Safari crashing when opening ONLY lastpass.com - all other websites and content (Flash etc) fine

Question

Level 1

0 points

Safari crashing when opening ONLY lastpass.com - all other websites and content (Flash etc) fine

Have been trying to fix a problem with my Safari for the last few weeks, and have tried all the standard fixes. Version 9.0.2 (11601.3.9)

The problem:

Attempt to navigate to www.lastpass.com, whether by typing in or clicking link from google. Safari hangs and gives pinwheel of death. CPU goes to 100%, usually by process "Safari Networking". Have to force close and reopen Safari to use. Can't just close the tab like you normally can if a tab hangs. All other websites and content types are fine.

This is on a background of random intermittent (once a week) events where Safari Networking CPU usage will go to 100% on any random website. Fixed only by force close, but no clear trigger.

My attempted fixes so far, all with restarts in betwen:

1. Remove all extensions (Ublock, RES, Dashlane)

2. Uninstall Dashlane desktop app

3. Remove all Safari caches, databases, preferences etc as per the guides

4. Disable all plugins

5. Attempt to use Chrome (was already installed) - has the exact same problem with only lastpass.com. All other websites fine.

6. Checked hosts file, appeared normal (was thinking of things that affect both Safari and Chrome)

7. Booted into safe mode - Safari functions normally but still has exactly the same problem with lastpass.com

8. Other user accounts succesfully load the website in Safari with no problems, as do other computers in the house

9. Uninstalled Flash - didn't fix (and was already disabled anyway). Also noted that it's an HTML5 video on the lastpass.com site

10. Reinstalled OSX - didn't fix. Other user accounts can still successfully load the site.

Crash reports and Console:

The only message I receive in console when the hang happens is:

10/12/2015 12:52:41.055 AM ReportCrash[9621]: Invoking spindump for pid=6651 thread=67683 percent_cpu=73 duration=124 because of excessive cpu utilization

With pid corresponding to safari networking.

No User Diagnostic Reports ever show up.

Thanks in advance for your help.

Here's Etrecheck:

EtreCheck version: 2.6.6 (226)

Report generated 10/12/2015, 12:51 AM

Runtime 2:14

Download EtreCheck from http://etrecheck.com

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: (What does this mean?)

MacBook Air (13-inch, Mid 2011)

[Click for Technical Specifications]

[Click for User Guide]

MacBook Air - model: MacBookAir4,2

1 1.7 GHz Intel Core i5 CPU: 2-core

4 GB RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1333 MHz ok

BANK 1/DIMM0

2 GB DDR3 1333 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 341 - SN = D8620920854DKRNAG

Video Information: (What does this mean?)

Intel HD Graphics 3000

Color LCD 1440 x 900

System Software: (What does this mean?)

OS X El Capitan 10.11.2 (15C50) - Time since boot: about 4 hours

Disk Information: (What does this mean?)

APPLE SSD SM128C disk0 : (121.33 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / [Startup]: 120.10 GB (13.17 GB free) (Low!)

Core Storage: disk0s2 120.47 GB Online

USB Information: (What does this mean?)

Apple Card Reader

Apple Inc. FaceTime Camera (Built-in)

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: (What does this mean?)

Apple Inc. thunderbolt_bus

Configuration files: (What does this mean?)

/etc/sudoers, File size 1302 but expected 2299

/etc/hosts - Count: 1

Gatekeeper: (What does this mean?)

Anywhere

Kernel Extensions: (What does this mean?)

/Applications/InsomniaX.app

[not loaded] org.binaervarianz.driver.insomnia (1.0.0d1 - SDK 10.6) [Click for support]

/Applications/Tether.app

[not loaded] net.tunnelblick.tun (2871) [Click for support]

/Library/Application Support/org.pqrs/Karabiner

[loaded] org.pqrs.driver.Karabiner (10.14.0 - SDK 10.11) [Click for support]

/Library/Extensions

[loaded] com.paragon-software.filesystems.ntfs (83.1.14 - SDK 10.5) [Click for support]

[not loaded] org.virtualbox.kext.VBoxDrv (4.1.18) [Click for support]

[not loaded] org.virtualbox.kext.VBoxNetAdp (4.1.18) [Click for support]

[not loaded] org.virtualbox.kext.VBoxNetFlt (4.1.18) [Click for support]

[not loaded] org.virtualbox.kext.VBoxUSB (4.1.18) [Click for support]

/System/Library/Extensions

[not loaded] au.com.glassechidna.heimdall_usb_shield (6.0) [Click for support]

[not loaded] com.motorola-mobility.driver.MotMobileUSB (1.2.2 - SDK 10.5) [Click for support]

/System/Library/Extensions/MotMobileUSB.kext/Contents/PlugIns

[not loaded] com.motorola-mobility.driver.MotMobileMS (1.0.0 - SDK 10.5) [Click for support]

[not loaded] com.motorola-mobility.driver.MotMobileMTP (1.2.2 - SDK 10.5) [Click for support]

[not loaded] com.motorola-mobility.driver.MotMobileUSBLAN (1.2.2 - SDK 10.5) [Click for support]

[not loaded] com.motorola-mobility.driver.MotMobileUSBLANMerge (1.2.2 - SDK 10.5) [Click for support]

[not loaded] com.motorola-mobility.driver.MotMobileUSBSwch (1.2.2 - SDK 10.5) [Click for support]

Startup Items: (What does this mean?)

VirtualBox: Path: /Library/StartupItems/VirtualBox

Startup items are obsolete in OS X Yosemite

System Launch Daemons: (What does this mean?)

[failed] com.apple.Kerberos.digest-service.plist

Launch Agents: (What does this mean?)

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.google.keystone.agent.plist [Click for support]

[failed] com.motorola.MDMUpdater.plist [Click for support]

[running] com.motorola.motohelper.plist [Click for support]

[loaded] com.motorola.motohelperUpdater.plist [Click for support]

[running] com.paragon-software.NTFS.fsnotifyagent.plist [Click for support]

[loaded] com.paragon.updater.plist [Click for support]

[failed] com.tvmobili.artwork.plist [Click for support]

Launch Daemons: (What does this mean?)

[loaded] com.adobe.SC.FPFeedbackService-1.0.plist [Click for support]

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.google.keystone.daemon.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[running] com.motorola-mobility.mmcfgd.plist [Click for support]

[loaded] com.paragon.NTFS.launch.plist [Click for support]

[failed] com.prey.agent.plist [Click for support]

[loaded] com.skype.skypeinstaller.plist [Click for support]

[failed] local.mini.airprint-hack.plist [Click for support]

[loaded] net.sourceforge.MonolingualHelper.plist [Click for support]

[loaded] org.pqrs.Karabiner.load.plist [Click for support]

[loaded] org.serviio.server.plist [Click for support]

User Launch Agents: (What does this mean?)

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist - /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framewo rk/Versions/A/Support/CSConfigDotMacCert: Executable not found!

[failed] com.facebook.videochat.[redacted].plist [Click for support]

[failed] com.google.GoogleContactSyncAgent.plist [Click for support]

[loaded] org.virtualbox.vboxwebsrv.plist [Click for support]

User Login Items: (What does this mean?)

Flux Application (/Applications/Flux.app)

Karabiner Application (/Applications/Karabiner.app)

BetterTouchTool Application (/Applications/BetterTouchTool.app)

Other Apps: (What does this mean?)

[running] com.apple.xpc.launchd.oneshot.0x10000006.Karabiner_AXNotifier

[running] com.apple.xpc.launchd.oneshot.0x1000000a.BetterTouchTool

[running] com.apple.xpc.launchd.oneshot.0x1000000d.EtreCheck

[running] com.apple.xpc.launchd.oneshot.0x1000000e.VLC

[running] com.hegenberg.BTTRelaunch.113632

[running] com.microsoft.Excel.60192

[running] com.microsoft.autoupdate.fba.4832

[running] org.herf.Flux.52832

[running] org.pqrs.Karabiner.57952

Internet Plug-ins: (What does this mean?)

googletalkbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

FlashPlayer-10.6: Version: 20.0.0.235 - SDK 10.6 [Click for support]

QuickTime Plugin: Version: 7.7.3

Flash Player: Version: 20.0.0.235 - SDK 10.6 [Click for support]

o1dbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

Default Browser: Version: 601 - SDK 10.11

Safari Extensions: (What does this mean?)

Reddit Enhancement Suite

uBlock

3rd Party Preference Panes: (What does this mean?)

Flash Player [Click for support]

FUSE for OS X (OSXFUSE) [Click for support]

Paragon NTFS for Mac ® OS X [Click for support]

Time Machine: (What does this mean?)

Skip System Files: NO

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 120.10 GB Disk used: 106.93 GB

Destinations:

Tom's TM [Local]

Total size: 135.13 GB

Total number of backups: 17

Oldest backup: 2/11/2014, 3:33 PM

Last backup: 29/10/2015, 2:13 AM

Size of backup disk: Too small

Backup size 135.13 GB < (Disk used 106.93 GB X 3)

Top Processes by CPU: (What does this mean?)

12% VLC

4% kernel_task

3% WindowServer

1% coreaudiod

1% fontd

Top Processes by Memory: (What does this mean?)

509 MB kernel_task

336 MB com.apple.WebKit.WebContent(2)

201 MB Safari

98 MB Finder

82 MB softwareupdated

Virtual Memory Information: (What does this mean?)

223 MB Free RAM

3.78 GB Used RAM (995 MB Cached)

108 MB Swap Used

Diagnostics Information: (What does this mean?)

Dec 9, 2015, 08:22:51 PM Self test - passed

Dec 8, 2015, 10:17:47 PM ~/Library/Logs/DiagnosticReports/Spotlight_2015-12-08-221747_[redacted].crash

Standard users cannot read /Library/Logs/DiagnosticReports.

Run as an administrator account to see more information.

MacBook Air (13-inch Mid 2011), OS X El Capitan (10.11.2), Safari 9.0.2 (11601.3.9)

Posted on Dec 9, 2015 6:19 AM

Reply

Answer 1

tommrtn7 Author

Level 1

0 points

Dec 9, 2015 6:50 AM in response to tommrtn7

I just reproduced it in chrome to get a console log:

10/12/2015 1:46:32.071 AM Google Chrome[12019]: NSWindow warning: adding an unknown subview: <FullSizeContentView: 0x7fa7c3274d80>. Break on NSLog to debug.

10/12/2015 1:46:32.076 AM Google Chrome[12019]: Call stack:

(

0 AppKit 0x00007fff8385e4ef -[NSThemeFrame addSubview:] + 107

1 AppKit 0x00007fff8385dfec -[NSView addSubview:positioned:relativeTo:] + 211

2 Google Chrome Framework 0x000000010af93a43 ChromeMain + 51652483

3 Google Chrome Framework 0x000000010af9289c ChromeMain + 51647964

4 Google Chrome Framework 0x000000010afff5d1 ChromeMain + 52093713

5 Google Chrome Framework 0x000000010af5077c ChromeMain + 51377340

6 Google Chrome Framework 0x000000010af5ad22 ChromeMain + 51419746

7 Google Chrome Framework 0x000000010b06ab4e ChromeMain + 52533390

8 Google Chrome Framework 0x000000010b0a3c4a ChromeMain + 52767114

9 Google Chrome Framework 0x000000010b0a3055 ChromeMain + 52764053

10 Google Chrome Framework 0x000000010b0a2a82 ChromeMain + 52762562

11 Google Chrome Framework 0x000000010b0a21bd ChromeMain + 52760317

12 Google Chrome Framework 0x000000010b0a1d0d ChromeMain + 52759117

13 Google Chrome Framework 0x000000010b09fd8f ChromeMain + 52751055

14 Google Chrome Framework 0x000000010b09f9c3 ChromeMain + 52750083

15 Google Chrome Framework 0x000000010b09efb1 ChromeMain + 52747505

16 Google Chrome Framework 0x0000000107ef177f ChromeMain + 656575

17 Google Chrome Framework 0x0000000107ef069a ChromeMain + 652250

18 Google Chrome Framework 0x000000010b2efd4a ChromeMain + 55175818

19 Google Chrome Framework 0x000000010b59ebf7 ChromeMain + 57989431

20 Google Chrome Framework 0x000000010b2ee401 ChromeMain + 55169345

21 Google Chrome Framework 0x000000010b2f220d ChromeMain + 55185229

22 Google Chrome Framework 0x000000010b2ebf4f ChromeMain + 55159951

23 Google Chrome Framework 0x00000001083e445c ChromeMain + 5845404

24 Google Chrome Framework 0x00000001083e3a96 ChromeMain + 5842902

25 Google Chrome Framework 0x0000000107e51302 ChromeMain + 66

26 Google Chrome 0x0000000107e47f39 main + 9

27 Google Chrome 0x0000000107e47f24 Google Chrome + 3876

28 ??? 0x0000000000000001 0x0 + 1

)

Reply

Answer 2

Linc Davis

Level 10

209,739 points

Dec 9, 2015 10:00 PM in response to tommrtn7

Please read this whole message before doing anything.

This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.

Step 1

The purpose of this step is to determine whether the problem is localized to your user account.

Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”

While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.

Test while logged in as Guest. Same problem?

After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.

*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.

Step 2

The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Please take this step regardless of the results of Step 1.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Reply

Answer 3

tommrtn7 Author

Level 1

0 points

Dec 9, 2015 10:03 PM in response to Linc Davis

Step 1:

Safari works perfectly and loads the page.

Step 2:

Safari does not load the page

Reply

Answer 4

Linc Davis

Level 10

209,739 points

Dec 9, 2015 10:08 PM in response to tommrtn7

Please back up all data before proceeding.

Quit Safari if it’s running.

Step 1

Hold down the option key and select

Go ▹ Library

from the Finder menu bar. Delete the following items from the Library folder (some may not exist):

Caches/com.apple.Safari

Caches/com.apple.Safari.SearchHelper

Caches/com.apple.SafariServices

Caches/com.apple.WebKit.PluginProcess

Caches/com.apple.WebProcess

Caches/Metadata/Safari

Preferences/com.apple.WebKit.PluginHost.plist

Preferences/com.apple.WebKit.PluginProcess.plist

Saved Application State/com.apple.Safari.savedState

WebKit/com.apple.Safari

Leave the Library folder open. Try Safari again. If the problem is solved, stop here. Close the Library folder. If you still have a problem, continue.

Step 2

Move the following items from the open Library folder to the Desktop (again, some may not exist):

Cookies/Cookies.binarycookies

Cookies/com.apple.Safari.SearchHelper.binarycookies

Internet Plug-Ins

Preferences/ByHost/com.apple.Safari.*.plist

Preferences/com.apple.Safari.Extensions.plist

Preferences/com.apple.Safari.LSSharedFileList.plist

Preferences/com.apple.Safari.plist

Preferences/com.apple.WebFoundation.plist

PubSub/Database

Safari

SyncedPreferences/com.apple.Safari-com.apple.Safari.UserRequests.plist

SyncedPreferences/com.apple.Safari.plist

Here, "*" stands for a long string of letters, numbers, and dashes.

Note 1: You are not moving the Safari application. You’re moving a folder named “Safari.”

Note 2: This step will remove your Safari extensions, if any, and their settings. If you choose to reinstall them, do so one at a time, testing each time to make sure you haven’t restored the problem.

Try again. Your settings and bookmarks will be lost. The default set of bookmarks will be restored. Delete them all.

If Safari is now working normally (apart from the lost settings), look inside the “Safari” folder on the Desktop for a file named “Bookmarks.plist”. Select

File ▹ Import From ▹ Bookmarks HTML File... (or Import Bookmarks...)

from the Safari menu bar. Import from that file. Recreate the rest of your Safari settings. You can then delete the items you moved to the Desktop.

If the issue is still not resolved, quit Safari again and put all the items you moved to the Desktop back where they were, overwriting the newer ones that may have been created in their place. You don’t need to replace the files you deleted in Step 1. Stop here and post again.

If you don’t like the results of the last step, you can undo it completely by quitting Safari and restoring the items you moved or deleted in that step from your backup, overwriting any that were created in their place.

Reply

Answer 5

tommrtn7 Author

Level 1

0 points

Dec 10, 2015 4:03 AM in response to Linc Davis

Step 1 and 2 do not fix the problem. Safari still hangs and CPU 100% when navigating to lastpass.com. No Safari console messages except:

10/12/2015 10:58:06.286 PM com.apple.Safari.SearchHelper[31425]: Failed to obtain sandbox extension for path=/Users/tommartin/Library/Caches/com.apple.Safari.SearchHelper. Errno:1

Which didn't seem relevant but you never know.

Chrome also still hangs with the following console message:

10/12/2015 10:55:16.123 PM Google Chrome[31281]: Call stack:

(

0 AppKit 0x00007fff8385e4ef -[NSThemeFrame addSubview:] + 107

1 AppKit 0x00007fff8385dfec -[NSView addSubview:positioned:relativeTo:] + 211

2 Google Chrome Framework 0x000000010dec5a43 ChromeMain + 51652483

3 Google Chrome Framework 0x000000010dec489c ChromeMain + 51647964

4 Google Chrome Framework 0x000000010df315d1 ChromeMain + 52093713

5 Google Chrome Framework 0x000000010de8277c ChromeMain + 51377340

6 Google Chrome Framework 0x000000010de8cd22 ChromeMain + 51419746

7 Google Chrome Framework 0x000000010df9cb4e ChromeMain + 52533390

8 Google Chrome Framework 0x000000010dfd5c4a ChromeMain + 52767114

9 Google Chrome Framework 0x000000010dfd5055 ChromeMain + 52764053

10 Google Chrome Framework 0x000000010dfd4a82 ChromeMain + 52762562

11 Google Chrome Framework 0x000000010dfd41bd ChromeMain + 52760317

12 Google Chrome Framework 0x000000010dfd3d0d ChromeMain + 52759117

13 Google Chrome Framework 0x000000010dfd1d8f ChromeMain + 52751055

14 Google Chrome Framework 0x000000010dfd19c3 ChromeMain + 52750083

15 Google Chrome Framework 0x000000010dfd0fb1 ChromeMain + 52747505

16 Google Chrome Framework 0x000000010ae2377f ChromeMain + 656575

17 Google Chrome Framework 0x000000010ae2269a ChromeMain + 652250

18 Google Chrome Framework 0x000000010e221d4a ChromeMain + 55175818

19 Google Chrome Framework 0x000000010e4d0bf7 ChromeMain + 57989431

20 Google Chrome Framework 0x000000010e220401 ChromeMain + 55169345

21 Google Chrome Framework 0x000000010e22420d ChromeMain + 55185229

22 Google Chrome Framework 0x000000010e21df4f ChromeMain + 55159951

23 Google Chrome Framework 0x000000010b31645c ChromeMain + 5845404

24 Google Chrome Framework 0x000000010b315a96 ChromeMain + 5842902

25 Google Chrome Framework 0x000000010ad83302 ChromeMain + 66

26 Google Chrome 0x000000010ad7af39 main + 9

27 Google Chrome 0x000000010ad7af24 Google Chrome + 3876

28 ??? 0x0000000000000001 0x0 + 1

)

Reply

Answer 6

Linc Davis

Level 10

209,739 points

Dec 10, 2015 8:13 AM in response to tommrtn7

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, please back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the requisite skill can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Another indication that the test is safe can be found in this thread, and this one, for example, where the comment in which I suggested it was recommended by one of the Apple Community Specialists, as explained here.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy a particular line of text to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is intermittently slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual before running it. If you can only test in safe mode, do that.

6. If you have more than one user, and only one user is affected by the problem,, and the affected user is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.

If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.

8. Launch the built-in Terminal application in any one of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter

exec bash

and press return. Then paste the script again.

10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If the test is taking much longer than usual to run because the computer is very slow, you might be prompted for your password a second time. The authorization that you grant by entering it expires automatically after five minutes.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

Test started

Part 1 of 4 done at: … sec
…
Part 4 of 4 done at: … sec

The test results are on the Clipboard.

Please close this window.

The intervals between parts won't be exactly equal, but they give a rough indication of progress.

Wait for the final message "Please close this window" to appear. If you don't see it within about 15 minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step. You'll have incomplete results, but still something. If you close the Terminal window while the test is still running, the partial results won't be saved and you'll have to start over.

12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been saved to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "close this window" message. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the software that runs this website. Please post the test results on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

______________________________________________________________

Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Reply

Answer 7

Eric Root

Level 10

685,257 points

Dec 11, 2015 7:27 AM in response to tommrtn7

/etc/hosts file - Fixing a hacked

Reply

Answer 8

tommrtn7 Author

Level 1

0 points

Dec 21, 2015 9:28 PM in response to Eric Root

As problem user:

1 Start time: 16:20:37 12/22/15

2

3 Revision: 1412

4

5 Model Identifier: MacBookAir4,2

6 Memory: 4 GB

7 Boot ROM Version: MBA41.0077.B14

8 System Version: OS X 10.11.2 (15C50)

9 Kernel Version: Darwin 15.2.0

10 Time since boot: 12 days 19:58

11

12 Admin access: No

13

14 Global prefs (system)

15

16 MultipleSessionEnabled = 1

17

18 Firewall: On

19

20 DNS: 223.252.47.50 (static)

21

22 Diagnostic reports

23

24 2015-12-01 MDMUpdater crash

25 2015-12-08 Spotlight crash

26 2015-12-18 MDMUpdater crash

27

28 Loaded kernel extensions

29

30 com.paragon-software.filesystems.ntfs (83.1.14)

31 org.pqrs.driver.Karabiner (10.14.0)

32

33 System services loaded

34

35 com.adobe.fpsaud

36 com.apple.Kerberos.digest-service

37 - status: -9

38 com.apple.Kerberos.kdc

39 - status: -9

40 com.apple.ctkd

41 - status: -4

42 com.apple.logd

43 - status: 1

44 com.apple.watchdogd

45 com.barebones.authd

46 com.google.keystone.daemon

47 com.microsoft.office.licensing.helper

48 com.motorola-mobility.mmcfgd

49 com.paragon.NTFS.launch

50 com.prey.agent

51 - status: 78

52 com.skype.skypeinstaller

53 local.mini.airprint-hack

54 net.sourceforge.MonolingualHelper

55 org.serviio.server

56

57 Login services loaded

58

59 com.adobe.AAM.Scheduler-1.0

60 com.apple.CSConfigDotMacCert-EMAIL-SharedServices

61 - status: 78

62 com.apple.Finder

63 - status: -15

64 com.facebook.videochat.NAME.updater

65 - status: 1

66 com.google.GoogleContactSyncAgent

67 - status: 78

68 com.google.keystone.system.agent

69 com.motorola.MDMUpdaterPlist

70 - status: 78

71 com.motorola.motohelper

72 com.paragon-software.NTFS.fsnotifyagent

73 com.paragon.updater

74 com.tvmobili.artwork

75 - status: 78

76

77 Login services disabled

78

79 com.dashlane.DashlaneAutoStartHelper

80 QA2G25RMZ4.com.wunderkinder.wunderlist-helper

81

82 User services disabled

83

84 com.dashlane.DashlaneAutoStartHelper

85 QA2G25RMZ4.com.wunderkinder.wunderlist-helper

86

87 Contents of /Library/LaunchAgents/com.motorola.MDMUpdater.plist

88 - mod date: Oct 15 08:41:50 2013

89 - size (B): 588

90 - checksum: 1351111170

91

92 <?xml version="1.0" encoding="UTF-8"?>

93 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

94 <plist version="1.0">

95 <dict>

96 <key>Disabled</key>

97 <false/>

98 <key>KeepAlive</key>

99 <false/>

100 <key>Label</key>

101 <string>com.motorola.MDMUpdaterPlist</string>

102 <key>RunAtLoad</key>

103 <true/>

104 <key>StartInterval</key>

105 <integer>86400</integer>

106 <key>ProgramArguments</key>

107 <array>

108 <string>/Library/Application Support/Motorola Mobility/MotoHelper.app/Contents/Resources/MDMUpdater.app/Contents/MacOS/MDMUpd ater</string>

109 </array>

110 </dict>

111 </plist>

112

113 Contents of /Library/LaunchAgents/com.motorola.motohelper.plist

114 - mod date: Oct 15 08:41:50 2013

115 - size (B): 475

116 - checksum: 840218689

117

118 <?xml version="1.0" encoding="UTF-8"?>

119 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

120 <plist version="1.0">

121 <dict>

122 <key>KeepAlive</key>

123 <true/>

124 <key>Label</key>

125 <string>com.motorola.motohelper</string>

126 <key>RunAtLoad</key>

127 <true/>

128 <key>ProgramArguments</key>

129 <array>

130 <string>/Library/Application Support/Motorola Mobility/MotoHelper.app/Contents/Resources/MotoHelperDaemon</string>

131 </array>

132 </dict>

133 </plist>

134

135 Contents of /Library/LaunchAgents/com.motorola.motohelperUpdater.plist

136 - mod date: Oct 15 08:41:50 2013

137 - size (B): 559

138 - checksum: 1576775348

139

140 <?xml version="1.0" encoding="UTF-8"?>

141 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

142 <plist version="1.0">

143 <dict>

144 <key>Disabled</key>

145 <false/>

146 <key>KeepAlive</key>

147 <false/>

148 <key>Label</key>

149 <string>com.motorola.motohelperUpdater</string>

150 <key>RunAtLoad</key>

151 <true/>

152 <key>StartInterval</key>

153 <integer>86400</integer>

154 <key>ProgramArguments</key>

155 <array>

156 <string>/Library/Application Support/Motorola Mobility/MotoHelper.app/Contents/Resources/REUpdater</string>

157 </array>

158 </dict>

159 </plist>

160

161 Contents of /Library/LaunchAgents/com.paragon-software.NTFS.fsnotifyagent.plist

162 - mod date: Nov 19 03:44:23 2015

163 - size (B): 534

164 - checksum: 2618589534

165

166 <?xml version="1.0" encoding="UTF-8"?>

167 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

168 <plist version="1.0">

169 <dict>

170 <key>Label</key>

171 <string>com.paragon-software.NTFS.fsnotifyagent</string>

172 <key>Program</key>

173 <string>/Library/PreferencePanes/ParagonNTFS.prefPane/Contents/Resources/fsnoti fyagent.app/Contents/MacOS/fsnotifyagent</string>

174 <key>RunAtLoad</key>

175 <true/>

176 <key>KeepAlive</key>

177 <true/>

178 <key>LimitLoadToSessionType</key>

179 <string>Aqua</string>

180 </dict>

181 </plist>

182

183 Contents of /Library/LaunchAgents/com.paragon.updater.plist

184 - mod date: Nov 19 03:44:16 2015

185 - size (B): 548

186 - checksum: 962844124

187

188 <?xml version="1.0" encoding="UTF-8"?>

189 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

190 <plist version="1.0">

191 <dict>

192 <key>StartInterval</key>

193 <integer>86400</integer>

194 <key>ProgramArguments</key>

195 <array>

196 <string>/Library/Application Support/Paragon Updater/Paragon Updater.app/Contents/MacOS/Paragon Updater</string>

197 <string>--check</string>

198 <string>--delay=30</string>

199 </array>

200 <key>Label</key>

201 <string>com.paragon.updater</string>

202 <key>RunAtLoad</key>

203 <true/>

204 </dict>

205 </plist>

206

207 Contents of /Library/LaunchAgents/com.tvmobili.artwork.plist

208 - mod date: Sep 1 16:27:32 2012

209 - size (B): 550

210 - checksum: 3654463100

211

212 <?xml version="1.0" encoding="UTF-8"?>

213 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

214 <plist version="1.0">

215 <dict>

216 <key>Label</key>

217 <string>com.tvmobili.artwork</string>

218 <key>KeepAlive</key>

219 <true/>

220 <key>StandardOutPath</key>

221 <string>/dev/null</string>

222 <key>RunAtload</key>

223 <true/>

224 <key>OnDemand</key>

225 <false/>

226 <key>ProgramArguments</key>

227 <array>

228 <string>/Applications/TVMOBiLi.app/Contents/MacOS/tvmobiliqlhandler</string>

229 </array>

230 </dict>

231 </plist>

232

233 Contents of /Library/LaunchDaemons/com.barebones.authd.plist

234 - mod date: Dec 12 14:35:15 2015

235 - size (B): 723

236 - checksum: 3743051555

237

238 <?xml version="1.0" encoding="UTF-8"?>

239 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

240 <plist version="1.0">

241 <dict>

242 <key>EnableTransactions</key>

243 <true/>

244 <key>Label</key>

245 <string>com.barebones.authd</string>

246 <key>Program</key>

247 <string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

248 <key>ProgramArguments</key>

249 <array>

250 <string>/Library/PrivilegedHelperTools/com.barebones.authd</string>

251 </array>

252 <key>Sockets</key>

253 <dict>

254 <key>com.barebones.authd.socket</key>

255 <dict>

256 <key>SockPathMode</key>

257 <integer>438</integer>

258 <key>SockPathName</key>

259 <string>/var/tmp/com.barebones.authd.socket</string>

260 </dict>

261 </dict>

262 </dict>

263

264 ...and 1 more line(s)

265

266 Contents of /Library/LaunchDaemons/com.motorola-mobility.mmcfgd.plist

267 - mod date: Jan 18 09:39:56 2012

268 - size (B): 418

269 - checksum: 553729239

270

271 <?xml version="1.0" encoding="UTF-8"?>

272 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

273 <plist version="1.0">

274 <dict>

275 <key>Label</key>

276 <string>com.motorola-mobility.mmcfgd</string>

277 <key>RunAtLoad</key>

278 <true/>

279 <key>ProgramArguments</key>

280 <array>

281 <string>/Library/Application Support/Motorola Mobility/MotNetConfig/mmcfgd</string>

282 </array>

283 </dict>

284 </plist>

285

286 Contents of /Library/LaunchDaemons/com.paragon.NTFS.launch.plist

287 - exported SGML document text

288 - mod date: Nov 19 03:44:16 2015

289 - size (B): 641

290 - checksum: 1766326959

291

292 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

293 <plist version="1.0">

294 <dict>

295 <key>KeepAlive</key>

296 <false/>

297 <key>Label</key>

298 <string>com.paragon.NTFS.launch</string>

299 <key>ProgramArguments</key>

300 <array>

301 <string>/sbin/kextload</string>

302 <string>/Library/Extensions/ufsd_NTFS.kext</string>

303 </array>

304 <key>RunAtLoad</key>

305 <true/>

306 <key>StandardErrorPath</key>

307 <string>/dev/null</string>

308 <key>StandardOutPath</key>

309 <string>/dev/null</string>

310 </dict>

311 </plist>

312

313 Contents of /Library/LaunchDaemons/com.prey.agent.plist

314 - mod date: Apr 25 23:11:34 2015

315 - size (B): 686

316 - checksum: 1193980917

317

318 <?xml version="1.0" encoding="UTF-8"?>

319 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

320 <plist version="1.0">

321 <dict>

322 <key>KeepAlive</key>

323 <dict>

324 <key>SuccessfulExit</key>

325 <false/>

326 </dict>

327 <key>Label</key>

328 <string>com.prey.agent</string>

329 <key>ProgramArguments</key>

330 <array>

331 <string>/usr/lib/prey/current/bin/prey</string>

332 </array>

333 <key>WorkingDirectory</key>

334 <string>/usr/lib/prey/current</string>

335 <key>RunAtLoad</key>

336 <true/>

337 <key>ExitTimeOut</key>

338 <integer>20</integer>

339 <key>UserName</key>

340 <string>prey</string>

341 <key>WatchPaths</key>

342 <array>

343

344 ...and 4 more line(s)

345

346 Contents of /Library/LaunchDaemons/com.skype.skypeinstaller.plist

347 - mod date: Oct 19 19:34:37 2014

348 - size (B): 714

349 - checksum: 354022165

350

351 <?xml version="1.0" encoding="UTF-8"?>

352 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

353 <plist version="1.0">

354 <dict>

355 <key>Label</key>

356 <string>com.skype.skypeinstaller</string>

357 <key>ProgramArguments</key>

358 <array>

359 <string>/Library/PrivilegedHelperTools/com.skype.skypeinstaller</string>

360 </array>

361 <key>Sockets</key>

362 <dict>

363 <key>com.skype.skypeinstaller.socket</key>

364 <dict>

365 <key>SockFamily</key>

366 <string>Unix</string>

367 <key>SockPathMode</key>

368 <integer>438</integer>

369 <key>SockPathName</key>

370 <string>/var/run/com.skype.skypeinstaller.socket</string>

371 <key>SockType</key>

372 <string>Stream</string>

373 </dict>

374 </dict>

375 </dict>

376

377 ...and 1 more line(s)

378

379 Contents of /Library/LaunchDaemons/local.mini.airprint-hack.plist

380 - mod date: Mar 13 21:39:35 2014

381 - size (B): 656

382 - checksum: 3037157877

383

384 <?xml version="1.0" encoding="UTF-8"?>

385 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

386 <plist version="1.0">

387 <dict>

388 <key>Label</key>

389 <string>local.mini.airprint-hack</string>

390 <key>ProgramArguments</key>

391 <array>

392 <string>/Users/USER/airprint-hack.sh</string>

393 </array>

394 <key>LowPriorityIO</key>

395 <true/>

396 <key>Nice</key>

397 <integer>1</integer>

398 <key>UserName</key>

399 <string>root</string>

400 <key>RunAtLoad</key>

401 <true/>

402 <key>Keeplive</key>

403 <true/>

404 </dict>

405 </plist>

406

407 Contents of /Library/LaunchDaemons/net.sourceforge.MonolingualHelper.plist

408 - mod date: Oct 3 18:11:58 2014

409 - size (B): 489

410 - checksum: 4229206510

411

412 <?xml version="1.0" encoding="UTF-8"?>

413 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

414 <plist version="1.0">

415 <dict>

416 <key>Label</key>

417 <string>net.sourceforge.MonolingualHelper</string>

418 <key>MachServices</key>

419 <dict>

420 <key>net.sourceforge.MonolingualHelper</key>

421 <true/>

422 </dict>

423 <key>ProgramArguments</key>

424 <array>

425 <string>/Library/PrivilegedHelperTools/net.sourceforge.MonolingualHelper</strin g>

426 </array>

427 </dict>

428 </plist>

429

430 Contents of /Library/LaunchDaemons/org.pqrs.Karabiner.load.plist

431 - mod date: Nov 6 04:51:46 2015

432 - size (B): 610

433 - checksum: 3703019372

434

435 <?xml version="1.0" encoding="UTF-8"?>

436 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

437 <plist version="1.0">

438 <dict>

439 <key>Label</key> <string>org.pqrs.Karabiner.load</string>

440 <key>Disabled</key> <false/>

441 <key>RunAtLoad</key> <true/>

442 <key>KeepAlive</key> <false/>

443 <key>LaunchOnlyOnce</key> <true/>

444 <key>ProgramArguments</key>

445 <array>

446 <string>/Library/Application Support/org.pqrs/Karabiner/startup.sh</string>

447 <string>start</string>

448 </array>

449 </dict>

450 </plist>

451

452 Contents of /Library/LaunchDaemons/org.serviio.server.plist

453 - mod date: Jan 13 10:11:48 2015

454 - size (B): 903

455 - checksum: 3198557513

456

457 <?xml version="1.0" encoding="UTF-8"?>

458 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

459 <plist version="1.0">

460 <dict>

461 <key>StandardOutPath</key>

462 <string>/var/log/serviio/serviio.log</string>

463 <key>StandardErrorPath</key>

464 <string>/var/log/serviio/serviio.log</string>

465 <key>KeepAlive</key>

466 <false/>

467 <key>Label</key>

468 <string>org.serviio.server</string>

469 <key>EnvironmentVariables</key>

470 <dict>

471 <key>SERVIIO_HOME</key>

472 <string>/Library/Application Support/Serviio</string>

473 </dict>

474 <key>ProgramArguments</key>

475 <array>

476 <string>/bin/bash</string>

477 <string>/Library/Application Support/Serviio/bin/serviio.sh</string>

478 </array>

479 <key>RunAtLoad</key>

480 <true/>

481 <key>UserName</key>

482

483 ...and 3 more line(s)

484

485 Contents of /private/etc/hosts

486 - mod date: Dec 12 14:35:20 2015

487 - size (B): 291

488 - checksum: 3662208427

489

490 127.0.0.1 localhost

491 255.255.255.255 broadcasthost

492 ::1 localhost

493 fe80::1%lo0 localhost

494 127.0.0.1 activate.adobe.com

495

496 Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist

497 - mod date: May 24 22:14:40 2012

498 - size (B): 896

499 - checksum: 2082247265

500

501 <?xml version="1.0" encoding="UTF-8"?>

502 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

503 <plist version="1.0">

504 <dict>

505 <key>KeepAlive</key>

506 <false/>

507 <key>Label</key>

508 <string>com.apple.CSConfigDotMacCert-EMAIL-SharedServices</string>

509 <key>LimitLoadToSessionType</key>

510 <string>Aqua</string>

511 <key>LowPriorityIO</key>

512 <true/>

513 <key>Nice</key>

514 <integer>10</integer>

515 <key>ProgramArguments</key>

516 <array>

517 <string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>

518 <string>-l</string>

519 <string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>

520 <string>-u</string>

521 <string>EMAIL</string>

522 <string>-t</string>

523 <string>SharedServices</string>

524 <string>-s</string>

525 </array>

526

527 ...and 4 more line(s)

528

529 Contents of Library/LaunchAgents/com.facebook.videochat.NAME.plist

530 - mod date: Aug 9 17:11:49 2014

531 - size (B): 804

532 - checksum: 3726802482

533

534 <?xml version="1.0" encoding="UTF-8"?>

535 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

536 <plist version="1.0">

537 <dict>

538 <key>Label</key>

539 <string>com.facebook.videochat.NAME.updater</string>

540 <key>ProgramArguments</key>

541 <array>

542 <string>/usr/bin/java</string>

543 <string>-cp</string>

544 <string>/Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookUpdate.jar</string>

545 <string>FacebookUpdate</string>

546 <string>com.facebook.peep</string>

547 <string>3.1.0.522</string>

548 </array>

549 <key>RunAtLoad</key>

550 <true/>

551 <key>StartInterval</key>

552 <integer>10800</integer>

553 <key>StandardErrorPath</key>

554 <string>/dev/null</string>

555 <key>StandardOutPath</key>

556 <string>/dev/null</string>

557 </dict>

558 </plist>

559

560 Contents of Library/LaunchAgents/com.google.GoogleContactSyncAgent.plist

561 - mod date: Aug 21 15:43:49 2012

562 - size (B): 655

563 - checksum: 2135155192

564

565 <?xml version="1.0" encoding="UTF-8"?>

566 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

567 <plist version="1.0">

568 <dict>

569 <key>Label</key>

570 <string>com.google.GoogleContactSyncAgent</string>

571 <key>LimitLoadToSessionType</key>

572 <string>Aqua</string>

573 <key>ProgramArguments</key>

574 <array>

575 <string>/System/Library/PrivateFrameworks/GoogleContactSync.framework/Versions/ A/Resources/gconsync</string>

576 <string>--sync</string>

577 <string>com.google.ContactSync</string>

578 <string>--periodic</string>

579 </array>

580 <key>RunAtLoad</key>

581 <true/>

582 <key>StartInterval</key>

583 <integer>3600</integer>

584 </dict>

585 </plist>

586

587 Contents of Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist

588 - mod date: Aug 7 19:33:26 2012

589 - size (B): 677

590 - checksum: 3654809970

591

592 <?xml version="1.0" encoding="UTF-8"?>

593 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

594 <plist version="1.0">

595 <dict>

596 <key>Disabled</key>

597 <true/>

598 <key>KeepAlive</key>

599 <false/>

600 <key>Label</key>

601 <string>org.virtualbox.vboxwebsvc</string>

602 <key>Program</key>

603 <string>/Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv</string>

604 <key>Sockets</key>

605 <dict>

606 <key>Listeners</key>

607 <dict>

608 <key>SockServiceName</key>

609 <string>18083</string>

610 <key>SockType</key>

611 <string>stream</string>

612 <key>SockFamily</key>

613 <string>IPv4</string>

614 </dict>

615 </dict>

616 </dict>

617

618 ...and 1 more line(s)

619

620 User login items

621

622 Flux

623 - /Applications/Flux.app

624 Karabiner

625 - /Applications/Karabiner.app

626 BetterTouchTool

627 - /Applications/BetterTouchTool.app

628

629 Safari extensions

630

631 Reddit Enhancement Suite

632 - com.honestbleeps.redditenhancementsuite

633 uBlock

634 - net.gorhill.uBlock

635

636 Widgets

637

638 TimeScroller

639 iStat nano

640

641 Continuity errors

642

643 sharingd 1

644

645 Bad permissions: 157

646

647 Lockfiles: 7

648

649 Global prefs (user)

650

651 AppleShowAllExtensions = 1

652 NSDocumentAutosaveOldDocumentDayThreshold = 14

653 NSQuitAlwaysKeepsWindows = 1

654

655 Extensions

656

657 /Library/Extensions/EPSONUSBPrintClass.kext

658 - com.epson.print.kext.USBPrintClass

659 /Library/Extensions/VBoxDrv.kext

660 - org.virtualbox.kext.VBoxDrv

661 /Library/Extensions/VBoxNetAdp.kext

662 - org.virtualbox.kext.VBoxNetAdp

663 /Library/Extensions/VBoxNetFlt.kext

664 - org.virtualbox.kext.VBoxNetFlt

665 /Library/Extensions/VBoxUSB.kext

666 - org.virtualbox.kext.VBoxUSB

667 /Library/Extensions/ufsd_NTFS.kext

668 - com.paragon-software.filesystems.ntfs

669 /System/Library/Extensions/JMicronATA.kext

670 - com.jmicron.JMicronATA

671 /System/Library/Extensions/MotMobileUSB.kext/Contents/PlugIns/MotMobileMS.kext

672 - com.motorola-mobility.driver.MotMobileMS

673 /System/Library/Extensions/MotMobileUSB.kext/Contents/PlugIns/MotMobileMTP.kext

674 - com.motorola-mobility.driver.MotMobileMTP

675 /System/Library/Extensions/MotMobileUSB.kext/Contents/PlugIns/MotMobileUSBLAN.k ext

676 - com.motorola-mobility.driver.MotMobileUSBLAN

677 /System/Library/Extensions/MotMobileUSB.kext/Contents/PlugIns/MotMobileUSBLANMe rge.kext

678 - com.motorola-mobility.driver.MotMobileUSBLANMerge

679 /System/Library/Extensions/MotMobileUSB.kext/Contents/PlugIns/MotMobileUSBSwch. kext

680 - com.motorola-mobility.driver.MotMobileUSBSwch

681 /System/Library/Extensions/MotMobileUSB.kext

682 - com.motorola-mobility.driver.MotMobileUSB

683 /System/Library/Extensions/heimdall.kext

684 - au.com.glassechidna.heimdall_usb_shield

685 /System/Library/Extensions/hp_fax_io.kext

686 - com.hp.kext.hp-fax-io

687

688 Applications

689

690 /Applications/Adobe/Adobe Help.app

691 - chc.UUID.1

692 /Applications/Adobe/PhotoshopdotcomInspirationBrowser.app

693 - PhotoshopdotcomInspirationBrowser.UUID.1

694 /Applications/Bonjour Browser.app

695 - com.tildesoft.RendezvousBrowser

696 /Applications/Disk Inventory X.app

697 - com.derlien.DiskInventoryX

698 /Applications/Dropbox Encore.app

699 - com.joyofmacs.DropboxEncore

700 /Applications/InsomniaX.app

701 - com.semaja2.InsomniaX

702 /Applications/Microsoft Office 2011/Microsoft Communicator.app

703 - com.microsoft.Communicator

704 /Applications/Microsoft Office 2011/Office/Add-Ins/Solver.app

705 - com.microsoft.ASApplication

706 /Applications/Microsoft Office 2011/Office/Equation Editor.app

707 - com.microsoft.EquationEditor

708 /Applications/Microsoft Office 2011/Office/Microsoft Office Setup Assistant.app

709 - com.microsoft.office.setupassistant

710 /Applications/Microsoft Office 2011/Office/Microsoft Query.app

711 - com.microsoft.Query

712 /Applications/Microsoft Office 2011/Remote Desktop Connection.app

713 - com.microsoft.rdc

714 /Applications/OnyX.app

715 - com.titanium.OnyX

716 /Applications/Scribus.app

717 - net.scribus

718 /Applications/Tether.app

719 - com.koushikdutta.Tether

720 /Applications/Utilities/Adobe AIR Application Installer.app

721 - com.adobe.air.ApplicationInstaller

722 /Applications/Utilities/Adobe AIR Uninstaller.app

723 - com.adobe.air.Installer

724 /Applications/Utilities/Adobe Application Manager/UWA/LogTransport2.app

725 - com.adobe.headlights.LogTransport2App

726 /Applications/XBMC.app

727 - com.teamxbmc.xbmc

728 /Applications/doubleTwist.app

729 - com.doubleTwist.desktop

730 /Applications/etax2015.app

731 - au.gov.ato.etax2014

732 /Applications/heimdall-frontend.app

733 - com.yourcompany.heimdall-frontend

734 /Applications/iBench.app

735 - es.uniovi.iBench

736 /Applications/iChm.app

737 - com.robinlu.iChm

738 /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

739 - com.microsoft.autoupdate2

740 /Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

741 - com.microsoft.error_reporting

742 /Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

743 - com.microsoft.netlib.shipassertprocess

744 /Library/Application Support/Motorola Mobility/Motorola/DeviceSoftwareUpdate.app

745 - com.motorola-mobility.devicesoftwareupdate

746 /Library/Application Support/Motorola Mobility/Motorola/MDMUpdater.app

747 - com.motorola-mobility.MDMUpdater

748 /Library/Application Support/Motorola Mobility/Uninstall Motorola Device Manager.app

749 - com.apple.ScriptEditor.id.UUID

750 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app

751 - com.adobe.air.ApplicationInstaller

752 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Adobe AIR Updater.app

753 - com.adobe.air.Installer

754 /Users/USER/Android/tools/lib/monitor-x86_64/monitor.app

755 - org.eclipse.eclipse

756 /Users/USER/Applications/Chrome Apps.localized/Default coobgpohoikkiipiblmjeljniedjpjpf.app

757 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf

758 /Users/USER/Downloads/Helium.app

759 - com.koushikdutta.Helium

760 /Users/USER/Downloads/unetbootin.app

761 - com.yourcompany.unetbootin

762 /Users/USER/Library/Application Support/Facebook/video/3.1.0.522/FacebookVideoCalling.app

763 - com.Skype.FacebookVideoCalling

764 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

765 - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

766 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

767 - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

768 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

769 - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

770 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_gighmmpiobklfepjocnamgkkbiglidom/Default gighmmpiobklfepjocnamgkkbiglidom.app

771 - com.google.Chrome.app.Default-gighmmpiobklfepjocnamgkkbiglidom-internal

772 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_mkjojgglmmcghgaiknnpgjgldgaocjfd/Default mkjojgglmmcghgaiknnpgjgldgaocjfd.app

773 - com.google.Chrome.app.Default-mkjojgglmmcghgaiknnpgjgldgaocjfd-internal

774 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

775 - com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

776 /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

777 - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

778 /Users/USER/Library/Printers/Brother MFC-7362N.app

779 - com.apple.print.PrinterProxy

780 /Users/USER/Library/Printers/EPSON XP-410 Series.app

781 - com.apple.print.PrinterProxy

782 /Users/USER/Library/Services/ENService.app

783 - com.ThomsonResearchSoft.EndNote.ENService

784

785 Frameworks

786

787 /Library/Frameworks/Adobe AIR.framework

788 - com.adobe.AIR

789 /Library/Frameworks/MacFUSE.framework

790 - com.google.MacFUSE

791 /Library/Frameworks/Mono.framework

792 - com.ximian.mono-2.10.5

793 /Library/Frameworks/OSXFUSE.framework

794 - com.github.osxfuse.framework

795

796 PrefPane

797

798 /Library/PreferencePanes/Flash Player.prefPane

799 - com.adobe.flashplayerpreferences

800 /Library/PreferencePanes/OSXFUSE.prefPane

801 - com.github.osxfuse.OSXFUSEPrefPane

802 /Library/PreferencePanes/ParagonNTFS.prefPane:® OS X:

803 - N/A

804

805 Bundles

806

807 /Library/Application Support/Adobe/APE/3.101/adbeapecore.framework/Versions/A/Resources/Flash Player.plugin

808 - com.macromedia.FlashPlayer-10.4-10.5.plugin

809 /Library/Application Support/Adobe/APE/3.3/adbeapecore.framework/Versions/A/Libraries/Flash Player.plugin

810 - com.macromedia.FlashPlayer-10.4-10.5.plugin

811 /Library/Application Support/Adobe/Plug-Ins/CS6/File Formats/Camera Raw.plugin

812 - com.adobe.CameraRaw

813 /Library/Application Support/Adobe/Plug-Ins/Elements 10/File Formats/Camera Raw.plugin

814 - com.adobe.CameraRaw

815 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

816 - com.adobe.adobecp

817 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

818 - com.macromedia.FlashPlayer-10.6.plugin

819 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/adobecp.plugin

820 - com.adobe.adobecp20

821 /Library/Internet Plug-Ins/Flash Player.plugin

822 - com.macromedia.Flash Player.plugin

823 /Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

824 - com.google.googletalkbrowserplugin

825 /Library/Internet Plug-Ins/o1dbrowserplugin.plugin

826 - com.google.o1dbrowserplugin

827 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

828 - com.skype.skypeabdialer

829 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

830 - com.skype.skypeabsms

831 /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin

832 - com.macromedia.PepperFlashPlayer.pepper

833 /Users/USER/Library/Spotlight/EndNote.mdimporter

834 - com.ThomsonResearchSoft.EndNote

835 /Users/USER/Library/Widgets/PEMDAS.wdgt

836 - com.donkeyentertainment.widget.PEMDAS

837 /Users/USER/Library/Widgets/Snake.v3.0.0.wdgt

838 - com.orange.widgets.Whosegame163

839 /Users/USER/Library/Widgets/TimeScroller.wdgt

840 - com.timescroller.widget

841 /Users/USER/Library/Widgets/iStat nano.wdgt

842 - com.iSlayer.iStatnanoV2.widget

843

844 Bundles (new)

845

846 /Library/Application Support/Google/GoogleTalkPlugin.app

847 - com.google.GoogleTalkPluginD

848 /Library/Application Support/Google/GoogleVoiceAndVideoUninstaller.app

849 - com.google.GoogleTalkPluginUninstaller

850 /Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

851 - com.google.googletalkbrowserplugin

852

853 Library paths

854

855 /Applications/Microsoft Office 2011/Office/MicrosoftSetupUI.framework/Libraries/mbupgx.dylib

856 /Applications/Microsoft Office 2011/Office/OPF.framework/Versions/14/Resources/OPF_Common.dylib

857 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/Fm20.dylib

858 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/MicrosoftOLE2TypesLib.dylib

859 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RefEdit.dylib

860 /Applications/Microsoft Office 2011/Office/Visual Basic for Applications.framework/Versions/14/Frameworks/RichEdit.dylib

861 /Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib

862 /Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib

863 /Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib

864 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib

865 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib

866 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib

867 /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib

868 /Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib

869 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib

870 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib

871 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib

872 /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib

873 /Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib

874 /Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib

875 /Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib

876 /Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib

877 /Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib

878 /Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib

879 /Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib

880 /Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib

881 /Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib

882 /Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib

883 /Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib

884 /Applications/Utilities/Adobe Application Manager/P6/axlib.dylib

885 /Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib

886 /Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib

887 /Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib

888 /Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib

889 /Library/Application Support/Adobe/APE/3.101/adbeapecore.framework/Versions/A/Resources/WebKit.dylib

890 /Library/Application Support/Adobe/APE/3.3/adbeapecore.framework/Versions/A/Libraries/WebKit.dylib

891 /Library/Application Support/Adobe/CS6ServiceManager/lib/CSXS-Installer-Hook.dylib

892 /Library/Application Support/Adobe/CS6ServiceManager/lib/ServiceManager-Launcher.dylib

893 /Library/Application Support/Serviio/jre/Contents/Home/lib/jli/libjli.dylib

894 /Library/Application Support/Serviio/jre/Contents/Home/lib/libAppleScriptEngine.dylib

895 /Library/Application Support/Serviio/jre/Contents/Home/lib/libattach.dylib

896 /Library/Application Support/Serviio/jre/Contents/Home/lib/libawt.dylib

897 /Library/Application Support/Serviio/jre/Contents/Home/lib/libawt_lwawt.dylib

898 /Library/Application Support/Serviio/jre/Contents/Home/lib/libdcpr.dylib

899 /Library/Application Support/Serviio/jre/Contents/Home/lib/libdecora_sse.dylib

900 /Library/Application Support/Serviio/jre/Contents/Home/lib/libdt_socket.dylib

901 /Library/Application Support/Serviio/jre/Contents/Home/lib/libfontmanager.dylib

902 /Library/Application Support/Serviio/jre/Contents/Home/lib/libfxplugins.dylib

903 /Library/Application Support/Serviio/jre/Contents/Home/lib/libglass.dylib

904 /Library/Application Support/Serviio/jre/Contents/Home/lib/libglib-lite.dylib

905 /Library/Application Support/Serviio/jre/Contents/Home/lib/libgstreamer-lite.dylib

906 /Library/Application Support/Serviio/jre/Contents/Home/lib/libhprof.dylib

907 /Library/Application Support/Serviio/jre/Contents/Home/lib/libinstrument.dylib

908 /Library/Application Support/Serviio/jre/Contents/Home/lib/libj2gss.dylib

909 /Library/Application Support/Serviio/jre/Contents/Home/lib/libj2pcsc.dylib

910 /Library/Application Support/Serviio/jre/Contents/Home/lib/libj2pkcs11.dylib

911 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjaas_unix.dylib

912 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjava.dylib

913 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjava_crw_demo.dylib

914 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjavafx_font.dylib

915 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjavafx_font_t2k.dylib

916 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjavafx_iio.dylib

917 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjawt.dylib

918 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjdwp.dylib

919 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjfr.dylib

920 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjfxmedia.dylib

921 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjfxwebkit.dylib

922 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjpeg.dylib

923 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjsdt.dylib

924 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjsig.dylib

925 /Library/Application Support/Serviio/jre/Contents/Home/lib/libjsound.dylib

926 /Library/Application Support/Serviio/jre/Contents/Home/lib/libkcms.dylib

927 /Library/Application Support/Serviio/jre/Contents/Home/lib/liblcms.dylib

928 /Library/Application Support/Serviio/jre/Contents/Home/lib/libmanagement.dylib

929 /Library/Application Support/Serviio/jre/Contents/Home/lib/libmlib_image.dylib

930 /Library/Application Support/Serviio/jre/Contents/Home/lib/libnet.dylib

931 /Library/Application Support/Serviio/jre/Contents/Home/lib/libnio.dylib

932 /Library/Application Support/Serviio/jre/Contents/Home/lib/libnpt.dylib

933 /Library/Application Support/Serviio/jre/Contents/Home/lib/libosx.dylib

934 /Library/Application Support/Serviio/jre/Contents/Home/lib/libosxapp.dylib

935 /Library/Application Support/Serviio/jre/Contents/Home/lib/libosxkrb5.dylib

936 /Library/Application Support/Serviio/jre/Contents/Home/lib/libosxui.dylib

937 /Library/Application Support/Serviio/jre/Contents/Home/lib/libprism_common.dylib

938 /Library/Application Support/Serviio/jre/Contents/Home/lib/libprism_es2.dylib

939 /Library/Application Support/Serviio/jre/Contents/Home/lib/libprism_sw.dylib

940 /Library/Application Support/Serviio/jre/Contents/Home/lib/libsaproc.dylib

941 /Library/Application Support/Serviio/jre/Contents/Home/lib/libsplashscreen.dylib

942 /Library/Application Support/Serviio/jre/Contents/Home/lib/libsunec.dylib

943 /Library/Application Support/Serviio/jre/Contents/Home/lib/libt2k.dylib

944 /Library/Application Support/Serviio/jre/Contents/Home/lib/libunpack.dylib

945 /Library/Application Support/Serviio/jre/Contents/Home/lib/libverify.dylib

946 /Library/Application Support/Serviio/jre/Contents/Home/lib/libzip.dylib

947 /Library/Application Support/Serviio/jre/Contents/Home/lib/server/libjsig.dylib

948 /Library/Application Support/Serviio/jre/Contents/Home/lib/server/libjvm.dylib

949 /Library/Application Support/Serviio/jre/Contents/MacOS/libjli.dylib

950 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

951 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/cairo/libcairo-trace.0.d ylib

952 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libMonoPosixHelper.dylib

953 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libMonoPosixHelper.dylib .dSYM/Contents/Resources/DWARF/libMonoPosixHelper.dylib

954 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libMonoSupportW.dylib

955 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libMonoSupportW.dylib.dS YM/Contents/Resources/DWARF/libMonoSupportW.dylib

956 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libasprintf.0.dylib

957 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libatk-1.0.0.dylib

958 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libcairo-gobject.2.dylib

959 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libcairo-script-interpre ter.2.dylib

960 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libcairo.2.dylib

961 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libexpat.1.5.2.dylib

962 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libfontconfig.1.dylib

963 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libfreetype.6.dylib

964 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgailutil.18.dylib

965 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgailutil.18.dylib.dSY M/Contents/Resources/DWARF/libgailutil.18.dylib

966 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgdiplus.0.dylib

967 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgdiplus.dylib

968 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgdk-quartz-2.0.0.dyli b

969 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgdk-quartz-2.0.0.dyli b.dSYM/Contents/Resources/DWARF/libgdk-quartz-2.0.0.dylib

970 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgdk_pixbuf-2.0.0.dyli b

971 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgdk_pixbuf_xlib-2.0.0 .dylib

972 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgettextlib-0.18.1.dyl ib

973 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgettextpo.0.dylib

974 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgettextsrc-0.18.1.dyl ib

975 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgif.4.1.6.dylib

976 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgio-2.0.0.dylib

977 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libglade-2.0.0.0.7.dylib

978 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libglib-2.0.0.dylib

979 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgmodule-2.0.0.dylib

980 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgobject-2.0.0.dylib

981 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgthread-2.0.0.dylib

982 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgtk-quartz-2.0.0.dyli b

983 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libgtk-quartz-2.0.0.dyli b.dSYM/Contents/Resources/DWARF/libgtk-quartz-2.0.0.dylib

984 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libigemacintegration.0.d ylib

985 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libikvm-native.dylib

986 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libikvm-native.dylib.dSY M/Contents/Resources/DWARF/libikvm-native.dylib

987 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libintl.8.dylib

988 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libjpeg.8.dylib

989 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-2.0.1.dylib

990 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-2.0.1.dylib.dSYM /Contents/Resources/DWARF/libmono-2.0.1.dylib

991 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-llvm.0.dylib

992 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-llvm.0.dylib.dSY M/Contents/Resources/DWARF/libmono-llvm.0.dylib

993 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-aot.0.d ylib

994 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-aot.0.d ylib.dSYM/Contents/Resources/DWARF/libmono-profiler-aot.0.dylib

995 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-cov.0.d ylib

996 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-cov.0.d ylib.dSYM/Contents/Resources/DWARF/libmono-profiler-cov.0.dylib

997 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-iomap.0 .dylib

998 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-iomap.0 .dylib.dSYM/Contents/Resources/DWARF/libmono-profiler-iomap.0.dylib

999 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-log.0.d ylib

1000 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmono-profiler-log.0.d ylib.dSYM/Contents/Resources/DWARF/libmono-profiler-log.0.dylib

1001 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmonosgen-2.0.0.dylib

1002 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libmonosgen-2.0.0.dylib. dSYM/Contents/Resources/DWARF/libmonosgen-2.0.0.dylib

1003 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libpango-1.0.0.dylib

1004 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libpangocairo-1.0.0.dyli b

1005 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libpangoft2-1.0.0.dylib

1006 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libpixman-1.0.22.2.dylib

1007 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libpng.3.dylib

1008 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libpng12.0.dylib

1009 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/librsvg-2.2.dylib

1010 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libsqlite3.0.dylib

1011 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libtest.0.dylib.dSYM/Con tents/Resources/DWARF/libtest.0.dylib

1012 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libtiff.3.dylib

1013 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libtiffxx.3.dylib

1014 /Library/Frameworks/Mono.framework/Versions/2.10.5/lib/libxml2.2.6.30.dylib

1015 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/3.0/Frameworks /Core.framework/Versions/3.0/Libraries/libHPIOnetsnmp.5.dylib

1016 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /Core.framework/Versions/4.0/Libraries/libHPIOnetsnmp.5.dylib

1017 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxis2_axiom.dyli b

1018 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxis2_engine.dyl ib

1019 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxis2_http_commo n.dylib

1020 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxis2_http_recei ver.dylib

1021 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxis2_http_sende r.dylib

1022 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxis2_parser.dyl ib

1023 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxis2_xpath.dyli b

1024 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libaxutil.dylib

1025 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libguththila.dylib

1026 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/lib/libneethi.dylib

1027 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/modules/addressing/liba xis2_mod_addr.dylib

1028 /Library/Printers/hp/Frameworks/HPDeviceModel.framework/Versions/4.0/Frameworks /XMLServices.framework/Versions/4.0/Resources/axis2_repo/modules/logging/libaxis 2_mod_log.dylib

1029 /Library/Printers/hp/Frameworks/HPSmartX.framework/Versions/B/Resources/lib/SxC FReader.dylib

1030 /Library/Printers/hp/Frameworks/HPSmartX.framework/Versions/C/Resources/lib/SxC FReader.dylib

1031 /Users/USER/Android/tools/Jet/JetCreator/libEASLIb.dylib

1032 /Users/USER/Android/tools/lib/libEGL_translator.dylib

1033 /Users/USER/Android/tools/lib/libGLES_CM_translator.dylib

1034 /Users/USER/Android/tools/lib/libGLES_V2_translator.dylib

1035 /Users/USER/Android/tools/lib/libOpenglRender.dylib

1036 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.866/_platform_specific/mac_x64/libwidev inecdm.dylib

1037 /usr/X11/lib/libAppleWM.7.dylib

1038 /usr/X11/lib/libFS.6.dylib

1039 /usr/X11/lib/libGL.1.dylib

1040 /usr/X11/lib/libGLU.1.dylib

1041 /usr/X11/lib/libICE.6.dylib

1042 /usr/X11/lib/libOSMesa.7.dylib

1043 /usr/X11/lib/libSM.6.dylib

1044 /usr/X11/lib/libX11-xcb.1.dylib

1045 /usr/X11/lib/libX11.6.dylib

1046 /usr/X11/lib/libXRes.1.dylib

1047 /usr/X11/lib/libXTrap.6.dylib

1048 /usr/X11/lib/libXau.6.dylib

1049 /usr/X11/lib/libXaw.6.dylib

1050 /usr/X11/lib/libXaw.7.dylib

1051 /usr/X11/lib/libXaw8.8.dylib

1052 /usr/X11/lib/libXcomposite.1.dylib

1053 /usr/X11/lib/libXcursor.1.dylib

1054 /usr/X11/lib/libXdamage.1.dylib

1055 /usr/X11/lib/libXdmcp.6.dylib

1056 /usr/X11/lib/libXevie.1.dylib

1057 /usr/X11/lib/libXext.6.dylib

1058 /usr/X11/lib/libXfixes.3.dylib

1059 /usr/X11/lib/libXfont.1.dylib

1060 /usr/X11/lib/libXfontcache.1.dylib

1061 /usr/X11/lib/libXft.2.dylib

1062 /usr/X11/lib/libXi.6.dylib

1063 /usr/X11/lib/libXinerama.1.dylib

1064 /usr/X11/lib/libXmu.6.dylib

1065 /usr/X11/lib/libXmuu.1.dylib

1066 /usr/X11/lib/libXp.6.dylib

1067 /usr/X11/lib/libXpm.4.dylib

1068 /usr/X11/lib/libXrandr.2.dylib

1069 /usr/X11/lib/libXrender.1.dylib

1070 /usr/X11/lib/libXss.1.dylib

1071 /usr/X11/lib/libXt.6.dylib

1072 /usr/X11/lib/libXtst.6.dylib

1073 /usr/X11/lib/libXv.1.dylib

1074 /usr/X11/lib/libXvMC.1.dylib

1075 /usr/X11/lib/libXvMCW.1.dylib

1076 /usr/X11/lib/libXxf86misc.1.dylib

1077 /usr/X11/lib/libXxf86vm.1.dylib

1078 /usr/X11/lib/libcairo-script-interpreter.2.dylib

1079 /usr/X11/lib/libcairo.2.dylib

1080 /usr/X11/lib/libdmx.1.dylib

1081 /usr/X11/lib/libfontconfig.1.dylib

1082 /usr/X11/lib/libfontenc.1.dylib

1083 /usr/X11/lib/libfreetype.6.dylib

1084 /usr/X11/lib/libglut.3.dylib

1085 /usr/X11/lib/libpixman-1.0.dylib

1086 /usr/X11/lib/libpng.3.dylib

1087 /usr/X11/lib/libpng12.0.dylib

1088 /usr/X11/lib/libpng15.15.dylib

1089 /usr/X11/lib/libxcb-atom.1.dylib

1090 /usr/X11/lib/libxcb-aux.0.dylib

1091 /usr/X11/lib/libxcb-composite.0.dylib

1092 /usr/X11/lib/libxcb-damage.0.dylib

1093 /usr/X11/lib/libxcb-dpms.0.dylib

1094 /usr/X11/lib/libxcb-dri2.0.dylib

1095 /usr/X11/lib/libxcb-event.1.dylib

1096 /usr/X11/lib/libxcb-glx.0.dylib

1097 /usr/X11/lib/libxcb-icccm.1.dylib

1098 /usr/X11/lib/libxcb-image.0.dylib

1099 /usr/X11/lib/libxcb-keysyms.1.dylib

1100 /usr/X11/lib/libxcb-property.1.dylib

1101 /usr/X11/lib/libxcb-randr.0.dylib

1102 /usr/X11/lib/libxcb-record.0.dylib

1103 /usr/X11/lib/libxcb-render-util.0.dylib

1104 /usr/X11/lib/libxcb-render.0.dylib

1105 /usr/X11/lib/libxcb-reply.1.dylib

1106 /usr/X11/lib/libxcb-res.0.dylib

1107 /usr/X11/lib/libxcb-screensaver.0.dylib

1108 /usr/X11/lib/libxcb-shape.0.dylib

1109 /usr/X11/lib/libxcb-shm.0.dylib

1110 /usr/X11/lib/libxcb-sync.0.dylib

1111 /usr/X11/lib/libxcb-xevie.0.dylib

1112 /usr/X11/lib/libxcb-xf86dri.0.dylib

1113 /usr/X11/lib/libxcb-xfixes.0.dylib

1114 /usr/X11/lib/libxcb-xinerama.0.dylib

1115 /usr/X11/lib/libxcb-xprint.0.dylib

1116 /usr/X11/lib/libxcb-xtest.0.dylib

1117 /usr/X11/lib/libxcb-xv.0.dylib

1118 /usr/X11/lib/libxcb-xvmc.0.dylib

1119 /usr/X11/lib/libxcb.1.dylib

1120 /usr/X11/lib/libxkbfile.1.dylib

1121 /usr/X11/lib/libxkbui.1.dylib

1122 /usr/X11/lib/libxstub.dylib

1123 /usr/local/lib/libUFSDNTFS.dylib

1124 /usr/local/lib/libmacfuse_i32.2.dylib

1125 /usr/local/lib/libmacfuse_i64.2.dylib

1126 /usr/local/lib/libosxfuse_i32.2.dylib

1127 /usr/local/lib/libosxfuse_i64.2.dylib

1128 /usr/local/lib/libusb-1.0.0.dylib

1129

1130 App extensions

1131

1132 com.google.GoogleDrive.FinderSyncAPIExtension

1133 com.wunderkinder.wunderlistdesktop.sharingextension

1134 com.wunderkinder.wunderlistdesktop.todayextension

1135

1136 Modifications

1137

1138 file modified: /Applications/FinanceQuote Update.app/Contents/Resources/Scripts/main.scpt

1139 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat

1140

1141 Bad kernel extensions

1142

1143 /System/Library/Extensions/AppleOSXUSBNCM.kext

1144

1145 Installations

1146

1147 Google Voice and Video: 17/12/2015, 11:52 PM

1148 Wunderlist: 10/12/2015, 1:46 AM

1149 Adobe Flash Player: 10/12/2015, 12:01 AM

1150 ClickToFlash: 9/12/2015, 6:07 PM

1151 Adobe Pepper Flash Player: 8/12/2015, 12:35 AM

1152

1153 Elapsed time (sec): 339

Reply