Version 9.4 Now Available

I installed the 9.4 and I'm now getting prompts (not sure exactly when or what triggers these) from Little Snitch to allow SophosConfigD via "macep.feedback.sophos.com" on Port 443.

That's not something I ever encountered with the previous version. Can you please explain what its purpose is. What data from my system is being sent outbound back to Sophos?

Bob, I'd really like to get an answer to this question. I hadn't been allowing ConfigD (via Little Snitch) and when I mounted an external drive, Intercheck was pinning the CPU at close to 100%, and everything was almost frozen. Then when I tried to force quit Intercheck to stop the freezing, I got a kernel panic.

None of this happens if I allow ConfigD, which I was forced into doing to avoid the freezing when an external is mounted.

I still want to know what ConfigD is doing and what, if any, data it's phoning home with.

Also, new problem with the 9.4. Couldn't install an Office 2011 security update. Intercheck was pinning the CPU and wouldn't let go. Had to force quit Intercheck. I am thinking that this 9.4 is more trouble than it's worth.

I've uninstalled the 9.4 and reverted to the 9.2.7 until the bugs get worked out.

I'm also having too many problems with 9.4, and would like to revert back to 9.2.7. Does anyone have, or know where I can download version 9.2.7?

I don't think the ConfigD behavior is related to the panic. Forcefully killing InterCheck could cause a panic (InterCheck uses a kernel driver to do some of its work). Seems bizarre. Can you get a sample of InterCheck (rather than killing it) so we can see what it might be up to.

I'll post a top-level article about the information the product sends to Sophos, including the new changes in 9.4. I completely understand why this is a sensitive issue.

>>Can you get a sample of InterCheck (rather than killing it) so we can see what it might be up to.

Bob, I've decided to stay with the 9.2.7 until the update to 9.4.x becomes unavoidable. Perhaps this issue will be resolved at your end by then. For now, the Intercheck problem is too much of a hassle. When I'm on the 9.4.x again, I can get you a sample of Intercheck from Activity Monitor, if and when I have to do an Office update, or if some other update or who knows what makes Intercheck go nuts--that is, if it causes the same problem,which, hopefully it won't.

No idea why, but I definitely had to allow SophosConfigD to connect, from Little Snitch, if there was an external drive mounted. If not, Intercheck went bananas with the CPU.

 

OK Bob, got the 9.4 yesterday. With the new 9.4, Intercheck is still going nuts, using 100%+ of one of two CPU cores. Can't do anything while this is going on. Had to turn off scanning.  Had two external volumes mounted, with one of them opened, which appeared to cause this. Not sure if it's the only scenario which makes this happen.

EDIT: workaround for now is to exclude those two volumes.

Here's the AM sample for Intercheck while this was going on.

Analysis of sampling InterCheck (pid 188) every 1 millisecond
Process:         InterCheck [188]
Path:            /Library/Sophos Anti-Virus/InterCheck.app/Contents/MacOS/InterCheck
Load Address:    0x18000
Identifier:      InterCheck
Version:         ??? (???)
Code Type:       X86 (Native)
Parent Process:  launchd [1]

Date/Time:       2015-09-25 10:06:41.473 -0400
OS Version:      Mac OS X 10.8.5 (12F2560)
Report Version:  7

Call graph:
    2605 Thread_1428   DispatchQueue_1: com.apple.main-thread  (serial)
    + 2605 start  (in InterCheck) + 53  [0x195c5]
    +   2605 main  (in InterCheck) + 1040  [0x1adfb]
    +     2605 CFRunLoopRun  (in CoreFoundation) + 129  [0x99be1ab1]
    +       2605 CFRunLoopRunSpecific  (in CoreFoundation) + 378  [0x99bd201a]
    +         2605 __CFRunLoopRun  (in CoreFoundation) + 1247  [0x99bd295f]
    +           2605 __CFRunLoopServiceMachPort  (in CoreFoundation) + 185  [0x99bccf79]
    +             2605 mach_msg  (in libsystem_kernel.dylib) + 68  [0x9873acac]
    +               2605 mach_msg_trap  (in libsystem_kernel.dylib) + 10  [0x9873b7ce]
    2605 Thread_1541   DispatchQueue_2: com.apple.libdispatch-manager  (serial)
    + 2605 _dispatch_mgr_thread  (in libdispatch.dylib) + 53  [0x98b697a9]
    +   2605 _dispatch_mgr_invoke  (in libdispatch.dylib) + 993  [0x98b69c71]
    +     2605 kevent  (in libsystem_kernel.dylib) + 10  [0x9873e9ae]
    2605 Thread_2416
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2417
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2418
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 2037  [0x29e75]
    +       2605 CISavi3_SweepStream  (in SAVI) + 313  [0x27d899]
    +         2605 CIScanner_SweepStream  (in SAVI) + 212  [0x3855b4]
    +           2605 sweepStreamCommon  (in SAVI) + 618  [0x3873ba]
    +             2605 sweepThing  (in SAVI) + 1876  [0x387bc4]
    +               2605 VEEX4_SweepStreamWithPUA  (in SAVI) + 138  [0x1f3bda]
    +                 2605 VEEX_SweepStream  (in SAVI) + 273  [0x1fd551]
    +                   2605 RecurseInStream  (in SAVI) + 10343  [0x1f8097]
    +                     2605 CLEX_Classify  (in SAVI) + 1035  [0xa6e3b]
    +                       2605 VDLE_CLMETH_Classify  (in SAVI) + 602  [0xbe9aa]
    +                         2605 WalkIdList  (in SAVI) + 2223  [0xbfc6f]
    +                           2605 check_for_rest_of_virus  (in SAVI) + 96  [0xbdca0]
    +                             2605 fopsPushFileLength  (in SAVI) + 42  [0x322eda]
    +                               2605 update_stream_length  (in SAVI) + 95  [0xc24df]
    +                                 2605 HNDL_STREAM_GetLength  (in SAVI) + 71  [0x1a2707]
    +                                   2605 SARC_STREAM_GetLength  (in SAVI) + 217  [0x1cdd19]
    +                                     2605 SARCgetLength  (in SAVI) + 72  [0x152858]
    +                                       2605 SARClseek  (in SAVI) + 296  [0x152678]
    +                                         2368 SARCbzip2Continue  (in SAVI) + 251  [0x12814b]
    +                                         ! 1826 BZ2_bzDecompress  (in SAVI) + 3561  [0x258dd9]
    +                                         ! : 1820 BZ2_decompress  (in SAVI) + 8670,6113,...  [0x25672e,0x255d31,...]
    +                                         ! : 4 BZ2_decompress  (in SAVI) + 5535  [0x255aef]
    +                                         ! : | 4 BZ2_hbCreateDecodeTables  (in SAVI) + 91,80,...  [0x2571db,0x2571d0,...]
    +                                         ! : 2 BZ2_decompress  (in SAVI) + 1599  [0x254b8f]
    +                                         ! :   2 SVMM_bzalloc  (in SAVI) + 81  [0x1284b1]
    +                                         ! :     2 malloc  (in libsystem_c.dylib) + 53  [0x9148cfe7]
    +                                         ! :       2 malloc_zone_malloc  (in libsystem_c.dylib) + 9  [0x9148c569]
    +                                         ! 542 BZ2_bzDecompress  (in SAVI) + 3075,2825,...  [0x258bf3,0x258af9,...]
    +                                         183 SARCbzip2Continue  (in SAVI) + 421  [0x1281f5]
    +                                         ! 181 SARCoutputbytes  (in SAVI) + 671  [0x15305f]
    +                                         ! : 181 HNDL_STREAM_WriteStream  (in SAVI) + 207  [0x1a242f]
    +                                         ! :   179 TEMP_STREAM_WriteStream  (in SAVI) + 1437  [0x1d5add]
    +                                         ! :   | 178 HNDL_STREAM_WriteStream  (in SAVI) + 207  [0x1a242f]
    +                                         ! :   | + 174 HOST_STREAM_WriteStream  (in SAVI) + 411  [0x1a430b]
    +                                         ! :   | + ! 173 VENG_write  (in SAVI) + 53  [0xa2935]
    +                                         ! :   | + ! : 173 __write  (in libsystem_kernel.dylib) + 10  [0x9873f44a]
    +                                         ! :   | + ! 1 DYLD-STUB$$write$UNIX2003  (in SAVI) + 0  [0x5291b2]
    +                                         ! :   | + 3 HOST_STREAM_WriteStream  (in SAVI) + 399,465  [0x1a42ff,0x1a4341]
    +                                         ! :   | + 1 HOST_STREAM_WriteStream  (in SAVI) + 88  [0x1a41c8]
    +                                         ! :   | +   1 ABST_STREAM_Pr_PreWriteStream  (in SAVI) + 19  [0x17e273]
    +                                         ! :   | 1 HNDL_STREAM_WriteStream  (in SAVI) + 253  [0x1a245d]
    +                                         ! :   1 TEMP_STREAM_WriteStream  (in SAVI) + 91  [0x1d559b]
    +                                         ! :   | 1 ABST_STREAM_Pr_PreWriteStream  (in SAVI) + 251  [0x17e35b]
    +                                         ! :   1 TEMP_STREAM_WriteStream  (in SAVI) + 1560  [0x1d5b58]
    +                                         ! 2 SARCoutputbytes  (in SAVI) + 401  [0x152f51]
    +                                         !   1 HNDL_STREAM_TellStream  (in SAVI) + 71  [0x1a2667]
    +                                         !   | 1 ABST_STREAM_IsOpenStream  (in SAVI) + 23  [0x17e157]
    +                                         !   1 HNDL_STREAM_TellStream  (in SAVI) + 0  [0x1a2620]
    +                                         50 SARCbzip2Continue  (in SAVI) + 735  [0x12832f]
    +                                         ! 49 SARCinputBytes  (in SAVI) + 646  [0x152d06]
    +                                         ! : 46 HNDL_STREAM_ReadStream  (in SAVI) + 220  [0x1a22ec]
    +                                         ! : | 46 BUFF_STREAM_ReadStream  (in SAVI) + 271  [0x185f4f]
    +                                         ! : |   46 streamBuffGet  (in SAVI) + 208  [0x1daea0]
    +                                         ! : |     46 HNDL_STREAM_ReadStream  (in SAVI) + 220  [0x1a22ec]
    +                                         ! : |       46 LinkStream_ReadStream  (in SAVI) + 179  [0x27ff63]
    +                                         ! : |         40 CISaviStream2_ReadStream  (in InterCheck) + 135  [0x22ddd]
    +                                         ! : |         + 39 send$UNIX2003  (in libsystem_c.dylib) + 54  [0x914fcbee]
    +                                         ! : |         + ! 39 __sendto  (in libsystem_kernel.dylib) + 10,26,...  [0x9873dce2,0x9873dcf2,...]
    +                                         ! : |         + 1 send$UNIX2003  (in libsystem_c.dylib) + 0  [0x914fcbb8]
    +                                         ! : |         5 CISaviStream2_ReadStream  (in InterCheck) + 197  [0x22e1b]
    +                                         ! : |         + 5 recv$UNIX2003  (in libsystem_c.dylib) + 54  [0x914fcbb3]
    +                                         ! : |         +   5 __recvfrom  (in libsystem_kernel.dylib) + 10,0  [0x9873db3e,0x9873db34]
    +                                         ! : |         1 CISaviStream2_ReadStream  (in InterCheck) + 238  [0x22e44]
    +                                         ! : |           1 memmove$VARIANT$sse3x  (in libsystem_c.dylib) + 811  [0x9145d589]
    +                                         ! : 2 HNDL_STREAM_ReadStream  (in SAVI) + 95  [0x1a226f]
    +                                         ! : | 1 BUFF_STREAM_SeekStream  (in SAVI) + 116  [0x1862b4]
    +                                         ! : | + 1 ABST_STREAM_Pr_PreSeekStream  (in SAVI) + 13  [0x17e37d]
    +                                         ! : | 1 BUFF_STREAM_SeekStream  (in SAVI) + 1  [0x186241]
    +                                         ! : 1 HNDL_STREAM_ReadStream  (in SAVI) + 1  [0x1a2211]
    +                                         ! 1 SARCinputBytes  (in SAVI) + 591  [0x152ccf]
    +                                         !   1 HNDL_STREAM_TellStream  (in SAVI) + 71  [0x1a2667]
    +                                         !     1 ABST_STREAM_IsOpenStream  (in SAVI) + 45  [0x17e16d]
    +                                         3 SARCbzip2Continue  (in SAVI) + 568,738,...  [0x128288,0x128332,...]
    +                                         1 SARCbzip2Continue  (in SAVI) + 504  [0x128248]
    +                                           1 BZ2_bzDecompressEnd  (in SAVI) + 75  [0x258e4b]
    +                                             1 SVMM_bzfree  (in SAVI) + 35  [0x1284f3]
    +                                               1 free  (in libsystem_c.dylib) + 217  [0x9148cd30]
    +                                                 1 free_large  (in libsystem_c.dylib) + 108  [0x914947f4]
    +                                                   1 madvise  (in libsystem_kernel.dylib) + 10  [0x9873eaaa]
    2605 Thread_2419
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2420
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2421
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2422
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2424
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2432
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2433
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 ic_worker_thread  (in InterCheck) + 946  [0x29a32]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2436: com.apple.CFSocket.private
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 __CFSocketManager  (in CoreFoundation) + 1632  [0x99c16650]
    +       2605 __select  (in libsystem_kernel.dylib) + 10  [0x9873dbe6]
    2605 Thread_2446
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2447
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2448
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2449
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2450
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2451
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2452
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2453
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2454
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2455
    + 2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
    +   2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
    +     2605 startThread  (in SAVI) + 167  [0x3df537]
    +       2605 SXLThread  (in SAVI) + 366  [0x3684ae]
    +         2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
    +           2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]
    2605 Thread_2456
      2605 thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
        2605 _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
          2605 startThread  (in SAVI) + 167  [0x3df537]
            2605 SXLThread  (in SAVI) + 366  [0x3684ae]
              2605 SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
                2605 __sem_wait  (in libsystem_kernel.dylib) + 10  [0x9873ef42]

Total number in stack (recursive counted multiple, when >=5):
        22       _pthread_start  (in libsystem_c.dylib) + 344  [0x914725b7]
        22       thread_start  (in libsystem_c.dylib) + 34  [0x9145cdce]
        11       SAVIplatWaitSemaphore  (in SAVI) + 222  [0x3e0d7e]
        11       SXLThread  (in SAVI) + 366  [0x3684ae]
        11       __sem_wait  (in libsystem_kernel.dylib) + 0  [0x9873ef38]
        11       startThread  (in SAVI) + 167  [0x3df537]
        10       __select  (in libsystem_kernel.dylib) + 0  [0x9873dbdc]
        9       ic_worker_thread  (in InterCheck) + 946  [0x29a32]

Sort by top of stack, same collapsed (when >= 5):
        __sem_wait  (in libsystem_kernel.dylib)        28655
        __select  (in libsystem_kernel.dylib)        26050
        kevent  (in libsystem_kernel.dylib)        2605
        mach_msg_trap  (in libsystem_kernel.dylib)        2605
        BZ2_decompress  (in SAVI)        1820
        BZ2_bzDecompress  (in SAVI)        542
        __write  (in libsystem_kernel.dylib)        173
        __sendto  (in libsystem_kernel.dylib)        39
        __recvfrom  (in libsystem_kernel.dylib)        5

Binary Images:
   0x18000 -    0x35ff3 +com.sophos.sav.ic (9.4.0 - ???) <3407918A-CDC7-3EAD-8581-CE0633FD9853> /Library/Sophos Anti-Virus/InterCheck.app/Contents/MacOS/InterCheck
   0x4f000 -    0x80ffb +com.sophos.sum.scan.kit (??? - ???) <F964F7EC-552A-3ECF-B29F-CCBFE2B509E8> /Library/Frameworks/SUMScanKit.framework/Versions/A/SUMScanKit
   0xa1000 -   0x594ffb +com.sophos.sav.savi (2.07.361.0 - 2.07.361.0) <6E9CBCCF-9EB8-3A3F-81F4-6328F6C1A041> /Library/Frameworks/SAVI.framework/Versions/A/SAVI
 0x1f27000 -  0x1f4bfff  com.apple.security.csparser (3.0 - 55719.16.12) <E9E01536-91E6-3DB3-BDF6-7CC513D4D014> /System/Library/Frameworks/Security.framework/PlugIns/csparser.bundle/Contents/MacOS/csparser
0x8fe17000 - 0x8fe49e57  dyld (210.2 - ???) <4D38DEED-9837-3202-B8E9-41272D01EA2C> /usr/lib/dyld
0x90059000 - 0x90c15ff3  com.apple.AppKit (6.8 - 1187.40) <94E92235-7AD9-37EF-9B7C-B79074762370> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x90c16000 - 0x90c16fff  com.apple.Accelerate.vecLib (3.8 - vecLib 3.8) <E54083A7-7467-3C3C-B30F-EE14C8D781A1> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x90c17000 - 0x90cc6ff7  com.apple.CoreText (275.18 - ???) <B9B81356-9206-3215-AAC5-CFB74566E64E> /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText
0x90cc7000 - 0x90d15ffb  libFontRegistry.dylib (??? - ???) <0F11672E-891C-3209-8498-0123AE39080D> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib
0x90d16000 - 0x90d1dfff  liblaunch.dylib (442.26.2 - compatibility 1.0.0) <310C99F8-0811-314D-9BB9-D0ED6DFA024B> /usr/lib/system/liblaunch.dylib
0x91097000 - 0x911a4057  libobjc.A.dylib (228.0.0 - compatibility 1.0.0) <FA455371-7395-3D58-A89B-D1520612D1BC> /usr/lib/libobjc.A.dylib
0x911f0000 - 0x911f1fff  libsystem_sandbox.dylib (??? - ???) <CAD3A969-8AC4-36E9-98D1-6A78F17361EF> /usr/lib/system/libsystem_sandbox.dylib
0x911f2000 - 0x911f3fff  libDiagnosticMessagesClient.dylib (??? - ???) <39B3D25A-148A-3936-B800-0D393A00E64F> /usr/lib/libDiagnosticMessagesClient.dylib
0x911f4000 - 0x911f7ff7  libcompiler_rt.dylib (30.0.0 - compatibility 1.0.0) <CE5DBDB4-0124-3E2B-9105-989DF98DD108> /usr/lib/system/libcompiler_rt.dylib
0x91275000 - 0x91431ffd  libicucore.A.dylib (49.1.0 - compatibility 1.0.0) <FF55E176-7D66-3DBB-AF86-84744C47A02C> /usr/lib/libicucore.A.dylib
0x91432000 - 0x9145bfff  libxslt.1.dylib (3.26.0 - compatibility 3.0.0) <0DE17DAA-66FF-3195-AADB-347BEB5E2EFA> /usr/lib/libxslt.1.dylib
0x9145c000 - 0x91519ffb  libsystem_c.dylib (825.40.1 - compatibility 1.0.0) <A5C0B70C-5F14-3BF8-AA5B-B22E7B12A4AE> /usr/lib/system/libsystem_c.dylib
0x9151a000 - 0x9151afff  libsystem_blocks.dylib (59.0.0 - compatibility 1.0.0) <3A743C5D-CFA5-37D8-80A8-B6795A9DB04F> /usr/lib/system/libsystem_blocks.dylib
0x9151b000 - 0x9155fff7  libGLU.dylib (??? - ???) <5520818E-F290-3942-80B8-370CF9C9B54C> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x91560000 - 0x915f8fff  com.apple.CoreServices.OSServices (557.6 - 557.6) <BE4B0D48-1239-3B9B-9905-551336777F09> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x915fc000 - 0x915fdfff  libquarantine.dylib (52.1.0 - compatibility 1.0.0) <094A1501-373E-3397-B632-8F7C5AC8EFD5> /usr/lib/system/libquarantine.dylib
0x91676000 - 0x9167fffd  com.apple.audio.SoundManager (4.0 - 4.0) <ABC5FE40-B222-36EB-9905-5C8C4BFD8C87> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x916c6000 - 0x91720fff  com.apple.Symbolication (1.3 - 93) <2C7B4F90-8834-3BCB-81BF-001B31452FB6> /System/Library/PrivateFrameworks/Symbolication.framework/Versions/A/Symbolication
0x91739000 - 0x91745ff8  libbz2.1.0.dylib (1.0.5 - compatibility 1.0.0) <7031A4C0-784A-3EAA-93DF-EA1F26CC9264> /usr/lib/libbz2.1.0.dylib
0x91746000 - 0x91768fff  libc++abi.dylib (26.0.0 - compatibility 1.0.0) <3AAA8D55-F5F6-362B-BA3C-CCAF0D3C8E27> /usr/lib/libc++abi.dylib
0x91799000 - 0x917b5fff  libPng.dylib (??? - ???) <31168369-DAC7-349E-8CB7-FDDFAE8180D6> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x917be000 - 0x917c0ffb  libRadiance.dylib (??? - ???) <FCFAD6A7-256E-3863-8DF9-536F52680290> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x917c1000 - 0x917dafff  com.apple.Kerberos (2.0 - 1) <9BDE8F4D-DBC3-34D1-852C-898D3655A611> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x917db000 - 0x917f0fff  com.apple.speech.synthesis.framework (4.1.12 - 4.1.12) <DE68CEB5-4959-3652-83B8-D2B00D3B932D> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x917f1000 - 0x91bd4fff  com.apple.HIToolbox (2.0 - ???) <ECC3F04F-C4B7-35BF-B10E-183B749DAB92> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x91c30000 - 0x91c94ff7  com.apple.datadetectorscore (4.1 - 269.3) <C11C2014-298E-3E2B-9F5D-02CCD3CA4AB3> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore
0x91c9a000 - 0x91cf1ff7  com.apple.ScalableUserInterface (1.0 - 1) <2B5E454B-BC49-3E85-B54D-1950397C448C> /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/ScalableUserInterface.framework/Versions/A/ScalableUserInterface
0x91d42000 - 0x91d58fff  com.apple.CFOpenDirectory (10.8 - 151.10) <D90DB5D4-6565-3726-B88A-21336CBE9170> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x91d5d000 - 0x92062ff7  com.apple.CoreServices.CarbonCore (1037.6 - 1037.6) <4DB4B0C9-1377-3062-BE0E-CD3326ACDAF0> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x92063000 - 0x92063ffd  libOpenScriptingUtil.dylib (??? - ???) <87895E27-88E2-3249-8D0E-B17E76FB00C1> /usr/lib/libOpenScriptingUtil.dylib
0x92067000 - 0x92070fff  com.apple.CommerceCore (1.0 - 26.2) <B05709DD-3755-3635-B0CC-6CBBD17CFBD5> /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Frameworks/CommerceCore.framework/Versions/A/CommerceCore
0x92071000 - 0x920b9ff5  com.apple.opencl (2.2.19 - 2.2.19) <968DD067-49D0-3B71-A96B-B3579698D992> /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL
0x920bc000 - 0x92123fe7  libvDSP.dylib (380.10.0 - compatibility 1.0.0) <A9BB03FC-F70B-388F-8917-F8CE69F2164A> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x9223d000 - 0x92240ffc  libpam.2.dylib (3.0.0 - compatibility 3.0.0) <FCF74195-A99E-3B07-8E49-688D4A6F1E18> /usr/lib/libpam.2.dylib
0x92241000 - 0x92245ffc  libGIF.dylib (??? - ???) <8432891F-E6BA-32D8-8B59-FDE35B47FD92> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x92643000 - 0x92691ff3  com.apple.SystemConfiguration (1.12.2 - 1.12.2) <15B4EFFC-22D1-3517-BE8C-7947DAA24729> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x92692000 - 0x92717ff7  com.apple.SearchKit (1.4.0 - 1.4.0) <454E950F-291C-3E95-8F35-05CA0AD6B327> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x92e3d000 - 0x92e41fff  com.apple.IOSurface (86.0.5 - 86.0.5) <FB4155F0-8B16-3749-9011-286C652E9D0E> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface
0x92e68000 - 0x92e7bff9  com.apple.MultitouchSupport.framework (237.4 - 237.4) <59197044-E513-3223-9337-6EB0F828CB82> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport
0x92e7c000 - 0x92ed7ff3  com.apple.AE (645.6 - 645.7) <062245C0-9469-3C33-B18C-A5C21ECE5C18> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x92f09000 - 0x92f29ffd  com.apple.ChunkingLibrary (2.0 - 133.3) <FA45EAE8-BB10-3AEE-9FDC-C0C3A533FF48> /System/Library/PrivateFrameworks/ChunkingLibrary.framework/Versions/A/ChunkingLibrary
0x92fe4000 - 0x93011ffe  libsystem_m.dylib (??? - ???) <9975D9C3-3B71-38E3-AA21-C5C5F9D9C431> /usr/lib/system/libsystem_m.dylib
0x9403b000 - 0x94049fff  com.apple.opengl (1.8.10 - 1.8.10) <385E048A-FFB2-348A-8F80-572C2494A776> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x9404a000 - 0x9404afff  libkeymgr.dylib (25.0.0 - compatibility 1.0.0) <D5E93F7F-9315-3AD6-92C7-941F7B54C490> /usr/lib/system/libkeymgr.dylib
0x9404b000 - 0x941a4ffb  com.apple.audio.toolbox.AudioToolbox (1.9.2 - 1.9.2) <461C4CCD-5F52-3D2F-AE22-D0CA7EF3F01A> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x941a5000 - 0x941caffb  com.apple.framework.familycontrols (4.1 - 410) <B1755756-BEA2-3205-ADAA-68FCC32E60BD> /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls
0x941cb000 - 0x941ccfff  libdnsinfo.dylib (453.19.0 - compatibility 1.0.0) <3B523729-84A8-3D0B-B58C-3FC185060E67> /usr/lib/system/libdnsinfo.dylib
0x941cd000 - 0x941d7ffe  com.apple.bsd.ServiceManagement (2.0 - 2.0) <9732BA61-D6F6-3644-82DA-FF0D6FEEFC69> /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement
0x941d8000 - 0x9423cff3  libstdc++.6.dylib (56.0.0 - compatibility 7.0.0) <F8FA490A-8F3C-3645-ABF5-78926CE9C62C> /usr/lib/libstdc++.6.dylib
0x9423d000 - 0x94243fff  libGFXShared.dylib (??? - ???) <99622AD6-7A1D-368E-B163-A38400885B45> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib
0x94244000 - 0x94277ff3  com.apple.GSS (3.0 - 2.0) <CDFEFA98-175A-3D8A-866E-BEF65AF3CEA6> /System/Library/Frameworks/GSS.framework/Versions/A/GSS
0x94284000 - 0x94284fff  com.apple.CoreServices (57 - 57) <956C6C6D-A5DD-314F-9C57-4A61D41F30CE> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x94285000 - 0x94289ffe  libcache.dylib (57.0.0 - compatibility 1.0.0) <834FDCA7-FE3B-33CC-A12A-E11E202477EC> /usr/lib/system/libcache.dylib
0x942e7000 - 0x942e7fff  com.apple.vecLib (3.8 - vecLib 3.8) <2D2064EB-FDD5-38AB-B722-4AFA4C6EE0C9> /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x94330000 - 0x945fdff3  com.apple.security (7.0 - 55719.16.12) <B4DBDD27-2129-3A9A-81AD-F3FC01EC31DF> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x945fe000 - 0x9460eff2  com.apple.LangAnalysis (1.7.0 - 1.7.0) <875363E7-6D02-3229-A9DD-E5A5568A7D61> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x9460f000 - 0x94826fff  com.apple.CoreData (106.1 - 407.7) <EC4B8297-8E01-3778-A8A4-E8747F91109D> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x94836000 - 0x94853ff7  libresolv.9.dylib (??? - ???) <B9742A2A-DF15-3F6E-8FCE-778A58214B3A> /usr/lib/libresolv.9.dylib
0x94856000 - 0x949ceff5  com.apple.QuartzCore (1.8 - 304.5) <45C2B042-CF86-3B81-8C02-9F4C9B94A346> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x949cf000 - 0x949d8ffa  com.apple.CommonAuth (3.0 - 2.0) <CAA6D3CE-7B3B-35F4-88B7-C80CDB9B4CE2> /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth
0x949d9000 - 0x94a6bffb  libvMisc.dylib (380.10.0 - compatibility 1.0.0) <D9567F48-ED35-3362-B769-50916D30C601> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x94be4000 - 0x94c09ff7  com.apple.CoreVideo (1.8 - 99.4) <A26DE896-32E0-3D5E-BA89-02AD23FA96B3> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x94c0a000 - 0x94cdeff3  com.apple.backup.framework (1.4.3 - 1.4.3) <6EA22ED3-BA18-3A37-AE05-5D6FDA3F372F> /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x95d39000 - 0x95d47ff3  libsystem_network.dylib (??? - ???) <7FBF5A15-97BA-3721-943E-E77F0C40DBE1> /usr/lib/system/libsystem_network.dylib
0x95d48000 - 0x95ddfff7  com.apple.ink.framework (10.8.2 - 150) <A9C3B735-7D5F-3D7D-AA70-2CC852D09CDE> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x95e46000 - 0x95ea7ff7  com.apple.audio.CoreAudio (4.1.2 - 4.1.2) <C1D471E9-B4D6-3A59-975C-B3B3A25E6058> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x95ea8000 - 0x95eacfff  com.apple.OpenDirectory (10.8 - 151.10) <B9244697-CB05-3BD3-80A7-D188B3747B03> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory
0x95eae000 - 0x95ecbfff  libxpc.dylib (140.43.0 - compatibility 1.0.0) <C628073D-51A0-3541-A665-1121520508C6> /usr/lib/system/libxpc.dylib
0x95ed0000 - 0x95ed0fff  libSystem.B.dylib (169.3.0 - compatibility 1.0.0) <D7C4320E-C2EA-3A09-A413-D1F78382050D> /usr/lib/libSystem.B.dylib
0x95ed1000 - 0x95ef5fff  libJPEG.dylib (??? - ???) <AA61F099-86A5-3CED-A967-49CD4FF96E97> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x95f47000 - 0x95f6bfff  com.apple.PerformanceAnalysis (1.16 - 16) <1F963AEF-27CF-3FEB-BE9C-4C15AFE56DEA> /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis
0x95f6c000 - 0x9606aff7  libFontParser.dylib (??? - ???) <2D601D71-F19B-3072-874D-29E07EAF88A5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib
0x9606b000 - 0x960c5ffb  libTIFF.dylib (??? - ???) <F95912AB-99B4-30D5-B10F-D109E5EDA971> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x960d2000 - 0x960d6ff7  libmacho.dylib (829.0.0 - compatibility 1.0.0) <5280A013-4F74-3F74-BE0C-7F612C49F1DC> /usr/lib/system/libmacho.dylib
0x96120000 - 0x96440ff3  com.apple.Foundation (6.8 - 945.19) <825DC594-EC88-3456-B20B-DDD372CA7DC2> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x96441000 - 0x96450fff  libGL.dylib (??? - ???) <74BE67B7-9EA0-3F16-B43B-48CB92C9ED27> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x96451000 - 0x96493ffb  com.apple.RemoteViewServices (2.0 - 80.6) <AE962502-4539-3893-A2EB-9D384652AEAC> /System/Library/PrivateFrameworks/RemoteViewServices.framework/Versions/A/RemoteViewServices
0x964c6000 - 0x964cdfff  libsystem_dnssd.dylib (??? - ???) <4F164CA8-4A4F-3B27-B88A-0926E2FEB7D4> /usr/lib/system/libsystem_dnssd.dylib
0x967be000 - 0x96859ff7  com.apple.CoreSymbolication (3.0 - 117.3) <9E9BDF0E-C029-3347-9070-268DDE409C40> /System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication
0x9685a000 - 0x9685bffd  libunc.dylib (25.0.0 - compatibility 1.0.0) <58599CBF-E262-3CEA-AFE1-35560E0177DC> /usr/lib/system/libunc.dylib
0x96894000 - 0x968caffb  com.apple.DebugSymbols (98 - 98) <9A9ADA0A-E487-3C8F-9998-286EE04C235A> /System/Library/PrivateFrameworks/DebugSymbols.framework/Versions/A/DebugSymbols
0x968cb000 - 0x968d7ffe  libkxld.dylib (??? - ???) <37CAE6B0-3EC8-36EA-B692-A2E7F0B7CD3F> /usr/lib/system/libkxld.dylib
0x968e8000 - 0x96a71ff7  com.apple.vImage (6.0 - 6.0) <1D1F67FE-4F75-3689-BEF6-4A46C8039E70> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x96a72000 - 0x96a7eff7  com.apple.NetAuth (4.0 - 4.0) <4983C4B8-9D95-3C4D-897E-07743326487E> /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth
0x96adb000 - 0x96ae8ff7  com.apple.AppleFSCompression (49 - 1.0) <166AA1F8-E50A-3533-A3B5-8737C5118CC3> /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression
0x96ae9000 - 0x96ae9fff  com.apple.ApplicationServices (45 - 45) <677C4ACC-9D12-366F-8A87-B898AC806DD9> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x96bde000 - 0x96c46ff7  com.apple.framework.IOKit (2.0.1 - ???) <38A13E8B-D28A-386D-9591-A1CFA03D7EE6> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x96c47000 - 0x96c93fff  libcorecrypto.dylib (??? - ???) <20EBADBA-D6D6-36F0-AE80-168E9AF13DB6> /usr/lib/system/libcorecrypto.dylib
0x96c94000 - 0x96c9efff  com.apple.speech.recognition.framework (4.1.5 - 4.1.5) <B855E8B4-2EE3-3BFF-8547-98A0F084F9AF> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x96cd5000 - 0x96d14ff7  com.apple.bom (12.0 - 192) <0637E52C-D151-37B3-904F-8656B2FD44DD> /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom
0x9704c000 - 0x97055fff  com.apple.DiskArbitration (2.5.2 - 2.5.2) <89822A83-B450-3363-8E9C-9B80CB4450B1> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x972b0000 - 0x972f2ff7  libcups.2.dylib (2.10.0 - compatibility 2.0.0) <40D07F89-D2EA-327B-A697-42C517AF4BF9> /usr/lib/libcups.2.dylib
0x972f7000 - 0x97432ff7  libBLAS.dylib (??? - ???) <FF74A147-05E1-37C4-BC10-7DEB57FE5326> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x976e2000 - 0x976eafff  libcopyfile.dylib (89.0.70 - compatibility 1.0.0) <F672B952-26D3-3DCC-9A72-117243BAC3FB> /usr/lib/system/libcopyfile.dylib
0x976f5000 - 0x976f6ffd  com.apple.TrustEvaluationAgent (2.0 - 23) <E42347C0-2D3C-36A4-9200-757FFA61B388> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent
0x976f7000 - 0x977b5ff3  com.apple.ColorSync (4.8.0 - 4.8.0) <EFEDCB37-4F20-3CEC-A185-5D2976E11BAC> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x977b6000 - 0x977c0fff  libsystem_notify.dylib (98.6.0 - compatibility 1.0.0) <512070BA-0BC9-3289-BB4F-3EB5D126AA18> /usr/lib/system/libsystem_notify.dylib
0x977c1000 - 0x977c2fff  libremovefile.dylib (23.2.0 - compatibility 1.0.0) <9813B2DB-2374-3AA2-99B6-AA2E9897B249> /usr/lib/system/libremovefile.dylib
0x97921000 - 0x9799bff7  com.apple.securityfoundation (6.0 - 55115.4) <69D92A90-971C-3CD3-BAB1-ADF958C568BC> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x9799c000 - 0x979defff  libauto.dylib (??? - ???) <3098A75E-438E-3F18-BAAC-CD8F1CC7C2F7> /usr/lib/libauto.dylib
0x979fb000 - 0x97e44fff  com.apple.CoreGraphics (1.600.0 - ???) <484C5DBE-B89A-3815-9902-0B87E80B65F9> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x97e45000 - 0x97e45ffd  com.apple.audio.units.AudioUnit (1.9.2 - 1.9.2) <CFAAB1B1-DBC7-3FF1-97BA-065C6620360D> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x97e46000 - 0x97f51ff7  libJP2.dylib (??? - ???) <86FED40F-A51B-3916-A8D3-C0F412F6D159> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x97f52000 - 0x97f55ff7  com.apple.TCC (1.0 - 1) <437D76CD-6437-3B55-BE2C-A53508858256> /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC
0x97f56000 - 0x97f58ffd  libCVMSPluginSupport.dylib (??? - ???) <F7CD59FE-314A-366E-9A27-CE5BD1D438BB> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib
0x97f59000 - 0x97f5afff  liblangid.dylib (??? - ???) <E13CC8C5-5034-320A-A210-41A2BDE4F846> /usr/lib/liblangid.dylib
0x97f62000 - 0x9805aff9  libsqlite3.dylib (9.6.0 - compatibility 9.0.0) <AD7C5914-35F0-37A3-9238-A29D2E26C755> /usr/lib/libsqlite3.dylib
0x9805b000 - 0x980bdfff  libc++.1.dylib (65.1.0 - compatibility 1.0.0) <C0CFF9FF-5D52-3EAE-B921-6AE1DA00A135> /usr/lib/libc++.1.dylib
0x980be000 - 0x980d5fff  com.apple.GenerationalStorage (1.1 - 132.3) <DD0AA3DB-376D-37F3-AC5B-17AC9B9E0A63> /System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/GenerationalStorage
0x980d6000 - 0x980d6fff  com.apple.Cocoa (6.7 - 19) <354094F0-F36B-36F9-BF5F-FD60590FBEB9> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x98202000 - 0x9822eff7  libsystem_info.dylib (??? - ???) <2DD9A179-EA1E-3733-A288-CC03B38B6D4C> /usr/lib/system/libsystem_info.dylib
0x9822f000 - 0x98232ffc  libCoreVMClient.dylib (??? - ???) <CA150AC5-F98C-3F96-8B11-715B75A89C80> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib
0x98233000 - 0x98299fff  com.apple.print.framework.PrintCore (8.3 - 387.2) <0F7665F5-33F0-3661-9BE2-7DD2890E304B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9829a000 - 0x982b7fff  libCRFSuite.dylib (??? - ???) <C9D72D0C-871A-39A2-8AFB-682D11AE7D0D> /usr/lib/libCRFSuite.dylib
0x986a7000 - 0x986e2fef  libGLImage.dylib (??? - ???) <E29ED217-09B3-3436-A961-B6F8EBAA7BED> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x986e3000 - 0x986e5fff  libdyld.dylib (210.2.3 - compatibility 1.0.0) <05D6FF2A-F09B-309D-95F7-7AF10259C707> /usr/lib/system/libdyld.dylib
0x98729000 - 0x98743ffc  libsystem_kernel.dylib (2050.48.19 - compatibility 1.0.0) <068E188E-1E55-3CE4-8F86-5487392CCA9E> /usr/lib/system/libsystem_kernel.dylib
0x9887b000 - 0x9892ffff  com.apple.coreui (2.0 - 181.1) <C15ABF35-B7F5-34ED-A461-386DAF65D96B> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x98930000 - 0x98a3dff3  com.apple.ImageIO.framework (3.2.2 - 854) <0F45F5CF-B714-3CDF-98A4-B4E46CA7897C> /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x98aac000 - 0x98b28ff3  com.apple.Metadata (10.7.0 - 707.13) <E2E99D23-D85E-3749-B0E9-F73DDCD5819C> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x98b43000 - 0x98b51fff  libxar.1.dylib (??? - ???) <343E4A3B-1D04-34A3-94C2-8C7C9A8F736B> /usr/lib/libxar.1.dylib
0x98b52000 - 0x98b64fff  libbsm.0.dylib (??? - ???) <DADD385E-FE53-3458-94FB-E316A6345108> /usr/lib/libbsm.0.dylib
0x98b65000 - 0x98b77ff7  libdispatch.dylib (228.23.0 - compatibility 1.0.0) <86EF7D45-2D97-3465-A449-95038AE5DABA> /usr/lib/system/libdispatch.dylib
0x98dd7000 - 0x98e46ffb  com.apple.Heimdal (3.0 - 2.0) <D2A626DB-85DC-3FB2-B0F6-BFA69912BDB9> /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal
0x98e47000 - 0x98f63ffb  com.apple.desktopservices (1.7.4 - 1.7.4) <782D711D-7930-324A-9015-686C2F86DBA3> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x98f64000 - 0x9900ffff  com.apple.LaunchServices (539.14 - 539.14) <59CDE327-711C-3E43-9F71-348C4421114F> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x99010000 - 0x99041fff  com.apple.DictionaryServices (1.2 - 184.4) <A31BB2CE-6965-3610-8B11-EA26EC6D7EEA> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x99042000 - 0x99190ff3  com.apple.CFNetwork (596.6.4 - 596.6.4) <52A6979F-FAA3-354D-8ADE-DBBB94D4984A> /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x99191000 - 0x99198ffb  libunwind.dylib (35.1.0 - compatibility 1.0.0) <E1E8D8B3-3C78-3AB1-B398-C180DC6DCF05> /usr/lib/system/libunwind.dylib
0x99297000 - 0x99388ffc  libiconv.2.dylib (7.0.0 - compatibility 7.0.0) <B096A9B7-83A6-31B3-8D2F-87D91910BF4C> /usr/lib/libiconv.2.dylib
0x99389000 - 0x99397ff7  libz.1.dylib (1.2.5 - compatibility 1.0.0) <245F1B61-2276-3BBB-9891-99934116D833> /usr/lib/libz.1.dylib
0x99398000 - 0x99398fff  com.apple.Accelerate (1.8 - Accelerate 1.8) <D4F5AB2C-0727-39FD-8EE9-E4DD3D78EB2E> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x99399000 - 0x9963cff3  com.apple.CoreImage (8.4.0 - 1.0.1) <C25B9EEC-4824-3088-BC08-2EA516C0728C> /System/Library/Frameworks/QuartzCore.framework/Versions/A/Frameworks/CoreImage.framework/Versions/A/CoreImage
0x9963d000 - 0x99644ff3  com.apple.NetFS (5.0 - 4.0) <1F7041F2-4E97-368C-8F5D-24153D81BBDB> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS
0x9977d000 - 0x99b9afff  FaceCoreLight (2.4.1 - compatibility 1.0.0) <B12C8721-EFB3-30A2-9A1B-ABCDF5670764> /System/Library/PrivateFrameworks/FaceCoreLight.framework/Versions/A/FaceCoreLight
0x99b9b000 - 0x99d83ffb  com.apple.CoreFoundation (6.8 - 744.19) <DDD3AA21-5B5F-3D8F-B137-AD95FCA89064> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x99d84000 - 0x99e24ff7  com.apple.QD (3.42.1 - ???) <BAAC13D2-1312-33C0-A255-FAB1D314C324> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x99e25000 - 0x99e98ff7  com.apple.ApplicationServices.ATS (341.2 - ???) <D02222B5-B35D-3FA4-A788-6A5BB414337B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x99ef3000 - 0x99efefff  libcommonCrypto.dylib (50000.0.0 - compatibility 1.0.0) <8EE30FA5-AA8D-3FA6-AB0F-05DA8B0425D9> /usr/lib/system/libcommonCrypto.dylib
0x99eff000 - 0x99fe8ff7  libxml2.2.dylib (10.8.0 - compatibility 10.0.0) <015A4FA6-5BB9-3F95-AFB8-B9281E22685B> /usr/lib/libxml2.2.dylib
0x99fe9000 - 0x99ff5ffa  com.apple.CrashReporterSupport (10.8.3 - 418) <03BC564E-35FE-384E-87D6-6E0C55DF16E3> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x9a098000 - 0x9a0b7ff3  com.apple.Ubiquity (1.2 - 243.15) <E10A2937-D671-3D14-AF8D-BA25E601F458> /System/Library/PrivateFrameworks/Ubiquity.framework/Versions/A/Ubiquity
0x9a0b8000 - 0x9a470ffa  libLAPACK.dylib (??? - ???) <9A6E5EAD-F2F2-3D5C-B655-2B536DB477F2> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x9a475000 - 0x9a4ccff3  com.apple.HIServices (1.20 - ???) <B8410ABC-E0DB-31EB-B923-17F3B65B5F4C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices

Hello! How did you uninstall 9.4 and go back to 9.2? I have to have Sophos on my Mac to log on to my VPN for my job, and 9.4 does not support Junos, so I have been unable to log on. I desperately need to go back to 9.2 as I have already been out for 2 days trying to solve this issue : ( ! any help would be appreciated. thank you

Might no longer be possible. I did this before the 9.4 automatically updated. Now I'm on 9.4 and, like you, probably with no way to downgrade--and even if I could find a way to downgrade, as soon as the definitions updated, that would also bring the 9.4 back with them.

If, somehow, you could get back the 9.2.7 (from a backup maybe?), I suppose then you could turn off automatic updating.  But, of course, that would leave you unprotected if there were any new important definitions. XProtect, although with limitations, would probably cover you--that said, Apple has been known to be lackadaisical in getting out XProtect updates quickly--one of the reasons I use Sophos. Just in case Sophos catalogs something sooner than Apple--also by no means  a sure thing.

Maybe someone else as an idea.

Might no longer be possible. I did this before the 9.4 automatically updated. Now I'm on 9.4 and, like you, probably with no way to downgrade--and even if I could find a way to downgrade, as soon as the definitions updated, that would also bring the 9.4 back with them.

If, somehow, you could get back the 9.2.7 (from a backup maybe?), I suppose then you could turn off automatic updating.  But, of course, that would leave you unprotected if there were any new important definitions. XProtect, although with limitations, would probably cover you--that said, Apple has been known to be lackadaisical in getting out XProtect updates quickly--one of the reasons I use Sophos. Just in case Sophos catalogs something sooner than Apple--also by no means  a sure thing.

Maybe someone else as an idea.