OS X Yosemite: youp**n -> Bundespolizei

svasticore · 03.05.2016, 08:48

Hallo.
In meinem Urlaub wollte ich gerade eine allseits bekannte Seite für erotische Unterhaltung besuchen.
Auf dieser Seite landete ich leider nicht. Sondern mir wird jetzt eine Seite vom "Bundesamt für Sicherheit in der Informationstechnik" angezeigt.
Die wollen jetzt das ich 100Euro mit einer Paysafe Karte bezahle, sonst gibt es ärger mit der Polizei.
Genau...Alles was ich im Netz gefunden habe bezieht sich auf Windows User. Ich habe aber ein MAC.
Betriebssystem: OS X Yosemite
Virenprogramm: Avast Mac Security
Browser: Google Crome

Bis jetzt lasse ich den Scan von Avast durchlaufen.
Ich kann das oben gemeinte Tab weder schließen, noch den Browser. Programm löschen geht auch nicht. Rechner runterfahren auch nicht.

Was soll ich als nächstes tun.

Dante12 · 03.05.2016, 15:19

Zunächst lies dir das hier bitte durch: The Safe Mac » Avast installs adware!

Dann deinstallier bitte Avast das macht auf den Mac nur probleme - Allerdings liegt die Entscheidung bei dir ob du es machen möchtest. Ich biete es dir nur an:
https://www.avast.com/en-ae/faq.php?...VKB67#artTitle

EtreCheck installieren

Lade dir bitte EtreCheck herunter.
Entpacken und Ausführen.
Klicke auf den Options-Button und markiere die Checkbox Check the digital Signatures of Apple tasks. anschliessend auf Start Etrecheck
Nach Abschluss erscheint das Fenster mit dem Log. Klicke oben links auf den Button Share Report und anschließend Copy to Clipboard.
Das Log befindet sich nun in der Zwischenablage (Clipboard). Füge den Inhalt mit Command-V hier in dein Thema ein. Bitte in Code-Tags siehe unten.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit COMMAND+A) und kopiere es in die Zwischenablage mit COMMAND+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Cursor zwischen die CODE-Tags und drücke COMMAND+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

svasticore · 04.05.2016, 16:44

Code:

ATTFilter

EtreCheck version: 2.9.12 (265)
Report generated 2016-05-04 17:41:05
Download EtreCheck from https://etrecheck.com
Runtime 7:53
Performance: Below Average

Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Remove] links to remove adware.

Check Apple signatures: Enabled

Problem: Apps are crashing

Hardware Information: ?
    MacBook Pro (13-inch, Mid 2009) 
    [Technical Specifications] - [User Guide] - [Warranty & Service]
    MacBook Pro - model: MacBookPro5,5
    1 2.53 GHz Intel Core 2 Duo CPU: 2-core
    8 GB RAM Upgradeable - [Instructions]
        BANK 0/DIMM0
            4 GB DDR3 1067 MHz ok
        BANK 1/DIMM0
            4 GB DDR3 1067 MHz ok
    Bluetooth: Old - Handoff/Airdrop2 not supported
    Wireless:  en1: 802.11 a/b/g/n
    Battery: Health = Check Battery - Cycle count = 437

Video Information: ?
    NVIDIA GeForce 9400M - VRAM: 256 MB
        Color LCD 1280 x 800

System Software: ?
    OS X Yosemite 10.10.5 (14F1713) - Time since boot: about 39 days 

Disk Information: ?
    FUJITSU MJA2250BH FFS G1 disk0 : (250,06 GB) (Rotational)
        EFI (disk0s1) <not mounted> : 210 MB 
        √ (disk0s2) / : 249.20 GB (176.81 GB free)
        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB 

    HL-DT-ST DVDRW  GS23N   ()

USB Information: ?
    Apple Internal Memory Card Reader 
    Apple Inc. Built-in iSight 
    Apple Inc. BRCM2046 Hub 
        Apple Inc. Bluetooth USB Host Controller 
    Apple Inc. Apple Internal Keyboard / Trackpad 
    Apple Computer, Inc. IR Receiver 

Gatekeeper: ?
    Mac App Store and identified developers

Adware: ?
    ~/Library/LaunchAgents/Swissfist.AppRemoval.plist
    ~/Library/LaunchAgents/Swissfist.download.plist
    ~/Library/LaunchAgents/Swissfist.ltvbit.plist
    ~/Library/LaunchAgents/Swissfist.update.plist
    ~/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
    ~/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
    ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
    ~/Library/LaunchAgents/com.jdibackup.ZipCloud.backupstart.plist
    ~/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
    9 adware files found. [Remove]

Kernel Extensions: ?
        /Library/Application Support/Avast/components/fileshield/unsigned
    [loaded]    com.avast.AvastFileShield (3.0.0 - SDK 10.10 - 2016-04-12) [Support]

        /Library/Application Support/Avast/components/proxy/unsigned
    [loaded]    com.avast.PacketForwarder (2.1 - SDK 10.10 - 2016-04-12) [Support]

System Launch Agents: ?
    [not loaded]    5 Apple tasks
    [loaded]    141 Apple tasks
    [running]    57 Apple tasks
    [killed]    9 Apple tasks
    9 processes killed due to insufficient RAM

System Launch Daemons: ?
    [not loaded]    45 Apple tasks
    [loaded]    129 Apple tasks
    [running]    78 Apple tasks
    [killed]    9 Apple tasks
    9 processes killed due to insufficient RAM

Launch Agents: ?
    [running]    com.avast.secureline.update-agent.plist (2016-04-29) [Support]
    [loaded]    com.avast.secureline.userinit.plist (2016-04-29) [Support]
    [running]    com.avast.update-agent.plist (2016-04-13) [Support]
    [loaded]    com.avast.userinit.plist (2016-04-13) [Support]
    [loaded]    com.google.keystone.agent.plist (2016-03-01) [Support]
    [running]    com.oracle.java.Java-Updater.plist (2015-11-30) [Support]

Launch Daemons: ?
    [running]    com.MacRemover.Remover.DaemonServer.plist (2015-12-06) [Support]
    [failed]    com.adobe.fpsaud.plist (2016-04-05) [Support]
    [loaded]    com.avast.init.plist (2016-04-13) [Support]
    [loaded]    com.avast.secureline.init.plist (2016-04-29) [Support]
    [loaded]    com.avast.secureline.uninstall.plist (2016-04-29) [Support]
    [loaded]    com.avast.secureline.update.plist (2016-04-29) [Support]
    [loaded]    com.avast.uninstall.plist (2016-04-13) [Support]
    [loaded]    com.avast.update.plist (2016-04-13) [Support]
    [loaded]    com.google.keystone.daemon.plist (2016-03-01) [Support]
    [running]    com.mackeeper.MacKeeper.plugin.AntiTheft.daemon.plist (2015-10-06) [Support]
    [loaded]    com.oracle.java.Helper-Tool.plist (2015-11-30) [Support]

User Launch Agents: ?
    [loaded]    Swissfist.AppRemoval.plist (2015-10-08) Adware!  [Remove]
    [failed]    Swissfist.download.plist (2015-10-08) Adware!  [Remove]
    [failed]    Swissfist.ltvbit.plist (2015-10-08) Adware!  [Remove]
    [failed]    Swissfist.update.plist (2015-10-08) Adware!  [Remove]
    [not loaded]    com.avast.home.userinit.plist (2016-04-13) [Support]
    [not loaded]    com.avast.secureline.home.userinit.plist (2016-04-29) [Support]
    [failed]    com.jdibackup.JustCloud.autostart.plist (2015-10-06) Adware!  [Remove]
    [failed]    com.jdibackup.JustCloud.notify.plist (2015-10-06) Adware!  [Remove]
    [loaded]    com.jdibackup.ZipCloud.autostart.plist (2016-03-26) Adware!  [Remove]
    [loaded]    com.jdibackup.ZipCloud.backupstart.plist (2016-03-26) Adware!  [Remove]
    [loaded]    com.jdibackup.ZipCloud.notify.plist (2016-03-26) Adware!  [Remove]
    [failed]    com.mackeeper.MacKeeper.Helper.plist (2015-10-06) [Support]

User Login Items: ?
    iTunesHelper    Programm  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
    Google Chrome    Programm Hidden (/Applications/Google Chrome.app)

Other Apps: ?
    [loaded]    com.avast.account
    [loaded]    com.avast.crashreport
    [running]    com.avast.daemon
    [running]    com.avast.fileshield
    [running]    com.avast.helper
    [running]    com.avast.proxy
    [running]    com.avast.secureline.avastsecurelinehelper
    [loaded]    com.avast.secureline.burger
    [running]    com.avast.secureline.service
    [running]    com.avast.service
    [loaded]    com.google.Chrome.50584
    [loaded]    380 Apple tasks
    [running]    172 Apple tasks
    [killed]    18 Apple tasks

Internet Plug-ins: ?
    FlashPlayer-10.6: 21.0.0.213 - SDK 10.6 (2016-04-07) [Support]
    QuickTime Plugin: 7.7.3 (2016-03-26)
    Flash Player: 21.0.0.213 - SDK 10.6 (2016-04-07) Outdated! Update
    Google Earth Web Plug-in: 7.1 (2015-11-26) [Support]
    JavaAppletPlugin: Java 8 Update 71 build 15 (2016-01-20) Check version
    Default Browser: 600 - SDK 10.10 (2015-08-25)

Safari Extensions: ?
    TatankaBison - Uttanka Sievers - hxxp://www.yahoo.com (2015-10-06)

3rd Party Preference Panes: ?
    Flash Player (2016-04-05) [Support]
    Java (2016-01-20) [Support]

Time Machine: ?
    Time Machine not configured!

Top Processes by CPU: ?
        62%    bspatch
        37%    Google Chrome Helper(10)
        10%    com.avast.proxy
         8%    Google Chrome
         5%    WindowServer

Top Processes by Memory: ?
    1.29 GB    Google Chrome Helper(10)
    749 MB    kernel_task
    410 MB    Google Chrome
    164 MB    mdworker(12)
    156 MB    com.avast.daemon(2)

Virtual Memory Information: ?
    19 MB    Free RAM 
    7.98 GB    Used RAM (1.17 GB Cached)
    2.05 GB    Swap Used 

Diagnostics Information: ?
    May 4, 2016, 04:28:51 PM    ~/Library/Logs/DiagnosticReports/Dictionary_2016-05-04-162851_[redacted].crash
        com.apple.Dictionary - /Applications/Dictionary.app/Contents/MacOS/Dictionary

Ich hoffe das passt so. Um Avast zu löschen bin ich irgendwie zu doof...

Danke schon mal für den super Support. Klasse Sache

Dante12 · 04.05.2016, 17:30

Du hast ein Haufen Adware und den Flashmail Trojaner auf deinem Rechner. Eine Bereinigung ist möglich aber nicht empfehlenswert. Du solltest deinen Rechner neu Aufsetzen.

Mache ein Backup aller deiner persönlichen Daten (keine Dritt-Programme). Die kannst du später vom jeweiligen Hersteller erneut herunterladen.

Also alles persönliche sichern (Dokumente, Bilder und andere für dich relevante Daten).

Damit wir aber zumindest den Trojaner beim Starten hindern befolge zunächst folgende Schritte.

Schritt 1:

MalwareBytes for Mac

Lade dir bitte MalwareBytes for Mac herunter.
Öffne das DMG und verschiebe die APP in den Programm-Ordner.
Programm starten und klicke auf Scan. Gefundene Malware wird in den Papierkorb verschoben. Mache ein Neustart wenn verlangt wird.
Starte nochmal MalwareBytes (wenn noch nicht schon geöffnet), und öffne oben in der Menüleiste von Malwarebytes das Menü Scanner
Wähle anschliessend Take System Snapshot.
Hinweis:Das Menü oben auf deinen Bildschirm siehst du nur wenn die Anwendung aktiv ist (aktviere die Anwendung mit einem Klick in das Fenster).
Kopiere den Inhalt des Fensters und füge es hier ein. Wenn möglich in Code-Tags siehe unten

Schritt 2:

Für diesen Schritt benutze bitte einen anderen Rechner

Melde dich von allen Apple Accounts ab (iCloud, iTunes, iBooks usf.) - auch auf deinen iPhones, Pads. Wenn mehrere Familienmitglieder deinen Account benutzen auch dort abmelden.
Logge dich in deiner Apple ID ein und ändere das Passwort und die Sicherheitsfragen.
Ändere ALLE Passwörter von deinen vorhanden E-Mail Accounts.
Ändere ALLE Zugangspasswörter anderer Dienste die du verwendest (z.B. Online-Banking).

Logge dich nicht mehr mit deiner Apple ID ein bis wir das hier erledigt haben! Auf deine iPhones, Pads hat das keinen Einfluss da kannst du dich wieder Anmelden.

svasticore · 04.05.2016, 21:29

Code:

ATTFilter

 
Malwarebytes Anti-Malware 1.1.3.72 system report - 4. Mai 2016 22:27:12 MESZ
Mac OS X version Version 10.10.5 (Build 14F1713)
System uptime: 0d 00:21:57

Safari extensions
---------------
(
)

Chrome extensions
---------------
(
    "Name: Google Slides",
    "Modified: 2015-10-11 09:28:26 +0000",
    "/Users/Svasticore/Library/Application Support/Google/Chrome/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek",
    "Name: Google Sheets",
    "Modified: 2015-10-11 09:28:29 +0000",
    "/Users/Svasticore/Library/Application Support/Google/Chrome/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap",
    "Name: Avast Online Security",
    "Modified: 2016-05-04 20:08:21 +0000",
    "/Users/Svasticore/Library/Application Support/Google/Chrome/Default/Extensions/gomekmidlodglbbmalcneegieacbdmki",
    "Name: [unknown Chrome extension format]",
    "Modified: 2015-12-18 14:59:17 +0000",
    "/Users/Svasticore/Library/Application Support/Google/Chrome/External Extensions/gomekmidlodglbbmalcneegieacbdmki.json"
)

Firefox extensions
---------------
(
)

Login items
---------------
(
    iTunesHelper,
    "Google Chrome"
)

System startup items
---------------
(
)

User launch agents
---------------
(
    "/Users/Svasticore/Library/LaunchAgents/com.avast.home.userinit.plist",
    "/Users/Svasticore/Library/LaunchAgents/com.avast.secureline.home.userinit.plist"
)

System launch agents
---------------
(
    "/Library/LaunchAgents/com.avast.secureline.update-agent.plist",
    "/Library/LaunchAgents/com.avast.secureline.userinit.plist",
    "/Library/LaunchAgents/com.avast.update-agent.plist",
    "/Library/LaunchAgents/com.avast.userinit.plist",
    "/Library/LaunchAgents/com.google.keystone.agent.plist"
)

System launch daemons
---------------
(
    "/Library/LaunchDaemons/com.adobe.fpsaud.plist",
    "/Library/LaunchDaemons/com.avast.init.plist",
    "/Library/LaunchDaemons/com.avast.secureline.init.plist",
    "/Library/LaunchDaemons/com.avast.secureline.uninstall.plist",
    "/Library/LaunchDaemons/com.avast.secureline.update.plist",
    "/Library/LaunchDaemons/com.avast.uninstall.plist",
    "/Library/LaunchDaemons/com.avast.update.plist",
    "/Library/LaunchDaemons/com.google.keystone.daemon.plist",
    "/Library/LaunchDaemons/com.MacRemover.Remover.DaemonServer.plist",
    "/Library/LaunchDaemons/com.malwarebytes.MBAMHelperTool.plist"
)

Kernel extensions
---------------
(
    "/System/Library/Extensions/acfs.kext",
    "/System/Library/Extensions/acfsctl.kext",
    "/System/Library/Extensions/ALF.kext",
    "/System/Library/Extensions/AMD2400Controller.kext",
    "/System/Library/Extensions/AMD2600Controller.kext",
    "/System/Library/Extensions/AMD3800Controller.kext",
    "/System/Library/Extensions/AMD4600Controller.kext",
    "/System/Library/Extensions/AMD4800Controller.kext",
    "/System/Library/Extensions/AMD5000Controller.kext",
    "/System/Library/Extensions/AMD6000Controller.kext",
    "/System/Library/Extensions/AMD7000Controller.kext",
    "/System/Library/Extensions/AMD8000Controller.kext",
    "/System/Library/Extensions/AMD9000Controller.kext",
    "/System/Library/Extensions/AMDFramebuffer.kext",
    "/System/Library/Extensions/AMDRadeonX3000.kext",
    "/System/Library/Extensions/AMDRadeonX4000.kext",
    "/System/Library/Extensions/AMDSupport.kext",
    "/System/Library/Extensions/Apple16X50Serial.kext",
    "/System/Library/Extensions/Apple16X50Serial.kext/Contents/PlugIns/Apple16X50ACPI.kext",
    "/System/Library/Extensions/Apple_iSight.kext",
    "/System/Library/Extensions/AppleACPIPlatform.kext",
    "/System/Library/Extensions/AppleACPIPlatform.kext/Contents/PlugIns/AppleACPIButtons.kext",
    "/System/Library/Extensions/AppleACPIPlatform.kext/Contents/PlugIns/AppleACPIEC.kext",
    "/System/Library/Extensions/AppleAHCIPort.kext",
    "/System/Library/Extensions/AppleAPIC.kext",
    "/System/Library/Extensions/AppleBacklight.kext",
    "/System/Library/Extensions/AppleBacklightExpert.kext",
    "/System/Library/Extensions/AppleBluetoothMultitouch.kext",
    "/System/Library/Extensions/AppleBMC.kext",
    "/System/Library/Extensions/AppleCameraInterface.kext",
    "/System/Library/Extensions/AppleCredentialManager.kext",
    "/System/Library/Extensions/AppleEFIRuntime.kext",
    "/System/Library/Extensions/AppleEFIRuntime.kext/Contents/PlugIns/AppleEFINVRAM.kext",
    "/System/Library/Extensions/AppleFDEKeyStore.kext",
    "/System/Library/Extensions/AppleFileSystemDriver.kext",
    "/System/Library/Extensions/AppleFIVRDriver.kext",
    "/System/Library/Extensions/AppleFSCompressionTypeDataless.kext",
    "/System/Library/Extensions/AppleFSCompressionTypeZlib.kext",
    "/System/Library/Extensions/AppleFWAudio.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleGraphicsDeviceControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleGraphicsDevicePolicy.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleMGPUPowerControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleMuxControl.kext",
    "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/ApplePolicyControl.kext",
    "/System/Library/Extensions/AppleGraphicsPowerManagement.kext",
    "/System/Library/Extensions/AppleHDA.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAController.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAHardwareConfigDriver.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleMikeyDriver.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/DspFuncLib.kext",
    "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/IOHDAFamily.kext",
    "/System/Library/Extensions/AppleHIDKeyboard.kext",
    "/System/Library/Extensions/AppleHIDKeyboard.kext/Contents/PlugIns/AppleBluetoothHIDKeyboard.kext",
    "/System/Library/Extensions/AppleHIDKeyboard.kext/Contents/PlugIns/AppleUSBBuiltinHIDKeyboard.kext",
    "/System/Library/Extensions/AppleHIDKeyboard.kext/Contents/PlugIns/AppleUSBHIDKeyboard.kext",
    "/System/Library/Extensions/AppleHIDMouse.kext",
    "/System/Library/Extensions/AppleHIDMouse.kext/Contents/PlugIns/AppleBluetoothHIDMouse.kext",
    "/System/Library/Extensions/AppleHIDMouse.kext/Contents/PlugIns/AppleUSBHIDMouse.kext",
    "/System/Library/Extensions/AppleHPET.kext",
    "/System/Library/Extensions/AppleHPM.kext",
    "/System/Library/Extensions/AppleHSSPIHIDDriver.kext",
    "/System/Library/Extensions/AppleHSSPISupport.kext",
    "/System/Library/Extensions/AppleHV.kext",
    "/System/Library/Extensions/AppleHWAccess.kext",
    "/System/Library/Extensions/AppleHWSensor.kext",
    "/System/Library/Extensions/AppleIntelBDWGraphics.kext",
    "/System/Library/Extensions/AppleIntelBDWGraphicsFramebuffer.kext",
    "/System/Library/Extensions/AppleIntelCPUPowerManagement.kext",
    "/System/Library/Extensions/AppleIntelCPUPowerManagementClient.kext",
    "/System/Library/Extensions/AppleIntelFramebufferAzul.kext",
    "/System/Library/Extensions/AppleIntelFramebufferCapri.kext",
    "/System/Library/Extensions/AppleIntelHD3000Graphics.kext",
    "/System/Library/Extensions/AppleIntelHD4000Graphics.kext",
    "/System/Library/Extensions/AppleIntelHD5000Graphics.kext",
    "/System/Library/Extensions/AppleIntelHDGraphics.kext",
    "/System/Library/Extensions/AppleIntelHDGraphicsFB.kext",
    "/System/Library/Extensions/AppleIntelLpssDmac.kext",
    "/System/Library/Extensions/AppleIntelLpssGspi.kext",
    "/System/Library/Extensions/AppleIntelLpssI2C.kext",
    "/System/Library/Extensions/AppleIntelLpssI2CController.kext",
    "/System/Library/Extensions/AppleIntelLpssSpiController.kext",
    "/System/Library/Extensions/AppleIntelLpssUART.kext",
    "/System/Library/Extensions/AppleIntelMCEReporter.kext",
    "/System/Library/Extensions/AppleIntelSlowAdaptiveClocking.kext",
    "/System/Library/Extensions/AppleIntelSNBGraphicsFB.kext",
    "/System/Library/Extensions/AppleIRController.kext",
    "/System/Library/Extensions/AppleKextExcludeList.kext",
    "/System/Library/Extensions/AppleKeyStore.kext",
    "/System/Library/Extensions/AppleKeyswitch.kext",
    "/System/Library/Extensions/AppleLPC.kext",
    "/System/Library/Extensions/AppleLSIFusionMPT.kext",
    "/System/Library/Extensions/AppleMatch.kext",
    "/System/Library/Extensions/AppleMCCSControl.kext",
    "/System/Library/Extensions/AppleMCEDriver.kext",
    "/System/Library/Extensions/AppleMCP89RootPortPM.kext",
    "/System/Library/Extensions/AppleMikeyHIDDriver.kext",
    "/System/Library/Extensions/AppleMobileDevice.kext",
    "/System/Library/Extensions/AppleMobileFileIntegrity.kext",
    "/System/Library/Extensions/AppleMultitouchDriver.kext",
    "/System/Library/Extensions/AppleOSXWatchdog.kext",
    "/System/Library/Extensions/ApplePlatformEnabler.kext",
    "/System/Library/Extensions/AppleRAID.kext",
    "/System/Library/Extensions/AppleRAIDCard.kext",
    "/System/Library/Extensions/AppleRTC.kext",
    "/System/Library/Extensions/AppleSDXC.kext",
    "/System/Library/Extensions/AppleSEP.kext",
    "/System/Library/Extensions/AppleSmartBatteryManager.kext",
    "/System/Library/Extensions/AppleSMBIOS.kext",
    "/System/Library/Extensions/AppleSMBusController.kext",
    "/System/Library/Extensions/AppleSMBusPCI.kext",
    "/System/Library/Extensions/AppleSMC.kext",
    "/System/Library/Extensions/AppleSMCLMU.kext",
    "/System/Library/Extensions/AppleSRP.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleATAPIStorage.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleFireWireStorage.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleHollywood.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleMemorexCDROMDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBCardReader.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBODD.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBTDM.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleXserveRAID.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/CanonEOS1D.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/FireWireStorageDeviceSpecifics.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/FWPreferredProtocolSpeed.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/initioFWBridge.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/IOFireWireSerialBusProtocolSansPhysicalUnit.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/LSI-FW-500.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/MaxTranserSizeOverrideDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/MKE-LF-D211A.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/MKE-SR-8171.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/OxfordSemiconductor.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/PioneerSuperDrive.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/PlasmonUDO.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/PreventMediaMountDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/QPSQueFire.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/SanyoIDShot.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/SonyXDCAMDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/StorageLynx.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/UFIWriteProtectedMediaDriver.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/USBStorageDeviceSpecifics.kext",
    "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/WriteProtectedMediaDriver.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPAdapterFamily.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPInAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPOutAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltEDMService.kext",
    "/System/Library/Extensions/AppleThunderboltEDMService.kext/Contents/PlugIns/AppleThunderboltEDMSink.kext",
    "/System/Library/Extensions/AppleThunderboltEDMService.kext/Contents/PlugIns/AppleThunderboltEDMSource.kext",
    "/System/Library/Extensions/AppleThunderboltIP.kext",
    "/System/Library/Extensions/AppleThunderboltNHI.kext",
    "/System/Library/Extensions/AppleThunderboltPCIAdapters.kext",
    "/System/Library/Extensions/AppleThunderboltPCIAdapters.kext/Contents/PlugIns/AppleThunderboltPCIDownAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltPCIAdapters.kext/Contents/PlugIns/AppleThunderboltPCIUpAdapter.kext",
    "/System/Library/Extensions/AppleThunderboltUTDM.kext",
    "/System/Library/Extensions/AppleTopCase.kext",
    "/System/Library/Extensions/AppleTopCase.kext/Contents/PlugIns/AppleTopCaseActuatorHIDDriver.kext",
    "/System/Library/Extensions/AppleTopCase.kext/Contents/PlugIns/AppleTopCaseHIDEventDriver.kext",
    "/System/Library/Extensions/AppleTopCase.kext/Contents/PlugIns/AppleUSBTopCaseDriver.kext",
    "/System/Library/Extensions/AppleTyMCEDriver.kext",
    "/System/Library/Extensions/AppleUpstreamUserClient.kext",
    "/System/Library/Extensions/AppleUSBAudio.kext",
    "/System/Library/Extensions/AppleUSBDisplays.kext",
    "/System/Library/Extensions/AppleUSBEthernetHost.kext",
    "/System/Library/Extensions/AppleUSBMultitouch.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCButtons.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCKeyboard.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCKeyEventDriver.kext",
    "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTrackpad.kext",
    "/System/Library/Extensions/AppleWWANAutoEject.kext",
    "/System/Library/Extensions/AppleXsanFilter.kext",
    "/System/Library/Extensions/ATIRadeonX2000.kext",
    "/System/Library/Extensions/AudioAUUC.kext",
    "/System/Library/Extensions/autofs.kext",
    "/System/Library/Extensions/BootCache.kext",
    "/System/Library/Extensions/cd9660.kext",
    "/System/Library/Extensions/cddafs.kext",
    "/System/Library/Extensions/CellPhoneHelper.kext",
    "/System/Library/Extensions/corecrypto.kext",
    "/System/Library/Extensions/CoreStorage.kext",
    "/System/Library/Extensions/CoreStorage.kext/Contents/PlugIns/CoreStorageFsck.kext",
    "/System/Library/Extensions/Dont Steal Mac OS X.kext",
    "/System/Library/Extensions/exfat.kext",
    "/System/Library/Extensions/GeForce.kext",
    "/System/Library/Extensions/GeForceTesla.kext",
    "/System/Library/Extensions/IO80211Family.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortAtheros40.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortBrcm4331.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortBrcm4360.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AppleAirPortBrcm43224.kext",
    "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/IO80211NetBooter.kext",
    "/System/Library/Extensions/IOAcceleratorFamily.kext",
    "/System/Library/Extensions/IOAcceleratorFamily2.kext",
    "/System/Library/Extensions/IOACPIFamily.kext",
    "/System/Library/Extensions/IOAHCIFamily.kext",
    "/System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCIBlockStorage.kext",
    "/System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCIPassThrough.kext",
    "/System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCISerialATAPI.kext",
    "/System/Library/Extensions/IOATAFamily.kext",
    "/System/Library/Extensions/IOATAFamily.kext/Contents/PlugIns/AppleIntelPIIXATA.kext",
    "/System/Library/Extensions/IOATAFamily.kext/Contents/PlugIns/IOATABlockStorage.kext",
    "/System/Library/Extensions/IOATAFamily.kext/Contents/PlugIns/IOATAPIProtocolTransport.kext",
    "/System/Library/Extensions/IOAudio2Family.kext",
    "/System/Library/Extensions/IOAudioFamily.kext",
    "/System/Library/Extensions/IOAVBFamily.kext",
    "/System/Library/Extensions/IOAVBFamily.kext/Contents/PlugIns/IOAVBDiscoveryPlugin.kext",
    "/System/Library/Extensions/IOAVBFamily.kext/Contents/PlugIns/IOAVBPlugin.kext",
    "/System/Library/Extensions/IOAVBFamily.kext/Contents/PlugIns/IOMRPPlugin.kext",
    "/System/Library/Extensions/IOBDStorageFamily.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/BroadcomBluetoothHostControllerUSBTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/CSRBluetoothHostControllerUSBTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/CSRHIDTransitionDriver.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothHostControllerUARTTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothHostControllerUSBTransport.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothSerialManager.kext",
    "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothUSBDFU.kext",
    "/System/Library/Extensions/IOBluetoothHIDDriver.kext",
    "/System/Library/Extensions/IOCDStorageFamily.kext",
    "/System/Library/Extensions/IODVDStorageFamily.kext",
    "/System/Library/Extensions/IOFireWireAVC.kext",
    "/System/Library/Extensions/IOFireWireFamily.kext",
    "/System/Library/Extensions/IOFireWireFamily.kext/Contents/PlugIns/AppleFWOHCI.kext",
    "/System/Library/Extensions/IOFireWireIP.kext",
    "/System/Library/Extensions/IOFireWireIP.kext/Contents/PlugIns/IOFireWireIPPrivate.kext",
    "/System/Library/Extensions/IOFireWireSBP2.kext",
    "/System/Library/Extensions/IOFireWireSerialBusProtocolTransport.kext",
    "/System/Library/Extensions/IOGraphicsFamily.kext",
    "/System/Library/Extensions/IOHDIXController.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesCryptoEncoding.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesFileBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesHTTPBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesKernelBacked.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesPartitionBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesRAMBackingStore.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesReadWriteDiskImage.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesSparseDiskImage.kext",
    "/System/Library/Extensions/IOHDIXController.kext/Contents/PlugIns/AppleDiskImagesUDIFDiskImage.kext",
    "/System/Library/Extensions/IOHIDFamily.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDEventDriver.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDEventDriverSafeBoot.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDSystem.kext",
    "/System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDUserClient.kext",
    "/System/Library/Extensions/IONDRVSupport.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleBCM5701Ethernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleIntel8254XEthernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleIntelI210Ethernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleUSBEthernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleUSBGigEthernet.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleYukon2.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/Intel82574L.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/IOEthernetAVBController.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/mDNSOffloadUserClient.kext",
    "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/nvenet.kext",
    "/System/Library/Extensions/IONVMeFamily.kext",
    "/System/Library/Extensions/IOPCIFamily.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/ACPI_SMC_PlatformPlugin.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/AppleSMCPDRC.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/IOPlatformPluginLegacy.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/X86PlatformPlugin.kext",
    "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/X86PlatformShim.kext",
    "/System/Library/Extensions/IOReportFamily.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIBlockCommandsDevice.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIMultimediaCommandsDevice.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIReducedBlockCommandsDevice.kext",
    "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/SCSITaskUserClient.kext",
    "/System/Library/Extensions/IOSCSIParallelFamily.kext",
    "/System/Library/Extensions/IOSerialFamily.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleUSBIrDA.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport1.kext",
    "/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport2.kext",
    "/System/Library/Extensions/IOSlowAdaptiveClockingFamily.kext",
    "/System/Library/Extensions/IOSMBusFamily.kext",
    "/System/Library/Extensions/IOStorageFamily.kext",
    "/System/Library/Extensions/IOStreamFamily.kext",
    "/System/Library/Extensions/IOStreamFamily.kext/Contents/PlugIns/IOStreamUserClient.kext",
    "/System/Library/Extensions/IOSurface.kext",
    "/System/Library/Extensions/IOThunderboltFamily.kext",
    "/System/Library/Extensions/IOTimeSyncFamily.kext",
    "/System/Library/Extensions/IOTimeSyncFamily.kext/Contents/PlugIns/IO8021ASPlugin.kext",
    "/System/Library/Extensions/IOUSBAttachedSCSI.kext",
    "/System/Library/Extensions/IOUSBFamily.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDC.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDCACMControl.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDCACMData.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDCDMM.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDCECMControl.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDCECMData.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDCEEM.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBCDCWCM.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBEHCI.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBFTDI.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBHub.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBMergeNub.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBOHCI.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBOpticalMouse.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBUHCI.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBVideoSupport.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/AppleUSBXHCI.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBCompositeDriver.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBHIDDriver.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBHIDDriverPM.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBHIDDriverSafeBoot.kext",
    "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBUserClient.kext",
    "/System/Library/Extensions/IOUSBMassStorageClass.kext",
    "/System/Library/Extensions/IOUserEthernet.kext",
    "/System/Library/Extensions/IOVideoFamily.kext",
    "/System/Library/Extensions/IOVideoFamily.kext/Contents/PlugIns/IOVideoDeviceUserClient.kext",
    "/System/Library/Extensions/iPodDriver.kext",
    "/System/Library/Extensions/iPodDriver.kext/Contents/PlugIns/iPodSBCDriver.kext",
    "/System/Library/Extensions/L2TP.ppp/Contents/PlugIns/L2TP.kext",
    "/System/Library/Extensions/Libm.kext",
    "/System/Library/Extensions/mcxalr.kext",
    "/System/Library/Extensions/msdosfs.kext",
    "/System/Library/Extensions/ntfs.kext",
    "/System/Library/Extensions/NVDAGF100Hal.kext",
    "/System/Library/Extensions/NVDAGK100Hal.kext",
    "/System/Library/Extensions/NVDANV50HalTesla.kext",
    "/System/Library/Extensions/NVDAResman.kext",
    "/System/Library/Extensions/NVDAResmanTesla.kext",
    "/System/Library/Extensions/NVDAStartup.kext",
    "/System/Library/Extensions/NVSMU.kext",
    "/System/Library/Extensions/OSvKernDSPLib.kext",
    "/System/Library/Extensions/PPP.kext",
    "/System/Library/Extensions/PPPoE.ppp/Contents/PlugIns/PPPoE.kext",
    "/System/Library/Extensions/PPTP.ppp/Contents/PlugIns/PPTP.kext",
    "/System/Library/Extensions/pthread.kext",
    "/System/Library/Extensions/Quarantine.kext",
    "/System/Library/Extensions/Sandbox.kext",
    "/System/Library/Extensions/smbfs.kext",
    "/System/Library/Extensions/SMCMotionSensor.kext",
    "/System/Library/Extensions/System.kext",
    "/System/Library/Extensions/System.kext/PlugIns/AppleNMI.kext",
    "/System/Library/Extensions/System.kext/PlugIns/ApplePlatformFamily.kext",
    "/System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext",
    "/System/Library/Extensions/System.kext/PlugIns/IOKit.kext",
    "/System/Library/Extensions/System.kext/PlugIns/IONVRAMFamily.kext",
    "/System/Library/Extensions/System.kext/PlugIns/IOSystemManagement.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Libkern.kext",
    "/System/Library/Extensions/System.kext/PlugIns/MACFramework.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Mach.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Private.kext",
    "/System/Library/Extensions/System.kext/PlugIns/Unsupported.kext",
    "/System/Library/Extensions/TMSafetyNet.kext",
    "/System/Library/Extensions/triggers.kext",
    "/System/Library/Extensions/udf.kext",
    "/System/Library/Extensions/vecLib.kext",
    "/System/Library/Extensions/webcontentfilter.kext",
    "/System/Library/Extensions/webdav_fs.kext",
    "/Library/Extensions/ACS6x.kext",
    "/Library/Extensions/ArcMSR.kext",
    "/Library/Extensions/ATTOCelerityFC8.kext",
    "/Library/Extensions/ATTOExpressSASHBA2.kext",
    "/Library/Extensions/ATTOExpressSASRAID2.kext",
    "/Library/Extensions/CalDigitHDProDrv.kext",
    "/Library/Extensions/HighPointIOP.kext",
    "/Library/Extensions/HighPointRR.kext",
    "/Library/Extensions/PromiseSTEX.kext",
    "/Library/Extensions/SoftRAID.kext"
)

launchd.conf contents
---------------


Hosts file
---------------
##
# Host Database
#
# localhost is used to configure the loopback interface
# when the system is booting.  Do not change this entry.
##
127.0.0.1	localhost
255.255.255.255	broadcasthost
::1             localhost 


Scan log
---------------
2016-05-04 22:02:29 :  
2016-05-04 22:02:29 : ----- Scan Started -----
2016-05-04 22:02:29 : Scanning with signatures version 66 (2016-5-2)
2016-05-04 22:02:35 : Adware.IronCore : /Users/Svasticore/Library/Safari/Extensions/TatankaBison.safariextz
2016-05-04 22:02:38 : OSX.Genieo : /Users/Svasticore/Library/LaunchAgents/Swissfist.AppRemoval.plist,/Users/Svasticore/Library/LaunchAgents/Swissfist.download.plist,/Users/Svasticore/Library/LaunchAgents/Swissfist.ltvbit.plist,/Users/Svasticore/Library/LaunchAgents/Swissfist.update.plist
2016-05-04 22:02:38 : OSX.Genieo : /Applications/Swissfist
2016-05-04 22:02:38 : OSX.Genieo : /Users/Svasticore/Library/Application Support/Swissfist
2016-05-04 22:02:38 : OSX.Genieo : /Users/Svasticore/Library/LaunchAgents/Swissfist.update.plist
2016-05-04 22:03:00 : PUP.JDIBackup : /Applications/ZipCloud.app
2016-05-04 22:03:00 : PUP.JDIBackup : /Users/Svasticore/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
2016-05-04 22:03:00 : PUP.JDIBackup : /Users/Svasticore/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
2016-05-04 22:03:00 : PUP.JDIBackup : /Users/Svasticore/Library/LaunchAgents/com.jdibackup.ZipCloud.backupstart.plist
2016-05-04 22:03:00 : PUP.JDIBackup : /Applications/JustCloud.app
2016-05-04 22:03:00 : PUP.JDIBackup : /Users/Svasticore/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
2016-05-04 22:03:00 : PUP.JDIBackup : /Users/Svasticore/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
2016-05-04 22:03:00 : PUP.MacKeeper : /Users/Svasticore/Library/LaunchAgents/com.mackeeper.MacKeeper.Helper.plist
2016-05-04 22:03:00 : PUP.MacKeeper : /Library/LaunchDaemons/com.mackeeper.MacKeeper.plugin.AntiTheft.daemon.plist
2016-05-04 22:03:00 : PUP.MacKeeper : /Library/Application Support/MacKeeper
2016-05-04 22:03:01 : *** scan time: 0d 00:00:31 ***
2016-05-04 22:03:01 : ------ Scan Ended ------
2016-05-04 22:03:31 : ---- File Removal Started ----
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: Adware.IronCore
2016-05-04 22:03:31 : >> Removing extension item: /Users/Svasticore/Library/Safari/Extensions/TatankaBison.safariextz
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: OSX.Genieo
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.AppRemoval.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.download.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.ltvbit.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.update.plist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: OSX.Genieo
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.AppRemoval.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.download.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.ltvbit.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.update.plist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: OSX.Genieo
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.AppRemoval.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.download.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.ltvbit.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.update.plist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: OSX.Genieo
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.AppRemoval.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.download.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.ltvbit.plist
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/Swissfist.update.plist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: OSX.Genieo
2016-05-04 22:03:31 : >> Removing file item: /Applications/Swissfist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: OSX.Genieo
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/Application Support/Swissfist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: PUP.JDIBackup
2016-05-04 22:03:31 : >> Removing file item: /Applications/ZipCloud.app
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: PUP.JDIBackup
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: PUP.JDIBackup
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: PUP.JDIBackup
2016-05-04 22:03:31 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/com.jdibackup.ZipCloud.backupstart.plist
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:31 : REMOVING ITEM: PUP.JDIBackup
2016-05-04 22:03:31 : >> Removing file item: /Applications/JustCloud.app
2016-05-04 22:03:31 : ===========================================
2016-05-04 22:03:32 : REMOVING ITEM: PUP.JDIBackup
2016-05-04 22:03:32 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
2016-05-04 22:03:32 : ===========================================
2016-05-04 22:03:32 : REMOVING ITEM: PUP.JDIBackup
2016-05-04 22:03:32 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
2016-05-04 22:03:32 : ===========================================
2016-05-04 22:03:32 : REMOVING ITEM: PUP.MacKeeper
2016-05-04 22:03:32 : >> Removing file item: /Users/Svasticore/Library/LaunchAgents/com.mackeeper.MacKeeper.Helper.plist
2016-05-04 22:03:32 : ===========================================
2016-05-04 22:03:32 : REMOVING ITEM: PUP.MacKeeper
2016-05-04 22:03:32 : >> Removing file item: /Library/LaunchDaemons/com.mackeeper.MacKeeper.plugin.AntiTheft.daemon.plist
2016-05-04 22:03:32 : ===========================================
2016-05-04 22:03:32 : REMOVING ITEM: PUP.MacKeeper
2016-05-04 22:03:32 : >> Removing file item: /Library/Application Support/MacKeeper
2016-05-04 22:03:32 : ---- File Removal Complete ----
2016-05-04 22:03:39 : ===== Attempting restart =====
2016-05-04 22:11:27 :  
2016-05-04 22:11:27 : ----- Scan Started -----
2016-05-04 22:11:27 : Scanning with signatures version 66 (2016-5-2)
2016-05-04 22:11:39 : *** scan time: 0d 00:00:11 ***
2016-05-04 22:11:39 : ------ Scan Ended ------
2016-05-04 22:16:15 :  
2016-05-04 22:16:15 : ----- Scan Started -----
2016-05-04 22:16:15 : Scanning with signatures version 66 (2016-5-2)
2016-05-04 22:16:26 : *** scan time: 0d 00:00:10 ***
2016-05-04 22:16:26 : ------ Scan Ended ------
2016-05-04 22:17:07 :  
2016-05-04 22:17:07 : ----- Scan Started -----
2016-05-04 22:17:07 : Scanning with signatures version 66 (2016-5-2)
2016-05-04 22:17:18 : *** scan time: 0d 00:00:10 ***
2016-05-04 22:17:18 : ------ Scan Ended ------

Hier der Code

Dante12 · 04.05.2016, 23:16

Jau hier wurde schon einiges entfernt. Dein Rechner sollte jetzt etwas stabiler laufen.

Frage 1: Hast du Schritt 2 ausgeführt?
Frage 2: Hast du noch den OS X Yosemite Installer in deinem Programm-Ordner?

Anweisung: Bitte entferne Avast der link zur Anleitung ist in meinen ersten Post! Scrolle auf der Seite etwas herunter und klicke auf den blauen Button Detailed Steps das dich Schritt für Schritt bei der Deinstallation begleitet.

Schritt 3

Prüfen mit DetectX

Lade dir bitte DetectX herunter. Entpacken und auf deinen Desktop verschieben.
Starte die App und aktiviere die Checkbox See hidden Files. Oben im Fenster von DetectX klicke auf den Pull-Down Button und wähle All Searches und klicke anschließend auf Search.
Wenn etwas gefunden wurde, navigiere zu den entsprechenden Ordnern und lösche es manuell. Bei den Systemordnern musst du das Löschen mit deinem Passwort bestätigen.
Wenn du dir beim löschen nicht sicher bist, dann Frage lieber einmal mehr hier im Forum.
Wenn du damit fertig bist, klicke anschließend auf den Slider von DetectX so das der Pfeil auf die Mitte zeigt. Siehe Bild.
Klicke anschließend auf den Button Copy um das Log in die Zwischenablage zu kopieren.
Füge das Log hier in das Forum in Code-Tags ein.
Klicke wieder auf den Slider so das der Pfeil ganz nach unten zeigt. und der gelbe Button daneben auf Runs zeigt. Siehe Bild (Der gelbe Button zeigt hier auf Changes!).
Kopiere und füge auch diesen Inhalt hier in das Forum ein.
Du kannst jetzt DetectX beenden. Wenn du die versteckten Datein (Hidden Files) weiter anzeigen lassen willst, klicke auf NO sonst auf YES.

OS X Yosemite: youp**n -> Bundespolizei

Alles rund um Mac OSX & Linux: OS X Yosemite: youp**n -> Bundespolizei