Nach Update auf High Sierra: mds.store nutzt 100% CPU

[Streichkandidat]

Seit dem Update meines Macbook Pro (Herbst 2013) auf High Sierra vor zwei Tagen läuft die Lüftung fast ständig. Die Aktivitätsanzeige zeigt meist um die 100% CPU für mds.stores, auch nachdem ich alle Kategorien in der Spotligtsuche abgeschaltet habe. In der Konsole steht immer wieder:

standard 17:31:36.964776 +0100 signpost_notificationd Invalid Connection ID 0
fehler 17:31:36.964861 +0100 signpost_notificationd 0 is not a valid connection ID.
oder
fehler 17:31:37.672347 +0100 wirelessproxd Advertising failed to start for client identityservicesd type 12 with error: Unknown error.
standard 17:31:37.672881 +0100 wirelessproxd Started to advertise for type 16 with error Unknown error.
oder
fehler 17:31:37.673664 +0100 identityservicesd Continuity advertising failed to start of type: 12 with error: Unknown error.
fehler 17:31:37.673300 +0100 sharingd Did fail to start advertising for Activity (Der Vorgang konnte nicht abgeschlossen werden. (com.apple.identityservices.error-Fehler 200.))
standard 17:31:37.673884 +0100 identityservicesd calling continuityDidFailToStartAdvertisingOfType:Activity withError:<private>
fehler 17:31:37.673464 +0100 sharingd Nearby advertising failed to start of type: 16 with error: Unknown error.

 

[dg2rbf]

Hi,
da ist bei der Installation etwas schief gegangen, würde das Update noch mal Drüber Installieren.

Gruß Franz

 

[Streichkandidat]

Hallo Franz,
ich habe soeben eine Neuinstallation gemacht. Das Problem ist leider unverändert vorhanden.

 

[dg2rbf]

Sri ...

 

[dg2rbf]

Hi,
Tja, dann hast du ein Hardware Problem, mal dem AppleHardware Test durchführen, mit gehaltener D Taste Booten.

Gruß Franz

 

[Streichkandidat]

Hab ich gerade gemacht: Keine Probleme gefunden.
Interessant: Nach dem Neustart ist von mds.stores erstmal nichts zu sehen bei der CPU-Auslastung. Der Prozess, der bisher am langsamsten ging, war das Anzeigen der markierten Mails im Mailprogramm. der ging jetzt zunächst wieder reibungslos. Nach circa einer Minute erscheint aber wieder mds.stores bei 90% CPU, die Anzeige der markierten Mails verzögert sich wieder massiv.
Gruss, Streichkandidat

 

[Streichkandidat]

Das Verlangsamen der Anzeige markierter Mails war übrigens schon vor dem Update auf High Sierra zu beobachten, allerdings nicht so massiv wie danach.

 

[dg2rbf]

Hi,
dann ist noch irgend einen Wurm im System vorhanden, würde mal von der Herstellerseite Etrecheck runterladen und das System damit Scannen, dann das Ergebniss hier in CodeTags Posten, wenn der Post zu groß ist in mehrere aufteilen, bitte nch dieser Anleitung vorgehen.

Gruß Franz

 

[Streichkandidat]

EtreCheck version: 5.1 (5020)

Report generated: 2019-01-14 17:37:44

Download EtreCheck from https://etrecheck.com

Runtime: 2:47

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled


Problem: Computer is too slow

Description:

mds.stores uses around 100% CPU.

I have shut Spotlight,

I have reinstalled High Sierra,

the problem still remains.

When I click on marked mails in the Mail-App it takes about a minute for a result.


Major Issues:

Anything that appears on this list needs immediate attention.


Adware - Adware detected.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Clean up - There are orphan files that could be removed.

Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.

System modifications - There are a large number of system modifications running in the background.

Limited drive access - More information may be available with Full Drive Access.


Hardware Information:

MacBook Pro (Retina, 13-inch, Late 2013)

MacBook Pro Model: MacBookPro11,1

1 2.8 GHz Intel Core i7 (i7-4558U) CPU: 2-core

16 GB RAM - Not upgradeable

BANK 0/DIMM0 - 8 GB DDR3 1600 ok

BANK 1/DIMM0 - 8 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 510


Video Information:

Intel Iris - VRAM: 1536 MB

Color LCD 2560 x 1600


Drives:

disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 500.07 GB

disk1 [APFS Virtual drive] 500.07 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 401.19 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 3.22 GB used)


Mounted Volumes:

disk1s1 - Macintosh HD 500.07 GB (94.95 GB free)

APFS

Mount point: /


disk1s4 - VM [APFS VM] (Shared - 3.22 GB used)

APFS

Mount point: /private/var/vm


Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

Interface bridge0: Thunderbolt Bridge

Interface en4: USB Ethernet

Interface en3: Bluetooth PAN


System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 14 hours


Security:

GatekeeperEnabled

System Integrity ProtectionEnabled


Adware:

Launchd: ~/Library/LaunchAgents/com.pcv.hlpramcn.plist

Reason: Adware name match

Executable: /Users/itz/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

Launchd: /Library/LaunchAgents/com.SoftwareUpdater.agent.plist

Reason: Adware name match

Executable: /Applications/SoftwareUpdater/SoftwareUpdater -guid 47767983316584938 -source amz-1603

Launchd: /Library/LaunchAgents/com.ShopTool.agent.plist

Reason: Adware name match

Executable: /Applications/ShopTool/ShopTool -guid 47767983316584938 -source amz-1603 -brand ShopTool -dt 1453502549


Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.tunnelbear.mac.tbeara.plist

Executable: ~/Library/Application Support/TunnelBear/com.tunnelbear.mac.tbeara

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.updater.plist

Executable: /usr/local/MacGPG2/libexec/MacGPG2_Updater/Contents/MacOS/MacGPG2_Updater

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/org.gpgtools.Libmacgpg.xpc.plist

Executable: /Library/Application Support/GPGTools/org.gpgtools.Libmacgpg.xpc

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.anchorfree.ajaxserver.plist

Executable: /Library/Application Support/Hotspot Shield/ajaxserver

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/PACESupport.plist

Executable: /System/Library/Extensions/PACESupportFamily.kext/Contents/Resources/paceload

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.wacom.wacomtablet.plist

Executable: /Library/Application Support/Tablet/WacomTabletSpringboard

Details: Exact match found in the whitelist - probably OK


Kernel Extensions:

/Library/Application Support/Roxio

TDIXController.kext (1.6)


/Library/Extensions

SophosFileProtection.kext (Sophos, 9.7.4 - SDK 10.12)

SophosWebProtection.kext (Sophos, 9.7.4 - SDK 10.12)


/System/Library/Extensions

MovaviSoundGrabber.kext (1.6.5 - SDK 10.6)

PACESupportFamily.kext (5.7)

Wacom Tablet.kext (Wacom Tablet 6.1.5-2)

WD1394HPDriver.kext (1.0.5)

WDUSBHPDriver.kext (1.0.1)


/System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns

PACESupportLeopard.kext (5.7)

PACESupportPanther.kext (5.7)

PACESupportSnowLeopard.kext (5.7)

PACESupportTiger.kext (5.7)


Startup Items:

PACESupport Path: /Library/StartupItems/PACESupport


System Launch Agents:

[Not Loaded] 15 Apple tasks

[Loaded] 161 Apple tasks

[Running] 116 Apple tasks

[Other] One Apple task


System Launch Daemons:

[Not Loaded] 37 Apple tasks

[Loaded] 179 Apple tasks

[Running] 120 Apple tasks


Launch Agents:

[Not Loaded] com.oracle.java.Java-Updater.plist (? b4fde939 - installed 2018-07-07)

[Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2019-01-10)

[Not Loaded] com.ShopTool.agent.plist (Adware - installed 2016-01-22)

[Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-12-12)

[Running] com.sophos.uiserver.plist (Sophos - installed 2018-11-26)

[Loaded] org.gpgtools.macgpg2.updater.plist (? 2c0a6d06 - installed 2013-03-30)

[Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-01-03)

[Loaded] org.gpgtools.Libmacgpg.xpc.plist (? b4cb7cf0 - installed 2013-04-11)

[Other] com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-30)

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2019-01-10)

[Other] jp.co.canon.SELPHYCP.BG.plist (? 6c0813be - installed 2013-07-22)

[Running] com.sophos.agent.plist (Sophos - installed 2018-11-26)

[Not Loaded] com.wacom.wacomtablet.plist (? 9e9edb5e - installed 2010-02-26)

[Not Loaded] com.SoftwareUpdater.agent.plist (Adware - installed 2016-01-22)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-01-03)


Launch Daemons:

[Loaded] com.anchorfree.ajaxserver.plist (? b7821fb8 - installed 2016-02-19)

[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-12-17)

[Loaded] com.cyberghostsrl.CyberghostPrivilegedHelper.plist (Cyberghost SRL - installed 2017-04-22)

[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25)

[Running] com.sophos.common.servicemanager.plist (Sophos - installed 2018-11-26)

[Running] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2019-01-10)

[Loaded] com.bombich.ccc.plist (? 41245744 - installed 2015-09-11)

[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-30)

[Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-01-02)

[Loaded] com.adobe.SwitchBoard.plist (? 856489a3 - installed 2016-06-02)

[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-12-12)

[Loaded] com.tunnelbear.mac.tbeard.plist (TunnelBear, Inc. - installed 2018-10-25)

[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-07-07)

[Other] PACESupport.plist (? ab6b5614 - installed 2009-03-05)

[Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2018-07-04)

[Other] com.spotflux.Spotflux.tun.plist (Apple - installed 2018-07-04)


User Launch Agents:

[Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2013-12-18)

[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-01-10)

[Other] com.pcv.hlpramcn.plist (Adware - installed 2016-01-22)

[Running] com.tunnelbear.mac.tbeara.plist (? 0 - installed 2018-10-25)


User Login Items:

Dropbox.app (Dropbox, Inc. - installed 2019-01-10)

(/Applications/Dropbox.app)


Firefox.app (Mozilla Corporation - installed 2019-01-10)

(/Applications/Firefox.app)


Flux.app (? - installed 2018-05-10)

(~/Applications/Flux.app)


Internet Plug-ins:

JavaAppletPlugin: Java 8 Update 181 build 13 (installed 2018-10-05)

WacomNetscape: 1.1.0-5 (installed 2011-07-15)

Easy-WebPrint EX: 1.1.0 (installed 2017-03-15)

Unity Web Player: UnityPlayer version 4.5.1f3 (installed 2014-07-02)

WacomSafari: 1.1.0-5 (installed 2011-07-15)

AdobeExManDetect: AdobeExManDetect 1.1.0.0 (installed 2015-01-12)

AdobeAAMDetect: 3.0.0.0 (installed 2019-01-10)

Silverlight: 5.1.41212.0 (installed 2017-03-15)

FlashPlayer-10.6: 32.0.0.114 (installed 2019-01-08)

QuickTime Plugin: 7.7.3 (installed 2018-07-04)

Flash Player: 32.0.0.114 (installed 2019-01-08)

iPhotoPhotocast: 7.0 (installed 2011-05-05)

SharePointBrowserPlugin: 14.7.7 (installed 2017-09-15)

AdobePDFViewer: 9.5.5 (installed 2017-03-15)

CANONiMAGEGATEWAYDL: 2.0.1.10 (installed 2017-03-15)

EPPEX Plugin: 3.0.5.0 (installed 2010-11-17)

CANONiMAGEGATEWAYLI: 2.0.1.6 (installed 2017-03-15)

Scorch: 6.2.0 (installed 2011-07-15)


3rd Party Preference Panes:

Déjà Vu (installed 2017-03-15)

Flash Player (installed 2018-12-17)

FUSE for OS X (OSXFUSE) (installed 2011-09-07)

GPGPreferences (installed 2017-03-15)

Java (installed 2018-07-07)

StuffIt AVR (installed 2011-07-15)


Time Machine:

Time Machine information not available without Full Drive Access.


Performance:

System Load: 1.73 (1 min ago) 2.19 (5 min ago) 2.28 (15 min ago)

Nominal I/O speed: 0.60 MB/s

File system: 32.78 seconds

Write speed: 713 MB/s

Read speed: 784 MB/s


CPU Usage:

Type Overall

System 2 %

User 27 %

Idle 71 %


Top Processes by CPU:

Process (count) CPU (Source - Location)

Other processes 106.38 % (?)

Mail 4.51 % (Apple)

EtreCheck 2.83 % (App Store)

Creative Cloud 0.34 % (Adobe Systems, Inc.)

Adobe Desktop Service 0.31 % (Adobe Systems, Inc.)


Top Processes by Memory:

Process (count) RAM usage (Source - Location)

firefox 590 MB (Mozilla Corporation)

EtreCheck 518 MB (App Store)

plugin-container 242 MB (Mozilla Corporation)

Mail 182 MB (Apple)

App Store 72 MB (Apple)


Top Processes by Network Use:

Process Input / Output (Source - Location)

Mail 5 MB / 72 KB (Apple)

mDNSResponder 604 KB / 360 KB (Apple)

Dropbox 194 KB / 132 KB (Dropbox, Inc.)

SophosSXLD 35 KB / 29 KB (Sophos)

netbiosd 8 KB / 3 KB (Apple)


Virtual Memory Information:

Available RAM 2.76 GB

Free RAM 18 MB

Used RAM 13.24 GB

Cached files 2.74 GB

Swap Used 1.08 GB


Software Installs (past 30 days):

Install Date Name (Version)

2019-01-08 Adobe Flash Player (10.2.152.33)

2019-01-14 EtreCheck (5.1)


Clean up:

/Library/LaunchAgents/jp.co.canon.SELPHYCP.BG.plist

/Library/Printers/Canon/SELPHYCP/Utilities/SELPHY CP Notificator.app/Contents/MacOS/SELPHY CP Notificator

Executable not found


Diagnostics Information (past 7 days):

Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.


End of report

 

[dg2rbf]

Hi,
du hast Adware/Malware in deinem System, Malwarebytes von der Herstellerseite runterladen, und diesen Müll damit entfernen.
Adware:

Launchd: ~/Library/LaunchAgents/com.pcv.hlpramcn.plist

Reason: Adware name match

Executable: /Users/itz/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

Launchd: /Library/LaunchAgents/com.SoftwareUpdater.agent.plist

Reason: Adware name match

Executable: /Applications/SoftwareUpdater/SoftwareUpdater -guid 47767983316584938 -source amz-1603

Launchd: /Library/LaunchAgents/com.ShopTool.agent.plist

Reason: Adware name match

Executable: /Applications/ShopTool/ShopTool -guid 47767983316584938 -source amz-1603 -brand ShopTool -dt 1453502549

Gruß Franz

 

[Streichkandidat]

Hallo Franz,
super, vielen Dank für deine Hilfe! Das scheint ja mal ein Lösungsansatz zu sein.

 

[Streichkandidat]

Hallo Franz,
ich habe Malwarebytes laufen lassen und alles, was angegeben wurde, gelöscht. Dann nach Neustart sah zunächst alles gut aus, inzwischen ist mds.stores in der Aktivitätsanzeige wieder bei rund 90%. Muss ich aus der Liste des Etrecheck Reports noch irgendwas von Hand löschen oder so?

 

[dg2rbf]

Hi,
lass noch mal Etrecheck das System scannen u Poste es hier in CodeTags.

Franz

 

[Streichkandidat]

EtreCheck version: 5.1 (5020)

Report generated: 2019-01-14 20:11:23

Download EtreCheck from https://etrecheck.com

Runtime: 3:17

Performance: Good

Sandbox: Enabled

Full drive access: Disabled


Problem: No problem - just checking


Major Issues:

Anything that appears on this list needs immediate attention.


More than one antivirus app - This machine has multiple antivirus apps installed.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Clean up - There are orphan files that could be removed.

Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.

System modifications - There are a large number of system modifications running in the background.

Heavy I/O usage - Your system is under heavy I/O use. This will reduce your performance.

Limited drive access - More information may be available with Full Drive Access.


Hardware Information:

MacBook Pro (Retina, 13-inch, Late 2013)

MacBook Pro Model: MacBookPro11,1

1 2.8 GHz Intel Core i7 (i7-4558U) CPU: 2-core

16 GB RAM - Not upgradeable

BANK 0/DIMM0 - 8 GB DDR3 1600 ok

BANK 1/DIMM0 - 8 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 510


Video Information:

Intel Iris - VRAM: 1536 MB

Color LCD 2560 x 1600

S1931 1280 x 1024


Drives:

disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 500.07 GB

disk1 [APFS Virtual drive] 500.07 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 401.63 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used)


Mounted Volumes:

disk1s1 - Macintosh HD 500.07 GB (95.59 GB free)

APFS

Mount point: /


disk1s4 - VM [APFS VM] (Shared - 2.15 GB used)

APFS

Mount point: /private/var/vm


Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

Interface bridge0: Thunderbolt Bridge

Interface en4: USB Ethernet

Interface en3: Bluetooth PAN


System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: Less than an hour


Security:

GatekeeperEnabled

System Integrity ProtectionEnabled


Unsigned Files:

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/org.gpgtools.macgpg2.updater.plist

Executable: /usr/local/MacGPG2/libexec/MacGPG2_Updater/Contents/MacOS/MacGPG2_Updater

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/PACESupport.plist

Executable: /System/Library/Extensions/PACESupportFamily.kext/Contents/Resources/paceload

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/org.gpgtools.Libmacgpg.xpc.plist

Executable: /Library/Application Support/GPGTools/org.gpgtools.Libmacgpg.xpc

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.anchorfree.ajaxserver.plist

Executable: /Library/Application Support/Hotspot Shield/ajaxserver

Details: Exact match found in the whitelist - probably OK


Kernel Extensions:

/Library/Application Support/Malwarebytes/MBAM/Kext

MB_MBAM_Protection.kext (Malwarebytes Corporation, 3.6 - SDK 10.14)


/Library/Application Support/Roxio

TDIXController.kext (1.6)


/Library/Extensions

SophosFileProtection.kext (Sophos, 9.7.4 - SDK 10.12)

SophosWebProtection.kext (Sophos, 9.7.4 - SDK 10.12)


/System/Library/Extensions

MovaviSoundGrabber.kext (1.6.5 - SDK 10.6)

PACESupportFamily.kext (5.7)

Wacom Tablet.kext (Wacom Tablet 6.1.5-2)

WD1394HPDriver.kext (1.0.5)

WDUSBHPDriver.kext (1.0.1)


/System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns

PACESupportLeopard.kext (5.7)

PACESupportPanther.kext (5.7)

PACESupportSnowLeopard.kext (5.7)

PACESupportTiger.kext (5.7)


Startup Items:

PACESupport Path: /Library/StartupItems/PACESupport


System Launch Agents:

[Not Loaded] 15 Apple tasks

[Loaded] 165 Apple tasks

[Running] 112 Apple tasks

[Other] One Apple task


System Launch Daemons:

[Not Loaded] 37 Apple tasks

[Loaded] 184 Apple tasks

[Running] 115 Apple tasks


Launch Agents:

[Not Loaded] com.oracle.java.Java-Updater.plist (? b4fde939 - installed 2018-07-07)

[Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2019-01-10)

[Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-12-12)

[Running] com.sophos.uiserver.plist (Sophos - installed 2018-11-26)

[Loaded] org.gpgtools.macgpg2.updater.plist (? 2c0a6d06 - installed 2013-03-30)

[Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-01-03)

[Loaded] org.gpgtools.Libmacgpg.xpc.plist (? b4cb7cf0 - installed 2013-04-11)

[Other] com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-30)

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2019-01-10)

[Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-12-07)

[Other] jp.co.canon.SELPHYCP.BG.plist (? 6c0813be - installed 2013-07-22)

[Running] com.sophos.agent.plist (Sophos - installed 2018-11-26)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-01-03)


Launch Daemons:

[Loaded] com.anchorfree.ajaxserver.plist (? b7821fb8 - installed 2016-02-19)

[Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2019-01-14)

[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-12-17)

[Loaded] com.cyberghostsrl.CyberghostPrivilegedHelper.plist (Cyberghost SRL - installed 2017-04-22)

[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25)

[Running] com.sophos.common.servicemanager.plist (Sophos - installed 2018-11-26)

[Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-12-07)

[Running] com.adobe.acc.installer.v2.plist (Adobe Systems, Inc. - installed 2019-01-10)

[Loaded] com.bombich.ccc.plist (? 41245744 - installed 2015-09-11)

[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2018-07-30)

[Running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-01-02)

[Loaded] com.adobe.SwitchBoard.plist (? 856489a3 - installed 2016-06-02)

[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-12-12)

[Loaded] com.tunnelbear.mac.tbeard.plist (TunnelBear, Inc. - installed 2018-10-25)

[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-07-07)

[Other] PACESupport.plist (? ab6b5614 - installed 2009-03-05)

[Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2018-07-04)

[Other] com.spotflux.Spotflux.tun.plist (Apple - installed 2018-07-04)


User Launch Agents:

[Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2013-12-18)

[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-01-10)

[Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-01-07)


User Login Items:

Dropbox.app (Dropbox, Inc. - installed 2019-01-10)

(/Applications/Dropbox.app)


Firefox.app (Mozilla Corporation - installed 2019-01-10)

(/Applications/Firefox.app)


Flux.app (? - installed 2018-05-10)

(~/Applications/Flux.app)


Internet Plug-ins:

JavaAppletPlugin: Java 8 Update 181 build 13 (installed 2018-10-05)

WacomNetscape: 1.1.0-5 (installed 2011-07-15)

Easy-WebPrint EX: 1.1.0 (installed 2017-03-15)

Unity Web Player: UnityPlayer version 4.5.1f3 (installed 2014-07-02)

WacomSafari: 1.1.0-5 (installed 2011-07-15)

AdobeExManDetect: AdobeExManDetect 1.1.0.0 (installed 2015-01-12)

AdobeAAMDetect: 3.0.0.0 (installed 2019-01-10)

Silverlight: 5.1.41212.0 (installed 2017-03-15)

FlashPlayer-10.6: 32.0.0.114 (installed 2019-01-08)

QuickTime Plugin: 7.7.3 (installed 2018-07-04)

Flash Player: 32.0.0.114 (installed 2019-01-08)

iPhotoPhotocast: 7.0 (installed 2011-05-05)

SharePointBrowserPlugin: 14.7.7 (installed 2017-09-15)

AdobePDFViewer: 9.5.5 (installed 2017-03-15)

CANONiMAGEGATEWAYDL: 2.0.1.10 (installed 2017-03-15)

EPPEX Plugin: 3.0.5.0 (installed 2010-11-17)

CANONiMAGEGATEWAYLI: 2.0.1.6 (installed 2017-03-15)

Scorch: 6.2.0 (installed 2011-07-15)


3rd Party Preference Panes:

Déjà Vu (installed 2017-03-15)

Flash Player (installed 2018-12-17)

FUSE for OS X (OSXFUSE) (installed 2011-09-07)

GPGPreferences (installed 2017-03-15)

Java (installed 2018-07-07)

StuffIt AVR (installed 2011-07-15)


Time Machine:

Time Machine information not available without Full Drive Access.


Performance:

System Load: 6.05 (1 min ago) 7.16 (5 min ago) 12.08 (15 min ago)

Nominal I/O speed: 10.93 MB/s

File system: 65.07 seconds

Write speed: 675 MB/s

Read speed: 761 MB/s


CPU Usage:

Type Overall

System 7 %

User 37 %

Idle 56 %


Top Processes by CPU:

Process (count) CPU (Source - Location)

Other processes 108.18 % (?)

distnoted 24.81 % (Apple)

TextEdit 22.53 % (Apple)

EtreCheck 5.85 % (App Store)

sharedfilelistd 5.72 % (Apple)


Top Processes by Memory:

Process (count) RAM usage (Source - Location)

firefox 611 MB (Mozilla Corporation)

EtreCheck 510 MB (App Store)

Adobe Desktop Service 207 MB (Adobe Systems, Inc.)

Dropbox 192 MB (Dropbox, Inc.)

Finder 157 MB (Apple)


Top Processes by Network Use:

Process Input / Output (Source - Location)

Mail 1 MB / 36 KB (Apple)

Dropbox 90 KB / 129 KB (Dropbox, Inc.)

mDNSResponder 109 KB / 57 KB (Apple)

SophosSXLD 10 KB / 25 KB (Sophos)

apsd 4 KB / 3 KB (Apple)


Virtual Memory Information:

Available RAM 2.81 GB

Free RAM 16 MB

Used RAM 13.19 GB

Cached files 2.79 GB

Swap Used 2 MB


Software Installs (past 30 days):

Install Date Name (Version)

2019-01-08 Adobe Flash Player (10.2.152.33)

2019-01-14 EtreCheck (5.1)

2019-01-14 Malwarebytes for Mac


Clean up:

/Library/LaunchAgents/jp.co.canon.SELPHYCP.BG.plist

/Library/Printers/Canon/SELPHYCP/Utilities/SELPHY CP Notificator.app/Contents/MacOS/SELPHY CP Notificator

Executable not found


Diagnostics Information (past 7 days):

Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.


End of report

 

[dg2rbf]

Hi,
ich würde noch den Adobe FlashPlayer deinstallieren, dieser ist von Adobe abgekündigt worden, ist heute, in Zeiten von html5, veraltet und unnötig geworden, sonst ist alles Ok.

Gruß Franz

 

[Streichkandidat]

Hmh. Also alles okay nach Ansicht von Etrecheck. Aber mein ursprüngliches Problem besteht ja nach wie vor.

 

[dg2rbf]

Hi,
scheinbar liegt dieses Problem tiefer im System begraben, mehr kann ich dazu nicht sagen, es gib aber hier im Forum User die noch fitter sind, mal sehen was diese zu diesem Problem von sich geben, du kannst auch mal im Programm Konsole in /Programme/Dienstprogramme die Fehlermeldungen des Systems mal hier Posten.

Gruß Franz

 

[Streichkandidat]

Okay, vielen Dank dir!
Die Fehlermeldungen wiederholen sich andauernd:

fehler 23:08:21.099352 +0100 wirelessproxd Error starting advertising - Unknown error.
fehler 23:08:21.099437 +0100 wirelessproxd Advertising failed to start for client identityservicesd type 12 with error: Unknown error.
fehler 23:08:21.099607 +0100 wirelessproxd Advertising failed to start for client sharingd type 16 with error: Unknown error.
fehler 23:08:21.100090 +0100 sharingd Nearby advertising failed to start of type: 16 with error: Unknown error.
fehler 23:08:21.100090 +0100 identityservicesd Continuity advertising failed to start of type: 12 with error: Unknown error.
fehler 23:08:21.100273 +0100 wirelessproxd Error starting advertising - Unknown error.
fehler 23:08:21.100742 +0100 sharingd Nearby advertising failed to start of type: 16 with error: Unknown error.
fehler 23:08:21.100351 +0100 wirelessproxd Advertising failed to start for client identityservicesd type 12 with error: Unknown error.
fehler 23:08:21.100462 +0100 wirelessproxd Advertising failed to start for client sharingd type 16 with error: Unknown error.
fehler 23:08:21.102655 +0100 identityservicesd Continuity advertising failed to start of type: 12 with error: Unknown error.
fehler 23:08:21.104081 +0100 sharingd Did fail to start advertising for Activity (Der Vorgang konnte nicht abgeschlossen werden. (com.apple.identityservices.error-Fehler 200.))
fehler 23:08:21.104309 +0100 sharingd Did fail to start advertising for Activity (Der Vorgang konnte nicht abgeschlossen werden. (com.apple.identityservices.error-Fehler 200.))
fehler 23:08:25.870176 +0100 wirelessproxd Error starting advertising - Unknown error.
fehler 23:08:25.870719 +0100 identityservicesd Continuity advertising failed to start of type: 12 with error: Unknown error.
fehler 23:08:25.870333 +0100 wirelessproxd Advertising failed to start for client identityservicesd type 12 with error: Unknown error.
fehler 23:08:25.871024 +0100 sharingd Nearby advertising failed to start of type: 16 with error: Unknown error.
fehler 23:08:25.870595 +0100 wirelessproxd Advertising failed to start for client sharingd type 16 with error: Unknown error.
fehler 23:08:25.872084 +0100 sharingd Did fail to start advertising for Activity (Der Vorgang konnte nicht abgeschlossen werden. (com.apple.identityservices.error-Fehler 200.))
fehler 23:08:25.873250 +0100 identityservicesd Continuity advertising failed to start of type: 12 with error: Unknown error.
fehler 23:08:25.872108 +0100 wirelessproxd Error starting advertising - Unknown error.

 

[Macbeatnik]

Das sind Fehler in der Netzwerkverbindung, bzw. Fehler beim Zugriff auf Dienste, die ein Netzwerk benötigen.( du hast ja einiges installiert, das netzwerkaktivitaten einregelt und überwacht)
Du solltest auch die von dir installierte malware Sophos entfernen, die hat zum einen, die adware, die seit mehr als 2 Jahren auf dem Rechner lag nicht erkannt und zum anderen ist diese bekannt für alle möglichen Probleme.

Zum mds.store Problem, hast du den Spotlight Index denn schon mal komplett neu angelegt, aus dem eingangspost geht nur hervor, das du die voreingestellten Kategorien ausgestellt hast?

 

[Streichkandidat]

Hallo Macbeatnik!
Sophos habe ich inzwischen entfernt. Spotlight habe ich mal aus und wieder angestellt per sudo mdutil -a -i off¶ bzw -on im Terminal. Meintest du das mit Spotlight Index neu angelegt?
Und kannst du mir sagen, was ich installiert habe, was Netzwerkaktivitäten einregelt und überwacht bzw. was ich davon entfernen kann?