2014 - Hawkdive

Sunday, September 7, 2014

How to remove Adware, Spyware and Trojan like Genieo, Conduit, Downlite or Spigot from Mac Browsers?Check your Browser Today because 90% of the Mac is infected.

Sunday, September 07, 2014 0
Those days have gone when people used to say " Mac does not get infected from Viruses, Malwares or Spywares".You should better check your browser right now to see if it is also infected with one of those threats.I bet your browser might be infected with Israeli Adware cum Spyware called Genieo ( and InstallMac, another name for the same software ), the most prolific Adware at this time.It has been in active distribution since January, 2013, with a very active Israeli company behind it. Although the installer is available through the company’s web site, it has also been seen numerous times being distributed through installers that pretend to be something they are not, such as fake Adobe Flash Player installers. This behavior has been blamed on third-party “partners” each time it has been observed.The uninstaller that comes with Genieo has never worked and is useless, it appears to remove the software but it leaves behind many active component in the system which keeps running in the background all the time and affected systems will be actively tracked for browsing behaviors, and legitimate Web sites will be hijacked with ad banners and other content that attempts to lure you into clicking it.

Genieo is a search engine program that will change your personal and default browser settings upon installation. Genieo is not usually considered a virus or malware program (although seventeen security solutions list the Mac version as adware), but uses the keywords you enter into the Genieo search engine to generate an excessive number of sponsored links and ads mixed in with your search results.

Adware has become a major issue on all operating systems, regardless of their vendor, mostly because potentially unwanted applications are frequently bundled with very popular freeware programs.

Most adware, Malware and spyware infections happen when Mac or PC users install computer programs developed by third-party programmers, called "freeware," and some examples are video downloaders, file converters or PDF-file generators.You might also have downloaded it from an ad in a page on some other site. The ad has a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.


If your system is infected with Genieo, your browser would have a homepage of Genieo search engine and would look something like shown in the following pictures.

or your Mac would have a small home icon in the top menu bar as shown in the Picture below.

or you would see an InstallMac's home page as shown in the Picture below.

More and more Mac OS X users are falling victim to various adware and spyware infections.Genieo is not the only Malware, there are plenty of these out there with different names some of these famous names are as following.

  • Awesome Screenshot
  • ChatZum
  • ClickAgent
  • Conduit
  • Codec-M
  • Deal Finder
  • Downlite
  • Delta-Search.com
  • FkCodec
  • Genieo
  • GoPhoto.it
  • Jollywallet
  • MacDeals
  • MacSter
  • Omnibar
  • PalMall, MacVX, MacShop, MacSmart, News Ticker Remover
  • Rvzr-a.akamaihd.net
  • Savekeep, saVe keeep, suave keepo, or anything similar
  • Searchme, Slick Savings, Amazon Shopping Assistant and/or Ebay Shopping Assistant 
  • Spigot
  • Trovi
  • Vidx, Viddxx, Vidox, Viidax, ViiDDx, or anything similar
  • Yontoo and/or Torrenthandler

If your Mac is infected with any of the above Malwares, Don't worry you just need to Run a small Adware Removal Tool and they all will be gone.
The best Adware Removal Tool is TSMART  from thesafemac.com which can be downloaded from http://www.thesafemac.com/art/ or Click here to Download

This tool is an AppleScript application designed to remove all known Mac adware.

How to use TSMART Adware Removal Tool

Step 1. Using this script is pretty easy, once you have opened it from download folder after downloading it. It pretty much does everything for you, with just a few questions along the way.I recommend to quit it from menu bar first because it is always running actively in the background so click on the Home icon in the menu bar on the upper right corner and select

Step 2. So now download it and then go to the Download folder in Finder.Open Folder TSM Adware Removal Tool it contains file TSM Adware Removal Tool.app.



First, the script will check for updates. If there’s a newer version of the script, you will be directed to download it. You can choose to continue using the script you already have, but should be aware that it’s probably always going to be in your best interests to use the most up-to-date version of the script.


Step 3. Next, you will be asked if you’re okay with closing your web browser(s). If you’re right in the middle of a lengthy post on some forum about the evils of adware and don’t want to lose it, you can opt out at this point, and run the script again later. If you’re okay with the script closing your browser(s), it will close them for you.

Step 4. From here, the script will begin removing any adware it finds. Adware components will be moved to the trash, rather than deleted outright, so that you can have the final say about deleting it.

Pic-33 (i)


Steps 5. Once it has cleaned all the Adware found then it would ask you either to empty the recycle bin or restart the computer to complete the removal process so take the action accordingly.

Step 6. There are just a couple cases where the script will need to ask you how to proceed. In the case of GoPhoto.it, your Firefox preferences file (prefs.js) may be infected with hundreds of kilobytes of GoPhoto.it-related JavaScript code. Deleting it is required to get rid of this adware, but this will cause you to lose some of your Firefox preferences. Thus, the script will ask you what to do. If you choose not to delete the prefs.js file, you can always run the script again later to remove it, or you can restore a clean file from backup or remove the malicious code manually.

delete launchd.conf? Some variants of the Genieo adware install files that, if removed improperly, can cause the  machine to freeze and to be unable to restart. Thus, if the primary culprit – the launchd.conf file – is found, and if it contains a malicious Genieo-related setting, the script will proceed cautiously. It will ask you if you want to delete this file. You can either choose to delete the file, or choose not to and edit it manually. Either way, you will need to restart the computer afterwards to make the change take effect. (The script will do this for you, after asking if that’s okay, if you choose to let it take care of removing this file.) After doing this, you can run the script a second time to remove the remaining components, which cannot be safely deleted while an infected launchd.conf file remains in the system.

Bottom line – pay attention to the messages you see, rather than just skipping past them, and you’ll be okay.

Method 2. ( Manual Removal )

WARNING: If you do not follow these directions exactly, you could cause your computer to freeze and it probably will not be able to restart and it is always advisable to back up all data. You must know how to restore from a backup even if the system becomes unbootable and if you don't know how to do this, follow the instructions mentioned on Apple support site on How to backup and restore your file.


1. First of all make sure you are logged in as an Administrator account.If the Genieo is installed you would see the “house” icon in the menu bar.Quit it by clicking on the house icon and then selecting Quit Genieo. Some variants of Genieo do not include a Genieo app, in which case this step is unnecessary.


If the app will not quit, or you do not see the house icon, open the Activity Monitor application (found in the Utilities folder in the Applications folder) and find the Genieo app. Select it, then click the toolbar button with a stop sign with an X in the middle to force it to quit.

2. Now delete /private/etc/launchd.conf file by moving it to trash.If you found it successfully and deleted this file, make sure you do NOT empty the trash at this point. In case you couldn’t find it, restrain from deleting any of the .dylib files listed in step 4.Failure to properly remove this file, if it is present, will result in your computer freezing and becoming unable to start up!

If you have run the Genieo uninstaller you won’t find the launchd.conf file because it removes the launchd.conf file and it is fine to move on to the next step.The launchd.conf file

3. If the launchd.conf file was found and deleted, restart the computer. Otherwise, proceed without restarting.

4. Now delete the following items by moving or dragging them to the trash. Some of them, including the Genieo application, may not be present; remove the ones that you do find.

/Applications/Uninstall Genieo
/Applications/Uninstall IM Completer.app
~/Library/Application Support/com.genieoinnovation.Installer/
~/Library/Application Support/Genieo/

5. Now restart the computer and move the following item to the trash, if present.
and now it is safe to empty the trash so clean it up.

6. Remove Omnibar extension- Now open Safari and go to Safari menu from top menu bar and select Reset Safari.And then click preferences under Safari menu.Click on extension tab and then select omnibar from left and click uninstall to remove Omnibar as shown in the picture-33(o).


7. Reset the Home Page, and possibly default search engine for your browser as shown in the picture-33(p).


Method 3 : Deleting Genieo from Mac OS X (Automatically)

1. Download the free removal tool from Bitdefender's website.

Bitdifender Adware removal for Mac

2. Open the tool and follow the simple instructions. This will delete all Genieo files and reset Safari, Chrome and Firefox automatically.

3. If required, restart your Mac.Reset the Home Page, and possibly default search engine for your browser.


Sources and Citations:

Read More

Wednesday, August 20, 2014

Fix Spotlight searching and indexing issue

Wednesday, August 20, 2014 0
Spotlight – Apple's system-wide search engine – was introduced way back in 2005 when OS X 10.4 Tiger was released.

Spotlight is a system-wide desktop search feature of Apple's OS X and iOS operating systems. Spotlight is a selection-based search system, which creates a virtual index of all items and files on the system.
It provides fast desktop searching by extracting metadata in the background and storing the indexed metadata for future searches. When a query is made, the indexed metadata is searched for matching files.

Spotlight is a very useful resource in finding documents because it has the ability to search for text within a document as well as text in the title. This process, however, must require a large amount of processing power and time.

You can access Spotlight from its menu bar icon or in any Finder window.It looks like a magnifying glass on the upper right hand side of the menu bar or you can press Command + Space Bar to show or hide the Spotlight Search field.

Spotlight starts finding files when you begin typing in the Spotlight search field. It will display applications, files, and folders whose names match your search criteria, as well as files that contain your criteria within them, such as in text documents, applications, emails, calendars, and more. For example, if you type "itunes", Spotlight will locate the iTunes application, as well as folders, System Preferences, and web searches that contain the text "itunes" or media files in them.

Spotlight Indexing

Spotlight does not find everything on its own it will only find the ones you have permission to view and access.Spotlight also ignores files in the trash, the ones inside zipped archives and disk image (.dmg) files. Time Machine backups are ignored, as are certain System files.

Sometimes Spotlight doesn't behave properly, or perhaps doesn't know about files or folders that have just been created. Sometimes, it just forgets about files on external drives.And this is very annoying situation.For example, I saved a file with the name delegate in my documents and when I search it in the Spotlight it just doesn't find it and returns the result as shown in the Pic- 31(b).

So when it does not work, you will need to rebuild the entire Spotlight index on your Mac.Here’s how to start the re-indexing process of an entire drive.

How to start the reindexing process of an entire drive

Method 1

  • Launch System Preferences from the Apple menu.
  • Click on “Spotlight” and then click on the “Privacy” tab.
  • Drag Macintosh HD (and other drives if necessary) into this window.


  • After it is dragged to this privacy box a confirmation dialog box appears.


  • Click “OK” when asked to confirm and wait for a minute.
  • Now select the drive(s) you just added and click the “-” minus button to remove it from the list.and your Mac will create a new Spotlight Index.

This also works for external drives that aren’t indexing properly. Just drag them into the window, then remove them. To check on the progress just click the spotlight icon (magnifying glass) in the menu bar.

If this doesn’t initiate reindexing of the drive, you may need to initiate it manually through the command line.

Method 2

Open Terminal from Applications/Utilities folder and use the following command string to rebuild the Spotlight index for your Mac.

sudo mdutil -E /

After pressing enter, you'll be required to enter your password (because this command runs as a super user). After you do that, you will notice after a few minutes that when clicking the Spotlight button in the menu bar, Spotlight will show that it is currently indexing your system.

Next type the following command and hit return and type the password when asked.

sudo mdutil -i on /

Spotlight will begin building the index within a few minutes of issuing this command.Also note, that usually re-indexing Spotlight can take a while. it may take 30 minutes to an hour or two.

This terminal method can also be used to re-index specific external drives on your Mac. To do this all you need to do is modify the ending of the above code. I’ll give an example. I have an external drive called MyExtDrive. To re-index it in Spotlight I’d type in:

sudo mdutil -E /Volumes/MyExtDrive/

If you have an external drive you want to re-index, just replace the “MyExtDrive” part with the name of your drive.

Method 3 - Final Method when nothing works

When nothing works and you have tried everything you need to use the following guaranteed way to re-enable Spotlight indexing.

1. Open up the Terminal (found in /Applications/Utilities/) and enter the following commands based on the need to either disable or reenable Spotlight indexing.

sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist

After the above mentioned command has executed the indexing is disabled.You’ll immediately notice that Spotlight is suddenly impotent, and returns only the generic “Search the Web” and “Search Wikipedia” options for each inquiry.

2. Now type the following command to Re Enable the spotlight indexing.

sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist

3. After running this command, restart the computer and you are done with the troubleshooting as your spotlight will start working normally.

1. To prevent a specific folder or file from being indexed by Spotlight, add a “.noindex” extension to it.
2. You can use Spotlight like a calculator--simply type a mathematical expression in the search field.
Read More

Thursday, August 14, 2014

Safari asks for Keychain access password everytime I open it.[ FIXED ]

Thursday, August 14, 2014 0
If you are using your MacBook for business purposes, you can save time by enabling the Safari Web browser’s AutoFill feature to automatically enter your personal information into Web page forms for you. For example, AutoFill can take care of your user name, password an credit card information when you log in to a site or enter your contact information into a form. However, if you want to prevent unauthorized people from using your MacBook and accessing pages with your personal information, you can disable the AutoFill feature.

What is Keychain and Keychain Access?

The keychain file stores a variety of information including a title, URL, notes and password. Only the passwords and Secure Notes are encrypted.A keychain can store all your passwords for applications, servers, and websites, or even sensitive information unrelated to your computer, such as credit card numbers or personal identification numbers (PINs) for bank accounts.

Keychain Access is a Mac OS X application that allows the user to access the Keychain and configure its contents, including passwords for websites, web forms, FTP servers, SSH accounts, network shares, wireless networks, encrypted disk images, etc.

The default keychain file is the login keychain, typically unlocked on login by the user's login password, although the password for this keychain can instead be different from a user’s login password, if changed for additional security.In Mac OS X, keychain files are stored in ~/Library/Keychains/, /Library/Keychains/, and /Network/Library/Keychains/, and the Keychain Access GUI application is located in the Utilities folder in the Applications folder.

The keychain can be set to be automatically "locked" if the computer has been idle for a specified time, and can be locked manually from the Keychain Access application. When locked, the password has to be re-entered next time the keychain is accessed, to unlock it. Overwriting the file in ~/Library/Keychains/ with a new one (e.g. as part of a restore operation) also causes the keychain to lock and a password is required at next access.

When you connect to a network server, open an email account, or access any password-protected item that is keychain-aware, your keychain can provide the password to it so you don't have to type the login password.

You start with a single keychain, which is created automatically the first time you log in to your Mac OS X user account. Your default keychain has the same password as your login password. This keychain is unlocked automatically when you log in to Mac OS X and is referred to in Keychain Access menus as the "login" keychain.

When keychain problems occur

Keychain problems occur when a user's login password does not match their keychain password.  This can be caused by using authentication methods other than the standard OS X local account system.For example, in your Office or University Mac you log in with your Domain or Exchange account credentials. However, when a user changes their Domain or Exchange password, or you reset your OS X log in password using OS X system recovery, Keychain does not recognize the change automatically

When the password used to log into the machine does not match the current keychain password, the keychain does not unlock for use with password management.  The user is able to log onto the machine, but applications that use the keychain system, such as Safari or Outlook, will give the user an error message stating that the application wants to use the "login" keychain.  It will ask for the keychain password.Pic-30(a) below shows a typical keychain request for Safari.

If a user clicks Cancel, the message will return again.  If a user clicks Cancel a second time, the message goes away and the application continues to open.  However, if the warning is cancelled, saved password information will not be available while using the application.

Changing your keychain password

When a keychain mismatch occurs, the user must change their keychain password to match the password used to log on to the machine.  To correctly change your keychain password, the user will use the application Keychain Access. Keychain Access is located in Applications\Utilities.

To change your keychain password:
  1. Select "login" under the list of keychains. 
  2. From the menu at the top of the screen, click Edit.
  3. Change password for keychain.
  4. Select Change Password for Keychain "login".
  5. Enter the current keychain password.  Remember that the "current" keychain password is the password previously used to log into the machine, before your most recent password change.
  6. Enter your new password and verify.  The new password you enter should match the password you used to log into the machine.

When Users cannot change their keychain password 

Sometimes a user will be unable to change their keychain password.  This can occur if a user forgets what their previous login password was. Also if a keychain has become corrupt, you will not be able to change it. In those instances, it may be necessary to manually delete and recreate your keychain.

WARNING!  Manually deleting your keychain will effectively erase all stored passwords on the machine.  You will have to re-enter passwords that are normally provided for you automatically.  Online passwords such as logging on to websites in Safari will have to be re-entered into your new keychain.

Manually deleting the keychain

Method 1.

This should only be attempted by advanced users or tech support personnel.

1. Delete the user’s login.keychain file (or move it to a different location). This can be found in the Keychains folder, which is located in the User’s Library folder.

safari keeps asking for login keychain password

2. Relaunch Safari, or the afflicted app. On relaunch you will be presented with the ‘Keychain Not Found’ dialog box which states that ‘A Keychain cannot be found to store “Safari” [or other app]‘. Click ‘Reset To Defaults’.
safari keeps asking for login keychain password
Reset the keychain to default

3. A dialog asking you to confirm the keychain reset appears. Click “Yes”.

safari keeps asking for login keychain password
Reset the keychain to default
4. Finally you will be prompted to enter the user’s login password in order to create the new keychain. Do so and click ‘OK’.

safari keeps asking for login keychain password
safari keeps asking for login keychain password

5. Relaunch Safari or the afflicted app. That’s it! Problem solved and no more dialog boxes.

Method 2.

1. Open Keychain Access (located in /Applications/Utilities).
2. Go to the File menu and select Delete Keychain "Login.".

Safari keeps asking for login keychain password
Safari keeps asking for login keychain password

3. A confirmation dialog box appears/Select "Delete References & Files"

Safari keeps asking for login keychain password
Safari keeps asking for login keychain password
4.Now quit the Keychain and you will no longer be bugged by Keychain password prompts.

Important Note: If a network or mobile account password is changed by an administrator, or if the password expires as part of a directory security policy, the keychain must be updated upon next login. In most cases the OS will prompt the user with the message "The system was unable to unlock your login keychain", followed by these options…

Continue Log In;
Create New Keychain;
Or, Update Keychain Password (default and recommended choice).
In this scenario also you should update or change your Keychain Password.

Safari saves user names, passwords, and credit card information in your OS X keychain. If you set up your Mac and other devices for iCloud Keychain, iCloud pushes all that information to your other devices’ keychains.

Important: Safari autofills your information for anyone you let use your Mac. If you set up iCloud Keychain on your Mac and other devices, Safari also autofills your information for anyone you let use those devices.
For security, set up your Mac to display the login window when it starts up and to require a password after sleep or a screen saver begins. Set up your iOS devices to require a passcode to unlock the screen.

Issue: Safari asks for keychain login password everytime I open it when you know the correct password.

Safari keeps asking for login keychain password
Safari keeps asking for login keychain password

Reason 1. The problem is that your "login" keychain is locked. So, every time Safari wants to access it (for whatever reason), it has to get a password to temporarily unlock it. But, if you keep "login" unlocked permanently, your problem will be solved. Here are steps to permanently unlock your keychain:

1. Open Keychain Access (located in /Applications/Utilities)
2. Go to the "Keychain Access" menu and select "Preferences"
3. Click the "First Aid" tab
Safari keeps asking for login keychain password
Safari keeps asking for login keychain password

4. Make sure the "Synchronize login keychain password" box is checked
5. Close the Preferences window
6. Go to the "Keychain Access" menu and select "Keychain First Aid"
Safari keeps asking for login keychain password
Safari keeps asking for login keychain password
7. Enter your username and password
8. Click the "Repair" button and click "Start".

Safari keeps asking for login keychain password
Safari keeps asking for login keychain password
9. Now, the password for 'login' will be the same as the password for your account.
10. Go to the "File" menu and select "Unlock Keychain 'login'".

11. Type your account password and then press OK.
12. You are done! Safari shouldn't ask you for a keychain password, and neither should any application, for that matter.

Reason 2. Your Keychain preference files may be corrupted. Locate this file 


Drag that file from your Preferences folder to the Trash and restart your Mac.You need not to fear losing the data stored in your keychain when you move/Trash this file. The com.apple.keychainaccess.plist file doesn’t contain any of your keychain data.

If that doesn't help...

1) Quit Safari.
2) Open Keychain Access. (Applications/Utilities) Find the "Safari AutoFill" item. Delete it.
Safari keeps asking for login keychain password
Safari keeps asking for login keychain password

3) Relaunch Safari. Next time it asks for authorization, click "Always Allow".

If Safari is set to automatically fill in forms for you, you can turn off this feature and delete any information that Safari stored.

  • Open Safari if it is not already open.
  • Choose Safari > Preferences, and then click AutoFill.
  • Click the three check boxes next to the “Using Info from my Contacts Card,” “User Names and Passwords” and “Other Forms” options to uncheck them. This prevents Safari from using AutoFill when you visit websites that have forms for you to fill in.
Now next to “Other forms,” click Edit.
A list of websites where you normally fill in information such as your name and email address appears.
Select individual websites and click Remove, or click Remove All.
Click Done.

Note: If above shown method does no good (though I’m not sure why it wouldn’t), launch Keychain Access, choose Preferences from the Keychain Access menu, and in the General tab of the resulting window, click the Reset My Default Keychain button. You’ll be prompted for your administrator’s password. When you choose this option your old default keychain (which is likely the “login” keychain) is renamed and a new empty login keychain is created. You do this simply to get a fresh start. All your old keychain entries will be gone, so we’ll hope that you’ve written down your passwords and login information so you can reenter them when prompted.
Safari keeps asking for login keychain password
Safari keeps asking for login keychain password

Read More

Monday, August 11, 2014

Can not see Clear History in the history menu of Safari on Mac.

Monday, August 11, 2014 0


If you have a habit of clearing history of safari from History menu in just one click but all of a sudden you can not find the clear history option in the history menu of Safari on mac.Follow the below mentioned step to fix this issue.

Step 1. You should first check if the Private browsing is enabled Private Browsing. Private Browsing keep Safari from saving your browsing history.So uncheck the Private Browsing from the Safari menu.

When you uncheck the Private Browsing option it will ask for the confirmation so click on OK to turn it off.

Step 2. Click on the Safari menu and select Preferences and then under preferences click on the general tab then under general change the value for Remove history items to Manually as shown in the picture- 28(d) below.

Restart the Mac and then check Safari , now you should see clear history under history menu of Safari.

Tips: Sometimes resetting the safari also fixes these small issues so you could also try resetting the safari directly.

Sometimes the Empty Cache option is disappeared from the Safari or you can not see the develop menu in the Safari menu bar.So here is the step to bring the Develop menu back in safari.


Display the Develop Menu In Safari

  • Launch Safari, located at /Applications/Safari.
  • Open Safari’s Preferences by selecting ‘Safari, Preferences’ from the menu.
  • Click the ‘Advanced’ tab labeled.
  • Place a check mark next to ‘Show Develop menu in menu bar.’

Enable Develop menu in Safari

The Develop menu will appear between the Bookmarks and Window menu items. The Develop menu is particularly handy for web developers, but casual users may also find the first two items extremely helpful in their daily browsing. The ‘Open Page With’ menu item lets you select any installed browser to reopen an open web page from within Safari. The ‘User Agent’ menu item lets you see how an open web page looks in a variety of Mac and Windows browsers and versions.

Read More

Saturday, August 2, 2014

How to disable faulty CD\DVD Drive from your Mac OS X?

Saturday, August 02, 2014 3

Disable the faulty CD\DVD Drive from its operation

If your Mac's CD\DVD drive is not working, its malfunctioning, creating screechy noise or if the drive is broken and makes angry noises when it spins up, the noise is becoming a problem when using your computer in class or if you want to disable the CD\DVD drive on your Mac completely for security reasons then here is the solution for disabling the CD\DVD drive on your Mac completely.
Drive drive showing in Disk Utility
CD\DVD Drive in Disk Utility

To disable faulty DVD/CD drive on Mac OS X

1.Go to /System/Library/ by clicking on the Go in Finder menu bar and then Selet the Go to folder and type /System/Library/ and click go.
2. Open Extensions folder and look for file IODVDStorageFamily.kext and IOCDStorageFamily.kext.
3. Copy both the files to a folder so the you can re-enable CD\DVD on your Mac when you want.
5. Now move the IODVDStorageFamily.kext and IOCDStorageFamily.kext file from /System/Library/Extensions/ to the new folder.If you can not move it due to any reason drag and drop it to the new folder to copy it.After copying it simply delete it and send to trash.
6. Now reboot the computer and it will be gone.

To Re-Enable DVD/CD drive in Mac OS X

Simply Move both the .kext file ( IODVDStorageFamily.kext and IOCDStorageFamily.kext  ) back to "/System/Library/Extensions," and then reboot the computer to make the CD/DVD drive active again.
If you can not move it due to any permission issues.So, instead of moving, rename the extension to .kexta (converts the file from a package to a folder ), and then rename it back to .kext.

Tip: What to do to eject a stuck CD or DVD from the optical drive
Ejecting the stuck disc can usually be done in one of the following ways:
1. Restart the computer and after the chime press and hold the left mouse button untill the disc ejects.
2. Click on the Eject button in the menubar.
3. Press COMMAND-E.
4. Click the eject icon in the Finder's sidebar.
5. If none of the above work try this:Open the Terminal from Utilities folder.At the prompt enter or paste the following:

/usr/bin/drutil eject

If this fails then try this:

Boot the computer into Single user mode.At the prompt enter the same command as used above.To restart the computer enter "reboot" at the prompt without quotes.

And finally if that all does not work look for a small mechanical eject hole on the edge of the DVD drive.Insert a Straightened paper-clip straight to the hole.and it will eject the drive tray.
For a detailed troubleshooting go to "How to eject CD\DVD drive in Mac".

*******End of Article*******

disable CD dvd drive,Disable CD dvd drive on mac,stop cd dvd drive from making noise,
Read More

Thursday, July 31, 2014

How to fix Print Queue, print spooler or printer driver issue?

Thursday, July 31, 2014 0

Each print server ( Computer which has Printer driver installed ) has a single print spooler service, which manages all the print jobs and print queues on that server.Print spooler service is a service which gives the print command to printer. It is manage the multiple print commands and gives to the print one by one when last print is done. Printer spooler service works with two system files spoolss.dll / spoolsv.exe and one Print spooler service but to keep print spooler service ups and running you must also have two dependencies services running which are RPC and Upnp.


One of following error may occurs when give the print command.

  1. Local print spooler is not running. please restart the spooler.
  2. Print spooler is not working.
  3. Print spooler won’t start.
  4. Printer spooler service can’t start.
  5. Print Spooler service getting the error message while printing.
  6. Says, start the print spooler service first, then try to print again.
  7. Spooler Sub -System App has encountered a problem & needs to close.
  8. Operation could not be completed. The print spooler service is not running.
  9. Print Spooler Error 1068 – The Dependency Service Can’t Start.
  10. Operation could not be completed. The print spooler service is not running.
  11. Spooler subsystem app has encountered a problem and needs to close.
  12. Error 1068: The dependency service or group failed to start


There are lots of causes of “print spooler is not working” issue. Actually, most of the Viruses and Trojans does target the “print spooler service” to corrupt. they can also corrupt the registry of print spooler service because Print spooler service is only the one service which will effect most of the users who use the printer. Users wants to take print out however they getting the error message “Print spooler service has stopped please restart the service, the local print spooler is not running. please restart the spooler”.

Batch file Commands
net stop spooler
del /F /q %SYSTEMROOT%\system32\spool\PRINTERS\*.*
net start spooler

Fix It yourself Manually 
Solution 1
1. Stop the Print spooler service in command line
  • Click on start and expand allprograms and then got to “accessories” here you will see command prompt, right click on command prompt and then choose the option “run as Administrator“, a black command line will be opened.
  • Now type the following command in the command line.
  • Type 'net start spooler' without quotes and look carefully what message you have.
  • If it is Error 1068 "The dependency service or group failed to start" then type the following in the same window: sc config spooler depend= RPCSS (there must be a space after "=" but not before it.)
  • If it is "The required service has been already started" or "The print spooler service started successfully" but you still get error when trying to print - go next.
2. Remove your old printer drivers, then stop print spooler service.
3. Locate spooler files spoolsv.exe and spoolss.dll in system32 folder.

4. Download these files from dll archive site from the web or copy from your friends PC.Replace both the files in system32 folder with downloaded ones.

5.Delete the files which are in spool>>printers folder,

  • Open this following path
  • c:\windows\system32\spool\printers
  • Then delete all the files which are located in spool>>printers folder.
6. Start the print spooler service in command line and install latest drivers downloaded from the web.

  • Click on start and expand all programs and then got to “accessories” here you will see command prompt, right click on command prompt and then choose the option “run as Administrator“, a black command line will be opened.
  • Start>>All programs>>Accessories>>Command Prompt.exe
  • Now type the following command in the command line
  • Net start spooler

Solution 2
1. First stop the Print spooler service in services page.
Do right click on my computer icon and then click on manage, a windows will be opened, now find and click on services & application then click on services now in the right pane you will see print spooler service now click twice on that (Double click) and then click on STOP button.
2. Delete the files which are in spool>>printers folder

  • Open this following path
  • C:\windows\system32\spool\printers
  • Delete all the files which are located in spool>>printers folder.

3. Start the service in services page
Do right click on my computer icon and then click on manage, a windows will be opened, now find and click on services & application then click on services now in the right pane you will see print spooler service now click twice on that (Double click) and then click on START button.

Step 2: Delete the spool printer and driver files

In safe mode, delete the spool printer and driver files. To do this, start Microsoft Windows Explorer, and then delete all the files and the folders in the following two folders (where C: is the drive where Windows XP is installed):

Step 3: Edit the registry

Warning: Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

First, remove the Windows NT subkeys

Remove the potentially problematic registry entries for Windows NT x86 service subkeys. These may have been installed by third-party printer setup programs and may be interfering with the print spool service. Follow these steps to keep the drivers, print spools, and registry entries that were included with Windows and to remove all other drivers, print spools, and registry entries that may be causing issues.
Start Registry Editor. To do this, click Start, click Run, type regedit in the Open box, and then click OK.
Locate and expand the following registry key to view the list of subkeys (subfolders):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86
In the subkey list, there should only be the following subkeys:
Print Processors
If there are any subkeys other than the subkeys that are listed in step 2, follow these steps:
On the File menu, click Export.
In the File Name box, type the name that you want to use for this key, such as WindowsNTx86regkey, and then click Save.

You can use this backup of the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86
registry key to restore the key if you experience any issues after you complete this procedure.
Delete all the subkeys other than the subkeys that are listed in step 2. To do this, right-click each subkey that is not displayed on the list, and then click Delete. Click Yes when you are prompted to confirm the deletion.

Second, remove registry entries for the default print monitors

Remove the potentially problematic print monitor subkeys that may be interfering with the printer that you want to use. These may have been installed by third-party printer setup programs. Follow these steps to keep the print monitors and registry entries that were included with Windows and to remove all other print monitors and registry entries that may be causing issues.

1. Start Registry Editor if it is not already open. To do this, click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then expand the following registry key to view the list of subkeys:
In the list of subkeys, there should only be the following subkeys for the default print monitors:
  • BJ Language Monitor
  • Local Port
  • PJL Language Monitor
  • Standard TCP/IP Port
  • USB Monitor

3. If there are any subkeys other than the subkeys that are listed in step 2, follow these steps:

  • On the File menu, click Export.
  • In the File Name box, type the name that you want to use for this key, such as Monitorsx86regkey, and then click Save.
  • You can use this backup of the
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors
  • registry key to restore the key if you experience any issues after you complete this procedure.
  • Delete all the subkeys other than the subkeys that are listed in step 2. To do this, right-click each subkey that is not displayed on the list, and then click Delete. Click Yes when you are prompted to confirm the deletion.
4.  Now browse through for the following registry path

  • HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ Spooler
  • In the right side pane, twice click on the DependOnService value
  • Erase the current data, and after that type RPCSS only
  • Close registry editor
  • Delete any existing jobs in the spool folder (might be one of print job gone corrupt) C:\WINDOWS\system32\spool\PRINTERS.
  • Restart the computer
  • Exit Registry Editor.

If a printer is attached to the computer, disconnect the printer cable from the computer, and then restart the computer.

Step 4: Install the printer and print a test page

Reconnect the printer cable to the computer, install the printer according to the manufacturer’s instructions, and then try to print a test page.

In Windows XP

Sometimes in Windows Xp this issue could also be related to XP's data execution preventionWhere you need to add the print spooler service to the excluded list.

  • Go to System Properties>Advanced
  • Select Performance>Settings
  • Select Data Execution Prevention
  • Select Turn on DEP for all programs and services except those I select
  • Click Add
  • Paste this in to the file name box of the window that opens:
  • C:\WINDOWS\system32\spoolsv.exe
  • Select Open,Select OK when you receive the warning
  • Select Apply.

And you will be printing again. Good luck.

Try Microsoft Spooler Fix It - it can redeem some types of spooler errors.
Use HP Print Diagnostic Utility for HP printers.
Small tricks that can help in fixing issue:
press win r on your keyboard
type in "regedit" without quotes
locate this tree node HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler
to the right-hand side of the window locate “imagepath” icon
double-click on it and type in C:\WINDOWS\system32\spoolsv.exe
press enter

People also read following top most searched issue

Read More