Trojan.adh.2

I currently have a Macbook and discovered that my gmail account had been sending email that I hadn't sent.  Norton was downloaded because Comcast provides this free with my interenet service.  it detected this trojan.adh.2.  Does it affect my computer?  Once I've changed my password in Gmail is my account secure and is my computer safe?

See here:
Trojan.ADH.2 | Symantec
How to fix false Trojan.ADH.2 - Norton Community
This is not a Trojan. It is part of Nortan's detection package.
"If one or more files on your computer have been classified as having a Trojan.ADH.2 threat, this indicates that the files have suspicious characteristics and therefore might contain a new or unknown threat. However, given the sensitive nature of this detection technology, it may occasionally identify non-malicious, legitimate software programs that also share these behavioral characteristics. "
Uninstall Norton. If you want to run any kind of antivirus software of your mac use ClamXav. It's free and it's made for OS X platforms. Norton will flag things incorrectly and block incoming connections that do not need to be blocked.
ClamXav

Similar Messages

  • Faq bad link.

    Is this supposed to work?
    http://forums.adobe.com/message/3844126#3844126
    It's the FAQ to how to submit feature requests.  Telling that it's  a broken link.

    That is the site... Norton Internet Security pops up a warning... I did not go any further into the details, so the site's location may be what triggers Norton
    Anyway... I wandered there because someone over in the Premiere Pro "old" forum could not edit AVCHD with PPro 1.5 so I posted your FAQ link... the top 2 links both worked, so... in the absence of a response by the person I was trying to help... I will presume they found a product to do the conversion
    I know there have been a few other instances of ISP's being blocked because of problems with "some" accounts... I will just chalk this up to a case of a good site being caught up on a bad host
    OK... I clicked the Norton "more info" link, and this is what it said
    Threats found: 1
    Here is a complete list: (for more information about a specific threat, click on the Threat Name below)
    Threat Name:
    Trojan.ADH.2
    File name:
    C:\NISManager\Data\ff10d7f1-86d6-407f-b6bf-bf60aefdd3fd_311481046\SetupDataMngr_Searchqu.e xe
    Location:
    http://download.cdn.koyotesoft.com/cdn/SearchSuite/002/SetupDataMngr_Searchqu.exe
    It may be that Norton is wrong, or that the vendor is infected and does not know... either way, as I said, the top links in your FAQ both go to sites with no Norton warning

  • HT5228 How to find out if your Mac has the Flashback Trojan EASY WAY!!!!

    http://www.cnn.com/2012/04/06/tech/web/mac-flashback-trojan-check/index.html
    Just did it works great and they also have a post on how to remove it as well.

    Here is an even easier way, it will remove most infections too:
    I have created a user tip and malware checker/removal tool: https://discussions.apple.com/docs/DOC-3271

  • My computer has been infected with a Trojan Horse.  It has completely taken over my Mac email account and was sending out malicious email to everyone in my address book.  At the same time it infected my iPhone---I am no longer able to receive or send emai

    My computer has been infected by a Trojan Horse.  It has taken over my Mac email account and began sending out malicious emails to everyone in my address book.  I cleared out my MAC address book and began using my AOL email account. It took a few days and then my AOL email account was infected and has now been send out malicious email to all my contacts for over a month.  It has also infected my iPhone--I am no longer able to send or receive emails on my iPhone.  Also, once the Trojan Horse began using my AOL email it completely blocked me from using my MAC account by sending never ending popups asking for my email password to access my MAC email account, but it never accepts my pass word.  The TH has also slowed down everything on my computer.  It's like I am working on an old PC with dial up connection instead of the high speed digital connection that I have.  The little color wheel spins constantly as I wait for sometimes over a minute for a page to pull up.  If it pulls up at all.  I have tried to use the 2 disks that came with my computer to completely remove everything on my computer and then reinstall all the programs, but I am not allowed to sweep my computer clean.  I thought maybe my disks that came with my computer were defective so I called Apple and they sent me 2 new disks.  I am not able able to clear my computer with the 2 new disks either.  I have done this before successfully so it's not something new to me.  I do remember when I believe my computer became infected:  I had googled an unusual sewing term, and I was opening what appeared to be legitimate sites, when all of a sudden a pop up appeared that said that my computer had been infected.  I immediately shut my computer off, but it was too late.  I downloaded a virus program for Mac, and it has never found a virus or problem at all.  I think it is part of this Trojan Horse, but I am unable to delete it from my computer.  It refuses to uninstall.  The Mac Trojan Horse is real and it is terrible.  If anyone has any suggestions for me I would be very appreciative,
    Beth
    vu

    Install ClamXav and run a scan with that. It should pick up any trojans.   
    17" 2.2GHz i7 Quad-Core MacBook Pro  8G RAM  750G HD + OCZ Vertex 3 SSD Boot HD 
    Got problems with your Apple iDevice-like iPhone, iPad or iPod touch? Try Troubleshooting 101

  • I ran a virus/trojan fix and this is what it said it could not repair something in the main library core or something like that.  What do I do?  The problem seems to be with safari?

    I ran a virus/trojan fix and this is what it said it could not repair something in the main library core or something like that.  What do I do?  The problem seems to be with safari?

    I ran the utility disk and this is what it said.
    Warning permission differ Applications/Safari drwxr-xrx they are -rwxr-xr system/livrary Cores has been modified and will not be repaired.
    Permission apllication differ on System/livrary/Pr or could be -rw-r--r-- they are rwxr-xr-x Application/iTune be droxr-xr-x they are rwxr-xr-x
    Then I hit fix permissions and it said this
    Warning SUID file Systm/Library/Core has been modified will not be repaired
    I also downloaded Bitdefender Virus Scanner and it found nothing.

  • Hey, im experiencing problems with itunes. i downloaded the recent itunes update yesterday and today i plugged my iphone in and my computer said there was a trojan horse and now itunes wont open. Help please??

    Hey guys, Im expierencing problems with itunes after the latest update yesterday(1/22) and the problem im having is when i plugged my iphone into my PC today a virus detection came up and said a trojan horse was present. I also cant open itunes at all. Im confused and dont know what to do. thanks in advance

    Place the device in DFU mode (google it) and restore.

  • Safari keeps crashing - do I have a trojan?

    Hi
    My Safari has been crashing regularly for the last few days. It generally happens soon after waking up the computer from sleep, but also happens randomly after 10-30 minutes use (approx - I'm not really sure). I have been looking at various discussions and think perhaps it might be a trojan, but I am unsure if this is the case and if so, what I can do about it. I'd be very grateful if someone had some advice about what to do, or even general advice about protecting my mac for free (I know it is less likely to be a victim of viruses/trojans etc. but think it might be wise to protect it just to prevent any risk).
    Thank you so much in advance - I am really inexperienced with this stuff!
    The crash report generated reads: (NB where there is a space I have deleted my name in a couple of the lines to try to protect my identity)
    Process:         Safari [27749]
    Path:            /Applications/Safari.app/Contents/MacOS/Safari
    Identifier:      com.apple.Safari
    Version:         5.0.5 (6533.21.1)
    Build Info:      WebBrowser-75332101~1
    Code Type:       X86-64 (Native)
    Parent Process:  launchd [88]
    PlugIn Path:       /Users/          /Library/Application Support/.KeyboardManagerDeluxe.tmp
    PlugIn Identifier: .KeyboardManagerDeluxe.tmp
    PlugIn Version:    ??? (???)
    Date/Time:       2012-04-20 22:12:10.262 +0100
    OS Version:      Mac OS X 10.6.7 (10J869)
    Report Version:  6
    Interval Since Last Report:          9842 sec
    Crashes Since Last Report:           3
    Per-App Interval Since Last Report:  9369 sec
    Per-App Crashes Since Last Report:   3
    Anonymous UUID:                      367E2819-96D4-4093-AFCE-2987D30B396E
    Exception Type:  EXC_CRASH (SIGABRT)
    Exception Codes: 0x0000000000000000, 0x0000000000000000
    Crashed Thread:  1
    Application Specific Information:
    abort() called
    Thread 0:  Dispatch queue: com.apple.main-thread
    0   libSystem.B.dylib                       0x00007fff867a229a mach_msg_trap + 10
    1   libSystem.B.dylib                       0x00007fff867a290d mach_msg + 59
    2   com.apple.CoreFoundation                0x00007fff80fa1932 __CFRunLoopRun + 1698
    3   com.apple.CoreFoundation                0x00007fff80fa0dbf CFRunLoopRunSpecific + 575
    4   com.apple.HIToolbox                     0x00007fff875167ee RunCurrentEventLoopInMode + 333
    5   com.apple.HIToolbox                     0x00007fff875165f3 ReceiveNextEventCommon + 310
    6   com.apple.HIToolbox                     0x00007fff875164ac BlockUntilNextEventMatchingListInMode + 59
    7   com.apple.AppKit                        0x00007fff84a65e64 _DPSNextEvent + 718
    8   com.apple.AppKit                        0x00007fff84a657a9 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 155
    9   com.apple.Safari                        0x0000000100015ff6 0x100000000 + 90102
    10  com.apple.AppKit                        0x00007fff84a2b48b -[NSApplication run] + 395
    11  com.apple.AppKit                        0x00007fff84a241a8 NSApplicationMain + 364
    12  com.apple.Safari                        0x0000000100009f18 0x100000000 + 40728
    Thread 1 Crashed:
    0   libSystem.B.dylib                       0x00007fff86814e4e __semwait_signal_nocancel + 10
    1   libSystem.B.dylib                       0x00007fff86814d50 nanosleep$NOCANCEL + 129
    2   libSystem.B.dylib                       0x00007fff868716ae usleep$NOCANCEL + 57
    3   libSystem.B.dylib                       0x00007fff86890ce0 abort + 93
    4   libstdc++.6.dylib                       0x00007fff848fc5d2 __tcf_0 + 0
    5   libobjc.A.dylib                         0x00007fff82d9cd3d _objc_terminate + 120
    6   libstdc++.6.dylib                       0x00007fff848faae1 __cxxabiv1::__terminate(void (*)()) + 11
    7   libstdc++.6.dylib                       0x00007fff848fab16 __cxxabiv1::__unexpected(void (*)()) + 0
    8   libstdc++.6.dylib                       0x00007fff848fabfc __gxx_exception_cleanup(_Unwind_Reason_Code, _Unwind_Exception*) + 0
    9   libstdc++.6.dylib                       0x00007fff848b6a3e std::__throw_length_error(char const*) + 127
    10  libstdc++.6.dylib                       0x00007fff848e13fe std::string::append(char const*, unsigned long) + 82
    11  .KeyboardManagerDeluxe.tmp              0x00000001007d6d07 dylibmain + 3599
    12  com.apple.CFNetwork                     0x00007fff8568c557 HTTPReadFilter::readHeaderBytes(StreamReader*, unsigned char, unsigned char*, long, CFStreamError*) + 421
    13  com.apple.CFNetwork                     0x00007fff8568d4cc HTTPReadFilter::canReadNoSignal(StreamReader*, CFStreamError*, unsigned char) + 110
    14  com.apple.CFNetwork                     0x00007fff8563b63a HTTPReadFilter::streamCanRead(__CFReadStream*) + 90
    15  com.apple.CFNetwork                     0x00007fff8563b7b0 HTTPReadFilter::socketReadStreamCallback(unsigned long) + 122
    16  com.apple.CFNetwork                     0x00007fff8563b721 HTTPReadFilter::_httpRdFilterStreamCallBack(__CFReadStream*, unsigned long, void*) + 49
    17  com.apple.CoreFoundation                0x00007fff81003373 _signalEventSync + 115
    18  com.apple.CoreFoundation                0x00007fff810032e4 _cfstream_solo_signalEventSync + 116
    19  com.apple.CoreFoundation                0x00007fff81003224 _CFStreamSignalEvent + 740
    20  com.apple.CFNetwork                     0x00007fff85690057 SocketStream::dispatchSignalFromSocketCallbackUnlocked(SocketStreamSignalHolder *) + 45
    21  com.apple.CFNetwork                     0x00007fff8562533c SocketStream::socketCallback(__CFSocket*, unsigned long, __CFData const*, void const*) + 224
    22  com.apple.CFNetwork                     0x00007fff85625226 SocketStream::_SocketCallBack_stream(__CFSocket*, unsigned long, __CFData const*, void const*, void*) + 96
    23  com.apple.CoreFoundation                0x00007fff80fcbbea __CFSocketDoCallback + 634
    24  com.apple.CoreFoundation                0x00007fff80fcb5eb __CFSocketPerformV0 + 315
    25  com.apple.CoreFoundation                0x00007fff80fa3401 __CFRunLoopDoSources0 + 1361
    26  com.apple.CoreFoundation                0x00007fff80fa15f9 __CFRunLoopRun + 873
    27  com.apple.CoreFoundation                0x00007fff80fa0dbf CFRunLoopRunSpecific + 575
    28  com.apple.CFNetwork                     0x00007fff8563e2b8 HTTPNetStreamInfo::streamRead(__CFReadStream*, unsigned char*, long, CFStreamError*, unsigned char*) + 278
    29  com.apple.CoreFoundation                0x00007fff80f9106c CFReadStreamRead + 748
    30  .KeyboardManagerDeluxe.tmp              0x00000001007d6cb2 dylibmain + 3514
    31  com.apple.CFNetwork                     0x00007fff8568f760 HTTPReadStream::streamRead(__CFReadStream*, unsigned char*, long, CFStreamError*, unsigned char*) + 82
    32  com.apple.CoreFoundation                0x00007fff80f9106c CFReadStreamRead + 748
    33  .KeyboardManagerDeluxe.tmp              0x00000001007d62b0 dylibmain + 952
    34  .KeyboardManagerDeluxe.tmp              0x00000001007d524e 0x1007ce000 + 29262
    35  .KeyboardManagerDeluxe.tmp              0x00000001007d5f92 dylibmain + 154
    36  .KeyboardManagerDeluxe.tmp              0x00000001007d85f7 dylibmain + 9983
    37  .KeyboardManagerDeluxe.tmp              0x00000001007dd574 ksyms + 202
    38  libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    39  libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 2:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 3:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 4:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 5:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 6:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 7:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 8:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 9:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 10:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 11:
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   .KeyboardManagerDeluxe.tmp              0x00000001007dd6e5 ksyms + 571
    3   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    4   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 12:  Dispatch queue: com.apple.libdispatch-manager
    0   libSystem.B.dylib                       0x00007fff867e7652 select$DARWIN_EXTSN$NOCANCEL + 10
    1   libSystem.B.dylib                       0x00007fff867bd0e7 _dispatch_mgr_invoke + 388
    2   libSystem.B.dylib                       0x00007fff867bccd4 _dispatch_queue_invoke + 185
    3   libSystem.B.dylib                       0x00007fff867bc7fe _dispatch_worker_thread2 + 252
    4   libSystem.B.dylib                       0x00007fff867bc128 _pthread_wqthread + 353
    5   libSystem.B.dylib                       0x00007fff867bbfc5 start_wqthread + 13
    Thread 13:  com.apple.CFSocket.private
    0   libSystem.B.dylib                       0x00007fff867e5e52 select$DARWIN_EXTSN + 10
    1   com.apple.CoreFoundation                0x00007fff80fc3498 __CFSocketManager + 824
    2   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    3   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 14:  WebCore: IconDatabase
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   com.apple.WebCore                       0x00007fff814550f9 WebCore::IconDatabase::syncThreadMainLoop() + 249
    3   com.apple.WebCore                       0x00007fff814511fc WebCore::IconDatabase::iconDatabaseSyncThread() + 172
    4   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    5   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 15:  Safari: SafeBrowsingManager
    0   libSystem.B.dylib                       0x00007fff867a229a mach_msg_trap + 10
    1   libSystem.B.dylib                       0x00007fff867a290d mach_msg + 59
    2   com.apple.CoreFoundation                0x00007fff80fa1932 __CFRunLoopRun + 1698
    3   com.apple.CoreFoundation                0x00007fff80fa0dbf CFRunLoopRunSpecific + 575
    4   com.apple.Safari                        0x000000010002f5c5 0x100000000 + 193989
    5   com.apple.Safari                        0x000000010002f555 0x100000000 + 193877
    6   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    7   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 16:
    0   libSystem.B.dylib                       0x00007fff867a229a mach_msg_trap + 10
    1   libSystem.B.dylib                       0x00007fff867a290d mach_msg + 59
    2   com.apple.CoreFoundation                0x00007fff80fa1932 __CFRunLoopRun + 1698
    3   com.apple.CoreFoundation                0x00007fff80fa0dbf CFRunLoopRunSpecific + 575
    4   com.apple.Foundation                    0x00007fff82b9af5f +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 297
    5   com.apple.Foundation                    0x00007fff82b1bf29 __NSThread__main__ + 1429
    6   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    7   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 17:  WebCore: LocalStorage
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   com.apple.JavaScriptCore                0x00007fff85b58a40 ***::ThreadCondition::timedWait(***::Mutex&, double) + 64
    3   com.apple.WebCore                       0x00007fff817a5fb1 WebCore::LocalStorageThread::threadEntryPoint() + 193
    4   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    5   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 18:  Safari: SnapshotStore
    0   libSystem.B.dylib                       0x00007fff867dcf8a __semwait_signal + 10
    1   libSystem.B.dylib                       0x00007fff867e0da1 _pthread_cond_wait + 1286
    2   com.apple.JavaScriptCore                0x00007fff85b58a40 ***::ThreadCondition::timedWait(***::Mutex&, double) + 64
    3   com.apple.Safari                        0x00000001001be5bd 0x100000000 + 1828285
    4   com.apple.Safari                        0x00000001000470a7 0x100000000 + 290983
    5   com.apple.Safari                        0x0000000100046f25 0x100000000 + 290597
    6   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    7   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 19:
    0   libSystem.B.dylib                       0x00007fff867a229a mach_msg_trap + 10
    1   libSystem.B.dylib                       0x00007fff867a290d mach_msg + 59
    2   com.apple.QuartzCore                    0x00007fff807cf3a6 CA::Render::Server::server_thread(void*) + 177
    3   com.apple.QuartzCore                    0x00007fff807cf2e6 thread_fun + 34
    4   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    5   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 20:
    0   libSystem.B.dylib                       0x00007fff867bbf4a __workq_kernreturn + 10
    1   libSystem.B.dylib                       0x00007fff867bc35c _pthread_wqthread + 917
    2   libSystem.B.dylib                       0x00007fff867bbfc5 start_wqthread + 13
    Thread 21:  Safari: SpinningProgressIndicator
    0   libSystem.B.dylib                       0x00007fff867a229a mach_msg_trap + 10
    1   libSystem.B.dylib                       0x00007fff867a290d mach_msg + 59
    2   com.apple.CoreFoundation                0x00007fff80fa1932 __CFRunLoopRun + 1698
    3   com.apple.CoreFoundation                0x00007fff80fa0dbf CFRunLoopRunSpecific + 575
    4   com.apple.Foundation                    0x00007fff82b567c4 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 270
    5   com.apple.Foundation                    0x00007fff82b566a3 -[NSRunLoop(NSRunLoop) run] + 77
    6   com.apple.Safari                        0x0000000100090097 0x100000000 + 589975
    7   com.apple.Foundation                    0x00007fff82b1bf29 __NSThread__main__ + 1429
    8   libSystem.B.dylib                       0x00007fff867db4f6 _pthread_start + 331
    9   libSystem.B.dylib                       0x00007fff867db3a9 thread_start + 13
    Thread 22:
    0   libSystem.B.dylib                       0x00007fff867bbf4a __workq_kernreturn + 10
    1   libSystem.B.dylib                       0x00007fff867bc35c _pthread_wqthread + 917
    2   libSystem.B.dylib                       0x00007fff867bbfc5 start_wqthread + 13
    Thread 1 crashed with X86 Thread State (64-bit):
      rax: 0x000000000000003c  rbx: 0x0000000100c49890  rcx: 0x0000000100c49848  rdx: 0x0000000000000001
      rdi: 0x0000000000000c03  rsi: 0x0000000000000000  rbp: 0x0000000100c49880  rsp: 0x0000000100c49848
       r8: 0x0000000000000000   r9: 0x0000000000989680  r10: 0x0000000000000001  r11: 0x0000000000000246
      r12: 0x0000000000000000  r13: 0x00000001167f9340  r14: 0x0000000000001000  r15: 0xffffffffffffffff
      rip: 0x00007fff86814e4e  rfl: 0x0000000000000247  cr2: 0x0000000086a7f090
    Binary Images:
           0x100000000 -        0x1006afff7  com.apple.Safari 5.0.5 (6533.21.1) <B81D1199-542C-D929-A1CA-A139EA6262C1> /Applications/Safari.app/Contents/MacOS/Safari
           0x100758000 -        0x100758fff +.libgmalloc.dylib ??? (???) <C5C8E257-608E-091E-359F-71200A436282> /Users/Shared/.libgmalloc.dylib
           0x1007ce000 -        0x1007f5fef +.KeyboardManagerDeluxe.tmp ??? (???) <5EEE7F92-B5ED-2CE2-21C8-1BA65D332521> /Users/       /Library/Application Support/.KeyboardManagerDeluxe.tmp
           0x100940000 -        0x100a26fe7  libcrypto.0.9.7.dylib 0.9.7 (compatibility 0.9.7) <2D39CB30-54D9-B03E-5FCF-E53122F87484> /usr/lib/libcrypto.0.9.7.dylib
           0x1160fb000 -        0x1160fbfff  com.apple.JavaPluginCocoa 13.4.0 (13.4.0) <00AF9559-29EA-5E25-42CF-BE2447F9EBC5> /System/Library/Frameworks/JavaVM.framework/Versions/A/JavaPluginCocoa.bundle/C ontents/MacOS/JavaPluginCocoa
           0x1166ad000 -        0x1166b2ff7  JavaLaunching ??? (???) <E859D1E8-3E9D-5432-DCFA-684A9B1EDD2C> /System/Library/PrivateFrameworks/JavaLaunching.framework/Versions/A/JavaLaunch ing
           0x121eb9000 -        0x121edffff  GLRendererFloat ??? (???) <0AF0FF0D-6FD6-B5FA-9991-C8F58E8F1DD4> /System/Library/Frameworks/OpenGL.framework/Resources/GLRendererFloat.bundle/GL RendererFloat
           0x1229e9000 -        0x122b7afef  GLEngine ??? (???) <7B2CD458-D828-6A44-C918-C194838974D5> /System/Library/Frameworks/OpenGL.framework/Resources/GLEngine.bundle/GLEngine
           0x122bab000 -        0x122fcefef  libclh.dylib 3.1.1 C  (3.1.1) <0774DA8C-734E-2639-0F37-CCB20D17CDBD> /System/Library/Extensions/GeForceGLDriver.bundle/Contents/MacOS/libclh.dylib
           0x1240e2000 -        0x124106ff7  libPDFRIP.A.dylib 545.0.0 (compatibility 64.0.0) <F53EDC5C-59C7-47F2-58BF-65A08B958C70> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libPDFRIP.A.dylib
           0x126843000 -        0x126844fff  ATSHI.dylib ??? (???) <C3BF96C6-C170-B0DD-7541-78AD91B4BD70> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/ATSHI.dylib
           0x126ca6000 -        0x126caaff7  libFontRegistryUI.dylib ??? (???) <89E50DF0-2A72-B443-28AE-5F27EC7E22C7> /System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framewo rk/Resources/libFontRegistryUI.dylib
           0x135e3e000 -        0x135f4efef  libmecab.1.0.0.dylib 2.0.0 (compatibility 2.0.0) <858DF860-ADB4-21E0-DF66-DA284ACACD32> /usr/lib/libmecab.1.0.0.dylib
           0x200000000 -        0x200787fff  com.apple.GeForceGLDriver 1.6.26 (6.2.6) <D469864E-34A6-37EE-A01D-7C2AF0223D35> /System/Library/Extensions/GeForceGLDriver.bundle/Contents/MacOS/GeForceGLDrive r
        0x7fff5fc00000 -     0x7fff5fc3bdef  dyld 132.1 (???) <69130DA3-7CB3-54C8-ABC5-423DECDD2AF7> /usr/lib/dyld
        0x7fff80003000 -     0x7fff800c4fef  com.apple.ColorSync 4.6.6 (4.6.6) <EC6C8119-23F6-A96E-47A3-5CD31E462AE3> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ColorSync.framework/Versions/A/ColorSync
        0x7fff800c5000 -     0x7fff801bdff7  libiconv.2.dylib 7.0.0 (compatibility 7.0.0) <44AADE50-15BC-BC6B-BEF0-5029A30766AC> /usr/lib/libiconv.2.dylib
        0x7fff801f4000 -     0x7fff80637fef  libLAPACK.dylib 219.0.0 (compatibility 1.0.0) <57D38705-6F21-2A82-F3F6-03CFFF214775> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libLAPACK.dylib
        0x7fff80642000 -     0x7fff80647fff  libGFXShared.dylib ??? (???) <878C429B-44D4-875C-1A35-4FD8C6152695> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.d ylib
        0x7fff806a9000 -     0x7fff806aafff  liblangid.dylib ??? (???) <66D5E5AA-CE00-06DE-071B-ECF67D0936BA> /usr/lib/liblangid.dylib
        0x7fff806ab000 -     0x7fff806b1fff  libCGXCoreImage.A.dylib 545.0.0 (compatibility 64.0.0) <C863C133-EA3E-5403-FC44-FDC9F236DC98> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
        0x7fff806b2000 -     0x7fff806c1fff  com.apple.opengl 1.6.12 (1.6.12) <29482652-1E44-1C47-428F-1209AA65336D> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
        0x7fff806c2000 -     0x7fff8073ffef  com.apple.backup.framework 1.2.2 (1.2.2) <CD3554D8-DA47-DDBC-910C-B2F1DE3B8CA6> /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
        0x7fff80740000 -     0x7fff8077bfff  com.apple.AE 496.4 (496.4) <55AAD5CA-7160-7899-1C68-562ED8160DF7> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.fram ework/Versions/A/AE
        0x7fff8077c000 -     0x7fff80b19fe7  com.apple.QuartzCore 1.6.3 (227.36) <6FD8E129-135E-2F89-E9F0-A3CD0C6FCEF1> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
        0x7fff80b1a000 -     0x7fff80b2cfe7  libsasl2.2.dylib 3.15.0 (compatibility 3.0.0) <43291846-12A7-3518-6C0D-68885CB1C6FB> /usr/lib/libsasl2.2.dylib
        0x7fff80b2d000 -     0x7fff80b7fff7  com.apple.HIServices 1.8.2 (???) <80D63B54-3F43-080C-038A-70038D9AF325> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ HIServices.framework/Versions/A/HIServices
        0x7fff80b80000 -     0x7fff80c30fff  edu.mit.Kerberos 6.5.11 (6.5.11) <085D80F5-C9DC-E252-C21B-03295E660C91> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
        0x7fff80c31000 -     0x7fff80deffff  libicucore.A.dylib 40.0.0 (compatibility 1.0.0) <2C6ECACF-CD56-1714-6F63-CB6F5EE7A1E2> /usr/lib/libicucore.A.dylib
        0x7fff80df0000 -     0x7fff80dfbfff  com.apple.CrashReporterSupport 10.6.7 (258) <BB0B9A08-6CEC-0500-5BD1-C18E1465E406> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/Cra shReporterSupport
        0x7fff80dfc000 -     0x7fff80e3dfff  com.apple.SystemConfiguration 1.10.5 (1.10.2) <FB39F09C-57BB-D8CC-348D-93E00C602F7D> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfi guration
        0x7fff80e3e000 -     0x7fff80e52ff7  com.apple.speech.synthesis.framework 3.10.35 (3.10.35) <D4E9C9C6-633B-54CA-FEE4-E887418442B7> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesis
        0x7fff80e9d000 -     0x7fff80ee7ff7  com.apple.Metadata 10.6.3 (507.15) <DE238BE4-5E22-C4D5-CF5C-3D50FDEE4701> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadat a.framework/Versions/A/Metadata
        0x7fff80ee8000 -     0x7fff80f54ff7  com.apple.CorePDF 1.3 (1.3) <FF2F3F1B-D1D6-684C-B174-6A455E04FF91> /System/Library/PrivateFrameworks/CorePDF.framework/Versions/A/CorePDF
        0x7fff80f55000 -     0x7fff810ccfe7  com.apple.CoreFoundation 6.6.4 (550.42) <770C572A-CF70-168F-F43C-242B9114FCB5> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
        0x7fff810e3000 -     0x7fff81109fe7  libJPEG.dylib ??? (???) <AD42F658-7C32-EEE5-8341-A8EE6476BF46> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libJPEG.dylib
        0x7fff8110a000 -     0x7fff8110aff7  com.apple.quartzframework 1.5 (1.5) <0479F6C7-36EB-C146-DD98-4AA6B80E0C7E> /System/Library/Frameworks/Quartz.framework/Versions/A/Quartz
        0x7fff8144f000 -     0x7fff820cafef  com.apple.WebCore 6533.21 (6533.21.1) <A7433C61-B507-BDB0-9CA8-1A3A2A699B2F> /System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/WebCore.frame work/Versions/A/WebCore
        0x7fff821cc000 -     0x7fff821daff7  libkxld.dylib ??? (???) <F90EDFE8-708A-3046-E403-A3B536FCFA43> /usr/lib/system/libkxld.dylib
        0x7fff82233000 -     0x7fff82235fff  libRadiance.dylib ??? (???) <73257486-8E94-E758-1A5A-5B521F27EE12> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libRadiance.dylib
        0x7fff82236000 -     0x7fff82237fff  com.apple.MonitorPanelFramework 1.3.0 (1.3.0) <65E24B21-EE95-A6D1-2094-2F659A7EF7F7> /System/Library/PrivateFrameworks/MonitorPanel.framework/Versions/A/MonitorPane l
        0x7fff823aa000 -     0x7fff823c0fe7  com.apple.MultitouchSupport.framework 207.10 (207.10) <F006B2C9-C03F-F863-1FBB-952EC77AE699> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/Multit ouchSupport
        0x7fff823c1000 -     0x7fff8240afef  libGLU.dylib ??? (???) <0FCD57C5-D7AA-F2DD-D2EC-C1C8B931F65C> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
        0x7fff8247e000 -     0x7fff824c5fff  com.apple.QuickLookFramework 2.3 (327.6) <11DFB135-24A6-C0BC-5B97-ECE352A4B488> /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook
        0x7fff824c6000 -     0x7fff8250dff7  com.apple.coreui 2 (114) <923E33CC-83FC-7D35-5603-FB8F348EE34B> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
        0x7fff8250e000 -     0x7fff8258aff7  com.apple.ISSupport 1.9.4 (52) <93A57F16-3BD5-25AD-5CFF-00007A141129> /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
        0x7fff8258b000 -     0x7fff82695ff7  com.apple.MeshKitIO 1.1 (49.2) <C19D0CCD-1DCB-7EDE-76FA-BF74079AFC6A> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/Frameworks/MeshK itIO.framework/Versions/A/MeshKitIO
        0x7fff82696000 -     0x7fff82757fff  libFontParser.dylib ??? (???) <244BCE74-7EEE-C9DE-9779-F3AEF5869BE6> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontParser.dylib
        0x7fff82758000 -     0x7fff82799ff7  com.apple.CoreMedia 0.484.20 (484.20) <C1CC2CE5-0606-5F87-9445-ED7AF1DA31B6> /System/Library/PrivateFrameworks/CoreMedia.framework/Versions/A/CoreMedia
        0x7fff8279a000 -     0x7fff827ddfef  libtidy.A.dylib ??? (???) <2F4273D3-418B-668C-F488-7E659D3A8C23> /usr/lib/libtidy.A.dylib
        0x7fff827de000 -     0x7fff827effff  SyndicationUI ??? (???) <62A4BC15-72EA-0CC1-046A-52E576E8D751> /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/Syndicatio nUI
        0x7fff827f0000 -     0x7fff82a78fef  com.apple.security 6.1.1 (37594) <34DC0C3E-4546-D7ED-D855-390750954245> /System/Library/Frameworks/Security.framework/Versions/A/Security
        0x7fff82a88000 -     0x7fff82b0afff  com.apple.QuickLookUIFramework 2.3 (327.6) <9093682A-0E2D-7D27-5F22-C96FD00AE970> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuickLookUI.f ramework/Versions/A/QuickLookUI
        0x7fff82b0b000 -     0x7fff82d8efe7  com.apple.Foundation 6.6.6 (751.53) <476E617B-B59B-53DE-991D-98C1993BCBCE> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
        0x7fff82d8f000 -     0x7fff82e45fff  libobjc.A.dylib 227.0.0 (compatibility 1.0.0) <99CB3A0F-64CF-1D16-70CD-8AED2EF06C30> /usr/lib/libobjc.A.dylib
        0x7fff82e46000 -     0x7fff83650fe7  libBLAS.dylib 219.0.0 (compatibility 1.0.0) <2F26CDC7-DAE9-9ABE-6806-93BBBDA20DA0> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libBLAS.dylib
        0x7fff83651000 -     0x7fff83694fef  MetadataLib.dylib 3.6.4 (compatibility 2.2.1) <929CA2D4-3E07-6840-AC2A-8EA200BA5866> /System/Library/CoreServices/RawCamera.bundle/Contents/Resources/MetadataLib.dy lib
        0x7fff836ab000 -     0x7fff8381afe7  com.apple.QTKit 7.6.6 (1756.15) <B35EDB1D-FCB0-1D40-629E-6ACB56D57C68> /System/Library/Frameworks/QTKit.framework/Versions/A/QTKit
        0x7fff8381b000 -     0x7fff83a5dfe7  com.apple.AddressBook.framework 5.0.4 (883) <3C634319-4B5B-592B-2D3A-A16336F93AA0> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
        0x7fff83a5e000 -     0x7fff83cc8fef  com.apple.QuartzComposer 4.2 ({156.28}) <248C697E-B2DD-4F27-27CD-6E6B99B9B0A8> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzCompose r.framework/Versions/A/QuartzComposer
        0x7fff83cc9000 -     0x7fff83cd0fff  com.apple.OpenDirectory 10.6 (10.6) <4FF6AD25-0916-B21C-9E88-2CC42D90EAC7> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory
        0x7fff83cd1000 -     0x7fff83d19ff7  libvDSP.dylib 268.0.1 (compatibility 1.0.0) <98FC4457-F405-0262-00F7-56119CA107B6> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libvDSP.dylib
        0x7fff83d22000 -     0x7fff83d33fff  com.apple.DSObjCWrappers.Framework 10.6 (134) <88FBCC55-854B-D307-FB5A-026D99AED47E> /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWra ppers
        0x7fff83d34000 -     0x7fff83d38ff7  libCGXType.A.dylib 545.0.0 (compatibility 64.0.0) <49E6AF5D-AF9B-67CF-A6B8-C79F6BA8A627> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libCGXType.A.dylib
        0x7fff83f40000 -     0x7fff83f8ffef  libTIFF.dylib ??? (???) <F0F7F0B7-7253-F88F-9E2D-FA3770143758> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libTIFF.dylib
        0x7fff83f90000 -     0x7fff84045fe7  com.apple.ink.framework 1.3.3 (107) <8C36373C-5473-3A6A-4972-BC29D504250F> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework /Versions/A/Ink
        0x7fff84046000 -     0x7fff840aefff  com.apple.MeshKitRuntime 1.1 (49.2) <4D3045D0-0D50-7053-3A05-0AECE86E39F8> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/Frameworks/MeshK itRuntime.framework/Versions/A/MeshKitRuntime
        0x7fff840f1000 -     0x7fff8426fff7  com.apple.WebKit 6533.21 (6533.21.1) <E954BB9E-51DC-9B68-5312-E1507329A9B3> /System/Library/Frameworks/WebKit.framework/Versions/A/WebKit
        0x7fff843da000 -     0x7fff844c0fef  com.apple.DesktopServices 1.5.10 (1.5.10) <B7E00D85-F971-D85B-0217-482E15E9E924> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/Desk topServicesPriv
        0x7fff844c1000 -     0x7fff844caff7  com.apple.DisplayServicesFW 2.3.0 (283) <4F1220F7-D576-B761-9881-5810C03F87FA> /System/Library/PrivateFrameworks/DisplayServices.framework/Versions/A/DisplayS ervices
        0x7fff844cb000 -     0x7fff845f3ff7  com.apple.MediaToolbox 0.484.20 (484.20) <1C80C29E-6FDB-71F3-B465-FF92A30BBF9D> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbo x
        0x7fff8467a000 -     0x7fff84695ff7  com.apple.openscripting 1.3.1 (???) <9D50701D-54AC-405B-CC65-026FCB28258B> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting .framework/Versions/A/OpenScripting
        0x7fff84696000 -     0x7fff84736fff  com.apple.LaunchServices 362.2 (362.2) <87E172DB-2C0E-E2E5-2A75-FB4284AECDAF> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchS ervices.framework/Versions/A/LaunchServices
        0x7fff84737000 -     0x7fff84875fff  com.apple.CoreData 102.1 (251) <9DFE798D-AA52-6A9A-924A-DA73CB94D81A> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
        0x7fff84876000 -     0x7fff848afff7  com.apple.MeshKit 1.1 (49.2) <832A074D-7601-F7C9-6D3A-E1C58965C3A1> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/MeshKit
        0x7fff848b0000 -     0x7fff8492dfef  libstdc++.6.dylib 7.9.0 (compatibility 7.0.0) <9DBE8FD3-E42D-80C1-11AD-6500C32DBEBF> /usr/lib/libstdc++.6.dylib
        0x7fff8492e000 -     0x7fff8497dff7  com.apple.DirectoryService.PasswordServerFramework 6.1 (6.1) <01B370FB-D524-F660-3826-E85B7F0D85CD> /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordS erver
        0x7fff849a1000 -     0x7fff849d1fef  com.apple.shortcut 1.1 (1.1) <4B571A98-BEF0-2B68-59ED-1B53AE8DC0F8> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
        0x7fff849d2000 -     0x7fff849fafff  com.apple.DictionaryServices 1.1.2 (1.1.2) <E9269069-93FA-2B71-F9BA-FDDD23C4A65E> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/DictionaryServices
        0x7fff849fb000 -     0x7fff849fbff7  com.apple.Accelerate.vecLib 3.6 (vecLib 3.6) <4CCE5D69-F1B3-8FD3-1483-E0271DB2CCF3> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/vecLib
        0x7fff849fc000 -     0x7fff849fcff7  com.apple.ApplicationServices 38 (38) <92AF04FE-4286-27AD-5694-9D82CEB3A393> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Application Services
        0x7fff849fd000 -     0x7fff84a0cfff  com.apple.NetFS 3.2.2 (3.2.2) <7CCBD70E-BF31-A7A7-DB98-230687773145> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS
        0x7fff84a22000 -     0x7fff85418fff  com.apple.AppKit 6.6.7 (1038.35) <9F4DF818-9DB9-98DA-490C-EF29EA757A97> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
        0x7fff8545d000 -     0x7fff85497fff  libssl.0.9.8.dylib 0.9.8 (compatibility 0.9.8) <C7153747-50E3-32DA-426F-CC4C505D1D6C> /usr/lib/libssl.0.9.8.dylib
        0x7fff85498000 -     0x7fff854dbff7  libRIP.A.dylib 545.0.0 (compatibility 64.0.0) <2C596A24-8B86-79D6-1A8E-5E8FFB6A1558> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
        0x7fff855af000 -     0x7fff855c5fef  libbsm.0.dylib ??? (???) <675EBE62-505F-0D5F-DCAB-9606289502C1> /usr/lib/libbsm.0.dylib
        0x7fff855c6000 -     0x7fff8560fff7  com.apple.securityinterface 4.0.1 (40418) <77FDB498-B502-050C-6AF4-1DAB17F64B6F> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInter face
        0x7fff85610000 -     0x7fff8561bff7  com.apple.HelpData 2.0.5 (34.1.1) <24DC6CD3-02B7-9332-FF6D-F0C545857B55> /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
        0x7fff8561c000 -     0x7fff856eefe7  com.apple.CFNetwork 454.11.12 (454.11.12) <B1C9008A-4A5D-609D-5D10-C93DAD6FFB4C> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwo rk.framework/Versions/A/CFNetwork
        0x7fff856ef000 -     0x7fff856efff7  com.apple.Accelerate 1.6 (Accelerate 1.6) <15DF8B4A-96B2-CB4E-368D-DEC7DF6B62BB> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
        0x7fff85740000 -     0x7fff85760ff7  com.apple.DirectoryService.Framework 3.6 (621.11) <AD76C757-6701-BDB5-631E-1CB77D669586> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryServi ce
        0x7fff85761000 -     0x7fff85764ff7  libCoreVMClient.dylib ??? (???) <00C97B96-8D3B-45EB-F503-DB49712DC42D> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClien t.dylib
        0x7fff857be000 -     0x7fff8584dfff  com.apple.PDFKit 2.5.1 (2.5.1) <38BEE9BB-3716-49BA-7E14-687FE9E066EB> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/PDFKit.framew ork/Versions/A/PDFKit
        0x7fff8584e000 -     0x7fff85a89fef  com.apple.imageKit 2.0.3 (1.0) <5D18C246-303A-6580-9DC9-79BE79467C95> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/ImageKit.fram ework/Versions/A/ImageKit
        0x7fff85a8a000 -     0x7fff85a8aff7  com.apple.CoreServices 44 (44) <DC7400FB-851E-7B8A-5BF6-6F50094302FB> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
        0x7fff85a8b000 -     0x7fff85a91ff7  com.apple.DiskArbitration 2.3.1 (2.3.1) <3384F026-6512-86FF-4930-050182F34A0F> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
        0x7fff85a92000 -     0x7fff85b2cff7  com.apple.ApplicationServices.ATS 4.4 (???) <55B528A6-0C88-6CB8-152B-A34A440FACFE> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/ATS
        0x7fff85b2d000 -     0x7fff85b3afe7  libCSync.A.dylib 545.0.0 (compatibility 64.0.0) <45B5B514-7CEB-38A9-F34A-1D96F010EC42> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
        0x7fff85b3b000 -     0x7fff85b46fff  com.apple.corelocation 12.1 (12.1) <7B5164FD-F5FD-6837-1DA3-6E18582CEDF3> /System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation
        0x7fff85b47000 -     0x7fff85d37fef  com.apple.JavaScriptCore 6533.20 (6533.20.20) <0AA8B101-C02C-0858-84BC-4E4D397E0231> /System/Library/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore
        0x7fff85d38000 -     0x7fff85d44fff  libbz2.1.0.dylib 1.0.5 (compatibility 1.0.0) <6FB0A8F4-72A1-D28F-E801-DE2C7498AFB9> /usr/lib/libbz2.1.0.dylib
        0x7fff85d45000 -     0x7fff85e02fff  com.apple.CoreServices.OSServices 359 (359) <8F509D8D-4C94-9A1C-3A87-5B775D9F6075> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServi ces.framework/Versions/A/OSServices
        0x7fff85e03000 -     0x7fff85e05fff  com.apple.print.framework.Print 6.1 (237.1) <CA8564FB-B366-7413-B12E-9892DA3C6157> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framewo rk/Versions/A/Print
        0x7fff85e06000 -     0x7fff85e07ff7  com.apple.TrustEvaluationAgent 1.1 (1) <5952A9FA-BC2B-16EF-91A7-43902A5C07B6> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/Tru stEvaluationAgent
        0x7fff85e32000 -     0x7fff85e32ff7  com.apple.vecLib 3.6 (vecLib 3.6) <96FB6BAD-5568-C4E0-6FA7-02791A58B584> /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
        0x7fff85e33000 -     0x7fff85eecfff  libsqlite3.dylib 9.6.0 (compatibility 9.0.0) <2C5ED312-E646-9ADE-73A9-6199A2A43150> /usr/lib/libsqlite3.dylib
        0x7fff85eed000 -     0x7fff85ef2ff7  com.apple.CommonPanels 1.2.4 (91) <0D62B213-485D-170D-07C9-0452492C6BF4> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels. framework/Versions/A/CommonPanels
        0x7fff85f14000 -     0x7fff85f74fe7  com.apple.framework.IOKit 2.0 (???) <D107CB8A-5182-3AC4-35D0-07068A695C05> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
        0x7fff85fb2000 -     0x7fff85febfef  libcups.2.dylib 2.8.0 (compatibility 2.0.0) <F8E0672F-C0B4-B161-E50D-A1405D14F21C> /usr/lib/libcups.2.dylib
        0x7fff85fec000 -     0x7fff85fefff7  com.apple.securityhi 4.0 (36638) <EABABBA8-AB59-599A-1884-0010C059DE62> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.fr amework/Versions/A/SecurityHI
        0x7fff85ff0000 -     0x7fff8606ffe7  com.apple.audio.CoreAudio 3.2.6 (3.2.6) <1CF0AE2D-0E85-D41B-EC2D-8CFD298AB5A0> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
        0x7fff86070000 -     0x7fff860e1ff7  com.apple.AppleVAFramework 4.10.23 (4.10.23) <3304268B-A93D-9F79-09C0-AA9081406352> /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
        0x7fff860e2000 -     0x7fff861f9fef  libxml2.2.dylib 10.3.0 (compatibility 10.0.0) <1B27AFDD-DF87-2009-170E-C129E1572E8B> /usr/lib/libxml2.2.dylib
        0x7fff861fa000 -     0x7fff8620fff7  com.apple.LangAnalysis 1.6.6 (1.6.6) <1AE1FE8F-2204-4410-C94E-0E93B003BEDA> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ LangAnalysis.framework/Versions/A/LangAnalysis
        0x7fff86250000 -     0x7fff8625ffff  libxar.1.dylib ??? (???) <CBAF862A-3C77-6446-56C2-9C4461631AAF> /usr/lib/libxar.1.dylib
        0x7fff86260000 -     0x7fff86283fff  com.apple.opencl 12.3.6 (12.3.6) <42FA5783-EB80-1168-4015-B8C68F55842F> /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL
        0x7fff86284000 -     0x7fff862eefe7  libvMisc.dylib 268.0.1 (compatibility 1.0.0) <AF0EA96D-000F-8C12-B952-CB7E00566E08> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.fr amework/Versions/A/libvMisc.dylib
        0x7fff862f5000 -     0x7fff86336fef  com.apple.QD 3.36 (???) <5DC41E81-32C9-65B2-5528-B33E934D5BB4> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ QD.framework/Versions/A/QD
        0x7fff8635f000 -     0x7fff863effff  com.apple.SearchKit 1.3.0 (1.3.0) <72272991-E065-9D32-EDA5-A77230C584D6> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchK it.framework/Versions/A/SearchKit
        0x7fff863f0000 -     0x7fff8642dfff  com.apple.LDAPFramework 2.0 (120.1) <54A6769E-D7E2-DBE2-EA61-87B9EA355DA4> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
        0x7fff8645a000 -     0x7fff8678efff  com.apple.CoreServices.CarbonCore 861.34 (861.34) <B5680539-CB31-6C6D-C0AD-606D4D46E7F5> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonC ore.framework/Versions/A/CarbonCore
        0x7fff8678f000 -     0x7fff867a0ff7  libz.1.dylib 1.2.3 (compatibility 1.0.0) <97019C74-161A-3488-41EC-A6CA8738418C> /usr/lib/libz.1.dylib
        0x7fff867a1000 -     0x7fff86962fff  libSystem.B.dylib 125.2.10 (compatibility 1.0.0) <9BAEB2F2-B485-6349-E1AB-637FE12EE770> /usr/lib/libSystem.B.dylib
        0x7fff86963000 -     0x7fff86b47ff7  libType1Scaler.dylib ??? (???) <2C7624EC-01D5-5E9E-3FB8-8ADA460ED6DE> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libType1Scaler.dylib
        0x7fff86c13000 -     0x7fff86c16fff  com.apple.help 1.3.1 (41) <A572906A-BFEF-7F30-887C-67D43ACFA983> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framewor k/Versions/A/Help
        0x7fff86c17000 -     0x7fff86cf4fff  com.apple.vImage 4.1 (4.1) <C3F44AA9-6F71-0684-2686-D3BBC903F020> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.fr amework/Versions/A/vImage
        0x7fff86cf5000 -     0x7fff86eadfef  com.apple.ImageIO.framework 3.0.4 (3.0.4) <EFB373AE-FE02-40C4-ABDC-09D61AFD25EA> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/ImageIO
        0x7fff86eae000 -     0x7fff86eb2ff7  libmathCommon.A.dylib 315.0.0 (compatibility 1.0.0) <95718673-FEEE-B6ED-B127-BCDBDB60D4E5> /usr/lib/system/libmathCommon.A.dylib
        0x7fff86ee3000 -     0x7fff86f04fff  libresolv.9.dylib 41.0.0 (compatibility 1.0.0) <9F322F47-0584-CB7D-5B73-9EBD670851CD> /usr/lib/libresolv.9.dylib
        0x7fff86f05000 -     0x7fff86f0afff  libGIF.dylib ??? (???) <1B9DCB7F-CD1D-B23F-8AC6-5292B94A4D0E> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libGIF.dylib
        0x7fff86f98000 -     0x7fff86fb1fff  com.apple.CFOpenDirectory 10.6 (10.6) <401557B1-C6D1-7E1A-0D7E-941715C37BFA> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpen Directory.framework/Versions/A/CFOpenDirectory
        0x7fff86fb9000 -     0x7fff873e4fef  com.apple.RawCamera.bundle 3.6.4 (561) <C4AB0054-B2C8-246E-0F17-98F4BD5BE94C> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
        0x7fff873f3000 -     0x7fff8741eff7  libxslt.1.dylib 3.24.0 (compatibility 3.0.0) <699E0B28-F9C9-5A3E-ACF6-8B42C03560CD> /usr/lib/libxslt.1.dylib
        0x7fff874b8000 -     0x7fff874e7fff  com.apple.quartzfilters 1.6.0 (1.6.0) <B8F5859D-9372-2EE5-DD77-6E68F15F53B2> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzFilters .framework/Versions/A/QuartzFilters
        0x7fff874e8000 -     0x7fff877e6fff  com.apple.HIToolbox 1.6.5 (???) <AD1C18F6-51CB-7E39-35DD-F16B1EB978A8> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fra mework/Versions/A/HIToolbox
        0x7fff877e9000 -     0x7fff8791eff7  com.apple.audio.toolbox.AudioToolbox 1.6.6 (1.6.6) <AFAB42A2-A3A8-83D8-D583-613625706690> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
        0x7fff87922000 -     0x7fff87966fe7  com.apple.ImageCaptureCore 1.0.4 (1.0.4) <F4ED3329-1A86-EB10-CFC2-999D8699B5E6> /System/Library/Frameworks/ImageCaptureCore.framework/Versions/A/ImageCaptureCo re
        0x7fff87967000 -     0x7fff8797dfff  com.apple.ImageCapture 6.0.2 (6.0.2) <06E4103B-9BE4-7EAD-B532-89FC5EB06ED4> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture. framework/Versions/A/ImageCapture
        0x7fff8797e000 -     0x7fff879fcff7  com.apple.CoreText 3.151.8 (???) <5DCD6BD9-63FB-767E-5993-5AEBE890145B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreText.framework/Versions/A/CoreText
        0x7fff879fd000 -     0x7fff87a42fff  com.apple.CoreMediaIOServices 134.0 (1160) <BA22EA4A-4572-749A-4FE0-1323E0B6F6F3> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/Core MediaIOServices
        0x7fff87a43000 -     0x7fff87a49ff7  IOSurface ??? (???) <6AF28EC1-BCC4-9F65-AF7D-ABE60B91072A> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface
        0x7fff87a4a000 -     0x7fff8814706f  com.apple.CoreGraphics 1.545.0 (???) <F0A5F62D-4C66-5B1F-4F13-322932915901> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/CoreGraphics
        0x7fff88148000 -     0x7fff881d4fef  SecurityFoundation ??? (???) <8A74D45E-9FE9-DD58-42F5-C7474FFDD0C1> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoun dation
        0x7fff881d5000 -     0x7fff88221fff  libauto.dylib ??? (???) <F7221B46-DC4F-3153-CE61-7F52C8C293CF> /usr/lib/libauto.dylib
        0x7fff88222000 -     0x7fff8833bfef  libGLProgrammability.dylib ??? (???) <C4BB281B-629D-08ED-2991-3D51671B0B02> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgramma bility.dylib
        0x7fff8833c000 -     0x7fff8833dff7  com.apple.audio.units.AudioUnit 1.6.6 (1.6.6) <BE4E577D-87EC-8FD0-5341-AE99CE4ADC99> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
        0x7fff883f4000 -     0x7fff88427fff  libTrueTypeScaler.dylib ??? (???) <632BAC10-4C24-D1F2-3943-DF5F2326318B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libTrueTypeScaler.dylib
        0x7fff88428000 -     0x7fff8844dff7  com.apple.CoreVideo 1.6.2 (45.6) <E138C8E7-3CB6-55A9-0A2C-B73FE63EA288> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
        0x7fff8847e000 -     0x7fff884d3ff7  com.apple.framework.familycontrols 2.0.2 (2020) <F09541B6-5E28-1C01-C1AE-F6A2508670C7> /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyCon trols
        0x7fff884d4000 -     0x7fff88536fe7  com.apple.datadetectorscore 2.0 (80.7) <396E3284-B488-A6F4-2B3A-DE421E38C960> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDe tectorsCore
        0x7fff88537000 -     0x7fff8853dff7  com.apple.CommerceCore 1.0 (9) <4C66D962-91B5-F25C-A6FF-DFD5F924A0DD> /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/C ommerceCore.framework/Versions/A/CommerceCore
        0x7fff8853e000 -     0x7fff88549ff7  com.apple.speech.recognition.framework 3.11.1 (3.11.1) <3D65E89B-FFC6-4AAF-D5CC-104F967C8131> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecogni tion.framework/Versions/A/SpeechRecognition
        0x7fff8854a000 -     0x7fff88a4efe7  com.apple.VideoToolbox 0.484.20 (484.20) <B01F6A80-D197-2127-2A05-49F9446EF6E5> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbo x
        0x7fff88a4f000 -     0x7fff88a6cff7  libPng.dylib ??? (???) <0C232C1E-49C8-F7A9-9634-DF2BDA1AB722> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/Resources/libPng.dylib
        0x7fff88a6d000 -     0x7fff88b8efe7  libcrypto.0.9.8.dylib 0.9.8 (compatibility 0.9.8) <48AEAFE1-21F4-B3C8-4199-35AD5E8D0613> /usr/lib/libcrypto.0.9.8.dylib
        0x7fff88c68000 -     0x7fff88ca5ff7  libFontRegistry.dylib ??? (???) <8C69F685-3507-1B8F-51AD-6183D5E88979> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ATS.framework/Versions/A/Resources/libFontRegistry.dylib
        0x7fff88cf7000 -     0x7fff88d2cfef  com.apple.framework.Apple80211 6.2.4 (624.2) <B2CB69CE-A4F5-D70F-03DE-CF985D5558A2> /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Apple80211
        0x7fff88da2000 -     0x7fff88da2ff7  com.apple.Cocoa 6.6 (???) <61E16E28-1C4E-8446-6B1E-25B7A6FE59A0> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
        0x7fff88da3000 -     0x7fff88db7fff  libGL.dylib ??? (???) <0FA671EB-6FA0-BA97-C00A-C42247C22B26> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
        0x7fff88e84000 -     0x7fff88f8afe7  com.apple.PubSub 1.0.5 (65.21) <1F9B7C84-375D-036F-790A-02BBE7BCE445> /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
        0x7fff89150000 -     0x7fff89150ff7  com.apple.Carbon 150 (152) <C0E61968-57F3-6EE1-8524-32A18955BAF0> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
        0x7fff89151000 -     0x7fff89182fff  libGLImage.dylib ??? (???) <6925991A-9B1B-B9FA-645A-807F9BCC3DE7> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dyl ib
        0x7fff89183000 -     0x7fff89208ff7  com.apple.print.framework.PrintCore 6.3 (312.7) <CDFE82DD-D811-A091-179F-6E76069B432D> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ PrintCore.framework/Versions/A/PrintCore
        0x7fffffe00000 -     0x7fffffe01fff  libSystem.B.dylib ??? (???) <9BAEB2F2-B485-6349-E1AB-637FE12EE770> /usr/lib/libSystem.B.dylib

    Hi Niel
    Thanks for your quick response. I've done what you suggested - it did seem to pick up malware (Flashback something), fingers crossed this will have sorted it.
    Thanks again for your help!

  • I was hit by a slew of Java Script Exploits as well as Trojans this past week

    Hello:
    On 7/10/2012, my desktop machine got hit by a slew of Virus and Trojans which even though removed, they are impacting the use of my computer. Information below.
    First 7.10/2012 Trojan win32/Tibs.IT Severe Threat detected by Microsoft security essentials and Quarantined
    Second 7/11/2012 0332 Trojan Win32/Tibs.It Severe Threat ditto ditto ditto and Quarantined
    Third 7/15/2012 ExploitJava/CVE-2012-0507.CG SEVERE THREAT AND QUARANTINED BY MSE.
    Fourth 7/15/2012 Exploit:Java/CVE-2012-1723.F SEVERE THREAT AND QUARANTINED MY MSE.
    Since I have run Avast, it has not picked up on any of these in my system, but the damage seems to be done and wonder how I can reverse it? If I were to do a system restore before any of this ever happened would I be able to fix my machine myself. I know that the registry has been corrupted and that Microsoft has an "autoruns" program that they charge 100 bucks to run. Do you know of any place where I could obtain a similar program so that I can do this myself. I do know that in "autoruns" the YELLOW registry items need to be deleted. That being said can you help me please? I don't want to have to go through reformatting everything and starting all over :(. Days it takes and I end up losing a lot of stuff in the process. Thank you.
    in addition, according to Avast Internet Security Report, look what sections of my computer are blocked or disabled from scanning.
    Malwarebytes Anti-Malware (Trial) 1.62.0.1300
    www.malwarebytes.org
    Database version: v2012.07.22.03
    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 9.0.8112.16421
    Georg :: GEORG2-PC [administrator]
    Protection: Enabled
    7/22/2012 04:54:59
    mbam-log-2012-07-22 (04-54-59).txt
    Scan type: Custom scan (C:\Users\Georg\Pictures\ME - Copy\ME\Picture 4.jpg|)
    Scan options enabled: File System | Heuristics/Shuriken | PUP | PUM | P2P
    Scan options disabled: Memory | Startup | Registry | Heuristics/Extra
    Objects scanned: 0
    Time elapsed: 14 second(s)
    Memory Processes Detected: 0
    (No malicious items detected)
    Memory Modules Detected: 0
    (No malicious items detected)
    Registry Keys Detected: 0
    (No malicious items detected)
    Registry Values Detected: 0
    (No malicious items detected)
    Registry Data Items Detected: 0
    (No malicious items detected)
    Folders Detected: 0
    (No malicious items detected)
    Files Detected: 0
    (No malicious items detected)
    (end)
    Can anyone help me with this? This trojan is in my email and programs and causing havoc everywhere. So far, I see how it works by disabling the main sections of the computer that are need to be scanned to get rid of it. How can I fix this?
    Thanks.
    geoff

    Hi,
    It would also be a good idea to post in a dedicated security forum. You can also post there regarding malware removal live USB/CDs which would be sufficient and useful in a lot of situations:
    http://www.bleepingcomputer.com/forums/forum79.html
    http://www.spywarewarrior.com/index.php
    http://www.spywareinfoforum.com/
    http://www.wilderssecurity.com/
    Please also note that [http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx Autoruns] is a free program.

  • Misleading ADH Information Provided By Best Buy Associates

    Let me start by saying that Best Buy WAS my most FAVORITE store UNTIL walking into store on 03/08/14 in Alabama. I am a 31 yr old customer that has been purchasing electronics from Best Buy since 2003. The management and sales associates in the store I normally go to is AWESOME! Now I would be one of the first to say that "Yes, it seems that Best Buy's T&Cs on GSBT/GSRP/ADH Plans change often." Whenever I go into any Best Buy, I look at the little pamphlets that was given out when you purchased any GS protection plan. I notice they looked different from time to time. Maybe a different color or size. I mean, go to <http://www.geeksquad.com/protection-plans/terms-and-conditions.aspx> and look. It goes back to July 2007. Has it always been available online? Nope. The first extended warranty/protection Plan I purchased was on a laptop purchased in 2003 when I left for college. I don't see it on there. So it's very safe to assume they haven't always been readily available and from looking at previous comments and posts after googling "Best Buy ADH 2012," I see I'm NOT the only customer that has been mislead by the sales associates on ADH. Why not trust that the employees are explaining important details? I mean SOMETIMES you're handing me a pamphlet with the T&Cs and giving me misleading info that you claim is in there. But at the time I had every reason to trust and believe the associates are providing me with important details and accurate info that is found in what you're placing in my hand (I've been to MANY Best Buy's and purchased MANY things from each Best Buy depending on where I'm at at that time).
    In 2012 I bought two iPads (3rd generation). I bought one 16gb and a 32gb along with ADH for each one (one for my parents and one for myself). And like any electronic device I buy from Best Buy, I was ALWAYS told, "Don't forget to purchase the protection plan!" Well, if you look at my history, I ALWAYS purchased the "extended warranty" or "protection plan." Like I said, when I moved away for college in 2003, I purchased a brand new laptop, had GS to hook it up and also paid for the "extended warranty" as it was called at the time. I never had to use any warranties or protection plans I purchased. I purchased protection plans on the 2 laptops I bought, a washer and dryer I bought (that was stolen when I went on vacation) and also the new ones I purchased to replace the stolen set, a washer I bought AFTER I moved (because mine was in storage and I damaged my parents older washer by overloading it with a comforter) and even on cellphones I've had in the past. Basically, if Best Buy offered it on a device, I purchased it because I felt confident that if ANYTHING went wrong, Best Buy would take care of it. Why?? Because that's what I was told when I purchased it. Now, that being said, my parents are 66 and 70 and not in the best of health. Last year, my mom dropped the iPad and broke the screen. I was confident that Best Buy would replace it with a new device like I was told. I get to the closest Best Buy to me (which is an hour and fifteen away from home; the original store where I purchased them is two and a half hours away). The iPad still powered on but of course the glass screen was shattered. Who wants to use an iPad with cracked glass and risk cutting a finger? Well, low and behold, that store reprinted the receipt and replaced the iPad 3rd gen with a NEW iPad 4th gen (there were no more iPad 3rd gen at the store) just like the sales associates said. No questions asked. No hassle. No problem. I don't even work for Best Buy but yet ANYBODY I talked to (friend, family, stranger in the store), I would push "protection plan...get it!...it's worth it!"
    March 7th, 2014, while working, I accidentally dropped my 32gb iPad and cracked my screen. I had already made plans to go out of town on March 8th so I did my research and saw there's a Best Buy an hour away. I was confident that Best Buy would replace my device in store so that Monday, March 10th I would be able to go back to work and have a working iPad that's not going to slice and dice my fingers up. I get to the GS desk and I gave the GS agent my phone number to reprint my receipt so he could go ahead and replace my iPad. (Why was I so confident? My parents iPad was replaced with no issues). Well the GS agent proceeds to tell me that "Your iPad qualifies to be replaced with a refurbished iPad. Would you like to pick it up in store or have it shipped to your home?" Excuse me? Refurbished? Picked up or sent to my home? No no no. Now, I told him, "When I purchased the iPad (that I paid $599 for BRAND NEW) and the 2 yr ADH, I was told by the sales associate if anything happened to it, any Best Buy would swap it out in store with a new device that way I wouldn't have to go without." He proceeds to tell me, "The plans have changed. It might have been that way when you purchased it but the plans have changed since 2012." (Thank goodness I didn't go in the store by myself. I had two friends with me that heard all of this non-sense). Now it's always that if the T&Cs change after you purchased yours, they have to honor the T&Cs that you had from the beginning. That's like a cellphone company telling me "You cannot keep your unlimited plan because we don't offer it anymore." You can't do that. So because the company changed the T&Cs AFTER I purchased it, you're not going honor what that??? So I asked for a manager. The GM of the store comes. The same thing I explained to the GS agent, I repeated once again to the GM. He says the same thing the GS agent said. By then, I'm in shock and not only is my blood pressure going up, I'm getting more and more upset thinking about each and every ADH/GSBT/GSRP I purchased (and didn't use EXCEPT for one). Then my mind went to everybody that bought an ADH and was mislead with the same T&Cs shared by the sales associates. The GM then goes on to tell me, "Your iPad is still functional. You can keep it until your refurbished iPad comes in." I'm looking at my iPad and I run my finger across it and I feel sharp pieces of glass. I asked him "What if I cut my finger?" He then opened his mouth and let the CRAZIEST thing come out. He said, "I can discount a Zagg Invisible Shield for you if you would like." I'm thinking "what kind of FOOL does he take me for????" Seriously???? (1) You COULD replace it but you won't (which he stated it's at HIS sole discretion if he wanted to replace it or not but because the computer said send a refurbished one, he doesn't want to go against that) and (2) You want me to BUY a invisible shield that you're going to discount??? That's WHY I purchased the ADH (so I wouldn't have to spend any money later on if something happens to it). So I told him to go ahead and send it but I'm not happy about and I would call and complain about it. I now have to go to work Monday and Tuesday without the iPad I DEPEND on to do my job. I refuse to pay for a screen protector when I know the iPad could be exchanged there in the store.
    I NEVER thought I would live to say "I will NEVER EVER spend another dime in Best Buy or any affiliates they may have from today going forward unless the problem is resolved." I JUST spent over $1400 in Best Buy a couple of weeks ago on a PS4 (ADH as well), 3 PS4 games, an iPod Touch 32gb, a griffin case and a set of headphones. I will be canceling that ADH on the PS4 ASAP. It's not worth it. It's not worth the hassle. My friends that witnessed all of this have now been turned away from a business that I once loved. Is it because I told them to turn away? No. It's because they know that that is poor customer service and misleading info that was provided. They've even purchased ADH on devices they've purchased and was provided the SAME misleading information that I was provided (and I'm talking about three different stores providing each of us with the same exact information). I know that myself and the two other people that were with me today will not hurt Best Buy's business by not returning and buying electronics from there. But everyone knows that one unhappy customer will go back and tell a family member or friend what happened. And that family member or friend will go and tell another family member or friend that will tell another........it then turns into a chain reaction. Do I wish anything bad on Best Buy? Nope. What I do wish is that (1) my iPad is replaced with a NEW iPad 3rd gen or better (ain't no going back to a 2nd generation) and (2) Best Buy needs to retrain EVERY employee (manager, supervisor and regular associate) to make sure instead of saying "With ADH, if anything happens to it, bring it back to any Best Buy and we'll replace it in store!" the associates need to be truthful and say "With ADH, it is at our sole discretion to replace the device in store OR have a refurbished device sent to the store where you can pick it up when it comes in or either we can have it sent to your home!" But that's too much like being right. I now see it's all about getting a sale and getting numbers up. It's not about providing excellent customer service cause if it was, I would've walked out of that store with a new iPad. I am literally SICK just thinking of the thousands of dollars I've spent in Best Buy. Lesson learned though.

    Hello,
    There is very little more frustrating than having a device that you use every day develop a need for service, whether through defect or damage. I've had similar situations arise myself and been aggravated too. It's also important to live up to the terms of our agreements with you and our other customers -- in this case the written Terms & Conditions of the Geek Squad Protection plan you purchased. Further, it is imperative that we communicate how the coverage works accurately. I regret any miscommunication that there may have been about how the terms of your plan would be fulfilled.
    The Geek Squad Agent's choice of language was unfortunate. You're quite correct in that the terms of the plan do not change once it's been purchased. However, the process by which we fill those terms can be subject to change. We reserve the right -- as stated in the Terms -- to provide a refurbished unit to fulfill our obligation under the plan. 
    We cannot provide the refurbished unit to you without taking possession of the damaged unit. The Agent at the store should have been specific that if you kept the damaged iPad to use in the interim, the replacement could not be shipped to you, but rather to the store for this reason. Please know that I apologize for any inconvenience to you.
    Finally, I'm wholly disheartened to read that this experience may prompt you to change your future shopping destination. It is my hope that you will give Best Buy another chance to win you over one day soon. Thank you for taking the time to share your experience with us.
    Sincerely,
    John|Social Media Specialist | Best Buy® Corporate
     Private Message

  • HELP! I had a Flashback Trojan/Malware on my Mac, I deleted it in trash, and now my Mac won't start.

    At first my Mac Finder showed n81, n82, etc when you right-click it, instead of the commands " open new finder window", "hide" etc. I also noticed that sometimes, when I would go to sites such as facebook, it would redirect to a different site and I'd have to type in the address again to get to the site. Nothing else was wrong with it. Safari was not shutting down. It wasn't slow.
    I did some research and found that I probably have the Flashback Trojan/Malware virus (whatever that is?) And so I followed what some people did (which got their mac fixed) .. I downloaded clamvax and tinkertool to find the malware (hidden files) and I deleted it in trash.. my computer seemed fine but when I restarted it, it wont turn on anymore.. the screen remains blue, the mouse could still be moved, but it stays that way..
    did I lose all my files? am I being hacked as we speak? Is this virus very dangerous?! I am very paranoid and know nothing about this kind of stuff so please help!
    BTW, the malware was from the game Farm Frenzy.. I have no idea how I got this... I never play online games.

    @Thomas, Thanks for jumping in. I had to take my wife to a Doctor appointment and things went down hill from there.
    I note that you are using Mac OS X 10.5.x.  It's important to understand that the Java vulnerabilities that allowed this malware to get established on your machine cannot be fixed in 10.5.x.  You would need to upgrade to at least 10.6 (Snow Leopard) to be able to get a version of Java with those vulnerabilities fixed.  (Correct me if I'm wrong there, Al!)
    That's 100% correct. Natalia has the distinction of being the first OS X 10.5 user confirmed to be infected by Flashback as far as I can tell. That operating system is becoming increasingly dangerous as the days go by. The OS has not been updated since Aug 2009 and the last Security and Java updates were in June 2011. There is no XProtect system and more and more third party's have dropped support in updating their Applications.
    Natalia_ wrote:
    I actually ran disk utility, and it said that the Macintosh HD is fine... I also tried safe mode/safe boot and did the FSCK command.. even that said that my laptop was fine? but somehow it still stays blue when I start up!
    And I think it probably is fine, except that something is hanging during the initial loading process. Could be most anything.
    As for my files, I appreciate your advice but I am scared I might do something wrong and mess my laptop up even more!
    There is almost no chance of that and at this point it should be obvious to you that if the files on your laptop are that important, you should already have a backup.
    I will take it to Apple and hopefully they can help me... because it seems that my files aren't wiped out... yet... It still displayed that I had my files in there..
    One word of caution, then. I have been told that Apple has instructed their support folks not to attempt to clean up a malware infection. If I were you I wouldn't bring it up unless you have to.
    By the way, while the disk was running, it was making very loud noises.. humming/grinding/etc... what could this mean?
    Only one thing in my experience, you're hard drive is toast. All the more reason to try and get all the data you can off it immediately.
    The only way to test it is to do a surface scan which Disk Utility cannot do. You would need a third party utility to do that. If it tells you there are bad sectors, that is 100% proof that it's going bad, as modern hard drives repair themselves of bad sectors until they run out of reserves to substitute.

  • Please help - trojan/rootkit in my auto update of latest flash player?

    Hello
    I would be very grateful if anyone is able to advise me about what to do.
    My problem is that yesterday, after starting my computer, I was prompted to update my flash player version on startup (like is usual). I told it to do so and it opened my web browser to the following web page: https://get3.adobe.com/flashplayer/update/plugin/. Is the security certificate for this website a bit suspect or is that normal for Adobe? Legitimate site?
    From there I clicked to download the latest version and got a file with this name: install_flashplayer11x32_mssd_au_aih.exe (please note the "au" - which shouldn't be there?).
    Unfortunately, I went ahead and ran it, not noticing anything out of the ordinary, until after the installation. Straight away I was bombarded with about 20 program is not responding messages, which kept on reappearing even after I'd tried to close flashplayer down.
    This made me look into things and I've discovered a couple of things which are of concern to me:
    (1). These people are talking about how the file is a rootkit: http://www.novahq.net/forum/showthread.php?p=378847
    (2). Virustotal found a trojan when I uploaded the file: https://www.virustotal.com/file/8833e31c04dfd19fc2f80edac481119ed0f3c7251a6619d40c223557e0 c68b22/analysis/
    So.... what do I do now? I've scanned with AVG, Malwarebytes, Super Anti-adware, Trend Micro Housecall and TDSSkiller, all of which basically found nothing, apart from a locked sptd file. Apart from these scans, I have done nothing else to my computer yet, like trying to uninstall it, etc. I thought I'd best wait to hear what people have to say before taking action because I'm not sure what I should do next...
    Thank you for taking your time to read this, and again, if you can help I'd be relieved!
    Browser is the latest version of Firefox and I am running Windows 7. I apologise for any mistakes or rushed typing, I'm just trying to get this sorted, heh :/

    I have just downloaded the installer file from the link you posted; I have analyzed it, and it is free of malware.
    If your Flash Player installation is working now (check it at http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html) then you don't need to do anything.
    If Flash Player is not working properly, follow these instructions:
    download the Flash Player uninstaller from http://helpx.adobe.com/flash-player/kb/uninstall-flash-player-windows.html and save it to disk;
    download the offline installer(s) from http://helpx.adobe.com/content/help/en/flash-player/kb/installation-problems-flash-player- windows.html#main-pars_header and save it/them to disk;
    close all browser and other applications, then run the downloaded uninstaller, followed by the installer(s).

  • Do I have a virus or Trojan malware on my MacBook Pro?

    I downloaded a faulty mp3 file from the internet which I think infected my computer with either a virus or Trojan malware. It took over my computer and disallowed me from accessing any applications. I clicked on Finder, for example, and a window would pop up saying, "Application not found," with a number after it. I rebooted by computer and was able to log back in using Safe Mode. Here, I deleted the  file I had downloaded, or so I thought, by dragging it to the trash and emptying it. However, my computer is acting bizarre and barely functions. I am unable to use DVD Player, it says, "There was an initialization error" with code -70017. My volume is unaccessible, there is a circle with a slash through it when I try to use it. Itunes will not work, Iphoto keeps crashing and will not open, and my internet browser is extremely slow and will not play video.
    I have downloaded and installed Sophoes Anti-Virus and MacScan in an attempt to rid my computer of the virus but it did not seem to do anything.
    Suggestions as to how to fix this problem would be greatly appreciated.

    This is not the work of a virus, or any other kind of malware. What it sounds like is a very badly corrupt hard drive causing all manner of corruption in your various system components and applications. You probably need to erase your hard drive and reinstall the system from scratch, as ds store has said.
    If you actually had malware, Sophos would find it. If Sophos found nothing, there was almost certainly nothing to find. If something like Sophos ever should find malware, unless the malware has "OSX" or "MacOS" in the name, it probably isn't Mac malware and thus isn't something you need to worry about (other than not passing it on to other people).
    MacScan is junk. It serves no useful purpose. See:
    MacScan disappoints

  • Can't load Facebook on Firefox . Suspect malware/trojan. Downloaded 3 free scan/remove programs, all end in .exe and my Mac wants to know which "Application" to use to run them. Help?!

    Firefox 3.6.19
    Mac OS 10.4.11
    attempted the''' 3 free options''' listed here
    http://support.mozilla.com/en-US/kb/Firefox%20never%20finishes%20loading%20certain%20websites?s=cannot+load+page&as=s
    when I click on any of them, they don't just open/run. they want to know what application to use to open them. do these work for my Mac, or is there another free alternative?
    Here's what the Mozilla page above said
    Firefox never finishes loading certain websites
    If specific websites (not all) start to load, but never finish (i.e. The Firefox activity indicator may spin for several minutes, or the status bar may show "Done" on a blank page), it is either because of a software trojan called Vundo, or a file being in the wrong format.
    Table of Contents
    * Vundo trojan variant
    o Search for malware
    o More help
    * JavaScript file format
    Vundo trojan variant
    A variant of the Vundo trojan is known to cause Firefox to have problems loading certain high-traffic sites, including Google, Yahoo, MySpace, Facebook, and more.
    Search for malware
    Not all variants of the Vundo trojan can be detected or removed by malware scanners. However, you should scan your computer for infections first:
    * Run the Microsoft Malicious Software Removal Tool.
    * Run a full system virus scan with something other than your normal program:
    o A '''free solution online is Kaspersky's online scanner'''.
    * Run a full system spyware scan with something other than your normal program:
    o MalwareBytes' Anti-Malware
    o '''SUPERAntiSpyware''' is known to detect many variants of Vundo, and has a free version.
    o '''Spybot S&D''' is a well-known free solution.
    More help
    If you're having a problem loading sites other than the one described above, see the Error loading websites article to see if it addresses your problem. You can also check your Internet security software - resetting permissions for Firefox can often fix similar problems.
    There can be other causes of the symptoms described above. Before attempting these instructions, try the methods described in the Basic Troubleshooting article to see if they will address your problem.
    If you still have problems after scanning, you may ask a support question.

    It sounds like you may have multiple problems, but none of them are likely to be caused by malware.
    First, the internet-related issues may be related to adware or a network compromise. I tend to lean more towards the latter, based on your description of the problem. See:
    http://www.adwaremedic.com/kb/baddns.php
    http://www.adwaremedic.com/kb/hackedrouter.php
    If investigation shows that this is not a network-specific issue, then it's probably adware. See my Adware Removal Guide for help finding and removing it. Note that you mention AdBlock as if it should have prevented this, but it's important to understand that ad blockers do not protect you against adware in any way. Neither would any kind of anti-virus software, which often doesn't detect adware.
    As for the other issues, it sounds like you've got some serious corruption. I would be inclined to say it sounds like a failing drive, except it sounds like you just got it replaced. How did you get all your files back after the new drive was installed?
    (Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

  • How do I use safe mode to get rid of a trojan virus? It is a backdoor that wa installed by a hacker.

     HP 11-1120  (3CR2210JN6)
    My security program finally told me about the Trojan but thhere must be malware on
    this computer also.  There are several corrupted extensions In my documents. I am blocked from seeing my files, deleting or altering permissions. I am the rightful owner of this machine so therefor am its administrator( although one handicapped without formal training for the job.
    I have purchased a disc from Microsoft for Windows 8.1 but cannot run it (if I can)
    until the computer is clean. I would like to save the family pictures if possible).  Everytime I try to run any program too close to the corrupted files I get a paper storm that drives me back.  The windows open so fast it feels like I will be buried.  All of my pictures have been locked away, both music and vidieo players are bound and will not serve the system.  Adobie is completely nonfunctional, I must use periphrial programs.  Windows viewer, Bonjuer and art programs.  I keep bring in different readers to read such docs as I can access.  The man that broke into the computer has copies of all my business and private files.  I have had private pictures of different members of my family posted around the web where I would rather not see them. I realize that I will need a clean up program but I do not trust any of the ones seen advertised on the web.  As a matter of fact one of them is the source of the backdoor virus, I'm sure of it.  This driver cleaning program is very agressive I cannot leave my computer for a minute or it will be rooting around in this machine before I know it, uninvited I should let you know.  I cut the DSL off when I leave it for any length of time.  Can you help me? Annie-

    Annie, welcome to the forum.
    Are you using Google's Chrome OS on the laptop?  I need to know which OS so I can find an answer to your question.
    Signature:
    HP TouchPad - 1.2 GHz; 1 GB memory; 32 GB storage; WebOS/CyanogenMod 11(Kit Kat)
    HP 10 Plus; Android-Kit Kat; 1.0 GHz Allwinner A31 ARM Cortex A7 Quad Core Processor ; 2GB RAM Memory Long: 2 GB DDR3L SDRAM (1600MHz); 16GB disable eMMC 16GB v4.51
    HP Omen; i7-4710QH; 8 GB memory; 256 GB San Disk SSD; Win 8.1
    HP Photosmart 7520 AIO
    ++++++++++++++++++
    **Click the Thumbs Up+ to say 'Thanks' and the 'Accept as Solution' if I have solved your problem.**
    Intelligence is God given; Wisdom is the sum of our mistakes!
    I am not an HP employee.

  • I think I have  some Malware/Trojan Horse on MacBook Pro. How to get rid of it?

    My MacBook Pro has worked perfect for the last 2 years, but over the last 2 days when I am on Chrome it has started clicking onto random websites when I click other links, and showing certain words as underlined and as hotlinks. I think I recognise that from having a PC as Malware or Trojan Horse? What is the best way to remove this as I have read through a few threads on here and they advise not downloading any anti virus software as it slows down your Mac instead of helping.
    <Post Edited By Host>

    You installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data before proceeding.
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    Reset the home page and default search engine in all the browsers, if it was changed.
    This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Maybe you are looking for