Hallo zusammen,
seitdem ich mit meinem Mac in Indonesien war, öffnen sich bei mir ca. alle 3-4 Klicks im Browser verschiedenste Werbefenster. Sowohl in Safari, als auch in Chrome und Firefox.
Ich hab zunächst mal sämtliche Verläufe/Cookies gelöscht und Pop-Ups blockiert. Dann hab ich Malwarebytes installiert. Der hat ein paar Sachen gefunden, die dann gelöscht wurden. Problem war aber immer noch da.
Bin dann im Netz auf EtreCheck gestoßen (siehe unten). Mit dem Ergebnis kann ich leider herzlich wenig anfangen. So langsam hören meine Kenntnisse dann auch auf. Vielleicht kann hier irgendjemand verständlich helfen?! Es wär super!!!
EtreCheck version: 3.4.6 (460)
Report generated 2017-10-23 10:59:48
Download EtreCheck from https://etrecheck.com
Runtime: 2:36
Performance: Excellent
Click the [Lookup] links for more information from Apple Support Communities.
Click the [Details] links for more information about that line.
Problem: No problem - just checking
Hardware Information: ⓘ
MacBook Air (13-inch, Early 2014)
[Technical Specifications] - [User Guide] - [Warranty & Service]
MacBook Air - model: MacBookAir6,2
1 1,4 GHz Intel Core i5 (i5-4260U) CPU: 2-core
4 GB RAM Not upgradeable
BANK 0/DIMM0
2 GB DDR3 1600 MHz ok
BANK 1/DIMM0
2 GB DDR3 1600 MHz ok
Handoff/Airdrop2: supported
Wireless: en0: 802.11 a/b/g/n/ac
Battery: Health = Normal - Cycle count = 523
iCloud Quota: 32.61 GB available
Video Information: ⓘ
Intel HD Graphics 5000 - VRAM: 1536 MB
Color LCD 1440 x 900
Disk Information: ⓘ
APPLE SSD SD0128F disk0: (121,33 GB) (Solid State - TRIM: Yes)
[Show SMART report]
EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB
(disk0s2) <not mounted> [CoreStorage Container]: 120.47 GB
Recovery HD (disk0s3 - Journaled HFS+) <not mounted> [Recovery]: 650 MB
USB Information: ⓘ
USB30Bus
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Logitech USB Receiver
Thunderbolt Information: ⓘ
Apple Inc. thunderbolt_bus
Virtual disks: ⓘ
Macintosh HD (disk1 - Journaled HFS+) / [Startup]: 120.11 GB (28.37 GB free)
Encrypted AES-XTS (Unlocked)
Physical disk: disk0s2 120.47 GB Online
System Software: ⓘ
macOS Sierra 10.12.6 (16G29) - Time since boot: about 28 days
Gatekeeper: ⓘ
Mac App Store and identified developers
Kernel Extensions: ⓘ
/Applications/DAEMON Tools Lite.app
[not loaded] com.disc-soft.DAEMONTools.VirtualSCSIBus (1.0.2 - SDK 10.8) [Lookup]
/Library/Extensions
[loaded] com.malwarebytes.mbam.rtprotection (3.0 - SDK 10.12) [Lookup]
System Launch Agents: ⓘ
[not loaded] 7 Apple tasks
[loaded] 163 Apple tasks
[running] 81 Apple tasks
[killed] 34 Apple tasks
34 processes killed due to insufficient RAM
System Launch Daemons: ⓘ
[failed] org.postfix.master.plist (Apple, Inc. - installed 2017-04-29)
[not loaded] 42 Apple tasks
[loaded] 163 Apple tasks
[running] 90 Apple tasks
[killed] 23 Apple tasks
23 processes killed due to insufficient RAM
Launch Agents: ⓘ
[loaded] com.cisco.anyconnect.gui.plist (? 40bd3462 0 - installed 2016-06-29) [Lookup]
[running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2017-10-22) [Lookup]
[loaded] com.oracle.java.Java-Updater.plist (? 53c8a4d7 72ac4dde - installed 2017-10-22) [Lookup]
[loaded] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Lookup]
Launch Daemons: ⓘ
[loaded] com.adobe.fpsaud.plist (? 2afb3af7 ed6bc6b2 - installed 2017-10-12) [Lookup]
[running] com.cisco.anyconnect.vpnagentd.plist (? a7cbca7 81eb9f59 - installed 2015-12-23) [Lookup]
[loaded] com.disc-soft.DAEMONTools.PrivilegedHelper.plist (? fef6c2b2 2814f5cd - installed 2014-07-22) [Lookup]
[running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2017-10-22) [Lookup]
[running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2017-10-22) [Lookup]
[running] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-08-30) [Lookup]
[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e afb3bef0 - installed 2010-08-31) [Lookup]
[loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-07-02) [Lookup]
[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-09-06) [Lookup]
[loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Lookup]
User Launch Agents: ⓘ
[loaded] com.adobe.ARM.[...].plist (? 560d19c8 796f4462 - installed 2017-09-01) [Lookup]
[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Lookup]
[loaded] com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-06-02) [Lookup]
[running] com.spotify.webhelper.plist (Spotify - installed 2017-10-22) [Lookup]
User Login Items: ⓘ
iTunesHelper Programm (Apple, Inc. - installed 2017-09-13)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
AdobeResourceSynchronizer Programm - Hidden
(/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app)
Spotify Programm - Hidden
(/Applications/Spotify.app)
Android File Transfer Agent Programm
(~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
Photo Stream URL SMLoginItem - Hidden (Apple, Inc. - installed 2015-03-26)
(/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app)
ATLoginItemHelper SMLoginItem - Hidden (Apple, Inc. - installed 2017-10-15)
(/Applications/DrCleaner.app/Contents/Library/LoginItems/ATLoginItemHelper.app)
Internet Plug-ins: ⓘ
FlashPlayer-10.6: 27.0.0.170 (installed 2017-10-17) [Lookup]
QuickTime Plugin: 7.7.3 (installed 2017-08-03)
AdobePDFViewerNPAPI: 11.0.22 (installed 2017-09-01) [Lookup]
AdobePDFViewer: 11.0.22 (installed 2017-09-01) [Lookup]
Flash Player: 27.0.0.170 (installed 2017-10-17) [Lookup]
SharePointBrowserPlugin: 14.7.3 (installed 2017-04-15) [Lookup]
PepperFlashPlayer: 27.0.0.170 (installed 2017-10-17) [Lookup]
Silverlight: 5.1.50901.0 (installed 2017-01-18) [Lookup]
JavaAppletPlugin: Java 8 Update 151 build 12 (installed 2017-10-22) Check version
User internet Plug-ins: ⓘ
RealPlayer Plugin: Unknown
3rd Party Preference Panes: ⓘ
Flash Player (installed 2017-10-12) [Lookup]
Java (installed 2017-10-22) [Lookup]
Time Machine: ⓘ
Time Machine not configured!
Top Processes by CPU: ⓘ
19% (osascript)
14% osascript
7% kernel_task
6% Safari
6% WindowServer
Top Processes by Memory: ⓘ
743 MB kernel_task
271 MB com.apple.WebKit.WebContent
155 MB com.apple.WebKit.WebContent
122 MB com.apple.WebKit.WebContent
107 MB Safari
Top Processes by Network Use: ⓘ
Input Output Process name
5 MB 753 KB mDNSResponder
846 KB 105 KB com.apple.WebKit.Networking
511 KB 14 KB Mail
305 KB 89 KB netbiosd
39 KB 33 KB Spotify
Top Processes by Energy Use: ⓘ
14.42 Google Chrome
5.72 com.apple.WebKit.WebContent
4.20 WindowServer
4.12 Safari
3.56 loginwindow
Virtual Memory Information: ⓘ
590 MB Available RAM
21 MB Free RAM
3.42 GB Used RAM
569 MB Cached files
1.06 GB Swap Used
Software installs (last 30 days): ⓘ
Adobe Pepper Flash Player: (installed 2017-09-24)
Fotor Photo Editor: 3.4.0 (installed 2017-10-02)
Dr. Cleaner: 3.3.0 (installed 2017-10-04)
Adobe Flash Player: (installed 2017-10-10)
Adobe Pepper Flash Player: (installed 2017-10-10)
Dr. Cleaner: 3.3.1 (installed 2017-10-15)
Adobe Flash Player: (installed 2017-10-17)
Adobe Pepper Flash Player: (installed 2017-10-17)
Java 8 Update 151: (installed 2017-10-22)
Malwarebytes for Mac: (installed 2017-10-22)
Install information may not be complete.
Diagnostics Events (last 3 days for minor events): ⓘ
2017-10-22 23:26:33 iTunes.app High CPU use [Open] [Details]
2017-10-22 22:33:06 cloudd Crash [Open]
Cause: *** Terminating app due to uncaught exception 'NSGenericException', reason: 'Failed to step (6922): "select apsEnvironment, isApplication, isCKSystemService, canMasquerade, canSetEnvironment, allowCustomAccounts, canAccessProtectionData, canSetDeviceIdentifier, hasAccessDuringBuddy, hasLightweightPCS, hasTCCAuthorization, allowsPowerNapScheduling, isOOPUI, allowsParticipantPII, displaysSystemAcceptPrompt, appIdentifier, clientPrefix from AppBundle where appBundleIdentifier = ? AND sourceAppBundleIdentifier = ?" - errcode:1b0a, msg:"disk I/O error", size: (null), path:/Users/USER/Library/Caches/*/CloudKitMetadata, fs
null)/(null)'
abort() called
terminating with uncaught exception of type NSException
Files deleted by EtreCheck: ⓘ
2017-10-22 22:21:12 - ~/Library/LaunchAgents/com.bittorrent.uTorrent.plist - Unknown
seitdem ich mit meinem Mac in Indonesien war, öffnen sich bei mir ca. alle 3-4 Klicks im Browser verschiedenste Werbefenster. Sowohl in Safari, als auch in Chrome und Firefox.
Ich hab zunächst mal sämtliche Verläufe/Cookies gelöscht und Pop-Ups blockiert. Dann hab ich Malwarebytes installiert. Der hat ein paar Sachen gefunden, die dann gelöscht wurden. Problem war aber immer noch da.
Bin dann im Netz auf EtreCheck gestoßen (siehe unten). Mit dem Ergebnis kann ich leider herzlich wenig anfangen. So langsam hören meine Kenntnisse dann auch auf. Vielleicht kann hier irgendjemand verständlich helfen?! Es wär super!!!
EtreCheck version: 3.4.6 (460)
Report generated 2017-10-23 10:59:48
Download EtreCheck from https://etrecheck.com
Runtime: 2:36
Performance: Excellent
Click the [Lookup] links for more information from Apple Support Communities.
Click the [Details] links for more information about that line.
Problem: No problem - just checking
Hardware Information: ⓘ
MacBook Air (13-inch, Early 2014)
[Technical Specifications] - [User Guide] - [Warranty & Service]
MacBook Air - model: MacBookAir6,2
1 1,4 GHz Intel Core i5 (i5-4260U) CPU: 2-core
4 GB RAM Not upgradeable
BANK 0/DIMM0
2 GB DDR3 1600 MHz ok
BANK 1/DIMM0
2 GB DDR3 1600 MHz ok
Handoff/Airdrop2: supported
Wireless: en0: 802.11 a/b/g/n/ac
Battery: Health = Normal - Cycle count = 523
iCloud Quota: 32.61 GB available
Video Information: ⓘ
Intel HD Graphics 5000 - VRAM: 1536 MB
Color LCD 1440 x 900
Disk Information: ⓘ
APPLE SSD SD0128F disk0: (121,33 GB) (Solid State - TRIM: Yes)
[Show SMART report]
EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB
(disk0s2) <not mounted> [CoreStorage Container]: 120.47 GB
Recovery HD (disk0s3 - Journaled HFS+) <not mounted> [Recovery]: 650 MB
USB Information: ⓘ
USB30Bus
Apple Inc. BRCM20702 Hub
Apple Inc. Bluetooth USB Host Controller
Logitech USB Receiver
Thunderbolt Information: ⓘ
Apple Inc. thunderbolt_bus
Virtual disks: ⓘ
Macintosh HD (disk1 - Journaled HFS+) / [Startup]: 120.11 GB (28.37 GB free)
Encrypted AES-XTS (Unlocked)
Physical disk: disk0s2 120.47 GB Online
System Software: ⓘ
macOS Sierra 10.12.6 (16G29) - Time since boot: about 28 days
Gatekeeper: ⓘ
Mac App Store and identified developers
Kernel Extensions: ⓘ
/Applications/DAEMON Tools Lite.app
[not loaded] com.disc-soft.DAEMONTools.VirtualSCSIBus (1.0.2 - SDK 10.8) [Lookup]
/Library/Extensions
[loaded] com.malwarebytes.mbam.rtprotection (3.0 - SDK 10.12) [Lookup]
System Launch Agents: ⓘ
[not loaded] 7 Apple tasks
[loaded] 163 Apple tasks
[running] 81 Apple tasks
[killed] 34 Apple tasks
34 processes killed due to insufficient RAM
System Launch Daemons: ⓘ
[failed] org.postfix.master.plist (Apple, Inc. - installed 2017-04-29)
[not loaded] 42 Apple tasks
[loaded] 163 Apple tasks
[running] 90 Apple tasks
[killed] 23 Apple tasks
23 processes killed due to insufficient RAM
Launch Agents: ⓘ
[loaded] com.cisco.anyconnect.gui.plist (? 40bd3462 0 - installed 2016-06-29) [Lookup]
[running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2017-10-22) [Lookup]
[loaded] com.oracle.java.Java-Updater.plist (? 53c8a4d7 72ac4dde - installed 2017-10-22) [Lookup]
[loaded] org.macosforge.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Lookup]
Launch Daemons: ⓘ
[loaded] com.adobe.fpsaud.plist (? 2afb3af7 ed6bc6b2 - installed 2017-10-12) [Lookup]
[running] com.cisco.anyconnect.vpnagentd.plist (? a7cbca7 81eb9f59 - installed 2015-12-23) [Lookup]
[loaded] com.disc-soft.DAEMONTools.PrivilegedHelper.plist (? fef6c2b2 2814f5cd - installed 2014-07-22) [Lookup]
[running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2017-10-22) [Lookup]
[running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2017-10-22) [Lookup]
[running] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-08-30) [Lookup]
[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e afb3bef0 - installed 2010-08-31) [Lookup]
[loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-07-02) [Lookup]
[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-09-06) [Lookup]
[loaded] org.macosforge.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2016-10-26) [Lookup]
User Launch Agents: ⓘ
[loaded] com.adobe.ARM.[...].plist (? 560d19c8 796f4462 - installed 2017-09-01) [Lookup]
[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Lookup]
[loaded] com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-06-02) [Lookup]
[running] com.spotify.webhelper.plist (Spotify - installed 2017-10-22) [Lookup]
User Login Items: ⓘ
iTunesHelper Programm (Apple, Inc. - installed 2017-09-13)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
AdobeResourceSynchronizer Programm - Hidden
(/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app)
Spotify Programm - Hidden
(/Applications/Spotify.app)
Android File Transfer Agent Programm
(~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
Photo Stream URL SMLoginItem - Hidden (Apple, Inc. - installed 2015-03-26)
(/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app)
ATLoginItemHelper SMLoginItem - Hidden (Apple, Inc. - installed 2017-10-15)
(/Applications/DrCleaner.app/Contents/Library/LoginItems/ATLoginItemHelper.app)
Internet Plug-ins: ⓘ
FlashPlayer-10.6: 27.0.0.170 (installed 2017-10-17) [Lookup]
QuickTime Plugin: 7.7.3 (installed 2017-08-03)
AdobePDFViewerNPAPI: 11.0.22 (installed 2017-09-01) [Lookup]
AdobePDFViewer: 11.0.22 (installed 2017-09-01) [Lookup]
Flash Player: 27.0.0.170 (installed 2017-10-17) [Lookup]
SharePointBrowserPlugin: 14.7.3 (installed 2017-04-15) [Lookup]
PepperFlashPlayer: 27.0.0.170 (installed 2017-10-17) [Lookup]
Silverlight: 5.1.50901.0 (installed 2017-01-18) [Lookup]
JavaAppletPlugin: Java 8 Update 151 build 12 (installed 2017-10-22) Check version
User internet Plug-ins: ⓘ
RealPlayer Plugin: Unknown
3rd Party Preference Panes: ⓘ
Flash Player (installed 2017-10-12) [Lookup]
Java (installed 2017-10-22) [Lookup]
Time Machine: ⓘ
Time Machine not configured!
Top Processes by CPU: ⓘ
19% (osascript)
14% osascript
7% kernel_task
6% Safari
6% WindowServer
Top Processes by Memory: ⓘ
743 MB kernel_task
271 MB com.apple.WebKit.WebContent
155 MB com.apple.WebKit.WebContent
122 MB com.apple.WebKit.WebContent
107 MB Safari
Top Processes by Network Use: ⓘ
Input Output Process name
5 MB 753 KB mDNSResponder
846 KB 105 KB com.apple.WebKit.Networking
511 KB 14 KB Mail
305 KB 89 KB netbiosd
39 KB 33 KB Spotify
Top Processes by Energy Use: ⓘ
14.42 Google Chrome
5.72 com.apple.WebKit.WebContent
4.20 WindowServer
4.12 Safari
3.56 loginwindow
Virtual Memory Information: ⓘ
590 MB Available RAM
21 MB Free RAM
3.42 GB Used RAM
569 MB Cached files
1.06 GB Swap Used
Software installs (last 30 days): ⓘ
Adobe Pepper Flash Player: (installed 2017-09-24)
Fotor Photo Editor: 3.4.0 (installed 2017-10-02)
Dr. Cleaner: 3.3.0 (installed 2017-10-04)
Adobe Flash Player: (installed 2017-10-10)
Adobe Pepper Flash Player: (installed 2017-10-10)
Dr. Cleaner: 3.3.1 (installed 2017-10-15)
Adobe Flash Player: (installed 2017-10-17)
Adobe Pepper Flash Player: (installed 2017-10-17)
Java 8 Update 151: (installed 2017-10-22)
Malwarebytes for Mac: (installed 2017-10-22)
Install information may not be complete.
Diagnostics Events (last 3 days for minor events): ⓘ
2017-10-22 23:26:33 iTunes.app High CPU use [Open] [Details]
2017-10-22 22:33:06 cloudd Crash [Open]
Cause: *** Terminating app due to uncaught exception 'NSGenericException', reason: 'Failed to step (6922): "select apsEnvironment, isApplication, isCKSystemService, canMasquerade, canSetEnvironment, allowCustomAccounts, canAccessProtectionData, canSetDeviceIdentifier, hasAccessDuringBuddy, hasLightweightPCS, hasTCCAuthorization, allowsPowerNapScheduling, isOOPUI, allowsParticipantPII, displaysSystemAcceptPrompt, appIdentifier, clientPrefix from AppBundle where appBundleIdentifier = ? AND sourceAppBundleIdentifier = ?" - errcode:1b0a, msg:"disk I/O error", size: (null), path:/Users/USER/Library/Caches/*/CloudKitMetadata, fs
null)/(null)'abort() called
terminating with uncaught exception of type NSException
Files deleted by EtreCheck: ⓘ
2017-10-22 22:21:12 - ~/Library/LaunchAgents/com.bittorrent.uTorrent.plist - Unknown
