Level 1

7 points

MacBook Pro keeps waking up from sleep

Hi everyone, I need help with these:

My MacBook Pro (13-inch, Mid 2012) with OS X El Capitan version 10.11.2 (15C50) keeps waking from sleep.

Every day it wakes up at 2 am, does some things, goes back to sleep then wakes up again 1 minute 50 later and keeps doing that until 4.30 am.

I reset the SMC and the NVRAM and changed the hibernatemode from 0 to 25 but it keeps waking.

If it sleeps powered from the battery it doesn't wake up.

pmset -g

Active Profiles:

Battery Power -1

AC Power -1*

Currently in use:

standbydelay 4200

standby 0

womp 0

halfdim 1

hibernatefile /var/vm/sleepimage

sms 1

networkoversleep 0

disksleep 0

sleep 0

autopoweroffdelay 60

hibernatemode 0

autopoweroff 0

ttyskeepawake 0

displaysleep 1

acwake 0

lidwake 1

syslog |grep -i "Wake reason"

Feb 9 00:38:57 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 02:00:53 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 02:02:43 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 02:04:32 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 02:06:22 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 02:08:11 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

...

Feb 9 04:23:33 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 04:25:23 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 04:27:13 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 04:29:03 MacBook-Pro kernel[0] <Notice>: Wake reason: RTC (Alarm)

Feb 9 04:30:53 MacBook-Pro kernel[0] <Notice>: Wake reason: EC.LidOpen (User)

syslog |grep -i "" https://goo.gl/JQ5Nts

pmset -g log https://goo.gl/cgJXea

MacBook Pro (13-inch Mid 2012), OS X El Capitan (10.11.2)

Posted on Feb 11, 2016 5:33 AM

21 replies

andre451 Author

Level 1

7 points

Feb 16, 2016 5:16 AM in response to Linc Davis

I put it to sleep in safe mode the other day and it didn't wake up during the night, I'll try it again tonight.

Linc Davis

Level 10

209,739 points

Feb 16, 2016 5:19 AM in response to andre451

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.8 ("Mountain Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, please back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone who understands the code can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website many times over a period of years. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy the text of a particular web page (not this one) to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is intermittently slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual before running it. If you can only test in safe mode, do that.

6. If you have more than one user, and only one user is affected by the problem,, and the affected user is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") Press the key combination command-A to select all the text, then copy it to the Clipboard by pressing command-C.

8. Launch the built-in Terminal application in any one of the following ways:

☞ Enter the first few letters of its name ("Terminal") into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If the test is taking much longer than usual to run because the computer is very slow, you might be prompted for your password a second time. The authorization that you grant by entering it expires automatically after five minutes.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

Test started

Part 1 of 4 done at: … sec
…
Part 4 of 4 done at: … sec

The test results are on the Clipboard.

Please close this window.

The intervals between parts won't be exactly equal, but they give a rough indication of progress.

Wait for the final message "Please close this window" to appear—again, usually within a few minutes. If you don't see that message within about 30 minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step. You'll have incomplete results, but still something.

In order to get results, the test must either be allowed to complete or else manually stopped as above. If you close the Terminal window while the test is still running, the partial results won't be saved.

11. When the test is complete, or if you stopped it manually, quit Terminal. The results will have been saved to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "close this window" message. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

12. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the software that runs this website. Please post the test results on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

13. When you're done with the test, it's gone. There is nothing to uninstall or clean up.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

15. The linked UNIX shell script bears a notice of copyright. Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

andre451 Author

Level 1

7 points

Feb 16, 2016 6:19 AM in response to Linc Davis

1 Start time: 14:39:41 02/16/16

3 Revision: 1523

5 Model Identifier: MacBookPro9,2

6 Boot ROM Version: MBP91.00D3.B0C

7 System Version: OS X 10.11.2 (15C50)

8 Kernel Version: Darwin 15.2.0

9 Time since boot: 6:08

11 Memory

13 BANK 0/DIMM0

15 Size: 4 GB

16 Speed: 1867 MHz

17 Status: OK

18 Manufacturer: 0x029E

20 BANK 1/DIMM0

22 Size: 4 GB

23 Speed: 1867 MHz

24 Status: OK

25 Manufacturer: 0x029E

27 SerialATA

29 TOSHIBA MK5065GSXF

31 FileVault 2

33 FileVault is On.

35 File opens (/s)

37 uTorrent (UID 501) => /System/Library/CoreServices/SystemVersion.plist (status 0): 6

39 Net in, lifetime (KiB/s)

41 uTorrent (UID 501): 517

43 Energy impact, lifetime (relative)

45 Terminal (UID 501): 16.48

46 kernel_task (UID 0): 15.83

48 CPU usage, lifetime (ms/s)

50 Terminal (UID 501): 166.48

52 Login hook

54 /Library/Scripts/mute-off.sh

56 LS schemes: No

58 Global prefs (system)

60 MultipleSessionEnabled = 1

62 Firewall: On

64 Diagnostic reports

66 2016-02-12 CoreSyncCustomHook crash

68 I/O errors

70 disk1: I/O error 3

72 Volumes

74 disk1: /

76 HID errors: 12

78 Kernel log

80 Feb 16 04:10:25 pci pause: SDXC

81 Feb 16 04:12:14 pci pause: SDXC

82 Feb 16 04:14:03 pci pause: SDXC

83 Feb 16 04:15:53 pci pause: SDXC

84 Feb 16 04:17:42 pci pause: SDXC

85 Feb 16 04:18:47 020978.773760 AppleUSB20InternalHub@1d181000: AppleUSBHub::interruptRetry: resetting due to persistent errors

86 Feb 16 04:19:32 pci pause: SDXC

87 Feb 16 04:21:22 pci pause: SDXC

88 Feb 16 04:23:11 pci pause: SDXC

89 Feb 16 04:25:01 pci pause: SDXC

90 Feb 16 04:26:50 pci pause: SDXC

91 Feb 16 04:28:39 pci pause: SDXC

92 Feb 16 04:30:28 pci pause: SDXC

93 Feb 16 08:29:24 pci pause: SDXC

94 Feb 16 08:30:20 Process launchd [1] disabling system-wide I/O Throttling

95 Feb 16 08:30:20 Process launchd [1] disabling system-wide CPU Throttling

96 Feb 16 08:32:39 IO80211ControllerMonitor::configureSubscriptions() failed to add subscriptionIO80211Controller::start _controller is 0x792f9437c2cb129, provider is 0x792f942bd3d9729

97 Feb 16 08:32:39 init: error getting PHY_MODE; using MODE_UNKNOWN

98 Feb 16 08:32:39 AppleUSBMultitouchDriver::checkStatus - received Status Packet, Payload 2: device was reinitialized

99 Feb 16 08:32:39 pci pause: SDXC

100 Feb 16 14:10:56 pci pause: SDXC

101 Feb 16 14:24:01 011816.361027 IOUSBHostDevice@14200000: IOUSBHostDevice::start: failed to get device descriptor

102 Feb 16 14:24:01 011816.361200 PRT2@14200000: AppleUSBXHCIPort::resetAndCreateDevice: failed to start device

103 Feb 16 14:24:01 011816.361222 PRT2@14200000: AppleUSBXHCIPort::resetAndCreateDevice: failed to create device (0xe00002e9)

104 Feb 16 14:24:01 011816.361227 PRT2@14200000: AppleUSB20XHCIPort::resetAndCreateDevice: failed to create device, disabling port

105

106 System log

107

108 Feb 16 08:34:36 SpotlightNetHelper: tcp_connection_tls_session_error_callback_imp 10 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

109 Feb 16 08:34:36 SpotlightNetHelper: tcp_connection_tls_session_error_callback_imp 6 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

110 Feb 16 08:34:36 SpotlightNetHelper: tcp_connection_tls_session_error_callback_imp 13 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

111 Feb 16 08:34:36 SpotlightNetHelper: tcp_connection_tls_session_error_callback_imp 5 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

112 Feb 16 08:34:36 SpotlightNetHelper: tcp_connection_tls_session_error_callback_imp 15 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

113 Feb 16 08:34:36 SpotlightNetHelper: tcp_connection_tls_session_error_callback_imp 14 __tcp_connection_tls_session_callback_write_block_invoke.434 error 22

114 Feb 16 09:41:07 Google Chrome Helper: CGAffineTransformInvert: singular matrix.

115 Feb 16 14:10:11 symptomsd: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.

116 Feb 16 14:10:11 airportd: _bsd_80211_event_callback: Failed to get power setting from device : err -3900

117 Feb 16 14:10:11 symptomsd: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2

118 Feb 16 14:10:14 airportd: _bsd_80211_event_callback: Failed to get power setting from device : err -3900

119 Feb 16 14:10:14 airportd: _bsd_80211_event_callback: Failed to get power setting from device : err -3900

120 Feb 16 14:10:14 airportd: _bsd_80211_event_callback: Failed to get power setting from device : err -3900

121 Feb 16 14:10:14 symptomsd: -[NetworkAnalyticsEngine _writeJournalRecord:fromCellFingerprint:key:atLOI:ofKind:lqm:isFaulty:] Hashing of the primary key failed. Dropping the journal record.

122 Feb 16 14:10:14 mDNSResponder: mDNS_RegisterInterface: Frequent transitions for interface en1 (FE80:0000:0000:0000:0223:12FF:FE11:2B5C)

123 Feb 16 14:10:15 symptomsd: __73-[NetworkAnalyticsEngine observeValueForKeyPath:ofObject:change:context:]_block_invoke unexpected switch value 2

124 Feb 16 14:11:20 Google Chrome Helper: CGAffineTransformInvert: singular matrix.

125 Feb 16 14:16:48 WindowServer: _CGXSetWindowHasKeyAppearance: Operation on a window 0x1f requiring rights kCGSWindowRightOwner by caller Dashboard

126 Feb 16 14:16:48 WindowServer: _CGXSetWindowHasMainAppearance: Operation on a window 0x1f requiring rights kCGSWindowRightOwner by caller Dashboard

127 Feb 16 14:16:52 WindowServer: _CGXSetWindowHasKeyAppearance: Operation on a window 0x1f requiring rights kCGSWindowRightOwner by caller Dashboard

128 Feb 16 14:16:52 WindowServer: _CGXSetWindowHasKeyAppearance: Operation on a window 0x1a requiring rights kCGSWindowRightOwner by caller Dashboard

129 Feb 16 14:16:52 WindowServer: _CGXSetWindowHasMainAppearance: Operation on a window 0x1f requiring rights kCGSWindowRightOwner by caller Dashboard

130 Feb 16 14:16:52 WindowServer: _CGXSetWindowHasMainAppearance: Operation on a window 0x1a requiring rights kCGSWindowRightOwner by caller Dashboard

131 Feb 16 14:24:07 fseventsd: check_vol_last_mod_time:XXX failed to get mount time (25; &mount_time == 0x700000185478)

132 Feb 16 14:24:07 fseventsd: log dir: /Volumes/ANDRE_1TB/.fseventsd getting new uuid: UUID

133

134 launchd log

135

136 Feb 12 16:01:54 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

137 Feb 12 16:02:30 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.243, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled

138 Feb 12 16:10:12 com.apple.xpc.launchd.domain.pid.Creative Cloud .445: Could not resolve origin of domain. XPC services in this domain's bundle will not be bootstrapped: error = 2: No such file or directory, taint = (untainted)

139 Feb 12 17:01:26 com.google.keystone.user.agent: Interval spawn of service failed: 139: Service cannot presently execute

140 Feb 12 17:02:43 com.epson.esua.launcher: Interval spawn of service failed: 139: Service cannot presently execute

141 Feb 12 18:01:55 com.adobe.fpsaud: Interval spawn of service failed: 139: Service cannot presently execute

142 Feb 12 23:09:45 com.adobe.ARM.UUID: Interval spawn of service failed: 139: Service cannot presently execute

143 Feb 12 23:09:45 com.adobe.ARMDCHelper.UUID: Interval spawn of service failed: 139: Service cannot presently execute

144 Feb 15 15:28:20 com.apple.xpc.launchd.domain.system: Could not import service from caller: caller = Avira-Uninstall.10538, service = com.google.Chrome.56352, error = 134: Service cannot load in requested session

145 Feb 15 16:07:56 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

146 Feb 15 16:08:05 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

147 Feb 15 16:09:33 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.294, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled

148 Feb 15 17:08:19 com.google.keystone.user.agent: Interval spawn of service failed: 139: Service cannot presently execute

149 Feb 15 17:09:36 com.epson.esua.launcher: Interval spawn of service failed: 139: Service cannot presently execute

150 Feb 15 18:08:03 com.adobe.fpsaud: Interval spawn of service failed: 139: Service cannot presently execute

151 Feb 15 22:02:52 com.adobe.ARM.UUID: Interval spawn of service failed: 139: Service cannot presently execute

152 Feb 15 22:02:52 com.adobe.ARMDCHelper.UUID: Interval spawn of service failed: 139: Service cannot presently execute

153 Feb 16 08:32:37 : Failed to remove file or directory: name = dyld_shared_cache_x86_64, error = 1: Operation not permitted. Further logging suppressed.

154 Feb 16 08:32:38 com.apple.airplaydiagnostics.server: Unrecognized MachService property: ResetAtClose

155 Feb 16 08:33:26 com.apple.xpc.launchd.user.domain.501.100007.Aqua: Could not import service from caller: caller = otherbsd.293, service = com.fiplab.BatteryHealthHelper, error = 119: Service is disabled

156 Feb 16 09:32:22 com.google.keystone.user.agent: Interval spawn of service failed: 139: Service cannot presently execute

157 Feb 16 09:33:39 com.epson.esua.launcher: Interval spawn of service failed: 139: Service cannot presently execute

158 Feb 16 10:32:38 com.adobe.fpsaud: Interval spawn of service failed: 139: Service cannot presently execute

159 Feb 16 14:38:38 com.adobe.ARMDCHelper.UUID: Interval spawn of service failed: 139: Service cannot presently execute

160 Feb 16 14:38:38 com.adobe.ARM.UUID: Interval spawn of service failed: 139: Service cannot presently execute

161

162 Console log

163

164 Feb 12 00:13:12 fontd: Failed to compile sql statement (89), "INSERT OR ABORT INTO bookmarks_table VALUES( NULL, ?, ?, ? );"

165 Feb 12 00:13:12 fontd: Failed to compile sql statement (90), "DELETE FROM font_table WHERE font_column == ?;"

166 Feb 12 00:13:12 fontd: Failed to compile sql statement (91), "DELETE FROM dir_table WHERE dir_column == ?;"

167 Feb 12 00:13:12 fontd: Failed to compile sql statement (92), "UPDATE OR ABORT font_table SET flags_column == ( flags_column & ?) | ? WHERE font_column == ?;"

168 Feb 12 00:13:12 fontd: Failed to compile sql statement (93), "UPDATE OR ABORT dir_table SET flags_column == ( flags_column & ?) | ? WHERE dir_column == ?;"

169 Feb 12 00:13:12 fontd: Failed to compile sql statement (94), "INSERT INTO name_table VALUES( ?, ?, ? );"

170 Feb 12 00:13:12 fontd: Failed to compile sql statement (95), "INSERT INTO family_table VALUES( ?, ?, ? );"

171 Feb 12 00:13:12 fontd: Failed to compile sql statement (96), "INSERT INTO subfamily_table VALUES( ?, ?, ? );"

172 Feb 12 00:13:12 fontd: Failed to compile sql statement (97), "INSERT INTO fullname_table VALUES( ?, ?, ? );"

173 Feb 12 00:13:12 fontd: Failed to compile sql statement (98), "INSERT OR REPLACE INTO traits_table VALUES( ?, ?, ?, ?, ? );"

174 Feb 12 00:13:12 fontd: Failed to compile sql statement (99), "INSERT INTO loc_names_table VALUES( ?, ?, ?, ?, ?, ?, ?, ?, ? );"

175 Feb 12 00:13:12 fontd: Failed to compile sql statement (100), "INSERT OR REPLACE INTO charset_table VALUES( NULL, ? );"

176 Feb 12 00:13:12 fontd: Failed to compile sql statement (101), "INSERT INTO unicoderanges_table VALUES( ?, ?, ?, ?, ? );"

177 Feb 12 00:13:12 fontd: Failed to compile sql statement (102), "INSERT INTO language_table VALUES( ?, ?, ? );"

178 Feb 12 00:13:12 fontd: Failed to compile sql statement (103), "INSERT INTO varaxis_table VALUES( ?, ?, ?, ?, ?, ?, ? );"

179 Feb 12 00:13:12 fontd: Failed to compile sql statement (104), "INSERT INTO varinstance_table VALUES( ?, ?, ? );"

180 Feb 12 00:13:12 fontd: Failed to compile sql statement (105), "INSERT OR REPLACE INTO lwfn_table VALUES( ?, ? );"

181 Feb 12 00:13:12 fontd: Failed to compile sql statement (106), "INSERT INTO psname_aliases_table VALUES( ?, ?, ? );"

182 Feb 12 00:13:12 fontd: Failed to compile sql statement (107), "INSERT OR REPLACE INTO format_table VALUES( ?, ? );"

183 Feb 12 00:13:12 fontd: Failed to create font store at path /var/folders/1t/yrndswpn76qdycscnt1xlf540000gn/C/com.apple.FontRegistry/fontreg istry.user, trying alternative

184 Feb 12 00:13:12 fontd: Failed to create alternative font store at path /tmp/fontregistry.user, falling back to in-memory store

185 Feb 12 00:13:15 fontd: XType - wal checkpoint: 0, -1, -1.

186 Feb 12 08:47:19 fontd: Failed to open read-only database, regenerating DB

187 Feb 15 15:30:07 AppCleaner: SecStatucCodeCreateWithPath() error for file:///Applications/Utilities/Avira/Avira-Supportcollector.app/: -67068

188 Feb 15 15:30:10 AppCleaner: SecStatucCodeCreateWithPath() error for file:///Applications/Utilities/Avira-Uninstall.app/: -67068

189

190 System services loaded

191

192 com.adobe.ARMDC.Communicator

193 com.adobe.ARMDC.SMJobBlessHelper

194 com.adobe.fpsaud

195 - status: 78

196 com.apple.ctkd

197 com.apple.iconservices.iconservicesagent

198 com.apple.logd

199 - status: 1

200 com.apple.nsurlsessiond_privileged

201 com.apple.periodic-daily

202 com.apple.secinitd

203 com.apple.watchdogd

204 com.apple.wdhelper

205 com.disc-soft.DAEMONTools.PrivilegedHelper

206 com.dustinrue.CPHelperTool

207 com.iobit.AMCDaemon

208 com.malwarebytes.MBAMHelperTool

209 com.microsoft.office.licensing.helper

210 com.oracle.java.Helper-Tool

211 com.teamviewer.Helper

212 org.macosforge.xquartz.privileged_startx

213 org.serviio.server

214

215 System services disabled

216

217 com.openssh.sshd

218

219 Login services loaded

220

221 com.adobe.AAM.Scheduler-1.0

222 com.adobe.ARMDCHelper.UUID

223 - status: 78

224 com.apple.CSConfigDotMacCert-EMAIL-SharedServices

225 - status: 78

226 com.apple.CallHistoryPluginHelper

227 com.apple.CallHistorySyncHelper

228 com.apple.assistantd

229 com.apple.swcd

230 com.bittorrent.BitTorrent

231 com.bittorrent.uTorrent

232 com.epson.Epson_Low_Ink_Reminder.launcher

233 - status: 78

234 com.epson.esua.launcher

235 - status: 78

236 com.epson.eventmanager.agent

237 - status: 78

238 com.google.keystone.user.agent

239 - status: 78

240 com.iobit.AMCUpdate

241 com.oracle.java.Java-Updater

242 com.spigot.ApplicationManager

243 - status: 78

244 org.macosforge.xquartz.startx

245

246 Login services disabled

247

248 com.adobe.AdobeCreativeCloud

249 com.avast.secureline.userinit

250 com.avast.secureline.home.userinit

251 com.rockysandstudio.FreeMemory.FreeMemoryLaunchHelper

252 com.fiplab.MemoryCleanHelper

253 com.hp.devicemonitor

254 com.victorpimentel.TVShowsHelper

255 com.avast.secureline.update-agent

256

257 User services loaded

258

259 com.apple.pluginkit.pkd

260

261 User services disabled

262

263 com.adobe.AdobeCreativeCloud

264 com.avast.secureline.userinit

265 com.avast.secureline.home.userinit

266 com.rockysandstudio.FreeMemory.FreeMemoryLaunchHelper

267 com.fiplab.MemoryCleanHelper

268 com.hp.devicemonitor

269 com.victorpimentel.TVShowsHelper

270 com.avast.secureline.update-agent

271

272 Contents of /Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist

273 - mod date: Feb 12 15:58:15 2016

274 - size (B): 585

275 - checksum: 3974023970

276

277 <?xml version="1.0" encoding="UTF-8"?>

278 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

279 <plist version="1.0">

280 <dict>

281 <key>Label</key>

282 <string>com.adobe.ARMDCHelper.UUID</string>

283 <key>ProgramArguments</key>

284 <array>

285 <string>/Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper/disable</string>

286 </array>

287 <key>RunAtLoad</key>

288 <true/>

289 <key>StartInterval</key>

290 <integer>12600</integer>

291 </dict>

292 </plist>

293

294 Contents of /Library/LaunchAgents/com.epson.Epson_Low_Ink_Reminder.launcher.plist

295 - mod date: Feb 12 15:58:15 2016

296 - size (B): 506

297 - checksum: 3545718986

298

299 <?xml version="1.0" encoding="UTF-8"?>

300 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

301 <plist version="1.0">

302 <dict>

303 <key>Label</key>

304 <string>com.epson.Epson_Low_Ink_Reminder.launcher</string>

305 <key>ProgramArguments</key>

306 <array>

307 <string>/Applications/Epson Software/Epson Low Ink Reminder.app/Contents/EpsonLowInkReminderAgent.app/Contents/MacOS/EpsonLowInkRe minderAgent/disable</string>

308 </array>

309 <key>RunAtLoad</key>

310 <true/>

311 </dict>

312 </plist>

313

314 Contents of /Library/LaunchAgents/com.epson.esua.launcher.plist

315 - mod date: Feb 12 15:58:15 2016

316 - size (B): 547

317 - checksum: 2045352620

318

319 <?xml version="1.0" encoding="UTF-8"?>

320 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

321 <plist version="1.0">

322 <dict>

323 <key>Label</key>

324 <string>com.epson.esua.launcher</string>

325 <key>ProgramArguments</key>

326 <array>

327 <string>/Applications/Epson Software/EPSON Software Updater.app/Contents/EPSON Software Updater Agent.app/Contents/MacOS/EPSON Software Updater Agent/disable</string>

328 </array>

329 <key>RunAtLoad</key>

330 <true/>

331 <key>StartInterval</key>

332 <integer>3600</integer>

333 </dict>

334 </plist>

335

336 Contents of /Library/LaunchAgents/com.epson.eventmanager.agent.plist

337 - mod date: Feb 12 15:58:15 2016

338 - size (B): 712

339 - checksum: 2428299547

340

341 <?xml version="1.0" encoding="UTF-8"?>

342 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

343 <plist version="1.0">

344 <dict>

345 <key>KeepAlive</key>

346 <dict>

347 <key>PathState</key>

348 <dict>

349 <key>/Applications/Epson Software/Event Manager.app/Contents/Resources/Assistants/Event Manager/EEventManager.app</key>

350 <true/>

351 </dict>

352 </dict>

353 <key>Label</key>

354 <string>com.epson.eventmanager.agent</string>

355 <key>ProgramArguments</key>

356 <array>

357 <string>/Applications/Epson Software/Event Manager.app/Contents/Resources/Assistants/Event Manager/EEventManager.app/Contents/MacOS/EEventManager/disable</string>

358 </array>

359 <key>RunAtLoad</key>

360 <true/>

361 </dict>

362 </plist>

363

364 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

365 - mod date: Feb 12 15:58:15 2016

366 - size (B): 765

367 - checksum: 596980569

368

369 <?xml version="1.0" encoding="UTF-8"?>

370 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

371 <plist version="1.0">

372 <dict>

373 <key>Label</key>

374 <string>com.oracle.java.Java-Updater</string>

375 <key>ProgramArguments</key>

376 <array>

377 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater/disable</string>

378 <string>-bgcheck</string>

379 </array>

380 <key>StandardErrorPath</key>

381 <string>/dev/null</string>

382 <key>StandardOutPath</key>

383 <string>/dev/null</string>

384 <key>StartCalendarInterval</key>

385 <dict>

386 <key>Hour</key>

387 <integer>21</integer>

388 <key>Minute</key>

389 <integer>7</integer>

390 <key>Weekday</key>

391 <integer>6</integer>

392 </dict>

393 </dict>

394

395 ...and 1 more line(s)

396

397 Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist

398 - mod date: Feb 12 15:58:15 2016

399 - size (B): 676

400 - checksum: 2573594465

401

402 <?xml version="1.0" encoding="UTF-8"?>

403 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

404 <plist version="1.0">

405 <dict>

406 <key>Disabled</key>

407 <true/>

408 <key>KeepAlive</key>

409 <true/>

410 <key>Label</key>

411 <string>com.teamviewer.teamviewer</string>

412 <key>LimitLoadToSessionType</key>

413 <string>Aqua</string>

414 <key>ProgramArguments</key>

415 <array>

416 <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer/disable</string>

417 <string>-RunAsAgent</string>

418 <string>YES</string>

419 </array>

420 <key>RunAtLoad</key>

421 <true/>

422 <key>WorkingDirectory</key>

423 <string>/Applications/TeamViewer.app/Contents/MacOS/</string>

424 </dict>

425 </plist>

426

427 Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

428 - mod date: Feb 12 15:58:15 2016

429 - size (B): 787

430 - checksum: 3242354755

431

432 <?xml version="1.0" encoding="UTF-8"?>

433 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

434 <plist version="1.0">

435 <dict>

436 <key>Disabled</key>

437 <true/>

438 <key>KeepAlive</key>

439 <true/>

440 <key>Label</key>

441 <string>com.teamviewer.desktop</string>

442 <key>LimitLoadToSessionType</key>

443 <array>

444 <string>LoginWindow</string>

445 <string>Aqua</string>

446 </array>

447 <key>ProgramArguments</key>

448 <array>

449 <string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop/disabl e</string>

450 <string>-RunAsAgent</string>

451 <string>YES</string>

452 <string>-Module</string>

453 <string>Full</string>

454 </array>

455 <key>RunAtLoad</key>

456 <true/>

457

458 ...and 4 more line(s)

459

460 Contents of /Library/LaunchDaemons/com.adobe.fpsaud.plist

461 - mod date: Feb 12 15:58:15 2016

462 - size (B): 470

463 - checksum: 394731943

464

465 <?xml version="1.0" encoding="UTF-8"?>

466 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

467 <plist version="1.0">

468 <dict>

469 <key>KeepAlive</key>

470 <false/>

471 <key>Label</key>

472 <string>com.adobe.fpsaud</string>

473 <key>ProgramArguments</key>

474 <array>

475 <string>/Library/Application Support/Adobe/Flash Player Install Manager/fpsaud/disable</string>

476 </array>

477 <key>StartInterval</key>

478 <integer>3600</integer>

479 </dict>

480 </plist>

481

482 Contents of /Library/LaunchDaemons/com.disc-soft.DAEMONTools.PrivilegedHelper.plist

483 - mod date: Feb 12 15:58:15 2016

484 - size (B): 888

485 - checksum: 3292731991

486

487 <?xml version="1.0" encoding="UTF-8"?>

488 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

489 <plist version="1.0">

490 <dict>

491 <key>EnableTransactions</key>

492 <false/>

493 <key>GroupName</key>

494 <string>wheel</string>

495 <key>Label</key>

496 <string>com.disc-soft.DAEMONTools.PrivilegedHelper</string>

497 <key>ProgramArguments</key>

498 <array>

499 <string>/Library/PrivilegedHelperTools/com.disc-soft.DAEMONTools.PrivilegedHelp er/disable</string>

500 </array>

501 <key>Sockets</key>

502 <dict>

503 <key>MasterSocket</key>

504 <dict>

505 <key>SockFamily</key>

506 <string>Unix</string>

507 <key>SockPathMode</key>

508 <integer>438</integer>

509 <key>SockPathName</key>

510 <string>/var/run/com.disc-soft.DAEMONTools.PrivilegedHelper.socket</string>

511 <key>SockType</key>

512

513 ...and 7 more line(s)

514

515 Contents of /Library/LaunchDaemons/com.dustinrue.CPHelperTool.plist

516 - mod date: Feb 12 15:58:15 2016

517 - size (B): 771

518 - checksum: 44130964

519

520 <?xml version="1.0" encoding="UTF-8"?>

521 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

522 <plist version="1.0">

523 <dict>

524 <key>Label</key>

525 <string>com.dustinrue.CPHelperTool</string>

526 <key>OnDemand</key>

527 <true/>

528 <key>ProgramArguments</key>

529 <array>

530 <string>/Library/PrivilegedHelperTools/com.dustinrue.CPHelperTool/disable</stri ng>

531 </array>

532 <key>ServiceIPC</key>

533 <true/>

534 <key>Sockets</key>

535 <dict>

536 <key>MasterSocket</key>

537 <dict>

538 <key>SockFamily</key>

539 <string>Unix</string>

540 <key>SockPathMode</key>

541 <integer>438</integer>

542 <key>SockPathName</key>

543 <string>/var/run/com.dustinrue.CPHelperTool.socket</string>

544 <key>SockType</key>

545

546 ...and 5 more line(s)

547

548 Contents of /Library/LaunchDaemons/com.iobit.AMCDaemon.plist

549 - mod date: Feb 15 21:10:08 2016

550 - size (B): 492

551 - checksum: 80404255

552

553 <?xml version="1.0" encoding="UTF-8"?>

554 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

555 <plist version="1.0">

556 <dict>

557 <key>KeepAlive</key>

558 <true/>

559 <key>Label</key>

560 <string>com.iobit.AMCDaemon</string>

561 <key>UserName</key>

562 <string>root</string>

563 <key>ProgramArguments</key>

564 <array>

565 <string>/Library/Application Support/MacBooster/AMCDaemon</string>

566 <string>-load</string>

567 </array>

568 <key>RunAtLoad</key>

569 <true/>

570 </dict>

571 </plist>

572

573 Contents of /Library/LaunchDaemons/com.malwarebytes.MBAMHelperTool.plist

574 - mod date: Feb 12 15:58:15 2016

575 - size (B): 592

576 - checksum: 2538526053

577

578 <?xml version="1.0" encoding="UTF-8"?>

579 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

580 <plist version="1.0">

581 <dict>

582 <key>Label</key>

583 <string>com.malwarebytes.MBAMHelperTool</string>

584 <key>MachServices</key>

585 <dict>

586 <key>com.malwarebytes.MBAMHelperTool</key>

587 <true/>

588 </dict>

589 <key>Program</key>

590 <string>/Library/PrivilegedHelperTools/com.malwarebytes.MBAMHelperTool</string>

591 <key>ProgramArguments</key>

592 <array>

593 <string>/Library/PrivilegedHelperTools/com.malwarebytes.MBAMHelperTool/disable< /string>

594 </array>

595 </dict>

596 </plist>

597

598 Contents of /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

599 - mod date: Feb 12 15:58:15 2016

600 - size (B): 576

601 - checksum: 1071658030

602

603 <?xml version="1.0" encoding="UTF-8"?>

604 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

605 <plist version="1.0">

606 <dict>

607 <key>Label</key>

608 <string>com.microsoft.office.licensing.helper</string>

609 <key>MachServices</key>

610 <dict>

611 <key>com.microsoft.office.licensing.helper.port</key>

612 <true/>

613 </dict>

614 <key>OnDemand</key>

615 <true/>

616 <key>ProgramArguments</key>

617 <array>

618 <string>/Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper/di sable</string>

619 </array>

620 <key>ServiceIPC</key>

621 <true/>

622 </dict>

623 </plist>

624

625 Contents of /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

626 - mod date: Feb 12 15:58:15 2016

627 - size (B): 645

628 - checksum: 3829477473

629

630 <?xml version="1.0" encoding="UTF-8"?>

631 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

632 <plist version="1.0">

633 <dict>

634 <key>Label</key>

635 <string>com.oracle.java.Helper-Tool</string>

636 <key>ProgramArguments</key>

637 <array>

638 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool/disable</string >

639 </array>

640 <key>SHAuthorizationRight</key>

641 <string>system.preferences</string>

642 <key>WatchPaths</key>

643 <array>

644 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Update r.plist</string>

645 </array>

646 </dict>

647 </plist>

648

649 Contents of /Library/LaunchDaemons/com.teamviewer.Helper.plist

650 - mod date: Feb 12 15:58:15 2016

651 - size (B): 552

652 - checksum: 199883012

653

654 <?xml version="1.0" encoding="UTF-8"?>

655 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

656 <plist version="1.0">

657 <dict>

658 <key>Label</key>

659 <string>com.teamviewer.Helper</string>

660 <key>MachServices</key>

661 <dict>

662 <key>com.teamviewer.Helper</key>

663 <true/>

664 </dict>

665 <key>Program</key>

666 <string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

667 <key>ProgramArguments</key>

668 <array>

669 <string>/Library/PrivilegedHelperTools/com.teamviewer.Helper/disable</string>

670 </array>

671 </dict>

672 </plist>

673

674 Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

675 - mod date: Feb 12 15:58:15 2016

676 - size (B): 619

677 - checksum: 1322107948

678

679 <?xml version="1.0" encoding="UTF-8"?>

680 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

681 <plist version="1.0">

682 <dict>

683 <key>Disabled</key>

684 <true/>

685 <key>KeepAlive</key>

686 <true/>

687 <key>Label</key>

688 <string>com.teamviewer.service</string>

689 <key>ProgramArguments</key>

690 <array>

691 <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service/disable< /string>

692 <string>-Module</string>

693 <string>Full</string>

694 </array>

695 <key>RunAtLoad</key>

696 <true/>

697 <key>WorkingDirectory</key>

698 <string>/Applications/TeamViewer.app/Contents/MacOS</string>

699 </dict>

700 </plist>

701

702 Contents of /Library/LaunchDaemons/org.serviio.server.plist

703 - mod date: Jan 13 00:11:48 2015

704 - size (B): 903

705 - checksum: 3198557513

706

707 <?xml version="1.0" encoding="UTF-8"?>

708 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

709 <plist version="1.0">

710 <dict>

711 <key>StandardOutPath</key>

712 <string>/var/log/serviio/serviio.log</string>

713 <key>StandardErrorPath</key>

714 <string>/var/log/serviio/serviio.log</string>

715 <key>KeepAlive</key>

716 <false/>

717 <key>Label</key>

718 <string>org.serviio.server</string>

719 <key>EnvironmentVariables</key>

720 <dict>

721 <key>SERVIIO_HOME</key>

722 <string>/Library/Application Support/Serviio</string>

723 </dict>

724 <key>ProgramArguments</key>

725 <array>

726 <string>/bin/bash</string>

727 <string>/Library/Application Support/Serviio/bin/serviio.sh</string>

728 </array>

729 <key>RunAtLoad</key>

730 <true/>

731 <key>UserName</key>

732

733 ...and 3 more line(s)

734

735 Contents of /private/etc/hosts

736 - mod date: Aug 14 18:54:02 2014

737 - size (B): 454

738 - checksum: 2830344808

739

740 127.0.0.1 localhost

741 255.255.255.255 broadcasthost

742 ::1 localhost

743 fe80::1%lo0 localhost

744 127.0.0.1 activate.adobe.com

745 127.0.0.1 practivate.adobe.com

746 127.0.0.1 lm.licenses.adobe.com

747 127.0.0.1 lmlicenses.wip4.adobe.com

748 127.0.0.1 hlrcv.stage.adobe.com

749 127.0.0.1 na1r.services.adobe.com

750

751 Contents of /private/etc/ssh/ssh_config

752 - mod date: Dec 7 13:57:53 2012

753 - size (B): 1732

754 - checksum: 1281775184

755

756 Host *

757 SendEnv LANG LC_*

758 Host *

759 XAuthLocation /opt/X11/bin/xauth

760

761 Contents of Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

762 - mod date: Feb 12 15:58:15 2016

763 - size (B): 679

764 - checksum: 2075860409

765

766 <?xml version="1.0" encoding="UTF-8"?>

767 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

768 <plist version="1.0">

769 <dict>

770 <key>Label</key>

771 <string>com.adobe.AAM.Scheduler-1.0</string>

772 <key>Program</key>

773 <string>/Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility</string>

774 <key>ProgramArguments</key>

775 <array>

776 <string>/Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility/disable</string>

777 <string>-mode=scheduled</string>

778 </array>

779 <key>StartCalendarInterval</key>

780 <dict>

781 <key>Hour</key>

782 <integer>2</integer>

783 <key>Minute</key>

784 <integer>0</integer>

785 </dict>

786 </dict>

787 </plist>

788

789 Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist

790 - mod date: Nov 1 01:41:25 2012

791 - size (B): 603

792 - checksum: 394026997

793

794 <?xml version="1.0" encoding="UTF-8"?>

795 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

796 <plist version="1.0">

797 <dict>

798 <key>Label</key>

799 <string>com.adobe.ARM.UUID</string>

800 <key>ProgramArguments</key>

801 <array>

802 <string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>

803 <string>semi-auto</string>

804 </array>

805 <key>RunAtLoad</key>

806 <true/>

807 <key>StartInterval</key>

808 <integer>12600</integer>

809 </dict>

810 </plist>

811

812 Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist

813 - mod date: Oct 4 00:35:22 2012

814 - size (B): 900

815 - checksum: 3788290848

816

817 <?xml version="1.0" encoding="UTF-8"?>

818 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

819 <plist version="1.0">

820 <dict>

821 <key>KeepAlive</key>

822 <false/>

823 <key>Label</key>

824 <string>com.apple.CSConfigDotMacCert-EMAIL-SharedServices</string>

825 <key>LimitLoadToSessionType</key>

826 <string>Aqua</string>

827 <key>LowPriorityIO</key>

828 <true/>

829 <key>Nice</key>

830 <integer>10</integer>

831 <key>ProgramArguments</key>

832 <array>

833 <string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>

834 <string>-l</string>

835 <string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>

836 <string>-u</string>

837 <string>EMAIL</string>

838 <string>-t</string>

839 <string>SharedServices</string>

840 <string>-s</string>

841 </array>

842

843 ...and 4 more line(s)

844

845 Contents of Library/LaunchAgents/com.bittorrent.BitTorrent.plist

846 - mod date: Feb 12 15:58:15 2016

847 - size (B): 477

848 - checksum: 775187530

849

850 <?xml version="1.0" encoding="UTF-8"?>

851 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

852 <plist version="1.0">

853 <dict>

854 <key>KeepAlive</key>

855 <false/>

856 <key>Label</key>

857 <string>com.bittorrent.BitTorrent</string>

858 <key>LaunchOnlyOnce</key>

859 <true/>

860 <key>ProgramArguments</key>

861 <array>

862 <string>/usr/bin/open/disable</string>

863 <string>-n</string>

864 <string>/Applications/BitTorrent.app</string>

865 </array>

866 </dict>

867 </plist>

868

869 Contents of Library/LaunchAgents/com.bittorrent.uTorrent.plist

870 - mod date: Feb 15 16:25:36 2016

871 - size (B): 487

872 - checksum: 3438286040

873

874 <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC -//Apple Computer//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd> <plist version="1.0"> <dict> <key>Label</key> <string>com.bittorrent.uTorrent</string> <key>ProgramArguments</key> <array> <string>/usr/bin/open</string> <string>-n</string> <string>/Applications/uTorrent.app</string> </array> <key>KeepAlive</key> <false/> <key>LaunchOnlyOnce</key> <true/> </dict> </plist>

875

876 Contents of Library/LaunchAgents/com.google.keystone.agent.plist

877 - mod date: Feb 12 15:58:15 2016

878 - size (B): 807

879 - checksum: 3225191478

880

881 <?xml version="1.0" encoding="UTF-8"?>

882 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

883 <plist version="1.0">

884 <dict>

885 <key>Label</key>

886 <string>com.google.keystone.user.agent</string>

887 <key>LimitLoadToSessionType</key>

888 <string>Aqua</string>

889 <key>ProgramArguments</key>

890 <array>

891 <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.** ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent/disable</string>

892 <string>-runMode</string>

893 <string>ifneeded</string>

894 </array>

895 <key>RunAtLoad</key>

896 <true/>

897 <key>StandardErrorPath</key>

898 <string>/dev/null</string>

899 <key>StandardOutPath</key>

900 <string>/dev/null</string>

901 <key>StartInterval</key>

902 <integer>3523</integer>

903 </dict>

904 </plist>

905

906 Contents of Library/LaunchAgents/com.iobit.AMCUpdate.plist

907 - mod date: Feb 15 21:11:54 2016

908 - size (B): 439

909 - checksum: 2149092601

910

911 <?xml version="1.0" encoding="UTF-8"?>

912 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

913 <plist version="1.0">

914 <dict>

915 <key>KeepAlive</key>

916 <false/>

917 <key>Label</key>

918 <string>com.iobit.AMCUpdate</string>

919 <key>LaunchOnlyOnce</key>

920 <true/>

921 <key>Program</key>

922 <string>/Applications/MacBooster 3.app/Contents/Resources/AMCUpdate.app/Contents/MacOS/AMCUpdate</string>

923 </dict>

924 </plist>

925

926 Contents of Library/LaunchAgents/com.iobit.MacBoosterMini.plist

927 - mod date: Feb 15 21:11:54 2016

928 - size (B): 470

929 - checksum: 3898290408

930

931 <?xml version="1.0" encoding="UTF-8"?>

932 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

933 <plist version="1.0">

934 <dict>

935 <key>KeepAlive</key>

936 <true/>

937 <key>Label</key>

938 <string>com.iobit.MacBooster-mini</string>

939 <key>Program</key>

940 <string>/Users/USER/Library/Application Support/MacBooster 3/MacBooster mini.app/Contents/MacOS/MacBooster mini</string>

941 <key>Version</key>

942 <integer>14618</integer>

943 </dict>

944 </plist>

945

946 Contents of Library/LaunchAgents/com.spigot.ApplicationManager.plist

947 - mod date: Feb 15 21:13:19 2016

948 - size (B): 487

949 - checksum: 793618783

950

951 <?xml version="1.0" encoding="UTF-8"?>

952 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

953 <plist version="1.0">

954 <dict>

955 <key>KeepAlive</key>

956 <true/>

957 <key>Label</key>

958 <string>com.spigot.ApplicationManager</string>

959 <key>ProgramArguments</key>

960 <array>

961 <string>/Users/USER/Library/Application Support/Spigot/ApplicationManager/disable</string>

962 <string>--protect</string>

963 </array>

964 <key>RunAtLoad</key>

965 <true/>

966 </dict>

967 </plist>

968

969 Contents of Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist

970 - mod date: Feb 12 15:58:15 2016

971 - size (B): 648

972 - checksum: 2668282735

973

974 <?xml version="1.0" encoding="UTF-8"?>

975 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

976 <plist version="1.0">

977 <dict>

978 <key>Disabled</key>

979 <true/>

980 <key>KeepAlive</key>

981 <false/>

982 <key>Label</key>

983 <string>org.virtualbox.vboxwebsvc</string>

984 <key>Program</key>

985 <string>/Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv/disable</string>

986 <key>Sockets</key>

987 <dict>

988 <key>Listeners</key>

989 <dict>

990 <key>SockFamily</key>

991 <string>IPv4</string>

992 <key>SockServiceName</key>

993 <string>18083</string>

994 <key>SockType</key>

995 <string>stream</string>

996 </dict>

997 </dict>

998 </dict>

999

1000 ...and 1 more line(s)

1001

1002 User login items

1003

1004 Serviio

1005 - missing value

1006 CleanMyMac 3 Menu

1007 - missing value

1008 uTorrent

1009 - /Applications/uTorrent.app

1010

1011 Firefox extensions

1012

1013 FXChrome

1014 French spelling dictionaries

1015 FireGestures

1016 United States English Spellchecker

1017 Adblock Plus

1018 avast! Online Security

1019 Web of Trust - WOT

1020 European Portuguese Spellchecker

1021

1022 Widgets

1023

1024 MiniSheet

1025 iStat Pro

1026

1027 iCloud services

1028

1029 MOBILE_DOCUMENTS

1030 PHOTO_STREAM

1031 MAIL_AND_NOTES

1032 CONTACTS

1033 CALENDAR

1034 REMINDERS

1035 BOOKMARKS

1036 NOTES

1037

1038 iCloud errors

1039

1040 bird 520

1041 Finder 8

1042 CallHistorySyncHelper 4

1043

1044 Continuity errors

1045

1046 sharingd 54

1047

1048 Restrictive permissions: 323

1049

1050 Lockfiles: 23

1051

1052 Global prefs (user)

1053

1054 AppleEnableMenuBarTransparency = 1

1055 NSQuitAlwaysKeepsWindows = 1

1056 userMenuExtraStyle = 1

1057

1058 Data packages

1059

1060 /Users/USER/Library/Mobile Documents/356QY8883U~com~melodis~soundhound~free/Documents/Bookmarks.soundhound bookmark

1061 /Users/USER/Library/Mobile Documents/356QY8883U~com~melodis~soundhound~free/Documents/History.soundhoundhi story

1062 /Users/USER/Library/Developer/Xcode/DerivedData/HelloWorld2-exyftqjkyklxkjdnazq nkaldjfqu/Build/Products/Debug-iphonesimulator/HelloWorld2.app.dSYM

1063 /Users/USER/Library/Developer/Xcode/DerivedData/calculator-bkuvdifdthljchfoweoa cmvnsesg/Build/Products/Debug-iphonesimulator/calculator.app.dSYM

1064 /Users/USER/Library/Developer/Xcode/DerivedData/simpleStarter-gxopnxxaqakeeubto oekfcvxujmj/Build/Products/Debug-iphonesimulator/simpleStarter.app.dSYM

1065 /Users/USER/Library/Developer/Xcode/DerivedData/HelloWorld-cqadgmaewoizcfavjbwc duuflexf/Build/Products/Debug-iphonesimulator/HelloWorld.app.dSYM

1066 /Users/USER/Library/Mobile Documents/T3BH5FS28S~com~ayopagames~welder/Documents/game.gsp

1067

1068 Extensions

1069

1070 /Library/Extensions/hp_io_enabler_compound.kext

1071 - com.hp.kext.io.enabler.compound

1072 - Hewlett Packard (6HB5Y2QTA3)

1073 /System/Library/Extensions/JMicronATA.kext

1074 - com.jmicron.JMicronATA

1075 /System/Library/Extensions/UsbEthernetGadget.kext

1076 - com.tomtom.driver.UsbEthernetGadget

1077 /System/Library/Extensions/VMsvga2.kext

1078 - net.osx86.driver.VMsvga2

1079 /System/Library/Extensions/VMsvga2Accel.kext

1080 - net.osx86.driver.VMsvga2Accel

1081 /System/Library/Extensions/hp_fax_io.kext

1082 - com.hp.kext.hp-fax-io

1083

1084 Applications

1085

1086 /Applications/AppCleaner.app

1087 - net.freemacsoft.AppCleaner

1088 - Julien Ramseier (X85ZX835W9)

1089 /Applications/CCleaner.app

1090 - com.piriform.ccleaner

1091 - Piriform Ltd (8M34BTQQ45)

1092 /Applications/DAEMON Tools Lite.app

1093 - com.disc-soft.DAEMONToolsLite

1094 - Disc Soft Ltd

1095 /Applications/Firefox.app

1096 - org.mozilla.firefox

1097 - Mozilla Corporation

1098 /Applications/MPlayerX.app

1099 - org.niltsh.MPlayerX

1100 - Zongyao Qu (JQRW8D24U4)

1101 /Applications/MacBooster 3.app

1102 - com.iobit.MacBooster-3

1103 - Apperience Corporation (MA9EDUZPCW)

1104 /Applications/Microsoft Office 2011/Microsoft Excel.app

1105 - com.microsoft.Excel

1106 - Microsoft Corporation

1107 /Applications/Microsoft Office 2011/Microsoft Outlook.app

1108 - com.microsoft.Outlook

1109 - Microsoft Corporation

1110 /Applications/Microsoft Office 2011/Microsoft PowerPoint.app

1111 - com.microsoft.Powerpoint

1112 - Microsoft Corporation

1113 /Applications/Microsoft Office 2011/Microsoft Word.app

1114 - com.microsoft.Word

1115 - Microsoft Corporation

1116 /Applications/Microsoft Office 2011/Office/Microsoft Chart Converter.app

1117 - com.microsoft.openxml.chart.app

1118 - Microsoft Corporation

1119 /Applications/Microsoft Office 2011/Office/Microsoft Clip Gallery.app

1120 - com.microsoft.ClipGallery

1121 - Microsoft Corporation

1122 /Applications/Microsoft Office 2011/Office/Microsoft Graph.app

1123 - com.microsoft.Graph

1124 - Microsoft Corporation

1125 /Applications/Microsoft Office 2011/Office/Open XML for Excel.app

1126 - com.microsoft.openxml.excel.app

1127 - Microsoft Corporation

1128 /Applications/Skype.app

1129 - com.skype.skype

1130 - Skype

1131 /Applications/TeamViewer.app

1132 - com.teamviewer.TeamViewer

1133 - TeamViewer GmbH

1134 /Applications/VirtualBox.app

1135 - org.virtualbox.app.macos.VirtualBox

1136 - Oracle America, Inc. (VB5E2TV963)

1137 /Applications/Wineskin Winery.app

1138 - com.urgesoftware.wineskin.wineskinwinery

1139 - Urge Software LLC

1140 /Applications/vstax2014.app

1141 - ch.abraxas.vstax2014.7

1142 - Abraxas Informatik AG

1143 /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

1144 - com.microsoft.autoupdate2

1145 - Microsoft Corporation

1146 /Library/Application Support/Microsoft/MERP2.0/Microsoft Error Reporting.app

1147 - com.microsoft.error_reporting

1148 - Microsoft Corporation

1149 /Library/Application Support/Microsoft/MERP2.0/Microsoft Ship Asserts.app

1150 - com.microsoft.netlib.shipassertprocess

1151 - Microsoft Corporation

1152 /Library/Application Support/Sophos/he/Installer.app

1153 - com.sophos.macendpoint.Installer

1154 - Sophos

1155 /Users/USER/Library/Application Support/Helper/Wondershare Helper Compact.app

1156 - com.wondershare.helper_compact

1157 - Wondershare Software Co., Ltd

1158 /Users/USER/Library/Application Support/Java/Java 1.8.66.17/Java 8 Update 66.app

1159 - Oracle.MacJREInstaller

1160 - Oracle America, Inc.

1161 /Users/USER/Library/Application Support/Java/Java 1.8.71.15/Java 8 Update 71.app

1162 - Oracle.MacJREInstaller

1163 - Oracle America, Inc.

1164 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1718/MPlayerX.app

1165 - org.niltsh.MPlayerX

1166 - Zongyao Qu (JQRW8D24U4)

1167 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 10/MPlayerX.app

1168 - org.niltsh.MPlayerX

1169 - Zongyao Qu (JQRW8D24U4)

1170 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 13/MPlayerX.app

1171 - org.niltsh.MPlayerX

1172 - Zongyao Qu (JQRW8D24U4)

1173 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 14/MPlayerX.app

1174 - org.niltsh.MPlayerX

1175 - Zongyao Qu (JQRW8D24U4)

1176 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 15/MPlayerX.app

1177 - org.niltsh.MPlayerX

1178 - Zongyao Qu (JQRW8D24U4)

1179 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 16/MPlayerX.app

1180 - org.niltsh.MPlayerX

1181 - Zongyao Qu (JQRW8D24U4)

1182 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 17/MPlayerX.app

1183 - org.niltsh.MPlayerX

1184 - Zongyao Qu (JQRW8D24U4)

1185 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 18/MPlayerX.app

1186 - org.niltsh.MPlayerX

1187 - Zongyao Qu (JQRW8D24U4)

1188 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 19/MPlayerX.app

1189 - org.niltsh.MPlayerX

1190 - Zongyao Qu (JQRW8D24U4)

1191 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 22/MPlayerX.app

1192 - org.niltsh.MPlayerX

1193 - Zongyao Qu (JQRW8D24U4)

1194 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777 6/MPlayerX.app

1195 - org.niltsh.MPlayerX

1196 - Zongyao Qu (JQRW8D24U4)

1197 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1777/MPlayerX.app

1198 - org.niltsh.MPlayerX

1199 - Zongyao Qu (JQRW8D24U4)

1200 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1854 1/MPlayerX.app

1201 - org.niltsh.MPlayerX

1202 - Zongyao Qu (JQRW8D24U4)

1203 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1854 3/MPlayerX.app

1204 - org.niltsh.MPlayerX

1205 - Zongyao Qu (JQRW8D24U4)

1206 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1854 8/MPlayerX.app

1207 - org.niltsh.MPlayerX

1208 - Zongyao Qu (JQRW8D24U4)

1209 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 10/MPlayerX.app

1210 - org.niltsh.MPlayerX

1211 - Zongyao Qu (JQRW8D24U4)

1212 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 13/MPlayerX.app

1213 - org.niltsh.MPlayerX

1214 - Zongyao Qu (JQRW8D24U4)

1215 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 14/MPlayerX.app

1216 - org.niltsh.MPlayerX

1217 - Zongyao Qu (JQRW8D24U4)

1218 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 15/MPlayerX.app

1219 - org.niltsh.MPlayerX

1220 - Zongyao Qu (JQRW8D24U4)

1221 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 16/MPlayerX.app

1222 - org.niltsh.MPlayerX

1223 - Zongyao Qu (JQRW8D24U4)

1224 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 18/MPlayerX.app

1225 - org.niltsh.MPlayerX

1226 - Zongyao Qu (JQRW8D24U4)

1227 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 2/MPlayerX.app

1228 - org.niltsh.MPlayerX

1229 - Zongyao Qu (JQRW8D24U4)

1230 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 3/MPlayerX.app

1231 - org.niltsh.MPlayerX

1232 - Zongyao Qu (JQRW8D24U4)

1233 /Users/USER/Library/Application Support/MPlayerX/MPlayerX 1887 9/MPlayerX.app

1234 - org.niltsh.MPlayerX

1235 - Zongyao Qu (JQRW8D24U4)

1236 /Users/USER/Library/Application Support/MacBooster 3/MacBooster mini.app

1237 - com.iobit.MacBooster-mini

1238 - Apperience Corporation (MA9EDUZPCW)

1239

1240 Frameworks

1241

1242 /Library/Frameworks/Adobe AIR.framework

1243 - com.adobe.AIR

1244 /Library/Frameworks/DivXInstallerUtilities.framework

1245 - com.yourcompany.DivXInstallerUtilities

1246 /Library/Frameworks/GlimsAdditions.framework

1247 - NA

1248 /Library/Frameworks/MacFUSE.framework

1249 - com.google.MacFUSE

1250 /Library/Frameworks/OSXFUSE.framework

1251 - com.github.osxfuse.framework

1252

1253 PrefPane

1254

1255 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

1256 - com.oracle.java.JavaControlPanel

1257 /Library/PreferencePanes/Flash Player.prefPane

1258 - com.adobe.flashplayerpreferences

1259 /Library/PreferencePanes/NTFS-3G.prefPane

1260 - org.catacombae.macntfs-3g.prefpane

1261 /Library/PreferencePanes/OSXFUSE.prefPane

1262 - com.github.osxfuse.OSXFUSEPrefPane

1263 /Users/USER/Library/PreferencePanes/TVShows.prefPane

1264 - com.victorpimentel.TVShows2

1265 - V�ctor Pimentel Rodr�guez (2FU8QA6K89)

1266

1267 Bundles

1268

1269 /Library/Application Support/Adobe/APE/3.4/adbeapecore.framework/Versions/A/Libraries/Flash Player.plugin

1270 - com.macromedia.FlashPlayer-10.4-10.5.plugin

1271 /Library/Filesystems/osxfusefs.fs

1272 - com.github.osxfuse.filesystems.osxfusefs

1273 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

1274 - com.adobe.adobecp

1275 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

1276 - com.macromedia.FlashPlayer-10.6.plugin

1277 /Library/Internet Plug-Ins/AdobePDFViewer.plugin

1278 - com.adobe.acrobat.pdfviewer

1279 - Adobe Systems, Inc.

1280 /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

1281 - com.adobe.acrobat.pdfviewerNPAPI

1282 - Adobe Systems, Inc.

1283 /Library/Internet Plug-Ins/DirectorShockwave.plugin

1284 - com.adobe.director.shockwave.pluginshim

1285 - Adobe Systems, Inc.

1286 /Library/Internet Plug-Ins/Flash Player.plugin

1287 - com.macromedia.Flash Player.plugin

1288 - Adobe Systems, Inc.

1289 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

1290 - com.oracle.java.JavaAppletPlugin

1291 /Library/Internet Plug-Ins/MeetingJoinPlugin.plugin

1292 - com.microsoft.communicator.meetingjoinplugin

1293 /Library/Internet Plug-Ins/PepperFlashPlayer/PepperFlashPlayer.plugin

1294 - com.macromedia.PepperFlashPlayer.pepper

1295 - Adobe Systems, Inc.

1296 /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

1297 - com.microsoft.sharepoint.browserplugin

1298 /Library/Internet Plug-Ins/Silverlight.plugin

1299 - com.microsoft.SilverlightPlugin

1300 /Library/SystemMigration/History/MigrationUUID/QuarantineRoot/System/Library/Fi lesystems/ntfs-3g.fs

1301 - org.ntfs-3g.filesystems.ntfs

1302 /System/Library/Extensions/VMsvga2GA.plugin

1303 - net.osx86.VMsvga2GA

1304 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

1305 - com.skype.skypeabdialer

1306 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

1307 - com.skype.skypeabsms

1308 /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/19.0.0.226/PepperFlashPlayer.plugin

1309 - com.macromedia.PepperFlashPlayer.pepper

1310 - Adobe Systems, Inc.

1311 /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.8.824/_platform_specific/mac_x64/widevine cdmadapter.plugin

1312 - NA

1313 /Users/USER/Library/Widgets/EBSG_Countdown.wdgt

1314 - com.ebsg.widget.EBSGCountdown

1315 /Users/USER/Library/Widgets/Euro Stocks.wdgt

1316 - eu.broes.widget.eurostocks

1317 /Users/USER/Library/Widgets/FidelityMarketMonitor.wdgt

1318 - com.fmr.widget.FidelityMarketMonitor

1319 /Users/USER/Library/Widgets/Gold Chart.wdgt

1320 - com.shamsulazhar.widget.GoldChart

1321 /Users/USER/Library/Widgets/MiniSheet.wdgt

1322 - com.apple.widget.minisheet

1323 /Users/USER/Library/Widgets/Notefile.wdgt

1324 - com.junecloud.widget.notefile

1325 - Junecloud LLC

1326 /Users/USER/Library/Widgets/iCountdown-1.0.wdgt

1327 - com.albert.widget.iCountdown

1328 /Users/USER/Library/Widgets/iStat Pro.wdgt

1329 - com.iSlayer.iStatpro4.widget

1330 /Users/USER/Library/iTunes/iTunes Plug-ins/TuneUp/TuneUp Visualizer.bundle

1331 - com.tuneupmedia.iTuneUpVisualizer

1332 - TuneUp Media

1333

1334 Bundles (new)

1335

1336 /Applications/AppCleaner.app

1337 - net.freemacsoft.AppCleaner

1338 - Julien Ramseier (X85ZX835W9)

1339 /Applications/MacBooster 3.app

1340 - com.iobit.MacBooster-3

1341 - Apperience Corporation (MA9EDUZPCW)

1342 /Library/Frameworks/MacFUSE.framework

1343 - com.google.MacFUSE

1344 /Library/Frameworks/OSXFUSE.framework

1345 - com.github.osxfuse.framework

1346 /Library/Internet Plug-Ins/Flash Player.plugin

1347 - com.macromedia.Flash Player.plugin

1348 - Adobe Systems, Inc.

1349 /Library/Internet Plug-Ins/PepperFlashPlayer/PepperFlashPlayer.plugin

1350 - com.macromedia.PepperFlashPlayer.pepper

1351 - Adobe Systems, Inc.

1352 /Library/PreferencePanes/Flash Player.prefPane

1353 - com.adobe.flashplayerpreferences

1354 /Library/PreferencePanes/OSXFUSE.prefPane

1355 - com.github.osxfuse.OSXFUSEPrefPane

1356 /System/Library/Intelligent Suggestions/Assets.suggestionsassets

1357 - com.apple.MobileAsset.CoreSuggestions

1358 - Software Signing

1359 /Users/USER/Library/Application Support/MacBooster 3/MacBooster mini.app

1360 - com.iobit.MacBooster-mini

1361 - Apperience Corporation (MA9EDUZPCW)

1362

1363 App extensions

1364

1365 com.fiplab.batteryhealth.widget

1366 com.twitter.twitter-mac.TwitterToday

1367

1368 Non-loading kernel extensions

1369

1370 /System/Library/Extensions/AppleOSXUSBNCM.kext

1371 - com.apple.driver.AppleOSXUSBNCM

1372 - Software Signing

1373 /System/Library/Extensions/UsbEthernetGadget.kext

1374 - com.tomtom.driver.UsbEthernetGadget

1375

1376 Installations

1377

1378 MacBooster 3: 15/02/16 21:10

1379 FUSE for OS X (OSXFUSE): 12/02/16 16:45

1380 Free Antivirus: 12/02/16 16:21

1381 MacBooster 3: 12/02/16 15:49

1382 Adobe Pepper Flash Player: 10/02/16 22:01

1383

1384 Elapsed time (sec): 1902

Linc Davis

Level 10

209,739 points

Feb 16, 2016 8:29 AM in response to andre451

The aftermarket memory that's installed doesn't meet the specifications for your model (1600 MHz SDRAM.) Please reinstall the original memory, or install new memory of the right type.

Any reputable RAM vendor will have a web form in which you can select the Mac model and be directed to the compatible parts.

The startup drive is failing, or there is some other internal hardware fault.

Back up all data on the drive immediately if you don't already have a current backup. There are ways to back up a computer that isn't fully functional—ask if you need guidance.

Make a "Genius" appointment at an Apple Store, or go to another authorized service provider.

If privacy is a concern, erase the data partition(s) with the option to write zeros* (do this only if you have at least two complete, independent backups, and you know how to restore to an empty drive from any of them.) Don’t erase the recovery partition, if present.

Keeping your confidential data secure during hardware repair

Apple also recommends that you deauthorize a device in the iTunes Store before having it serviced.

*An SSD doesn't need to be zeroed.

The test results show other issues. I suggest that you defer the remaining steps until after the hardware issue has been dealt with.

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Please back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nosappnd,noschg,nosunlnk,nouappnd,nouchg {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. You may be prompted to select a language, then the OS X Utilities screen will appear.

If you use FileVault 2, select Disk Utility, then select the icon of the FileVault startup volume ("Macintosh HD," unless you gave it a different name.) It will be nested below another drive icon. Click the Unlock button in the toolbar and enter your login password when prompted. Then quit Disk Utility to be returned to the main screen.

Select

Utilities ▹ Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

 ▹ Restart

from the menu bar.

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

You should update to the current version of OS X (10.11.3).

The update task for "Adobe Acrobat" is scheduled to run every day at 2 AM. While this task would not normally wake the machine from sleep, if it wasn't fully asleep for some other reason, it would wake up fully at that time. Possibly "Serviio" is preventing sleep. I suggest you remove or inactivate it and see whether there's any change.

You installed the "Spigot" ad-injection malware. Please take the steps below to disable it.

Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.

Back up all data before continuing.

1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.

2. Inside the folder you just opened, there may be one or more files with a name beginning as follows:

com.spigot

Move all such items to the Trash.

Log out or restart the computer. Empty the Trash.

3. From the Safari menu bar, select

Safari ▹ Preferences... ▹ Extensions

Uninstall all extensions you don't know you need, including any with the word "Spigot" in the description. If in doubt, remove all of them. None is required for normal operation. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.

The trojan will now be inactive.

4. This step is optional. Do as in Step 1 with this line:

~/Library/Application Support

and delete an item named

Spigot

If it's present.

Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "MacUpdate," "Softonic," "CNET Download," or "SourceForge." Never visit any of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

Like all software that purports to automatically "clean up" or "speed up" a Mac, "MacBooster" is a scam. It's often distributed as a fraudulent "installer" on the "macupdate" website. Never download anything from that site.

Please back up all data, then remove the following items in the same way as before. Some may not exist in your case.

/Library/LaunchDaemons/com.iobit.AMCDaemon.plist

~/Library/LaunchAgents/com.apple.UninstallMonitor.plist

~/Library/LaunchAgents/com.iobit.AMCUpdate.plist

~/Library/LaunchAgents/com.iobit.MacBoosterMini.plist

You may be prompted for your password when moving the first item to the Trash (if it exists.)

In the Applications folder, there should be an item with a name beginning "MacBooster." Quit it if it's running, then drag it to the Trash.

Log out or restart the computer and empty the Trash.

The software is now inactive. Optionally, you can also remove these components of it, if they exist:

/Library/Application Support/AMC

~/Library/Application Support/MacBooster

Any software that purports to automatically "clean up" or "speed up" a Mac is a scam. I suggest you delete "AppCleaner" and "CCleaner."

andre451 Author

Level 1

7 points

Feb 18, 2016 12:54 AM in response to Linc Davis

It looked pretty messed up from what you said, so I erased it and made a fresh install of OS X, and now it's fine. I was trying to avoid this, but at this point it looked like the best way to deal with all this mess.

Thank you for the help Linc.

M4Rv_

Level 1

4 points

Apr 19, 2016 6:28 AM in response to Linc Davis

I have a very similar issue as the OP. Computer wakes up from sleep about every 1:05 min.

The wake reason is indicated only as EC (so no lid open or anything, those reasons are correctly fired when I e.g. open the lid). No user action.

Ninas-MacBook-Pro:~ Nina$ syslog |grep -i "Wake reason"

Apr 19 13:18:07 Ninas-MacBook-Pro kernel[0] <Notice>: Wake reason: EC

Apr 19 13:19:11 Ninas-MacBook-Pro kernel[0] <Notice>: Wake reason: EC

Apr 19 13:20:16 Ninas-MacBook-Pro kernel[0] <Notice>: Wake reason: EC

Apr 19 13:21:20 Ninas-MacBook-Pro kernel[0] <Notice>: Wake reason: EC

Apr 19 13:22:24 Ninas-MacBook-Pro kernel[0] <Notice>: Wake reason: EC

Do you have any idea? I also followed the 6 steps from your post on page 1.

Here the result of your test script:

http://pastebin.com/tY9cwTjS

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

MacBook Pro keeps waking up from sleep