Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

after +- 10 min http not work but https works

After restart my Macbook Pro 15 whit el capitan 10.11.1


i work ca 10 min whit Safari no Problem but after the +- 10 min in can not open website whit http but whit https its working i test to open the websites whit Chrome whit Firefox and have the same results and wen i open the app store i see only the text but not the Pictures .


thanks for Help

Sandro

MacBook Pro with Retina display, OS X El Capitan (10.11.1)

Posted on Nov 25, 2015 5:53 AM

Reply
13 replies

Nov 25, 2015 9:04 AM in response to samiczch

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the requisite skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is intermittently slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual before running it. If you can only test in safe mode, do that.

6. If you have more than one user, and only one user is affected by the problem,, and the affected user is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If the test is taking much longer than usual to run because the computer is very slow, you might be prompted for your password a second time. The authorization that you grant by entering it expires automatically after five minutes.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

[Process started]

Part 1 of 4 done at … sec

Part 4 of 4 done at … sec

The test results are on the Clipboard.

Please close this window.

[Process completed]

The intervals between parts won't be exactly equal, but they give a rough indication of progress.

Wait for the final message "Process completed" to appear. If you don't see it within about 15 minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step. You'll have incomplete results, but still something. If you close the Terminal window while the test is still running, the partial results won't be saved and you'll have to start over.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been saved to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the software that runs this website. Please post the test results on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Nov 26, 2015 6:32 AM in response to Linc Davis

1 Start time: 08:26:51 11/26/15

2

3 Revision: 1370

4

5 Model Identifier: MacBookPro10,1

6 System Version: OS X 10.11.1 (15B42)

7 Kernel Version: Darwin 15.0.0

8 Time since boot: 49 minutes

9

10 FileVault 2

11

12 FileVault is On.

13

14 Activity

15

16 en0: in 1723, out 1750 (KiB/s)

17

18 Net out (Mb/s)

19

20 Google Chrome (UID 501): 4

21

22 System errors (per sec)

23

24 Google Chrome (UID 501, error 35): 102

25

26 Energy (lifetime)

27

28 Google Chrome (UID 501): 7.82

29

30 Memory (MB)

31

32 kernel_task (UID 0): 1497

33

34 Global prefs (system)

35

36 MultipleSessionEnabled = 1

37

38 System caches/logs

39

40 2,3 GiB: /System/Library/Caches/com.apple.coresymbolicationd/data

41

42 Diagnostic reports

43

44 2015-10-26 esets_proxy crash

45 2015-10-27 TeamViewer_Service crash

46 2015-10-30 esets_proxy crash

47 2015-11-02 VDCAssistant crash

48 2015-11-02 esets_proxy crash

49 2015-11-03 esets_proxy crash

50 2015-11-04 iTunes hang

51 2015-11-05 FinderSyncAPIExtension crash x7

52 2015-11-05 SystemUIServer crash

53 2015-11-05 esets_proxy crash

54 2015-11-06 esets_daemon crash

55 2015-11-10 netbiosd crash

56 2015-11-12 TeamViewer crash

57 2015-11-13 VDCAssistant crash

58 2015-11-15 esets_proxy crash

59 2015-11-21 esets_proxy crash

60 2015-11-25 Google Drive crash x2

61 2015-11-25 SystemUIServer crash

62 2015-11-25 VDCAssistant crash

63 2015-11-25 esets_proxy crash x3

64

65 HID errors: 1

66

67 Kernel log

68

69 Nov 26 08:17:12 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

70 Nov 26 08:17:22 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

71 Nov 26 08:18:02 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

72 Nov 26 08:18:19 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

73 Nov 26 08:18:27 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

74 Nov 26 08:18:37 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

75 Nov 26 08:18:54 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

76 Nov 26 08:19:01 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

77 Nov 26 08:19:15 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

78 Nov 26 08:19:24 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

79 Nov 26 08:19:35 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

80 Nov 26 08:19:40 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

81 Nov 26 08:19:50 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

82 Nov 26 08:20:05 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

83 Nov 26 08:21:45 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

84 Nov 26 08:21:53 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

85 Nov 26 08:22:01 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

86 Nov 26 08:22:25 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

87 Nov 26 08:22:40 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

88 Nov 26 08:22:49 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

89 Nov 26 08:22:59 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

90 Nov 26 08:23:10 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

91 Nov 26 08:23:28 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

92 Nov 26 08:23:35 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

93 Nov 26 08:26:29 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

94

95 System log

96

97 Nov 26 08:00:15 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9b

98 Nov 26 08:00:21 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9b

99 Nov 26 08:00:45 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9b

100 Nov 26 08:00:52 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9b

101 Nov 26 08:05:00 esets: error[01fd0000]: Protoscan Proxy Agent: [0x7cb2c400] CONNECT - c_fd=651 s_fd=-1 c_addr=127.0.0.1:52693 s_addr=192.168.100.7:80 pid=5710 ppid=5709 uid=501 ruuid=501 gid=20 app_name=mnmap app_path=/Applications/Path Finder.app/Contents/Frameworks/CocoaTechAppKit.framework/Versions/A/Helpers/mnm ap

102 Nov 26 08:05:00 esets: error[01fd0000]: Protoscan Proxy Agent: Cannot get socket address: Invalid argument

103 Nov 26 08:05:00 esets: error[01fd0000]: Protoscan Proxy Agent: Cannot get socket address: Invalid argument

104 Nov 26 08:05:00 esets: error[01fd0000]: Protoscan Proxy Agent: Cannot get socket address: Invalid argument

105 Nov 26 08:05:00 esets: error[01fd0000]: Protoscan Proxy Agent: [0x7baff200] CONNECT - c_fd=649 s_fd=-1 c_addr=127.0.0.1:52704 s_addr=192.168.100.17:80 pid=5710 ppid=5709 uid=501 ruuid=501 gid=20 app_name=mnmap app_path=/Applications/Path Finder.app/Contents/Frameworks/CocoaTechAppKit.framework/Versions/A/Helpers/mnm ap

106 Nov 26 08:09:14 esets: error[01fd0000]: Protoscan Proxy Agent: Cannot get socket address: Invalid argument

107 Nov 26 08:09:14 esets: error[01fd0000]: Protoscan Proxy Agent: Cannot get socket address: Invalid argument

108 Nov 26 08:09:16 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9b

109 Nov 26 08:09:26 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9b

110 Nov 26 08:10:00 WindowServer: CGXGetWindowWorkspace: invalid window id: 95

111 Nov 26 08:10:00 WindowServer: CGXGetWindowWorkspace: invalid window id: b3

112 Nov 26 08:13:43 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9a

113 Nov 26 08:13:50 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9a

114 Nov 26 08:17:32 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9a

115 Nov 26 08:18:04 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9a

116 Nov 26 08:18:13 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x99 is not attached to window 0x9a

117 Nov 26 08:23:00 WindowServer: CGXGetWindowWorkspace: invalid window id: 99

118 Nov 26 08:23:39 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x48 is not attached to window 0x7e

119 Nov 26 08:26:30 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x48 is not attached to window 0x7e

120 Nov 26 08:27:02 WindowServer: _CGXRemoveWindowFromWindowMovementGroup: window 0x48 is not attached to window 0x7e

121 Nov 26 08:27:36 WindowServer: CGXGetWindowWorkspace: invalid window id: bf

122

123 launchd log

124

125 Nov 26 07:37:59 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

126 Nov 26 07:37:59 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

127 Nov 26 07:38:05 com.apple.xpc.launchd.user.domain.501.100008.Aqua: Could not import service from caller: caller = otherbsd.265, service = com.squirrels.Reflector-2-Helper, error = 119: Service is disabled

128 Nov 26 07:38:05 com.apple.xpc.launchd.user.domain.501.100008.Aqua: Could not import service from caller: caller = otherbsd.265, service = U4MRT5KL8R.com.globaldelight.Voila.MovieTrimHelper, error = 119: Service is disabled

129 Nov 26 07:38:05 com.apple.xpc.launchd.user.domain.501.100008.Aqua: Could not import service from caller: caller = otherbsd.265, service = com.globaldelight.VoilaCapture, error = 119: Service is disabled

130 Nov 26 07:38:05 com.apple.xpc.launchd.user.domain.501.100008.Aqua: Could not import service from caller: caller = otherbsd.265, service = com.bombich.cccuseragent, error = 119: Service is disabled

131

132 Console log

133

134 Nov 25 20:23:52 DatAnywhere: *** LOG MESSAGE QUOTA EXCEEDED - SOME MESSAGES FROM THIS PROCESS HAVE BEEN DISCARDED ***

135 Nov 25 20:42:39 DatAnywhere: *** LOG MESSAGE QUOTA EXCEEDED - SOME MESSAGES FROM THIS PROCESS HAVE BEEN DISCARDED ***

136

137 Loaded kernel extensions

138

139 at.obdev.nke.LittleSnitch (4356)

140 com.eset.kext.esets-kac (601.01.20f01)

141 com.eset.kext.esets-pfw (601.01.20f01)

142 org.virtualbox.kext.VBoxDrv (5.0.10)

143 org.virtualbox.kext.VBoxNetAdp (5.0.10)

144 org.virtualbox.kext.VBoxNetFlt (5.0.10)

145 org.virtualbox.kext.VBoxUSB (5.0.10)

146

147 System services loaded

148

149 at.obdev.littlesnitchd

150 com.apple.logd

151 - status: 1

152 com.apple.watchdogd

153 com.cocoatech.pathfinder.SMFHelper7

154 com.equinux.VPNTracker9.agent

155 com.objectiveSee.blockblock.daemon

156 com.sparklabs.ViscosityHelper

157 com.teamviewer.Helper

158 com.teamviewer.service

159 com.varonis.DatAnywhere.Injector

160 com.varonis.DatAnywhere.Installer

161

162 Login services loaded

163

164 2BUA8C4S2C.com.agilebits.onepassword-osx-helper

165 at.obdev.LittleSnitchUIAgent

166 at.obdev.MicroSnitchOpenAtLoginHelper

167 com.google.keystone.user.agent

168 com.objectiveSee.blockblock.agent

169 com.teamviewer.desktop

170 com.teamviewer.teamviewer

171

172 Login services disabled

173

174 U4MRT5KL8R.com.globaldelight.Voila.MovieTrimHelper

175 com.bombich.cccuseragent

176

177 User services disabled

178

179 U4MRT5KL8R.com.globaldelight.Voila.MovieTrimHelper

180 com.bombich.cccuseragent

181

182 Startup items

183

184 /Library/StartupItems/TuxeraNTFSUnmountHelper/StartupParameters.plist

185 /Library/StartupItems/TuxeraNTFSUnmountHelper/TuxeraNTFSUnmountHelper

186

187 Global login items

188

189 /Applications/ESET Cyber Security.app

190

191 Contents of /Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist

192 - mod date: Nov 25 14:42:13 2015

193 - size (B): 464

194 - checksum: 2014742307

195

196 <?xml version="1.0" encoding="UTF-8"?>

197 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

198 <plist version="1.0">

199 <dict>

200 <key>KeepAlive</key>

201 <true/>

202 <key>Label</key>

203 <string>at.obdev.LittleSnitchUIAgent</string>

204 <key>ProgramArguments</key>

205 <array>

206 <string>/Library/Little Snitch/Little Snitch Agent.app/Contents/MacOS/Little Snitch Agent</string>

207 </array>

208 <key>RunAtLoad</key>

209 <true/>

210 </dict>

211 </plist>

212

213 Contents of /Library/LaunchDaemons/at.obdev.littlesnitchd.plist

214 - mod date: Nov 25 14:42:12 2015

215 - size (B): 631

216 - checksum: 4174275850

217

218 <?xml version="1.0" encoding="UTF-8"?>

219 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

220 <plist version="1.0">

221 <dict>

222 <key>KeepAlive</key>

223 <true/>

224 <key>Label</key>

225 <string>at.obdev.littlesnitchd</string>

226 <key>ProgramArguments</key>

227 <array>

228 <string>/Library/Little Snitch/Little Snitch Daemon.bundle/Contents/MacOS/Little Snitch Daemon</string>

229 </array>

230 <key>RunAtLoad</key>

231 <true/>

232 <key>StandardErrorPath</key>

233 <string>/Library/Logs/LittleSnitchDaemon.log</string>

234 <key>StandardOutPath</key>

235 <string>/Library/Logs/LittleSnitchDaemon.log</string>

236 </dict>

237 </plist>

238

239 Contents of /Library/LaunchDaemons/com.cocoatech.pathfinder.SMFHelper7.plist

240 - mod date: Nov 25 20:38:58 2015

241 - size (B): 659

242 - checksum: 2550986448

243

244 <?xml version="1.0" encoding="UTF-8"?>

245 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

246 <plist version="1.0">

247 <dict>

248 <key>Label</key>

249 <string>com.cocoatech.pathfinder.SMFHelper7</string>

250 <key>MachServices</key>

251 <dict>

252 <key>com.cocoatech.pathfinder.SMFHelper7_service</key>

253 <true/>

254 </dict>

255 <key>Program</key>

256 <string>/Library/PrivilegedHelperTools/com.cocoatech.pathfinder.SMFHelper7</str ing>

257 <key>ProgramArguments</key>

258 <array>

259 <string>/Library/PrivilegedHelperTools/com.cocoatech.pathfinder.SMFHelper7</str ing>

260 </array>

261 <key>ThrottleInterval</key>

262 <integer>0</integer>

263 </dict>

264 </plist>

265

266 Contents of /Library/LaunchDaemons/com.equinux.VPNTracker9.agent.plist

267 - mod date: Nov 25 11:57:28 2015

268 - size (B): 848

269 - checksum: 4292790197

270

271 <?xml version="1.0" encoding="UTF-8"?>

272 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

273 <plist version="1.0">

274 <dict>

275 <key>EnvironmentVariables</key>

276 <dict/>

277 <key>Label</key>

278 <string>com.equinux.VPNTracker9.agent</string>

279 <key>Program</key>

280 <string>/Library/PrivilegedHelperTools/com.equinux.VPNTracker9.agent</string>

281 <key>ProgramArguments</key>

282 <array>

283 <string>/Library/PrivilegedHelperTools/com.equinux.VPNTracker9.agent</string>

284 </array>

285 <key>Sockets</key>

286 <dict>

287 <key>IPCSocket</key>

288 <dict>

289 <key>SockFamily</key>

290 <string>Unix</string>

291 <key>SockPathMode</key>

292 <integer>438</integer>

293 <key>SockPathName</key>

294 <string>/var/run/com.equinux.VPNTracker9.agent.socket</string>

295 <key>SockType</key>

296

297 ...and 5 more line(s)

298

299 Contents of /Library/LaunchDaemons/com.eset.esets_daemon.plist

300 - mod date: Sep 25 19:46:24 2015

301 - size (B): 747

302 - checksum: 1927717527

303

304 <?xml version="1.0" encoding="UTF-8"?>

305 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

306 <plist version="1.0">

307 <dict>

308 <key>Label</key>

309 <string>com.eset.esets_daemon</string>

310 <key>Program</key>

311 <string>/Applications/ESET Cyber Security.app/Contents/MacOS/esets_ctl</string>

312 <key>RunAtLoad</key>

313 <true/>

314 <key>RootDirectory</key>

315 <string>/</string>

316 <key>KeepAlive</key>

317 <false/>

318 <key>AbandonProcessGroup</key>

319 <false/>

320 <key>ExitTimeOut</key>

321 <integer>65</integer>

322 <key>SoftResourceLimits</key>

323 <dict>

324 <key>NumberOfFiles</key>

325 <integer>1024</integer>

326 </dict>

327 <key>HardResourceLimits</key>

328 <dict>

329

330 ...and 5 more line(s)

331

332 Contents of /Library/LaunchDaemons/com.objectiveSee.blockblock.plist

333 - mod date: Nov 23 14:38:42 2015

334 - size (B): 479

335 - checksum: 2337293076

336

337 <?xml version="1.0" encoding="UTF-8"?>

338 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

339 <plist version="1.0">

340 <dict>

341 <key>AbandonProcessGroup</key>

342 <true/>

343 <key>Label</key>

344 <string>com.objectiveSee.blockblock.daemon</string>

345 <key>ProgramArguments</key>

346 <array>

347 <string>/Applications/BlockBlock.app/Contents/MacOS/BlockBlock</string>

348 <string>daemon</string>

349 </array>

350 <key>RunAtLoad</key>

351 <true/>

352 </dict>

353 </plist>

354

355 Contents of /Library/LaunchDaemons/com.sparklabs.ViscosityHelper.plist

356 - mod date: Nov 24 21:04:30 2015

357 - size (B): 809

358 - checksum: 2509418150

359

360 <?xml version="1.0" encoding="UTF-8"?>

361 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

362 <plist version="1.0">

363 <dict>

364 <key>Label</key>

365 <string>com.sparklabs.ViscosityHelper</string>

366 <key>Program</key>

367 <string>/Library/PrivilegedHelperTools/com.sparklabs.ViscosityHelper</string>

368 <key>ProgramArguments</key>

369 <array>

370 <string>/Library/PrivilegedHelperTools/com.sparklabs.ViscosityHelper</string>

371 </array>

372 <key>Sockets</key>

373 <dict>

374 <key>MasterSocket</key>

375 <dict>

376 <key>SockFamily</key>

377 <string>Unix</string>

378 <key>SockPathMode</key>

379 <integer>438</integer>

380 <key>SockPathName</key>

381 <string>/var/run/com.sparklabs.ViscosityHelper.socket</string>

382 <key>SockType</key>

383 <string>Stream</string>

384 </dict>

385

386 ...and 3 more line(s)

387

388 Contents of /Library/LaunchDaemons/com.varonis.DatAnywhere.Injector.plist

389 - mod date: Oct 3 06:35:52 2015

390 - size (B): 593

391 - checksum: 1622748902

392

393 <?xml version="1.0" encoding="UTF-8"?>

394 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

395 <plist version="1.0">

396 <dict>

397 <key>Label</key>

398 <string>com.varonis.DatAnywhere.Injector</string>

399 <key>MachServices</key>

400 <dict>

401 <key>com.varonis.DatAnywhere.Injector.mach</key>

402 <true/>

403 </dict>

404 <key>Program</key>

405 <string>/Library/PrivilegedHelperTools/com.varonis.DatAnywhere.Injector</string >

406 <key>ProgramArguments</key>

407 <array>

408 <string>/Library/PrivilegedHelperTools/com.varonis.DatAnywhere.Injector</string >

409 </array>

410 </dict>

411 </plist>

412

413 Contents of /Library/LaunchDaemons/com.varonis.DatAnywhere.Installer.plist

414 - mod date: Oct 3 06:35:51 2015

415 - size (B): 597

416 - checksum: 3585503937

417

418 <?xml version="1.0" encoding="UTF-8"?>

419 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

420 <plist version="1.0">

421 <dict>

422 <key>Label</key>

423 <string>com.varonis.DatAnywhere.Installer</string>

424 <key>MachServices</key>

425 <dict>

426 <key>com.varonis.DatAnywhere.Installer.mach</key>

427 <true/>

428 </dict>

429 <key>Program</key>

430 <string>/Library/PrivilegedHelperTools/com.varonis.DatAnywhere.Installer</strin g>

431 <key>ProgramArguments</key>

432 <array>

433 <string>/Library/PrivilegedHelperTools/com.varonis.DatAnywhere.Installer</strin g>

434 </array>

435 </dict>

436 </plist>

437

438 Contents of /Library/LaunchDaemons/org.virtualbox.startup.plist

439 - mod date: Nov 19 19:35:07 2015

440 - size (B): 76

441 - checksum: 3094394405

442

443 <?xml version="1.0" encoding="UTF-8"?>

444 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

445 <plist version="1.0">

446 <dict>

447 <key>Label</key> <string>org.virtualbox.startup</string>

448 <key>Disabled</key> <false/>

449 <key>RunAtLoad</key> <true/>

450 <key>KeepAlive</key> <false/>

451 <key>LaunchOnlyOnce</key> <true/>

452 <key>ProgramArguments</key>

453 <array>

454 <string>/Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh</string>

455 <string>restart</string>

456 </array>

457 </dict>

458 </plist>

459

460 Contents of /private/etc/pam.d/esets

461 - mod date: Nov 26 08:29:49 2015

462 - size (B): 210

463 - checksum: 1921608844

464

465 auth required pam_opendirectory.so nullok

466 account required pam_permit.so

467 password required pam_deny.so

468 session required pam_permit.so

469

470 Contents of Library/LaunchAgents/com.google.keystone.agent.plist

471 - mod date: Oct 3 15:31:50 2015

472 - size (B): 799

473 - checksum: 1876572684

474

475 <?xml version="1.0" encoding="UTF-8"?>

476 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

477 <plist version="1.0">

478 <dict>

479 <key>Label</key>

480 <string>com.google.keystone.user.agent</string>

481 <key>LimitLoadToSessionType</key>

482 <string>Aqua</string>

483 <key>ProgramArguments</key>

484 <array>

485 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>

486 <string>-runMode</string>

487 <string>ifneeded</string>

488 </array>

489 <key>RunAtLoad</key>

490 <true/>

491 <key>StartInterval</key>

492 <integer>3523</integer>

493 <key>StandardErrorPath</key>

494 <string>/dev/null</string>

495 <key>StandardOutPath</key>

496 <string>/dev/null</string>

497 </dict>

498 </plist>

499

500 Contents of Library/LaunchAgents/com.objectiveSee.blockblock.plist

501 - mod date: Nov 23 14:38:43 2015

502 - size (B): 520

503 - checksum: 3558375073

504

505 <?xml version="1.0" encoding="UTF-8"?>

506 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

507 <plist version="1.0">

508 <dict>

509 <key>AbandonProcessGroup</key>

510 <true/>

511 <key>Label</key>

512 <string>com.objectiveSee.blockblock.agent</string>

513 <key>ProgramArguments</key>

514 <array>

515 <string>/Applications/BlockBlock.app/Contents/MacOS/BlockBlock</string>

516 <string>agent</string>

517 </array>

518 <key>RunAtLoad</key>

519 <true/>

520 <key>firstTime</key>

521 <string>NO</string>

522 </dict>

523 </plist>

524

525 Contents of Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist

526 - mod date: Nov 19 19:35:09 2015

527 - size (B): 677

528 - checksum: 3654809970

529

530 <?xml version="1.0" encoding="UTF-8"?>

531 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

532 <plist version="1.0">

533 <dict>

534 <key>Disabled</key>

535 <true/>

536 <key>KeepAlive</key>

537 <false/>

538 <key>Label</key>

539 <string>org.virtualbox.vboxwebsvc</string>

540 <key>Program</key>

541 <string>/Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv</string>

542 <key>Sockets</key>

543 <dict>

544 <key>Listeners</key>

545 <dict>

546 <key>SockServiceName</key>

547 <string>18083</string>

548 <key>SockType</key>

549 <string>stream</string>

550 <key>SockFamily</key>

551 <string>IPv4</string>

552 </dict>

553 </dict>

554 </dict>

555

556 ...and 1 more line(s)

557

558 Bad plists

559

560 Library/Preferences/com.screenlabs.Orange.plist

561 Library/Preferences/org.boxsource.Satellite.plist

562

563 User login items

564

565 iTunesHelper

566 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

567 Contacts

568 - /Applications/Contacts.app

569 Calendar

570 - /Applications/Calendar.app

571 Mail

572 - /Applications/Mail.app

573 Messages

574 - /Applications/Messages.app

575 Path Finder

576 - /Applications/Path Finder.app

577 DatAnywhere

578 - /Applications/DatAnywhere.app

579 VMware Fusion Start Menu

580 - /Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app

581 Google Drive

582 - /Applications/Google Drive.app

583 HyperDock Helper

584 - /Library/PreferencePanes/HyperDock.prefpane/Contents/Resources/HyperDock Helper.app

585 Google Photos Backup

586 - /Applications/Google Photos Backup.app

587 BitTorrent Sync

588 - missing value

589 Bleep

590 - missing value

591 Google Chrome

592 - /Applications/Google Chrome.app

593 CCC User Agent

594 - /Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app

595 WaltrAgent

596 - missing value

597 Flickr Uploadr

598 - missing value

599 ESET Cyber Security

600 - /Applications/ESET Cyber Security.app

601

602 Safari extensions

603

604 1Password

605 - com.agilebits.onepassword4-safari

606 AdBlock

607 - com.betafish.adblockforsafari

608 Ghostery

609 - com.betteradvertising.ghostery

610

611 iCloud errors

612

613 cloudd 35

614 bird 8

615 comapple.CloudPhotosConfiguration 1

616 Finder 1

617

618 Continuity errors

619

620 sharingd 28

621

622 Restricted files: 191

623

624 Lockfiles: 6

625

626 Global prefs (user)

627

628 ContextMenuGesture = 1

629

630 Extensions

631

632 /Library/Extensions/LittleSnitch.kext

633 - at.obdev.nke.LittleSnitch

634 /Library/Extensions/com.equinux.VPNTracker9.kext

635 - com.equinux.VPNTracker9

636

637 Applications

638

639 /Applications/WinBox.app

640 - 50874520349566134.wineskin.prefs

641 /Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app

642 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf

643 /Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

644 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo

645 /Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app:́vání Google:

646 - N/A

647 /Users/USER/Applications/Chrome Apps.localized/Default ejidjjhkpiempkbhmpbfngldlkglhimk.app

648 - com.google.Chrome.app.Default-ejidjjhkpiempkbhmpbfngldlkglhimk

649 /Users/USER/Applications/Chrome Apps.localized/Default ejjicmeblgpmajnghnpcppodonldlgfn.app

650 - com.google.Chrome.app.Default-ejjicmeblgpmajnghnpcppodonldlgfn

651 /Users/USER/Applications/Chrome Apps.localized/Default knipolnnllmklapflnccelgolnpehhpl.app

652 - com.google.Chrome.app.Default-knipolnnllmklapflnccelgolnpehhpl

653 /Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app

654 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia

655 /Users/USER/Documents/copy/Desktop/Desktop/AirRadar.app

656 - com.koingosw.AirRadar

657 /Users/USER/Documents/copy/Desktop/Desktop/CLIX/CLIX-32/CLIX.app

658 - com.rixstep.CLIX

659 /Users/USER/Documents/copy/Desktop/Desktop/CLIX/CLIX-64/CLIX.app

660 - com.rixstep.CLIX

661 /Users/USER/Documents/copy/Desktop/Desktop/SpotlightMetadata.app

662 - com.HAMSoft.SpotlightMetadata

663 /Users/USER/Documents/copy/Desktop/Desktop/Vidnik.app

664 - com.google.code.vidnik

665 /Users/USER/Documents/copy/Desktop/Desktop/World of Goo.app

666 - com.2dboy.wog

667 /Users/USER/Documents/copy/Desktop/Desktop/iPhoneTracker.app

668 - com.yourcompany.iPhoneTracker

669 /Users/USER/Documents/copy/Downloads/GoodReaderUSB.app

670 - com.goodiware.GoodReaderUSB

671 /Users/USER/Documents/copy/Downloads/ImageOptim.app

672 - net.pornel.ImageOptim

673 /Users/USER/Documents/copy/Downloads/Sachesi-2.app

674 - com.yourcompany.Sachesi

675 /Users/USER/Documents/copy/Downloads/Sachesi-3.app

676 - com.yourcompany.Sachesi

677 /Users/USER/Documents/copy/Downloads/WhatsMac.app

678 - com.samstone.WhatsMac

679 /Users/USER/Downloads/teleport/teleport.app

680 - com.abyssoft.teleport

681 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

682 - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

683 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

684 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

685 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

686 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

687 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app:́vání Google:

688 - N/A

689 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_ejidjjhkpiempkbhmpbfngldlkglhimk/Default ejidjjhkpiempkbhmpbfngldlkglhimk.app

690 - com.google.Chrome.app.Default-ejidjjhkpiempkbhmpbfngldlkglhimk-internal

691 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_ejjicmeblgpmajnghnpcppodonldlgfn/Default ejjicmeblgpmajnghnpcppodonldlgfn.app

692 - com.google.Chrome.app.Default-ejjicmeblgpmajnghnpcppodonldlgfn-internal

693 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_kkgpfcbanbnipdjijjaljkhhlhaiehpo/Default kkgpfcbanbnipdjijjaljkhhlhaiehpo.app

694 - com.google.Chrome.app.Default-kkgpfcbanbnipdjijjaljkhhlhaiehpo-internal

695 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_knipolnnllmklapflnccelgolnpehhpl/Default knipolnnllmklapflnccelgolnpehhpl.app

696 - com.google.Chrome.app.Default-knipolnnllmklapflnccelgolnpehhpl-internal

697 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

698 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

699 /Users/USER/Library/Application Support/WebEx Folder/Add-ons/Cisco WebEx Start.app

700 - com.cisco.webex.Cisco-WebEx-Start

701 /Users/USER/Library/Printers/Assistant Xerox.app

702 - com.apple.print.PrinterProxy

703 /Users/USER/Library/Printers/OKI-MC352-B61DF7.app

704 - com.apple.print.PrinterProxy

705

706 Frameworks

707

708 /Library/Frameworks/mach_inject_bundle.framework

709 - com.rentzsch.mach_inject_bundle

710

711 PrefPane

712

713 /Library/PreferencePanes/HyperDock.prefpane

714 - de.bahoom.HyperDock.prefpane

715 /Library/PreferencePanes/Tuxera NTFS.prefPane

716 - com.tuxera.ntfs.mac.prefpane

717

718 Bundles

719

720 /Library/Internet Plug-Ins/WebVideoPlugin.plugin

721 - com.hikvision.WebVideoPlugin

722 /Users/USER/Library/Address Book Plug-Ins/SkypeABCaller.bundle

723 - com.skype.SkypeABCaller

724 /Users/USER/Library/Address Book Plug-Ins/SkypeABChatter.bundle

725 - com.skype.SkypeABChatter

726 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

727 - com.skype.skypeabdialer

728 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

729 - com.skype.skypeabsms

730 /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin

731 - com.macromedia.PepperFlashPlayer.pepper

732 /Users/USER/Library/Internet Plug-Ins/WebEx64.plugin

733 - com.cisco_webex.plugin.gpc64

734

735 Bundles (new)

736

737 /Applications/AppDelete.app

738 - com.apps4macs.AppDelete

739 /Applications/BlockBlock.app

740 - com.objectivesee.BlockBlock

741 /Applications/Little Snitch Configuration.app

742 - at.obdev.LittleSnitchConfiguration

743 /Applications/Path Finder.app

744 - com.cocoatech.PathFinder

745 /Applications/VPN Tracker 9.app

746 - com.equinux.VPNTracker9

747 /Applications/VirtualBox.app

748 - org.virtualbox.app.VirtualBox

749 /Applications/Viscosity.app

750 - com.viscosityvpn.Viscosity

751 /Library/Little Snitch/Little Snitch Agent.app

752 - at.obdev.LittleSnitchAgent

753 /Library/Little Snitch/Little Snitch Daemon.bundle

754 - at.obdev.LittleSnitchDaemon

755 /Library/Little Snitch/Little Snitch Network Monitor.app

756 - at.obdev.LittleSnitchNetworkMonitor

757 /Library/Little Snitch/Little Snitch Software Update.app

758 - at.obdev.LittleSnitchSoftwareUpdate

759 /Library/Little Snitch/Little Snitch Uninstaller.app

760 - at.obdev.LittleSnitchUninstaller

761 /System/Library/Intelligent Suggestions/Assets.suggestionsassets

762 - com.apple.MobileAsset.CoreSuggestions

763 /Users/USER/Applications/Chrome Apps.localized/Default knipolnnllmklapflnccelgolnpehhpl.app

764 - com.google.Chrome.app.Default-knipolnnllmklapflnccelgolnpehhpl

765 /Users/USER/Downloads/DHS.app

766 - com.objective-see.DHS

767 /Users/USER/Downloads/KextViewr.app

768 - com.objective-see.KextViewr

769 /Users/USER/Downloads/KnockKnock.app

770 - com.objective-see.KnockKnock

771 /Users/USER/Downloads/TaskExplorer.app

772 - com.objective-see.TaskExplorer

773 /Users/USER/Library/Application Support/Flickr/UpdateCache/1448284540/Flickr Uploadr.app

774 - com.yahoo.flickrmac

775 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_knipolnnllmklapflnccelgolnpehhpl/Default knipolnnllmklapflnccelgolnpehhpl.app

776 - com.google.Chrome.app.Default-knipolnnllmklapflnccelgolnpehhpl-internal

777

778 Library paths

779

780 /Users/USER/Documents/DatAnywhere/FD_Sandro/001_Sandro/Sandro/1Password/Extensi ons/30700/EMAIL/components/libosxform_xpcom.dylib

781 /Users/USER/Documents/DatAnywhere/FD_Sandro/001_Sandro/Sandro/1Password/Extensi ons/30709/EMAIL/components/libosxform_xpcom.dylib

782 /Users/USER/Documents/copy/Documents/Password/1Password/Extensions/31419/EMAIL/ components/libosxform_xpcom.dylib

783 /Users/USER/Documents/copy/Documents/Password/1Password/Extensions/31419/EMAIL/ components/libosxform_xpcom.dylib

784 /Users/USER/Documents/copy/Documents/Password/1Password/Extensions/31499/EMAIL/ components/libosxform_xpcom.dylib

785 /Users/USER/Documents/copy/Documents/Password/1Password/Extensions/31499/EMAIL/ components/libosxform_xpcom.dylib

786 /Users/USER/Documents/copy/Documents/Password/1Password/Extensions/32009/EMAIL/ components/libosxform_xpcom.dylib

787 /Users/USER/Documents/copy/Documents/Password/1Password/Extensions/32009/EMAIL/ components/libosxform_xpcom.dylib

788 /Users/USER/Library/Application Support/Firefox/Profiles/eg714s2a.default/gmp-gmpopenh264/1.4/libgmpopenh264.dy lib

789 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.824/_platform_specific/mac_x64/libwidev inecdm.dylib

790 /Users/USER/Library/Application Support/WebEx Folder/1524/cmcrypto-29.13.0.2.dylib

791 /Users/USER/Library/Application Support/WebEx Folder/1524/libcrypto-0.2.5.4.dylib

792 /Users/USER/Library/Application Support/WebEx Folder/1524/libssl-0.2.5.4.dylib

793 /Users/USER/Library/Application Support/WebEx Folder/1524/xml-29.0.0.1.dylib

794

795 App extensions

796

797 com.agilebits.onepassword-osx.safariextensioncompanion

798 com.google.GoogleDrive.FinderSyncAPIExtension

799 com.pixelmatorteam.pixelmator.Repair-Tool-Action-Extension

800 com.pixelmatorteam.pixelmator.photos-distort-extension

801 com.varonis.DatAnywhere.DNFinderSync

802

803 Modifications

804

805 file missing: /Applications/Fotolab Fotosvet.app/Contents/Resources/photofun/icons/svg_not_ready_2.svg

806 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat

807 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/darwin.iso

808 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/darwin.iso.sig

809 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/freebsd.iso

810 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/freebsd.iso.sig

811 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/linux.iso

812 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/linux.iso.sig

813 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/netware.iso

814 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/netware.iso.sig

815 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/solaris.iso

816 file added: /Applications/VMware Fusion.app/Contents/Library/isoimages/solaris.iso.sig

817 ...

818 file modified: /Library/Frameworks/mach_inject_bundle.framework/Versions/Current/Resources/mac h_inject_bundle_stub.bundle/Contents/MacOS/mach_inject_bundle_stub

819

820 Bad kernel extensions

821

822 /System/Library/Extensions/AppleOSXUSBNCM.kext

823

824 Installations

825

826 Oracle VM VirtualBox: 19.11.15 19:35

827 TeamViewer: 12.11.15 11:44

828 WiFi Scanner: 12.11.15 8:21

829 Microsoft Remote Desktop: 05.11.15 20:55

830 iThoughtsX: 05.11.15 8:19

831

832 Elapsed time (sec): 587

Nov 26, 2015 6:52 AM in response to samiczch

Please remove "ESET". Never install any "anti-virus" or "anti-malware" product again.

Any third-party software that doesn't install from the App Store or by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

Nov 26, 2015 10:52 AM in response to samiczch

Mac users often ask whether they should install "anti-virus" (AV) or "anti-malware" software. The short answer is "no," but it may give the wrong impression that there is no threat from what are loosely called "viruses." There is a threat.

1. This is a comment on what you should—and should not—do to protect yourself from malicious software ("malware") that circulates on the Internet and gets onto a computer as an unintended consequence of the user's actions.

It does not apply to software, such as keystroke loggers, that may be installed deliberately by an intruder who has hands-on access to the computer, or who has been able to take control of it remotely. That threat is in a different category, and there's no easy way to defend against it. AV software is not intended to, and does not, defend against such attacks.

The comment is long because the issue is complex. The key points are in sections 5 and 11.

OS X now implements three layers of built-in protection specifically against malware, not counting runtime protections such as file quarantine, execute disable, sandboxing, system integrity protection, system library randomization, and address space layout randomization that may also guard against other kinds of exploits.

2. All versions of OS X since 10.6.7 have been able to detect known Mac malware in downloaded files, and to block insecure web plugins. This feature is transparent to the user. Internally Apple calls it "XProtect."

The malware recognition database used by XProtect is automatically updated; however, you shouldn't rely on it, because the attackers are always at least a day ahead of the defenders.

The following caveats apply to XProtect:

☞ It can be bypassed by some third-party networking software, such as BitTorrent clients and Java applets.

☞ It only applies to software downloaded from the network. Software installed from a CD or other media is not checked.

As new versions of OS X are released, it's not clear whether Apple will indefinitely continue to maintain the XProtect database of older versions such as 10.6. The security of obsolete system versions may eventually be degraded. Security updates to the code of obsolete systems will stop being released at some point, and that may leave them open to other kinds of attack besides malware.

3. Starting with OS X 10.7.5, there has been a second layer of built-in malware protection, designated "Gatekeeper" by Apple. By default, applications and Installer packages downloaded from the network will only run if they're digitally signed by a developer with a certificate issued by Apple. Software certified in this way hasn't been checked for security by Apple unless it comes from the App Store, but you can be reasonably sure that it hasn't been modified by anyone other than the developer. His identity is known to Apple, so he could be held legally responsible if he distributed malware. That may not mean much if the developer lives in a country with a weak legal system (see below.)

Gatekeeper doesn't depend on a database of known malware. It has, however, the same limitations as XProtect, and in addition the following:

☞ It can easily be disabled or overridden by the user.

☞ A malware attacker could find a way around it, or could get control of a code-signing certificate under false pretenses, or could simply ignore the consequences of distributing codesigned malware.

☞ An App Store developer could find a way to bypass Apple's oversight, or the oversight could fail due to human error.

Apple has taken far too long to revoke the codesigning certificates of some known abusers, thereby diluting the value of Gatekeeper and the Developer ID program. Those lapses don't involve App Store products, however.

For the reasons given, App Store products, and—to a lesser extent—other applications recognized by Gatekeeper as signed, are safer than others, but they can't be considered absolutely safe. "Sandboxed" applications may prompt for access to private data, such as your contacts, or for access to the network. Think before granting that access. Sandbox security is based on user input. Never click through any request for authorization without thinking.

4. Starting with OS X 10.8.3, a third layer of protection has been added: a "Malware Removal Tool" (MRT). MRT runs automatically in the background. It checks for, and removes, malware that matches a recognition database maintained by Apple. To ensure that MRT will run when that database is updated, open the App Store pane in System Preferences and check the box marked

Install system data files and security updates

if it's not already checked.

Like XProtect, MRT is effective against known threats, but not against unknown ones. It notifies you if it finds malware, but otherwise it has no user interface.

5. The built-in security features of OS X reduce the risk of malware attack, but they are not, and never will be, complete protection. Malware is a problem of human behavior, not machine behavior, and no technological fix alone is going to solve it. Trusting software to protect you will only make you more vulnerable.

The best defense is always going to be your own intelligence. With the possible exception of Java exploits, all known malware circulating on the Internet that affects a fully-updated installation of OS X 10.6 or later takes the form of so-called "Trojan horses," which can only have an effect if the victim is duped into running them. The threat therefore amounts to a battle of wits between you and Internet criminals. If you're better informed than they think you are, you'll win. That means, in effect, that you always stay within a safe harbor of computing practices. How do you know when you're leaving the safe harbor? Below are some warning signs of danger.

Software from an untrustworthy source

☞ Software with a corporate brand, such as Adobe Flash Player, doesn't come directly from the developer’s website. Do not trust an alert from any website to update Flash, or your browser, or any other software. A genuine alert that Flash is outdated and blocked is shown on this support page. Follow the instructions on the support page in that case. Otherwise, assume that the alert is fake and someone is trying to scam you into installing malware. If you see such alerts on more than one website, ask for instructions.

☞ Software of any kind is distributed via BitTorrent, or Usenet, or on a website that also distributes pirated music or movies.

☞ Rogue websites such as CNET Download, MacUpdate, Soft32, Softonic, and SourceForge distribute free applications that have been packaged in a superfluous "installer."

☞ The software is advertised by means of spam or intrusive web ads. Any ad, on any site, that includes a direct link to a download should be ignored.

Software that is plainly illegal or does something illegal

☞ High-priced commercial software such as Photoshop is "cracked" or "free."

☞ An application helps you to infringe copyright, for instance by circumventing the copy protection on commercial software, or saving streamed media for reuse without permission. All "YouTube downloaders" are in this category, though not all are necessarily malicious.

Conditional or unsolicited offers from strangers

☞ A telephone caller or a web page tells you that you have a “virus” and offers to help you remove it. (Some reputable websites did legitimately warn visitors who were infected with the "DNSChanger" malware. That exception to this rule no longer applies.)

☞ A web site offers free content such as video or music, but to use it you must install a “codec,” “plug-in,” "player," "downloader," "extractor," or “certificate” that comes from that same site, or an unknown one.

☞ You win a prize in a contest you never entered.

☞ Someone on a message board such as this one is eager to help you, but only if you download an application of his choosing.

☞ A "FREE WI-FI !!!" network advertises itself in a public place such as an airport, but is not provided by the management.

☞ Anything online that you would expect to pay for is "free."

Unexpected events

☞ A file is downloaded automatically when you visit a web page, with no other action on your part. Delete any such file without opening it.

☞ You open what you think is a document and get an alert that it's "an application downloaded from the Internet." Click Cancel and delete the file. Even if you don't get the alert, you should still delete any file that isn't what you expected it to be.

☞ An application does something you don't expect, such as asking for permission to access your contacts, your location, or the Internet for no obvious reason.

☞ Software is attached to email that you didn't request, even if it comes (or seems to come) from someone you trust.

I don't say that leaving the safe harbor just once will necessarily result in disaster, but making a habit of it will weaken your defenses against malware attack. Any of the above scenarios should, at the very least, make you uncomfortable.

6. Java on the Web (not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.

Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.

Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable itnot JavaScript—in your browsers.

Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a padlock icon in the address bar when visiting a secure site.

7. Another perennial weak point is Adobe Flash Player. Like Java, Flash is in well-deserved decline, but Flash content is still much more widespread than Java content on the Web. If you choose to install the Flash plugin, you can reduce your exposure to Flash by checking the box marked

Stop plug-ins to save power

in Advanced tab of the Safari preferences window, if it's not already checked. Consider also installing a Safari extension such as "ClickToFlash" or "ClickToPlugin." They will prevent Flash content from loading automatically, and will also cause non-Flash video to be substituted for Flash on YouTube and maybe some other sites. I've tested those extensions and found them safe, but you should always do your own research before deciding whether to trust any third-party software.

8. Stay within the safe harbor, and you’ll be as safe from malware as you can practically be. The rest of this comment concerns what you should not do to protect yourself.

Never install any AV or "Internet security" products for the Mac if you have a choice, as they are all worse than useless. If you are required by a (mistaken) institutional policy to install some kind of AV, pick one of the free apps in the Mac App Store—nothing else.

Why shouldn't you use AV products?

☞ To recognize malware, the software depends on a database of known threats, which is always at least a day out of date. This technique is a proven failure, as a major AV software vendor has admitted. Most attacks are "zero-day"—that is, previously unknown. Recognition-based AV does not defend against such attacks, and the enterprise IT industry is coming to the realization that traditional AV software is worthless.

☞ The design is usually predicated on the nonexistent threat that malware may be injected at any time, anywhere in the file system. Malware is downloaded from the network; it doesn't materialize from nowhere. In order to meet that nonexistent threat, commercial AV software modifies or duplicates low-level functions of the operating system, which is a waste of resources and a common cause of instability, bugs, and poor performance.

☞ By modifying the operating system, the software may also create weaknessesthat could be exploited by malware attackers.

☞ Most importantly, a false sense of security is dangerous. That fact pertains to all AV software there will ever be, no matter what else changes.

9. A free AV product from the Mac App Store is harmless as long you don't let it delete or move any files. Ignore any warnings it may give you about "heuristics" or "phishing." Those warnings, if they're not merely false positives, refer to the text of email messages or cached web pages, not to malware.

An AV app is not needed, and can't be relied upon, for protection against OS X malware. It's useful, if at all, only for detecting Windows malware, and even for that use it's not really effective, because new Windows malware is emerging much faster than OS X malware.

Windows malware can't harm you directly (unless, of course, you use Windows.) Just don't pass it on to anyone else. A malicious attachment in email is usually easy to recognize by the name alone. An actual example:

London Terror Moovie.avi [124 spaces] Checked By Norton Antivirus.exe

You don't need software to tell you that's a Windows trojan. Software may be able to tell you which trojan it is, but who cares? In practice, there's no reason to use recognition software unless an organizational policy requires it. Windows malware is so widespread that you should assume it's in every email attachment until proven otherwise. Nevertheless, a free AV product from the App Store may serve a purpose if it satisfies an ill-informed network administrator who says you must have some kind of AV application. An App Store product won't modify the operating system; in fact, it won't do anything unless you run it.

If you're just curious as to whether a file is recognized as malware by AV engines, you can upload it to the "VirusTotal" website, where it will be tested against most of them at no charge. A negative result is no proof of anything, for the reasons stated above. I don't recommend doing this with a file that might contain private information.

10. It seems to be a common belief that the built-in Application Firewall acts as a barrier to infection, or prevents malware from functioning. It does neither. It blocks inbound connections to certain network services you're running, such as file sharing. It's disabled by default and you should leave it that way if you're behind a router on a private home or office network. Activate it only when you're on an untrusted network, for instance a public Wi-Fi hotspot, where you don't want to provide services. Disable any services you don't use in the Sharing preference pane. All are disabled by default.

11. As a Mac user, you don't have to live in fear that your computer may be infected every time you install software, read email, or visit a web page. But neither can you assume that you will always be safe from exploitation, no matter what you do. Navigating the Internet is like walking the streets of a big city. It can be as safe or as dangerous as you choose to make it. The greatest harm done by AV software is precisely its selling point: it makes people feel safe. They may then feel safe enough to take risks from which the software doesn't protect them. Nothing can lessen the need for safe computing practices.

after +- 10 min http not work but https works

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.