro.common.GUIUtilFWK
510 /Library/Frameworks/TMSSClient.framework
511 - com.trendmicro.tmss.tmssclient
512 /Library/Frameworks/TMWeb.framework
513 - com.trendmicro.TMWeb
514 /Library/Frameworks/iCoreClient.framework
515 - com.trendmicro.iCoreClient
516 /Library/Frameworks/iCoreClientPb.framework
517 - com.yourcompany.iCoreClientPb
518
519 PrefPane
520
521 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane
522 - com.oracle.java.JavaControlPanel
523 /Library/PreferencePanes/Flash Player.prefPane
524 - com.adobe.flashplayerpreferences
525
526 Bundles
527
528 /Library/Internet Plug-Ins/Flash Player.plugin
529 - com.macromedia.Flash Player.plugin
530 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin
531 - com.oracle.java.JavaAppletPlugin
532
533 Bundles (new)
534
535 /Applications/InKeepr/Reset Search.app
536 - com.dshovev.AppDS
537 /Users/USER/Library/Application Support/InKeepr/InKeepr.app
538 - com.dshovev.AppDS
539
540 Library paths
541
542 /Library/Application Support/TrendMicro/TMSS/libSystemChecker.dylib
543 /Library/Application Support/TrendMicro/TMSS/libTMPluginClient.dylib
544 /Library/Application Support/TrendMicro/TMSS/libTmUtyPPi.dylib
545 /Library/Application Support/TrendMicro/common/lib/libTmLog.dylib
546 /Library/Application Support/TrendMicro/common/lib/libTmUtil.dylib
547 /Library/Application Support/TrendMicro/common/lib/libprotobuf-lite.dylib
548 /Library/Frameworks/TMSSClient.framework/Versions/A/Frameworks/libTisCrypt.dyli b
549
550 Installations
551
552 Java 8 Update 45: 5/29/15, 6:19 PM
553 Adobe Flash Player: 5/28/15, 10:07 PM
554 tmccToolbar: 5/28/15, 7:04 PM
555 tmccapp: 5/28/15, 7:04 PM
556 tmccToolbar: 5/28/15, 7:04 PM
557
558 Elapsed time (sec): 453
