Internet works in recovery mode but not normally

Question

Level 1

0 points

Internet works in recovery mode but not normally

I am trying to access the internet on my MacBook Pro. It has become very slow reacting, as when I type or try to launch either safari or chrome. I restarted my computer 2-3 times in recovery mode, by doing the following: restart, command and R, then launch a clean copy of safari. The clean safari opens fast and the internet is perfect. Then I restart my computer normally, safari and chrome take 2-3 minutes to open. Then if the web pages open at all, it takes an additional 2-3 minutes. I have tried even basic websites like google searches, Facebook. In fact as I mess around with my computer more, everything is running very slow. The only thing running on my computer is Finder and I don't think this is a memory space problem since this suddenly occurred. Any suggestions?

MacBook Pro, OS X Yosemite (10.10.4)

Posted on Aug 24, 2015 3:06 PM

Reply

Answer 1

Linc Davis

Level 10

209,547 points

Aug 24, 2015 3:20 PM in response to Lbiddinger

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES ▹ All Messages

from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar at the top of the screen.

Click the Clear Display icon in the toolbar. Then take an action that isn't working the way you expect. Select any lines that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name or email address, may appear in the log. Anonymize before posting.

When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

Reply

Answer 2

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 3:32 PM in response to Linc Davis

8/24/15 6:31:37.877 PM cloudd[492]: Failed to get an authToken for MMCS item <CKDMMCSItem: 0x7feaead524e0; itemID=2701, size=259722, recordKey=resOriginalRes, path="/Users/USER/Pictures/*/cplAfM4WVIUGD7wUoaLYPbWevTeETyI.jpeg", signature=<01f33859 5214183e f052868b 60f6d67a f4de113c 88>> and operation 5D4381A3-7215-4FE5-9790-24A75FCA81B3: Error Domain=CKInternalErrorDomain Code=2024 "Atomic failure" UserInfo=0x7feaeafa9bd0 {ErrorDescription=Atomic failure, ContainerID=com.apple.photos.cloud, errorKey=ckwnnz6m, RequestUUID=6F907FCD-F9C8-4833-94A1-CEEF2BA1728D, NSLocalizedDescription=Atomic failure}

Reply

Answer 3

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 3:34 PM in response to Lbiddinger

8/24/15 6:32:25.377 PM acwebsecagent[215]: OnConnectionFailure : Fail Open - Reason = Unable to verify the license key

Those are the two posts that show up.

Reply

Answer 4

Linc Davis

Level 10

209,547 points

Aug 24, 2015 3:58 PM in response to Lbiddinger

Remove "Cisco AnyConnect." Use the built-in Cisco client instead.

Any third-party software that doesn't install from the App Store or by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

Reply

Answer 5

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 4:23 PM in response to Linc Davis

Is there any way to check for a virus? I have uninstalled Cisco and restarted. Safari keeps "not responding" and sending reports to Apple.

Reply

Answer 6

Linc Davis

Level 10

209,547 points

Aug 24, 2015 4:37 PM in response to Lbiddinger

Please read this whole message before doing anything.

This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.

Step 1

The purpose of this step is to determine whether the problem is localized to your user account.

Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”

While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.

Test while logged in as Guest. Same problem?

After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.

*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.

Step 2

The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Please take this step regardless of the results of Step 1.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Reply

Answer 7

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 5:05 PM in response to Linc Davis

Step 1- all web pages open, but were still slow. It took approx. 30 seconds for each page to open

Step 2- it worked great in safe mode. There was a few second delay on opening safari, but I think that was due to the fact I am in safe mode. Safari was really quick.

Reply

Answer 8

Linc Davis

Level 10

209,547 points

Aug 24, 2015 5:41 PM in response to Lbiddinger

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.

6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 9

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 6:22 PM in response to Linc Davis

1 Start time: 21:01:10 08/24/15

2

3 Revision: 1336

4

5 Model Identifier: MacBookPro9,1

6 Memory: 4 GB

7 System Version: OS X 10.10.4 (14E46)

8 Kernel Version: Darwin 14.4.0

9 Time since boot: 12 minutes

10

11 System load

12

13 combined level = Bad

14 - battery level = Bad

15

16 Activity

17

18 en1: in 3, out 122 (KiB/s)

19

20 I/O wait time (ms/s)

21

22 mds (UID 0): 313

23

24 I/O requests (KiB/s)

25

26 cloudd (UID 501): 75264

27

28 System errors (per sec)

29

30 com.apple.WebKi (UID 501, error 316): 171

31 Creative Cloud (UID 501, error 60): 115

32

33 Energy (lifetime)

34

35 kernel_task (UID 0): 9.27

36 bash (UID 501): 7.02

37 Terminal (UID 501): 6.38

38

39 Energy (sampled)

40

41 cloudd (UID 501): 15.91

42 kernel_task (UID 0): 8.12

43 com.apple.WebKit.Plugin.64 (UID 501): 7.19

44

45 Profiles: 22

46

47 Global prefs (system)

48

49 MultipleSessionEnabled = 1

50

51 Trust settings: admin 2, user 3

52

53 Listeners

54

55 cupsd: ipp

56

57 lost+found

58

59 iNode21045270 xar archive - version 1 (5637490349 B)

60

61 Diagnostic reports

62

63 2015-08-05 Cisco AnyConnect Secure Mobility Client crash

64 2015-08-16 App Store hang

65 2015-08-21 cloudd crash

66 2015-08-21 com.apple.WebKit.Plugin.64 crash x2

67 2015-08-24 Cisco AnyConnect Secure Mobility Client crash

68 2015-08-24 Safari hang x4

69 2015-08-24 fontd crash x7

70

71 HID errors: 75

72

73 Kernel log

74

75 Aug 24 19:15:17 ALF: ifnet_get_address_list_family error 12

76 Aug 24 19:15:17 ALF: ifnet_get_address_list_family error 12

77 Aug 24 19:15:17 ALF: ifnet_get_address_list_family error 12

78 Aug 24 19:15:17 ALF: ifnet_get_address_list_family error 12

79 Aug 24 19:15:18 ALF: ifnet_get_address_list_family error 12

80 Aug 24 19:15:18 ALF: ifnet_get_address_list_family error 12

81 Aug 24 19:15:18 ALF: ifnet_get_address_list_family error 12

82 Aug 24 19:15:18 ALF: ifnet_get_address_list_family error 12

83 Aug 24 19:15:18 ALF: ifnet_get_address_list_family error 12

84 Aug 24 19:15:19 ALF: ifnet_get_address_list_family error 12

85 Aug 24 19:17:50 pci pause: SDXC

86 Aug 24 19:17:56 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

87 Aug 24 19:18:00 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

88 Aug 24 19:41:12 PM notification timeout (pid 433, Creative Cloud)

89 Aug 24 19:41:12 PM notification timeout (pid 535, Adobe CEF Helper)

90 Aug 24 19:48:32 pci pause: SDXC

91 Aug 24 20:00:46 pci pause: SDXC

92 Aug 24 20:01:03 Kext com.apple.driver.AppleIntelSlowAdaptiveClocking failed to load (0xdc0Couldn't alloc class "AppleSMCPDRC"

93 Aug 24 20:20:27 Failed to open the file

94 Aug 24 20:20:30 hibernate file close due timeout

95 Aug 24 20:48:43 pci pause: SDXC

96 Aug 24 20:49:24 pci pause: SDXC

97 Aug 24 20:50:09 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

98 Aug 24 20:50:10 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

99 Aug 24 20:51:43 considerRebuildOfPrelinkedKernel com.apple.kext.OSvKernDSPLib triggered rebuild

100

101 System log

102

103 Aug 24 20:50:29 com.avast.fileshield: avscan_initiate_scan: avscan_opened() failed.

104 Aug 24 20:50:29 com.avast.fileshield: avscan_open: connect() failed. No such file or directory [2]

105 Aug 24 20:50:29 com.avast.fileshield: avscan_initiate_scan: avscan_opened() failed.

106 Aug 24 20:50:29 com.avast.fileshield: avscan_open: connect() failed. No such file or directory [2]

107 Aug 24 20:50:29 com.avast.fileshield: avscan_initiate_scan: avscan_opened() failed.

108 Aug 24 20:50:29 com.avast.fileshield: avscan_open: connect() failed. No such file or directory [2]

109 Aug 24 20:50:29 com.avast.fileshield: avscan_initiate_scan: avscan_opened() failed.

110 Aug 24 20:50:29 com.avast.fileshield: avscan_open: connect() failed. No such file or directory [2]

111 Aug 24 20:50:29 com.avast.fileshield: avscan_initiate_scan: avscan_opened() failed.

112 Aug 24 20:50:29 com.avast.fileshield: avscan_open: connect() failed. No such file or directory [2]

113 Aug 24 20:50:29 com.avast.fileshield: avscan_initiate_scan: avscan_opened() failed.

114 Aug 24 20:50:29 com.avast.fileshield: avscan_open: connect() failed. No such file or directory [2]

115 Aug 24 20:50:29 com.avast.fileshield: avscan_initiate_scan: avscan_opened() failed.

116 Aug 24 20:52:08 Finder: Took 2.71s to get the token

117 Aug 24 20:52:51 hidd: IOHIDEventQueue unable to get policy for event of type 11. (e00002e8)

118 Aug 24 20:53:04 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

119 Aug 24 20:53:05 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

120 Aug 24 20:53:06 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

121 Aug 24 20:53:07 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

122 Aug 24 20:53:08 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

123 Aug 24 20:53:09 askpermissiond: ApplePushService: Timed out making blocking call, failed to perform call via XPC connection to 'com.apple.apsd'

124 Aug 24 20:53:38 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Safari" for over 1.00 seconds. Server has re-enabled them.

125 Aug 24 20:54:04 cloudd: Stream 0x7fafe8467900 is sending an event before being opened

126 Aug 24 20:54:04 cloudd: Stream 0x7fafe87cc600 is sending an event before being opened

127 Aug 24 20:56:06 WindowServer: disable_update_timeout: UI updates were forcibly disabled by application "Safari" for over 1.00 seconds. Server has re-enabled them.

128

129 launchd log

130

131 Aug 24 20:01:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.219: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

132 Aug 24 20:01:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.219: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

133 Aug 24 20:01:12 com.apple.xpc.launchd.domain.pid.SecurityAgent.219: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

134 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

135 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

136 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

137 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

138 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

139 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc/Contents/MacOS/XPCTimeStampingService error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

140 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc/Contents/MacOS/com.apple.DictionaryServiceHelper error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

141 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc/Contents/MacOS/XPCKeychainSandboxCheck error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

142 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc/Contents/MacOS/IOServiceAuthorizeAgent error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

143 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

144 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCTimeSta mpingService.xpc, error = 1: Operation not permitted

145 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc, error = 1: Operation not permitted

146 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Failed to bootstrap path: path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc, error = 1: Operation not permitted

147 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Failed to bootstrap path: path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc, error = 1: Operation not permitted

148 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Failed to bootstrap path: path = /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.x pc, error = 1: Operation not permitted

149 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Failed to bootstrap path: path = /System/Library/Frameworks/IOKit.framework/Versions/A/XPCServices/IOServiceAuth orizeAgent.xpc, error = 1: Operation not permitted

150 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Failed to bootstrap path: path = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/XPCKeychai nSandboxCheck.xpc, error = 1: Operation not permitted

151 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedSer viceRunner.xpc/Contents/MacOS/SandboxedServiceRunner error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

152 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XP CServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.S peechRecognitionCore.brokerd error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

153 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/XPCSer vices/DataDetectorsDynamicData.xpc/Contents/MacOS/DataDetectorsDynamicData error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

154 Aug 24 20:50:22 com.apple.xpc.launchd.domain.pid.SecurityAgent.279: Path not allowed in target domain: type = uid, path = /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/ com.apple.geod.xpc/Contents/MacOS/com.apple.geod error = 1: Operation not permitted, origin = /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAg ent.xpc

155 Aug 24 20:51:57 com.apple.xpc.launchd.user.501.100006.Aqua: Could not import service from caller: caller = otherbsd.409, service = com.apple.photostream-agent, error = 119: Service is disabled

156

157 Console log

158

159 Aug 24 20:02:54 fontd: Failed to compile sql statement (82), "INSERT INTO version_table VALUES( ?, ? );"

160 Aug 24 20:02:54 fontd: Failed to compile sql statement (83), "INSERT OR ABORT INTO font_table VALUES( NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? );"

161 Aug 24 20:02:54 fontd: Failed to compile sql statement (84), "INSERT OR ABORT INTO dir_table VALUES( NULL, ?, ?, ?, ?, ? );"

162 Aug 24 20:02:54 fontd: Failed to compile sql statement (85), "INSERT OR ABORT INTO bookmarks_table VALUES( NULL, ?, ?, ? );"

163 Aug 24 20:02:54 fontd: Failed to compile sql statement (86), "DELETE FROM font_table WHERE font_column == ?;"

164 Aug 24 20:02:54 fontd: Failed to compile sql statement (87), "DELETE FROM dir_table WHERE dir_column == ?;"

165 Aug 24 20:02:54 fontd: Failed to compile sql statement (88), "UPDATE OR ABORT font_table SET flags_column == ( flags_column & ?) | ? WHERE font_column == ?;"

166 Aug 24 20:02:54 fontd: Failed to compile sql statement (89), "UPDATE OR ABORT dir_table SET flags_column == ( flags_column & ?) | ? WHERE dir_column == ?;"

167 Aug 24 20:02:54 fontd: Failed to compile sql statement (90), "INSERT INTO name_table VALUES( ?, ?, ? );"

168 Aug 24 20:02:54 fontd: Failed to compile sql statement (91), "INSERT INTO family_table VALUES( ?, ?, ? );"

169 Aug 24 20:02:54 fontd: Failed to compile sql statement (92), "INSERT INTO subfamily_table VALUES( ?, ?, ? );"

170 Aug 24 20:02:54 fontd: Failed to compile sql statement (93), "INSERT INTO fullname_table VALUES( ?, ?, ? );"

171 Aug 24 20:02:54 fontd: Failed to compile sql statement (94), "INSERT OR REPLACE INTO traits_table VALUES( ?, ?, ?, ?, ? );"

172 Aug 24 20:02:54 fontd: Failed to compile sql statement (95), "INSERT INTO loc_names_table VALUES( ?, ?, ?, ?, ?, ?, ?, ?, ? );"

173 Aug 24 20:02:54 fontd: Failed to compile sql statement (96), "INSERT OR REPLACE INTO charset_table VALUES( NULL, ? );"

174 Aug 24 20:02:54 fontd: Failed to compile sql statement (97), "INSERT INTO unicoderanges_table VALUES( ?, ?, ?, ?, ? );"

175 Aug 24 20:02:54 fontd: Failed to compile sql statement (98), "INSERT INTO language_table VALUES( ?, ?, ? );"

176 Aug 24 20:02:54 fontd: Failed to compile sql statement (99), "INSERT INTO varaxis_table VALUES( ?, ?, ?, ?, ?, ?, ? );"

177 Aug 24 20:02:54 fontd: Failed to compile sql statement (100), "INSERT INTO varinstance_table VALUES( ?, ?, ? );"

178 Aug 24 20:02:54 fontd: Failed to compile sql statement (101), "INSERT OR REPLACE INTO lwfn_table VALUES( ?, ? );"

179 Aug 24 20:02:54 fontd: Failed to create font store at path /var/folders/r8/v_c2gpts1t97h5nf97vh835m0000gn/C/com.apple.FontRegistry/fontreg istry.user, trying alternative

180 Aug 24 20:02:54 fontd: Failed to finalize sql statement (1)

181 Aug 24 20:02:54 fontd: Failed to finalize sql statement (80)

182 Aug 24 20:02:54 fontd: Failed to finalize sql statement (81)

183 Aug 24 20:52:04 fontd: Failed to open read-only database, regenerating DB

184

185 Loaded kernel extensions

186

187 com.avast.AvastFileShield (2.1.0)

188 com.avast.PacketForwarder (2.0)

189

190 System services loaded

191

192 com.adobe.ARMDC.Communicator

193 com.adobe.ARMDC.SMJobBlessHelper

194 com.adobe.fpsaud

195 com.apple.watchdogd

196 com.avast.crashreport

197 com.avast.daemon

198 com.avast.fileshield

199 com.avast.init

200 com.avast.proxy

201 com.avast.service

202 com.avast.uninstall

203 com.avast.update

204 com.cloudpath.maccmd

205 com.google.keystone.daemon

206 com.microsoft.office.licensing.helper

207 com.skype.skypeinstaller

208

209 Login services loaded

210

211 com.adobe.AAM.Scheduler-1.0

212 com.adobe.ARM.UUID

213 com.adobe.ARMDCHelper.UUID

214 - status: 111

215 com.adobe.AdobeCreativeCloud

216 com.avast.helper

217 com.avast.home.userinit

218 com.avast.update-agent

219 com.avast.userinit

220 com.citrixonline.GoToMeeting.G2MUpdate

221 com.epson.eventmanager.agent

222 com.google.keystone.system.agent

223

224 Login services disabled

225

226 com.apple.photostream-agent

227 com.hp.devicemonitor

228

229 User services disabled

230

231 com.apple.photostream-agent

232 com.hp.devicemonitor

233

234 User login items

235

236 iTunesHelper

237 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

238

239 Safari extensions

240

241 Searchme

242 - com.spigot.safari.searchme

243 Avast Online Security

244 - com.avast.wrc

245

246 iCloud errors

247

248 cloudphotosd 43

249 Finder 7

250 CallHistorySyncHelper 5

251 Spotlight 3

252 comapple.InputMethodKit.UserDictionary 1

253 comapple.CloudPhotosConfiguration 1

254 Preview 1

255

256 Continuity errors

257

258 lsuseractivityd 40

259 sharingd 21

260

261 User caches/logs

262

263 2.2 GiB: Library/Logs/ACC 04-21-2015 20-56-01.log

264 2.2 GiB: Library/Logs/ACC 04-22-2015 11-11-35.log

265 2.1 GiB: Library/Logs/ACC 04-21-2015 19-56-01.log

266 2.1 GiB: Library/Logs/ACC 04-21-2015 17-56-01.log

267 1.7 GiB: Library/Logs/ACC 04-22-2015 08-35-33.log

268 1.7 GiB: Library/Logs/ACC 04-22-2015 13-29-28.log

269

270 Restricted files: 249

271

272 Lockfiles: 18

273

274 Global prefs (user)

275

276 AppleAntiAliasingThreshold = 4

277 AppleKeyboardUIMode = 2

278 AppleMiniaturizeOnDoubleClick = 0

279

280 Contents of /Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist

281 - mod date: Aug 4 17:34:24 2015

282 - size (B): 577

283 - checksum: 2197523146

284

285 <?xml version="1.0" encoding="UTF-8"?>

286 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

287 <plist version="1.0">

288 <dict>

289 <key>Label</key>

290 <string>com.adobe.ARMDCHelper.UUID</string>

291 <key>ProgramArguments</key>

292 <array>

293 <string>/Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper</string>

294 </array>

295 <key>RunAtLoad</key>

296 <true/>

297 <key>StartInterval</key>

298 <integer>12600</integer>

299 </dict>

300 </plist>

301

302 Contents of /Library/LaunchAgents/com.avast.update-agent.plist

303 - mod date: Jun 18 20:52:08 2015

304 - size (B): 638

305 - checksum: 4192623169

306

307 <?xml version="1.0" encoding="UTF-8"?>

308 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

309 <plist version="1.0">

310 <dict>

311 <key>KeepAlive</key>

312 <true/>

313 <key>Label</key>

314 <string>com.avast.update-agent</string>

315 <key>Program</key>

316 <string>/Library/Application Support/Avast/components/update/com.avast.update-agent</string>

317 <key>RunAtLoad</key>

318 <true/>

319 <key>StandardErrorPath</key>

320 <string>/dev/null</string>

321 <key>StandardOutPath</key>

322 <string>/dev/null</string>

323 </dict>

324 </plist>

325

326 Contents of /Library/LaunchAgents/com.avast.userinit.plist

327 - mod date: Jun 18 20:52:08 2015

328 - size (B): 436

329 - checksum: 84920623

330

331 <?xml version="1.0" encoding="UTF-8"?>

332 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

333 <plist version="1.0">

334 <dict>

335 <key>Label</key>

336 <string>com.avast.userinit</string>

337 <key>Program</key>

338 <string>/Library/Application Support/Avast/hub/userinit.sh</string>

339 <key>KeepAlive</key>

340 <false/>

341 <key>RunAtLoad</key>

342 <true/>

343 <key>AbandonProcessGroup</key>

344 <true/>

345 </dict>

346 </plist>

347

348 Contents of /Library/LaunchAgents/com.epson.eventmanager.agent.plist

349 - mod date: May 8 03:44:25 2012

350 - size (B): 704

351 - checksum: 1862971771

352

353 <?xml version="1.0" encoding="UTF-8"?>

354 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

355 <plist version="1.0">

356 <dict>

357 <key>KeepAlive</key>

358 <dict>

359 <key>PathState</key>

360 <dict>

361 <key>/Applications/Epson Software/Event Manager.app/Contents/Resources/Assistants/Event Manager/EEventManager.app</key>

362 <true/>

363 </dict>

364 </dict>

365 <key>Label</key>

366 <string>com.epson.eventmanager.agent</string>

367 <key>ProgramArguments</key>

368 <array>

369 <string>/Applications/Epson Software/Event Manager.app/Contents/Resources/Assistants/Event Manager/EEventManager.app/Contents/MacOS/EEventManager</string>

370 </array>

371 <key>RunAtLoad</key>

372 <true/>

373 </dict>

374 </plist>

375

376 Contents of /Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist

377 - mod date: Aug 4 17:34:24 2015

378 - size (B): 474

379 - checksum: 3887726299

380

381 <?xml version="1.0" encoding="UTF-8"?>

382 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

383 <plist version="1.0">

384 <dict>

385 <key>Label</key>

386 <string>com.adobe.ARMDC.Communicator</string>

387 <key>MachServices</key>

388 <dict>

389 <key>com.adobe.ARMDC.Communicator</key>

390 <true/>

391 </dict>

392 <key>ProgramArguments</key>

393 <array>

394 <string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator</string>

395 </array>

396 </dict>

397 </plist>

398

399 Contents of /Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist

400 - mod date: Aug 4 17:34:24 2015

401 - size (B): 486

402 - checksum: 930028549

403

404 <?xml version="1.0" encoding="UTF-8"?>

405 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

406 <plist version="1.0">

407 <dict>

408 <key>Label</key>

409 <string>com.adobe.ARMDC.SMJobBlessHelper</string>

410 <key>MachServices</key>

411 <dict>

412 <key>com.adobe.ARMDC.SMJobBlessHelper</key>

413 <true/>

414 </dict>

415 <key>ProgramArguments</key>

416 <array>

417 <string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper</string >

418 </array>

419 </dict>

420 </plist>

421

422 Contents of /Library/LaunchDaemons/com.avast.init.plist

423 - mod date: Jun 18 20:52:08 2015

424 - size (B): 571

425 - checksum: 17654464

426

427 <?xml version="1.0" encoding="UTF-8"?>

428 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

429 <plist version="1.0">

430 <dict>

431 <key>KeepAlive</key>

432 <false/>

433 <key>AbandonProcessGroup</key>

434 <true/>

435 <key>Label</key>

436 <string>com.avast.init</string>

437 <key>ProgramArguments</key>

438 <array>

439 <string>/Library/Application Support/Avast/hub/init.sh</string>

440 </array>

441 <key>RunAtLoad</key>

442 <true/>

443 <key>StandardErrorPath</key>

444 <string>/dev/null</string>

445 <key>StandardOutPath</key>

446 <string>/dev/null</string>

447 </dict>

448 </plist>

449

450 Contents of /Library/LaunchDaemons/com.avast.uninstall.plist

451 - mod date: Jun 18 20:52:08 2015

452 - size (B): 685

453 - checksum: 3425227779

454

455 <?xml version="1.0" encoding="UTF-8"?>

456 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

457 <plist version="1.0">

458 <dict>

459 <key>KeepAlive</key>

460 <dict>

461 <key>PathState</key>

462 <dict>

463 <key>/Applications/Avast.app</key>

464 <false/>

465 </dict>

466 </dict>

467 <key>AbandonProcessGroup</key>

468 <true/>

469 <key>Label</key>

470 <string>com.avast.uninstall</string>

471 <key>ProgramArguments</key>

472 <array>

473 <string>/Library/Application Support/Avast/hub/autouninstall.sh</string>

474 </array>

475 <key>RunAtLoad</key>

476 <false/>

477 <key>StandardErrorPath</key>

478 <string>/dev/null</string>

479 <key>StandardOutPath</key>

480

481 ...and 3 more line(s)

482

483 Contents of /Library/LaunchDaemons/com.avast.update.plist

484 - mod date: Jun 18 20:52:08 2015

485 - size (B): 694

486 - checksum: 3870293393

487

488 <?xml version="1.0" encoding="UTF-8"?>

489 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

490 <plist version="1.0">

491 <dict>

492 <key>KeepAlive</key>

493 <false/>

494 <key>AbandonProcessGroup</key>

495 <true/>

496 <key>Label</key>

497 <string>com.avast.update</string>

498 <key>ProgramArguments</key>

499 <array>

500 <string>/Library/Application Support/Avast/components/update/update.sh</string>

501 </array>

502 <key>StartInterval</key>

503 <integer>600</integer>

504 <key>ThrottleInterval</key>

505 <integer>10800</integer>

506 <key>RunAtLoad</key>

507 <false/>

508 <key>StandardErrorPath</key>

509 <string>/dev/null</string>

510 <key>StandardOutPath</key>

511 <string>/dev/null</string>

512 </dict>

513

514 ...and 1 more line(s)

515

516 Contents of /Library/LaunchDaemons/com.cloudpath.maccmd.plist

517 - mod date: Aug 18 15:31:08 2013

518 - size (B): 784

519 - checksum: 810825832

520

521 <?xml version="1.0" encoding="UTF-8"?>

522 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

523 <plist version="1.0">

524 <dict>

525 <key>Disabled</key>

526 <true/>

527 <key>Label</key>

528 <string>com.cloudpath.maccmd</string>

529 <key>OnDemand</key>

530 <true/>

531 <key>ProgramArguments</key>

532 <array>

533 <string>/Library/PrivilegedHelperTools/com.cloudpath.maccmd</string>

534 </array>

535 <key>ServiceIPC</key>

536 <true/>

537 <key>Sockets</key>

538 <dict>

539 <key>MasterSocket</key>

540 <dict>

541 <key>SockFamily</key>

542 <string>Unix</string>

543 <key>SockPathMode</key>

544 <integer>438</integer>

545 <key>SockPathName</key>

546

547 ...and 7 more line(s)

548

549 Contents of /Library/LaunchDaemons/com.skype.skypeinstaller.plist

550 - mod date: Oct 23 18:05:52 2013

551 - size (B): 714

552 - checksum: 354022165

553

554 <?xml version="1.0" encoding="UTF-8"?>

555 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

556 <plist version="1.0">

557 <dict>

558 <key>Label</key>

559 <string>com.skype.skypeinstaller</string>

560 <key>ProgramArguments</key>

561 <array>

562 <string>/Library/PrivilegedHelperTools/com.skype.skypeinstaller</string>

563 </array>

564 <key>Sockets</key>

565 <dict>

566 <key>com.skype.skypeinstaller.socket</key>

567 <dict>

568 <key>SockFamily</key>

569 <string>Unix</string>

570 <key>SockPathMode</key>

571 <integer>438</integer>

572 <key>SockPathName</key>

573 <string>/var/run/com.skype.skypeinstaller.socket</string>

574 <key>SockType</key>

575 <string>Stream</string>

576 </dict>

577 </dict>

578 </dict>

579

580 ...and 1 more line(s)

581

582 Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

583 - mod date: Aug 4 15:57:30 2015

584 - size (B): 554

585 - checksum: 3012644940

586

587 <?xml version="1.0" encoding="UTF-8"?>

588 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

589 <plist version="1.0">

590 <dict>

591 <key>Disabled</key>

592 <true/>

593 <key>Label</key>

594 <string>org.apache.httpd</string>

595 <key>EnvironmentVariables</key>

596 <dict>

597 <key>XPC_SERVICES_UNAVAILABLE</key>

598 <string>1</string>

599 </dict>

600 <key>ProgramArguments</key>

601 <array>

602 <string>/usr/sbin/httpd-wrapper</string>

603 <string>-D</string>

604 <string>FOREGROUND</string>

605 </array>

606 <key>OnDemand</key>

607 <false/>

608 </dict>

609 </plist>

610

611 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

612 - mod date: Dec 18 19:35:19 2013

613 - size (B): 631

614 - checksum: 4116814193

615

616 <?xml version="1.0" encoding="UTF-8"?>

617 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

618 <plist version="1.0">

619 <dict>

620 <key>Label</key>

621 <string>com.adobe.ARM.UUID</string>

622 <key>ProgramArguments</key>

623 <array>

624 <string>/Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

625 <string>semi-auto</string>

626 </array>

627 <key>RunAtLoad</key>

628 <true/>

629 <key>StartInterval</key>

630 <integer>12600</integer>

631 </dict>

632 </plist>

633

634 Contents of Library/LaunchAgents/com.avast.home.userinit.plist

635 - mod date: Jun 18 20:52:13 2015

636 - size (B): 490

637 - checksum: 180839738

638

639 <?xml version="1.0" encoding="UTF-8"?>

640 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

641 <plist version="1.0">

642 <dict>

643 <key>Label</key>

644 <string>com.avast.home.userinit</string>

645 <key>ProgramArguments</key>

646 <array>

647 <string>/Users/USER/Library/Application Support/Avast/hub/userinit.sh</string>

648 </array>

649 <key>KeepAlive</key>

650 <false/>

651 <key>RunAtLoad</key>

652 <true/>

653 <key>AbandonProcessGroup</key>

654 <true/>

655 </dict>

656 </plist>

657

658 Contents of Library/LaunchAgents/com.citrixonline.GoToMeeting.G2MUpdate.plist

659 - mod date: Aug 15 10:58:28 2015

660 - size (B): 465

661 - checksum: 106904950

662

663 <?xml version="1.0" encoding="UTF-8"?>

664 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

665 <plist version="1.0">

666 <dict>

667 <key>Label</key>

668 <string>com.citrixonline.GoToMeeting.G2MUpdate</string>

669 <key>ProgramArguments</key>

670 <array>

671 <string>/Users/USER/Library/Application Support/CitrixOnline/GoToMeeting/G2MUpdate</string>

672 </array>

673 <key>StartInterval</key>

674 <integer>3660</integer>

675 </dict>

676 </plist>

677

678 Bad plists

679

680 /Library/Preferences/com.epson.Epson Event Manager.UnInstallList.plist

681 /Library/Preferences/com.epson.EPSON Scan.UnInstallList.plist

682 /Library/Preferences/com.epson.Epson Scanner ICA Driver.UnInstallList.plist

683 /Library/Preferences/com.epson.Inkjet Printer Driver.UnInstallList.plist

684 Library/Containers/com.apple.cloudphotosd/Data/Library/Application Support/com.apple.cloudphotosd/services/com.apple.photo.icloud.myphotostream/co remediastream-state/sub/1003377125+17851995633637806343/protocol/chunk_0001.plis t

685 Library/Containers/com.apple.cloudphotosd/Data/Library/Application Support/com.apple.cloudphotosd/services/com.apple.photo.icloud.myphotostream/co remediastream-state/sub/1003377125+17851995633637806343/protocol/chunk_0002.plis t

686

687 Extensions

688

689 /System/Library/Extensions/JMicronATA.kext

690 - com.jmicron.JMicronATA

691

692 Applications

693

694 /Applications/Cisco/Cisco AnyConnect DART.app

695 - com.cisco.Cisco-AnyConnect-DART

696 /Applications/Course Software Material 14.0.2/Wildlife.app

697 - com.adobe.director.projector

698 /Applications/Epson Software/Event Manager.app

699 - com.epson.ProjectManager

700 /Applications/LockDown Browser.app

701 - com.Respondus.LockDownBrowser

702 /Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

703 - com.microsoft.ASApplication

704 /Applications/Microsoft Office 2011/Office/Equation Editor.app

705 - com.microsoft.EquationEditor

706 /Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

707 - com.microsoft.office.setupassistant

708 /Applications/Microsoft Office 2011/Office/Microsoft Query.app

709 - com.microsoft.Query

710 /Applications/SecureDownloadManager.app

711 - com.E-ACADEMY.SecureDownloadManager

712 /Applications/VideoScribe.app

713 - VideoScribeDesktop

714 /Library/Application Support/Adobe/ARMDC/Application/Adobe Acrobat Updater.app

715 - com.adobe.ARMDC

716 /Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

717 - com.microsoft.silverlight.sllauncher

718 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app

719 - com.adobe.air.Template

720 /Library/PDF Services/Save as Adobe PDF.app

721 - com.apple.automator.SaveasAdobePDF

722 /Library/Printers/hp/Fax/fax.backend

723 - com.hp.fax

724 /Library/Printers/hp/Fax/rastertofax.filter

725 - com.hp.rastertofax

726 /Library/Printers/hp/cups/filters/commandtohp.filter

727 - com.hp.print.cups.filter.commandtohp

728 /Library/Printers/hp/cups/filters/pdftopdf.filter

729 - com.hp.print.cups.filter.pdftopdf

730 /Library/Printers/hp/cups/tools/autosetup.tool

731 - com.hp.print.autosetup

732 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

733 - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

734 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

735 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

736 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

737 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

738 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

739 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

740 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_gomekmidlodglbbmalcneegieacbdmki/Default gomekmidlodglbbmalcneegieacbdmki.app

741 - com.google.Chrome.app.Default-gomekmidlodglbbmalcneegieacbdmki-internal

742 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nhgpbmbhocboaalioananelcgfahjpai/Default nhgpbmbhocboaalioananelcgfahjpai.app

743 - com.google.Chrome.app.Default-nhgpbmbhocboaalioananelcgfahjpai-internal

744 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

745 - com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

746 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

747 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

748 /Users/USER/Library/Application Support/iSkysoft/iMedia_Converter_Deluxe/IU/58027/Apps/ADManager.app

749 - com.analyst.downloader

750 /Users/USER/Library/Application Support/iSkysoft/iMedia_Converter_Deluxe/IU/__MACOSX/58027/Apps/ADManager.app

751 - N/A

752

753 Frameworks

754

755 /Library/Frameworks/Adobe AIR.framework

756 - com.adobe.AIR

757

758 PrefPane

759

760 /Library/PreferencePanes/Flash Player.prefPane

761 - com.adobe.flashplayerpreferences

762

763 Bundles

764

765 /Library/Application Support/Adobe/APE/3.4/adbeapecore.framework/Versions/A/Libraries/Flash Player.plugin

766 - com.macromedia.FlashPlayer-10.4-10.5.plugin

767 /Library/Application Support/Adobe/Plug-Ins/CC/File Formats/Camera Raw.plugin

768 - com.adobe.CameraRaw

769 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

770 - com.adobe.adobecp

771 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

772 - com.macromedia.FlashPlayer-10.6.plugin

773 /Library/Internet Plug-Ins/AdobeAAMDetect.plugin

774 - com.AdobeAAMDetectLib.AdobeAAMDetect

775 /Library/Internet Plug-Ins/AdobePDFViewer.plugin

776 - com.adobe.acrobat.pdfviewer

777 /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

778 - com.adobe.acrobat.pdfviewerNPAPI

779 /Library/Internet Plug-Ins/Flash Player.plugin

780 - com.macromedia.Flash Player.plugin

781 /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

782 - com.microsoft.sharepoint.browserplugin

783 /Library/Internet Plug-Ins/Silverlight.plugin

784 - com.microsoft.SilverlightPlugin

785 /Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

786 - com.google.googletalkbrowserplugin

787 /Library/Internet Plug-Ins/o1dbrowserplugin.plugin

788 - com.google.o1dbrowserplugin

789 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

790 - com.skype.skypeabdialer

791 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

792 - com.skype.skypeabsms

793 /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/18.0.0.209/PepperFlashPlayer.plugin

794 - com.macromedia.PepperFlashPlayer.pepper

795 /Users/USER/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin

796 - com.citrixonline.mac.WebDeploymentPlugin

797

798 Bundles (new)

799

800 /Applications/GoToMeeting.app

801 - com.citrixonline.GoToMeeting

802 /Applications/GoToMeeting/GoToMeeting (3215).app

803 - com.citrixonline.GoToMeeting

804 /Applications/GoToMeeting/GoToMeeting (3277).app

805 - com.citrixonline.GoToMeeting

806

807 Library paths

808

809 /Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

810 /Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

811 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

812 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

813 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

814 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

815 /Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib

816 /Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib

817 /Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib

818 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib

819 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib

820 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib

821 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib

822 /Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib

823 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib

824 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib

825 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib

826 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib

827 /Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib

828 /Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib

829 /Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib

830 /Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib

831 /Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib

832 /Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib

833 /Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib

834 /Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib

835 /Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib

836 /Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib

837 /Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib

838 /Applications/Utilities/Adobe Application Manager/P6/axlib.dylib

839 /Applications/Utilities/Adobe Application Manager/P7/IMSLib.dylib

840 /Applications/Utilities/Adobe Application Manager/P7/P7Native.dylib

841 /Applications/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib

842 /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib

843 /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib

844 /Applications/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib

845 /Applications/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib

846 /Applications/Utilities/Adobe Application Manager/P7/axlibv7.dylib

847 /Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib

848 /Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib

849 /Applications/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib

850 /Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib

851 /Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib

852 /Applications/Utilities/Adobe Creative Cloud/ACC/C3ContainerBL.dylib

853 /Applications/Utilities/Adobe Creative Cloud/ACC/SibTrayNotification.dylib

854 /Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelBL.dylib

855 /Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib

856 /Applications/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib

857 /Applications/Utilities/Adobe Creative Cloud/BehancePanel/BehancePanelBL.dylib

858 /Applications/Utilities/Adobe Creative Cloud/CEF/Chromium Embedded Framework.framework/Libraries/libcef.dylib

859 /Applications/Utilities/Adobe Creative Cloud/CEF/libplugin_carbon_interpose.dylib

860 /Applications/Utilities/Adobe Creative Cloud/CoreExt/Analytics.dylib

861 /Applications/Utilities/Adobe Creative Cloud/CoreExt/C3Prefs.dylib

862 /Applications/Utilities/Adobe Creative Cloud/CoreExt/CmdCntr.dylib

863 /Applications/Utilities/Adobe Creative Cloud/CoreExt/ElevationManager.dylib

864 /Applications/Utilities/Adobe Creative Cloud/CoreExt/LocManager.dylib

865 /Applications/Utilities/Adobe Creative Cloud/CoreExt/NotificationManager.dylib

866 /Applications/Utilities/Adobe Creative Cloud/CoreExt/VulcanMessage5.dylib

867 /Applications/Utilities/Adobe Creative Cloud/CoreExt/VulcanWrapper.dylib

868 /Applications/Utilities/Adobe Creative Cloud/CoreSync/plugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExMan CoreLibCoreSync64.dylib

869 /Applications/Utilities/Adobe Creative Cloud/HEX/HEX.dylib

870 /Applications/Utilities/Adobe Creative Cloud/HomePanel/HomePanelBL.dylib

871 /Applications/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib

872 /Applications/Utilities/Adobe Creative Cloud/NEX/NEX.dylib

873 /Applications/Utilities/Adobe Creative Cloud/NEX/NEXUILibrary.dylib

874 /Applications/Utilities/Adobe Creative Cloud/core/NXGCore.dylib

875 /Applications/Utilities/Adobe Creative Cloud/utils/AdobePIM.dylib

876 /Library/Application Support/Adobe/APE/3.4/adbeapecore.framework/Versions/A/Libraries/WebKit.dylib

877 /Library/Application Support/Adobe/ARMDC/Application/AcrobatUpdateHelperLib.dylib

878 /Library/Application Support/Adobe/ARMNext/Application/AcrobatUpdateHelperLib.dylib

879 /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/adobe_caps.dylib

880 /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/adobe_oobelib.dylib

881 /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/adobe_upgrade.dylib

882 /Library/Application Support/Adobe/Acrobat 11 Helper Frameworks/adobe_oobelib/axlib.dylib

883 /Library/Application Support/Avast/components/proxy/certutil/libfreebl3.dylib

884 /Library/Application Support/Avast/components/proxy/certutil/libnspr4.dylib

885 /Library/Application Support/Avast/components/proxy/certutil/libnss3.dylib

886 /Library/Application Support/Avast/components/proxy/certutil/libnssdbm3.dylib

887 /Library/Application Support/Avast/components/proxy/certutil/libnssutil3.dylib

888 /Library/Application Support/Avast/components/proxy/certutil/libplc4.dylib

889 /Library/Application Support/Avast/components/proxy/certutil/libplds4.dylib

890 /Library/Application Support/Avast/components/proxy/certutil/libsmime3.dylib

891 /Library/Application Support/Avast/components/proxy/certutil/libsoftokn3.dylib

892 /Library/Application Support/Avast/components/proxy/certutil/libssl3.dylib

893 /Library/Application Support/Avast/lib/libcrypto.1.0.0.dylib

894 /Library/Application Support/Avast/lib/libprotobuf-lite.8.dylib

895 /Library/Application Support/Avast/lib/libssl.1.0.0.dylib

896 /Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86Extn.dyl ib

897 /Library/Application Support/Mozilla/Extensions/{UUID}/EMAILedotcom/components/WCFirefox_x86_64Extn. dylib

898 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

899 /Users/USER/Library/Application Support/Avast/nss/libfreebl3.dylib

900 /Users/USER/Library/Application Support/Avast/nss/libnspr4.dylib

901 /Users/USER/Library/Application Support/Avast/nss/libnss3.dylib

902 /Users/USER/Library/Application Support/Avast/nss/libnssdbm3.dylib

903 /Users/USER/Library/Application Support/Avast/nss/libnssutil3.dylib

904 /Users/USER/Library/Application Support/Avast/nss/libplc4.dylib

905 /Users/USER/Library/Application Support/Avast/nss/libplds4.dylib

906 /Users/USER/Library/Application Support/Avast/nss/libsmime3.dylib

907 /Users/USER/Library/Application Support/Avast/nss/libsoftokn3.dylib

908 /Users/USER/Library/Application Support/Avast/nss/libssl3.dylib

909 /Users/USER/Library/Application Support/Firefox/Profiles/v5uz20o9.default/gmp-gmpopenh264/1.4/libgmpopenh264.dy lib

910 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.823/_platform_specific/mac_x64/libwidev inecdm.dylib

911

912 Installations

913

914 Adobe Flash Player: 8/11/15, 2:29 PM

915 Adobe Acrobat Reader DC: 8/4/15, 5:34 PM

916 Adobe Flash Player: 7/16/15, 10:41 PM

917 Adobe Flash Player: 7/8/15, 2:09 PM

918 Adobe Flash Player: 6/29/15, 3:18 PM

919

920 Elapsed time (sec): 1211

Reply

Answer 10

Linc Davis

Level 10

209,547 points

Aug 24, 2015 6:47 PM in response to Lbiddinger

A

"Avast" is the worst of the whole wretched lot of commercial "security" products for the Mac. Not only does it fail to protect you from any real danger, it may send personal data (such as web browsing history and the contents of email messages) back to the developer without your knowledge, give false warnings, destabilize and slow down the computer, expose you to network attack, and corrupt the network settings and the permissions of files in your home folder. Removing it may not repair all the damage.

Some versions of the product also inject advertising into web pages. In short, apart from the fine print in the license agreement, Avast is indistinguishable from malware, and is arguably worse than any known malware now in circulation.

Back up all data, then remove Avast according to the developer's instructions. Restart. Never install any "anti-virus" or "anti-malware" software again.

If you tried to remove Avast by dragging an application to the Trash, you'll have to reinstall it and then follow the instructions linked above.

B

The following Safari extensions are malicious and should be removed in the Extensions pane of the Safari preferences window:

Searchme

Do the equivalent in the Chrome and Firefox browsers, if you use those. Never install any extension with the words "Spigot," "Conduit," "Genieo," or "Trovi" in the description.

C

In the sidebar of a Finder window, or on the Desktop, select the icon of the startup volume ("Macintosh HD," unless you gave it a different name.) Open it. Inside, there is a folder named "lost+found". It contains corrupt files that are wasting a lot of storage space. Back up all data, then drag the folder to the Trash and empty. You may be prompted for your administrator password.

D

Back up all data.

Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/Logs

In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return. A folder named "Logs" should open. Inside it are several large files with a name beginning "ACC". Drag those files to the Trash and empty.

E

The machine is running slowly. If it's still slow after you've taken all the above steps and restarted, post again.

Reply

Answer 11

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 6:52 PM in response to Linc Davis

I have to have Avast on my computer to connect to the internet at my College. Is there a way to make it work?

Reply

Answer 12

Linc Davis

Level 10

209,547 points

Aug 24, 2015 7:08 PM in response to Lbiddinger

Most IT administrators are more or less incompetent, and yours are no exception. Is the policy that you must install "Avast" specifically, or just that you have to install some kind of antivirus, not necessarily the very worst of all possible choices?

Reply

Answer 13

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 7:25 PM in response to Linc Davis

Don't ask me, but I have multiple times been kicked off the wifi for not having Avast installed or updated properly. They are some how controlling it ensure you have Virus and Malware protection.

Reply

Answer 14

Lbiddinger Author

Level 1

0 points

Aug 24, 2015 7:49 PM in response to Lbiddinger

Everything seems to be working better, still a tiny slow down, but nothing compared to what it was. I did uninstall Avast, as you suggested and will figure out the whole anti-virus issue next time I am on campus. Thank you so much.

Reply

Answer 15

Linc Davis

Level 10

209,547 points

Aug 24, 2015 8:14 PM in response to Lbiddinger

They had you install monitoring software called "XpressConnect" that blocks you from the network if a required antivirus program is not installed. Sometimes the incompetent admin's policy allows for a choice other than "Avast." Find out whether you can install an application called "ClamXav" instead. It won't protect you from any real threat, any more than Avast does, but it won't cripple the system either. In fact, it won't do anything at all as long as you don't run it. That's the best you can hope for from any security product.

Reply