SPAM von meinem Arcor Account

EmmPee · 24.10.2015, 09:36

Hallo allerseits,

mich hat es auch getroffen, wie ich hier lese, nicht als Einzigen. Mir ist es erst aufgefallen, als ich von Arcor Mails als nicht versendbar zurück bekommen habe ...MailDelivery.....und mich anschließend nicht einloggen konnte, da Arcor gesperrt hatte. Auf teuere Nachfrage wegen SPAM Verdacht.
Ich habe mir Malwarebytes Antimalware runtergeladen und hänge den Log gleich mal an, weil das bei den anderen Betroffenen auch der erste Schritt war.

Code:

ATTFilter

Malwarebytes Anti-Malware 1.1.3.72 system report - 24. Oktober 2015 um 10:27:47 MESZ
Mac OS X version Version 10.11 (Build 15A284)
System uptime: 0d 03:29:58

Safari extensions
---------------
(
    "Name: Open in Internet Explorer",
    "Modified: 2015-10-07 05:01:31 +0000",
    "/Users/EmmPee/Library/Safari/Extensions/OpenIE.safariextz"
)

Chrome extensions
---------------
(
)

Firefox extensions
---------------
(
    "Name: Adobe Acrobat DC - Create PDF",
    "Modified: 2015-03-17 06:22:55 +0000",
    "/Library/Application Support/Mozilla/Extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/web2pdfextension@web2pdf.adobedotcom",
    "Name: Disconnect",
    "Modified: 2015-05-30 05:28:40 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/2.0@disconnect.me.xpi",
    "Name: [not a valid Firefox extension]",
    "Modified: 2009-11-15 08:43:48 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/Extensions.rdf",
    "Name: [not a valid Firefox extension]",
    "Modified: 2004-11-08 14:01:00 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/installed-extensions.txt",
    "Name: Pushbullet",
    "Modified: 2015-07-25 18:22:22 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/jid1-BYcQOfYfmBMd9A@jetpack.xpi",
    "Name: [not a valid Firefox extension]",
    "Modified: 2011-07-02 17:18:46 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/nostmp",
    "Name: Print selected text",
    "Modified: 2015-05-27 05:43:32 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/pst@i1024a.pl.xpi",
    "Name: Rain Alarm Extension",
    "Modified: 2015-05-30 05:28:40 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/rain-alarm@mdiener.de",
    "Name: PDF Viewer",
    "Modified: 2015-05-27 03:46:25 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/uriloader@pdf.js.xpi",
    "Name: Flagfox",
    "Modified: 2015-10-24 05:41:52 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi",
    "Name: IE Tab 2 (FF 3.6+)",
    "Modified: 2015-05-30 05:28:40 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}",
    "Name: Nuke Anything Enhanced",
    "Modified: 2015-05-30 05:28:39 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{1ced4832-f06e-413f-aa14-9eb63ad40ace}.xpi",
    "Name: ShowIP",
    "Modified: 2011-07-02 17:18:36 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}(2)",
    "Name: Live HTTP Headers",
    "Modified: 2015-05-30 05:28:39 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}",
    "Name: WOT",
    "Modified: 2015-07-10 05:21:46 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}",
    "Name: FireFTP",
    "Modified: 2015-05-30 05:28:39 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{a7c6cf7f-112c-4500-a7ea-39801a327e5f}",
    "Name: Video DownloadHelper",
    "Modified: 2015-08-18 04:39:53 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi",
    "Name: [not a valid Firefox extension]",
    "Modified: 2015-09-02 08:35:52 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{dc572301-7619-498c-a57d-39143191b318}.xpi",
    "Name: DownThemAll!",
    "Modified: 2015-05-27 05:43:32 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi",
    "Name: Download Manager Tweak",
    "Modified: 2011-07-02 17:18:30 +0000",
    "/Users/EmmPee/Library/Application Support/Firefox/Profiles/94yo1fvv.default/extensions/{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}(2)"
)

Login items
---------------
(
    iTunesHelper
)

System startup items
---------------
(
)

User launch agents
---------------
(
)

System launch agents
---------------
(
    "/Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist",
    "/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist",
    "/Library/LaunchAgents/com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist",
    "/Library/LaunchAgents/com.teamviewer.teamviewer.plist",
    "/Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist"
)

System launch daemons
---------------
(
    "/Library/LaunchDaemons/at.obdev.littlesnitchd.plist",
    "/Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist",
    "/Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist",
    "/Library/LaunchDaemons/com.adobe.fpsaud.plist",
    "/Library/LaunchDaemons/com.malwarebytes.MBAMHelperTool.plist",
    "/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist",
    "/Library/LaunchDaemons/com.teamviewer.Helper.plist",
    "/Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist"
)

Kernel extensions
---------------
(
    "/System/Library/Extensions/acfs.kext",
    "/System/Library/Extensions/acfsctl.kext",
    "/System/Library/Extensions/ALF.kext",
    "/System/Library/Extensions/AMD2400Controller.kext",
    "/System/Library/Extensions/AMD2600Controller.kext",
    "/System/Library/Extensions/AMD3800Controller.kext",
    "/System/Library/Extensions/AMD4600Controller.kext",
    "/System/Library/Extensions/AMD4800Controller.kext",
    "/System/Library/Extensions/AMD5000Controller.kext",
    "/System/Library/Extensions/AMD6000Controller.kext",
    "/System/Library/Extensions/AMD7000Controller.kext",
    "/System/Library/Extensions/AMD8000Controller.kext",
    "/System/Library/Extensions/AMD9000Controller.kext",
    "/System/Library/Extensions/AMDFramebuffer.kext",
    "/System/Library/Extensions/AMDRadeonX3000.kext",
    "/System/Library/Extensions/AMDRadeonX4000.kext",
    "/System/Library/Extensions/AMDSupport.kext",
    "/System/Library/Extensions/Apple16X50Serial.kext",
    "/System/Library/Extensions/Apple16X50Serial.kext/Contents/PlugIns/Apple16X50ACPI.kext",
    "/System/Library/Extensions/Apple_iSight.kext",
    "/System/Library/Extensions/AppleACPIPlatform.kext",
    "/System/Library/Extensions/AppleACPIPlatform.kext/Contents/PlugIns/AppleACPIButtons.kext",
    "/System/Library/Extensions/AppleACPIPlatform.kext/Contents/PlugIns/AppleACPIEC.kext",
    "/System/Library/Extensions/AppleAHCIPort.kext",
    "/System/Library/Extensions/AppleAPIC.kext",
    "/System/Library/Extensions/AppleBacklight.kext",
    "/System/Library/Extensions/AppleBacklightExpert.kext",
    "/System/Library/Extensions/AppleBluetoothMultitouch.kext",
    "/System/Library/Extensions/AppleBluetoothRemote.kext",
    "/System/Library/Extensions/AppleBMC.kext",
    "/System/Library/Extensions/AppleCameraInterface.kext",
    "/System/Library/Extensions/AppleCredentialManager.kext",
    "/System/Library/Extensions/AppleEFIRuntime.kext",
    "/System/Library/Extensions/AppleEFIRuntime.kext/Contents/PlugIns/AppleEFINVRAM.kext",
    "/System/Library/Extensions/AppleFDEKeyStore.kext",
    "/System/Library/Extensions/AppleFileSystemDriver.kext",
    "/System/Library/Extensions/AppleFIVRDriver.kext",
    "/System/Library/Extensions/AppleFSCompressionTypeDataless.kext",
    "/System/Library/Extensions/AppleFSCompressionTypeZlib.kext",
    "/System/Library/Extensions/AppleFWAudio.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleGraphicsDeviceControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleGraphicsDevicePolicy.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleMGPUPowerControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleMuxControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/ApplePolicyControl.kext",
    "/System/Library/Extensions/AppleGraphicsPowerManagement.kext",
    "/System/Library/Extensions/AppleHDA.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAController.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAHardwareConfigDriver.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleMikeyDriver.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/DspFuncLib.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/IOHDAFamily.kext",
    "/System/Library/Extensions/AppleHIDKeyboard.kext",
    "/System/Library/Extensions/AppleHIDKeyboard.kext/Contents/PlugIns/AppleBluetoothHIDKeyboard.kext",
    "/System/Library/Extensions/AppleHIDMouse.kext",
    "/System/Library/Extensions/AppleHIDMouse.kext/Contents/PlugIns/AppleBluetoothHIDMouse.kext",
    "/System/Library/Extensions/AppleHIDMouse.kext/Contents/PlugIns/AppleUSBHIDMouse.kext",
    "/System/Library/Extensions/AppleHIDTransport.kext",
    "/System/Library/Extensions/AppleHPET.kext",
    "/System/Library/Extensions/AppleHPM.kext",
    "/System/Library/Extensions/AppleHSSPIHIDDriver.kext",
    "/System/Library/Extensions/AppleHSSPISupport.kext",
    "/System/Library/Extensions/AppleHV.kext",
    "/System/Library/Extensions/AppleHWSensor.kext",
    "/System/Library/Extensions/AppleInputDeviceSupport.kext",
    "/System/Library/Extensions/AppleIntelBDWGraphics.kext",
    "/System/Library/Extensions/AppleIntelBDWGraphicsFramebuffer.kext",
    "/System/Library/Extensions/AppleIntelCPUPowerManagement.kext",
    "/System/Library/Extensions/AppleIntelCPUPowerManagementClient.kext",
    "/System/Library/Extensions/AppleIntelFramebufferAzul.kext",
    "/System/Library/Extensions/AppleIntelFramebufferCapri.kext",
    "/System/Library/Extensions/AppleIntelHD3000Graphics.kext",
    "/System/Library/Extensions/AppleIntelHD4000Graphics.kext",
    "/System/Library/Extensions/AppleIntelHD5000Graphics.kext",
    "/System/Library/Extensions/AppleIntelHDGraphics.kext",
    "/System/Library/Extensions/AppleIntelHDGraphicsFB.kext",
    "/System/Library/Extensions/AppleIntelLpssDmac.kext",
    "/System/Library/Extensions/AppleIntelLpssGspi.kext",
    "/System/Library/Extensions/AppleIntelLpssI2C.kext",
    "/System/Library/Extensions/AppleIntelLpssI2CController.kext",
    "/System/Library/Extensions/AppleIntelLpssSpiController.kext",
    "/System/Library/Extensions/AppleIntelLpssUART.kext",
    "/System/Library/Extensions/AppleIntelMCEReporter.kext",
    "/System/Library/Extensions/AppleIntelPCHPMC.kext",
    "/System/Library/Extensions/AppleIntelSlowAdaptiveClocking.kext",
    "/System/Library/Extensions/AppleIntelSNBGraphicsFB.kext",
    "/System/Library/Extensions/AppleIRController.kext",
    "/System/Library/Extensions/AppleKextExcludeList.kext",
    "/System/Library/Extensions/AppleKeyStore.kext",
    "/System/Library/Extensions/AppleKeyswitch.kext",
    "/System/Library/Extensions/AppleLPC.kext",
    "/System/Library/Extensions/AppleLSIFusionMPT.kext",
    "/System/Library/Extensions/AppleMatch.kext",
    "/System/Library/Extensions/AppleMCCSControl.kext",
    "/System/Library/Extensions/AppleMCP89RootPortPM.kext",
    "/System/Library/Extensions/AppleMikeyHIDDriver.kext",
    "/System/Library/Extensions/AppleMobileDevice.kext",
    "/System/Library/Extensions/AppleMobileFileIntegrity.kext",
    "/System/Library/Extensions/AppleMultitouchDriver.kext",
    "/System/Library/Extensions/AppleOSXUSBNCM.kext",
    "/System/Library/Extensions/AppleOSXWatchdog.kext",
    "/System/Library/Extensions/ApplePlatformEnabler.kext",
    "/System/Library/Extensions/AppleRAID.kext",
    "/System/Library/Extensions/AppleRAIDCard.kext",
    "/System/Library/Extensions/AppleRTC.kext",
    "/System/Library/Extensions/AppleSDXC.kext",
    "/System/Library/Extensions/AppleSEP.kext",
    "/System/Library/Extensions/AppleSmartBatteryManager.kext",
    "/System/Library/Extensions/AppleSMBIOS.kext",
    "/System/Library/Extensions/AppleSMBusController.kext",
    "/System/Library/Extensions/AppleSMBusPCI.kext",
    "/System/Library/Extensions/AppleSMC.kext",
    "/System/Library/Extensions/AppleSMCLMU.kext",
    "/System/Library/Extensions/AppleSRP.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleATAPIStorage.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleFireWireStorage.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleHollywood.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleMemorexCDROMDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBCardReader.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBODD.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBStorageCoexistentDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBTDM.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleXserveRAID.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/CanonEOS1D.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/FireWireStorageDeviceSpecifics.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/FWPreferredProtocolSpeed.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/initioFWBridge.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/IOFireWireSerialBusProtocolSansPhysicalUnit.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/LSI-FW-500.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/MaxTranserSizeOverrideDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/MKE-LF-D211A.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/MKE-SR-8171.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/OxfordSemiconductor.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/PioneerSuperDrive.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/PlasmonUDO.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/QPSQueFire.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/SanyoIDShot.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/SonyXDCAMDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/StorageLynx.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/UFIWriteProtectedMediaDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/USBStorageDeviceSpecifics.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/WriteProtectedMediaDriver.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPAdapterFamily.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPInAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPOutAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltEDMService.kext",
    "/System/Library/Extensions/AppleThunderboltEDMService.kext/Contents/PlugIns/AppleThunderboltEDMSink.kext",
    "/System/Library/Extensions/AppleThunderboltEDMService.kext/Contents/PlugIns/AppleThunderboltEDMSource.kext",
    "/System/Library/Extensions/AppleThunderboltIP.kext",
    "/System/Library/Extensions/AppleThunderboltNHI.kext",
    "/System/Library/Extensions/AppleThunderboltPCIAdapters.kext",
    "/System/Library/Extensions/AppleThunderboltPCIAdapters.kext/Contents/PlugIns/AppleThunderboltPCIDownAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltPCIAdapters.kext/Contents/PlugIns/AppleThunderboltPCIUpAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltUTDM.kext",
    "/System/Library/Extensions/AppleTopCase.kext",
    "/System/Library/Extensions/AppleTopCase.kext/Contents/PlugIns/AppleHSBluetoothDriver.kext",
    "/System/Library/Extensions/AppleTopCase.kext/Contents/PlugIns/AppleTopCaseActuatorHIDDriver.kext",
    "/System/Library/Extensions/AppleTopCase.kext/Contents/PlugIns/AppleTopCaseHIDEventDriver.kext",
    "/System/Library/Extensions/AppleTopCase.kext/Contents/PlugIns/AppleUSBTopCaseDriver.kext",
    "/System/Library/Extensions/AppleTyMCEDriver.kext",
    "/System/Library/Extensions/AppleUpstreamUserClient.kext",
    "/System/Library/Extensions/AppleUSBACM.kext",
    "/System/Library/Extensions/AppleUSBAudio.kext",
    "/System/Library/Extensions/AppleUSBCDC.kext",
    "/System/Library/Extensions/AppleUSBDisplays.kext",
    "/System/Library/Extensions/AppleUSBDMM.kext",
    "/System/Library/Extensions/AppleUSBECM.kext",
    "/System/Library/Extensions/AppleUSBEEM.kext",
    "/System/Library/Extensions/AppleUSBEthernet.kext",
    "/System/Library/Extensions/AppleUSBEthernetHost.kext",
    "/System/Library/Extensions/AppleUSBFTDI.kext",
    "/System/Library/Extensions/AppleUSBMultitouch.kext",
    "/System/Library/Extensions/AppleUSBNCM.kext",
    "/System/Library/Extensions/AppleUSBNetworking.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCButtons.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCKeyboard.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCKeyEventDriver.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTrackpad.kext",
    "/System/Library/Extensions/AppleUSBWCM.kext",
    "/System/Library/Extensions/AppleWWANAutoEject.kext",
    "/System/Library/Extensions/AppleXsanScheme.kext",
    "/System/Library/Extensions/ATIRadeonX2000.kext",
    "/System/Library/Extensions/AudioAUUC.kext",
    "/System/Library/Extensions/autofs.kext",
    "/System/Library/Extensions/BootCache.kext",
    "/System/Library/Extensions/cd9660.kext",
    "/System/Library/Extensions/cddafs.kext",
    "/System/Library/Extensions/CellPhoneHelper.kext",
    "/System/Library/Extensions/corecapture.kext",
    "/System/Library/Extensions/CoreCaptureResponder.kext",
    "/System/Library/Extensions/corecrypto.kext",
    "/System/Library/Extensions/CoreStorage.kext",
    "/System/Library/Extensions/CoreStorage.kext/Contents/PlugIns/CoreStorageFsck.kext",
    "/System/Library/Extensions/Dont Steal Mac OS X.kext",
    "/System/Library/Extensions/exfat.kext",
    "/System/Library/Extensions/GeForce.kext",
    "/System/Library/Extensions/GeForceTesla.kext",
    "/System/Library/Extensions/IO80211Family.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortAtheros40.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortBrcm4331.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortBrcm4360.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AppleAirPortBrcm43224.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/IO80211NetBooter.kext",
    "/System/Library/Extensions/IOAcceleratorFamily.kext",
    "/System/Library/Extensions/IOAcceleratorFamily2.kext",
    "/System/Library/Extensions/IOACPIFamily.kext",
    "/System/Library/Extensions/IOAHCIFamily.kext",
    "/System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCIBlockStorage.kext",
    "/System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCISerialATAPI.kext",
    "/System/Library/Extensions/IOATAFamily.kext",
    "/System/Library/Extensions/IOATAFamily.kext/Contents/PlugIns/AppleIntelPIIXATA.kext",
    "/System/Library/Extensions/IOATAFamily.kext/Contents/PlugIns/IOATABlockStorage.kext",
    "/System/Library/Extensions/IOATAFamily.kext/Contents/PlugIns/IOATAPIProtocolTransport.kext",
    "/System/Library/Extensions/IOAudioFamily.kext",
    "/System/Library/Extensions/IOAVBFamily.kext",
    "/System/Library/Extensions/IOAVBFamily.kext/Contents/PlugIns/IOAVBDiscoveryPlugin.kext",
    "/System/Library/Extensions/IOAVBFamily.kext/Contents/PlugIns/IOAVBPlugin.kext",
    "/System/Library/Extensions/IOAVBFamily.kext/Contents/PlugIns/IOMRPPlugin.kext",
    "/System/Library/Extensions/IOBDStorageFamily.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/BroadcomBluetoothHostControllerUSBTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/CSRBluetoothHostControllerUSBTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/CSRHIDTransitionDriver.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothHostControllerUARTTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothHostControllerUSBTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothSerialManager.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothUSBDFU.kext",
    "/System/Library/Extensions/IOBluetoothHIDDriver.kext",
    "/System/Library/Extensions/IOCDStorageFamily.kext",
    "/System/Library/Extensions/IODVDStorageFamily.kext",
    "/System/Library/Extensions/IOFireWireAVC.kext",
    "/System/Library/Extensions/IOFireWireFamily.kext",
    "/System/Library/Extensions/IOFireWireFamily.kext/Contents/PlugIns/AppleFWOHCI.kext",
    "/System/Library/Extensions/IOFireWireIP.kext",
    "/System/Library/Extensions/IOFireWireIP.kext/Contents/PlugIns/IOFireWireIPPrivate.kext",
    "/System/Library/Extensions/IOFireWireSBP2.kext",
    "/System/Library/Extensions/IOFireWireSerialBusProtocolTransport.kext",
    "/System/Library/Extensions/IOGraphicsFamily.kext",
    "/System/Library/Extensions/IOHDIXController.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesCryptoEncoding.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesFileBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesHTTPBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesKernelBacked.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesPartitionBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesRAMBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesReadWriteDiskImage.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesSparseDiskImage.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesUDIFDiskImage.kext",
    "/System/Library/Extensions/IOHIDFamily.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDEventDriver.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDEventDriverSafeBoot.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDSystem.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDUserClient.kext",
    "/System/Library/Extensions/IONDRVSupport.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleBCM5701Ethernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleIntel8254XEthernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleIntelI210Ethernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleVmxnet3Ethernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleYukon2.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/Intel82574L.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/IOEthernetAVBController.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/mDNSOffloadUserClient.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/nvenet.kext",
    "/System/Library/Extensions/IONVMeFamily.kext",
    "/System/Library/Extensions/IOPCIFamily.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/ACPI_SMC_PlatformPlugin.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/AppleSMCPDRC.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/IOPlatformPluginLegacy.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/X86PlatformPlugin.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/X86PlatformShim.kext",
    "/System/Library/Extensions/IOReportFamily.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIBlockCommandsDevice.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIMultimediaCommandsDevice.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIReducedBlockCommandsDevice.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/SCSITaskUserClient.kext",
    "/System/Library/Extensions/IOSCSIParallelFamily.kext",
    "/System/Library/Extensions/IOSerialFamily.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleUSBIrDA.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport1.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport2.kext",
    "/System/Library/Extensions/IOSlowAdaptiveClockingFamily.kext",
    "/System/Library/Extensions/IOSMBusFamily.kext",
    "/System/Library/Extensions/IOStorageFamily.kext",
    "/System/Library/Extensions/IOStreamFamily.kext",
    "/System/Library/Extensions/IOStreamFamily.kext/Contents/PlugIns/IOStreamUserClient.kext",
    "/System/Library/Extensions/IOSurface.kext",
    "/System/Library/Extensions/IOThunderboltFamily.kext",
    "/System/Library/Extensions/IOTimeSyncFamily.kext",
    "/System/Library/Extensions/IOTimeSyncFamily.kext/Contents/PlugIns/IO8021ASPlugin.kext",
    "/System/Library/Extensions/IOUSBAttachedSCSI.kext",
    "/System/Library/Extensions/IOUSBFamily.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBMergeNub.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBVideoSupport.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBCompositeDriver.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBHIDDriver.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBHIDDriverPM.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBHIDDriverSafeBoot.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBUserClient.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBEHCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBEHCIPCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBHostCompositeDevice.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBHostMergeProperties.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBHub.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBOHCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBOHCIPCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBOpticalMouse.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBUHCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBUHCIPCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBXHCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBXHCIPCI.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/IOUSBHostHIDDevice.kext",
    "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/IOUSBHostHIDDeviceSafeBoot.kext",
    "/System/Library/Extensions/IOUSBMassStorageClass.kext",
    "/System/Library/Extensions/IOUSBMassStorageDriver.kext",
    "/System/Library/Extensions/IOUserEthernet.kext",
    "/System/Library/Extensions/IOVideoFamily.kext",
    "/System/Library/Extensions/IOVideoFamily.kext/Contents/PlugIns/IOVideoDeviceUserClient.kext",
    "/System/Library/Extensions/iPodDriver.kext",
    "/System/Library/Extensions/iPodDriver.kext/Contents/PlugIns/iPodSBCDriver.kext",
    "/System/Library/Extensions/L2TP.ppp/Contents/PlugIns/L2TP.kext",
    "/System/Library/Extensions/Libm.kext",
    "/System/Library/Extensions/mcxalr.kext",
    "/System/Library/Extensions/msdosfs.kext",
    "/System/Library/Extensions/ntfs.kext",
    "/System/Library/Extensions/NVDAGF100Hal.kext",
    "/System/Library/Extensions/NVDAGK100Hal.kext",
    "/System/Library/Extensions/NVDANV50HalTesla.kext",
    "/System/Library/Extensions/NVDAResman.kext",
    "/System/Library/Extensions/NVDAResmanTesla.kext",
    "/System/Library/Extensions/NVDAStartup.kext",
    "/System/Library/Extensions/NVSMU.kext",
    "/System/Library/Extensions/OSvKernDSPLib.kext",
    "/System/Library/Extensions/pmtelemetry.kext",
    "/System/Library/Extensions/PPP.kext",
    "/System/Library/Extensions/PPPoE.ppp/Contents/PlugIns/PPPoE.kext",
    "/System/Library/Extensions/PPTP.ppp/Contents/PlugIns/PPTP.kext",
    "/System/Library/Extensions/pthread.kext",
    "/System/Library/Extensions/Quarantine.kext",
    "/System/Library/Extensions/Sandbox.kext",
    "/System/Library/Extensions/smbfs.kext",
    "/System/Library/Extensions/SMCMotionSensor.kext",
    "/System/Library/Extensions/System.kext",
    "/System/Library/Extensions/System.kext/PlugIns/AppleNMI.kext",
    "/System/Library/Extensions/System.kext/PlugIns/ApplePlatformFamily.kext",
    "/System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext",
    "/System/Library/Extensions/System.kext/PlugIns/IOKit.kext",
    "/System/Library/Extensions/System.kext/PlugIns/IONVRAMFamily.kext",
    "/System/Library/Extensions/System.kext/PlugIns/IOSystemManagement.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Libkern.kext",
    "/System/Library/Extensions/System.kext/PlugIns/MACFramework.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Mach.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Private.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Unsupported.kext",
    "/System/Library/Extensions/TMSafetyNet.kext",
    "/System/Library/Extensions/triggers.kext",
    "/System/Library/Extensions/udf.kext",
    "/System/Library/Extensions/vecLib.kext",
    "/System/Library/Extensions/webcontentfilter.kext",
    "/System/Library/Extensions/webdav_fs.kext",
    "/Library/Extensions/ACS6x.kext",
    "/Library/Extensions/ArcMSR.kext",
    "/Library/Extensions/ATTOCelerityFC8.kext",
    "/Library/Extensions/ATTOExpressSASHBA2.kext",
    "/Library/Extensions/ATTOExpressSASRAID2.kext",
    "/Library/Extensions/CalDigitHDProDrv.kext",
    "/Library/Extensions/HighPointIOP.kext",
    "/Library/Extensions/HighPointRR.kext",
    "/Library/Extensions/hp_io_enabler_compound.kext",
    "/Library/Extensions/LittleSnitch.kext",
    "/Library/Extensions/PromiseSTEX.kext",
    "/Library/Extensions/SoftRAID.kext"
)

launchd.conf contents
---------------


Hosts file
---------------
##
# Host Database
#
# localhost is used to configure the loopback interface
# when the system is booting.  Do not change this entry.
##
127.0.0.1	localhost
255.255.255.255	broadcasthost
::1             localhost 


Scan log
---------------
2015-10-24 10:03:08 :  
2015-10-24 10:03:08 : ----- Scan Started -----
2015-10-24 10:03:08 : Scanning with signatures version 23 (2015-10-15)
2015-10-24 10:03:14 : *** scan time: 0d 00:00:06 ***
2015-10-24 10:03:14 : ------ Scan Ended ------
2015-10-24 10:10:04 :  
2015-10-24 10:10:04 : ----- Scan Started -----
2015-10-24 10:10:04 : Scanning with signatures version 23 (2015-10-15)
2015-10-24 10:10:06 : *** scan time: 0d 00:00:01 ***
2015-10-24 10:10:06 : ------ Scan Ended ------
2015-10-24 10:27:36 :  
2015-10-24 10:27:36 : ----- Scan Started -----
2015-10-24 10:27:36 : Scanning with signatures version 23 (2015-10-15)
2015-10-24 10:27:38 : *** scan time: 0d 00:00:02 ***
2015-10-24 10:27:38 : ------ Scan Ended ------

Vielleicht sieht von Euch ja jemand was und es reicht, wenn ich die Kennwörter alle wechsele.

Ciao EmmPee

Dante12 · 24.10.2015, 13:02

Auf deinen Rechner ist nichts verdächtiges. Ich denke das dein Account bei Arcor gehackt wurde. Alle Passwörter ändern, solltest du machen.

Für eine Gegenprüfung

EtreCheck Log

Lade dir bitte EtreCheck herunter.
Entpacken und Ausführen
Setze in dem Start-Fenster alle Haken wenn nicht schon voreigestellt und klicke Start EtreCheck.
Nach Abschluss erscheint das Fenster mit dem Log. Klicke oben links auf den Button Share Report und anschließend Copy Report to Clipboard.
Das Log befindet sich nun in der Zwischenablage (Clipboard). Füge den Inhalt mit Command-V hier in dein Thema ein. Bitte in Code-Tags siehe unten.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit COMMAND+A) und kopiere es in die Zwischenablage mit COMMAND+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Cursor zwischen die CODE-Tags und drücke COMMAND+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

EmmPee · 24.10.2015, 17:32

Ich danke Dir Dante, beruhigt schon mal. hier noch der Etre Auszug

Code:

ATTFilter

EtreCheck version: 2.6 (220)
Report generated 24.10.15, 18:29
Runtime 2:44
Download EtreCheck from hxxp://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.

Hardware Information: (What does this mean?)
    Mac Pro (Mid 2010) 
    [Click for Technical Specifications]
    [Click for User Guide]
    Mac Pro - model: MacPro5,1
    1 2,8 GHz Quad-Core Intel Xeon CPU: 4-core
    10 GB RAM Upgradeable
    [Click for upgrade instructions]
        DIMM 1
            4 GB DDR3 1066 MHz ok
        DIMM 2
            4 GB DDR3 1066 MHz ok
        DIMM 3
            1 GB DDR3 ECC 1066 MHz ok
        DIMM 4
            1 GB DDR3 ECC 1066 MHz ok
    Bluetooth: Old - Handoff/Airdrop2 not supported
    Wireless:  en2: 802.11 a/b/g/n

Video Information: (What does this mean?)
    ATI Radeon HD 5770 - VRAM: 1024 MB
        SyncMaster 1680 x 1050 @ 60 Hz

System Software: (What does this mean?)
    OS X El Capitan 10.11 (15A284) - Time since boot: less than an hour

Disk Information: (What does this mean?)
    HL-DT-ST DVD-RW GH61N   ()

    WDC WD1001FALS-41Y6A0 disk0 : (1 TB) (Rotational)
        EFI (disk0s1) <not mounted> : 210 MB 
        Backup HD intern (disk0s2) /Volumes/Backup HD intern : 999.86 GB (247.29 GB free)

    WDC WD10EZEX-08M2NA0 disk3 : (1 TB) (Rotational)
        EFI (disk3s1) <not mounted> : 210 MB 
        Macintosh HD (disk3s2) / : 999.35 GB (592.45 GB free)
        Recovery HD (disk3s3) <not mounted>  [Recovery]: 650 MB 

    WDC WD10EZEX-00BN5A0 disk1 : (1 TB) (Rotational)
        EFI (disk1s1) <not mounted> : 210 MB 
        Mac HD 1 (disk1s2) /Volumes/Mac HD 1 : 999.35 GB (375.53 GB free)
        Recovery HD (disk1s3) <not mounted>  [Recovery]: 650 MB 

    WDC WD10EZEX-08M2NA0 disk2 : (1 TB) (Rotational)
        EFI (disk2s1) <not mounted> : 210 MB 
        RAID-1 (disk2s2) /Volumes/RAID-1 : 999.86 GB (243.07 GB free)

USB Information: (What does this mean?)
    Apple Inc. BRCM2046 Hub 
        Apple Inc. Bluetooth USB Host Controller 
    TOSHIBA External USB 3.0 3 TB
        EFI (disk4s1) <not mounted> : 315 MB 
        TOSHIBA EXT (disk4s2) /Volumes/TOSHIBA EXT : 3.00 TB (1.42 TB free)

Gatekeeper: (What does this mean?)
    Mac App Store and identified developers

Kernel Extensions: (What does this mean?)
        /Applications/Parallels Desktop.app
    [not loaded]    com.parallels.kext.hypervisor (11.0.1 31277 - SDK 10.9) [Click for support]
    [not loaded]    com.parallels.kext.netbridge (11.0.1 31277 - SDK 10.9) [Click for support]
    [not loaded]    com.parallels.kext.usbconnect (11.0.1 31277 - SDK 10.9) [Click for support]
    [not loaded]    com.parallels.kext.vnic (11.0.1 31277 - SDK 10.9) [Click for support]

        /Library/Extensions
    [loaded]    at.obdev.nke.LittleSnitch (4352 - SDK 10.8) [Click for support]

        /Volumes/Mac HD 1/Applications/AirParrot.app
    [not loaded]    com.squirrels.airparrot.framebuffer (3 - SDK 10.8) [Click for support]
    [not loaded]    com.squirrels.driver.AirParrotSpeakers (1.8 - SDK 10.8) [Click for support]

        /Volumes/Mac HD 1/Applications/Toast 11 Titanium/Spin Doctor.app
    [not loaded]    com.hzsystems.terminus.driver (4) [Click for support]

        /Volumes/Mac HD 1/Users/[redacted]/Library/Services/ToastIt.service/Contents/MacOS
    [not loaded]    com.roxio.TDIXController (2.0) [Click for support]

Launch Agents: (What does this mean?)
    [running]    at.obdev.LittleSnitchUIAgent.plist [Click for support]
    [loaded]    com.adobe.AAM.Updater-1.0.plist [Click for support]
    [failed]    com.adobe.ARMDCHelper.cc24aef4a1b90ed56a...plist [Click for support]
    [loaded]    com.teamviewer.teamviewer.plist [Click for support]
    [loaded]    com.teamviewer.teamviewer_desktop.plist [Click for support]

Launch Daemons: (What does this mean?)
    [running]    at.obdev.littlesnitchd.plist [Click for support]
    [loaded]    com.adobe.ARMDC.Communicator.plist [Click for support]
    [loaded]    com.adobe.ARMDC.SMJobBlessHelper.plist [Click for support]
    [loaded]    com.adobe.fpsaud.plist [Click for support]
    [loaded]    com.malwarebytes.MBAMHelperTool.plist [Click for support]
    [loaded]    com.microsoft.office.licensing.helper.plist [Click for support]
    [loaded]    com.teamviewer.Helper.plist [Click for support]
    [loaded]    com.teamviewer.teamviewer_service.plist [Click for support]

User Login Items: (What does this mean?)
    iTunesHelper    Programm  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Other Apps: (What does this mean?)
    [running]    com.apple.xpc.launchd.oneshot.0x10000002.Little Snitch Network Monitor
    [running]    com.etresoft.EtreCheck.142752

Internet Plug-ins: (What does this mean?)
    AdobeAAMDetect: Version: AdobeAAMDetect 1.0.0.0 - SDK 10.6 [Click for support]
    FlashPlayer-10.6: Version: 19.0.0.226 - SDK 10.6 [Click for support]
    QuickTime Plugin: Version: 7.7.3
    AdobePDFViewerNPAPI: Version: 15.008.20082 - SDK 10.8 [Click for support]
    AdobePDFViewer: Version: 15.008.20082 - SDK 10.8 [Click for support]
    Flash Player: Version: 19.0.0.226 - SDK 10.6 [Click for support]
    Default Browser: Version: 601 - SDK 10.11
    Flip4Mac WMV Plugin: Version: 2.4.0.11 [Click for support]
    SharePointBrowserPlugin: Version: 14.5.5 - SDK 10.6 [Click for support]
    Silverlight: Version: 4.0.60531.0 [Click for support]

Safari Extensions: (What does this mean?)
    Open in Internet Explorer

3rd Party Preference Panes: (What does this mean?)
    Flash Player  [Click for support]
    Flip4Mac WMV  [Click for support]

Time Machine: (What does this mean?)
    Time Machine not configured!

Top Processes by CPU: (What does this mean?)
        33%    mds
        32%    mdworker(35)
        12%    mds_stores
         2%    WindowServer
         1%    fontd

Top Processes by Memory: (What does this mean?)
    720 MB    kernel_task
    502 MB    mdworker(35)
    471 MB    mds_stores
    82 MB    ocspd
    61 MB    WindowServer

Virtual Memory Information: (What does this mean?)
    6.80 GB    Free RAM 
    3.20 GB    Used RAM (2.01 GB Cached)
    0 B    Swap Used 

Diagnostics Information: (What does this mean?)
    Oct 24, 2015, 06:25:11 PM    Self test - passed

Ciao EmmPee

Dante12 · 24.10.2015, 23:18

Ok, nichts deutet darauf hin das es aus deinem Rechner aus geht. Der Hack ist bei den Servern von Accor zu suchen.

Also alle Passwörter ändern - auch AppleID dazu meldest du dich bei allen Diensten ab, iTunes, iBooks, AppStore und iCloud. Log dich dann bei deiner AppleID ein und ändere das Passwort und die Sicherheitsfragen. Nicht vergessen alles aufzuschreiben!

Danach kannst du dich mit den neuen Passwort wieder anmelden.

EmmPee · 25.10.2015, 06:50

Super Arbeit, die Du (Ihr) hier leistet. Zumal alles ehrenamtlich und in der Freizeit. Hut ab Leute, Hut ab.
Wie würden die Logs eigentlich aussehen, wenn was wäre? Wäre das auch für einen Laien ersichtlich?

Schönen Sonntag noch Euch allen

EmmPee

Dante12 · 25.10.2015, 07:40

Vielen Dank für das Lob das motiviert mich sehr weiterzumachen.

EmmPee · 25.10.2015, 09:59

Mehr als verdient.
Könntest Du mir noch ein Beispiel nennen, wie es in den Logs aussehen würde, wäre etwas im Busch?

Dante12 · 25.10.2015, 12:17

Beispiel ist schwierig in den meisten Fällen ist es Adware, also mitinstallierte Software die den Browser beeinflusst (Suchergebnisse, Pop-Ups usf.).

Wenn es von deinem Rechner ausgehen würde dann müsstest du einen erheblichen Traffic haben also unbekannte Programme die das Netzwerk für den Datenaustausch nutzen (Trojaner, Bot-Netze usf.).

Wie ich gesehen habe nutzt du LittleSnitch damit solltest du zum größten Teil die Kontrolle über den ausgehenden Verkehr haben.

EmmPee · 25.10.2015, 14:36

Den Traffic sehe ich im Log garnicht, nur CPU und Speicher. Little Snitch ist ein Musthave sagte mein Kumpel vor Jahren und seitdem sperre ich eher zu viel als zu wenig :-).
Danke Dir nochmal.

Ciao EmmPee

tschoker · 27.10.2015, 21:33

Hallo,

auch von meinem Arcoraccount werden Spam Nachrichten versendet.
Ich hab meinen Pc mit Anti-Malware untersucht und auch Avast Browser Cleanup, AdwCleander und ESET Online zur Säuberung eingesetzt.
Die gefundenen Schädlinge habe ich durch die Software entfernen lassen und es wurden beim Probelauf keine mehr gefunden.
Leider wurden soeben wieder Spam-E-mails von meinem Arcoraccount versendet.
Ich bitte um Hilfe!
Was kann ich jetzt noch tun?

Gruß tschoker

Mein Passwort bei Arcor hab ich ebenfalls geändert.

Dante12 · 27.10.2015, 22:45

Zitat:

Zitat von tschoker

Hallo,

auch von meinem Arcoraccount werden Spam Nachrichten versendet.
Ich hab meinen Pc mit Anti-Malware untersucht und auch Avast Browser Cleanup, AdwCleander und ESET Online zur Säuberung eingesetzt.
Gruß tschoker

Mein Passwort bei Arcor hab ich ebenfalls geändert.

Sprechen wir hier von einem Mac oder Windows-PC?

Beim letzteren bist du hier besser aufgehoben: Log-Analyse und Auswertung - Trojaner-Board

Ausserdem ist es Wünschenswert und sinnvoller ein eigenes Thema zu eröffnen.

25.10.2015, 07:40	#6
Dante12 /// Mac Expert	SPAM von meinem Arcor Account Vielen Dank für das Lob das motiviert mich sehr weiterzumachen. __________________ --> SPAM von meinem Arcor Account

SPAM von meinem Arcor Account

Alles rund um Mac OSX & Linux: SPAM von meinem Arcor Account