How to get rid of pop-ups on my macBook air?

One of my roommates recently downloaded torrent on my macbook air to watch a movie, and since then I have been experiencing popups every time I open a new page on safari. Also, my search engine has switched to something known as search-quick? I've tried a few different mac detox sites to no avail. Very frustrated. Any suggestions on how to get rid of this "virus" and pop-ups would be much appreciated!

There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination  command-C:
/Library/LaunchDaemons
In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
          com.something.daemon.plist
and
           com.something.helper.plist
Here something is a variable word, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes the word is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
          com.something.agent.plist
where the word something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
           something
where something is the same word you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
            v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
          Install system data files and security updates (OS X 10.10 or later)
or
          Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

Similar Messages

  • How to get rid of pop-ups and adware

    how to get rid of pop-ups for media downloader, flash player, tech support

    Click here and follow the instructions, or if there’s a type of adware not covered by them on the computer, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.
    (120252)

  • How to get rid of the other from the MacBook Air Memory?

    How to get rid of the other from the MacBook Air Memory? I reviewed my newly purchased MBA ear;y 2014 i7 8GB RAM and there was 24+ GB of "Other". I have Yosemite. I have restored to factory with no luck. is there a memory cleaner or process to eliminate what is not needed in Other? I know some files there are settings, and such but not 24+ GB worth is such of stuff.

    About “Other”:
    http://support.apple.com/en-us/HT202867
    Go step by step and test.
    1. Start up in Safe Mode.
        http://support.apple.com/kb/PH11212
    2. Backup your computer.
    3. Empty Trash.
       http://support.apple.com/kb/PH13806
    4. Disk space / Time Machine ?/ Local Snapshots
      Local backups
       http://support.apple.com/kb/ht4878
    5. Delete old iOS Devices Backup.
        iTunes > Preferences > Devices
        Highlight the old Backups , press “Delete Backup” and then “OK”.
        http://support.apple.com/kb/HT4946?viewlocale=en_US&locale=en_US
    6. Re-index Macintosh HD.
        This will take a while. Wait until it is finished.
        System Preferences > Spotlight > Privacy
        http://support.apple.com/kb/ht2409
    7.Try OmniDiskSweeper. This will give the storage size details of the items.
       https://www.omnigroup.com/more
       Select Macintosh HD and click  “Sweep Selected Drive” at the bottom.
       Be careful. Delete only the files that can be safely  deleted. If you are not sure about any file, don’t touch it.
    8. Move iTunes, iPhoto and iMovie media folders to an external drive.
        iTunes
        http://support.apple.com/en-us/HT201562
        iPhoto
        http://support.apple.com/kb/PH2506
        iMovie
        http://support.apple.com/kb/ph2289

  • How to get rid of pop ups

    how to get rid of pop ups

    Could you please help us repair our Macbook after downloading MPlayerX. Followed your instructions from an earlier post and the result is as follows, hoping it helps.
    Thanks in anticipation
    Start time: 21:18:19 03/21/15
    Revision: 1237
    Model Identifier: MacBook7,1
    Memory: 2 GB
    System Version: Mac OS X 10.6.8 (10K549)
    Kernel Version: Darwin 10.8.0
    64-bit Kernel and Extensions: No
    Time since boot: 35 days 20:35
    UID: 501
    Graphics/Displays
        NVIDIA GeForce 320M
            Color LCD (Main)
            Display Connector
    SerialATA
        Hitachi HTS545025B9SA02                
    VM
        Pageouts: 903201
    File opens (per sec)
        RealPlayer Down (UID 501) => /private/var/folders/rG/rGFFQw8IFXCCMRtksag4TE+++TI/-Tmp-/TemporaryItems (status 0): 3
    XPC cache: No
    Listeners
        cupsd: ipp
        krb5kdc: kerberos
        launchd: afpovertcp
        launchd: microsoft-ds
        launchd: netbios-ssn
        launchd: ssh
    Diagnostic reports
        2015-03-15 plugin-container crash
        2015-03-21 InstallerT crash
        2015-03-21 plugin-container crash
    I/O errors
        disk1s1: do_jnl_io: strategy err 0x6 2
        disk6s2: do_jnl_io: strategy err 0x6 1
    Volumes
        disk0s2:
        disk3s1:
        disk1s1:
    HCI errors
        Bus: 0x26 Addr: 2 Errors: 15
    USB
        USB High-Speed Bus
          Host Controller Location: Built-in USB
          Host Controller Driver: AppleUSBEHCI
          Bus Number: 0x24
            Built-in iSight
              Location ID: 0x24600000 / 2
              Current Available (mA): 500
              Current Required (mA): 500
        USB High-Speed Bus
          Host Controller Location: Built-in USB
          Host Controller Driver: AppleUSBEHCI
          Bus Number: 0x26
        USB Bus
          Host Controller Location: Built-in USB
          Host Controller Driver: AppleUSBOHCI
          Bus Number: 0x06
            BRCM2070 Hub
              Location ID: 0x06600000 / 3
              Current Available (mA): 500
              Current Required (mA): 94
                Bluetooth USB Host Controller
                  BSD Name: en4
                  Location ID: 0x06630000 / 4
                  Current Available (mA): 500
                  Current Required (mA): 0
            Apple Internal Keyboard / Trackpad
              Location ID: 0x06300000 / 2
              Current Available (mA): 500
              Current Required (mA): 40
        USB Bus
          Host Controller Location: Built-in USB
          Host Controller Driver: AppleUSBOHCI
          Bus Number: 0x04
    Shutdown codes
        -60 1
    Kernel log
        Sat Mar 21 12:43:21 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (d2,2ee6)->(db,2d69).
        Sat Mar 21 12:43:26 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (ec,269d)->(ee,51d).
        Sat Mar 21 12:43:30 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (f1,231d)->(f9,2375).
        Sat Mar 21 12:43:31 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (fb,1375)->(fd,2759).
        Sat Mar 21 12:43:35 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (10a,1b06)->(10d,149e).
        Sat Mar 21 12:43:56 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (147,736)->(157,751).
        Sat Mar 21 12:44:50 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (21a,1c72)->(21b,224f).
        Sat Mar 21 12:45:25 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (296,2098)->(297,2f45).
        Sat Mar 21 12:45:58 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (30d,2c50)->(30f,16ee).
        Sat Mar 21 12:46:01 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (315,1eee)->(318,a67).
        Sat Mar 21 12:46:02 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (31b,2c67)->(31d,44e).
        Sat Mar 21 13:13:48 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (1b9,2be3)->(1bc,1bd4).
        Sat Mar 21 13:14:01 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (1e8,214)->(1eb,29a9).
        Sat Mar 21 13:14:28 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (24c,e76)->(24d,2a38).
        Sat Mar 21 13:14:48 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (292,2d96)->(294,a78).
        Sat Mar 21 13:15:33 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (333,2235)->(335,e78).
        Sat Mar 21 13:22:55 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (966,13c0)->(967,280d).
        Sat Mar 21 14:10:23 Sound assertion "0 != result" failed in AppleMikeyDevice at line 765 goto handler
        Sat Mar 21 14:10:23 Sound assertion "0 != result" failed in AppleMikeyDevice at line 795 goto handler
        Sat Mar 21 14:10:23 Sound assertion "0 != dispatchToStateMachinePosition ( dequeuedEvent )" failed in AppleMikeyDevice at line 721 goto handler
        Sat Mar 21 14:19:50 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (7ec,185a)->(7ed,246d).
        Sat Mar 21 17:31:29 Sound assertion "0 != result" failed in AppleMikeyDevice at line 765 goto handler
        Sat Mar 21 17:31:29 Sound assertion "0 != result" failed in AppleMikeyDevice at line 795 goto handler
        Sat Mar 21 17:31:29 Sound assertion "0 != dispatchToStateMachinePosition ( dequeuedEvent )" failed in AppleMikeyDevice at line 721 goto handler
        Sat Mar 21 20:24:16 jnl: disk6s2: close: journal 0x55f7e04, is invalid.  aborting outstanding transactions
    System log
        Sat Mar 21 13:23:44 /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/pl ugin-container ava error: addNewReferenceEntryMMCO ref (3) buffer is full (retire_cnt = 0, fnumMin = 4, lte = 0, sidx = 4, sid = 12 *)
        Sat Mar 21 16:24:51 mDNSResponder PenaltyTimeForServer: PenaltyTime negative -107383, (server penaltyTime 1210501235, timenow 1210608618) resetting the penalty
        Sat Mar 21 19:36:30 firefox CGAffineTransformInvert: singular matrix.
        Sat Mar 21 19:36:30 firefox CGAffineTransformInvert: singular matrix.
        Sat Mar 21 19:36:30 firefox CGAffineTransformInvert: singular matrix.
        Sat Mar 21 19:36:31 firefox CGAffineTransformInvert: singular matrix.
        Sat Mar 21 19:36:31 firefox CGAffineTransformInvert: singular matrix.
        Sat Mar 21 19:36:31 firefox CGAffineTransformInvert: singular matrix.
        Sat Mar 21 20:23:16 mDNSResponder PenaltyTimeForServer: PenaltyTime negative -12076, (server penaltyTime 1224901235, timenow 1224913311) resetting the penalty
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:24:16 kernel
        Sat Mar 21 20:27:34 fseventsd event logs in /Volumes/Backups/.fseventsd out of sync with volume.  destroying old logs. (101926 0 102146)
        Sat Mar 21 20:27:34 fseventsd log dir: /Volumes/Backups/.fseventsd getting new uuid: UUID
        Sat Mar 21 20:31:49 com.apple.backupd Event store UUIDs don't match for volume: Macintosh HD
        Sat Mar 21 20:31:49 com.apple.backupd Node requires deep traversal:/ reason:must scan subdirs|new event db|
    Console log
        Sat Mar 21 21:15:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:15:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:15:38 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:15:48 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:15:58 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:16:08 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:16:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:16:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:16:38 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:16:48 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:16:58 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:17:08 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:17:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:17:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:17:38 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:17:48 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:17:58 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:18:08 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:18:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:18:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:18:39 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:18:49 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:18:59 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:19:09 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
        Sat Mar 21 21:19:19 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
    Daemons
        cn.com.zte.PPPMonitor.plist
        com.adobe.fpsaud
        com.apple.suhelperd
        -    status: 2
        com.openssh.sshd
        com.rim.BBDaemon
        com.vix.cron
        com.zeobit.MacKeeper.AntiVirus
        com.zeobit.MacKeeper.plugin.AntiTheft.daemon
        de.novamedia.VMRServer
        jp.co.canon.MasterInstaller
        org.apache.httpd
        org.cups.cupsd
        org.ntp.ntpd
        org.postfix.master
        org.samba.nmbd
        org.samba.smbd
        org.x.privileged_startx
    Agents
        cn.com.zte.mobile.usbswapper.plist
        -    status: 1
        com.Installer.completer.download
        com.Installer.completer.ltvbit
        com.Installer.completer.update
        com.apple.Kerberos.renew.plist
        -    status: 1
        com.apple.mrt.uiagent
        -    status: 255
        com.codecm.uploader
        com.google.keystone.user.agent
        com.jdibackup.ZipCloud.notify
        com.rim.BBLaunchAgent
        com.rim.RimAlbumArtDaemon
        com.sierrawireless.SwitchTool
        com.spotify.webhelper
        com.zeobit.MacKeeper.Helper
        org.openbsd.ssh-agent
        org.x.startx
    User overrides
        jp.co.canon.Inkjet_Extended_Survey_Agent
    Startup items
        /Library/StartupItems/iCoreService/iCoreService
        /Library/StartupItems/iCoreService/StartupParameters.plist
    Global login items
        /Library/Application Support/TrendMicro/TmccMac/TmLoginMgr.app
        /Library/Application Support/BlackBerry/BlackBerry Device Manager.app
    User login items
        iTunesHelper
        -    missing value
        AirPort Utility
        -    missing value
        Kindle
        -    /Applications/Kindle.app
        Dropbox
        -    /Applications/Dropbox.app
        Android File Transfer Agent
        -    /Users/USER/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app
        fuspredownloader
        -    missing value
        RealPlayer Downloader Agent
        -    /Users/USER/Library/Application Support/RealNetworks/RealPlayer Downloader Agent.app
        KiesAgent
        -    /Applications/Kies.app/Contents/MacOS/KiesAgent.app
        TmLoginMgr
        -    /Library/Application Support/TrendMicro/TmccMac/TmLoginMgr.app
        BlackBerry Device Manager
        -    /Library/Application Support/BlackBerry/BlackBerry Device Manager.app
    Firefox extensions
        Google Translator for Firefox
        Words-Chinese Pinyin Dictionary
        Test Pilot
    Widgets
        Currency Converter
    Restricted files: 2944
    Lockfiles: 25
    Universal Access
    Contents of /Library/LaunchAgents/cn.com.zte.mobile.usbswapper.plist
        -    mod date: Sep 27 21:40:29 2011
        -    checksum: 1550256407
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>cn.com.zte.mobile.usbswapper.plist</string>
            <key>OnDemand</key>
            <false/>
            <key>ProgramArguments</key>
            <array>
                <string>/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
            <key>program</key>
            <string>/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile</string>
        </dict>
        </plist>
    Contents of /Library/LaunchAgents/com.rim.BBAlbumArtCacher.plist
        -    mod date: Nov  9 09:24:42 2011
        -    checksum: 2868431736
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>KeepAlive</key>
            <true/>
            <key>Label</key>
            <string>com.rim.RimAlbumArtDaemon</string>
            <key>OnDemand</key>
            <false/>
            <key>Program</key>
            <string>/Library/Application Support/BlackBerry/RimAlbumArtDaemon</string>
            <key>ProgramArguments</key>
            <array>
                <string>RimAlbumArtDaemon</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
        </dict>
        </plist>
    Contents of /Library/LaunchAgents/com.rim.BBLaunchAgent.plist
        -    mod date: Nov  9 09:24:43 2011
        -    checksum: 908705504
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>KeepAlive</key>
            <true/>
            <key>Label</key>
            <string>com.rim.BBLaunchAgent</string>
            <key>OnDemand</key>
            <false/>
            <key>Program</key>
            <string>/Library/Application Support/BlackBerry/BBLaunchAgent.app</string>
            <key>ProgramArguments</key>
            <array>
                <string>BBLaunchAgent</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
        </dict>
        </plist>
    Contents of /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist
        -    mod date: Sep  8 04:26:41 2010
        -    checksum: 872926754
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.sierrawireless.SwitchTool</string>
            <key>ProgramArguments</key>
            <array>
                <string>/Library/Sierra/SierraDevSupport</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
            <key>TimeOut</key>
            <integer>90</integer>
            <key>KeepAlive</key>
            <true/>
        </dict>
        </plist>
    Contents of /Library/LaunchDaemons/cn.com.zte.PPPMonitor.plist
        -    mod date: Feb  9 14:34:28 2009
        -    checksum: 4232615395
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>cn.com.zte.PPPMonitor.plist</string>
            <key>OnDemand</key>
            <false/>
            <key>ProgramArguments</key>
            <array>
                <string>/Library/Application Support/ZTE/PPPMonitord</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
            <key>program</key>
            <string>/Library/Application Support/ZTE/PPPMonitord</string>
        </dict>
        </plist>
    Contents of /Library/LaunchDaemons/com.zeobit.MacKeeper.AntiVirus.plist
        -    mod date: Sep 20 11:22:10 2011
        -    checksum: 4244331265
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
            <dict>
                <key>Disabled</key>
                <false/>
                <key>Label</key>
                <string>com.zeobit.MacKeeper.AntiVirus</string>
                <key>Program</key>
                <string>/Library/Application Support/MacKeeper/AntiVirus.app/Contents/MacOS/AntiVirus</string>
                <key>OnDemand</key>
                <false/>
            </dict>
        </plist>
    Contents of /Library/LaunchDaemons/com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist
        -    mod date: Sep 20 11:15:14 2011
        -    checksum: 3798729423
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
            <dict>
                <key>Disabled</key>
                <false/>
                <key>Label</key>
                <string>com.zeobit.MacKeeper.plugin.AntiTheft.daemon</string>
                <key>Program</key>
                <string>/Library/Application Support/MacKeeper/MacKeeperATd</string>
                <key>OnDemand</key>
                <false/>
            </dict>
        </plist>
    Contents of /Library/LaunchDaemons/jp.co.canon.MasterInstaller.plist
        -    mod date: May 21 15:15:24 2014
        -    checksum: 1894334785
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>jp.co.canon.MasterInstaller</string>
            <key>ProgramArguments</key>
            <array>
                <string>/Library/PrivilegedHelperTools/jp.co.canon.MasterInstaller</string>
            </array>
            <key>ServiceIPC</key>
            <true/>
            <key>Sockets</key>
            <dict>
                <key>MasterSocket</key>
                <dict>
                    <key>SockFamily</key>
                    <string>Unix</string>
                    <key>SockPathMode</key>
                    <integer>438</integer>
                    <key>SockPathName</key>
                    <string>/var/run/jp.co.canon.MasterInstaller.socket</string>
                    <key>SockType</key>
                    <string>Stream</string>
                </dict>
        ...and 3 more line(s)
    Contents of /System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist
        -    mod date: Jun 24 20:01:21 2011
        -    checksum: 1071213906
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>EnableTransactions</key>
            <true/>
            <key>KeepAlive</key>
            <dict>
                <key>PathState</key>
                <dict>
                    <key>/Library/Preferences/com.apple.AirPortBaseStationAgent.launchd</key>
                    <true/>
                </dict>
            </dict>
            <key>Label</key>
            <string>com.apple.AirPortBaseStationAgent</string>
            <key>ProgramArguments</key>
            <array>
                <string>/System/Library/CoreServices/AirPort Base Station Agent.app/Contents/MacOS/AirPort Base Station Agent</string>
                <string>-launchd</string>
                <string>-allowquit</string>
            </array>
        </dict>
        </plist>
    Contents of /System/Library/LaunchDaemons/com.apple.xprotectupdater.plist
        -    mod date: Jun 11 06:13:23 2013
        -    checksum: 2156521427
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.apple.xprotectupdater</string>
            <key>ProgramArguments</key>
            <array>
                <string>/usr/libexec/XProtectUpdater</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
            <key>StartCalendarInterval</key>
            <dict>
                <key>Hour</key>
                <integer>21</integer>
                <key>Minute</key>
                <integer>10</integer>
            </dict>
        </dict>
        </plist>
    Contents of /System/Library/LaunchDaemons/de.novamedia.VMRServer.plist
        -    mod date: Aug 29 20:04:21 2012
        -    checksum: 2973122774
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>de.novamedia.VMRServer</string>
            <key>RunAtLoad</key>
            <true/>
            <key>OnDemand</key>
            <false/>
            <key>WorkingDirectory</key>
            <string>/usr/local/bin</string>
            <key>ProgramArguments</key>
            <array>
                <string>/usr/local/bin/VMRServer</string>
            </array>
            <key>ServiceDescription</key>
            <string>Vodafone Mobile Wi-Fi</string>
        </dict>
        </plist>
    Contents of /private/etc/authorization
        -    mod date: Feb 14 00:47:29 2015
        -    checksum: 3542104272
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>comment</key>
            <string>The name of the requested right is matched against the keys.  An exact match has priority, otherwise the longest match from the start is used.    Note that the right will only match wildcard rules (ending in a ".") during this reduction.
        allow rule: this is always allowed
        &lt;key&gt;com.apple.TestApp.benign&lt;/key&gt;
        &lt;string&gt;allow&lt;/string&gt;
        deny rule: this is always denied
        &lt;key&gt;com.apple.TestApp.dangerous&lt;/key&gt;
        &lt;string&gt;deny&lt;/string&gt;
        user rule: successful authentication as a user in the specified group(5) allows the associated right.
        The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
        The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
        The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0.  This defaults to false if not specified.
        See remaining rules for examples.
        </string>
            <key>rights</key>
            <dict>
                <key></key>
                <dict>
                    <key>class</key>
                    <string>rule</string>
                    <key>comment</key>
        ...and 971 more line(s)
    Contents of /private/etc/hosts
        -    mod date: Feb 10 17:28:54 2015
        -    checksum: 1028826818
        127.0.0.1    localhost
        255.255.255.255    broadcasthost
        ::1             localhost
        fe80::1%lo0    localhost
        10.0.0.138    pocket.wifi
    Contents of Library/LaunchAgents/com.Installer.completer.download.plist
        -    mod date: Mar 21 12:47:58 2015
        -    checksum: 2802156794
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.Installer.completer.download</string>
            <key>ProgramArguments</key>
            <array>
                <string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
                <string>-trigger</string>
                <string>download</string>
                <string>-isDev</string>
                <string>0</string>
                <string>-installVersion</string>
                <string>17498</string>
                <string>-firstAppId</string>
                <string>544010071</string>
            </array>
            <key>WatchPaths</key>
            <array>
                <string>/Users/USER/Downloads</string>
            </array>
            <key>isAllowToSuggest</key>
            <string>false</string>
        </dict>
        ...and 1 more line(s)
    Contents of Library/LaunchAgents/com.Installer.completer.ltvbit.plist
        -    mod date: Mar 21 12:47:59 2015
        -    checksum: 3353910712
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.Installer.completer.ltvbit</string>
            <key>ProgramArguments</key>
            <array>
                <string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
                <string>-trigger</string>
                <string>ltvbit</string>
                <string>-isDev</string>
                <string>0</string>
                <string>-installVersion</string>
                <string>17498</string>
                <string>-firstAppId</string>
                <string>544010071</string>
            </array>
            <key>StartCalendarInterval</key>
            <dict>
                <key>Hour</key>
                <integer>4</integer>
                <key>Minute</key>
                <integer>49</integer>
            </dict>
        ...and 2 more line(s)
    Contents of Library/LaunchAgents/com.Installer.completer.update.plist
        -    mod date: Mar 21 12:47:58 2015
        -    checksum: 3717148078
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.Installer.completer.update</string>
            <key>ProgramArguments</key>
            <array>
                <string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
                <string>-trigger</string>
                <string>update</string>
                <string>-isDev</string>
                <string>0</string>
                <string>-installVersion</string>
                <string>17498</string>
                <string>-firstAppId</string>
                <string>544010071</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
            <key>StartCalendarInterval</key>
            <dict>
                <key>Hour</key>
                <integer>12</integer>
                <key>Minute</key>
        ...and 4 more line(s)
    Contents of Library/LaunchAgents/com.codecm.uploader.plist
        -    mod date: Apr  5 10:32:01 2012
        -    checksum: 1595122189
        <?xml version=1.0 encoding=UTF-8?> <!DOCTYPE plist PUBLIC -//Apple//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd> <plist version=1.0> <dict> <key>Label</key> <string>com.codecm.uploader</string> <key>OnDemand</key> <true/> <key>KeepAlive</key> <dict> <key>SuccessfulExit</key> <false/> </dict> <key>RunAtLoad</key> <true/> <key>Program</key> <string>/Users/USER/Library/Application Support/Codec-M/codecm_uploader</string> <key>LimitLoadToSessionType</key> <string>Aqua</string> </dict> </plist>
    Contents of Library/LaunchAgents/com.google.keystone.agent.plist
        -    mod date: Oct  9 10:44:00 2014
        -    checksum: 2799884167
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.google.keystone.user.agent</string>
            <key>LimitLoadToSessionType</key>
            <string>Aqua</string>
            <key>ProgramArguments</key>
            <array>
              <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
              <string>-runMode</string>
              <string>ifneeded</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
            <key>StartInterval</key>
            <integer>3523</integer>
            <key>StandardErrorPath</key>
            <string>/dev/null</string>
            <key>StandardOutPath</key>
            <string>/dev/null</string>
        </dict>
        </plist>
    Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
        -    mod date: Mar 21 12:48:37 2015
        -    checksum: 784630351
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.jdibackup.ZipCloud.autostart</string>
            <key>ProgramArguments</key>
            <array>
                <string>open</string>
                <string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
                <string>-n</string>
                <string>--args</string>
                <string>9</string>
                <string>-l</string>
            </array>
            <key>StandardOutPath</key>
            <string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
            <key>StandardErrorPath</key>
            <string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
            <key>RunAtLoad</key>
            <true/>
        </dict>
        </plist>
    Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
        -    mod date: Mar 21 12:48:37 2015
        -    checksum: 4054896881
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>com.jdibackup.ZipCloud.notify</string>
            <key>ProgramArguments</key>
            <array>
                <string>open</string>
                <string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
                <string>--args</string>
                <string>7</string>
                <string>1</string>
            </array>
            <key>StandardOutPath</key>
            <string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
            <key>StandardErrorPath</key>
            <string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
            <key>StartInterval</key>
            <integer>1200</integer>
            <key>RunAtLoad</key>
            <false/>
        </dict>
        </plist>
    Contents of Library/LaunchAgents/com.spotify.webhelper.plist
        -    mod date: Mar 25 11:58:35 2013
        -    checksum: 2530324778
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
         <key>Label</key>
         <string>com.spotify.webhelper</string>
         <key>KeepAlive</key>
         <dict>
          <key>NetworkState</key>
          <true/>
         </dict>
         <key>RunAtLoad</key>
         <true/>
         <key>Program</key>
         <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
         <key>SpotifyPath</key>
         <string>/Applications/Spotify.app</string></dict>
        </plist>
    Contents of Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist
        -    mod date: Feb 22 13:49:38 2012
        -    checksum: 3499570668
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Disabled</key>
            <false/>
            <key>EnvironmentVariables</key>
            <dict>
                <key>ZBTimeStamp</key>
                <string>20111117180719</string>
            </dict>
            <key>Label</key>
            <string>com.zeobit.MacKeeper.Helper</string>
            <key>OnDemand</key>
            <false/>
            <key>Program</key>
            <string>/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper</string>
        </dict>
        </plist>
    Contents of Library/LaunchAgents/jp.co.canon.Inkjet_Extended_Survey_Agent.plist
        -    mod date: May 21 15:21:24 2014
        -    checksum: 1116988227
        <?xml version="1.0" encoding="UTF-8"?>
        <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
        <plist version="1.0">
        <dict>
            <key>Label</key>
            <string>jp.co.canon.Inkjet_Extended_Survey_Agent</string>
            <key>OnDemand</key>
            <true/>
            <key>ProgramArguments</key>
            <array>
                <string>/Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app/Contents/Resources/Canon_Inkjet_Extended_Survey_Agent</string>
            </array>
            <key>RunAtLoad</key>
            <true/>
            <key>StartInterval</key>
            <integer>86400</integer>
        </dict>
        </plist>
    Bad plists
        /Library/Preferences/DirectoryService/ActiveDirectory.plist
        /Library/Preferences/DirectoryService/ActiveDirectoryDomainPolicies.plist
        /Library/Preferences/DirectoryService/ActiveDirectoryDynamicData.plist
        /Library/Preferences/DirectoryService/ContactsNodeConfig.plist
        /Library/Preferences/DirectoryService/ContactsNodeConfigBackup.plist
        /Library/Preferences/DirectoryService/DirectoryService.plist
        /Library/Preferences/DirectoryService/DirectoryServiceDebug.plist
        /Library/Preferences/DirectoryService/DSLDAPv3PlugInConfig.plist
        /Library/Preferences/DirectoryService/DSRecordTypeRestrictions.plist
        /Library/Preferences/DirectoryService/SearchNodeConfig.plist
        /Library/Preferences/DirectoryService/SearchNodeConfigBackup.plist
        Library/Preferences/com.apple.iphotomosaic.plist
    Applications
        /Applications/Address Book.app
        -    com.apple.AddressBook
        /Applications/Adobe Digital Editions 2.0.app
        -    com.adobe.adobedigitaleditions.app
        /Applications/Android File Transfer.app
        -    com.google.android.mtpviewer
        /Applications/App Store.app
        -    N/A
        /Applications/Calculator.app
        -    com.apple.calculator
        /Applications/Canon Utilities/IJ Manual/Easy Guide Viewer/Canon IJ On-screen Manual.app
        -    jp.co.canon.ij.easy-guide-viewer
        /Applications/Canon Utilities/IJ Network Tool/Canon IJ Network Tool.app
        -    jp.co.canon.IJNetworkTool
        /Applications/Canon Utilities/IJ Scan Utility/Canon IJ Scan Utility2.app
        -    jp.co.canon.ij.scanutility2
        /Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app
        -    jp.co.canon.InkjetExtendedSurveyProgram
        /Applications/Canon Utilities/My Image Garden/AddOn/CIG/CiGDownLoadAPP.app
        -    jp.co.canon.MIGCig
        /Applications/Canon Utilities/My Image Garden/My Image Garden.app
        -    jp.co.canon.MyImageGarden
        /Applications/Canon Utilities/Quick Menu/Canon Quick Menu.app
        -    jp.co.canon.IJ.QuickMenu
        /Applications/Codec-M.app
        -    com.whitesmoke.Codec-M
        /Applications/DVD Player.app
        -    com.apple.DVDPlayer
        /Applications/Dashboard.app
        -    com.apple.dashboardlauncher
        /Applications/Dictionary.app
        -    com.apple.Dictionary
        /Applications/Dropbox.app
        -    com.getdropbox.dropbox
        /Applications/Firefox.app
        -    org.mozilla.firefox
        /Applications/Flip4Mac/WMV Player.app
        -    net.telestream.wmv.player
        /Applications/Font Book.app
        -    com.apple.FontBook
        /Applications/Image Capture.app
        -    com.apple.Image_Capture
        /Applications/InstallMac/Reset Search.app
        -    com.tabatoo.InstallerT
        /Applications/Kies.app
        -    com.samsung.Kies
        /Applications/Kindle.app
        -    com.amazon.Kindle
        /Applications/MacKeeper.app
        -    com.zeobit.MacKeeper
        /Applications/Mail.app
        -    com.apple.mail
        /Applications/Mobile Broadband Ma

  • How to get rid of pop ups on screen??

    I have a macbook pro and have had it for two years now. I have never had a virus or nothing wrong with it, since Ive had it.. I also download a fair bit of stuff, but recently i have noticed when i go onto the internet, (google chrome or safari) they both have pop ups on the right and left side and also down the bottom of the screen which is really annoying. The pop ups do have crosses on them which allows me to close them but they still pop up again and again once the page has reloaded. I also get heaps of pop ups coming up as seperate pages when I am surfing the net even though the pop up box is checked.. It is really annoying and affecting the internet.. I dont know what else to do? Please help!

    kayateford wrote:
    even though the pop up box is checked
    Is there a particular scamware that consistantly pops up?  Or is this general annoying advertisements.
    Did it just start happening all one day??
    There is AddBlocker PLus for FireFox
    There is AdBlock for Safari
    There is AdBlockPlus for Chrome

  • How do I get rid of pop ups on my macbook

    I keep getting pop ups which just started recently, I may have downloaded some sort of media player which obviously was not. How can I get rid of these same pop ups?

    Click here and follow the instructions, or if there’s a type of adware not covered by them on the computer, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.
    (125485)

  • How to get rid of Pop Ups, Pop Unders and YouTube ads

    Ever since AdBlock stopped working in Safari, I've searched til no end for another program, or extension, that will get rid of all pop ups, pop unders, and YouTube ads and banners for Safari.  Nothing. 
    This astounds me because I've never known Mac gurus to not be on top of somthing like this.  Are there any alternatives?  I only use Safari and not Firefox or Chrome. 
    I've downloaded Glimmer Blocker but it doesn't stop pop-unders at all.  Is there a hack to get it to?  What is everyone else doing?  I can't imagine people are just putting up with the bombardment of ads!  Please, any suggestions would be greatly appreciated!

    Simple Living wrote:
    Ever since AdBlock stopped working in Safari, I've searched til no end for another program, or extension, that will get rid of all pop ups, pop unders, and YouTube ads and banners for Safari.  Nothing. 
    This astounds me because I've never known Mac gurus to not be on top of somthing like this.  Are there any alternatives?  I only use Safari and not Firefox or Chrome. 
    I've downloaded Glimmer Blocker but it doesn't stop pop-unders at all.  Is there a hack to get it to?  What is everyone else doing?  I can't imagine people are just putting up with the bombardment of ads!  Please, any suggestions would be greatly appreciated!
    Greetings!
    Just to double check but did you made sure to download the latest version of the extension and ensure that it was enabled inside the Safari setting's menu?
    Let us know!

  • How to get rid or pop-ups like mackeeper

    I continue to get pop-ups like mackeeper and others almost every time I log in.  also words are highlighted in the text of websites such as Apple and others. 

    You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data.
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • How to get rid of pop ups saying connect to I tunes to use push notifications...pls help me out its irritating if I open any app in my iphone4 ios6

    Iam unable to open any app. After I have backed up still its getting pop up connect to iTunes to use push notifications

    Iam unable to open any app. After I have backed up still its getting pop up connect to iTunes to use push notifications

  • How do i get rid of pop ups for updates

    i keep getting a pop up for updates available and there is no way to click on this pop up to delete it or get it off my computer screen. i have to slide it all the way over to the right side of screen to get it out of my way.  when i go to hp website there is no update applicable to my machine. hp j 4580. how do i get rid of the pop ups and keep them from coming to me.

    Hi Jws1947,
    Thank you for visiting the HP Support Forums and Welcome. I have read your thread on how to get rid of the popups on your HP J 4580. What is the popup saying needs to be updated?
    What is your current operating system?
    Please let me know.
    Thanks.
    Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
    Click the “Kudos, Thumbs Up" on the bottom to say “Thanks” for helping!

  • How to get ride of pop up window that freezes browser

    Sometimes I get these pop up windows that freezes the browser I don't want to click on the buttons so I have to force quit to close Safari.  The last one i had even showed up after I reopened Safari.  How can I avoid/get rid of these pop ups?

    lab_rat wrote:
    I am using the Block Pop Windows but it doesn't alway work as I do get the occasional little pop up window that I don't want to click on that freezes Safari.  My only option has been to force quit Safari.
    As we still have no magic crystal balls to see on your problem, it will be very nice if you have some more information about "that window" .
    Eventually post a screenshot here.

  • Virus? I can't get rid of pop-ups!

    Hi,
    I'm hoping someone can help me out with this. I'm not sure what is going on, however, whenever I search something in google, the results will come up, and then about 2 seconds later, other random text and links will appear. The most annoying part though is that whenever I click on ANYTHING, whether it be a link or a field to fill in, it takes me to various "mac cleaner" websites. I haven't downloaded any of those sites, yet it's started happening in the last day and appears to be getting worse. There are also random ads appearing on every website I go to, that never appeared before. For example, at the google home page, there are now random ads all over the bottom of it.
    I have tried to manage my cookies and pop ups, I've deleted chrome and reinstalled it again, I have restarted my computer, nothing seems to be helping! I've tried all three of my web browsers - safari, chrome and firefox, and they all do the same thing. I am at a standstill!
    Can someone please guide me in the right direction? It would be greatly appreciated as I use my computer for work and this is inhibiting my ability to use it!!!
    Thank you so much to anyone who has input.

    You may have inadvertently installed adware. Eradicating it is simple. For an explanation or how this may have occurred, how to avoid it in the future, and for one possible solution read How to install adware.

  • Need help please. When using Safari while banking online I cannot get rid of Pop ups although I have ticket no Pop ups. Any ideas ?

    Need your help please. When using Safari while banking online- I cannot get rid of the Pop ups although I have ticked the correct place. Any ideas ?
    A few months ago I downloaded a program someone suggested.

    Get Adblock or GlimmerBlocker.

  • How to get audio input through 3.5mm on MacBook Air

    I am trying to use the 3.5mm jack on the MacBook Air as an input jack. I am running several Mic's to a sound board, and then using it's output to get the audio to my system. The problem is, when I plug the cable into the jack, it thinks it is speakers. Does anybody have a solution? I cannot find any way to manually adjust this from output to input. Also, using USB is not an otion, becuase it is coming from a sound board, not jus one mic.
    I am using a mid-2011 MBA with Lion 10.7.5
    Thanks!!!

    Maybe you can help me now?
    I have a iPhone 1/8 inch microphone adapter - 3.5mm 4 conductor TRRS Male to 3.5mm Microphone Input Jack from here. that allows me to plug my lapel mic directly into my iphone and record, it is great.
    I was hoping I could also use it on my MBPRetina to accomplish the same purpose. Do you know if that is possible? I tried and tested it recording a video in iMovie, and didn't notice any change.
    I went to the Sound Input Preferences, and do not notice the mic input changing when I plug it in or remove it. In other words, it always says "internal mic."
    My lapel mic is battery operated, with a fresh battery, and it was turned on.
    What am I doing incorrectly? Any help would be wonderfully appreciated!

  • How can I get rid of the malware on my macbook air?

    I have not downloaded any suspicious programs or clicked on any links but suddenly today, ads keep popping up on google and on websites like Tumblr, Facebook, etc. Pictures are even turning to ads, like the picture gets replaced with an ad for a farm game. I have disabled extensions, I have deleted cookies and cleared my cache, I have put chrome adblock on, and that keeps a lot of the ads away but the same 'mackeeper' link pops up on google search no matter what, as well as zeobit.com. I'm worried I'm going to have to get professional help.

    There is no need to download anything to solve this problem.
    You may have installed the "VSearch" trojan. Remove it as follows.
    Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data before proceeding.
    Step 1
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    Reset the home page and default search engine in all the browsers, if it was changed.
    Step 2
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
    This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Maybe you are looking for

  • Adobe Photoshop Elements 10 Error APPCRASH

    Hi I have download Adobe Photoshop Elements 10 trail version, but when i want to open the organize and edit, he gives a error see below. Event-name of problem:    APPCRAS Name of the application:    PhotoshopElementsEditor.exe Version of application:

  • Running a jar file from java code

    Hi! Im trying to run a jar file from my code. I've tried Classloader, but that doesnt work because it doesnt find the images (also embedded in the 2nd jar file). WHat I would like to do is actually RUN the 2nd jar file from the first jar file. There

  • Firefox crashes on start up for one user but not another

    Crash ID: bp-df3a48d7-363c-4d2f-87d3-f73902140723 Version: 31 Crashes on start up for one user but not another. Both are administrators. I have uninstalled and re-installed. No change with each user. Crashes in safe mode as well (holding down shift)

  • Problem with RFC LookUp Parametrised Mapping

    Dear All, I am using RFC Look function in message mapping and have defied import parameter as xyz of category adapter and type RFC to get a sinle value response from RFC. After this, I created operation mapping. Now going for Parameter binding, it is

  • Tab control list mode in vertical direction

    I know the default tab control is list in horizontal direction , if i set the tab location to "Left" , the tab text also change it to vertical , how can i set it stay in horizontal direction Message Edited by [email protected] on 01-02-2010 08:09 AM