El Capitan upgrade, black screen w/ cursor

Question

Level 1

0 points

El Capitan upgrade, black screen w/ cursor

Last night I upgrade my 27 inch retina mac to El Capitan. It downloaded and upgraded but went straight to black screen with cursor. Left it overnight and came back to same screen. Power reboot and showed El Capitan installed (asked me to take the tour) but loading windows were extremely choppy and slow including web browsers. Tried to revert to old backup via TM and it was also extremely slow to load so attempted to re-download and install El Capitan. Now back at square one with the black screen and cursor). Any suggestions? Thinking about just giving up on EC for now.

iMac with Retina 5K display, OS X Yosemite (10.10.5)

Posted on Oct 4, 2015 1:35 PM

Reply

Answer 1

awadjie Author

Level 1

0 points

Oct 4, 2015 1:40 PM in response to awadjie

Having to hold shift on startup to get to desktop or else it hangs in the black screen/cursor mode

Reply

Answer 2

Linc Davis

Level 10

209,739 points

Oct 4, 2015 2:00 PM in response to awadjie

Resetting the System Management Controller (SMC) on your Mac - Apple Support

Reply

Answer 3

Oct 4, 2015 2:04 PM in response to awadjie

Does your graphics processor look weird too? Like Dock animations and else?

Reply

Answer 4

awadjie Author

Level 1

0 points

Oct 4, 2015 2:12 PM in response to Feelerino

Yes, I have the dockbar hidden, when I move the cursor over it pulls up but jitters as it does it. When I click applications from dock it loads but VERY slowly from top to bottom. Same with Chrome, it jolts instead of a smooth scroll. Safari seems fine though.

Reply

Answer 5

awadjie Author

Level 1

0 points

Oct 4, 2015 2:15 PM in response to Linc Davis

Resetting SMC is useless at this stage. When I go to shut down or restart, it hangs with the black screen and cursor. Upon forcing a shut down and reboot it hangs on the black screen with cursor. Only real solution right now is holding shift on startup.

Reply

Answer 6

Linc Davis

Level 10

209,739 points

Oct 4, 2015 2:22 PM in response to awadjie

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the requisite skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is intermittently slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual before running it. If you can only test in safe mode, do that.

6. If you have more than one user, and only one user is affected by the problem,, and the affected user is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If the test is taking much longer than usual to run because the computer is very slow, you might be prompted for your password a second time. The authorization that you grant by entering it expires automatically after five minutes.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 8 done at … sec
…
Part 8 of 8 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.

Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step. You'll have incomplete results, but still something. If you close the Terminal window while the test is still running, the partial results won't be saved and you'll have to start over.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been saved to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the software that runs this website. Please post the test results on Pastebin, then post a link here to the page you created.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 7

awadjie Author

Level 1

0 points

Oct 4, 2015 2:59 PM in response to Linc Davis

1 Start time: 14:36:44 10/04/15

2

3 Revision: 1349

4

5 Model Identifier: iMac15,1

6 System Version: OS X 10.11 (15A284)

7 Kernel Version: Darwin 15.0.0

8 Boot Mode: Safe

9 Time since boot: 19 minutes

10

11 USB

12

13 My Passport 0820 (Western Digital Technologies, Inc.)

14

15 Bluetooth

16

17 Apple Magic Mouse

18 Apple Wireless Keyboard

19

20 Energy (lifetime)

21

22 WindowServer (UID 88): 25.95

23 Terminal (UID 501): 10.40

24 bash (UID 501): 7.02

25

26 Spotlight: Indexing and searching disabled

27

28 DNS: 8.8.8.8 (static)

29

30 Listeners

31

32 kdc: kerberos

33 launchd: afpovertcp

34 launchd: microsoft-ds

35 launchd: ssh

36

37 Diagnostic reports

38

39 2015-09-11 Adobe Photoshop CS6 crash x2

40 2015-09-18 com.apple.MailServiceAgent crash

41 2015-09-27 finish_installation crash

42 2015-09-28 Final Draft 9 crash

43 2015-10-04 WindowServer crash x3

44

45 HID errors: 6

46

47 Kernel log

48

49 Oct 4 13:41:26 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xf6c2d6b6ba1d4d1d, provider is 0xf6c2d6b5faa57e1d

50 Oct 4 13:41:26 init: error getting PHY_MODE; using MODE_UNKNOWN

51 Oct 4 13:41:26 pci pause: SDXC

52 Oct 4 13:41:51 IOHIDSystem: Seize of AppleMultitouchHIDEventDriver failed.

53 Oct 4 13:41:51 IOHIDSystem: Seize of IOHIDPointing failed.

54 Oct 4 13:42:31 Process Setup Assistant [360] disabling system-wide I/O Throttling

55 Oct 4 13:42:31 Process Setup Assistant [360] disabling system-wide CPU Throttling

56 Oct 4 13:43:55 AppleKeyStore: operation failed (pid: 267 sel: 12 ret: e00002ce '-536870194')

57 Oct 4 13:43:55 AppleKeyStore: operation failed (pid: 267 sel: 12 ret: e00002ce '-536870194')

58 Oct 4 14:05:20 Process launchd [1] disabling system-wide I/O Throttling

59 Oct 4 14:05:20 Process launchd [1] disabling system-wide CPU Throttling

60 Oct 4 14:06:15 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0xf0fe6fa71dcacba1, provider is 0xf0fe6fa65ebfc9a1

61 Oct 4 14:06:15 init: error getting PHY_MODE; using MODE_UNKNOWN

62 Oct 4 14:06:25 pci pause: SDXC

63 Oct 4 14:09:05 Sandbox: Samndbox: mdworker(dworker(276) deny(1) file-re278) dead-data /Applications/iTuny(1) file-read-data /Applications/iTunes.app

64 Oct 4 14:09:05 Sandbox: mdworker(276) Sandbox: mdeny(1dworker() fil278) deny(1) file-reae-rd-dead-data /Appatalications/Photo Booth.app

65 Oct 4 14:13:51 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x69e1e9716f0d414d, provider is 0x69e1e970afe84f4d

66 Oct 4 14:13:51 init: error getting PHY_MODE; using MODE_UNKNOWN

67 Oct 4 14:13:58 pci pause: SDXC

68 Oct 4 14:19:06 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x133c746ef655359f, provider is 0x133c746e36e3e69f

69 Oct 4 14:19:06 init: error getting PHY_MODE; using MODE_UNKNOWN

70 Oct 4 14:19:06 000001.359688 IOUSBHostDevice@14620000: IOUSBHostDevice::start: failed to get device descriptor

71 Oct 4 14:19:06 000001.359746 AppleUSB20HubPort@14620000: AppleUSB20HubPort::resetAndCreateDevice: failed to start device

72 Oct 4 14:19:06 000001.359762 AppleUSB20HubPort@14620000: AppleUSB20HubPort::resetAndCreateDevice: failed to create device (0xe00002e9), disabling port

73 Oct 4 14:19:06 pci pause: SDXC

74

75 System log

76

77 Oct 4 14:35:57 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

78 Oct 4 14:36:07 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

79 Oct 4 14:36:07 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

80 Oct 4 14:36:07 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

81 Oct 4 14:36:17 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

82 Oct 4 14:36:17 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

83 Oct 4 14:36:17 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

84 Oct 4 14:36:27 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

85 Oct 4 14:36:27 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

86 Oct 4 14:36:27 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

87 Oct 4 14:36:37 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

88 Oct 4 14:36:37 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

89 Oct 4 14:36:37 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

90 Oct 4 14:36:47 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

91 Oct 4 14:36:47 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

92 Oct 4 14:36:47 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

93 Oct 4 14:36:57 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

94 Oct 4 14:36:57 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

95 Oct 4 14:36:57 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

96 Oct 4 14:37:07 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

97 Oct 4 14:37:07 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

98 Oct 4 14:37:07 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

99 Oct 4 14:37:17 watchdogd: [watchdog_daemon] @( wd_watchdog_open) - IOIteratorNext failed (kr=0)

100 Oct 4 14:37:17 watchdogd: [watchdog_daemon] @( wd_daemon_init) - could not open connection with the kernel watchdog

101 Oct 4 14:37:17 watchdogd: [watchdog_daemon] @( main) - cannot initialize the watchdog service

102

103 launchd log

104

105 Oct 4 13:19:18 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

106 Oct 4 13:39:31 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

107 Oct 4 13:41:21 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

108 Oct 4 14:06:05 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

109 Oct 4 14:13:43 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

110 Oct 4 14:19:05 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

111

112 Console log

113

114 Oct 4 14:19:52 fontd: Failed to compile sql statement (86), "INSERT INTO version_table VALUES( ?, ? );"

115 Oct 4 14:19:52 fontd: Failed to compile sql statement (87), "INSERT OR ABORT INTO font_table VALUES( NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? );"

116 Oct 4 14:19:52 fontd: Failed to compile sql statement (88), "INSERT OR ABORT INTO dir_table VALUES( NULL, ?, ?, ?, ?, ? );"

117 Oct 4 14:19:52 fontd: Failed to compile sql statement (89), "INSERT OR ABORT INTO bookmarks_table VALUES( NULL, ?, ?, ? );"

118 Oct 4 14:19:52 fontd: Failed to compile sql statement (90), "DELETE FROM font_table WHERE font_column == ?;"

119 Oct 4 14:19:52 fontd: Failed to compile sql statement (91), "DELETE FROM dir_table WHERE dir_column == ?;"

120 Oct 4 14:19:52 fontd: Failed to compile sql statement (92), "UPDATE OR ABORT font_table SET flags_column == ( flags_column & ?) | ? WHERE font_column == ?;"

121 Oct 4 14:19:52 fontd: Failed to compile sql statement (93), "UPDATE OR ABORT dir_table SET flags_column == ( flags_column & ?) | ? WHERE dir_column == ?;"

122 Oct 4 14:19:52 fontd: Failed to compile sql statement (94), "INSERT INTO name_table VALUES( ?, ?, ? );"

123 Oct 4 14:19:52 fontd: Failed to compile sql statement (95), "INSERT INTO family_table VALUES( ?, ?, ? );"

124 Oct 4 14:19:52 fontd: Failed to compile sql statement (96), "INSERT INTO subfamily_table VALUES( ?, ?, ? );"

125 Oct 4 14:19:52 fontd: Failed to compile sql statement (97), "INSERT INTO fullname_table VALUES( ?, ?, ? );"

126 Oct 4 14:19:52 fontd: Failed to compile sql statement (98), "INSERT OR REPLACE INTO traits_table VALUES( ?, ?, ?, ?, ? );"

127 Oct 4 14:19:52 fontd: Failed to compile sql statement (99), "INSERT INTO loc_names_table VALUES( ?, ?, ?, ?, ?, ?, ?, ?, ? );"

128 Oct 4 14:19:52 fontd: Failed to compile sql statement (100), "INSERT OR REPLACE INTO charset_table VALUES( NULL, ? );"

129 Oct 4 14:19:52 fontd: Failed to compile sql statement (101), "INSERT INTO unicoderanges_table VALUES( ?, ?, ?, ?, ? );"

130 Oct 4 14:19:52 fontd: Failed to compile sql statement (102), "INSERT INTO language_table VALUES( ?, ?, ? );"

131 Oct 4 14:19:52 fontd: Failed to compile sql statement (103), "INSERT INTO varaxis_table VALUES( ?, ?, ?, ?, ?, ?, ? );"

132 Oct 4 14:19:52 fontd: Failed to compile sql statement (104), "INSERT INTO varinstance_table VALUES( ?, ?, ? );"

133 Oct 4 14:19:52 fontd: Failed to compile sql statement (105), "INSERT OR REPLACE INTO lwfn_table VALUES( ?, ? );"

134 Oct 4 14:19:52 fontd: Failed to compile sql statement (106), "INSERT INTO psname_aliases_table VALUES( ?, ?, ? );"

135 Oct 4 14:19:52 fontd: Failed to compile sql statement (107), "INSERT OR REPLACE INTO format_table VALUES( ?, ? );"

136 Oct 4 14:19:52 fontd: Failed to create font store at path /var/folders/8z/m1m46q591nv7ndznc0lm_jl00000gn/C/com.apple.FontRegistry/fontreg istry.user, trying alternative

137 Oct 4 14:19:52 fontd: Failed to create alternative font store at path /tmp/fontregistry.user, falling back to in-memory store

138 Oct 4 14:19:52 fontd: XType - wal checkpoint: 0, -1, -1.

139

140 System services loaded

141

142 com.apple.Kerberos.kdc

143 - status: 1

144 com.apple.WindowServer

145 - status: -11

146 com.apple.logd

147 - status: 1

148 com.apple.watchdogd

149

150 System services disabled

151

152 _dirty

153 com.apple.mdmclient.daemon.runatboot

154

155 Login services disabled

156

157 com.apple.ManagedClientAgent.enrollagent

158 com.viber.osx

159

160 User services disabled

161

162 com.apple.ManagedClientAgent.enrollagent

163 com.viber.osx

164

165 User login items

166

167 iSyncr

168 - /Applications/iSyncr.app

169 uHD-Agent

170 - missing value

171 iTunesHelper

172 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

173 Dropbox

174 - /Applications/Dropbox.app

175 CrossOver CD Helper

176 - missing value

177 Viber

178 - /Applications/Viber.app

179

180 Safari extensions

181

182 DivX Plus Web Player HTML5 <video>

183 - com.divx.html5video

184 DivX HiQ

185 - com.divx.wpa

186

187 Firefox extensions

188

189 foursquarefox | foursquare for Firefox

190 Greasemonkey

191 Johan Sundström

192 Autofill Forms

193 Sarah Av.

194

195 Widgets

196

197 HiddenFiles

198

199 iCloud errors

200

201 Finder 57

202 mdworker 24

203 cloudd 1

204

205 Continuity errors

206

207 sharingd 4

208

209 Restricted files: 114

210

211 Lockfiles: 21

212

213 Global prefs (user)

214

215 AppleActionOnDoubleClick = Minimize

216 NSDocumentAutosaveOldDocumentDayThreshold = 14

217 NSInitialToolTipDelay = 1

218 iToolsMember = hawadjie

219 userMenuExtraStyle = 2

220

221 Contents of /Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist

222 - mod date: Jul 22 14:33:04 2015

223 - size (B): 577

224 - checksum: 2197523146

225

226 <?xml version="1.0" encoding="UTF-8"?>

227 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

228 <plist version="1.0">

229 <dict>

230 <key>Label</key>

231 <string>com.adobe.ARMDCHelper.UUID</string>

232 <key>ProgramArguments</key>

233 <array>

234 <string>/Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper</string>

235 </array>

236 <key>RunAtLoad</key>

237 <true/>

238 <key>StartInterval</key>

239 <integer>12600</integer>

240 </dict>

241 </plist>

242

243 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

244 - mod date: Jul 22 21:36:01 2015

245 - size (B): 104

246 - checksum: 1725647089

247

248 <?xml version="1.0" encoding="UTF-8"?>

249 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

250 <plist version="1.0">

251 <dict>

252 <key>Label</key>

253 <string>com.oracle.java.Java-Updater</string>

254 <key>ProgramArguments</key>

255 <array>

256 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

257 <string>-bgcheck</string>

258 </array>

259 <key>StandardErrorPath</key>

260 <string>/dev/null</string>

261 <key>StandardOutPath</key>

262 <string>/dev/null</string>

263 <key>StartCalendarInterval</key>

264 <dict>

265 <key>Hour</key>

266 <integer>21</integer>

267 <key>Minute</key>

268 <integer>44</integer>

269 <key>Weekday</key>

270 <integer>2</integer>

271 </dict>

272 </dict>

273

274 ...and 1 more line(s)

275

276 Contents of /Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist

277 - mod date: Jul 22 14:33:04 2015

278 - size (B): 474

279 - checksum: 3887726299

280

281 <?xml version="1.0" encoding="UTF-8"?>

282 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

283 <plist version="1.0">

284 <dict>

285 <key>Label</key>

286 <string>com.adobe.ARMDC.Communicator</string>

287 <key>MachServices</key>

288 <dict>

289 <key>com.adobe.ARMDC.Communicator</key>

290 <true/>

291 </dict>

292 <key>ProgramArguments</key>

293 <array>

294 <string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator</string>

295 </array>

296 </dict>

297 </plist>

298

299 Contents of /Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist

300 - mod date: Jul 22 14:33:04 2015

301 - size (B): 486

302 - checksum: 930028549

303

304 <?xml version="1.0" encoding="UTF-8"?>

305 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

306 <plist version="1.0">

307 <dict>

308 <key>Label</key>

309 <string>com.adobe.ARMDC.SMJobBlessHelper</string>

310 <key>MachServices</key>

311 <dict>

312 <key>com.adobe.ARMDC.SMJobBlessHelper</key>

313 <true/>

314 </dict>

315 <key>ProgramArguments</key>

316 <array>

317 <string>/Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper</string >

318 </array>

319 </dict>

320 </plist>

321

322 Contents of /Library/LaunchDaemons/com.adobe.agsservice.plist

323 - mod date: Sep 11 23:46:12 2015

324 - size (B): 663

325 - checksum: 364192525

326

327 <?xml version="1.0" encoding="UTF-8"?>

328 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

329 <plist version="1.0">

330 <dict>

331 <key>Label</key>

332 <string>Adobe_Genuine_Software_Integrity_Service</string>

333 <key>ProgramArguments</key>

334 <array>

335 <string>/Library/Application Support/Adobe/AdobeGCClient/AGSService</string>

336 </array>

337 <key>Nice</key>

338 <integer>1</integer>

339 <key>StartInterval</key>

340 <integer>86400</integer>

341 <key>RunAtLoad</key>

342 <true/>

343 <key>StandardErrorPath</key>

344 <string>/tmp/AlTest1.err</string>

345 <key>StandardOutPath</key>

346 <string>/tmp/AlTest1.out</string>

347 </dict>

348 </plist>

349

350 Contents of /private/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist

351 - mod date: Sep 10 10:35:57 2015

352 - size (B): 423

353 - checksum: 3469280363

354

355 <?xml version="1.0" encoding="UTF-8"?>

356 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

357 <plist version="1.0">

358 <dict>

359 <key>Command</key>

360 <string>/Library/Application\ Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/switchboard.sh</string >

361 <key>OnDemand</key>

362 <false/>

363 <key>ServiceName</key>

364 <string>com.adobe.SwitchBoard.monitor</string>

365 </dict>

366 </plist>

367

368 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

369 - mod date: Feb 18 20:56:26 2015

370 - size (B): 603

371 - checksum: 394026997

372

373 <?xml version="1.0" encoding="UTF-8"?>

374 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

375 <plist version="1.0">

376 <dict>

377 <key>Label</key>

378 <string>com.adobe.ARM.UUID</string>

379 <key>ProgramArguments</key>

380 <array>

381 <string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

382 <string>semi-auto</string>

383 </array>

384 <key>RunAtLoad</key>

385 <true/>

386 <key>StartInterval</key>

387 <integer>12600</integer>

388 </dict>

389 </plist>

390

391 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

392 - mod date: Jan 3 19:54:05 2015

393 - size (B): 631

394 - checksum: 4116814193

395

396 <?xml version="1.0" encoding="UTF-8"?>

397 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

398 <plist version="1.0">

399 <dict>

400 <key>Label</key>

401 <string>com.adobe.ARM.UUID</string>

402 <key>ProgramArguments</key>

403 <array>

404 <string>/Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper</string>

405 <string>semi-auto</string>

406 </array>

407 <key>RunAtLoad</key>

408 <true/>

409 <key>StartInterval</key>

410 <integer>12600</integer>

411 </dict>

412 </plist>

413

414 Contents of Library/LaunchAgents/com.akamai.single-user-client.plist

415 - mod date: Sep 22 09:12:11 2015

416 - size (B): 624

417 - checksum: 2177098370

418

419 <?xml version="1.0" encoding="UTF-8"?>

420 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

421 <plist version="1.0">

422 <dict>

423 <key>Label</key>

424 <string>com.akamai.single-user-client</string>

425 <key>Nice</key>

426 <integer>-18</integer>

427 <key>KeepAlive</key>

428 <dict>

429 <key>SuccessfulExit</key>

430 <false/>

431 </dict>

432 <key>ProgramArguments</key>

433 <array>

434 <string>/Users/USER/Applications/Akamai/netsession_mac</string>

435 </array>

436 <key>RunAtLoad</key>

437 <true/>

438 <key>AbandonProcessGroup</key>

439 <true/>

440 </dict>

441 </plist>

442

443 Contents of Library/LaunchAgents/com.apple.SafariBookmarksSyncer.plist

444 - mod date: Jan 26 01:59:16 2011

445 - size (B): 817

446 - checksum: 1168263746

447

448 <?xml version="1.0" encoding="UTF-8"?>

449 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

450 <plist version="1.0">

451 <dict>

452 <key>Label</key>

453 <string>com.apple.Safari</string>

454 <key>LimitLoadToSessionType</key>

455 <string>Aqua</string>

456 <key>ProgramArguments</key>

457 <array>

458 <string>/Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/S afariSyncClient</string>

459 <string>--sync</string>

460 <string>com.apple.Safari</string>

461 <string>--entitynames</string>

462 <string>com.apple.bookmarks.Bookmark,com.apple.bookmarks.Folder</string>

463 </array>

464 <key>RunAtLoad</key>

465 <false/>

466 <key>ThrottleInterval</key>

467 <integer>60</integer>

468 <key>WatchPaths</key>

469 <array>

470 <string>/Users/USER/Library/Safari/Bookmarks.plist</string>

471 </array>

472 </dict>

473

474 ...and 1 more line(s)

475

476 Contents of Library/LaunchAgents/com.bittorrent.uTorrent.plist

477 - mod date: Aug 7 15:03:44 2015

478 - size (B): 511

479 - checksum: 68136511

480

481 <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd> <plist version="1.0"> <dict> <key>Label</key> <string>com.bittorrent.uTorrent</string> <key>ProgramArguments</key> <array> <string>/usr/bin/open</string> <string>-W</string> <string>-a</string> <string>/Applications/uTorrent.app</string> </array> <key>KeepAlive</key> <false/> <key>LaunchOnlyOnce</key> <true/> </dict> </plist>

482

483 Contents of Library/LaunchAgents/com.eltima.Folx.Agent.plist

484 - mod date: Jun 22 22:44:48 2011

485 - size (B): 605

486 - checksum: 3272101783

487

488 <?xml version="1.0" encoding="UTF-8"?>

489 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//ENhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

490 <plist version="1.0">

491 <dict>

492 <key>OnDemand</key>

493 <true/>

494 <key>KeepAlive</key>

495 <dict>

496 <key>SuccessfulExit</key>

497 <false/>

498 </dict>

499 <key>Label</key>

500 <string>com.eltima.FolxAgent</string>

501 <key>Program</key>

502 <string>/Users/USER/Library/ScriptingAdditions/FolxScriptAddition.osax/Contents /Resources/FolxAgent.app/Contents/MacOS/FolxAgent</string>

503 <key>RunAtLoad</key>

504 <true/>

505 <key>LimitLoadToSessionType</key>

506 <string>Aqua</string>

507 </dict>

508 </plist>

509

510 Contents of Library/LaunchAgents/com.facebook.videochat.NAME.plist

511 - mod date: Aug 9 12:11:21 2014

512 - size (B): 806

513 - checksum: 1541963695

514

515 <?xml version="1.0" encoding="UTF-8"?>

516 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

517 <plist version="1.0">

518 <dict>

519 <key>Label</key>

520 <string>com.facebook.videochat.NAME.updater</string>

521 <key>ProgramArguments</key>

522 <array>

523 <string>/usr/bin/java</string>

524 <string>-cp</string>

525 <string>/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookUpdate.jar</string>

526 <string>FacebookUpdate</string>

527 <string>com.facebook.peep</string>

528 <string>3.1.0.522</string>

529 </array>

530 <key>RunAtLoad</key>

531 <true/>

532 <key>StartInterval</key>

533 <integer>10800</integer>

534 <key>StandardErrorPath</key>

535 <string>/dev/null</string>

536 <key>StandardOutPath</key>

537 <string>/dev/null</string>

538 </dict>

539 </plist>

540

541 Contents of Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist

542 - mod date: May 26 13:25:38 2012

543 - size (B): 550

544 - checksum: 115221366

545

546 <?xml version="1.0" encoding="UTF-8"?>

547 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

548 <plist version="1.0">

549 <dict>

550 <key>Label</key>

551 <string>com.macpaw.CleanMyMac.helperTool</string>

552 <key>OnDemand</key>

553 <true/>

554 <key>ProgramArguments</key>

555 <array>

556 <string>/Users/USER/Library/Application Support/CleanMyMac/CleanMyMacHelperTool</string>

557 </array>

558 <key>RunAtLoad</key>

559 <false/>

560 <key>WatchPaths</key>

561 <array>

562 <string>/Users/USER/.Trash</string>

563 </array>

564 </dict>

565 </plist>

566

567 Contents of Library/LaunchAgents/com.macpaw.CleanMyMac.trashSizeWatcher.plist

568 - mod date: May 26 13:25:38 2012

569 - size (B): 557

570 - checksum: 727346061

571

572 <?xml version="1.0" encoding="UTF-8"?>

573 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

574 <plist version="1.0">

575 <dict>

576 <key>Label</key>

577 <string>com.macpaw.CleanMyMac.trashSizeWatcher</string>

578 <key>OnDemand</key>

579 <true/>

580 <key>ProgramArguments</key>

581 <array>

582 <string>/Users/USER/Library/Application Support/CleanMyMac/CleanMyMacHelperTool</string>

583 <string>-watchTrashSize</string>

584 </array>

585 <key>RunAtLoad</key>

586 <false/>

587 <key>StartInterval</key>

588 <integer>21600</integer>

589 </dict>

590 </plist>

591

592 Contents of Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist

593 - mod date: May 26 13:25:29 2012

594 - size (B): 602

595 - checksum: 1090363990

596

597 <?xml version="1.0" encoding="UTF-8"?>

598 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

599 <plist version="1.0">

600 <dict>

601 <key>Label</key>

602 <string>com.macpaw.CleanMyMac.volumeWatcher</string>

603 <key>OnDemand</key>

604 <true/>

605 <key>ProgramArguments</key>

606 <array>

607 <string>/Users/USER/Library/Application Support/CleanMyMac/CleanMyMacHelperTool</string>

608 <string>-cleanWinJunk</string>

609 <string>-cleanTrashes</string>

610 <string>-cleanMacOSJunk</string>

611 </array>

612 <key>RunAtLoad</key>

613 <false/>

614 <key>StartOnMount</key>

615 <true/>

616 </dict>

617 </plist>

618

619 Contents of Library/LaunchAgents/com.spigot.ApplicationManager.plist

620 - mod date: Aug 7 15:03:16 2015

621 - size (B): 484

622 - checksum: 15106579

623

624 <?xml version="1.0" encoding="UTF-8"?>

625 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

626 <plist version="1.0">

627 <dict>

628 <key>KeepAlive</key>

629 <true/>

630 <key>Label</key>

631 <string>com.spigot.ApplicationManager</string>

632 <key>ProgramArguments</key>

633 <array>

634 <string>/Users/USER/Library/Application Support/Spigot/ApplicationManager</string>

635 <string>--protect</string>

636 </array>

637 <key>RunAtLoad</key>

638 <true/>

639 </dict>

640 </plist>

641

642 Contents of Library/LaunchAgents/com.wondershare.mobilegodaemon.plist

643 - mod date: Dec 3 16:13:23 2013

644 - size (B): 439

645 - checksum: 635945111

646

647 <?xml version="1.0" encoding="UTF-8"?>

648 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

649 <plist version="1.0">

650 <dict>

651 <key>KeepAlive</key>

652 <true/>

653 <key>Label</key>

654 <string>com.wondershare.mobilegodaemon</string>

655 <key>ProgramArguments</key>

656 <array>

657 <string>/Users/USER/Library/Application Support/wondershare_mobilego/MobileGoDaemon.app</string>

658 </array>

659 </dict>

660 </plist>

661

662 Contents of Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist

663 - mod date: Nov 20 17:33:08 2013

664 - size (B): 677

665 - checksum: 3654809970

666

667 <?xml version="1.0" encoding="UTF-8"?>

668 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

669 <plist version="1.0">

670 <dict>

671 <key>Disabled</key>

672 <true/>

673 <key>KeepAlive</key>

674 <false/>

675 <key>Label</key>

676 <string>org.virtualbox.vboxwebsvc</string>

677 <key>Program</key>

678 <string>/Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv</string>

679 <key>Sockets</key>

680 <dict>

681 <key>Listeners</key>

682 <dict>

683 <key>SockServiceName</key>

684 <string>18083</string>

685 <key>SockType</key>

686 <string>stream</string>

687 <key>SockFamily</key>

688 <string>IPv4</string>

689 </dict>

690 </dict>

691 </dict>

692

693 ...and 1 more line(s)

694

695 Frameworks

696

697 /Users/USER/Library/Frameworks/SamsungKiesFoundation.framework

698 - N/A

699 /Users/USER/Library/Frameworks/SamsungKiesSerialPort.framework

700 - N/A

701

702 PrefPane

703

704 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

705 - com.oracle.java.JavaControlPanel

706 /Users/USER/Library/PreferencePanes/AkamaiNetSession.prefPane

707 - com.yourcompany.AkamaiNetSession

708

709 Modifications

710

711 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/.__CodeSignature

712 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/._Info.plist

713 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/._PkgInfo

714 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/MacOS/._AAM Registration Notifier

715 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/._AAM.icns

716 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/cs_CZ/._stringTable.zdct

717 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/da_DK/._stringTable.zdct

718 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/de_DE/._stringTable.zdct

719 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_GB/._stringTable.zdct

720 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_US/._stringTable.zdct

721 ...

722 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/.__CodeSignature

723 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/._Info.plist

724 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/._PkgInfo

725 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/MacOS/._adobe_licutil

726 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/._adbe_licutil.icns

727 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/English.lproj/._InfoPlist.stri ngs

728 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/ar_AE/._ConnectionFAQ.h tml

729 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/ar_AE/._LicenseFAQ.html

730 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/ar_AE/._Main.zdct

731 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/bg_BG/._ConnectionFAQ.h tml

732 ...

733 file added: /Applications/Utilities/Adobe Application Manager/LWA/amtservices.framework/Versions/Current/.__CodeSignature

734 file added: /Applications/Utilities/Adobe Application Manager/LWA/amtservices.framework/Versions/Current/._amtservices

735 file added: /Applications/Utilities/Adobe Application Manager/LWA/amtservices.framework/Versions/Current/Resources/._Info.plist

736 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/.__CodeSignature

737 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/._asneu

738 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/Resources/._Info.plist

739 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/Resources/English.lproj/._InfoPlis t.strings

740 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/.__CodeSignature

741 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/._Info.plist

742 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/._PkgInfo

743 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/MacOS/._AAM Registration Notifier

744 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/._AAM.icns

745 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/cs_CZ/._stringTable.zdct

746 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/da_DK/._stringTable.zdct

747 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/de_DE/._stringTable.zdct

748 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_AE/._stringTable.zdct

749 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_GB/._stringTable.zdct

750 ...

751 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat

752

753 Bad kernel extensions

754

755 /System/Library/Extensions/AppleOSXUSBNCM.kext

756

757 Installations

758

759 Final Draft 9: 9/27/15, 12:59 PM

760 Java 8 Update 60: 9/26/15, 9:44 PM

761 Java 8 Update 51: 7/22/15, 9:36 PM

762 Adobe Acrobat XI Pro (11.0.12): 7/22/15, 6:02 PM

763 iSyncr Desktop 5.1.3: 7/22/15, 2:42 PM

764

765 Elapsed time (sec): 462

Reply

Answer 8

Linc Davis

Level 10

209,739 points

Oct 4, 2015 5:59 PM in response to awadjie

A

"CleanMyMac" is a scam and a common cause of instability and poor performance. Depending on what version you have, the developer's instructions may not completely remove it. Follow those instructions, then do as below.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/Library/LaunchDaemons/com.macpaw.CleanMyMac2.Agent.plist

Right-click or control-click the highlighted line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder may open with an item selected. If it does, move the selected item to the Trash. You may be prompted for your administrator login password.

Repeat with this line:

/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent

Restart the computer and empty the Trash.

You may also have to remove one or more of these items in the same way:

~/Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

Never again install "CleanMyMac" or anything like it.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

B

If you don't already have a current backup, back up all data, then reinstall the OS.* You don't need to erase the startup volume, and you won't need the backup unless something goes wrong. If the system was upgraded from an older version of OS X, you may need the Apple ID and password you used.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

If you installed the Java runtime distributed by Apple and still need it, you'll have to reinstall it. The same goes for Xcode. All other data will be preserved.

*The linked support article refers to OS X 10.11 ("El Capitan"), but the procedure is the same for OS X 10.7 ("Lion") and later.

C

If you still can't boot normally, remove these system modifications:

Folx

MobileGo

VirtualBox

Any third-party software that doesn't install from the App Store or by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

D

The test results show other issues, probably not related to the original question.

You installed the "Spigot" ad-injection malware. Take the steps below to disable it.

Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.

Back up all data before continuing.

1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.

2. Inside the folder you just opened, there may be one or more files with a name beginning as follows:

com.spigot

Move all such items to the Trash.

Log out or restart the computer. The trojan will now be inactive, but there are a few more components of it that should be cleaned up.

3. Do as in Step 1 with this line:

~/Library/Application Support

and remove an item named

Spigot

If it's present.

Empty the Trash.

4. From the Safari menu bar, select

Safari ▹ Preferences... ▹ Extensions

Uninstall all extensions you don't know you need, including any with the word "Spigot" in the description. If in doubt, remove all of them. None is required for normal operation. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.

Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic," "CNET Download," or "SourceForge." Never visit any of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

E

The following Safari extensions may be malicious and should be removed in the Extensions pane of the Safari preferences window:

DivX Plus Web Player HTML5

Reply

Answer 9

awadjie Author

Level 1

0 points

Oct 4, 2015 5:32 PM in response to Linc Davis

Thanks for partial help. Folx, Mobilego, VirtualBox and Spigot all deleted. Same with Clean my mac. Didn't realize I had such files, but again one of those things where you think you trash the app and all is well. Also deleted many extensions from Safari and Firefox since I no longer use the two programs as well as a few from Chrome. Also removed Divx and security settings were already in place as stated above.

Unfortunately the problem is still there. I can boot but it just loads mouse cursor on black screen. Can boot into safemode but still with the laggy graphics. So really at a loss of what to do other than a clean install. Something I was really hoping to avoid.

Reply

Answer 10

Oct 4, 2015 5:43 PM in response to awadjie

Lots of upgrades are experiencing the issue. I'm about to begin me third try and this Post seems to have the most positive result

Boot up after installing El Capitan

Can you confirm if the resolution of removing extension posted by Hadamard is helpful?

Reply

Answer 11

awadjie Author

Level 1

0 points

Oct 4, 2015 5:58 PM in response to makportal

Hadamard's remarks were interesting, but all related files did not exist on my computer. Furthermore, the following post (Thomas Russo) also provided some insight in regards to looking for extraneous .kext files but again, no further help to me.

I see a few reinstalled EC multiple times to get it to work, but I am not sure how I would go about reinstalling EC? Or rolling back to Yosemite to try again?

I might try to reinstall with Boot OS X Recovery and see if that helps. If this is indeed a common problem, I hope for a fix soon as I use my mac for work purposes.

Reply

Answer 12

Linc Davis

Level 10

209,739 points

Oct 4, 2015 6:02 PM in response to awadjie

You're probably triggering either a bug or a latent hardware fault. If the warranty is close to expiration (one year after purchase), I strongly suggest that you make a "Genius" appointment at an Apple Store to have the machine tested. If you have AppleCare, you may be entitled to a site visit.

Reply

Answer 13

awadjie Author

Level 1

0 points

Oct 4, 2015 6:18 PM in response to Linc Davis

Thankfully I just got this mac in August. So looks like I am going back into the store. I did COMMAND R and boot from OSX file. currently "downloading additional components. Your computer will restart automatically". It's sitting at 14 hours, not sure why so long. But that gives me time to schedule a genius appt and if this doesn't work, just take it in.

Reply

Answer 14

awadjie Author

Level 1

0 points

Oct 4, 2015 6:20 PM in response to awadjie

*CORRECTION. Time has dropped down to 6 hours, so taking that with a grain of salt. Will report back after re-install.

Reply

Answer 15

awadjie Author

Level 1

0 points

Oct 4, 2015 9:50 PM in response to awadjie

Checking back in after performing the following OS X: About OS X Recovery - Apple Support.

Took about 2-3 hours and the install looks clean. Cannot vouch for if this was the cause of Linc Davis' earlier posts, but I would only imagine it certainly helped since I had old files and malware laying around.

Reply