Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Restart/Shutdown problems after updating to OS 10.10.3

Ever since I updated to OS 10.10.3 my MacBookPro won't shut down or restart. It just keeps spinning. The only way to shut it down is to press the Start button for a few seconds. Rare are the instances when it does shut down normally. I'm puzzled because I never encountered this problem with any of our office iMacs of which I am the system administrator.


These are the prescribed solutions that I've tried:

1. Repair disk permissions and and repair disk using Disk Utility (also used Onyx) and nothing changed.
2. When I run the device in Safe mood, it restarts or shuts down properly. So before I restart/shut down, I make sure all applications are closed, but the issue is still there.

3. Before the arrival of Update 10.10.4, I reinstalled 10.10.3 and that also did not solve the problem.

4. The system is now updated to 10.10.4 but the problem has not gone away.


I wonder if anyone else had experienced what I’ve described.


_ _ _ _

MacBook Pro (Retina, 13-inch, Late 2013)

Processor 2.4GHZ, 8GB RAM, 250GB SSD

Posted on Jul 7, 2015 9:31 PM

Reply
9 replies

Jul 7, 2015 10:17 PM in response to paksiw

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec

Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Jul 8, 2015 4:49 AM in response to paksiw

paksiw wrote:

2. When I run the device in Safe mood, it restarts or shuts down properly. So before I restart/shut down, I make sure all applications are closed, but the issue is still there.

That suggests`that you may have some third party application installed that may be the cause of the problem. ( I assume you meant safe mode)


Post an Etrecheck report:


http://www.etresoft.com/etrecheck


Ciao.

Jul 8, 2015 8:47 AM in response to Linc Davis

1 Start time: 18:25:19 07/08/15

2

3 Revision: 1326

4

5 Model Identifier: MacBookPro11,1

6 System Version: OS X 10.10.4 (14E46)

7 Kernel Version: Darwin 14.4.0

8 Time since boot: 4:21

9

10 Graphics/Displays

11

12 Intel Iris

13

14 Color LCD

15 SAMSUNG (Main)

16

17 USB

18

19 USB Optical Mouse (KYE Systems Corp.)

20

21 FileVault 2

22

23 FileVault is On.

24

25 File opens (per sec)

26

27 AvStats (UID 501) => /System/Library/Frameworks/SystemConfiguration.framework/Resources/English.lpro j/NetworkInterface.strings (status 0): 6

28

29 Energy (lifetime)

30

31 com.apple.WebKit.WebContent (UID 501): 9.46

32 WindowServer (UID 88): 9.14

33 kernel_task (UID 0): 6.36

34

35 Energy (sampled)

36

37 savapi (UID 0): 99.76

38 ReportCrash (UID 0): 7.48

39

40 Firewall: On

41

42 Diagnostic reports

43

44 2015-06-19 avlogwriter crash x20

45 2015-06-20 avlogwriter crash x20

46 2015-06-21 avlogwriter crash x20

47 2015-06-22 avlogwriter crash x20

48 2015-06-23 avlogwriter crash x20

49 2015-06-24 avlogwriter crash x20

50 2015-06-24 com.apple.WebKit.WebContent crash

51 2015-06-25 AvStats crash

52 2015-06-25 avlogwriter crash x20

53 2015-06-26 avlogwriter crash x20

54 2015-06-27 avlogwriter crash x20

55 2015-06-27 garcon crash

56 2015-06-28 avlogwriter crash x20

57 2015-06-29 avlogwriter crash x20

58 2015-06-30 avlogwriter crash x20

59 2015-07-01 avlogwriter crash x20

60 2015-07-02 avlogwriter crash x10

61 2015-07-03 Microsoft Error Reporting crash

62 2015-07-03 avlogwriter crash x20

63 2015-07-03 com.apple.WebKit.WebContent crash

64 2015-07-05 avlogwriter crash x19

65 2015-07-05 com.apple.AmbientDisplayAgent crash

66 2015-07-06 avlogwriter crash x20

67 2015-07-07 avlogwriter crash x18

68 2015-07-08 avlogwriter crash x39

69

70 HID errors: 19

71

72 Kernel log

73

74 Jul 8 18:07:32 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

75 Jul 8 18:07:32 check_file_access 431 (ERROR(Avira) <10297>):ERROR failed to grab daemon

76 Jul 8 18:08:45 check_file_access 506 (ERROR(Avira) <10347>):ERROR sleep interrupted: TIMEOUT EXPIRED

77 Jul 8 18:08:55 check_file_access 506 (ERROR(Avira) <10348>):ERROR sleep interrupted: TIMEOUT EXPIRED

78 Jul 8 18:18:32 check_file_access 506 (ERROR(Avira) <10816>):ERROR sleep interrupted: TIMEOUT EXPIRED

79 Jul 8 18:18:36 check_file_access 506 (ERROR(Avira) <10824>):ERROR sleep interrupted: TIMEOUT EXPIRED

80 Jul 8 18:18:37 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

81 Jul 8 18:18:47 )506 (ERROR(Avira) <:1E>):RREOR CHECK: RROR sleep int10827 SLEEP INTERRUPTED AeFTER ASSrrupted: TIMEOUT EXIGNEDEVENPIRET: D

82 Jul 8 18:19:58 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

83 Jul 8 18:20:00 check_file_access 506 (ERROR(Avira) <10891>):ERROR sleep interrupted: TIMEOUT EXPIRED

84 Jul 8 18:20:10 check_file_access 506 (ERROR(Avira) <10892>):ERROR sleep interrupted: TIMEOUT EXPIRED

85 Jul 8 18:21:22 check_file_access 506 (ERROR(Avira) <10943>):ERROR sleep interrupted: TIMEOUT EXPIRED

86 Jul 8 18:21:27 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

87 Jul 8 18:21:36 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

88 Jul 8 18:21:36 check_file_access 431 (ERROR(Avira) <10945>):ERROR failed to grab daemon

89 Jul 8 18:23:47 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

90 Jul 8 18:23:48 check_file_access 506 (ERROR(Avira) <11043>):ERROR sleep interrupted: TIMEOUT EXPIRED

91 Jul 8 18:23:58 check_file_access 506 (ERROR(Avira) <11044>):ERROR sleep interrupted: TIMEOUT EXPIRED

92 Jul 8 18:23:58 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

93 Jul 8 18:26:07 check_file_access 506 (ERROR(Avira) <11548>):ERROR sleep interrupted: TIMEOUT EXPIRED

94 Jul 8 18:26:10 check_file_access 506 (ERROR(Avira) <11549>):ERROR sleep interrupted: TIMEOUT EXPIRED

95 Jul 8 18:26:17 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

96 Jul 8 18:26:26 check_file_access 431 (ERROR(Avira) <11551>):ERROR failed to grab daemon

97 Jul 8 18:26:26 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

98 Jul 8 18:26:26 check_file_access 431 (ERROR(Avira) <11554>):ERROR failed to grab daemon

99

100 System log

101

102 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 563 connectx to 2001:41a8:45:28e::c77.443@0 failed: No route to host

103 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 564 connectx to 2001:41a8:45:28e::c77.443@0 failed: No route to host

104 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 563 connectx to 2001:41a8:45:291::c77.443@0 failed: No route to host

105 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 564 connectx to 2001:41a8:45:291::c77.443@0 failed: No route to host

106 Jul 8 18:18:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 597 connectx to 2001:41a8:44:3::4f8c:5052.443@0 failed: No route to host

107 Jul 8 18:18:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 597 connectx to 2001:41a8:44:3::4f8c:5010.443@0 failed: No route to host

108 Jul 8 18:18:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 597 connectx to 2001:41a8:44:3::4f8c:5012.443@0 failed: No route to host

109 Jul 8 18:23:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 645 connectx to 2001:41a8:44:3::4f8c:5018.443@0 failed: No route to host

110 Jul 8 18:23:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 645 connectx to 2001:41a8:44:3::4f8c:5050.443@0 failed: No route to host

111 Jul 8 18:23:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 645 connectx to 2001:41a8:44:3::4f8c:5032.443@0 failed: No route to host

112 Jul 8 18:25:22 eprocsd: failed to get args for proc 11300: Invalid argument

113 Jul 8 18:25:22 eprocsd: failed to get system proc list for pid 11300

114 Jul 8 18:25:54 eprocsd: failed to get args for proc 11478: Invalid argument

115 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11478

116 Jul 8 18:25:54 eprocsd: failed to get args for proc 11479: Invalid argument

117 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11479

118 Jul 8 18:25:54 eprocsd: failed to get args for proc 11503: Invalid argument

119 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11503

120 Jul 8 18:25:54 eprocsd: failed to get args for proc 11505: Invalid argument

121 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11505

122 Jul 8 18:26:31 eprocsd: failed to get args for proc 11702: Invalid argument

123 Jul 8 18:26:31 eprocsd: failed to get system proc list for pid 11702

124 Jul 8 18:29:42 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 648 connectx to 2001:41a8:44:3::4f8c:5042.443@0 failed: No route to host

125 Jul 8 18:29:42 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 648 connectx to 2001:41a8:44:3::4f8c:5029.443@0 failed: No route to host

126 Jul 8 18:29:42 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 648 connectx to 2001:41a8:44:3::4f8c:5053.443@0 failed: No route to host

127

128 launchd log

129

130 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

131 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

132 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted

133 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted

134 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted

135 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted

136 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted

137 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted

138 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted

139 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

140 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

141 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

142 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

143 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.foundapp.FoundLoginItem, error = 119: Service is disabled

144 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.cokesoft.tabforinstagramlitehelper, error = 119: Service is disabled

145 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.fiplab.MemoryCleanHelper, error = 119: Service is disabled

146 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.yaoyuping.Loginhelper, error = 119: Service is disabled

147 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

148 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled

149 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.foundapp.FoundLoginItem, error = 119: Service is disabled

150 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.cokesoft.tabforinstagramlitehelper, error = 119: Service is disabled

151 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.fiplab.MemoryCleanHelper, error = 119: Service is disabled

152 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.yaoyuping.Loginhelper, error = 119: Service is disabled

153 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

154 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled

155

156 Console log

157

158 Jul 7 06:30:21 fontd: Failed to open read-only database, regenerating DB

159

160 Loaded kernel extensions

161

162 com.avira.kext.FileAccessControl (1.0.0d1)

163

164 System services loaded

165

166 com.adobe.fpsaud

167 com.apple.spindump

168 - status: 75

169 com.apple.watchdogd

170 com.avira.antivirus.dbcleaner

171 - status: 1

172 com.avira.antivirus.ipm.loader

173 com.avira.helper.watchdox

174 com.microsoft.office.licensingV2.helper

175 com.oracle.java.Helper-Tool

176 com.oracle.java.JavaUpdateHelper

177 com.period.searchprotectd

178 - status: 78

179

180 Login services loaded

181

182 com.adobe.AAM.Scheduler-1.0

183 com.adobe.ARM.UUID

184 com.adobe.CS5ServiceManager

185 com.apple.mrt.uiagent

186 com.avira.antivirus.general_agent

187 com.avira.antivirus.ipm.ui

188 com.avira.antivirus.notifications_agent

189 com.avira.antivirus.odscan.default

190 com.avira.antivirus.scheduler_agent

191 com.avira.antivirus.systray

192 - status: -15

193 com.avira.antivirus.telemetry_agent

194 com.avira.antivirus.update.default

195 com.avira.helper.avstats

196 com.google.keystone.user.agent

197 com.oracle.java.Java-Updater

198

199 User login items

200

201 Dropbox

202 - /Applications/Dropbox.app

203 Android File Transfer Agent

204 - /Users/USER/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app

205

206 Safari extensions

207

208 iMedia Converter Deluxe

209 - com.wondershare.iskyvc

210 iTube Studio

211 - com.wondershare.safari.itubestudio

212

213 iCloud errors

214

215 cloudd 20

216 storedownloadd 6

217 Finder 1

218

219 Continuity errors

220

221 sharingd 4

222 lsuseractivityd 4

223

224 Restricted files: 1146

225

226 Lockfiles: 8

227

228 Data packages

229

230 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/zl.mxo

231 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/waveform~.mxo

232 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/uzi.mxo

233 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/umenu.mxo

234 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/tpmeter~.mxo

235 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/tosymbol.mxo

236 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/toggle.mxo

237 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/thispoly~.mxo

238 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/textedit.mxo

239 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/textbutton.mxo

240 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/text.mxo

241 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/supportpath.mxo

242 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/standalone.mxo

243 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/sprintf.mxo

244 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/shell.mxo

245 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/screensize.mxo

246 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/scale.mxo

247 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/rslider.mxo

248 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/round.mxo

249 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/rminus.mxo

250 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/regexp.mxo

251 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/rdiv.mxo

252 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/progress.mxo

253 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/prepend.mxo

254 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/poly~.mxo

255 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/plot~.mxo

256 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/pictslider.mxo

257 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/pictctrl.mxo

258 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/peakamp~.mxo

259 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/panel.mxo

260 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/pak.mxo

261 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/out.mxo

262 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/number.mxo

263 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/mousefilter.mxo

264 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/message.mxo

265 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/lua.mxo

266 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/loadmess.mxo

267 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/live.guilib.mxo

268 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/in.mxo

269 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/gen~.mxo

270 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/fpic.mxo

271 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/editor~.mxo

272 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/edge~.mxo

273 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/dropfile.mxo

274 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/document-objc.mxo

275 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/dialog-objc.mxo

276 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/delay.mxo

277 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/deferlow.mxo

278 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/dbtoa.mxo

279 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/conformpath.mxo

280 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/comment.mxo

281 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/button.mxo

282 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/buffer~.mxo

283 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/binfo~.mxo

284 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/atodb.mxo

285 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/adstatus.mxo

286 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/adc~.mxo

287

288 Contents of /Library/LaunchAgents/com.avira.antivirus.general.agent.plist

289 - mod date: Apr 8 04:27:37 2015

290 - size (B): 1356

291 - checksum: 36457759

292

293 <?xml version="1.0" encoding="UTF-8"?>

294 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

295 <plist version="1.0">

296 <dict>

297 <key>Label</key>

298 <string>com.avira.antivirus.general_agent</string>

299 <key>ProgramArguments</key>

300 <array>

301 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

302 <string>--taskFromDaemon</string>

303 </array>

304 <key>WorkingDirectory</key>

305 <string>/Applications/Avira.app/Contents/MacOS</string>

306 <!-- Start when we got new data -->

307 <key>WatchPaths</key>

308 <array>

309 <string>/var/run/agent_tasks</string>

310 </array>

311 </dict>

312 </plist>

313 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

314

315 Contents of /Library/LaunchAgents/com.avira.antivirus.ipm.ui.plist

316 - mod date: Apr 8 04:27:37 2015

317 - size (B): 1617

318 - checksum: 2975542035

319

320 <?xml version="1.0" encoding="UTF-8"?>

321 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

322 <plist version="1.0">

323 <dict>

324 <key>Label</key>

325 <string>com.avira.antivirus.ipm.ui</string>

326 <key>ProgramArguments</key>

327 <array>

328 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS/uxipm_u i</string>

329 <string>--auto</string>

330 </array>

331 <key>WorkingDirectory</key>

332 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS</string >

333 <!-- We implemented our own (smarter) throttling -->

334 <key>ThrottleInterval</key>

335 <integer>0</integer>

336 <!-- Start when the loader has new data -->

337 <key>WatchPaths</key>

338 <array>

339 <string>/Library/Application\ Support/Avira/IPM/watch</string>

340 </array>

341 <!-- Start on login -->

342 <key>RunAtLoad</key>

343 <true />

344 <!-- Start periodically -->

345

346 ...and 5 more line(s)

347

348 Contents of /Library/LaunchAgents/com.avira.antivirus.notifications.agent.plist

349 - mod date: Apr 8 04:27:37 2015

350 - size (B): 1370

351 - checksum: 3883725854

352

353 <?xml version="1.0" encoding="UTF-8"?>

354 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

355 <plist version="1.0">

356 <dict>

357 <key>Label</key>

358 <string>com.avira.antivirus.notifications_agent</string>

359 <key>ProgramArguments</key>

360 <array>

361 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

362 <string>--showNotification</string>

363 </array>

364 <key>WorkingDirectory</key>

365 <string>/Applications/Avira.app/Contents/MacOS</string>

366 <!-- Start when we got new data -->

367 <key>WatchPaths</key>

368 <array>

369 <string>/var/run/notifications_dir</string>

370 </array>

371 </dict>

372 </plist>

373 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

374

375 Contents of /Library/LaunchAgents/com.avira.antivirus.odscan.default.plist

376 - mod date: Jun 29 12:00:41 2015

377 - size (B): 869

378 - checksum: 2370644230

379

380 <?xml version="1.0" encoding="UTF-8"?>

381 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

382 <plist version="1.0">

383 <dict>

384 <key>Label</key>

385 <string>com.avira.antivirus.odscan.default</string>

386 <key>ProgramArguments</key>

387 <array>

388 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

389 <string>-j</string>

390 <string>scan</string>

391 <string>-d</string>

392 <string>/Applications/Avira.app/Contents/Resources/av_scheduler_plugin/scanjobf iles/com.avira.antivirus.odscan.ini</string>

393 <string>-l</string>

394 <string>1435568441</string>

395 </array>

396 <key>ServiceDescription</key>

397 <string>Default Scanjob</string>

398 <key>StartCalendarInterval</key>

399 <dict>

400 <key>Hour</key>

401 <integer>12</integer>

402 <key>Minute</key>

403 <integer>0</integer>

404 <key>Weekday</key>

405

406 ...and 4 more line(s)

407

408 Contents of /Library/LaunchAgents/com.avira.antivirus.scheduler.agent.plist

409 - mod date: Apr 8 04:27:36 2015

410 - size (B): 1370

411 - checksum: 2593853937

412

413 <?xml version="1.0" encoding="UTF-8"?>

414 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

415 <plist version="1.0">

416 <dict>

417 <key>Label</key>

418 <string>com.avira.antivirus.scheduler_agent</string>

419 <key>ProgramArguments</key>

420 <array>

421 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

422 <string>--callbackFromGuard</string>

423 </array>

424 <key>WorkingDirectory</key>

425 <string>/Applications/Avira.app/Contents/MacOS</string>

426 <!-- Start when we got new data -->

427 <key>WatchPaths</key>

428 <array>

429 <string>/var/run/guard_scan_job.sock</string>

430 </array>

431 </dict>

432 </plist>

433 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

434

435 Contents of /Library/LaunchAgents/com.avira.antivirus.systray.plist

436 - mod date: Apr 8 04:27:36 2015

437 - size (B): 1121

438 - checksum: 2013138860

439

440 <?xml version="1.0" encoding="UTF-8"?>

441 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

442 <plist version="1.0">

443 <dict>

444 <key>Label</key>

445 <string>com.avira.antivirus.systray</string>

446 <key>Program</key>

447 <string>/Applications/Avira.app/Contents/MacOS/AV_Systray.app/Contents/MacOS/AV _Systray</string>

448 <key>RunAtLoad</key>

449 <true/>

450 <key>KeepAlive</key>

451 <true/>

452 </dict>

453 </plist>

454 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

455

456 Contents of /Library/LaunchAgents/com.avira.antivirus.telemetry.agent.plist

457 - mod date: Apr 8 04:27:37 2015

458 - size (B): 1355

459 - checksum: 321965296

460

461 <?xml version="1.0" encoding="UTF-8"?>

462 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

463 <plist version="1.0">

464 <dict>

465 <key>Label</key>

466 <string>com.avira.antivirus.telemetry_agent</string>

467 <key>ProgramArguments</key>

468 <array>

469 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

470 <string>--showTelemetry</string>

471 </array>

472 <key>WorkingDirectory</key>

473 <string>/Applications/Avira.app/Contents/MacOS</string>

474 <!-- Start when we got new data -->

475 <key>WatchPaths</key>

476 <array>

477 <string>/var/run/telemetry</string>

478 </array>

479 </dict>

480 </plist>

481 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

482

483 Contents of /Library/LaunchAgents/com.avira.antivirus.update.default.plist

484 - mod date: Apr 8 04:27:37 2015

485 - size (B): 1229

486 - checksum: 4209241739

487

488 <?xml version="1.0" encoding="UTF-8"?>

489 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

490 <plist version="1.0">

491 <dict>

492 <key>StartInterval</key>

493 <integer>7200</integer>

494 <key>Label</key>

495 <string>com.avira.antivirus.update.default</string>

496 <key>ProgramArguments</key>

497 <array>

498 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

499 <string>-j</string>

500 <string>update</string>

501 </array>

502 <key>ServiceDescription</key>

503 <string>Default Updatejob</string>

504 </dict>

505 </plist>

506 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

507

508 Contents of /Library/LaunchAgents/com.avira.helper.avstats.plist

509 - mod date: Jun 9 14:58:09 2015

510 - size (B): 1184

511 - checksum: 3720300378

512

513 <?xml version="1.0" encoding="UTF-8"?>

514 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

515 <plist version="1.0">

516 <dict>

517 <key>Label</key>

518 <string>com.avira.helper.avstats</string>

519 <key>ProgramArguments</key>

520 <array>

521 <string>/Applications/Utilities/Avira-Uninstall.app/Contents/MacOS/AvStats</str ing>

522 <string>server</string>

523 <string>start</string>

524 </array>

525 <key>RunAtLoad</key>

526 <true/>

527 <key>KeepAlive</key>

528 <true/>

529 </dict>

530 </plist>

531 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

532

533 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

534 - mod date: Oct 22 05:46:14 2014

535 - size (B): 104

536 - checksum: 1112373118

537

538 <?xml version="1.0" encoding="UTF-8"?>

539 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

540 <plist version="1.0">

541 <dict>

542 <key>Label</key>

543 <string>com.oracle.java.Java-Updater</string>

544 <key>ProgramArguments</key>

545 <array>

546 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

547 <string>-bgcheck</string>

548 </array>

549 <key>StandardErrorPath</key>

550 <string>/dev/null</string>

551 <key>StandardOutPath</key>

552 <string>/dev/null</string>

553 <key>StartCalendarInterval</key>

554 <dict>

555 <key>Hour</key>

556 <integer>5</integer>

557 <key>Minute</key>

558 <integer>53</integer>

559 <key>Weekday</key>

560 <integer>6</integer>

561 </dict>

562 </dict>

563

564 ...and 1 more line(s)

565

566 Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

567 - mod date: Aug 8 09:34:37 2014

568 - size (B): 668

569 - checksum: 1602219417

570

571 <?xml version="1.0" encoding="UTF-8"?>

572 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

573 <plist version="1.0">

574 <dict>

575 <key>Label</key>

576 <string>com.teamviewer.teamviewer</string>

577 <key>LimitLoadToSessionType</key>

578 <string>Aqua</string>

579 <key>ProgramArguments</key>

580 <array>

581 <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

582 <string>-RunAsAgent</string>

583 <string>YES</string>

584 </array>

585 <key>WorkingDirectory</key>

586 <string>/Applications/TeamViewer.app/Contents/MacOS/</string>

587 <key>RunAtLoad</key>

588 <true/>

589 <key>KeepAlive</key>

590 <true/>

591 <key>Disabled</key>

592 <true/>

593 </dict>

594 </plist>

595

596 Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

597 - mod date: Aug 22 17:48:52 2014

598 - size (B): 779

599 - checksum: 2466887275

600

601 <?xml version="1.0" encoding="UTF-8"?>

602 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

603 <plist version="1.0">

604 <dict>

605 <key>Label</key>

606 <string>com.teamviewer.desktop</string>

607 <key>LimitLoadToSessionType</key>

608 <array>

609 <string>LoginWindow</string>

610 <string>Aqua</string>

611 </array>

612 <key>ProgramArguments</key>

613 <array>

614 <string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>

615 <string>-RunAsAgent</string>

616 <string>YES</string>

617 <string>-Module</string>

618 <string>Full</string>

619 </array>

620 <key>WorkingDirectory</key>

621 <string>/Applications/TeamViewer.app/Contents/Helpers/</string>

622 <key>RunAtLoad</key>

623 <true/>

624 <key>KeepAlive</key>

625 <true/>

626

627 ...and 4 more line(s)

628

629 Contents of /Library/LaunchDaemons/com.avira.antivirus.dbcleaner.plist

630 - mod date: Apr 8 04:27:36 2015

631 - size (B): 1391

632 - checksum: 270305186

633

634 <?xml version="1.0" encoding="UTF-8"?>

635 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

636 <plist version="1.0">

637 <dict>

638 <key>StartInterval</key>

639 <integer>7200</integer>

640 <key>Label</key>

641 <string>com.avira.antivirus.dbcleaner</string>

642 <key>UserName</key>

643 <string>root</string>

644 <key>Umask</key>

645 <integer>000</integer>

646 <key>Program</key>

647 <string>/Applications/Avira.app/Contents/MacOS/dbcleaner</string>

648 <key>ServiceDescription</key>

649 <string>Events Database Cleanup</string>

650 <key>RunAtLoad</key>

651 <true/>

652 </dict>

653 </plist>

654 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

655

656 Contents of /Library/LaunchDaemons/com.avira.antivirus.ipm.loader.plist

657 - mod date: Apr 8 04:27:37 2015

658 - size (B): 1298

659 - checksum: 2553569183

660

661 <?xml version="1.0" encoding="UTF-8"?>

662 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

663 <plist version="1.0">

664 <dict>

665 <key>Label</key>

666 <string>com.avira.antivirus.ipm.loader</string>

667 <key>UserName</key>

668 <string>_avipm</string>

669 <key>Program</key>

670 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS/uxipm_l oader</string>

671 <key>WorkingDirectory</key>

672 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS</string >

673 <key>RunAtLoad</key>

674 <true/>

675 <key>StartInterval</key>

676 <integer>1800</integer>

677 </dict>

678 </plist>

679 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

680

681 Contents of /Library/LaunchDaemons/com.avira.helper.watchdox.plist

682 - mod date: Apr 8 04:27:36 2015

683 - size (B): 1474

684 - checksum: 2664366839

685

686 <?xml version="1.0" encoding="UTF-8"?>

687 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

688 <plist version="1.0">

689 <dict>

690 <key>Label</key>

691 <string>com.avira.helper.watchdox</string>

692 <key>UserName</key>

693 <string>root</string>

694 <key>WorkingDirectory</key>

695 <string>/Applications/Avira.app/Contents/MacOS</string>

696 <key>ProgramArguments</key>

697 <array>

698 <string>/Applications/Avira.app/Contents/MacOS/avwatchdox.bin</string>

699 </array>

700 <key>RunAtLoad</key>

701 <true/>

702 <key>KeepAlive</key>

703 <true/>

704 <key>ExitTimeOut</key>

705 <integer>60</integer>

706 <key>StandardOutPath</key>

707 <string>/var/log/com.avira.helper.watchdox.log</string>

708 <key>StandardErrorPath</key>

709 <string>/var/log/com.avira.helper.watchdox.log</string>

710 </dict>

711

712 ...and 2 more line(s)

713

714 Contents of /Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist

715 - mod date: Jun 9 11:39:01 2015

716 - size (B): 574

717 - checksum: 1121431055

718

719 <?xml version="1.0" encoding="UTF-8"?>

720 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

721 <plist version="1.0">

722 <dict>

723 <key>MachServices</key>

724 <dict>

725 <key>com.microsoft.office.licensingV2.helper.port</key>

726 <true/>

727 </dict>

728 <key>Label</key>

729 <string>com.microsoft.office.licensingV2.helper</string>

730 <key>OnDemand</key>

731 <true/>

732 <key>ProgramArguments</key>

733 <array>

734 <string>/Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper< /string>

735 </array>

736 <key>ServiceIPC</key>

737 <true/>

738 </dict>

739 </plist>

740

741 Contents of /Library/LaunchDaemons/com.perion.searchprotectd.plist

742 - mod date: Oct 22 14:27:45 2014

743 - size (B): 571

744 - checksum: 1209345832

745

746 <?xml version="1.0" encoding="UTF-8"?>

747 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

748 <plist version="1.0">

749 <dict>

750 <key>AbandonProcessGroup</key>

751 <true/>

752 <key>EnableTransactions</key>

753 <false/>

754 <key>ProgramArguments</key>

755 <array>

756 <string>/Applications/SearchProtect/SearchProtect.app/Contents/MacOS/SearchProt ect</string>

757 <string>-execv_instance</string>

758 </array>

759 <key>KeepAlive</key>

760 <true/>

761 <key>RunAtLoad</key>

762 <true/>

763 <key>Label</key>

764 <string>com.period.searchprotectd</string>

765 </dict>

766 </plist>

767

768 Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

769 - mod date: Aug 8 09:34:37 2014

770 - size (B): 611

771 - checksum: 2586050363

772

773 <?xml version="1.0" encoding="UTF-8"?>

774 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

775 <plist version="1.0">

776 <dict>

777 <key>Disabled</key>

778 <true/>

779 <key>Label</key>

780 <string>com.teamviewer.service</string>

781 <key>KeepAlive</key>

782 <true/>

783 <key>ProgramArguments</key>

784 <array>

785 <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

786 <string>-Module</string>

787 <string>Full</string>

788 </array>

789 <key>RunAtLoad</key>

790 <true/>

791 <key>WorkingDirectory</key>

792 <string>/Applications/TeamViewer.app/Contents/MacOS</string>

793 </dict>

794 </plist>

795

796 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

797 - mod date: Jun 7 15:06:05 2015

798 - size (B): 554

799 - checksum: 3012644940

800

801 <?xml version="1.0" encoding="UTF-8"?>

802 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

803 <plist version="1.0">

804 <dict>

805 <key>Disabled</key>

806 <true/>

807 <key>Label</key>

808 <string>org.apache.httpd</string>

809 <key>EnvironmentVariables</key>

810 <dict>

811 <key>XPC_SERVICES_UNAVAILABLE</key>

812 <string>1</string>

813 </dict>

814 <key>ProgramArguments</key>

815 <array>

816 <string>/usr/sbin/httpd-wrapper</string>

817 <string>-D</string>

818 <string>FOREGROUND</string>

819 </array>

820 <key>OnDemand</key>

821 <false/>

822 </dict>

823 </plist>

824

825 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

826 - mod date: Dec 6 22:44:17 2014

827 - size (B): 601

828 - checksum: 1251035989

829

830 <?xml version="1.0" encoding="UTF-8"?>

831 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

832 <plist version="1.0">

833 <dict>

834 <key>Label</key>

835 <string>com.adobe.ARM.UUID</string>

836 <key>ProgramArguments</key>

837 <array>

838 <string>/Applications/Adobe Acrobat 9 Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

839 </array>

840 <key>RunAtLoad</key>

841 <true/>

842 <key>StartInterval</key>

843 <integer>12600</integer>

844 </dict>

845 </plist>

846

847 Contents of Library/LaunchAgents/com.google.keystone.agent.plist

848 - mod date: Jun 19 06:39:47 2015

849 - size (B): 812

850 - checksum: 2734695438

851

852 <?xml version="1.0" encoding="UTF-8"?>

853 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

854 <plist version="1.0">

855 <dict>

856 <key>Label</key>

857 <string>com.google.keystone.user.agent</string>

858 <key>LimitLoadToSessionType</key>

859 <string>Aqua</string>

860 <key>ProgramArguments</key>

861 <array>

862 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

863 <string>-runMode</string>

864 <string>ifneeded</string>

865 </array>

866 <key>RunAtLoad</key>

867 <true/>

868 <key>StartInterval</key>

869 <integer>3523</integer>

870 <key>StandardErrorPath</key>

871 <string>/dev/null</string>

872 <key>StandardOutPath</key>

873 <string>/dev/null</string>

874 </dict>

875 </plist>

876

877 App extensions

878

879 com.evernote.Evernote.SharingExtension

880 com.fiplab.batteryhealth.widget

881 com.getdropbox.dropbox.garcon

882

883 Installations

884

885 Memory Clean: 7/3/15, 20:50

886 Battery Health: 7/3/15, 20:39

887 Evernote: 7/3/15, 20:38

888 Microsoft Word for Mac: 7/2/15, 11:44

889 Microsoft Excel for Mac: 7/2/15, 11:43

890

891 Elapsed time (sec): 999

Jul 8, 2015 8:50 AM in response to Linc Davis

1 Start time: 18:25:19 07/08/15

2

3 Revision: 1326

4

5 Model Identifier: MacBookPro11,1

6 System Version: OS X 10.10.4 (14E46)

7 Kernel Version: Darwin 14.4.0

8 Time since boot: 4:21

9

10 Graphics/Displays

11

12 Intel Iris

13

14 Color LCD

15 SAMSUNG (Main)

16

17 USB

18

19 USB Optical Mouse (KYE Systems Corp.)

20

21 FileVault 2

22

23 FileVault is On.

24

25 File opens (per sec)

26

27 AvStats (UID 501) => /System/Library/Frameworks/SystemConfiguration.framework/Resources/English.lpro j/NetworkInterface.strings (status 0): 6

28

29 Energy (lifetime)

30

31 com.apple.WebKit.WebContent (UID 501): 9.46

32 WindowServer (UID 88): 9.14

33 kernel_task (UID 0): 6.36

34

35 Energy (sampled)

36

37 savapi (UID 0): 99.76

38 ReportCrash (UID 0): 7.48

39

40 Firewall: On

41

42 Diagnostic reports

43

44 2015-06-19 avlogwriter crash x20

45 2015-06-20 avlogwriter crash x20

46 2015-06-21 avlogwriter crash x20

47 2015-06-22 avlogwriter crash x20

48 2015-06-23 avlogwriter crash x20

49 2015-06-24 avlogwriter crash x20

50 2015-06-24 com.apple.WebKit.WebContent crash

51 2015-06-25 AvStats crash

52 2015-06-25 avlogwriter crash x20

53 2015-06-26 avlogwriter crash x20

54 2015-06-27 avlogwriter crash x20

55 2015-06-27 garcon crash

56 2015-06-28 avlogwriter crash x20

57 2015-06-29 avlogwriter crash x20

58 2015-06-30 avlogwriter crash x20

59 2015-07-01 avlogwriter crash x20

60 2015-07-02 avlogwriter crash x10

61 2015-07-03 Microsoft Error Reporting crash

62 2015-07-03 avlogwriter crash x20

63 2015-07-03 com.apple.WebKit.WebContent crash

64 2015-07-05 avlogwriter crash x19

65 2015-07-05 com.apple.AmbientDisplayAgent crash

66 2015-07-06 avlogwriter crash x20

67 2015-07-07 avlogwriter crash x18

68 2015-07-08 avlogwriter crash x39

69

70 HID errors: 19

71

72 Kernel log

73

74 Jul 8 18:07:32 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

75 Jul 8 18:07:32 check_file_access 431 (ERROR(Avira) <10297>):ERROR failed to grab daemon

76 Jul 8 18:08:45 check_file_access 506 (ERROR(Avira) <10347>):ERROR sleep interrupted: TIMEOUT EXPIRED

77 Jul 8 18:08:55 check_file_access 506 (ERROR(Avira) <10348>):ERROR sleep interrupted: TIMEOUT EXPIRED

78 Jul 8 18:18:32 check_file_access 506 (ERROR(Avira) <10816>):ERROR sleep interrupted: TIMEOUT EXPIRED

79 Jul 8 18:18:36 check_file_access 506 (ERROR(Avira) <10824>):ERROR sleep interrupted: TIMEOUT EXPIRED

80 Jul 8 18:18:37 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

81 Jul 8 18:18:47 )506 (ERROR(Avira) <:1E>):RREOR CHECK: RROR sleep int10827 SLEEP INTERRUPTED AeFTER ASSrrupted: TIMEOUT EXIGNEDEVENPIRET: D

82 Jul 8 18:19:58 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

83 Jul 8 18:20:00 check_file_access 506 (ERROR(Avira) <10891>):ERROR sleep interrupted: TIMEOUT EXPIRED

84 Jul 8 18:20:10 check_file_access 506 (ERROR(Avira) <10892>):ERROR sleep interrupted: TIMEOUT EXPIRED

85 Jul 8 18:21:22 check_file_access 506 (ERROR(Avira) <10943>):ERROR sleep interrupted: TIMEOUT EXPIRED

86 Jul 8 18:21:27 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

87 Jul 8 18:21:36 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

88 Jul 8 18:21:36 check_file_access 431 (ERROR(Avira) <10945>):ERROR failed to grab daemon

89 Jul 8 18:23:47 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

90 Jul 8 18:23:48 check_file_access 506 (ERROR(Avira) <11043>):ERROR sleep interrupted: TIMEOUT EXPIRED

91 Jul 8 18:23:58 check_file_access 506 (ERROR(Avira) <11044>):ERROR sleep interrupted: TIMEOUT EXPIRED

92 Jul 8 18:23:58 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

93 Jul 8 18:26:07 check_file_access 506 (ERROR(Avira) <11548>):ERROR sleep interrupted: TIMEOUT EXPIRED

94 Jul 8 18:26:10 check_file_access 506 (ERROR(Avira) <11549>):ERROR sleep interrupted: TIMEOUT EXPIRED

95 Jul 8 18:26:17 check_file_access 506 (ERROR(Avira) <1>):ERROR sleep interrupted: TIMEOUT EXPIRED

96 Jul 8 18:26:26 check_file_access 431 (ERROR(Avira) <11551>):ERROR failed to grab daemon

97 Jul 8 18:26:26 check_file_access 431 (ERROR(Avira) <1>):ERROR failed to grab daemon

98 Jul 8 18:26:26 check_file_access 431 (ERROR(Avira) <11554>):ERROR failed to grab daemon

99

100 System log

101

102 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 563 connectx to 2001:41a8:45:28e::c77.443@0 failed: No route to host

103 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 564 connectx to 2001:41a8:45:28e::c77.443@0 failed: No route to host

104 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 563 connectx to 2001:41a8:45:291::c77.443@0 failed: No route to host

105 Jul 8 18:06:54 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 564 connectx to 2001:41a8:45:291::c77.443@0 failed: No route to host

106 Jul 8 18:18:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 597 connectx to 2001:41a8:44:3::4f8c:5052.443@0 failed: No route to host

107 Jul 8 18:18:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 597 connectx to 2001:41a8:44:3::4f8c:5010.443@0 failed: No route to host

108 Jul 8 18:18:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 597 connectx to 2001:41a8:44:3::4f8c:5012.443@0 failed: No route to host

109 Jul 8 18:23:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 645 connectx to 2001:41a8:44:3::4f8c:5018.443@0 failed: No route to host

110 Jul 8 18:23:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 645 connectx to 2001:41a8:44:3::4f8c:5050.443@0 failed: No route to host

111 Jul 8 18:23:11 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 645 connectx to 2001:41a8:44:3::4f8c:5032.443@0 failed: No route to host

112 Jul 8 18:25:22 eprocsd: failed to get args for proc 11300: Invalid argument

113 Jul 8 18:25:22 eprocsd: failed to get system proc list for pid 11300

114 Jul 8 18:25:54 eprocsd: failed to get args for proc 11478: Invalid argument

115 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11478

116 Jul 8 18:25:54 eprocsd: failed to get args for proc 11479: Invalid argument

117 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11479

118 Jul 8 18:25:54 eprocsd: failed to get args for proc 11503: Invalid argument

119 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11503

120 Jul 8 18:25:54 eprocsd: failed to get args for proc 11505: Invalid argument

121 Jul 8 18:25:54 eprocsd: failed to get system proc list for pid 11505

122 Jul 8 18:26:31 eprocsd: failed to get args for proc 11702: Invalid argument

123 Jul 8 18:26:31 eprocsd: failed to get system proc list for pid 11702

124 Jul 8 18:29:42 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 648 connectx to 2001:41a8:44:3::4f8c:5042.443@0 failed: No route to host

125 Jul 8 18:29:42 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 648 connectx to 2001:41a8:44:3::4f8c:5029.443@0 failed: No route to host

126 Jul 8 18:29:42 com.apple.WebKit.Networking: tcp_connection_destination_prepare_complete 648 connectx to 2001:41a8:44:3::4f8c:5053.443@0 failed: No route to host

127

128 launchd log

129

130 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

131 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

132 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted

133 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted

134 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted

135 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted

136 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted

137 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted

138 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted

139 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

140 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

141 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

142 Jul 8 07:09:16 com.apple.xpc.launchd.domain.pid.SecurityAgent.6603: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

143 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.foundapp.FoundLoginItem, error = 119: Service is disabled

144 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.cokesoft.tabforinstagramlitehelper, error = 119: Service is disabled

145 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.fiplab.MemoryCleanHelper, error = 119: Service is disabled

146 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.yaoyuping.Loginhelper, error = 119: Service is disabled

147 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

148 Jul 8 07:09:26 com.apple.xpc.launchd.user.501.100023.Aqua: Could not import service from caller: caller = otherbsd.6628, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled

149 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.foundapp.FoundLoginItem, error = 119: Service is disabled

150 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.cokesoft.tabforinstagramlitehelper, error = 119: Service is disabled

151 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.fiplab.MemoryCleanHelper, error = 119: Service is disabled

152 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.yaoyuping.Loginhelper, error = 119: Service is disabled

153 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.evernote.EvernoteHelper, error = 119: Service is disabled

154 Jul 8 14:04:27 com.apple.xpc.launchd.user.501.100005.Aqua: Could not import service from caller: caller = otherbsd.253, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled

155

156 Console log

157

158 Jul 7 06:30:21 fontd: Failed to open read-only database, regenerating DB

159

160 Loaded kernel extensions

161

162 com.avira.kext.FileAccessControl (1.0.0d1)

163

164 System services loaded

165

166 com.adobe.fpsaud

167 com.apple.spindump

168 - status: 75

169 com.apple.watchdogd

170 com.avira.antivirus.dbcleaner

171 - status: 1

172 com.avira.antivirus.ipm.loader

173 com.avira.helper.watchdox

174 com.microsoft.office.licensingV2.helper

175 com.oracle.java.Helper-Tool

176 com.oracle.java.JavaUpdateHelper

177 com.period.searchprotectd

178 - status: 78

179

180 Login services loaded

181

182 com.adobe.AAM.Scheduler-1.0

183 com.adobe.ARM.UUID

184 com.adobe.CS5ServiceManager

185 com.apple.mrt.uiagent

186 com.avira.antivirus.general_agent

187 com.avira.antivirus.ipm.ui

188 com.avira.antivirus.notifications_agent

189 com.avira.antivirus.odscan.default

190 com.avira.antivirus.scheduler_agent

191 com.avira.antivirus.systray

192 - status: -15

193 com.avira.antivirus.telemetry_agent

194 com.avira.antivirus.update.default

195 com.avira.helper.avstats

196 com.google.keystone.user.agent

197 com.oracle.java.Java-Updater

198

199 User login items

200

201 Dropbox

202 - /Applications/Dropbox.app

203 Android File Transfer Agent

204 - /Users/USER/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app

205

206 Safari extensions

207

208 iMedia Converter Deluxe

209 - com.wondershare.iskyvc

210 iTube Studio

211 - com.wondershare.safari.itubestudio

212

213 iCloud errors

214

215 cloudd 20

216 storedownloadd 6

217 Finder 1

218

219 Continuity errors

220

221 sharingd 4

222 lsuseractivityd 4

223

224 Restricted files: 1146

225

226 Lockfiles: 8

227

228 Data packages

229

230 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/zl.mxo

231 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/waveform~.mxo

232 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/uzi.mxo

233 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/umenu.mxo

234 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/tpmeter~.mxo

235 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/tosymbol.mxo

236 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/toggle.mxo

237 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/thispoly~.mxo

238 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/textedit.mxo

239 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/textbutton.mxo

240 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/text.mxo

241 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/supportpath.mxo

242 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/standalone.mxo

243 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/sprintf.mxo

244 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/shell.mxo

245 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/screensize.mxo

246 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/scale.mxo

247 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/rslider.mxo

248 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/round.mxo

249 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/rminus.mxo

250 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/regexp.mxo

251 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/rdiv.mxo

252 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/progress.mxo

253 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/prepend.mxo

254 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/poly~.mxo

255 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/plot~.mxo

256 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/pictslider.mxo

257 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/pictctrl.mxo

258 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/peakamp~.mxo

259 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/panel.mxo

260 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/pak.mxo

261 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/out.mxo

262 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/number.mxo

263 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/mousefilter.mxo

264 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/message.mxo

265 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/lua.mxo

266 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/loadmess.mxo

267 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/live.guilib.mxo

268 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/in.mxo

269 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/gen~.mxo

270 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/fpic.mxo

271 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/editor~.mxo

272 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/edge~.mxo

273 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/dropfile.mxo

274 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/document-objc.mxo

275 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/dialog-objc.mxo

276 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/delay.mxo

277 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/deferlow.mxo

278 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/dbtoa.mxo

279 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/conformpath.mxo

280 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/comment.mxo

281 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/button.mxo

282 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/buffer~.mxo

283 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/binfo~.mxo

284 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/atodb.mxo

285 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/adstatus.mxo

286 /Users/USER/Library/Containers/info.loudlab.FluctusFree/Data/Library/Applicatio n Support/Fluctus Free/temp64-FluctusFree/mxt/adc~.mxo

287

288 Contents of /Library/LaunchAgents/com.avira.antivirus.general.agent.plist

289 - mod date: Apr 8 04:27:37 2015

290 - size (B): 1356

291 - checksum: 36457759

292

293 <?xml version="1.0" encoding="UTF-8"?>

294 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

295 <plist version="1.0">

296 <dict>

297 <key>Label</key>

298 <string>com.avira.antivirus.general_agent</string>

299 <key>ProgramArguments</key>

300 <array>

301 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

302 <string>--taskFromDaemon</string>

303 </array>

304 <key>WorkingDirectory</key>

305 <string>/Applications/Avira.app/Contents/MacOS</string>

306 <!-- Start when we got new data -->

307 <key>WatchPaths</key>

308 <array>

309 <string>/var/run/agent_tasks</string>

310 </array>

311 </dict>

312 </plist>

313 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

314

315 Contents of /Library/LaunchAgents/com.avira.antivirus.ipm.ui.plist

316 - mod date: Apr 8 04:27:37 2015

317 - size (B): 1617

318 - checksum: 2975542035

319

320 <?xml version="1.0" encoding="UTF-8"?>

321 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

322 <plist version="1.0">

323 <dict>

324 <key>Label</key>

325 <string>com.avira.antivirus.ipm.ui</string>

326 <key>ProgramArguments</key>

327 <array>

328 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS/uxipm_u i</string>

329 <string>--auto</string>

330 </array>

331 <key>WorkingDirectory</key>

332 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS</string >

333 <!-- We implemented our own (smarter) throttling -->

334 <key>ThrottleInterval</key>

335 <integer>0</integer>

336 <!-- Start when the loader has new data -->

337 <key>WatchPaths</key>

338 <array>

339 <string>/Library/Application\ Support/Avira/IPM/watch</string>

340 </array>

341 <!-- Start on login -->

342 <key>RunAtLoad</key>

343 <true />

344 <!-- Start periodically -->

345

346 ...and 5 more line(s)

347

348 Contents of /Library/LaunchAgents/com.avira.antivirus.notifications.agent.plist

349 - mod date: Apr 8 04:27:37 2015

350 - size (B): 1370

351 - checksum: 3883725854

352

353 <?xml version="1.0" encoding="UTF-8"?>

354 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

355 <plist version="1.0">

356 <dict>

357 <key>Label</key>

358 <string>com.avira.antivirus.notifications_agent</string>

359 <key>ProgramArguments</key>

360 <array>

361 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

362 <string>--showNotification</string>

363 </array>

364 <key>WorkingDirectory</key>

365 <string>/Applications/Avira.app/Contents/MacOS</string>

366 <!-- Start when we got new data -->

367 <key>WatchPaths</key>

368 <array>

369 <string>/var/run/notifications_dir</string>

370 </array>

371 </dict>

372 </plist>

373 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

374

375 Contents of /Library/LaunchAgents/com.avira.antivirus.odscan.default.plist

376 - mod date: Jun 29 12:00:41 2015

377 - size (B): 869

378 - checksum: 2370644230

379

380 <?xml version="1.0" encoding="UTF-8"?>

381 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

382 <plist version="1.0">

383 <dict>

384 <key>Label</key>

385 <string>com.avira.antivirus.odscan.default</string>

386 <key>ProgramArguments</key>

387 <array>

388 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

389 <string>-j</string>

390 <string>scan</string>

391 <string>-d</string>

392 <string>/Applications/Avira.app/Contents/Resources/av_scheduler_plugin/scanjobf iles/com.avira.antivirus.odscan.ini</string>

393 <string>-l</string>

394 <string>1435568441</string>

395 </array>

396 <key>ServiceDescription</key>

397 <string>Default Scanjob</string>

398 <key>StartCalendarInterval</key>

399 <dict>

400 <key>Hour</key>

401 <integer>12</integer>

402 <key>Minute</key>

403 <integer>0</integer>

404 <key>Weekday</key>

405

406 ...and 4 more line(s)

407

408 Contents of /Library/LaunchAgents/com.avira.antivirus.scheduler.agent.plist

409 - mod date: Apr 8 04:27:36 2015

410 - size (B): 1370

411 - checksum: 2593853937

412

413 <?xml version="1.0" encoding="UTF-8"?>

414 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

415 <plist version="1.0">

416 <dict>

417 <key>Label</key>

418 <string>com.avira.antivirus.scheduler_agent</string>

419 <key>ProgramArguments</key>

420 <array>

421 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

422 <string>--callbackFromGuard</string>

423 </array>

424 <key>WorkingDirectory</key>

425 <string>/Applications/Avira.app/Contents/MacOS</string>

426 <!-- Start when we got new data -->

427 <key>WatchPaths</key>

428 <array>

429 <string>/var/run/guard_scan_job.sock</string>

430 </array>

431 </dict>

432 </plist>

433 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

434

435 Contents of /Library/LaunchAgents/com.avira.antivirus.systray.plist

436 - mod date: Apr 8 04:27:36 2015

437 - size (B): 1121

438 - checksum: 2013138860

439

440 <?xml version="1.0" encoding="UTF-8"?>

441 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

442 <plist version="1.0">

443 <dict>

444 <key>Label</key>

445 <string>com.avira.antivirus.systray</string>

446 <key>Program</key>

447 <string>/Applications/Avira.app/Contents/MacOS/AV_Systray.app/Contents/MacOS/AV _Systray</string>

448 <key>RunAtLoad</key>

449 <true/>

450 <key>KeepAlive</key>

451 <true/>

452 </dict>

453 </plist>

454 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

455

456 Contents of /Library/LaunchAgents/com.avira.antivirus.telemetry.agent.plist

457 - mod date: Apr 8 04:27:37 2015

458 - size (B): 1355

459 - checksum: 321965296

460

461 <?xml version="1.0" encoding="UTF-8"?>

462 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

463 <plist version="1.0">

464 <dict>

465 <key>Label</key>

466 <string>com.avira.antivirus.telemetry_agent</string>

467 <key>ProgramArguments</key>

468 <array>

469 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

470 <string>--showTelemetry</string>

471 </array>

472 <key>WorkingDirectory</key>

473 <string>/Applications/Avira.app/Contents/MacOS</string>

474 <!-- Start when we got new data -->

475 <key>WatchPaths</key>

476 <array>

477 <string>/var/run/telemetry</string>

478 </array>

479 </dict>

480 </plist>

481 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

482

483 Contents of /Library/LaunchAgents/com.avira.antivirus.update.default.plist

484 - mod date: Apr 8 04:27:37 2015

485 - size (B): 1229

486 - checksum: 4209241739

487

488 <?xml version="1.0" encoding="UTF-8"?>

489 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

490 <plist version="1.0">

491 <dict>

492 <key>StartInterval</key>

493 <integer>7200</integer>

494 <key>Label</key>

495 <string>com.avira.antivirus.update.default</string>

496 <key>ProgramArguments</key>

497 <array>

498 <string>/Applications/Avira.app/Contents/MacOS/AV_Scheduler</string>

499 <string>-j</string>

500 <string>update</string>

501 </array>

502 <key>ServiceDescription</key>

503 <string>Default Updatejob</string>

504 </dict>

505 </plist>

506 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

507

508 Contents of /Library/LaunchAgents/com.avira.helper.avstats.plist

509 - mod date: Jun 9 14:58:09 2015

510 - size (B): 1184

511 - checksum: 3720300378

512

513 <?xml version="1.0" encoding="UTF-8"?>

514 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

515 <plist version="1.0">

516 <dict>

517 <key>Label</key>

518 <string>com.avira.helper.avstats</string>

519 <key>ProgramArguments</key>

520 <array>

521 <string>/Applications/Utilities/Avira-Uninstall.app/Contents/MacOS/AvStats</str ing>

522 <string>server</string>

523 <string>start</string>

524 </array>

525 <key>RunAtLoad</key>

526 <true/>

527 <key>KeepAlive</key>

528 <true/>

529 </dict>

530 </plist>

531 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

532

533 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

534 - mod date: Oct 22 05:46:14 2014

535 - size (B): 104

536 - checksum: 1112373118

537

538 <?xml version="1.0" encoding="UTF-8"?>

539 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

540 <plist version="1.0">

541 <dict>

542 <key>Label</key>

543 <string>com.oracle.java.Java-Updater</string>

544 <key>ProgramArguments</key>

545 <array>

546 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

547 <string>-bgcheck</string>

548 </array>

549 <key>StandardErrorPath</key>

550 <string>/dev/null</string>

551 <key>StandardOutPath</key>

552 <string>/dev/null</string>

553 <key>StartCalendarInterval</key>

554 <dict>

555 <key>Hour</key>

556 <integer>5</integer>

557 <key>Minute</key>

558 <integer>53</integer>

559 <key>Weekday</key>

560 <integer>6</integer>

561 </dict>

562 </dict>

563

564 ...and 1 more line(s)

565

566 Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

567 - mod date: Aug 8 09:34:37 2014

568 - size (B): 668

569 - checksum: 1602219417

570

571 <?xml version="1.0" encoding="UTF-8"?>

572 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

573 <plist version="1.0">

574 <dict>

575 <key>Label</key>

576 <string>com.teamviewer.teamviewer</string>

577 <key>LimitLoadToSessionType</key>

578 <string>Aqua</string>

579 <key>ProgramArguments</key>

580 <array>

581 <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>

582 <string>-RunAsAgent</string>

583 <string>YES</string>

584 </array>

585 <key>WorkingDirectory</key>

586 <string>/Applications/TeamViewer.app/Contents/MacOS/</string>

587 <key>RunAtLoad</key>

588 <true/>

589 <key>KeepAlive</key>

590 <true/>

591 <key>Disabled</key>

592 <true/>

593 </dict>

594 </plist>

595

596 Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

597 - mod date: Aug 22 17:48:52 2014

598 - size (B): 779

599 - checksum: 2466887275

600

601 <?xml version="1.0" encoding="UTF-8"?>

602 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

603 <plist version="1.0">

604 <dict>

605 <key>Label</key>

606 <string>com.teamviewer.desktop</string>

607 <key>LimitLoadToSessionType</key>

608 <array>

609 <string>LoginWindow</string>

610 <string>Aqua</string>

611 </array>

612 <key>ProgramArguments</key>

613 <array>

614 <string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>

615 <string>-RunAsAgent</string>

616 <string>YES</string>

617 <string>-Module</string>

618 <string>Full</string>

619 </array>

620 <key>WorkingDirectory</key>

621 <string>/Applications/TeamViewer.app/Contents/Helpers/</string>

622 <key>RunAtLoad</key>

623 <true/>

624 <key>KeepAlive</key>

625 <true/>

626

627 ...and 4 more line(s)

628

629 Contents of /Library/LaunchDaemons/com.avira.antivirus.dbcleaner.plist

630 - mod date: Apr 8 04:27:36 2015

631 - size (B): 1391

632 - checksum: 270305186

633

634 <?xml version="1.0" encoding="UTF-8"?>

635 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

636 <plist version="1.0">

637 <dict>

638 <key>StartInterval</key>

639 <integer>7200</integer>

640 <key>Label</key>

641 <string>com.avira.antivirus.dbcleaner</string>

642 <key>UserName</key>

643 <string>root</string>

644 <key>Umask</key>

645 <integer>000</integer>

646 <key>Program</key>

647 <string>/Applications/Avira.app/Contents/MacOS/dbcleaner</string>

648 <key>ServiceDescription</key>

649 <string>Events Database Cleanup</string>

650 <key>RunAtLoad</key>

651 <true/>

652 </dict>

653 </plist>

654 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

655

656 Contents of /Library/LaunchDaemons/com.avira.antivirus.ipm.loader.plist

657 - mod date: Apr 8 04:27:37 2015

658 - size (B): 1298

659 - checksum: 2553569183

660

661 <?xml version="1.0" encoding="UTF-8"?>

662 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

663 <plist version="1.0">

664 <dict>

665 <key>Label</key>

666 <string>com.avira.antivirus.ipm.loader</string>

667 <key>UserName</key>

668 <string>_avipm</string>

669 <key>Program</key>

670 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS/uxipm_l oader</string>

671 <key>WorkingDirectory</key>

672 <string>/Applications/Avira.app/Contents/MacOS/uxipm.app/Contents/MacOS</string >

673 <key>RunAtLoad</key>

674 <true/>

675 <key>StartInterval</key>

676 <integer>1800</integer>

677 </dict>

678 </plist>

679 <!-- AVCS4F3A4200C37OUUIDPUUIDT62F3AB0132FAVCSE -->

680

681 Contents of /Library/LaunchDaemons/com.avira.helper.watchdox.plist

682 - mod date: Apr 8 04:27:36 2015

683 - size (B): 1474

684 - checksum: 2664366839

685

686 <?xml version="1.0" encoding="UTF-8"?>

687 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

688 <plist version="1.0">

689 <dict>

690 <key>Label</key>

691 <string>com.avira.helper.watchdox</string>

692 <key>UserName</key>

693 <string>root</string>

694 <key>WorkingDirectory</key>

695 <string>/Applications/Avira.app/Contents/MacOS</string>

696 <key>ProgramArguments</key>

697 <array>

698 <string>/Applications/Avira.app/Contents/MacOS/avwatchdox.bin</string>

699 </array>

700 <key>RunAtLoad</key>

701 <true/>

702 <key>KeepAlive</key>

703 <true/>

704 <key>ExitTimeOut</key>

705 <integer>60</integer>

706 <key>StandardOutPath</key>

707 <string>/var/log/com.avira.helper.watchdox.log</string>

708 <key>StandardErrorPath</key>

709 <string>/var/log/com.avira.helper.watchdox.log</string>

710 </dict>

711

712 ...and 2 more line(s)

713

714 Contents of /Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist

715 - mod date: Jun 9 11:39:01 2015

716 - size (B): 574

717 - checksum: 1121431055

718

719 <?xml version="1.0" encoding="UTF-8"?>

720 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

721 <plist version="1.0">

722 <dict>

723 <key>MachServices</key>

724 <dict>

725 <key>com.microsoft.office.licensingV2.helper.port</key>

726 <true/>

727 </dict>

728 <key>Label</key>

729 <string>com.microsoft.office.licensingV2.helper</string>

730 <key>OnDemand</key>

731 <true/>

732 <key>ProgramArguments</key>

733 <array>

734 <string>/Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper< /string>

735 </array>

736 <key>ServiceIPC</key>

737 <true/>

738 </dict>

739 </plist>

740

741 Contents of /Library/LaunchDaemons/com.perion.searchprotectd.plist

742 - mod date: Oct 22 14:27:45 2014

743 - size (B): 571

744 - checksum: 1209345832

745

746 <?xml version="1.0" encoding="UTF-8"?>

747 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

748 <plist version="1.0">

749 <dict>

750 <key>AbandonProcessGroup</key>

751 <true/>

752 <key>EnableTransactions</key>

753 <false/>

754 <key>ProgramArguments</key>

755 <array>

756 <string>/Applications/SearchProtect/SearchProtect.app/Contents/MacOS/SearchProt ect</string>

757 <string>-execv_instance</string>

758 </array>

759 <key>KeepAlive</key>

760 <true/>

761 <key>RunAtLoad</key>

762 <true/>

763 <key>Label</key>

764 <string>com.period.searchprotectd</string>

765 </dict>

766 </plist>

767

768 Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

769 - mod date: Aug 8 09:34:37 2014

770 - size (B): 611

771 - checksum: 2586050363

772

773 <?xml version="1.0" encoding="UTF-8"?>

774 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

775 <plist version="1.0">

776 <dict>

777 <key>Disabled</key>

778 <true/>

779 <key>Label</key>

780 <string>com.teamviewer.service</string>

781 <key>KeepAlive</key>

782 <true/>

783 <key>ProgramArguments</key>

784 <array>

785 <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>

786 <string>-Module</string>

787 <string>Full</string>

788 </array>

789 <key>RunAtLoad</key>

790 <true/>

791 <key>WorkingDirectory</key>

792 <string>/Applications/TeamViewer.app/Contents/MacOS</string>

793 </dict>

794 </plist>

795

796 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

797 - mod date: Jun 7 15:06:05 2015

798 - size (B): 554

799 - checksum: 3012644940

800

801 <?xml version="1.0" encoding="UTF-8"?>

802 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

803 <plist version="1.0">

804 <dict>

805 <key>Disabled</key>

806 <true/>

807 <key>Label</key>

808 <string>org.apache.httpd</string>

809 <key>EnvironmentVariables</key>

810 <dict>

811 <key>XPC_SERVICES_UNAVAILABLE</key>

812 <string>1</string>

813 </dict>

814 <key>ProgramArguments</key>

815 <array>

816 <string>/usr/sbin/httpd-wrapper</string>

817 <string>-D</string>

818 <string>FOREGROUND</string>

819 </array>

820 <key>OnDemand</key>

821 <false/>

822 </dict>

823 </plist>

824

825 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

826 - mod date: Dec 6 22:44:17 2014

827 - size (B): 601

828 - checksum: 1251035989

829

830 <?xml version="1.0" encoding="UTF-8"?>

831 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

832 <plist version="1.0">

833 <dict>

834 <key>Label</key>

835 <string>com.adobe.ARM.UUID</string>

836 <key>ProgramArguments</key>

837 <array>

838 <string>/Applications/Adobe Acrobat 9 Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

839 </array>

840 <key>RunAtLoad</key>

841 <true/>

842 <key>StartInterval</key>

843 <integer>12600</integer>

844 </dict>

845 </plist>

846

847 Contents of Library/LaunchAgents/com.google.keystone.agent.plist

848 - mod date: Jun 19 06:39:47 2015

849 - size (B): 812

850 - checksum: 2734695438

851

852 <?xml version="1.0" encoding="UTF-8"?>

853 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

854 <plist version="1.0">

855 <dict>

856 <key>Label</key>

857 <string>com.google.keystone.user.agent</string>

858 <key>LimitLoadToSessionType</key>

859 <string>Aqua</string>

860 <key>ProgramArguments</key>

861 <array>

862 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

863 <string>-runMode</string>

864 <string>ifneeded</string>

865 </array>

866 <key>RunAtLoad</key>

867 <true/>

868 <key>StartInterval</key>

869 <integer>3523</integer>

870 <key>StandardErrorPath</key>

871 <string>/dev/null</string>

872 <key>StandardOutPath</key>

873 <string>/dev/null</string>

874 </dict>

875 </plist>

876

877 App extensions

878

879 com.evernote.Evernote.SharingExtension

880 com.fiplab.batteryhealth.widget

881 com.getdropbox.dropbox.garcon

882

883 Installations

884

885 Memory Clean: 7/3/15, 20:50

886 Battery Health: 7/3/15, 20:39

887 Evernote: 7/3/15, 20:38

888 Microsoft Word for Mac: 7/2/15, 11:44

889 Microsoft Excel for Mac: 7/2/15, 11:43

890

891 Elapsed time (sec): 999

Jul 8, 2015 10:38 AM in response to paksiw

I would suggest that you delete Avira AV from your MBP. This is totally unnecessary. Here are the instructions:


https://www.avira.com/en/support-for-business-knowledgebase-detail/kbid/1242


You might also rid the MBP pf Google Chrome and its various parts. Among browsers, it is a resource glutton. Firefox, Safari and Opera are all good alternatives.


Ciao.

Jul 8, 2015 1:15 PM in response to paksiw

A

Remove "Avira" by following the instructions on this page.

Back up all data before making any changes. Never install any commercial "anti-virus" product again.

B

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nouchg,nouappnd,noschg,nosappnd {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. When the OS X Utilities screen appears, select

Utilities Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

Restart

from the menu bar.

C

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

D

You installed the "Trovi," "Conduit," or "SearchProtect" ad-injection malware. Follow the instructions on this Apple Support page to remove it.

Back up all data before making any changes.

Besides the files listed in the linked support article, you may also need to remove these files in the same way:

~/Library/Application Support/Firefox/searchplugins/MyBrand.xml
~/Library/Application Support/Google/Chrome/External Extensions/fjadmdmahkpbhgbmmkiiaanlnlekelmn.json
~/Library/Application Support/Mozilla/Extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/deacruzemiliano@outlook.com

Note that when you go to remove the "SearchProtect" app in the Applications folder, you may find instead a subfolder named "SearchProtect" with several apps inside it. Remove that subfolder together with all its contents.

One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.

Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic," "CNET Download," or "SourceForge." Never visit any of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

Restart/Shutdown problems after updating to OS 10.10.3

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.