|
Alles rund um Mac OSX & Linux: Spyware, Remote durch die IT vom Ex oder TrojanerWindows 7 Für alle Fragen rund um Mac OSX, Linux und andere Unix-Derivate. |
15.02.2019, 04:37 | #1 |
| Spyware, Remote durch die IT vom Ex oder Trojaner Hallo zusammen, ich bin ziemlich verzweifelt und brauche dringend Hilfe. Es wurden Passwörter geändert und Codes von iPhones, iPad, Emailkonten, Apple ID (einfach alles) Auch die Anmeldedaten für meine Bankkonten. Dateien und Programme wurden gelöscht Es befinden sich Dinge im Verlauf des Browsers und in den benutzten Dateien, die ich nicht aufgerufen habe. Einstellungen wurden geändert, Programme starteten nicht. In den Ordnern für die Drucker und Antivirenprogramme fand ich merkwürdige Dateien, File Fault wurde ausgeschaltet. Benutzer und Gruppen, die ich nicht kenne. Malewarebytes war 2 mal geöffnet, ich hab es de- und wieder installiert, danach hat es auch direkt wieder was gefunden. Antivir habe ich komplett runtergeschmissen, habe jetzt bitmedic. Beim Schlüsselbund kann ich die Bearbeitung nicht schließen, hier gibt es teilweise auch doppelte Einträge und merkwürdige nicht nachvollziehbare Einträge. Mein Hauptbenutzer ist angemeldet aber das Passwort wurde geändert und verschlüsselt. Selbst mit Apple konnte ich noch nicht wieder auf den Benutzer zugreifen. Lange konnte ich damit natürlich auch nicht updaten. Ich habe gestern in den Systemeinstellungen (WLAN aus, über neues Telefon rein) die Remoteverbindung unterbrochen, den Namen des Mac mehrmals geändert und in den Aktivitäten mehrere Prozesse beendet, unter anderem im Kernel - irgendwas mit google, was da bestimmt nicht hingehört. Denke aber nicht dass damit das Problem auf Dauer behoben ist. Wichtig ist dass ich meine Daten gerettet kriege, sie sind ausserordentlich wichtig. Deshalb habe ich den Rechner auch noch nicht platt gemacht. Bisher habe ich versucht das Problem selbst in den Griff zu kriegen. 1. Weil ich für die Internetforensik einer Privatdetektei nicht 4000 Euro ausgeben wollte und 2. weil sich sehr wichtige und sehr private Dateien auf meinem Rechner befinden. Ich bin aber leider nur semiprofessionell unterwegs und am Ende reicht es doch nicht. Hier mal meine laufenden Prozesse: Das stand in der letzten kopierten Logdatei??? Es ist 4.30 Uhr Last login: Thu Feb 14 19:58:58 on ttys000 chuch:~ verenarohrmoser2$ top Code:
ATTFilter Last login: Thu Feb 14 19:58:58 on ttys000 chuch:~ verenarohrmoser2$ top Processes: 649 total, 2 running, 647 sleeping, 2396 threads 04:35:56 Load Avg: 2.36, 2.23, 2.12 CPU usage: 15.2% user, 7.74% sys, 77.23% idle SharedLibs: 253M resident, 59M data, 26M linkedit. MemRegions: 118158 total, 1997M resident, 113M private, 1056M shared. PhysMem: 8174M used (1756M wired), 18M unused. VM: 3273G vsize, 1298M framework vsize, 1175308(0) swapins, 1494739(0) swapouts. Networks: packets: 971742/1008M in, 653740/117M out. Disks: 4870611/95G read, 1132147/22G written. PID COMMAND %CPU TIME #TH #WQ #PORT MEM PURG CMPRS PGRP 13097 mdworker_sha 0.0 00:00.06 3 1 59 3076K 0B 1904K 13097 13084 com.apple.iC 0.0 00:00.34 2 1 59 3444K 0B 1072K 13084 13083 com.apple.iC 0.0 00:00.16 2 1 59 3728K 0B 972K 13083 13071 mdworker_sha 0.0 00:00.23 3 1 58 3888K 0B 1844K 13071 13070 mdworker_sha 0.0 00:00.23 3 1 59 3784K 0B 1512K 13070 13068 System Prefe 0.0 00:04.24 8 5 465 107M 1012K 6252K 13068 13047 mdworker_sha 0.0 00:00.17 4 1 64 21M 0B 6264K 13047 13043 mdworker_sha 0.0 00:00.08 3 1 62 5508K 0B 1916K 13043 13009 com.apple.ge 0.0 00:00.14 3 1 65 5744K 0B 2696K 13009 13008 appstoreagen 0.0 00:00.47 3 2 87 4660K 0B 1236K 13008 13006 mdworker_sha 0.0 00:00.05 3 1 51 2964K 0B 1948K 13006 12991 deleted 0.0 00:00.06 3 3 46 2496K 0B 1600K 12991 12990 com.apple.Co 0.0 00:00.32 3 2 63 5692K 0B 3124K 12990 12920 MTLCompilerS 0.0 00:00.05 2 2 35 5136K 0B 5108K 12920 Nächster Versuch: Code:
ATTFilter Last login: Thu Feb 14 19:58:58 on ttys000 chuch:~ verenarohrmoser2$ top Processes: 652 total, 2 running, 1 stuck, 649 sleeping, 2383 threads 04:36:33 Load Avg: 2.08, 2.18, 2.10 CPU usage: 8.72% user, 6.13% sys, 85.14% idle SharedLibs: 253M resident, 59M data, 26M linkedit. MemRegions: 118218 total, 1998M resident, 113M private, 1056M shared. PhysMem: 8169M used (1737M wired), 22M unused. VM: 3286G vsize, 1298M framework vsize, 1175436(0) swapins, 1503292(0) swapouts. Networks: packets: 971813/1008M in, 653810/117M out. Disks: 4871596/95G read, 1132468/22G written. PID COMMAND %CPU TIME #TH #WQ #PORTS MEM PURG CMPRS PGRP PPID STATE BOOSTS %CPU_ME %CPU_OTHRS UID FAULTS COW MSGSENT MSGRECV SYSBSD SYSMACH CSW PAGEINS IDLEW POWER INSTRS CYCLES USER #MREG RPRVT VPRVT VSIZE KPRVT KSHRD 13121 ocspd 0.0 00:00.02 2 1 30 1520K 0B 0B 13121 1 sleeping *0[1] 0.00478 0.00000 0 1979+ 140 440+ 33+ 525+ 618+ 132+ 7 0 0.0 2649748 2407384 root N/A N/A N/A N/A N/A N/A 13119 AddressBookSourc 0.0 00:00.08 4 3 70 2080K 0B 0B 13119 1 sleeping 0[2] 0.00000 0.00000 505 4531 204 418 69 1370 696 853 23 8 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 13118 AddressBookSourc 0.1 00:00.19 5 4 88 4744K- 192K 0B 13118 1 sleeping 0[2] 0.06597 0.00000 501 5585+ 245 794+ 99 3149+ 1325+ 1566+ 28 11+ 0.2 2304541 4359034 verena N/A N/A N/A N/A N/A N/A 13097 mdworker_shared 0.0 00:00.06 3 1 59 3076K 0B 1904K 13097 1 sleeping *0[1] 0.00000 0.00000 504 4908 207 687 260 952 760 227 44 1 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 13084 com.apple.iCloud 0.0 00:00.34 2 1 58 3436K 0B 1072K 13084 1 sleeping 0[1] 0.00000 0.00000 504 4560 208 6939 312 15837 7521 4718 21 33 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 13083 com.apple.iCloud 0.0 00:00.16 2 1 59 3728K 0B 976K 13083 1 sleeping 0[1] 0.00000 0.00000 501 4611 208 2466 224 5933 2939 2472 2 38 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 13071 mdworker_shared 0.0 00:00.23 3 1 58 3888K 0B 1848K 13071 1 sleeping *0[1] 0.00000 0.00000 505 4205 198 868 262 1864 960 628 10 29 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 13070 mdworker_shared 0.0 00:00.23 3 1 59 3784K 0B 1512K 13070 1 sleeping *0[1] 0.00000 0.00000 504 4174 198 863 265 1829 955 643 16 17 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 13068 System Preferenc 0.0 00:04.24 6 3 398 107M 0B 6272K 13068 1 sleeping *0[33] 0.00000 0.00000 504 25897 386 31041 8928 32233 28976 16411 898 158 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 13047 mdworker_shared 0.0 00:00.17 4 1 64 21M 0B 8668K 13047 1 sleeping *0[1] 0.00000 0.00000 505 11424 195 931 316 1662 1093 636 359 8 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 13043 mdworker_shared 0.0 00:00.08 3 1 62 5508K 0B 2468K 13043 1 sleeping *0[1] 0.00000 0.00000 504 5472 193 824 294 1398 960 538 761 11 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 13009 com.apple.geod 0.0 00:00.14 3 1 65 5744K 0B 5480K 13009 1 sleeping 0[0] 0.00000 0.00000 501 3980 206 1185 91 2961 1611 2011 63 190 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 13008 appstoreagent 0.0 00:00.47 2 1 86 4652K 0B 2796K- 13008 1 sleeping 0[0] 0.00000 0.00000 504 6490+ 277 1565 211 8943+ 2558 4722+ 201 327+ 0.0 324766 577371 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 13006 mdworker_shared 0.0 00:00.05 3 1 51 2964K 0B 1948K 13006 1 sleeping *0[1] 0.00000 0.00000 89 3802 193 676 254 888 730 344 24 2 0.0 0 0 _spotlight N/A N/A N/A N/A N/A N/A 12991 deleted 0.0 00:00.06 3 3 46 2496K 0B 2452K 12991 1 sleeping 0[10] 0.00000 0.00000 504 2400 164 878 119 2388 1151 825 61 0 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12990 com.apple.Commer 0.0 00:00.32 3 2 63 5692K 0B 4952K 12990 1 sleeping 0[1] 0.00000 0.00000 504 5996 225 3063 650 6565 4327 3458 392 220 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12920 MTLCompilerServi 0.0 00:00.05 2 2 35 5136K 0B 5108K 12920 1 sleeping 0[1] 0.00000 0.00000 504 3084 174 160 40 628 347 118 84 2 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12919 MTLCompilerServi 0.0 00:00.05 2 2 26 4004K 0B 3992K 12919 1 sleeping 0[2] 0.00000 0.00000 504 3243 178 123 36 666 273 186 120 0 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12874 top 5.4 04:49.00 1/1 0 46 14M 0B 5568K 12874 12867 running *0[1] 0.00000 0.00000 0 2245672+ 103 52280207+ 26133289+ 8952077+ 40946163+ 160888+ 25 1842+ 5.4 158601979 202143114 root N/A N/A N/A N/A N/A N/A 12867 bash 0.0 00:00.01 1 0 24 776K 0B 764K 12867 12866 sleeping *0[1] 0.00000 0.00000 504 860 275 90 31 871 183 63 28 0 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12866 login 0.0 00:00.06 2 1 36 1148K 0B 1136K 12866 12863 sleeping *0[9] 0.00000 0.00000 0 1779 201 142 31 2362 285 452 16 1 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12864 com.apple.Dictio 0.0 00:00.06 3 3 36 1756K 0B 1728K 12864 1 sleeping 0[1] 0.00000 0.00000 504 2076 141 1284 192 2505 2310 902 36 0 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12863 Terminal 2.3 00:25.79 10 4 327- 129M- 14M+ 9360K- 12863 1 sleeping *0[136] 0.00219 0.00000 504 268163+ 452 151871+ 27023+ 140644+ 500156+ 144202+ 1462 11001+ 2.5 144611409 80857036 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12845 mdworker_shared 0.0 00:00.06 3 1 62 3076K 0B 2188K 12845 1 sleeping *0[1] 0.00000 0.00000 501 5372 193 735 271 1030 831 199 32 3 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 12841 ContextService 0.0 00:00.07 2 2 44 4888K 0B 3808K 12841 1 sleeping 0[9] 0.00000 0.00000 504 3864 728 495 73 1229 774 377 640 3 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12840 FMIPClientXPCSer 0.0 00:00.05 2 1 41 1784K 0B 1744K 12840 1 sleeping 0[1] 0.00000 0.00000 501 3417 229 252 49 1132 467 330 203 11 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 12838 AssetCacheLocato 0.0 00:00.04 2 1 49 2812K 0B 2768K 12838 1 sleeping 0[1] 0.00000 0.00000 501 2432 161 371 41 928 598 194 26 0 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 12837 siriknowledged 0.0 00:00.06 2 2 46 2140K 0B 2096K 12837 1 sleeping 0[2] 0.00000 0.00000 501 4005 211 326 65 1235 583 524 163 21 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 12836 com.apple.iTunes 0.0 00:00.06 2 2 51 2024K 0B 1392K 12836 1 sleeping 0[0] 0.00000 0.00000 501 3906 188 670 663 2380 1522 1167 22 7 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 12831 com.apple.access 0.0 00:00.01 3 3 36 832K 0B 792K 12831 1 sleeping 0[1] 0.00000 0.00000 504 1679 131 163 42 530 351 118 19 1 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12830 com.apple.Safari 0.0 00:00.04 2 1 44 2400K 0B 2376K 12830 1 sleeping 0[70] 0.00000 0.00000 504 3823 161 514 132 1004 644 212 19 0 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12828 MTLCompilerServi 0.0 00:00.03 2 2 33 3576K 0B 3548K 12828 1 sleeping 0[4] 0.00000 0.00000 504 2587 175 179 42 657 363 108 72 0 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12827 MTLCompilerServi 0.0 00:00.08 2 2 24 4868K 0B 4856K 12827 1 sleeping 0[12] 0.00000 0.00000 504 3495 178 196 49 995 352 136 98 2 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12823 com.apple.WebKit 0.0 00:00.27 4 1 107 7568K 0B 6024K 12823 1 sleeping 0[188] 0.00000 0.00000 504 10228 341 3064+ 1118+ 4642+ 10085+ 4161+ 37 217 0.0 100845 337340 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12822 com.apple.hiserv 0.0 00:01.32 2 2 40 1012K 0B 332K 12822 1 sleeping 0[7311] 0.00000 0.00000 504 1917 133 46493 9741 44390 37277 19992 17 2 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12818- NETserver 0.0 00:00.34 2 1 100 2920K 0B 2340K 12818 1 sleeping *0[5] 0.00000 0.00000 504 2354 462 2519 979 3640 23527+ 5784+ 33 1493 0.0 32201 226597 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12814- USBserver 0.0 00:00.19 2 1 95 2888K 0B 2332K 12814 1 sleeping *0[5] 0.00000 0.00000 504 2702 461 2538+ 1006+ 3547+ 8642+ 3391+ 369 291 0.0 112888 574536 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12812 ctkd 0.0 00:00.02 2 2 32 2244K 0B 2228K 12812 1 sleeping 0[1] 0.00000 0.00000 504 2988 152 143 39 630 320 118 3 0 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12811 PrintUITool 0.0 00:00.13 2 1 42 5256K 0B 5208K 12811 1 sleeping 0[1] 0.00000 0.00000 504 5812 177 187 45 1142 396 245 40 1 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12810 ctkahp 0.0 00:00.02 2 1 52 2412K 0B 2388K 12810 1 sleeping 0[1] 0.00000 0.00000 504 3003 157 168 39 612 369 155 4 1 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12806 com.apple.Ambien 0.0 00:00.05 4 1 70 1548K 0B 1500K 12806 1 sleeping *1[1] 0.00000 0.00000 0 3111 170 799 241 1679 1063 557 13 26 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12804 coreauthd 0.0 00:00.04 2 1 48 1452K 0B 524K 12804 1 sleeping 0[3] 0.00000 0.00000 504 3355 178 281 67 821 482 205 27 3 0.0 0 0 verenarohrmoser2 N/A N/A N/A N/A N/A N/A 12800 ctkd 0.0 00:00.02 2 2 30 2224K 0B 2208K 12800 1 sleeping 0[1] 0.00000 0.00000 0 2991 153 132 43 696 286 100 3 3 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12798 ctkahp 0.0 00:00.02 2 1 39 2480K 0B 2456K 12798 1 sleeping 0[1] 0.00000 0.00000 0 3028 158 155 44 696 339 148 6 1 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12792 ViewBridgeAuxili 0.0 00:00.10 2 1 73 1536K 0B 1112K 12792 1 sleeping 0[14] 0.00000 0.00000 0 3020 181 2183+ 969+ 3629+ 8212+ 3221+ 4 263 0.0 153205 490155 root N/A N/A N/A N/A N/A N/A 12787 pkd 0.0 00:00.30 2 1 49 3016K 0B 2964K 12787 1 sleeping 0[7] 0.00000 0.00000 0 4839 179 1968 86 24063 2442 1882 8 7 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12786 WiFiAgent 0.0 00:00.16 3 1 137 4228K 0B 3724K 12786 1 sleeping 0[18] 0.00000 0.00000 0 5213 251 3048+ 1070+ 4540+ 9450+ 4002+ 29 258 0.0 119302 315231 root N/A N/A N/A N/A N/A N/A 12785 nbagent 0.0 00:00.18 3 1 131 3544K 0B 3004K 12785 1 sleeping 0[8] 0.00000 0.00000 0 6490 254 3162+ 1064+ 4794+ 9485+ 4060+ 40 262 0.0 93399 231867 root N/A N/A N/A N/A N/A N/A 12784 universalaccessd 0.0 00:00.26 3 2 142 2504K 0B 1896K 12784 1 sleeping *0[1] 0.00000 0.00000 0 5246 233 5069 1800 17552 11527 9588 2 451 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12782 UserEventAgent 0.0 00:00.20 3 1 94 2548K 0B 1780K 12782 1 sleeping 0[0] 0.00000 0.00000 0 4637 195 1725 1148 4717 12596 5758 27 20 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12781 imklaunchagent 0.0 00:00.22 2 1 71 2544K 0B 2184K 12781 1 sleeping *0[1] 0.00000 0.00000 0 3498 258 2199 918 11182 8273 4314 66 249 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12777 loginwindow 0.0 00:00.28 2 1 229 4632K 0B 3860K 12777 210 sleeping *0[1] 0.00000 0.00000 0 5832 291 5370 1578 6386 12085 4625 92 303 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12775 mdworker_shared 0.0 00:00.33 4 1 64 21M 0B 13M 12775 1 sleeping *0[1] 0.00000 0.00000 501 18845 195 1834 582 4835 2406 1613 1790 44 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 12766 followupd 0.0 00:00.04 2 1 44 1252K 0B 1240K 12766 1 sleeping 0[0] 0.00000 0.00000 505 2849 163 198 50 776 391 462 52 8 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12758 Opera Helper 0.3 00:20.06 14 1 115 30M 0B 25M 12682 12682 sleeping *0[4] 0.00000 0.00000 505 25179 1766 181797+ 45664+ 464146+ 745581+ 278595+ 1596 12934+ 0.5 4371916 13067998 Alias N/A N/A N/A N/A N/A N/A 12747 Opera Helper 0.0 00:05.22 14 1 121 54M 0B 53M 12682 12682 sleeping *0[6] 0.00000 0.00000 505 48124 1777 28914 8623 76355 78263 35180 1953 858 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12725 Opera Helper 0.0 00:07.61 14 1 134 46M 0B 40M 12682 12682 sleeping *0[7] 0.00000 0.00000 505 50200 1843 43501 8886 136886 181521 69565 3372 2792 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12718 Opera Helper 0.0 00:01.16 13 1 109 36M 0B 32M 12682 12682 sleeping *0[3] 0.00000 0.00000 505 28933 1765 5781 1949 22978 18300 8509 2375 508 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12712 Opera Helper 0.0 00:00.36 13 1 107 22M 0B 19M 12682 12682 sleeping *0[4] 0.00000 0.00000 505 19774 1754 2612 1151 6606 4592 4389 695 368 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12709 Opera Helper 0.0 00:00.19 13 1 103 15M 0B 14M 12682 12682 sleeping *0[4] 0.00000 0.00000 505 14208 1748 2164 963 3122 2845 3756 442 353 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12707 Opera Helper 0.0 00:01.25 14 1 108 17M 0B 16M 12682 12682 sleeping *0[5] 0.00000 0.00000 505 15516 1748 2294 978 4012 4034 5070 2476 358 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12706 MTLCompilerServi 0.0 00:00.12 2 2 33 6736K 0B 6712K 12706 1 sleeping 0[9] 0.00000 0.00000 505 3574 174 229 59 820 445 139 73 6 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12704 MTLCompilerServi 0.0 00:00.15 2 2 24 6608K 0B 6596K 12704 1 sleeping 0[15] 0.00000 0.00000 505 4704 180 210 53 1412 368 159 386 2 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12689 VTDecoderXPCServ 0.0 00:00.07 2 1 57 2916K 0B 2744K 12689 1 sleeping 0[5] 0.00000 0.00000 505 2529 176 16816 6798 1023 10639 156 3 1 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12688 mdworker_shared 0.0 00:00.49 4 1 64 25M 0B 18M 12688 1 sleeping *0[1] 0.00000 0.00000 505 30654 195 1998 605 5013 2596 1691 2443 31 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12686 Opera Helper 0.3 00:20.95 9 1 189 100M 0B 56M 12682 12682 sleeping *0[1] 0.00000 0.00000 505 64068 1828 348356+ 152434+ 264880+ 621694+ 115178+ 1067 2340+ 0.4 6432868 10713890 Alias N/A N/A N/A N/A N/A N/A 12685 crashpad_handler 0.0 00:00.02 5 1 46 1224K 0B 860K 12684 1 sleeping *0[1] 0.00000 0.00000 505 3096 158 65 22 527 190 106 70 5 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12683 gamecontrollerd 0.0 00:00.23 3 2 44 1260K 0B 908K 12683 1 sleeping 0[7] 0.00000 0.00000 247 3212 159 1544 63 13611 5858 7732 6 792 0.0 0 0 _gamecontrollerd N/A N/A N/A N/A N/A N/A 12682 Opera 0.3 00:36.83 26 1 600 154M 0B 47M 12682 1 sleeping *0[144] 0.00000 0.00000 505 86879 2353 266826+ 73852+ 829593+ 2534996+ 388389+ 12947 29020+ 0.5 4057174 11622025 Alias N/A N/A N/A N/A N/A N/A 12665 bash 0.0 00:00.01 1 0 24 788K 0B 776K 12665 12664 sleeping *0[1] 0.00000 0.00000 505 883 289 90 31 958 184 60 11 0 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12664 login 0.0 00:00.03 2 1 34 1156K 0B 1144K 12664 12623 sleeping *0[9] 0.00000 0.00000 0 1774 195 140 30 3865 285 196 24 1 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12625 MTLCompilerServi 0.0 00:00.13 2 2 33 7480K 0B 7456K 12625 1 sleeping 0[9] 0.00000 0.00000 505 3729 174 228 59 821 446 179 73 5 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12624 MTLCompilerServi 0.0 00:00.20 2 2 25 8868K 0B 8856K 12624 1 sleeping 0[15] 0.00000 0.00000 505 5659 180 207 52 1465 367 173 536 3 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12623 Terminal 0.0 00:19.02 8 1 361 103M 0B 32M 12623 1 sleeping *0[130] 0.00000 0.00000 505 325307 1416 123477 23856 744894 265126 94890 1217 1634 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12575 MTLCompilerServi 0.0 00:00.34 2 2 33 11M 0B 11M 12575 1 sleeping 0[43] 0.00000 0.00000 505 5002 176 463 90 1544 671 380 116 3 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12574 MTLCompilerServi 0.0 00:00.04 2 2 29 2976K 0B 2964K 12574 1 sleeping 0[40] 0.00000 0.00000 505 2223 179 318 74 997 480 227 120 2 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12572 IMDPersistenceAg 0.0 00:00.09 2 1 65 2384K 0B 1776K 12572 1 sleeping 0[1] 0.00000 0.00000 501 5758 188 769 891 2977 1948 1540 16 8 0.0 0 0 verena N/A N/A N/A N/A N/A N/A 12571 com.apple.Dictio 0.0 00:00.06 2 2 34 1748K 0B 1716K 12571 1 sleeping 0[1] 0.00000 0.00000 505 2226 141 1289 198 2344 2331 1021 17 2 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12563 MTLCompilerServi 0.0 00:00.12 2 2 33 6900K 0B 6876K 12563 1 sleeping 0[8] 0.00000 0.00000 505 3942 174 220 57 798 432 139 72 3 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12562 MTLCompilerServi 0.0 00:00.19 2 2 24 11M 0B 11M 12562 1 sleeping 0[12] 0.00000 0.00000 505 6421 180 191 49 1238 347 167 500 5 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12560 TextEdit 0.0 00:06.21 4 1 306 93M 0B 23M 12560 1 sleeping *0[115] 0.00000 0.00000 505 58603 416 84486 15357 49144 171607 64039 1051 1506 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12551 MTLCompilerServi 0.0 00:00.11 2 2 33 6904K 0B 6880K 12551 1 sleeping 0[8] 0.00000 0.00000 505 3695 174 221 57 823 432 148 72 3 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12550 MTLCompilerServi 0.0 00:00.14 2 2 29 7064K 0B 7052K 12550 1 sleeping 0[13] 0.00000 0.00000 505 4769 181 205 51 1383 373 123 88 3 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12547 com.apple.appkit 0.0 00:05.28 4 1 295 105M 0B 34M 12547 1 sleeping *0[263] 0.00000 0.00000 505 37533 431 46169 11608 80269 80124 25629 162 708 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12392 swcd 0.0 00:00.14 2 1 56 3364K 0B 3012K 12392 1 sleeping 0[0] 0.00000 0.00000 505 5673 156 1690 979 5154 2920 3487 28 20 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12380 hdiejectd 0.0 00:00.02 2 1 33 1008K 0B 776K 12380 1 sleeping 0[0] 0.00000 0.00000 0 2043 146 406 169 508 496 201 13 0 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12363 diskimages-helpe 0.0 00:00.93 3 1 95 19M 0B 19M 12363 1 sleeping *0[1] 0.00000 0.00000 505 9298 144 55382 27396 2512 29064 13814 37 1 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12355 MTLCompilerServi 0.0 00:00.09 2 2 33 6876K 0B 6852K 12355 1 sleeping 0[6] 0.00000 0.00000 505 3704 174 203 54 745 414 127 72 2 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12354 MTLCompilerServi 0.0 00:00.15 2 2 26 9880K 0B 9868K 12354 1 sleeping 0[9] 0.00000 0.00000 505 5700 180 162 43 937 316 133 520 3 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12353 diskmanagementd 0.0 00:00.02 3 1 42 1328K 0B 724K 12353 1 sleeping *0[1] 0.00000 0.00000 0 2682 205 570 180 755 1082 285 69 13 0.0 0 0 root N/A N/A N/A N/A N/A N/A 12352 com.apple.prefer 0.0 00:02.43 4 1 281 99M 0B 28M 12352 1 sleeping *0[495] 0.00000 0.00000 505 35318 680 27200 7332 53962 46426 17523 295 896 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12350 com.apple.iTunes 0.0 00:00.07 2 2 49 2160K 0B 1636K 12350 1 sleeping 0[2] 0.00000 0.00000 505 4884 181 657 875 2558 1737 1329 23 10 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12349 com.apple.prefer 0.0 00:00.86 4 1 241 85M 0B 12M 12349 1 sleeping *738[3] 0.00000 0.00000 505 16373 752 11956 3944 29518 24202 9146 374 516 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12344 MTLCompilerServi 0.0 00:00.03 2 2 33 3784K 0B 3760K 12344 1 sleeping 0[1] 0.00000 0.00000 505 2815 174 165 47 630 365 118 87 3 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A 12343 MTLCompilerServi 0.0 00:00.04 2 2 26 3240K 0B 3228K 12343 1 sleeping 0[2] 0.00000 0.00000 505 3153 178 123 36 692 272 62 101 2 0.0 0 0 Alias N/A N/A N/A N/A N/A N/A Code:
ATTFilter Last login: Fri Feb 15 03:34:08 on ttys001 chuch:~ verenarohrmoser2$ ps -ax PID TTY TIME CMD 1 ?? 4:26.58 /sbin/launchd 67 ?? 0:05.28 /usr/sbin/syslogd 68 ?? 0:05.26 /usr/libexec/UserEventAgent (System) 70 ?? 22:47.85 /Library/Application Support/Malwarebytes/MBAM/Engine. 71 ?? 0:03.68 /System/Library/PrivateFrameworks/Uninstall.framework/ 73 ?? 0:07.73 /usr/libexec/kextd 74 ?? 1:05.55 /System/Library/Frameworks/CoreServices.framework/Vers 76 ?? 0:02.01 /System/Library/PrivateFrameworks/MediaRemote.framewor 79 ?? 0:01.74 /System/Library/CoreServices/appleeventsd --server 80 ?? 0:11.16 /usr/sbin/systemstats --daemon 82 ?? 0:08.52 /usr/libexec/configd 83 ?? 1:00.39 /System/Library/CoreServices/powerd.bundle/powerd 86 ?? 1:32.12 /usr/libexec/logd 92 ?? 0:04.78 /usr/libexec/warmd 93 ?? 2:02.78 /System/Library/Frameworks/CoreServices.framework/Fram 95 ?? 0:35.61 /usr/libexec/diskarbitrationd 98 ?? 16:56.88 /System/Library/CoreServices/backupd.bundle/Contents/R 99 ?? 0:07.14 /usr/libexec/coreduetd 102 ?? 1:28.17 /usr/libexec/opendirectoryd 103 ?? 0:08.24 /System/Library/PrivateFrameworks/ApplePushService.fra 104 ?? 0:00.84 /System/Library/PrivateFrameworks/Noticeboard.framewor 105 ?? 0:36.52 /System/Library/CoreServices/launchservicesd 106 ?? 0:00.87 /usr/libexec/timed 107 ?? 1:16.97 /usr/sbin/securityd -i 108 ?? 0:00.24 /System/Library/PrivateFrameworks/MobileDevice.framewo 110 ?? 0:41.59 /usr/libexec/locationd 112 ?? 0:00.03 autofsd 113 ?? 0:00.06 /usr/libexec/displaypolicyd -k 1 114 ?? 1:13.02 /usr/libexec/dasd 117 ?? 0:09.75 /System/Library/CoreServices/loginwindow.app/Contents/ 118 ?? 0:00.16 /System/Library/CoreServices/logind 119 ?? 0:00.99 /System/Library/PrivateFrameworks/GenerationalStorage. 120 ?? 0:00.02 /usr/sbin/KernelEventAgent 122 ?? 0:34.02 /usr/sbin/bluetoothd 124 ?? 3:48.30 /usr/libexec/hidd 125 ?? 0:06.25 /usr/libexec/sandboxd 126 ?? 0:01.08 /usr/libexec/corebrightnessd --launchd 127 ?? 0:24.36 /usr/libexec/AirPlayXPCHelper 129 ?? 0:49.83 /usr/sbin/notifyd 130 ?? 0:01.04 /usr/sbin/distnoted daemon 131 ?? 0:14.46 /usr/sbin/cfprefsd daemon 133 ?? 0:07.12 /System/Library/CoreServices/coreservicesd 134 ?? 0:03.97 /System/Library/Frameworks/Security.framework/Versions 136 ?? 0:10.47 /usr/libexec/syspolicyd 189 ?? 1:23.70 /usr/libexec/airportd 195 ?? 0:00.02 /System/Library/Frameworks/PCSC.framework/Versions/A/X 208 ?? 0:34.78 /System/Library/PrivateFrameworks/CoreDuetContext.fram 209 ?? 0:30.95 /usr/libexec/trustd 210 ?? 95:04.63 /System/Library/PrivateFrameworks/SkyLight.framework/R 211 ?? 0:04.83 /usr/libexec/lsd runAsRoot 212 ?? 63:59.36 /usr/sbin/coreaudiod 214 ?? 0:02.33 /usr/libexec/nehelper 228 ?? 0:04.32 /System/Library/PrivateFrameworks/WirelessDiagnostics. 231 ?? 0:26.19 /usr/libexec/symptomsd 232 ?? 0:07.97 /usr/libexec/mobileassetd 233 ?? 0:05.02 /usr/libexec/nsurlsessiond --privileged 236 ?? 0:16.08 /usr/sbin/mDNSResponder 237 ?? 0:05.59 /usr/sbin/mDNSResponderHelper 241 ?? 0:00.92 /usr/sbin/cupsd -l 243 ?? 0:00.03 /usr/libexec/apfsd 244 ?? 0:00.03 /usr/libexec/dpd 246 ?? 0:08.33 /usr/libexec/ApplicationFirewall/socketfilterfw 249 ?? 0:00.10 /System/Library/Frameworks/CoreMediaIO.framework/Resou 250 ?? 0:15.91 /Library/Application Support/Malwarebytes/MBAM/Engine. 252 ?? 0:00.96 /usr/libexec/watchdogd 254 ?? 0:00.01 /usr/libexec/thermald 267 ?? 1:47.25 /System/Library/Frameworks/CoreServices.framework/Fram 268 ?? 0:14.05 /System/Library/PrivateFrameworks/TCC.framework/Resour 270 ?? 0:03.53 /System/Library/PrivateFrameworks/CoreADI.framework/ad 276 ?? 0:00.29 /System/Library/Frameworks/OpenGL.framework/Versions/A 286 ?? 13:35.87 /usr/libexec/sysmond 287 ?? 0:01.67 /System/Library/Frameworks/Security.framework/Versions 288 ?? 0:00.38 /usr/sbin/systemstats --logger-helper /private/var/db/ 292 ?? 0:00.85 /System/Library/CoreServices/sharedfilelistd 294 ?? 0:00.13 /usr/sbin/distnoted agent 302 ?? 0:02.42 /System/Library/PrivateFrameworks/PerformanceAnalysis. 309 ?? 0:00.21 /usr/libexec/securityd_service 310 ?? 0:07.37 /usr/sbin/cfprefsd agent 311 ?? 0:12.11 /usr/libexec/UserEventAgent (Aqua) 313 ?? 0:02.68 /usr/sbin/distnoted agent 314 ?? 0:05.40 /usr/sbin/universalaccessd launchd -s 315 ?? 0:07.34 /System/Library/Frameworks/CoreTelephony.framework/Sup 316 ?? 0:38.84 /usr/libexec/trustd --agent 317 ?? 0:01.84 /usr/libexec/lsd 318 ?? 0:08.45 /usr/libexec/secd 319 ?? 0:01.97 /Applications/System Preferences.app/Contents/MacOS/Sy 320 ?? 0:00.97 /System/Library/CoreServices/sharedfilelistd 321 ?? 0:00.82 /System/Library/CoreServices/backgroundtaskmanagementa 322 ?? 0:07.21 /System/Library/PrivateFrameworks/CloudKitDaemon.frame 324 ?? 0:12.67 /System/Library/PrivateFrameworks/TelephonyUtilities.f 325 ?? 0:37.02 /System/Library/PrivateFrameworks/TCC.framework/Resour 326 ?? 0:04.95 /usr/libexec/nsurlsessiond 328 ?? 0:02.22 /System/Library/PrivateFrameworks/IDS.framework/identi 329 ?? 0:02.36 /System/Library/PrivateFrameworks/IMCore.framework/ima 330 ?? 0:30.90 /System/Library/Frameworks/Accounts.framework/Versions 334 ?? 50:44.88 /Applications/iTunes.app/Contents/MacOS/iTunes -psn_0_ 335 ?? 0:12.98 /Applications/App Store.app/Contents/MacOS/App Store - 336 ?? 0:17.05 /Applications/Photos.app/Contents/MacOS/Photos -psn_0_ 337 ?? 9:13.86 /Applications/Google Chrome.app/Contents/MacOS/Google 340 ?? 0:18.09 /usr/sbin/wirelessproxd 341 ?? 0:00.24 /usr/libexec/rapportd 342 ?? 0:03.81 /System/Library/PrivateFrameworks/AuthKit.framework/Ve 343 ?? 0:04.54 /usr/libexec/routined LAUNCHED_BY_LAUNCHD 345 ?? 0:10.53 /System/Library/CoreServices/Dock.app/Contents/MacOS/D 346 ?? 0:15.56 /System/Library/CoreServices/SystemUIServer.app/Conten 347 ?? 0:25.95 /System/Library/CoreServices/Finder.app/Contents/MacOS 348 ?? 0:01.17 /usr/sbin/spindump 350 ?? 0:00.25 /usr/libexec/pboard 351 ?? 0:00.04 /System/Library/CoreServices/CrashReporterSupportHelpe 352 ?? 0:02.84 /usr/sbin/usernoted 354 ?? 0:43.22 /System/Library/CoreServices/SubmitDiagInfo server-ini 356 ?? 0:00.72 /System/Library/Frameworks/ApplicationServices.framewo 357 ?? 0:02.97 /System/Library/PrivateFrameworks/CloudDocsDaemon.fram 359 ?? 0:03.19 /System/Library/PrivateFrameworks/ViewBridge.framework 363 ?? 0:35.37 /System/Library/PrivateFrameworks/CalendarAgent.framew 364 ?? 0:04.09 /System/Library/CoreServices/WiFiAgent.app/Contents/Ma 367 ?? 0:04.12 /System/Library/PrivateFrameworks/AssistantServices.fr 370 ?? 0:07.96 /usr/libexec/pkd 378 ?? 0:12.69 /System/Library/CoreServices/NotificationCenter.app/Co 379 ?? 0:12.70 /usr/libexec/sharingd 381 ?? 0:02.89 /System/Library/PrivateFrameworks/UserActivity.framewo 382 ?? 0:01.70 /System/Library/PrivateFrameworks/HomeKitDaemon.framew 383 ?? 0:00.17 /System/Library/PrivateFrameworks/MediaRemote.framewor 384 ?? 0:00.06 /System/Library/PrivateFrameworks/FamilyCircle.framewo 389 ?? 0:03.34 /System/Library/CoreServices/CoreLocationAgent.app/Con 390 ?? 0:00.11 /System/Library/PrivateFrameworks/CommerceKit.framewor 391 ?? 0:05.92 /System/Library/PrivateFrameworks/CalendarNotification 396 ?? 0:01.94 /System/Library/PrivateFrameworks/IMFoundation.framewo 397 ?? 0:04.62 /System/Library/CoreServices/Spotlight.app/Contents/Ma 398 ?? 0:02.08 /System/Library/CoreServices/Dock.app/Contents/XPCServ 400 ?? 0:01.09 /usr/sbin/filecoordinationd 401 ?? 0:01.73 /System/Library/Frameworks/InputMethodKit.framework/Re 402 ?? 0:03.10 /System/Library/PrivateFrameworks/CommerceKit.framewor 404 ?? 0:01.64 /usr/libexec/nsurlstoraged 407 ?? 0:00.17 /usr/libexec/assertiond 409 ?? 0:02.28 /System/Library/PrivateFrameworks/CoreWLANKit.framewor 410 ?? 0:01.54 /System/Library/Input Methods/PressAndHold.app/Content 417 ?? 0:00.29 /System/Library/PrivateFrameworks/CoreFP.framework/Ver 420 ?? 0:00.08 /Applications/Google Chrome.app/Contents/Versions/72.0 424 ?? 9:58.27 /System/Library/PrivateFrameworks/PhotoLibraryPrivate. 427 ?? 0:04.13 /System/Library/CoreServices/CoreServicesUIAgent.app/C 433 ?? 0:04.17 /System/Library/Frameworks/ApplicationServices.framewo 445 ?? 7:45.02 /Applications/Google Chrome.app/Contents/Versions/72.0 446 ?? 0:18.62 /Applications/Google Chrome.app/Contents/Versions/72.0 447 ?? 0:00.27 /System/Library/PrivateFrameworks/CloudPhotoServices.f 451 ?? 0:00.17 /System/Library/PrivateFrameworks/ProtectedCloudStorag 453 ?? 8:03.91 /System/Library/PreferencePanes/Sound.prefPane/Content 462 ?? 0:00.03 /System/Library/Frameworks/CoreServices.framework/Fram 464 ?? 0:01.40 /Applications/Google Chrome.app/Contents/Versions/72.0 465 ?? 0:10.34 /System/Library/CoreServices/LocationMenu.app/Contents 467 ?? 0:12.32 /Applications/Google Chrome.app/Contents/Versions/72.0 469 ?? 0:30.91 /Applications/Google Chrome.app/Contents/Versions/72.0 470 ?? 0:27.66 /Applications/Google Chrome.app/Contents/Versions/72.0 473 ?? 0:00.19 /System/Library/PrivateFrameworks/BookKit.framework/Ve 477 ?? 0:00.87 /System/Library/PrivateFrameworks/CommerceKit.framewor 479 ?? 2:02.56 /System/Library/PrivateFrameworks/PhotoAnalysis.framew 480 ?? 0:25.01 /System/Library/CoreServices/cloudphotosd.app/Contents 481 ?? 0:01.97 /System/Library/Frameworks/MediaLibrary.framework/Vers 482 ?? 0:00.74 /System/Library/PrivateFrameworks/FileProvider.framewo 485 ?? 0:00.26 /System/Library/Image Capture/Support/icdd 488 ?? 0:01.29 /System/Library/PrivateFrameworks/PhotoLibraryPrivate. 496 ?? 0:03.68 /Applications/Google Chrome.app/Contents/Versions/72.0 503 ?? 0:00.10 /usr/sbin/distnoted agent 504 ?? 0:02.07 /Applications/Google Chrome.app/Contents/Versions/72.0 505 ?? 0:00.65 /Applications/Google Chrome.app/Contents/Versions/72.0 508 ?? 0:04.62 /System/Library/PrivateFrameworks/CommerceKit.framewor 512 ?? 0:00.04 /System/Library/PrivateFrameworks/CoreSpeech.framework 515 ?? 0:00.05 /System/Library/CoreServices/SocialPushAgent.app/Conte 520 ?? 0:02.80 /Library/Printers/Brother/Utilities/Server/LOGINserver 521 ?? 0:36.84 /Library/Application Support/Malwarebytes/MBAM/Engine. 523 ?? 0:01.91 /System/Library/CoreServices/AirPlayUIAgent.app/Conten 525 ?? 0:02.67 /System/Library/CoreServices/cloudpaird 526 ?? 0:03.03 /System/Library/PrivateFrameworks/Noticeboard.framewor 527 ?? 0:00.68 /System/Library/CoreServices/diagnostics_agent 528 ?? 0:01.96 com.GoPro.goproapp-devicedetection 532 ?? 0:00.05 /usr/libexec/taskgated 533 ?? 1:52.63 /Applications/Dropbox.app/Contents/MacOS/Dropbox 534 ?? 0:02.56 /Users/verena/Desktop/Evernote.app/Contents/Library/Lo 537 ?? 0:01.82 /System/Library/CoreServices/Menu Extras/TextInput.men 543 ?? 0:00.10 /Applications/Dropbox.app/Contents/MacOS/Dropbox -type 544 ?? 2:29.96 /Applications/Canon Utilities/IJ Network Scanner Selec 545 ?? 0:00.04 /Applications/Dropbox.app/Contents/MacOS/Dropbox -type 553 ?? 0:01.54 /Applications/Dropbox.app/Contents/Frameworks/Tungsten 554 ?? 0:07.96 /Applications/Dropbox.app/Contents/Frameworks/Tungsten 574 ?? 0:00.08 /System/Library/PrivateFrameworks/CommerceKit.framewor 579 ?? 0:02.91 /Library/DropboxHelperTools/Dropbox_u501/dbfseventsd 580 ?? 0:12.94 /Library/DropboxHelperTools/Dropbox_u501/dbfseventsd 581 ?? 0:14.29 /Library/DropboxHelperTools/Dropbox_u501/dbfseventsd 583 ?? 0:02.36 /Applications/Dropbox.app/Contents/PlugIns/garcon.appe 606 ?? 0:01.95 /System/Library/PrivateFrameworks/CommerceKit.framewor 630 ?? 0:00.83 /usr/libexec/trustd --agent 635 ?? 0:03.57 /System/Library/PrivateFrameworks/Tourist.framework/Ve 636 ?? 0:03.36 /System/Library/PrivateFrameworks/CoreSuggestions.fram 726 ?? 0:00.05 /System/Library/PrivateFrameworks/CommerceKit.framewor 739 ?? 0:00.15 /System/Library/PrivateFrameworks/IMDPersistence.frame 740 ?? 0:00.26 /System/Library/Frameworks/CoreServices.framework/Fram 779 ?? 0:00.06 /System/Library/Frameworks/CoreServices.framework/Fram 805 ?? 0:00.11 /usr/sbin/distnoted agent 821 ?? 0:21.63 /usr/sbin/cfprefsd agent 822 ?? 0:06.35 /usr/sbin/distnoted agent 823 ?? 0:02.69 /usr/libexec/lsd 838 ?? 0:57.86 /usr/libexec/trustd --agent 864 ?? 0:00.06 /System/Library/PrivateFrameworks/CommerceKit.framewor 865 ?? 0:02.08 /System/Library/PrivateFrameworks/CommerceKit.framewor 867 ?? 0:00.06 /System/Library/PrivateFrameworks/CommerceKit.framewor 868 ?? 0:01.48 /System/Library/PrivateFrameworks/CommerceKit.framewor 909 ?? 0:10.03 /usr/libexec/secinitd 931 ?? 0:24.03 /usr/libexec/secd 937 ?? 0:12.64 /usr/libexec/pkd 1094 ?? 0:04.88 /System/Library/PrivateFrameworks/WeatherFoundation.fr 1120 ?? 0:00.06 /usr/libexec/webinspectord 1133 ?? 47:31.61 /usr/libexec/diagnosticd 1257 ?? 0:01.30 /System/Library/Frameworks/MediaLibrary.framework/Vers 2491 ?? 0:00.03 /System/Library/PrivateFrameworks/KerberosHelper/Helpe 2601 ?? 0:00.09 /Applications/Books.app/Contents/PlugIns/DiskSpaceEffi 2649 ?? 0:00.06 /System/Library/PrivateFrameworks/CoreCDP.framework/Ve 2991 ?? 0:00.03 /usr/libexec/mobileactivationd 2993 ?? 0:03.01 /System/Library/PrivateFrameworks/AssistantServices.fr 3021 ?? 0:01.86 /System/Library/CoreServices/Siri.app/Contents/MacOS/S 3031 ?? 0:00.02 /usr/libexec/keybagd -t 15 3032 ?? 0:01.45 /System/Library/CoreServices/Keychain Circle Notificat 3034 ?? 0:00.17 /usr/libexec/dmd 3035 ?? 0:01.32 /System/Library/CoreServices/Siri.app/Contents/XPCServ 3040 ?? 0:00.57 /usr/sbin/WirelessRadioManagerd 3043 ?? 0:00.10 /System/Library/CoreServices/iconservicesd 3052 ?? 0:00.85 /System/Library/PrivateFrameworks/IMDPersistence.frame 3061 ?? 0:04.92 /System/Library/PrivateFrameworks/GeoServices.framewor 3086 ?? 0:00.08 /usr/sbin/cfprefsd agent 3089 ?? 0:02.76 /usr/libexec/amfid 3095 ?? 0:01.82 /System/Library/CoreServices/iconservicesagent runAsRo 3097 ?? 0:00.16 /System/Library/PrivateFrameworks/AccountPolicy.framew 3179 ?? 0:00.27 /usr/libexec/nsurlstoraged --privileged 3182 ?? 0:00.16 /usr/libexec/findmydeviced 3200 ?? 0:00.03 /System/Library/Frameworks/CryptoTokenKit.framework/ct 3312 ?? 0:00.05 /usr/libexec/smd 3325 ?? 0:00.28 /usr/sbin/systemsoundserverd 3369 ?? 0:00.02 /usr/libexec/colorsyncd 3606 ?? 0:00.05 /System/Library/Frameworks/CryptoTokenKit.framework/ct 3627 ?? 0:00.07 /System/Library/Frameworks/Security.framework/Versions 3628 ?? 0:00.05 /System/Library/PrivateFrameworks/CoreFollowUp.framewo 3722 ?? 0:01.36 /System/Library/PrivateFrameworks/CoreAnalytics.framew 4049 ?? 0:00.53 /System/Library/PrivateFrameworks/IMFoundation.framewo 4050 ?? 0:00.18 /usr/sbin/netbiosd 4560 ?? 0:00.02 /usr/libexec/spindump_agent 4861 ?? 0:02.34 /System/Library/PrivateFrameworks/AppStoreDaemon.frame 5368 ?? 0:08.60 /System/Library/CoreServices/Software Update.app/Conte 5369 ?? 0:00.05 /System/Library/CoreServices/Software Update.app/Conte 5391 ?? 0:00.05 /System/Library/CoreServices/Software Update.app/Conte 8280 ?? 0:06.27 /System/Library/CoreServices/loginwindow.app/Contents/ 8295 ?? 0:00.27 /usr/libexec/secinitd 8304 ?? 0:00.05 /System/Library/Frameworks/LocalAuthentication.framewo 8311 ?? 0:00.02 /System/Library/Frameworks/GSS.framework/Helpers/GSSCr 8313 ?? 0:00.03 /usr/libexec/colorsync.displayservices 8314 ?? 0:03.21 /usr/libexec/UserEventAgent (Aqua) 8317 ?? 0:02.15 /System/Library/Frameworks/CoreTelephony.framework/Sup 8321 ?? 0:09.61 /Applications/Contacts.app/Contents/MacOS/Contacts -ps 8322 ?? 0:00.53 /System/Library/CoreServices/sharedfilelistd 8323 ?? 0:00.23 /System/Library/CoreServices/backgroundtaskmanagementa 8324 ?? 2:01.07 /Applications/Safari.app/Contents/MacOS/Safari -psn_0_ 8326 ?? 0:00.00 /Applications/Utilities/Bluetooth File Exchange.app/Co 8327 ?? 0:00.14 /usr/libexec/rapportd 8328 ?? 0:02.41 /usr/libexec/routined LAUNCHED_BY_LAUNCHD 8329 ?? 0:00.64 /usr/sbin/usernoted 8330 ?? 0:00.23 /usr/libexec/networkserviceproxy 8331 ?? 0:04.85 /usr/libexec/nsurlsessiond 8333 ?? 0:04.52 /System/Library/PrivateFrameworks/CalendarAgent.framew 8334 ?? 0:00.90 /System/Library/CoreServices/WiFiAgent.app/Contents/Ma 8336 ?? 0:00.73 /System/Library/CoreServices/mapspushd 8338 ?? 1:42.87 /System/Library/PrivateFrameworks/CloudDocsDaemon.fram 8340 ?? 0:03.69 /System/Library/PrivateFrameworks/AssistantServices.fr 8341 ?? 0:00.29 /usr/libexec/pboard 8342 ?? 139:42.27 /Applications/Utilities/Console.app/Contents/MacOS/Con 8344 ?? 0:01.23 /System/Library/PrivateFrameworks/ViewBridge.framework 8346 ?? 0:01.04 /Applications/OverSight.app/Contents/MacOS/OverSight - 8347 ?? 0:08.14 /Library/Application Support/Malwarebytes/MBAM/Engine. 8348 ?? 0:00.51 /System/Library/Frameworks/InputMethodKit.framework/Re 8350 ?? 0:01.37 /System/Library/PrivateFrameworks/IDS.framework/identi 8351 ?? 0:00.74 /System/Library/Input Methods/PressAndHold.app/Content 8352 ?? 1:12.66 /Applications/Utilities/Activity Monitor.app/Contents/ 8366 ?? 0:02.42 /System/Library/CoreServices/NotificationCenter.app/Co 8367 ?? 0:12.60 /System/Library/Frameworks/Accounts.framework/Versions 8368 ?? 0:05.95 /Applications/TextEdit.app/Contents/MacOS/TextEdit -ps 8379 ?? 0:09.66 /System/Library/CoreServices/Dock.app/Contents/MacOS/D 8380 ?? 0:38.33 /System/Library/CoreServices/SystemUIServer.app/Conten 8381 ?? 1:13.60 /System/Library/CoreServices/Finder.app/Contents/MacOS 8386 ?? 0:01.55 /System/Library/Frameworks/ApplicationServices.framewo 8392 ?? 0:00.82 /System/Library/PrivateFrameworks/TCC.framework/Resour 8407 ?? 0:00.24 /System/Library/CoreServices/pbs 8410 ?? 0:00.89 /System/Library/PrivateFrameworks/CalendarNotification 8414 ?? 0:00.53 /System/Library/PrivateFrameworks/ContactsDonation.fra 8431 ?? 0:00.02 SafeEjectGPUAgent 8432 ?? 0:00.02 SafeEjectGPUAgent 8433 ?? 0:05.63 /System/Library/CoreServices/Spotlight.app/Contents/Ma 8434 ?? 0:00.03 /System/Library/CoreServices/Menu Extras/SafeEjectGPUE 8435 ?? 0:00.03 /System/Library/CoreServices/Menu Extras/SafeEjectGPUE 8439 ?? 0:03.68 /usr/libexec/nsurlstoraged 8441 ?? 0:00.42 /usr/libexec/webinspectord 8443 ?? 0:01.03 /System/Library/PrivateFrameworks/TelephonyUtilities.f 8451 ?? 0:01.07 /System/Library/PrivateFrameworks/AuthKit.framework/Ve 8452 ?? 0:01.79 /System/Library/PrivateFrameworks/CoreParsec.framework 8453 ?? 0:08.08 /System/Library/PrivateFrameworks/CloudKitDaemon.frame 8455 ?? 0:00.04 /usr/libexec/findmydevice-user-agent 8456 ?? 0:00.06 /usr/libexec/findmydevice-user-agent 8457 ?? 0:03.98 /System/Library/PrivateFrameworks/CommerceKit.framewor 8458 ?? 0:00.53 /System/Library/PrivateFrameworks/IMCore.framework/ima 8462 ?? 0:00.51 /System/Library/PrivateFrameworks/IMFoundation.framewo 8463 ?? 0:00.75 /Applications/Dropbox.app/Contents/PlugIns/garcon.appe 8465 ?? 0:01.68 /System/Library/PrivateFrameworks/UserActivity.framewo 8467 ?? 0:00.07 /System/Library/PrivateFrameworks/MediaRemote.framewor 8470 ?? 0:03.92 /usr/libexec/sharingd 8471 ?? 0:02.95 /System/Library/PrivateFrameworks/HomeKitDaemon.framew 8472 ?? 0:00.05 /System/Library/PrivateFrameworks/FamilyCircle.framewo 8480 ?? 0:06.20 /System/Library/CoreServices/LocationMenu.app/Contents 8483 ?? 0:00.03 /System/Library/PrivateFrameworks/CoreSpeech.framework 8486 ?? 0:00.03 /System/Library/CoreServices/SocialPushAgent.app/Conte 8490 ?? 0:02.48 /System/Library/CoreServices/Siri.app/Contents/MacOS/S 8491 ?? 0:00.26 /System/Library/Image Capture/Support/icdd 8492 ?? 0:01.06 /Library/Printers/Brother/Utilities/Server/LOGINserver 8493 ?? 0:13.10 /Library/Application Support/Malwarebytes/MBAM/Engine. 8495 ?? 0:00.64 /System/Library/CoreServices/AirPlayUIAgent.app/Conten 8496 ?? 0:00.78 /usr/libexec/knowledge-agent 8497 ?? 0:00.66 /System/Library/CoreServices/cloudpaird 8498 ?? 0:00.64 /System/Library/PrivateFrameworks/Noticeboard.framewor 8499 ?? 0:00.53 /System/Library/CoreServices/diagnostics_agent 8500 ?? 0:00.68 /usr/libexec/adprivacyd 8503 ?? 0:00.32 /usr/libexec/DataDetectorsSourceAccess 8509 ?? 0:00.35 /System/Library/PrivateFrameworks/CoreWLANKit.framewor 8513 ?? 0:00.04 /System/Library/CoreServices/Software Update.app/Conte 8518 ?? 0:00.05 /System/Library/PrivateFrameworks/CommerceKit.framewor 8519 ?? 0:00.27 /System/Library/PrivateFrameworks/CommerceKit.framewor 8521 ?? 0:00.68 /System/Library/CoreServices/Dock.app/Contents/XPCServ 8523 ?? 0:33.12 /System/Library/Services/AppleSpell.service/Contents/M 8526 ?? 0:01.89 /System/Library/CoreServices/cloudphotosd.app/Contents 8531 ?? 1:31.19 /System/Library/Frameworks/WebKit.framework/Versions/A 8535 ?? 0:00.09 /usr/libexec/keyboardservicesd 8537 ?? 0:00.04 /System/Library/PrivateFrameworks/CoreFollowUp.framewo 8539 ?? 0:01.11 /System/Library/PrivateFrameworks/CommerceKit.framewor 8551 ?? 0:00.05 /System/Library/PrivateFrameworks/BookKit.framework/Ve 8554 ?? 0:05.81 /System/Library/PrivateFrameworks/CoreSuggestions.fram 8555 ?? 0:00.17 /System/Library/PrivateFrameworks/AssetCacheServices.f 8559 ?? 0:02.53 /Applications/OverSight.app/Contents/Library/LoginItem 8560 ?? 0:00.43 /Applications/Safari.app/Contents/XPCServices/com.appl 8561 ?? 0:03.38 /Applications/OverSight.app/Contents/Library/LoginItem 8562 ?? 0:00.26 /System/Library/CoreServices/ScopedBookmarkAgent 8569 ?? 0:00.20 /System/Library/Frameworks/CoreServices.framework/Fram 8579 ?? 0:01.36 /System/Library/CoreServices/Siri.app/Contents/XPCServ 8588 ?? 0:00.65 /System/Library/PrivateFrameworks/CommerceKit.framewor 8597 ?? 0:00.17 /System/Library/PrivateFrameworks/FileProvider.framewo 8598 ?? 0:00.63 /System/Library/PrivateFrameworks/PassKitCore.framewor 8609 ?? 0:02.08 /System/Library/Frameworks/CoreServices.framework/Fram 8628 ?? 0:00.18 /System/Library/Frameworks/ApplicationServices.framewo 8631 ?? 0:00.08 /System/Library/PrivateFrameworks/CommerceKit.framewor 8632 ?? 0:00.69 /System/Library/PrivateFrameworks/DesktopServicesPriv. 8650 ?? 0:21.26 /System/Library/PrivateFrameworks/PhotoLibraryPrivate. 8656 ?? 0:01.63 /System/Library/PrivateFrameworks/PhotoAnalysis.framew 8677 ?? 0:00.35 /System/Library/PrivateFrameworks/PhotoLibraryPrivate. 8702 ?? 0:00.08 /System/Library/PrivateFrameworks/CloudDocs.framework/ 8709 ?? 11:00.96 /System/Library/Frameworks/WebKit.framework/Versions/A 8710 ?? 0:04.53 /System/Library/PrivateFrameworks/SafariSafeBrowsing.f 8711 ?? 0:00.69 /System/Library/Frameworks/WebKit.framework/Versions/A 8717 ?? 0:00.29 /usr/libexec/knowledge-agent 8719 ?? 0:00.09 /usr/libexec/assertiond 8742 ?? 0:07.40 /System/Library/PrivateFrameworks/AssistantServices.fr 8927 ?? 0:00.07 /System/Library/Frameworks/Security.framework/Versions 8984 ?? 0:00.04 /System/Library/PrivateFrameworks/CoreCDP.framework/Ve 8987 ?? 0:00.02 /usr/libexec/mobileactivationd 8988 ?? 0:00.05 /System/Library/CoreServices/EscrowSecurityAlert.app/C 8992 ?? 0:00.60 /System/Library/PrivateFrameworks/CloudServices.framew 8998 ?? 0:00.09 /System/Library/PrivateFrameworks/IMDPersistence.frame 9003 ?? 0:00.06 /usr/libexec/siriknowledged 9143 ?? 7:50.12 /System/Library/Frameworks/WebKit.framework/Versions/A 9219 ?? 0:00.67 /System/Library/CoreServices/OSDUIHelper.app/Contents/ 9458 ?? 0:03.02 /System/Library/Frameworks/AppKit.framework/Versions/C 9479 ?? 0:02.05 /Applications/Preview.app/Contents/MacOS/Preview -psn_ 9505 ?? 1:25.64 /System/Library/Frameworks/WebKit.framework/Versions/A 9555 ?? 0:00.45 /System/Library/Frameworks/MediaLibrary.framework/Vers 9736 ?? 0:44.65 /System/Library/Frameworks/WebKit.framework/Versions/A 9851 ?? 0:02.29 /System/Library/CoreServices/loginwindow.app/Contents/ 9855 ?? 0:00.57 /usr/sbin/universalaccessd launchd -s 9897 ?? 0:00.15 /System/Library/PrivateFrameworks/AuthKit.framework/Ve 9907 ?? 0:00.46 /usr/libexec/adprivacyd 9908 ?? 0:01.52 /usr/sbin/cfprefsd agent 9909 ?? 0:01.31 /usr/libexec/UserEventAgent (Aqua) 9911 ?? 0:00.61 /usr/sbin/distnoted agent 9912 ?? 0:00.65 /usr/sbin/universalaccessd launchd -s 9913 ?? 0:00.91 /System/Library/Frameworks/CoreTelephony.framework/Sup 9914 ?? 0:01.03 /usr/libexec/lsd 9915 ?? 0:05.53 /usr/libexec/trustd --agent 9916 ?? 0:00.00 /Applications/Utilities/Bluetooth File Exchange.app/Co 9917 ?? 0:00.39 /System/Library/CoreServices/sharedfilelistd 9921 ?? 0:01.19 /Applications/Utilities/Audio MIDI Setup.app/Contents/ 9923 ?? 0:00.00 /Applications/Utilities/Console.app/Contents/MacOS/Con 9924 ?? 0:00.09 /System/Library/CoreServices/backgroundtaskmanagementa 9925 ?? 0:02.88 /Applications/iTunes.app/Contents/MacOS/iTunes -psn_0_ 9926 ?? 0:00.57 /System/Library/CoreServices/talagent 9927 ?? 0:05.46 /System/Library/CoreServices/Dock.app/Contents/MacOS/D 9928 ?? 0:00.24 /usr/libexec/secd 9930 ?? 0:01.97 /System/Library/CoreServices/SystemUIServer.app/Conten 9931 ?? 1:07.25 /System/Library/CoreServices/Finder.app/Contents/MacOS 9934 ?? 0:00.62 /System/Library/PrivateFrameworks/CloudKitDaemon.frame 9935 ?? 0:00.26 /usr/libexec/pboard 9936 ?? 0:00.53 /usr/libexec/secinitd 9937 ?? 0:00.32 /System/Library/PrivateFrameworks/TelephonyUtilities.f 9938 ?? 0:00.03 /System/Library/Frameworks/Security.framework/Versions 9940 ?? 0:00.38 /System/Library/Frameworks/Accounts.framework/Versions 9941 ?? 0:00.45 /System/Library/PrivateFrameworks/IDS.framework/identi 9942 ?? 0:00.06 /System/Library/PrivateFrameworks/ProtectedCloudStorag 9943 ?? 0:00.05 /System/Library/CoreServices/EscrowSecurityAlert.app/C 9945 ?? 0:00.29 /System/Library/CoreServices/Keychain Circle Notificat 9947 ?? 0:00.09 /System/Library/PrivateFrameworks/CloudDocsDaemon.fram 9949 ?? 0:00.05 /System/Library/Frameworks/LocalAuthentication.framewo 9952 ?? 0:00.45 /System/Library/PrivateFrameworks/TCC.framework/Resour 9953 ?? 0:00.22 /System/Library/PrivateFrameworks/AuthKit.framework/Ve 9954 ?? 0:00.42 /usr/libexec/nsurlsessiond 9956 ?? 0:00.30 /System/Library/PrivateFrameworks/IMCore.framework/ima 9957 ?? 0:00.15 /System/Library/PrivateFrameworks/SafariShared.framewo 9959 ?? 0:02.35 /System/Library/CoreServices/CoreServicesUIAgent.app/C 9960 ?? 0:03.07 /usr/libexec/pkd 9964 ?? 0:01.12 /System/Library/Frameworks/ApplicationServices.framewo 9966 ?? 0:00.09 /usr/libexec/rapportd 9970 ?? 0:00.56 /usr/libexec/routined LAUNCHED_BY_LAUNCHD 9971 ?? 0:00.42 /usr/sbin/usernoted 9972 ?? 0:00.08 /usr/libexec/networkserviceproxy 9973 ?? 0:00.52 /System/Library/PrivateFrameworks/CalendarAgent.framew 9974 ?? 0:00.02 /System/Library/CoreServices/APFSUserAgent 9975 ?? 0:00.86 /usr/libexec/nsurlstoraged 9976 ?? 0:01.36 /System/Library/CoreServices/SafariSupport.bundle/Cont 9977 ?? 0:02.17 /System/Library/PrivateFrameworks/CoreSuggestions.fram 9978 ?? 0:00.13 /System/Library/CoreServices/mapspushd 9980 ?? 0:00.12 /System/Library/PrivateFrameworks/IMDPersistence.frame 9981 ?? 0:00.29 /System/Library/CoreServices/WiFiAgent.app/Contents/Ma 9982 ?? 0:02.45 /System/Library/CoreServices/LocationMenu.app/Contents 9983 ?? 0:00.09 /usr/libexec/webinspectord 9985 ?? 0:03.43 /System/Library/CoreServices/iconservicesagent 9986 ?? 0:00.11 /System/Library/CoreServices/pbs 9987 ?? 0:01.47 /System/Library/PrivateFrameworks/CoreParsec.framework 9990 ?? 0:01.90 /System/Library/CoreServices/NotificationCenter.app/Co 9992 ?? 0:00.10 /System/Library/Frameworks/AddressBook.framework/Execu 9994 ?? 0:00.41 /System/Library/PrivateFrameworks/CommerceKit.framewor 9995 ?? 0:02.18 /System/Library/PrivateFrameworks/GeoServices.framewor 9996 ?? 0:00.03 /usr/libexec/findmydevice-user-agent 10001 ?? 0:00.13 /System/Library/PrivateFrameworks/IMFoundation.framewo 10002 ?? 0:00.22 /System/Library/PrivateFrameworks/MessagesKit.framewor 10003 ?? 0:01.05 /usr/libexec/sharingd 10004 ?? 0:00.47 /System/Library/PrivateFrameworks/UserActivity.framewo 10005 ?? 0:00.06 /System/Library/PrivateFrameworks/FamilyCircle.framewo 10006 ?? 0:00.28 /System/Library/PrivateFrameworks/CalendarNotification 10009 ?? 0:00.06 /usr/libexec/videosubscriptionsd 10010 ?? 0:00.07 /System/Library/PrivateFrameworks/CacheDelete.framewor 10013 ?? 0:00.05 /System/Library/PrivateFrameworks/MediaRemote.framewor 10014 ?? 0:00.11 /usr/libexec/fmfd 10017 ?? 0:00.03 /System/Library/PrivateFrameworks/CoreSpeech.framework 10020 ?? 0:00.04 /System/Library/CoreServices/SocialPushAgent.app/Conte 10023 ?? 0:00.07 /usr/libexec/dmd 10024 ?? 0:00.30 /System/Library/Frameworks/InputMethodKit.framework/Re 10025 ?? 0:00.52 /System/Library/CoreServices/Siri.app/Contents/MacOS/S 10026 ?? 0:00.24 /System/Library/Image Capture/Support/icdd 10027 ?? 0:00.54 /Library/Printers/Brother/Utilities/Server/LOGINserver 10028 ?? 0:03.48 /Library/Application Support/Malwarebytes/MBAM/Engine. 10030 ?? 0:00.33 /System/Library/CoreServices/AirPlayUIAgent.app/Conten 10031 ?? 0:00.13 /usr/libexec/knowledge-agent 10032 ?? 0:00.25 /System/Library/CoreServices/cloudpaird 10033 ?? 0:00.31 /System/Library/PrivateFrameworks/Noticeboard.framewor 10034 ?? 0:00.27 /System/Library/CoreServices/diagnostics_agent 10035 ?? 0:00.33 /usr/libexec/adprivacyd 10037 ?? 0:00.02 /System/Library/PrivateFrameworks/IMFoundation.framewo 10038 ?? 0:00.03 /System/Library/Frameworks/CryptoTokenKit.framework/ct 10039 ?? 0:00.31 /System/Library/PrivateFrameworks/CloudServices.framew 10040 ?? 0:00.03 /System/Library/Frameworks/CryptoTokenKit.framework/ct 10041 ?? 0:00.21 /System/Library/Frameworks/AudioToolbox.framework/Audi 10043 ?? 0:00.46 /System/Library/CoreServices/CoreLocationAgent.app/Con 10044 ?? 0:00.33 /System/Library/PrivateFrameworks/ViewBridge.framework 10045 ?? 0:00.03 /System/Library/CoreServices/Software Update.app/Conte 10049 ?? 0:03.98 /System/Library/CoreServices/Spotlight.app/Contents/Ma 10053 ?? 0:00.07 /System/Library/PrivateFrameworks/CommerceKit.framewor 10054 ?? 0:00.13 /System/Library/PrivateFrameworks/PrintingPrivate.fram 10060 ?? 0:00.14 /System/Library/PrivateFrameworks/CoreWLANKit.framewor 10061 ?? 0:00.35 /System/Library/CoreServices/Dock.app/Contents/XPCServ 10069 ?? 0:00.05 /System/Library/PrivateFrameworks/CommerceKit.framewor 10071 ?? 0:00.03 /System/Library/CoreServices/NotificationCenter.app/Co 10072 ?? 0:00.13 /System/Library/PrivateFrameworks/IMFoundation.framewo 10073 ?? 0:00.03 /System/Library/PrivateFrameworks/CallHistory.framewor 10074 ?? 0:01.85 /System/Library/PrivateFrameworks/AssistantServices.fr 10079 ?? 0:05.91 /System/Library/Services/AppleSpell.service/Contents/M 10080 ?? 0:00.36 /System/Library/PrivateFrameworks/FileProvider.framewo 10081 ?? 0:00.05 /System/Library/PrivateFrameworks/BookKit.framework/Ve 10083 ?? 0:00.22 /usr/libexec/keyboardservicesd 10089 ?? 0:00.39 /System/Library/CoreServices/Siri.app/Contents/XPCServ 10090 ?? 0:00.07 /System/Library/PrivateFrameworks/AssistantServices.fr 10092 ?? 0:00.58 /System/Library/CoreServices/cloudphotosd.app/Contents 10093 ?? 0:00.07 /usr/libexec/dmd 10096 ?? 0:00.12 /System/Library/CoreServices/ScopedBookmarkAgent 10097 ?? 0:00.73 /System/Library/PrivateFrameworks/CommerceKit.framewor 10098 ?? 0:00.30 /System/Library/CoreServices/CoreServicesUIAgent.app/C 10100 ?? 0:00.26 /Applications/iTunes.app/Contents/XPCServices/Visualiz 10102 ?? 0:00.11 /System/Library/Frameworks/iTunesLibrary.framework/Ver 10103 ?? 0:00.06 /usr/libexec/dmd 10108 ?? 0:00.02 /System/Library/Frameworks/AudioToolbox.framework/XPCS 10109 ?? 0:00.08 /usr/libexec/AssetCache/AssetCache 10119 ?? 0:00.31 /System/Library/PrivateFrameworks/CommerceKit.framewor 10122 ?? 0:00.11 /System/Library/PrivateFrameworks/CloudPhotoServices.f 10126 ?? 0:07.19 /System/Library/PrivateFrameworks/MessagesKit.framewor 10132 ?? 0:00.12 /usr/libexec/secinitd 10151 ?? 0:00.02 /usr/libexec/mobileactivationd 10156 ?? 0:00.25 /System/Library/Frameworks/AddressBook.framework/Execu 10162 ?? 0:00.31 /System/Library/PrivateFrameworks/SafariShared.framewo 10163 ?? 0:00.14 /usr/libexec/networkserviceproxy 10165 ?? 0:00.76 /System/Library/PrivateFrameworks/MessagesKit.framewor 10166 ?? 0:00.11 /System/Library/PrivateFrameworks/IMFoundation.framewo 10167 ?? 0:00.12 /System/Library/Frameworks/AddressBook.framework/Execu 10170 ?? 0:00.12 /System/Library/PrivateFrameworks/IMFoundation.framewo 10174 ?? 0:01.59 /System/Library/CoreServices/iconservicesagent 10175 ?? 0:05.45 /System/Library/CoreServices/iconservicesagent 10176 ?? 0:00.02 /System/Library/CoreServices/pbs 10912 ?? 0:00.04 /System/Library/CoreServices/EscrowSecurityAlert.app/C 12140 ?? 0:03.78 /System/Library/PrivateFrameworks/AssistantServices.fr 12141 ?? 0:00.16 /System/Library/Frameworks/CoreServices.framework/Fram 12142 ?? 0:00.20 /System/Library/PrivateFrameworks/PhotoLibraryPrivate. 12145 ?? 0:00.02 /System/Library/Frameworks/ApplicationServices.framewo 12146 ?? 0:00.02 /System/Library/Frameworks/ApplicationServices.framewo 12147 ?? 0:00.02 /System/Library/Frameworks/ApplicationServices.framewo 12148 ?? 0:00.02 /System/Library/PrivateFrameworks/KerberosHelper/Helpe 12149 ?? 0:00.02 /System/Library/PrivateFrameworks/KerberosHelper/Helpe 12154 ?? 0:00.23 /System/Library/PrivateFrameworks/PhotoLibraryPrivate. 12155 ?? 0:00.17 /System/Library/PrivateFrameworks/PhotoAnalysis.framew 12159 ?? 0:00.18 /System/Library/Frameworks/iTunesLibrary.framework/Ver 12161 ?? 0:00.05 /usr/libexec/siriknowledged 12162 ?? 0:00.05 /System/Library/PrivateFrameworks/FMClient.framework/V 12171 ?? 0:00.46 /System/Library/Frameworks/CoreServices.framework/Fram 12176 ?? 0:00.15 /System/Library/Frameworks/ApplicationServices.framewo 12192 ?? 0:00.63 /System/Library/PrivateFrameworks/AppStoreDaemon.frame 12193 ?? 0:00.05 /System/Library/PrivateFrameworks/CommerceKit.framewor 12203 ?? 0:00.19 /System/Library/Frameworks/iTunesLibrary.framework/Ver 12220 ?? 0:00.22 /System/Library/Frameworks/Metal.framework/Versions/A/ 12221 ?? 0:00.09 /System/Library/Frameworks/Metal.framework/Versions/A/ 12222 ?? 0:00.02 /System/Library/Frameworks/CoreServices.framework/Fram 12231 ?? 0:00.15 /System/Library/Frameworks/Metal.framework/Versions/A/ 12232 ?? 0:00.04 /System/Library/Frameworks/Metal.framework/Versions/A/ 12241 ?? 0:00.08 /System/Library/Frameworks/ApplicationServices.framewo 12249 ?? 0:00.16 /System/Library/PrivateFrameworks/SafariSafeBrowsing.f 12251 ?? 0:00.17 /usr/libexec/dprivacyd 12252 ?? 0:00.42 /System/Library/Frameworks/CoreServices.framework/Fram 12259 ?? 0:00.10 /System/Library/PrivateFrameworks/ContextKit.framework 12286 ?? 0:00.86 /System/Library/Frameworks/VideoToolbox.framework/Vers 12315 ?? 0:01.26 /System/Library/PrivateFrameworks/XprotectFramework.fr 12316 ?? 0:00.10 /System/Library/Frameworks/Metal.framework/Versions/A/ 12317 ?? 0:00.06 /System/Library/Frameworks/Metal.framework/Versions/A/ 12321 ?? 0:04.98 /Applications/System Preferences.app/Contents/MacOS/Sy 12328 ?? 0:00.03 /System/Library/Frameworks/PreferencePanes.framework/V 12329 ?? 0:02.74 /System/Library/PreferencePanes/SharingPref.prefPane/C 12330 ?? 0:00.03 /System/Library/PrivateFrameworks/AssetCacheServicesEx 12331 ?? 0:00.03 /System/Library/PrivateFrameworks/AssetCacheServicesEx 12332 ?? 0:00.04 /System/Library/Frameworks/Metal.framework/Versions/A/ 12333 ?? 0:00.03 /System/Library/Frameworks/Metal.framework/Versions/A/ 12335 ?? 0:00.03 /System/Library/Frameworks/ApplicationServices.framewo 12339 ?? 0:01.73 /System/Library/PreferencePanes/Appearance.prefPane/Co 12343 ?? 0:00.05 /System/Library/Frameworks/Metal.framework/Versions/A/ 12344 ?? 0:00.04 /System/Library/Frameworks/Metal.framework/Versions/A/ 12349 ?? 0:00.87 /System/Library/PreferencePanes/iCloudPref.prefPane/Co 12350 ?? 0:00.08 /System/Library/Frameworks/iTunesLibrary.framework/Ver 12352 ?? 0:02.45 /System/Library/PreferencePanes/Security.prefPane/Cont 12353 ?? 0:00.03 /usr/libexec/diskmanagementd 12354 ?? 0:00.15 /System/Library/Frameworks/Metal.framework/Versions/A/ 12355 ?? 0:00.09 /System/Library/Frameworks/Metal.framework/Versions/A/ 12363 ?? 0:00.93 /System/Library/PrivateFrameworks/DiskImages.framework 12380 ?? 0:00.02 /System/Library/PrivateFrameworks/DiskImages.framework 12392 ?? 0:00.15 /usr/libexec/swcd 12547 ?? 0:05.33 /System/Library/Frameworks/AppKit.framework/Versions/C 12550 ?? 0:00.14 /System/Library/Frameworks/Metal.framework/Versions/A/ 12551 ?? 0:00.11 /System/Library/Frameworks/Metal.framework/Versions/A/ 12560 ?? 0:06.23 /Applications/TextEdit.app/Contents/MacOS/TextEdit -ps 12562 ?? 0:00.19 /System/Library/Frameworks/Metal.framework/Versions/A/ 12563 ?? 0:00.12 /System/Library/Frameworks/Metal.framework/Versions/A/ 12571 ?? 0:00.07 /System/Library/Frameworks/CoreServices.framework/Vers 12572 ?? 0:00.10 /System/Library/PrivateFrameworks/IMDPersistence.frame 12574 ?? 0:00.05 /System/Library/Frameworks/Metal.framework/Versions/A/ 12575 ?? 0:00.34 /System/Library/Frameworks/Metal.framework/Versions/A/ 12623 ?? 0:19.04 /Applications/Utilities/Terminal.app/Contents/MacOS/Te 12624 ?? 0:00.20 /System/Library/Frameworks/Metal.framework/Versions/A/ 12625 ?? 0:00.13 /System/Library/Frameworks/Metal.framework/Versions/A/ 12682 ?? 0:39.36 /Applications/Opera.app/Contents/MacOS/Opera 12683 ?? 0:00.26 /usr/libexec/gamecontrollerd 12685 ?? 0:00.03 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12686 ?? 0:23.06 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12689 ?? 0:00.08 /System/Library/Frameworks/VideoToolbox.framework/Vers 12704 ?? 0:00.16 /System/Library/Frameworks/Metal.framework/Versions/A/ 12706 ?? 0:00.13 /System/Library/Frameworks/Metal.framework/Versions/A/ 12707 ?? 0:01.26 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12709 ?? 0:00.20 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12712 ?? 0:00.37 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12718 ?? 0:01.16 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12725 ?? 0:07.62 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12747 ?? 0:05.23 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12758 ?? 0:22.73 /Applications/Opera.app/Contents/Versions/58.0.3135.47 12766 ?? 0:00.04 /System/Library/PrivateFrameworks/CoreFollowUp.framewo 12775 ?? 0:00.36 /System/Library/Frameworks/CoreServices.framework/Fram 12777 ?? 0:00.31 /System/Library/CoreServices/loginwindow.app/Contents/ 12781 ?? 0:00.23 /System/Library/Frameworks/InputMethodKit.framework/Re 12782 ?? 0:00.22 /usr/libexec/UserEventAgent (LoginWindow) 12784 ?? 0:00.29 /usr/sbin/universalaccessd launchd -s 12785 ?? 0:00.19 /System/Library/PrivateFrameworks/Noticeboard.framewor 12786 ?? 0:00.18 /System/Library/CoreServices/WiFiAgent.app/Contents/Ma 12787 ?? 0:00.30 /usr/libexec/pkd 12792 ?? 0:00.11 /System/Library/PrivateFrameworks/ViewBridge.framework 12798 ?? 0:00.03 /System/Library/Frameworks/CryptoTokenKit.framework/ct 12800 ?? 0:00.02 /System/Library/Frameworks/CryptoTokenKit.framework/ct 12804 ?? 0:00.04 /System/Library/Frameworks/LocalAuthentication.framewo 12806 ?? 0:00.05 /System/Library/PrivateFrameworks/AmbientDisplay.frame 12810 ?? 0:00.03 /System/Library/Frameworks/CryptoTokenKit.framework/ct 12811 ?? 0:00.13 /System/Library/PrivateFrameworks/PrintingPrivate.fram 12812 ?? 0:00.02 /System/Library/Frameworks/CryptoTokenKit.framework/ct 12814 ?? 0:00.20 /Library/Printers/Brother/Utilities/Server/USBserver.a 12818 ?? 0:00.38 /Library/Printers/Brother/Utilities/Server/NETserver.a 12822 ?? 0:01.35 /System/Library/Frameworks/ApplicationServices.framewo 12823 ?? 0:00.28 /System/Library/Frameworks/WebKit.framework/Versions/A 12827 ?? 0:00.09 /System/Library/Frameworks/Metal.framework/Versions/A/ 12828 ?? 0:00.04 /System/Library/Frameworks/Metal.framework/Versions/A/ 12830 ?? 0:00.05 /System/Library/PrivateFrameworks/SafariShared.framewo 12831 ?? 0:00.02 /System/Library/Frameworks/MediaAccessibility.framewor 12836 ?? 0:00.07 /System/Library/Frameworks/iTunesLibrary.framework/Ver 12837 ?? 0:00.06 /usr/libexec/siriknowledged 12838 ?? 0:00.04 /System/Library/PrivateFrameworks/AssetCacheServices.f 12840 ?? 0:00.05 /System/Library/PrivateFrameworks/FMClient.framework/V 12841 ?? 0:00.08 /System/Library/PrivateFrameworks/ContextKit.framework 12845 ?? 0:00.06 /System/Library/Frameworks/CoreServices.framework/Fram 12863 ?? 0:29.34 /Applications/Utilities/Terminal.app/Contents/MacOS/Te 12864 ?? 0:00.06 /System/Library/Frameworks/CoreServices.framework/Vers 12919 ?? 0:00.06 /System/Library/Frameworks/Metal.framework/Versions/A/ 12920 ?? 0:00.06 /System/Library/Frameworks/Metal.framework/Versions/A/ 12990 ?? 0:00.33 /System/Library/PrivateFrameworks/CommerceKit.framewor 12991 ?? 0:00.07 /System/Library/PrivateFrameworks/CacheDelete.framewor 13006 ?? 0:00.06 /System/Library/Frameworks/CoreServices.framework/Fram 13008 ?? 0:00.49 /System/Library/PrivateFrameworks/AppStoreDaemon.frame 13009 ?? 0:00.15 /System/Library/PrivateFrameworks/GeoServices.framewor 13043 ?? 0:00.09 /System/Library/Frameworks/CoreServices.framework/Fram 13047 ?? 0:00.21 /System/Library/Frameworks/CoreServices.framework/Fram 13068 ?? 0:04.26 /Applications/System Preferences.app/Contents/MacOS/Sy 13070 ?? 0:00.23 /System/Library/Frameworks/CoreServices.framework/Fram 13071 ?? 0:00.23 /System/Library/Frameworks/CoreServices.framework/Fram 13083 ?? 0:00.18 /System/Library/PrivateFrameworks/AOSKit.framework/Ver 13097 ?? 0:00.06 /System/Library/Frameworks/CoreServices.framework/Fram 13122 ?? 0:00.06 /System/Library/Frameworks/CoreServices.framework/Fram 13134 ?? 0:00.20 /System/Library/PrivateFrameworks/AOSKit.framework/Ver 12664 ttys000 0:00.03 login -pf Alias 12665 ttys000 0:00.01 -bash 13157 ttys001 0:00.06 login -pf verenarohrmoser2 13158 ttys001 0:00.01 -bash 13165 ttys001 0:00.00 ps -ax chuch:~ verenarohrmoser2$ Geändert von AzubiMacPro (15.02.2019 um 04:48 Uhr) |
17.02.2019, 09:20 | #2 |
/// Mac Expert | Spyware, Remote durch die IT vom Ex oder TrojanerMein Name ist Dante12 und ich versuche dir bei deinem Problem zu helfen so gut ich kann. Bitte arbeite so lange mit, bis ich dir mein Ok gebe. Beachte folgende Punkte damit die Arbeit nicht unnötig erschwert wird.
------------ Als erstes entferne bitte BitMedic und führe die unten angegebenen Anleitungen aus. EtreCheck installieren
Prüfen mit DetectX Swift
DetextX-Swift History
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
Themen zu Spyware, Remote durch die IT vom Ex oder Trojaner |
avg, cpu, dateien, dringend, drucker, einstellungen, euro, file, gelöscht, google, helper, mac, namen, opera, ordner, passwort, port, problem, programme, prozesse, schließen, server, spyware, trojaner, wlan |