1 Start time: 16:43:06 01/07/16
2
3 Revision: 1425
4
5 Model Identifier: MacBookPro12,1
6 Boot ROM Version: MBP121.0167.B15
7 System Version: OS X 10.11.3 (15D13b)
8 Kernel Version: Darwin 15.3.0
9 Boot Mode: Safe
10 Time since boot: 7 minutes
11
12 FileVault 2
13
14 FileVault is On.
15
16 CPU usage (%)
17
18 WindowServer (UID 0): 48.9
19 Google Chrome He (UID 501): 43.9
20
21 Energy impact, lifetime (relative)
22
23 WindowServer (UID 88): 37.13
24 Terminal (UID 501): 15.06
25
26 Energy impact, sampled (relative)
27
28 WindowServer (UID 88): 28.04
29 Google Chrome Helper (UID 501): 15.76
30
31 CPU usage, lifetime (ms/s)
32
33 WindowServer (UID 88): 370.96
34
35 CPU usage, sampled (ms/s)
36
37 WindowServer (UID 88): 281.41
38 Google Chrome Helper (UID 501): 157.29
39
40 Spotlight: Indexing and searching disabled
41
42 Global prefs (system)
43
44 NSShowFeedbackMenu = 1
45
46 Firewall: On
47
48 Listeners
49
50 cupsd: ipp
51 kdc: kerberos
52 launchd: afpovertcp
53 launchd: microsoft-ds
54 launchd: ssh
55
56 System caches/logs
57
58 5.7 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data
59
60 Diagnostic reports
61
62 2015-12-08 ApplicationManager crash x40
63 2015-12-13 ApplicationManager crash x60
64 2015-12-13 Microsoft Outlook crash
65 2015-12-14 ApplicationManager crash x40
66 2015-12-16 ApplicationManager crash x20
67 2015-12-18 ApplicationManager crash x20
68 2015-12-20 ApplicationManager crash x20
69 2015-12-23 ApplicationManager crash x40
70 2015-12-26 ApplicationManager crash x79
71 2015-12-27 ApplicationManager crash x60
72 2015-12-28 ApplicationManager crash x20
73 2015-12-28 Box Sync crash
74 2016-01-02 ApplicationManager crash x20
75 2016-01-05 ApplicationManager crash x20
76 2016-01-06 ApplicationManager crash x20
77 2016-01-07 ApplicationManager crash x40
78
79 I/O errors
80
81 disk4s2: close: journal is invalid. aborting outstanding transactions 1
82 disk4s2: do_jnl_io: strategy err 0x6 1
83
84 Volumes
85
86 disk1: /
87
88 HID errors: 11
89
90 Kernel log
91
92 Jan 7 16:03:57 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x15ac2261b19dcd4b, provider is 0x15ac2260f23c894b
93 Jan 7 16:03:57 init: error getting PHY_MODE; using MODE_UNKNOWN
94 Jan 7 16:03:58 com.citrix.kernel.dne: WARNING: DNE: Registry not ready
95 Jan 7 16:03:59 [IGPU] Scheduler Throttle Cap = 100ms.
96 Jan 7 16:04:06 utun_start: ifnet_disable_output returned error 12
97 Jan 7 16:15:39 Process launchd [1] disabling system-wide I/O Throttling
98 Jan 7 16:15:39 Process launchd [1] disabling system-wide CPU Throttling
99 Jan 7 16:17:07 utun_start: ifnet_disable_output returned error 12
100 Jan 7 16:19:14 Process launchd [1] disabling system-wide I/O Throttling
101 Jan 7 16:19:14 Process launchd [1] disabling system-wide CPU Throttling
102 Jan 7 16:20:10 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x3e3bbe9fce41c8e9, provider is 0x3e3bbe9f0edcdbe9
103 Jan 7 16:20:10 init: error getting PHY_MODE; using MODE_UNKNOWN
104 Jan 7 16:20:11 com.citrix.kernel.dne: WARNING: DNE: Registry not ready
105 Jan 7 16:20:11 [IGPU] Scheduler Throttle Cap = 100ms.
106 Jan 7 16:20:22 utun_start: ifnet_disable_output returned error 12
107 Jan 7 16:29:08 Process launchd [1] disabling system-wide I/O Throttling
108 Jan 7 16:29:08 Process launchd [1] disabling system-wide CPU Throttling
109 Jan 7 16:33:00 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x9f2c7ad491aed711, provider is 0x9f2c7ad3d2494111
110 Jan 7 16:33:00 init: error getting PHY_MODE; using MODE_UNKNOWN
111 Jan 7 16:33:01 com.citrix.kernel.dne: WARNING: DNE: Registry not ready
112 Jan 7 16:33:02 [IGPU] Scheduler Throttle Cap = 100ms.
113 Jan 7 16:33:18 utun_start: ifnet_disable_output returned error 12
114 Jan 7 16:35:05 Process launchd [1] disabling system-wide I/O Throttling
115 Jan 7 16:35:05 Process launchd [1] disabling system-wide CPU Throttling
116 Jan 7 16:36:56 utun_start: ifnet_disable_output returned error 12
117
118 System log
119
120 Jan 7 16:42:47 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
121 Jan 7 16:42:57 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
122 Jan 7 16:42:57 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
123 Jan 7 16:42:57 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
124 Jan 7 16:43:07 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
125 Jan 7 16:43:07 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
126 Jan 7 16:43:07 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
127 Jan 7 16:43:17 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
128 Jan 7 16:43:17 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
129 Jan 7 16:43:17 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
130 Jan 7 16:43:27 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
131 Jan 7 16:43:27 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
132 Jan 7 16:43:27 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
133 Jan 7 16:43:37 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
134 Jan 7 16:43:37 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
135 Jan 7 16:43:37 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
136 Jan 7 16:43:47 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
137 Jan 7 16:43:47 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
138 Jan 7 16:43:47 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
139 Jan 7 16:43:57 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
140 Jan 7 16:43:57 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
141 Jan 7 16:43:57 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
142 Jan 7 16:44:07 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)
143 Jan 7 16:44:07 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog
144 Jan 7 16:44:07 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service
145
146 launchd log
147
148 Jan 7 10:55:22 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.263, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled
149 Jan 7 11:00:17 com.symantec.nav.migrateqtf: Interval spawn of service failed: 139: Service cannot presently execute
150 Jan 7 15:57:39 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.
151 Jan 7 15:57:40 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose
152 Jan 7 15:57:45 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.251, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled
153 Jan 7 15:57:45 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.251, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled
154 Jan 7 16:02:41 com.symantec.nav.migrateqtf: Interval spawn of service failed: 139: Service cannot presently execute
155 Jan 7 16:03:56 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.
156 Jan 7 16:03:57 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose
157 Jan 7 16:04:02 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.260, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled
158 Jan 7 16:04:02 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.260, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled
159 Jan 7 16:08:57 com.symantec.nav.migrateqtf: Interval spawn of service failed: 139: Service cannot presently execute
160 Jan 7 16:16:54 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.
161 Jan 7 16:16:55 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose
162 Jan 7 16:20:09 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.
163 Jan 7 16:20:10 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose
164 Jan 7 16:20:14 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.255, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled
165 Jan 7 16:20:14 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.255, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled
166 Jan 7 16:25:11 com.symantec.nav.migrateqtf: Interval spawn of service failed: 139: Service cannot presently execute
167 Jan 7 16:32:59 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.
168 Jan 7 16:33:00 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose
169 Jan 7 16:33:05 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.258, service = com.microsoft.SkyDriveLauncher, error = 119: Service is disabled
170 Jan 7 16:33:05 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.258, service = com.microsoft.OneDriveLauncher, error = 119: Service is disabled
171 Jan 7 16:36:45 : Failed to remove file or directory: name = dyld_shared_cache_x86_64h, error = 1: Operation not permitted. Further logging suppressed.
172 Jan 7 16:36:46 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose
173
174 Console log
175
176 Jan 7 16:17:25 fontd: XType - wal checkpoint: 0, -1, -1.
177 Jan 7 16:20:16 fontd: Failed to open read-only database, regenerating DB
178 Jan 7 16:37:11 fontd: XType - wal checkpoint: 0, -1, -1.
179
180 Loaded kernel extensions
181
182 com.symantec.kext.internetSecurity (5.5f7)
183 com.symantec.kext.pf (5.7.1f4)
184
185 System services loaded
186
187 com.apple.logd
188 - status: 1
189 com.apple.watchdogd
190
191 Login services disabled
192
193 com.microsoft.OneDriveLauncher
194
195 User services disabled
196
197 com.microsoft.OneDriveLauncher
198
199 Contents of /Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist
200 - mod date: Oct 13 17:12:19 2015
201 - size (B): 577
202 - checksum: 2197523146
203
204 <?xml version="1.0" encoding="UTF-8"?>
205 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
206 <plist version="1.0">
207 <dict>
208 <key>Label</key>
209 <string>com.adobe.ARMDCHelper.UUID</string>
210 <key>ProgramArguments</key>
211 <array>
212 <string>/Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper</string>
213 </array>
214 <key>RunAtLoad</key>
215 <true/>
216 <key>StartInterval</key>
217 <integer>12600</integer>
218 </dict>
219 </plist>
220
221 Contents of /Library/LaunchAgents/com.symantec.errorreporter-periodicagent.plist
222 - mod date: Jan 7 10:47:21 2016
223 - size (B): 1346
224 - checksum: 2027577871
225
226 <?xml version="1.0" encoding="UTF-8"?>
227 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
228 <plist version="1.0">
229 <dict>
230 <key>Disabled</key>
231 <false/>
232 <key>Label</key>
233 <string>com.symantec.errorreporting.periodic-agent</string>
234 <key>Nice</key>
235 <integer>10</integer>
236 <key>LowPriorityIO</key>
237 <true/>
238 <key>RunAtLoad</key>
239 <true/>
240 <key>StartInterval</key>
241 <integer>86400</integer>
242 <key>StartCalendarInterval</key>
243 <array>
244 <dict>
245 <key>Minute</key>
246 <integer>47</integer>
247 <key>Hour</key>
248 <integer>16</integer>
249 <key>Weekday</key>
250 <integer>1</integer>
251
252 ...and 28 more line(s)
253
254 Contents of /Library/LaunchAgents/com.symantec.nis.application.plist
255 - mod date: Sep 22 04:11:29 2015
256 - size (B): 569
257 - checksum: 4000086316
258
259 <?xml version="1.0" encoding="UTF-8"?>
260 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
261 <plist version="1.0">
262 <dict>
263 <key>Label</key>
264 <string>com.symantec.nis.application</string>
265 <key>RunAtLoad</key>
266 <false/>
267 <key>QueueDirectories</key>
268 <array>
269 <string>/Library/Application Support/Symantec/NisLaunch</string>
270 </array>
271 <key>ProgramArguments</key>
272 <array>
273 <string>/Applications/Symantec Solutions/Norton Internet Security.app/Contents/MacOS/Norton Internet Security</string>
274 </array>
275 </dict>
276 </plist>
277
278 Contents of /Library/LaunchAgents/com.symantec.uiagent.application.plist
279 - mod date: Jan 16 17:27:39 2013
280 - size (B): 476
281 - checksum: 2715641560
282
283 <?xml version="1.0" encoding="UTF-8"?>
284 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
285 <plist version="1.0">
286 <dict>
287 <key>KeepAlive</key>
288 <true/>
289 <key>Label</key>
290 <string>com.symantec.uiagent.application</string>
291 <key>ProgramArguments</key>
292 <array>
293 <string>/Library/Application Support/Symantec/SymUIAgent/SymUIAgent.app/Contents/MacOS/SymUIAgent</string>
294 </array>
295 <key>RunAtLoad</key>
296 <true/>
297 </dict>
298 </plist>
299
300 Contents of /Library/LaunchDaemons/com.antasthmaticUpd.plist
301 - mod date: Oct 3 17:35:33 2015
302 - size (B): 430
303 - checksum: 1718959491
304
305 <?xml version="1.0" encoding="UTF-8"?>
306 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
307 <plist version="1.0">
308 <dict>
309 <key>UserName</key>
310 <string>root</string>
311 <key>KeepAlive</key>
312 <false/>
313 <key>Label</key>
314 <string>com.pref.config</string>
315 <key>RunAtLoad</key>
316 <true/>
317 <key>ProgramArguments</key>
318 <array>
319 <string>/etc/run_upd.sh</string>
320 </array>
321 </dict>
322 </plist>
323
324 Contents of /Library/LaunchDaemons/com.citrix.agadminservice.plist
325 - mod date: Sep 29 04:33:08 2015
326 - size (B): 435
327 - checksum: 3370695685
328
329 <?xml version="1.0" encoding="UTF-8"?>
330 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
331 <plist version="1.0">
332 <dict>
333 <key>Label</key>
334 <string>com.citrix.agadminservice</string>
335 <key>Program</key>
336 <string>/usr/local/libexec/AGAdminService</string>
337 <key>ProgramArguments</key>
338 <array>
339 <string>AGAdminService</string>
340 </array>
341 <key>OnDemand</key>
342 <false/>
343 </dict>
344 </plist>
345
346 Contents of /Library/LaunchDaemons/com.citrix.daemon.dneregsvr.plist
347 - mod date: Sep 29 04:34:01 2015
348 - size (B): 712
349 - checksum: 549492236
350
351 <?xml version="1.0" encoding="UTF-8"?>
352 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
353 <plist version="1.0">
354 <dict>
355 <key>Label</key>
356 <string>com.citrix.daemon.dneregsvr</string>
357 <key>RunAtLoad</key>
358 <true/>
359 <key>ProgramArguments</key>
360 <array>
361 <string>/usr/local/libexec/dneregsvr</string>
362 </array>
363 <key>Sockets</key>
364 <dict>
365 <key>RegistryDomainSocket</key>
366 <dict>
367 <key>SockFamily</key>
368 <string>Unix</string>
369 <key>SockPassive</key>
370 <true/>
371 <key>SockPathMode</key>
372 <integer>49663</integer>
373 <key>SockPathName</key>
374 <string>/var/tmp/com.deterministicnetworks.dniregistry.Socket</string>
375 </dict>
376
377 ...and 3 more line(s)
378
379 Contents of /Library/LaunchDaemons/com.gallowsward.net-preferences.plist
380 - mod date: Jan 1 11:46:02 2016
381 - size (B): 450
382 - checksum: 3245181341
383
384 <?xml version="1.0" encoding="UTF-8"?>
385 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
386 <plist version="1.0">
387 <dict>
388 <key>UserName</key>
389 <string>root</string>
390 <key>KeepAlive</key>
391 <true/>
392 <key>Label</key>
393 <string>com.pref.net-preferences</string>
394 <key>RunAtLoad</key>
395 <true/>
396 <key>ProgramArguments</key>
397 <array>
398 <string>/etc/change_net_settings.sh</string>
399 </array>
400 </dict>
401 </plist>
402
403 Contents of /Library/LaunchDaemons/com.symantec.deepsight-extractor.plist
404 - mod date: Jan 24 06:06:24 2013
405 - size (B): 1097
406 - checksum: 27990138
407
408 <?xml version="1.0" encoding="UTF-8"?>
409 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
410 <plist version="1.0">
411 <dict>
412 <key>Disabled</key>
413 <true/>
414 <key>Label</key>
415 <string>com.symantec.deepsight-extractor</string>
416 <key>OnDemand</key>
417 <true/>
418 <key>KeepAlive</key>
419 <dict>
420 <key>NetworkState</key>
421 <true/>
422 </dict>
423 <key>RunAtLoad</key>
424 <true/>
425 <key>LowPriorityIO</key>
426 <true/>
427 <key>Nice</key>
428 <integer>10</integer>
429 <key>StandardOutPath</key>
430 <string>/dev/null</string>
431 <key>StandardErrorPath</key>
432 <string>/Library/Application Support/Symantec/DeepSight/errors.log</string>
433
434 ...and 13 more line(s)
435
436 Contents of /Library/LaunchDaemons/com.symantec.errorreporter-periodic.plist
437 - mod date: Jan 7 10:47:21 2016
438 - size (B): 1414
439 - checksum: 2715213021
440
441 <?xml version="1.0" encoding="UTF-8"?>
442 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
443 <plist version="1.0">
444 <dict>
445 <key>Disabled</key>
446 <false/>
447 <key>Label</key>
448 <string>com.symantec.errorreporting.periodic</string>
449 <key>Nice</key>
450 <integer>10</integer>
451 <key>LowPriorityIO</key>
452 <true/>
453 <key>RunAtLoad</key>
454 <false/>
455 <key>StartInterval</key>
456 <integer>43200</integer>
457 <key>StartCalendarInterval</key>
458 <array>
459 <dict>
460 <key>Minute</key>
461 <integer>47</integer>
462 <key>Hour</key>
463 <integer>12</integer>
464 <key>Weekday</key>
465 <integer>1</integer>
466
467 ...and 30 more line(s)
468
469 Contents of /Library/LaunchDaemons/com.symantec.liveupdate.daemon.ondemand.plist
470 - mod date: Sep 23 05:31:18 2014
471 - size (B): 783
472 - checksum: 2394746304
473
474 <?xml version="1.0" encoding="UTF-8"?>
475 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
476 <plist version="1.0">
477 <dict>
478 <key>KeepAlive</key>
479 <false/>
480 <key>Label</key>
481 <string>com.symantec.liveupdate.daemon.ondemand</string>
482 <key>ProgramArguments</key>
483 <array>
484 <string>/Library/Application Support/Symantec/LiveUpdate/LiveUpdateDaemon.bundle/Contents/MacOS/LiveUpdateDa emon</string>
485 </array>
486 <key>TimeOut</key>
487 <integer>15</integer>
488 <key>Sockets</key>
489 <dict>
490 <key>DaemonSocket</key>
491 <dict>
492 <key>SockPathMode</key>
493 <integer>49663</integer>
494 <key>SockPathName</key>
495 <string>/private/tmp/com.symantec.liveupdate.daemonport</string>
496 </dict>
497 </dict>
498 <key>EnableTransactions</key>
499
500 ...and 3 more line(s)
501
502 Contents of /Library/LaunchDaemons/com.symantec.liveupdate.daemon.plist
503 - mod date: Sep 23 05:31:18 2014
504 - size (B): 535
505 - checksum: 4073930787
506
507 <?xml version="1.0" encoding="UTF-8"?>
508 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
509 <plist version="1.0">
510 <dict>
511 <key>KeepAlive</key>
512 <false/>
513 <key>RunAtLoad</key>
514 <true/>
515 <key>Label</key>
516 <string>com.symantec.liveupdate.daemon</string>
517 <key>ProgramArguments</key>
518 <array>
519 <string>/Library/Application Support/Symantec/LiveUpdate/LUTool</string>
520 </array>
521 <key>StartInterval</key>
522 <integer>7200</integer>
523 <key>TimeOut</key>
524 <integer>15</integer>
525 </dict>
526 </plist>
527
528 Contents of /Library/LaunchDaemons/com.symantec.nav.migrateqtf.plist
529 - mod date: Sep 17 08:04:53 2015
530 - size (B): 601
531 - checksum: 1567806071
532
533 <?xml version="1.0" encoding="UTF-8"?>
534 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
535 <plist version="1.0">
536 <dict>
537 <key>KeepAlive</key>
538 <false/>
539 <key>RunAtLoad</key>
540 <true/>
541 <key>Label</key>
542 <string>com.symantec.nav.migrateqtf</string>
543 <key>ProgramArguments</key>
544 <array>
545 <string>/usr/bin/MigrateQTF</string>
546 </array>
547 <key>StartInterval</key>
548 <integer>300</integer>
549 <key>TimeOut</key>
550 <integer>15</integer>
551 </dict>
552 </plist>
553
554 Contents of /Library/LaunchDaemons/com.symantec.sharedsettings.plist
555 - mod date: Aug 13 06:12:24 2015
556 - size (B): 495
557 - checksum: 2142494329
558
559 <?xml version="1.0" encoding="UTF-8"?>
560 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
561 <plist version="1.0">
562 <dict>
563 <key>KeepAlive</key>
564 <false/>
565 <key>Label</key>
566 <string>com.symantec.sharedsettings</string>
567 <key>MachServices</key>
568 <dict>
569 <key>com.symantec.sharedsettings</key>
570 <true/>
571 </dict>
572 <key>Program</key>
573 <string>/Library/PrivateFrameworks/SymSharedSettings.framework/Tools/SymSharedS ettingsd</string>
574 </dict>
575 </plist>
576
577 Contents of /Library/LaunchDaemons/com.symantec.symdaemon.plist
578 - mod date: Sep 17 04:12:08 2014
579 - size (B): 550
580 - checksum: 513030552
581
582 <?xml version="1.0" encoding="UTF-8"?>
583 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
584 <plist version="1.0">
585 <dict>
586 <key>Label</key>
587 <string>com.symantec.symdaemon</string>
588 <key>OnDemand</key>
589 <false/>
590 <key>KeepAlive</key>
591 <dict>
592 <key>SuccessfulExit</key>
593 <false/>
594 </dict>
595 <key>RunAtLoad</key>
596 <true/>
597 <key>ProgramArguments</key>
598 <array>
599 <string>/Library/Application Support/Symantec/Daemon/SymDaemon.bundle/Contents/MacOS/SymDaemon</string>
600 </array>
601 </dict>
602 </plist>
603
604 Contents of /private/etc/change_net_settings.sh
605 - mod date: Jan 1 11:45:59 2016
606 - size (B): 382
607 - checksum: 1199845867
608
609 appName=$(sudo defaults read /Library/Preferences/com.common.plist name)
610 echo $appName
611 userName=$(sudo defaults read /Library/Preferences/com.common.plist user_id)
612 echo $userName
613 if [ -a "/Library/"$appName"/Contents/MacOS/"$appName ];
614 then
615 sleep 10
616 sudo pfctl -evf /etc/pf_proxy.conf
617 sudo -u $userName "/Library/"$appName"/Contents/MacOS/"$appName
618 fi
619 exit 0
620
621 Contents of /private/etc/hosts
622 - mod date: Oct 3 16:54:20 2015
623 - size (B): 283
624 - checksum: 2896260835
625
626 127.0.0.1 localhost
627 255.255.255.255 broadcasthost
628 ::1 localhost
629 127.0.0.1 lmlicenses.wip4.adobe.com
630 127.0.0.1 lm.licenses.adobe.com
631
632 Contents of /private/etc/run_upd.sh
633 - mod date: Oct 3 17:35:33 2015
634 - size (B): 241
635 - checksum: 1207436740
636
637 appName=$(sudo defaults read /Library/Preferences/com.common.plist name_upd)
638 echo $appName
639 if [ -a "/Library/"$appName"/Contents/MacOS/"$appName ];
640 then
641 sleep 10
642 sudo "/Library/"$appName"/Contents/MacOS/"$appName
643 fi
644 exit 0
645
646 Contents of Library/LaunchAgents/.DS_Store
647 - data
648 - mod date: Oct 3 17:25:58 2015
649 - size (B): 6148
650 - checksum: 1987479788
651
652 [N/A]
653
654 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist
655 - mod date: Oct 18 08:14:38 2015
656 - size (B): 601
657 - checksum: 926752576
658
659 <?xml version="1.0" encoding="UTF-8"?>
660 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
661 <plist version="1.0">
662 <dict>
663 <key>Label</key>
664 <string>com.adobe.ARM.UUID</string>
665 <key>ProgramArguments</key>
666 <array>
667 <string>/Applications/Adobe Acrobat X Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>
668 </array>
669 <key>RunAtLoad</key>
670 <true/>
671 <key>StartInterval</key>
672 <integer>12600</integer>
673 </dict>
674 </plist>
675
676 Contents of Library/LaunchAgents/com.google.keystone.agent.plist
677 - mod date: Dec 14 18:03:02 2015
678 - size (B): 806
679 - checksum: 1471904520
680
681 <?xml version="1.0" encoding="UTF-8"?>
682 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
683 <plist version="1.0">
684 <dict>
685 <key>Label</key>
686 <string>com.google.keystone.user.agent</string>
687 <key>LimitLoadToSessionType</key>
688 <string>Aqua</string>
689 <key>ProgramArguments</key>
690 <array>
691 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
692 <string>-runMode</string>
693 <string>ifneeded</string>
694 </array>
695 <key>RunAtLoad</key>
696 <true/>
697 <key>StartInterval</key>
698 <integer>3623</integer>
699 <key>StandardErrorPath</key>
700 <string>/dev/null</string>
701 <key>StandardOutPath</key>
702 <string>/dev/null</string>
703 </dict>
704 </plist>
705
706 Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
707 - mod date: Oct 29 10:05:01 2015
708 - size (B): 808
709 - checksum: 843792081
710
711 <?xml version="1.0" encoding="UTF-8"?>
712 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
713 <plist version="1.0">
714 <dict>
715 <key>Label</key>
716 <string>com.jdibackup.ZipCloud.autostart</string>
717 <key>ProgramArguments</key>
718 <array>
719 <string>open</string>
720 <string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
721 <string>-n</string>
722 <string>--args</string>
723 <string>9</string>
724 <string>-l</string>
725 </array>
726 <key>StandardOutPath</key>
727 <string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
728 <key>StandardErrorPath</key>
729 <string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
730 <key>RunAtLoad</key>
731 <true/>
732 </dict>
733 </plist>
734
735 Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.backupstart.plist
736 - mod date: Oct 29 10:05:01 2015
737 - size (B): 976
738 - checksum: 3970425741
739
740 <?xml version="1.0" encoding="UTF-8"?>
741 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
742 <plist version="1.0">
743 <dict>
744 <key>Label</key>
745 <string>com.jdibackup.ZipCloud.backupstart</string>
746 <key>ProgramArguments</key>
747 <array>
748 <string>open</string>
749 <string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
750 <string>-n</string>
751 <string>--args</string>
752 <string>8</string>
753 <string>-b</string>
754 </array>
755 <key>StandardOutPath</key>
756 <string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
757 <key>StandardErrorPath</key>
758 <string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
759 <key>StartCalendarInterval</key>
760 <dict>
761 <key>Minute</key>
762 <integer>56</integer>
763 <key>Hour</key>
764 <integer>8</integer>
765
766 ...and 5 more line(s)
767
768 Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
769 - mod date: Oct 29 10:05:00 2015
770 - size (B): 829
771 - checksum: 3544806700
772
773 <?xml version="1.0" encoding="UTF-8"?>
774 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
775 <plist version="1.0">
776 <dict>
777 <key>Label</key>
778 <string>com.jdibackup.ZipCloud.notify</string>
779 <key>ProgramArguments</key>
780 <array>
781 <string>open</string>
782 <string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
783 <string>--args</string>
784 <string>7</string>
785 <string>1</string>
786 </array>
787 <key>StandardOutPath</key>
788 <string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
789 <key>StandardErrorPath</key>
790 <string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
791 <key>StartInterval</key>
792 <integer>1200</integer>
793 <key>RunAtLoad</key>
794 <false/>
795 </dict>
796 </plist>
797
798 Contents of Library/LaunchAgents/com.spigot.ApplicationManager.plist
799 - mod date: Sep 14 17:55:48 2015
800 - size (B): 483
801 - checksum: 1298042635
802
803 <?xml version="1.0" encoding="UTF-8"?>
804 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
805 <plist version="1.0">
806 <dict>
807 <key>KeepAlive</key>
808 <true/>
809 <key>Label</key>
810 <string>com.spigot.ApplicationManager</string>
811 <key>ProgramArguments</key>
812 <array>
813 <string>/Users/USER/Library/Application Support/Spigot/ApplicationManager</string>
814 <string>--protect</string>
815 </array>
816 <key>RunAtLoad</key>
817 <true/>
818 </dict>
819 </plist>
820
821 User login items
822
823 Box Sync
824 - /Applications/Box Sync.app
825 SpeechSynthesisServer
826 - /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app
827
828 Safari extensions
829
830 eBay Shopping Assistant
831 - com.spigot.safari.ebayshopassist
832 iMedia Converter Deluxe
833 - com.wondershare.iskyvc
834 iTube Studio
835 - com.wondershare.safari.itubestudio
836 Searchme
837 - com.spigot.safari.searchme
838
839 iCloud services
840
841 iCloud Drive
842 Photos
843 Mail
844 Contacts
845 Calendar
846 Reminders
847 Safari
848 Notes
849 BTMM
850 FMM
851
852 iCloud errors
853
854 cloudd 6
855 cloudphotosd 4
856 Finder 4
857 comapple.CloudPhotosConfiguration 3
858
859 Continuity errors
860
861 sharingd 43
862
863 Bad permissions: 30
864
865 Lockfiles: 2
866
867 Global prefs (user)
868
869 AppleICUForce24HourTime = 1
870 AppleInterfaceStyle = Dark
871 NSShowFeedbackMenu = 1
872
873 Extensions
874
875 /Library/Extensions/CitrixDNE.kext
876 - com.citrix.kernel.dne
877 /Library/Extensions/CitrixDNERegistry.kext
878 - com.citrix.kernel.dneregistry
879 /Library/Extensions/CitrixSSLVpn.kext
880 - com.citrix.kernel.sslvpn
881 /Library/Extensions/FileSecurity.kext
882 - com.symantec.kext.filesecurity
883 /Library/Extensions/SymAPComm.kext
884 - com.symantec.kext.SymAPComm
885 /Library/Extensions/SymFirewall.kext
886 - com.symantec.kext.fw
887 /Library/Extensions/SymIPS.kext
888 - com.symantec.kext.ips
889 /Library/Extensions/SymInternetSecurity.kext
890 - com.symantec.kext.internetSecurity
891 /Library/Extensions/SymPersonalFirewall.kext
892 - com.symantec.kext.pf
893
894 Frameworks
895
896 /Library/Frameworks/AGAuthentication.framework
897 - /Library/Frameworks/AGAuthentication.framework: could not find /Library/Frameworks/AGAuthentication.framework.
898 /Library/Frameworks/DnRegistry.framework
899 - /Library/Frameworks/DnRegistry.framework: could not find /Library/Frameworks/DnRegistry.framework.
900
901 PrefPane
902
903 /Library/PreferencePanes/Flash Player.prefPane
904 - N/A
905 /Library/PreferencePanes/SymantecQuickMenu.prefPane
906 - /Library/PreferencePanes/SymantecQuickMenu.prefPane: could not find /Library/PreferencePanes/SymantecQuickMenu.prefPane.
907
908 App extensions
909
910 com.box.sync.findersyncext
911 com.microsoft.OneDrive-mac.FinderSync
912 com.microsoft.onenote.mac.shareextension
913
914 Bad kernel extensions
915
916 /System/Library/Extensions/AppleOSXUSBNCM.kext
917
918 Installations
919
920 SymWebFraud.English: 1/7/16, 16:03
921 SymWebFraud: 1/7/16, 16:03
922 SymNCOApplication.English: 1/7/16, 16:03
923 SymNCOApplication: 1/7/16, 16:03
924 SymFileSecurity.English: 1/7/16, 16:03
925
926 Elapsed time (sec): 297