Munix hacked? Valid files for install of Leopard?

[HelloMac]

Printer errors? No printer has been connected to the machine since the install of the OS.

Description: Printer error log
Size: 17 KB
Last Modified: 5/21/08 9:51 PM
Location: /var/log/cups/error_log
Recent Contents: I [19/May/2008:21:22:57 -0700] Listening to ::1:631 (IPv6)
I [19/May/2008:21:22:57 -0700] Listening to ::1:631 (IPv6)
I [19/May/2008:21:22:57 -0700] Listening to 127.0.0.1:631 (IPv4)
I [19/May/2008:21:22:57 -0700] Listening to /private/var/run/cupsd (Domain)
I [19/May/2008:21:22:57 -0700] Loaded configuration file "/private/etc/cups/cupsd.conf"
I [19/May/2008:21:22:57 -0700] Using default TempDir of /private/var/spool/cups/tmp...
I [19/May/2008:21:22:57 -0700] Configured for up to 100 clients.
I [19/May/2008:21:22:57 -0700] Allowing up to 100 client connections per host.
I [19/May/2008:21:22:57 -0700] Using policy "default" as the default!
I [19/May/2008:21:22:57 -0700] Full reload is required.
I [19/May/2008:21:22:57 -0700] Loaded MIME database from '/private/etc/cups': 52 types, 48 filters...
I [19/May/2008:21:22:58 -0700] Full reload complete.
I [19/May/2008:21:22:58 -0700] Cleaning out old temporary files in "/private/var/spool/cups/tmp"...I [19/May/2008:21:22:58 -0700] Listening to ::1:631 on fd 4...
E [19/May/2008:21:22:58 -0700] Unable to bind socket for address ::1:631 - Address already in use.
I [19/May/2008:21:22:58 -0700] Listening to 127.0.0.1:631 on fd 6...
I [19/May/2008:21:22:58 -0700] Listening to /private/var/run/cupsd on fd 7...
I [19/May/2008:21:22:58 -0700] Resuming new connection processing...
I [20/May/2008:00:27:29 -0400] Scheduler shutting down normally.
I [20/May/2008:00:27:29 -0400] Saving job cache file "/private/var/spool/cups/cache/job.cache"...
I [20/May/2008:00:40:58 -0400] Listening to ::1:631 (IPv6)
I [20/May/2008:00:40:58 -0400] Listening to ::1:631 (IPv6)
I [20/May/2008:00:40:58 -0400] Listening to 127.0.0.1:631 (IPv4)
I [20/May/2008:00:40:58 -0400] Listening to /private/var/run/cupsd (Domain)
I [20/May/2008:00:40:58 -0400] Loaded configuration file "/private/etc/cups/cupsd.conf"
I [20/May/2008:00:40:58 -0400] Using default TempDir of /private/var/spool/cups/tmp...
I [20/May/2008:00:40:58 -0400] Configured for up to 100 clients.
I [20/May/2008:00:40:58 -0400] Allowing up to 100 client connections per host.
I [20/May/2008:00:40:58 -0400] Using

[HelloMac]

Log in sequence:



May 21 12:59:31 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
May 21 12:59:31 localhost blued[47]: Apple Bluetooth daemon started.
May 21 12:59:33 driver207s-imac org.ntp.ntpd[14]: Error : nodename nor servname provided, or not known
May 21 12:59:32 driver207s-imac /usr/sbin/ocspd[51]: starting
May 21 12:59:32 driver207s-imac mDNSResponder mDNSResponder-164 (Nov 4 2007 13:23:04)[22]: startingMay 21 12:59:33 driver207s-imac ntpdate[58]: can't find host time.apple.com
May 21 12:59:33 driver207s-imac ntpdate[58]: no servers can be used, exiting
May 21 12:59:33 driver207s-imac mDNSResponder[22]: SetDomainSecrets: mDNSKeychainGetSecrets failed error 0 CFArrayRef 00000000
May 21 12:59:33 driver207s-imac configd[28]: setting hostname to "driver207s-imac.local"
May 21 12:59:36 driver207s-imac kernel[0]: AppleYukon2: 00000000,00000000 sk98osx_dnet - recovering from missed interrupt
May 21 12:59:36 driver207s-imac kextd[10]: writing kernel link data to /var/run/mach.sym
May 21 12:59:37 driver207s-imac loginwindow[23]: Login Window Started Security Agent
May 21 13:00:08 driver207s-imac authorizationhost[76]: MechanismInvoke 0x12aa40 retainCount 2
May 21 13:00:08 driver207s-imac SecurityAgent[77]: MechanismInvoke 0x103cb0 retainCount 1
May 21 13:00:08 driver207s-imac SecurityAgent[77]: NSSecureTextFieldCell detected a field editor ((null)) that is not a NSTextView subclass designed to work with the cell. Ignoring...
May 21 13:00:08 driver207s-imac SecurityAgent[77]: NSExceptionHandler has recorded the following exception:\nNSRangeException -- *** -[NSCFArray objectAtIndex:]: index (0) beyond bounds (0)\nStack trace: 0x3719a 0x91a2e09b 0x95ec704b 0x95ec708a 0x9014addf 0x900c8cb8 0x6f58a 0x6fdc9 0x594e1 0x6d847 0x615d9 0x5ca87 0x66471 0x76187 0xd648 0x12c40 0x129f3 0xd18a 0x90107f73 0x95e295c5 0x95e4d941 0x95e4dd38 0x913f88a4 0x913f86bd 0x913f8531 0x93ee8d5b 0x93ee86a0 0x93ee16d1 0x10fc7 0x202a 0x1
May 21 13:00:08 driver207s-imac SecurityAgent[77]: MechanismDestroy 0x103cb0 retainCount 1May 21 13:00:08 driver207s-imac loginwindow[23]: Login Window - Returned from Security Agent
May 21 13:00:08 driver207s-imac authorizationhost[76]: MechanismDestroy 0x12aa40 retainCount 2
May 21 13:00:08 driver207s-imac loginwindow[23]: USER_PROCESS: 23 consoleMay 21 13:00:09 driver207s-imac com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[72]): Exited: Terminated

[ElDiabloConCaca]

I don't see anything out-of-the-ordinary with that log file.

Even the bold lines seem normal: ttys is the local terminal, as if someone was sitting at the keyboard, if I'm not mistaken.

[ElDiabloConCaca]

CUPS will start whether you have printers set up or not.

It's perfectly normal to see "error" messages throughout your system log files -- more often than not, it's the system operating normally (normal systems have error conditions arise ALL the time -- and the system "handles" those errors in a graceful way). Just because you see a message that looks like something "crashed" or has the words "error" or "cannot find" or any negative wording like that does NOT mean that anything out-of-the-ordinary is happening.

[HelloMac]

What is happening here with accounts and Root?


5/20/08 12:22:46 AM kernel [InterruptReadHandler] Received kIODeviceNotResponding error - retrying: 1.
5/20/08 12:22:47 AM kextd[10] writing kernel link data to /var/run/mach.sym
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] launchctl: Error unloading: com.apple.kdcmond
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] /usr/sbin/kadmin.local-q add_principal -randkey afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] WARNING: no policy specified for afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957; defaulting to no policy
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] Authenticating as principal root/admin@LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957 with password. 5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] Principal "afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957" created.
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] /usr/sbin/kadmin.local-q ktadd afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] Authenticating as principal root/admin@LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957 with password. 5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] Entry for principal afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] Entry for principal afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type ArcFour with HMAC/md5 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] Entry for principal afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type DES cbc mode with CRC-32 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:47 AM com.apple.configureLocalKDC[48] /usr/bin/defaults write /Library/Preferences/com.apple.AppleFileServer kerberosPrincipal afpserver/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] /usr/sbin/kadmin.local-q add_principal -randkey cifs/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] WARNING: no policy specified for cifs/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957; defaulting to no policy 5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Authenticating as principal root/admin@LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957 with password.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Principal "cifs/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957" created.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] /usr/sbin/kadmin.local-q ktadd cifs/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Authenticating as principal root/admin@LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957 with password.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Entry for principal cifs/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Entry for principal cifs/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type ArcFour with HMAC/md5 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Entry for principal cifs/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type DES cbc mode with CRC-32 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] /usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server LocalKerberosRealm LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] /usr/sbin/kadmin.local-q add_principal -randkey vnc/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] WARNING: no policy specified for vnc/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957; defaulting to no policy
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Authenticating as principal root/admin@LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957 with password.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Principal "vnc/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957" created.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] /usr/sbin/kadmin.local-q ktadd vnc/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Authenticating as principal root/admin@LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957 with password.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Entry for principal vnc/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:/etc/krb5.keytab. 5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Entry for principal vnc/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type ArcFour with HMAC/md5 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] Entry for principal vnc/LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957@LKDC:SHA1.799D5486B766D00C679E939993EF9 588EDA6B957 with kvno 3, encryption type DES cbc mode with CRC-32 added to keytab WRFILE:/etc/krb5.keytab.
5/20/08 12:22:48 AM com.apple.configureLocalKDC[48] LKDC:SHA1.799D5486B766D00C679E939993EF9588EDA6B957
5/20/08 12:22:50 AM com.apple.ATSServer[113] FODBCheck: New annex file created
5/20/08 12:22:52 AM kernel AppleYukon2: 00000000,00000000 sk98osx_dnet - recovering from missed interrupt 5/20/08 12:22:52 AM mDNSResponder[42] Couldn't read user-specified Computer Name; using default “Macintosh-001EC20AC772” instead
5/20/08 12:22:52 AM mDNSResponder[42] Couldn't read user-specified local hostname; using default “Macintosh-001EC20AC772.local” instead
5/20/08 12:22:53 AM mDNSResponder[42] SetDomainSecrets: mDNSKeychainGetSecrets failed error 0 CFArrayRef 00000000
5/20/08 12:22:53 AM loginwindow[43] USER_PROCESS: 43 console
5/20/08 12:22:53 AM loginwindow[43] Folder Manager is being asked to create a folder (asav) while running as uid 0 5/20/08 12:22:54 AM mDNSResponder[42] Couldn't read user-specified Computer Name; using default “Macintosh-001EC20AC772” instead
5/20/08 12:22:54 AM mDNSResponder[42] Couldn't read user-specified local hostname; using default “Macintosh-001EC20AC772.local” instead
5/20/08 12:22:55 AM [0x0-0x4004].com.apple.SetupAssistant[123] ...System identity already exists for domain com.apple.systemdefault. Done. 5/20/08 12:22:56 AM KernelEventAgent[56] tid 00000000 received unknown event (256)
5/20/08 12:22:58 AM /System/Library/CoreServices/Setup Assistant.app/Contents/MacOS/Setup Assistant[123] _MDSuspendIndexing() 1
5/20/08 12:22:59 AM kernel AppleYukon2: 00000000,00000000 sk98osx_dnet - recovering from missed interrupt
5/20/08 12:23:00 AM /System/Library/CoreServices/Setup Assistant.app/Contents/MacOS/Setup Assistant[123] will start movie

5/20/08 12:25:13 AM mDNSResponder[42] Couldn't read user-specified local hostname; using default “Macintosh-001EC20AC772.local” instead
5/20/08 12:25:13 AM mDNSResponder[42] User updated Computer Name from Macintosh-001EC20AC772 to Driver207’s iMac
5/20/08 12:25:13 AM configd[49] setting hostname to "driver207s-imac.local"
5/20/08 12:25:13 AM mDNSResponder[42] User updated Local Hostname from Macintosh-001EC20AC772 to driver207s-imac
5/20/08 12:25:31 AM org.ntp.ntpd[212] Error : nodename nor servname provided, or not known
5/20/08 12:25:31 AM ntpdate[214] can't find host time.apple.com

5/20/08 12:25:31 AM ntpdate[214] no servers can be used, exiting
5/20/08 12:25:38 AM com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[118]) Exited: Terminated
5/20/08 12:25:38 AM /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[218] Login Window Application Started
5/20/08 12:25:39 AM loginwindow[218] Login Window Started Security Agent
5/20/08 12:25:39 AM com.apple.KerberosAutoConfig[225] The machine is standalone
5/20/08 12:25:39 AM com.apple.KerberosAutoConfig[225] Removing /Library/Preferences/edu.mit.Kerberos
5/20/08 12:25:40 AM SecurityAgent[227] User info context values set
5/20/08 12:25:40 AM SecurityAgent[227] Login Window done 5/20/08 12:25:40 AM loginwindow[218] Login Window - Returned from Security Agent
5/20/08 12:25:40 AM loginwindow[218] USER_PROCESS: 218 console
5/20/08 12:25:40 AM com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[226]) Exited: Terminated
5/20/08 12:25:42 AM com.apple.ATSServer[241] FODBCheck: New annex file created
5/20/08 12:25:42 AM /System/Library/CoreServices/coreservicesd[68] SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(Driver207's Public Folder) returned -14135
5/20/08 12:25:47 AM Finder[240] [QL ERROR] Generator database update takes too long... we will use what we currently have
5/20/08 12:25:47 AM [0x0-0xf00f].SoftwareUpdateCheck[246] SoftwareUpdateCheck: network unreachable
5/20/08 12:25:47 AM com.apple.launchd[190] ([0x0-0xf00f].SoftwareUpdateCheck[246]) Exited with exit code: 3
5/20/08 12:25:49 AM KernelEventAgent[56] tid 00000000 received unknown event (12)
5/20/08 12:25:50 AM SyncServer[259] SyncServer: Reaping records for inactive clients. Next reap on 2008-07-04 00:25:50 -0400
5/20/08 12:27:12 AM kernel IPv6 packet filtering initialized, default to accept, logging disabled
5/20/08 12:27:28 AM SCHelper[283] no command
5/20/08 12:27:28 AM com.apple.launchd[190] ([0x0-0x14014].com.apple.systempreferences[272]) Stray process with PGID equal to this dead job: PID 283 PPID 1 SCHelper
5/20/08 12:27:29 AM loginwindow[218] DEAD_PROCESS: 0 console
5/20/08 12:27:29 AM shutdown[294] reboot by Driver207:
5/20/08 12:27:29 AM com.apple.loginwindow[218] Shutdown NOW!
5/20/08 12:27:29 AM SystemStarter[55] "/System/Library/StartupItems" failed sanity check: path was created after boot up
5/20/08 12:27:29 AM shutdown[294] SHUTDOWN_TIME: 1211257649 287603
5/20/08 12:28:21 AM com.apple.launchctl.System[2] launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
5/20/08 12:28:21 AM com.apple.launchd[1] (org.cups.cupsd) Unknown key: SHAuthorizationRight
5/20/08 12:28:21 AM com.apple.launchd[1] (org.ntp.ntpd) Unknown key: SHAuthorizationRight
5/20/08 12:28:22 AM kernel npvhash=4095
5/20/08 12:28:21 AM kextd[10] 395 cached, 0 uncached personalities to catalog
5/20/08 12:28:22 AM kernel hi mem tramps at 0xffe00000
5/20/08 12:28:22 AM kernel PAE enabled
5/20/08 12:28:22 AM kernel 64 bit mode enabled
5/20/08 12:28:22 AM kernel Darwin Kernel Version 9.1.0: Wed Oct 31 17:46:22 PDT 2007; root:xnu-1228.0.2~1/RELEASE_I386
5/20/08 12:28:22 AM kernel standard timeslicing quantum is 10000 us
5/20/08 12:28:22 AM kernel vm_page_bootstrap: 254508 free pages and 7636 wired pages
5/20/08 12:28:22 AM kernel mig_table_max_displ = 79
5/20/08 12:28:22 AM kernel Extension "com.apple.driver.AppleACPIPlatform" has immediate dependencies

[HelloMac]

Re: Terminal - that's the point. NO ONE was supposed to be using terminal.

[Viro]

Do you play World of Warcraft? And have you been duped into viewing some of those account trading/gold buying sites?

[Viro]

Oh and if you haven't already done it, download Little Snitch and have that running at all times. Helps you prevent unauthorized connects to the internet.