Spyware/Malware/Keyloggers remain after harddrive wipeout.

Status
Not open for further replies.
T

techiesteve


Joined
Apr 24, 2009
Messages
965
Reaction score
128
Points
43
Location
UK
Your Mac's Specs
Various Mac's
Re the OP, you must always assume that any means of computer or telephone communication can be monitored to varying levels, even more so in a police state. How is it done? You will likely never find out due to state security, or unless a Chinese variant of Edward Snowdon appears, and that's most unlikely.
 
OP
V

vikimaster


Joined
Jan 31, 2014
Messages
9
Reaction score
0
Points
1
How easy it is for IT department in hotel for example to see all my emails? May be they just having fun with it
 
bobtomay

bobtomay

,
Retired Staff
Joined
Dec 22, 2006
Messages
26,561
Reaction score
677
Points
113
Location
Texas, where else?
Your Mac's Specs
15" MBP '06 2.33 C2D 4GB 10.7; 13" MBA '14 1.8 i7 8GB 10.11; 21" iMac '13 2.9 i5 8GB 10.11; 6S
While it could be, would suggest it has nothing to do with the staff at a 5 star hotel.

Would be too easy for guests to report such abuse to the hotel management. You have done that, correct? Don't believe management would knowingly permit such an individual to maintain their employment, even in China.
 
pigoo3

pigoo3

Well-known member
Staff member
Admin
Joined
May 20, 2008
Messages
44,212
Reaction score
1,424
Points
113
Location
U.S.
Your Mac's Specs
2017 15" MBP, 16gig ram, 1TB SSD, OS 10.15
I'm going to throw a suggestion your way. Try doing some of your WiFi/internetting away from the hotel. Stay mobile & unpredictable as to where you do things (WiFi hotspots, internet cafe', library, school, work, etc.)...and see if this makes a difference.

When you're at the hotel...you're a "stationary target" and anyone interested in observing your internet activities knows exactly "where you are" so to speak.

I know that this is not as convenient as your hotel room...but this experiment will give you the opportunity to see if the problem is "hotel-based" (a problem with this hotel)...or if you are being targeted in some other way.

I would also suggest that if the problem disappears when "internetting" away from your current hotel...maybe you should stay at a different hotel. Hopefully all hotels aren't doing the same thing (if something is actually going on at all).

If the problem continues away from your hotel...then maybe there's a bigger issue.

HTH,

- Nick
 
OP
V

vikimaster


Joined
Jan 31, 2014
Messages
9
Reaction score
0
Points
1
pigoo3 said:
I'm going to throw a suggestion your way. Try doing some of your WiFi/internetting away from the hotel. Stay mobile & unpredictable as to where you do things (WiFi hotspots, internet cafe', library, school, work, etc.)...and see if this makes a difference.

When you're at the hotel...you're a "stationary target" and anyone interested in observing your internet activities knows exactly "where you are" so to speak.

I know that this is not as convenient as your hotel room...but this experiment will give you the opportunity to see if the problem is "hotel-based" (a problem with this hotel)...or if you are being targeted in some other way.

I would also suggest that if the problem disappears when "internetting" away from your current hotel...maybe you should stay at a different hotel. Hopefully all hotels aren't doing the same thing (if something is actually going on at all).

If the problem continues away from your hotel...then maybe there's a bigger issue.

HTH,

- Nick
Click to expand...

Thanks Nick, and others. Appreciate your input. Well, I am sure management will say that nothing is wrong ( I work in hotel myself, so its always a denial kind of thing). I am working here, at this hotel myself....but staying in a staff accomodation.

So may be management is actually monitoring me, to prevent misconduct. But I mean, dating sites , have nothing really to do with my work. And while I am ok with them reading my messages, its a bit disturbing that they try to interfere. So there comes and IT department suspicion, may be they just do it for fun. Since I am the only foreigner working in hotel( where we have 700 people working ).

As well, I use Avast antivirus. and it detecting infection everytime I connect to VPN.But I cant see what the infection is.

Can somebody explain to me, what were those 2 files(473mb) after when I wiped the hard disk? Could it be some rooted software that monitors me?

Thank you in advance.

P.S Please bear with me, I am not really tech friendly guy. And trying to broaden my knowledge here on Mac-forums.
 
OP
V

vikimaster


Joined
Jan 31, 2014
Messages
9
Reaction score
0
Points
1
Okey guys, so I just had a look at my Console. And found something which I dont really know how possible.

My computer was closed, so I assume it was in sleep mode. Hole day...I only opened it now at 22.57.

Also my airport is always switched off, I am using cable internet. And while I was away, cable was unpluged and my laptop was locked in drawer.

Can anybody see anything suspicious there? I mean, computer seems like was doing something...but again I dont know how to read those things. If anyone is kind enough, please have a look.thank you



Code: 
2/3/14 04:48:01.000 kernel[0]: encryptStart 14020
2/3/14 04:48:01.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x62d150, writing 822486 pages @ 0x65f1a4
2/3/14 04:48:01.000 kernel[0]: encryptEnd 5433c00
2/3/14 04:48:01.000 kernel[0]: image1Size 0x9eea000, encryptStart1 0x14020, End1 0x5433c00
2/3/14 04:48:01.000 kernel[0]: encryptStart 9eea000
2/3/14 04:48:01.000 kernel[0]: encryptEnd 7d0cbc00
2/3/14 04:48:01.000 kernel[0]: PMStats: Hibernate write took 43878 ms
2/3/14 04:48:01.000 kernel[0]: all time: 43878 ms, comp bytes: 3369168896 time: 6804 ms 472 Mb/s, crypt bytes: 2019563488 time: 19656 ms 97 Mb/s, 
2/3/14 04:48:01.000 kernel[0]: image 2097987584 (97%), uncompressed 3369168896 (822551), compressed 2086340624 (61%), sum1 3f2d57da, sum2 b6e2f257
2/3/14 04:48:01.000 kernel[0]: zeroPageCount 36054, wiredPagesEncrypted 48340, wiredPagesClear 48667, dirtyPagesEncrypted 725544
2/3/14 04:48:01.000 kernel[0]: hibernate_write_image done(0)
2/3/14 04:48:01.000 kernel[0]: sleep
2/3/14 04:48:01.216 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 04:48:01.000 kernel[0]: Wake reason: OHC2
2/3/14 10:54:58.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 10:54:58.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 10:54:58.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 10:54:58.000 kernel[0]: The USB device USB Receiver (Port 4 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 10:54:58.000 kernel[0]: full wake (reason 1) 127 ms
2/3/14 10:54:58.773 WindowServer[142]: CGXDisplayDidWakeNotification [39279277906106]: posting kCGSDisplayDidWake
2/3/14 10:54:58.774 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7f886b47a490(2004) (lock state: 3)
2/3/14 10:54:58.775 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: err 0x0
2/3/14 10:54:58.789 loginwindow[43]: resume called when there was already a timer
2/3/14 10:55:05.514 configd[18]: network changed.
2/3/14 10:55:05.938 SystemUIServer[287]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 10:55:06.072 airportd[64]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 10:55:06.276 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 10:55:06.529 com.apple.time[263]: Interval maximum value is 946100000 seconds (specified value: 9223372036854775807).
2/3/14 10:55:16.225 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 10:55:29.852 WindowServer[142]: device_generate_desktop_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 10:55:29.909 WindowServer[142]: device_generate_lock_screen_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 10:56:29.582 periodic-wrapper[3063]: Running weekly periodic task.
2/3/14 10:56:29.818 secd[320]:  SecErrorGetOSStatus unknown error domain: com.apple.security.sos.error for error: The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 10:56:29.818 secd[320]:  securityd_xpc_dictionary_handler EscrowSecurityAl[1298] DeviceInCircle The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 11:05:39.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Sleep 
2/3/14 11:05:39.000 kernel[0]: hibernate image path: /var/vm/sleepimage
2/3/14 11:05:39.000 kernel[0]: efi pagecount 545
2/3/14 11:05:39.000 kernel[0]: hibernate_page_list_setall(preflight 1) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 11:05:40.000 kernel[0]: hibernate_page_list_setall time: 305 ms
2/3/14 11:05:40.000 kernel[0]: pages 963546, wire 100746, act 344502, inact 18487, cleaned 1 spec 3, zf 199901, throt 0, compr 153291, xpmapped 425324
2/3/14 11:05:40.000 kernel[0]: could discard act 17748 inact 120072 purgeable 1321 spec 7453 cleaned 21
2/3/14 11:05:40.000 kernel[0]: hibernate_page_list_setall preflight pageCount 816931 est comp 61 setfile 2172679188 min 2147483648
2/3/14 11:05:40.000 kernel[0]: [0x36c80e000, 0x19000000]
2/3/14 11:05:40.000 kernel[0]: [0x394839000, 0x40000000]
2/3/14 11:05:40.000 kernel[0]: [0x3d4839000, 0x27000000]
2/3/14 11:05:40.000 kernel[0]: [0x89c94b000, 0x19000000]
2/3/14 11:05:40.000 kernel[0]: [0x0, 0x0]
2/3/14 11:05:40.000 kernel[0]: kern_open_file_for_direct_io(0) took 220 ms
2/3/14 11:05:40.000 kernel[0]: Opened file /var/vm/sleepimage, size 2566914048, partition base 0x0, maxio 2000000 ssd 0
2/3/14 11:05:40.000 kernel[0]: hibernate image major 1, minor 0, blocksize 4096, pollers 5
2/3/14 11:05:40.000 kernel[0]: hibernate_alloc_pages act 363509, inact 338544, anon 265380, throt 0, spec 7457, wire 101309, wireinit 57407
2/3/14 11:05:40.000 kernel[0]: hibernate_setup(0) took 0 ms
2/3/14 11:06:11.000 kernel[0]: hibernate_page_list_setall(preflight 0) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 11:06:11.000 kernel[0]: hibernate_page_list_setall time: 336 ms
2/3/14 11:06:11.000 kernel[0]: pages 965569, wire 103008, act 344517, inact 18490, cleaned 1 spec 4, zf 199646, throt 0, compr 153291, xpmapped 494453
2/3/14 11:06:11.000 kernel[0]: could discard act 17748 inact 120068 purgeable 1321 spec 7454 cleaned 21
2/3/14 11:06:11.000 kernel[0]: hibernate_page_list_setall found pageCount 818957
2/3/14 11:06:11.000 kernel[0]: IOHibernatePollerOpen, ml_get_interrupts_enabled 0
2/3/14 11:06:11.000 kernel[0]: IOHibernatePollerOpen(0)
2/3/14 11:06:11.000 kernel[0]: encryptStart 14030
2/3/14 11:06:11.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x631178, writing 816134 pages @ 0x6631dc
2/3/14 11:06:11.000 kernel[0]: encryptEnd 59a1a00
2/3/14 11:06:11.000 kernel[0]: image1Size 0xa55e000, encryptStart1 0x14030, End1 0x59a1a00
2/3/14 11:06:11.000 kernel[0]: encryptStart a55e000
2/3/14 11:06:11.000 kernel[0]: encryptEnd 7c77ae00
2/3/14 11:06:11.000 kernel[0]: PMStats: Hibernate write took 29229 ms
2/3/14 11:06:11.000 kernel[0]: all time: 29229 ms, comp bytes: 3343151104 time: 6748 ms 472 Mb/s, crypt bytes: 2008721360 time: 19560 ms 97 Mb/s, 
2/3/14 11:06:11.000 kernel[0]: image 2088218624 (81%), uncompressed 3343151104 (816199), compressed 2076515472 (62%), sum1 b3f12812, sum2 b8f4ed0b
2/3/14 11:06:11.000 kernel[0]: zeroPageCount 33503, wiredPagesEncrypted 50568, wiredPagesClear 49682, dirtyPagesEncrypted 715949
2/3/14 11:06:11.000 kernel[0]: hibernate_write_image done(0)
2/3/14 11:06:11.000 kernel[0]: sleep
2/3/14 11:06:12.000 kernel[0]: Wake reason: OHC2
2/3/14 13:41:51.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 13:41:51.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 13:41:51.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 13:41:51.000 kernel[0]: The USB device USB Receiver (Port 4 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 13:41:51.000 kernel[0]: full wake (reason 1) 129 ms
2/3/14 13:41:51.197 loginwindow[43]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
2/3/14 13:41:51.482 WindowServer[142]: CGXDisplayDidWakeNotification [39953137898042]: posting kCGSDisplayDidWake
2/3/14 13:41:51.483 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7f886b47a490(2004) (lock state: 3)
2/3/14 13:41:51.483 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: err 0x0
2/3/14 13:41:58.522 SystemUIServer[287]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 13:41:58.596 airportd[64]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 13:42:01.567 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "universalAccessAuthWarn" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x14b73, PID 1638)
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "Skype" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x14d4f, PID 1330)
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "(PID 1201)" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x1312b, PID 1201)
2/3/14 13:42:08.535 WindowServer[142]: CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 1.000 second wait for reply from "(PID 263)" for synchronous notification type 102 (kCGSDisplayWillSleep) (CID 0x2f87, PID 263)
2/3/14 13:42:08.538 WindowServer[142]: device_generate_desktop_screenshot: authw 0x7f886b47a490(2002), shield 0x7f886b4d2aa0(2001)
2/3/14 13:42:08.596 WindowServer[142]: device_generate_lock_screen_screenshot: authw 0x7f886b47a490(2002), shield 0x7f886b4d2aa0(2001)
2/3/14 13:42:14.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Sleep 
2/3/14 13:42:15.000 kernel[0]: hibernate image path: /var/vm/sleepimage
2/3/14 13:42:15.000 kernel[0]: efi pagecount 545
2/3/14 13:42:15.000 kernel[0]: hibernate_page_list_setall(preflight 1) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 13:42:15.000 kernel[0]: hibernate_page_list_setall time: 305 ms
2/3/14 13:42:15.000 kernel[0]: pages 966929, wire 101753, act 346161, inact 18490, cleaned 0 spec 4, zf 199305, throt 0, compr 153291, xpmapped 494453
2/3/14 13:42:15.000 kernel[0]: could discard act 17866 inact 120881 purgeable 1319 spec 7837 cleaned 22
2/3/14 13:42:15.000 kernel[0]: hibernate_page_list_setall preflight pageCount 819004 est comp 62 setfile 2191941908 min 2147483648
2/3/14 13:42:15.000 kernel[0]: [0x36c80e000, 0x19000000]
2/3/14 13:42:15.000 kernel[0]: [0x394839000, 0x40000000]
2/3/14 13:42:15.000 kernel[0]: [0x3d4839000, 0x27000000]
2/3/14 13:42:15.000 kernel[0]: [0x89c94b000, 0x2a67000]
2/3/14 13:42:15.000 kernel[0]: [0x0, 0x0]
2/3/14 13:42:15.000 kernel[0]: kern_open_file_for_direct_io(0) took 51 ms
2/3/14 13:42:15.000 kernel[0]: Opened file /var/vm/sleepimage, size 2191945728, partition base 0x0, maxio 2000000 ssd 0
2/3/14 13:42:15.000 kernel[0]: hibernate image major 1, minor 0, blocksize 4096, pollers 5
2/3/14 13:42:15.000 kernel[0]: hibernate_alloc_pages act 365284, inact 338760, anon 264757, throt 0, spec 7842, wire 101492, wireinit 57407
2/3/14 13:42:15.000 kernel[0]: hibernate_setup(0) took 0 ms
2/3/14 13:43:01.000 kernel[0]: hibernate_page_list_setall(preflight 0) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 13:43:01.000 kernel[0]: hibernate_page_list_setall time: 337 ms
2/3/14 13:43:01.000 kernel[0]: pages 968286, wire 103103, act 346168, inact 18490, cleaned 0 spec 6, zf 199305, throt 0, compr 153291, xpmapped 563589
2/3/14 13:43:01.000 kernel[0]: could discard act 17866 inact 120880 purgeable 1319 spec 7836 cleaned 22
2/3/14 13:43:01.000 kernel[0]: hibernate_page_list_setall found pageCount 820363
2/3/14 13:43:01.000 kernel[0]: IOHibernatePollerOpen, ml_get_interrupts_enabled 0
2/3/14 13:43:01.000 kernel[0]: IOHibernatePollerOpen(0)
2/3/14 13:43:01.000 kernel[0]: encryptStart 14030
2/3/14 13:43:01.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x5c7e30, writing 817645 pages @ 0x5f9e94
2/3/14 13:43:01.000 kernel[0]: encryptEnd 597d800
2/3/14 13:43:01.000 kernel[0]: image1Size 0xa546000, encryptStart1 0x14030, End1 0x597d800
2/3/14 13:43:01.000 kernel[0]: encryptStart a546000
2/3/14 13:43:01.000 kernel[0]: encryptEnd 7c8dbc00
2/3/14 13:43:01.000 kernel[0]: PMStats: Hibernate write took 43766 ms
2/3/14 13:43:01.000 kernel[0]: all time: 43766 ms, comp bytes: 3349340160 time: 6769 ms 471 Mb/s, crypt bytes: 2010117072 time: 19567 ms 97 Mb/s, 
2/3/14 13:43:01.000 kernel[0]: image 2089664512 (95%), uncompressed 3349340160 (817710), compressed 2078393504 (62%), sum1 f162ce53, sum2 81e57661
2/3/14 13:43:01.000 kernel[0]: zeroPageCount 33402, wiredPagesEncrypted 50768, wiredPagesClear 49682, dirtyPagesEncrypted 717260
2/3/14 13:43:01.000 kernel[0]: hibernate_write_image done(0)
2/3/14 13:43:01.000 kernel[0]: sleep
2/3/14 13:43:02.000 kernel[0]: Wake reason: OHC2
2/3/14 14:18:09.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 14:18:09.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 14:18:09.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 14:18:09.000 kernel[0]: The USB device USB Receiver (Port 4 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 14:18:11.282 mDNSResponder[40]: mDNSLogDNSSECStatistics: unicast is zero
2/3/14 14:19:03.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Sleep 
2/3/14 14:19:04.000 kernel[0]: hibernate image path: /var/vm/sleepimage
2/3/14 14:19:04.000 kernel[0]: efi pagecount 545
2/3/14 14:19:04.000 kernel[0]: hibernate_page_list_setall(preflight 1) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 14:19:04.000 kernel[0]: hibernate_page_list_setall time: 306 ms
2/3/14 14:19:04.000 kernel[0]: pages 963543, wire 101207, act 344550, inact 18488, cleaned 0 spec 4, zf 199023, throt 0, compr 153291, xpmapped 563589
2/3/14 14:19:04.000 kernel[0]: could discard act 17868 inact 120911 purgeable 319 spec 7860 cleaned 22
2/3/14 14:19:04.000 kernel[0]: hibernate_page_list_setall preflight pageCount 816563 est comp 61 setfile 2171703380 min 2147483648
2/3/14 14:19:04.000 kernel[0]: [0x36c80e000, 0x19000000]
2/3/14 14:19:04.000 kernel[0]: [0x394839000, 0x40000000]
2/3/14 14:19:04.000 kernel[0]: [0x3d4839000, 0x27000000]
2/3/14 14:19:04.000 kernel[0]: [0x89c94b000, 0x171a000]
2/3/14 14:19:04.000 kernel[0]: [0x0, 0x0]
2/3/14 14:19:04.000 kernel[0]: kern_open_file_for_direct_io(0) took 3 ms
2/3/14 14:19:04.000 kernel[0]: Opened file /var/vm/sleepimage, size 2171707392, partition base 0x0, maxio 2000000 ssd 0
2/3/14 14:19:04.000 kernel[0]: hibernate image major 1, minor 0, blocksize 4096, pollers 5
2/3/14 14:19:04.000 kernel[0]: hibernate_alloc_pages act 362675, inact 338506, anon 264503, throt 0, spec 7864, wire 101497, wireinit 57407
2/3/14 14:19:04.000 kernel[0]: hibernate_setup(0) took 0 ms
2/3/14 14:19:36.000 kernel[0]: hibernate_page_list_setall(preflight 0) start 0xffffff806b5a0000, 0xffffff806b5bf000
2/3/14 14:19:36.000 kernel[0]: hibernate_page_list_setall time: 337 ms
2/3/14 14:19:36.000 kernel[0]: pages 965791, wire 103109, act 344898, inact 18492, cleaned 0 spec 5, zf 199021, throt 0, compr 153291, xpmapped 632727
2/3/14 14:19:36.000 kernel[0]: could discard act 17868 inact 120906 purgeable 319 spec 7860 cleaned 22
2/3/14 14:19:36.000 kernel[0]: hibernate_page_list_setall found pageCount 818816
2/3/14 14:19:36.000 kernel[0]: IOHibernatePollerOpen, ml_get_interrupts_enabled 0
2/3/14 14:19:36.000 kernel[0]: IOHibernatePollerOpen(0)
2/3/14 14:19:36.000 kernel[0]: encryptStart 14030
2/3/14 14:19:36.000 kernel[0]: bitmap_size 0x1e034, previewSize 0x5c7e30, writing 816098 pages @ 0x5f9e94
2/3/14 14:19:36.000 kernel[0]: encryptEnd 59cec00
2/3/14 14:19:36.000 kernel[0]: image1Size 0xa58c000, encryptStart1 0x14030, End1 0x59cec00
2/3/14 14:19:36.000 kernel[0]: encryptStart a58c000
2/3/14 14:19:36.000 kernel[0]: encryptEnd 7c39b200
2/3/14 14:19:36.000 kernel[0]: PMStats: Hibernate write took 29216 ms
2/3/14 14:19:36.000 kernel[0]: all time: 29216 ms, comp bytes: 3343003648 time: 6747 ms 472 Mb/s, crypt bytes: 2004655568 time: 19520 ms 97 Mb/s, 
2/3/14 14:19:36.000 kernel[0]: image 2084159488 (95%), uncompressed 3343003648 (816163), compressed 2072884832 (62%), sum1 43d53f82, sum2 f7b1a0d9
2/3/14 14:19:36.000 kernel[0]: zeroPageCount 34373, wiredPagesEncrypted 50773, wiredPagesClear 49683, dirtyPagesEncrypted 715707
2/3/14 14:19:36.000 kernel[0]: hibernate_write_image done(0)
2/3/14 14:19:36.000 kernel[0]: sleep
2/3/14 14:19:36.000 kernel[0]: Wake reason: EC LID0 OHC2
2/3/14 14:19:36.000 kernel[0]: SMC::smcHandleInterruptEvent WARNING status=0x0 (0x40 not set) notif=0x0
2/3/14 22:57:22.000 kernel[0]: AirPort_Brcm43xx::powerChange: System Wake - Full Wake/ Dark Wake / Maintenance wake
2/3/14 22:57:22.000 kernel[0]: AirPort_Brcm43xx::checkInterfacePowerState: Check _pwrOffThreadCall!
2/3/14 22:57:22.000 kernel[0]: full wake (reason 1) 77 ms
2/3/14 22:57:22.000 kernel[0]: Previous Sleep Cause: 5
2/3/14 22:57:22.000 kernel[0]: The USB device Apple Internal Keyboard / Trackpad (Port 3 of Hub at 0x6000000) may have caused a wake by issuing a remote wakeup (2)
2/3/14 22:57:22.390 WindowServer[142]: CGXDisplayDidWakeNotification [40111399479175]: posting kCGSDisplayDidWake
2/3/14 22:57:22.391 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Reordering authw 0x7f886b47a490(2000) (lock state: 3)
2/3/14 22:57:22.391 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: err 0x0
2/3/14 22:57:22.549 loginwindow[43]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
2/3/14 22:57:29.554 SystemUIServer[287]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 22:57:29.582 airportd[64]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 22:57:29.709 secd[320]:  SecErrorGetOSStatus unknown error domain: com.apple.security.sos.error for error: The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 22:57:29.709 secd[320]:  securityd_xpc_dictionary_handler EscrowSecurityAl[1298] DeviceInCircle The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
2/3/14 22:57:32.372 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 22:58:27.815 WindowServer[142]: device_generate_desktop_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 22:58:27.874 WindowServer[142]: device_generate_lock_screen_screenshot: authw 0x7f886b47a490(2000), shield 0x7f886b4d2aa0(2001)
2/3/14 22:58:55.877 loginwindow[43]: ERROR | -[LWBuiltInScreenLockAuthLion askForPasswordBuiltIn:] | Attempted to add an observer when already observing
2/3/14 22:58:55.952 WindowServer[142]: CGXDisplayDidWakeNotification [40204966169597]: posting kCGSDisplayDidWake
2/3/14 22:58:55.953 WindowServer[142]: handle_will_sleep_auth_and_shield_windows: Deferring.
2/3/14 22:59:04.090 loginwindow[43]: CoreAnimation: warning, deleted thread with uncommitted CATransaction; set CA_DEBUG_TRANSACTIONS=1 in environment to log backtraces.
2/3/14 22:59:18.000 kernel[0]: Ethernet [AppleBCM5701Ethernet]: Link up on en0, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,2301,0de1,0300,c5e1,7800]
2/3/14 22:59:21.697 configd[18]: network changed: v4(en0+:172.30.1.40) DNS+ Proxy+ SMB
2/3/14 22:59:26.709 configd[18]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "��3,".
2/3/14 22:59:48.669 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:48.669 com.avast.proxy[199]: !忯�ݨ���T�6��T�S���^s��5%��A{&={A�6uq�e�    ��?L
2/3/14 22:59:57.175 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:57.175 com.avast.proxy[199]: ��ݤ�V�T�l$���sO������lk
��"P$������4�X�����W�e��&�W��P�C�
2/3/14 22:59:58.191 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:58.191 com.avast.proxy[199]: >�i˓�a�rq���v����~}y�E|f�K[�, Hl��@<��4�{!���=�\�BM��p���BK�?
2/3/14 22:59:59.191 com.avast.proxy[199]: Defective HTTP request!
2/3/14 22:59:59.191 com.avast.proxy[199]: ���j��b��
2/3/14 23:00:00.208 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:00.208 com.avast.proxy[199]: 8�jks�sU�!�4O��}���b��I����qt�*����?�
2/3/14 23:00:01.208 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:01.208 com.avast.proxy[199]: X��ZS�+��A9�
�-�nDK�>n��*O!�g�=�7=�ve��?
2/3/14 23:00:02.224 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:02.224 com.avast.proxy[199]: ��hc�&���d��+�A�ݞ��*3�Dn��m(���0E
2/3/14 23:00:03.229 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:03.229 com.avast.proxy[199]: ��!�9,$�%ou���y��i"`��8N��q?O
2/3/14 23:00:04.235 com.avast.proxy[199]: Defective HTTP request!
2/3/14 23:00:04.235 com.avast.proxy[199]: #ݷ^�/SS
 
vansmith

vansmith

Senior Member
Joined
Oct 19, 2008
Messages
19,924
Reaction score
559
Points
113
Location
Queensland
Your Mac's Specs
Mini (2014, 2018, 2020), MBA (2020), iPad Pro (2018), iPhone 13 Pro Max, Watch (S6)
chscag said:
You're in China and as a westerner you expect privacy and the same freedoms you enjoy in your home country? You should expect that everything you say or do is being watched or maybe even recorded.
Click to expand...

harryb2448 said:
As may be but only solution as there is no privacy in such a State. Read about the power of the State and the privacy of the individual:-

Internet censorship in the People's Republic of China - Wikipedia, the free encyclopedia
Click to expand...

None of this is specific to China if the news is anything to go by. I'm pretty sure, at this point, that most western nations have their eyes on their own citizens. They all seem to do it - Canada, the United States, the UK, Australia and so on. This isn't a judgment or a political statement but rather, just an observation. ;)

vikimaster, if this problem is unique to this site, just stay away from it. The hotel could be monitoring what you're doing but logically, such a response doesn't make sense (why would they convince others, and so explicitly so, that one of their customers is a criminal?). I'd think that either something is fishy with that dating site or your Skype account.
 
pigoo3

pigoo3

Well-known member
Staff member
Admin
Joined
May 20, 2008
Messages
44,212
Reaction score
1,424
Points
113
Location
U.S.
Your Mac's Specs
2017 15" MBP, 16gig ram, 1TB SSD, OS 10.15
vikimaster said:
Well, I am sure management will say that nothing is wrong ( I work in hotel myself, so its always a denial kind of thing). I am working here, at this hotel myself....but staying in a staff accomodation.
Click to expand...

AHEM...HELLO. This may have been some great info to tell us in the beginning of the thread! So far you made it seem like you were some random foreign guest staying at this hotel. Now you tell us you're an employee of the hotel staying in staff accommodations. What the heck???

By the way (regardless of your relationship with this hotel)...are you going to try any of the suggestions I made...or are you going to stay "rooted" in your hotel room and continue beating your head against the wall with this problem??

- Nick
 
vansmith

vansmith

Senior Member
Joined
Oct 19, 2008
Messages
19,924
Reaction score
559
Points
113
Location
Queensland
Your Mac's Specs
Mini (2014, 2018, 2020), MBA (2020), iPad Pro (2018), iPhone 13 Pro Max, Watch (S6)
I think this conversation has run its course. vikimaster, you've received a significant amount of advice & this conversation, at this point, is going in circles and it doesn't seem like that pattern is going to break.
 
pigoo3

pigoo3

Well-known member
Staff member
Admin
Joined
May 20, 2008
Messages
44,212
Reaction score
1,424
Points
113
Location
U.S.
Your Mac's Specs
2017 15" MBP, 16gig ram, 1TB SSD, OS 10.15
Thread moved to Security Awareness forum.

- Nick
 
Status
Not open for further replies.

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top