remove kext errors after upgrading to 10.10.4

Question

Level 1

10 points

remove kext errors after upgrading to 10.10.4

I have a Mac Mini and an iMac and am experiencing the same issue with both. After 10.10.4 upgrade, I get over 100 errors saying that certain kext files are unusable. I literally have to click OK about 100 times on both machines before my desktop becomes clear after rebooting. No big deal, just go delete the .kext files in /System/Library/Extensions right? Wrong. None of the files it lists (and I have to click OK to get past) actually exist. They've already been removed/uninstalled a long time ago. Tried running the latest Onyx, ACL8, Cleanmymac 3.0 (latest version library repair, permissions repair, etc). Even went into single-user mode, stripped all ACLs and reapplied in recovery mode. Nothing. Still 100s of popups on the desktop everytime I reboot. How do I get rid of these errors? They don't affect the functionality of the OS negatively at all. Everything still works fine.

iMac

Posted on Jul 1, 2015 6:23 PM

Reply

Answer 1

Best reply

Linc Davis

Level 10

209,547 points

Jul 1, 2015 7:16 PM in response to intense321

The first step is to get rid of "CleanMyMac," which is a scam and a common cause of instability and poor performance. Depending on what version you have, the developer's instructions may not completely remove it. Follow those instructions, then do as below.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/Library/LaunchDaemons/com.macpaw.CleanMyMac2.Agent.plist

Right-click or control-click the highlighted line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder may open with an item selected. If it does, move the selected item to the Trash. You may be prompted for your administrator login password.

Repeat with this line:

/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent

Restart the computer and empty the Trash.

You may also have to remove these items in the same way:

~/Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist

Never again install "CleanMyMac" or anything like it.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

I strongly suggest you delete "Onyx" as well, as it serves no real purpose except to make it easy for you to wreck the system.

After you've done all that, post the complete text of one of the alerts.

Reply

Answer 2

intense321 Author

Level 1

10 points

Jul 2, 2015 11:08 AM in response to Linc Davis

Linc Davis, you are a genius. Deleting "Cleanmymac 3" from both my Macs completely fixed the kext errors. However, now I'm having an issue with App Store Software Updates on one of the Macs. The other one updates fine.

iTunes 12.2, Command Line Tools Update 10.10, and Pro Video Formats 2.0.1 won't automatically install. I click on UPDATE and it turns light gray for a second and says INSTALLED, yet it won't actually install on my iMac. The App Store automatic update worked fine on my Mac Mini without such issues.

Reply

Answer 3

Linc Davis

Level 10

209,547 points

Jul 2, 2015 11:15 AM in response to intense321

This procedure will delete certain temporary and cache files used by system processes. The files are automatically generated and don't contain any of your data. Occasionally they can become corrupt and cause problems such as yours.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/var/folders/zz

Right-click or control-click the highlighted line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with a subfolder named "zz" selected. Move that subfolder to the Trash. You may be prompted for your administrator login password. Restart the computer and empty the Trash.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Reply

Answer 4

intense321 Author

Level 1

10 points

Jul 2, 2015 11:31 AM in response to Linc Davis

I think Cleanmymac 3 caused some permissions issues for me. When I tried to delete the folder from my admin account, I got the following errors. I did zap the folder from root successfully as shown below:

This is what I get when I try to use my admin account to perform the software update:

What are the user and system level ACLs supposed to be for that folder?

Reply

Answer 5

Linc Davis

Level 10

209,547 points

Jul 2, 2015 11:36 AM in response to intense321

Back up all data before proceeding.

This procedure will unlock all your user files (not system files) and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Triple-click anywhere in the following line on this page to select it:

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

Copy the selected text to the Clipboard by pressing the key combination command-C.

Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Paste into the Terminal window by pressing command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities ▹ Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

 ▹ Restart

from the menu bar.

Reply

Answer 6

intense321 Author

Level 1

10 points

Jul 2, 2015 11:51 AM in response to Linc Davis

Command ran successfully. This is what I get when I go to App Store on GUI. Is this normal?

Reply

Answer 7

intense321 Author

Level 1

10 points

Jul 2, 2015 11:54 AM in response to intense321

I get No Updates Available even though iTunes says there's an update:

Reply

Answer 8

Linc Davis

Level 10

209,547 points

Jul 2, 2015 11:59 AM in response to intense321

Please read this whole message before doing anything.

This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Reply

Answer 9

intense321 Author

Level 1

10 points

Jul 2, 2015 12:10 PM in response to Linc Davis

I am amazed by your knowledge of this issue. It worked in safe mode. How do I fix the normal mode so it works for future updates?

Reply

Answer 10

Linc Davis

Level 10

209,547 points

Jul 2, 2015 12:36 PM in response to intense321

If you installed "Avast" or any other commercial "anti-virus" or "security" software, remove it according to the developer's instructions after backing up all data.

Reply

Answer 11

intense321 Author

Level 1

10 points

Jul 2, 2015 4:16 PM in response to Linc Davis

I don't have antivirus software running, but I probably should explain what got me into this mess in the first place. I run OS-X server on both my Macs; the only things I use it for are for websites and SSH configuration. I have a router that pings both my computers every 30 seconds and if one loses connectivity (reboots etc) it will switch the route to external clients to whichever machine is active. I use chronosync to bidirectionally sync between the 2 websites folders buried inside the /Library/Server/... folders.

For some reason, after upgrading to Yosemite, the bidirectional sync stopped working giving me permissions errors. In an attempt to fix the issue, I used OS-X server File Sharing tab to open up permissions to "Everyone" for Read/Write access to both machines. I clicked on "Propagate Permissions to subfolders". Bad idea. Neither machine would even boot after doing that. To fix, I just re-installed OS-X 10.10.3 on top of the old installation and it seemed to fix all the permissions issues. I was able to access all my content and both machines were able to read and write to each other.. Until the 10.10.4 upgrade. When I tried to update is when I started having all kinds of issues including .kext errors and everything you have helped me solve thus far.

I suspect a lot of my subfolders on my boot volumes (on both machines) probably have some screwed up permissions due to me selecting "Propagate Permissions to subfolders". OS-X Server crashes frequently now (since I updated it to the latest version) as well.

Your command line $TMPDIR seems to have fixed the issues with installation/updates (especially in safe mode). I'm kind of wondering about the other folders as I think the permissions for a lot of them are still totally wrong.

Thanks for all your help. You have been incredibly helpful; more-so than any other resource I have been able to find.

Reply

Answer 12

intense321 Author

Level 1

10 points

Jul 2, 2015 4:39 PM in response to intense321

So I guess as an indirect "answer" to your question about 3rd party software-- OS-X Server *is* the 3rd party software that appears to be making things worse. When I stop the server completely and unload it, everything seems to work ok. When I fire up OS-X server (the newest update) is when strange things start happening. I deleted the entire folder where OS-X server stores all its data and migrated only the websites data portion to it (all the other nested folders are clean installs). This is because after updating OS-X server, it wouldn't even load. I would get stuck at "Updating Calendar Data.." or "Updating Wiki..." for HOURS.

Even after running a clean folder structure where OS-X Server stores its data, my issues persist, cropping up at unusual times.

Reply

Answer 13

Linc Davis

Level 10

209,547 points

Jul 2, 2015 6:35 PM in response to intense321

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 14

intense321 Author

Level 1

10 points

Jul 2, 2015 8:44 PM in response to Linc Davis

RESULTS FOR Machine #1 (Seabiscuit):

1 Start time: 21:34:33 07/02/15

2

3 Revision: 1325

4

5 Model Identifier: iMac12,2

6 System Version: OS X 10.10.4 (14E46)

7 Kernel Version: Darwin 14.4.0

8 Time since boot: 8:23

9

10 SerialATA

11

12 WDC WD1001FALS-403AA0

13 Crucial_CT480M500SSD1

14

15 PCI

16

17 pci105a,8760

18

19 Type: RAID Controller

20

21 Thunderbolt

22

23 Pegasus R-Series (Promise Technology, Inc.)

24

25 USB

26

27 MT1956 (MediaTek Inc.)

28

29 Bluetooth

30

31 Apple Wireless Keyboard

32 Apple Magic Mouse

33

34 boot args: kext-dev-mode=1

35

36 Activity

37

38 en0: in 62, out 2187 (KiB/s)

39

40 I/O requests (KiB/s)

41

42 bztransmit (UID 0): 4104

43

44 File opens (per sec)

45

46 bzfilelist (UID 0) => /Library/Backblaze.bzpkg/bzdata/bzfilelists/vUUID_root_filelist.dat.future (status 0): 40

47

48 System errors (per sec)

49

50 bztrans_thread0 (UID 0, error 35): 502

51 kextd (UID 0, error 2): 191

52

53 Energy (lifetime)

54

55 kernel_task (UID 0): 29.50

56 SystemUIServer (UID 501): 7.28

57 bztransmit (UID 0): 6.35

58

59 Energy (sampled)

60

61 kernel_task (UID 0): 31.29

62 SystemUIServer (UID 501): 9.65

63

64 Memory (MB)

65

66 kernel_task (UID 0): 1346

67

68 Font issues: 4

69

70 Trust settings: admin 3, user 13

71

72 TCP/IP

73

74 Subnet mask: 255.255.255.248

75

76 Listeners

77

78 cupsd: ipp

79 launchd: asip-webadmin

80

81 Diagnostic reports

82

83 2015-07-01 apspd crash

84 2015-07-02 1Password crash

85 2015-07-02 2BUA8C4S2C.com.agilebits.onepassword-osx-helper crash

86 2015-07-02 InternalFiltersXPC crash

87 2015-07-02 com.apple.MediaLibraryService crash

88 2015-07-02 com.apple.RemindersNC crash

89 2015-07-02 com.apple.geod crash

90

91 HID errors: 4

92

93 Kernel log

94

95 Jul 2 02:32:35 Limiting closed port RST response from 823 to 250 packets per second

96 Jul 2 02:32:55 ALF: ifnet_get_address_list_family error 12

97 Jul 2 02:35:07 ALF: ifnet_get_address_list_family error 12

98 Jul 2 02:37:18 ALF: ifnet_get_address_list_family error 12

99 Jul 2 02:46:29 Limiting closed port RST response from 305 to 250 packets per second

100 Jul 2 02:47:11 ALF: ifnet_get_address_list_family error 12

101 Jul 2 07:51:02 ALF: ifnet_get_address_list_family error 12

102 Jul 2 13:03:34 com_maxtor_IOPowSec00_10_5: GetVendorAndModelIDInfo failed

103 Jul 2 13:03:34 com_seagate_IOPowSec00_10_5: GetVendorAndModelIDInfo failed

104 Jul 2 13:03:34 STEX : setPowerState : 2, (0 = sleep , 1 = pause, 2 = wake)

105 Jul 2 13:03:34 IOSCSITargetDevice::RetrieveINQUIRYDataPage: Inquiry Failed for page 0

106 Jul 2 13:03:34 IOSCSITargetDevice::RetrieveINQUIRYDataPage: Inquiry Failed for page 0

107 Jul 2 13:03:34 com_maxtor_IOPowSec00_10_5: GetVendorAndModelIDInfo failed

108 Jul 2 13:03:34 com_seagate_IOPowSec00_10_5: GetVendorAndModelIDInfo failed

109 Jul 2 13:03:36 AppleBCM5701Ethernet [en0]: 233a 5ee initConfig - Enabling jumbo! mtu, max_pkt_size

110 Jul 2 13:11:15 AppleBCM5701Ethernet [en0]: 233a 5ee initConfig - Enabling jumbo! mtu, max_pkt_size

111 Jul 2 13:11:18 ** GPU Hardware VM is disabled (multispace: disabled, page table updates with DMA: disabled)

112 Jul 2 13:11:24 STEX : setPowerState : 2, (0 = sleep , 1 = pause, 2 = wake)

113 Jul 2 13:11:27 IOSCSITargetDevice::RetrieveINQUIRYDataPage: Inquiry Failed for page 0

114 Jul 2 13:11:27 IOSCSITargetDevice::RetrieveINQUIRYDataPage: Inquiry Failed for page 0

115 Jul 2 13:11:28 com_maxtor_IOPowSec00_10_5: GetVendorAndModelIDInfo failed

116 Jul 2 13:11:28 com_seagate_IOPowSec00_10_5: GetVendorAndModelIDInfo failed

117 Jul 2 13:14:40 considerRebuildOfPrelinkedKernel com.apple.kext.OSvKernDSPLib triggered rebuild

118 Jul 2 16:30:48 ALF: ifnet_get_address_list_family error 12

119 Jul 2 19:49:58 firefox (map: 0xffffff8047de1d20) triggered DYLD shared region unnest for map: 0xffffff8047de1d20, region 0x7fff9a400000->0x7fff9a600000. While not abnormal for debuggers, this increases system memory footprint until the target exits.

120

121 System log

122

123 Jul 2 21:34:46 com.apple.kextd: Can't create kext cache under / - owner not root.

124 Jul 2 21:34:47 com.apple.kextd: Can't create kext cache under / - owner not root.

125 Jul 2 21:34:47 com.apple.kextd: Can't create kext cache under / - owner not root.

126 Jul 2 21:34:47 com.apple.kextd: Can't create kext cache under / - owner not root.

127 Jul 2 21:34:47 com.apple.kextd: Can't create kext cache under / - owner not root.

128 Jul 2 21:34:47 com.apple.kextd: Can't create kext cache under / - owner not root.

129 Jul 2 21:34:47 com.apple.kextd: Can't create kext cache under / - owner not root.

130 Jul 2 21:34:48 secd: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

131 Jul 2 21:34:59 com.apple.kextd: Can't create kext cache under / - owner not root.

132 Jul 2 21:34:59 com.apple.kextd: Can't create kext cache under / - owner not root.

133 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

134 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

135 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

136 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

137 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

138 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

139 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

140 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

141 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

142 Jul 2 21:35:00 com.apple.kextd: Can't create kext cache under / - owner not root.

143 Jul 2 21:35:03 secd: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

144 Jul 2 21:35:18 secd: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

145 Jul 2 21:35:34 secd: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

146 Jul 2 21:35:49 secd: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

147 Jul 2 21:36:04 secd: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

148

149 launchd log

150

151 Jul 2 21:32:10 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

152 Jul 2 21:32:20 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

153 Jul 2 21:32:30 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

154 Jul 2 21:32:40 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

155 Jul 2 21:32:50 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

156 Jul 2 21:33:00 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

157 Jul 2 21:33:10 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

158 Jul 2 21:33:20 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

159 Jul 2 21:33:30 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

160 Jul 2 21:33:40 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

161 Jul 2 21:33:50 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

162 Jul 2 21:34:00 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

163 Jul 2 21:34:10 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

164 Jul 2 21:34:20 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

165 Jul 2 21:34:30 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

166 Jul 2 21:34:40 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

167 Jul 2 21:34:50 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

168 Jul 2 21:35:00 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

169 Jul 2 21:35:10 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

170 Jul 2 21:35:20 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

171 Jul 2 21:35:30 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

172 Jul 2 21:35:40 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

173 Jul 2 21:35:50 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

174 Jul 2 21:36:00 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

175 Jul 2 21:36:10 com.metakine.handsoff.agent: Service could not initialize: 14E46: xpcproxy + 13421 [1402][UUID]: 0xd

176

177 Console log

178

179 Jul 1 19:30:08 fontd: Failed to open read-only database, regenerating DB

180 Jul 1 21:31:41 mdworker: 21:31:41.380 ERROR: StandardMidiFile.cpp:180: ReadStandardMidiFile: File has no tracks

181 Jul 2 13:11:26 fontd: Failed to open read-only database, regenerating DB

182

183 Loaded kernel extensions

184

185 com.Cycling74.driver.SAVD (1.0.0d1)

186 com.Cycling74.driver.Soundflower (1.6.6)

187 com.attotech.driver.ATTOiSCSI (3.4.1b1)

188 com.logmein.driver.LogMeInSoundDriver (4.1.46f67)

189 com.makemkv.kext.daspi (1)

190 com.metakine.handsoff.driver (2.3.4)

191 com.techsmith.TACC (1.0.2)

192

193 System services loaded

194

195 com.adobe.SwitchBoard

196 com.adobe.fpsaud

197 com.apple.dpd

198 - status: 75

199 com.apple.spindump

200 - status: 75

201 com.apple.watchdogd

202 com.backblaze.bzserv

203 com.bjango.istatmenusdaemon

204 com.bombich.ccchelper

205 com.datarobotics.ddservice64d

206 com.datarobotics.ddserviced

207 com.google.keystone.daemon

208 com.metakine.handsoff.daemon

209 com.oracle.java.JavaUpdateHelper

210 com.promise.BGPMain_R

211 com.promise.bgasched

212 com.promise.emaild

213 com.realvnc.vncserver

214 com.teamviewer.Helper

215 noipd

216

217 Login services loaded

218

219 com.adobe.ARM.UUID

220 com.backblaze.bzbmenu

221 com.bjango.istatmenusagent

222 com.bjango.istatmenusnotifications

223 com.flexget

224 com.google.keystone.system.agent

225 com.metakine.handsoff.agent

226 - status: 78

227 com.paragon.ntfs.trial

228 com.realvnc.vncserver.peruser

229 com.spigot.ApplicationManager

230 com.spotify.webhelper

231

232 User login items

233

234 ControlPlane

235 - /Applications/ControlPlane.app

236 iTunesHelper

237 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

238 Delete iMessages

239 - /Library/Automator/Delete iMessages.app

240 Messages

241 - /Applications/Messages.app

242 Mail

243 - /Applications/Mail.app

244 Google Drive

245 - /Applications/Google Drive.app

246 Dropbox

247 - /Applications/Dropbox.app

248 HazelHelper

249 - /Library/PreferencePanes/Hazel.prefPane/Contents/MacOS/HazelHelper.app

250 VNC Address Book

251 - /Applications/RealVNC/VNC Address Book.app

252 Plex Media Server

253 - /Applications/Plex Media Server.app

254 BetterSnapTool

255 - /Applications/BetterSnapTool.app

256 CleanMyMac 3 Menu

257 - missing value

258 DDAssist

259 - /Applications/Drobo Dashboard.app/Contents/Resources/DDAssist.app

260 CCC User Agent

261 - /Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app

262 CleanMyMac 3 Menu

263 - missing value

264

265 User crontab

266

267 @daily /usr/local/bin/flexget --cron execute

268

269 Safari extensions

270

271 1Password

272 - com.agilebits.onepassword4-safari

273 Adblock Plus

274 - org.adblockplus.adblockplussafari

275 CouchPotato

276 - couchpotato.extension

277 eBay Shopping Assistant

278 - com.spigot.safari.ebayshopassist

279 Searchme

280 - com.spigot.safari.searchme

281 Slick Savings

282 - com.spigot.safari.slicksavings

283

284 Firefox extensions

285

286 Magrent

287 FireFTP

288

289 iCloud errors

290

291 cloudd 39

292 cloudphotosd 14

293 comapple.ncplugin.weather 6

294 Mail 6

295 Finder 5

296 Spotlight 4

297 Safari 4

298 Google Drive 3

299 comapple.InputMethodKit.UserDictionary 2

300 comapple.CloudPhotosConfiguration 2

301

302 Continuity errors

303

304 sharingd 14

305

306 Lockfiles: 37

307

308 Data packages

309

310 /Users/USER/Movies/Final Cut Backups.localized/ R 2's projects and events/ R 2's projects and events 20150628_1117_MDT 2 Cache.fcpcache

311

312 Contents of /Library/LaunchAgents/com.bjango.istatmenusagent.plist

313 - mod date: Jun 4 17:48:36 2015

314 - size (B): 595

315 - checksum: 2262789825

316

317 <?xml version="1.0" encoding="UTF-8"?>

318 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

319 <plist version="1.0">

320 <dict>

321 <key>MachServices</key>

322 <dict>

323 <key>com.bjango.istatmenusagent</key>

324 <true/>

325 </dict>

326 <key>LimitLoadToSessionType</key>

327 <string>Aqua</string>

328 <key>KeepAlive</key>

329 <true/>

330 <key>Label</key>

331 <string>com.bjango.istatmenusagent</string>

332 <key>Program</key>

333 <string>/Library/Application Support/iStat Menus 5/iStatMenusAgent.app/Contents/MacOS/iStatMenusAgent</string>

334 <key>RunAtLoad</key>

335 <true/>

336 </dict>

337 </plist>

338

339 Contents of /Library/LaunchAgents/com.bjango.istatmenusnotifications.plist

340 - mod date: Jun 4 17:48:37 2015

341 - size (B): 631

342 - checksum: 1266143884

343

344 <?xml version="1.0" encoding="UTF-8"?>

345 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

346 <plist version="1.0">

347 <dict>

348 <key>MachServices</key>

349 <dict>

350 <key>com.bjango.istatmenusnotifications</key>

351 <true/>

352 </dict>

353 <key>LimitLoadToSessionType</key>

354 <string>Aqua</string>

355 <key>KeepAlive</key>

356 <true/>

357 <key>Label</key>

358 <string>com.bjango.istatmenusnotifications</string>

359 <key>Program</key>

360 <string>/Library/Application Support/iStat Menus 5/iStat Menus Notifications.app/Contents/MacOS/iStat Menus Notifications</string>

361 <key>RunAtLoad</key>

362 <true/>

363 </dict>

364 </plist>

365

366 Contents of /Library/LaunchAgents/com.metakine.handsoff.agent.plist

367 - mod date: Apr 18 20:40:50 2015

368 - size (B): 622

369 - checksum: 409501680

370

371 <?xml version="1.0" encoding="UTF-8"?>

372 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

373 <plist version="1.0">

374 <dict>

375 <key>KeepAlive</key>

376 <true/>

377 <key>RunAtLoad</key>

378 <true/>

379 <key>StandardErrorPath</key>

380 <string>/Library/Handsoff/log/handsoff_agent.log</string>

381 <key>StandardOutPath</key>

382 <string>/Library/Handsoff/log/handsoff_agent.log</string>

383 <key>Label</key>

384 <string>com.metakine.handsoff.agent</string>

385 <key>ProgramArguments</key>

386 <array>

387 <string>/Library/Handsoff/HandsOffAgent.app/Contents/MacOS/HandsOffAgent</strin g>

388 </array>

389 </dict>

390 </plist>

391

392 Contents of /Library/LaunchAgents/com.realvnc.vncserver.peruser.plist

393 - mod date: Nov 28 08:34:27 2014

394 - size (B): 615

395 - checksum: 2554152532

396

397 <?xml version="1.0" encoding="UTF-8"?>

398 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

399 <plist version="1.0">

400 <dict>

401 <key>Label</key>

402 <string>com.realvnc.vncserver.peruser</string>

403 <key>LimitLoadToSessionType</key>

404 <string>Aqua</string>

405 <key>RunAtLoad</key>

406 <true/>

407 <key>ProgramArguments</key>

408 <array>

409 <string>/Library/vnc/vncserver_service_agent.app/Contents/MacOS/vncserver_servi ce_agent</string>

410 <string>-waitIfAlreadyRunning</string>

411 </array>

412 <key>QueueDirectories</key>

413 <array>

414 <string>/etc/vnc/service</string>

415 </array>

416 </dict>

417 </plist>

418

419 Contents of /Library/LaunchAgents/com.realvnc.vncserver.prelogin.plist

420 - mod date: Nov 28 08:34:27 2014

421 - size (B): 611

422 - checksum: 517174322

423

424 <?xml version="1.0" encoding="UTF-8"?>

425 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

426 <plist version="1.0">

427 <dict>

428 <key>Label</key>

429 <string>com.realvnc.vncserver.prelogin</string>

430 <key>LimitLoadToSessionType</key>

431 <string>LoginWindow</string>

432 <key>RunAtLoad</key>

433 <true/>

434 <key>ProgramArguments</key>

435 <array>

436 <string>/Library/vnc/vncserver_service_agent.app/Contents/MacOS/vncserver_servi ce_agent</string>

437 <string>-prelogin</string>

438 </array>

439 <key>QueueDirectories</key>

440 <array>

441 <string>/etc/vnc/service</string>

442 </array>

443 </dict>

444 </plist>

445

446 Contents of /Library/LaunchDaemons/com.apple.serverd.plist

447 - mod date: Jul 1 12:26:30 2015

448 - size (B): 559

449 - checksum: 77112498

450

451 <?xml version="1.0" encoding="UTF-8"?>

452 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

453 <plist version="1.0">

454 <dict>

455 <key>Label</key>

456 <string>com.apple.serverd</string>

457 <key>MachServices</key>

458 <dict>

459 <key>com.apple.serverd</key>

460 <true/>

461 </dict>

462 <key>OnDemand</key>

463 <false/>

464 <key>Program</key>

465 <string>/Library/PrivilegedHelperTools/com.apple.serverd</string>

466 <key>ProgramArguments</key>

467 <array>

468 <string>/Library/PrivilegedHelperTools/com.apple.serverd</string>

469 </array>

470 </dict>

471 </plist>

472

473 Contents of /Library/LaunchDaemons/com.attotech.iscsid.plist

474 - mod date: Apr 30 12:43:18 2014

475 - size (B): 1108

476 - checksum: 4278398742

477

478 <?xml version="1.0" encoding="UTF-8"?>

479 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

480 <plist version="1.0">

481 <dict>

482 <key>GroupName</key>

483 <string>wheel</string>

484 <key>KeepAlive</key>

485 <dict>

486 <key>SuccessfulExit</key>

487 <true/>

488 </dict>

489 <key>Label</key>

490 <string>com.attotech.iscsid</string>

491 <key>LaunchOnlyOnce</key>

492 <true/>

493 <key>OnDemand</key>

494 <false/>

495 <key>ProgramArguments</key>

496 <array>

497 <string>/usr/sbin/xtendsan/iscsid</string>

498 <string>-d</string>

499 <string>-J-Djava.security.policy=/usr/sbin/xtendsan/iscsid.sec</string>

500 <string>-J-Dcom.attotech.iscsid.discovery.verbose=true</string>

501 <string>--J-Dcom.attotech.iscsid.logLevel=VERBOSE</string>

502 <string>--J-Dcom.attotech.iscsid.discovery.MaxRecvDataSegmentLength=512</string >

503

504 ...and 12 more line(s)

505

506 Contents of /Library/LaunchDaemons/com.backblaze.bzserv.plist

507 - mod date: Jun 14 13:37:22 2015

508 - size (B): 551

509 - checksum: 509978751

510

511 <?xml version="1.0" encoding="UTF-8"?>

512 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

513 <plist version="1.0">

514 <dict>

515 <key>StandardOutPath</key>

516 <string>/dev/null</string>

517 <key>StandardErrorPath</key>

518 <string>/dev/null</string>

519 <key>Label</key>

520 <string>com.backblaze.bzserv</string>

521 <key>OnDemand</key>

522 <false/>

523 <key>RunAtLoad</key>

524 <true/>

525 <key>KeepAlive</key>

526 <true/>

527 <key>ProgramArguments</key>

528 <array>

529 <string>/Library/Backblaze.bzpkg/bzserv</string>

530 </array>

531 </dict>

532 </plist>

533

534 Contents of /Library/LaunchDaemons/com.bjango.istatmenusdaemon.plist

535 - mod date: Jun 4 17:48:36 2015

536 - size (B): 505

537 - checksum: 3697781966

538

539 <?xml version="1.0" encoding="UTF-8"?>

540 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

541 <plist version="1.0">

542 <dict>

543 <key>MachServices</key>

544 <dict>

545 <key>com.bjango.istatmenusdaemon</key>

546 <true/>

547 </dict>

548 <key>KeepAlive</key>

549 <true/>

550 <key>Label</key>

551 <string>com.bjango.istatmenusdaemon</string>

552 <key>Program</key>

553 <string>/Library/Application Support/iStat Menus 5/iStatMenusDaemon</string>

554 <key>RunAtLoad</key>

555 <true/>

556 </dict>

557 </plist>

558

559 Contents of /Library/LaunchDaemons/com.bombich.ccchelper.plist

560 - mod date: Jun 30 23:34:13 2015

561 - size (B): 484

562 - checksum: 801575064

563

564 <?xml version="1.0" encoding="UTF-8"?>

565 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

566 <plist version="1.0">

567 <dict>

568 <key>Label</key>

569 <string>com.bombich.ccchelper</string>

570 <key>MachServices</key>

571 <dict>

572 <key>com.bombich.ccchelper</key>

573 <true/>

574 </dict>

575 <key>ProgramArguments</key>

576 <array>

577 <string>/Library/PrivilegedHelperTools/com.bombich.ccchelper</string>

578 </array>

579 <key>RunAtLoad</key>

580 <true/>

581 </dict>

582 </plist>

583

584 Contents of /Library/LaunchDaemons/com.datarobotics.ddservice64d.plist

585 - mod date: May 21 15:11:48 2015

586 - size (B): 488

587 - checksum: 1751270588

588

589 <?xml version="1.0" encoding="UTF-8"?>

590 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

591 <plist version="1.0">

592 <dict>

593 <key>Label</key>

594 <string>com.datarobotics.ddservice64d</string>

595 <key>ProgramArguments</key>

596 <array>

597 <string>/Library/Application Support/Data Robotics/Drobo Dashboard/DDService64d</string>

598 </array>

599 <key>ServiceIPC</key>

600 <false/>

601 <key>OnDemand</key>

602 <false/>

603 <key>RunAtLoad</key>

604 <true/>

605 </dict>

606 </plist>

607

608 Contents of /Library/LaunchDaemons/com.datarobotics.ddserviced.plist

609 - mod date: May 21 15:11:48 2015

610 - size (B): 484

611 - checksum: 2807134579

612

613 <?xml version="1.0" encoding="UTF-8"?>

614 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

615 <plist version="1.0">

616 <dict>

617 <key>Label</key>

618 <string>com.datarobotics.ddserviced</string>

619 <key>ProgramArguments</key>

620 <array>

621 <string>/Library/Application Support/Data Robotics/Drobo Dashboard/DDServiced</string>

622 </array>

623 <key>ServiceIPC</key>

624 <false/>

625 <key>OnDemand</key>

626 <false/>

627 <key>RunAtLoad</key>

628 <true/>

629 </dict>

630 </plist>

631

632 Contents of /Library/LaunchDaemons/com.metakine.handsoff.daemon.plist

633 - mod date: Apr 18 20:40:50 2015

634 - size (B): 687

635 - checksum: 481345352

636

637 <?xml version="1.0" encoding="UTF-8"?>

638 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

639 <plist version="1.0">

640 <dict>

641 <key>KeepAlive</key>

642 <true/>

643 <key>StandardErrorPath</key>

644 <string>/Library/Handsoff/log/handsoff_daemon.log</string>

645 <key>StandardOutPath</key>

646 <string>/Library/Handsoff/log/handsoff_daemon.log</string>

647 <key>MachServices</key>

648 <dict>

649 <key>com.metakine.handsoff.daemon</key>

650 <true/>

651 </dict>

652 <key>Label</key>

653 <string>com.metakine.handsoff.daemon</string>

654 <key>RunAtLoad</key>

655 <true/>

656 <key>ProgramArguments</key>

657 <array>

658 <string>/Library/Handsoff/HandsOffDaemon</string>

659 </array>

660 </dict>

661 </plist>

662

663 Contents of /Library/LaunchDaemons/com.promise.BGPMain_R.plist

664 - mod date: Apr 21 04:21:46 2014

665 - size (B): 484

666 - checksum: 4228525851

667

668 <?xml version="1.0" encoding="UTF-8"?>

669 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

670 <plist version="1.0">

671 <dict>

672 <key>Label</key>

673 <string>com.promise.BGPMain_R</string>

674 <key>OnLoad</key>

675 <true/>

676 <key>ProgramArguments</key>

677 <array>

678 <string>/Applications/Promise Utility.app/Contents/Resources/XMLBase/promiseutil_bgpmain</string>

679 </array>

680 <key>KeepAlive</key>

681 <true/>

682 <key>RunAtLoad</key>

683 <true/>

684 </dict>

685 </plist>

686

687 Contents of /Library/LaunchDaemons/com.promise.bgasched.plist

688 - mod date: Apr 21 04:21:46 2014

689 - size (B): 701

690 - checksum: 2474655074

691

692 <?xml version="1.0" encoding="UTF-8"?>

693 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

694 <plist version="1.0">

695 <dict>

696 <key>Label</key>

697 <string>com.promise.bgasched</string>

698 <key>UserName</key>

699 <string>root</string>

700 <key>GroupName</key>

701 <string>wheel</string>

702 <key>ProgramArguments</key>

703 <array>

704 <string>/Applications/Promise Utility.app/Contents/Resources/promiseutil_bgasched</string>

705 </array>

706 <key>RunAtLoad</key>

707 <false/>

708 <key>EnvironmentVariables</key>

709 <dict>

710 <key>SW_CONF_PATH</key>

711 <string>/Applications/Promise Utility.app/Contents/Resources/apache2/conf</string>

712 </dict>

713 </dict>

714 </plist>

715

716 Contents of /Library/LaunchDaemons/com.promise.emaild.plist

717 - mod date: Apr 21 04:21:46 2014

718 - size (B): 723

719 - checksum: 575068648

720

721 <?xml version="1.0" encoding="UTF-8"?>

722 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

723 <plist version="1.0">

724 <dict>

725 <key>Label</key>

726 <string>com.promise.emaild</string>

727 <key>UserName</key>

728 <string>root</string>

729 <key>GroupName</key>

730 <string>wheel</string>

731 <key>ProgramArguments</key>

732 <array>

733 <string>/Applications/Promise Utility.app/Contents/Resources/promiseutil_emaild</string>

734 </array>

735 <key>RunAtLoad</key>

736 <false/>

737 <key>EnvironmentVariables</key>

738 <dict>

739 <key>SW_CONF_PATH</key>

740 <string>/Applications/Promise Utility.app/Contents/Resources/apache2/conf</string>

741 </dict>

742 </dict>

743 </plist>

744

745 Contents of /Library/LaunchDaemons/com.purevpn.macapp.plist

746 - mod date: Oct 10 18:42:10 2014

747 - size (B): 778

748 - checksum: 2734925707

749

750 <?xml version="1.0" encoding="UTF-8"?>

751 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

752 <plist version="1.0">

753 <dict>

754 <key>Disabled</key>

755 <true/>

756 <key>Label</key>

757 <string>com.purevpn.macapp</string>

758 <key>OnDemand</key>

759 <true/>

760 <key>ProgramArguments</key>

761 <array>

762 <string>/Library/PrivilegedHelperTools/com.purevpn.macapp</string>

763 </array>

764 <key>ServiceIPC</key>

765 <true/>

766 <key>Sockets</key>

767 <dict>

768 <key>MasterSocket</key>

769 <dict>

770 <key>SockFamily</key>

771 <string>Unix</string>

772 <key>SockPathMode</key>

773 <integer>438</integer>

774 <key>SockPathName</key>

775

776 ...and 7 more line(s)

777

778 Contents of /Library/LaunchDaemons/com.realvnc.vncserver.plist

779 - mod date: Nov 28 08:34:27 2014

780 - size (B): 435

781 - checksum: 3590898037

782

783 <?xml version="1.0" encoding="UTF-8"?>

784 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

785 <plist version="1.0">

786 <dict>

787 <key>Label</key>

788 <string>com.realvnc.vncserver</string>

789 <key>ProgramArguments</key>

790 <array>

791 <string>/Library/vnc/vncserver_service_daemon</string>

792 </array>

793 <key>QueueDirectories</key>

794 <array>

795 <string>/etc/vnc/service</string>

796 </array>

797 </dict>

798 </plist>

799

800 Contents of /Library/LaunchDaemons/noip2.plist

801 - mod date: Mar 26 12:49:34 2015

802 - size (B): 545

803 - checksum: 495040097

804

805 <?xml version="1.0" encoding="UTF-8"?>

806 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

807 <plist version="1.0">

808 <dict>

809 <key>Disabled</key>

810 <false/>

811 <key>GroupName</key>

812 <string>wheel</string>

813 <key>Label</key>

814 <string>noipd</string>

815 <key>ProgramArguments</key>

816 <array>

817 <string>/usr/local/bin/noip2-boot.sh</string>

818 </array>

819 <key>RunAtLoad</key>

820 <true/>

821 <key>StandardErrorPath</key>

822 <string>/dev/null</string>

823 <key>UserName</key>

824 <string>root</string>

825 </dict>

826 </plist>

827

828 Contents of /System/Library/LaunchAgents/com.apple.mrt.uiagent.plist

829 - empty

830 - mod date: Oct 22 16:25:41 2013

831 - size (B): 0

832 - checksum: 4294967295

833

834 [N/A]

835

836 Contents of /System/Library/LaunchAgents/com.paragon.NTFS.notify.plist

837 - mod date: Apr 12 07:19:10 2013

838 - size (B): 487

839 - checksum: 3292335405

840

841 <?xml version="1.0" encoding="UTF-8"?>

842 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

843 <plist version="1.0">

844 <dict>

845 <key>Label</key>

846 <string>com.paragon.ntfs.trial</string>

847 <key>ProgramArguments</key>

848 <array>

849 <string>/Library/PreferencePanes/NTFSforMacOSX.prefPane/Contents/MacOS/notifica tor</string>

850 </array>

851 <key>RunAtLoad</key>

852 <true/>

853 <key>LimitLoadToSessionType</key>

854 <string>Aqua</string>

855 </dict>

856 </plist>

857

858 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

859 - mod date: Jul 1 12:26:40 2015

860 - size (B): 803

861 - checksum: 3972992876

862

863 <?xml version="1.0" encoding="UTF-8"?>

864 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

865 <plist version="1.0">

866 <dict>

867 <key>Disabled</key>

868 <true/>

869 <key>EnvironmentVariables</key>

870 <dict>

871 <key>SERVER_INSTALL_PATH_PREFIX</key>

872 <string>/Applications/Server.app/Contents/ServerRoot</string>

873 <key>XPC_SERVICES_UNAVAILABLE</key>

874 <string>1</string>

875 </dict>

876 <key>Label</key>

877 <string>org.apache.httpd</string>

878 <key>OnDemand</key>

879 <false/>

880 <key>ProgramArguments</key>

881 <array>

882 <string>/usr/sbin/httpd</string>

883 <string>-D</string>

884 <string>FOREGROUND</string>

885 <string>-D</string>

886 <string>WEBSERVICE_ON</string>

887 <string>-f</string>

888

889 ...and 4 more line(s)

890

891 Contents of /private/etc/pam.d/vncserver

892 - mod date: Nov 28 08:34:27 2014

893 - size (B): 263

894 - checksum: 2472402372

895

896 account required pam_opendirectory.so

897 auth required pam_opendirectory.so

898

899 Contents of /private/etc/pf.conf

900 - mod date: Jul 1 12:26:31 2015

901 - size (B): 1153

902 - checksum: 3892002696

903

904 scrub-anchor "com.apple/*"

905 nat-anchor "com.apple/*"

906 rdr-anchor "com.apple/*"

907 dummynet-anchor "com.apple/*"

908 anchor "com.apple/*"

909 load anchor "com.apple" from "/etc/pf.anchors/com.apple"

910 anchor "com.apple.server-firewall/*"

911 load anchor "com.apple.server-firewall" from "/etc/pf.anchors/com.apple.server-firewall"

912

913 Contents of /private/etc/ssh_config

914 - mod date: Jun 29 15:57:13 2015

915 - size (B): 3848

916 - checksum: 1744278567

917

918 Host *

919 SendEnv LANG LC_*

920 GSSAPIAuthentication yes

921 GSSAPIDelegateCredentials no

922 GSSAPIKeyExchange no

923 GSSAPITrustDNS no

924

925 Contents of /private/etc/syslog.conf

926 - mod date: Jul 1 12:26:32 2015

927 - size (B): 200

928 - checksum: 3776496046

929

930 install.* @127.0.0.1:32376

931 auth.* @127.0.0.1:60762

932

933 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

934 - sticky XML document text

935 - mod date: Apr 22 14:05:05 2015

936 - size (B): 631

937 - checksum: 4116814193

938

939 <?xml version="1.0" encoding="UTF-8"?>

940 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

941 <plist version="1.0">

942 <dict>

943 <key>Label</key>

944 <string>com.adobe.ARM.UUID</string>

945 <key>ProgramArguments</key>

946 <array>

947 <string>/Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

948 <string>semi-auto</string>

949 </array>

950 <key>RunAtLoad</key>

951 <true/>

952 <key>StartInterval</key>

953 <integer>12600</integer>

954 </dict>

955 </plist>

956

957 Contents of Library/LaunchAgents/com.apple.FolderActions.folders.plist

958 - sticky XML document text

959 - mod date: May 23 15:31:17 2015

960 - size (B): 517

961 - checksum: 1189540302

962

963 <?xml version="1.0" encoding="UTF-8"?>

964 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

965 <plist version="1.0">

966 <dict>

967 <key>Label</key>

968 <string>com.apple.FolderActions.folders</string>

969 <key>Program</key>

970 <string>/usr/bin/osascript</string>

971 <key>ProgramArguments</key>

972 <array>

973 <string>osascript</string>

974 <string>-e</string>

975 <string>tell application "Folder Actions Dispatcher" to tick</string>

976 </array>

977 <key>WatchPaths</key>

978 <array/>

979 </dict>

980 </plist>

981

982 Contents of Library/LaunchAgents/com.apple.serveralertproxy.plist

983 - mod date: Jul 1 16:54:55 2015

984 - size (B): 76

985 - checksum: 2370036484

986

987 <?xml version="1.0" encoding="UTF-8"?>

988 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

989 <plist version="1.0">

990 <dict>

991 <key>MachServices</key>

992 <dict>

993 <key>com.apple.server.alerts.xpc</key>

994 <true/>

995 <key>com.apple.server.aps</key>

996 <true/>

997 </dict>

998 <key>LaunchEvents</key>

999 <dict>

1000 <key>com.apple.usernotificationcenter.matching</key>

1001 <dict>

1002 <key>alertproxy</key>

1003 <dict>

1004 <key>bundleid</key>

1005 <string>com.apple.Server.v4</string>

1006 <key>events</key>

1007 <array>

1008 <string>didDeliverNotification</string>

1009 <string>didActivateNotification</string>

1010 </array>

1011 </dict>

1012

1013 ...and 14 more line(s)

1014

1015 Contents of Library/LaunchAgents/com.backblaze.bzbmenu.plist

1016 - mod date: Jul 2 13:11:32 2015

1017 - size (B): 521

1018 - checksum: 2263925454

1019

1020 <?xml version="1.0" encoding="UTF-8"?>

1021 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1022 <plist version="1.0">

1023 <dict>

1024 <key>Label</key>

1025 <string>com.backblaze.bzbmenu</string>

1026 <key>OnDemand</key>

1027 <false/>

1028 <key>RunAtLoad</key>

1029 <true/>

1030 <key>KeepAlive</key>

1031 <true/>

1032 <key>ThrottleInterval</key>

1033 <integer>60</integer>

1034 <key>ProgramArguments</key>

1035 <array>

1036 <string>/Library/Backblaze.bzpkg/bzbmenu.app/Contents/MacOS/bzbmenu</string>

1037 </array>

1038 </dict>

1039 </plist>

1040

1041 Contents of Library/LaunchAgents/com.flexget.plist

1042 - sticky XML document text

1043 - mod date: Mar 2 13:11:49 2015

1044 - size (B): 502

1045 - checksum: 1546003719

1046

1047 <?xml version="1.0" encoding="UTF-8"?>

1048 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1049 <plist version="1.0">

1050 <dict>

1051 <key>Label</key>

1052 <string>com.flexget</string>

1053 <key>ProgramArguments</key>

1054 <array>

1055 <string>/usr/local/bin/flexget</string>

1056 <string>--cron</string>

1057 <string>execute</string>

1058 </array>

1059 <key>Nice</key>

1060 <integer>1</integer>

1061 <key>StartInterval</key>

1062 <integer>900</integer>

1063 <key>RunAtLoad</key>

1064 <true/>

1065 </dict>

1066 </plist>

1067

1068 Contents of Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

1069 - sticky XML document text

1070 - mod date: Jul 1 21:00:55 2015

1071 - size (B): 725

1072 - checksum: 2904481129

1073

1074 <?xml version="1.0" encoding="UTF-8"?>

1075 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1076 <plist version="1.0">

1077 <dict>

1078 <key>Label</key>

1079 <string>com.macpaw.CleanMyMac3.Scheduler</string>

1080 <key>ProgramArguments</key>

1081 <array>

1082 <string>/usr/bin/open</string>

1083 <string>-F</string>

1084 <string>-g</string>

1085 <string>-n</string>

1086 <string>/Users/USER/Library/Application Support/CleanMyMac 3/CleanMyMac 3 Scheduler.app</string>

1087 <string>--args</string>

1088 <string>-scheduled</string>

1089 </array>

1090 <key>RunAtLoad</key>

1091 <true/>

1092 <key>StartCalendarInterval</key>

1093 <dict>

1094 <key>Hour</key>

1095 <integer>21</integer>

1096 <key>Minute</key>

1097 <integer>0</integer>

1098 </dict>

1099

1100 ...and 2 more line(s)

1101

1102 Contents of Library/LaunchAgents/com.spigot.ApplicationManager.plist

1103 - sticky XML document text

1104 - mod date: Jun 21 18:51:02 2015

1105 - size (B): 477

1106 - checksum: 3213242514

1107

1108 <?xml version="1.0" encoding="UTF-8"?>

1109 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1110 <plist version="1.0">

1111 <dict>

1112 <key>KeepAlive</key>

1113 <true/>

1114 <key>Label</key>

1115 <string>com.spigot.ApplicationManager</string>

1116 <key>ProgramArguments</key>

1117 <array>

1118 <string>/Users/USER/Library/Application Support/Spigot/ApplicationManager</string>

1119 <string>--protect</string>

1120 </array>

1121 <key>RunAtLoad</key>

1122 <true/>

1123 </dict>

1124 </plist>

1125

1126 Contents of Library/LaunchAgents/com.spotify.webhelper.plist

1127 - sticky XML document text

1128 - mod date: Jun 12 18:28:17 2015

1129 - size (B): 530

1130 - checksum: 563764244

1131

1132 <?xml version="1.0" encoding="UTF-8"?>

1133 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

1134 <plist version="1.0">

1135 <dict>

1136 <key>Label</key>

1137 <string>com.spotify.webhelper</string>

1138 <key>KeepAlive</key>

1139 <dict>

1140 <key>NetworkState</key>

1141 <true/>

1142 </dict>

1143 <key>RunAtLoad</key>

1144 <true/>

1145 <key>Program</key>

1146 <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>

1147 <key>SpotifyPath</key>

1148 <string>/Applications/Spotify.app</string></dict>

1149 </plist>

1150

1151 Bad plists

1152

1153 /Library/Preferences/ApplePushServiceProvider/com.apple.apspd.plist

1154

1155 App extensions

1156

1157 com.getdropbox.dropbox.garcon

1158 com.google.GoogleDrive.FinderSyncAPIExtension

1159 com.parallels.desktop.console.Resource-Monitor

1160 uk.co.markallan.clamxav.ClamXav-Latest

1161

1162 Bad kernel extensions

1163

1164 /System/Library/Extensions/Belcarra.USBLAN_netpart.kext/Contents/PlugIns/Belcar ra.USBLAN_netpart.kext

1165 /System/Library/Extensions/Belcarra.USBLAN_usbpart.kext/Contents/PlugIns/Belcar ra.USBLAN_usbpart.kext

1166 /System/Library/Extensions/RemoteControl.USBLAN_usbpart.kext/Contents/PlugIns/R emoteControl.USBLAN_usbpart.kext

1167 /System/Library/Extensions/RoxioBluRaySupport.kext

1168

1169 Installations

1170

1171 Sunrise Calendar: 7/1/15, 2:06 PM

1172 AppleJack Distribution: 6/30/15, 7:43 PM

1173 VNC®: 6/29/15, 3:51 PM

1174 FileBot: 6/27/15, 3:08 PM

1175 FileBot: 6/27/15, 3:07 PM

1176

1177 Elapsed time (sec): 435

Reply

Answer 15

intense321 Author

Level 1

10 points

Jul 2, 2015 8:48 PM in response to Linc Davis

http://pastebin.com/epksdN03

Results for mac #1 (Seabiscuit)

Reply