Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Mac OSX & Linux (https://www.trojaner-board.de/alles-rund-um-mac-osx-linux/)
-   -   Vermutlich Maleware oder Trojaner auf Macbook (https://www.trojaner-board.de/162025-vermutlich-maleware-trojaner-macbook.html)

Nasivin 20.12.2014 17:54
Vermutlich Maleware oder Trojaner auf Macbook
 
Hallo Moderatoren,

seit einigen Wochen ist mein Macbook Pro Mid 2012 etwas langsam geworden, trotz SSD und 8 GB RAM.
Als Browser verwendete ich Chrome und da sind immer wieder von alleine Fenster aufgepoppt mit myBet Seiten. Ich hab den Chrome dann komplett gelöscht und bin auf Firefox umgestiegen inkl. Addon Adblock Plus und Ghostery. Diese Seiten ploppen jetzt nicht mehr auf, aber die Arbeitsgeschwindigkeit ist nach wie vor niedrig.

Könnt ihr mir bitte helfen?

Dante12 21.12.2014 06:27
Hallo Nasivin,

Bitte laden Dir EtreCheck herunter: hxxp://www.etresoft.com/download/EtreCheck.zip

Entpacke es und verschiebe die app in den Programm-Ordner.

Starte EtreCheck und füge den Inhalt des Logs bitte in "Code-Tags" hier ein.

Gruß,
-dante

Nasivin 21.12.2014 09:31
Code:
EtreCheck version: 2.1.5 (108)
Report generated 21. Dezember 2014 09:29:29 MEZ

Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.

Hardware Information: ℹ️
        MacBook Pro (13-inch, Mid 2012) (Verified)
        MacBook Pro - model: MacBookPro9,2
        1 2.5 GHz Intel Core i5 CPU: 2-core
        8 GB RAM Upgradeable
                BANK 0/DIMM0
                        4 GB DDR3 1600 MHz ok
                BANK 1/DIMM0
                        4 GB DDR3 1600 MHz ok
        Bluetooth: Good - Handoff/Airdrop2 supported
        Wireless:  en1: 802.11 a/b/g/n

Video Information: ℹ️
        Intel HD Graphics 4000
                Color LCD 1280 x 800

System Software: ℹ️
        OS X 10.10.1 (14B25) - Uptime: one day 16:29:33

Disk Information: ℹ️
        Samsung SSD 840 PRO Series disk0 : (512,11 GB)
                EFI (disk0s1) <not mounted> : 210 MB
                Macintosh HD (disk0s2) / : 435.25 GB (99.30 GB free)
                Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
                BOOTCAMP (disk0s4) /Volumes/BOOTCAMP : 76.00 GB (46.10 GB free)

        WDC WD10JPVT-00MS8T0 disk1 : (1 TB)
                EFI (disk1s1) <not mounted> : 210 MB
                Daten (disk1s2) /Volumes/Daten : 999.86 GB (798.80 GB free)

USB Information: ℹ️
        Apple Inc. FaceTime HD Camera (Built-in)
        Apple Inc. BRCM20702 Hub
                Apple Inc. Bluetooth USB Host Controller
        Apple Inc. Apple Internal Keyboard / Trackpad
        Apple Computer, Inc. IR Receiver

Thunderbolt Information: ℹ️
        Apple Inc. thunderbolt_bus

Gatekeeper: ℹ️
        Mac App Store and identified developers

Kernel Extensions: ℹ️
                /Library/Application Support/Avast/components/fileshield/unsigned
        [loaded]        com.avast.AvastFileShield (2.1.0 - SDK 10.9) [Support]

                /Library/Application Support/Avast/components/proxy/unsigned
        [loaded]        com.avast.PacketForwarder (2.0 - SDK 10.9) [Support]

                /System/Library/Extensions
        [not loaded]        com.FTDI.driver.FTDIUSBSerialDriver (2.2.18 - SDK 10.6) [Support]
        [not loaded]        com.Huawei.driver.HuaweiDataCardDriver (4.0.8) [Support]
        [loaded]        com.Logitech.Control Center.HID Driver (3.3.0) [Support]
        [not loaded]        com.Logitech.Unifying.HID Driver (1.2.0) [Support]
        [not loaded]        com.devguru.driver.SamsungComposite (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.mice.driver.Wireless360Controller (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.WirelessGamingReceiver (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.Xbox360Controller (1.0.0d10) [Support]
        [loaded]        com.usboverdrive.driver.hid (3.0.1) [Support]

                /System/Library/Extensions/USBOverdrive.kext/Contents/PlugIns
        [not loaded]        com.usboverdrive.driver.hid.safe (3.0.1) [Support]

                /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns
        [not loaded]        com.devguru.driver.SamsungACMControl (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungACMData (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungMTP (1.2.61 - SDK 10.5) [Support]
        [not loaded]        com.devguru.driver.SamsungSerial (1.2.61 - SDK 10.6) [Support]

Startup Items: ℹ️
        360ControlDaemon: Path: /Library/StartupItems/360ControlDaemon
        ChmodBPF: Path: /Library/StartupItems/ChmodBPF
        Startup items are obsolete in OS X Yosemite

Launch Agents: ℹ️
        [not loaded]        com.adobe.AAM.Updater-1.0.plist [Support]
        [failed]        com.adobe.CS4ServiceManager.plist [Support]
        [loaded]        com.avast.userinit.plist [Support]
        [loaded]        com.google.keystone.agent.plist [Support]
        [running]        com.Logitech.Control Center.Daemon.plist [Support]
        [not loaded]        com.teamviewer.teamviewer.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_desktop.plist [Support]
        [loaded]        org.macosforge.xquartz.startx.plist [Support]

Launch Daemons: ℹ️
        [loaded]        com.adobe.fpsaud.plist [Support]
        [loaded]        com.avast.init.plist [Support]
        [loaded]        com.avast.uninstall.plist [Support]
        [failed]        com.avast.update.plist [Support]
        [loaded]        com.google.keystone.daemon.plist [Support]
        [loaded]        com.microsoft.office.licensing.helper.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_service.plist [Support]
        [loaded]        org.macosforge.xquartz.privileged_startx.plist [Support]

User Launch Agents: ℹ️
        [loaded]        com.adobe.ARM.[...].plist [Support]
        [running]        com.amazon.music.plist [Support]
        [invalid?]        com.avast.home.userinit.plist [Support]
        [loaded]        com.divx.agent.postinstall.plist [Support]
        [failed]        com.facebook.videochat.[redacted].plist [Support]
        [invalid?]        com.google.GoogleContactSyncAgent.plist [Support]
        [invalid?]        com.nero.HSMMonitor.plist [Support]
        [loaded]        com.valvesoftware.steamclean.plist [Support]

User Login Items: ℹ️
        iTunesHelper        UNKNOWNHidden (missing value)
        HTCLaunch        UNKNOWN (missing value)
        Android File Transfer Agent        Programm (/Users/[redacted]/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
        Dropbox 2        UNKNOWN (missing value)
        Dropbox        Programm (/Applications/Dropbox.app)
        Google Drive        UNKNOWN (missing value)
        fuspredownloader        ProgrammHidden (/Users/[redacted]/Library/Application Support/.FUS/fuspredownloader.app)

Internet Plug-ins: ℹ️
        OVSHelper: Version: 1.1 [Support]
        Default Browser: Version: 600 - SDK 10.10
        Google Earth Web Plug-in: Version: 6.1 [Support]
        Unity Web Player: Version: UnityPlayer version 3.4.2f3 - SDK 10.5 [Support]
        AdobePDFViewerNPAPI: Version: 10.1.13 [Support]
        FlashPlayer-10.6: Version: 15.0.0.246 - SDK 10.6 [Support]
        DivXBrowserPlugin: Version: 2.2 [Support]
        AmazonMP3DownloaderPlugin101749: Version: AmazonMP3DownloaderPlugin 1.0.17 - SDK 10.4 [Support]
        Flash Player: Version: 15.0.0.246 - SDK 10.6 Mismatch! Adobe recommends 16.0.0.235
        QuickTime Plugin: Version: 7.7.3
        iPhotoPhotocast: Version: 7.0 - SDK 10.8
        SharePointBrowserPlugin: Version: 14.4.6 - SDK 10.6 [Support]
        AdobePDFViewer: Version: 10.1.13 [Support]
        Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Support]
        JavaAppletPlugin: Version: 15.0.0 - SDK 10.10 Check version

Safari Extensions: ℹ️
        wrc [Installed]
        DivX Plus Web Player HTML5 <video> [Installed]

3rd Party Preference Panes: ℹ️
        DivX  [Support]
        Flash Player  [Support]
        FUSE for OS X (OSXFUSE)  [Support]
        Logitech Control Center  [Support]
        MacFUSE  [Support]
        NTFS-3G  [Support]
        Pref360Control  [Support]

Time Machine: ℹ️
        Skip System Files: NO
        Mobile backups: OFF
        Auto backup: NO - Auto backup turned off
        Volumes being backed up:
                Macintosh HD: Disk size: 435.25 GB Disk used: 335.96 GB
        Destinations:
                Time Machine [Network]
                Total size: 3.93 TB
                Total number of backups: 34
                Oldest backup: 2014-03-28 22:06:25 +0000
                Last backup: 2014-12-06 09:38:18 +0000
                Size of backup disk: Excellent
                        Backup size 3.93 TB > (Disk size 435.25 GB X 3)

Top Processes by CPU: ℹ️
            12%        mds
            4%        WindowServer
            3%        firefox
            1%        fontd
            0%        com.avast.daemon

Top Processes by Memory: ℹ️
        541 MB        firefox
        60 MB        Finder
        52 MB        mds_stores
        34 MB        mds
        34 MB        com.avast.daemon

Virtual Memory Information: ℹ️
        4.40 GB        Free RAM
        1.65 GB        Active RAM
        1.30 GB        Inactive RAM
        992 MB        Wired RAM
        8.65 GB        Page-ins
        0 B        Page-outs

Diagnostics Information: ℹ️
        Dec 20, 2014, 11:17:38 AM        /Library/Logs/DiagnosticReports/Microsoft Word_2014-12-20-111738_[redacted].hang
        Dec 19, 2014, 05:00:30 PM        Self test - passed

Dante12 21.12.2014 13:44
Hallo,

Mir ist nichts ungewöhnliches aufgefallen. Lediglich die Dateien des DivX-Players könnten die Ursache dafür sein. Die Software läuft sowohl im Hintergrund und es befinden sich entsprechende Plugs-Ins für die Browser.

Wenn Du das entfernen möchtest, dann sag mir bitte Bescheid.

Das Java-Browser-Plugin solltest Du aus Sicherheitsgründen deaktivieren. Dazu öffnest Du das Java-Controlcenter und unter den Reiter "Sicherheit" den Hacken bei "Java-Content im Browser aktivieren", herausnehmen.

Das Festplattendienstprogramm starten

a. Überprüfe deine Festplatte auf Fehler (wenn welche vorhanden, reparieren.)
b. Überprüfe die Rechte. (Ebenfalls reparieren)

Terminal öffnen

Folgendes Eingeben:
Code:
sudo periodic daily weekly monthly
Rechner neu Starten

Gruß,
-dante

Nasivin 21.12.2014 21:51
Den Divxplayer hab ich gelöscht, den Codec aber nicht. Alles andere habe ich wie angegeben befolgt.
Vor einiger Zeit hatte ich noch einen Virus auf der Platte, der von meinem Virenscanner Avast erkannt und in Quarantäne geschoben wurde. Kann durch diesen Virus vielleicht was kaputt gemacht worden sein?

Slafey 21.12.2014 22:58
Ohne entsprechenden Log, kann man da leider keine Antwort drauf geben ;)

Dante12 21.12.2014 23:27
Da noch Teile vom DivX im Log oben vorhanden sind wurde es nicht vollständig entfernt. Es muss ein Uninstaller vorhanden sein der das für dich erledigt. Bitte schaue mal entweder unter "Dienstprogramme" oder in den Systemeinstellungen nach den DivX-Uninstaller bzw. Setup.

1. Befolge bitte diese Anleitung: http://www.trojaner-board.de/158652-...dware-mac.html

2. Falls etwas gefunden wurde, kopiere das Log-File von AdwareMedic hierher. Bitte nur die Log-Zeilen des heutigen Datums auswählen. Dazu gehst du in das Menu auf "Scanner" und dort "Open Log File" auswählen.

3. Für den Fall das etwas gefunden wurde, bitte Neustart des Rechners.

4. Neues Log mit EtreCheck.

Nasivin 22.12.2014 09:02
Kann leider keine Logdatei auslesen bei dem Virenscanner. Vielleicht reicht dir auch das:

http://img5.fotos-hochladen.net/uplo...x374qgvsml.jpg

Dante12 22.12.2014 09:23
VSearch ist Adware Teile habe ich nicht gefunden, möglich das Avast das schon einiges am System kaputt gemacht hat.

Bitte führe die Schritte die aus ich dir weiter oben beschrieben habe.

Nasivin 22.12.2014 09:30
Code:
2014-12-12 18:27:44: ----- Scan Started -----
2014-12-12 18:27:44: Scanning with signatures version 39
2014-12-12 18:28:31: No adware found
2014-12-12 18:28:31: ----- Scan Ended -----
2014-12-21 21:52:13: ----- Scan Started -----
2014-12-21 21:52:13: Scanning with signatures version 41
2014-12-21 21:52:24: No adware found
2014-12-21 21:52:24: ----- Scan Ended -----
Code:
EtreCheck version: 2.1.5 (108)
Report generated 22. Dezember 2014 09:28:51 MEZ

Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.

Hardware Information: ℹ️
        MacBook Pro (13-inch, Mid 2012) (Verified)
        MacBook Pro - model: MacBookPro9,2
        1 2.5 GHz Intel Core i5 CPU: 2-core
        8 GB RAM Upgradeable
                BANK 0/DIMM0
                        4 GB DDR3 1600 MHz ok
                BANK 1/DIMM0
                        4 GB DDR3 1600 MHz ok
        Bluetooth: Good - Handoff/Airdrop2 supported
        Wireless:  en1: 802.11 a/b/g/n

Video Information: ℹ️
        Intel HD Graphics 4000
                Color LCD 1280 x 800

System Software: ℹ️
        OS X 10.10.1 (14B25) - Uptime: 11:43:42

Disk Information: ℹ️
        Samsung SSD 840 PRO Series disk0 : (512,11 GB)
                EFI (disk0s1) <not mounted> : 210 MB
                Macintosh HD (disk0s2) / : 435.25 GB (101.29 GB free)
                Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
                BOOTCAMP (disk0s4) /Volumes/BOOTCAMP : 76.00 GB (46.10 GB free)

        WDC WD10JPVT-00MS8T0 disk1 : (1 TB)
                EFI (disk1s1) <not mounted> : 210 MB
                Daten (disk1s2) /Volumes/Daten : 999.86 GB (798.79 GB free)

USB Information: ℹ️
        Apple Computer, Inc. IR Receiver
        Apple Inc. Apple Internal Keyboard / Trackpad
        Apple Inc. BRCM20702 Hub
                Apple Inc. Bluetooth USB Host Controller
        Apple Inc. FaceTime HD Camera (Built-in)

Thunderbolt Information: ℹ️
        Apple Inc. thunderbolt_bus

Gatekeeper: ℹ️
        Mac App Store and identified developers

Kernel Extensions: ℹ️
                /Library/Application Support/Avast/components/fileshield/unsigned
        [loaded]        com.avast.AvastFileShield (2.1.0 - SDK 10.9) [Support]

                /Library/Application Support/Avast/components/proxy/unsigned
        [loaded]        com.avast.PacketForwarder (2.0 - SDK 10.9) [Support]

                /System/Library/Extensions
        [not loaded]        com.FTDI.driver.FTDIUSBSerialDriver (2.2.18 - SDK 10.6) [Support]
        [not loaded]        com.Huawei.driver.HuaweiDataCardDriver (4.0.8) [Support]
        [not loaded]        com.Logitech.Control Center.HID Driver (3.3.0) [Support]
        [not loaded]        com.Logitech.Unifying.HID Driver (1.2.0) [Support]
        [not loaded]        com.devguru.driver.SamsungComposite (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.mice.driver.Wireless360Controller (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.WirelessGamingReceiver (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.Xbox360Controller (1.0.0d10) [Support]
        [loaded]        com.usboverdrive.driver.hid (3.0.1) [Support]

                /System/Library/Extensions/USBOverdrive.kext/Contents/PlugIns
        [not loaded]        com.usboverdrive.driver.hid.safe (3.0.1) [Support]

                /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns
        [not loaded]        com.devguru.driver.SamsungACMControl (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungACMData (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungMTP (1.2.61 - SDK 10.5) [Support]
        [not loaded]        com.devguru.driver.SamsungSerial (1.2.61 - SDK 10.6) [Support]

Startup Items: ℹ️
        360ControlDaemon: Path: /Library/StartupItems/360ControlDaemon
        ChmodBPF: Path: /Library/StartupItems/ChmodBPF
        Startup items are obsolete in OS X Yosemite

Launch Agents: ℹ️
        [not loaded]        com.adobe.AAM.Updater-1.0.plist [Support]
        [failed]        com.adobe.CS4ServiceManager.plist [Support]
        [loaded]        com.avast.userinit.plist [Support]
        [loaded]        com.google.keystone.agent.plist [Support]
        [running]        com.Logitech.Control Center.Daemon.plist [Support]
        [loaded]        com.oracle.java.Java-Updater.plist [Support]
        [not loaded]        com.teamviewer.teamviewer.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_desktop.plist [Support]
        [loaded]        org.macosforge.xquartz.startx.plist [Support]

Launch Daemons: ℹ️
        [loaded]        com.adobe.fpsaud.plist [Support]
        [loaded]        com.avast.init.plist [Support]
        [loaded]        com.avast.uninstall.plist [Support]
        [failed]        com.avast.update.plist [Support]
        [loaded]        com.google.keystone.daemon.plist [Support]
        [loaded]        com.microsoft.office.licensing.helper.plist [Support]
        [loaded]        com.oracle.java.Helper-Tool.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_service.plist [Support]
        [loaded]        org.macosforge.xquartz.privileged_startx.plist [Support]

User Launch Agents: ℹ️
        [loaded]        com.adobe.ARM.[...].plist [Support]
        [running]        com.amazon.music.plist [Support]
        [invalid?]        com.avast.home.userinit.plist [Support]
        [loaded]        com.divx.agent.postinstall.plist [Support]
        [failed]        com.facebook.videochat.[redacted].plist [Support]
        [invalid?]        com.google.GoogleContactSyncAgent.plist [Support]
        [invalid?]        com.nero.HSMMonitor.plist [Support]
        [loaded]        com.valvesoftware.steamclean.plist [Support]

User Login Items: ℹ️
        iTunesHelper        UNKNOWNHidden (missing value)
        HTCLaunch        UNKNOWN (missing value)
        Android File Transfer Agent        Programm (/Users/[redacted]/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
        Dropbox 2        UNKNOWN (missing value)
        Dropbox        Programm (/Applications/Dropbox.app)
        Google Drive        UNKNOWN (missing value)
        fuspredownloader        ProgrammHidden (/Users/[redacted]/Library/Application Support/.FUS/fuspredownloader.app)

Internet Plug-ins: ℹ️
        OVSHelper: Version: 1.1 [Support]
        Default Browser: Version: 600 - SDK 10.10
        Google Earth Web Plug-in: Version: 6.1 [Support]
        Unity Web Player: Version: UnityPlayer version 3.4.2f3 - SDK 10.5 [Support]
        AdobePDFViewerNPAPI: Version: 10.1.13 [Support]
        FlashPlayer-10.6: Version: 15.0.0.246 - SDK 10.6 [Support]
        DivXBrowserPlugin: Version: 2.2 [Support]
        AmazonMP3DownloaderPlugin101749: Version: Unknown
        Flash Player: Version: 15.0.0.246 - SDK 10.6 Mismatch! Adobe recommends 16.0.0.235
        QuickTime Plugin: Version: 7.7.3
        iPhotoPhotocast: Version: 7.0 - SDK 10.8
        SharePointBrowserPlugin: Version: 14.4.6 - SDK 10.6 [Support]
        AdobePDFViewer: Version: 10.1.13 [Support]
        Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Support]
        JavaAppletPlugin: Version: Java 8 Update 25 Check version

Safari Extensions: ℹ️
        wrc [Installed]
        DivX Plus Web Player HTML5 <video> [Installed]

3rd Party Preference Panes: ℹ️
        DivX  [Support]
        Flash Player  [Support]
        FUSE for OS X (OSXFUSE)  [Support]
        Java  [Support]
        Logitech Control Center  [Support]
        MacFUSE  [Support]
        NTFS-3G  [Support]
        Pref360Control  [Support]

Time Machine: ℹ️
        Skip System Files: NO
        Mobile backups: OFF
        Auto backup: NO - Auto backup turned off
        Volumes being backed up:
                Macintosh HD: Disk size: 435.25 GB Disk used: 333.96 GB
        Destinations:
                Time Machine [Network]
                Total size: 3.93 TB
                Total number of backups: 34
                Oldest backup: 2014-03-28 22:06:25 +0000
                Last backup: 2014-12-06 09:38:18 +0000
                Size of backup disk: Excellent
                        Backup size 3.93 TB > (Disk size 435.25 GB X 3)

Top Processes by CPU: ℹ️
            5%        WindowServer
            0%        fontd
            0%        com.avast.daemon
            0%        AppleSpell
            0%        hidd

Top Processes by Memory: ℹ️
        576 MB        firefox
        163 MB        Microsoft Word
        94 MB        Preview
        77 MB        Finder
        77 MB        WindowServer

Virtual Memory Information: ℹ️
        3.25 GB        Free RAM
        2.66 GB        Active RAM
        1.48 GB        Inactive RAM
        930 MB        Wired RAM
        4.64 GB        Page-ins
        0 B        Page-outs

Diagnostics Information: ℹ️
        Dec 21, 2014, 09:55:42 PM        /Users/[redacted]/Library/Logs/DiagnosticReports/plugin-container_2014-12-21-215542_[redacted].crash
        Dec 21, 2014, 09:45:43 PM        Self test - passed
        Dec 20, 2014, 11:17:38 AM        /Library/Logs/DiagnosticReports/Microsoft Word_2014-12-20-111738_[redacted].hang
Müsste was wiederhergestellt werden, habe wöchentlich Backups mit Timemachine erstellt.

Dante12 22.12.2014 09:32
Das ist gut, bitte neuen EtreCheck Log.

EDIT: Warst schneller ich brauch etwas muss noch jemandem anderem Helfen. Bitte habe etwas Geduld.

Nasivin 22.12.2014 09:34
Code:
EtreCheck version: 2.1.5 (108)
Report generated 22. Dezember 2014 09:32:52 MEZ

Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.

Hardware Information: ℹ️
        MacBook Pro (13-inch, Mid 2012) (Verified)
        MacBook Pro - model: MacBookPro9,2
        1 2.5 GHz Intel Core i5 CPU: 2-core
        8 GB RAM Upgradeable
                BANK 0/DIMM0
                        4 GB DDR3 1600 MHz ok
                BANK 1/DIMM0
                        4 GB DDR3 1600 MHz ok
        Bluetooth: Good - Handoff/Airdrop2 supported
        Wireless:  en1: 802.11 a/b/g/n

Video Information: ℹ️
        Intel HD Graphics 4000
                Color LCD 1280 x 800

System Software: ℹ️
        OS X 10.10.1 (14B25) - Uptime: 11:47:43

Disk Information: ℹ️
        Samsung SSD 840 PRO Series disk0 : (512,11 GB)
                EFI (disk0s1) <not mounted> : 210 MB
                Macintosh HD (disk0s2) / : 435.25 GB (101.29 GB free)
                Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
                BOOTCAMP (disk0s4) /Volumes/BOOTCAMP : 76.00 GB (46.10 GB free)

        WDC WD10JPVT-00MS8T0 disk1 : (1 TB)
                EFI (disk1s1) <not mounted> : 210 MB
                Daten (disk1s2) /Volumes/Daten : 999.86 GB (798.79 GB free)

USB Information: ℹ️
        Apple Computer, Inc. IR Receiver
        Apple Inc. Apple Internal Keyboard / Trackpad
        Apple Inc. BRCM20702 Hub
                Apple Inc. Bluetooth USB Host Controller
        Apple Inc. FaceTime HD Camera (Built-in)

Thunderbolt Information: ℹ️
        Apple Inc. thunderbolt_bus

Gatekeeper: ℹ️
        Mac App Store and identified developers

Kernel Extensions: ℹ️
                /Library/Application Support/Avast/components/fileshield/unsigned
        [loaded]        com.avast.AvastFileShield (2.1.0 - SDK 10.9) [Support]

                /Library/Application Support/Avast/components/proxy/unsigned
        [loaded]        com.avast.PacketForwarder (2.0 - SDK 10.9) [Support]

                /System/Library/Extensions
        [not loaded]        com.FTDI.driver.FTDIUSBSerialDriver (2.2.18 - SDK 10.6) [Support]
        [not loaded]        com.Huawei.driver.HuaweiDataCardDriver (4.0.8) [Support]
        [not loaded]        com.Logitech.Control Center.HID Driver (3.3.0) [Support]
        [not loaded]        com.Logitech.Unifying.HID Driver (1.2.0) [Support]
        [not loaded]        com.devguru.driver.SamsungComposite (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.mice.driver.Wireless360Controller (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.WirelessGamingReceiver (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.Xbox360Controller (1.0.0d10) [Support]
        [loaded]        com.usboverdrive.driver.hid (3.0.1) [Support]

                /System/Library/Extensions/USBOverdrive.kext/Contents/PlugIns
        [not loaded]        com.usboverdrive.driver.hid.safe (3.0.1) [Support]

                /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns
        [not loaded]        com.devguru.driver.SamsungACMControl (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungACMData (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungMTP (1.2.61 - SDK 10.5) [Support]
        [not loaded]        com.devguru.driver.SamsungSerial (1.2.61 - SDK 10.6) [Support]

Startup Items: ℹ️
        360ControlDaemon: Path: /Library/StartupItems/360ControlDaemon
        ChmodBPF: Path: /Library/StartupItems/ChmodBPF
        Startup items are obsolete in OS X Yosemite

Launch Agents: ℹ️
        [not loaded]        com.adobe.AAM.Updater-1.0.plist [Support]
        [failed]        com.adobe.CS4ServiceManager.plist [Support]
        [loaded]        com.avast.userinit.plist [Support]
        [loaded]        com.google.keystone.agent.plist [Support]
        [running]        com.Logitech.Control Center.Daemon.plist [Support]
        [loaded]        com.oracle.java.Java-Updater.plist [Support]
        [not loaded]        com.teamviewer.teamviewer.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_desktop.plist [Support]
        [loaded]        org.macosforge.xquartz.startx.plist [Support]

Launch Daemons: ℹ️
        [loaded]        com.adobe.fpsaud.plist [Support]
        [loaded]        com.avast.init.plist [Support]
        [loaded]        com.avast.uninstall.plist [Support]
        [failed]        com.avast.update.plist [Support]
        [loaded]        com.google.keystone.daemon.plist [Support]
        [loaded]        com.microsoft.office.licensing.helper.plist [Support]
        [loaded]        com.oracle.java.Helper-Tool.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_service.plist [Support]
        [loaded]        org.macosforge.xquartz.privileged_startx.plist [Support]

User Launch Agents: ℹ️
        [loaded]        com.adobe.ARM.[...].plist [Support]
        [running]        com.amazon.music.plist [Support]
        [invalid?]        com.avast.home.userinit.plist [Support]
        [loaded]        com.divx.agent.postinstall.plist [Support]
        [failed]        com.facebook.videochat.[redacted].plist [Support]
        [invalid?]        com.google.GoogleContactSyncAgent.plist [Support]
        [invalid?]        com.nero.HSMMonitor.plist [Support]
        [loaded]        com.valvesoftware.steamclean.plist [Support]

User Login Items: ℹ️
        iTunesHelper        UNKNOWNHidden (missing value)
        HTCLaunch        UNKNOWN (missing value)
        Android File Transfer Agent        Programm (/Users/[redacted]/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
        Dropbox 2        UNKNOWN (missing value)
        Dropbox        Programm (/Applications/Dropbox.app)
        Google Drive        UNKNOWN (missing value)
        fuspredownloader        ProgrammHidden (/Users/[redacted]/Library/Application Support/.FUS/fuspredownloader.app)

Internet Plug-ins: ℹ️
        OVSHelper: Version: 1.1 [Support]
        Default Browser: Version: 600 - SDK 10.10
        Google Earth Web Plug-in: Version: 6.1 [Support]
        Unity Web Player: Version: UnityPlayer version 3.4.2f3 - SDK 10.5 [Support]
        AdobePDFViewerNPAPI: Version: 10.1.13 [Support]
        FlashPlayer-10.6: Version: 15.0.0.246 - SDK 10.6 [Support]
        DivXBrowserPlugin: Version: 2.2 [Support]
        AmazonMP3DownloaderPlugin101749: Version: Unknown
        Flash Player: Version: 15.0.0.246 - SDK 10.6 Mismatch! Adobe recommends 16.0.0.235
        QuickTime Plugin: Version: 7.7.3
        iPhotoPhotocast: Version: 7.0 - SDK 10.8
        SharePointBrowserPlugin: Version: 14.4.6 - SDK 10.6 [Support]
        AdobePDFViewer: Version: 10.1.13 [Support]
        Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Support]
        JavaAppletPlugin: Version: Java 8 Update 25 Check version

Safari Extensions: ℹ️
        wrc [Installed]
        DivX Plus Web Player HTML5 <video> [Installed]

3rd Party Preference Panes: ℹ️
        DivX  [Support]
        Flash Player  [Support]
        FUSE for OS X (OSXFUSE)  [Support]
        Java  [Support]
        Logitech Control Center  [Support]
        MacFUSE  [Support]
        NTFS-3G  [Support]
        Pref360Control  [Support]

Time Machine: ℹ️
        Skip System Files: NO
        Mobile backups: OFF
        Auto backup: NO - Auto backup turned off
        Volumes being backed up:
                Macintosh HD: Disk size: 435.25 GB Disk used: 333.96 GB
        Destinations:
                Time Machine [Network]
                Total size: 3.93 TB
                Total number of backups: 34
                Oldest backup: 2014-03-28 22:06:25 +0000
                Last backup: 2014-12-06 09:38:18 +0000
                Size of backup disk: Excellent
                        Backup size 3.93 TB > (Disk size 435.25 GB X 3)

Top Processes by CPU: ℹ️
            20%        firefox
            12%        mds
            4%        WindowServer
            1%        com.avast.daemon
            1%        hidd

Top Processes by Memory: ℹ️
        617 MB        firefox
        163 MB        Microsoft Word
        94 MB        Preview
        77 MB        mds_stores
        77 MB        Finder

Virtual Memory Information: ℹ️
        3.00 GB        Free RAM
        2.85 GB        Active RAM
        1.53 GB        Inactive RAM
        944 MB        Wired RAM
        4.66 GB        Page-ins
        0 B        Page-outs

Diagnostics Information: ℹ️
        Dec 21, 2014, 09:55:42 PM        /Users/[redacted]/Library/Logs/DiagnosticReports/plugin-container_2014-12-21-215542_[redacted].crash
        Dec 21, 2014, 09:45:43 PM        Self test - passed
        Dec 20, 2014, 11:17:38 AM        /Library/Logs/DiagnosticReports/Microsoft Word_2014-12-20-111738_[redacted].hang

Dante12 22.12.2014 12:57
Home-Verzeichnis ~/Library/LaunchAgents

Löschen:
Code:
com.amazon.music.plist [Support] [invalid?]
com.divx.agent.postinstall.plist [Support] [failed]       
com.facebook.videochat.[redacted].plist [Support] [invalid?]       
com.google.GoogleContactSyncAgent.plist [Support] [invalid?]       
com.nero.HSMMonitor.plist [Support] [loaded]
Systemeinstellungen - Benutzer & Gruppen - Anmeldeobjekte

Folgende Einträge löschen
Code:
iTunesHelper        UNKNOWN Hidden (missing value)
HTCLaunch        UNKNOWN (missing value)
Dropbox 2        UNKNOWN (missing value)
Der Nachfolgende Eintrag gehört zum Samsung Programm Kies. Verwendest du das noch?
Löschen funktioniert nicht, da es über den Kies-Updater wieder angelegt wird.
Du musst die Uninstall-Funktion von Kies nutzen.
Code:
fuspredownloader       
ProgrammHidden (/Users/[redacted]/Library/Application Support/.FUS/fuspredownloader.app)

Hauptverzeichnis /Library/Internet Plug-Ins/ (Root-Passwort nötig)
Folgende Einträge löschen:
Code:
DivXBrowserPlugin: Version: 2.2
Safari - Einstellungen - Erweiterungen
Löschen:
Code:
DivX Plus Web Player
Auch in Firefox bzw. Chrome alle DivX-Erweiterungen löschen.

Hauptverzeichnis /Library/Preferences Panes/
Löschen:
Code:
DivX
Flashplayer Aktualisieren
Systemeinstellungen - Flash Player aufrufen und updaten.

Home-Verzeichnis ~/Library/Caches
Mit Command-A
gesamten Inhalt Markieren und in einen neuen Ordner in den Papierkorb verschieben. Sollten Probleme auftreten kann man Inhalte wiederherstellen.

Rechner Neustarten

Neues Log mit EtreCheck


Gruß,
-dante

Nasivin 22.12.2014 16:51
Code:
EtreCheck version: 2.1.5 (108)
Report generated 22. Dezember 2014 16:48:47 MEZ

Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.

Hardware Information: ℹ️
        MacBook Pro (13-inch, Mid 2012) (Verified)
        MacBook Pro - model: MacBookPro9,2
        1 2.5 GHz Intel Core i5 CPU: 2-core
        8 GB RAM Upgradeable
                BANK 0/DIMM0
                        4 GB DDR3 1600 MHz ok
                BANK 1/DIMM0
                        4 GB DDR3 1600 MHz ok
        Bluetooth: Good - Handoff/Airdrop2 supported
        Wireless:  en1: 802.11 a/b/g/n

Video Information: ℹ️
        Intel HD Graphics 4000
                Color LCD 1280 x 800

System Software: ℹ️
        OS X 10.10.1 (14B25) - Uptime: 0:0:42

Disk Information: ℹ️
        Samsung SSD 840 PRO Series disk0 : (512,11 GB)
                EFI (disk0s1) <not mounted> : 210 MB
                Macintosh HD (disk0s2) / : 435.25 GB (102.32 GB free)
                Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
                BOOTCAMP (disk0s4) /Volumes/BOOTCAMP : 76.00 GB (46.10 GB free)

        WDC WD10JPVT-00MS8T0 disk1 : (1 TB)
                EFI (disk1s1) <not mounted> : 210 MB
                Daten (disk1s2) /Volumes/Daten : 999.86 GB (798.79 GB free)

USB Information: ℹ️
        Apple Computer, Inc. IR Receiver
        Apple Inc. BRCM20702 Hub
                Apple Inc. Bluetooth USB Host Controller
        Apple Inc. Apple Internal Keyboard / Trackpad
        Apple Inc. FaceTime HD Camera (Built-in)

Thunderbolt Information: ℹ️
        Apple Inc. thunderbolt_bus

Gatekeeper: ℹ️
        Mac App Store and identified developers

Kernel Extensions: ℹ️
                /Library/Application Support/Avast/components/fileshield/unsigned
        [loaded]        com.avast.AvastFileShield (2.1.0 - SDK 10.9) [Support]

                /Library/Application Support/Avast/components/proxy/unsigned
        [loaded]        com.avast.PacketForwarder (2.0 - SDK 10.9) [Support]

                /System/Library/Extensions
        [not loaded]        com.FTDI.driver.FTDIUSBSerialDriver (2.2.18 - SDK 10.6) [Support]
        [not loaded]        com.Huawei.driver.HuaweiDataCardDriver (4.0.8) [Support]
        [not loaded]        com.Logitech.Control Center.HID Driver (3.3.0) [Support]
        [not loaded]        com.Logitech.Unifying.HID Driver (1.2.0) [Support]
        [not loaded]        com.devguru.driver.SamsungComposite (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.mice.driver.Wireless360Controller (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.WirelessGamingReceiver (1.0.0d10) [Support]
        [not loaded]        com.mice.driver.Xbox360Controller (1.0.0d10) [Support]
        [not loaded]        com.usboverdrive.driver.hid (3.0.1) [Support]

                /System/Library/Extensions/USBOverdrive.kext/Contents/PlugIns
        [not loaded]        com.usboverdrive.driver.hid.safe (3.0.1) [Support]

                /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns
        [not loaded]        com.devguru.driver.SamsungACMControl (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungACMData (1.2.61 - SDK 10.6) [Support]
        [not loaded]        com.devguru.driver.SamsungMTP (1.2.61 - SDK 10.5) [Support]
        [not loaded]        com.devguru.driver.SamsungSerial (1.2.61 - SDK 10.6) [Support]

Startup Items: ℹ️
        360ControlDaemon: Path: /Library/StartupItems/360ControlDaemon
        ChmodBPF: Path: /Library/StartupItems/ChmodBPF
        Startup items are obsolete in OS X Yosemite

Launch Agents: ℹ️
        [not loaded]        com.adobe.AAM.Updater-1.0.plist [Support]
        [failed]        com.adobe.CS4ServiceManager.plist [Support] [Details]
        [loaded]        com.avast.userinit.plist [Support]
        [loaded]        com.google.keystone.agent.plist [Support]
        [running]        com.Logitech.Control Center.Daemon.plist [Support]
        [loaded]        com.oracle.java.Java-Updater.plist [Support]
        [not loaded]        com.teamviewer.teamviewer.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_desktop.plist [Support]
        [loaded]        org.macosforge.xquartz.startx.plist [Support]

Launch Daemons: ℹ️
        [loaded]        com.adobe.fpsaud.plist [Support]
        [loaded]        com.avast.init.plist [Support]
        [loaded]        com.avast.uninstall.plist [Support]
        [loaded]        com.avast.update.plist [Support]
        [loaded]        com.google.keystone.daemon.plist [Support]
        [loaded]        com.microsoft.office.licensing.helper.plist [Support]
        [loaded]        com.oracle.java.Helper-Tool.plist [Support]
        [not loaded]        com.teamviewer.teamviewer_service.plist [Support]
        [loaded]        org.macosforge.xquartz.privileged_startx.plist [Support]

User Launch Agents: ℹ️
        [loaded]        com.adobe.ARM.[...].plist [Support]
        [invalid?]        com.avast.home.userinit.plist [Support]
        [loaded]        com.valvesoftware.steamclean.plist [Support]

User Login Items: ℹ️
        Android File Transfer Agent        Programm (/Users/[redacted]/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app)
        Dropbox        Programm (/Applications/Dropbox.app)

Internet Plug-ins: ℹ️
        OVSHelper: Version: 1.1 [Support]
        Default Browser: Version: 600 - SDK 10.10
        Google Earth Web Plug-in: Version: 6.1 [Support]
        Unity Web Player: Version: UnityPlayer version 3.4.2f3 - SDK 10.5 [Support]
        AdobePDFViewerNPAPI: Version: 10.1.13 [Support]
        FlashPlayer-10.6: Version: 16.0.0.235 - SDK 10.6 [Support]
        DivXBrowserPlugin: Version: 2.2 [Support]
        AmazonMP3DownloaderPlugin101749: Version: Unknown
        Flash Player: Version: 16.0.0.235 - SDK 10.6 [Support]
        QuickTime Plugin: Version: 7.7.3
        iPhotoPhotocast: Version: 7.0 - SDK 10.8
        SharePointBrowserPlugin: Version: 14.4.6 - SDK 10.6 [Support]
        AdobePDFViewer: Version: 10.1.13 [Support]
        Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Support]
        JavaAppletPlugin: Version: Java 8 Update 25 Check version

Safari Extensions: ℹ️
        avast! Online Security [Installed]

3rd Party Preference Panes: ℹ️
        DivX  [Support]
        Flash Player  [Support]
        FUSE for OS X (OSXFUSE)  [Support]
        Java  [Support]
        Logitech Control Center  [Support]
        MacFUSE  [Support]
        NTFS-3G  [Support]
        Pref360Control  [Support]

Time Machine: ℹ️
        Skip System Files: NO
        Mobile backups: OFF
        Auto backup: NO - Auto backup turned off
        Volumes being backed up:
                Macintosh HD: Disk size: 435.25 GB Disk used: 332.94 GB
        Destinations:
                Time Machine [Network]
                Total size: 3.93 TB
                Total number of backups: 34
                Oldest backup: 2014-03-28 22:06:25 +0000
                Last backup: 2014-12-06 09:38:18 +0000
                Size of backup disk: Excellent
                        Backup size 3.93 TB > (Disk size 435.25 GB X 3)

Top Processes by CPU: ℹ️
            4%        WindowServer
            1%        fontd
            0%        com.avast.daemon
            0%        AppleSpell
            0%        notifyd

Top Processes by Memory: ℹ️
        120 MB        com.avast.daemon
        86 MB        mds_stores
        77 MB        Dropbox
        60 MB        ocspd
        43 MB        WindowServer

Virtual Memory Information: ℹ️
        4.61 GB        Free RAM
        1.61 GB        Active RAM
        1.53 GB        Inactive RAM
        840 MB        Wired RAM
        2.10 GB        Page-ins
        0 B        Page-outs

Diagnostics Information: ℹ️
        Dec 22, 2014, 04:48:10 PM        Self test - passed
        Dec 21, 2014, 09:55:42 PM        /Users/[redacted]/Library/Logs/DiagnosticReports/plugin-container_2014-12-21-215542_[redacted].crash
        Dec 20, 2014, 11:17:38 AM        /Library/Logs/DiagnosticReports/Microsoft Word_2014-12-20-111738_[redacted].hang
Alles erledigt soweit!

Dante12 22.12.2014 17:07
Wie läuft dein Rechner jetzt?

Wenn du noch DivX loswerden willst musst du die Einträge die ich oben weiter erwähnt hatte entfernen.

Nasivin 22.12.2014 17:10
Ich glaube schon flotter. Brauch ich den Divx Codec überhaupt noch? Videos sind bei mir alle im MP4 oder MKV Format. Online laufen doch die meisten über Youtube ab. Dann schmeiß ich den komplett runter.

Dante12 22.12.2014 17:41
Wenn du es nicht nutzt, alle Einträge löschen. Wenn du im Programm-ordner noch die app hast dann kannst du auch diese in den Papierkorb verschieben.

Hinweis:
- Das Java-Browser-Plugin sollte für alle Browser deaktiviert werden. Ich nutze auch zum Programmieren Java aber das Browser-PlugIn wird nicht verwendet. Habe auch ganz selten eine Seite wo es mal genutzt wird.

- Nutze addons um Skripte zu Blocken. Erlaube nur das was du brauchst. Für Firefox NoScript, Chrome uMatrix und Safari den Skript-Blocker. Alle lassen sich individuell nutzen.

- AdBlock bzw -Plus oder Ghostery gegen übermässige Werbung.

- Lade Dritt-Tools nur direkt beim Anbieter.

- Mit Gatekeeper und XProtect hat der Mac schon einen guten Schutz. Dennoch möchte ich dir nicht hereinreden was du nutzen sollst. Nach meiner Ansicht ist ein AV auf Unix nicht zwingend notwendig.

- Achte darauf wenn du apps installierst ob es sich um eine .PKG handelt. Diese liefern meist einen Uninstaller der genutzt werden sollten. Reste lassen sich dann leichter entfernen.

Von meiner Seite ist alles Erledigt. Wenn du noch Fragen hast oder noch Probleme auftreten melde dich.

Ich wünsche Dir Frohe Weihnachten und einen guten "Rutsch" ins neue Jahr.:party:

Nasivin 22.12.2014 17:45
Vielen Dank für deine Hilfe! Ihr leistet hier wirklich super Arbeit.

Wünsche dir auch Frohe Weihnachten und einen guten Rutsch! :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 11:15 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27