Hallo,

auch mir ist es passiert, dass ich dem Link in der Mail angeklickt habe.
Ich konnte keinen Download registrieren und habe bisher keine ungewöhnliche Datei finden können.

anbei der Mail-Text:

Sehr geehrte Damen und Herren,

Ihre Sendung 70569515755 wurde an DHL übergeben und wird voraussichtlich am Montag, den 04.05. zwischen 12:00 und 16:30 Uhr zugestellt.

Aktueller Status der Lieferung bei DHL abrufbar.
hxxp://goscinnaprzemysl.pl/tymsiAaTXKedc

Bitte halten Sie den Nachnahmebetrag in Höhe von 17.9 Euro passend bereit.

Mit besten Grüßen,
Ihr DHL Team


Die versteckten Dateien habe ich im Terminal schon sichtbar gemacht und einen Adware Media System Snap Shot erstellt.

dwareMedic 2.2.2 system report - Sonntag, 10. Mai 2015 @ 05:50:41
Mac OS X version 10.8.5
5:50 up 18:55, 2 users, load averages: 0.29 0.35 0.44

Safari extensions
---------------
/Users/xxx/Library/Safari/Extensions/Ghostery-2.safariextz
Name: Ghostery
Modified: Mittwoch, 25. Februar 2015 @ 11:21:06

Chrome extensions
---------------
None

Firefox extensions
---------------
None

Login items
---------------
Android File Transfer Agent

Startup items
---------------
total 0
drwxr-xr-x 4 root wheel 136 May 3 2010 AlesisFirewire
drwxr-xr-x 7 root wheel 238 Jan 2 2012 M-Audio FireWire Audio Helper
drwxr-xr-x 6 root wheel 204 Jul 27 2007 Parallels
drwxr-xr-x 5 root wheel 170 Jul 27 2007 ParallelsTransporter

System startup items
---------------
None

User launch agents
---------------
total 48
-rw-r--r-- 1 xxx staff 425 Oct 8 2011 com.apple.FolderActions.enabled.plist
-rw-r--r-- 1 xxx staff 517 Oct 8 2011 com.apple.FolderActions.folders.plist
-rw-r--r--@ 1 xxx staff 804 Oct 9 2014 com.google.keystone.agent.plist
-rw-r--r-- 1 xxx staff 497 Aug 1 2014 com.nero.HSMMonitor.plist
-rw-r--r-- 1 xxx staff 767 Apr 24 20:43 com.valvesoftware.steamclean.plist
-rw-r--r-- 1 xxx staff 677 Feb 3 2014 org.virtualbox.vboxwebsrv.plist

System launch agents
---------------
total 32
-rw-r--r-- 1 root wheel 612 Apr 11 2014 com.adobe.AAM.Updater-1.0.plist
-rw-r--r--@ 1 root wheel 588 Jan 8 2009 com.epson.epw.agent.plist
-rw-r--r-- 1 root wheel 721 Aug 11 2014 org.macosforge.xquartz.startx.plist

System launch daemons
---------------
total 112
-rw-r--r-- 1 root wheel 617 Apr 11 2014 com.adobe.SwitchBoard.plist
-rw-r--r-- 1 root wheel 462 Apr 12 04:50 com.adobe.fpsaud.plist
-rw-r--r-- 1 root wheel 543 Jul 11 2011 com.apple.aelwriter.plist
-rwxr-xr-x 1 root wheel 562 Oct 3 2013 com.line6.l6ksettingmgr.plist
-rw-r--r-- 1 root wheel 487 Jul 28 2011 com.m-audio.firewire.helper.plist
-rw-r--r-- 1 root wheel 568 Mar 10 2011 com.microsoft.office.licensing.helper.plist
-rw-r--r-- 1 root admin 406 Apr 26 2010 com.rane.sixtyeight.daemon.plist
-rw-r--r-- 1 root admin 402 May 17 2011 com.rane.sixtyone.daemon.plist
-rw-r--r-- 1 root admin 402 Jul 6 2011 com.rane.sixtytwo.daemon.plist
-rw-r--r-- 1 root admin 392 Jan 5 2011 com.rane.sl2.daemon.plist
-rw-r--r-- 1 root admin 392 Apr 26 2010 com.rane.sl3.daemon.plist
-rw-r--r-- 1 root admin 392 Nov 15 2010 com.rane.sl4.daemon.plist
-rw-r--r-- 1 root wheel 670 Aug 11 2014 org.macosforge.xquartz.privileged_startx.plist
lrwxr-xr-x 1 root wheel 76 Feb 3 2014 org.virtualbox.startup.plist -> ../Application Support/VirtualBox/LaunchDaemons/org.virtualbox.startup.plist

Third-party kernel extensions
---------------
tc.tctechnologies.driver.AlesisFirewire (8671) <98 38 5 4 3>
com.serato.usb.kext (2.3.0) <33 4 3>
com.Cycling74.driver.Soundflower (1.5.2) <98 5 4 3>
org.virtualbox.kext.VBoxDrv (4.3.6) <7 5 4 3 1>
org.virtualbox.kext.VBoxUSB (4.3.6) <127 46 33 7 5 4 3 1>
org.virtualbox.kext.VBoxNetFlt (4.3.6) <127 7 5 4 3 1>
org.virtualbox.kext.VBoxNetAdp (4.3.6) <127 5 4 1>

User cron tasks
---------------
None

Root cron tasks
---------------
None

launchd.conf contents
---------------
None

DNS settings
---------------
None

Hosts file
---------------
##
# Host Database
#
# localhost is used to configure the loopback interface
# when the system is booting. Do not change this entry.
##
127.0.0.1 localhost
255.255.255.255 broadcasthost
::1 localhost
fe80::1%lo0 localhost

Scan log
---------------
Log file is empty


Würde mich sehr über Hilfe freuen.

danke vorab schonmal
mamalow

Hast du irgendwelche Probleme erkannt oder bestehen welche?
Für gewöhnlich funktionieren die Attachments nicht auch wenn man diese aus versehen anklickt. Wie ich gelesen habe wurdest du auf eine Seite geleitet. Hast du dort etwas eingeben?

Lade dir doch mal bitte EtreCheck herunter, entpacken und ausführen.
Poste das Log hierher.

Probleme konnte ich bisher nicht feststellen.
Es war auch kein Anhang an der Email. Nur der link zu der Seite, die ich lediglich wieder geschlossen habe ohne etwas anzuklicken.

EtreCheck version: 2.2 (132)
Report generated 5/10/15 9:57 AM
Download EtreCheck from hxxp://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.

Hardware Information: ℹ️
MacBook Pro (15-inch, Early 2011) (Technical Specifications)
MacBook Pro - model: MacBookPro8,2
1 2 GHz Intel Core i7 CPU: 4-core
8 GB RAM
BANK 0/DIMM0
4 GB DDR3 1333 MHz ok
BANK 1/DIMM0
4 GB DDR3 1333 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Battery: Health = Normal - Cycle count = 411 - SN = D86102304J2DGDLAD

Video Information: ℹ️
Intel HD Graphics 3000 - VRAM: 512 MB
Color LCD 1440 x 900
AMD Radeon HD 6490M - VRAM: 256 MB

System Software: ℹ️
OS X 10.8.5 (12F2518) - Time since boot: 23:0:44

Disk Information: ℹ️
Hitachi HTS545050B9A302 disk0 : (500,11 GB)
disk0s1 (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / : 499.25 GB (27.40 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

MATSHITADVD-R UJ-898

USB Information: ℹ️
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. BRCM2070 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. FaceTime HD Camera (Built-in)
Microsoft Compact Optical Mouse 500
Apple Computer, Inc. IR Receiver

Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus

Gatekeeper: ℹ️
Mac App Store and identified developers

Kernel Extensions: ℹ️
/Library/Application Support/VirtualBox
[loaded] org.virtualbox.kext.VBoxDrv (4.3.6) [Click for support]
[loaded] org.virtualbox.kext.VBoxNetAdp (4.3.6) [Click for support]
[loaded] org.virtualbox.kext.VBoxNetFlt (4.3.6) [Click for support]
[loaded] org.virtualbox.kext.VBoxUSB (4.3.6) [Click for support]

/Library/StartupItems/Parallels
[not loaded] com.parallels.kext.Pvsvnic (3.0) [Click for support]

/System/Library/Extensions
[loaded] com.Cycling74.driver.Soundflower (1.5.2) [Click for support]
[not loaded] com.line6.driver.xtaudio (7.3.6 - SDK 10.7) [Click for support]
[not loaded] com.m-audio.driver.firewire (1.10.2) [Click for support]
[not loaded] com.parallels.kext.ConnectUSB (3.0.0) [Click for support]
[not loaded] com.parallels.kext.Pvsnet (3.0) [Click for support]
[not loaded] com.parallels.kext.hypervisor (3.0) [Click for support]
[not loaded] com.rane.driver.sixtyeight.10.6 (1.1.2f4) [Click for support]
[not loaded] com.rane.driver.sixtyone.10.6 (1.1.0f1 - SDK 10.6) [Click for support]
[not loaded] com.rane.driver.sixtytwo.10.6 (1.1.0f3 - SDK 10.6) [Click for support]
[not loaded] com.rane.driver.sl2.10.6 (1.0.1f3) [Click for support]
[not loaded] com.rane.driver.sl3.10.6 (1.3.2f6) [Click for support]
[not loaded] com.rane.driver.sl4.10.6 (1.0.1f2) [Click for support]
[loaded] com.serato.usb.kext (2.3.0) [Click for support]
[not loaded] com.tascam.usb2audio.driver (2.0.4) [Click for support]
[not loaded] com.wibu.codemeter.CmUSBMassStorage (1.0.7) [Click for support]
[loaded] tc.tctechnologies.driver.AlesisFirewire (8671) [Click for support]

/System/Library/Extensions/TASCAM_US1xx.kext/Contents/PlugIns
[not loaded] com.tascam.usb2audio.driver_TIGER (2.0.4) [Click for support]

Startup Items: ℹ️
AlesisFirewire: Path: /Library/StartupItems/AlesisFirewire
M-Audio FireWire Audio Helper: Path: /Library/StartupItems/M-Audio FireWire Audio Helper
Parallels: Path: /Library/StartupItems/Parallels
ParallelsTransporter: Path: /Library/StartupItems/ParallelsTransporter
Startup items are obsolete in OS X Yosemite

Launch Agents: ℹ️
[not loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]
[running] com.epson.epw.agent.plist [Click for support]
[loaded] org.macosforge.xquartz.startx.plist [Click for support]

Launch Daemons: ℹ️
[failed] com.adobe.fpsaud.plist [Click for support] [Click for details]
[loaded] com.adobe.SwitchBoard.plist [Click for support]
[running] com.line6.l6ksettingmgr.plist [Click for support]
[running] com.m-audio.firewire.helper.plist [Click for support]
[loaded] com.microsoft.office.licensing.helper.plist [Click for support]
[running] com.rane.sixtyeight.daemon.plist [Click for support]
[running] com.rane.sixtyone.daemon.plist [Click for support]
[running] com.rane.sixtytwo.daemon.plist [Click for support]
[running] com.rane.sl2.daemon.plist [Click for support]
[running] com.rane.sl3.daemon.plist [Click for support]
[running] com.rane.sl4.daemon.plist [Click for support]
[loaded] org.macosforge.xquartz.privileged_startx.plist [Click for support]
[not loaded] org.virtualbox.startup.plist [Click for support]

User Launch Agents: ℹ️
[loaded] com.google.keystone.agent.plist [Click for support]
[failed] com.nero.HSMMonitor.plist [Click for support] [Click for details]
[loaded] com.valvesoftware.steamclean.plist [Click for support]
[not loaded] org.virtualbox.vboxwebsrv.plist [Click for support]

User Login Items: ℹ️
Android File Transfer Agent Programm (/Users/[redacted]/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)

Internet Plug-ins: ℹ️
JavaAppletPlugin: Version: 14.6.0 - SDK 10.8 Check version
FlashPlayer-10.6: Version: 17.0.0.169 - SDK 10.6 [Click for support]
QuickTime Plugin: Version: 7.7.1
NP_2020Player_IKEA: Version: 5.0.94.0 - SDK 10.6 [Click for support]
Flash Player: Version: 17.0.0.169 - SDK 10.6 [Click for support]
SharePointBrowserPlugin: Version: 14.1.0 [Click for support]
Unity Web Player: Version: UnityPlayer version 4.1.2f1 [Click for support]
iPhotoPhotocast: Version: 7.0 - SDK 10.8

Safari Extensions: ℹ️
Ghostery

Audio Plug-ins: ℹ️
SeratoVirtualAudioPlugIn: Version: 1.0.11 [Click for support]
TASCAM_US1xx: Version: Unknown [Click for support]

3rd Party Preference Panes: ℹ️
Flash Player [Click for support]
Line6AudioMIDI [Click for support]
PreferencesPane [Click for support]
SIXTY-EIGHT Audio Control Panel [Click for support]
Sixty-One Audio Control Panel [Click for support]
Sixty-Two Audio Control Panel [Click for support]
SL 2 Audio Control Panel [Click for support]
SL 3 Audio Control Panel [Click for support]
SL 4 Audio Control Panel [Click for support]

Time Machine: ℹ️
Skip System Files: NO
Mobile backups: OFF
Auto backup: NO - Auto backup turned off
Volumes being backed up:
Macintosh HD: Disk size: 499.25 GB Disk used: 471.85 GB
Destinations:
Zeitmaschine [Local]
Total size: 750.15 GB
Total number of backups: 8
Oldest backup: 2014-04-17 10:29:23 +0000
Last backup: 2015-04-10 13:39:46 +0000
Size of backup disk: Too small
Backup size 750.15 GB < (Disk used 471.85 GB X 3)

Top Processes by CPU: ℹ️
27% WindowServer
16% WebProcess
3% Safari
3% fontd
0% distnoted(3)

Top Processes by Memory: ℹ️
459 MB helpd
123 MB WebProcess
106 MB Safari
98 MB mds
90 MB Mail

Virtual Memory Information: ℹ️
3.77 GB Free RAM
4.22 GB Used RAM
0 B Swap Used

Diagnostics Information: ℹ️
May 9, 2015, 10:55:46 AM Self test - passed

Sauber!

super. vielen Dank.
zu meiner Information. Was hättest du erwartet, damit es "nicht sauber" gewesen wäre?

grüße
mamalow

Nein, dass war nur die Bestätigung. In solchen Fällen ist es äußerst selten sich auf diesem Wege Malware einzufangen. Dennoch ist es besser einmal mehr zu Prüfen...