Munix hacked? Valid files for install of Leopard?

[ElDiabloConCaca]

Everything looks fine to me.

My suggestion, like another suggested, is to quit looking through the logs unless you know what you're looking for. Things like "warning" and "error" and "fatal" are completely normal terminology and are not indicators of problems. "Errors" happening are completely normal in ANY software -- it does not indicate that the program is acting abnormally or has been compromised... errors occur all the time, and the program handles them gracefully.

Think of it like this: you're walking down the hall, and there's an unexpected rock there. You stub your toe and almost trip, but you're quick enough with the leg movements that you don't fall down. Does that mean that your brain and/or legs have been compromised, and that your body as a whole is acting abnormally? No... an "error" occurred (tripping), and you handled it "gracefully" (by quick-moving legs preventing a complete fall-over). Happens ALL the time in software. It's supposed to. Errors and warnings are SUPPOSED to occur.

Seems like an awfully lot of connections to me, but then again, I am NOT a net techie.

Yes, it's a lot of connections, but nothing abnormal -- that's how web (http) requests work -- there's a lot of connections going on simultaneously... when you hit up google.com in your browser, there isn't just one connection from you to google.com -- there's a handful of connections made, and even more made as you do different things on the website. Absolutely, 100% normal.

[NewMacUser-TX]

thanks for your replies, etc. I understand what you mean and as I admitted earlier, I often just know enough to make more trouble than is needed. With the Mac I am not as concerned as things seem to be more transparent. With my Windows machines I kept listening to those that said, "don't worry, that's normal" only to find out later it wasn't, so perhaps you can understand my concern. I know I can't "prove" it to you, but the Windows issues were serious and real. As I said, two different banks and a credit card company notified me of attempts to access my accounts. Therefore, the problems I had with Windows has made more paranoid than ever about net security and as such, I admit I tend to look too much.

I am just glad that, as of now, my identity is still mine and has not been "hi-jacked"! ;-)

[nixgeek]

One thing that will always be true. No matter how patched up your system is, there's no patch for the human condition. Social engineering tactics on unsuspecting computer users can compromise even the most protected system, which is why end-user education is VERY important.

Case in point, I had a teacher coworker of mine hire me to remove a rogue application called Vista Antivirus 2008 from her Windows laptop. She was downloading stuff from Limewire and all of a sudden when she tried to view a movie file she had downloaded, the movie file installed the rogue app and it fooled her into thinking she was infected with viruses. She ran a scan through this tool (not knowing it was a rogue app since it looks like it's part of Windows) and was told that if she wanted it removed that she had to pay for the full version. She then proceeded to enter her credit card information and sent it on its way to the Russian malware coders that created the application for this purpose. Now she has to contact her credit card company and keep tabs on her accounts to make sure hings don't get any worse.

All it takes is common sense when going on the web. Don't go to websites you are not familiar with, and make sure that you are on a legitimate site and not a phishing site (there are tools that can detect these sites for you). Don't willfully give out personal information, and if a file that you downloaded asks for a password when it really shouldn't, delete it immediately. An ounce of common sense is worth more than a pound of hindsight.

[HelloMac]

More mystery.

While getting out some CDs to find some interesting log entries to post I decided to re-do my little backup HD that I've been using the past couple of months to hold on to files.

Instead of using Disk Utility I decided to try Drive Genius 2. As you'll see from the screenshot in the pdf with this post I was advised that re-partitioning the drive would cause me to lose boot ability with OS 9. OS 9? My mac is only three months old and has always had 10.5.2 or better.

This little hard drive was purchased store new no more than two months ago and has only been connected to a Mac that I own and control. So what's with OS 9? It was previously wiped and formatted using Disk utility.

IMac reports I'm using Disk utility v11, build 252.3. IMac is running 10.5.3.

Regarding questions in earlier post Diabl0 - when I redo the drive I always make a new partition. Even made an extra partition for fun during one go round. Always erase, zero out. Nothing connected to the mac during the process and airport / bluetooth off.

Here's a couple of examples of passwords I've used in the past with this machine to illustrate, hopefully, complexity:

KgvL!1037>raDio
kemm!Kz0n?<
!omtSpr|eT

Back with more data before too long...

[HelloMac]

When I last used my Airport Extreme base station. The configuration changes battle began were not initiated by me.

Jun 07 10:46:17 Severity:5 Connection accepted from ::ffff:10.0.1.200/50893.
Jun 07 10:46:21 Severity:5 Connection accepted from fe80::21f:f3ff:fe52:b939%bridge0/50894.
Jun 07 10:46:25 Severity:5 Clock synchronized to network time server time.apple.com (adjusted -1 seconds).
Jun 07 10:48:16 Severity:5 Configuration updated. ME
Jun 07 10:48:16 Severity:5 unloading current configuration. NOT ME
Jun 07 10:48:26 Severity:5 (WAN) link state is Up.
Jun 07 10:48:26 Severity:5 Deauthenticating with station ff:ff:ff:ff:ff:ff (reserved 3)NOT ME.
Jun 07 10:48:26 Severity:5 Rotated TKIP group key.
Jun 07 10:48:26 Severity:3 No Address for NTP server time.apple.com.
Jun 07 10:48:26 Severity:5 Internet Configuration leased -- host <98.204.114.48/255.255.252.0> gateway <98.204.112.1> dns <68.87.73.242 68.87.71.226> wins <> lease <2757> domain <hsd1.dc.comcast.net.>

Jun 07 10:48:38 Severity:5 Connection accepted from fe80::21f:f3ff:fe52:b939%bridge0/50896.
Jun 07 10:48:40 Severity:5 Connection accepted from fe80::21f:f3ff:fe52:b939%bridge0/50897.
Jun 07 10:48:41 Severity:5 Clock synchronized to network time server time.apple.com (adjusted +0 seconds).
None of these changes were initiated by me.
Jun 07 10:51:02 Severity:6 Parameter updated - slvl.
Jun 07 10:51:02 Severity:6 Parameter updated - snAF.
Jun 07 10:51:02 Severity:6 Parameter updated - snLW.
Jun 07 10:51:02 Severity:6 Parameter updated - snLL.
Jun 07 10:51:02 Severity:6 Parameter updated - snRW.
Jun 07 10:51:02 Severity:6 Parameter updated - snWW.
Jun 07 10:51:02 Severity:6 Parameter updated - snRL.
Jun 07 10:51:02 Severity:6 Parameter updated - snWL.
Jun 07 10:51:02 Severity:6 Parameter updated - snCS.
Jun 07 10:51:02 Severity:6 Parameter updated - usbF.
Jun 07 10:51:02 Severity:6 Parameter updated - prnR.
Jun 07 10:51:02 Severity:6 Parameter updated - SMBw.
Jun 07 10:51:02 Severity:6 Parameter updated - SMBs.
Jun 07 10:51:02 Severity:6 Parameter updated - fssp.
Jun 07 10:51:02 Severity:6 Parameter updated - cver.
Jun 07 10:51:02 Severity:6 Parameter updated - ctim.
Jun 07 10:51:02 Severity:6 Parameter updated - Prof.
Jun 07 10:51:02 Severity:6 Parameter updated - leAc.
Jun 07 10:51:02 Severity:6 Parameter updated - AAU .
Jun 07 10:51:02 Severity:5 Configuration updated.
Jun 07 10:51:02 Severity:6 Parameter updated - acFN.
Jun 07 10:51:02 Severity:6 Parameter updated - acRI.
Jun 07 10:51:02 Severity:5 unloading current configuration.
Jun 07 10:51:12 Severity:5 (WAN) link state is Up.
Jun 07 10:51:12 Severity:3 No Address for NTP server time.apple.com.
Jun 07 10:51:12 Severity:5 Deauthenticating with station ff:ff:ff:ff:ff:ff (reserved 3).
Jun 07 10:51:12 Severity:5 Rotated TKIP group key.
Jun 07 10:51:14 Severity:5 Internet Configuration leased -- host <98.204.114.48/255.255.252.0> gateway <98.204.112.1> dns <68.87.73.242 68.87.71.226> wins <> lease <2589> domain <hsd1.dc.comcast.net.>

Jun 07 10:51:23 Severity:5 Connection accepted from ::ffff:10.0.1.200/50899.
Jun 07 10:51:25 Severity:5 Connection accepted from fe80::21f:f3ff:fe52:b939%bridge0/50900.
Jun 07 10:51:27 Severity:5 Clock synchronized to network time server time.apple.com (adjusted +0 seconds).
Jun 07 10:51:43 Severity:6 Parameter updated - syNm.
Jun 07 10:51:43 Severity:6 Parameter updated - syPW.
Jun 07 10:51:43 Severity:6 Parameter updated - syPR.
Jun 07 10:51:43 Severity:6 Parameter updated - syCt.
Jun 07 10:51:43 Severity:6 Parameter updated - syLo.
Jun 07 10:51:43 Severity:6 Parameter updated - SUEn.
Jun 07 10:51:43 Severity:6 Parameter updated - SUFq.
Jun 07 10:51:43 Severity:6 Parameter updated - SUSv.
Jun 07 10:51:43 Severity:6 Parameter updated - syRe.
Jun 07 10:51:44 Severity:6 Parameter updated - time.
Jun 07 10:51:44 Severity:6 Parameter updated - timz.
Jun 07 10:51:44 Severity:6 Parameter updated - wbEn.
Jun 07 10:51:44 Severity:6 Parameter updated - wbHN.
Jun 07 10:51:44 Severity:6 Parameter updated - wbHU.
Jun 07 10:51:44 Severity:6 Parameter updated - wbHP.
Jun 07 10:51:44 Severity:6 Parameter updated - wbRD.
Jun 07 10:51:44 Severity:6 Parameter updated - waD1.
Jun 07 10:51:44 Severity:6 Parameter updated - prnR.
Jun 07 10:51:44 Severity:6 Parameter updated - SMBw.
Jun 07 10:51:44 Severity:6 Parameter updated - SMBs.
Jun 07 10:51:44 Severity:6 Parameter updated - fssp.
Jun 07 10:51:44 Severity:6 Parameter updated - cver.
Jun 07 10:51:44 Severity:6 Parameter updated - ctim.
Jun 07 10:51:44 Severity:6 Parameter updated - Prof.
Jun 07 10:51:44 Severity:6 Parameter updated - leAc.
Jun 07 10:51:44 Severity:6 Parameter updated - AAU .
Jun 07 10:51:44 Severity:5 Configuration updated.
Jun 07 10:51:44 Severity:6 Parameter updated - acFN.
Jun 07 10:51:44 Severity:6 Parameter updated - acRI.
Jun 07 10:51:44 Severity:5 unloading current configuration.
Jun 07 10:52:03 Severity:5 (WAN) link state is Up.
Jun 07 10:52:03 Severity:5 Deauthenticating with station ff:ff:ff:ff:ff:ff (reserved 3).
Jun 07 10:52:03 Severity:5 Rotated TKIP group key.
Jun 07 10:52:06 Severity:5 Internet Configuration leased -- host <98.204.114.48/255.255.252.0> gateway <98.204.112.1> dns <68.87.73.242 68.87.71.226> wins <> lease <2537> domain <hsd1.dc.comcast.net.>

Jun 07 10:52:14 Severity:5 Connection accepted from ::ffff:10.0.1.200/50902.
Jun 07 10:52:16 Severity:5 Connection accepted from fe80::21f:f3ff:fe52:b939%bridge0/50903.
Jun 07 10:52:27 Severity:3 Administrative access denied to fe80::21f:f3ff:fe52:b939%bridge0/50904.
Jun 07 10:52:50 Severity:5 Connection accepted from fe80::21f:f3ff:fe52:b939%bridge0/50905.
Jun 07 10:52:52 Severity:5 Connection accepted from fe80::21f:f3ff:fe52:b939%bridge0/50906.
Jun 07 10:55:05 Severity:6 Parameter updated - syNm.
Jun 07 10:55:05 Severity:6 Parameter updated - syPW.
Jun 07 10:55:05 Severity:6 Parameter updated - syPR.
Jun 07 10:55:05 Severity:6 Parameter updated - syCt.
Jun 07 10:55:05 Severity:6 Parameter updated - syLo.
Jun 07 10:55:05 Severity:6 Parameter updated - SUEn.
Jun 07 10:55:05 Severity:6 Parameter updated - SUFq.
Jun 07 10:55:05 Severity:6 Parameter updated - SUSv.
Jun 07 10:55:05 Severity:6 Parameter updated - syRe.
Jun 07 10:55:04 Severity:6 Parameter updated - time.
Jun 07 10:55:04 Severity:6 Parameter updated - timz.
Jun 07 10:55:04 Severity:6 Parameter updated - wbEn.
Jun 07 10:55:04 Severity:6 Parameter updated - wbHN.
Jun 07 10:55:04 Severity:6 Parameter updated - wbHU.
Jun 07 10:55:04 Severity:6 Parameter updated - wbHP.
Jun 07 10:55:04 Severity:6 Parameter updated - wbRD.
Jun 07 10:55:04 Severity:6 Parameter updated - raT2.
Jun 07 10:55:04 Severity:6 Parameter updated - prnR.
Jun 07 10:55:04 Severity:6 Parameter updated - SMBw.
Jun 07 10:55:04 Severity:6 Parameter updated - SMBs.
Jun 07 10:55:04 Severity:6 Parameter updated - fssp.
Jun 07 10:55:04 Severity:6 Parameter updated - cver.
Jun 07 10:55:04 Severity:6 Parameter updated - ctim.
Jun 07 10:55:04 Severity:6 Parameter updated - Prof.
Jun 07 10:55:04 Severity:6 Parameter updated - leAc.
Jun 07 10:55:04 Severity:6 Parameter updated - AAU .
Jun 07 10:55:04 Severity:5 Configuration updated.
Jun 07 10:55:04 Severity:6 Parameter updated - acFN.
Jun 07 10:55:04 Severity:6 Parameter updated - acRI.
Jun 07 10:55:04 Severity:5 unloading current configuration.
Jun 07 10:55:23 Severity:5 (WAN) link state is Up.
Jun 07 10:55:23 Severity:5 Deauthenticating with station ff:ff:ff:ff:ff:ff (reserved 3).

[HelloMac]

An install log from the MacBook. Others look pretty much the same.

First entry:
Jun 3 07:51:52 localhost LCA[65]: Folder Manager is being asked to create a folder (cach) while running as uid 0
Jun 3 07:51:52 localhost LCA[65]: Folder Manager is being asked to create a folder (asav) while running as uid 0
Jun 3 07:51:53 localhost LCA[65]: Found primary language hint "en"
Jun 3 07:54:01 localhost LCA[65]: Launching the Installer using language code "English"
Jun 3 07:54:01 localhost /System/Installation/CDIS/Mac OS X Installer.app/Contents/MacOS/Mac OS X Installer[149]: vm_allocate: 0, 0x200e2000 - 0x400e2000
Jun 3 07:54:01 localhost /System/Installation/CDIS/Mac OS X Installer.app/Contents/MacOS/Mac OS X Installer[149]: vm_protect: 0
Jun 3 07:54:01 localhost OSInstaller[149]: Mac OS X Installer application started
Jun 3 07:54:01 localhost OSInstaller[149]: 1 display(s) found.
Jun 3 07:54:01 localhost OSInstaller[149]: Display[1] is using OpenGL acceleration.
Jun 3 07:54:01 localhost OSInstaller[149]: @(#)PROGRAM:Install PROJECT:Install-378
Jun 3 07:54:01 localhost OSInstaller[149]: @(#)PROGRAM:Mac OS X Installer PROJECT:OSInstaller-116.1
Jun 3 07:54:01 localhost OSInstaller[149]: Hardware: MacBook4,1 @ 2.40 GHz (x 2), 2048 MB RAM
Jun 3 07:54:01 localhost OSInstaller[149]: Running OS Build: Mac OS X 10.5.2 (9C2028)
Jun 3 07:54:01 localhost OSInstaller[149]: Env: DYLD_NO_FIX_PREBINDING=1
Jun 3 07:54:01 localhost OSInstaller[149]: Env: PATH=/usr/bin:/bin:/usr/sbin:/sbin
Jun 3 07:54:01 localhost OSInstaller[149]: Env: PWD=/
Jun 3 07:54:01 localhost OSInstaller[149]: Env: SHLVL=1
Jun 3 07:54:01 localhost OSInstaller[149]: Env: OS_INSTALL=1
Jun 3 07:54:01 localhost OSInstaller[149]: Env: _=/System/Installation/CDIS/LCA.app/Contents/MacOS/LCA
Jun 3 07:54:01 localhost OSInstaller[149]: Opening OSInstall package '/System/Installation/Packages/OSInstall.mpkg'.
Jun 3 07:54:02 localhost OSInstaller[149]: Remote Install Assistant found at 1024null)
Jun 3 07:54:02 localhost OSInstaller[149]: Memory statistics for 'Welcome' pane:
Jun 3 07:54:02 localhost OSInstaller[149]: Physical Memory Allocation: 238 MB wired, 210 MB trapped, 42 MB active, 8 MB inactive, 1550 MB free, 1600 MB usable, 2048 MB total
Jun 3 07:54:02 localhost OSInstaller[149]: Folder Manager is being asked to create a folder (asav) while running as uid 0
Jun 3 07:54:14 localhost OSInstaller[149]: CPSGetProcessInfo(): This call is deprecated and should not be called anymore.
Jun 3 07:54:14 localhost OSInstaller[149]: CPSPBGetProcessInfo(): This call is deprecated and should not be called anymore.
Jun 3 07:54:15 localhost installdb[154]: started (uid 96)
Jun 3 07:54:15 localhost installdb[154]: Opened receipt database on '/Volumes/LittleMac' with schema 17.




Jun 3 07:54:17 localhost OSInstaller[149]: Found receipt (full match) for (CPU_AHT / hwbe.pkg.018-3329): (CPU_AHT / hwbe.pkg.018-3329)
Jun 3 07:54:17 localhost Unknown[66]: 2008-06-03 07:54:17.348 Disk Utility[153:10b] Disk Utility started.
Jun 3 07:54:17 localhost Unknown[66]:
Jun 3 07:54:24 localhost installdb[154]: done. (0.027u + 0.018s)
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.465 Disk Utility[153:10b] Preparing to partition disk: “Hitachi HTS542516K9SA00 Media”
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.466 Disk Utility[153:10b] Partition Scheme: GUID Partition Table
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.467 Disk Utility[153:10b] 1 volume will be created
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.467 Disk Utility[153:10b]
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.468 Disk Utility[153:10b] Partition 1
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.468 Disk Utility[153:10b] Name : “LMac HD”
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.468 Disk Utility[153:10b] Size : 149.1 GB
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.469 Disk Utility[153:10b] Filesystem : Mac OS Extended (Journaled)
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.469 Disk Utility[153:10b]
Jun 3 07:55:20 localhost Unknown[66]: 2008-06-03 07:55:20.475 Disk Utility[153:10b] Creating partition map.
Jun 3 07:55:23 localhost Unknown[66]: 2008-06-03 07:55:23.547 Disk Utility[153:10b] Formatting disk0s2 as Mac OS Extended (Journaled) with name LMac HD.
Jun 3 07:55:27 localhost installdb[167]: started (uid 96)
Jun 3 07:55:27 localhost Unknown[66]: 2008-06-03 07:55:27.024 Disk Utility[153:10b] Partition complete.
Jun 3 07:55:27 localhost Unknown[66]: 2008-06-03 07:55:27.032 Disk Utility[153:10b]
Jun 3 07:55:33 localhost installdb[167]: done. (0.012u + 0.010s)


Jun 3 07:55:55 localhost Unknown[66]: 2008-06-03 07:55:55.372 Disk Utility[153:10b] Preparing to zero disk : “LMac HD”
Jun 3 07:55:55 localhost Unknown[66]: 2008-06-03 07:55:55.372 Disk Utility[153:10b] Passes : 0
Jun 3 08:58:22 localhost Unknown[66]: 2008-06-03 08:58:22.184 Disk Utility[153:10b] Secure Erase completed successfully in 1 hour, 2 minutes.
Jun 3 08:58:22 localhost Unknown[66]:
Jun 3 08:58:22 localhost Unknown[66]: 2008-06-03 08:58:22.202 Disk Utility[153:10b] Preparing to erase : “LMac HD”
Jun 3 08:58:22 localhost Unknown[66]: 2008-06-03 08:58:22.203 Disk Utility[153:10b] Partition Scheme: GUID Partition Table
Jun 3 08:58:22 localhost Unknown[66]: 2008-06-03 08:58:22.203 Disk Utility[153:10b] 1 volume will be erased
Jun 3 08:58:22 localhost Unknown[66]: 2008-06-03 08:58:22.204 Disk Utility[153:10b] Name : “LMac HD”
Jun 3 08:58:22 localhost Unknown[66]: 2008-06-03 08:58:22.204 Disk Utility[153:10b] Size : 148.7 GB
Jun 3 08:58:22 localhost Unknown[66]: 2008-06-03 08:58:22.205 Disk Utility[153:10b] Filesystem : Mac OS Extended (Journaled)
Jun 3 08:58:22 localhost Unknown[66]:
Jun 3 08:58:23 localhost Unknown[66]: 2008-06-03 08:58:23.503 Disk Utility[153:10b] Initialized /dev/rdisk0s2 as a 149 GB HFS Plus volume with a 16384k journal
Jun 3 08:58:23 localhost Unknown[66]:
Jun 3 08:58:23 localhost Unknown[66]: 2008-06-03 08:58:23.512 Disk Utility[153:10b] Mounting disk.
Jun 3 08:58:25 localhost installdb[178]: started (uid 96)
Jun 3 08:58:25 localhost Unknown[66]: 2008-06-03 08:58:24.997 Disk Utility[153:10b] Erase complete.
Jun 3 08:58:25 localhost Unknown[66]: 2008-06-03 08:58:24.998 Disk Utility[153:10b]
Jun 3 08:58:31 localhost installdb[178]: done. (0.012u + 0.011s)
Jun 3 09:03:38 localhost Unknown[66]:
Jun 3 09:03:57 localhost OSInstaller[149]: Memory statistics for 'Select a Destination' pane:
Jun 3 09:03:57 localhost OSInstaller[149]: Physical Memory Allocation: 277 MB wired, 223 MB trapped, 51 MB active, 9 MB inactive, 1488 MB free, 1548 MB usable, 2048 MB total
Jun 3 09:04:05 localhost OSInstaller[149]: Customization choices were reset to default state.
Jun 3 09:04:14 localhost installdb[181]: started (uid 96)
Jun 3 09:04:24 localhost in

Jun 3 09:05:32 localhost OSInstaller[149]: Finished media verification.
Jun 3 09:05:33 localhost OSInstaller[149]: -[IFDInstallController(Private) _buildInstallPlan]: location = file://localhost
Jun 3 09:05:33 localhost OSInstaller[149]: -[IFDInstallController(Private) _buildInstallPlan]: file://localhost/System/Installation/Packages/BaseSystem.pkg




Jun 3 09:05:33 localhost OSInstaller[149]: -[IFDInstallController(Private) _buildInstallPlan]: x-disc://Mac%20OS%20X%20Install%20Disc%202/Packages/GarageBand.mpkg/Contents/Installers/GarageBandFactoryContent.pkg
Jun 3 09:05:33 localhost OSInstaller[149]: -[IFDInstallController(Private) _buildInstallPlan]: x-disc://Mac%20OS%20X%20Install%20Disc%202/Packages/GarageBand.mpkg/Contents/Installers/GarageBand.pkg
Jun 3 09:05:33 localhost OSInstaller[149]: -[IFDInstallController(Private) _buildInstallPlan]: x-disc://Mac%20OS%20X%20Install%20Disc%202/Packages/GarageBand.mpkg/Contents/Installers/GarageBand_Instruments.pkg
Jun 3 09:05:33 localhost OSInstaller[149]: -[IFDInstallController(Private) _buildInstallPlan]: x-disc://Mac%20OS%20X%20Install%20Disc%202/Packages/GarageBand.mpkg/Contents/I

Jun 3 09:05:50 localhost root[202]: Running Install Scripts . . .
Jun 3 09:05:50 localhost root[204]: Begin script: fixVar.sh
Jun 3 09:05:50 localhost root[206]: End script: fixVar.sh
Jun 3 09:05:50 localhost root[207]: 1 Install Scripts run.
Jun 3 09:05:50 localhost OSInstaller[149]: Creating destination path
Jun 3 09:05:50 localhost OSInstaller[149]: Validating package payload
Jun 3 09:08:38 localhost OSInstaller[149]: Starting file extraction
Jun 3 09:08:39 localhost payloadExtractor[209]: Initializing new flat-package receipt.
Jun 3 09:08:39 localhost installdb[210]: started (uid 96)
Jun 3 09:08:39 localhost installdb[210]: Opened receipt database on '/Volumes/LMac HD/' with schema 0.
Jun 3 09:08:39 localhost installdb[210]: The db cache for '/Volumes/LMac HD/Library/Receipts/db/a.receiptdb' contains: {\n schema = 0;\n sqlite = <2070c001>;\n}
Jun 3 09:08:39 localhost installdb[210]: Initializing database with schema version 17 at '/Volumes/LMac HD/Library/Receipts/db/a.receiptdb'.
Jun 3 09:08:39 localhost payloadExtractor[209]: Extracting...
Jun 3 09:09:13 localhost payloadExtractor[209]: 22794 of 22794 files written in 34.01 seconds.
Jun 3 09:09:13 localhost payloadExtractor[209]: 1291924 kilobytes installed at 37.1 MB/s.
Jun 3 09:09:15 localhost payloadExtractor[209]: Receipt closed in 1.78 seconds (12813 files/s).
Jun 3 09:09:15 localhost OSInstaller[149]: run postinstall script for BaseSystem
Jun 3 09:09:15 localhost root[216]: Running Install Scripts . . .
Jun 3 09:09:15 localhost root[218]: Begin script: permLearn.sh
Jun 3 09:09:20 localhost pkgutil[222]: Updating receipt 'com.apple.pkg.BaseSystem' path '.' on '/Volumes/LMac HD/' with actual metadata from '/Volumes/LMac HD'.
Jun 3 09:09


Begin script: copyX509Anchors.sh
Jun 3 09:13:48 localhost root[267]: End script: copyX509Anchors.sh
Jun 3 09:13:48 localhost root[268]: Begin script: createJavaExtDir.sh
Jun 3 09:13:49 localhost root[275]: End script: createJavaExtDir.sh
Jun 3 09:13:49 localhost root[276]: Begin script: createSIUDir.sh
Jun 3 09:13:49 localhost root[284]: End script: createSIUDir.sh
Jun 3 09:13:49 localhost root[285]: Begin script: deleteReg.sh
Jun 3 09:13:49 localhost root[287]: End script: deleteReg.sh
Jun 3 09:13:49 localhost root[288]: Begin script: deleteSA.sh
Jun 3 09:13:49 localhost root[290]: End script: deleteSA.sh
Jun 3 09:13:49 localhost root[291]: Begin script: deleteSSHSave.sh
Jun 3 09:13:49 localhost root[294]: End script: deleteSSHSave.sh
Jun 3 09:13:49 localhost root[295]: Begin script: disableAPE
Jun 3 09:13:49 localhost root[297]: End script: disableAPE
Jun 3 09:13:49 localhost root[298]: Begin script: migrator
Jun 3 09:13:50 localhost root[310]: End script: migrator
Jun 3 09:13:50 localhost root[311]: Begin script: removeJava1.6DevPreview
Jun 3 09:13:50 localhost root[317]: End script: removeJava1.6DevPreview
Jun 3 09:13:50 localhost root[318]: Begin script: renameIntegoContentBarrierPre10.4.3
Jun 3 09:13:50 localhost root[320]: End script: renameIntegoContentBarrierPre10.4.3
Jun 3 09:13:50 localhost root[321]: Begin script: runChrooted.sh
Jun 3 09:13:52 localhost installdb[255]: done. (4.399u + 1.532s)
Jun 3 09:13:55 localhost root[344]: End script: runChrooted.sh
Jun 3 09:13:55 localhost root[345]: Begin script: upgradeProKit
Jun 3 09:13:55 localhost root[347]: End script: upgradeProKit
Jun 3 09:13:55 localhost root[348]: 12 Install Scripts run.




Jun 3 09:15:26 localhost root[373]: Running Install Scripts . . .
Jun 3 09:15:26 localhost root[375]: Begin script: dumpemacs.sh
Jun 3 09:15:32 localhost installdb[367]: done. (1.952u + 0.594s)
Jun 3 09:15:36 localhost root[389]: End script: dumpemacs.sh
Jun 3 09:15:36 localhost root[390]: Begin script: fixnortinst.sh
Jun 3 09:15:36 localhost root[393]: End script: fixnortinst.sh
Jun 3 09:15:36 localhost root[394]: 2 Install Scripts run.
Jun 3 09:15:36 localhost OSInstaller[149]: Performing post-extraction actions
Jun 3 09:15:36 localhost OSInstaller[149]: Finishing receipt
Jun 3 09:15:36 localhost installdb[396]: started (uid 96)
Jun 3 09:15:36 localhost in



Jun 3 09:25:09 localhost root[629]: End script: ProKitMove.pl
Jun 3 09:25:09 localhost root[630]: Begin script: RemoveClientLicense.sh
Jun 3 09:25:09 localhost root[632]: End script: RemoveClientLicense.sh
Jun 3 09:25:09 localhost root[633]: Begin script: iLifebkpluginMove.pl
Jun 3 09:25:09 localhost root[636]: End script: iLifebkpluginMove.pl
Jun 3 09:25:09 localhost root[637]: Begin script: postinstall
Jun 3 09:25:09 localhost root[640]: Running kextcache -k /Volumes/LMac HD/System/Library/Extensions
Jun 3 09:25:14 localhost installdb[498]: done. (3.130u + 1.187s)
Jun 3 09:25:15 localhost root[642]: Running ifcstart
Jun 3 09:25:19 localhost root[644]: Running update_dyld_shared_cache
Jun 3 09:25:44 localhost root[646]: End script: postinstall
Jun 3 09:25:44 localhost root[647]: 5 Install Scripts run.
Jun 3


Jun 3 09:26:16 localhost OSInstaller[149]: Performing post-extraction actions
Jun 3 09:26:16 localhost OSInstaller[149]: Finishing receipt
Jun 3 09:26:16 localhost OSInstaller[149]: Processing Regional Boot:
Jun 3 09:26:16 localhost OSInstaller[149]: Determining files to install
Jun 3 09:26:16 localhost OSInstaller[149]: It took 0.01 seconds to create the install plan for CPU_RegionalBoot.
Jun 3 09:26:16 localhost OSInstaller[149]: Configuring deferred files
Jun 3 09:26:16 localhost OSInstaller[149]: Assembling temporary receipt
Jun 3 09:26:16 localhost OSInstaller[149]: Performing pre-extraction actions
Jun 3 09:26:16 localhost OSInstaller[149]: Creating destination path
Jun 3 09:26:16 localhost OSInstaller[149]: Validating package payload
Jun 3 09:26:16 localhost OSInstaller[149]: Starting file extraction
Jun 3 09:26:16 localhost pkgExtractor[659]: Extracting...
Jun 3 09:26:16 localhost runner[184]: pkgExtractor[659]: pkgExtractor: Ignoring invalid resource fork length for /Volumes/LMac HD//private/var/db
Jun 3 09:26:16 localhost runner[184]: pkgExtractor[659]: pkgExtractor: Ignoring invalid resource fork length for /Volumes/LMac HD//private/var
Jun 3 09:26:16 localhost runner[184]: pkgExtractor[659]: pkgExtractor: Ignoring invalid resource fork length for /Volumes/LMac HD//usr/sbin
Jun 3 09:26:16 localhost runner[184]: pkgExtractor[659]: pkgExtractor: Ignoring invalid resource fork length for /Volumes/LMac HD//private
Jun 3 09:26:16 localhost pkgExtractor[659]: 15 of 15 files written in 0.15 seconds.
Jun 3 09:26:16 localhost pkgExtractor[659]: 288 kilobytes installed at 1.9 MB/s.


Jun 3 09:28:35 localhost OSInstaller[130]: Running OS Build: Mac OS X 10.5.2 (9C2028)
Jun 3 09:28:35 localhost OSInstaller[130]: Env: PATH=/usr/bin:/bin:/usr/sbin:/sbin
Jun 3 09:28:35 localhost OSInstaller[130]: Env: COMMAND_MODE=unix2003
Jun 3 09:28:35 localhost OSInstaller[130]: Env: SECURITYSESSIONID=11991f0
Jun 3 09:28:37 localhost installdb[138]: started (uid 96)
Jun 3 09:28:37 localhost installdb[138]: Opened receipt database on '/' with schema 17.
Jun 3 09:28:38 localhost OSInstaller[130]: Automated Install: Found requested target at /.
Ju



Jun 3 09:39:48 localhost OSInstaller[130]: /System/Library/PrivateFrameworks/iLifeMediaBrowser.framework/Versions/A (version 1.0.2.193.0.0.1930000.2) was not installed because a newer version (1.0.4.205.0.1.2050001.2) already exists.
Jun 3 09:39:49 localhost OSInstaller[130]: It took 0.43 seconds to create the install plan for iLifeMediaBrowser.

Jun 3 09:39:51 localhost pkgExtractor[292]: Skipping "./System/Library/PrivateFrameworks/iLifeMediaBrowser.framework/Versions/A"


Jun 3 09:41:58 localhost runner[181]: postflight[341]: su: unknown login:
Jun 3 09:41:58 localhost runner[181]: postflight[341]:
Jun 3 09:41:58 localhost runner[181]: postflight[341]: su: unknown login:
Jun 3 09:41:58 localhost runner[181]: postflight[341]:


Jun 3 09:42:06 localhost runner[181]: Touched '/./Applications/iPhoto.app'
Jun 3 09:42:06 localhost runner[181]: Touched '/./Applications'
Jun 3 09:42:06 localhost runner[181]: Touched '/./Applications/iMovie.app'
Jun 3 09:42:06 localhost runner[181]: Touched '/./Applications'
Jun 3 09:42:06 localhost runner[181]: Touched '/./Library/Documentation/Applications/iMovie/iMovie 08 Getting Started.app'
Jun 3 09:42:06 localhost runner[181]: Touched '/./Library/Documentation/Applications/iMovie'
Jun 3 09:42:06 localhost runner[181]: Touched '/./Library/Documentation/Applications/iPhoto/iPhoto Getting Started.app'
Jun 3 09:42:06 localhost runner[181]: Touched '/./Library/Documentation/Applications/iPhot


Jun 3 09:28:42 localhost OSInstaller[130]: Waiting for Remote Install Assistant...
Jun 3 09:28:42 localhost OSInstaller[130]: Not loading AirPort extra for phase 2.
Jun 3 09:28:43 localhost installdb[138]: done. (0.007u + 0.006s)
Jun 3 09:29:25 localhost OSInstaller[130]: fileURLForURL = x-disc://Mac%20OS%20X%20Install%20Disc%202/Packages/iWeb.pkg
Jun 3 09:29:25 localhost OSInstaller[130]: fileURLForURL = file://localhost/Volumes/Mac%20OS%20X%20Install%20Disc%202/Packages/iWeb.pkg

[HelloMac]

Thank you for your time.

[ElDiabloConCaca]

Not much in those log files looks out-of-the-ordinary.

Are you using Comcast cable for your internet?