Mackeeper virus - how to get rid
I downloaded some software last week - I honestly can't remember what it was called but I was in a rush to do something. Anyway afterwards I had a symbol at the top of the homepage on the banner at the top of a sort of ghost face in a helmet called Mackeeper. I deleted Mackeeper as I saw it, but now I have a virus which is all over my internet - constantly popping up new pages and affecting the typing on ever webpage. I tried to follow instructions on here on how to delete it but I can't find it on the activity monitor - there's nothing under any of the usual virus names!! Any help would be hugely appreciated - making using my macbook so stressful!!
You are suffering from Adware, not MacKeeper. Here are some useful links from fellow Community Support member Thomas Reed:
The Safe Mac - ADWARE REMOVAL
The Safe Mac » Adware Removal Tool
The Safe Mac - AdwareMedic
The Safe Mac » Mac Malware Guide
Cheers,
GB
Similar Messages
-
I've got OSX/Genieo.A virus on my mac and don't know how to get rid of it and why I have it
I've got OSX/Genieo.A virus on my mac and don't know how to get rid of it and w I have it
There is no need to download anything to solve this problem.
You installed the "Genieo" malware. The product is a fraud, and the developer knowingly distributes an uninstaller that doesn't work. I suggest the procedure below to disable Genieo. This procedure may leave a few small files behind, but it will permanently deactivate the malware (as long as you never reinstall it.)
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
Triple-click anywhere in the line below on this page to select it:
/Library/Frameworks/GenieoExtra.framework
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.
If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder should open with an item named "GenieoExtra.framework" selected. Move that item to the Trash. You'll be prompted for your administrator password.
Move each of these items to the Trash in the same way:
/Applications/Genieo.app
/Applications/Reset Search.app
/Applications/Uninstall Genieo.app
/Library/LaunchAgents/com.genieo.completer.update.plist
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
/usr/lib/libgenkit.dylib
/usr/lib/libgenkitsa.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib
~/Library/Application Support/com.genieoinnovation.Installer
~/Library/LaunchAgents/com.genieo.completer.download.plist
~/Library/LaunchAgents/com.genieo.completer.update.plist
If there are other items with a name that includes "Genieo" or "genieo" alongside any of those listed above, move them as well. Some of these items will be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
Restart and empty the Trash. Don't try to empty the Trash until you have restarted.
Step 2
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including ones called "Genieo" or "Omnibar," and any that have the word "Spigot" or "InstallMac" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Your web browser(s) should now be working, and you should be able to reset the home page and search engine. If not, stop here and post your results.
Make sure you don't repeat the mistake that led you to install this trojan. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad has a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If youever download a file that isn't obviously what you expected, delete it immediately.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
Finally, be forewarned that when Genieo is mentioned on this site, the attacker sometimes shows up under the name "Genieo support." He will tell you to run a fake "uninstaller." As he intends, the uninstaller does not completely remove the malware, and is in fact malware itself. -
How to get rid of the java update virus?
Everytime i go on a web page something pops up saying to install Java Runtime Environment in order to web content and it gives me the option to click more info (to go to the page to download the Java Runtime Environment) OR ok. Before i clicked ok until it continued to pop and and began to annoy me so i decided to install it. It still pops up and won't go away. I found out it is a virus and i don't know how to get rid of it.
PLEASE HELP!Most likely, you have a web plugin that depends on the Java runtime distributed by Apple, such as the Facebook video calling plugin or the "NexDef" plugin for watching baseball streams. If you no longer need the plugin, remove it. Otherwise, install Java.
-
Hi, I have this green mark (with pointing arrow looks like a link) on some words show on my window screen when I open a web page, I wonder if it is a virus link or such. Need help how to get rid of it. Here's the example:
WING
GAMES
MAJORITY
ThanksIf the third link you posted (the link containing the word "majority") does not look like the following then you inadvertently installed adware.
That particular page should resemble the following:
The word "majority" in the third paragraph should not be a link and should not have the green icon associated with it.
To learn how this may have occurred, and how to prevent it from occurring in the future, read How to install adware
Most so-called "news" websites are nothing more than entertainment outlets that cater to prurient interests, and contain advertisements that leave the user about three clicks away from installing junk. If you decide to frequent those websites, Safari's "Reader" feature helps minimize that exposure.
Try it: -
I have got mackeeper and smart search.net on my Mac air. I am new to mac's so i am so lost in how to get rid of things. Im not sure how i got it but i just want it gone now mac book is only a couple months old so running all latest programmes on it. Can anyone help me please?
You may have installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
If you have trouble following those instructions, see below.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
com.something.daemon.plist
and
com.something.helper.plist
Here something is a variable string of characters, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
com.something.agent.plist
where the string something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
something
where something is the same string you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked. -
i have a problem mackeeper keep opening up another tab and these little green circle stuff keep popping up on the page and overtime my cursor hover over it it pops up a little box with stuff in it does anyone have an idea how to get rid of it?
You installed a variant of the "VSearch" trojan. Remove it as follows.
This malware has many variants. Anyone else finding this comment should not expect it to be applicable.
Back up all data before proceeding.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.2c232f1e4d12129e.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.2c232f1e4d12129e.daemon.plist
/Library/LaunchDaemons/com.2c232f1e4d12129e.helper.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/2c232f1e4d12129e
/System/Library/Frameworks/v.framework
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. -
Anyone no how to get rid of mackeeper malware
idownloaded mackeeper as it said recommend by apple wish i didnt
does anyone on how to get rid of the malware that c
downloaded with it please"MacKeeper" is a scam with only one useful feature: it deletes itself.
First, back up all data.
Note: These instructions apply to the version of the product that I downloaded and tested in early 2012. I can't be sure that they apply to other versions.
If you have incompletely removed MacKeeper—for example, by dragging the application to the Trash and immediately emptying—then you'll have to reinstall it and start over.
IMPORTANT: "MacKeeper" has what the developer calls an “encryption” feature. In my tests, I didn't try to verify what this feature really does. If you used it to “encrypt” any of your files, “decrypt” them before you uninstall, or (preferably) restore the files from backups made before they were “encrypted.” As the developer is not trustworthy, you should assume that the "decrypted" files are corrupt unless proven otherwise.
In the Finder, select
Go ▹ Applications
from the menu bar, or press the key combination shift-command-A. The "MacKeeper" application is in the folder that opens. Quit it if it's running, then drag it to the Trash. You'll be prompted for your login password. Click the Uninstall MacKeeper button in the dialog that appears. All the other functional components of the software will be deleted. Restart the computer and empty the Trash.
☞ Quit MacKeeper before dragging it to the Trash.
☞ Let MacKeeper delete its other components before you empty the Trash.
☞ Don't try to drag the MacKeeper Dock icon to the Trash.
☞ Don't try to remove MacKeeper while running in safe mode. -
Sound Virus - Any suggestions on how to get rid of it
The last couple of days I have sound playing in the background that is not from any program I'm running. Sounds like a **** playing but sound only no video. Any suggestions on how to get rid of it?
HI,
If a widget isn't the culprit, open System Preferences/Universal Access and selec the Seeing tab.
Make sure Voice Over is not selected.
Carolyn -
I tried to download Tetris yesterday onto my laptop - not quite what you would call an ambitious gamer!
As it was doing so I noticed that the software was trying to alter some settings in the registry.
Now whenever I am in Mozilla I get a pop up saying my PC has 7 window errors and can run faster. I cannot see how to get rid of this.
When I copy the link location it says:
https://secure-ams.adnxs.com/click?KGIRww5jtj8oYhHDDmO2PwAAAICXbtI_KGIRww5jtj8oYhHDDmO2Py8cBrFeTaRkUe4MK_5ewBbHVyJRAAAAAMypEAA_AQAAPwEAAAIAAAAwB0YA6-ECAAAAAQBVU0QAVVNEACwB-gDulQAA42kAAQMCAQUAAIQARiCzrAAAAAA./cnd=%21ngVsMQjTqzoQsI6YAhjrwwsgBA../referrer=https%3A%2F%2Fwww.google.co.uk%2F/clickenc=http%3A%2F%2Fappround.net%2Fpcperformer%2Fst6%2Fpcperformer-st6.php%3Fcid%3D3902%26tid%3Dams1CNHcs9ji35fgFhACGK-4mIjrq5PSZCIOMjEzLjc4LjE0NC4yMTQoAQ..
and here is the image
Any ideas?Such a pop-up is likely caused by malware installed on your computer.
Do a malware check with some malware scanning programs on the Windows computer.<br />
You need to scan with all programs because each program detects different malware.
Make sure that you update each program to get the latest version of their databases before doing a scan.
*Malwarebytes' Anti-Malware:<br>http://www.malwarebytes.org/mbam.php
*SuperAntispyware:<br>http://www.superantispyware.com/
*Microsoft Safety Scanner:<br>http://www.microsoft.com/security/scanner/en-us/default.aspx
*Windows Defender: Home Page:<br>http://www.microsoft.com/windows/products/winfamily/defender/default.mspx
*Spybot Search & Destroy:<br>http://www.safer-networking.org/en/index.html
*Kasperky Free Security Scan:<br>http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
*http://support.kaspersky.com/viruses/solutions?qid=208280684
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked -
Got hit by a redirect website virus. Cant get rid of it
Got hit with a virus. The page is called www.forextrendy.com and also V9.com These re-direct me from your page and will not close. Can you offer some advice on how to get rid of them.
Sorry, pushed the wrong button.
Install '''''[https://addons.mozilla.org/en-US/firefox/addon/disallow-script-button/?src=collection&collection_id=33bf10fa-666d-45a2-9bc9-491ce21671c6 disallow Script Button]''''' {web link}
The Disallow Script button looks like a letter "M" and the title is the Minus Script,
drag and drop the button on a toolbar. If the button is not displayed then nothing
operates, except rules for plugins.
Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
You can try these free programs to scan for malware, which work with your existing antivirus software:
* [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
* [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
* [http://support.kaspersky.com/faq/?qid=208283363 TDSSKiller - AntiRootkit Utility]
* [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
* [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
[http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
Did this fix your problems? Please report back to us! -
How to get rid of pop-ups on my macBook air?
One of my roommates recently downloaded torrent on my macbook air to watch a movie, and since then I have been experiencing popups every time I open a new page on safari. Also, my search engine has switched to something known as search-quick? I've tried a few different mac detox sites to no avail. Very frustrated. Any suggestions on how to get rid of this "virus" and pop-ups would be much appreciated!
There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
com.something.daemon.plist
and
com.something.helper.plist
Here something is a variable word, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes the word is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
com.something.agent.plist
where the word something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
something
where something is the same word you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked. -
how to get rid of pop ups
Could you please help us repair our Macbook after downloading MPlayerX. Followed your instructions from an earlier post and the result is as follows, hoping it helps.
Thanks in anticipation
Start time: 21:18:19 03/21/15
Revision: 1237
Model Identifier: MacBook7,1
Memory: 2 GB
System Version: Mac OS X 10.6.8 (10K549)
Kernel Version: Darwin 10.8.0
64-bit Kernel and Extensions: No
Time since boot: 35 days 20:35
UID: 501
Graphics/Displays
NVIDIA GeForce 320M
Color LCD (Main)
Display Connector
SerialATA
Hitachi HTS545025B9SA02
VM
Pageouts: 903201
File opens (per sec)
RealPlayer Down (UID 501) => /private/var/folders/rG/rGFFQw8IFXCCMRtksag4TE+++TI/-Tmp-/TemporaryItems (status 0): 3
XPC cache: No
Listeners
cupsd: ipp
krb5kdc: kerberos
launchd: afpovertcp
launchd: microsoft-ds
launchd: netbios-ssn
launchd: ssh
Diagnostic reports
2015-03-15 plugin-container crash
2015-03-21 InstallerT crash
2015-03-21 plugin-container crash
I/O errors
disk1s1: do_jnl_io: strategy err 0x6 2
disk6s2: do_jnl_io: strategy err 0x6 1
Volumes
disk0s2:
disk3s1:
disk1s1:
HCI errors
Bus: 0x26 Addr: 2 Errors: 15
USB
USB High-Speed Bus
Host Controller Location: Built-in USB
Host Controller Driver: AppleUSBEHCI
Bus Number: 0x24
Built-in iSight
Location ID: 0x24600000 / 2
Current Available (mA): 500
Current Required (mA): 500
USB High-Speed Bus
Host Controller Location: Built-in USB
Host Controller Driver: AppleUSBEHCI
Bus Number: 0x26
USB Bus
Host Controller Location: Built-in USB
Host Controller Driver: AppleUSBOHCI
Bus Number: 0x06
BRCM2070 Hub
Location ID: 0x06600000 / 3
Current Available (mA): 500
Current Required (mA): 94
Bluetooth USB Host Controller
BSD Name: en4
Location ID: 0x06630000 / 4
Current Available (mA): 500
Current Required (mA): 0
Apple Internal Keyboard / Trackpad
Location ID: 0x06300000 / 2
Current Available (mA): 500
Current Required (mA): 40
USB Bus
Host Controller Location: Built-in USB
Host Controller Driver: AppleUSBOHCI
Bus Number: 0x04
Shutdown codes
-60 1
Kernel log
Sat Mar 21 12:43:21 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (d2,2ee6)->(db,2d69).
Sat Mar 21 12:43:26 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (ec,269d)->(ee,51d).
Sat Mar 21 12:43:30 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (f1,231d)->(f9,2375).
Sat Mar 21 12:43:31 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (fb,1375)->(fd,2759).
Sat Mar 21 12:43:35 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (10a,1b06)->(10d,149e).
Sat Mar 21 12:43:56 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (147,736)->(157,751).
Sat Mar 21 12:44:50 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (21a,1c72)->(21b,224f).
Sat Mar 21 12:45:25 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (296,2098)->(297,2f45).
Sat Mar 21 12:45:58 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (30d,2c50)->(30f,16ee).
Sat Mar 21 12:46:01 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (315,1eee)->(318,a67).
Sat Mar 21 12:46:02 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (31b,2c67)->(31d,44e).
Sat Mar 21 13:13:48 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (1b9,2be3)->(1bc,1bd4).
Sat Mar 21 13:14:01 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (1e8,214)->(1eb,29a9).
Sat Mar 21 13:14:28 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (24c,e76)->(24d,2a38).
Sat Mar 21 13:14:48 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (292,2d96)->(294,a78).
Sat Mar 21 13:15:33 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (333,2235)->(335,e78).
Sat Mar 21 13:22:55 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (966,13c0)->(967,280d).
Sat Mar 21 14:10:23 Sound assertion "0 != result" failed in AppleMikeyDevice at line 765 goto handler
Sat Mar 21 14:10:23 Sound assertion "0 != result" failed in AppleMikeyDevice at line 795 goto handler
Sat Mar 21 14:10:23 Sound assertion "0 != dispatchToStateMachinePosition ( dequeuedEvent )" failed in AppleMikeyDevice at line 721 goto handler
Sat Mar 21 14:19:50 IOAudioStream[0x5da9f00]::clipIfNecessary() - Error: attempting to clip to a position more than one buffer ahead of last clip position (7ec,185a)->(7ed,246d).
Sat Mar 21 17:31:29 Sound assertion "0 != result" failed in AppleMikeyDevice at line 765 goto handler
Sat Mar 21 17:31:29 Sound assertion "0 != result" failed in AppleMikeyDevice at line 795 goto handler
Sat Mar 21 17:31:29 Sound assertion "0 != dispatchToStateMachinePosition ( dequeuedEvent )" failed in AppleMikeyDevice at line 721 goto handler
Sat Mar 21 20:24:16 jnl: disk6s2: close: journal 0x55f7e04, is invalid. aborting outstanding transactions
System log
Sat Mar 21 13:23:44 /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/pl ugin-container ava error: addNewReferenceEntryMMCO ref (3) buffer is full (retire_cnt = 0, fnumMin = 4, lte = 0, sidx = 4, sid = 12 *)
Sat Mar 21 16:24:51 mDNSResponder PenaltyTimeForServer: PenaltyTime negative -107383, (server penaltyTime 1210501235, timenow 1210608618) resetting the penalty
Sat Mar 21 19:36:30 firefox CGAffineTransformInvert: singular matrix.
Sat Mar 21 19:36:30 firefox CGAffineTransformInvert: singular matrix.
Sat Mar 21 19:36:30 firefox CGAffineTransformInvert: singular matrix.
Sat Mar 21 19:36:31 firefox CGAffineTransformInvert: singular matrix.
Sat Mar 21 19:36:31 firefox CGAffineTransformInvert: singular matrix.
Sat Mar 21 19:36:31 firefox CGAffineTransformInvert: singular matrix.
Sat Mar 21 20:23:16 mDNSResponder PenaltyTimeForServer: PenaltyTime negative -12076, (server penaltyTime 1224901235, timenow 1224913311) resetting the penalty
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:24:16 kernel
Sat Mar 21 20:27:34 fseventsd event logs in /Volumes/Backups/.fseventsd out of sync with volume. destroying old logs. (101926 0 102146)
Sat Mar 21 20:27:34 fseventsd log dir: /Volumes/Backups/.fseventsd getting new uuid: UUID
Sat Mar 21 20:31:49 com.apple.backupd Event store UUIDs don't match for volume: Macintosh HD
Sat Mar 21 20:31:49 com.apple.backupd Node requires deep traversal:/ reason:must scan subdirs|new event db|
Console log
Sat Mar 21 21:15:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:15:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:15:38 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:15:48 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:15:58 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:16:08 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:16:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:16:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:16:38 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:16:48 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:16:58 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:17:08 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:17:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:17:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:17:38 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:17:48 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:17:58 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:18:08 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:18:18 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:18:28 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:18:39 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:18:49 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:18:59 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:19:09 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Sat Mar 21 21:19:19 com.apple.launchd.peruser.501 cn.com.zte.mobile.usbswapper.plist: posix_spawn("/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile", ...): No such file or directory
Daemons
cn.com.zte.PPPMonitor.plist
com.adobe.fpsaud
com.apple.suhelperd
- status: 2
com.openssh.sshd
com.rim.BBDaemon
com.vix.cron
com.zeobit.MacKeeper.AntiVirus
com.zeobit.MacKeeper.plugin.AntiTheft.daemon
de.novamedia.VMRServer
jp.co.canon.MasterInstaller
org.apache.httpd
org.cups.cupsd
org.ntp.ntpd
org.postfix.master
org.samba.nmbd
org.samba.smbd
org.x.privileged_startx
Agents
cn.com.zte.mobile.usbswapper.plist
- status: 1
com.Installer.completer.download
com.Installer.completer.ltvbit
com.Installer.completer.update
com.apple.Kerberos.renew.plist
- status: 1
com.apple.mrt.uiagent
- status: 255
com.codecm.uploader
com.google.keystone.user.agent
com.jdibackup.ZipCloud.notify
com.rim.BBLaunchAgent
com.rim.RimAlbumArtDaemon
com.sierrawireless.SwitchTool
com.spotify.webhelper
com.zeobit.MacKeeper.Helper
org.openbsd.ssh-agent
org.x.startx
User overrides
jp.co.canon.Inkjet_Extended_Survey_Agent
Startup items
/Library/StartupItems/iCoreService/iCoreService
/Library/StartupItems/iCoreService/StartupParameters.plist
Global login items
/Library/Application Support/TrendMicro/TmccMac/TmLoginMgr.app
/Library/Application Support/BlackBerry/BlackBerry Device Manager.app
User login items
iTunesHelper
- missing value
AirPort Utility
- missing value
Kindle
- /Applications/Kindle.app
Dropbox
- /Applications/Dropbox.app
Android File Transfer Agent
- /Users/USER/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app
fuspredownloader
- missing value
RealPlayer Downloader Agent
- /Users/USER/Library/Application Support/RealNetworks/RealPlayer Downloader Agent.app
KiesAgent
- /Applications/Kies.app/Contents/MacOS/KiesAgent.app
TmLoginMgr
- /Library/Application Support/TrendMicro/TmccMac/TmLoginMgr.app
BlackBerry Device Manager
- /Library/Application Support/BlackBerry/BlackBerry Device Manager.app
Firefox extensions
Google Translator for Firefox
Words-Chinese Pinyin Dictionary
Test Pilot
Widgets
Currency Converter
Restricted files: 2944
Lockfiles: 25
Universal Access
Contents of /Library/LaunchAgents/cn.com.zte.mobile.usbswapper.plist
- mod date: Sep 27 21:40:29 2011
- checksum: 1550256407
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>cn.com.zte.mobile.usbswapper.plist</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>program</key>
<string>/Applications/Join Me.app/Contents/Resources/Mac_SwapperDemonForMobile.app/Contents/MacOS/Mac_Swap perDemonForMobile</string>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.rim.BBAlbumArtCacher.plist
- mod date: Nov 9 09:24:42 2011
- checksum: 2868431736
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.rim.RimAlbumArtDaemon</string>
<key>OnDemand</key>
<false/>
<key>Program</key>
<string>/Library/Application Support/BlackBerry/RimAlbumArtDaemon</string>
<key>ProgramArguments</key>
<array>
<string>RimAlbumArtDaemon</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.rim.BBLaunchAgent.plist
- mod date: Nov 9 09:24:43 2011
- checksum: 908705504
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.rim.BBLaunchAgent</string>
<key>OnDemand</key>
<false/>
<key>Program</key>
<string>/Library/Application Support/BlackBerry/BBLaunchAgent.app</string>
<key>ProgramArguments</key>
<array>
<string>BBLaunchAgent</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist
- mod date: Sep 8 04:26:41 2010
- checksum: 872926754
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.sierrawireless.SwitchTool</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Sierra/SierraDevSupport</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>TimeOut</key>
<integer>90</integer>
<key>KeepAlive</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/cn.com.zte.PPPMonitor.plist
- mod date: Feb 9 14:34:28 2009
- checksum: 4232615395
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>cn.com.zte.PPPMonitor.plist</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/ZTE/PPPMonitord</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>program</key>
<string>/Library/Application Support/ZTE/PPPMonitord</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.zeobit.MacKeeper.AntiVirus.plist
- mod date: Sep 20 11:22:10 2011
- checksum: 4244331265
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<false/>
<key>Label</key>
<string>com.zeobit.MacKeeper.AntiVirus</string>
<key>Program</key>
<string>/Library/Application Support/MacKeeper/AntiVirus.app/Contents/MacOS/AntiVirus</string>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist
- mod date: Sep 20 11:15:14 2011
- checksum: 3798729423
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<false/>
<key>Label</key>
<string>com.zeobit.MacKeeper.plugin.AntiTheft.daemon</string>
<key>Program</key>
<string>/Library/Application Support/MacKeeper/MacKeeperATd</string>
<key>OnDemand</key>
<false/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/jp.co.canon.MasterInstaller.plist
- mod date: May 21 15:15:24 2014
- checksum: 1894334785
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>jp.co.canon.MasterInstaller</string>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/jp.co.canon.MasterInstaller</string>
</array>
<key>ServiceIPC</key>
<true/>
<key>Sockets</key>
<dict>
<key>MasterSocket</key>
<dict>
<key>SockFamily</key>
<string>Unix</string>
<key>SockPathMode</key>
<integer>438</integer>
<key>SockPathName</key>
<string>/var/run/jp.co.canon.MasterInstaller.socket</string>
<key>SockType</key>
<string>Stream</string>
</dict>
...and 3 more line(s)
Contents of /System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist
- mod date: Jun 24 20:01:21 2011
- checksum: 1071213906
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>KeepAlive</key>
<dict>
<key>PathState</key>
<dict>
<key>/Library/Preferences/com.apple.AirPortBaseStationAgent.launchd</key>
<true/>
</dict>
</dict>
<key>Label</key>
<string>com.apple.AirPortBaseStationAgent</string>
<key>ProgramArguments</key>
<array>
<string>/System/Library/CoreServices/AirPort Base Station Agent.app/Contents/MacOS/AirPort Base Station Agent</string>
<string>-launchd</string>
<string>-allowquit</string>
</array>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/com.apple.xprotectupdater.plist
- mod date: Jun 11 06:13:23 2013
- checksum: 2156521427
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.apple.xprotectupdater</string>
<key>ProgramArguments</key>
<array>
<string>/usr/libexec/XProtectUpdater</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>21</integer>
<key>Minute</key>
<integer>10</integer>
</dict>
</dict>
</plist>
Contents of /System/Library/LaunchDaemons/de.novamedia.VMRServer.plist
- mod date: Aug 29 20:04:21 2012
- checksum: 2973122774
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>de.novamedia.VMRServer</string>
<key>RunAtLoad</key>
<true/>
<key>OnDemand</key>
<false/>
<key>WorkingDirectory</key>
<string>/usr/local/bin</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/bin/VMRServer</string>
</array>
<key>ServiceDescription</key>
<string>Vodafone Mobile Wi-Fi</string>
</dict>
</plist>
Contents of /private/etc/authorization
- mod date: Feb 14 00:47:29 2015
- checksum: 3542104272
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>comment</key>
<string>The name of the requested right is matched against the keys. An exact match has priority, otherwise the longest match from the start is used. Note that the right will only match wildcard rules (ending in a ".") during this reduction.
allow rule: this is always allowed
<key>com.apple.TestApp.benign</key>
<string>allow</string>
deny rule: this is always denied
<key>com.apple.TestApp.dangerous</key>
<string>deny</string>
user rule: successful authentication as a user in the specified group(5) allows the associated right.
The shared property specifies whether a credential generated on success is shared with other apps (i.e., those in the same "session"). This property defaults to false if not specified.
The timeout property specifies the maximum age of a (cached/shared) credential accepted for this rule.
The allow-root property specifies whether a right should be allowed automatically if the requesting process is running with uid == 0. This defaults to false if not specified.
See remaining rules for examples.
</string>
<key>rights</key>
<dict>
<key></key>
<dict>
<key>class</key>
<string>rule</string>
<key>comment</key>
...and 971 more line(s)
Contents of /private/etc/hosts
- mod date: Feb 10 17:28:54 2015
- checksum: 1028826818
127.0.0.1 localhost
255.255.255.255 broadcasthost
::1 localhost
fe80::1%lo0 localhost
10.0.0.138 pocket.wifi
Contents of Library/LaunchAgents/com.Installer.completer.download.plist
- mod date: Mar 21 12:47:58 2015
- checksum: 2802156794
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer.download</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>download</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544010071</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Users/USER/Downloads</string>
</array>
<key>isAllowToSuggest</key>
<string>false</string>
</dict>
...and 1 more line(s)
Contents of Library/LaunchAgents/com.Installer.completer.ltvbit.plist
- mod date: Mar 21 12:47:59 2015
- checksum: 3353910712
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer.ltvbit</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>ltvbit</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544010071</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>4</integer>
<key>Minute</key>
<integer>49</integer>
</dict>
...and 2 more line(s)
Contents of Library/LaunchAgents/com.Installer.completer.update.plist
- mod date: Mar 21 12:47:58 2015
- checksum: 3717148078
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.Installer.completer.update</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Application Support/IM.Installer/Completer.app/Contents/MacOS/InstallerT</string>
<string>-trigger</string>
<string>update</string>
<string>-isDev</string>
<string>0</string>
<string>-installVersion</string>
<string>17498</string>
<string>-firstAppId</string>
<string>544010071</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>12</integer>
<key>Minute</key>
...and 4 more line(s)
Contents of Library/LaunchAgents/com.codecm.uploader.plist
- mod date: Apr 5 10:32:01 2012
- checksum: 1595122189
<?xml version=1.0 encoding=UTF-8?> <!DOCTYPE plist PUBLIC -//Apple//DTD PLIST 1.0//EN http://www.apple.com/DTDs/PropertyList-1.0.dtd> <plist version=1.0> <dict> <key>Label</key> <string>com.codecm.uploader</string> <key>OnDemand</key> <true/> <key>KeepAlive</key> <dict> <key>SuccessfulExit</key> <false/> </dict> <key>RunAtLoad</key> <true/> <key>Program</key> <string>/Users/USER/Library/Application Support/Codec-M/codecm_uploader</string> <key>LimitLoadToSessionType</key> <string>Aqua</string> </dict> </plist>
Contents of Library/LaunchAgents/com.google.keystone.agent.plist
- mod date: Oct 9 10:44:00 2014
- checksum: 2799884167
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.google.keystone.user.agent</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
<string>-runMode</string>
<string>ifneeded</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3523</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
- mod date: Mar 21 12:48:37 2015
- checksum: 784630351
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.autostart</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>-n</string>
<string>--args</string>
<string>9</string>
<string>-l</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
- mod date: Mar 21 12:48:37 2015
- checksum: 4054896881
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.jdibackup.ZipCloud.notify</string>
<key>ProgramArguments</key>
<array>
<string>open</string>
<string>/Applications/ZipCloud.app/Contents/Resources/Utility.app</string>
<string>--args</string>
<string>7</string>
<string>1</string>
</array>
<key>StandardOutPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_out.log</string>
<key>StandardErrorPath</key>
<string>/Users/USER/Library/Logs/ZipCloud/lagent_err.log</string>
<key>StartInterval</key>
<integer>1200</integer>
<key>RunAtLoad</key>
<false/>
</dict>
</plist>
Contents of Library/LaunchAgents/com.spotify.webhelper.plist
- mod date: Mar 25 11:58:35 2013
- checksum: 2530324778
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.spotify.webhelper</string>
<key>KeepAlive</key>
<dict>
<key>NetworkState</key>
<true/>
</dict>
<key>RunAtLoad</key>
<true/>
<key>Program</key>
<string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
<key>SpotifyPath</key>
<string>/Applications/Spotify.app</string></dict>
</plist>
Contents of Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist
- mod date: Feb 22 13:49:38 2012
- checksum: 3499570668
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<false/>
<key>EnvironmentVariables</key>
<dict>
<key>ZBTimeStamp</key>
<string>20111117180719</string>
</dict>
<key>Label</key>
<string>com.zeobit.MacKeeper.Helper</string>
<key>OnDemand</key>
<false/>
<key>Program</key>
<string>/Applications/MacKeeper.app/Contents/Resources/MacKeeper Helper.app/Contents/MacOS/MacKeeper Helper</string>
</dict>
</plist>
Contents of Library/LaunchAgents/jp.co.canon.Inkjet_Extended_Survey_Agent.plist
- mod date: May 21 15:21:24 2014
- checksum: 1116988227
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>jp.co.canon.Inkjet_Extended_Survey_Agent</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app/Contents/Resources/Canon_Inkjet_Extended_Survey_Agent</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>86400</integer>
</dict>
</plist>
Bad plists
/Library/Preferences/DirectoryService/ActiveDirectory.plist
/Library/Preferences/DirectoryService/ActiveDirectoryDomainPolicies.plist
/Library/Preferences/DirectoryService/ActiveDirectoryDynamicData.plist
/Library/Preferences/DirectoryService/ContactsNodeConfig.plist
/Library/Preferences/DirectoryService/ContactsNodeConfigBackup.plist
/Library/Preferences/DirectoryService/DirectoryService.plist
/Library/Preferences/DirectoryService/DirectoryServiceDebug.plist
/Library/Preferences/DirectoryService/DSLDAPv3PlugInConfig.plist
/Library/Preferences/DirectoryService/DSRecordTypeRestrictions.plist
/Library/Preferences/DirectoryService/SearchNodeConfig.plist
/Library/Preferences/DirectoryService/SearchNodeConfigBackup.plist
Library/Preferences/com.apple.iphotomosaic.plist
Applications
/Applications/Address Book.app
- com.apple.AddressBook
/Applications/Adobe Digital Editions 2.0.app
- com.adobe.adobedigitaleditions.app
/Applications/Android File Transfer.app
- com.google.android.mtpviewer
/Applications/App Store.app
- N/A
/Applications/Calculator.app
- com.apple.calculator
/Applications/Canon Utilities/IJ Manual/Easy Guide Viewer/Canon IJ On-screen Manual.app
- jp.co.canon.ij.easy-guide-viewer
/Applications/Canon Utilities/IJ Network Tool/Canon IJ Network Tool.app
- jp.co.canon.IJNetworkTool
/Applications/Canon Utilities/IJ Scan Utility/Canon IJ Scan Utility2.app
- jp.co.canon.ij.scanutility2
/Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app
- jp.co.canon.InkjetExtendedSurveyProgram
/Applications/Canon Utilities/My Image Garden/AddOn/CIG/CiGDownLoadAPP.app
- jp.co.canon.MIGCig
/Applications/Canon Utilities/My Image Garden/My Image Garden.app
- jp.co.canon.MyImageGarden
/Applications/Canon Utilities/Quick Menu/Canon Quick Menu.app
- jp.co.canon.IJ.QuickMenu
/Applications/Codec-M.app
- com.whitesmoke.Codec-M
/Applications/DVD Player.app
- com.apple.DVDPlayer
/Applications/Dashboard.app
- com.apple.dashboardlauncher
/Applications/Dictionary.app
- com.apple.Dictionary
/Applications/Dropbox.app
- com.getdropbox.dropbox
/Applications/Firefox.app
- org.mozilla.firefox
/Applications/Flip4Mac/WMV Player.app
- net.telestream.wmv.player
/Applications/Font Book.app
- com.apple.FontBook
/Applications/Image Capture.app
- com.apple.Image_Capture
/Applications/InstallMac/Reset Search.app
- com.tabatoo.InstallerT
/Applications/Kies.app
- com.samsung.Kies
/Applications/Kindle.app
- com.amazon.Kindle
/Applications/MacKeeper.app
- com.zeobit.MacKeeper
/Applications/Mail.app
- com.apple.mail
/Applications/Mobile Broadband Ma -
Looking to find out how to get rid of ransomware on my mac pro running Lion???
I have a Mac pro running OS Lion v10.7.5 and now have ransomware and would like to figure out how to get rid of the ransomware. Would apprieciate any help.
RuAnLe wrote:
I have a Mac pro running OS Lion v10.7.5 and now have ransomware and would like to figure out how to get rid of the ransomware. Would apprieciate any help.
If you're seeing a message in your web browser that your Mac is infected with a virus, and given a phone number to call for help, you're being scammed. There is no virus. See:
Tech support scam pop-ups
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.) -
Amost every page I open, Firefox takes a line off my netbook screen to ask whether to enable Flash player.
How to get rid of this nagging pest ?downloaded 17MB flash installer from Adobe website.
This download did not run properly, reporting that it had some error.
Still plagued with FireFox queries about Flash.
Don't much care about having flash plugin in FireFox.
Prefer to download a flash file, scan with virus checker, then play it with VideoLAN.
So I disabled Flash plugin to "Never Ask" but still the noxious popup
"FireFox has prevented the outdated plugin "Adobe Flash" from running on helpx.adobe.com. Continue Blocking ? Allow ... X" -
I can't update nor download any apps in itunes. Prompted invalid password, upon checking the apple id was not mine. The id was [email protected] whic is not mine. Pls. Help how to get rid of this. Thank you.
try and delete the apps and re-add them
Maybe you are looking for
-
Paging Problem in JSP using request.
Dear Friends, I have an issue in JSP paging using request. In my action servelet my code is set as follows. request.setAttribute("clients", clients); In JSP I have <%ClientDataBean[] clients = (ClientDataBean[]) request.getAttribute("clients"); If I
-
I received error code (-50) when restoring my iPad2. Does anyone know what this error code means and how to fix it?
-
Keynote cannot play slideshow...
Hi. I hope someone can help me with this problem. Thanks in advance!!! I've been trying to play slideshow in keynote but it keeps going to slide 4 and then quits the slideshow. No matter what I try, it just doesn't want to play from the start or let
-
Freezing, Application Ending while using PSE 12 during editing.
Good afternoon, I'm using PSE 12 and the application keeps on freezing and ending during editing. Just purchased a new MAC laptop that is running Yosemite 10.10. Any advice? Thank you in advance.
-
EBS R11 items/tax relationship
Hi all, can somebody tell me where to configure in the application or the related tables about the relationship between items and taxes- I've read about it in R12 but can't seem to find anything in R11- thanks all p-