Virus/Trojan on '08 Macbook with OS 10.5?
Hey, all.
Basically, I'm a broke college student who needs this puppy to last to the end of the next semester.
Last night, my computer was running extra slow (I think); this morning, the homepage on Firefox had been set to usa.com. The battery dropped from 90% to 30% in twenty minutes, which it has never done before, and the McAfee Security my school forces me to install has malware updates as failing. To be fair, that might have been happening before ... but I can't remember.
Clearly, there's an issue here.
If anyone knows what's buggering up my poor baby, that's awesome. If anyone can recommend some free, GOOD anti-malware/anti-virus software for a Macbook, that's EVEN BETTER.
Thank you so much!
Hey MacBookDad,
The top culprits for a slow machine are:
1) Lack of RAM
2) Too full hard drive
3) Failing hard drive
4) Directory corruption
Ask him to back up his data right away, just in case the hard drive is failing. Then let me know the answers to the questions below:
1) How much RAM is in his computer?
2) How large is the hard drive & how much space is free?
~Lyssa
Similar Messages
-
My macbook pro has a virus/trojan that is resetting the EFI via apci and it is getting root access privileges. It seems to be creating multiple aliases that bundle with rogue apps and preferences so it is very difficult to control or fix. Please help..It all stems from the "about donwloads" PDF which kicks off the restructuring of the OS..
Well given the fact that it is not just myself who is infected and also that this is my 3rd macbook in 1 year because the other 2 efi's were compromised to the point where they were unusable, and also that I must've been to the mac store no less than 100 times in a year for these issues, I beg to differ. Here is what I can show you. This has been ongoing for over a year now.
I will try and show you as much as I can.
1) Here is what I see when I run mount from terminal:
/dev/disk0s2 on / (hfs, local, journaled)
devfs on /dev (devfs, local, nobrowse)
map -hosts on /net (autofs, nosuid, automounted, nobrowse)
map auto_home on /home (autofs, automounted, nobrowse)
localhost:/4zOta2Q9FMiMnRjTROIbhU on /Volumes/MobileBackups (mtmfs, nosuid, read-only, nobrowse)
Why on earth is /Volumes/MobildBackups my localhost is beyond me. I don't use iCloud and Mobile me is obsolete.
2) Here is what I show when I run ls -al /*/*/*/*.efi from root
-rw-r--r-- 1 root wheel 994464 May 1 00:33 /System/Library/CoreServices/boot.efi
-rw-r--r-- 1 root wheel 994464 Oct 2 2012 /usr/standalone/i386/boot.efi
-rwxr-xr-x 1 root wheel 115716 Dec 13 14:08 /usr/standalone/i386/tmbootpicker.efi
As far as I know my boot.efi should not change everytime I boot my machine.
3) Here is something very interesting. When I run cd /dev followed by ls -al look what I have;
total 9
dr-xr-xr-x 3 root wheel 4597 May 6 08:48 .
drwxrwxr-t 32 root admin 1156 May 6 01:20 ..
crw------- 1 root wheel 14, 1 May 6 08:48 afsc_type5
crw------- 1 root wheel 8, 0 May 6 08:48 auditpipe
crw-r--r-- 1 root wheel 7, 1 May 6 08:48 auditsessions
crw------- 1 root wheel 18, 0 May 6 08:48 autofs
crw------- 1 root wheel 31, 0 May 6 08:48 autofs_control
crw-rw-rw- 1 root wheel 22, 0 May 6 08:48 autofs_homedirmounter
crw-rw-rw- 1 root wheel 21, 0 May 6 08:48 autofs_notrigger
crw-rw-rw- 1 root wheel 19, 13 May 6 08:48 autofs_nowait
crw------- 1 root wheel 23, 0 May 6 08:48 bpf0
crw------- 1 root wheel 23, 1 May 7 13:16 bpf1
crw------- 1 root wheel 23, 2 May 7 13:16 bpf2
crw------- 1 root wheel 23, 3 May 6 08:48 bpf3
crw------- 1 MP staff 0, 0 May 7 13:16 console
crw-rw-rw- 1 root wheel 33, 1 May 6 08:49 cu.Bluetooth-Modem
crw-rw-rw- 1 root wheel 33, 3 May 6 08:49 cu.SerialPort
brw-r----- 1 root operator 1, 0 May 6 08:48 disk0
brw-r----- 1 root operator 1, 2 May 6 08:48 disk0s1
brw-r----- 1 root operator 1, 1 May 6 08:48 disk0s2
brw-r----- 1 root operator 1, 3 May 6 08:48 disk0s3
crw-rw-rw- 1 root wheel 24, 2 May 6 08:48 dtrace
crw-rw-rw- 1 root wheel 25, 0 May 6 08:48 dtracehelper
crw-rw-rw- 1 root wheel 0, 0 May 6 08:48 fbt
dr-xr-xr-x 1 root wheel 0 May 6 08:48 fd
crw-r--r-- 1 root wheel 11, 0 May 6 08:48 fsevents
crw-rw-rw- 1 root wheel 17, 7 May 7 13:16 io8log
cr--r--r-- 1 root wheel 17, 2 May 6 08:48 io8logmt
crw------- 1 root wheel 6, 0 May 6 08:48 klog
crw-rw-rw- 1 root wheel 0, 0 May 6 08:48 lockstat
crw-rw-rw- 1 root wheel 0, 0 May 6 08:48 machtrace
crw-rw-rw- 1 root wheel 3, 2 May 7 13:16 null
crw------- 1 root wheel 9, 0 May 6 08:48 pf
crw------- 1 root wheel 9, 1 May 6 08:48 pfm
crw------- 1 root operator 20, 0 May 6 08:48 pmCPU
crw-rw-rw- 1 root wheel 0, 0 May 6 08:48 profile
crw-rw-rw- 1 root tty 15, 3 May 7 13:35 ptmx
crw-rw-rw- 1 root wheel 5, 0 May 6 08:48 ptyp0
crw-rw-rw- 1 root wheel 5, 1 May 6 08:48 ptyp1
crw-rw-rw- 1 root wheel 5, 2 May 6 08:48 ptyp2
crw-rw-rw- 1 root wheel 5, 3 May 6 08:48 ptyp3
crw-rw-rw- 1 root wheel 5, 4 May 6 08:48 ptyp4
crw-rw-rw- 1 root wheel 5, 5 May 6 08:48 ptyp5
crw-rw-rw- 1 root wheel 5, 6 May 6 08:48 ptyp6
crw-rw-rw- 1 root wheel 5, 7 May 6 08:48 ptyp7
crw-rw-rw- 1 root wheel 5, 8 May 6 08:48 ptyp8
crw-rw-rw- 1 root wheel 5, 9 May 6 08:48 ptyp9
crw-rw-rw- 1 root wheel 5, 10 May 6 08:48 ptypa
crw-rw-rw- 1 root wheel 5, 11 May 6 08:48 ptypb
crw-rw-rw- 1 root wheel 5, 12 May 6 08:48 ptypc
crw-rw-rw- 1 root wheel 5, 13 May 6 08:48 ptypd
crw-rw-rw- 1 root wheel 5, 14 May 6 08:48 ptype
crw-rw-rw- 1 root wheel 5, 15 May 6 08:48 ptypf
crw-rw-rw- 1 root wheel 5, 16 May 6 08:48 ptyq0
crw-rw-rw- 1 root wheel 5, 17 May 6 08:48 ptyq1
crw-rw-rw- 1 root wheel 5, 18 May 6 08:48 ptyq2
crw-rw-rw- 1 root wheel 5, 19 May 6 08:48 ptyq3
crw-rw-rw- 1 root wheel 5, 20 May 6 08:48 ptyq4
crw-rw-rw- 1 root wheel 5, 21 May 6 08:48 ptyq5
crw-rw-rw- 1 root wheel 5, 22 May 6 08:48 ptyq6
crw-rw-rw- 1 root wheel 5, 23 May 6 08:48 ptyq7
crw-rw-rw- 1 root wheel 5, 24 May 6 08:48 ptyq8
crw-rw-rw- 1 root wheel 5, 25 May 6 08:48 ptyq9
crw-rw-rw- 1 root wheel 5, 26 May 6 08:48 ptyqa
crw-rw-rw- 1 root wheel 5, 27 May 6 08:48 ptyqb
crw-rw-rw- 1 root wheel 5, 28 May 6 08:48 ptyqc
crw-rw-rw- 1 root wheel 5, 29 May 6 08:48 ptyqd
crw-rw-rw- 1 root wheel 5, 30 May 6 08:48 ptyqe
crw-rw-rw- 1 root wheel 5, 31 May 6 08:48 ptyqf
crw-rw-rw- 1 root wheel 5, 32 May 6 08:48 ptyr0
crw-rw-rw- 1 root wheel 5, 33 May 6 08:48 ptyr1
crw-rw-rw- 1 root wheel 5, 34 May 6 08:48 ptyr2
crw-rw-rw- 1 root wheel 5, 35 May 6 08:48 ptyr3
crw-rw-rw- 1 root wheel 5, 36 May 6 08:48 ptyr4
crw-rw-rw- 1 root wheel 5, 37 May 6 08:48 ptyr5
crw-rw-rw- 1 root wheel 5, 38 May 6 08:48 ptyr6
crw-rw-rw- 1 root wheel 5, 39 May 6 08:48 ptyr7
crw-rw-rw- 1 root wheel 5, 40 May 6 08:48 ptyr8
crw-rw-rw- 1 root wheel 5, 41 May 6 08:48 ptyr9
crw-rw-rw- 1 root wheel 5, 42 May 6 08:48 ptyra
crw-rw-rw- 1 root wheel 5, 43 May 6 08:48 ptyrb
crw-rw-rw- 1 root wheel 5, 44 May 6 08:48 ptyrc
crw-rw-rw- 1 root wheel 5, 45 May 6 08:48 ptyrd
crw-rw-rw- 1 root wheel 5, 46 May 6 08:48 ptyre
crw-rw-rw- 1 root wheel 5, 47 May 6 08:48 ptyrf
crw-rw-rw- 1 root wheel 5, 48 May 6 08:48 ptys0
crw-rw-rw- 1 root wheel 5, 49 May 6 08:48 ptys1
crw-rw-rw- 1 root wheel 5, 50 May 6 08:48 ptys2
crw-rw-rw- 1 root wheel 5, 51 May 6 08:48 ptys3
crw-rw-rw- 1 root wheel 5, 52 May 6 08:48 ptys4
crw-rw-rw- 1 root wheel 5, 53 May 6 08:48 ptys5
crw-rw-rw- 1 root wheel 5, 54 May 6 08:48 ptys6
crw-rw-rw- 1 root wheel 5, 55 May 6 08:48 ptys7
crw-rw-rw- 1 root wheel 5, 56 May 6 08:48 ptys8
crw-rw-rw- 1 root wheel 5, 57 May 6 08:48 ptys9
crw-rw-rw- 1 root wheel 5, 58 May 6 08:48 ptysa
crw-rw-rw- 1 root wheel 5, 59 May 6 08:48 ptysb
crw-rw-rw- 1 root wheel 5, 60 May 6 08:48 ptysc
crw-rw-rw- 1 root wheel 5, 61 May 6 08:48 ptysd
crw-rw-rw- 1 root wheel 5, 62 May 6 08:48 ptyse
crw-rw-rw- 1 root wheel 5, 63 May 6 08:48 ptysf
crw-rw-rw- 1 root wheel 5, 64 May 6 08:48 ptyt0
crw-rw-rw- 1 root wheel 5, 65 May 6 08:48 ptyt1
crw-rw-rw- 1 root wheel 5, 66 May 6 08:48 ptyt2
crw-rw-rw- 1 root wheel 5, 67 May 6 08:48 ptyt3
crw-rw-rw- 1 root wheel 5, 68 May 6 08:48 ptyt4
crw-rw-rw- 1 root wheel 5, 69 May 6 08:48 ptyt5
crw-rw-rw- 1 root wheel 5, 70 May 6 08:48 ptyt6
crw-rw-rw- 1 root wheel 5, 71 May 6 08:48 ptyt7
crw-rw-rw- 1 root wheel 5, 72 May 6 08:48 ptyt8
crw-rw-rw- 1 root wheel 5, 73 May 6 08:48 ptyt9
crw-rw-rw- 1 root wheel 5, 74 May 6 08:48 ptyta
crw-rw-rw- 1 root wheel 5, 75 May 6 08:48 ptytb
crw-rw-rw- 1 root wheel 5, 76 May 6 08:48 ptytc
crw-rw-rw- 1 root wheel 5, 77 May 6 08:48 ptytd
crw-rw-rw- 1 root wheel 5, 78 May 6 08:48 ptyte
crw-rw-rw- 1 root wheel 5, 79 May 6 08:48 ptytf
crw-rw-rw- 1 root wheel 5, 80 May 6 08:48 ptyu0
crw-rw-rw- 1 root wheel 5, 81 May 6 08:48 ptyu1
crw-rw-rw- 1 root wheel 5, 82 May 6 08:48 ptyu2
crw-rw-rw- 1 root wheel 5, 83 May 6 08:48 ptyu3
crw-rw-rw- 1 root wheel 5, 84 May 6 08:48 ptyu4
crw-rw-rw- 1 root wheel 5, 85 May 6 08:48 ptyu5
crw-rw-rw- 1 root wheel 5, 86 May 6 08:48 ptyu6
crw-rw-rw- 1 root wheel 5, 87 May 6 08:48 ptyu7
crw-rw-rw- 1 root wheel 5, 88 May 6 08:48 ptyu8
crw-rw-rw- 1 root wheel 5, 89 May 6 08:48 ptyu9
crw-rw-rw- 1 root wheel 5, 90 May 6 08:48 ptyua
crw-rw-rw- 1 root wheel 5, 91 May 6 08:48 ptyub
crw-rw-rw- 1 root wheel 5, 92 May 6 08:48 ptyuc
crw-rw-rw- 1 root wheel 5, 93 May 6 08:48 ptyud
crw-rw-rw- 1 root wheel 5, 94 May 6 08:48 ptyue
crw-rw-rw- 1 root wheel 5, 95 May 6 08:48 ptyuf
crw-rw-rw- 1 root wheel 5, 96 May 6 08:48 ptyv0
crw-rw-rw- 1 root wheel 5, 97 May 6 08:48 ptyv1
crw-rw-rw- 1 root wheel 5, 98 May 6 08:48 ptyv2
crw-rw-rw- 1 root wheel 5, 99 May 6 08:48 ptyv3
crw-rw-rw- 1 root wheel 5, 100 May 6 08:48 ptyv4
crw-rw-rw- 1 root wheel 5, 101 May 6 08:48 ptyv5
crw-rw-rw- 1 root wheel 5, 102 May 6 08:48 ptyv6
crw-rw-rw- 1 root wheel 5, 103 May 6 08:48 ptyv7
crw-rw-rw- 1 root wheel 5, 104 May 6 08:48 ptyv8
crw-rw-rw- 1 root wheel 5, 105 May 6 08:48 ptyv9
crw-rw-rw- 1 root wheel 5, 106 May 6 08:48 ptyva
crw-rw-rw- 1 root wheel 5, 107 May 6 08:48 ptyvb
crw-rw-rw- 1 root wheel 5, 108 May 6 08:48 ptyvc
crw-rw-rw- 1 root wheel 5, 109 May 6 08:48 ptyvd
crw-rw-rw- 1 root wheel 5, 110 May 6 08:48 ptyve
crw-rw-rw- 1 root wheel 5, 111 May 6 08:48 ptyvf
crw-rw-rw- 1 root wheel 5, 112 May 6 08:48 ptyw0
crw-rw-rw- 1 root wheel 5, 113 May 6 08:48 ptyw1
crw-rw-rw- 1 root wheel 5, 114 May 6 08:48 ptyw2
crw-rw-rw- 1 root wheel 5, 115 May 6 08:48 ptyw3
crw-rw-rw- 1 root wheel 5, 116 May 6 08:48 ptyw4
crw-rw-rw- 1 root wheel 5, 117 May 6 08:48 ptyw5
crw-rw-rw- 1 root wheel 5, 118 May 6 08:48 ptyw6
crw-rw-rw- 1 root wheel 5, 119 May 6 08:48 ptyw7
crw-rw-rw- 1 root wheel 5, 120 May 6 08:48 ptyw8
crw-rw-rw- 1 root wheel 5, 121 May 6 08:48 ptyw9
crw-rw-rw- 1 root wheel 5, 122 May 6 08:48 ptywa
crw-rw-rw- 1 root wheel 5, 123 May 6 08:48 ptywb
crw-rw-rw- 1 root wheel 5, 124 May 6 08:48 ptywc
crw-rw-rw- 1 root wheel 5, 125 May 6 08:48 ptywd
crw-rw-rw- 1 root wheel 5, 126 May 6 08:48 ptywe
crw-rw-rw- 1 root wheel 5, 127 May 6 08:48 ptywf
crw-rw-rw- 1 root wheel 13, 0 May 7 13:26 random
crw-r----- 1 root operator 1, 0 May 6 08:48 rdisk0
crw-r----- 1 root operator 1, 2 May 6 08:48 rdisk0s1
crw-r----- 1 root operator 1, 1 May 6 08:48 rdisk0s2
crw-r----- 1 root operator 1, 3 May 6 08:48 rdisk0s3
crw-rw-rw- 1 root wheel 0, 0 May 6 08:48 sdt
lr-xr-xr-x 1 root wheel 0 May 6 08:48 stderr -> fd/2
lr-xr-xr-x 1 root wheel 0 May 6 08:48 stdin -> fd/0
lr-xr-xr-x 1 root wheel 0 May 6 08:48 stdout -> fd/1
crw-rw-rw- 1 root wheel 0, 0 May 6 08:48 systrace
crw-rw---- 1 root wheel 34, 0 May 7 06:18 tap0
crw-rw---- 1 root wheel 34, 1 May 7 06:18 tap1
crw-rw---- 1 root wheel 34, 10 May 7 06:18 tap10
crw-rw---- 1 root wheel 34, 11 May 7 06:18 tap11
crw-rw---- 1 root wheel 34, 12 May 7 06:18 tap12
crw-rw---- 1 root wheel 34, 13 May 7 06:18 tap13
crw-rw---- 1 root wheel 34, 14 May 7 06:18 tap14
crw-rw---- 1 root wheel 34, 15 May 7 06:18 tap15
crw-rw---- 1 root wheel 34, 2 May 7 06:18 tap2
crw-rw---- 1 root wheel 34, 3 May 7 06:18 tap3
crw-rw---- 1 root wheel 34, 4 May 7 06:18 tap4
crw-rw---- 1 root wheel 34, 5 May 7 06:18 tap5
crw-rw---- 1 root wheel 34, 6 May 7 06:18 tap6
crw-rw---- 1 root wheel 34, 7 May 7 06:18 tap7
crw-rw---- 1 root wheel 34, 8 May 7 06:18 tap8
crw-rw---- 1 root wheel 34, 9 May 7 06:18 tap9
crw-rw-rw- 1 root wheel 2, 0 May 6 08:48 tty
crw-rw-rw- 1 root wheel 33, 0 May 6 08:49 tty.Bluetooth-Modem
crw-rw-rw- 1 root wheel 33, 2 May 6 08:49 tty.SerialPort
crw-rw-rw- 1 root wheel 4, 0 May 6 08:48 ttyp0
crw-rw-rw- 1 root wheel 4, 1 May 6 08:48 ttyp1
crw-rw-rw- 1 root wheel 4, 2 May 6 08:48 ttyp2
crw-rw-rw- 1 root wheel 4, 3 May 6 08:48 ttyp3
crw-rw-rw- 1 root wheel 4, 4 May 6 08:48 ttyp4
crw-rw-rw- 1 root wheel 4, 5 May 6 08:48 ttyp5
crw-rw-rw- 1 root wheel 4, 6 May 6 08:48 ttyp6
crw-rw-rw- 1 root wheel 4, 7 May 6 08:48 ttyp7
crw-rw-rw- 1 root wheel 4, 8 May 6 08:48 ttyp8
crw-rw-rw- 1 root wheel 4, 9 May 6 08:48 ttyp9
crw-rw-rw- 1 root wheel 4, 10 May 6 08:48 ttypa
crw-rw-rw- 1 root wheel 4, 11 May 6 08:48 ttypb
crw-rw-rw- 1 root wheel 4, 12 May 6 08:48 ttypc
crw-rw-rw- 1 root wheel 4, 13 May 6 08:48 ttypd
crw-rw-rw- 1 root wheel 4, 14 May 6 08:48 ttype
crw-rw-rw- 1 root wheel 4, 15 May 6 08:48 ttypf
crw-rw-rw- 1 root wheel 4, 16 May 6 08:48 ttyq0
crw-rw-rw- 1 root wheel 4, 17 May 6 08:48 ttyq1
crw-rw-rw- 1 root wheel 4, 18 May 6 08:48 ttyq2
crw-rw-rw- 1 root wheel 4, 19 May 6 08:48 ttyq3
crw-rw-rw- 1 root wheel 4, 20 May 6 08:48 ttyq4
crw-rw-rw- 1 root wheel 4, 21 May 6 08:48 ttyq5
crw-rw-rw- 1 root wheel 4, 22 May 6 08:48 ttyq6
crw-rw-rw- 1 root wheel 4, 23 May 6 08:48 ttyq7
crw-rw-rw- 1 root wheel 4, 24 May 6 08:48 ttyq8
crw-rw-rw- 1 root wheel 4, 25 May 6 08:48 ttyq9
crw-rw-rw- 1 root wheel 4, 26 May 6 08:48 ttyqa
crw-rw-rw- 1 root wheel 4, 27 May 6 08:48 ttyqb
crw-rw-rw- 1 root wheel 4, 28 May 6 08:48 ttyqc
crw-rw-rw- 1 root wheel 4, 29 May 6 08:48 ttyqd
crw-rw-rw- 1 root wheel 4, 30 May 6 08:48 ttyqe
crw-rw-rw- 1 root wheel 4, 31 May 6 08:48 ttyqf
crw-rw-rw- 1 root wheel 4, 32 May 6 08:48 ttyr0
crw-rw-rw- 1 root wheel 4, 33 May 6 08:48 ttyr1
crw-rw-rw- 1 root wheel 4, 34 May 6 08:48 ttyr2
crw-rw-rw- 1 root wheel 4, 35 May 6 08:48 ttyr3
crw-rw-rw- 1 root wheel 4, 36 May 6 08:48 ttyr4
crw-rw-rw- 1 root wheel 4, 37 May 6 08:48 ttyr5
crw-rw-rw- 1 root wheel 4, 38 May 6 08:48 ttyr6
crw-rw-rw- 1 root wheel 4, 39 May 6 08:48 ttyr7
crw-rw-rw- 1 root wheel 4, 40 May 6 08:48 ttyr8
crw-rw-rw- 1 root wheel 4, 41 May 6 08:48 ttyr9
crw-rw-rw- 1 root wheel 4, 42 May 6 08:48 ttyra
crw-rw-rw- 1 root wheel 4, 43 May 6 08:48 ttyrb
crw-rw-rw- 1 root wheel 4, 44 May 6 08:48 ttyrc
crw-rw-rw- 1 root wheel 4, 45 May 6 08:48 ttyrd
crw-rw-rw- 1 root wheel 4, 46 May 6 08:48 ttyre
crw-rw-rw- 1 root wheel 4, 47 May 6 08:48 ttyrf
crw-rw-rw- 1 root wheel 4, 48 May 6 08:48 ttys0
crw--w---- 1 MP tty 16, 0 May 7 13:34 ttys000
crw--w---- 1 MP tty 16, 1 May 7 13:34 ttys001
crw--w---- 1 MP tty 16, 2 May 7 13:35 ttys002
crw-rw-rw- 1 root wheel 4, 49 May 6 08:48 ttys1
crw-rw-rw- 1 root wheel 4, 50 May 6 08:48 ttys2
crw-rw-rw- 1 root wheel 4, 51 May 6 08:48 ttys3
crw-rw-rw- 1 root wheel 4, 52 May 6 08:48 ttys4
crw-rw-rw- 1 root wheel 4, 53 May 6 08:48 ttys5
crw-rw-rw- 1 root wheel 4, 54 May 6 08:48 ttys6
crw-rw-rw- 1 root wheel 4, 55 May 6 08:48 ttys7
crw-rw-rw- 1 root wheel 4, 56 May 6 08:48 ttys8
crw-rw-rw- 1 root wheel 4, 57 May 6 08:48 ttys9
crw-rw-rw- 1 root wheel 4, 58 May 6 08:48 ttysa
crw-rw-rw- 1 root wheel 4, 59 May 6 08:48 ttysb
crw-rw-rw- 1 root wheel 4, 60 May 6 08:48 ttysc
crw-rw-rw- 1 root wheel 4, 61 May 6 08:48 ttysd
crw-rw-rw- 1 root wheel 4, 62 May 6 08:48 ttyse
crw-rw-rw- 1 root wheel 4, 63 May 6 08:48 ttysf
crw-rw-rw- 1 root wheel 4, 64 May 6 08:48 ttyt0
crw-rw-rw- 1 root wheel 4, 65 May 6 08:48 ttyt1
crw-rw-rw- 1 root wheel 4, 66 May 6 08:48 ttyt2
crw-rw-rw- 1 root wheel 4, 67 May 6 08:48 ttyt3
crw-rw-rw- 1 root wheel 4, 68 May 6 08:48 ttyt4
crw-rw-rw- 1 root wheel 4, 69 May 6 08:48 ttyt5
crw-rw-rw- 1 root wheel 4, 70 May 6 08:48 ttyt6
crw-rw-rw- 1 root wheel 4, 71 May 6 08:48 ttyt7
crw-rw-rw- 1 root wheel 4, 72 May 6 08:48 ttyt8
crw-rw-rw- 1 root wheel 4, 73 May 6 08:48 ttyt9
crw-rw-rw- 1 root wheel 4, 74 May 6 08:48 ttyta
crw-rw-rw- 1 root wheel 4, 75 May 6 08:48 ttytb
crw-rw-rw- 1 root wheel 4, 76 May 6 08:48 ttytc
crw-rw-rw- 1 root wheel 4, 77 May 6 08:48 ttytd
crw-rw-rw- 1 root wheel 4, 78 May 6 08:48 ttyte
crw-rw-rw- 1 root wheel 4, 79 May 6 08:48 ttytf
crw-rw-rw- 1 root wheel 4, 80 May 6 08:48 ttyu0
crw-rw-rw- 1 root wheel 4, 81 May 6 08:48 ttyu1
crw-rw-rw- 1 root wheel 4, 82 May 6 08:48 ttyu2
crw-rw-rw- 1 root wheel 4, 83 May 6 08:48 ttyu3
crw-rw-rw- 1 root wheel 4, 84 May 6 08:48 ttyu4
crw-rw-rw- 1 root wheel 4, 85 May 6 08:48 ttyu5
crw-rw-rw- 1 root wheel 4, 86 May 6 08:48 ttyu6
crw-rw-rw- 1 root wheel 4, 87 May 6 08:48 ttyu7
crw-rw-rw- 1 root wheel 4, 88 May 6 08:48 ttyu8
crw-rw-rw- 1 root wheel 4, 89 May 6 08:48 ttyu9
crw-rw-rw- 1 root wheel 4, 90 May 6 08:48 ttyua
crw-rw-rw- 1 root wheel 4, 91 May 6 08:48 ttyub
crw-rw-rw- 1 root wheel 4, 92 May 6 08:48 ttyuc
crw-rw-rw- 1 root wheel 4, 93 May 6 08:48 ttyud
crw-rw-rw- 1 root wheel 4, 94 May 6 08:48 ttyue
crw-rw-rw- 1 root wheel 4, 95 May 6 08:48 ttyuf
crw-rw-rw- 1 root wheel 4, 96 May 6 08:48 ttyv0
crw-rw-rw- 1 root wheel 4, 97 May 6 08:48 ttyv1
crw-rw-rw- 1 root wheel 4, 98 May 6 08:48 ttyv2
crw-rw-rw- 1 root wheel 4, 99 May 6 08:48 ttyv3
crw-rw-rw- 1 root wheel 4, 100 May 6 08:48 ttyv4
crw-rw-rw- 1 root wheel 4, 101 May 6 08:48 ttyv5
crw-rw-rw- 1 root wheel 4, 102 May 6 08:48 ttyv6
crw-rw-rw- 1 root wheel 4, 103 May 6 08:48 ttyv7
crw-rw-rw- 1 root wheel 4, 104 May 6 08:48 ttyv8
crw-rw-rw- 1 root wheel 4, 105 May 6 08:48 ttyv9
crw-rw-rw- 1 root wheel 4, 106 May 6 08:48 ttyva
crw-rw-rw- 1 root wheel 4, 107 May 6 08:48 ttyvb
crw-rw-rw- 1 root wheel 4, 108 May 6 08:48 ttyvc
crw-rw-rw- 1 root wheel 4, 109 May 6 08:48 ttyvd
crw-rw-rw- 1 root wheel 4, 110 May 6 08:48 ttyve
crw-rw-rw- 1 root wheel 4, 111 May 6 08:48 ttyvf
crw-rw-rw- 1 root wheel 4, 112 May 6 08:48 ttyw0
crw-rw-rw- 1 root wheel 4, 113 May 6 08:48 ttyw1
crw-rw-rw- 1 root wheel 4, 114 May 6 08:48 ttyw2
crw-rw-rw- 1 root wheel 4, 115 May 6 08:48 ttyw3
crw-rw-rw- 1 root wheel 4, 116 May 6 08:48 ttyw4
crw-rw-rw- 1 root wheel 4, 117 May 6 08:48 ttyw5
crw-rw-rw- 1 root wheel 4, 118 May 6 08:48 ttyw6
crw-rw-rw- 1 root wheel 4, 119 May 6 08:48 ttyw7
crw-rw-rw- 1 root wheel 4, 120 May 6 08:48 ttyw8
crw-rw-rw- 1 root wheel 4, 121 May 6 08:48 ttyw9
crw-rw-rw- 1 root wheel 4, 122 May 6 08:48 ttywa
crw-rw-rw- 1 root wheel 4, 123 May 6 08:48 ttywb
crw-rw-rw- 1 root wheel 4, 124 May 6 08:48 ttywc
crw-rw-rw- 1 root wheel 4, 125 May 6 08:48 ttywd
crw-rw-rw- 1 root wheel 4, 126 May 6 08:48 ttywe
crw-rw-rw- 1 root wheel 4, 127 May 6 08:48 ttywf
crw-rw---- 1 root wheel 35, 0 May 7 13:35 tun0
crw-rw---- 1 root wheel 35, 1 May 7 06:18 tun1
crw-rw---- 1 root wheel 35, 10 May 7 06:18 tun10
crw-rw---- 1 root wheel 35, 11 May 7 06:18 tun11
crw-rw---- 1 root wheel 35, 12 May 7 06:18 tun12
crw-rw---- 1 root wheel 35, 13 May 7 06:18 tun13
crw-rw---- 1 root wheel 35, 14 May 7 06:18 tun14
crw-rw---- 1 root wheel 35, 15 May 7 06:18 tun15
crw-rw---- 1 root wheel 35, 2 May 7 06:18 tun2
crw-rw---- 1 root wheel 35, 3 May 7 06:18 tun3
crw-rw---- 1 root wheel 35, 4 May 7 06:18 tun4
crw-rw---- 1 root wheel 35, 5 May 7 06:18 tun5
crw-rw---- 1 root wheel 35, 6 May 7 06:18 tun6
crw-rw---- 1 root wheel 35, 7 May 7 06:18 tun7
crw-rw---- 1 root wheel 35, 8 May 7 06:18 tun8
crw-rw---- 1 root wheel 35, 9 May 7 06:18 tun9
crw-rw-rw- 1 root wheel 13, 1 May 6 08:48 urandom
brw------- 1 root operator 2, 0 May 6 08:48 vn0
brw------- 1 root operator 2, 1 May 6 08:48 vn1
brw------- 1 root operator 2, 2 May 6 08:48 vn2
brw------- 1 root operator 2, 3 May 6 08:48 vn3
crw-rw-rw- 1 root wheel 3, 3 May 6 08:48 zero
4) ioreg -w 120
Please take note of everything that is unregistered (!registered)
+-o Root <class IORegistryEntry, id 0x100000100, retain 12>
+-o MacBookPro9,1 <class IOPlatformExpertDevice, id 0x100000110, registered, matched, active, busy 0 (16654 ms), ret$
+-o AppleACPIPlatformExpert <class AppleACPIPlatformExpert, id 0x100000111, registered, matched, active, busy 0 (5$
| +-o IOPMrootDomain <class IOPMrootDomain, id 0x100000114, registered, matched, active, busy 0 (14 ms), retain 47$
| | +-o IORootParent <class IORootParent, id 0x100000115, !registered, !matched, active, busy 0, retain 7>
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002e3, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002e4, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002e5, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002e6, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002e8, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002eb, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002ee, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000002f2, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x1000003df, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100000428, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100000448, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x10000058f, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002cef, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002cf7, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d1d, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d1e, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d24, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d25, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d26, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d29, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d2a, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d2b, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d2d, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d2f, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d39, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d3a, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d42, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d59, !registered, !matched, active, busy 0, r$
| | +-o RootDomainUserClient <class RootDomainUserClient, id 0x100002d5b, !registered, !matched, active, busy 0, r$
| +-o cpus <class IOPlatformDevice, id 0x100000117, registered, matched, active, busy 0 (0 ms), retain 14>
| +-o CPU0@0 <class IOACPIPlatformDevice, id 0x100000118, registered, matched, active, busy 0 (412 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x100000125, registered, matched, active, busy 0 (406 ms), retain 8>
| | +-o AppleACPICPUInterruptController <class AppleACPICPUInterruptController, id 0x10000012d, registered, matc$
| | +-o X86PlatformPlugin <class X86PlatformPlugin, id 0x100000301, registered, matched, active, busy 0 (309 ms)$
| | +-o IOPlatformEnabler <class IOPlatformPluginDevice, id 0x10000036f, registered, matched, active, busy 0 ($
| | +-o AGPMEnabler <class IOPlatformPluginDevice, id 0x100000370, registered, matched, active, busy 0 (8 ms),$
| | | +-o AGPMController <class AGPMController, id 0x100000373, !registered, !matched, active, busy 0, retain $
| | +-o X86PlatformShim <class X86PlatformShim, id 0x100000371, !registered, !matched, active, busy 0, retain $
| +-o CPU1@2 <class IOACPIPlatformDevice, id 0x100000119, registered, matched, active, busy 0 (6 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x100000126, registered, matched, active, busy 0 (0 ms), retain 6>
| +-o CPU2@4 <class IOACPIPlatformDevice, id 0x10000011a, registered, matched, active, busy 0 (7 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x100000127, registered, matched, active, busy 0 (0 ms), retain 6>
| +-o CPU3@6 <class IOACPIPlatformDevice, id 0x10000011b, registered, matched, active, busy 0 (8 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x100000128, registered, matched, active, busy 0 (0 ms), retain 6>
| +-o CPU4@1 <class IOACPIPlatformDevice, id 0x10000011c, registered, matched, active, busy 0 (9 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x100000129, registered, matched, active, busy 0 (0 ms), retain 6>
| +-o CPU5@3 <class IOACPIPlatformDevice, id 0x10000011d, registered, matched, active, busy 0 (10 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x10000012a, registered, matched, active, busy 0 (0 ms), retain 6>
| +-o CPU6@5 <class IOACPIPlatformDevice, id 0x10000011e, registered, matched, active, busy 0 (11 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x10000012b, registered, matched, active, busy 0 (0 ms), retain 6>
| +-o CPU7@7 <class IOACPIPlatformDevice, id 0x10000011f, registered, matched, active, busy 0 (12 ms), retain 8>
| | +-o AppleACPICPU <class AppleACPICPU, id 0x10000012c, registered, matched, active, busy 0 (0 ms), retain 6>
| +-o io-apic@fec00000 <class IOACPIPlatformDevice, id 0x100000120, registered, matched, active, busy 0 (0 ms), re$
| | +-o AppleAPICInterruptController <class AppleAPICInterruptController, id 0x10000012f, registered, matched, act$
| +-o AppleACPIEventController <class AppleACPIEventController, id 0x100000130, !registered, !matched, active, bus$
| +-o boot-ec <class IOACPIPlatformDevice, id 0x100000131, registered, matched, active, busy 0 (1 ms), retain 7>
| | +-o AppleACPIEC <class AppleACPIEC, id 0x100000132, !registered, !matched, active, busy 0, retain 5>
| +-o bios <class IOPlatformDevice, id 0x100000133, registered, matched, active, busy 0 (0 ms), retain 6>
| | +-o AppleSMBIOS <class AppleSMBIOS, id 0x100000134, registered, matched, active, busy 0 (0 ms), retain 5>
| +-o PCI0@0 <class IOACPIPlatformDevice, id 0x100000138, registered, matched, active, busy 0 (5300 ms), retain 43$
| | +-o AppleACPIPCI <class AppleACPIPCI, id 0x1000001d5, registered, matched, active, busy 0 (5288 ms), retain 37$
| | | +-o MCHC@0 <class IOPCIDevice, id 0x100000196, registered, matched, active, busy 0 (215 ms), retain 10>
| | | | +-o AppleSMCPDRC <class AppleSMCPDRC, id 0x100000306, registered, matched, active, busy 0 (0 ms), retain 5$
| | | +-o P0P2@1 <class IOPCIDevice, id 0x100000197, registered, matched, active, busy 0 (203 ms), retain 13>
| | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x1000001f5, registered, matched, active, busy 0 (198 ms), $
| | | | +-o GFX0@0 <class IOPCIDevice, id 0x100000198, registered, matched, active, busy 0 (109 ms), retain 27>
| | | | | +-o NVDAHal <class IOService, id 0x10000032b, registered, matched, active, busy 0 (4 ms), retain 6>
| | | | | +-o NVDAgl <class IOService, id 0x10000032c, registered, matched, active, busy 0 (4 ms), retain 6>
| | | | | +-o NVDA,Display-A@0 <class IONDRVDevice, id 0x10000032f, registered, matched, active, busy 0 (47 ms),$
| | | | | | +-o NVDA <class NVDA, id 0x10000033d, registered, matched, active, busy 0 (40 ms), retain 16>
| | | | | | +-o AppleMCCSControlModule <class AppleMCCSControlModule, id 0x100000341, registered, matched, act$
| | | | | | | +-o AppleMCCSParameterHandler <class AppleMCCSParameterHandler, id 0x100000343, registered, matc$
| | | | | | +-o AppleUpstreamUserClientDriver <class AppleUpstreamUserClientDriver, id 0x100000342, registered$
| | | | | | +-o AGPM <class AGPM, id 0x100000375, registered, matched, active, busy 0 (2 ms), retain 8>
| | | | | | +-o AppleGraphicsControlBacklightNub <class AppleGraphicsControlBacklightNub, id 0x10000038b, !reg$
| | | | | | +-o gpu-sensor <class IOService, id 0x1000003b3, registered, matched, active, busy 0 (23 ms), reta$
| | | | | | +-o IOFramebufferI2CInterface <class IOFramebufferI2CInterface, id 0x1000003b6, registered, matche$
| | | | | | +-o IOFramebufferSharedUserClient <class IOFramebufferSharedUserClient, id 0x1000003eb, !registere$
| | | | | | +-o IOFramebufferUserClient <class IOFramebufferUserClient, id 0x100002ce4, !registered, !matched,$
| | | | | +-o NVKernel <class NVKernel, id 0x100000336, registered, matched, active, busy 0 (0 ms), retain 19>
| | | | | | +-o NV2DContextTesla <class NV2DContextTesla, id 0x100002ce9, !registered, !matched, active, busy 0,$
| | | | | | +-o NV2DContextTesla <class NV2DContextTesla, id 0x100002cea, !registered, !matched, active, busy 0,$
| | | | | | +-o NV2DContextTesla <class NV2DContextTesla, id 0x100002ceb, !registered, !matched, active, busy 0,$
| | | | | | +-o NV2DContextTesla <class NV2DContextTesla, id 0x100002cec, !registered, !matched, active, busy 0,$
| | | | | | +-o nvDeviceTesla <class nvDeviceTesla, id 0x100002cf2, !registered, !matched, active, busy 0, retai$
| | | | | | +-o nvFermiGLContextTesla <class nvFermiGLContextTesla, id 0x100002cf4, !registered, !matched, activ$
| | | | | | +-o nvDeviceTesla <class nvDeviceTesla, id 0x100002d47, !registered, !matched, active, busy 0, retai$
| | | | | | +-o nvFermiGLContextTesla <class nvFermiGLContextTesla, id 0x100002d49, !registered, !matched, activ$
| | | | | | +-o nvFermiGLContextTesla <class nvFermiGLContextTesla, id 0x100002d4b, !registered, !matched, activ$
| | | | | | +-o nvDeviceTesla <class nvDeviceTesla, id 0x100002d60, !registered, !matched, active, busy 0, retai$
| | | | | | +-o nvFermiGLContextTesla <class nvFermiGLContextTesla, id 0x100002d62, !registered, !matched, activ$
| | | | | | +-o nvFermiGLContextTesla <class nvFermiGLContextTesla, id 0x100002d64, !registered, !matched, activ$
| | | | | | +-o nvFermiGLContextTesla <class nvFermiGLContextTesla, id 0x100002d6c, !registered, !matched, activ$
| | | | | | +-o nvFermiGLContextTesla <class nvFermiGLContextTesla, id 0x100002d6f, !registered, !matched, activ$
| | | | | +-o NVDA,Display-B@1 <class IONDRVDevice, id 0x100000330, registered, matched, active, busy 0 (1 ms), $
| | | | | | +-o NVDA <class NVDA, id 0x100000345, registered, matched, active, busy 0 (1 ms), retain 12>
| | | | | | +-o AppleMCCSControlModule <class AppleMCCSControlModule, id 0x100000349, registered, matched, act$
| | | | | | | +-o AppleMCCSParameterHandler <class AppleMCCSParameterHandler, id 0x10000034c, registered, matc$
| | | | | | +-o AppleUpstreamUserClientDriver <class AppleUpstreamUserClientDriver, id 0x10000034a, registered$
| | | | | | +-o IOFramebufferI2CInterface <class IOFramebufferI2CInterface, id 0x1000003bb, registered, matche$
| | | | | | +-o IOFramebufferUserClient <class IOFramebufferUserClient, id 0x100002ce5, !registered, !matched,$
| | | | | +-o NVDA,Display-C@2 <class IONDRVDevice, id 0x100000331, registered, matched, active, busy 0 (6 ms), $
| | | | | | +-o NVDA <class NVDA, id 0x10000034e, registered, matched, active, busy 0 (1 ms), retain 12>
| | | | | | +-o AppleMCCSControlModule <class AppleMCCSControlModule, id 0x100000351, registered, matched, act$
| | | | | | | +-o AppleMCCSParameterHandler <class AppleMCCSParameterHandler, id 0x100000354, registered, matc$
| | | | | | +-o AppleUpstreamUserClientDriver <class AppleUpstreamUserClientDriver, id 0x100000352, registered$
| | | | | | +-o IOFramebufferI2CInterface <class IOFramebufferI2CInterface, id 0x1000003bd, registered, matche$
| | | | | | +-o IOFramebufferUserClient <class IOFramebufferUserClient, id 0x100002ce6, !registered, !matched,$
| | | | | +-o NVDA,Display-D@3 <class IONDRVDevice, id 0x100000332, registered, matched, active, busy 0 (2 ms), $
| | | | | | +-o NVDA <class NVDA, id 0x100000356, registered, matched, active, busy 0 (0 ms), retain 12>
| | | | | | +-o AppleMCCSControlModule <class AppleMCCSControlModule, id 0x100000359, registered, matched, act$
| | | | | | | +-o AppleMCCSParameterHandler <class AppleMCCSParameterHandler, id 0x10000035b, registered, matc$
| | | | | | +-o AppleUpstreamUserClientDriver <class AppleUpstreamUserClientDriver, id 0x10000035a, registered$
| | | | | | +-o IOFramebufferI2CInterface <class IOFramebufferI2CInterface, id 0x1000003be, registered, matche$
| | | | | | +-o IOFramebufferUserClient <class IOFramebufferUserClient, id 0x100002ce7, !registered, !matched,$
| | | | | +-o NVDAinitgl <class IOService, id 0x1000003b4, registered, matched, active, busy 0 (0 ms), retain 6>
| | | | +-o HDAU@0,1 <class IOPCIDevice, id 0x10000019a, registered, matched, active, busy 0 (159 ms), retain 12$
| | | | +-o AppleHDAController@0,1 <class AppleHDAController, id 0x100000307, registered, matched, active, bus$
| | | | +-o IOHDACodecDevice@0,1,0 <class IOHDACodecDevice, id 0x100000366, registered, matched, active, bus$
| | | | +-o IOHDACodecDriver <class IOHDACodecDriver, id 0x100000368, !registered, !matched, active, busy $
| | | | +-o IOHDACodecFunction@0,1,0,1 <class IOHDACodecFunction, id 0x100000369, registered, matched, a$
| | | | +-o AppleHDACodecGeneric <class AppleHDACodecGeneric, id 0x10000036a, registered, matched, act$
| | | | +-o AppleHDADriver <class AppleHDADriver, id 0x10000036e, registered, matched, active, busy $
| | | +-o PEG1@1,1 <class IOPCIDevice, id 0x10000019b, registered, matched, active, busy 0 (1133 ms), retain 12>
| | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x1000001f2, registered, matched, active, busy 0 (1129 ms),$
| | | | +-o UPSB@0 <class IOPCIDevice, id 0x10000019c, registered, matched, active, busy 0 (1129 ms), retain 16>
| | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x100000205, registered, matched, active, busy 0 (1122 $
| | | | +-o DSB0@0 <class IOPCIDevice, id 0x10000019d, registered, matched, active, busy 0 (1122 ms), retain$
| | | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x10000022b, registered, matched, active, busy 0 (1$
| | | | | +-o NHI0@0 <class IOPCIDevice, id 0x10000019e, registered, matched, active, busy 0 (1111 ms), re$
| | | | | +-o AppleThunderboltHAL <class AppleThunderboltHAL, id 0x100000241, registered, matched, activ$
| | | | | +-o AppleThunderboltNHIType1 <class AppleThunderboltNHIType1, id 0x10000024e, registered, ma$
| | | | | +-o IOThunderboltController <class IOThunderboltController, id 0x10000024f, registered, ma$
| | | | | +-o IOThunderboltLocalNode <class IOThunderboltLocalNode, id 0x100000252, registered, ma$
| | | | | +-o IOThunderboltPort@6 <class IOThunderboltPort, id 0x100000255, registered, matched, a$
| | | | | +-o IOThunderboltSwitchType1 <class IOThunderboltSwitchType1, id 0x100000257, register$
| | | | | +-o IOThunderboltPort@1 <class IOThunderboltPort, id 0x10000029a, registered, matche$
| | | | | +-o IOThunderboltPort@2 <class IOThunderboltPort, id 0x10000029b, registered, matche$
| | | | | +-o IOThunderboltPort@7 <class IOThunderboltPort, id 0x10000029c, registered, matche$
| | | | | | +-o AppleThunderboltPCIDownAdapter <class AppleThunderboltPCIDownAdapter, id 0x100$
| | | | | +-o IOThunderboltPort@8 <class IOThunderboltPort, id 0x10000029d, registered, matche$
| | | | | | +-o AppleThunderboltPCIDownAdapter <class AppleThunderboltPCIDownAdapter, id 0x100$
| | | | | +-o IOThunderboltPort@9 <class IOThunderboltPort, id 0x10000029e, registered, matche$
| | | | | | +-o AppleThunderboltPCIDownAdapter <class AppleThunderboltPCIDownAdapter, id 0x100$
| | | | | +-o IOThunderboltPort@A <class IOThunderboltPort, id 0x10000029f, registered, matche$
| | | | | | +-o AppleThunderboltPCIDownAdapter <class AppleThunderboltPCIDownAdapter, id 0x100$
| | | | | +-o IOThunderboltPort@C <class IOThunderboltPort, id 0x1000002a0, registered, matche$
| | | | | | +-o AppleThunderboltDPInAdapter <class AppleThunderboltDPInAdapter, id 0x1000002aa$
| | | | | +-o IOThunderboltPort@D <class IOThunderboltPort, id 0x1000002a1, registered, matche$
| | | | | +-o AppleThunderboltDPInAdapter <class AppleThunderboltDPInAdapter, id 0x1000002ab$
| | | | +-o DSB1@3 <class IOPCIDevice, id 0x10000019f, registered, matched, active, busy 0 (10 ms), retain 1$
| | | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x100000236, registered, matched, active, busy 0 (0$
| | | | +-o DSB2@4 <class IOPCIDevice, id 0x1000001a0, registered, matched, active, busy 0 (8 ms), retain 12$
| | | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x100000228, registered, matched, active, busy 0 (0$
| | | | +-o DSB3@5 <class IOPCIDevice, id 0x1000001a2, registered, matched, active, busy 0 (8 ms), retain 12$
| | | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x100000231, registered, matched, active, busy 0 (0$
| | | | +-o DSB4@6 <class IOPCIDevice, id 0x1000001a4, registered, matched, active, busy 0 (7 ms), retain 11$
| | | | +-o IOPCI2PCIBridge <class IOPCI2PCIBridge, id 0x10000022f, registered, matched, active, busy 0 (0$
| | | +-o IGPU@2 <class IOPCIDevice, id 0x1000001a5, registered, matched, active, busy 0 (1903 ms), retain 22>
| | | | +-o AppleIntelCapriController <class AppleIntelCapriController, id 0x100000326, registered, matched, activ$
| | | | | +-o AppleMEClientController <class AppleMEClientController, id 0x100000339, registered, matched, active,$
| | | | +-o AppleIntelFramebuffer@0 <class AppleIntelFramebuffer, id 0x100000334, registered, matched, active, bus$
| | | | | +-o AppleMCCSControlModule <class AppleMCCSControlModule, id 0x10000033b, registered, matched, active, b$
| | | | | | +-o AppleMCCSParameterHandler <class AppleMCCSParameterHandler, id 0x10000033f, registered, matched, a$
| | | | | +-o AppleUpstreamUserClientDriver <class AppleUpstreamUserClientDriver, id 0x10000033c, registered, matc$
| | | | | +-o AGPM <class AGPM, id 0x100000374, registered, matched, active, busy 0 (1339 ms), retain 8>
| | | | | +-o AppleGraphicsControlBacklightNub <class AppleGraphicsControlBacklightNub, id 0x10000038c, !registere$
| | | | | +-o IOFramebufferI2CInterface <class IOFramebufferI2CInterface, id 0x1000003ae, registered, matched, act$
| | | | | +-o IOFramebufferSharedUserClient <class IOFramebufferSharedUserClient, id 0x1000003ec, !registered, !ma$
| | | | | +-o display0 <class IODisplayConnect, id 0x100002774, registered, matched, active, busy 0 (0 ms), retain$
| | | | | | +-o AppleBacklightDisplay <class AppleBacklightDisplay, id 0x100002775, registered, matched, active, b$
| | | | | +-o IOFramebufferUserClient <class IOFramebufferUserClient, id 0x100002ce3, !registered, !matched, activ$
| | | | +-o IntelAccelerator <class IntelAccelerator, id 0x100000328, registered, matched, active, busy 0 (0 ms), $
| | | | +-o IGAccel2DContext <class IGAccel2DContext, id 0x100002ce8, !registered, !matched, active, busy 0, ret$
| | | | +-o IGAccelDevice <class IGAccelDevice, id 0x100002cf1, !registered, !matched, active, busy 0, retain 6>
| | | | +-o IOAccelSharedUserClient <class IOAccelSharedUserClient, id 0x100002cf3, !registered, !matched, activ$
| | | | +-o IGAccelGLContext <class IGAccelGLContext, id 0x100002cf5, !registered, !matched, active, busy 0, ret$
| | | | +-o IGAccelSurface <class IGAccelSurface, id 0x100002d00, !registered, !matched, active, busy 0, retain $
| | | | +-o IGAccelSurface <class IGAccelSurface, id 0x100002d01, !registered, !matched, active, busy 0, retain $
| | | | +-o IGAccelDevice <class IGAccelDevice, id 0x100002d16, !registered, !matched, active, busy 0, retain 6>
| | | | +-o IGAccelSurface <class IGAccelSurface, id 0x100002d2e, !registered, !matched, active, busy 0, retain $
| | | | +-o IGAccelSurface <class IGAccelSurface, id 0x100002d41, !registered, !matched, active, busy 0, retain $
| | | | +-o IGAccelDevice <class IGAccelDevice, id 0x100002d45, !registered, !matched, active, busy 0, retain 6>
| | | | +-o IOAccelSharedUserClient <class IOAccelSharedUserClient, id 0x100002d46, !registered, !matched, activ$
| | | | +-o IGAccelGLContext <class IGAccelGLContext, id 0x100002d48, !registered, !matched, active, busy 0, ret$
| | | | +-o IGAccelGLContext <class IGAccelGLContext, id 0x100002d4a, !registered, !matched, active, busy 0, ret$
| | | | +-o IGAccelSurface <class IGAccelSurface, id 0x100002d4d, !registered, !matched, active, busy 0, retain $
| | | | +-o IGAccelDevice <class IGAccelDevice, id 0x100002d5e, !registered, !matched, active, busy 0, retain 6>
| | | | +-o IOAccelSharedUserClient <class IOAccelSharedUserClient, id 0x100002d5f, !registered, !matched, activ$
| | | | +-o IGAccelGLContext <class IGAccelGLContext, id 0x100002d61, !registered, !matched, active, busy 0, ret$
| | | | +-o IGAccelGLContext <class IGAccelGLContext, id 0x100002d63, !registered, !matched, active, busy 0, ret$
| | | | +-o IGAccelSurface <class IGAccelSurface, id 0x100002d65, !registered, !matched, active, busy 0, retain $
| | | | +-o IGAccelGLContext <class IGAccelGLContext, id 0x100002d6d, !registered, !matched, active, busy 0, ret$
| | | | +-o IGAccelGLContext <class IGAccelGLContext, id 0x100002d70, !registered, !matched, active, busy 0, ret$
| | | +-o XHC1@14 <class IOPCIDevice, id 0x1000001cf, registered, matched, active, busy 0 (29 ms), retain 12>
| | | | +-o AppleUSBXHCI <class AppleUSBXHCI, id 0x100000200, registered, matched, active, busy 0 (21 ms), retain $
| | | | +-o XHCI Root Hub SS Simulation@14 <class IOUSBRootHubDevice, id 0x100000204, registered, matched, activ$
| | | | | +-o AppleUSBHub <class AppleUSBHub, id 0x10000023e, registered, matched, active, busy 0 (0 ms), retain$
| | | | | +-o IOUSBInterface@0 <class IOUSBInterface, id 0x100000240, !registered, !matched, active, busy 0, ret$
| | | | +-o XHCI Root Hub USB 2.0 Simulation@14 <class IOUSBRootHubDevice, id 0x100000243, registered, matched, $
| | | | +-o AppleUSBHub <class AppleUSBHub, id 0x10000025a, registered, matched, active, busy 0 (0 ms), retain$
| | | | +-o IOUSBInterface@0 <class IOUSBInterface, id 0x10000025c, !registered, !matched, active, busy 0, ret$
| | | +-o pci8086,1e3a@16 <class IOPCIDevice, id 0x1000001e6, registered, matched, active, busy 0 (27 ms), retain $
| | | | +-o AppleIntelMEIDriver <class AppleIntelMEIDriver, id 0x100000304, registered, matched, active, busy 0 (0$
| | | +-o EHC2@1A <class IOPCIDevice, id 0x1000001c9, registered, matched, active, busy 0 (121 ms), retain 12>
| | | | +-o AppleUSBEHCI <class AppleUSBEHCI, id 0x100000202, registered, matched, active, busy 0 (106 ms), retain$
| | | | +-o EHCI Root Hub Simulation@1A <class IOUSBRootHubDevice, id 0x100000220, registered, matched, active, $
| | | | | +-o AppleUSBHub <class AppleUSBHub, id 0x100000245, registered, matched, active, busy 0 (0 ms), retain$
| | | | | +-o IOUSBInterface@0 <class IOUSBInterface, id 0x100000247, !registered, !matched, active, busy 0, ret$
| | | | +-o HubDevice@1a100000 <class IOUSBHubDevice, id 0x100000271, registered, matched, active, busy 0 (4 ms)$
| | | | | +-o AppleUSBHub <class AppleUSBHub, id 0x100000273, registered, matched, active, busy 0 (0 ms), retain$
| | | | | +-o IOUSBInterface@0 <class IOUSBInterface, id 0x100000275, !registered, !matched, active, busy 0, ret$
| | | | +-o FaceTime HD Camera (Built-in)@1a110000 <class IOUSBDevice, id 0x10000028b, registered, matched, acti$
| | | | +-o IOUSBCompositeDriver <class IOUSBCompositeDriver, id 0x10000028e, !registered, !matched, active, b$
| | | | +-o FaceTime HD Camera (Built-in)@0 <class IOUSBInterface, id 0x10000028f, registered, matched, active$
| | | | +-o IOUSBInterface@1 <class IOUSBInterface, id 0x100000290, registered, matched, active, busy 0 (16 ms$
| | | | +-o IOUSBInterface@2 <class IOUSBInterface, id 0x100000291, registered, matched, active, busy 0 (6 ms)$
| | | +-o HDEF@1B <class IOPCIDevice, id 0x1000001b7, registered, matched, active, busy 0 (300 ms), retain 12>
| | | | +-o AppleHDAController@1B <class AppleHDAController, id 0x100000314, registered, matched, active, busy 0 ($
| | | | +-o IOHDACodecDevice@1B,0 <class IOHDACodecDevice, id 0x10000033a, registered, matched, active, busy 0 ($
| | | | +-o IOHDACodecDriver <class IOHDACodecDriver, id 0x100000348, !registered, !matched, active, busy 0 (2$
| | | | +-o IOHDACodecFunction@1B,0,1 <class IOHDACodecFunction, id 0x10000034b, registered, matched, active$
| | | | +-o AppleHDACodecGeneric <class AppleHDACodecGeneric, id 0x10000034d, registered, matched, active,$
| | | | +-o AppleHDADriver <class AppleHDADriver, id 0x10000035e, registered, matched, active, busy 0 (2$
| | | | +-o AppleHDAEngineInput@1B,0,1,0 <class AppleHDAEngineInput, id 0x100000381, registered, match$
| | | | | +-o AppleHDAStream <class AppleHDAStream, id 0x100000382, registered, matched, active, busy $
| | | | | +-o IOAudioSelectorControl <class IOAudioSelectorControl, id 0x100000383, !registered, !matc$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x10000043b, !registered,$
| | | | | +-o IOAudioLevelControl <class IOAudioLevelControl, id 0x100000384, !registered, !matched, a$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x10000043c, !registered,$
| | | | | +-o IOAudioToggleControl <class IOAudioToggleControl, id 0x100000385, !registered, !matched,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x10000043d, !registered,$
| | | | | +-o IOAudioToggleControl <class IOAudioToggleControl, id 0x100000386, !registered, !matched,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x10000043e, !registered,$
| | | | | +-o IOAudioEngineUserClient <class IOAudioEngineUserClient, id 0x100000439, !registered, !ma$
| | | | | +-o IOAudioEngineUserClient <class IOAudioEngineUserClient, id 0x100000444, !registered, !ma$
| | | | | +-o IOAudioEngineUserClient <class IOAudioEngineUserClient, id 0x100002d22, !registered, !ma$
| | | | | +-o IOAudioEngineUserClient <class IOAudioEngineUserClient, id 0x100002d35, !registered, !ma$
| | | | | +-o IOAudioEngineUserClient <class IOAudioEngineUserClient, id 0x100002d6a, !registered, !ma$
| | | | | +-o IOAudioToggleControl <class IOAudioToggleControl, id 0x100002def, !registered, !matched,$
| | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df0, !registered,$
| | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df1, !registered,$
| | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df2, !registered,$
| | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df3, !registered,$
| | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df4, !registered,$
| | | | +-o AppleHDAEngineInput@1B,0,1,1 <class AppleHDAEngineInput, id 0x100000387, registered, match$
| | | | | +-o AppleHDAStream <class AppleHDAStream, id 0x100000389, registered, matched, active, busy $
| | | | | +-o IOAudioSelectorControl <class IOAudioSelectorControl, id 0x100000393, !registered, !matc$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000431, !registered,$
| | | | | +-o IOAudioLevelControl <class IOAudioLevelControl, id 0x100000394, !registered, !matched, a$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000432, !registered,$
| | | | | +-o IOAudioLevelControl <class IOAudioLevelControl, id 0x100000395, !registered, !matched, a$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000433, !registered,$
| | | | | +-o IOAudioToggleControl <class IOAudioToggleControl, id 0x100000396, !registered, !matched,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000434, !registered,$
| | | | | +-o IOAudioToggleControl <class IOAudioToggleControl, id 0x100000397, !registered, !matched,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000435, !registered,$
| | | | | +-o IOAudioToggleControl <class IOAudioToggleControl, id 0x100000398, !registered, !matched,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000436, !registered,$
| | | | | +-o IOAudioSelectorControl <class IOAudioSelectorControl, id 0x100000399, !registered, !matc$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000437, !registered,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df5, !registered,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df6, !registered,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df7, !registered,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100002df8, !registered,$
| | | | | +-o IOAudioToggleControl <class IOAudioToggleControl, id 0x10000039b, !registered, !matched,$
| | | | | | +-o IOAudioControlUserClient <class IOAudioControlUserClient, id 0x100000438, !registered,$
| | | | | +- -
I ran a virus/trojan fix and this is what it said it could not repair something in the main library core or something like that. What do I do? The problem seems to be with safari?
I ran the utility disk and this is what it said.
Warning permission differ Applications/Safari drwxr-xrx they are -rwxr-xr system/livrary Cores has been modified and will not be repaired.
Permission apllication differ on System/livrary/Pr or could be -rw-r--r-- they are rwxr-xr-x Application/iTune be droxr-xr-x they are rwxr-xr-x
Then I hit fix permissions and it said this
Warning SUID file Systm/Library/Core has been modified will not be repaired
I also downloaded Bitdefender Virus Scanner and it found nothing. -
Windows search serachprotocolhost.exe opening files with virus/trojans
I had received a file with was suspected malicious, but was tested online and was passed by 41 different virus engines as
"No Threats found", The file was a word document XP447949.doc which contained macro's that were suspected as Malicious. The file was NOT opened with word as it warned about suspect macro's.
However much to my surprise our Antivirus software Blocked An attempt to execute code out of the blue the following day, The file was the XP447949.doc and the offending program was windows search!
This Means that any potential Virus/Trojan/Malware that has been downloaded but not run could be installed when the indexing service does its rounds! Surely this cant be right...
Hopefully someone at Microsoft can look into how this can be made more Secure.The Trojan found was reported by the antivirus as 'LooksLike.Macro.Downloader.a (v)'
The Antivirus did not find problems when it scanned the file. (Neither did 40 other products)
The active protection part found the file when windows search attempted to access the file, this concerns me somewhat that the search indexer is activating hidden malware.
If there was no active protection what would have happened? -
Do I need an anti-virus program on a MacBook?
I'm a brand new MacBook user. Just bought the 13-inch aluminum body version from Club Mac and it was delivered yesterday. The notebook is actually for my wife to be able to use while she's recovering from knee surgery in a couple of weeks and I thought it was time to branch our family out from PC's and Windows. So I'm setting up the MacBook for her to be able to use it...and for our family to get more literate on a Mac and it looks great! My question is do I need an anti-virus program and if so, which is a good one recommended by Mac users? NOTE: because my wife is familiar with Windows, I had XP service pack 3 installed and have VM Ware Fusion onboard to be able to run both Windows and Leopard for her convenience and to assist us. So there MAY be some Windows use on this MacBook, at least at first. All responses, replies, suggestions, welcome. THANK YOU.
Do You Need Anti-Virus Protection for Your Mac?
According to Rich Mogull's article, Should Mac Users Run Antivirus Software?,
"The reality is that today the Mac platform is relatively safe. There are hundreds of thousands of viruses and other malicious software programs floating around for Windows, but less than 200 are known to target the Mac, and many of those are aimed at versions of the Mac OS prior to Mac OS X (and thus have no effect on a modern Mac).
It's not that Mac OS X is inherently more secure against viruses than current versions of Windows (although it was clearly more secure than Windows prior to XP SP2); the numerous vulnerabilities reported and patched in recent years are just as exploitable as their Windows equivalents. But most security experts agree that malicious software these days is driven by financial incentives, and it's far more profitable to target the most dominant platform."
Mr. Mogull is a computer security expert. I recommend reading the entire article as it is quite informative.
For additional information on viruses, trojans, and spyware visit The XLab FAQs and read the FAQs on viruses and spyware. -
What is the best anti virus software for a MacBook air?
Hi,just joined the community .just wanting to know what anti virus software for a macbook air running os x mavericks 10.9?I keep getting pop ups on safari.
Any help much appreciated!There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for a file with a name of the form
com.something.daemon.plist
Here something is a variable word, which can be different in each case. It could be "cloud," "dot," "highway," "submarine," "trusteddownloads," or pretty much anything else.
There may also be a file named
com.something.helper.plist
in the same folder.
Leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
com.something.agent.plist
where the word something is exactly the same as before.
If you feel confident that you've identified these three files, back up all data, then drag the three files you found to the Trash. You may be prompted for your administrator login password. Close the windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
something
(where something is the same word as before), drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
v.framework
It's actually another folder, though it has a different icon. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked. -
I logged on to Foxfire, Google then did a search for a pattern for a Belly Dancers hip scarf with bangles. After checking out a few sites, a Security Alert appears on my screen with the FOXFIRE logo and a list of Virus/Trojan with critical and high risk. At the bottom of this Alert it request that to protect I click button. When I do an other window pops-up requesting me to download a site that will remove the virus/Trojans. It said if I don't my computer will crash. I have not done this, but in the past I had something like this happen and I downloaded a site that requested that I pay money, before they would remove virus/Trojan. My question is HOW DO I TELL IF THE SECURITY ALERT IS FROM FOXFIRE and how to remove the virus/Trojans that Foxfire has discovered.
Hi Im Alexander and i will be helping you today
That is dangrous when you clicked on the link you got a virus and its already installed on your computer to see how it works click on this link http://www.youtube.com/watch?v=F4fI9B9VXB0 (if it dosent work copy and paste it in you adress bar) and to download the virus protection click this link http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html if it dosent work copy and paste it in your adress bar !!!!!!!!! if you have any questions email me at [email protected]
Thanks -
Virus protection for my macbook pro
Does anybody know of a good Virus protection for my macbook pro? Some people say i dont need one is that true? I was hoping to get a cheap/reasonable priced protection for a lil extra help. Im worried about my laptop getting a virus.
Thomas A Reed wrote:
sigh. Discussions about anti-virus software here are a hot-button topic, and often cause virtual fistfights. Not your fault, of course, but now there's a lot of confusing information being thrown back and forth here. Let me try to clear the air a bit.
First, regarding ClamXav, Kappy's link is fine, but I would refer you straight to the official ClamXav site rather than the MacUpdate page:
http://www.clamxav.com
There is another ClamXav site, ending in .org, that is fake. It's not related to the actual ClamXav. Don't go there. I'd love nothing better than to get that site taken down, but alas, that is not within my power.
I have mixed feelings about ClamXav. I like the guy who develops it, and I like the way it works... but it's not always on top of things with regard to malware definitions.
Regarding Avast, it is certainly not "the worst of the whole wretched lot" of anti-virus software. Neither is it something I would recommend highly. It has a tendency towards false positives, in my experience. Beyond that, I have not used it for a lengthy period of time, and cannot say more.
Go to my Mac Malware Guide and get the information you need to learn how to protect yourself, and then make your own educated decision about anti-virus software, based on your needs and behaviors. I have some recommendations there, and you can also take a look at the results of my testing of Mac anti-virus software. (Be sure to read the whole thing, and don't just skip straight to the results, as the results are meaningless without understanding what they mean and what they don't mean.)
With respect to your site and your basic research on the matter and limited time spent with these engines running, you have to see this from my side as well. I have over 20+ client networks that run nothing but the full licensed version of Avast with just the AV filters turned on (none of the Firewalling built into it of any kind). 2 of those clients are full Mac networks with 15+ Macs on them and they run the Mac version without issue. Their systems run at the same speed as they did without anything else on them. I also run the software myself daily an my system has no issues with slowness or anything. I have run Avast for the past 6+ years without problems with false positives or system corruptions of any kind, the same cannot be said for other platforms like McAfee and Norton who's bad signature updates have crippled entire networks. I have looked at numerous options from ESET to AVG Free and none of them have as small a footprint on the system as Avast in my professional opinion (one backed by over 15 years in the IT industry). While as of late I'll agree that the PC version of the software has had some additions to it that I don't agree with (like the newly added features of 8.0), the Mac version is still pretty basic in contrast. As such, even the PC side isn't bad, you just have to do a custom install and just exclude the additional options you don't want. Ultimately, they're adding it in there to try and protect idiot users more, but there's only so much you can do to keep people safe without piling on the security layers.
Anyway, as Thomas said... discussions about AV on Mac forums can go on for hours, but the fact remains that you run a risk with and without something on your system. Utimately it's your call to make, just be open minded and do your research instead of just taking the word of some home user of Macs with lot of points who've used these systems for over 10 years and are more proficient at protecting themselves than you are as a novice user. That is the best suggestion I can give you. -
MacBook Pro has picked up europol/ukash virus. Is my MacBook safe?
Browsing safari today.. The Europol virus started also known as ukash virus.. I tried closing safari but It wouldn't let me so I turned the MacBook off by holding the off button turned it back on and it was still running on safari.. I repeated the process but waited 5 minutes before turning the MacBook back on and it was no longer running on safari.. I restarted safari deleting everything cookies etc. will my MacBook still be infected I'm using a 2012 MacBook Pro running mountain lion. If anyone could help me out that would be great. I thought mac products were near enough virus safe.. Obviously not! Are there any ways of preventing this happening again?
ThanksProbably a Windows virus that can't affect OS X, but see Linc Davis's post here:
https://discussions.apple.com/message/22528547#22528547
You may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful: The User Tip seeks to offer guidance on the main security threats and how to avoid them.
https://discussions.apple.com/docs/DOC-2435
More useful information can also be found here:
www.thesafemac.com/mmg
Message was edited by: Klaus1 -
PLEASE HELP!!!!! I THINK I GOT A VIRUS/TROJAN/WORM
Yes this is the first time this has occurred..
I will tell you what happened... Here i go
Ok tonight i sent an im over aim to somebody and they said i sent a link which i didnt and i send another im to another person and they also said i sent a link which i didnt. So i dont know what this is, is it a trojan horse, a virus, or just a worm? I would think it would be a trojan horse. But i asked them what did the link say and they sent it back to me but it didnt register. And she told me that she sent it... Andi didnt think about it being a virus/trojan/worm untill she exited out of the window. Well i asked her what the link was and she said she didnt know. So it i told her if she gets the link again just send it back to me with out the .com so it wouldnt be a link. I am worried that i got one b/c this is the first time this has happened to me since i had my expensive imac. I am running a mac os x version 10.3.9. And i ran a virus scan for my apps with ClamXav so far there hasnt been a virus detected. Can someone PLEASE help me becuase when i tell my dad he is going to kill me if i dont fix it....
Thx alot, RobbyHi k0rnyfr33k,
This is one of the oldest tricks in the virus writer's bag. When one of these infected e-mails hits a Windows computer, the virus/worm/Trojan automatically copies itself to every person in their address book. At the same time, it uses any one of those names to spoof the "from" address to make it look like it came from somewhere else. So it's an almost 100% certainty that the virus they got came from someone else's computer whom you know who has your e-mail address in their address book. I've gotten such stuff with my own address as the sender. Meaning that I know it came from one of my relatives, friends, or someone else who has my e-mail stored in their address book in Windows. -
Has anyone seen the new 'killing hazard' redirect virus/trojan?
I have been getting since 9/26 a new redirect-style virus/trojan. It masquerades as a "popup" antivirus. Any attempt to kill the popup (click on the right-corner exit, etc) starts the virus-scanning operation of the fake anti-virus. I have flagfox, which says that the page is chinese. I must kill Firefox to eliminate the page. I have run malwarebytes with a completely updated database, with no malware detected.
Full text for the popup window
Warning!
On your computer detected the malicious code.
Should immediately make sure that your system is safe! Killing Hazard (R) for Microsoft Windows XP immediately started to workI had the same problem and found out that the virus changed my router's settings: instead of the correct setting DNS Address "Get Automatically from ISP", the virus changed it to a specific DNS server: 213.109.69.44
I realized that something must be wrong with my router when all my devices (including my iPhone) were being redirected to the fake anti-virus web page when connecting to the internet through that router. -
Do I need a type of anti virus software for my macbook pro(2012)?
I'm usually a Windows guy and I just switched to Macs. So I'm not used to Macbooks. Do I need a type of anti software for apple computers? If I do can you recommend me some or tell me how to maintain/prevent my mac from viruses, trojans, etc...
mende1 is correct: all you need is ClamXav, but here is the longer version:
There are many forms of ‘Malware’ that can affect a computer system, of which ‘a virus’ is but one type, ‘trojans’ another. Using the strict definition of a computer virus, no viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions. The same is not true of other forms of malware, such as Trojans. Whilst it is a fairly safe bet that your Mac has NOT been infected by a virus, it may have another security-related problem, but more likely a technical problem unrelated to any malware threat.
You may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful:
https://discussions.apple.com/docs/DOC-2435
The User Tip (which you are welcome to print out and retain for future reference) seeks to offer guidance on the main security threats and how to avoid them.
More useful information can also be found here:
http://www.reedcorner.net/mmg/ -
Will virus/trojan in mail transfer to a new computer.
I believe I may have a virus (or trojan) on my mail. I have searched the discussions and tried a few things suggested but I understand that even deleting things can come back.
We have a very old system and I have always done the security updates, which are no longer available since 2009-005 (I believe). We are buying a new iMac and I want to be sure nothing gets transferred into it.
Any help? Thanks.VIRUSES
No viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions.
It is possible, however, to pass on a Windows virus to another Windows user, for example through an email attachment. To prevent this all you need is the free anti-virus utility ClamXav, which you can download for Tiger from:
http://www.clamxav.com/download.php#tiger
and for Leopard, Snow Leopard and Lion from here:
http://www.clamxav.com/
Note: If you wish to uninstall ClamXav: keep a copy of the disk image from when you downloaded it, or download it again - the uninstaller is included with the application. To uninstall, quit ClamXav Sentry (if you use it) and make sure it's not set to launch at log in. The uninstaller will remove the engine and any schedules you've got set up, then just drag ClamXav.app to the trash.
If you are already using ClamXav: please ensure that you have installed all recent Apple Security Updates and that your version of ClamXav is the latest available.
Do not install Norton Anti-Virus on a Mac as it can seriously damage your operating system. Norton Anti-Virus is not compatible with Apple OS X.
FAKE ANTI-VIRUS SOFTWARE and associated MALWARE
Do not be tricked by 'scareware' that tempts computer users to download fake anti-virus software that may itself be malware.
Fake anti-virus software that infect PCs with malicious code are a growing threat, according to a study by Google. Its analysis of 240m web pages over 13 months showed that fake anti-virus programs accounted for 15% of all malicious software.
Scammers trick people into downloading programs by convincing them that their PC is infected with a virus.
Once installed, the software may steal data or force people to make a payment to register the fake product.
Beware of PDF files from unknown sources. A security firm announced that by its counting, malicious Reader documents made up 80% of all exploits at the end of 2009.:
http://www.computerworld.com/s/article/9157438/in which Rogue_PDFs_account_for_80_of_all_exploits_says_researcher
TROJANS and RE-DIRECTION TO FAKE WEBSITES
The appearance of Trojans and other malware that can possibly infect a Mac seems to be growing, but is a completely different issue to viruses.
If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.
You can read more about how, for example, the OSX/DNSChanger Trojan works (by falsely suggesting extra codecs are required for Quicktime) here:
http://www.f-secure.com/v-descs/trojan_osx_dnschanger.shtml
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
First update the MacScan malware definitions before scanning. You can also contact their support team for any additional support - [email protected]
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
(Note that a 30 day trial version of MacScan can be downloaded free of charge from:
http://macscan.securemac.com/buy/
and this can perform a complete scan of your entire hard disk. After 30 days free trial the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk. It will detect (and delete if you ask it to) all 'tracker cookies' that switch you to web sites you did not want to go to.) -
IPod Shuffle and Viruses / Trojans
I've got a 2nd Gen (?) iPod shuffle sat around and I was wondering is it possible for such a device to carry a virus or trojan that could infect my Mac. I've had it given from a family member and used it previously on my Windows machine but never on my Macbook. I'm just wondering is it possible that it could of picked a virus up from Windows to then transfer it.
Cheers!It is possible it to carry the files that make up a virus/trojan, but the odds are very, very slim, practically none. Disk Use would have to be enabled on the Shuffle in iTunes on the Windows PC from under the iPod's Summary tab for the files to be able to transfer to the iPod's storage.
And if it did pick up a virus on your Windows machine, it wouldn't affect your Mac in any way as they are two totally different OS architectures.
B-rock -
How do I backup voice memos from iPhone 4 to my Macbook with iOS 6.0?
How do I backup voice memos from my iPhone 4 to my MacBook, with iOS 6?
I have synchronised them a hundred times but iTunes just doesn't backup my voice memos. And I haven't seen a playlist called "Voice Memos" on the left sidebar either...Look for Voice Memos under Genres in iTunes.
With the phone connected, click on its name on the left. Then click on the Music tab on the right. Is "Include voice memos" checked?
Maybe you are looking for
-
Problem in extension of a controller class
Hi all, I have to make a radio button read only in a standard page. I am not able to set this property using personalisation, because, this bean is being created dynamically. So, I am extending the controller to perform the required function. Also ,
-
Time Machine Stopped Working After Update
I updated the most recent OSX 10.6.3 and disk utility etc. then suddenly my time machine stopped backing up to external disk attached to Airport Extreme. I have a Seagate drive attached to the AE. I can see the drive and I can see the time machine fo
-
Is the net slow today or is it just me?
Hi, Completely off the topic, however today even Google home page takes 10 - 30 seconds to load on a cable connection(normally about 500 kb/sec). Is anyone else having this trouble, and does anyone know why? Michael
-
Help! Can't Open Mac Book Pro Lid
I can't open my MacBook Pro. I hesitate to try and pry it open with any kind of device, because I"m worried about breaking something. Has anyone else had this problem? Any help would be very much appreciated! This has happened to me before, but someh
-
So...you're having problems with your Fascinate....
Funny, I haven't been over to these forums in awhile and now I come back--and see all manners of problems, issues, gripes, etc. Wasn't *anything* like this when I first got my Fascinate. Here's what I think: I don't beleive Verizon understood wh