My free MacBook Storage gets less and less without any obvious reason

I have 750 GB storage. After rebooting I see, that around 40 GB are free.

This 40GB diminishes itself after a few hours to below 1 GB (then my programs are freezing....only reboot helps)

What ist happening here?

How to find out the reason?

Thanks


Here a screenshot a few minutes after booting:

User uploaded file

I will post a second screenshot after a few hours

MacBook Pro (Retina, 15-inch, Early 2013), OS X El Capitan (10.11.4), null

Posted on May 7, 2016 5:02 AM

Reply
Question marked as Top-ranking reply

Posted on May 7, 2016 5:56 AM

There may be excessive swapping of data between physical memory (that is, the memory chips on the logic board) and virtual memory (one or more files on the startup volume.) That activity is relatively slow and causes the whole system to be less responsive. It can happen for two reasons:

A long-running process with a memory leak (a kind of bug)

Not enough memory for your usage pattern

Please note that if the cause is a memory leak, installing more memory will not help. That's likely if you already have more than 4 GB of memory. Tracking down a memory leak can be difficult, and it may come down to a process of elimination.

These instructions are for OS X 10.9 and later. Some details may be slightly different for earlier versions of OS X.

When you notice the slowdown, open the Activity Monitor application and select All Processes from the View menu, if it's not already selected. Select the Memory tab. Click the heading of the Real Mem column in the process table twice to sort the table with the highest value at the top. If you don't see that column, select

View ▹ Columns ▹ Real Memory

from the menu bar.

If one process (excluding "kernel_task") is using much more memory than all the others, that could be an indication of a leak. A better indication would be a process that continually grabs more and more real memory over time without ever releasing it. Here is an example of how it's done.

"Wired" memory should be less than half of the total. That memory is not swapped, but it makes less physical memory available which may then result in swapping. If most of the memory is wired, that may be an indication of a memory leak in a third-party program that modifies the operating system at a low level. Ask for guidance in that case.

If you don't have an obvious memory leak, the options are to install more memory (if possible) or to run fewer programs simultaneously.

The next suggestion is only for users familiar with the shell. For a more precise, but potentially misleading, test, run the following command:

sudo leaks -nocontext -nostacks process | grep total

where process is the name of a process you suspect of leaking memory. Almost every process will leak some memory; the question is how much, and especially how much the leak increases with time. I can’t be more specific. See the leaks(1) man page and the Apple developer documentation for details.

24 replies
Question marked as Top-ranking reply

May 7, 2016 5:56 AM in response to pingopilot

There may be excessive swapping of data between physical memory (that is, the memory chips on the logic board) and virtual memory (one or more files on the startup volume.) That activity is relatively slow and causes the whole system to be less responsive. It can happen for two reasons:

A long-running process with a memory leak (a kind of bug)

Not enough memory for your usage pattern

Please note that if the cause is a memory leak, installing more memory will not help. That's likely if you already have more than 4 GB of memory. Tracking down a memory leak can be difficult, and it may come down to a process of elimination.

These instructions are for OS X 10.9 and later. Some details may be slightly different for earlier versions of OS X.

When you notice the slowdown, open the Activity Monitor application and select All Processes from the View menu, if it's not already selected. Select the Memory tab. Click the heading of the Real Mem column in the process table twice to sort the table with the highest value at the top. If you don't see that column, select

View ▹ Columns ▹ Real Memory

from the menu bar.

If one process (excluding "kernel_task") is using much more memory than all the others, that could be an indication of a leak. A better indication would be a process that continually grabs more and more real memory over time without ever releasing it. Here is an example of how it's done.

"Wired" memory should be less than half of the total. That memory is not swapped, but it makes less physical memory available which may then result in swapping. If most of the memory is wired, that may be an indication of a memory leak in a third-party program that modifies the operating system at a low level. Ask for guidance in that case.

If you don't have an obvious memory leak, the options are to install more memory (if possible) or to run fewer programs simultaneously.

The next suggestion is only for users familiar with the shell. For a more precise, but potentially misleading, test, run the following command:

sudo leaks -nocontext -nostacks process | grep total

where process is the name of a process you suspect of leaking memory. Almost every process will leak some memory; the question is how much, and especially how much the leak increases with time. I can’t be more specific. See the leaks(1) man page and the Apple developer documentation for details.

May 8, 2016 6:59 AM in response to pingopilot

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

The test works on OS X 10.8 ("Mountain Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

2. If you don't already have a current backup, please back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

In this case, however, there are ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone who understands the code can verify what it does.

You may not be able to understand the script yourself. But variations of it have been posted on this website many times over a period of years. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

4. Here's a general summary of what you need to do, if you choose to proceed:

☞ Copy the text of a particular web page (not this one) to the Clipboard.

☞ Paste into the window of another application.

☞ Wait for the test to run. It usually takes a few minutes.

☞ Paste the results, which will have been copied automatically, back into a reply on this page.

These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is intermittently slow, run the test during a slowdown.

You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual before running it. If you can only test in safe mode, do that.

6. If you have more than one user, and only one user is affected by the problem,, and the affected user is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

7. Load this linked web page (on the website "Pastebin.") Press the key combination command-A to select all the text, then copy it to the Clipboard by pressing command-C.

8. Launch the built-in Terminal application in any one of the following ways:

☞ Enter the first few letters of its name ("Terminal") into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

If the test is taking much longer than usual to run because the computer is very slow, you might be prompted for your password a second time. The authorization that you grant by entering it expires automatically after five minutes.

If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

Test started

Part 1 of 4 done at: … sec

Part 4 of 4 done at: … sec

The test results are on the Clipboard.

Please close this window.

The intervals between parts won't be exactly equal, but they give a rough indication of progress.

Wait for the final message "Please close this window" to appear—again, usually within a few minutes. If you don't see that message within about 30 minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step. You'll have incomplete results, but still something.

In order to get results, the test must either be allowed to complete or else manually stopped as above. If you close the Terminal window while the test is still running, the partial results won't be saved.

11. When the test is complete, or if you stopped it manually, quit Terminal. The results will have been saved to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "close this window" message. Please wait for it and try again.

If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

12. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the software that runs this website. Please post the test results on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

13. When you're done with the test, it's gone. There is nothing to uninstall or clean up.

14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

15. The linked UNIX shell script bears a notice of copyright. Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

May 8, 2016 8:01 AM in response to Linc Davis

EtreCheck version: 2.9.12 (265)

Report generated 2016-05-08 16:58:28

Download EtreCheck from https://etrecheck.com

Runtime 5:02

Performance: Below Average


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Click the [Remove] links to remove adware.


Problem: Other problem

Description:

Memory Leak


Hardware Information:

MacBook Pro (Retina, 15-inch, Early 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro10,1

1 2,7 GHz Intel Core i7 CPU: 4-core

16 GB RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 139


Video Information:

Intel HD Graphics 4000

NVIDIA GeForce GT 650M - VRAM: 1024 MB

Color LCD 2880 x 1800

2963 1920 x 1080 @ 60 Hz

L557 1280 x 1024


System Software:

OS X El Capitan 10.11.4 (15E65) - Time since boot: about 3 hours


Disk Information:

APPLE SSD SM768E disk0 : (751,28 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / : 750.05 GB (21.69 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 750.42 GB Online


USB Information:

VIA Labs, Inc. USB2.0 Hub

Apple Inc. Apple Watch Magnetic Charging Cable

VIA Labs, Inc. USB2.0 Hub

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

VIA Labs, Inc. USB3.0 Hub 2 TB

VIA Labs, Inc. USB3.0 Hub 2 TB

StoreJet Transcend StoreJet Transcend 2 TB

Transcend (disk2s1) /Volumes/Transcend : 2.00 TB (1.29 TB free)


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Configuration files:

System Integrity Protection status: enabled (Custom Configuration)


Gatekeeper:

Mac App Store and identified developers


Adware:

~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

~/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

2 adware files found. [Remove]


Kernel Extensions:

/Applications/Parallels Access.app

[loaded] com.parallels.virtualhid (1.0.3 - SDK 10.9 - 2015-10-31) [Support]

[loaded] com.parallels.virtualsound (1.0.36 - SDK 10.6 - 2015-10-31) [Support]


/Applications/Parallels Desktop.app

[not loaded] com.parallels.kext.hypervisor (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[not loaded] com.parallels.kext.netbridge (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[not loaded] com.parallels.kext.usbconnect (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[not loaded] com.parallels.kext.vnic (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]


/System/Library/Extensions

[not loaded] com.Logitech.Control Center.HID Driver (3.7.0 - SDK 10.6 - 2016-04-08) [Support]

[not loaded] com.Logitech.Unifying.HID Driver (1.3.0 - SDK 10.6 - 2016-04-08) [Support]

[not loaded] com.palm.ClassicNotSeizeDriver (3.2.1 - 2016-04-08) [Support]

[not loaded] com.prolific.driver.PL2303 (1.0.8b4 - 2016-04-08) [Support]


Startup Items:

ChmodBPF: Path: /Library/StartupItems/ChmodBPF

Startup items are obsolete in OS X Yosemite


System Launch Agents:

[not loaded] 7 Apple tasks

[loaded] 147 Apple tasks

[running] 71 Apple tasks

[killed] 13 Apple tasks

13 processes killed due to insufficient RAM


System Launch Daemons:

[not loaded] 42 Apple tasks

[loaded] 154 Apple tasks

[running] 84 Apple tasks

[killed] 9 Apple tasks

9 processes killed due to insufficient RAM


Launch Agents:

[running] com.Logitech.Control Center.Daemon.plist (2013-04-16) [Support]

[not loaded] com.adobe.AAM.Updater-1.0.plist (2015-12-06) [Support]

[running] com.brother.LOGINserver.plist (2012-09-05) [Support]

[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (2015-01-19) [Support]

[loaded] com.epson.esua.launcher.plist (2015-06-29) [Support]

[running] com.epson.eventmanager.agent.plist (2014-09-21) [Support]

[loaded] com.google.keystone.agent.plist (2016-03-03) [Support]

[loaded] com.oracle.java.Java-Updater.plist (2013-03-16) [Support]

[running] com.parallels.mobile.prl_deskctl_agent.launchagent.plist (2015-10-31) [Support]

[not loaded] com.teamviewer.teamviewer.plist (2015-01-04) [Support]

[not loaded] com.teamviewer.teamviewer_desktop.plist (2015-01-04) [Support]

[loaded] de.devolo.networkservice.notify.plist (2015-08-16) [Support]

[loaded] org.macosforge.xquartz.startx.plist (2013-11-11) [Support]


Launch Daemons:

[loaded] com.adobe.agsservice.plist (2015-12-06) [Support]

[failed] com.adobe.fpsaud.plist (2016-04-16) [Support]

[loaded] com.google.keystone.daemon.plist (2016-03-03) [Support]

[not loaded] com.macpaw.CleanMyMac2.Agent.plist (2015-04-13) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2013-03-16) [Support]

[running] com.parallels.mobile.dispatcher.launchdaemon.plist (2015-10-31) [Support]

[loaded] com.parallels.mobile.kextloader.launchdaemon.plist (2015-10-31) [Support]

[loaded] com.teamviewer.Helper.plist (2015-01-04) [Support]

[not loaded] com.teamviewer.teamviewer_service.plist (2015-01-04) [Support]

[loaded] com.transcend.RxRecoveryHelper.plist (2015-03-15) [Support]

[running] de.devolo.networkservice.plist (2015-08-16) [Support]

[loaded] fi.polar.libpolar.plist (2013-02-26) [Support]

[loaded] org.macosforge.xquartz.privileged_startx.plist (2013-11-11) [Support]


User Launch Agents:

[running] com.amazon.cloud-player.plist (2014-02-24) [Support]

[failed] com.jdibackup.ZipCloud.autostart.plist (2015-09-09) Adware! [Remove]

[failed] com.jdibackup.ZipCloud.notify.plist (2015-09-09) Adware! [Remove]

[running] com.parallels.mobile.startgui.launchagent.plist (2016-05-08) [Support]


User Login Items:

iTunesHelper Programm (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

smcFanControl Programm (/Applications/smcFanControl.app)

Dropbox Programm (/Applications/Dropbox.app)

RightZoom Programm (/Applications/RightZoom.app)

WebSync Programm Hidden (/Applications/WebSync.app)

Google Drive Programm (/Applications/Google Drive.app)

PhotoStream2Folder Programm (/Applications/Utilities/PhotoStream2Folder.app)

iBetterCharge Programm (/Applications/iBetterCharge.app)

Zinio Reader 4 Programm (/Applications/Zinio Reader 4.app)

RoboFormIcon Programm (~/Library/Application Support/RoboForm/RoboFormIcon.app)

TomTomHOMERunner Programm Hidden (~/Library/Application Support/TomTom HOME/TomTomHOMERunner.app)

EPSON Software Updater Programm Hidden (/Applications/Epson Software/EPSON Software Updater.app)

Livedrive Programm (/Applications/Livedrive.app/Contents/Resources/Livedrive.app)

XtraFinder Programm (/Applications/XtraFinder.app)

Xmarks for Safari Programm (/Applications/Xmarks for Safari.app)


Other Apps:

[running] PS2F.PhotoStream2Folder.92512

[loaded] ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1.7392

[running] com.SiberSystems.RoboFormIcon.216032

[running] com.brother.utility.NETserver.220192

[running] com.brother.utility.USBserver.219872

[running] com.eidac.smcFanControl2.112672

[running] com.etresoft.EtreCheck.278752

[running] com.getdropbox.dropbox.81632

[running] com.google.GoogleDrive.219552

[running] com.livedrive.Livedriveapp.113632

[loaded] com.macpaw.CleanMyMac3.Agent

[running] com.parallels.inputmethod.ParallelsIM.102112

[running] com.softorino.iBetterCharge.62752

[loaded] com.thinkbitz.openAtLoginLauncher-pasteboardSyncForMac

[running] com.tomtom.HOMERunnerApp.216352

[running] com.xmarks.XmarksforSafari.95392

[loaded] 408 Apple tasks

[running] 202 Apple tasks

[killed] 22 Apple tasks


Internet Plug-ins:

Flip4Mac WMV Plugin: 3.2.0.16 - SDK 10.8 (2014-02-10) [Support]

FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-05-04) [Support]

QuickTime Plugin: 7.7.3 (2016-03-22)

Flash Player: 21.0.0.226 - SDK 10.6 (2016-05-04) [Support]

AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 - SDK 10.6 (2015-12-06) [Support]

Default Browser: 601 - SDK 10.11 (2016-03-23)

BeMeisterCom: BeMeisterCom 1.0.14 - SDK 10.7 (2012-03-27) [Support]

Silverlight: 5.1.41212.0 - SDK 10.6 (2016-02-04) [Support]

JavaAppletPlugin: Java 8 Update 91 build 14 (2016-05-04) Check version


User internet Plug-ins:

Google Earth Web Plug-in: 7.1 (2015-04-15) [Support]


Safari Extensions:

RoboForm - Siber Systems - http://www.roboform.com (2016-04-12)

ButtonBar+ - D.G. Midwinter, © 2012 - http://www.buttonbar-plus.com (2014-12-20)

iMedia Converter Deluxe - iSkysoft Studio - http://www.iskysoft.com (2013-11-27)

Auto Refresh - Andy Griffin - http://www.agriffindesign.com/downloads/autorefresh (2014-03-26)

OpenIE - Parallels - http://www.parallels.com (2013-03-16)

Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (2016-03-26)

Sessions - David Yoo - https://sessions-extension.github.io/Sessions/ (2015-10-31)


3rd Party Preference Panes:

Flash Player (2016-04-16) [Support]

Flip4Mac WMV (2013-03-29) [Support]

Java (2016-05-04) [Support]

Logitech Control Center (2015-04-15) [Support]

Xmarks for Safari (2016-01-07) [Support]


Time Machine:

Skip System Files: NO

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 750.05 GB Disk used: 728.35 GB

Destinations:

Time machine IMac Sabine [Network]

Total size: 11.89 TB

Total number of backups: 72

Oldest backup: 11.01.15, 10:04

Last backup: 08.05.16, 16:04

Size of backup disk: Excellent

Backup size 11.89 TB > (Disk size 750.05 GB X 3)


Top Processes by CPU:

99% pkd

94% Xmarks for Safari

88% Livedrive

80% bash

38% WindowServer


Top Processes by Memory:

5.66 GB com.apple.WebKit.WebContent(22)

2.77 GB SystemUIServer

2.01 GB kernel_task

1.22 GB Livedrive

721 MB Safari


Virtual Memory Information:

200 MB Free RAM

16.00 GB Used RAM (1.35 GB Cached)

19.18 GB Swap Used


Diagnostics Information:

May 8, 2016, 01:21:47 PM Self test - passed


The other test is still running

May 8, 2016 9:18 AM in response to pingopilot

The system is heavily modified by third-party software. Each such configuration is unique and unpredictable. I can only guess which of the many modifications may be contributing to the problem. As a start toward solving it, I suggest the following steps.

A

None of the following system modifications serves any real purpose. All should be removed unconditionally:

CleanMyMac

These system modifications may do something useful to you, but any or all could be contributing to the problem:

devolo Cockpit

Livedrive

Parallels Access

Xmarks for Safari

If you want to keep them, do a trial removal to find out whether they're at fault, and refer to the developers for support if they are. Some or all may need to be updated.

Any third-party software that doesn't install from the App Store or by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.

Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.

I never install system modifications myself, and except as stated in this comment, I don't know how to uninstall them. You'll have to do your own research to find that information.

Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.

Back up all data before making any changes.

You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.

If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

"CleanMyMac" is a scam and a common cause of instability and poor performance. Depending on what version you have, the developer's instructions may not completely remove it. Please follow those instructions, then do as below.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/Library/LaunchDaemons/com.macpaw.CleanMyMac3.Agent.plist

Right-click or control-click the highlighted line and select

Services Reveal in Finder (or just Reveal)

from the contextual menu.* A folder may open with an item selected. If it does, move the selected item to the Trash. You may be prompted for your administrator login password.

Repeat with this line:

/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac3.Agent

Restart the computer and empty the Trash.

You may also have to remove one or more of these items in the same way:

~/Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

Never again install "CleanMyMac" or anything like it.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

B

The test results show other issues, probably not related to the original question.

Some of your user files (not system files) have incorrect permissions or are locked. This procedure will unlock those files and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.

Please back up all data before proceeding.

Step 1

If you have more than one user, and the one in question is not an administrator, then go to Step 2.

Enter the following command in the Terminal window in the same way as before (triple-click, copy, and paste):

sudo find ~ $TMPDIR.. -exec chflags -h nosappnd,noschg,nosunlnk,nouappnd,nouchg {} + -exec chown -h $UID {} + -exec chmod +rw {} + -exec chmod -h -N {} + -type d -exec chmod -h +x {} + 2>&-

You'll be prompted for your login password, which won't be displayed when you type it. Type carefully and then press return. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

The command may take several minutes to run, depending on how many files you have. Wait for a new line ending in a dollar sign ($) to appear, then quit Terminal.

Step 2 (optional)

Take this step only if you have trouble with Step 1, if you prefer not to take it, or if it doesn't solve the problem.

Start up in Recovery mode. You may be prompted to select a language, then the OS X Utilities screen will appear.

If you use FileVault 2, select Disk Utility, then select the icon of the FileVault startup volume ("Macintosh HD," unless you gave it a different name.) It will be nested below another drive icon. Select Unlock from the File menu and enter your login password when prompted. Then quit Disk Utility to be returned to the main screen.

Select

Utilities Terminal

from the menu bar. A Terminal window will open. In that window, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window will open. You’re not going to reset a password.

Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.

Select your username from the menu labeled Select the user account if not already selected.

Under Reset Home Directory Permissions and ACLs, click the Reset button.

Select

Restart

from the menu bar.

C

Back up all data.

Run the following command in the same way as before. It moves to the Trash "semaphore" files that have not been cleaned up by the system and may be interfering with normal operation. The files are empty; they contain no data. There will be no output this time.

find L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.??????? -exec mv {} .Trash/ \; 2>&-

Log out or restart the computer and empty the Trash.

D

In the sidebar of a Finder window, or on the Desktop, please select the icon of the startup volume ("Macintosh HD," unless you gave it a different name.) Open it. Inside, there is a folder named "lost+found". It contains one or more corrupt files that are wasting a lot of storage space. Back up all data, then drag the folder to the Trash and empty. You may be prompted for your administrator password.

E

Some OS X files (Installer package receipts) are missing or invalid. Other OS files may also be missing or invalid.

If you don't already have a current backup, please back up all data, then reinstall the OS.* You don't need to erase the startup volume, and you won't need the backup unless something goes wrong. If the system was upgraded from an older version of OS X, you may need the Apple ID and password you used.

There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

If you installed the Java runtime distributed by Apple and still need it, you'll have to reinstall it. The same goes for Xcode. All other data will be preserved.

*The linked support article refers to OS X 10.11 ("El Capitan"), but the procedure is the same for OS X 10.7 ("Lion") and later.

May 8, 2016 5:31 AM in response to pingopilot

Hi Pingopilot:


One obvious problem is that you have CleanMyMac3 installed. This will slow your system down a lot. It also causes many problems, which you can read about in this forum, if you do a search for CleanMyMac3.


I would remove CleanMyMac3 as per the developers instructions.


How to Remove CleanMyMac3


Get rid of CleanMyMac3. Totally unnecessary and will slow down your MacBook Pro. These are the uninstall instructions: How to Uninstall CleanMyMac 3


How do I remove CleanMyMac 3: John Galt-How do I remove CleanMyMac 3


Kim

May 7, 2016 8:50 AM in response to pingopilot

There are several obvious memory leaks. I don't know whether they are related.

Please read this whole message before doing anything.

This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

May 12, 2016 8:51 AM in response to pingopilot

Try downloading and installing OmniDiskSweeper: OmniDiskSweeper

Maybe that will allow you to see what is taking up all the room on your hard drive.


OmniDiskSweeper will sort your files by size and show you where they are located. This should allow you to determine exactly what you have on your MBP.

You may also be able to move some of these larger files such as videos, etc. to an external drive to free up space on your startup drive.


See the following video on OmniDiskSweeper. Using OmniDiskSweeper


OS X: What is "other" space in About This Mac? - Apple Support : OS X: What is "other" space in About This Mac?


Also try running Activity Monitor from Applications > Utilities > Activity Monitor.


User uploaded file

Click on CPU then click on %CPU to sort by CPU usage.

Maybe this will help located what it filling up your hard disk.


Kim

May 11, 2016 10:58 AM in response to KimUserName

ok. I hope, that I removed zip cloud. I never installed it! At the moment, my memory is stable for 30minutes after reboot!


Etrecheck:

EtreCheck version: 2.9.12 (265)

Report generated 2016-05-11 19:40:50

Download EtreCheck from https://etrecheck.com

Runtime 2:48

Performance: Excellent


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Problem: Other problem


Hardware Information:

MacBook Pro (Retina, 15-inch, Early 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro10,1

1 2,7 GHz Intel Core i7 CPU: 4-core

16 GB RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 140


Video Information:

Intel HD Graphics 4000

NVIDIA GeForce GT 650M - VRAM: 1024 MB

Color LCD 2880 x 1800

2963 1920 x 1080 @ 60 Hz

L557 1280 x 1024


System Software:

OS X El Capitan 10.11.4 (15E65) - Time since boot: less than an hour


Disk Information:

APPLE SSD SM768E disk0 : (751,28 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / : 750.05 GB (39.81 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 750.42 GB Online


USB Information:

VIA Labs, Inc. USB2.0 Hub

Apple Inc. Apple Watch Magnetic Charging Cable

VIA Labs, Inc. USB2.0 Hub

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

VIA Labs, Inc. USB3.0 Hub 2 TB

VIA Labs, Inc. USB3.0 Hub 2 TB

StoreJet Transcend StoreJet Transcend 2 TB

Transcend (disk2s1) /Volumes/Transcend : 2.00 TB (1.29 TB free)


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Configuration files:

System Integrity Protection status: enabled (Custom Configuration)


Gatekeeper:

Mac App Store and identified developers


Kernel Extensions:

/Applications/Parallels Access.app

[loaded] com.parallels.virtualhid (1.0.3 - SDK 10.9 - 2015-10-31) [Support]

[loaded] com.parallels.virtualsound (1.0.36 - SDK 10.6 - 2015-10-31) [Support]


/Applications/Parallels Desktop.app

[loaded] com.parallels.kext.hypervisor (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[loaded] com.parallels.kext.netbridge (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[loaded] com.parallels.kext.usbconnect (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[loaded] com.parallels.kext.vnic (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]


/System/Library/Extensions

[not loaded] com.Logitech.Control Center.HID Driver (3.7.0 - SDK 10.6 - 2016-04-08) [Support]

[not loaded] com.Logitech.Unifying.HID Driver (1.3.0 - SDK 10.6 - 2016-04-08) [Support]

[not loaded] com.palm.ClassicNotSeizeDriver (3.2.1 - 2016-04-08) [Support]

[not loaded] com.prolific.driver.PL2303 (1.0.8b4 - 2016-04-08) [Support]


Startup Items:

ChmodBPF: Path: /Library/StartupItems/ChmodBPF

Startup items are obsolete in OS X Yosemite


System Launch Agents:

[not loaded] 7 Apple tasks

[loaded] 147 Apple tasks

[running] 84 Apple tasks


System Launch Daemons:

[not loaded] 42 Apple tasks

[loaded] 156 Apple tasks

[running] 91 Apple tasks


Launch Agents:

[running] com.Logitech.Control Center.Daemon.plist (2013-04-16) [Support]

[not loaded] com.adobe.AAM.Updater-1.0.plist (2015-12-06) [Support]

[running] com.brother.LOGINserver.plist (2012-09-05) [Support]

[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (2015-01-19) [Support]

[loaded] com.epson.esua.launcher.plist (2016-03-28) [Support]

[running] com.epson.eventmanager.agent.plist (2014-09-21) [Support]

[loaded] com.google.keystone.agent.plist (2016-03-03) [Support]

[loaded] com.oracle.java.Java-Updater.plist (2013-03-16) [Support]

[running] com.parallels.mobile.prl_deskctl_agent.launchagent.plist (2015-10-31) [Support]

[not loaded] com.teamviewer.teamviewer.plist (2015-01-04) [Support]

[not loaded] com.teamviewer.teamviewer_desktop.plist (2015-01-04) [Support]

[loaded] de.devolo.networkservice.notify.plist (2015-08-16) [Support]

[loaded] org.macosforge.xquartz.startx.plist (2013-11-11) [Support]


Launch Daemons:

[loaded] com.adobe.agsservice.plist (2015-12-06) [Support]

[loaded] com.adobe.fpsaud.plist (2016-04-16) [Support]

[loaded] com.google.keystone.daemon.plist (2016-03-03) [Support]

[loaded] com.macpaw.CleanMyMac2.Agent.plist (2015-04-13) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2013-03-16) [Support]

[running] com.parallels.mobile.dispatcher.launchdaemon.plist (2015-10-31) [Support]

[loaded] com.parallels.mobile.kextloader.launchdaemon.plist (2015-10-31) [Support]

[loaded] com.teamviewer.Helper.plist (2015-01-04) [Support]

[not loaded] com.teamviewer.teamviewer_service.plist (2015-01-04) [Support]

[loaded] com.transcend.RxRecoveryHelper.plist (2015-03-15) [Support]

[running] de.devolo.networkservice.plist (2015-08-16) [Support]

[loaded] fi.polar.libpolar.plist (2013-02-26) [Support]

[loaded] org.macosforge.xquartz.privileged_startx.plist (2013-11-11) [Support]


User Launch Agents:

[running] com.amazon.cloud-player.plist (2014-02-24) [Support]

[running] com.parallels.mobile.startgui.launchagent.plist (2016-05-11) [Support]


User Login Items:

iTunesHelper Programm (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

smcFanControl Programm (/Applications/smcFanControl.app)

Dropbox Programm (/Applications/Dropbox.app)

RightZoom Programm (/Applications/RightZoom.app)

Google Drive Programm (/Applications/Google Drive.app)

PhotoStream2Folder Programm (/Applications/Utilities/PhotoStream2Folder.app)

iBetterCharge Programm (/Applications/iBetterCharge.app)

Zinio Reader 4 Programm (/Applications/Zinio Reader 4.app)

RoboFormIcon Programm (~/Library/Application Support/RoboForm/RoboFormIcon.app)

Livedrive Programm (/Applications/Livedrive.app/Contents/Resources/Livedrive.app)

XtraFinder Programm (/Applications/XtraFinder.app)

Xmarks for Safari Programm (/Applications/Xmarks for Safari.app)


Other Apps:

[running] PS2F.PhotoStream2Folder.92512

[loaded] ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1.7392

[running] com.SiberSystems.RoboFormIcon.216032

[running] com.brother.utility.NETserver.220192

[running] com.brother.utility.USBserver.219872

[running] com.eidac.smcFanControl2.112672

[running] com.etresoft.EtreCheck.278752

[running] com.getdropbox.dropbox.81632

[running] com.google.GoogleDrive.219552

[running] com.livedrive.Livedriveapp.113632

[running] com.parallels.inputmethod.ParallelsIM.102112

[running] com.softorino.iBetterCharge.62752

[loaded] com.thinkbitz.openAtLoginLauncher-pasteboardSyncForMac

[running] com.xmarks.XmarksforSafari.95392

[loaded] 396 Apple tasks

[running] 242 Apple tasks


Internet Plug-ins:

Flip4Mac WMV Plugin: 3.2.0.16 - SDK 10.8 (2014-02-10) [Support]

FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-05-04) [Support]

QuickTime Plugin: 7.7.3 (2016-03-22)

Flash Player: 21.0.0.226 - SDK 10.6 (2016-05-04) [Support]

AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 - SDK 10.6 (2015-12-06) [Support]

Default Browser: 601 - SDK 10.11 (2016-03-23)

BeMeisterCom: BeMeisterCom 1.0.14 - SDK 10.7 (2012-03-27) [Support]

Silverlight: 5.1.41212.0 - SDK 10.6 (2016-02-04) [Support]

JavaAppletPlugin: Java 8 Update 91 build 14 (2016-05-04) Check version


User internet Plug-ins:

Google Earth Web Plug-in: 7.1 (2015-04-15) [Support]


Safari Extensions:

RoboForm - Siber Systems - http://www.roboform.com (2016-04-12)

ButtonBar+ - D.G. Midwinter, © 2012 - http://www.buttonbar-plus.com (2014-12-20)

iMedia Converter Deluxe - iSkysoft Studio - http://www.iskysoft.com (2013-11-27)

Auto Refresh - Andy Griffin - http://www.agriffindesign.com/downloads/autorefresh (2014-03-26)

OpenIE - Parallels - http://www.parallels.com (2013-03-16)

Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (2016-03-26)

Sessions - David Yoo - https://sessions-extension.github.io/Sessions/ (2015-10-31)


3rd Party Preference Panes:

Flash Player (2016-04-16) [Support]

Flip4Mac WMV (2013-03-29) [Support]

Java (2016-05-04) [Support]

Logitech Control Center (2015-04-15) [Support]

Xmarks for Safari (2016-01-07) [Support]


Time Machine:

Skip System Files: NO

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 750.05 GB Disk used: 710.23 GB

Destinations:

Time machine IMac Sabine [Network]

Total size: 11.89 TB

Total number of backups: 72

Oldest backup: 11.01.15, 10:04

Last backup: 09.05.16, 11:47

Size of backup disk: Excellent

Backup size 11.89 TB > (Disk size 750.05 GB X 3)


Top Processes by CPU:

104% Xmarks for Safari

91% Livedrive

63% backupd

15% WindowServer

14% kernel_task


Top Processes by Memory:

4.99 GB com.apple.WebKit.WebContent(23)

1.90 GB kernel_task

852 MB Livedrive

803 MB SystemUIServer

475 MB Safari


Virtual Memory Information:

39 MB Free RAM

16.00 GB Used RAM (1.44 GB Cached)

16 MB Swap Used


Diagnostics Information:

May 11, 2016, 07:22:09 PM Self test - passed

May 11, 2016, 07:21:02 PM ~/Library/Logs/DiagnosticReports/rf-safari-companion_2016-05-11-192102_[redacte d].crash

/Users/USER/Library/Application Support/RoboForm/RoboFormIcon.app/Contents/PlugIns/rf-safari-companion.appex/Co ntents/MacOS/rf-safari-companion

May 11, 2016, 04:05:06 PM ~/Library/Logs/DiagnosticReports/rf-safari-companion_2016-05-11-160506_[redacte d].crash

May 10, 2016, 10:40:06 PM /Library/Logs/DiagnosticReports/prl_deskctl_agent_2016-05-10-224006_[redacted]. crash

com.parallels.mobile.prl_deskctl_agent - /Applications/Parallels Access.app/Contents/MacOS/Parallels Access Agent.app/Contents/MacOS/prl_deskctl_agent

May 10, 2016, 11:28:24 AM ~/Library/Logs/DiagnosticReports/Adobe Lightroom_2016-05-10-112824_[redacted].crash

com.adobe.Lightroom6 - /Applications/Adobe Lightroom/Adobe Lightroom.app/Contents/MacOS/Adobe Lightroom

May 9, 2016, 01:15:16 PM ~/Library/Logs/DiagnosticReports/rf-safari-companion_2016-05-09-131516_[redacte d].crash

May 12, 2016 3:17 AM in response to KimUserName

Thanks. I removed it, but still loosing slowly memory! 😠


EtreCheck version: 2.9.12 (265)

Report generated 2016-05-12 12:04:14

Download EtreCheck from https://etrecheck.com

Runtime 1:58

Performance: Excellent


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Problem: Other problem


Hardware Information:

MacBook Pro (Retina, 15-inch, Early 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro10,1

1 2,7 GHz Intel Core i7 CPU: 4-core

16 GB RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 140


Video Information:

Intel HD Graphics 4000

NVIDIA GeForce GT 650M - VRAM: 1024 MB

Color LCD 2880 x 1800

2963 1920 x 1080 @ 60 Hz

L557 1280 x 1024


System Software:

OS X El Capitan 10.11.4 (15E65) - Time since boot: less than an hour


Disk Information:

APPLE SSD SM768E disk0 : (751,28 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / : 750.05 GB (39.95 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 750.42 GB Online


USB Information:

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

VIA Labs, Inc. USB2.0 Hub

Apple Inc. Apple Watch Magnetic Charging Cable

Apple Inc. iPhone

VIA Labs, Inc. USB2.0 Hub

Apple Inc. FaceTime HD Camera (Built-in)

VIA Labs, Inc. USB3.0 Hub 2 TB

VIA Labs, Inc. USB3.0 Hub 2 TB

StoreJet Transcend StoreJet Transcend 2 TB

Transcend (disk2s1) /Volumes/Transcend : 2.00 TB (1.29 TB free)


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Configuration files:

System Integrity Protection status: enabled (Custom Configuration)


Gatekeeper:

Mac App Store and identified developers


Kernel Extensions:

/Applications/Parallels Access.app

[loaded] com.parallels.virtualhid (1.0.3 - SDK 10.9 - 2015-10-31) [Support]

[loaded] com.parallels.virtualsound (1.0.36 - SDK 10.6 - 2015-10-31) [Support]


/Applications/Parallels Desktop.app

[loaded] com.parallels.kext.hypervisor (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[loaded] com.parallels.kext.netbridge (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[loaded] com.parallels.kext.usbconnect (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]

[loaded] com.parallels.kext.vnic (11.2.0 32581 - SDK 10.9 - 2016-05-06) [Support]


/System/Library/Extensions

[not loaded] com.Logitech.Control Center.HID Driver (3.7.0 - SDK 10.6 - 2016-04-08) [Support]

[not loaded] com.Logitech.Unifying.HID Driver (1.3.0 - SDK 10.6 - 2016-04-08) [Support]

[not loaded] com.palm.ClassicNotSeizeDriver (3.2.1 - 2016-04-08) [Support]

[not loaded] com.prolific.driver.PL2303 (1.0.8b4 - 2016-04-08) [Support]


Startup Items:

ChmodBPF: Path: /Library/StartupItems/ChmodBPF

Startup items are obsolete in OS X Yosemite


System Launch Agents:

[not loaded] 7 Apple tasks

[loaded] 150 Apple tasks

[running] 81 Apple tasks


System Launch Daemons:

[not loaded] 42 Apple tasks

[loaded] 156 Apple tasks

[running] 91 Apple tasks


Launch Agents:

[running] com.Logitech.Control Center.Daemon.plist (2013-04-16) [Support]

[not loaded] com.adobe.AAM.Updater-1.0.plist (2015-12-06) [Support]

[running] com.brother.LOGINserver.plist (2012-09-05) [Support]

[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (2015-01-19) [Support]

[loaded] com.epson.esua.launcher.plist (2016-03-28) [Support]

[running] com.epson.eventmanager.agent.plist (2014-09-21) [Support]

[loaded] com.google.keystone.agent.plist (2016-03-03) [Support]

[loaded] com.oracle.java.Java-Updater.plist (2013-03-16) [Support]

[running] com.parallels.mobile.prl_deskctl_agent.launchagent.plist (2015-10-31) [Support]

[not loaded] com.teamviewer.teamviewer.plist (2015-01-04) [Support]

[not loaded] com.teamviewer.teamviewer_desktop.plist (2015-01-04) [Support]

[loaded] de.devolo.networkservice.notify.plist (2015-08-16) [Support]

[loaded] org.macosforge.xquartz.startx.plist (2013-11-11) [Support]


Launch Daemons:

[loaded] com.adobe.agsservice.plist (2015-12-06) [Support]

[loaded] com.adobe.fpsaud.plist (2016-04-16) [Support]

[loaded] com.google.keystone.daemon.plist (2016-03-03) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2013-03-16) [Support]

[running] com.parallels.mobile.dispatcher.launchdaemon.plist (2015-10-31) [Support]

[loaded] com.parallels.mobile.kextloader.launchdaemon.plist (2015-10-31) [Support]

[loaded] com.teamviewer.Helper.plist (2015-01-04) [Support]

[not loaded] com.teamviewer.teamviewer_service.plist (2015-01-04) [Support]

[loaded] com.transcend.RxRecoveryHelper.plist (2015-03-15) [Support]

[running] de.devolo.networkservice.plist (2015-08-16) [Support]

[loaded] fi.polar.libpolar.plist (2013-02-26) [Support]

[loaded] org.macosforge.xquartz.privileged_startx.plist (2013-11-11) [Support]


User Launch Agents:

[running] com.amazon.cloud-player.plist (2014-02-24) [Support]

[running] com.parallels.mobile.startgui.launchagent.plist (2016-05-12) [Support]


User Login Items:

iTunesHelper Programm (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

smcFanControl Programm (/Applications/smcFanControl.app)

Dropbox Programm (/Applications/Dropbox.app)

RightZoom Programm (/Applications/RightZoom.app)

Google Drive Programm (/Applications/Google Drive.app)

PhotoStream2Folder Programm (/Applications/Utilities/PhotoStream2Folder.app)

iBetterCharge Programm (/Applications/iBetterCharge.app)

Zinio Reader 4 Programm (/Applications/Zinio Reader 4.app)

RoboFormIcon Programm (~/Library/Application Support/RoboForm/RoboFormIcon.app)

Livedrive Programm (/Applications/Livedrive.app/Contents/Resources/Livedrive.app)

XtraFinder Programm (/Applications/XtraFinder.app)

Xmarks for Safari Programm (/Applications/Xmarks for Safari.app)


Other Apps:

[running] PS2F.PhotoStream2Folder.92512

[loaded] ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1.7392

[running] com.SiberSystems.RoboFormIcon.216032

[running] com.adobe.PDApp.AAMUpdatesNotifier.90592.026CF997-E0DA-4CDF-AF44-A330F8FA35F1

[running] com.brother.utility.NETserver.220192

[running] com.brother.utility.USBserver.219872

[running] com.eidac.smcFanControl2.112672

[running] com.etresoft.EtreCheck.278752

[running] com.getdropbox.dropbox.81632

[running] com.google.GoogleDrive.219552

[running] com.livedrive.Livedriveapp.113632

[running] com.parallels.inputmethod.ParallelsIM.102112

[running] com.softorino.iBetterCharge.62752

[loaded] com.thinkbitz.openAtLoginLauncher-pasteboardSyncForMac

[running] com.xmarks.XmarksforSafari.95392

[loaded] 406 Apple tasks

[running] 241 Apple tasks


Internet Plug-ins:

Flip4Mac WMV Plugin: 3.2.0.16 - SDK 10.8 (2014-02-10) [Support]

FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-05-04) [Support]

QuickTime Plugin: 7.7.3 (2016-03-22)

Flash Player: 21.0.0.226 - SDK 10.6 (2016-05-04) Outdated! Update

AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 - SDK 10.6 (2015-12-06) [Support]

Default Browser: 601 - SDK 10.11 (2016-03-23)

BeMeisterCom: BeMeisterCom 1.0.14 - SDK 10.7 (2012-03-27) [Support]

Silverlight: 5.1.41212.0 - SDK 10.6 (2016-02-04) [Support]

JavaAppletPlugin: Java 8 Update 91 build 14 (2016-05-04) Check version


User internet Plug-ins:

Google Earth Web Plug-in: 7.1 (2015-04-15) [Support]


Safari Extensions:

RoboForm - Siber Systems - http://www.roboform.com (2016-04-12)

ButtonBar+ - D.G. Midwinter, © 2012 - http://www.buttonbar-plus.com (2014-12-20)

iMedia Converter Deluxe - iSkysoft Studio - http://www.iskysoft.com (2013-11-27)

Auto Refresh - Andy Griffin - http://www.agriffindesign.com/downloads/autorefresh (2014-03-26)

OpenIE - Parallels - http://www.parallels.com (2013-03-16)

Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (2016-03-26)

Sessions - David Yoo - https://sessions-extension.github.io/Sessions/ (2015-10-31)


3rd Party Preference Panes:

Flash Player (2016-04-16) [Support]

Flip4Mac WMV (2013-03-29) [Support]

Java (2016-05-04) [Support]

Logitech Control Center (2015-04-15) [Support]

Xmarks for Safari (2016-01-07) [Support]


Time Machine:

Skip System Files: NO

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 750.05 GB Disk used: 710.09 GB

Destinations:

Time machine IMac Sabine [Network]

Total size: 11.89 TB

Total number of backups: 71

Oldest backup: 11.01.15, 10:04

Last backup: 12.05.16, 09:23

Size of backup disk: Excellent

Backup size 11.89 TB > (Disk size 750.05 GB X 3)


Top Processes by CPU:

76% Livedrive

45% SafariDAVClient

35% pkd

15% WindowServer

13% kernel_task


Top Processes by Memory:

5.71 GB com.apple.WebKit.WebContent(23)

1.84 GB kernel_task

786 MB Safari

557 MB SafariDAVClient

410 MB SystemUIServer


Virtual Memory Information:

573 MB Free RAM

15.00 GB Used RAM (1.24 GB Cached)

0 B Swap Used


Diagnostics Information:

May 12, 2016, 11:56:46 AM Self test - passed

May 11, 2016, 07:21:02 PM ~/Library/Logs/DiagnosticReports/rf-safari-companion_2016-05-11-192102_[redacte d].crash

/Users/USER/Library/Application Support/RoboForm/RoboFormIcon.app/Contents/PlugIns/rf-safari-companion.appex/Co ntents/MacOS/rf-safari-companion

May 11, 2016, 04:05:06 PM ~/Library/Logs/DiagnosticReports/rf-safari-companion_2016-05-11-160506_[redacte d].crash

May 10, 2016, 10:40:06 PM /Library/Logs/DiagnosticReports/prl_deskctl_agent_2016-05-10-224006_[redacted]. crash

com.parallels.mobile.prl_deskctl_agent - /Applications/Parallels Access.app/Contents/MacOS/Parallels Access Agent.app/Contents/MacOS/prl_deskctl_agent

May 10, 2016, 11:28:24 AM ~/Library/Logs/DiagnosticReports/Adobe Lightroom_2016-05-10-112824_[redacted].crash

com.adobe.Lightroom6 - /Applications/Adobe Lightroom/Adobe Lightroom.app/Contents/MacOS/Adobe Lightroom

May 9, 2016, 01:15:16 PM ~/Library/Logs/DiagnosticReports/rf-safari-companion_2016-05-09-131516_[redacte d].crash

May 8, 2016 8:44 AM in response to pingopilot

1 Start time: 16:58:26 05/08/16

2

3 Revision: 1594

4

5 Model Identifier: MacBookPro10,1

6 Boot ROM Version: MBP101.00EE.B0A

7 System Version: OS X 10.11.4 (15E65)

8 Kernel Version: Darwin 15.4.0

9 Time since boot: 3:37

10

11 Graphics/Displays

12

13 Intel HD Graphics 4000

14

15

16 NVIDIA GeForce GT 650M

17

18 Color LCD (Main)

19 2963

20 L557

21

22 USB

23

24 StoreJet Transcend (ASMedia Technology Inc.)

25

26 FileVault 2

27

28 FileVault is On.

29

30 VM (GiB): swap used 19,4

31

32 Activity

33

34 CPU: user 35%, system 11%

35 en0: in 28, out 143 (KiB/s)

36

37 CPU usage (%)

38

39 Xmarks for Safar (UID 501): 102,6

40 Livedrive (UID 501): 78,9

41

42 System errors (/s)

43

44 Livedrive (UID 501, error 2): 1594

45 devolonetsvc (UID 0, error 60): 318

46 Livedrive (UID 501, error 316): 155

47

48 I/O out, lifetime (KiB/s)

49

50 kernel_task (UID 0): 3432

51

52 I/O out, sampled (KiB/s)

53

54 kernel_task (UID 0): 8082

55

56 Energy impact, lifetime (relative)

57

58 Terminal (UID 501): 46.82

59 EtreCheck (UID 501): 34.41

60 bash (UID 501): 33.48

61 pkd (UID 501): 23.31

62 Livedrive (UID 501): 15.53

63 Xmarks for Safari (UID 501): 15.16

64

65 Energy impact, sampled (relative)

66

67 Livedrive (UID 501): 82.18

68 pkd (UID 501): 53.48

69 kernel_task (UID 0): 23.79

70 EtreCheck (UID 501): 6.07

71 SystemUIServer (UID 501): 4.35

72 Safari (UID 501): 3.45

73 com.apple.WebKit.Networking (UID 501): 2.97

74 hidd (UID 0): 2.34

75

76 GPU usage, lifetime (ms/s)

77

78 com.apple.WebKit.WebContent (UID 501): 3.59

79

80 CPU usage, lifetime (ms/s)

81

82 Terminal (UID 501): 484.22

83 EtreCheck (UID 501): 345.70

84 bash (UID 501): 334.93

85 pkd (UID 501): 233.32

86 Livedrive (UID 501): 152.20

87 Xmarks for Safari (UID 501): 151.77

88

89 CPU usage, sampled (ms/s)

90

91 Livedrive (UID 501): 814.77

92 pkd (UID 501): 539.69

93 kernel_task (UID 0): 223.64

94 EtreCheck (UID 501): 60.65

95 SystemUIServer (UID 501): 49.25

96 Safari (UID 501): 34.46

97 com.apple.WebKit.Networking (UID 501): 29.79

98 hidd (UID 0): 23.41

99

100 Memory (MB)

101

102 SystemUIServer (UID 501): 2492

103 kernel_task (UID 0): 2271

104 Livedrive (UID 501): 1170

105

106 LS schemes: No

107

108 Firewall: On

109

110 Listeners

111

112 cupsd: ipp

113 kdc: kerberos

114 launchd: afpovertcp

115 launchd: microsoft-ds

116

117 lost+found

118

119 iNode100495012 xar archive - version 1 (6195735337 B)

120 iNode11151220 xar archive - version 1 (5290551900 B)

121 iNode37448039 xar archive - version 1 (5164763151 B)

122

123 Kernel log

124

125 May 8 16:54:24 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

126 May 8 16:54:40 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

127 May 8 16:54:43 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

128 May 8 16:54:55 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

129 May 8 16:55:07 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

130 May 8 16:55:17 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

131 May 8 16:55:22 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

132 May 8 16:55:26 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

133 May 8 16:55:53 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

134 May 8 16:55:59 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

135 May 8 16:56:32 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

136 May 8 16:57:12 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

137 May 8 16:57:28 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

138 May 8 16:57:44 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

139 May 8 16:58:15 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

140 May 8 16:58:30 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

141 May 8 16:59:31 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

142 May 8 16:59:34 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

143 May 8 17:00:17 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

144 May 8 17:00:32 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

145 May 8 17:00:50 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

146 May 8 17:01:01 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

147 May 8 17:01:11 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

148 May 8 17:01:29 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

149 May 8 17:01:33 **** [IOBluetoothHostControllerUSBTransport][InterruptReadHandler] -- Received kIOReturnNotResponding error - retrying: 1

150

151 Loaded kernel extensions

152

153 com.parallels.virtualhid (1.0.3 3)

154 com.parallels.virtualsound (1.0.36 36)

155

156 System services loaded

157

158 Adobe_Genuine_Software_Integrity_Service

159 com.adobe.fpsaud

160 com.apple.AccountPolicyHelper

161 com.apple.AmbientDisplayAgent

162 com.apple.GSSCred

163 com.apple.MobileFileIntegrity

164 com.apple.PerformanceAnalysis.animationperfd

165 com.apple.akd

166 com.apple.aslmanager

167 - status: -9

168 com.apple.audio.systemsoundserverd

169 com.apple.awdd

170 com.apple.backupd-auto

171 com.apple.coresymbolicationd

172 com.apple.ctkd

173 com.apple.icloud.findmydeviced

174 com.apple.iconservices.iconservicesagent

175 com.apple.iconservices.iconservicesd

176 com.apple.ifdreader

177 com.apple.installd

178 com.apple.logd

179 - status: 1

180 com.apple.nehelper

181 com.apple.nsurlsessiond_privileged

182 com.apple.nsurlstoraged

183 com.apple.periodic-daily

184 com.apple.sandboxd

185 com.apple.secinitd

186 com.apple.softwareupdated

187 com.apple.spindump

188 com.apple.syslogd

189 - status: -15

190 com.apple.sysmond

191 com.apple.systemstatsd

192 com.apple.tccd.system

193 com.apple.watchdogd

194 com.apple.wdhelper

195 com.apple.xpc.smd

196 com.google.keystone.daemon

197 com.macpaw.CleanMyMac3.Agent

198 com.oracle.java.Helper-Tool

199 com.parallels.mobile.dispatcher.launchdaemon

200 com.parallels.mobile.kextloader.launchdaemon

201 com.teamviewer.Helper

202 com.transcend.RxRecoveryHelper

203 de.devolo.networkservice

204 org.macosforge.xquartz.privileged_startx

205

206 Login services loaded

207

208 com.Logitech.Control Center.Daemon

209 com.amazon.cloud-player

210 com.apple.AirPlayUIAgent

211 com.apple.AssetCacheLocatorService

212 com.apple.CallHistoryPluginHelper

213 com.apple.CallHistorySyncHelper

214 com.apple.Dock.agent

215 - status: 1

216 com.apple.EscrowSecurityAlert

217 com.apple.Maps.mapspushd

218 com.apple.Safari.SafeBrowsing.Service

219 com.apple.SafariCloudHistoryPushAgent

220 com.apple.SafariNotificationAgent

221 com.apple.cdpd

222 com.apple.cloudd

223 com.apple.cloudphotosd

224 com.apple.cmfsyncagent

225 com.apple.coreservices.appleid.authentication

226 com.apple.coreservices.uiagent

227 com.apple.followupd

228 com.apple.icloud.fmfd

229 com.apple.iconservices.iconservicesagent

230 com.apple.pbs

231 com.apple.scopedbookmarksagent.xpc

232 com.apple.soagent

233 com.apple.spindump_agent

234 com.apple.swcd

235 com.apple.telephonyutilities.callservicesd

236 com.apple.xpc.loginitemregisterd

237 com.brother.LOGINserver

238 com.epson.Epson_Low_Ink_Reminder.launcher

239 com.epson.esua.launcher

240 com.epson.eventmanager.agent

241 com.google.keystone.system.agent

242 com.jdibackup.ZipCloud.autostart

243 - status: 78

244 com.jdibackup.ZipCloud.notify

245 - status: 78

246 com.oracle.java.Java-Updater

247 com.parallels.mobile.prl_deskctl_agent.launchagent

248 com.parallels.mobile.startgui.launchagent

249 com.thinkbitz.openAtLoginLauncher-pasteboardSyncForMac

250 de.devolo.networkservice.notify

251 org.macosforge.xquartz.startx

252

253 Login services disabled

254

255 com.macpaw.CleanMyMac2Helper.diskSpaceWatcher

256 com.GoPro.GoPro-Importer

257 com.macpaw.CleanMyMac2Helper.trashWatcher

258 com.macpaw.CleanMyMac2Helper.scheduledScan

259 com.adobe.AAM.Scheduler-1.0

260

261 User services loaded

262

263 com.apple.AddressBook.ContactsAccountsService

264 com.apple.InputMethodKit.TextReplacementService

265 com.apple.geod

266 com.apple.imdpersistence.IMDPersistenceAgent

267 com.apple.lakitu

268 com.apple.sbd

269 com.apple.security.cloudkeychainproxy3

270

271 User services disabled

272

273 com.macpaw.CleanMyMac2Helper.diskSpaceWatcher

274 com.GoPro.GoPro-Importer

275 com.macpaw.CleanMyMac2Helper.trashWatcher

276 com.macpaw.CleanMyMac2Helper.scheduledScan

277 com.adobe.AAM.Scheduler-1.0

278

279 Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

280 - mod date: Mar 16 13:29:50 2013

281 - size (B): 104

282 - checksum: 1615344054

283

284 <?xml version="1.0" encoding="UTF-8"?>

285 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

286 <plist version="1.0">

287 <dict>

288 <key>Label</key>

289 <string>com.oracle.java.Java-Updater</string>

290 <key>ProgramArguments</key>

291 <array>

292 <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>

293 <string>-bgcheck</string>

294 </array>

295 <key>StandardErrorPath</key>

296 <string>/dev/null</string>

297 <key>StandardOutPath</key>

298 <string>/dev/null</string>

299 <key>StartCalendarInterval</key>

300 <dict>

301 <key>Hour</key>

302 <integer>11</integer>

303 <key>Minute</key>

304 <integer>12</integer>

305 <key>Weekday</key>

306 <integer>5</integer>

307 </dict>

308 </dict>

309

310 ...and 1 more line(s)

311

312 Contents of /Library/LaunchAgents/com.parallels.mobile.prl_deskctl_agent.launchagent.plist

313 - mod date: Oct 31 07:38:29 2015

314 - size (B): 730

315 - checksum: 1795713191

316

317 <?xml version="1.0" encoding="UTF-8"?>

318 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

319 <plist version="1.0">

320 <dict>

321 <key>EnableTransactions</key>

322 <true/>

323 <key>KeepAlive</key>

324 <dict>

325 <key>PathState</key>

326 <dict>

327 <key>/etc/com.parallels.mobile.prl_deskctl_agent.launchd</key>

328 <true/>

329 </dict>

330 </dict>

331 <key>Label</key>

332 <string>com.parallels.mobile.prl_deskctl_agent.launchagent</string>

333 <key>LimitLoadToSessionType</key>

334 <array>

335 <string>Aqua</string>

336 <string>LoginWindow</string>

337 </array>

338 <key>Program</key>

339 <string>/Applications/Parallels Access.app/Contents/MacOS/Parallels Access Agent.app/Contents/MacOS/prl_deskctl_agent</string>

340 </dict>

341 </plist>

342

343 Contents of /Library/LaunchAgents/de.devolo.networkservice.notify.plist

344 - mod date: Aug 16 09:30:41 2015

345 - size (B): 609

346 - checksum: 469932308

347

348 <?xml version="1.0" encoding="UTF-8"?>

349 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

350 <plist version="1.0">

351 <dict>

352 <key>Label</key>

353 <string>de.devolo.networkservice.notify</string>

354 <key>ProgramArguments</key>

355 <array>

356 <string>/opt/devolo/bin/devolo Cockpit Notifier.app/Contents/MacOS/plcnotify</string>

357 <string>/opt/devolo/share/devolonetsvc/trigger/notify</string>

358 </array>

359 <key>KeepAlive</key>

360 <dict>

361 <key>PathState</key>

362 <dict>

363 <key>/opt/devolo/share/devolonetsvc/trigger/notify</key>

364 <true/>

365 </dict>

366 </dict>

367 </dict>

368 </plist>

369

370 Contents of /Library/LaunchDaemons/com.macpaw.CleanMyMac2.Agent.plist

371 - mod date: Apr 13 09:01:18 2015

372 - size (B): 899

373 - checksum: 2453449774

374

375 <?xml version="1.0" encoding="UTF-8"?>

376 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

377 <plist version="1.0">

378 <dict>

379 <key>Label</key>

380 <string>com.macpaw.CleanMyMac2.Agent</string>

381 <key>MachServices</key>

382 <dict>

383 <key>com.macpaw.CleanMyMac2.Agent</key>

384 <true/>

385 </dict>

386 <key>Program</key>

387 <string>/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent</string>

388 <key>ProgramArguments</key>

389 <array>

390 <string>/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac2.Agent</string>

391 </array>

392 <key>Sockets</key>

393 <dict>

394 <key>MasterSocket</key>

395 <dict>

396 <key>SockFamily</key>

397 <string>Unix</string>

398 <key>SockPathMode</key>

399 <integer>438</integer>

400

401 ...and 8 more line(s)

402

403 Contents of /Library/LaunchDaemons/com.parallels.mobile.dispatcher.launchdaemon.plist

404 - mod date: Oct 31 07:38:29 2015

405 - size (B): 727

406 - checksum: 1994226602

407

408 <?xml version="1.0" encoding="UTF-8"?>

409 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

410 <plist version="1.0">

411 <dict>

412 <key>ExitTimeOut</key>

413 <integer>150</integer>

414 <key>Label</key>

415 <string>com.parallels.mobile.dispatcher.launchdaemon</string>

416 <key>ProgramArguments</key>

417 <array>

418 <string>/Applications/Parallels Access.app/Contents/MacOS/Parallels Access Dispatcher Service.app/Contents/MacOS/prl_pm_service</string>

419 <string>-e</string>

420 <string>--logfile</string>

421 <string>/var/log/prl_disp_service_server.log</string>

422 <string>--pidfile</string>

423 <string>/var/run/prl_pm_service.pid</string>

424 </array>

425 <key>RunAtLoad</key>

426 <true/>

427 </dict>

428 </plist>

429

430 Contents of /Library/LaunchDaemons/com.parallels.mobile.kextloader.launchdaemon.plist

431 - mod date: Oct 31 07:38:29 2015

432 - size (B): 663

433 - checksum: 316984297

434

435 <?xml version="1.0" encoding="UTF-8"?>

436 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

437 <plist version="1.0">

438 <dict>

439 <key>ExitTimeOut</key>

440 <integer>150</integer>

441 <key>Label</key>

442 <string>com.parallels.mobile.kextloader.launchdaemon</string>

443 <key>ProgramArguments</key>

444 <array>

445 <string>/sbin/kextload</string>

446 <string>/Applications/Parallels Access.app/Contents/Library/Extensions/10.9/prl_virtual_sound.kext</string>

447 <string>/Applications/Parallels Access.app/Contents/Library/Extensions/10.9/prl_virtual_hid.kext</string>

448 </array>

449 <key>RunAtLoad</key>

450 <true/>

451 </dict>

452 </plist>

453

454 Contents of /Library/LaunchDaemons/com.teamviewer.Helper.plist

455 - mod date: Jan 4 18:44:46 2015

456 - size (B): 544

457 - checksum: 668522044

458

459 <?xml version="1.0" encoding="UTF-8"?>

460 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

461 <plist version="1.0">

462 <dict>

463 <key>Label</key>

464 <string>com.teamviewer.Helper</string>

465 <key>MachServices</key>

466 <dict>

467 <key>com.teamviewer.Helper</key>

468 <true/>

469 </dict>

470 <key>Program</key>

471 <string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

472 <key>ProgramArguments</key>

473 <array>

474 <string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>

475 </array>

476 </dict>

477 </plist>

478

479 Contents of /Library/LaunchDaemons/com.transcend.RxRecoveryHelper.plist

480 - mod date: Mar 15 07:11:12 2015

481 - size (B): 580

482 - checksum: 180249548

483

484 <?xml version="1.0" encoding="UTF-8"?>

485 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

486 <plist version="1.0">

487 <dict>

488 <key>Label</key>

489 <string>com.transcend.RxRecoveryHelper</string>

490 <key>MachServices</key>

491 <dict>

492 <key>com.transcend.RxRecoveryHelper</key>

493 <true/>

494 </dict>

495 <key>Program</key>

496 <string>/Library/PrivilegedHelperTools/com.transcend.RxRecoveryHelper</string>

497 <key>ProgramArguments</key>

498 <array>

499 <string>/Library/PrivilegedHelperTools/com.transcend.RxRecoveryHelper</string>

500 </array>

501 </dict>

502 </plist>

503

504 Contents of /Library/LaunchDaemons/de.devolo.networkservice.plist

505 - mod date: Aug 16 09:30:41 2015

506 - size (B): 566

507 - checksum: 1819242327

508

509 <?xml version="1.0" encoding="UTF-8"?>

510 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

511 <plist version="1.0">

512 <dict>

513 <key>Label</key>

514 <string>de.devolo.networkservice</string>

515 <key>ProgramArguments</key>

516 <array>

517 <string>/opt/devolo/bin/devolonetsvc</string>

518 </array>

519 <key>KeepAlive</key>

520 <true/>

521 <key>WorkingDirectory</key>

522 <string>/opt/devolo/share/devolonetsvc</string>

523 <key>StandardOutPath</key>

524 <string>/dev/null</string>

525 <key>StandardErrPath</key>

526 <string>/dev/null</string>

527 </dict>

528 </plist>

529

530 Contents of /Library/LaunchDaemons/fi.polar.libpolar.plist

531 - mod date: Feb 26 15:10:39 2013

532 - size (B): 843

533 - checksum: 2168272668

534

535 <?xml version="1.0" encoding="UTF-8"?>

536 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

537 <plist version="1.0">

538 <dict>

539 <key>Label</key>

540 <string>fi.polar.libpolar</string>

541 <key>RunAtLoad</key>

542 <true/>

543 <key>KeepAlive</key>

544 <dict>

545 <key>SuccessfulExit</key>

546 <false/>

547 </dict>

548 <key>UserName</key>

549 <string>root</string>

550 <key>GroupName</key>

551 <string>daemon</string>

552 <key>Umask</key>

553 <integer>18</integer>

554 <key>StandardOutPath</key>

555 <string>/dev/null</string>

556 <key>StandardErrorPath</key>

557 <string>/dev/null</string>

558 <key>ProgramArguments</key>

559 <array>

560

561 ...and 8 more line(s)

562

563 Contents of /private/etc/AFP.conf

564 - data

565 - mod date: May 27 21:50:46 2013

566 - size (B): 24

567 - checksum: 2431968248

568

569

570 Unreadable plists

571

572 /Library/Preferences/com.epson.Easy Photo Print.UnInstallList.plist

573 /Library/Preferences/com.epson.Easy Photo Scan.UnInstallList.plist

574 /Library/Preferences/com.epson.Epson Connect Printer Setup.UnInstallList.plist

575 /Library/Preferences/com.epson.Epson Event Manager.UnInstallList.plist

576 /Library/Preferences/com.epson.Epson Low Ink Reminder.UnInstallList.plist

577 /Library/Preferences/com.epson.EPSON Scan.UnInstallList.plist

578 /Library/Preferences/com.epson.Epson Scanner ICA Driver.UnInstallList.plist

579 /Library/Preferences/com.epson.EPSON Software Updater.UnInstallList.plist

580 /Library/Preferences/com.epson.EpsonNet Config v4.UnInstallList.plist

581 /Library/Preferences/com.epson.Inkjet Printer Driver.UnInstallList.plist

582 ...

583

584 User login items

585

586 iTunesHelper

587 - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

588 smcFanControl

589 - /Applications/smcFanControl.app

590 Dropbox

591 - /Applications/Dropbox.app

592 RightZoom

593 - /Applications/RightZoom.app

594 WebSync

595 - /Applications/WebSync.app

596 Google Drive

597 - /Applications/Google Drive.app

598 PhotoStream2Folder

599 - /Applications/Utilities/PhotoStream2Folder.app

600 iBetterCharge

601 - /Applications/iBetterCharge.app

602 Zinio Reader 4

603 - /Applications/Zinio Reader 4.app

604 RoboFormIcon

605 - /Users/USER/Library/Application Support/RoboForm/RoboFormIcon.app

606 TomTomHOMERunner

607 - /Users/USER/Library/Application Support/TomTom HOME/TomTomHOMERunner.app

608 EPSON Software Updater

609 - /Applications/Epson Software/EPSON Software Updater.app

610 Livedrive

611 - /Applications/Livedrive.app/Contents/Resources/Livedrive.app

612 XtraFinder

613 - /Applications/XtraFinder.app

614 Xmarks for Safari

615 - /Applications/Xmarks for Safari.app

616

617 Safari extensions

618

619 Adblock Plus

620 - org.adblockplus.adblockplussafari

621 Auto Refresh

622 - com.agriffindesign.autorefresh

623 ButtonBar+

624 - com.midwinterdg.buttonbarplus

625 Open in Internet Explorer

626 - com.parallels.openinie

627 RoboForm

628 - com.SiberSystems.rf-safari

629 Sessions

630 - yoo.david.sessions

631

632 Firefox extensions

633

634 Firefox Hello Beta

635 Fox!Box

636 Multirow Bookmarks Toolbar

637 Download Status Bar

638 Adblock Plus

639 Tab Mix Plus

640 Xmarks Sync

641 FEBE

642

643 iCloud services

644

645 MOBILE_DOCUMENTS

646 PHOTO_STREAM

647 MAIL_AND_NOTES

648 CONTACTS

649 CALENDAR

650 REMINDERS

651 BOOKMARKS

652 NOTES

653 KEYCHAIN_SYNC

654 FIND_MY_MAC

655

656 Restrictive permissions: 1547

657

658 Lockfiles: 67

659

660 Global prefs (user)

661

662 AppleEnableMenuBarTransparency = YES

663 AppleShowAllExtensions = 1

664 NSNavRecentPlacesLimit = 12

665 NSQuitAlwaysKeepsWindows = 1

666 NSWindowResizeTime = ".01"

667

668 Extensions

669

670 /System/Library/Extensions/JMicronATA.kext

671 - com.jmicron.JMicronATA

672 /System/Library/Extensions/LogitechHIDDevices.kext

673 - com.Logitech.Control Center.HID Driver

674 /System/Library/Extensions/LogitechUnifying.kext

675 - com.Logitech.Unifying.HID Driver

676 /System/Library/Extensions/ProlificUsbSerial.kext

677 - com.prolific.driver.PL2303

678

679 Applications

680

681 /Applications/AppDelete.app

682 - com.apps4macs.AppDelete

683 - Reggie Ashworth

684 /Applications/AusweisApp/AusweisApp deinstallieren.app

685 - com.yourcompany.AusweisApp-deinstallieren

686 - OpenLimit SignCubes GmbH

687 /Applications/AusweisApp/AusweisApp.app

688 - com.openlimit

689 - OpenLimit SignCubes GmbH

690 /Applications/AusweisApp/IntegrityTool/IntegrityTool.app

691 - com.openlimit

692 - OpenLimit SignCubes GmbH

693 /Applications/GarageBuy.app

694 - com.iwascoding.garagebuy2

695 - iwascoding GmbH

696 /Applications/Hightail Desktop App.app

697 - com.hightail.HightailDesktop

698 - YouSendIt, Inc.

699 /Applications/Learn your Mac.app

700 - com.parallels.learnyourmac

701 - Parallels, Inc.

702 /Applications/Livedrive.app

703 - com.livedrive.livedriveclient

704 - Livedrive Internet Ltd (2LDTCLW5UX)

705 /Applications/LogRetriever.app

706 - com.livedrive.LogRetriever

707 - Livedrive Internet Ltd (2LDTCLW5UX)

708 /Applications/MacPaw Gemini.app

709 - com.macpaw.site.Gemini

710 - MacPaw Inc.

711 /Applications/NetatmoModulesManager.app

712 - com.netatmo.NetatmoModulesManager

713 - Netatmo/

714 /Applications/NetatmoWizard.app

715 - com.netatmo.NetatmoWizard

716 - Netatmo/

717 /Applications/Parallels Access.app

718 - com.parallels.mobile

719 - Parallels, Inc. (4C6364ACXT)

720 /Applications/Parallels Desktop.app

721 - com.parallels.desktop.console

722 - Parallels, Inc. (4C6364ACXT)

723 /Applications/Parallels Desktop.app/Contents/Applications/Parallels Link.app

724 - com.parallels.SharedAppLink.Agent

725 - Parallels, Inc. (4C6364ACXT)

726 /Applications/Parallels Desktop.app/Contents/Applications/Parallels Mounter.app

727 - com.parallels.desktop.mounter

728 - Parallels, Inc. (4C6364ACXT)

729 /Applications/QuickSync.app

730 - com.gigaset.QuickSync

731 - nova media Mobile Data Solutions GmbH

732 /Applications/Quitter.app

733 - com.marcoarment.quitter

734 - Full City, LLC (WZ43YUN8CT)

735 /Applications/RecoveRx.app

736 - com.transcend.RecoveRx

737 - Transcend Information, Inc. (WFKTSWX9KM)

738 /Applications/Synology Assistant.app

739 - com.yourcompany.DSAssistant

740 - Synology Inc.

741 /Applications/TimeMachineEditor.app

742 - com.timesoftware.timemachineeditor.application

743 - Thomas CLEMENT

744 /Applications/Utilities/LCC Connection Utility.app

745 - com.Logitech.Control Center.LCC Connection Utility

746 - Logitech Inc.

747 /Applications/Utilities/LCC Uninstaller.app

748 - com.Logitech.Control Center.LCC Uninstaller

749 - Logitech Inc.

750 /Applications/XtraFinder.app

751 - com.trankynam.XtraFinder

752 - Tran Ky Nam (KHEMQ2FD9E)

753 /Applications/devolo/devolo Cockpit.app

754 - de.devolo.dLAN.Cockpit

755 - devolo AG

756 /Applications/iBetterCharge.app

757 - com.softorino.iBetterCharge

758 - Dmytro Makukha (M23NK4PKWX)

759 /Applications/smcFanControl.app

760 - com.eidac.smcFanControl2

761 - Hendrik Holtmann

762 /Library/Application HOST.localized/Logitech Control HOST.localized/Device Manager.app

763 - com.Logitech.Control Center.Device Manager

764 - Logitech Inc.

765 /Library/Application HOST.localized/Logitech Control HOST.localized/LCC Pilot.app

766 - com.Logitech.Control Center.Pilot

767 - Logitech Inc.

768 /Library/Application HOST.localized/Logitech Control HOST.localized/LCCDaemon.app

769 - com.Logitech.Control Center.Daemon

770 - Logitech Inc.

771 /Library/Input Methods/ParallelsIM.app

772 - com.parallels.inputmethod.ParallelsIM

773 - Parallels, Inc. (4C6364ACXT)

774 /Users/USER/Applications/Windows 8.1 Applications.app

775 - com.parallels.ApplicationGroupBridge

776 - Parallels, Inc. (4C6364ACXT)

777 /Users/USER/Applications/Windows XP Applications.app

778 - com.parallels.ApplicationGroupBridge

779 - Parallels, Inc. (4C6364ACXT)

780 /Users/USER/Downloads/Herald-1/Herald Installer.app

781 - com.erikhinterbichler.HeraldInstaller

782 - Erik Hinterbichler

783 /Users/USER/Downloads/Herald-1/Herald Uninstaller.app

784 - com.erikhinterbichler.Herald-Uninstaller

785 - Erik Hinterbichler

786 /Users/USER/Downloads/Herald/Herald Installer.app

787 - com.erikhinterbichler.HeraldInstaller

788 - Erik Hinterbichler

789 /Users/USER/Downloads/Herald/Herald Uninstaller.app

790 - com.erikhinterbichler.Herald-Uninstaller

791 - Erik Hinterbichler

792 /Users/USER/Downloads/Uninstall Livedrive.app

793 - com.apple.ScriptEditor.id.UUID

794 - Livedrive Internet Ltd

795 /Users/USER/Library/Application Support/Mail Act-On/Mail Act-On 2.4.3b872/MailActOn.mailbundle/Contents/Resources/MAOSparkleHelper.app

796 - ca.indev.MAOSparkleHelper

797 - Scott Morrison

798 /Users/USER/Library/Application Support/Mail Act-On/Mail Act-On 2.4.3b872/MailActOn.mailbundle/Contents/Resources/MailActOnHelper.app

799 - ca.indev.MailActOnHelper

800 - Scott Morrison

801 /Users/USER/Library/Application Support/XtraFinder/XtraFinder 0.25.4/Uninstall.app

802 - com.trankynam.Uninstall

803 - Tran Ky Nam (KHEMQ2FD9E)

804 /Users/USER/Library/Application Support/XtraFinder/XtraFinder 0.25.5/Uninstall.app

805 - com.trankynam.Uninstall

806 - Tran Ky Nam (KHEMQ2FD9E)

807 /Users/USER/Library/Application Support/XtraFinder/XtraFinder 0.25.6/Uninstall.app

808 - com.trankynam.Uninstall

809 - Tran Ky Nam (KHEMQ2FD9E)

810 /Users/USER/Library/Application Support/XtraFinder/XtraFinder 0.25.7 1/Uninstall.app

811 - com.trankynam.Uninstall

812 - Tran Ky Nam (KHEMQ2FD9E)

813 /Users/USER/Library/Application Support/XtraFinder/XtraFinder 0.25.7 2/Uninstall.app

814 - com.trankynam.Uninstall

815 - Tran Ky Nam (KHEMQ2FD9E)

816 /Users/USER/Library/Application Support/XtraFinder/XtraFinder 0.25.7/Uninstall.app

817 - com.trankynam.Uninstall

818 - Tran Ky Nam (KHEMQ2FD9E)

819 /Users/USER/Library/Application Support/XtraFinder/XtraFinder 0.25.8/Uninstall.app

820 - com.trankynam.Uninstall

821 - Tran Ky Nam (KHEMQ2FD9E)

822 /Users/USER/Library/Containers/com.apple.mail/Data/Library/Mail Downloads/UUID/Uninstall Livedrive.app

823 - com.apple.ScriptEditor.id.UUID

824 - Livedrive Internet Ltd (2LDTCLW5UX)

825 /Users/USER/Library/Mail/Bundles (deaktiviert 1)/Herald.mailbundle/Contents/Resources/HeraldAgent.app

826 - com.erikhinterbichler.HeraldAgent

827 - Erik Hinterbichler

828 /Users/USER/Library/Mail/Bundles (deaktiviert 2)/MailActOn.mailbundle/Contents/Resources/MAOSparkleHelper.app

829 - ca.indev.MAOSparkleHelper

830 - Scott Morrison

831 /Users/USER/Library/Mail/Bundles (deaktiviert 2)/MailActOn.mailbundle/Contents/Resources/MailActOnHelper.app

832 - ca.indev.MailActOnHelper

833 - Scott Morrison

834 /Users/USER/Library/Services/QuickSyncServices.service

835 - com.gigaset.QuickSyncServices

836 /opt/devolo/bin/devolo Cockpit Notifier.app

837 - de.devolo.dLAN.Cockpit.Notifier

838 - devolo AG

839

840 PrefPane

841

842 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.pref Pane

843 - com.oracle.java.JavaControlPanel

844 /Library/PreferencePanes/Flash Player.prefPane

845 - com.adobe.flashplayerpreferences

846 /Library/PreferencePanes/Logitech Control Center.prefPane

847 - com.Logitech.Control Center.Preference Pane

848 - Logitech Inc.

849 /Library/PreferencePanes/Xmarks.prefPane

850 - com.xmarks.safariprefs

851

852 Bundles

853

854 /Library/Filesystems/livedrivefs.fs

855 - com.livedrive.filesystems.livedrivefs

856 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

857 - com.adobe.adobecp

858 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

859 - com.macromedia.FlashPlayer-10.6.plugin

860 - Adobe Systems, Inc.

861 /Library/Internet Plug-Ins/AdobeAAMDetect.plugin

862 - com.AdobeAAMDetectLib.AdobeAAMDetect

863 - Adobe Systems, Inc.

864 /Library/Internet Plug-Ins/BeMeisterCom.plugin

865 - com.BeMeisterComLib. Impire BeMeister Communicator Plug-In

866 /Library/Internet Plug-Ins/Flash Player.plugin

867 - com.macromedia.Flash Player.plugin

868 - Adobe Systems, Inc.

869 /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

870 - net.telestream.wmv.plugin

871 - Telestream Inc.

872 /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

873 - com.oracle.java.JavaAppletPlugin

874 /Library/Internet Plug-Ins/Quartz Composer.webplugin

875 - com.apple.QuartzComposer.webplugin

876 - Software Signing

877 /Library/Internet Plug-Ins/Silverlight.plugin

878 - com.microsoft.SilverlightPlugin

879 /Library/Spotlight/chmporter.mdimporter

880 - com.apple.yourcfbundle

881 /Users/USER/Downloads/chmporter.mdimporter

882 - com.apple.yourcfbundle

883 /Users/USER/Library/Address Book Plug-Ins/SkypeABCaller.bundle

884 - com.skype.SkypeABCaller

885 /Users/USER/Library/Address Book Plug-Ins/SkypeABChatter.bundle

886 - com.skype.SkypeABChatter

887 /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

888 - com.skype.skypeabdialer

889 /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

890 - com.skype.skypeabsms

891 /Users/USER/Library/Application Support/Mail Act-On/Mail Act-On 2.4.3b872/MailActOn.mailbundle

892 - ca.indev.MailActOn

893 - Scott Morrison

894 /Users/USER/Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin

895 - com.Google.GoogleEarthPlugin.plugin

896 - Google Inc.

897 /Users/USER/Library/Internet Plug-Ins/rf-safari-plugin.webplugin

898 - Siber-Systems.rf-safari-plugin

899 /Users/USER/Library/Mail/Bundles (deaktiviert 1)/Herald.mailbundle

900 - com.erikhinterbichler.Herald

901 - Erik Hinterbichler

902 /Users/USER/Library/Mail/Bundles (deaktiviert 2)/MailActOn.mailbundle

903 - ca.indev.MailActOn

904 - Scott Morrison

905 /Users/USER/Library/Mail/Bundles (deaktiviert 3)/MailActOn.mailbundle

906 - ca.indev.MailActOn

907 /Users/USER/Library/Mail/Bundles (deaktiviert 4)/MailActOn.mailbundle

908 - ca.indev.MailActOn

909 /Users/USER/Library/Mail/Bundles (deaktiviert 5)/MailActOn.mailbundle

910 - ca.indev.MailActOn

911 /Users/USER/Library/Mail/Bundles (deaktiviert 6)/MailActOn.mailbundle

912 - ca.indev.MailActOn

913 /Users/USER/Library/Mail/Bundles (deaktiviert)/GrowlMail.mailbundle

914 - com.growl.GrowlMail

915 /Users/USER/Library/Mail/Bundles/MailActOn.mailbundle

916 - ca.indev.MailActOn

917

918 Bundles (new)

919

920 /Applications/Parallels Desktop.app

921 - com.parallels.desktop.console

922 - Parallels, Inc. (4C6364ACXT)

923 /Applications/Parallels Desktop.app/Contents/Applications/Parallels Link.app

924 - com.parallels.SharedAppLink.Agent

925 - Parallels, Inc. (4C6364ACXT)

926 /Applications/Parallels Desktop.app/Contents/Applications/Parallels Mounter.app

927 - com.parallels.desktop.mounter

928 - Parallels, Inc. (4C6364ACXT)

929 /Applications/Quitter.app

930 - com.marcoarment.quitter

931 - Full City, LLC (WZ43YUN8CT)

932 /Library/Internet Plug-Ins/Flash Player.plugin

933 - com.macromedia.Flash Player.plugin

934 - Adobe Systems, Inc.

935 /Library/PreferencePanes/Flash Player.prefPane

936 - com.adobe.flashplayerpreferences

937

938 Library paths

939

940 /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

941 /Users/USER/Desktop/Alte Firefox-Daten/gn1ixhwq.default-1377513082255/gmp-gmpopenh264/1.1/libgmpopenh264 .dylib

942 /Users/USER/Desktop/Alte Firefox-Daten/gn1ixhwq.default-1377513082255/gmp-gmpopenh264/1.3/libgmpopenh264 .dylib

943 /Users/USER/Desktop/Alte Firefox-Daten/gn1ixhwq.default-1377513082255/gmp-gmpopenh264/1.5.1/libgmpopenh2 64.dylib

944 /Users/USER/Library/Application Support/Firefox/Profiles/ugvvpoxb.default-1451215140858/gmp-gmpopenh264/1.5.3/l ibgmpopenh264.dylib

945 /Users/USER/bin/JDownloader 2.0/tmp/7zip/SevenZipJBinding-Hy0Qk/lib7-Zip-JBinding.dylib

946 /usr/local/lib/libpolar-3.5.0.dylib

947

948 MD importers

949

950 /Applications/Cyberduck.app/Contents/Library/Spotlight/Cyberduck Spotlight Importer.mdimporter

951 /Applications/Google Earth.app/Contents/Library/Spotlight/Google Earth.mdimporter

952 /Applications/Pixelmator.app/Contents/Library/Spotlight/Pixelmator.mdimporter

953 /Library/Spotlight/chmporter.mdimporter

954

955 App extensions

956

957 com.SiberSystems.RoboFormIcon.safari-companion

958 com.getdropbox.dropbox.garcon

959 com.google.GoogleDrive.FinderSyncAPIExtension

960 com.parallels.Access.FileSharingExtension

961 com.parallels.desktop.console.Resource-Monitor

962 com.pixelmatorteam.pixelmator.Repair-Tool-Action-Extension

963 com.pixelmatorteam.pixelmator.photos-distort-extension

964

965 Modifications

966

967 file missing: /Applications/Epson Software/EPSON Software Updater.app/Contents/Resources/pt-PT.lproj

968 file missing: /Applications/Epson Software/EPSON Software Updater.app/Contents/Resources/es-MX.lproj

969 file missing: /Applications/Epson Software/EPSON Software Updater.app/Contents/Resources/pt_BR.lproj

970 file missing: /Applications/Epson Software/EPSON Software Updater.app/Contents/Resources/no.lproj

971 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/.__CodeSignature

972 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/._PkgInfo

973 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/._Info.plist

974 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/MacOS/._AAM Registration Notifier

975 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/._AAM.icns

976 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/cs_CZ/._stringTable.zdct

977 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/da_DK/._stringTable.zdct

978 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/de_DE/._stringTable.zdct

979 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_GB/._stringTable.zdct

980 file added: /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_US/._stringTable.zdct

981 ...

982 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/.__CodeSignature

983 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/._Info.plist

984 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/._PkgInfo

985 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/MacOS/._adobe_licutil

986 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/._adbe_licutil.icns

987 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/English.lproj/._InfoPlist.stri ngs

988 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/ar_AE/._ConnectionFAQ.h tml

989 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/ar_AE/._Main.zdct

990 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/ar_AE/._LicenseFAQ.html

991 file added: /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app/Contents/Resources/OBLRes/bg_BG/._ConnectionFAQ.h tml

992 ...

993 file added: /Applications/Utilities/Adobe Application Manager/LWA/amtservices.framework/Versions/Current/.__CodeSignature

994 file added: /Applications/Utilities/Adobe Application Manager/LWA/amtservices.framework/Versions/Current/._amtservices

995 file added: /Applications/Utilities/Adobe Application Manager/LWA/amtservices.framework/Versions/Current/Resources/._Info.plist

996 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/.__CodeSignature

997 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/._asneu

998 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/Resources/._Info.plist

999 file added: /Applications/Utilities/Adobe Application Manager/LWA/asneu.framework/Versions/Current/Resources/English.lproj/._InfoPlis t.strings

1000 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/.__CodeSignature

1001 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/._PkgInfo

1002 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/._Info.plist

1003 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/MacOS/._AAM Registration Notifier

1004 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/._AAM.icns

1005 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/cs_CZ/._stringTable.zdct

1006 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/da_DK/._stringTable.zdct

1007 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/de_DE/._stringTable.zdct

1008 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_AE/._stringTable.zdct

1009 file added: /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app/Contents/Resources/Dictionary/en_GB/._stringTable.zdct

1010 ...

1011 file added: /Applications/VLC.app/Contents/MacOS/plugins/plugins.dat

1012 file added: /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app/Contents/_CodeSignature/CodeResources

1013 file added: /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app/Contents/Info.plist

1014 file added: /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app/Contents/MacOS/Adobe AIR Installer

1015 file added: /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app/Contents/PkgInfo

1016 file added: /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app/Contents/Resources/Adobe AIR Installer.icns

1017 file added: /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app/Contents/Resources/setup.swf

1018 file added: /Library/Frameworks/Adobe AIR.framework/Versions/Current/Resources/Adobe AIR Updater.app/Contents/Resources/stylesNative.swf

1019

1020 Non-loading kernel extensions

1021

1022 /System/Library/Extensions/AppleOSXUSBNCM.kext

1023 - com.apple.driver.AppleOSXUSBNCM

1024 - Software Signing

1025

1026 Installations

1027

1028 OffBlock: 03.05.16, 18:30

1029 MacFamilyTree 8: 03.05.16, 17:55

1030 Adobe Flash Player: 03.05.16, 12:27

1031 OffBlock: 03.05.16, 11:10

1032 Java 8 Update 91: 30.04.16, 11:12

1033

1034 Elapsed time (sec): 1077

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

My free MacBook Storage gets less and less without any obvious reason

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.