Weird problems: mouse jumping, keyboard & touchpad disabling, chrome quitting, and malware

Hi. I’ve started facing weird problems on MPB Mid 2012 10.9.5 recently. First, and most annoying, after I got a new mouse (A4 X-710BK) - sometimes mouse cursor starts jumping to the further point on the trajectory while I move the mouse. It can jump pretty far, or just a little. It basically looks like recurrent mouse «freezes/lags», except that as I understood it is not a freeze - mouse actually jumps further, but not freezes when I move it and then «compensates», though I can be wrong on that. Interestingly, if I restart OS while having this mouse jumps - there will be no jumps at all directly after restart but before loading menubar/autostart items and similar. But mouse will start jumping very heavily when those items are loaded, and shortly after that will become «normal» again (with or without minor jumps). Same mouse works fine on the windows PC while it has jumps on macbook - I tried to switch it back and forth a few times and I got consistent results - jumps on macbook, no jumps on PC. Also touchpad and second wireless mouse works fine, including on startup. I would blame mouse defect or OS X drivers incompatibility if not for some details: a) mouse works normal after restart; b) I have a malware and other weird concurrent issues.

Second issue - I started getting Little Snitch alerts of some unknown program trying to connect to suspicious url: http://imgur.com/DrZ32Xi.png. Also on every restart I get OS message looking like some .pkg install wizard, which asks "Continue installation? Choose abort to cancel installation", with Abort and Continue buttons. Needless to say that I did not install anything. So I started searching system drive for that «Mainorne» thing which Little Snitch detected and that is what I found: http://i.imgur.com/HUyktY2.png. I also installed AdwareMedic which found just one of those items stating that it was a «Genieo». I also executed script from this comment, I will post an output below [1].

Third issue which started appearing recently with previous ones - Chrome browser can just quit. It usually happens when macbook goes to sleep mode or when it idles long enough… It quits and I need to launch it back.

Last fourth issue - after all that started happening, time to time I started seeing that my keyboard and touchpad stops working completely. If I don't use them for some time, while using only mouse for example, they can just stop responding to any action. And the only way to restore them is to restart OS. It lasted only one day and now I am not seeing this issue, but I am not sure if it gone forever.

=======================================

So do I have only this Mainorne thing or there is some other malware? How can I remove it? I thought to just delete all found files listed here http://imgur.com/HUyktY2.png but I do not know if it will be enough.

Could this mouse jumps be related with malware or it is a separate problem? And if not malware, what could cause such issue? I am also wondering why I had this issues with Chrome, keyboard & touchpad...

[1] Here is the terminal script output:

Start time: 22:29:31 08/30/15

Model Identifier: MacBookPro9,1

System Version: OS X 10.9.5 (13F1112)

Kernel Version: Darwin 13.4.0

Time since boot: 2:20

Memory

BANK 0/DIMM0:

Size: 8 GB

Speed: 1600 MHz

Status: OK

Manufacturer: 0x859B

BANK 1/DIMM0:

Size: 8 GB

Speed: 1600 MHz

Status: OK

Manufacturer: 0x859B

SATA

SAMSUNG SSD 830 Series

USB

USB Device (A-FOUR TECH CO., LTD.)

Diagnostic reports

2015-08-19 AppNIB crash

2015-08-20 AppNIB crash

2015-08-21 AppNIB crash

2015-08-22 AppNIB crash x2

2015-08-23 LiveUpd crash

2015-08-24 AppNIB crash x2

2015-08-25 Adobe Desktop Service crash

2015-08-25 AppNIB crash

2015-08-27 AppNIB crash x2

2015-08-28 Adobe Desktop Service crash

2015-08-28 AppNIB crash x5

2015-08-28 com.apple.iCloudHelper crash

2015-08-29 Adobe Desktop Service crash

2015-08-29 AppNIB crash x2

2015-08-30 AppNIB crash

2015-08-30 Radium crash

2015-08-30 Transmission crash

Log

Aug 30 22:28:28 ouc.plist: Exited with code: 1

Aug 30 22:28:28 ouc.plist: Throttling respawn: Will start in 10 seconds

Aug 30 22:28:33 andreyvolokitin : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/bin/defaults read com.apple.loginwindow LoginHook

Aug 30 22:28:34 andreyvolokitin : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/bin/crontab -l

Aug 30 22:28:34 andreyvolokitin : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/bin/profiles -P

Aug 30 22:28:39 ouc.plist: Exited with code: 1

Aug 30 22:28:39 ouc.plist: Throttling respawn: Will start in 10 seconds

Aug 30 22:28:39 andreyvolokitin : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/sbin/lsof +c0 -i4TCP:0-1023

Aug 30 22:28:49 ouc.plist: Exited with code: 1

Aug 30 22:28:49 ouc.plist: Throttling respawn: Will start in 10 seconds

Aug 30 22:28:55

The domain/default pair of (/Users/USER/Library/Preferences/com.apple.Safari, WebKitDNSPrefetchingEnabled) does not exist

Aug 30 22:28:59 ouc.plist: Exited with code: 1

Aug 30 22:28:59 ouc.plist: Throttling respawn: Will start in 10 seconds

Aug 30 22:29:09 ouc.plist: Exited with code: 1

Aug 30 22:29:09 ouc.plist: Throttling respawn: Will start in 10 seconds

Aug 30 22:29:13 DEAD_PROCESS: 24399 ttys000

Aug 30 22:29:16 USER_PROCESS: 30781 ttys000

Aug 30 22:29:19 ouc.plist: Exited with code: 1

Aug 30 22:29:19 ouc.plist: Throttling respawn: Will start in 10 seconds

Aug 30 22:29:29 ouc.plist: Exited with code: 1

Aug 30 22:29:29 ouc.plist: Throttling respawn: Will start in 10 seconds

Aug 30 22:29:31 andreyvolokitin : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/bin/true

Aug 30 22:29:33 andreyvolokitin : TTY=ttys000 ; PWD=/Users/USER ; USER=root ; COMMAND=/usr/libexec/smcDiagnose

Aug 30 22:29:34 SMC::smcReadKeyAction ERROR MACR kSMCKeyNotReadable(0x85) fKeyHashTable=0x0xffffff804a34f000

Memory: kernel_task (UID 0) is using 1354 MB

kexts

at.obdev.nke.LittleSnitch (4052)

com.intel.kext.intelhaxm (1.1.1)

com.nvidia.CUDA (1.1.0)

com.parallels.kext.usbconnect (9.0 24217.979618)

com.parallels.kext.hypervisor (9.0 24217.979618)

com.parallels.kext.hidhook (9.0 24217.979618)

com.parallels.kext.netbridge (9.0 24217.979618)

com.parallels.kext.vnic (9.0 24217.979618)

Daemons

com.daisydiskapp.DaisyDisk.GNTPClientService

com.intel.haxm

PPPMonitord.plist

org.macosforge.xquartz.privileged_startx

com.oracle.java.JavaUpdateHelper

com.microsoft.office.licensing.helper

com.google.keystone.daemon

com.bjango.istatmenusdaemon

com.adobe.SwitchBoard

com.adobe.adobeupdatedaemon

BradJasper.focus.HelperTool

at.obdev.littlesnitchd

Agents

com.adobe.acc.AdobeDesktopService.222672.UUID

com.overcommittedapps.mac.TictocHelper

com.techsmith.snagit.SnagitLaunchAtLogin

com.koolesache.ColorSnapperHelper

2BUA8C4S2C.com.agilebits.onepassword-osx-helper

com.apple.AirPortBaseStationAgent

SwapperUFi.plist

ouc.plist

org.macosforge.xquartz.startx

com.huawei.HWPortCfg.plist

com.nvidia.CUDASoftwareUpdate

com.google.keystone.system.agent

com.bjango.istatmenusnotifications

com.bjango.istatmenusagent

com.adobe.AdobeCreativeCloud

cn.com.zte.usbswapper.plist

at.obdev.LittleSnitchUIAgent

net.philosophicalzombie.eggtimer

Mainorne.update

Mainorne.ltvbit

Mainorne.download

com.valvesoftware.steamclean

com.adobe.ARM.UUID

Startup items

/System/Library/StartupItems/CUDA/CUDA

/System/Library/StartupItems/CUDA/StartupParameters.plist

/Library/StartupItems/HWNetMgr/HWNetCfg

/Library/StartupItems/HWNetMgr/HWNetMgr

/Library/StartupItems/HWNetMgr/StartupParameters.plist

/Library/StartupItems/HWPortDetect/HWPortCfg

/Library/StartupItems/StartOuc/MacOS/RunOuc

/Library/StartupItems/StartOuc/StartOuc

Bundles

/Library/Extensions/HuaweiDataCardDriver_10_9.kext

- com.huawei.driver.HuaweiDataCardDriver

/Library/Extensions/LittleSnitch.kext

- at.obdev.nke.LittleSnitch

/Library/Internet Plug-Ins/AdobeAAMDetect.plugin

- com.AdobeAAMDetectLib.AdobeAAMDetect

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

- com.adobe.acrobat.pdfviewer

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

- com.adobe.acrobat.pdfviewerNPAPI

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

- com.google.googletalkbrowserplugin

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

- com.google.o1dbrowserplugin

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

- com.microsoft.sharepoint.browserplugin

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

- com.microsoft.sharepoint.webkitplugin

/Library/ScriptingAdditions/Adobe Unit Types.osax

- N/A

/Library/ScriptingAdditions/Default Folder X Addition.osax

- com.stclairsoft.DefaultFolderX.osax

/Library/Services/Default Folder X Service.app

- com.stclairsoft.DefaultFolderX.service

Library/Address Book Plug-Ins/SkypeABDialer.bundle

- com.skype.skypeabdialer

Library/Address Book Plug-Ins/SkypeABSMS.bundle

- com.skype.skypeabsms

Library/Android/sdk/tools/lib/monitor-x86_64/monitor.app

- monitorproduct

Library/Caches/com.apple.Safari/Extensions/OpenIE.safariextension

- com.parallels.openinie

Library/PreferencePanes/Default Folder X.prefPane

- com.stclairsoft.prefpane.DefaultFolderX

Library/Services/Sync via MacDropAny.workflow

- N/A

dylibs

/usr/lib/bkLib.dylib

/usr/lib/lib6200Lib.dylib

/usr/lib/lib6246Lib.dylib

/usr/lib/lib6270Lib.dylib

/usr/lib/lib8200lib.dylib

/usr/lib/libAgent.dylib

/usr/lib/libcurl.zte.dylib

/usr/lib/libmd5.dylib

/usr/lib/libsvn_client-1.0.0.0.dylib

/usr/lib/libsvn_delta-1.0.0.0.dylib

/usr/lib/libsvn_diff-1.0.0.0.dylib

/usr/lib/libsvn_fs-1.0.0.0.dylib

/usr/lib/libsvn_fs_fs-1.0.0.0.dylib

/usr/lib/libsvn_fs_util-1.0.0.0.dylib

/usr/lib/libsvn_ra-1.0.0.0.dylib

/usr/lib/libsvn_ra_local-1.0.0.0.dylib

/usr/lib/libsvn_ra_neon-1.0.0.0.dylib

/usr/lib/libsvn_ra_svn-1.0.0.0.dylib

/usr/lib/libsvn_repos-1.0.0.0.dylib

/usr/lib/libsvn_subr-1.0.0.0.dylib

/usr/lib/libsvn_wc-1.0.0.0.dylib

/usr/lib/libTinyXml.dylib

Apps

/Applications/Dropbox.app

Contents of /etc/hosts (checksum 1188676830)

127.0.0.1 localhost

255.255.255.255 broadcasthost

::1 localhost

fe80::1%lo0 localhost

Contents of /etc/ssh_config (checksum 1281775184)

Host *

SendEnv LANG LC_*

Host *

XAuthLocation /opt/X11/bin/xauth

Contents of /etc/sshd_config (checksum 2518667249)

SyslogFacility AUTHPRIV

AuthorizedKeysFile .ssh/authorized_keys

UsePrivilegeSeparation sandbox # Default for new installations.

AcceptEnv LANG LC_*

Subsystem sftp /usr/libexec/sftp-server

XAuthLocation /opt/X11/bin/xauth

Contents of /System/Library/LaunchDaemons/com.intel.haxm.plist (checksum 1135390232)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<false/>

<key>Label</key>

<string>com.intel.haxm</string>

<key>ProgramArguments</key>

<array>

<string>/System/Library/Extensions/intelhaxm.kext/Contents/Resources/haxm_start .sh</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>UserName</key>

<string>root</string>

</dict>

</plist>

Contents of /Library/LaunchAgents/HWPortCfg.plist (checksum 1745362745)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.huawei.HWPortCfg.plist</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Library/StartupItems/HWPortDetect/HWPortCfg</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/SwapperUFi.plist (checksum 4136533251)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>SwapperUFi.plist</string>

<key>OnDemand</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>program</key>

<string>/Applications/USB-модем Билайн.app/Contents/Resources/Mac_SwapperDemon.app/Contents/MacOS/Mac_SwapperDe mon</string>

</dict>

</plist>

Contents of /Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist (checksum 2014742307)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>at.obdev.LittleSnitchUIAgent</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Little Snitch/Little Snitch Agent.app/Contents/MacOS/Little Snitch Agent</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/cn.com.zte.usbswapper.plist (checksum 1413727921)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>cn.com.zte.usbswapper.plist</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Applications/Connect Manager.app/Contents/Resources/Mac_SwapperDemon.app/Contents/MacOS/Mac_SwapperD emon</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>program</key>

<string>/Applications/Connect Manager.app/Contents/Resources/Mac_SwapperDemon.app/Contents/MacOS/Mac_SwapperD emon</string>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.bjango.istatmenusagent.plist (checksum 2262789825)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>MachServices</key>

<dict>

<key>com.bjango.istatmenusagent</key>

<true/>

</dict>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.bjango.istatmenusagent</string>

<key>Program</key>

<string>/Library/Application Support/iStat Menus 5/iStatMenusAgent.app/Contents/MacOS/iStatMenusAgent</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.bjango.istatmenusnotifications.plist (checksum 1266143884)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>MachServices</key>

<dict>

<key>com.bjango.istatmenusnotifications</key>

<true/>

</dict>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.bjango.istatmenusnotifications</string>

<key>Program</key>

<string>/Library/Application Support/iStat Menus 5/iStat Menus Notifications.app/Contents/MacOS/iStat Menus Notifications</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchAgents/com.nvidia.CUDASoftwareUpdate.plist (checksum 3963619271)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>EnvironmentVariables</key>

<dict>

<key>COM_NVIDIA_CUDAPREF_FROM_LAUNCH_AGENT</key>

<string>TRUE</string>

</dict>

<key>Label</key>

<string>com.nvidia.CUDASoftwareUpdate</string>

<key>LimitLoadToSessionType</key>

<array>

<string>Aqua</string>

</array>

<key>Program</key>

<string>/usr/bin/open</string>

<key>ProgramArguments</key>

<array>

<string>open</string>

<string>file:///Library/PreferencePanes/CUDA%20Preferences.prefPane</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

...and 1 more line(s)

Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist (checksum 2451978492)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>org.macosforge.xquartz.startx</string>

<key>ProgramArguments</key>

<array>

<string>/opt/X11/lib/X11/xinit/launchd_startx</string>

<string>/opt/X11/bin/startx</string>

<string>--</string>

<string>/opt/X11/bin/Xquartz</string>

</array>

<key>Sockets</key>

<dict>

<key>org.macosforge.xquartz:0</key>

<dict>

<key>SecureSocketWithKey</key>

<string>DISPLAY</string>

</dict>

</dict>

<key>ServiceIPC</key>

<true/>

<key>EnableTransactions</key>

<true/>

...and 2 more line(s)

Contents of /Library/LaunchAgents/ouc.plist (checksum 2104796032)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>ouc.plist</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Library/StartupItems/StartOuc/StartOuc</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/BradJasper.focus.HelperTool.plist (checksum 2933579953)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>BradJasper.focus.HelperTool</string>

<key>MachServices</key>

<dict>

<key>BradJasper.focus.HelperTool</key>

<true/>

</dict>

<key>ProgramArguments</key>

<array>

<string>/Library/PrivilegedHelperTools/BradJasper.focus.HelperTool</string>

</array>

</dict>

</plist>

Contents of /Library/LaunchDaemons/PPPMonitord.plist (checksum 2870354339)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>PPPMonitord.plist</string>

<key>OnDemand</key>

<false/>

<key>RunAtLoad</key>

<true/>

<key>program</key>

<string>/Library/Application Support/Join Air/PPPMonitord.app/Contents/MacOS/PPPMonitord</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/at.obdev.littlesnitchd.plist (checksum 4174275850)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>at.obdev.littlesnitchd</string>

<key>ProgramArguments</key>

<array>

<string>/Library/Little Snitch/Little Snitch Daemon.bundle/Contents/MacOS/Little Snitch Daemon</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StandardErrorPath</key>

<string>/Library/Logs/LittleSnitchDaemon.log</string>

<key>StandardOutPath</key>

<string>/Library/Logs/LittleSnitchDaemon.log</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/cn.com.zte.PPPMonitor.plist (checksum 4232615395)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>cn.com.zte.PPPMonitor.plist</string>

<key>OnDemand</key>

<false/>

<key>ProgramArguments</key>

<array>

<string>/Library/Application Support/ZTE/PPPMonitord</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>program</key>

<string>/Library/Application Support/ZTE/PPPMonitord</string>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist (checksum 2254479735)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.adobe.adobeupdatedaemon</string>

<key>LaunchOnlyOnce</key>

<true/>

<key>Program</key>

<string>/Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/com.bjango.istatmenusdaemon.plist (checksum 3697781966)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>MachServices</key>

<dict>

<key>com.bjango.istatmenusdaemon</key>

<true/>

</dict>

<key>KeepAlive</key>

<true/>

<key>Label</key>

<string>com.bjango.istatmenusdaemon</string>

<key>Program</key>

<string>/Library/Application Support/iStat Menus 5/iStatMenusDaemon</string>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of /Library/LaunchDaemons/org.eyebeam.SelfControl.plist (checksum 3016128627)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>org.eyebeam.SelfControl</string>

<key>Disabled</key>

<true/>

<key>StartInterval</key>

<integer>60</integer>

<key>StartCalendarInterval</key>

<array>

<dict>

<key>Minute</key>

<integer>23</integer>

</dict>

<dict>

<key>Minute</key>

<integer>24</integer>

</dict>

<dict>

<key>Minute</key>

<integer>25</integer>

</dict>

</array>

...and 8 more line(s)

Contents of /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist (checksum 2883943871)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>org.macosforge.xquartz.privileged_startx</string>

<key>ProgramArguments</key>

<array>

<string>/opt/X11/lib/X11/xinit/privileged_startx</string>

<string>-d</string>

<string>/opt/X11/lib/X11/xinit/privileged_startx.d</string>

</array>

<key>MachServices</key>

<dict>

<key>org.macosforge.xquartz.privileged_startx</key>

<true/>

</dict>

<key>TimeOut</key>

<integer>120</integer>

<key>EnableTransactions</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/Mainorne.download.plist (checksum 1491555133)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>Mainorne.download</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Mainorne/Mainorne.app/Contents/MacOS/AppNIB</string>

<string>-trigger</string>

<string>download</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>18723</string>

<string>-firstAppId</string>

<string>680970045</string>

<string>-identity</string>

<string>Mainorne</string>

</array>

<key>WatchPaths</key>

<array>

<string>/Users/USER/Downloads</string>

</array>

<key>isAllowToSuggest</key>

...and 3 more line(s)

Contents of Library/LaunchAgents/Mainorne.ltvbit.plist (checksum 2035585167)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>Mainorne.ltvbit</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Mainorne/Mainorne.app/Contents/MacOS/AppNIB</string>

<string>-trigger</string>

<string>ltvbit</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>18723</string>

<string>-firstAppId</string>

<string>680970045</string>

<string>-identity</string>

<string>Mainorne</string>

</array>

<key>StartCalendarInterval</key>

<dict>

<key>Hour</key>

<integer>4</integer>

<key>Minute</key>

...and 4 more line(s)

Contents of Library/LaunchAgents/Mainorne.update.plist (checksum 4272027441)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>Mainorne.update</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Mainorne/Mainorne.app/Contents/MacOS/AppNIB</string>

<string>-trigger</string>

<string>update</string>

<string>-isDev</string>

<string>0</string>

<string>-installVersion</string>

<string>18723</string>

<string>-firstAppId</string>

<string>680970045</string>

<string>-identity</string>

<string>Mainorne</string>

<string>-sig</string>

<string>NADAVIBRAHIM_SIGNATURE</string>

<string>-agentUpdate</string>

<string>0</string>

</array>

<key>RunAtLoad</key>

...and 10 more line(s)

Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist (checksum 408149527)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.adobe.ARM.UUID</string>

<key>ProgramArguments</key>

<array>

<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>StartInterval</key>

<integer>12600</integer>

</dict>

</plist>

Contents of Library/LaunchAgents/com.valvesoftware.steamclean.plist (checksum 2026730285)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.valvesoftware.steamclean</string>

<key>Program</key>

<string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>

<key>ProgramArguments</key>

<array>

<string>/Users/USER/Library/Application Support/Steam/SteamApps/steamclean</string>

<string>Public</string>

</array>

<key>RunAtLoad</key>

<true/>

<key>SteamContentPaths</key>

<array>

<string>/Users/USER/Library/Application Support/Steam/SteamApps</string>

</array>

<key>ThrottleInterval</key>

<integer>60</integer>

<key>WatchPaths</key>

<array>

<string>/Applications/Steam.app</string>

</array>

...and 2 more line(s)

Contents of Library/LaunchAgents/net.philosophicalzombie.eggtimer.plist (checksum 944615705)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>net.philosophicalzombie.eggtimer</string>

<key>ProgramArguments</key>

<array>

<string>automator</string>

<string>/Users/USER/Library/Application Support/Alfred 2/Workflow Data/carlosnz.eggtimer2/login_check.workflow</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

Contents of Library/LaunchAgents/ws.agile.1PasswordAgent.plist (checksum 2790186287)

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>OnDemand</key>

<false/>

<key>KeepAlive</key>

<true/>

<key>RunAtLoad</key>

<true/>

<key>Label</key>

<string>ws.agile.1PasswordAgent</string>

<key>Program</key>

<string>/Users/USER/Library/Application Support/1Password/Agent/1PasswordAgent.app/Contents/MacOS/1PasswordAgent</strin g>

<key>LimitLoadToSessionType</key>

<string>Aqua</string>

</dict>

</plist>

Font issues: 45

User login items

iTunesHelper

- /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

Flux

- /Applications/Flux.app

TimingHelper

- /Applications/Timing.app/Contents/Library/LoginItems/TimingHelper.app

Snagit

- /Applications/Snagit.app

Scroll Reverser

- /Applications/Scroll Reverser.app

Stay

- /Applications/Stay.app

Dropbox

- /Applications/Dropbox.app

Alfred 2

- /Applications/Alfred 2.app

Fantastical

- /Applications/Fantastical.app

Dash

- /Applications/Dash.app

Divvy

- /Applications/Divvy.app

Google Chrome

- /Applications/Google Chrome.app

Safari extensions

Open in Internet Explorer

Restricted files: 45949

Lockfiles: 7

High file counts

Desktop: 61

Elapsed time (s): 442

Message was edited by: Andrey_V