mac osx verdacht auf malware vorwiegend firefox

kerri88 · 07.10.2016, 05:32

Ich dachte das ist da wie in ALLES RUND UM WINDOWS und soll in die Log- oder Plagegeistersektion. Das erklärte mir zumindest mal... Ach, lassen wir das.
Wenn der TO sich meldet übernimm bitte du, ich bin mit Mac Tools und Anleitung weniger vertaut als mit den unter Windoof

cosinus · 07.10.2016, 14:57

Zitat:

Zitat von kerri88

Ich dachte das ist da wie in ALLES RUND UM WINDOWS und soll in die Log- oder Plagegeistersektion. Das erklärte mir zumindest mal... Ach, lassen wir das.
Wenn der TO sich meldet übernimm bitte du, ich bin mit Mac Tools und Anleitung weniger vertaut als mit den unter Windoof

Linux, Mac OS und Smartphones werden gesondert betrachtet. Da ist einfach zuviel anders als bei Windows. Aber sonst hast du recht, denn es macht ja aus bereinigungstechnischer Sicht keinen Sinn zwischen den einzelnen Windows-Versionen oder gar noch Geräteklassen (Netbook, Notebook, Desktop) zu unterscheiden.

Eiss · 08.10.2016, 09:26

Code:

ATTFilter

Malwarebytes Anti-Malware 1.2.4.584 system report - 8. Oktober 2016 10:22:27 MESZ
Mac OS X version Version 10.10.5 (Build 14F1605)
System uptime: 0d 01:07:05

Safari extensions
-----------------------

Chrome extensions
-----------------------
katharinakral
    Default
        Name: Google Slides
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek
        Modified: 2015-04-23 17:16:52 +0000
 
        Name: Google Docs
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/aohghmighlieiainnegkcijnfilokake
        Modified: 2015-04-23 17:16:53 +0000
 
        Name: Google Drive
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf
        Modified: 2015-10-28 15:45:52 +0000
 
        Name: YouTube
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo
        Modified: 2015-10-17 19:25:14 +0000
 
        Name: Google Cast
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/boadgeojelhgndaghljhdicfkmllpafd
        Modified: 2016-05-27 13:13:12 +0000
 
        Name: Adblock Plus
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/cfhdojbkjhnklbpkdaibdccddilifddb
        Modified: 2016-09-09 20:17:55 +0000
 
        Name: Google Search
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/coobgpohoikkiipiblmjeljniedjpjpf
        Modified: 2015-10-28 15:45:52 +0000
 
        Name: Google Sheets
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap
        Modified: 2015-04-23 17:16:50 +0000
 
        Name: Google Docs Offline
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi
        Modified: 2016-03-15 19:02:23 +0000
 
        Name: Chrome Web Store Payments
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda
        Modified: 2016-05-27 13:13:22 +0000
 
        Name: Gmail
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia
        Modified: 2015-04-23 17:16:53 +0000
 
        Name: Chrome Media Router
        Path: /Users/katharinakral/Library/Application Support/Google/Chrome/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm
        Modified: 2016-09-28 17:49:24 +0000
 

Firefox extensions
-----------------------
katharinakral
    hv192dqi.default
        Name: Adblock Plus
        Path: /Users/katharinakral/Library/Application Support/Firefox/Profiles/hv192dqi.default/extensions/{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
        Modified: 2016-04-30 21:20:43 +0000
 

Login items
-----------------------
CleanMyMac 3 Menu

System startup items
-----------------------

User launch agents
-----------------------
/Users/katharinakral/Library/LaunchAgents/com.google.keystone.agent.plist
/Users/katharinakral/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

System launch agents
-----------------------

System launch daemons
-----------------------
/Library/LaunchDaemons/com.adobe.fpsaud.plist
/Library/LaunchDaemons/com.apple.vayt.plist
/Library/LaunchDaemons/com.buckwheatUpd.plist
/Library/LaunchDaemons/com.malwarebytes.HelperTool.plist
/Library/LaunchDaemons/com.mice.360Daemon.plist
/Library/LaunchDaemons/com.readjustmentUpd.plist
/Library/LaunchDaemons/com.sec.faxdb.plist
/Library/LaunchDaemons/com.usideb.plist

Kernel extensions
-----------------------
/System/Library/Extensions/360Controller.kext
/System/Library/Extensions/JMicronATA.kext
/Library/Extensions/360Controller.kext
/Library/Extensions/ACS6x.kext
/Library/Extensions/ArcMSR.kext
/Library/Extensions/ATTOCelerityFC8.kext
/Library/Extensions/ATTOExpressSASHBA2.kext
/Library/Extensions/ATTOExpressSASRAID2.kext
/Library/Extensions/CalDigitHDProDrv.kext
/Library/Extensions/HighPointIOP.kext
/Library/Extensions/HighPointRR.kext
/Library/Extensions/PromiseSTEX.kext
/Library/Extensions/SoftRAID.kext
/Library/Extensions/Wireless360Controller.kext
/Library/Extensions/WirelessGamingReceiver.kext

launchd.conf contents
-----------------------


Hosts file
-----------------------
##\n# Host Database\n#\n# localhost is used to configure the loopback interface\n# when the system is booting. Do not change this entry.\n##\n127.0.0.1 localhost\n255.255.255.255 broadcasthost\n::1 localhost \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n##SYS##\n127.0.0.1 inst.shoppingate.info\n127.0.0.1 service.shoppingate.info\n127.0.0.1 indexx.org\n127.0.0.1 f.flshbsjs.info\n127.0.0.1 gsy.testersgroupfun.com\n127.0.0.1 sendmessagebox.com\n127.0.0.1 t1.inskinad.com\n127.0.0.1 q.crbfmcjs.info\n127.0.0.1 static.donation-tools.org\n127.0.0.1 istatic.datafastguru.info\n127.0.0.1 static.boostsaves.com\n127.0.0.1 www.best-deals-products.com\n127.0.0.1 fge.solartrendinc.com\n127.0.0.1 nps.pastaleads.com\n127.0.0.1 digitaloptout.com\n127.0.0.1 cdncache-a.akamaihd.net\n127.0.0.1 cdncache1-a.akamaihd.net\n127.0.0.1 rvzr-a.akamaihd.net\n127.0.0.1 rvzr2-a.akamaihd.net\n127.0.0.1 asrv-a.akamaihd.net\n127.0.0.1 cdn.visadd.com\n127.0.0.1 a.visadd.com\n127.0.0.1 ydt.winsurfingclub.com\n127.0.0.1 client.foxydeal.com\n127.0.0.1 s.hklmm.com\n127.0.0.1 i.crbsjs.info\n127.0.0.1 wwm.determineyourroad.com\n127.0.0.1 ext1.engageya.com\n127.0.0.1 ext2.engageya.com\n127.0.0.1 a.tfxiq.com\n127.0.0.1 cdn.staticwebdom.com\n127.0.0.1 api.jollywallet.com\n127.0.0.1 i_crbsjs_info.tlscdn.com\n127.0.0.1 i_flshbsjs_info.tlscdn.com\n127.0.0.1 ppj.qwikbookprint.com\n127.0.0.1 homedesigntreasure.com\n127.0.0.1 www.superfish.com\n127.0.0.1 istatic.eshopcomp.com\n64.251.22.253 shmactustus.com\n64.251.22.253 www.google-analytics.com\n##SYS##


Scan log
-----------------------
2016-10-08 09:12:26 :  
2016-10-08 09:12:26 : ----- Scan Started -----
2016-10-08 09:12:26 : Scanning with signatures version 130 (2016-10-7)
2016-10-08 09:12:38 : Adware.Conduit : /Users/katharinakral/Library/Safari/Extensions/searchExt.safariextz
2016-10-08 09:12:38 : Adware.Conduit : /Users/katharinakral/Conduit
2016-10-08 09:12:38 : Adware.Conduit : /Users/katharinakral/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
2016-10-08 09:12:38 : Adware.VSearch : /Library/Application Support/VSearch
2016-10-08 09:12:38 : Adware.VSearch : /Library/LaunchAgents/com.vsearch.agent.plist
2016-10-08 09:12:38 : Adware.VSearch : /Library/LaunchDaemons/com.vsearch.daemon.plist
2016-10-08 09:12:38 : Adware.VSearch : /Library/LaunchDaemons/com.vsearch.helper.plist
2016-10-08 09:12:38 : Adware.VSearch : /System/Library/Frameworks/VSearch.framework
2016-10-08 09:12:39 : Adware.VSearch : /Library/Application Support/Intervary
2016-10-08 09:12:39 : Adware.VSearch : /Library/LaunchAgents/com.intervary.agent.plist
2016-10-08 09:12:39 : Adware.VSearch : /Library/LaunchDaemons/com.intervary.daemon.plist,/Library/LaunchDaemons/com.intervary.helper.plist
2016-10-08 09:12:39 : Adware.VSearch : /private/etc/run_upd.sh
2016-10-08 09:12:39 : Adware.VSearch : /Library/LaunchDaemons/com.bamboulaUpd.plist,/Library/LaunchDaemons/com.nessUpd.plist
2016-10-08 09:12:50 : Adware.VSearch : /Library/bamboulaUpd,/Library/buckwheatUpd,/Library/lazzaroni,/Library/legislatively,/Library/nessUpd,/Library/pessoner,/Library/readjustmentUpd,/Library/waning
2016-10-08 09:12:50 : Adware.VSearch : /Library/LaunchDaemons/com.conquering.plist,/Library/LaunchDaemons/com.lazzaroni.plist,/Library/LaunchDaemons/com.legislatively.plist,/Library/LaunchDaemons/com.pessoner.plist,/Library/LaunchDaemons/com.waning.plist
2016-10-08 09:12:50 : Adware.VSearch : /Library/LaunchDaemons/com.glycogenolysis.service.plist,/Library/LaunchDaemons/com.Jim.service.plist
2016-10-08 09:12:52 : Adware.VSearch : /etc/conquering.sh,/etc/lazzaroni.sh,/etc/legislatively.sh,/etc/pessoner.sh,/etc/waning.sh
2016-10-08 09:12:52 : Adware.VSearch : /private/var/tmp/dit8.tgz
2016-10-08 09:12:52 : Adware.VSearch : /private/var/tmp/Injector10052016
2016-10-08 09:13:23 : PUP.MacKeeper : /Applications/MacKeeper.app
2016-10-08 09:13:23 : PUP.MPlayerX : /Applications/MPlayerX.app
2016-10-08 09:13:23 : PUP.MPlayerX : /Users/katharinakral/Library/Preferences/org.niltsh.MPlayerX.plist
2016-10-08 09:13:24 : *** Scan time: 0d 00:00:58 ***
2016-10-08 09:13:24 : ------ Scan Ended ------
2016-10-08 09:13:58 : ---- File Removal Started ----
2016-10-08 09:13:58 : ===========================================
2016-10-08 09:13:58 : REMOVING ITEM: Adware.Conduit
2016-10-08 09:13:58 : >> Removing extension item: /Users/katharinakral/Library/Safari/Extensions/searchExt.safariextz
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.Conduit
2016-10-08 09:13:59 : >> Removing file item: /Users/katharinakral/Conduit
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.Conduit
2016-10-08 09:13:59 : >> Removing file item: /Users/katharinakral/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/Application Support/VSearch
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchAgents/com.vsearch.agent.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.vsearch.daemon.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.vsearch.helper.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /System/Library/Frameworks/VSearch.framework
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/Application Support/Intervary
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchAgents/com.intervary.agent.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.daemon.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.helper.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.daemon.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.intervary.helper.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /private/etc/run_upd.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.bamboulaUpd.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.nessUpd.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.bamboulaUpd.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.nessUpd.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/bamboulaUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/buckwheatUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/lazzaroni
2016-10-08 09:13:59 : >> Removing file item: /Library/legislatively
2016-10-08 09:13:59 : >> Removing file item: /Library/nessUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/pessoner
2016-10-08 09:13:59 : >> Removing file item: /Library/readjustmentUpd
2016-10-08 09:13:59 : >> Removing file item: /Library/waning
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.conquering.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.lazzaroni.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.legislatively.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.pessoner.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.waning.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.glycogenolysis.service.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.Jim.service.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.glycogenolysis.service.plist
2016-10-08 09:13:59 : >> Removing file item: /Library/LaunchDaemons/com.Jim.service.plist
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /etc/conquering.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/lazzaroni.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/legislatively.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/pessoner.sh
2016-10-08 09:13:59 : >> Removing file item: /etc/waning.sh
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /private/var/tmp/dit8.tgz
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: Adware.VSearch
2016-10-08 09:13:59 : >> Removing file item: /private/var/tmp/Injector10052016
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: PUP.MacKeeper
2016-10-08 09:13:59 : >> Removing file item: /Applications/MacKeeper.app
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: PUP.MPlayerX
2016-10-08 09:13:59 : >> Removing file item: /Applications/MPlayerX.app
2016-10-08 09:13:59 : ===========================================
2016-10-08 09:13:59 : REMOVING ITEM: PUP.MPlayerX
2016-10-08 09:13:59 : >> Removing file item: /Users/katharinakral/Library/Preferences/org.niltsh.MPlayerX.plist
2016-10-08 09:13:59 : ---- File Removal Complete ----
2016-10-08 09:14:19 : ===== Attempting restart =====

07.10.2016, 05:32	#1
kerri88 Gesperrt	mac osx verdacht auf malware vorwiegend firefox Ich dachte das ist da wie in ALLES RUND UM WINDOWS und soll in die Log- oder Plagegeistersektion. Das erklärte mir zumindest mal... Ach, lassen wir das. Wenn der TO sich meldet übernimm bitte du, ich bin mit Mac Tools und Anleitung weniger vertaut als mit den unter Windoof

mac osx verdacht auf malware vorwiegend firefox

Alles rund um Mac OSX & Linux: mac osx verdacht auf malware vorwiegend firefox