Adware - Spam öffnet automatisch Tab in Safari

Mac90 · 26.09.2016, 22:19

Hallo Trojaner Board,

Mir wurde schon einmal grandios geholfen von eurem Boardmitglied Dante, und ich hoffe ihr könnt mir bei meinem aktuellen Problem wieder weiterhelfen (vielen Dank!!).

Seit heute mittag öffnet sich in Safari ca. alle 3-4 Minuten eine Spam/Adware Seite und probiert diese zu laden (ich loesch den tab meistens sofort). Universitäts bedingt habe ich mir heute auf anraten des Service Desks einen VPN client namens Shimo runtergeladen, was für mich Laien als der Grund erscheint warum dieses Problem jetzt plötzlich auftritt. Jedoch habe ich gestern auch auf macOS Sierra upgedatet, und mir einen weiteren VPN client runtergeladen (Vyprvpn). Ich habe mehrere Malwarebytes scans durchlaufen lassen, diese haben jedoch keine Adware gefunden. Angefügt befindet sich ein Scan meines Systems:

Code:

ATTFilter

Malwarebytes Anti-Malware 1.2.4.584 system report - 26 September 2016 at 23:09:29 GMT+2
Mac OS X version Version 10.12 (Build 16A323)
System uptime: 2d 07:53:45

Safari extensions
-----------------------
Luca
    Name: Adblock Plus
    Path: /Users/Luca/Library/Safari/Extensions/Adblock Plus.safariextz
    Modified: 2016-07-25 13:43:28 +0000
 
    Name: AdBlock
    Path: /Users/Luca/Library/Safari/Extensions/AdBlock.safariextz
    Modified: 2015-10-17 10:02:25 +0000
 
    Name: JS Blocker 5
    Path: /Users/Luca/Library/Safari/Extensions/JS Blocker 5.safariextz
    Modified: 2016-07-25 13:43:26 +0000
 
    Name: Ka-Block!
    Path: /Users/Luca/Library/Safari/Extensions/Ka-Block!.safariextz
    Modified: 2016-08-27 18:38:38 +0000
 
    Name: TrafficLight
    Path: /Users/Luca/Library/Safari/Extensions/TrafficLight.safariextz
    Modified: 2016-03-19 11:24:07 +0000
 

Chrome extensions
-----------------------
Luca
    Default
        Name: Google Slides
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek
        Modified: 2015-04-30 16:50:23 +0000
 
        Name: Google Docs
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/aohghmighlieiainnegkcijnfilokake
        Modified: 2015-04-30 16:50:42 +0000
 
        Name: Google Drive
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf
        Modified: 2015-10-28 21:27:10 +0000
 
        Name: YouTube
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo
        Modified: 2015-09-27 13:12:49 +0000
 
        Name: Google Search
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/coobgpohoikkiipiblmjeljniedjpjpf
        Modified: 2015-10-28 21:27:10 +0000
 
        Name: Google Sheets
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap
        Modified: 2015-04-30 16:50:22 +0000
 
        Name: Google Docs Offline
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi
        Modified: 2016-03-15 22:10:35 +0000
 
        Name: AdBlock
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/gighmmpiobklfepjocnamgkkbiglidom
        Modified: 2016-09-25 14:55:26 +0000
 
        Name: Unlimited Free VPN - Hola
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/gkojfkhlekighikafcpjkiklfbnlmeio
        Modified: 2016-09-18 08:49:41 +0000
 
        Name: Adblock 
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/lppmdhnfbfghihfoceaehkbgnlhadflc
        Modified: 2015-04-30 16:57:00 +0000
 
        Name: Chrome Web Store Payments
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda
        Modified: 2016-04-04 23:01:21 +0000
 
        Name: Gmail
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia
        Modified: 2015-04-30 16:50:42 +0000
 
        Name: Chrome Media Router
        Path: /Users/Luca/Library/Application Support/Google/Chrome/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm
        Modified: 2016-09-25 14:55:26 +0000
 

Firefox extensions
-----------------------

Login items
-----------------------
Steam
Flux
iTunesHelper
SpeechSynthesisServer
Shimo

System startup items
-----------------------
/Library/StartupItems/ProTec6b
/Library/StartupItems/tap
/Library/StartupItems/tun
/Library/StartupItems/VyprVPN

User launch agents
-----------------------
/Users/Luca/Library/LaunchAgents/com.goldenfrog.VyprVPNUserAgent.plist
/Users/Luca/Library/LaunchAgents/com.google.keystone.agent.plist
/Users/Luca/Library/LaunchAgents/com.spotify.webhelper.plist
/Users/Luca/Library/LaunchAgents/com.valvesoftware.steamclean.plist

System launch agents
-----------------------
/Library/LaunchAgents/com.citrix.AuthManager_Mac.plist
/Library/LaunchAgents/com.citrix.ReceiverHelper.plist
/Library/LaunchAgents/com.citrix.ServiceRecords.plist

System launch daemons
-----------------------
/Library/LaunchDaemons/com.adobe.fpsaud.plist
/Library/LaunchDaemons/com.feingeist.shimo.helper.plist
/Library/LaunchDaemons/com.malwarebytes.HelperTool.plist
/Library/LaunchDaemons/com.microsoft.autoupdate.helpertool.plist
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
/Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist
/Library/LaunchDaemons/vyprvpnservice.plist

Kernel extensions
-----------------------
/Library/Extensions/ACS6x.kext
/Library/Extensions/ArcMSR.kext
/Library/Extensions/ATTOCelerityFC8.kext
/Library/Extensions/ATTOExpressSASHBA2.kext
/Library/Extensions/ATTOExpressSASRAID2.kext
/Library/Extensions/CalDigitHDProDrv.kext
/Library/Extensions/HighPointIOP.kext
/Library/Extensions/HighPointRR.kext
/Library/Extensions/hp_io_enabler_compound.kext
/Library/Extensions/PromiseSTEX.kext
/Library/Extensions/SoftRAID.kext
/Library/Extensions/tap.kext
/Library/Extensions/tun.kext
/Library/Extensions/VyprVPN/tap.kext
/Library/Extensions/VyprVPN/tun.kext

launchd.conf contents
-----------------------


Hosts file
-----------------------
##
# Host Database
#
# localhost is used to configure the loopback interface
# when the system is booting.  Do not change this entry.
##
127.0.0.1	localhost
255.255.255.255	broadcasthost
::1             localhost 


Scan log
-----------------------
2016-09-26 22:49:04 :  
2016-09-26 22:49:04 : ----- Scan Started -----
2016-09-26 22:49:04 : Scanning with signatures version 120 (2016-9-19)
2016-09-26 22:49:32 : *** Scan time: 0d 00:00:27 ***
2016-09-26 22:49:32 : ------ Scan Ended ------
2016-09-26 22:54:29 :  
2016-09-26 22:54:29 : ----- Scan Started -----
2016-09-26 22:54:29 : Scanning with signatures version 120 (2016-9-19)
2016-09-26 22:54:55 : *** Scan time: 0d 00:00:26 ***
2016-09-26 22:54:55 : ------ Scan Ended ------
2016-09-26 23:05:02 :  
2016-09-26 23:05:02 : ----- Scan Started -----
2016-09-26 23:05:02 : Scanning with signatures version 120 (2016-9-19)
2016-09-26 23:05:33 : *** Scan time: 0d 00:00:30 ***
2016-09-26 23:05:33 : ------ Scan Ended ------
2016-09-26 23:07:35 :  
2016-09-26 23:07:35 : ----- Scan Started -----
2016-09-26 23:07:35 : Scanning with signatures version 120 (2016-9-19)
2016-09-26 23:08:03 : *** Scan time: 0d 00:00:28 ***
2016-09-26 23:08:03 : ------ Scan Ended ------
2016-09-26 23:08:44 :  
2016-09-26 23:08:44 : ----- Scan Started -----
2016-09-26 23:08:45 : Scanning with signatures version 120 (2016-9-19)
2016-09-26 23:09:11 : *** Scan time: 0d 00:00:26 ***
2016-09-26 23:09:11 : ------ Scan Ended ------

Beste Grüße
Mac90

Adware - Spam öffnet automatisch Tab in Safari

Alles rund um Mac OSX & Linux: Adware - Spam öffnet automatisch Tab in Safari

Adware - Spam öffnet automatisch Tab in Safari

Ähnliche Themen: Adware - Spam öffnet automatisch Tab in Safari