My Mac is pirated, his to defend myself ?

Hi,

I received a threat message from the site mac.co on November 13th 2015 at 11PM (Dash Paris events) in response to a comment I posted the day before and since, I am attacked (I see this in the console) wherever I am ans whenever it is. The first attack was based on a DNS spoofing (I had a domain and a Sinology NAS that I threw away) and ling to a google account used to post comments on the mentioned site. I suspect the guys who attack me to watch google server/dns access. When they succeed in enter my system, they scan my other connected devices and propagate their malicious code to them. I suspect their attack is based on MacAddress. I already threw away a MacBook Pro 2015 and now I have a MacBook Air it starts again but I know this is my fault : I dowloaded and execute un google mail client on my new Mac and this is the way they retrieve me. In order to get into my system, then sent me a false dialog box, asking me if I wanted to share my gmail account, after having deleted the gmail client application and trying to log with the regular client web page. This means that they know what I a doing everytime. I don't know what to do as I a m not en experienced user. Before upgrading to 10.11.3, using CMD + R, I had many "Deny" messages when someone tried to write to the protected file system. Since the upgrade this this is gone. Here is some extracts of what I see in the console (may be not the more important ones, I dont really know. M'y user name is platon) :


15/03/2016 19:00:27,687 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:00:27,785 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:00:27,824 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:00:27,955 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:00:28,019 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:00:28,531 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist


15/03/2016 19:00:28,803 fontd[867]: Failed to open read-only database, regenerating DB


15/03/2016 19:02:47,960 cdpd[959]: Received new connection <NSXPCConnection: 0x7fd570602f80> connection from pid 958, checking entitlements...

15/03/2016 19:02:47,961 cdpd[959]: Saw change in network reachability (isReachable=2)

15/03/2016 19:02:47,962 cdpd[959]: Unknown client type with bundleID 'com.apple.lakitu'


15/03/2016 19:02:57,399 cdpd[959]: Unknown client type with bundleID '(null)'


15/03/2016 19:02:58,276 cdpd[959]: Received new connection <NSXPCConnection: 0x7fd570612470> connection from pid 879, checking entitlements...

15/03/2016 19:02:58,277 cdpd[959]: Unknown client type with bundleID '(null)'


15/03/2016 19:02:58,306 cdpd[959]: Received new connection <NSXPCConnection: 0x7fd5706126c0> connection from pid 784, checking entitlements...

15/03/2016 19:02:58,306 cdpd[959]: Unknown client type with bundleID 'com.apple.iCloudHelper'


15/03/2016 19:02:58,335 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:02:58,372 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist


15/03/2016 19:03:27,449 CalendarAgent[772]: No existing source with identifier: 9D9C5854-1674-4C30-80BD-25F3F1D86F10


15/03/2016 19:03:27,699 CallHistorySyncHelper[793]: Failed to get Call History User Data Key from keychain The specified item could not be found in the keychain.

15/03/2016 19:03:27,796 CalNCService[796]: No existing source with identifier: 9D9C5854-1674-4C30-80BD-25F3F1D86F10


15/03/2016 19:03:27,866 AddressBookSourceSync[986]: No existing source with identifier: 9D9C5854-1674-4C30-80BD-25F3F1D86F10


15/03/2016 19:03:29,237 com.apple.AddressBook.InternetAccountsBridge[1038]: Checking iCDP status for DSID 1044563335 (checkWithServer=0)

15/03/2016 19:03:29,243 com.apple.AddressBook.InternetAccountsBridge[1038]: XPC Error while checking if iCDP is enabled for DSID 1044563335: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.cdp.daemon was invalidated." UserInfo={NSDebugDescription=The connection to service named com.apple.cdp.daemon was invalidated.}


15/03/2016 19:03:39,920 SyncServer[1066]: Warning: ISDLog() couldn't open the log file /Users/platon/Library/Logs/Sync/syncservices.log: returned errno 2, "No such file or directory"


15/03/2016 19:03:41,275 com.apple.InputMethodKit.TextReplacementService[1065]: -[PFUbiquitySwitchboardEntryMetadata setUseLocalStorage:](898): CoreData: Ubiquity: platon~FA8E8083-9B7F-571E-93A1-AFEC46A909BD:UserDictionary

Using local storage: 1 for new NSFileManager current token <c588c17f ce2e7ba2 f4d9806b f90c54c5 9d1695e4>


15/03/2016 19:03:42,786 SyncServer[1066]: [0x7fe42a719b70] |Server|Warning| Admin database corrupted. Resetting data directory.


15/03/2016 19:03:43,215 com.apple.AddressBook.InternetAccountsBridge[1038]: XPC Error while checking if iCDP is enabled for DSID 1044563335: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.cdp.daemon was invalidated." UserInfo={NSDebugDescription=The connection to service named com.apple.cdp.daemon was invalidated.}


15/03/2016 19:03:57,709 com.apple.AddressBook.InternetAccountsBridge[1038]: XPC Error while checking if iCDP is enabled for DSID 1044563335: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.cdp.daemon was invalidated." UserInfo={NSDebugDescription=The connection to service named com.apple.cdp.daemon was invalidated.}


15/03/2016 19:04:20,931 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:04:21,022 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:04:21,067 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:04:21,076 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:04:21,123 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist


15/03/2016 19:04:22,139 Keychain Circle Notification[1090]: {ChangeCallback}

15/03/2016 19:04:22,142 identityservicesd[768]: <IMMacNotificationCenterManager: 0x7fc3194178f0>: NC Disabled: NO

15/03/2016 19:04:22,144 Keychain Circle Notification[1090]: Can't read state data (p=Preferences/com.apple.security.KCN.plist -- file:///Users/platon/Library/, err=Error Domain=NSCocoaErrorDomain Code=260 "Impossible d’ouvrir le fichier « com.apple.security.KCN.plist » car il n'existe pas." UserInfo={NSFilePath=/Users/platon/Library/Preferences/com.apple.security.KCN.p list, NSUnderlyingError=0x7fd8c350ebe0 {Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"}})

15/03/2016 19:04:22,146 Keychain Circle Notification[1090]: {ChangeCallback} scheduleActivity 4001-01-01 00:00:00 +0000

15/03/2016 19:04:22,146 Keychain Circle Notification[1090]: {ChangeCallback} Applicants


15/03/2016 19:04:22,146 Keychain Circle Notification[1090]: {ChangeCallback} scheduleActivity 4001-01-01 00:00:00 +0000

15/03/2016 19:04:22,146 Keychain Circle Notification[1090]: {ChangeCallback} Applicants


15/03/2016 19:04:26,718 cdpd[959]: Received new connection <NSXPCConnection: 0x7fd570503f80> connection from pid 784, checking entitlements...

15/03/2016 19:04:26,718 cdpd[959]: Unknown client type with bundleID 'com.apple.iCloudHelper'


15/03/2016 19:04:28,679 com.apple.preference.security.remoteservice[1113]: Unknown class AddRemoveBarCell in Interface Builder file at path /System/Library/PreferencePanes/Security.prefPane/Contents/Resources/Base.lproj /SecurityPref.nib.

15/03/2016 19:04:29,071 com.apple.preference.security.remoteservice[1113]: AutoSubmitPreference is 0

15/03/2016 19:04:41,316 cloudd[794]: Stream 0x7f8c66532000 is sending an event before being opened

15/03/2016 19:04:49,784 com.apple.preferences.icloud.remoteservice[1133]: Failed to connect (_signInButton) outlet from (iCloudPref) to (NSButton): missing setter or instance variable

15/03/2016 19:04:49,785 com.apple.preferences.icloud.remoteservice[1133]: Failed to connect (_signInSpinner) outlet from (iCloudPref) to (NSProgressIndicator): missing setter or instance variable

15/03/2016 19:04:49,785 com.apple.preferences.icloud.remoteservice[1133]: Could not connect action, target class iCloudPref does not respond to -signinPressed:


15/03/2016 19:04:50,644 com.apple.preferences.icloud.remoteservice[1133]: Failed to connect (_iconBadgeView) outlet from (IACastleServiceRow) to (NSImageView): missing setter or instance variable


15/03/2016 19:04:52,520 cdpd[959]: Received new connection <NSXPCConnection: 0x7fd570408200> connection from pid 1133, checking entitlements...

15/03/2016 19:04:52,523 cdpd[959]: Unknown client type with bundleID 'com.apple.preferences.icloud.remoteservice'


15/03/2016 19:04:52,524 cdpd[959]: Received new connection <NSXPCConnection: 0x7fd570424260> connection from pid 1133, checking entitlements...

15/03/2016 19:04:52,524 cdpd[959]: Unknown client type with bundleID 'com.apple.preferences.icloud.remoteservice'


15/03/2016 19:04:53,305 com.apple.preferences.icloud.remoteservice[1133]: iCDP status for DSID 1044563335 is DISABLED

15/03/2016 19:04:53,335 com.apple.preferences.icloud.remoteservice[1133]: Checking iCDP status for DSID 1044563335 (checkWithServer=0)

15/03/2016 19:04:53,337 cdpd[959]: Received new connection <NSXPCConnection: 0x7fd57071cbb0> connection from pid 1133, checking entitlements...

15/03/2016 19:04:53,337 cdpd[959]: Unknown client type with bundleID 'com.apple.preferences.icloud.remoteservice'


15/03/2016 19:05:04,879 sharingd[795]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

15/03/2016 19:05:04,937 com.apple.AddressBook.ContactsAccountsService[779]: [Accounts] Current connection, <NSXPCConnection: 0x7feb92720500> connection from pid 796, doesn't have account access.


15/03/2016 19:05:53,664 CalNCService[796]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

15/03/2016 19:06:25,346 System Preferences[1037]: ### Failed to load Addressbook class CNContactNameFormatter

15/03/2016 19:06:25,445 System Preferences[1037]: Unable to simultaneously satisfy constraints:

(

"<NSLayoutConstraint:0x7fbc44d6ad00 NSPopUpButton:0x7fbc44d66a40'-'.width == NSPopUpButton:0x7fbc448a7190'-'.width>",

"<NSLayoutConstraint:0x7fbc44d6b0f0 NSPopUpButton:0x7fbc4489c6c0'-'.trailing == NSPopUpButton:0x7fbc448a7190'-'.trailing>",

"<NSLayoutConstraint:0x7fbc44d6b3c0 NSPopUpButton:0x7fbc448a7190'-'.leading == NSPopUpButton:0x7fbc4489c6c0'-'.leading>",

"<NSLayoutConstraint:0x7fbc42d97b90 NSPopUpButton:0x7fbc42a6f3f0'-'.trailing == NSPopUpButton:0x7fbc44d66a40'-'.trailing>",

"<NSLayoutConstraint:0x7fbc44d6af70 NSPopUpButton:0x7fbc44d66a40'-'.leading == NSPopUpButton:0x7fbc42a6f3f0'-'.leading>",

"<NSLayoutConstraint:0x7fbc42d97af0 NSImageView:0x7fbc44d6c480.centerX == NSBox:0x7fbc4489c080'Coins d\U2019\U00e9crans actifs'.centerX>",

"<NSLayoutConstraint:0x7fbc42d97b40 H:[NSPopUpButton:0x7fbc4489c6c0'-']-(29)-[NSImageView:0x7fbc44d6c480](LTR)>",

"<NSLayoutConstraint:0x7fbc44d6af20 H:[NSImageView:0x7fbc44d6c480]-(29)-[NSPopUpButton:0x7fbc42a6f3f0'-'](LTR)>",

"<NSLayoutConstraint:0x7fbc42d97cf0 NSPopUpButton:0x7fbc4489c6c0'-'.left == NSBox:0x7fbc4489c080'Coins d\U2019\U00e9crans actifs'.left + 34>",

"<NSLayoutConstraint:0x7fbc44d6ae80 NSBox:0x7fbc4489c080'Coins d\U2019\U00e9crans actifs'.right == NSPopUpButton:0x7fbc42a6f3f0'-'.right + 35>"

)



Will attempt to recover by breaking constraint

<NSLayoutConstraint:0x7fbc42d97b40 H:[NSPopUpButton:0x7fbc4489c6c0'-']-(29)-[NSImageView:0x7fbc44d6c480](LTR)>



Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger.

15/03/2016 19:06:25,496 System Preferences[1037]: moduleFromLegacyDefaults: <ScreenSaverDefaults: 0x7fbc448982e0>

{

PrefsVersion = 100;

tokenRemovalAction = 0;

}

15/03/2016 19:06:25,575 System Preferences[1037]: Attempted search for modules of unknown type (4)

15/03/2016 19:06:26,291 System Preferences[1037]: mainMediaGroup is nil for mediaGroupIdentifier com.apple.iTunes.MusicPlaylist

15/03/2016 19:08:30,483 SystemUIServer[999]: LSCopyApplicationURLsForBundleIdentifier error:Error Domain=NSOSStatusErrorDomain Code=-10814 "kLSApplicationNotFoundErr: E.g. no application claims the file"

15/03/2016 19:08:30,485 SystemUIServer[999]: LSCopyApplicationURLsForBundleIdentifier error:Error Domain=NSOSStatusErrorDomain Code=-10814 "kLSApplicationNotFoundErr: E.g. no application claims the file"

15/03/2016 19:08:30,485 SystemUIServer[999]: LSCopyApplicationURLsForBundleIdentifier error:Error Domain=NSOSStatusErrorDomain Code=-10814 "kLSApplicationNotFoundErr: E.g. no application claims the file"


15/03/2016 19:09:28,402 com.apple.preference.network.remoteservice[1193]: Failed to connect (o_advancedMenu) outlet from (ANPNetworkController) to (NSMenu): missing setter or instance variable

15/03/2016 19:09:28,402 com.apple.preference.network.remoteservice[1193]: Failed to connect (o_fillerButton) outlet from (ANPNetworkController) to (NSButton): missing setter or instance variable

15/03/2016 19:09:28,516 com.apple.preference.network.remoteservice[1193]: Failed to connect (o_mainTabView) outlet from (ANPAdvancedTabController) to (NSTabView): missing setter or instance variable

15/03/2016 19:09:28,517 com.apple.preference.network.remoteservice[1193]: Failed to connect (o_serviceImageView) outlet from (ANPAdvancedTabController) to (NSImageView): missing setter or instance variable

15/03/2016 19:09:28,517 com.apple.preference.network.remoteservice[1193]: Failed to connect (o_serviceNameField) outlet from (ANPAdvancedTabController) to (NSTextField): missing setter or instance variable

15/03/2016 19:09:28,517 com.apple.preference.network.remoteservice[1193]: Failed to connect (o_tabViewWindow) outlet from (ANPAdvancedTabController) to (NSPanel): missing setter or instance variable

15/03/2016 19:09:28,904 com.apple.preference.network.remoteservice[1193]: Could not find image named 'InvalidDataIcon'.

15/03/2016 19:09:39,669 com.apple.preferences.sharing.remoteservice[1195]: Unable to simultaneously satisfy constraints:

(

"<NSLayoutConstraint:0x7f8bc3cf5980 H:[NSScrollView:0x7f8bc3cf1020(170)]>",

"<NSLayoutConstraint:0x7f8bc6000f20 H:[NSScrollView:0x7f8bc3cf1020]-(8)-[NSScrollView:0x7f8bc3cf8ba0]>",

"<NSLayoutConstraint:0x7f8bc3cfa490 H:[NSScrollView:0x7f8bc3cf8ba0(232)]>",

"<NSLayoutConstraint:0x7f8bc6009b90 H:[NSScrollView:0x7f8bc3cf8ba0]-(6)-| (Names: '|':NSView:0x7f8bc6007640 )>",

"<NSLayoutConstraint:0x7f8bc3d83f80 H:|-(0)-[NSView:0x7f8bc6007640](LTR) (Names: '|':NSView:0x7f8bc3d36e10 )>",

"<NSLayoutConstraint:0x7f8bc3d843c0 NSView:0x7f8bc6007640.right == NSView:0x7f8bc3d36e10.right>",

"<NSLayoutConstraint:0x7f8bc3cfaf90 NSScrollView:0x7f8bc3cf1020.leading == NSTextField:0x7f8bc6000140.leading>",

"<NSLayoutConstraint:0x7f8bc3d377a0 H:[NSScrollView:0x7f8bc3d26170]-(14)-[NSView:0x7f8bc3d36e10]>",

"<NSLayoutConstraint:0x7f8bc3d1a080 H:[NSScrollView:0x7f8bc3d26170(195)]>",

"<NSLayoutConstraint:0x7f8bc3d37720 H:[NSView:0x7f8bc3d36e10]-(9)-| (Names: '|':NSView:0x7f8bc3c75650 )>",

"<NSLayoutConstraint:0x7f8bc3d33dc0 H:|-(14)-[NSScrollView:0x7f8bc3d26170] (Names: '|':NSView:0x7f8bc3c75650 )>",

"<NSAutoresizingMaskLayoutConstraint:0x7f8bc3c9a520 h=-&- v=-&- H:[NSView:0x7f8bc3c75650]-(6)-| (Names: '|':NSTabView:0x7f8bc3c75a90 )>",

"<NSAutoresizingMaskLayoutConstraint:0x7f8bc3c9a4d0 h=-&- v=-&- H:|-(6)-[NSView:0x7f8bc3c75650] (Names: '|':NSTabView:0x7f8bc3c75a90 )>",

"<NSLayoutConstraint:0x7f8bc3d19e30 H:|-(0)-[NSTabView:0x7f8bc3c75a90] (Names: '|':NSView:0x7f8bc3c75e50 )>",

"<NSLayoutConstraint:0x7f8bc3d1c5b0 H:[NSTabView:0x7f8bc3c75a90]-(0)-| (Names: '|':NSView:0x7f8bc3c75e50 )>",

"<NSLayoutConstraint:0x7f8bc3ccbe10 H:[NSView:0x7f8bc3c75e50(780)]>",

"<NSLayoutConstraint:0x7f8bc6009ac0 H:|-(8)-[NSTextField:0x7f8bc3cef2e0] (Names: '|':NSView:0x7f8bc6007640 )>",

"<NSLayoutConstraint:0x7f8bc3cf5e80 NSTextField:0x7f8bc3cef2e0.leading == NSTextField:0x7f8bc6000140.leading>"

)



Will attempt to recover by breaking constraint

<NSLayoutConstraint:0x7f8bc3cfa490 H:[NSScrollView:0x7f8bc3cf8ba0(232)]>



Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger.

15/03/2016 19:10:41,460 com.apple.preferences.sharing.remoteservice[1195]: Unable to simultaneously satisfy constraints:

(

"<NSLayoutConstraint:0x7f8bc3cf5980 H:[NSScrollView:0x7f8bc3cf1020(170)]>",

"<NSLayoutConstraint:0x7f8bc6000f20 H:[NSScrollView:0x7f8bc3cf1020]-(8)-[NSScrollView:0x7f8bc3cf8ba0]>",

"<NSLayoutConstraint:0x7f8bc3cfa490 H:[NSScrollView:0x7f8bc3cf8ba0(232)]>",

"<NSLayoutConstraint:0x7f8bc6009b90 H:[NSScrollView:0x7f8bc3cf8ba0]-(6)-| (Names: '|':NSView:0x7f8bc6007640 )>",

"<NSLayoutConstraint:0x7f8bc3d83f80 H:|-(0)-[NSView:0x7f8bc6007640](LTR) (Names: '|':NSView:0x7f8bc3d36e10 )>",

"<NSLayoutConstraint:0x7f8bc3d843c0 NSView:0x7f8bc6007640.right == NSView:0x7f8bc3d36e10.right>",

"<NSLayoutConstraint:0x7f8bc3cfaf90 NSScrollView:0x7f8bc3cf1020.leading == NSTextField:0x7f8bc6000140.leading>",

"<NSLayoutConstraint:0x7f8bc3d377a0 H:[NSScrollView:0x7f8bc3d26170]-(14)-[NSView:0x7f8bc3d36e10]>",

"<NSLayoutConstraint:0x7f8bc3d1a080 H:[NSScrollView:0x7f8bc3d26170(195)]>",

"<NSLayoutConstraint:0x7f8bc3d37720 H:[NSView:0x7f8bc3d36e10]-(9)-| (Names: '|':NSView:0x7f8bc3c75650 )>",

"<NSLayoutConstraint:0x7f8bc3d33dc0 H:|-(14)-[NSScrollView:0x7f8bc3d26170] (Names: '|':NSView:0x7f8bc3c75650 )>",

"<NSAutoresizingMaskLayoutConstraint:0x7f8bc3c9a520 h=-&- v=-&- H:[NSView:0x7f8bc3c75650]-(6)-| (Names: '|':NSTabView:0x7f8bc3c75a90 )>",

"<NSAutoresizingMaskLayoutConstraint:0x7f8bc3c9a4d0 h=-&- v=-&- H:|-(6)-[NSView:0x7f8bc3c75650] (Names: '|':NSTabView:0x7f8bc3c75a90 )>",

"<NSLayoutConstraint:0x7f8bc3d19e30 H:|-(0)-[NSTabView:0x7f8bc3c75a90] (Names: '|':NSView:0x7f8bc3c75e50 )>",

"<NSLayoutConstraint:0x7f8bc3d1c5b0 H:[NSTabView:0x7f8bc3c75a90]-(0)-| (Names: '|':NSView:0x7f8bc3c75e50 )>",

"<NSLayoutConstraint:0x7f8bc3ccbe10 H:[NSView:0x7f8bc3c75e50(780)]>",

"<NSLayoutConstraint:0x7f8bc6009ac0 H:|-(8)-[NSTextField:0x7f8bc3cef2e0] (Names: '|':NSView:0x7f8bc6007640 )>",

"<NSLayoutConstraint:0x7f8bc3cf5e80 NSTextField:0x7f8bc3cef2e0.leading == NSTextField:0x7f8bc6000140.leading>"

)



Will attempt to recover by breaking constraint

<NSLayoutConstraint:0x7f8bc3cfa490 H:[NSScrollView:0x7f8bc3cf8ba0(232)]>



Set the NSUserDefault NSConstraintBasedLayoutVisualizeMutuallyExclusiveConstraints to YES to have -[NSWindow visualizeConstraints:] automatically called when this happens. And/or, break on objc_exception_throw to catch this in the debugger.

15/03/2016 19:11:02,216 storeaccountd[943]: -[PushServiceStoreDispatch getEnabledMediaTypesWithReply:]

15/03/2016 19:11:02,270 com.apple.preferences.appstore.remoteservice[1199]: Failed to connect (_asnPasswordSettingsManager) outlet from (AppStorePref) to (ASNPasswordSettingsManager): missing setter or instance variable

15/03/2016 19:11:02,270 com.apple.preferences.appstore.remoteservice[1199]: Failed to connect (_authView) outlet from (AppStorePref) to (SFAuthorizationView): missing setter or instance variable

15/03/2016 19:11:02,270 com.apple.preferences.appstore.remoteservice[1199]: Failed to connect (_freePopUpButton) outlet from (AppStorePref) to (NSPopUpButton): missing setter or instance variable

15/03/2016 19:11:02,270 com.apple.preferences.appstore.remoteservice[1199]: Failed to connect (_helpButton) outlet from (AppStorePref) to (NSButton): missing setter or instance variable

15/03/2016 19:11:02,270 com.apple.preferences.appstore.remoteservice[1199]: Failed to connect (_paidPopUpButton) outlet from (AppStorePref) to (NSPopUpButton): missing setter or instance variable

15/03/2016 19:11:02,274 com.apple.preferences.appstore.remoteservice[1199]: -[AppStorePref autoPushTextColor]

15/03/2016 19:11:02,376 com.apple.preferences.appstore.remoteservice[1199]: -[AppStorePref autoPushTextColor]

15/03/2016 19:11:02,420 com.apple.preferences.appstore.remoteservice[1199]: -[AppStorePref autoPushTextColor]

15/03/2016 19:11:02,485 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:11:02,486 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:11:03,312 storeaccountd[943]: -[PushServiceStoreDispatch isRegisteredForAccount:andMask:withReply:]

15/03/2016 19:11:24,160 storeuid[1201]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/com.apple.storeuid. Errno:1

15/03/2016 19:11:24,163 storeuid[1201]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/com.apple.storeuid. Errno:1

15/03/2016 19:11:24,991 storeuid[1201]: Could not find image named 'NSImage'.

15/03/2016 19:11:32,065 com.apple.preferences.appstore.remoteservice[1199]: -[AppStorePref autoPushTextColor]

15/03/2016 19:12:05,711 com.apple.preference.universalaccess.remoteservice[1202]: Failed to connect (_SpringLoadingDelayView) outlet from (UAPMouseAndTrackpadViewController) to (NSView): missing setter or instance variable

15/03/2016 19:12:08,669 com.apple.preference.universalaccess.remoteservice[1202]: It does not make sense to draw an image when [NSGraphicsContext currentContext] is nil. This is a programming error. Break on void _NSWarnForDrawingImageWithNoCurrentContext() to debug. This will be logged only once. This may break in the future.

15/03/2016 19:13:23,381 Console[1213]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

15/03/2016 19:21:21,578 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:24:37,767 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:24:38,967 syncdefaultsd[1222]: accountsd has been removed from syncing apps.

15/03/2016 19:25:07,491 DataDetectorsDynamicData[1232]: ### Failed to load Addressbook class CNContactNameFormatter

15/03/2016 19:25:07,499 DataDetectorsDynamicData[1232]: Could not launch query, mds might have an issue

15/03/2016 19:25:17,706 com.apple.AddressBook.ContactsAccountsService[779]: [Accounts] Current connection, <NSXPCConnection: 0x7feb926088f0> connection from pid 1232, doesn't have account access.

15/03/2016 19:25:17,706 DataDetectorsDynamicData[1232]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"


15/03/2016 19:37:53,020 com.apple.AddressBook.InternetAccountsBridge[1038]: Checking iCDP status for DSID 1044563335 (checkWithServer=0)

15/03/2016 19:37:53,047 com.apple.AddressBook.InternetAccountsBridge[1038]: XPC Error while checking if iCDP is enabled for DSID 1044563335: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.cdp.daemon was invalidated." UserInfo={NSDebugDescription=The connection to service named com.apple.cdp.daemon was invalidated.}

15/03/2016 19:37:53,047 com.apple.AddressBook.InternetAccountsBridge[1038]: Daemon connection invalidated!

15/03/2016 19:37:53,059 com.apple.AddressBook.InternetAccountsBridge[1038]: [AOSAccounts] : [__49-[ACAccountStore(iCloudAccount) icaAppleAccounts]_block_invoke] : accountsWithAccountType returned error: Error Domain=com.apple.accounts Code=9 "(null)"

15/03/2016 19:38:03,100 com.apple.AddressBook.ContactsAccountsService[779]: [Accounts] Current connection, <NSXPCConnection: 0x7feb92605f50> connection from pid 795, doesn't have account access.

15/03/2016 19:38:03,100 sharingd[795]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

15/03/2016 19:38:03,111 com.apple.AddressBook.ContactsAccountsService[779]: [Accounts] Current connection, <NSXPCConnection: 0x7feb92720500> connection from pid 796, doesn't have account access.

15/03/2016 19:38:03,112 CalNCService[796]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

15/03/2016 19:38:03,180 com.apple.AddressBook.ContactsAccountsService[779]: [Accounts] Current connection, <NSXPCConnection: 0x7feb926088f0> connection from pid 1232, doesn't have account access.

15/03/2016 19:38:03,180 DataDetectorsDynamicData[1232]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

15/03/2016 19:38:25,843 recentsd[1276]: Error 1 getting library version: no such table: properties

15/03/2016 19:39:43,583 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:39:44,786 QuickLookSatellite[1278]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/com.apple.quicklook.satellite. Errno:1

15/03/2016 19:39:44,790 QuickLookSatellite[1278]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/com.apple.quicklook.satellite. Errno:1

15/03/2016 19:39:48,496 QuickLookSatellite[1278]: In -[NSApplication(NSQuietSafeQuit) _updateCanQuitQuietlyAndSafely], _LSSetApplicationInformationItem(NSCanQuitQuietlyAndSafely) returned error -50

15/03/2016 19:40:36,839 lsd[764]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

15/03/2016 19:41:15,820 LookupViewService[1285]: ### Failed to load Addressbook class CNContactNameFormatter

15/03/2016 19:41:15,899 LookupViewService[1285]: Using your own bundle identifier as an NSUserDefaults suite name does not make sense and will not work. Break on _NSUserDefaults_Log_Nonsensical_Suites to find this

15/03/2016 19:45:27,885 Console[1321]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

15/03/2016 19:47:27,165 syncdefaultsd[1222]: com.apple.finder has been removed from syncing apps.

15/03/2016 19:48:24,716 com.apple.preference.security.remoteservice[1329]: Unknown class AddRemoveBarCell in Interface Builder file at path /System/Library/PreferencePanes/Security.prefPane/Contents/Resources/Base.lproj /SecurityPref.nib.

15/03/2016 19:48:25,161 com.apple.preference.security.remoteservice[1329]: AutoSubmitPreference is 0


15/03/2016 19:59:34,577 com.apple.spotlight.IndexAgent[1051]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID

15/03/2016 19:59:34,579 IMDPersistenceAgent[777]: [com.apple.corespotlight.log.index] Finished "index items"(2) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"

15/03/2016 19:59:34,789 com.apple.spotlight.IndexAgent[1051]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID

15/03/2016 19:59:34,790 IMDPersistenceAgent[777]: [com.apple.corespotlight.log.index] Finished "index items"(4) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"

15/03/2016 19:59:34,807 com.apple.spotlight.IndexAgent[1051]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID

15/03/2016 19:59:34,807 IMDPersistenceAgent[777]: [com.apple.corespotlight.log.index] Finished "index items"(6) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"

15/03/2016 19:59:47,775 com.apple.AddressBook.ContactsAccountsService[779]: [Accounts] Current connection, <NSXPCConnection: 0x7feb9250d300> connection from pid 777, doesn't have account access.

15/03/2016 19:59:47,775 IMDPersistenceAgent[777]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

15/03/2016 20:06:37,613 sharingd[795]: 20:06:37.613 : SDConnectionManager:: XPC connection invalidated

15/03/2016 20:06:42,110 Mail[1360]: AllSignatures.plist: Syncing with cloud -- updating local; no cloud data not reachable, error: Error Domain=NSCocoaErrorDomain Code=260 "Impossible d’ouvrir le fichier « ubiquitous_AllSignatures.plist » car il n'existe pas." UserInfo={NSURL=file:///Users/platon/Library/Mobile%20Documents/com~apple~mail/ Data/V3/MailData/Signatures/ubiquitous_AllSignatures.plist, NSFilePath=/Users/platon/Library/Mobile Documents/com~apple~mail/Data/V3/MailData/Signatures/ubiquitous_AllSignatures.p list, NSUnderlyingError=0x7fe7b4819550 {Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"}}

15/03/2016 20:06:42,608 cloudd[794]: Stream 0x7f8c663e6670 is sending an event before being opened


15/03/2016 20:10:59,531 Console[1383]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

15/03/2016 20:12:05,705 com.apple.WebKit.Networking[1389]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:12:06,358 com.apple.WebKit.Networking[1389]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:16:57,137 sharingd[795]: 20:16:57.136 : SDConnectionManager:: XPC connection invalidated


15/03/2016 20:35:58,773 Console[1473]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

15/03/2016 20:55:59,992 SafariNotificationAgent[1495]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/SafariNotificationAgent. Errno:1

15/03/2016 20:55:59,995 SafariNotificationAgent[1495]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/SafariNotificationAgent. Errno:1

15/03/2016 20:56:00,940 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:56:01,030 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:56:22,806 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:56:22,890 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:56:25,141 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 20:56:25,150 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 20:56:25,169 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 20:56:25,170 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 20:59:00,423 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:59:00,535 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:59:02,111 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 20:59:02,112 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 21:01:42,537 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 21:01:42,538 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 21:01:43,282 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:01:43,379 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:01:43,595 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 21:01:43,596 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 21:02:12,260 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 21:02:12,261 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 21:02:13,376 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 21:02:13,376 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 21:02:16,041 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:02:16,130 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:05:15,520 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:05:15,609 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:07:48,942 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 21:07:48,943 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 21:07:49,312 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:07:49,411 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:07:49,786 com.apple.WebKit.Networking[1388]: CFNetwork SSLHandshake failed (-9847)

15/03/2016 21:07:49,786 com.apple.WebKit.Networking[1388]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9847)

15/03/2016 21:09:47,493 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:09:47,594 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:10:03,645 Console[1517]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable

15/03/2016 21:12:13,040 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:12:13,140 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:13:00,609 sharingd[795]: 21:13:00.609 : SDConnectionManager:: XPC connection invalidated


16/03/2016 09:07:43,325 nsurlsessiond[395]: Missing or invalid configuration.plist for bundleID: com.apple.cloudd, sessionID: CKBackgroundSession:bundleID:com.apple.CloudDocs.container-metadata:sourceAppli cationSecondaryIdentifier:4/com.apple.clouddocs.com.apple.CloudDocs.container-me tadata:2,%:containerIdentifier:com.apple.clouddocs:containerEnvironment:Producti on:allowsExpensiveAccess:true:discretionary:infers:uuid:6979219C-7141-4B36-BD96- 701FF527EE4E. Removing session directory


16/03/2016 09:07:45,214 nsurlsessiond[395]: No directory for bundleID: com.apple.cloudd, sessionID: CKBackgroundSession:bundleID:iCloud.com.synology.DScloud:sourceApplicationSecon daryIdentifier:4/com.apple.clouddocs.iCloud.com.synology.DScloud:2,%:containerId entifier:com.apple.clouddocs:containerEnvironment:Production:allowsExpensiveAcce ss:true:discretionary:infers:uuid:6979219C-7141-4B36-BD96-701FF527EE4E

16/03/2016 09:07:45,837 nsurlsessiond[395]: No directory for bundleID: com.apple.cloudd, sessionID: CKBackgroundSession:bundleID:com.apple.callhistory.sync-helper:sourceApplicatio nSecondaryIdentifier::containerIdentifier:com.apple.CallHistory:containerEnviron ment:Production:allowsExpensiveAccess:true:discretionary:infers:uuid:6979219C-71 41-4B36-BD96-701FF527EE4E


16/03/2016 09:07:47,869 com.apple.AddressBook.ContactsAccountsService[377]: [Accounts] Current connection, <NSXPCConnection: 0x7f7fcb426700> connection from pid 401, doesn't have account access.

16/03/2016 09:07:47,871 CalNCService[401]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"


15/03/2016 20:55:59,992 SafariNotificationAgent[1495]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/SafariNotificationAgent. Errno:1

15/03/2016 20:55:59,995 SafariNotificationAgent[1495]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/SafariNotificationAgent. Errno:1

15/03/2016 20:56:00,940 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:56:01,030 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:56:22,806 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:56:22,890 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:59:00,423 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 20:59:00,535 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:01:43,282 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:01:43,379 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:02:16,041 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:02:16,130 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:05:15,520 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:05:15,609 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:07:49,312 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:07:49,411 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:09:47,493 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:09:47,594 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:12:13,040 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

15/03/2016 21:12:13,140 SafariNotificationAgent[1495]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

16/03/2016 09:07:50,104 SafariNotificationAgent[446]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/SafariNotificationAgent. Errno:1

16/03/2016 09:07:50,106 SafariNotificationAgent[446]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/SafariNotificationAgent. Errno:1

16/03/2016 09:08:00,476 SafariNotificationAgent[446]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

16/03/2016 09:08:00,582 SafariNotificationAgent[446]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)


16/03/2016 10:15:57,746 sharingd[3662]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

16/03/2016 10:15:58,659 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 10:15:58,659 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 10:22:01,247 com.apple.WebKit.Networking[3765]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

16/03/2016 10:22:01,899 com.apple.WebKit.Networking[3765]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843)

16/03/2016 10:26:47,760 QuickLookSatellite[3782]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/com.apple.quicklook.satellite. Errno:1

16/03/2016 10:26:47,766 QuickLookSatellite[3782]: Failed to obtain sandbox extension for path=/Users/platon/Library/Caches/com.apple.quicklook.satellite. Errno:1

16/03/2016 10:26:52,832 QuickLookSatellite[3782]: In -[NSApplication(NSQuietSafeQuit) _updateCanQuitQuietlyAndSafely], _LSSetApplicationInformationItem(NSCanQuitQuietlyAndSafely) returned error -50

16/03/2016 10:30:47,462 DataDetectorsDynamicData[478]: Could not launch query, mds might have an issue

16/03/2016 10:31:52,274 DataDetectorsDynamicData[478]: Could not launch query, mds might have an issue

16/03/2016 10:32:56,806 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 10:32:56,806 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 10:33:03,073 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 10:33:03,073 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 10:33:08,931 AppleSpell[3733]: Lexicon creation failed: Lexicon resources not found

16/03/2016 10:34:26,255 DataDetectorsDynamicData[478]: Could not launch query, mds might have an issue

16/03/2016 10:36:28,403 DataDetectorsDynamicData[478]: Could not launch query, mds might have an issue

16/03/2016 10:36:28,406 DataDetectorsDynamicData[478]: Could not launch query, mds might have an issue

16/03/2016 11:08:38,481 com.apple.spotlight.IndexAgent[3824]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID

16/03/2016 11:08:38,484 IMDPersistenceAgent[389]: [com.apple.corespotlight.log.index] Finished "index items"(2) with error:Error Domain=CSIndexErrorDomain Code=-1003 "(null)"

16/03/2016 11:08:38,570 soagent[3702]: Can't allocate SOHelper <SOMessageHelper: 0x7fda1274f460> inside com.apple.soagent

16/03/2016 11:08:46,213 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:08:46,213 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 11:08:51,480 com.apple.AddressBook.ContactsAccountsService[377]: [Accounts] Current connection, <NSXPCConnection: 0x7f7fcb70f2e0> connection from pid 389, doesn't have account access.

16/03/2016 11:08:51,481 IMDPersistenceAgent[389]: [Accounts] Failed to update account with identifier 9D9C5854-1674-4C30-80BD-25F3F1D86F10, error: Error Domain=ABAddressBookErrorDomain Code=1002 "(null)"

16/03/2016 11:08:52,529 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:08:52,529 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 11:09:01,278 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:09:01,278 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 11:09:07,697 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:09:07,698 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 11:09:16,340 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:09:16,340 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 11:09:22,599 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:09:22,599 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 11:09:30,025 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:09:30,025 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type

16/03/2016 11:09:36,070 syncdefaultsd[372]: [AOSAccounts] : [__52-[ACAccountStore(iCloudAccount) icaAppleAccountType]_block_invoke] : accountTypeWithIdentifier returned error: Error Domain=com.apple.accounts Code=10002 "(null)"

16/03/2016 11:09:36,070 syncdefaultsd[372]: [AOSAccounts] : [-[ACAccountStore(iCloudAccount) icaAppleAccounts]] : icaAppleAccountType returned no account type



I ran EtreCheck, I sent it to me by mail but mail daemon told me it was unable to reach my mail address (very strange indeed). If you need it, I can run it again (I have to log in with my admin account, I avoid doing this for the above reasons).

Thanks a lot for your help, I don't know what to do.

MacBook Air, OS X El Capitan (10.11.3)

Posted on Mar 16, 2016 4:02 AM

Reply
10 replies

Mar 16, 2016 5:24 AM in response to ferdinand.bardamu

do you log in as root meaning you enabled the root account on your mac (If you or someone else did not physically sit down at your computer and turn this account on the answer is No, and you have a regualr Administrative account and possibly a standard account as well but root is not enabled.)


Did someone else give you a computer with software and an account already set up before you took possession of the computer?


Did someone physically sit down at your computer and install something without your knowledge. They had to be in the room with the computer, not remotely connected.


Did you physically sit down at your computer and instal something suspicious with your account?


Is your gatekeeper allowing anything to be installed


if you can answer "YES" to any of these questions there exists the possibility your system could be compromised. If you can answer "NO" to all of them the likelihood of your computer being compromised diminishes significantly. While it does not appear your computer has been compromised you can always consider wiping the drive.

1) Backing up with Time Machine

2) reformatting and reinstalling a clean instance of OS X

Mar 16, 2016 6:50 AM in response to ferdinand.bardamu

the likelihood is small and like Barney stated it looks like nothing "nefarious" is going on but logs can be cryptic to the border spectrum of novice and experienced users alike in many situations (i.e. myself, I can't speak for Barney) .

There are a handful of rootlets for mac and mac key loggers out there so they do exist and they are easy to install provided you have access to the computer and are sitting at it, AFAIK you can only UNINSTALL a key logger remotely on mac OS X at this time.


Most of these are marketed as keeping your kids safe software but I think it should be marketed as "Parental disappointment software" or "I'm going to spend my day at work spying on my spouse who's spending way too much time giggling over stuff on Facebook at 2:00 AM ware" along with "just being a bastardware"


in the mean time you can read this as to some insight into how to detect some of these here, this may give you insight into what specifically you should look into in the event you suspect something worse is going on.

http://www.reedcorner.net/mmg/


https://www.reddit.com/r/computerforensics/comments/3u3i20/detecting_keylogger_o n_mac/

Mar 16, 2016 8:21 AM in response to JimmyCMPIT

You said :"do you log in as root meaning you enabled the root account on your mac"

In fact, I have on admin account and one standard user account. This log has been captured when logged as a standard user. But how do you enable/disable the root account on your mac. In don't know if it is unable or not. My admin account has a check box option (grey, that is not updatable) that specifies something like "Allow to administer this computer". Is it this option you speak about (root account) ?

I know how to use the terminal and if there is something to type in, no problem, but I'd like to understand the difference between the admin account I defined and the root account, if any (differences).

Concerning my story, it is a little bit more complicated. At the beginning, some guys were staying right down my home on the boardwalk and installed a fake bluetooth device with their smartphone, (after having attacked my NAS through a DNS Spoofing method). They used this fake bluetooth device to do everything they wanted on my Mac. Since, they often change their procedures but they "follow" me everywhere (I noticed this was link to my Mac macaddress and I bought a new mac). I know the reason they attacked me, it is very very thin : a comment on a site they did not enjoy. Their attacks are very sophisticated as the NSA could do.

Thanks

PS : now, I am always logged as a standard user.

Mar 17, 2016 1:51 PM in response to ferdinand.bardamu

existed meaning installed in on your computer while they were SITTING AT YOUR COMPUTER, not over a network or wifi or remote or any other connected way and they did this without your knowledge because they cat NOT remote into your mac and install key loggers as root, they need to be at the computer with your root account and password in OS X. HOWEVER If you let "they" into your house to do this, there is your answer, otherwise your concern would be based on a sophisticated attack that OS X blocks at the root level and this would be the first time it's ever happened and you would be the first person to ever report it and all the securities teams and lab workers of the world managed to have this get past them both in actual attack and theoretical proof of concept.

Mar 17, 2016 2:33 PM in response to JimmyCMPIT

This is somewhat true. I have had a similar experience with my root user enabled. Well i knew nothing about the root or superuser until i was actually remotely connected with an Apple Representative. They helped me password my iMac settings. I will say this though, I did acquiesce to a certain person whom i thought i could trust (BIG MISTAKE), my computer has never really been the same. Live and Learn!

Mar 18, 2016 7:26 AM in response to brettfromgreen valley

A story or blog or possibly some nonsense I read years ago stated Steve Balmer of Microsoft once asked his chief windows developer how to be sure your computer was not infected even if it was running patches and AV and anything else. The developer responded "format the drive, reinstall the OS. then patch from the developer."

while this is viewed as brute force solution by many it's possibly the fastest and most secure way of dealing with a compromised or suspicious system that can't be ruled out.

I AM STILL RULING OUT THE OP'S NOTION "THEY" [IF "THEY" EXISTED] COMPROMISED HIS COMPUTER REMOTELY OR WITHOUT HIS CONSENT


This is the Gordains Knot solution, but it will put the smack down on anything that should not be there in the event it's there*


*A Thunderbolt device could have it's firmware altered to contain malicious "code" that would survives a system re-image/drive format/OS reinstall, but that "code" was developed in a lab to present a theory of how this could be done (e.g proof of concept - concept being the key-word) but It never got past that stage, no code was developed or compiled and more importantly released to anyone.

The info was given to Apple who patched the exploit in OS 10.10.2 (and remains intact for iterations past that) So anything is possible, but it appears this particular threat was fixed before it ever became anything to be a potential problem. The exploit was dubbed "Thunderstrike" if you wish to search deeper down the rabbit hole.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

My Mac is pirated, his to defend myself ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.