[Sammelthread] Bewertung von EtreCheck-Logs durch Profis

don.quijote · 02.10.19

Hallo,

Ja, ich habe Malware installiert und das durchlaufen lassen. Der obige Etrecheck Bericht ist nach dem Malwaredurchlauf entstanden. Wie gesagt, dümmster anzunehmender User. Ist in dem Bericht von Etrecheck etwas zu sehen, was entfernt werden sollte?

cosmo58 · 06.10.19

Moin an die Fachleute..

Heute bekam ich ein Update für EtreCheck.
Danach liess ich es mal "just checking" durchlaufen (MacBook Pro, macOS Mojave aktuell).
Zum ersten Mal bekam ich unter "Minor Issues" die Meldung, dass noch zwei 32bit-Anwendungen laufen.

Die Suche danach ergab:
- inkserver und
- quicklookd
Beides sind wohl Apple-eigene (System?-)Dateien, die ja eigentlich unter Mojave nicht mehr laufen dürften.

Kann mir jemand sagen, wozu diese Anwendungen sind?

Macbeatnik · 06.10.19

Mojave unterstützt noch 32bit Apps, erst mit Catalina ist Schluss mit lustig.

cosmo58 · 06.10.19

Danke @Macbeatnik ..

Da hatte ich wohl eine alte Meldung im Kopf, wonach High Sierra da letzte macOS mit 32bit-Apps gewesen sein sollte - oder war einfach nur wieder mal verwirrt. :rolleyes:

chrigel45 · 08.10.19

Hallo, bitte um Unterstützung / Hilfe.
Mein mac wird immer langsamer, im Safari Browser einen neuen Tab öffnen dauert ewig, es kommt immer so ein mehrfarbiger Ball / Kreis.
Kann von den Fachleuten mal bitte jemand das Protokoll begutachten ob da irgendwas auffällig ist.
Ich bin in Sachen mac absoluter Neuling

Danke im voraus

Code:

EtreCheck version: 5.4.1 (5041)
Report generated: 2019-10-08 19:45:09
Download EtreCheck from https://etrecheck.com
Runtime: 1:44
Performance: Excellent
Sandbox: Enabled
Full drive access: Disabled

Problem: No problem - just checking

Major Issues:
  Anything that appears on this list needs immediate attention.
  Gatekeeper disabled - Gatekeeper security protection is disabled. This computer is at risk of malware infection.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
  Clean up - There are orphan files that could be removed.
  32-bit Apps - This machine has 32-bits apps will not work after macOS 10.14 “Mojave”.
  Limited drive access - More information may be available with Full Drive Access.

Hardware Information:
  iMac (Retina 5K, 27-inch, 2017)
  iMac Model: iMac18,3
  1 3,5 GHz Intel Core i5 (i5-7600) CPU: 4-core
  8 RAM - Upgradeable
    BANK 0/DIMM0 - 4 GB DDR4 2400
    BANK 0/DIMM1 - Empty  
    BANK 1/DIMM0 - 4 GB DDR4 2400
    BANK 1/DIMM1 - Empty  

Video Information:
  Radeon Pro 575 - VRAM: 4 GB
    iMac 5120 x 2880

Drives:
  disk0 - APPLE SSD SM0512L 500.28 GB (Solid State - TRIM: Yes)
  Internal PCI-Express 8.0 GT/s x4 NVM Express
    disk0s1 - EFI [EFI] 315 MB
    disk0s2 [APFS Container] 499.96 GB
      disk1 [APFS Virtual drive] 499.96 GB (Shared by 4 volumes)
        disk1s1 - Macintosh HD (APFS) (Shared - 160.51 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)
        disk1s3 - Recovery (APFS) [Recovery] (Shared)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 4.29 GB used)

  disk2 - WD My Passport 25E3 2.00 TB
  External USB 5 Gbit/s USB
    disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk2s2 - T***********e (Journaled HFS+) 2.00 TB (383.21 GB used)

  disk3 - Samsung Flash Drive FIT 64.16 GB
  External USB 480 Mbit/s USB
    disk3s1 - C*********B 64.16 GB (9 MB used)

Mounted Volumes:
  disk1s1 - Macintosh HD
    499.96 GB (Shared - 160.51 GB used - 334.43 GB free)
    APFS
    Mount point: /

  disk1s4 - VM [APFS VM]
    499.96 GB (Shared - 4.29 GB used - 334.43 GB free)
    APFS
    Mount point: /private/var/vm

  disk2s2 - T***********e
    2.00 TB (383.21 GB used - 1.62 TB free)
    Journaled HFS+
    Mount point: /Volumes/T***********e

  disk3s1 - C*********B
    64.16 GB (9 MB used - 64.15 GB free)
        Mount point: /Volumes/C*********B

Network:
  Interface en0: Ethernet
  Interface en5: iPhone
  Interface en1: Wi-Fi
   
  Interface en4: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS Mojave 10.14.6 (18G103)
  Time since boot: About a day

Configuration Files:
  File /etc/sysctl.conf exists but not expected

Notifications:
  Notifications not available without Full Drive Access.

Security:
  System Status
  Gatekeeper: Anywhere
  System Integrity Protection: Enabled

  Antivirus apps: MalwareBytes

32-bit Applications:
  3 32-bit apps

Kernel Extensions:
  /Library/Application Support/Malwarebytes/MBAM/Kext
    MB_MBAM_Protection.kext (3.9 - SDK 10.10)

System Launch Agents:
  [Not Loaded]  16 Apple tasks
  [Loaded]  158 Apple tasks
  [Running]  126 Apple tasks

System Launch Daemons:
  [Not Loaded]  38 Apple tasks
  [Loaded]  177 Apple tasks
  [Running]  119 Apple tasks

Launch Agents:
  [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2019-08-12)
  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-05-23)

Launch Daemons:
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-09-21)
  [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2019-09-01)
  [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2019-08-12)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-05-23)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-07-10)

User Launch Agents:
  [Other] com.google.keystone.agent.plist (? 0  - installed 2017-10-04)
  [Running] com.hp.devicemonitor.plist (HP Inc. - installed 2019-10-07)
  [Other] com.volkswagen.discovercare.plist (? 0  - installed 2017-11-14)

User Login Items:
  Garmin Express Service.app (Garmin International - installed 2019-07-27)
    (Application - /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app)

  Magnet.app (App Store - installed 2019-06-16)
    (Application - /Applications/Magnet.app)

  AppCleaner SmartDelete (X85ZX835W9 - installed 2018-11-18)
    (Modern Login Item - ~/Downloads/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app)

Audio Plug-ins:
  AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-05-14)
  BluetoothAudioPlugIn: 6.0.14 (Apple - installed 2019-07-27)
  AirPlay: 2.0 (Apple - installed 2019-07-27)
  AppleAVBAudio: 760.6 (Apple - installed 2019-07-27)
  BridgeAudioSP: 5.52 (Apple - installed 2019-10-01)
  iSightAudio: 7.7.3 (Apple - installed 2019-07-27)

Time Machine:
  Time Machine information not available without Full Drive Access.
  4 local snapshots
  Oldest local snapshot: 2019-10-07 19:46:18
  Last local snapshot: 2019-10-08 18:59:59

Performance:
  System Load: 1.50 (1 min ago) 1.67 (5 min ago) 1.45 (15 min ago)
  Nominal I/O speed: 0.63 MB/s
  File system: 39.76 seconds
  Write speed: 1920 MB/s
  Read speed: 2417 MB/s

CPU Usage Snapshot:
  Type Overall
  System 5 %
  User 7 %
  Idle 89 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  Other processes 17.99 % (?)
  com.apple.WebKit.WebContent (15) 9.35 % (Apple)
  App Store 7.68 % (Apple)
  Safari 7.09 % (Apple)
  EtreCheck 3.41 % (App Store)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheck 715 MB (App Store)
  App Store 466 MB (Apple)
  com.apple.WebKit.WebContent (15) 394 MB (Apple)
  Safari 216 MB (Apple)
  Finder 134 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  com.apple.WebKit.Networking 2 MB / 102 KB (Apple)
  Other processes 1 MB / 347 KB (?)
  Mail 161 KB / 53 KB (Apple)
  routined 0 B / 0 B (Apple)
  NotificationCenter 0 B / 0 B (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 55 MB
  Used RAM: 5.84 GB
  Cached files: 2.10 GB

  Available RAM: 2.16 GB
  Swap Used: 812 MB

Software Installs (past 30 days):
  Install Date Name (Version)
  2019-10-01 WhatsApp (0.3.4940)
  2019-10-01 Pages (8.0)
  2019-10-01 Numbers (6.0)
  2019-10-01 Keynote (9.0)
  2019-10-08 Safari (13.0.2)
  2019-10-08 EtreCheck (5.4.1)

Clean up:
  ~/Library/LaunchAgents/com.google.keystone.agent.plist
    /Users/***/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
    Executable not found
  ~/Library/LaunchAgents/com.volkswagen.discovercare.plist
    /private/var/folders/7l/5ywhhnnj1dx5_8f8p5fz2cj80000gn/T/AppTranslocation/2494DEB5-B9E2-4D40-9BDC-EA0A7900B053/d/DiscoverCare.app/Contents/MacOS/DiscoverCareChecker
    Executable not found


Diagnostics Information (past 7 days):
  Directory /Library/Logs/DiagnosticReports is not accessible.
  Enable Full Drive Access to see more information.

End of report

dg2rbf · 08.10.19

Hi,
Ertecheck bitte nochmal mit vollen Adminrechten, laufen lassen.
Directory /Library/Logs/DiagnosticReports is not accessible.
Enable Full Drive Access to see more information.

Gruß Franz

chrigel45 · 08.10.19

wie mach ich das ?
ich dachte , ich wäre bereits ADMIN

dg2rbf · 08.10.19

Hi,
da musst du dich mit Etrecheck näher beschäftigen, habe noch ElCapitan laufen, da gibts dieses Problem nicht.

Franz

Macbeatnik · 08.10.19

chrigel45 schrieb:
wie mach ich das ?
ich dachte , ich wäre bereits ADMIN

zum Glück ist auch der Admin unter OS X/macOS nur ein kleines Licht und darf nicht alles.
systemeinstellungen/Sicherheit, dort kannst du einzelnen Programmen Zugriff gestatten.

chrigel45 · 09.10.19

Macbeatnik schrieb:
zum Glück ist auch der Admin unter OS X/macOS nur ein kleines Licht und darf nicht alles.
systemeinstellungen/Sicherheit, dort kannst du einzelnen Programmen Zugriff gestatten.

danke.
Sicherheit / Datenschutz ...... Festplattenvollzugriff??

Macbeatnik · 09.10.19

Letzter Reiter Privatsphäre oder Datenschutz, dort kannst du verschiedenste Einstellungen vornehmen, wie Programme auf geschützte Bereiche zugreifen dürfen unter anderem auch den festplattenzugriff. Ansonsten ist es auch auf der etrecheck Webseite beschrieben, zum Beispiel auf deren FAQ Seite.

chrigel45 · 09.10.19

So ich hoffe das passt jetzt, vielleicht ist etwas auffälliges dabei

Code:

EtreCheck version: 5.4.1 (5041)
Report generated: 2019-10-09 14:26:22
Download EtreCheck from https://etrecheck.com
Runtime: 1:40
Performance: Excellent
Sandbox: Enabled
Full drive access: Enabled

Problem: No problem - just checking

Major Issues:
  Anything that appears on this list needs immediate attention.
  Security updates disabled - Security updates are disabled. This computer is at risk of malware infection.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
  Clean up - There are orphan files that could be removed.
  32-bit Apps - This machine has 32-bits apps will not work after macOS 10.14 “Mojave”.

Hardware Information:
  iMac (Retina 5K, 27-inch, 2017)
  iMac Model: iMac18,3
  1 3,5 GHz Intel Core i5 (i5-7600) CPU: 4-core
  8 RAM - Upgradeable
    BANK 0/DIMM0 - 4 GB DDR4 2400 
    BANK 0/DIMM1 - Empty   
    BANK 1/DIMM0 - 4 GB DDR4 2400 
    BANK 1/DIMM1 - Empty   

Video Information:
  Radeon Pro 575 - VRAM: 4 GB
    iMac 5120 x 2880

Drives:
  disk0 - APPLE SSD SM0512L 500.28 GB (Solid State - TRIM: Yes)
  Internal PCI-Express 8.0 GT/s x4 NVM Express
    disk0s1 - EFI [EFI] 315 MB
    disk0s2 [APFS Container] 499.96 GB
      disk1 [APFS Virtual drive] 499.96 GB (Shared by 4 volumes)
        disk1s1 - Macintosh HD (APFS) (Shared - 160.14 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)
        disk1s3 - Recovery (APFS) [Recovery] (Shared)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 4.29 GB used)

  disk2 - WD My Passport 25E3 2.00 TB
  External USB 5 Gbit/s USB
    disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk2s2 - T***********e (Journaled HFS+) 2.00 TB (383.58 GB used)

  disk3 - Samsung Flash Drive FIT 64.16 GB
  External USB 480 Mbit/s USB
    disk3s1 - C*********B 64.16 GB (9 MB used)

Mounted Volumes:
  disk1s1 - Macintosh HD
    499.96 GB (Shared - 160.14 GB used - 334.80 GB free)
    APFS
    Mount point: /

  disk1s4 - VM [APFS VM]
    499.96 GB (Shared - 4.29 GB used - 334.80 GB free)
    APFS
    Mount point: /private/var/vm

  disk2s2 - T***********e
    2.00 TB (383.58 GB used - 1.62 TB free)
    Journaled HFS+
    Mount point: /Volumes/T***********e

  disk3s1 - C*********B
    64.16 GB (9 MB used - 64.15 GB free)
        Mount point: /Volumes/C*********B

Network:
  Interface en0: Ethernet
  Interface en5: iPhone
  Interface en1: Wi-Fi
    
  Interface en4: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS Mojave 10.14.6 (18G103)
  Time since boot: About 2 days

Configuration Files:
  File /etc/sysctl.conf exists but not expected

Notifications:
  /Applications/EtreCheck.app
    2 notifications

  (Deleted)
    one notification (one scheduled)

  /Applications/Duplicate File Finder.app
    one notification (one scheduled)

Security:
  System Status
  Gatekeeper: Enabled
  System Integrity Protection: Enabled
  Security Updates: Disabled

  Antivirus apps: MalwareBytes

32-bit Applications:
  3 32-bit apps

Kernel Extensions:
  /Library/Application Support/Malwarebytes/MBAM/Kext
    MB_MBAM_Protection.kext (3.9 - SDK 10.10)

System Launch Agents:
  [Not Loaded]  16 Apple tasks
  [Loaded]  159 Apple tasks
  [Running]  125 Apple tasks

System Launch Daemons:
  [Not Loaded]  38 Apple tasks
  [Loaded]  176 Apple tasks
  [Running]  120 Apple tasks

Launch Agents:
  [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2019-08-12)
  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-05-23)

Launch Daemons:
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-09-21)
  [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2019-09-01)
  [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2019-08-12)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-05-23)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-07-10)

User Launch Agents:
  [Other] com.google.keystone.agent.plist (? 0  - installed 2017-10-04)
  [Running] com.hp.devicemonitor.plist (HP Inc. - installed 2019-10-07)
  [Other] com.volkswagen.discovercare.plist (? 0  - installed 2017-11-14)

User Login Items:
  Garmin Express Service.app (Garmin International - installed 2019-07-27)
    (Application - /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app)

  Magnet.app (App Store - installed 2019-06-16)
    (Application - /Applications/Magnet.app)

  AppCleaner SmartDelete (Julien Ramseier - installed 2019-02-01)
    (Modern Login Item - ~/Downloads/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app)

Audio Plug-ins:
  AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-05-14)
  BluetoothAudioPlugIn: 6.0.14 (Apple - installed 2019-07-27)
  AirPlay: 2.0 (Apple - installed 2019-07-27)
  AppleAVBAudio: 760.6 (Apple - installed 2019-07-27)
  BridgeAudioSP: 5.52 (Apple - installed 2019-10-01)
  iSightAudio: 7.7.3 (Apple - installed 2019-07-27)

Time Machine:
  Skip System Files: No
  Mobile backups: No
  Auto backup: Yes
  Volumes being backed up:
    Macintosh HD: Disk size: 499.96 GB - Disk used: 165.16 GB
  Destinations:
    W*******************e [Local] (Last used)
      Total size: 2.00 TB
      Total number of backups: 74
      Oldest backup: 2018-08-13 15:40:24
      Last backup: 2019-10-09 14:18:14
  5 local snapshots
  Oldest local snapshot: 2019-10-08 15:27:14
  Last local snapshot: 2019-10-09 14:17:44

Performance:
  System Load: 1.10 (1 min ago) 0.87 (5 min ago) 0.55 (15 min ago)
  Nominal I/O speed: 0.51 MB/s
  File system: 35.44 seconds
  Write speed: 2006 MB/s
  Read speed: 2619 MB/s

CPU Usage Snapshot:
  Type Overall
  System 1 %
  User 2 %
  Idle 97 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  Other processes 6.71 % (?)
  EtreCheck 3.94 % (App Store)
  SystemUIServer 0.10 % (Apple)
  Dock 0.04 % (Apple)
  Magnet 0.04 % (App Store)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheck 595 MB (App Store)
  Mail 126 MB (Apple)
  AppleSpell 103 MB (Apple)
  photoanalysisd 98 MB (Apple)
  Finder 93 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  Other processes 2 MB / 471 KB (?)
  Mail 569 KB / 20 KB (Apple)
  routined 0 B / 0 B (Apple)
  NotificationCenter 0 B / 0 B (Apple)
  backgroundtaskmanagementagent 0 B / 0 B (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 960 MB
  Used RAM: 4.32 GB
  Cached files: 2.75 GB

  Available RAM: 3.68 GB
  Swap Used: 610 MB

Software Installs (past 30 days):
  Install Date Name (Version)
  2019-10-01 WhatsApp (0.3.4940)
  2019-10-01 Pages (8.0)
  2019-10-01 Numbers (6.0)
  2019-10-01 Keynote (9.0)
  2019-10-08 Safari (13.0.2)
  2019-10-08 EtreCheck (5.4.1)

Clean up:
  ~/Library/LaunchAgents/com.volkswagen.discovercare.plist
    /private/var/folders/7l/5ywhhnnj1dx5_8f8p5fz2cj80000gn/T/AppTranslocation/2494DEB5-B9E2-4D40-9BDC-EA0A7900B053/d/DiscoverCare.app/Contents/MacOS/DiscoverCareChecker
    Executable not found
  ~/Library/LaunchAgents/com.google.keystone.agent.plist
    /Users/***/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
    Executable not found


Diagnostics Information (past 7 days):
  2019-10-06 18:10:16 Safari.app Hang
    Executable: /Applications/Safari.app


End of report

dg2rbf · 09.10.19

Hi,
diese Volkswagen Software wurde von Etrecheck gelistet als Unvollständig Deinstalliert,
~/Library/LaunchAgents/com.volkswagen.discovercare.plist
/private/var/folders/7l/5ywhhnnj1dx5_8f8p5fz2cj80000gn/T/AppTranslocation/2494DEB5-B9E2-4D40-9BDC-EA0A7900B053/d/DiscoverCare.app/Contents/MacOS/DiscoverCareChecker
Executable not found ,

Würde die Volkswagen Software, mal komplett Deinstallieren und neu Installieren, und nach der Deinstallierung mit EasyFind noch mal nach den Resten von dieser Volkswagen Software suchen und löschen, dann erst wieder Neu Installieren.

Franz

chrigel45 · 09.10.19

dg2rbf schrieb:
Hi,
diese Volkswagen Software wurde von Etrecheck gelistet als Unvollständig Deinstalliert,
~/Library/LaunchAgents/com.volkswagen.discovercare.plist
/private/var/folders/7l/5ywhhnnj1dx5_8f8p5fz2cj80000gn/T/AppTranslocation/2494DEB5-B9E2-4D40-9BDC-EA0A7900B053/d/DiscoverCare.app/Contents/MacOS/DiscoverCareChecker
Executable not found ,

Würde die Volkswagen Software, mal komplett Deinstallieren und neu Installieren, und nach der Deinstallierung mit EasyFind noch mal nach den Resten von dieser Volkswagen Software suchen und löschen, dann erst wieder Neu Installieren.

Franz

Hallo
die Volkswagen Software wurde vor langem schon gelöscht.
Kann ich einfach den Ordner ~/Library/LaunchAgents/com.volkswagen.discovercare.plist löschen ?
Grenauso hab Microsoft Office gelöscht, trotzdem scheinen da noch Reste drauf zu sein.

Sonst ist nix auffällig ? Trojaner oder ähnliches ???

dg2rbf · 09.10.19

Hi,
Ja, kannst du Löschen.

Onkel Hotte · 11.10.19

Kurze Frage in die Runde. Nutz jemand EtreChek Pro und ist es zu empfehlen oder reicht die Standardversion? Danke sehr..

Macbeatnik · 11.10.19

Standard reicht, sofern du nur einen systembericht erstellen willst, der Helfenden Info über deinen Rechner/System gibt.

Cruiz · 06.11.19

Hallo,

mein Rechner friert seit ein paar Tagen andauernd ein und rührt sich erst nach einigen Minuten wieder. Die eingebaute Daten-Festplatte (System liegt auf SSD) klackert dabei ein paar mal (keine Ahnung ob das zusammen hängt.

Könnte sich mal jemand bitte das Log ansehen.

Code:

EtreCheck version: 6.1.4 (6B028)
Report generated: 2019-11-06 07:33:10
Download EtreCheck from https://etrecheck.com
Runtime: 4:26
Performance: Good

Problem: Beachballing

Major Issues:
  Anything that appears on this list needs immediate attention.
  Security updates disabled - Security updates are disabled. This computer is at risk of malware infection.
  Kernel panics - This system has experienced kernel panics that could be related to 3rd party software.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
  Time Machine auto backup disabled - Time Machine auto backups are disabled.
  Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance.

Hardware Information:
  Mac mini (Late 2014)
  Mac mini Model: Macmini7,1
  1 1,4 GHz Dual-Core Intel Core i5 (i5-4260U) CPU: 2-core
  8 RAM - Not upgradeable
    BANK 0/DIMM0 - 4 GB DDR3 1600 
    BANK 1/DIMM0 - 4 GB DDR3 1600 

Video Information:
  Intel HD Graphics 5000 - VRAM: 1536 MB
    H257HU 2560 x 1440

Drives:
  disk0 - WDC WD1001X06X-00SJVT0 1.12 TB (Solid State - TRIM: Yes)
  Internal SATA 6 Gigabit Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 119.82 GB
      disk1 [APFS Virtual drive] 119.82 GB (Shared by 5 volumes)
        disk1s1 - S************n (APFS) [APFS Virtual drive] (Shared - 26.88 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 83 MB used)
        disk1s3 - Recovery (APFS) [Recovery] (Shared - 529 MB used)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used)
        disk1s5 - System (APFS) (Shared - 10.85 GB used)
    disk0s3 [Core Storage Container] 1.00 TB
      disk2 - D***n (Journaled HFS+) 999.70 GB (6.13 GB used)
    disk0s4 - B*******X (Journaled HFS+) 134 MB

Mounted Volumes:
  disk1s1 - S************n [APFS Virtual drive]
    119.82 GB (Shared - 26.88 GB used - 79.21 GB free)
    APFS
    Mount point: /System/Volumes/Data
    Encrypted

  disk1s4 - VM [APFS VM]
    119.82 GB (Shared - 2.15 GB used - 79.21 GB free)
    APFS
    Mount point: /private/var/vm

  disk1s5 - System
    119.82 GB (Shared - 10.85 GB used - 79.21 GB free)
    APFS
    Mount point: /
    Encrypted
    Read-only: Yes

  disk2 - D***n
    999.70 GB (6.13 GB used - 993.58 GB free)
    Journaled HFS+
    Mount point: /Volumes/D***n
    Encrypted

Network:
  Interface en0: Ethernet
  Interface en1: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en6: iPhone
  Interface en4: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS Catalina 10.15.1 (19B88)
  Time since boot: Less than an hour

Notifications:
  /Library/Little Snitch/Little Snitch Agent.app
    one notification

  (Deleted)
    one notification

Security:
  System Status
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled
  Security Updates: Disabled

  Antivirus software: None!

Kernel Extensions:
  /Library/Extensions
    [Loaded] LittleSnitch.kext (4.4.3 - SDK 10.11)

System Launch Agents:
  [Not Loaded]  17 Apple tasks
  [Loaded]  176 Apple tasks
  [Running]  117 Apple tasks

System Launch Daemons:
  [Not Loaded]  35 Apple tasks
  [Loaded]  185 Apple tasks
  [Running]  116 Apple tasks

Launch Agents:
  [Running] at.obdev.LittleSnitchHelper.plist (Objective Development Software GmbH - installed 2019-10-29)
  [Running] at.obdev.LittleSnitchUIAgent.plist (Objective Development Software GmbH - installed 2019-10-29)

Launch Daemons:
  [Running] at.obdev.littlesnitchd.plist (Objective Development Software GmbH - installed 2019-10-29)

User Launch Agents:
  [Loaded] com.synology.SynologyDrive.plist (Synology Inc. - installed 2019-11-06)

User Login Items:
  Helper (App Store - installed 2019-10-31)
    (Modern Login Item - /Applications/Cookie.app/Contents/Library/LoginItems/Helper.app)

  Magnet.app (App Store - installed 2019-10-29)
    (Application - /Applications/Magnet.app)

  LoginItem (App Store - installed 2019-10-29)
    (Modern Login Item - /Applications/Paste.app/Contents/Library/LoginItems/LoginItem.app)

  Paste Helper.app (Dmitry Obukhov - installed 2019-10-27)
    (Application - ~/Library/Application Support/Paste Helper/Paste Helper.app)

Safari Extensions:
  Ka-Block! - App Store (installed 2019-10-29)
  Open in Internet Explorer - App Store (installed 2019-10-29)
  SafeInCloud Safari Extension - App Store (installed 2019-10-31)

Time Machine:
  Skip System Files: No
  Auto backup: No
  Volumes being backed up:
    System: Disk size: 119.82 GB - Disk used: 40.61 GB
  Destinations:
    B******1 [Local] (Last used)
      Total size: 499.41 GB
      Total number of backups: 4
      Oldest backup: 2019-11-01 11:40:11
      Last backup: 2019-11-05 19:07:23
    T*********e [Network]
      Total size: 1.04 TB
      Total number of backups: 15
      Oldest backup: 2019-10-30 09:06:53
      Last backup: 2019-11-05 18:14:58
  11 local snapshots
  Oldest local snapshot: 2019-11-05 07:41:15
  Last local snapshot: 2019-11-05 18:59:10

Performance:
  System Load: 7.37 (1 min ago) 11.63 (5 min ago) 6.81 (15 min ago)
  Nominal I/O speed: 12.29 MB/s
  File system: 55.01 seconds
  Write speed: 113 MB/s
  Read speed: 322 MB/s

CPU Usage Snapshot:
  Type Overall
  System 17 %
  User 14 %
  Idle 69 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  softwareupdated 49.68 % (Apple)
  kernel_task 42.47 % (Apple)
  WindowServer 17.66 % (Apple)
  com.apple.WebKit.WebContent (3) 16.88 % (Apple)
  Activity Monitor 12.20 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheckPro 514 MB (Etresoft, Inc.)
  com.apple.WebKit.WebContent (3) 225 MB (Apple)
  Activity Monitor 116 MB (Apple)
  softwareupdated 105 MB (Apple)
  WindowServer 104 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  softwareupdated 3 MB / 378 B (Apple)
  com.apple.WebKit.Networking 3 MB / 202 KB (Apple)
  Mail 124 KB / 64 KB (Apple)
  mDNSResponder 54 KB / 30 KB (Apple)
  apsd 6 KB / 33 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  softwareupdated 14 (Apple)
  WindowServer 13 (Apple)
  com.apple.WebKit.WebContent (3) 7 (Apple)
  Activity Monitor 3 (Apple)
  Safari 2 (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 18 MB
  Used RAM: 3.35 GB
  Cached files: 4.64 GB

  Available RAM: 4.65 GB
  Swap Used: 0 B

Software Installs (past 30 days):
  Install Date Name (Version)
  2019-10-29 XProtectPlistConfigData (2106)
  2019-10-29 MRTConfigData (1.50)
  2019-10-29 Gatekeeper Configuration Data (181)
  2019-10-29 Magnet (2.4.5)
  2019-10-29 Ka-Block! (3.2)
  2019-10-29 Parallels Desktop Lite (1.4.0)
  2019-10-29 Numbers (6.0)
  2019-10-29 Keynote (9.0)
  2019-10-29 iServer (5.0.0)
  2019-10-29 Monity (1.4.5)
  2019-10-29 Pixelmator Pro (1.5.1)
  2019-10-29 PhotoBulk (2.2)
  2019-10-29 ReadKit (2.6.3)
  2019-10-29 Textual IRC Client (7.1.1)
  2019-10-29 Amphetamine (4.2)
  2019-10-29 Network Radar (2.7.2)
  2019-10-29 Commander One (2.2)
  2019-10-29 Keka (1.1.21)
  2019-10-29 MoneyMoney (2.3.21)
  2019-10-29 Paste (2.5.2)
  2019-10-29 PDFScanner (1.15.1)
  2019-10-29 CloudMounter (3.5.1)
  2019-10-29 Pages (8.0)
  2019-10-29 Synology Drive Client (6.0.1)
  2019-10-31 Cookie (6.0.5)
  2019-10-31 SafeInCloud Passwort Manager (19.3.3)
  2019-11-03 1Blocker (3.0.2)

Diagnostics Information (past 7 days):
  2019-11-05 22:43:14 Finder.app High CPU Use
    Executable: /System/Library/CoreServices/Finder.app

  2019-11-05 22:08:30 Kernel Panic
    Details:
      panic(cpu 0 caller 0xffffff7f942fe238): "IOAHCIBlockStorageDriver::Com
      mandTimeout! reallocated sectors = 0x0, pending sectors = 0x0, power o
      n hours = 0x469, fBuiltIn = 1, LBA = 0x0, Block Count = 0x0, Tag = 0x1
      2, Operation Type = 0x7 fis[0]=0xE68027, fis[1]=0x0, fis[2]=0x0, fis[3
      ]=0x0, fis[4]=0x0"@/BuildRoot/Library/Caches/com.apple.xbs/Sources/IOA
      HCIBlockStorage/IOAHCIBlockStorage-316.40.3/IOAHCIBlockStorageDriver.c
      pp:6311

    3rd party kernel extensions:
      at.obdev.nke.LittleSnitch

  2019-11-01 12:32:54 backupd High CPU Use
    Executable: /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd

  2019-10-30 18:15:42 photoanalysisd High CPU Use
    Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd


End of report

ottomane · 06.11.19

Ich würde mal den SMART-Status beider Laufwerke auslesen und posten.

Auch die Kernelpanic und die hohe CPU-Last des Finders oben deutet auf ein Laufwerksproblem hin.

errorlog · 06.11.19

Keine Ahnung, ob ich das richtig sehe, aber es taucht nur ein physikalisches Laufwerk in der Liste auf. Ist die 2. Platte defekt?

[Sammelthread] Bewertung von EtreCheck-Logs durch Profis

Golden Delicious

Damasonrenette

Golden Noble

Damasonrenette

Jonagold

Blutapfel

Jonagold

Blutapfel

Golden Noble

Jonagold

Golden Noble

Jonagold

Blutapfel

Jonagold

Blutapfel

Cox Orange

Golden Noble

Jonagold

Golden Noble

Niederhelfenschwiler Beeriapfel

Wir schützen Ihre Privatsphäre

Informationen auf einem Gerät speichern und/oder abrufen

Personalisierte Anzeigen und Inhalte, Anzeigen- und Inhaltsmessungen, Erkenntnisse über Zielgruppen und Produktentwicklungen (Optionale Cookies)

Datenübermittlung an Partner in anderen Staaten (Drittanbieter-Cookies)