New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus • Advice and insight from world-class Apple enthusiasts • Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
Security Awareness Discussion of all things related to the security of Apple devices.

Spyware/Malware/Keyloggers remain after harddrive wipeout.


Thread Closed

 
Thread Tools
harryb2448

 
harryb2448's Avatar
 
Member Since: Nov 28, 2007
Location: Nambucca Heads Australia
Posts: 17,421
harryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond repute
Mac Specs: iMac i5 2.7GHz OS X.9.4 and OS X.10

harryb2448 is offline
As may be but only solution as there is no privacy in such a State. Read about the power of the State and the privacy of the individual:-

http://en.wikipedia.org/wiki/Interne...ublic_of_China

If you choose to be there have to live by their rules. It was an honest suggestion Ashwin as there is no solution for the private individual let alone a foreigner.

Hang on to those original install discs like grim death! Using OS X.7 or later make a bootable USB thumb drive before running Installer!
RavingMac

 
RavingMac's Avatar
 
Member Since: Jan 07, 2008
Location: In Denial
Posts: 7,612
RavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond reputeRavingMac has a reputation beyond repute
Mac Specs: 4GB Mac Mini 2012, 13" MBA, 15" MacBook Pro OSX 10.7, 32 GB iPhone 3GS, iPad2 64gb 3G

RavingMac is offline
Quote:
Originally Posted by Raz0rEdge View Post
I, however, am a little surprised by the responses thus far to your dilemma as none of them seem to answer the technical reasons (likely the reason you came here to begin with) for why this is happening to you. Your dating life and your reasons to be in China are yours and yours alone and I don't believe any one of us has earned the right to instruct you about how you deal with either those..
One reason is the technical aspects of cyber spying are beyond my experience level.

But . . . and it was the point of my post, is that if the OP has become a target there is almost nothing he can do, other than refrain. The suggestions about passwords etc are good, but only if those spying are restricted to conventional cyber methods.

Unfortunately there is absolutely nothing preventing the authorities from using cameras and microphones to record everything that goes on, despite any precautions.

Bottomline: don't expect privacy under the circumstance described in the original post.

I've always wanted to be smart, handsome and modest. But, I guess I'll have to be satisfied with two out of three . . .
chas_m

 
chas_m's Avatar
 
Member Since: Jan 22, 2010
Location: Victoria, BC
Posts: 16,610
chas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond repute
Mac Specs: 2012 MBP, Black speakers, Black Benq second monitor, black(ish) iPhone 5s, Black 2012 iPad, etc.

chas_m is offline
As a westerner in China who *is engaging* in attempts to circumvent the rules there, the OP *is suspicious* and is undoubtedly under some level of surveillance. We're not telling him anything he doesn't know, but sadly I don't think there is another answer.
vikimaster

 
Member Since: Jan 31, 2014
Posts: 9
vikimaster is on a distinguished road

vikimaster is offline
Hi thanks everyone for answers.

I am using VPN ( if it helps at all)....and my GMAIL has 2-step verification, where I need to put password and code sent by SMS. So. can it be considered safe?

Dating sites and Skype I dont really have to use, and I assume no privacy there at all. Passwords I use, alrady quite good . Plus in GMAIL you can see last 10 login IPs. So I check that as well.

My question is, is it possible that some spyware remained after I wiped harddrive? Because when I wiped it, there was still 473mb of space used and 2 files,according to disk utility.

Also, how do you think they can monitor me ? do they have special software?

I mean by now they should have realized that i am casual internet user and nothing more than that.
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,586
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
The answer to Spyware remaining after you deleted the hard drive is no unless one could write to the ROM on the drive or the EFI Firmware on the Mac and that I doubt.
techiesteve

 
Member Since: Apr 24, 2009
Location: UK
Posts: 476
techiesteve is a glorious beacon of lighttechiesteve is a glorious beacon of lighttechiesteve is a glorious beacon of lighttechiesteve is a glorious beacon of lighttechiesteve is a glorious beacon of lighttechiesteve is a glorious beacon of light
Mac Specs: MacBook Pro 15" 2.8 GHz, MacBook 2.16 GHz, iPhone 5

techiesteve is offline
Re the OP, you must always assume that any means of computer or telephone communication can be monitored to varying levels, even more so in a police state. How is it done? You will likely never find out due to state security, or unless a Chinese variant of Edward Snowdon appears, and that's most unlikely.

Steve Bell
UK
vikimaster

 
Member Since: Jan 31, 2014
Posts: 9
vikimaster is on a distinguished road

vikimaster is offline
How easy it is for IT department in hotel for example to see all my emails? May be they just having fun with it
bobtomay

 
bobtomay's Avatar
 
Member Since: Dec 22, 2006
Location: Texas, where else?
Posts: 25,017
bobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond repute
Mac Specs: 15" MBP 2.33 C2D 256 4GB, MBA 13" i7 1.8, MB 2.0 2GB, Nano 4th, 3GS, iPad 1

bobtomay is offline
While it could be, would suggest it has nothing to do with the staff at a 5 star hotel.

Would be too easy for guests to report such abuse to the hotel management. You have done that, correct? Don't believe management would knowingly permit such an individual to maintain their employment, even in China.

I cannot be held responsible for the things that come out of my mouth.
In the Windows world, most everything folks don't understand is called a virus.
pigoo3

 
pigoo3's Avatar
 
Member Since: May 20, 2008
Location: U.S.
Posts: 26,506
pigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond repute
Mac Specs: 13" MB 2.4ghz, 2gig ram, OS 10.7.5

pigoo3 is offline
I'm going to throw a suggestion your way. Try doing some of your WiFi/internetting away from the hotel. Stay mobile & unpredictable as to where you do things (WiFi hotspots, internet cafe', library, school, work, etc.)...and see if this makes a difference.

When you're at the hotel...you're a "stationary target" and anyone interested in observing your internet activities knows exactly "where you are" so to speak.

I know that this is not as convenient as your hotel room...but this experiment will give you the opportunity to see if the problem is "hotel-based" (a problem with this hotel)...or if you are being targeted in some other way.

I would also suggest that if the problem disappears when "internetting" away from your current hotel...maybe you should stay at a different hotel. Hopefully all hotels aren't doing the same thing (if something is actually going on at all).

If the problem continues away from your hotel...then maybe there's a bigger issue.

HTH,

- Nick

- Computer slow, too many "beachballs", read this: Beachballs
- Computer seems slower than it used to? Read this for some speedup tips: Speedup
- Almost full hard drive? Some solutions. Out of Space
- Apple Battery Info. Battery
vikimaster

 
Member Since: Jan 31, 2014
Posts: 9
vikimaster is on a distinguished road

vikimaster is offline
Quote:
Originally Posted by pigoo3 View Post
I'm going to throw a suggestion your way. Try doing some of your WiFi/internetting away from the hotel. Stay mobile & unpredictable as to where you do things (WiFi hotspots, internet cafe', library, school, work, etc.)...and see if this makes a difference.

When you're at the hotel...you're a "stationary target" and anyone interested in observing your internet activities knows exactly "where you are" so to speak.

I know that this is not as convenient as your hotel room...but this experiment will give you the opportunity to see if the problem is "hotel-based" (a problem with this hotel)...or if you are being targeted in some other way.

I would also suggest that if the problem disappears when "internetting" away from your current hotel...maybe you should stay at a different hotel. Hopefully all hotels aren't doing the same thing (if something is actually going on at all).

If the problem continues away from your hotel...then maybe there's a bigger issue.

HTH,

- Nick
Thanks Nick, and others. Appreciate your input. Well, I am sure management will say that nothing is wrong ( I work in hotel myself, so its always a denial kind of thing). I am working here, at this hotel myself....but staying in a staff accomodation.

So may be management is actually monitoring me, to prevent misconduct. But I mean, dating sites , have nothing really to do with my work. And while I am ok with them reading my messages, its a bit disturbing that they try to interfere. So there comes and IT department suspicion, may be they just do it for fun. Since I am the only foreigner working in hotel( where we have 700 people working ).

As well, I use Avast antivirus. and it detecting infection everytime I connect to VPN.But I cant see what the infection is.

Can somebody explain to me, what were those 2 files(473mb) after when I wiped the hard disk? Could it be some rooted software that monitors me?

Thank you in advance.

P.S Please bear with me, I am not really tech friendly guy. And trying to broaden my knowledge here on Mac-forums.
vikimaster

 
Member Since: Jan 31, 2014
Posts: 9
vikimaster is on a distinguished road

vikimaster is offline
Okey guys, so I just had a look at my Console. And found something which I dont really know how possible.

My computer was closed, so I assume it was in sleep mode. Hole day...I only opened it now at 22.57.

Also my airport is always switched off, I am using cable internet. And while I was away, cable was unpluged and my laptop was locked in drawer.

Can anybody see anything suspicious there? I mean, computer seems like was doing something...but again I dont know how to read those things. If anyone is kind enough, please have a look.thank you



Code:
2/3/14 04:48:01.000 kernel[0]: encryptStart 14020
2/3/14 04:48:01.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x62d150, writing 822486 pages @ 0x65f1a4
2/3/14 04:48:01.000 kernel[0]: encryptEnd 5433c00
2/3/14 04:48:01.000 kernel[0]: image1Size 0x9eea000, encryptStart1 0x14020, End1 0x5433c00
2/3/14 04:48:01.000 kernel[0]: encryptStart 9eea000
2/3/14 04:48:01.000 kernel[0]: encryptEnd 7d0cbc00
2/3/14 04:48:01.000 kernel[0]: PMStats: Hibernate write took 43878 ms
2/3/14 04:48:01.000 kernel[0]: all time: 43878 ms, comp bytes: 3369168896 time: 6804 ms 472 Mb/s, crypt bytes: 2019563488 time: 19656 ms 97 Mb/s, 
2/3/14 04:48:01.000 kernel[0]: image 2097987584 (97%), uncompressed 3369168896 (822551), compressed 2086340624 (61%), sum1 3f2d57da, sum2 b6e2f257
2/3/14 04:48:01.000 kernel[0]: zeroPageCount 36054, wiredPagesEncrypted 48340, wiredPagesClear 48667, dirtyPagesEncrypted 725544
2/3/14 04:48:01.000 kernel[0]: hibernate_write_image done(0)
2/3/14 04:48:01.000 kernel[0]: sleep
2/3/14 04:48:01.216 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 04:48:01.000 kernel[0]: Wake reason: OHC2
2/3/14 10:54:58.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 10:54:58.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 10:54:58.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 10:54:58.000 kernel[0]: The USB device USB Receiver (Port 4 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 10:54:58.000 kernel[0]: full wake (reason 1) 127 ms
2/3/14 10:54:58.773 WindowServer[142]: CGXDisplayDidWakeNotification [39279277906106]: posting kCGSDisplayDidWake
2/3/14 10:54:58.774 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7f886b47a490(2004) (lock state: 3)
2/3/14 10:54:58.775 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: err 0x0
2/3/14 10:54:58.789 loginwindow[43]: resume called when there was already a timer
2/3/14 10:55:05.514 configd[18]: network changed.
2/3/14 10:55:05.938 SystemUIServer[287]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 10:55:06.072 airportd[64]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 10:55:06.276 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 10:55:06.529 com.apple.time[263]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
2/3/14 10:55:16.225 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 10:55:29.852 WindowServer[142]: device_generate_desktop_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 10:55:29.909 WindowServer[142]: device_generate_lock_screen_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 10:56:29.582 periodic-wrapper[3063]: Running weekly periodic task.
2/3/14 10:56:29.818 secd[320]:  SecErrorGetOSStatus unknown error domain: com.apple.security.sos.error for error: The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 10:56:29.818 secd[320]:  securityd_xpc_dictionary_handler EscrowSecurityAl[1298] DeviceInCircle The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 11:05:39.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Sleep 
2/3/14 11:05:39.000 kernel[0]: hibernate image path: /var/vm/sleepimage
2/3/14 11:05:39.000 kernel[0]: efi pagecount 545
2/3/14 11:05:39.000 kernel[0]: hibernate_page_list_setall(preflight 1) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 11:05:40.000 kernel[0]: hibernate_page_list_setall time: 305 ms
2/3/14 11:05:40.000 kernel[0]: pages 963546, wire 100746, act 344502, inact 18487, cleaned 1 spec 3, zf 199901, throt 0, compr 153291, xpmapped 425324
2/3/14 11:05:40.000 kernel[0]: could discard act 17748 inact 120072 purgeable 1321 spec 7453 cleaned 21
2/3/14 11:05:40.000 kernel[0]: hibernate_page_list_setall preflight pageCount 816931 est comp 61 setfile 2172679188 min 2147483648
2/3/14 11:05:40.000 kernel[0]: [0x36c80e000, 0x19000000]
2/3/14 11:05:40.000 kernel[0]: [0x394839000, 0x40000000]
2/3/14 11:05:40.000 kernel[0]: [0x3d4839000, 0x27000000]
2/3/14 11:05:40.000 kernel[0]: [0x89c94b000, 0x19000000]
2/3/14 11:05:40.000 kernel[0]: [0x0, 0x0]
2/3/14 11:05:40.000 kernel[0]: kern_open_file_for_direct_io(0) took 220 ms
2/3/14 11:05:40.000 kernel[0]: Opened file /var/vm/sleepimage, size 2566914048, partition base 0x0, maxio 2000000 ssd 0
2/3/14 11:05:40.000 kernel[0]: hibernate image major 1, minor 0, blocksize 4096, pollers 5
2/3/14 11:05:40.000 kernel[0]: hibernate_alloc_pages act 363509, inact 338544, anon 265380, throt 0, spec 7457, wire 101309, wireinit 57407
2/3/14 11:05:40.000 kernel[0]: hibernate_setup(0) took 0 ms
2/3/14 11:06:11.000 kernel[0]: hibernate_page_list_setall(preflight 0) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 11:06:11.000 kernel[0]: hibernate_page_list_setall time: 336 ms
2/3/14 11:06:11.000 kernel[0]: pages 965569, wire 103008, act 344517, inact 18490, cleaned 1 spec 4, zf 199646, throt 0, compr 153291, xpmapped 494453
2/3/14 11:06:11.000 kernel[0]: could discard act 17748 inact 120068 purgeable 1321 spec 7454 cleaned 21
2/3/14 11:06:11.000 kernel[0]: hibernate_page_list_setall found pageCount 818957
2/3/14 11:06:11.000 kernel[0]: IOHibernatePollerOpen, ml_get_interrupts_enabled 0
2/3/14 11:06:11.000 kernel[0]: IOHibernatePollerOpen(0)
2/3/14 11:06:11.000 kernel[0]: encryptStart 14030
2/3/14 11:06:11.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x631178, writing 816134 pages @ 0x6631dc
2/3/14 11:06:11.000 kernel[0]: encryptEnd 59a1a00
2/3/14 11:06:11.000 kernel[0]: image1Size 0xa55e000, encryptStart1 0x14030, End1 0x59a1a00
2/3/14 11:06:11.000 kernel[0]: encryptStart a55e000
2/3/14 11:06:11.000 kernel[0]: encryptEnd 7c77ae00
2/3/14 11:06:11.000 kernel[0]: PMStats: Hibernate write took 29229 ms
2/3/14 11:06:11.000 kernel[0]: all time: 29229 ms, comp bytes: 3343151104 time: 6748 ms 472 Mb/s, crypt bytes: 2008721360 time: 19560 ms 97 Mb/s, 
2/3/14 11:06:11.000 kernel[0]: image 2088218624 (81%), uncompressed 3343151104 (816199), compressed 2076515472 (62%), sum1 b3f12812, sum2 b8f4ed0b
2/3/14 11:06:11.000 kernel[0]: zeroPageCount 33503, wiredPagesEncrypted 50568, wiredPagesClear 49682, dirtyPagesEncrypted 715949
2/3/14 11:06:11.000 kernel[0]: hibernate_write_image done(0)
2/3/14 11:06:11.000 kernel[0]: sleep
2/3/14 11:06:12.000 kernel[0]: Wake reason: OHC2
2/3/14 13:41:51.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 13:41:51.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 13:41:51.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 13:41:51.000 kernel[0]: The USB device USB Receiver (Port 4 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 13:41:51.000 kernel[0]: full wake (reason 1) 129 ms
2/3/14 13:41:51.197 loginwindow[43]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
2/3/14 13:41:51.482 WindowServer[142]: CGXDisplayDidWakeNotification [39953137898042]: posting kCGSDisplayDidWake
2/3/14 13:41:51.483 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7f886b47a490(2004) (lock state: 3)
2/3/14 13:41:51.483 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: err 0x0
2/3/14 13:41:58.522 SystemUIServer[287]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 13:41:58.596 airportd[64]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 13:42:01.567 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "universalAccessAuthWarn" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x14b73, PID 1638)
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "Skype" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x14d4f, PID 1330)
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "(PID 1201)" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x1312b, PID 1201)
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "(PID 263)" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x2f87, PID 263)
2/3/14 13:42:08.538 WindowServer[142]: device_generate_desktop_screenshot: authw 0x7f886b47a490(2002), shield 0x7f886b4d2aa0(2001)
2/3/14 13:42:08.596 WindowServer[142]: device_generate_lock_screen_screenshot: authw 0x7f886b47a490(2002), shield 0x7f886b4d2aa0(2001)
2/3/14 13:42:14.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Sleep 
2/3/14 13:42:15.000 kernel[0]: hibernate image path: /var/vm/sleepimage
2/3/14 13:42:15.000 kernel[0]: efi pagecount 545
2/3/14 13:42:15.000 kernel[0]: hibernate_page_list_setall(preflight 1) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 13:42:15.000 kernel[0]: hibernate_page_list_setall time: 305 ms
2/3/14 13:42:15.000 kernel[0]: pages 966929, wire 101753, act 346161, inact 18490, cleaned 0 spec 4, zf 199305, throt 0, compr 153291, xpmapped 494453
2/3/14 13:42:15.000 kernel[0]: could discard act 17866 inact 120881 purgeable 1319 spec 7837 cleaned 22
2/3/14 13:42:15.000 kernel[0]: hibernate_page_list_setall preflight pageCount 819004 est comp 62 setfile 2191941908 min 2147483648
2/3/14 13:42:15.000 kernel[0]: [0x36c80e000, 0x19000000]
2/3/14 13:42:15.000 kernel[0]: [0x394839000, 0x40000000]
2/3/14 13:42:15.000 kernel[0]: [0x3d4839000, 0x27000000]
2/3/14 13:42:15.000 kernel[0]: [0x89c94b000, 0x2a67000]
2/3/14 13:42:15.000 kernel[0]: [0x0, 0x0]
2/3/14 13:42:15.000 kernel[0]: kern_open_file_for_direct_io(0) took 51 ms
2/3/14 13:42:15.000 kernel[0]: Opened file /var/vm/sleepimage, size 2191945728, partition base 0x0, maxio 2000000 ssd 0
2/3/14 13:42:15.000 kernel[0]: hibernate image major 1, minor 0, blocksize 4096, pollers 5
2/3/14 13:42:15.000 kernel[0]: hibernate_alloc_pages act 365284, inact 338760, anon 264757, throt 0, spec 7842, wire 101492, wireinit 57407
2/3/14 13:42:15.000 kernel[0]: hibernate_setup(0) took 0 ms
2/3/14 13:43:01.000 kernel[0]: hibernate_page_list_setall(preflight 0) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 13:43:01.000 kernel[0]: hibernate_page_list_setall time: 337 ms
2/3/14 13:43:01.000 kernel[0]: pages 968286, wire 103103, act 346168, inact 18490, cleaned 0 spec 6, zf 199305, throt 0, compr 153291, xpmapped 563589
2/3/14 13:43:01.000 kernel[0]: could discard act 17866 inact 120880 purgeable 1319 spec 7836 cleaned 22
2/3/14 13:43:01.000 kernel[0]: hibernate_page_list_setall found pageCount 820363
2/3/14 13:43:01.000 kernel[0]: IOHibernatePollerOpen, ml_get_interrupts_enabled 0
2/3/14 13:43:01.000 kernel[0]: IOHibernatePollerOpen(0)
2/3/14 13:43:01.000 kernel[0]: encryptStart 14030
2/3/14 13:43:01.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x5c7e30, writing 817645 pages @ 0x5f9e94
2/3/14 13:43:01.000 kernel[0]: encryptEnd 597d800
2/3/14 13:43:01.000 kernel[0]: image1Size 0xa546000, encryptStart1 0x14030, End1 0x597d800
2/3/14 13:43:01.000 kernel[0]: encryptStart a546000
2/3/14 13:43:01.000 kernel[0]: encryptEnd 7c8dbc00
2/3/14 13:43:01.000 kernel[0]: PMStats: Hibernate write took 43766 ms
2/3/14 13:43:01.000 kernel[0]: all time: 43766 ms, comp bytes: 3349340160 time: 6769 ms 471 Mb/s, crypt bytes: 2010117072 time: 19567 ms 97 Mb/s, 
2/3/14 13:43:01.000 kernel[0]: image 2089664512 (95%), uncompressed 3349340160 (817710), compressed 2078393504 (62%), sum1 f162ce53, sum2 81e57661
2/3/14 13:43:01.000 kernel[0]: zeroPageCount 33402, wiredPagesEncrypted 50768, wiredPagesClear 49682, dirtyPagesEncrypted 717260
2/3/14 13:43:01.000 kernel[0]: hibernate_write_image done(0)
2/3/14 13:43:01.000 kernel[0]: sleep
2/3/14 13:43:02.000 kernel[0]: Wake reason: OHC2
2/3/14 14:18:09.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 14:18:09.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 14:18:09.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 14:18:09.000 kernel[0]: The USB device USB Receiver (Port 4 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 14:18:11.282 mDNSResponder[40]: mDNSLogDNSSECStatistics: unicast is zero
2/3/14 14:19:03.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Sleep 
2/3/14 14:19:04.000 kernel[0]: hibernate image path: /var/vm/sleepimage
2/3/14 14:19:04.000 kernel[0]: efi pagecount 545
2/3/14 14:19:04.000 kernel[0]: hibernate_page_list_setall(preflight 1) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 14:19:04.000 kernel[0]: hibernate_page_list_setall time: 306 ms
2/3/14 14:19:04.000 kernel[0]: pages 963543, wire 101207, act 344550, inact 18488, cleaned 0 spec 4, zf 199023, throt 0, compr 153291, xpmapped 563589
2/3/14 14:19:04.000 kernel[0]: could discard act 17868 inact 120911 purgeable 319 spec 7860 cleaned 22
2/3/14 14:19:04.000 kernel[0]: hibernate_page_list_setall preflight pageCount 816563 est comp 61 setfile 2171703380 min 2147483648
2/3/14 14:19:04.000 kernel[0]: [0x36c80e000, 0x19000000]
2/3/14 14:19:04.000 kernel[0]: [0x394839000, 0x40000000]
2/3/14 14:19:04.000 kernel[0]: [0x3d4839000, 0x27000000]
2/3/14 14:19:04.000 kernel[0]: [0x89c94b000, 0x171a000]
2/3/14 14:19:04.000 kernel[0]: [0x0, 0x0]
2/3/14 14:19:04.000 kernel[0]: kern_open_file_for_direct_io(0) took 3 ms
2/3/14 14:19:04.000 kernel[0]: Opened file /var/vm/sleepimage, size 2171707392, partition base 0x0, maxio 2000000 ssd 0
2/3/14 14:19:04.000 kernel[0]: hibernate image major 1, minor 0, blocksize 4096, pollers 5
2/3/14 14:19:04.000 kernel[0]: hibernate_alloc_pages act 362675, inact 338506, anon 264503, throt 0, spec 7864, wire 101497, wireinit 57407
2/3/14 14:19:04.000 kernel[0]: hibernate_setup(0) took 0 ms
2/3/14 14:19:36.000 kernel[0]: hibernate_page_list_setall(preflight 0) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 14:19:36.000 kernel[0]: hibernate_page_list_setall time: 337 ms
2/3/14 14:19:36.000 kernel[0]: pages 965791, wire 103109, act 344898, inact 18492, cleaned 0 spec 5, zf 199021, throt 0, compr 153291, xpmapped 632727
2/3/14 14:19:36.000 kernel[0]: could discard act 17868 inact 120906 purgeable 319 spec 7860 cleaned 22
2/3/14 14:19:36.000 kernel[0]: hibernate_page_list_setall found pageCount 818816
2/3/14 14:19:36.000 kernel[0]: IOHibernatePollerOpen, ml_get_interrupts_enabled 0
2/3/14 14:19:36.000 kernel[0]: IOHibernatePollerOpen(0)
2/3/14 14:19:36.000 kernel[0]: encryptStart 14030
2/3/14 14:19:36.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x5c7e30, writing 816098 pages @ 0x5f9e94
2/3/14 14:19:36.000 kernel[0]: encryptEnd 59cec00
2/3/14 14:19:36.000 kernel[0]: image1Size 0xa58c000, encryptStart1 0x14030, End1 0x59cec00
2/3/14 14:19:36.000 kernel[0]: encryptStart a58c000
2/3/14 14:19:36.000 kernel[0]: encryptEnd 7c39b200
2/3/14 14:19:36.000 kernel[0]: PMStats: Hibernate write took 29216 ms
2/3/14 14:19:36.000 kernel[0]: all time: 29216 ms, comp bytes: 3343003648 time: 6747 ms 472 Mb/s, crypt bytes: 2004655568 time: 19520 ms 97 Mb/s, 
2/3/14 14:19:36.000 kernel[0]: image 2084159488 (95%), uncompressed 3343003648 (816163), compressed 2072884832 (62%), sum1 43d53f82, sum2 f7b1a0d9
2/3/14 14:19:36.000 kernel[0]: zeroPageCount 34373, wiredPagesEncrypted 50773, wiredPagesClear 49683, dirtyPagesEncrypted 715707
2/3/14 14:19:36.000 kernel[0]: hibernate_write_image done(0)
2/3/14 14:19:36.000 kernel[0]: sleep
2/3/14 14:19:36.000 kernel[0]: Wake reason: EC LID0 OHC2
2/3/14 14:19:36.000 kernel[0]: SMC::smcHandleInterruptEvent WARNING status=0x0 (0x40 not set) notif=0x0
2/3/14 22:57:22.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 22:57:22.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 22:57:22.000 kernel[0]: full wake (reason 1) 77 ms
2/3/14 22:57:22.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 22:57:22.000 kernel[0]: The USB device Apple Internal Keyboard / Trackpad (Port 3 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 22:57:22.390 WindowServer[142]: CGXDisplayDidWakeNotification [40111399479175]: posting kCGSDisplayDidWake
2/3/14 22:57:22.391 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7f886b47a490(2000) (lock state: 3)
2/3/14 22:57:22.391 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: err 0x0
2/3/14 22:57:22.549 loginwindow[43]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
2/3/14 22:57:29.554 SystemUIServer[287]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 22:57:29.582 airportd[64]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 22:57:29.709 secd[320]:  SecErrorGetOSStatus unknown error domain: com.apple.security.sos.error for error: The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 22:57:29.709 secd[320]:  securityd_xpc_dictionary_handler EscrowSecurityAl[1298] DeviceInCircle The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 22:57:32.372 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 22:58:27.815 WindowServer[142]: device_generate_desktop_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 22:58:27.874 WindowServer[142]: device_generate_lock_screen_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 22:58:55.877 loginwindow[43]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
2/3/14 22:58:55.952 WindowServer[142]: CGXDisplayDidWakeNotification [40204966169597]: posting kCGSDisplayDidWake
2/3/14 22:58:55.953 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Deferring.
2/3/14 22:59:04.090 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 22:59:18.000 kernel[0]: Ethernet [AppleBCM5701Ethernet]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,2301,0de1,0300,c5e1,7800]
2/3/14 22:59:21.697 configd[18]: network changed: v4(en0+:172.30.1.40) DNS+ Proxy+ SMB
2/3/14 22:59:26.709 configd[18]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 22:59:48.669 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:48.669 com.avast.proxy[199]: !忯�ݨ���T�6��T�S���^s��5%��A{&={A�6uq�e�    ��?L
2/3/14 22:59:57.175 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:57.175 com.avast.proxy[199]: ��ݤ�V�T�l$���sO������lk
��"P$������4�X�����W�e��&�W��P�C�
2/3/14 22:59:58.191 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:58.191 com.avast.proxy[199]: >�i˓�a�rq���v����~}y�E|f�K[�, Hl��@<��4�{!���=�\�BM��p���BK�?
2/3/14 22:59:59.191 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:59.191 com.avast.proxy[199]: ���j��b��
2/3/14 23:00:00.208 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:00.208 com.avast.proxy[199]: 8�jks�sU�!�4O��}���b��I����qt�*����?�
2/3/14 23:00:01.208 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:01.208 com.avast.proxy[199]: X��ZS�+��A9�
�-�nDK�>n��*O!�g�=�7=�ve��?
2/3/14 23:00:02.224 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:02.224 com.avast.proxy[199]: ��hc�&���d��+�A�ݞ��*3�Dn��m(���0E
2/3/14 23:00:03.229 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:03.229 com.avast.proxy[199]: Š��!�9,$�%ou���y��i"`��8N��q?O
2/3/14 23:00:04.235 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:04.235 com.avast.proxy[199]: #ݷ^�/SS
vansmith

 
vansmith's Avatar
 
Member Since: Oct 19, 2008
Location: Toronto
Posts: 17,815
vansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond repute
Mac Specs: 2012 13" MBP (2.5 i5, 8GB)

vansmith is online now
Quote:
Originally Posted by chscag View Post
You're in China and as a westerner you expect privacy and the same freedoms you enjoy in your home country? You should expect that everything you say or do is being watched or maybe even recorded.
Quote:
Originally Posted by harryb2448 View Post
As may be but only solution as there is no privacy in such a State. Read about the power of the State and the privacy of the individual:-

Internet censorship in the People's Republic of China - Wikipedia, the free encyclopedia
None of this is specific to China if the news is anything to go by. I'm pretty sure, at this point, that most western nations have their eyes on their own citizens. They all seem to do it - Canada, the United States, the UK, Australia and so on. This isn't a judgment or a political statement but rather, just an observation.

vikimaster, if this problem is unique to this site, just stay away from it. The hotel could be monitoring what you're doing but logically, such a response doesn't make sense (why would they convince others, and so explicitly so, that one of their customers is a criminal?). I'd think that either something is fishy with that dating site or your Skype account.

Important Links: Community Guidelines : Use the reputation system if you've been helped.
M-F Blog :: Write for the blog
Writing a Quality Post
pigoo3

 
pigoo3's Avatar
 
Member Since: May 20, 2008
Location: U.S.
Posts: 26,506
pigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond repute
Mac Specs: 13" MB 2.4ghz, 2gig ram, OS 10.7.5

pigoo3 is offline
Quote:
Originally Posted by vikimaster View Post
Well, I am sure management will say that nothing is wrong ( I work in hotel myself, so its always a denial kind of thing). I am working here, at this hotel myself....but staying in a staff accomodation.
AHEM...HELLO. This may have been some great info to tell us in the beginning of the thread! So far you made it seem like you were some random foreign guest staying at this hotel. Now you tell us you're an employee of the hotel staying in staff accommodations. What the heck???

By the way (regardless of your relationship with this hotel)...are you going to try any of the suggestions I made...or are you going to stay "rooted" in your hotel room and continue beating your head against the wall with this problem??

- Nick

- Computer slow, too many "beachballs", read this: Beachballs
- Computer seems slower than it used to? Read this for some speedup tips: Speedup
- Almost full hard drive? Some solutions. Out of Space
- Apple Battery Info. Battery
vansmith

 
vansmith's Avatar
 
Member Since: Oct 19, 2008
Location: Toronto
Posts: 17,815
vansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond reputevansmith has a reputation beyond repute
Mac Specs: 2012 13" MBP (2.5 i5, 8GB)

vansmith is online now
I think this conversation has run its course. vikimaster, you've received a significant amount of advice & this conversation, at this point, is going in circles and it doesn't seem like that pattern is going to break.

Important Links: Community Guidelines : Use the reputation system if you've been helped.
M-F Blog :: Write for the blog
Writing a Quality Post
pigoo3

 
pigoo3's Avatar
 
Member Since: May 20, 2008
Location: U.S.
Posts: 26,506
pigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond reputepigoo3 has a reputation beyond repute
Mac Specs: 13" MB 2.4ghz, 2gig ram, OS 10.7.5

pigoo3 is offline
Thread moved to Security Awareness forum.

- Nick

- Computer slow, too many "beachballs", read this: Beachballs
- Computer seems slower than it used to? Read this for some speedup tips: Speedup
- Almost full hard drive? Some solutions. Out of Space
- Apple Battery Info. Battery

Thread Closed


« Virus on Mac (serious question) | mac malware? VBS-Malware-gen »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
External Harddrive Format problem on Macbook riellysmith Apple Notebooks 1 05-15-2012 04:53 AM
Loading old programs from old Harddrive... Can it be done? Headie*Threadie Apple Notebooks 4 07-15-2008 11:55 AM
Itunes, External Harddrive, and Home Network Questions reptile Switcher Hangout 1 12-28-2007 10:07 AM
Booting from external Harddrive Hustle Apple Notebooks 5 05-28-2007 05:54 AM

All times are GMT -4. The time now is 09:50 PM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?