mac osx verdacht auf malware vorwiegend firefox

kerri88 · 06.10.2016, 18:47

Bei Verdacht auf Malware -> Malwarebereich.
Egal ob Mac OS oder nicht.

Dante12 · 06.10.2016, 21:58

Zitat:

Zitat von kerri88

Bei Verdacht auf Malware -> Malwarebereich.
Egal ob Mac OS oder nicht.

Wie kommst du darauf? Alles was mit Mac zu tun hat kommt hier rein, auch die Themen die vorher woanders eröffnet wurden werden nach hierher verschoben.

@Eiss

MalwareBytes for Mac

Lade dir bitte MalwareBytes for Mac herunter.
Öffne das DMG und verschiebe die APP in den Programm-Ordner.
Programm starten und klicke auf Scan. Gefundene Malware wird in den Papierkorb verschoben. Mache ein Neustart wenn verlangt wird.
Starte nochmal MalwareBytes (wenn noch nicht schon geöffnet), und öffne oben in der Menüleiste von Malwarebytes das Menü Scanner
Wähle anschliessend Take System Snapshot.
Hinweis:Das Menü oben auf deinen Bildschirm siehst du nur wenn die Anwendung aktiv ist (aktviere die Anwendung mit einem Klick in das Fenster). Siehe Bild
Kopiere das Log im Fenster und füge es hier ein. Wenn möglich in Code-Tags siehe Lesestoff

EtreCheck installieren

Lade dir bitte EtreCheck herunter.
Entpacken und Ausführen.
Klicke auf das Pull-Down Menü und wähle No Problem - Just Checking, anschliessend auf Start Etrecheck
Nach Abschluss erscheint das Fenster mit dem Log. Klicke oben links auf den Button Share Report und anschließend Copy to Clipboard.
Das Log befindet sich nun in der Zwischenablage (Clipboard). Füge den Inhalt mit Command-V hier in dein Thema ein. Bitte in Code-Tags siehe Lesestoff.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit COMMAND+A) und kopiere es in die Zwischenablage mit COMMAND+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Cursor zwischen die CODE-Tags und drücke COMMAND+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

kerri88 · 07.10.2016, 05:32

Ich dachte das ist da wie in ALLES RUND UM WINDOWS und soll in die Log- oder Plagegeistersektion. Das erklärte mir zumindest mal... Ach, lassen wir das.
Wenn der TO sich meldet übernimm bitte du, ich bin mit Mac Tools und Anleitung weniger vertaut als mit den unter Windoof

cosinus · 07.10.2016, 14:57

Zitat:

Zitat von kerri88

Ich dachte das ist da wie in ALLES RUND UM WINDOWS und soll in die Log- oder Plagegeistersektion. Das erklärte mir zumindest mal... Ach, lassen wir das.
Wenn der TO sich meldet übernimm bitte du, ich bin mit Mac Tools und Anleitung weniger vertaut als mit den unter Windoof

Linux, Mac OS und Smartphones werden gesondert betrachtet. Da ist einfach zuviel anders als bei Windows. Aber sonst hast du recht, denn es macht ja aus bereinigungstechnischer Sicht keinen Sinn zwischen den einzelnen Windows-Versionen oder gar noch Geräteklassen (Netbook, Notebook, Desktop) zu unterscheiden.

Eiss · 08.10.2016, 09:26

Code:

ATTFilter

Malwarebytes Anti-Malware 1.2.4.584 system report - 8. Oktober 2016 10:22:27 MESZ
Mac OS X version Version 10.10.5 (Build 14F1605)
System uptime: 0d 01:07:05

Safari extensions
-----------------------

Chrome extensions
-----------------------
katharinakral
    Default
        Name: Google Slides
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek
        Modified: 2015-04-23 17:16:52 +0000
 
        Name: Google Docs
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/aohghmighlieiainnegkcijnfilokake
        Modified: 2015-04-23 17:16:53 +0000
 
        Name: Google Drive
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf
        Modified: 2015-10-28 15:45:52 +0000
 
        Name: YouTube
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo
        Modified: 2015-10-17 19:25:14 +0000
 
        Name: Google Cast
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/boadgeojelhgndaghljhdicfkmllpafd
        Modified: 2016-05-27 13:13:12 +0000
 
        Name: Adblock Plus
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/cfhdojbkjhnklbpkdaibdccddilifddb
        Modified: 2016-09-09 20:17:55 +0000
 
        Name: Google Search
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/coobgpohoikkiipiblmjeljniedjpjpf
        Modified: 2015-10-28 15:45:52 +0000
 
        Name: Google Sheets
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap
        Modified: 2015-04-23 17:16:50 +0000
 
        Name: Google Docs Offline
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi
        Modified: 2016-03-15 19:02:23 +0000
 
        Name: Chrome Web Store Payments
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda
        Modified: 2016-05-27 13:13:22 +0000
 
        Name: Gmail
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia
        Modified: 2015-04-23 17:16:53 +0000
 
        Name: Chrome Media Router
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm
        Modified: 2016-09-28 17:49:24 +0000
 

Firefox extensions
-----------------------
katharinakral
    hv192dqi.default
        Name: Adblock Plus
        Path: /Users/katharinakral/Library/Application Support/Firefox/Profiles/hv192dqi.default/extensions/{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
        Modified: 2016-04-30 21:20:43 +0000
 

Login items
-----------------------
CleanMyMac 3 Menu

System startup items
-----------------------

User launch agents
-----------------------
/Users/katharinakral/Library/LaunchAgents/com.google.keystone.agent.plist
/Users/katharinakral/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

System launch agents
-----------------------

System launch daemons
-----------------------
/Library/LaunchDaemons/com.adobe.fpsaud.plist
/Library/LaunchDaemons/com.apple.vayt.plist
/Library/LaunchDaemons/com.buckwheatUpd.plist
/Library/LaunchDaemons/com.malwarebytes.HelperTool.plist
/Library/LaunchDaemons/com.mice.360Daemon.plist
/Library/LaunchDaemons/com.readjustmentUpd.plist
/Library/LaunchDaemons/com.sec.faxdb.plist
/Library/LaunchDaemons/com.usideb.plist

Kernel extensions
-----------------------
/System/Library/Extensions/360Controller.kext
/System/Library/Extensions/JMicronATA.kext
/Library/Extensions/360Controller.kext
/Library/Extensions/ACS6x.kext
/Library/Extensions/ArcMSR.kext
/Library/Extensions/ATTOCelerityFC8.kext
/Library/Extensions/ATTOExpressSASHBA2.kext
/Library/Extensions/ATTOExpressSASRAID2.kext
/Library/Extensions/CalDigitHDProDrv.kext
/Library/Extensions/HighPointIOP.kext
/Library/Extensions/HighPointRR.kext
/Library/Extensions/PromiseSTEX.kext
/Library/Extensions/SoftRAID.kext
/Library/Extensions/Wireless360Controller.kext
/Library/Extensions/WirelessGamingReceiver.kext

launchd.conf contents
-----------------------


Hosts file
-----------------------
##\n# Host Database\n#\n# localhost is used to configure the loopback interface\n# when the system is booting. Do not change this entry.\n##\n127.0.0.1 localhost\n255.255.255.255 broadcasthost\n::1 localhost \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n##SYS##\n127.0.0.1 inst.shoppingate.info\n127.0.0.1 service.shoppingate.info\n127.0.0.1 indexx.org\n127.0.0.1 f.flshbsjs.info\n127.0.0.1 gsy.testersgroupfun.com\n127.0.0.1 sendmessagebox.com\n127.0.0.1 t1.inskinad.com\n127.0.0.1 q.crbfmcjs.info\n127.0.0.1 static.donation-tools.org\n127.0.0.1 istatic.datafastguru.info\n127.0.0.1 static.boostsaves.com\n127.0.0.1 www.best-deals-products.com\n127.0.0.1 fge.solartrendinc.com\n127.0.0.1 nps.pastaleads.com\n127.0.0.1 digitaloptout.com\n127.0.0.1 cdncache-a.akamaihd.net\n127.0.0.1 cdncache1-a.akamaihd.net\n127.0.0.1 rvzr-a.akamaihd.net\n127.0.0.1 rvzr2-a.akamaihd.net\n127.0.0.1 asrv-a.akamaihd.net\n127.0.0.1 cdn.visadd.com\n127.0.0.1 a.visadd.com\n127.0.0.1 ydt.winsurfingclub.com\n127.0.0.1 client.foxydeal.com\n127.0.0.1 s.hklmm.com\n127.0.0.1 i.crbsjs.info\n127.0.0.1 wwm.determineyourroad.com\n127.0.0.1 ext1.engageya.com\n127.0.0.1 ext2.engageya.com\n127.0.0.1 a.tfxiq.com\n127.0.0.1 cdn.staticwebdom.com\n127.0.0.1 api.jollywallet.com\n127.0.0.1 i_crbsjs_info.tlscdn.com\n127.0.0.1 i_flshbsjs_info.tlscdn.com\n127.0.0.1 ppj.qwikbookprint.com\n127.0.0.1 homedesigntreasure.com\n127.0.0.1 www.superfish.com\n127.0.0.1 istatic.eshopcomp.com\n64.251.22.253 shmactustus.com\n64.251.22.253 www.google-analytics.com\n##SYS##


Scan log
-----------------------
2016-10-08 09:12:26 :  
2016-10-08 09:12:26 : ----- Scan Started -----
2016-10-08 09:12:26 : Scanning with signatures version 130 (2016-10-7)
2016-10-08 09:12:38 : Adware.Conduit : /Users/katharinakral/Library/Safari/Extensions/searchExt.safariextz
2016-10-08 09:12:38 : Adware.Conduit : /Users/katharinakral/Conduit
2016-10-08 09:12:38 : Adware.Conduit : /Users/katharinakral/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
2016-10-08 09:12:38 : Adware.VSearch : /Library/Application Support/VSearch
2016-10-08 09:12:38 : Adware.VSearch : /Library/LaunchAgents/com.vsearch.agent.plist
2016-10-08 09:12:38 : Adware.VSearch : /Library/LaunchDaemons/com.vsearch.daemon.plist
2016-10-08 09:12:38 : Adware.VSearch : /Library/LaunchDaemons/com.vsearch.helper.plist
2016-10-08 09:12:38 : Adware.VSearch : /System/Library/Frameworks/VSearch.framework
2016-10-08 09:12:39 : Adware.VSearch : /Library/Application Support/Intervary
2016-10-08 09:12:39 : Adware.VSearch : /Library/LaunchAgents/com.intervary.agent.plist
2016-10-08 09:12:39 : Adware.VSearch : /Library/LaunchDaemons/com.intervary.daemon.plist,/Library/LaunchDaemons/com.intervary.helper.plist
2016-10-08 09:12:39 : Adware.VSearch : /private/etc/run_upd.sh
2016-10-08 09:12:39 : Adware.VSearch : /Library/LaunchDaemons/com.bamboulaUpd.plist,/Library/LaunchDaemons/com.nessUpd.plist
2016-10-08 09:12:50 : Adware.VSearch : /Library/bamboulaUpd,/Library/buckwheatUpd,/Library/lazzaroni,/Library/legislatively,/Library/nessUpd,/Library/pessoner,/Library/readjustmentUpd,/Library/waning
2016-10-08 09:12:50 : Adware.VSearch : /Library/LaunchDaemons/com.conquering.plist,/Library/LaunchDaemons/com.lazzaroni.plist,/Library/LaunchDaemons/com.legislatively.plist,/Library/LaunchDaemons/com.pessoner.plist,/Library/LaunchDaemons/com.waning.plist
2016-10-08 09:12:50 : Adware.VSearch : /Library/LaunchDaemons/com.glycogenolysis.service.plist,/Library/LaunchDaemons/com.Jim.service.plist
2016-10-08 09:12:52 : Adware.VSearch : /etc/conquering.sh,/etc/lazzaroni.sh,/etc/legislatively.sh,/etc/pessoner.sh,/etc/waning.sh
2016-10-08 09:12:52 : Adware.VSearch : /private/var/tmp/dit8.tgz
2016-10-08 09:12:52 : Adware.VSearch : /private/var/tmp/Injector10052016
2016-10-08 09:13:23 : PUP.MacKeeper : /Applications/MacKeeper.app
2016-10-08 09:13:23 : PUP.MPlayerX : /Applications/MPlayerX.app
2016-10-08 09:13:23 : PUP.MPlayerX : /Users/katharinakral/Library/Preferences/org.niltsh.MPlayerX.plist
2016-10-08 09:13:24 : *** Scan time: 0d 00:00:58 ***
2016-10-08 09:13:24 : ------ Scan Ended ------
2016-10-08 09:13:58 : ---- File Removal Started ----
2016-10-08 09:13:58 : ===========================================
2016-10-08 09:13:58 : REMOVING ITEM: Adware.Conduit
2016-10-08 09:13:58 : >> Removing extension item: /Users/katharinakral/Library/Safari/Extensions/searchExt.safariextz
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.Conduit
2016-10-08 09:13:59 : >> Removing file item: /Users/katharinakral/Conduit
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.Conduit
2016-10-08 09:13:59 : >> Removing file item: /Users/katharinakral/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/Application Support/VSearch
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchAgents/com.vsearch.agent.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.vsearch.daemon.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.vsearch.helper.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /System/Library/Frameworks/VSearch.framework
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/Application Support/Intervary
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchAgents/com.intervary.agent.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.daemon.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.helper.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.daemon.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.helper.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /private/etc/run_upd.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.bamboulaUpd.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.nessUpd.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.bamboulaUpd.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.nessUpd.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.glycogenolysis.service.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.Jim.service.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.glycogenolysis.service.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.Jim.service.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /private/var/tmp/dit8.tgz
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /private/var/tmp/Injector10052016
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: PUP.MacKeeper
2016-10-08 09:13:59 : >> Removing file item: /Applications/MacKeeper.app
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: PUP.MPlayerX
2016-10-08 09:13:59 : >> Removing file item: /Applications/MPlayerX.app
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: PUP.MPlayerX
2016-10-08 09:13:59 : >> Removing file item: /Users/katharinakral/Library/Preferences/org.niltsh.MPlayerX.plist
2016-10-08 09:13:59 : ---- File Removal Complete ----
2016-10-08 09:14:19 : ===== Attempting restart =====

06.10.2016, 18:47	#1
kerri88 Gesperrt	mac osx verdacht auf malware vorwiegend firefox Bei Verdacht auf Malware -> Malwarebereich. Egal ob Mac OS oder nicht.

07.10.2016, 05:32	#3
kerri88 Gesperrt	mac osx verdacht auf malware vorwiegend firefox Ich dachte das ist da wie in ALLES RUND UM WINDOWS und soll in die Log- oder Plagegeistersektion. Das erklärte mir zumindest mal... Ach, lassen wir das. Wenn der TO sich meldet übernimm bitte du, ich bin mit Mac Tools und Anleitung weniger vertaut als mit den unter Windoof __________________

mac osx verdacht auf malware vorwiegend firefox

Alles rund um Mac OSX & Linux: mac osx verdacht auf malware vorwiegend firefox