Is this the flashback malware?

Please look at these logs and tell me if these names and addresses look legit. Ever since january 12th I have had lots of problems with my computer. running slow, freezing up, my user permmisions changed, and sleep schedule changed, things like that. So I wiped my hard drive clean and reinstalled Lion using Lion's internet reinstall through the recovery partition and this is the very first few minutes of logs. Also I noticed after the HD wipe that partition still had 3 folders and 2 files and about 250mb of the drive unaccounted for not including the few gigs gone from formatting. pay close attention to the 3rd log a darwin kernel from January 12th and then half way through another log connecting to abidjan africa and then torward the end some wierd connections and like remote keyboard connections. By the way after the reinstall I still have the same problems and they're worse then before. Please help
4/12/12 7:56:39.000 PM
bootlog
BOOT_TIME 1334282199 0
4/12/12 7:56:40.000 PM
kernel
PMAP: PCID enabled
4/12/12 7:56:40.000 PM
kernel
Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64
4/12/12 7:56:40.000 PM
kernel
vm_page_bootstrap: 989369 free pages and 51015 wired pages
4/12/12 7:56:40.000 PM
kernel
kext submap [0xffffff7f8072f000 - 0xffffff8000000000], kernel text [0xffffff8000200000 - 0xffffff800072f000]
4/12/12 7:56:40.000 PM
kernel
zone leak detection enabled
4/12/12 7:56:40.000 PM
kernel
standard timeslicing quantum is 10000 us
4/12/12 7:56:40.000 PM
kernel
mig_table_max_displ = 73
4/12/12 7:56:40.000 PM
kernel
TSC Deadline Timer supported and enabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=1 LocalApicId=0 Enabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=2 LocalApicId=2 Enabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=3 LocalApicId=1 Enabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=4 LocalApicId=3 Enabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=5 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=6 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=7 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PM
kernel
AppleACPICPU: ProcessorId=8 LocalApicId=255 Disabled
4/12/12 7:56:40.000 PM
kernel
calling mpo_policy_init for TMSafetyNet
4/12/12 7:56:40.000 PM
kernel
Security policy loaded: Safety net for Time Machine (TMSafetyNet)
4/12/12 7:56:40.000 PM
kernel
calling mpo_policy_init for Sandbox
4/12/12 7:56:40.000 PM
kernel
Security policy loaded: Seatbelt sandbox policy (Sandbox)
4/12/12 7:56:40.000 PM
kernel
calling mpo_policy_init for Quarantine
4/12/12 7:56:40.000 PM
kernel
Security policy loaded: Quarantine policy (Quarantine)
4/12/12 7:56:40.000 PM
kernel
Copyright (c) 1982, 1986, 1989, 1991, 1993
4/12/12 7:56:40.000 PM
kernel
The Regents of the University of California. All rights reserved.
4/12/12 7:56:40.000 PM
kernel
MAC Framework successfully initialized
4/12/12 7:56:40.000 PM
kernel
using 16384 buffer headers and 10240 cluster IO buffer headers
4/12/12 7:56:40.000 PM
kernel
IOAPIC: Version 0x20 Vectors 64:87
4/12/12 7:56:40.000 PM
kernel
ACPI: System State [S0 S3 S4 S5] (S3)
4/12/12 7:56:40.000 PM
kernel
PFM64 (36 cpu) 0xf10000000, 0xf0000000
4/12/12 7:56:40.000 PM
kernel
[ PCI configuration begin ]
4/12/12 7:56:40.000 PM
kernel
AppleIntelCPUPowerManagement: Turbo Ratios 008B
4/12/12 7:56:40.000 PM
kernel
AppleIntelCPUPowerManagement: (built 18:56:37 Jan 12 2012) initialization complete
4/12/12 7:56:40.000 PM
kernel
console relocated to 0xf10000000
4/12/12 7:56:40.000 PM
kernel
PCI configuration changed (bridge=11 device=2 cardbus=0)
4/12/12 7:56:40.000 PM
kernel
[ PCI configuration end, bridges 8 devices 13 ]
4/12/12 7:56:40.000 PM
kernel
mbinit: done [64 MB total pool size, (42/21) split]
4/12/12 7:56:40.000 PM
kernel
Pthread support ABORTS when sync kernel primitives misused
4/12/12 7:56:40.000 PM
kernel
com.apple.AppleFSCompressionTypeZlib kmod start
4/12/12 7:56:40.000 PM
kernel
com.apple.AppleFSCompressionTypeDataless kmod start
4/12/12 7:56:40.000 PM
kernel
com.apple.AppleFSCompressionTypeZlib load succeeded
4/12/12 7:56:40.000 PM
kernel
com.apple.AppleFSCompressionTypeDataless load succeeded
4/12/12 7:56:40.000 PM
kernel
AppleIntelCPUPowerManagementClient: ready
4/12/12 7:56:40.000 PM
kernel
AppleUSBMultitouchDriver::checkStatus - received Status Packet, Payload 2: device was reinitialized
4/12/12 7:56:40.000 PM
kernel
[IOBluetoothHCIController::setConfigState] calling registerService
4/12/12 7:56:40.000 PM
kernel
rooting via boot-uuid from /chosen: D117A117-7012-3D6B-8C37-E0FE9BE60C49
4/12/12 7:56:40.000 PM
kernel
Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
4/12/12 7:56:40.000 PM
kernel
Got boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/SATA@1F,2/AppleIntelPchS eriesAHCI/PRT0@0/IOAHCIDevice@0/AppleAHCIDiskDriver/IOAHCIBlockStorageDevice/IOB lockStorageDriver/APPLE SSD TS128C Media/IOGUIDPartitionScheme/Macintosh HD@2
4/12/12 7:56:40.000 PM
kernel
BSD root: disk0s2, major 14, minor 2
4/12/12 7:56:40.000 PM
kernel
Kernel is LP64
4/12/12 7:56:40.093 PM
com.apple.launchd
*** launchd[1] has started up. ***
4/12/12 7:56:40.506 PM
com.apple.launchd
(com.apple.sandboxd) Unknown value for key POSIXSpawnType: Interactive
4/12/12 7:56:40.773 PM
fseventsd
could not open <</.fseventsd/fseventsd-uuid>> (No such file or directory)
4/12/12 7:56:40.773 PM
fseventsd
log dir: /.fseventsd getting new uuid: BCF35C31-259F-46C6-85DF-204072F1471F
4/12/12 7:56:41.044 PM
UserEventAgent
starting CaptiveNetworkSupport as SystemEventAgent built May 25 2011 12:27:35
4/12/12 7:56:41.050 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCCopyWiFiDevices:388 WiFi Device Name == NULL
4/12/12 7:56:42.246 PM
com.apple.SecurityServer
Session 100000 created
4/12/12 7:56:42.342 PM
com.apple.SecurityServer
Entering service
4/12/12 7:56:42.382 PM
configd
updateConfiguration(): no preferences.
4/12/12 7:56:42.386 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCCopyWiFiDevices:388 WiFi Device Name == NULL
4/12/12 7:56:42.756 PM
UserEventAgent
ServermgrdRegistration cannot load config data
4/12/12 7:56:42.764 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 7:56:44.000 PM
kernel
BTCOEXIST off
4/12/12 7:56:44.000 PM
kernel
wl0: Broadcom BCM4353 802.11 Wireless Controller
4/12/12 7:56:44.000 PM
kernel
5.100.98.75
4/12/12 7:56:45.000 PM
kernel
Previous Shutdown Cause: 3
4/12/12 7:56:45.562 PM
com.apple.pfctl
No ALTQ support in kernel
4/12/12 7:56:45.562 PM
com.apple.pfctl
ALTQ related functions disabled
4/12/12 7:56:45.584 PM
com.apple.ucupdate.plist
ucupdate: Checked 1 update, no match found.
4/12/12 7:56:45.648 PM
com.apple.launchd
(com.apple.bsd.dirhelper) Throttling respawn: Will start in 10 seconds
4/12/12 7:56:45.881 PM
systemkeychain
done file: /var/run/systemkeychaincheck.done
4/12/12 7:56:46.000 PM
kernel
macx_swapon SUCCESS
4/12/12 7:56:46.000 PM
kernel
Waiting for DSMOS...
4/12/12 7:56:46.356 PM
UpdateSettingsTool
CGSLookupServerRootPort: Failed to look up the port for "com.apple.windowserver.active" (1102)
4/12/12 7:56:47.000 PM
kernel
DSMOS has arrived
4/12/12 7:56:47.019 PM
loginwindow
Login Window Application Started
4/12/12 7:56:47.180 PM
mds
(Normal) FMW: FMW 0 0
4/12/12 7:56:47.305 PM
com.apple.launchd
(com.apple.bsd.dirhelper) Throttling respawn: Will start in 9 seconds
4/12/12 7:56:47.537 PM
airportd
_processDLILEvent: en0 attached (down)
4/12/12 7:56:47.539 PM
UserEventAgent
CaptiveNetworkSupport:CreateInterfaceWatchList:2788 WiFi Devices Found.
4/12/12 7:56:47.539 PM
UserEventAgent
CaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.540 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.540 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.540 PM
UserEventAgent
CaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.541 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.542 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.548 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.549 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveSCRebuildCache:81 Failed to get service order
4/12/12 7:56:47.582 PM
configd
New network configuration saved
4/12/12 7:56:47.594 PM
UserEventAgent
CaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:47.000 PM
kernel
AirPort_Brcm4331: Ethernet address b8:8d:12:05:cd:30
4/12/12 7:56:47.000 PM
kernel
IO80211Controller::dataLinkLayerAttachComplete(): adding AppleEFINVRAM notification
4/12/12 7:56:47.000 PM
kernel
IO80211Interface::efiNVRAMPublished():
4/12/12 7:56:47.000 PM
kernel
Created virtif 0xffffff800b0c2400 p2p0
4/12/12 7:56:47.000 PM
kernel
AirPort: Link Down on en0. Reason 1 (Unspecified).
4/12/12 7:56:47.605 PM
configd
network configuration changed.
4/12/12 7:56:50.019 PM
loginwindow
**DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
4/12/12 7:56:50.191 PM
com.apple.launchctl.LoginWindow
com.apple.findmymacmessenger: Already loaded
4/12/12 7:56:50.270 PM
loginwindow
USER_PROCESS: 52 console
4/12/12 7:56:53.000 PM
kernel
IOUserEthernetController: Ethernet address b8:8d:12:05:cd:31
4/12/12 7:56:54.767 PM
UserEventAgent
CaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:54.767 PM
configd
network configuration changed.
4/12/12 7:56:56.360 PM
mDNSResponder
mDNSResponder mDNSResponder-320.14.0 (Nov 16 2011 01:16:56) starting OSXVers 11
4/12/12 7:56:56.440 PM
com.apple.usbmuxd
usbmuxd-263 on Aug 23 2011 at 00:44:06, running 64 bit
4/12/12 7:56:56.708 PM
netbiosd
Unable to start NetBIOS name service:
4/12/12 7:56:56.878 PM
com.apple.SecurityServer
Session 100004 created
4/12/12 7:56:56.883 PM
Setup Assistant
Task1
4/12/12 7:56:56.894 PM
Setup Assistant
Task2
4/12/12 7:56:56.909 PM
[0x0-0x4004].com.apple.SetupAssistant
...System identity already exists for domain com.apple.systemdefault. Done.
4/12/12 7:56:56.909 PM
Setup Assistant
certtool systemdefault 0
4/12/12 7:56:56.937 PM
Setup Assistant
Admin Auth : All clear, SetUpServerConnection now.
4/12/12 7:56:56.960 PM
Setup Assistant
Starting to discover USB Dongles.
4/12/12 7:56:57.023 PM
Setup Assistant
updated network configuration
4/12/12 7:56:57.032 PM
UserEventAgent
CaptiveNetworkSupport:CaptivePublishState:1211 en0 - PreProbe
4/12/12 7:56:57.032 PM
configd
network configuration changed.
4/12/12 7:56:57.041 PM
Setup Assistant
SCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:56:57.057 PM
Setup Assistant
StartListeningForDefaultOutputDeviceChanging
4/12/12 7:56:57.057 PM
Setup Assistant
StartListeningForHeadphonesGettingPluggedIn
4/12/12 7:56:57.059 PM
Setup Assistant
setVolume (34)
4/12/12 7:56:57.059 PM
Setup Assistant
Headphones connected (0)
4/12/12 7:56:57.060 PM
Setup Assistant
modelUID AppleHDA:98
4/12/12 7:56:57.062 PM
Setup Assistant
layoutID 98
4/12/12 7:56:57.062 PM
Setup Assistant
setSpeakerVolume
4/12/12 7:56:57.062 PM
Setup Assistant
TransportType 0 kIOAudioDeviceTransportTypeBuiltIn
4/12/12 7:56:57.062 PM
Setup Assistant
AudioObjectGetPropertyDataSize kAudioDevicePropertyVolumeDecibels for channel (0) : kAudioHardwareUnknownPropertyError
4/12/12 7:56:57.063 PM
Setup Assistant
Set volume for channel (1) -5.000000
4/12/12 7:56:57.064 PM
Setup Assistant
Set volume for channel (2) -5.000000
4/12/12 7:56:57.074 PM
Setup Assistant
NumberOfKeyboardHIDDevices 1
4/12/12 7:56:57.074 PM
Setup Assistant
NumberOfPointingHIDDevices 1
4/12/12 7:56:57.088 PM
Setup Assistant
-> searchForValidSystems has arrived.
4/12/12 7:56:57.184 PM
Setup Assistant
. Found disk (diskIdentifier=disk0, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.190 PM
Setup Assistant
. Found disk (diskIdentifier=disk0, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.195 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s1, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.203 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s1, mountpoint=(null), isInternal=1, filesystem=(null))
4/12/12 7:56:57.205 PM
WindowServer
kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
4/12/12 7:56:57.209 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.220 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.232 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s3, mountpoint=(null), isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.240 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s3, mountpoint=(null), isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.250 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s2, mountpoint=/, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 7:56:57.852 PM
genatsdb
*GENATSDB* FontObjects generated = 324
4/12/12 7:57:01.832 PM
configd
network configuration changed.
4/12/12 7:57:01.834 PM
configd
network configuration changed.
4/12/12 7:57:01.840 PM
mDNSResponder
D2D_IPC: Loaded
4/12/12 7:57:01.840 PM
mDNSResponder
D2DInitialize succeeded
4/12/12 7:57:01.858 PM
Setup Assistant
(Snoop) Listening on 14 / 221473790
4/12/12 7:57:13.845 PM
Setup Assistant
Stopped VOT 0
4/12/12 7:57:13.880 PM
Setup Assistant
IntlSetValue(0, "AppleDateResID", 0) returned 0
4/12/12 7:57:13.882 PM
Setup Assistant
IntlSetValue(0, "AppleTimeResID", 0) returned 0
4/12/12 7:57:13.884 PM
Setup Assistant
IntlSetValue(0, "AppleNumberResID", 0) returned 0
4/12/12 7:57:13.886 PM
Setup Assistant
SMSizeFormatter : using `en_US'
4/12/12 7:57:13.886 PM
Setup Assistant
SMSizeFormatter : using `en_US'
4/12/12 7:57:13.886 PM
Setup Assistant
SMSizeFormatter : using `en_US'
4/12/12 7:57:13.906 PM
Setup Assistant
Current Iso LC = en, en
4/12/12 7:57:14.060 PM
Setup Assistant
Time to move from MBIntroCountry (Intro_Country) to MBRegisterKeyboard (Reg_Keyboard) was 0.215037s
4/12/12 7:57:17.486 PM
Setup Assistant
setAsciiLayout currentInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.486 PM
Setup Assistant
currentSourceIsKBLayout
4/12/12 7:57:17.486 PM
Setup Assistant
isAsciiCapable
4/12/12 7:57:17.486 PM
Setup Assistant
defaultAsciiKBLayout <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.486 PM
Setup Assistant
currentAsciiInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.487 PM
Setup Assistant
TISSetDefaultAsciiCapableKeyboardLayoutInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.489 PM
Setup Assistant
TISEnableInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.489 PM
Setup Assistant
TSMSetCurrentAsciiCapableInputSource <TSMInputSource 0x7f9e194efe30> KB Layout: U.S. (id=0)
4/12/12 7:57:17.515 PM
Setup Assistant
SCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:57:20.280 PM
Setup Assistant
SCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 7:57:20.427 PM
Setup Assistant
Time to move from MBRegisterKeyboard (Reg_Keyboard) to MBWirelessPickNetwork (Wireless_Pick_Network) was 2.974510s
4/12/12 7:57:21.000 PM
kernel
en0: 802.11d country code set to 'US'.
4/12/12 7:57:21.000 PM
kernel
en0: Supported channels 1 2 3 4 5 6 7 8 9 10 11 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 149 153 157 161 165
4/12/12 7:57:39.137 PM
rpcsvchost
sandbox_init: com.apple.msrpc.netlogon.sb succeeded
4/12/12 7:58:15.924 PM
warmd
[warmctl_evt_timer_bc_activation_timeout:260] BC activation bcstop timer fired!
4/12/12 7:58:45.808 PM
com.apple.launchd
(com.apple.xprotectupdater[35]) Exited with code: 255
4/12/12 7:59:50.279 PM
helpd
CarbonCore.framework, Our status with coreservicesd is unusual, 2, and things likely will stop working.
4/12/12 7:59:50.279 PM
helpd
CarbonCore.framework: Unable to connect to coreservicesd. Things likely won't work. Sorry.
4/12/12 8:02:53.288 PM
Setup Assistant
configureWithSettings: {
    Connection = Wireless;
    WirelessNetwork = LasVegas71;
4/12/12 8:02:53.297 PM
Setup Assistant
no TCPConfigureMethod specified, assuming DHCP
4/12/12 8:02:53.000 PM
kernel
MacAuthEvent en0   Auth result for: e0:91:f5:09:84:8e MAC AUTH succeeded
4/12/12 8:02:53.000 PM
kernel
wlEvent: en0 en0 Link UP
4/12/12 8:02:53.000 PM
kernel
AirPort: Link Up on en0
4/12/12 8:02:53.000 PM
kernel
en0: BSSID changed to e0:91:f5:09:84:8e
4/12/12 8:02:53.915 PM
airportd
_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:02:54.000 PM
kernel
AirPort: RSN handshake complete on en0
4/12/12 8:02:56.326 PM
configd
network configuration changed.
4/12/12 8:02:56.345 PM
UserEventAgent
CaptiveNetworkSupport:CaptivePublishState:1211 en0 - Probe
4/12/12 8:02:56.345 PM
UserEventAgent
CaptiveNetworkSupport:CNSPreferences:60 Creating new preferences
4/12/12 8:02:56.346 PM
UserEventAgent
CaptiveNetworkSupport:CaptiveStartDetect:2343 Bypassing probe on LasVegas71 because it is protected and not on the exception list
4/12/12 8:02:56.349 PM
UserEventAgent
CaptiveNetworkSupport:CaptivePublishState:1211 en0 - Unknown
4/12/12 8:02:56.350 PM
configd
network configuration changed.
4/12/12 8:02:57.932 PM
Setup Assistant
SCNetworkSetEstablishDefaultConfiguration : no new devices.
4/12/12 8:02:58.114 PM
Setup Assistant
Time to move from MBWirelessPickNetwork (Wireless_Pick_Network) to MBMigrateYN (migrationui) was 0.169636s
4/12/12 8:06:41.445 PM
Setup Assistant
Time to move from MBMigrateYN (migrationui) to MBRegisterAppleID (Reg_Apple_ID) was 0.096014s
4/12/12 8:07:03.791 PM
com.apple.kextcache
Created prelinked kernel /System/Library/Caches/com.apple.kext.caches/Startup/kernelcache.
4/12/12 8:08:57.537 PM
[0x0-0x6006].com.apple.AppleSpell
2012-04-12 19:08:57.535 findNames[180:707] Database file is missing: /var/root/Library/Application Support/AddressBook/AddressBook-v22.abcddb
4/12/12 8:09:02.694 PM
[0x0-0x6006].com.apple.AppleSpell
2012-04-12 19:09:02.692 AddressBookSync[181:1f03] Error, could not create MachMessagePort for com.apple.AddressBook.abd
4/12/12 8:09:22.332 PM
Setup Assistant
Received 761 bytes of data
4/12/12 8:09:22.332 PM
Setup Assistant
No Error in responseDictionary
4/12/12 8:09:22.576 PM
Setup Assistant
Time to move from MBRegisterAppleID (Reg_Apple_ID) to MBRegisterUserInfo (Reg_United_States) was 0.101399s
4/12/12 8:09:27.973 PM
[0x0-0x6006].com.apple.AppleSpell
2012-04-12 19:09:27.971 AddressBookSync[181:707] [0x10831b320] |ISyncManager|Warning| SyncServer is unavailable: timed out trying to connect
4/12/12 8:09:27.974 PM
[0x0-0x6006].com.apple.AppleSpell
2012-04-12 19:09:27.973 AddressBookSync[181:707] AddressBookSync (client id: com.apple.AddressBook) error: Exception running AddressBookSync: Timed out waiting for the sync server
4/12/12 8:09:37.652 PM
[0x0-0x4004].com.apple.SetupAssistant
...System identity already exists for domain com.apple.systemdefault. Done.
4/12/12 8:09:37.652 PM
Setup Assistant
certtool systemdefault 0
4/12/12 8:09:37.652 PM
Setup Assistant
There is an existing Kerberos realm, [NOT] running configureLocalKDC.
4/12/12 8:09:37.654 PM
Setup Assistant
search paths: (
    "/Local/Default"
4/12/12 8:09:37.753 PM
Setup Assistant
Time to move from MBRegisterUserInfo (Reg_United_States) to MBRegisterLocalAccount (Reg_Local_Account) was 0.147491s
4/12/12 8:10:22.498 PM
Setup Assistant
uniqueInParent:1 uniqueLocal:1
4/12/12 8:10:22.504 PM
Setup Assistant
uniqueInParent:1 uniqueLocal:1
4/12/12 8:10:24.677 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.681 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.684 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.688 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.692 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.695 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.699 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.702 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.707 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.711 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.715 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.720 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.724 PM
UserEventAgent
get_backup_share_points no AFP
4/12/12 8:10:24.779 PM
Setup Assistant
creating loginKeychain for: David
4/12/12 8:10:24.818 PM
Setup Assistant
Keychain ON.
4/12/12 8:10:24.835 PM
Setup Assistant
AppleID Identity Linked: [email protected]
4/12/12 8:10:24.835 PM
Setup Assistant
_CSAddAppleIDAccount Failed with error: -11
4/12/12 8:10:24.972 PM
Setup Assistant
AppleIDReset Enabled: [email protected]
4/12/12 8:10:24.982 PM
Setup Assistant
/usr/sbin/locsetup does not exist [-country US -language en]
4/12/12 8:10:25.036 PM
Setup Assistant
No username or no password
4/12/12 8:10:25.040 PM
Setup Assistant
creating loginKeychain for: David
4/12/12 8:10:25.046 PM
configd
setting hostname to "Davids-MacBook-Air.local"
4/12/12 8:10:25.078 PM
Setup Assistant
.Mac cert config scheduled
4/12/12 8:10:25.141 PM
mDNSResponder
User updated Computer Name from “MacBookAir-B88D1205CD30” to “David’s MacBook Air”
4/12/12 8:10:25.141 PM
mDNSResponder
User updated Local Hostname from “MacBookAir-B88D1205CD30” to “Davids-MacBook-Air”
4/12/12 8:10:26.078 PM
Setup Assistant
*********** _hadleNotification MBActivityBeganNotification
4/12/12 8:10:26.078 PM
Setup Assistant
*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.170 PM
Setup Assistant
*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.220 PM
Setup Assistant
*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:26.583 PM
Setup Assistant
Received 234 bytes of data
4/12/12 8:10:26.584 PM
Setup Assistant
MBAppleRegTransaction: No Error in responseDictionary.
4/12/12 8:10:26.584 PM
Setup Assistant
GMTTime Fri, 13 Apr 2012 02:10:26 GMT
4/12/12 8:10:26.946 PM
[0x0-0x4004].com.apple.SetupAssistant
Offset:
0
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
names with offset: (
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Abidjan",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Accra",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Bamako",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Banjul",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Bissau",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Casablanca",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Conakry",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Dakar",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/El_Aaiun",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Freetown",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Lome",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Monrovia",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Nouakchott",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Ouagadougou",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Africa/Sao_Tome",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "America/Danmarkshavn",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "America/Scoresbysund",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Atlantic/Azores",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Atlantic/Reykjavik",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    "Atlantic/St_Helena",
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
    GMT
4/12/12 8:10:26.963 PM
[0x0-0x4004].com.apple.SetupAssistant
4/12/12 8:10:27.028 PM
[0x0-0x4004].com.apple.SetupAssistant
City found: "Abidjan - Côte d’Ivoire"
4/12/12 8:10:27.028 PM
[0x0-0x4004].com.apple.SetupAssistant
Selection in progress...
4/12/12 8:10:27.064 PM
[0x0-0x4004].com.apple.SetupAssistant
DONE - result: 0 (SUCCESS)
4/12/12 8:10:27.078 PM
Setup Assistant
*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:27.157 PM
Setup Assistant
zset (
    "--osx",
    "--verbose",
    "--offset",
    0
) : terminated with 0
4/12/12 8:10:27.163 PM
Setup Assistant
_setNTPServer Africa/Abidjan (GMT) offset 0 0
4/12/12 8:10:27.164 PM
Setup Assistant
GMTOffset -600 (-21600.000000 seconds)
4/12/12 8:10:27.208 PM
[0x0-0x4004].com.apple.SetupAssistant
City:
Orem
4/12/12 8:10:27.208 PM
[0x0-0x4004].com.apple.SetupAssistant
Country: US
4/12/12 8:10:27.208 PM
[0x0-0x4004].com.apple.SetupAssistant
Region:
UT
4/12/12 8:10:27.208 PM
[0x0-0x4004].com.apple.SetupAssistant
Reset to default: YES
4/12/12 8:10:27.538 PM
ntpd
proto: precision = 1.000 usec
4/12/12 8:10:27.647 PM
[0x0-0x4004].com.apple.SetupAssistant
City found: "Orem, UT - United States"
4/12/12 8:10:27.647 PM
[0x0-0x4004].com.apple.SetupAssistant
Selection in progress...
4/12/12 8:10:27.737 PM
[0x0-0x4004].com.apple.SetupAssistant
DONE - result: 0 (SUCCESS)
4/12/12 8:10:27.754 PM
diskmanagementd
DM ->T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: inHostDiskUDS=0x10cd0ec20=disk0s2=Macintosh HD inWhatStr=RecoveryInfoBaseSystemVersion
4/12/12 8:10:27.800 PM
Setup Assistant
zset (
    "--osx",
    "--verbose",
    "--country",
    US,
    "--region",
    UT,
    "--city",
    Orem,
    "--adaptive"
) : terminated with 0
4/12/12 8:10:27.801 PM
Setup Assistant
_setNTPServer America/Denver (MDT) offset -21600 (Daylight) 0
4/12/12 8:10:27.982 PM
diskmanagementd
DM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did get booterRecoveryUDS=0x10cd0eae0=disk0s3=Recovery HD
4/12/12 8:10:28.016 PM
diskmanagementd
DM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did mount nobrowse; MP=/Volumes/Recovery HD OMS=0x10c91b5c0
4/12/12 8:10:28.016 PM
diskmanagementd
DM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: getting dict from file=/Volumes/Recovery HD/com.apple.recovery.boot/SystemVersion.plist
4/12/12 8:10:28.017 PM
diskmanagementd
DM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: got dict (or NULL=will return err): oooInfoDict=0x7fba92a00c70
4/12/12 8:10:28.019 PM
Setup Assistant
. Found disk (diskIdentifier=disk0s3, mountpoint=/Volumes/Recovery HD, isInternal=1, filesystem=Journaled HFS+ hfs Mac OS Extended (Journaled) Apple_HFS)
4/12/12 8:10:28.065 PM
fseventsd
Logging disabled completely for device:1: /Volumes/Recovery HD
4/12/12 8:10:28.110 PM
Setup Assistant
*********** _hadleNotification MBActivityDidSucceedNotification
4/12/12 8:10:28.115 PM
Setup Assistant
*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:28.118 PM
diskmanagementd
DM ..T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: did if-needed-best-effort unmount
4/12/12 8:10:28.118 PM
diskmanagementd
DM <-T-[DMToolBootPreference recoveryPartitionInfoForVolume:what:dict:]: retErr=0 outInfoDict={
    ProductBuildVersion = 11D50;
    ProductCopyright = "1983-2012 Apple Inc.";
    ProductName = "Mac OS X";
    ProductUserVisibleVersion = "10.7.3";
    ProductVersion = "10.7.3";
4/12/12 8:10:28.499 PM
Setup Assistant
Received 309 bytes of data
4/12/12 8:10:28.499 PM
Setup Assistant
firstPage is not html
4/12/12 8:10:34.529 PM
Setup Assistant
*********** _hadleNotification MBActivityStatusChangedNotification
4/12/12 8:10:34.579 PM
Setup Assistant
*********** _hadleNotification MBActivityDidFailNotification
4/12/12 8:10:35.065 PM
Setup Assistant
Time to move from MBChooseHasCameraOrNot (Reg__HasCameraOrNot) to MBRegisterAccountPicture (Reg_Account_Picture) was 0.484633s
4/12/12 8:10:35.065 PM
Setup Assistant
*********** _hadleNotification MBActivityEndedNotification
4/12/12 8:10:53.000 PM
kernel
MacAuthEvent en0   Auth result for: e0:91:f5:09:84:8e MAC AUTH succeeded
4/12/12 8:10:53.000 PM
kernel
wlEvent: en0 en0 Link UP
4/12/12 8:10:53.000 PM
kernel
AirPort: RSN handshake complete on en0
4/12/12 8:10:54.000 PM
kernel
en0: BSSID changed to e0:91:f5:09:84:8e
4/12/12 8:11:19.779 PM
Setup Assistant
Time to move from MBRegisterAccountPicture (Reg_Account_Picture) to MBFinishGestureTrap (Configured_And_Sent) was 0.598393s
4/12/12 8:11:23.814 PM
[0x0-0x4004].com.apple.SetupAssistant
Found USB Ethernet Device named = IOEthernetInterface
4/12/12 8:11:23.814 PM
[0x0-0x4004].com.apple.SetupAssistant
Found USB Ethernet Device named = AirPort_Brcm4331_Interface
4/12/12 8:11:23.814 PM
[0x0-0x4004].com.apple.SetupAssistant
Found USB Ethernet Device named = AirPort_Brcm4331_Interface
4/12/12 8:11:23.922 PM
loginwindow
DEAD_PROCESS: 52 console
4/12/12 8:11:24.976 PM
loginwindow
Login Window Application Started
4/12/12 8:11:24.985 PM
loginwindow
**DMPROXY** Found `/System/Library/CoreServices/DMProxy'.
4/12/12 8:11:25.058 PM
com.apple.launchctl.LoginWindow
com.apple.findmymacmessenger: Already loaded
4/12/12 8:11:25.093 PM
com.apple.SecurityServer
Session 100009 created
4/12/12 8:11:25.095 PM
loginwindow
Login Window Started Security Agent
4/12/12 8:11:25.133 PM
airportd
_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:11:25.196 PM
SecurityAgent
Echo enabled
4/12/12 8:11:25.196 PM
SecurityAgent
Echo enabled
4/12/12 8:11:25.918 PM
com.apple.loginwindow
Can't find file://localhost/Users/David/Library/Preferences/com.apple.finder.plist
4/12/12 8:11:25.918 PM
com.apple.loginwindow
Pre-generating cache file for user 501
4/12/12 8:11:25.918 PM
com.apple.loginwindow
Home: /Users/David
4/12/12 8:11:25.918 PM
com.apple.loginwindow
Cache folder: /var/folders/y1/xy4qjyrj7k1d8982jk1nhyd80000gn/C/com.apple.QuickLook.thumbnailc ache
4/12/12 8:11:25.918 PM
com.apple.loginwindow
No thumbnails found
4/12/12 8:11:30.604 PM
SecurityAgent
User info context values set for David
4/12/12 8:11:30.604 PM
SecurityAgent
User info context values set for David
4/12/12 8:11:30.728 PM
SecurityAgent
Login Window login proceeding
4/12/12 8:11:30.728 PM
SecurityAgent
Login Window login proceeding
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | name = David, path = /Users/David, homeLoc = (null)
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter setNeedsToUnmountDirVolumeAtLogout:] | mounter calling mechanism to setNeedsToUnmountDirVolumeAtLogout to 0
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | urlAttribute = null
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | homeDirPath did NOT follow a symlink, keeping original path of: /Users/David
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | homeDirMajorType = 1
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter mountStandardDirectoryForUser:atPath:attributes:] | name = David, path = /Users/David, homeLoc = (null)
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMechanism isGuestAccount] | enter
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMechanism isGuestAccount] | Guest account check returning 0
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter setHomeDirType:] | setHomeDirType to 1
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter mountStandardDirectoryForUser:atPath:attributes:] | returning 0
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMounter mountHomeDirectoryForUser:atPath:homeLocation:] | returning 0
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMechanism invoke] | mountHomeDirectoryForUser returns 0
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMechanism updateAndUnlockKeychain] | updateAndUnlockKeychain
4/12/12 8:11:30.740 PM
authorizationhost
DEBUGLOG | -[HomeDirMechanism launchHomeDirFixerToolIfNeeded:] | launchHomeDirFixerToolIfNeeded called with 0
4/12/12 8:11:30.983 PM
loginwindow
Login Window - Returned from Security Agent
4/12/12 8:11:30.990 PM
loginwindow
USER_PROCESS: 242 console
4/12/12 8:11:31.027 PM
airportd
_doAutoJoin: Already associated to “LasVegas71”. Bailing on auto-join.
4/12/12 8:11:31.050 PM
com.apple.launchd.peruser.501
(com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
4/12/12 8:11:31.053 PM
com.apple.launchctl.Aqua
load: option requires an argument -- D
4/12/12 8:11:31.053 PM
com.apple.launchctl.Aqua
usage: launchctl load [-wF] [-D <user|local|network|system|all>] paths...
4/12/12 8:11:31.161 PM
com.apple.launchd.peruser.501
(com.apple.launchctl.Aqua[266]) Exited with code: 1
4/12/12 8:11:31.390 PM
MiniLauncher
Launching iCloud prefs for user 501
4/12/12 8:11:31.517 PM
MiniLauncher
Launch IncompatibleAppDisplay.app (1)
4/12/12 8:11:31.533 PM
UserEventAgent
CaptiveNetworkSupport:CNSServerRegisterUserAgent:187 new user agent port: 25875
4/12/12 8:11:32.818 PM
System Preferences
Database file is missing: /Users/David/Library/Application Support/AddressBook/AddressBook-v22.abcddb
4/12/12 8:11:32.897 PM
Dock
Bookmark failed to issue extension for item /Developer/Applications (depth=1): No such file or directory
4/12/12 8:11:32.928 PM
com.apple.launchd.peruser.501
([email protected][308]) Exited with code: 1
4/12/12 8:11:32.969 PM
coreservicesd
*** process 28 exceeded 500 log message per second limit - remaining messages this second discarded ***
4/12/12 8:11:33.464 PM
System Preferences
Could not find Meta Data for persistent Store
4/12/12 8:11:33.788 PM
com.apple.dock.extra
Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PM
com.apple.dock.extra
2012-04-12 20:11:33.577 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PM
com.apple.dock.extra
Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PM
com.apple.dock.extra
2012-04-12 20:11:33.789 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.791 PM
com.apple.dock.extra
Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.792 PM
com.apple.dock.extra
2012-04-12 20:11:33.791 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.792 PM
com.apple.dock.extra
Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.793 PM
com.apple.dock.extra
2012-04-12 20:11:33.792 com.apple.dock.extra[314:1707] Could not connect the action buttonPressed: to target of class NSApplication
4/12/12 8:11:33.829 PM
System Preferences
The IAAccountDiscovery completed notification
4/12/12 8:11:33.977 PM
System Preferences
kCGErrorIllegalArgument: CGSDeviceCreate: Invalid window
4/12/12 8:11:33.977 PM
System Preferences
kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
4/12/12 8:11:33.977 PM
System Preferences
Failed to create window context device
4/12/12 8:11:33.978 PM
System Preferences
CGWindowContextCreate: failed to create window context delegate.
4/12/12 8:11:33.978 PM
System Preferences
_initWithWindowNumber: error creating graphics ctxt object for ctxt:0x9a03, window:0x0
4/12/12 8:11:33.978 PM
System Preferences
CGPixelAccessLock failed!
4/12/12 8:11:33.979 PM
[0x0-0x11011].com.apple.systempreferences
Apr 12 20:11:33 Davids-MacBook-Air.local System Preferences[285] <Error>: Failed to create window context device
4/12/12 8:11:33.979 PM
[0x0-0x11011].com.apple.systempreferences
Apr 12 20:11:33 Davids-MacBook-Air.local System Preferences[285] <Error>: CGWindowContextCreate: failed to create window context delegate.
4/12/12 8:11:35.060 PM
genatsdb
*GENATSDB* FontObjects generated = 324
4/12/12 8:11:49.294 PM
authorizationhost
SFBuiltinEntitled: System Preferences.app is not entitled for system.preferences.security.remotepair
4/12/12 8:11:49.567 PM
coreservicesd
*** process 28 exceeded 500 log message per second limit - remaining messages this second discarded ***
4/12/12 8:11:50.750 PM
[0x0-0x11011].com.apple.systempreferences
System Preferences(285,0x10f627000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:12:31.366 PM
com.apple.SecurityServer
Session 100007 created
4/12/12 8:12:42.011 PM
[0x0-0x11011].com.apple.systempreferences
System Preferences(285,0x11084f000) malloc: *** auto malloc[285]: error: GC operation on unregistered thread. Thread registered implicitly. Break on auto_zone_thread_registration_error() to debug.
4/12/12 8:13:35.534 PM
Firewall
Deny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:14:32.734 PM
helpd
CarbonCore.framework, Our status with coreservicesd is unusual, 2, and things likely will stop working.
4/12/12 8:14:32.734 PM
helpd
CarbonCore.framework: Unable to connect to coreservicesd. Things likely won't work. Sorry.
4/12/12 8:14:40.049 PM
Firewall
Deny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17
4/12/12 8:15:24.095 PM
Firewall
Deny netbiosd data in from 192.168.1.1:2048 to port 137 proto=17

Ive tried that but when Im logged in I dont have all the permmisions I should have so it just runs the test for my usernames own little virtual world. Ive been using macs for over a decade now and I have never had my computer do anything like this. while sitting in front of my screen I watched the mouse go to some personal files and change the permissions and then covered their tracks by changing the timestamp on the file dates back. I watched it happpen while all internet conections were off. I had my identity stolen, my facebook password changed, my email accounts closed out. and my firmware password changed all within two weeks of the origninal boot date

Similar Messages

Does the Flashback malware have an effect on OS X systems without java installed?

Does the Flashback malware have an effect on OS X systems without java installed? Just asking since i do not have java installed...

It's not likely, but better safe than sorry. See
Helpful Links Regarding Flashback Trojan
Visit Thomas Reed's site for insight and help: Mac Malware Guide
A Google search can reveal a variety of alternatives on how the remove the trojan should your computer get infected. This can get you started. However, be careful about what you do as new variants of the malware circumvent the efforts of earlier tools.
Also see Apple's article About Flashback malware.
Apple has released Java updates for Snow Leopard and Lion users:
Java for OS X Lion 2012-003; available only for users of Lion with Java installed.
Java for Mac OS X 10.6 Update 8; available only for users of Snow Leopard.
Flashback malware removal tool; available only for users of Lion without Java installed.
Install whichever shows up in Software Update. It removes the malware (if present), updates Java (if present) and tightens up Java settings for the future. You may download from Apple's web site instead of using Software Update, but it's important to know which one to get, because the other two won't work for you.
For the truly paranoid see 10 Simple Tips for Boosting The Security Of Your Mac.

HT5244 how do i know if the flashback malware is on my system?

how do i know if the flashback malware is on my system? And how can i get rid of it.?
I cant upgrade to a higer os.. becouse my powermac does not have intel.. processors.
Modelnaam:          Power Mac G5 Quad
Modelaanduiding:          PowerMac11,2
Processornaam:          PowerPC G5 (1.1)
Processorsnelheid:          2.5 GHz
Aantal processors:          4
L2-cache (per processor):          1 MB
Geheugen:          8 GB
Bussnelheid:          1.25 GHz

X423424X wrote:
For some, if not complete peace of mind, go to F_Secure's Flashback Removal Tool web page, download their Flashback trojan detection/removal tool, and follow the instructions you find there.
Turns out their tool won't run on a PPC Mac (unless you extract and modify the AppleScript so it will run the shell script).
The only one I know of that does is Norton's. I glanced over it and gave it a test run. Looks OK, but I cannot attest to how well it might work.
And as has already been said, nobody we've run into here using a PPC Mac has been shown to be infected and all the samples I have been able to examine contained Intel only executables.

HT5246 I just run the Flashback malware removal tool, and then nothing happens. Will it be a problem? and if I have java installed and I disabled it during the installation, will my status as my machine has not java installed? thanks.

I just run the Flashback malware removal tool, and then nothing happens. Will it be a problem? and if I have java installed and I disabled it during the installation, will my status as my machine has not java installed? thanks.

Will it be a problem?
No.
...if I have java installed and I disabled it during the installation, will my status as my machine has not java installed?
Java is still installed.

Snow Leopard and the Flashback Malware

I am visiting my elderly mother and (like an idiot) responded to a prompt to update Adobe Flash last night. I have checked for the presence of DYLD_INSERT_LIBRARIES per C|Net's article on how to detect and remove the Flashback malware and it is not present in Mac OSX, Safari or Firefox. Can I relax? Do I still need to completely disable Flash in Preferences? She does not see well and is trained to automatically update via Software Update for Mac.
Also, her computer is running VERY slow. Any ideas on how to troubleshoot the speed?
Thanks in advance for any help! Happy Mother's Day!
Marsue
Her iMac:
Model Name:          iMac
Model Identifier:          iMac5,1
Processor Name:          Intel Core 2 Duo
Processor Speed:          2.16 GHz
Number Of Processors:          1
Total Number Of Cores:          2
L2 Cache:          4 MB
Memory:          1 GB
Bus Speed:          667 MHz
Running Snow Leopard 10.6.8

If you have installed the appropriate security updates then you computer is protected. See
Helpful Links Regarding Malware Protection
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
   Mac OS X Snow Leopard and malware detection
   OS X Lion- Protect your Mac from malware
   OS X Mountain Lion- Protect your Mac from malware
   About file quarantine in OS X
If you require anti-virus protection I recommend using ClamXav.
Mac OS X Snow Leopard and malware detection.

I get redirected to unwanted web sites during searches from the browser ONLY, never from the toolbar. Is this the same malware problem as discribed for redirects from BOTH the browser and the toolbar?

I get redirected to unwanted web sites during searches from the browser ONLY, never from the toolbar. Is this the same malware problem as discribed for redirects from BOTH the browser and the toolbar?
== This happened ==
Every time Firefox opened
== was happening with Internet Explorer, continues with Firefox

Did you do a malware check?
Do a malware check with a few malware scan programs.
You need to use all programs because each detects different malware.
Make sure that you update each program to get the latest version of the database.
http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
http://www.superantispyware.com/ - SuperAntispyware
http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]
(the MozillaZine KB is currently down, so you may need to try again later)

Does the latest osx update remove the flashback malware

Does the latest osx update remove the flashback malware?

From Thomas A. Reed's post:
There is malware (called Flashback) that has been actively taking advantage of Java vulnerabilities on Macs, installing as a drive-by download with no user interaction required when visiting a malicious web site. Apple's latest Java update patches these vulnerabilities, though it's still possible for that malware to use social exploits to trick you into installing it. You would do best to turn off Java in your web browser... you probably won't miss it at all.
See:
http://www.reedcorner.net/news.php?tag=flashback

HT5246 How do you run the Flashback malware removal tool?

How do you run the Flashback malware removal tool?
Thanks

I am away from my computer and it is somewhat awkward to reply on an iPad.
> I had already done what softwater instructed. I've read that it deletes itself on other threads, but it's still in my Finder as a Device. That's what confused me, because it doesn't appear to have deleted itself.
Sorry, I wasn't clear. That is not the tool. It is the .dmg image mounted to your desktop. Next to the name you will see a small eject icon. Click on it or highlight it and choose "Eject" from the appropriate Finder menu. Once that happens you can drag the .dmg file to the trash as it will not delete itself.
> I only recently upgraded to Snow Leopard and then Lion, in quick succession. My understanding is that there were (are) variants that would have infected my computer prior to my upgrading my OS to Lion. Before the upgrade, they were Adobe, but afterward they were Java. Could it be that be that the pop-ups were/are some other variant?
Difficult to say for certain. Apple says it deletes all the common variants but does not specify which and I haven't seen the results of any testing done to verify that it finds and deletes those. The only dialogs that appeared with the initial variants were for FlashPlayer. They are depicted in the descriptions for Flashback-A on F-Secures site if you want to take a look. There have been none that I am aware of for Java, so that is probably either a web page or application that needs Java to run giving you that alert.
> If the Flashback malware removal tool didn't find anything and my Software Update is current, does that mean the vulnerability has been fixed? At least for now? I understand that I Software Update will prompt downloads in the future if and when it needs to be patched again.
The vulnerability is in Java, nowhere else, so if you don't have it installed there was nothing to fix.
If you download Java in the future it will be the latest version Apple has available at the time, which hopefully will not be subject to exploitation, yet...

HT202447 Can the Flashback malware infect my iPad?

As well as my iMac, I use a first generation iPad which I sync with the Mac, which runs Snow Leopard.
Can the Flashback malware infect my iPad?

Many thanks Roger.
I've got Intego VirusBarrier on the iMac, which I also use to scan my iPad periodically.
No issues found on either, so good news!

HT5246 So, how is the flashback malware removal tool executed?

Is this automatic once you download it through software update? Why doesn't the article explain this?

Your home free just like the other 99.5% of the Mac users who didn't have it, seeing as only 0.5% of the Mac were infected.
Certainly was a lot of noise over just about nothing wasn't it.
Allan

Flashback malware--once one downloads and installs the program, where the heck can it be found on the computer to run it?

I can download and install the Flashback Malware detection and removal software--but then it vanishes and I cannot locate it anywhere on the machine even though it says it's installed properly.

Oh, fuhgeddaboutit! I see that it simply checks and self-deletes if no malware.

I broke Safari trying to get rid of Flashback malware. How do I fix it?

I foolishly tried following the instructions on the CNET site for finding if I have the Flashback malware and supposedly fixing it:
http://reviews.cnet.com/8301-13727_7-57410096-263/how-to-remove-the-flashback-ma lware-from-os-x/?tag=mncol;txt
On the page, it says to run this command in Terminal and that if it returns a path result that you have the malware:
defaults read /Applications/Safari.app/Contents/Info LSEnvironment
When I ran the above, it gave me the following:
"DYLD_INSERT_LIBRARIES" = "/Applications/safari.app/contents/resources/.PassmarkMonitorTestV.xsl"
Based on the instructions on the CNET site, I believed that this file was infected and I deleted it, even though it was a hidden file. I followed the rest of the instructions on the page as well, which would supposedly "reset" the infected application, but this didn't work.
I now can't run Safari, It would apear that the file deleted was necessary for it to run.
I tried downloading Safari from the apple.com website so that I can reinstall it, but when I ran the installer, it said I couldn't use it because there was a newer version already on my machine.
I'm running Mac OS X Snow Leopard. I'm not sure what version of Safari I'm running (I can't open Safari) but it must be higher than the version on Apple's site, which is 5.1.4.
Here is the Safari error report:
Process:
Safari [516]
Path:
/Applications/Safari.app/Contents/MacOS/Safari
Identifier:
com.apple.Safari
Version:
Build Info:
WebBrowser-75345503~2
Code Type:
X86-64 (Native)
Parent Process: launchd [98]
Date/Time:
2012-04-05 21:14:59.436 -0400
OS Version:
Mac OS X 10.6.8 (10K549)
Report Version: 6
Interval Since Last Report:
2686299 sec
Crashes Since Last Report:
13
Per-App Crashes Since Last Report:   7
Anonymous UUID:
Exception Type: EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000002, 0x0000000000000000
Crashed Thread: 0
Dyld Error Message:
could not load inserted library: /Applications/Safari.app/Contents/Resources/.PassmarkMonitorTestV.xsl
Binary Images:
0x7fff5fc00000 -
0x7fff5fc3be0f dyld 132.1 (???) <29DECB19-0193-2575-D838-CF743F0400B2> /usr/lib/dyld
How can I repair my Safari installation?
<Edited By Host>

If you’re certain you know when the infection happened, and you back up with Time Machine or something similar, you can save yourself a lot of time by restoring your whole system from the most recent snapshot taken before it was infected. Then take Steps 7, 8, and 10 below.
How can you tell when the infection took place? All you can be sure of is that you were infected some time before the problems started. You may have visited a blog that prompted you to install some kind of software, or a “certificate.” If you remember doing that recently, mention it in a reply, but don’t post a link.
If you don’t know when you were infected, there's no easy, reliable way to remove the malware, because it's constantly changing. There are differences of opinion on this site as to the best of course of action, so you should do your own research before deciding how to proceed.
I suggest you take the following steps:
1. Back up all data to at least two different devices, if you haven't already done so.
2. Boot from your recovery partition (if running Mac OS X 10.7 or later) or your installation disc (if running an earlier version of the Mac OS), launch Disk Utility, and erase the startup volume. This action will destroy all data on the volume, so you must be sure of your backups.
3. Install the Mac OS.
4. Reboot and go through the initial setup process to create an account with the same name as your old one. Don’t import anything from your backups at this stage.
5. If running Mac OS X 10.6.x or earlier, run Software Update. You may have to run it more than once to fully update your system.
6. Restore the contents of the top-level subfolders of your home folder except “Library” from the most recent backup. The Library folder may contain components of the malware. It’s best not to restore anything from there. If you must do so, restore only files, not whole folders with all their contents, and only if (a) they’re visible in the Finder, and (b) you know what they are, and (c) they haven’t been altered. Don’t restore anything in the home subfolder Library/LaunchAgents, if it exists, or any hidden files or folders, no matter where they are.
7. If you’re running Mac OS X 10.5.8 or earlier, launch Safari and select Safari ▹ Preferences… ▹ Security from the menu bar. Uncheck the box labeled Enable Java. Because of known bugs, Java in those OS versions is unsafe to use on the Internet. (Note: I’m not referring to JavaScript, which is unrelated to Java, despite the similar names.) If you’re running Mac OS 10.6.8 or later, you should still disable the Java web plugin unless you really need it. Few websites have legitimate Java content nowadays. If you encounter one that does, enable Java temporarily.
8. Change every Internet password you have, starting with banking passwords. Check all financial accounts for unauthorized transactions. Take this step only after you’ve secured your system in the preceding steps, not before.
9. Reinstall your third-party software from fresh downloads or original media, not from backups which may be contaminated.
10. If you use any third-party web browsers, disable Java in their preferences. As with step 7, this step is mandatory if you’re running any version of Mac OS X older than 10.6. Otherwise it’s optional, but recommended.

I have not been able to find any information re: the Flashback virus and Apple remedies on the Apple website. Am I missing something?

I have not been able to find any information re: the Flashback virus on the Apple website. Has Apple put out anything on this?

The ‘Flashback Trojan’:
A version of an existing Trojan Horse posing as a legitimate Flash Player installer (named “Flashback.A” by a security firm) is designed to disable updates to the default Mac OS X anti-malware protection system, potentially leaving the system open to the manual installation of other malware without any system warnings. The most recent versions bypass any user action and automatically installs itself after an affected website is visited.
http://www.appleinsider.com/articles/11/10/19/fake_adobe_flash_malware_seeks_to_ disable_mac_os_x_anti_malware_protection.html
(Adobe is aware of malware posing as its Flash Player and warns users to ignore any updates that didn't originate on its own servers. "Do not download Flash Player from a site other than adobe.com," said David Lenoe, Adobe's product security program manager, in an entry on Adobe Product Security Incident Response Team's PSIRT blog. "This goes for any piece of software (Reader, Windows Media Player, QuickTime, etc). If you get a notice to update, it's not a bad idea to go directly to the site of the software vendor and download the update directly from the source. If the download is from an unfamiliar URL or an IP address, you should be suspicious.")
Flashback Trojan - Prevention of infection:
In order to prevent a potential infection with “Flashback” Trojans, Mac users should always obtain their copy of Adobe Flash Player directly from Adobe’s official website and to disable the "Open 'safe' files after downloading" option in Safari Preferences/General to avoid automatically running files downloaded from the Internet. Also, do not turn on Java in Safari Preferences/Security. Few websites use Java. Javascript is something entirely different and should be left active.
The Flashback Trojan does not affect PPC (non-Intel) Macs, nor has it been noted to affect users running Tiger OS 10.4.11 or Leopard OS 10.5.8.
Last, but by no means least, using Open DNS is the simplest way of preventing infection in the first place. Open DNS also protects against phishing attacks, re-directs, speeds up your internet connection, and works for all users of OS X from Tiger upwards:
http://blog.opendns.com/2012/04/09/worried-about-mac-malware-just-set-up-opendns /
How to get it:
https://store.opendns.com/get/home-free
Flashback Trojan - Detection and Removal
Users with Intel Macs running Snow Leopard OS 10.6 or Lion OS 10.7 should ensure that they have downloaded all the recent Java updates from Apple, which are designed to prevent infection and also remove any infection already present.
New Macs running Lion do not have either Flash Player nor Java installed. If you running Lion and have not already downloaded and installed Java, you should download the ‘Flashback malware removal tool’ from Apple: http://support.apple.com/kb/HT5246 (356KB) which includes the same code as the Java update that plugged a security hole which allowed the malware to automatically install itself without admin authorization.
You can also use this to check whether you have been infected (for Intel Macs only) and remove it if required:
http://www.macupdate.com/app/mac/42571/anti-flashback-trojan
Flashback Trojan - Detection, and how to remove (with caution) if you are running other browsers than Safari:
http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml

What to do about flashback malware?

How do I know if I'm a victim of the flashback malware? What should I do about it?

Read this article from Apple's knowledge base about Flashback.

Flashback malware removal tool update

jst got the flashback malware update,whch states tht its ment for mac witout java installed,aftr checking the java pref in utilities under applications it stated that there was no java installed in my mac,bt after updatng there was no report whether malware was removed

Is your mac supposed to restart after downloading and installing the update? Because mine didn't and I was surprised because it usually restarts whenever I install updates. Is this normal?

Is this the flashback malware?

Similar Messages

Maybe you are looking for