cant upload files on gmail

Indeed a lot of junk on your Mac. This has to go whatever the cause of your issues.

1. download AdwareMedic, start it and start a scan: a lot of Adware will be removed.

http://www.adwaremedic.com/index.php

2. In SystemPreferences->Users&Groups->LoginItems remove all entries, with the minus sign.

3. Now restart, do not start any app.

Uninstall all Seagate software.

Uninstall the Realtek software.

Uninstall the Rim/Blackberry software.

Uninstall Growl (SystemPreferences), this does not do anything for you that Notofications can't do better.

Uninstall all Huawei software.

More later. Now restart, then empty the trash bin.

4. I will come back here for more.

Lex

Good morning,

Please run another etrecheck report and post it here as you did before, lets see what is left

Kernel Extensions: (What does this mean?)

/System/Library/Extensions

[not loaded] com.realtek.driver.RTL8192SU (1063) [Click for support]

[loaded] com.rim.driver.BlackBerryUSBDriverInt (0.0.74) [Click for support]

[not loaded] com.rim.driver.BlackBerryUSBDriverVSP (0.0.74) [Click for support]

[not loaded] com.seagate.driver.PowSecDriverCore (5.0.1) [Click for support]

/System/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns

[not loaded] com.seagate.driver.PowSecLeafDriver_10_4 (5.0.1) [Click for support]

[not loaded] com.seagate.driver.PowSecLeafDriver_10_5 (5.0.1) [Click for support]

[not loaded] com.seagate.driver.SeagateDriveIcons (5.0.1) [Click for support]

You still have plenty to do, all that above represents modifications to OS X made by 3rd parties, they need to go, remove the Blackberry (rim) software, remove the Seagate software, neither of them will do anything useful and both of them will cause issues.

This is just a start, your problems are many and once again I advise erasing the Mac and reinstalling, a task that will not be so easy as you seem not to bother with a backup. One is required.

It took some time to mess the Mac up to this level, it won't just go away without a commitment to fixing it.

This etrechecklist does not differ much from the earlier one I replied to.

The adware/malware is gone.

Your question: seagate software is what you got free: drivers for an (external) disk, you may not have it still. These drivers are counterproductive and should be uninstalled, even if you still use that Seagate disk.

You still have to do points #2 and further in my earlier post.

ask when you have questions.

Lex

annj30 wrote:

I got Malwarebytes and it has gotten rid of all the adware now. I download a lot of movies and programs from utorrentz. Could this be the reason of all the adware?

I still have to do a time machine backup. Do you recommend upgrading to Yosemite?

Folks that are willing and able to crack the security of packages are easily capable of cracking your security. You and your computer are what many of those folks are after here, too. If they can get a keylogger or other dreck onto your computer, they can get your credit card data, bank accounts and other credentials or sensitive data that you might reference while logged in. Wouldn't surprise me to learn they were scanning for any (potentially very private) photos you might have of yourself or others, and all of your address book and contact data, too. These folks can and variously do directly profit from you and from anybody else that loads that "cracked" stuff, in addition to the payments that they likely receive for just getting the adware installed on your system.

Yes, I'd get a backup of your environment, and would get Time Machine going, and would upgrade to Yosemite.

The next El Capitan release is coming out very soon, so even if you don't decide to upgrade to Yosemite now — you can "purchase" (it's free) and immediately pause the download — you may want to have Yosemite in your Mac App Store purchase history for later. That makes upgrading to Yosemite much easier, after El Capitan becomes the current release.

As for your second Etrecheck report, please post the contents of the /etc/hosts file. To view that file, you can acquire and install the (free) TextWrangler tool, or you can launch Terminal.app from the Applications > Utilities folder, and enter the following harmless text-displaying command at the $ prompt, exactly as shown:

cat /etc/hosts

In response to that "cat" command, you should see the following rather cryptic contents.

##

# Host Database

#

# localhost is used to configure the loopback interface

# when the system is booting. Do not change this entry.

##

127.0.0.1 localhost

255.255.255.255 broadcasthost

::1 localhost

fe80::1%lo0 localhost

Based on the Etrecheck report, the file doesn't look to be the same as distributed. Again, the sort of stuff adware and malware and cracked apps that appear to have been installed on this system — and I don't know the full list of that — can be quite pernicious and difficult to remove. This even after these packages have gathered whatever private local data was of interest to the package authors, and uploaded it to the 'net.

I'm rather less willing to assume that this system is clear, contrary to what some of the replies indicate. I don't expect the scanning tools to detect all of the pieces and all of the dreck. Malware that's gotten this far onto a system can be difficult to eradicate.

That Seagate software? You have a Hitachi disk drive and Matshita DVD storage. That Seagate software probably either came with some external device that you've used — and installing that software might or might not be necessary — or it's not really or not fully the actual Seagate software. AFAIK, that package is not from Apple.

Backing up two or three times to separate external storage (to ensure you have good copies of your data), wiping the disk, and loading Yosemite, and obtaining apps and tools from legitimate sources, and transferring over only your data files (not apps!), can be much easier than finding and removing everything that's been installed. There aren't good shortcuts here, unfortunately.

To "typos":

....upgrade to Yosemite now — you can "purchase" (it's free) and immediately pause the download — you may want to have Yosemite in your Mac App Store purchase history for later.

You should have typed instead after the download (it is in Applications folder) do not start the install.

The other one is about the hosts file: it is not necessary to change the hosts file. And certainly not when you still have hacked software or remnants of it on your mac.

/etc/hosts file - Fixing a hacked

I strongly suggest not to change or edit the hosts file.

The changes in there are to block communication of the hacked software, which might lead to bad consequences when not everything is removed when the bad software is uninstalled.

These "changes" normally are not hurting: in older days there where even people who presented ways to put bad websites in the hosts file as a sort of parental control: nowadays we have Parental Control.

Lex

LexSchellings wrote:

To "typos":

....upgrade to Yosemite now — you can "purchase" (it's free) and immediately pause the download — you may want to have Yosemite in your Mac App Store purchase history for later.

You should have typed instead after the download (it is in Applications folder) do not start the install.

Thank you for your comments, but I did mean what I wrote. It is possible to pause the App Store download of Yosemite installer immediately. Pausing that download avoids the network traffic entirely. If the complete download is performed, then you are correct; do not perform the installation of the Yosemite download, until and unless you're ready for that. (And I'd likely look to perform a clean installation rather than an upgrade, as the "warz" and the cracked software may or will probably survive the Yosemite upgrade, and/or some of the dreck here may still cause stability or other issues after the upgrade.)

LexSchellings wrote:

The other one is about the hosts file: it is not necessary to change the hosts file.

Etrecheck is flagging changes in the hosts file. Hence my suggestion to review the contents of that file; to see what (else) might be lurking in that, using that cat command to display its contents.

LexSchellings wrote:

And certainly not when you still have hacked software or remnants of it on your mac.

As I've stated up-thread, I'd back up, format the disk, and reinstall a clean distribution.

OK, MrHoffman, Thanks for your comments.

I understand. I thought it better to make the download complete and keep the installer available for immediate use when necessary...

Etrecheck flags the hosts file and the sudoers file when they are not "standard". Etrecheck does NOT suggest at all to edit the file, which in most cases is counterproductive. The developer wanted to leave these indications out at all, but I aked to let them in Etecheck, so that we at least have an indication that there were edits in those.

Even reading those files may change the permissions (i am not sure), I only trust Textwrangler to avoid that. The danger of changing the hosts file I pointed out in my above post...

A few years ago I advised a few knowledgeable users to edit the hosts file and told them how, after they had convinced us that they had uninstalled the hacked softwares including all remnants. Now I have the opinion not to edit the hosts file at all, see my post...

An edit or replacement of the sudoers file may definitively crash the mac (format and reinstall necessary), so that one should not be messed with at all.

Lex

LexSchellings wrote:

OK, MrHoffman, Thanks for your comments.

I understand. I thought it better to make the download complete and keep the installer available for immediate use when necessary...

Download speeds can vary. It takes several hours on the fastest available terrestrial broadband in this particular part of in the US. Downloading the current kit — if you're not going to install it — means that you may have to download another one if Apple ever updates it, and can unnecessarily burn through your data cap. In short, there are reasons to download it as you state, and there are reasons not to.

LexSchellings wrote:

Even reading those files may change the permissions (i am not sure), I only trust Textwrangler to avoid that.

FWIW, the hosts file is readable by all users in the default configuration.

$ ls -ale@ /etc/hosts

-rw-r--r-- 1 root wheel 761 Apr 26 13:05 /etc/hosts

$

The above -rw-r--r-- mask means that the file is owner (root) read-write, group (wheel) read, and also also readable by everybody else on OS X; by all system and user accounts present.

Neither the cat command nor TextWrangler can or should alter the file protections. (We'd be in deep trouble with system security if that sort of thing did happen.)

LexSchellings wrote:

A few years ago I advised a few knowledgeable users to edit the hosts file and told them how, after they had convinced us that they had uninstalled the hacked softwares including all remnants. Now I have the opinion not to edit the hosts file at all, see my post...

True. However, digging around in system files and/or making mistakes is how many folks best learn. Given this system is likely hosed — and once there's a backup or three — there's comparatively little harm in making things yet worse. Any local or personal data that was of interest to the attacker has already been uploaded to the attacker's servers, and the system is already headed for a reinstallation. Any serious mistakes made here including deleting the system files will be reparable with a reinstallation, too. But yes, first do have a backup or three!

LexSchellings wrote:

An edit or replacement of the sudoers file may definitively crash the mac (format and reinstall necessary), so that one should not be messed with at all.

The sudoers file is not accessible by default, and you're correct that and some other files can cause problems if incorrectly modified. Neither cat nor TextWrangler should be able to read the file by default, too:

$ ls -ale@ /etc/sudoers

-r--r----- 1 root wheel 1275 Sep 9 2014 /etc/sudoers

$

That's owner (root) read, group (wheel) read, and no access to any other users on OS X.

Modifying /etc/hosts can get you in trouble, too, but hosts is much easier for folks to manually repair.

As for the issue that the original poster here has encountered, I'd be performing a backup or three, wipe the disk, reinstall from known-good software distributions, carrying over only my own data files. Once installed and entrenched, finding and digging out all of the dreck is far from trivial, and takes quite a while. But if that sort of thing is interesting to the original poster, then there'll be some learning about OS X organization and operation available here, as well as what this particular add-on software might (also) have modified.