My kid downloaded some kind of password hacking software

My kid downloaded some kind of password hacking software and now I'm really concerned.  I remember reading how bad it can be ~ malware installed on sectors of the hardware that can't be erased by formatting and reinstalling the OS.
This all came to light when she was working on her computer and it started doing stuff by itself.  The mouse appears to move intelligently and the system even shut down by itself yesterday.  She's finally concerned enough to confess to what she did ~ after we took the macbook apart to see if the battery was swelling, and then she reveals that the external control appears purposeful and she thinks she's being hacked.
I'm fine just throwing her computer away, but I'm seriously freaked out about safety on my macbook.  Is my computer at risk because of her actions on our shared home network?  I don't have crazy good passwords, but I do have seriously important stuff on my macbook and if it were hacked and the information leaked, the damage could be far beyond what I could ever recover from.  I run a whole business from this computer, and I've always been careful and employ good internet habits and careful software habits.
Anyone have any idea what kind of risk we're at, and how I can find out of my mac is compromised, and maybe how to fix it?
Or suggest the right place to post this question?  I'm sorry if this is totally the wrong place...

There are several possible causes for this issue. Please take each of the following steps that you haven't already tried until it's resolved. Some may not apply in your case.
1. Follow the instructions in this support article, and also this one, if applicable. A damaged or defective AC adapter could be the cause, even if it's the right kind.
2. Press down all four corners of the trackpad at once and release. If there's any effect, it's likely to be temporary, and in that case the unit must be serviced or replaced.
3. Open the Bluetooth preference pane in System Preferences and delete all pointing devices other than the trackpad, if applicable. Disconnect any USB pointing devices. By a "pointing device," I mean a peripheral that moves the cursor, such as a trackpad, mouse, trackball, or graphics tablet. A plain keyboard is not a pointing device.
4. If your model has an infrared receiver for use with an Apple Remote, disable it.
5. Start up in safe mode and test, preferably without launching any third-party applications. If you don't have the problem in safe mode, but it comes back when you restart as usual, stop here and post your results. Do the same if you can't start in safe mode. If there was no difference in safe mode, go on to the next step.
6. Reset the System Management Controller.
7. If you're using a Bluetooth trackpad or mouse, investigate potential sources of interference, including USB 3 devices.
8. A swollen battery in a portable computer can impinge on the trackpad from below and cause erratic behavior. If you have trouble clicking the trackpad, this is likely the reason. The battery must be replaced without delay.
9. A defective peripheral device or a damaged cable can cause the built-in trackpad of a MacBook to behave erratically. If you're using any wired peripherals, disconnect them one at a time and test.
10. There's also a report of erratic cursor movements caused by an external display that was connected but not turned on.
11. If none of the above applies, or if you have another reason to think that your computer is being remotely controlled, remove it from the network by turning off Wi-Fi (or your Wi-Fi access point), disconnecting from a Bluetooth network link, and unplugging the Ethernet cable or USB modem, whichever is applicable. If the cursor movements stop at once, you should suspect an intrusion.
12. Make a "Genius" appointment at an Apple Store to have the machine and/or external trackpad tested.

Similar Messages

  • I started downloading ios 6 with iTunes. And at the end of the download , some kind of error comes with a pop up box  and a RED cross mark in it saying some error occurred and asking to disconnect and reconnect again and to check the internet is active?

    i started downloading ios 6 with iTunes with latest version of 10.7 for my iphone 4s running ios 5.1.1. And at the end of the download , some kind of error comes with a pop up box  and a RED cross mark in it saying some error occurred and asking to disconnect and reconnect again and to check the internet is active? and then nothing happens and when i disconnect and reconnect again, the same error comes and the same thing happens. what should i do now to install ios 6?

    Are you running any Firewalls or Anti-Virus software? If so, disable all of that stuff & try again.

  • Hello, I am doing a layout in arabic language, and I am missing option of change direction in paragraph. I read on forum that I am supposed to download some kind of an plug in or version of indesign for arabic language support, but I just don't know what

    Hello, I am doing a layout in arabic language, and I am missing option of change direction in paragraph. I read on forum that I am supposed to download some kind of an plug in or version of indesign for arabic language support, but I just don't know what to download.
    Can you tell me step by step what to do and download.
    Thank you very much!

    InDesign is from a technical viewpoint a Plugin Activator.
    Every function is a plugin.
    With CC and higher you can change the language in the CC app preferences.
    When you change the language, additonal plugins, necessary for that language are installed, with the MENA (Middle East North Africa) versions RTL functionality is added into your primary version.
    InDesign chooses to start the program in the same language as you OS is set up, RTL functionality appears translated into your normal User Interface.
    After installing a MENA version you can switch back to your main language.

  • Why did firefox attempt to install some kind of computer improvement software

    received message that there was a new browser version and the download was NOT an update to Firefox. It was some kind of computer cleaner/speeder upper and I caught and cancelled the INSTALL not UPDATE

    Deceptive messages about downloads being Firefox updates can be generated by websites or by add-ons. If this was a one-time thing, it may have been an ad on a site you were visiting. If it occurs repeatedly, you probably need to check for a bad extension or malware.
    Bad extensions often are installed externally to Firefox. I suggest starting here:
    Open the Windows '''Control Panel''', Uninstall a Program. Click the "Installed on" column heading to group the infections, I mean, additions, by date. This can help in smoking out undisclosed bundle items that snuck in with some software you agreed to install. Take out as much trash as possible here.
    Then, in Firefox, open the '''Add-ons page''' using either:
    * Ctrl+Shift+a
    * "3-bar" menu button (or Tools menu) > Add-ons
    In the left column, click Extensions. Then, if in doubt, disable (or Remove, if possible) unrecognized and unwanted extensions.
    Often a link will appear above at least one disabled extension to restart Firefox. You can complete your work on the tab and click one of the links as the last step.
    Finally, you can "mop up" remaining issues with the scanning/cleaning tools listed in our support article: [[Troubleshoot Firefox issues caused by malware]].
    Hopefully you can flush it.

  • Some kinds of the Security software(Anti-virus) always disable in Firefox,why ?

    None.

    They may not be compatible with firefox - it's most likely an add-on. Or if you could explain further it would help better.

  • 'Client Changes' must be allowed when download which kind of object?

    Dear Expert,
    When we download some kind of objects from ECC to CRM, we must set allow 'Client Changes' via SCC4. For example, download DNL_CUST_CNDALL
    Do we have to  allow 'Client Changes' via SCC4 before download all customzing objects? How about Biz Objects and Condition Objects?
    Thanks a lot!
    Hedy

    Hi, Hedy
    Not, I think it's required only for DNL_CUST_CNDALL.
    But, you can see any errors in smw01 and check does it need for specific case.
    Denis

  • My Grand kids downloaded a free app Dragonvale, used my password

    My Grand kids downloaded a free app Dragonvale, used my password then played the game for 20 minutes and racked up $44 in charges by accepting more cash to play. I did not agree to these charges and would never do this myself .Can I get these charges reversed? This was a mistake, they should not have been allowed to access by account without the password .
    I was not aware of the controls or that the account stays open for a length of time.
    They have been banned from my I-Pad.
    What can I do?
    Roy

    Yeah, this whole in-app purchase thing has been kind of a disgrace on Apple.
    Going forward, consult this document to restrict in-app purchases:  http://support.apple.com/kb/HT4213
    As for the purchases already made, contact iTunes Customer Service and calmly explain your case for a refund.

  • I'm trying to get into game center to download some things. Enter user id/password then keep getting a "you are not part of this/the administrator group" then a cancel or retry command. What do I do? (I am using a friends wi-fi) What d

    I am trying to get into the Game Center and download some apps. I enter my user id/password the keep getting a "you are not part of the/this administrators group" message then a cancel/retry command. What do I do to become part of this/the administrators group? I am using a friend's wi-fi...Help!

    I am trying to get into the Game Center and download some apps. I enter my user id/password the keep getting a "you are not part of the/this administrators group" message then a cancel/retry command. What do I do to become part of this/the administrators group? I am using a friend's wi-fi...Help!

  • Iphone 5 is taking too long to download through EDGE why????????Please help i just wnat to confirm that it is the normal behaviour or it is some kind of problem please help

    iphone 5 16 gn black my iphone is taking too long to download apps from apps to download on my iphone so please help from overcoming this problem
    i just want to know this is the normal behaviour or it is some kind of problem

    You have to turn on 3G/4G/LTE and be in a coverage area for such to happen.
    Or connect to wifi.
    Normal behavior for Edge is very very slow.

  • I just downloaded ilife every things working fine except, when i try to open iPhoto it said ''You can't open the application iPhoto because it may be damaged or incomplete. i tried to re-download it but my password didn't work for some reason. HELPPPP!!!

    i just downloaded ilife every things working fine except, when i try to open iPhoto it said ''You can't open the application iPhoto because it may be damaged or incomplete. i tried to re-download it but my password didn't work for some reason. HELPPPP!!!

    Make a temporary, backup copy (if you don't already have a backup copy) of the library and apply the two fixes below in order as needed:
    Fix #1
    Launch iPhoto with the Command+Option keys held down and rebuild the library.
    Select the options identified in the screenshot. 
    Fix #2
    Using iPhoto Library Manager  to Rebuild Your iPhoto Library
    Download iPhoto Library Manager and launch.
    Click on the Add Library button, navigate to your Home/Pictures folder and select your iPhoto Library folder.
    Now that the library is listed in the left hand pane of iPLM, click on your library and go to the File ➙ Rebuild Library menu option
    In the next  window name the new library and select the location you want it to be placed.
    Click on the Create button.
    Note: This creates a new library based on the LIbraryData.xml file in the library and will recover Events, Albums, keywords, titles and comments but not books, calendars or slideshows. The original library will be left untouched for further attempts at fixing the problem or in case the rebuilt library is not satisfactory.
    Happy New Year

  • I seem to have picked up some sort of virus or bug of some kind.  I'm getting personals ads throughout my Facebook and yahoo home page.  i've tried CCleaner and it takes them off but only for a short time so i downloaded iantivirus but that found nothing

    i seem to have picked up some sort of virus or bug of some kind.  I'm getting personals ads throughout my Facebook and yahoo home page.  i've tried CCleaner and it takes them off but only for a short time so i downloaded iantivirus but that found nothing

    It may not be a good soloution for a novice, but I have been using hosts files to block unwanted URLs for many years with zero disasters and lots of positive results.
    As I noted, whenever I find a new "bad" site, I simply add the name to my hosts file. It takes a few seconds and then it's gone forever. I find no difficulty whatsoever.
    No, it's not for everyone, which is why I gave no specific details; but for those who are interested and have the desire to learn about these hosts files, it is a very good way to avoid "bad" websites.
    I also enjoy the "clean" view of a webpage when there are no ads showing at all. The page loads faster and  the distractions are gone.
    I never realized how much junk I am supressing until I got my iPad and saw all those horrid ads that are blocked on my other computers.
    Here is a typical result of properly using a hosts file:
    I love it when a plan comes together - -  H. Smith.

  • My iPhone 4s has been blocked due to forgetting my password, I can't remember my email or password to unblock my phone. If I went to the apple store and took some kind of ID or phone bill for proof would they be able to unblock my phone

    My iPhone 4s has been blocked due to forgetting my password, I can't remember my email or password to unblock my phone. If I went to the apple store and took some kind of ID or phone bill for proof would they be able to unblock my phone? Please help

    Jmartin31 wrote:
    My iPhone 4s has been blocked due to forgetting my password, I can't remember my email or password to unblock my phone. If I went to the apple store and took some kind of ID or phone bill for proof would they be able to unblock my phone?
    No.
    See this -> iOS: Forgot passcode or device disabled

  • So, my girlfriends old apple ID keeps popping up asking for the password. I have changed my apple ID and my Itunes ID and it still pops up. what do I do?I cant download some of my apps because of it

    so, my girlfriends old apple ID keeps popping up asking for the password. I have changed my apple ID and my Itunes ID and it still pops up. what do I do?I cant download some of my apps because of it

    If you have any apps downloaded with the other AppleID, those apps
    will ask for the other AppleID to update.
    Downloads are forever tied to the AppleID used to download them.
    Delete the apps associated with the unwanted ID and download them
    under your ID. You will have to purchase apps that are not free.
    You cannot transfer apps from one Apple ID to another, not can you
    merge 2 Apple IDs.

  • Very slow MacBook Pro. Probably some kind of virus.

    Hey guys,
    I'm helping a friend of mien to repair her computer. Yesterday she wanted to watch a film online and on one of this sides she even clicked on updating her flash player. Afterwards the Mac didn't work anymore and after a restart continued  very slow and she probably has some kind of virus. Even writing this text takes forever because the computer is so slow.
    I've already done a system check with etrecheck and also tried to find the virus with avira. But this you also see in the report.
    So It would be great if anyone could help us.  
    Problem description:
    Very slow Mac. Probably some kind of virus.
    EtreCheck version: 2.0.11 (98)
    Report generated 21 de Novembro de 2014 às 11:26:42 GMT-2
    Hardware Information: ℹ️
      MacBook Pro (15-inch, Mid 2012) (Verified)
      MacBook Pro - model: MacBookPro9,1
      1 2.3 GHz Intel Core i7 CPU: 4-core
      4 GB RAM Upgradeable
      BANK 0/DIMM0
      2 GB DDR3 1600 MHz ok
      BANK 1/DIMM0
      2 GB DDR3 1600 MHz ok
      Bluetooth: Good - Handoff/Airdrop2 supported
      Wireless:  en1: 802.11 a/b/g/n
    Video Information: ℹ️
      Intel HD Graphics 4000 -
      Color LCD 1440 x 900
      NVIDIA GeForce GT 650M - VRAM: 512 MB
    System Software: ℹ️
      OS X 10.9.5 (13F34) - Uptime: 3:30:18
    Disk Information: ℹ️
      TOSHIBA MK5065GSXF disk0 : (500,11 GB)
      S.M.A.R.T. Status: Verified
      EFI (disk0s1) <not mounted> : 210 MB
      Macintosh HD (disk0s2) /  [Startup]: 499.25 GB (196.06 GB free)
      Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
      MATSHITADVD-R   UJ-8A8 
    USB Information: ℹ️
      Apple Inc. FaceTime HD Camera (Built-in)
      Apple Inc. Apple Internal Keyboard / Trackpad
      Apple Computer, Inc. IR Receiver
      Apple Inc. BRCM20702 Hub
      Apple Inc. Bluetooth USB Host Controller
    Thunderbolt Information: ℹ️
      Apple Inc. thunderbolt_bus
    Gatekeeper: ℹ️
      Mac App Store and identified developers
    Kernel Extensions: ℹ️
      /System/Library/Extensions
      [loaded] com.avira.kext.FileAccessControl (1.0.0d1 - SDK 10.9) Support
    Launch Agents: ℹ️
      [not loaded] com.adobe.AAM.Updater-1.0.plist Support
      [loaded] com.avira.antivirus.general.agent.plist Support
      [loaded] com.avira.antivirus.ipm.ui.plist Support
      [loaded] com.avira.antivirus.notifications.agent.plist Support
      [loaded] com.avira.antivirus.odscan.default.plist Support
      [loaded] com.avira.antivirus.scheduler.agent.plist Support
      [running] com.avira.antivirus.systray.plist Support
      [loaded] com.avira.antivirus.telemetry.agent.plist Support
      [loaded] com.avira.antivirus.update.default.plist Support
      [running] com.vsearch.agent.plist Support
    Launch Daemons: ℹ️
      [loaded] com.adobe.fpsaud.plist Support
      [invalid?] com.adobe.SwitchBoard.plist Support
      [failed] com.avira.antivirus.dbcleaner.plist Support
      [loaded] com.avira.antivirus.ipm.loader.plist Support
      [running] com.avira.helper.watchdox.plist Support
      [running] com.perion.searchprotectd.plist Support
      [loaded] com.skype.skypeinstaller.plist Support
      [invalid?] com.vsearch.daemon.plist Support
      [invalid?] com.vsearch.helper.plist Support
    User Launch Agents: ℹ️
      [loaded] com.adobe.AAM.Updater-1.0.plist Support
      [failed] com.facebook.videochat.[redacted].plist Support
      [invalid?] com.genieo.completer.download.plist Support
      [invalid?] com.genieo.completer.update.plist Support
      [loaded] com.google.keystone.agent.plist Support
      [invalid?] palmall-1-2.ver Support
      [invalid?] palmall-1-2_updater.plist Support
      [invalid?] palmall-1-2_updater.sh Support
    User Login Items: ℹ️
      iTunesHelper Aplicação (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
      Skype UNKNOWN (missing value)
    Internet Plug-ins: ℹ️
      FlashPlayer-10.6: Version: 15.0.0.223 - SDK 10.6 Support
      QuickTime Plugin: Version: 7.7.3
      Flash Player: Version: 15.0.0.223 - SDK 10.6 Support
      AdobePDFViewer: Version: 10.1.1 Support
      Default Browser: Version: 537 - SDK 10.9
      DirectorShockwave: Version: 12.0.7r148 - SDK 10.6 Support
      JavaAppletPlugin: Version: 14.9.0 - SDK 10.7 Check version
    User Internet Plug-ins: ℹ️
      ConduitNPAPIPlugin: Version: 1.0 - SDK 10.6 Support
      Picasa: Version: 1.0 - SDK 10.6 Support
      TroviNPAPIPlugin: Version: 1.0 - SDK 10.9 Support
    Safari Extensions: ℹ️
      Omnibar
      Conduit Search for Safari
      PalMall 1.2
    3rd Party Preference Panes: ℹ️
      Flash Player  Support
      Tuxera NTFS  Support
    Time Machine: ℹ️
      Time Machine not configured!
    Top Processes by CPU: ℹ️
          13% Avira
          6% WindowServer
          3% savapi
          1% uxipm_ui
          1% avguard-ondemand-mgmt
    Top Processes by Memory: ℹ️
      322 MB savapi
      305 MB avbackendproxy worker (avguard-license)
      133 MB Google Chrome Helper
      120 MB avbackendproxy worker (update)
      116 MB Google Chrome
    Virtual Memory Information: ℹ️
      889 MB Free RAM
      1.62 GB Active RAM
      766 MB Inactive RAM
      772 MB Wired RAM
      1.84 GB Page-ins
      11 MB Page-outs

    1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
    Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
    2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
    There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
    3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
    You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
    In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
    You may not be able to understand the script yourself. But variations of the script have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message.
    Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
    4. Here's a summary of what you need to do, if you choose to proceed:
    ☞ Copy a line of text in this window to the Clipboard.
    ☞ Paste into the window of another application.
    ☞ Wait for the test to run. It usually takes a few minutes.
    ☞ Paste the results, which will have been copied automatically, back into a reply on this page.
    The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
    5. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
    6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
    7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
    Triple-click anywhere in the line of text below on this page to select it:
    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts SerialATA 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' com.clark.\* \*dropbox \*genieo\* \*GoogleDr\* \*k.AutoCAD\* \*k.Maya\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 "` route -n get default|awk '/e:/{print $2}' `" 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB ' com.adobe.AAM.Updater-1.0 com.adobe.AAM.Updater-1.0 com.adobe.AdobeCreativeCloud com.adobe.CS4ServiceManager com.adobe.CS5ServiceManager com.adobe.fpsaud com.adobe.SwitchBoard com.adobe.SwitchBoard com.apple.aelwriter com.apple.AirPortBaseStationAgent com.apple.FolderActions.enabled com.apple.installer.osmessagetracing com.apple.mrt.uiagent com.apple.ReportCrash.Self com.apple.rpmuxd com.apple.SafariNotificationAgent com.apple.usbmuxd com.citrixonline.GoToMeeting.G2MUpdate com.google.keystone.agent com.google.keystone.daemon com.microsoft.office.licensing.helper com.oracle.java.Helper-Tool com.oracle.java.JavaUpdateHelper com.oracle.java.JavaUpdateHelper org.macosforge.xquartz.privileged_startx org.macosforge.xquartz.startx ' ' 879294308 4071182229 461455494 3627668074 1083382502 1274181950 1855907737 2758863019 1848501757 464843899 3694147963 1233118628 2456546649 2806998573 2778718105 2636415542 842973933 2051385900 3301885676 891055588 998894468 695903914 1443423563 4136085286 523110921 3873345487 ' 51 5120 files );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/faceb/s/(at\.)[^.]+/\1NAME/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: (E[^m]|[^EO])|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { if(n<10) print "com.apple.";} ' ' { sub(/ :/,"");print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/^root$/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1100) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { split("'"${p[41]}"'",b);split("'"${p[42]}"'",c);for(i in b) print b[i]".plist\t"c[i];if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\\([0-9]+\\)\\(.+\\)/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p);if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n   "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n   [N/A]";"cksum "F|getline C;split(C, A);C="checksum "A[1];"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text(, with v.+)?$|(Bo|PO).+ sh.+ text ex|XM)/) F=F" ("T", "C")";else F=F" ("C")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n   ...and %s more line(s)\n",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9|"sort|uniq";} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */   /;' ' s/^.+ |\(.+\)$//g;p ' '/\.(appex|pluginkit)\/Contents\/Info\.plist$/p' ' /2/{print "WARN"};/4/{print "CRITICAL"};' ' /EVHF|MACR/d;s/^.+: //p;' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps crontab iotop top pkgutil 'PlistBuddy 2>&1 -c "Print' whoami cksum kextstat launchctl smcDiagnose sysctl\ -n defaults\ read stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' pluginkit scutil dtrace profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil lsof test osascript\ -e );c2=(com.apple.loginwindow\ LoginHook '" /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'|tr , \\\n" 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name In*t -exec '"${c1[14]}"' :CFBundleDisplayName" {} \;|sort|uniq' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' :${p[35]}\" :Label\" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$(RefProc): \$Message' -k Sender Req 'fsev|kern|launchd' -k RefProc Rne 'Aq|WebK' -k Message Rne 'Goog|ksadm|probe|Roame|SMC:|smcD|sserti|suhel| VALI|ver-r|xpma' -k Message Req 'abn|bad |Beac|caug|corru|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|NVDA\(|pagin|proc: t|Roamed|rror|SL|Throttli|tim(ed? ?|ing )o|WARN' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '/S*/*/Ca*/*xpc* >&- ||echo No' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,Ex}* {/,}L*/{A*d,Ca*/*/Ex,Co{mpon,reM},Ex,In{p,ter},iTu*/*P,Keyb,Mail/B,Pr*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -path \\*s/Resources -prune -o -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'|sort|uniq -c|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" -m 'L*/{Con*/*/Data/L*/,}Pref* -type f -size 0c -name *.plist.???????|wc -l' kern.memorystatus_vm_pressure_level '3>&1 >&- 2>&3' " -F '\$Time \$Message' -k Sender kernel -k Message CSeq 'n Cause: -' " );N1=${#c2[@]};for j in {0..9};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents XPC\ cache Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching SATA Descriptors App\ extensions Lockfiles Memory\ pressure SMC Shutdowns );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};A'$((7+i))'() { v=` eval sudo "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};';done;A9(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "${s[63]}"<<<"$v"`&&C1 1 $1;};for i in 1 2 7 8;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 50;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;B1&&D73 19 53 67 55;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 54 12 56;D23 5 14 12 14;D22 6 36 13 15;D22 20 52 66 54;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D82 35 49 61 51;D82 11 17 17 20;for i in 0 1;do D82 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A8 18 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;B3 4 0 65;A3 14 6 32 0;B4 0 16 11;A1 26 50 64;B7 16;C3 52;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D73 21 0 32 19;D73 10 42 32 40;D82 29 35 46 39;};D23 14 1 62 42;D12 34 43 53 44;D12 22 20 32 25;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 21 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D83 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 10 42 32 41;D13 37 2 48 43;D13 4 5 32 1;D13 4 3 60 5;D12 21 48 49 49;B3 4 22 57;A1 21 46 56;B7 22;B3 0 0 58;C3 47;D22 4 4 50 0;D12 4 51 32 53;D23 22 9 37 7;A9;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
    Copy the selected text to the Clipboard by pressing the key combination command-C.
    8. Launch the built-in Terminal application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
    Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
    9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
    exec bash
    and press return. Then paste the script again.
    10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return  three times at the password prompt. Again, the script will still run.
    If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
    11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
    [Process completed]
    to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report what happened. No harm will be done.
    12. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
    At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
    If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
    13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
    14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
    Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

  • AOL Passwords hacked from iPhone

    I have had my AOL account for close to 15 years (since it's inception really).  I've had a few problems wiht my password being hacked over the years, but nothing like what I'm going through now.  I rarely check my email through their website - I use my iPhone 4S. 
    It all started when I was going through my AOL spam folder on my iPhone looking for a legitimate email from my lawyer.  When I moved that message, it opened the next message (truly spam) that contained a link (and possibly an attachment...I don't remember).  I NEVER open junk email on my phone, I usually just delete it.  Next thing I know, my AOL account is sending rogue emails to every address I've got stored in my phone.  It all happened in a 6 hour span.  I changed my password, and updated it on my phone and thought all was good.  Then I received an email from a friend that looked legit so I opened it.  As soon as I did it, I knew it was a mistake, so the cycle started again.  I've change my password at least three times since the second time and have used a random combination of letters (mix of upper and lower case), numbers and symbols 12 characters long, so I know it's not easy to hack, I keep having this problem daily unless I remove the account from my phone - in which case, everything is fine...the problem only seems to be present when I set up my account on my phone.
    It seems like there's a keylogger or virus on my iPhone 4s.  I've updated my OS, I've updated my computer, I've backed up my iPhone...what else can I do?  Should I replace my iPhone, or delete my AOL account permanently and change to gmail?  HELP!!  I'm at my wits end and my friends are tired of getting strange emails from me! 

    verything seems fine after the password is changed until the account is added to Mail app on my iPhone.  Then within anywhere from 3-10 hours afterwards, I get all this returned mail.
    I can't say what's going on there without getting my hands on your stuff and doing tests, which obviously isn't possible. However, I can tell you for sure that there's no way this is malware, unless your phone is jailbroken.
    Jailbreaking is hacking your phone to allow it to run apps that didn't come from the App Store. If you did that, you removed all security from the phone, and it's possible you could be infected with something.
    One thing to think about... has anyone untrusted had unsupervised physical access to your phone? It's possible that it could have been hacked under such conditions (physical access is required), and some kind of keylogging software installed.
    In all, it would require some very specific circumstances for your phone to be the problem.
    I've pretty much decided to just close the account since that seems like the next logical move.
    That's probably what I would do. AOL has been struggling to maintain relevance in a post-modem world, and they're not doing a very good job of it. I used to be an advocate of AOL "back in the day," when expectations were different, but I ditched AOL a long time ago. They just stopped being able to do what I needed to do.
    If you want to stick it out with AOL a little longer, when was the last time you tried changing your password? It would not surprise me at all if their servers were affected by the Heartbleed bug, and if they were a bit slow to fix it. (I would hope they've fixed it by now, but you never know, and most companies are being oddly close-mouthed about this.)

Maybe you are looking for

  • Data mining is Loading after upgrade from 10.1.0.4 to 10.2.0.4

    SQL> select comp_name, version, status from dba_registry; COMP_NAME VERSION STATUS Oracle Ultra Search 10.1.0.4.0 NO SCRIPT Oracle XML Database 10.2.0.4.0 VALID Oracle Enterprise Manager 10.2.0.4.0 VALID COMP_NAME VERSION STATUS Oracle Text 10.2.0.4.

  • Display anomolies on 17 inch 2006 imac... replacement?

    Ok, Ive searched and searched this problem and finally i went into an apple store and spoke to a genius and told him the following: 1. I have a late 2006 intel imac (september 2006) 2. The machine is out of warranty 3. With leopard the machine STOPPE

  • BR 100 for Advanced Pricing

    Hi, I could not find BR 100 template for Adanced Pricing. Would appreciate if any one could points me towards the same... Thanks, Dinakar.

  • Using Actions that pause

    Hi, I did a quick search and didn't see an answer to this question: Can you use Photoshop Actions (in Elements) that pause and say "press Play to continue"? If so, what is the "Play" key/button?

  • Personalisar para que realice las busquedas en español

    cuando realizo una busqueda siempre salen los resultados en ingles ,tengo que estar dandole ala pestaña buscar solo resultados en español