Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Mac OSX & Linux (https://www.trojaner-board.de/alles-rund-um-mac-osx-linux/)
-   -   Mac Book Pro - "JS:ScriptSH-inf(Trj)" und "VBS:Bicololo-BM(Trj)"gefunden (https://www.trojaner-board.de/183160-mac-book-pro-js-scriptsh-inf-trj-vbs-bicololo-bm-trj-gefunden.html)

Anette 24.11.2016 21:01
Mac Book Pro - "JS:ScriptSH-inf(Trj)" und "VBS:Bicololo-BM(Trj)"gefunden
 
Hallo!
Habe mein Mac Book Pro (MacOS Sierra) mit Avast wieder einmal komplett durchgecheckt und bin auf folgende Infizierungen gestoßen:

"JS:ScriptSH-inf(Trj)" und "VBS:Bicololo-BM(Trj)"

Es wurden auf 292 nicht spannbare Dateien gefunden.

Ich kenne mich computer-technisch leider nicht wirklich aus und weiß nicht, was ich damit anfangen soll.

Vorher war mein Laptop ziemlich langsam, aber ich dachte, das liegt daran, dass die Festplatte ziemlich voll ist.

Ich hoffe, mir kann jemand helfen.

Danke schonmal!

cosinus 24.11.2016 21:02
Aha, MacBook - und welches Betriebssystem? :glaskugel:

Anette 24.11.2016 21:22
MacOS Sierra
 
MacOS Sierra

Ich denke, das ist das Betriebssystem, oder?

Sorry... bin technisch echt auf Anfängerniveau!

cosinus 25.11.2016 10:08
Du hast also Mac OS X. Dann verschieb ich in den Linux/Mac Bereich, denn hier im Analysebereich wird nur Windows nach Malware durchsucht.

Ein Virenscanner auf einem unixoiden System wie Linux oder Mac macht wenig bis keinen Sinn, kann sehr oft sogar kontraproduktiv sein. Du solltest Avast deinstallieren.

Mach danach ein Log mit EtreCheck und poste es hier in CODE-Tags, dante12 unser Mac-Spezialist wird sich das Log dann bei Zeiten anschauen.


EtreCheck installieren
  1. Lade dir bitte EtreCheck herunter.
  2. Entpacken und Ausführen.
  3. Klicke auf das Pull-Down Menü und wähle No Problem - Just Checking, anschliessend auf Start Etrecheck
  4. Nach Abschluss erscheint das Fenster mit dem Log. Klicke oben links auf den Button Share Report und anschließend Copy to Clipboard.
  5. Das Log befindet sich nun in der Zwischenablage (Clipboard). Füge den Inhalt mit Command-V hier in dein Thema ein. Bitte in Code-Tags siehe Lesestoff.


Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Anette 25.11.2016 10:31
Logfiles
 
Code:
EtreCheck version: 3.1.3 (337)
Report generated 2016-11-25 10:27:24
Download EtreCheck from https://etrecheck.com
Runtime 3:59
Performance: Good

Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Remove] links to remove adware.

Problem: No problem - just checking

Hardware Information: ⓘ
    MacBook Pro (13-inch, Mid 2012)
    [Technical Specifications] - [User Guide] - [Warranty & Service]
    MacBook Pro - model: MacBookPro9,2
    1 2,5 GHz Intel Core i5 (i5-3210M) CPU: 2-core
    4 GB RAM Upgradeable - [Instructions]
        BANK 0/DIMM0
            2 GB DDR3 1600 MHz ok
        BANK 1/DIMM0
            2 GB DDR3 1600 MHz ok
    Bluetooth: Good - Handoff/Airdrop2 supported
    Wireless:  en1: 802.11 a/b/g/n
    Battery: Health = Normal - Cycle count = 343

Video Information: ⓘ
    Intel HD Graphics 4000
        Color LCD 1280 x 800

System Software: ⓘ
    macOS Sierra  10.12.1 (16B2555) - Time since boot: about 3 days

Disk Information: ⓘ
    APPLE HDD HTS547550A9E384 disk0 : (500,11 GB) (Rotational)
    [Show SMART report]
        EFI (disk0s1) <not mounted> : 210 MB
        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
        Macintosh HD (disk1) /  [Startup]: 498.88 GB (150.32 GB free)
            Core Storage: disk0s2 499.25 GB Online

    HL-DT-ST DVDRW  GS31N  ()

USB Information: ⓘ
    Apple Inc. FaceTime HD Camera (Built-in)
    Apple Inc. Apple Internal Keyboard / Trackpad
    Apple Computer, Inc. IR Receiver
    Apple Inc. BRCM20702 Hub
        Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: ⓘ
    Apple Inc. thunderbolt_bus

Gatekeeper: ⓘ
    Mac App Store and identified developers

Adware: ⓘ
    ~/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
    ~/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
    2 adware files found. [Remove]

System Launch Agents: ⓘ
    [not loaded]    8 Apple tasks
    [loaded]    158 Apple tasks
    [running]    96 Apple tasks
    [killed]    9 Apple tasks
    9 processes killed due to insufficient RAM

System Launch Daemons: ⓘ
    [failed]    com.apple.csrutil.report.plist (2016-09-14)
    [not loaded]    40 Apple tasks
    [loaded]    154 Apple tasks
    [running]    99 Apple tasks
    [killed]    9 Apple tasks
    9 processes killed due to insufficient RAM

Launch Agents: ⓘ
    [running]    com.brother.LOGINserver.plist (2013-11-18) [Support]
    [loaded]    com.oracle.java.Java-Updater.plist (2016-10-24) [Support]

Launch Daemons: ⓘ
    [loaded]    com.adobe.fpsaud.plist (2016-10-26) [Support]
    [running]    com.fitbit.galileod.plist (2015-11-09) [Support]
    [loaded]    com.microsoft.office.licensing.helper.plist (2012-04-02) [Support]
    [loaded]    com.oracle.java.Helper-Tool.plist (2016-09-23) [Support]

User Launch Agents: ⓘ
    [failed]    com.jdibackup.JustCloud.autostart.plist (2016-09-14) Adware!  [Remove]
        /usr/bin/open
    [failed]    com.jdibackup.JustCloud.notify.plist (2016-09-14) Adware!  [Remove]
        /usr/bin/open

User Login Items: ⓘ
    iTunesHelper    Programm  (2016-11-14)
        (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
    Fitbit Connect Menubar Helper    Programm  (2016-04-08)
        (/Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app)

Internet Plug-ins: ⓘ
    FlashPlayer-10.6: 23.0.0.207 - SDK 10.9 (2016-11-08) [Support]
    QuickTime Plugin: 7.7.3 (2016-10-26)
    Flash Player: 23.0.0.207 - SDK 10.9 (2016-11-08) [Support]
    JavaAppletPlugin: Java 8 Update 111 build 14 (2016-10-24) Check version
    PepperFlashPlayer: 23.0.0.207 - SDK 10.9 (2016-11-08) [Support]
    SharePointBrowserPlugin: 14.7.0 - SDK 10.6 (2016-11-16) [Support]

3rd Party Preference Panes: ⓘ
    Flash Player (2016-10-26) [Support]
    Java (2016-10-24) [Support]
    Secrets (2016-06-30) [Support]

Time Machine: ⓘ
    Skip System Files: NO
    Auto backup: YES
    Volumes being backed up:
        Macintosh HD: Disk size: 498.88 GB Disk used: 348.56 GB
    Destinations:
        Data [Network]
        Total size: 2.00 TB
        Total number of backups: 95
        Oldest backup: 22.11.13, 00:44
        Last backup: 24.11.16, 21:08
        Size of backup disk: Excellent
            Backup size 2.00 TB > (Disk size 498.88 GB X 3)

Top Processes by CPU: ⓘ
        6%          WindowServer
        5%          kernel_task
        1%          fontd
        1%          com.apple.AmbientDisplayAgent
        0%          cloudpaird

Top Processes by Memory: ⓘ
    606 MB            kernel_task
    442 MB            mdworker(18)
    356 MB            com.apple.WebKit.WebContent(2)
    213 MB            Finder
    152 MB            Safari

Virtual Memory Information: ⓘ
    1.01 GB          Available RAM
    20 MB            Free RAM
    2.99 GB          Used RAM
    1016 MB          Cached files
    142 MB            Swap Used

Diagnostics Information: ⓘ
    Nov 23, 2016, 09:07:43 PM    ~/Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2016-11-23-210743_[redacted].crash
        /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
    Nov 23, 2016, 02:13:19 PM    /Library/Logs/DiagnosticReports/hps_2016-11-23-141319_[redacted].cpu_resource.diag [Details]
        /Applications/dm-Fotowelt.app/Contents/MacOS/hps

Dante12 26.11.2016 09:16
Hallo Anette,

Wie hast du denn mit Avast gescannt? Ich hab da keine Installation von Avast gesehen?

Schritt 1:

Bitte starte noch mal EtreCheck und suche den folgenden Eintrag:

Code:
Adware: ⓘ ~/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist ~/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist 2 adware files found. [Remove]
Klicke auf Remove um diese zu entfernen.

Starte den Rechner neu und fahre mit Schritt 2 fort.

Schritt 2:

MalwareBytes for Mac
  • Lade dir bitte MalwareBytes for Mac herunter.
  • Öffne das DMG und verschiebe die APP in den Programm-Ordner.
  • Programm starten und klicke auf Scan. Gefundene Malware wird in den Papierkorb verschoben. Mache ein Neustart wenn verlangt wird.
  • Starte nochmal MalwareBytes (wenn noch nicht schon geöffnet), und öffne oben in der Menüleiste von Malwarebytes das Menü Scanner
  • Wähle anschliessend Take System Snapshot.
  • Hinweis:Das Menü oben auf deinen Bildschirm siehst du nur wenn die Anwendung aktiv ist (aktviere die Anwendung mit einem Klick in das Fenster). Siehe Bild

    http://dante.trojaner-board.de/bilder/Mbam-Snapshot.png
  • Kopiere das Log im Fenster und füge es hier ein. Wenn möglich in Code-Tags siehe Lesestoff

Schritt 3:

Gegencheck mit DetectX

Prüfen mit DetectX
  1. Lade dir bitte DetectX herunter. Entpacken und auf deinen Desktop verschieben.
  2. Starte die App und aktiviere die Checkbox See hidden Files. Oben im Fenster von DetectX klicke auf den Pull-Down Button und wähle All Searches und klicke anschließend auf Search.
  3. Wenn etwas gefunden wurde, navigiere zu den entsprechenden Ordnern und lösche es manuell. Bei den Systemordnern musst du das Löschen mit deinem Passwort bestätigen.
  4. Wenn du dir beim löschen nicht sicher bist, dann Frage lieber einmal mehr hier im Forum.

    http://dante.trojaner-board.de/bilder/detectX.png
  5. Wenn du damit fertig bist, klicke anschließend auf den Slider von DetectX so das der Pfeil auf die Mitte zeigt und anschliessend auf Ausführen (Dreieckssymbol mit Datum). Siehe Bild.

    http://dante.trojaner-board.de/bilde...X-contents.png
  6. Klicke anschließend auf den Button Copy um das Log in die Zwischenablage zu kopieren.

    http://dante.trojaner-board.de/bilder/detectX-copy.png
  7. Füge das Log hier in das Forum in Code-Tags ein.
  8. Du kannst jetzt DetectX beenden. Wenn du die versteckten Datein (Hidden Files) weiter anzeigen lassen willst, klicke auf NO sonst auf YES.

Anette 26.11.2016 09:54
Logfiles Malwarebytes
 
Code:
Malwarebytes Anti-Malware 1.2.5.715 system report - 26. November 2016 um 09:52:00 MEZ
Mac OS X version Version 10.12.1 (Build 16B2555)
System uptime: 0d 00:12:06
Helper tool version: 1.2.5.715
Signatures version: 145

Safari extensions
-----------------------

Chrome extensions
-----------------------
YAD
    Chrome
        Name: [unknown Chrome extension format]
        Path: /Users/YAD/Library/Application Support/Google/Chrome/External Extensions/gomekmidlodglbbmalcneegieacbdmki.json
        Modified: 2015-12-22 20:18:05 +0000
 

Firefox extensions
-----------------------
YAD
    *
        Name: Avast Online Security
        Path: /Users/YAD/Library/Application Support/Firefox/Profiles/*/extensions/wrc@avast.com.xpi
        Modified: 2016-07-23 21:14:03 +0000
 

User Login Items
-----------------------
User: YAD
  Name: iTunesHelper
  Path: /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app
 
  Name: ClamXavSentry
  Path: (null)
 
  Name: ClamXav Sentry
  Path: (null)
 
  Name: Fitbit Connect Menubar Helper
  Path: /Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app
 

System startup items
-----------------------

User launch agents
-----------------------
/Users/YAD/Library/LaunchAgents/.DS_Store

System launch agents
-----------------------
/Library/LaunchAgents/com.brother.LOGINserver.plist

System launch daemons
-----------------------
/Library/LaunchDaemons/com.adobe.fpsaud.plist
/Library/LaunchDaemons/com.fitbit.galileod.plist
/Library/LaunchDaemons/com.malwarebytes.HelperTool.plist
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Kernel extensions
-----------------------
/System/Library/Extensions/BJUSBLoad.kext
/System/Library/Extensions/hp_fax_io.kext
/System/Library/Extensions/hp_Inkjet8_io_enabler.kext
/Library/Extensions/ACS6x.kext
/Library/Extensions/ArcMSR.kext
/Library/Extensions/ATTOCelerityFC8.kext
/Library/Extensions/ATTOExpressSASHBA2.kext
/Library/Extensions/ATTOExpressSASRAID2.kext
/Library/Extensions/BJUSBLoad.kext
/Library/Extensions/CalDigitHDProDrv.kext
/Library/Extensions/CIJUSBLoad.kext
/Library/Extensions/HighPointIOP.kext
/Library/Extensions/HighPointRR.kext
/Library/Extensions/PromiseSTEX.kext
/Library/Extensions/SoftRAID.kext

launchd.conf contents
-----------------------


Hosts file
-----------------------
##
# Host Database
#
# localhost is used to configure the loopback interface
# when the system is booting.  Do not change this entry.
##
127.0.0.1        localhost
255.255.255.255        broadcasthost
::1            localhost
fe80::1%lo0        localhost


Scan log
-----------------------
2016-11-26 09:51:01 : 
2016-11-26 09:51:01 : ----- Scan Started -----
2016-11-26 09:51:01 : Scanning with signatures version 145 (2016-11-23)
2016-11-26 09:51:14 : *** Scan time: 0d 00:00:12 ***
2016-11-26 09:51:14 : ------ Scan Ended ------
"Cosinus" hatte geraten, Avast zu deinstallieren, was ich sofort getan habe.

Anette 26.11.2016 10:05
Funde mit DetectX
 
Liste der Anhänge anzeigen (Anzahl: 1)
Hallo Dante!
Vielen Dank schon mal für deine Hilfe. DetextX hat ein paar Sachen gefunden, von denen ich nicht weiß, ob sie weg müssen, oder nicht. Ich hänge den screenshot mal an und hoffe, auf deine Rückmeldung.

Dante12 26.11.2016 10:07
Zitat:
Zitat von Anette (Beitrag 1625679)
"Cosinus" hatte geraten, Avast zu deinstallieren, was ich sofort getan habe.
:daumenhoc

Sieht gut aus, du hast noch einige Reste von Avast in dein Chrome Browser einfach diese über die Erweiterungen entfernen und fahre mit den nächsten Schritt fort.

Anette 26.11.2016 10:33
Finde in den Erweiterungen nichts :-(
Und die Funde aus DetextX kann ich löschen?

Dante12 26.11.2016 10:49
Ja kannste löschen poste bitte auch das Log wie in der Beschreibung oben.

Anette 26.11.2016 11:03
Code:
DetectX Inspector:

Timestamp (4):

26 Nov., 2016  11:01:18 AM
Mitteleuropäische Normalzeit


MODEL:                MacBookPro9,2
RAM:                4.096  GB
DISK SPACE:        30.23%

OS X:                10.12.1
BUILD:                16B2555



Login Items:

"iTunesHelper"
"ClamXavSentry"
"ClamXav Sentry"
"Fitbit Connect Menubar Helper"
 

Home folder: hidden & invisibles
(path: ~/)

.bash_history
.CFUserTextEncoding
.cups
.DS_Store
.mcf
.oracle_jre_usage
.rnd
Papierkorb
Library


User Library:
(path: ~/Library/)

.DS_Store
.localized
Accounts
Address Book Plug-Ins
Application Scripts
Application Support
Assistant
Assistants
Audio
Autosave Information
Caches
Calendars
CallServices
ColorPickers
Colors
com.apple.nsurlsessiond
Compositions
Containers
Cookies
CoreData
CoreFollowUp
Dictionaries
Favorites
FontCollections
Fonts
Fonts Disabled
GameKit
Group Containers
IdentityServices
iMovie
Input Methods
Internet Plug-Ins
iTunes
Keyboard
Keyboard Layouts
KeyboardServices
Keychains
LanguageModeling
LaunchAgents
Logs
Mail
Maps
Messages
Metadata
Mobile Documents
Passes
PDF Services
PreferencePanes
Preferences
Printers
PubSub
Safari
Saved Application State
Saved Searches
Screen Savers
Scripts
Services
Sounds
Spelling
Suggestions
SyncedPreferences
Voices
WebKit
Workflows


User Launch Agents:
(path: ~/Library/LaunchAgents/)

.DS_Store



User Internet Plug-Ins:
(path: ~/Library/Internet Plug-Ins/)

 



User Application Support:
(path: ~/Library/Application Support/)

AddressBook
Adobe
Aperture
App Store
CallHistoryDB
CallHistoryTransactions
CloudDocs
com.apple.QuickLook
com.apple.sbd
com.apple.sharedfilelist
com.apple.spotlight
com.apple.spotlight.Shortcuts
com.apple.TCC
com.sqwarq.DetectX
Console
CrashReporter
DiskImages
Dock
DVD Player
EtreCheck
Firefox
GarageBand
Google
icdd
iCloud
iLifeAssetManagement
iLifeMediaBrowser
Java
JREInstaller
Kindle
Librarian
Mail
Malwarebytes
Microsoft
MobileSync
Mozilla
NotificationCenter
Oracle
Preview
Quick Look
RavensburgerTipToi
RavensburgerTipToi3
Skype
SyncServices
tiptoi Manager



Safari Extensions:
(path: ~/Library/Safari/Extensions/)

Extensions.plist



Applications folder:

.DS_Store
.localized
App Store.app
Automator.app
Calculator.app
Calendar.app
Chess.app
Contacts.app
Dashboard.app
Dictionary.app
dm-Fotowelt.app
DVD Player.app
FaceTime.app
Fitbit Connect.app
Font Book.app
GarageBand.app
iBooks.app
Image Capture.app
iMovie 9.0.9
iMovie.app
iPhoto.app
iTunes.app
Launchpad.app
Mail.app
Malwarebytes Anti-Malware.app
Maps.app
Memory Clean.app
Messages.app
Microsoft Messenger.app
Microsoft Office 2011
Mission Control.app
Notes.app
OS X Yosemite.appdownload
Photo Booth.app
Photos.app
Preview.app
QuickTime Player.app
Reminders.app
Remote Desktop Connection.app
Safari.app
Siri.app
Skype.app
Stickies.app
System Preferences.app
TextEdit.app
Time Machine.app
tiptoi Manager.app
tiptoi® Manager.app
Utilities



Users Shared Folder:
(path: /Users/Shared:)

.localized
adi
Adobe
Library
SC Info


Local Domain Library Folder
(path: /Library/)

.localized
Application Support
Audio
Automator
Caches
ColorPickers
ColorSync
Components
Compositions
Contextual Menu Items
CoreMediaIO
Desktop Pictures
DirectoryServices
Documentation
Extensions
Filesystems
Fonts
Fonts Disabled
Frameworks
Graphics
Image Capture
Input Methods
Internet Plug-Ins
Java
Keyboard Layouts
Keychains
LaunchAgents
LaunchDaemons
Logs
Messages
Modem Scripts
OpenDirectory
PDF Services
Perl
PreferencePanes
Preferences
Printers
PrivilegedHelperTools
Python
QuickLook
QuickTime
Receipts
Ruby
Sandbox
Screen Savers
ScriptingAdditions
Scripts
Security
Speech
Spotlight
StartupItems
SystemMigration
SystemProfiler
Updates
User Pictures
Video
WebServer
Widgets



Local Domain Library Application Support
(path: /Library/Application Support/)

.lz3T8baduy
Adobe
Antivirus for Mac
App Store
Apple
ApplePushService
Avira
com.apple.TCC
CrashReporter
Fitbit Connect
GarageBand
GData
Google
iLifeMediaBrowser
Macromedia
Microsoft
Oracle
ProApps
Script Editor



Local Domain Library Launch Agents
(path: /Library/LaunchAgents/)

com.brother.LOGINserver.plist
com.oracle.java.Java-Updater.plist



Local Domain Library Launch Daemon
(path: /Library/LaunchDaemons/)

com.adobe.fpsaud.plist
com.fitbit.galileod.plist
com.malwarebytes.HelperTool.plist
com.microsoft.office.licensing.helper.plist
com.oracle.java.Helper-Tool.plist



Local Domain Library Internet Plug-Ins
(path: /Library/Internet Plug-Ins/)

Disabled Plug-Ins
Flash Player.plugin
flashplayer.xpt
JavaAppletPlugin.plugin
PepperFlashPlayer
Quartz Composer.webplugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin



Local Domain Library PrivilegedHelperTools
(path: /Library/PrivilegedHelperTools/)

com.malwarebytes.HelperTool
com.microsoft.office.licensing.helper


Local Domain Library Scripting Additions
(path: /Library/ScriptingAdditions)

 
 


Local Domain Library StartupItems
(path: /Library/StartupItems)

 


Sudo Permissions File:
(path: /etc/sudoers)

/etc/sudoers was created on 2015-07-31 23:38:00 +0200 and does not appear to have been modified since.



------------------------- ▼ -------------------------



Installer History
(path: /Library/Receipts/InstallHistory.plist)
Recent items:

Adobe Pepper Flash Player installed on 2016-10-26 08:18:23 +0000
Update macOS*Sierra installed on 2016-10-26 08:59:58 +0000
Incompatible Kernel Extension Configuration Data installed on 2016-10-26 10:01:23 +0000
iMovie installed on 2016-11-02 21:49:10 +0000
Adobe Flash Player installed on 2016-11-08 13:09:14 +0000
Adobe Pepper Flash Player installed on 2016-11-08 20:44:02 +0000
Chinese Word List Update installed on 2016-11-14 19:43:09 +0000
Gatekeeper Configuration Data installed on 2016-11-14 19:43:20 +0000
Incompatible Kernel Extension Configuration Data installed on 2016-11-14 20:01:03 +0000
iTunes installed on 2016-11-14 20:13:32 +0000
XProtectPlistConfigData installed on 2016-11-14 20:18:00 +0000
Chinese Word List Update installed on 2016-11-16 12:53:15 +0000
Office 2011 14.7.0 Update installed on 2016-11-16 13:05:25 +0000
XProtectPlistConfigData installed on 2016-11-23 21:08:18 +0000
MRT Configuration Data installed on 2016-11-23 21:54:23 +0000


System Launch Agents:
(path:/System/Library/LaunchAgents/)

com.apple.accountsd.plist
com.apple.AddressBook.abd.plist
com.apple.AddressBook.AssistantService.plist
com.apple.AddressBook.ContactsAccountsService.plist
com.apple.AddressBook.SourceSync.plist
com.apple.AirPlayUIAgent.plist
com.apple.AirPortBaseStationAgent.plist
com.apple.akd.plist
com.apple.alf.useragent.plist
com.apple.AOSHeartbeat.plist
com.apple.AOSPushRelay.plist
com.apple.AppleGraphicsWarning.plist
com.apple.appleseed.seedusaged.plist
com.apple.appsleepd.plist
com.apple.appstoreupdateagent.plist
com.apple.apsctl.plist
com.apple.askpermissiond.plist
com.apple.AskPermissionUI.plist
com.apple.AssetCacheLocatorService.plist
com.apple.assistant_service.plist
com.apple.assistantd.plist
com.apple.AssistiveControl.plist
com.apple.avconferenced.plist
com.apple.bird.plist
com.apple.bluetooth.PacketLogger.plist
com.apple.bluetoothUIServer.plist
com.apple.btsa.plist
com.apple.cache_delete.plist
com.apple.CalendarAgent.plist
com.apple.CallHistoryPluginHelper.plist
com.apple.CallHistorySyncHelper.plist
com.apple.cdpd.plist
com.apple.cfnetwork.AuthBrokerAgent.plist
com.apple.cfnetwork.cfnetworkagent.plist
com.apple.cfprefsd.xpc.agent.plist
com.apple.cloudd.plist
com.apple.cloudfamilyrestrictionsd-mac.plist
com.apple.cloudpaird.plist
com.apple.cloudphotosd.plist
com.apple.cmfsyncagent.plist
com.apple.CommCenter-osx.plist
com.apple.ContactsAgent.plist
com.apple.ContainerRepairAgent.plist
com.apple.CoreAuthentication.agent.plist
com.apple.CoreLocationAgent.plist
com.apple.CoreRAIDAgent.plist
com.apple.coreservices.appleid.authentication.plist
com.apple.coreservices.lsactivity.plist
com.apple.coreservices.sharedfilelistd.plist
com.apple.coreservices.UASharedPasteboardProgressUI.plist
com.apple.coreservices.uiagent.plist
com.apple.CryptoTokenKit.ahp.agent.plist
com.apple.csuseragent.plist
com.apple.ctkbind.plist
com.apple.ctkd.plist
com.apple.cvmsCompAgent3425AMD_i386.plist
com.apple.cvmsCompAgent3425AMD_i386_1.plist
com.apple.cvmsCompAgent3425AMD_x86_64.plist
com.apple.cvmsCompAgent3425AMD_x86_64_1.plist
com.apple.cvmsCompAgent3600_i386.plist
com.apple.cvmsCompAgent3600_i386_1.plist
com.apple.cvmsCompAgent3600_x86_64.plist
com.apple.cvmsCompAgent3600_x86_64_1.plist
com.apple.cvmsCompAgent_i386.plist
com.apple.cvmsCompAgent_i386_1.plist
com.apple.cvmsCompAgent_x86_64.plist
com.apple.cvmsCompAgent_x86_64_1.plist
com.apple.cvmsCompAgentLegacy_i386.plist
com.apple.cvmsCompAgentLegacy_i386_1.plist
com.apple.cvmsCompAgentLegacy_x86_64.plist
com.apple.cvmsCompAgentLegacy_x86_64_1.plist
com.apple.DataDetectorsLocalSources.plist
com.apple.DiagnosticReportCleanup.plist
com.apple.diagnostics_agent.plist
com.apple.DictationIM.plist
com.apple.DiskArbitrationAgent.plist
com.apple.diskspaced.plist
com.apple.distnoted.xpc.agent.plist
com.apple.Dock.plist
com.apple.dt.CommandLineTools.installondemand.plist
com.apple.DwellControl.plist
com.apple.EscrowSecurityAlert.plist
com.apple.familycircled.plist
com.apple.familycontrols.useragent.plist
com.apple.familynotificationd.plist
com.apple.FileStatsAgent.plist
com.apple.FilesystemUI.plist
com.apple.Finder.plist
com.apple.findmymacmessenger.plist
com.apple.FirmwareUpdateHelper.plist
com.apple.FolderActionsDispatcher.plist
com.apple.followupd.plist
com.apple.FollowUpUI.plist
com.apple.fontd.useragent.plist
com.apple.FontRegistryUIAgent.plist
com.apple.FontValidator.plist
com.apple.FontValidatorConduit.plist
com.apple.FontWorker.plist
com.apple.FTCleanup.plist
com.apple.gamed.plist
com.apple.geodMachServiceBridge.plist
com.apple.helpd.plist
com.apple.icdd.plist
com.apple.icloud.findmydeviced.findmydevice-user-agent.plist
com.apple.icloud.fmfd.plist
com.apple.iCloudUserNotifications.plist
com.apple.iconservices.iconservicesagent.plist
com.apple.identityservicesd.plist
com.apple.idsremoteurlconnectionagent.plist
com.apple.imagent.plist
com.apple.imavagent.plist
com.apple.imklaunchagent.plist
com.apple.IMLoggingAgent.plist
com.apple.imtransferagent.plist
com.apple.installandsetup.migrationhelper.user.plist
com.apple.installd.user.plist
com.apple.InstallerProgress.la.plist
com.apple.isst.plist
com.apple.java.InstallOnDemand.plist
com.apple.java.updateSharing.plist
com.apple.keyboardservicesd.plist
com.apple.languageassetd.plist
com.apple.lateragent.plist
com.apple.locationmenu.plist
com.apple.loginwindow.LWWeeklyMessageTracer.plist
com.apple.lsd.plist
com.apple.ManagedClientAgent.agent.plist
com.apple.ManagedClientAgent.enrollagent.plist
com.apple.Maps.pushdaemon.plist
com.apple.maspushagent.plist
com.apple.mbbackgrounduseragent.plist
com.apple.mbfloagent.plist
com.apple.mbuseragent.plist
com.apple.mdmclient.agent.plist
com.apple.mdworker.32bit.plist
com.apple.mdworker.bundles.plist
com.apple.mdworker.isolation.plist
com.apple.mdworker.lsb.plist
com.apple.mdworker.mail.plist
com.apple.mdworker.shared.plist
com.apple.mdworker.single.plist
com.apple.mdworker.sizing.plist
com.apple.mediaanalysisd.plist
com.apple.mediaremoteagent.plist
com.apple.metadata.mdbulkimport.plist
com.apple.metadata.mdflagwriter.plist
com.apple.metadata.mdwrite.plist
com.apple.midiserver.plist
com.apple.MRTa.plist
com.apple.navd.plist
com.apple.neagent.plist
com.apple.netauth.user.auth.plist
com.apple.netauth.user.gui.plist
com.apple.NetworkDiagnostics.plist
com.apple.networkserviceproxy-osx.plist
com.apple.noticeboard.agent.plist
com.apple.notificationcenterui.plist
com.apple.nsurlsessiond.plist
com.apple.nsurlstoraged.plist
com.apple.OSDUIHelper.plist
com.apple.PackageKit.InstallStatus.plist
com.apple.parentalcontrols.check.plist
com.apple.parsecd.plist
com.apple.passd.plist
com.apple.pboard.plist
com.apple.pbs.plist
com.apple.PCIESlotCheck.plist
com.apple.personad.plist
com.apple.photoanalysisd.plist
com.apple.photolibraryd.plist
com.apple.PhotoLibraryMigrationUtility.XPC.plist
com.apple.pictd.plist
com.apple.PIPAgent.plist
com.apple.pluginkit.pkd.plist
com.apple.pluginkit.pkreporter.plist
com.apple.powerchime.plist
com.apple.printtool.agent.plist
com.apple.printuitool.agent.plist
com.apple.protectedcloudstorage.protectedcloudkeysyncing.plist
com.apple.PubSub.Agent.plist
com.apple.quicklook.32bit.plist
com.apple.quicklook.config.plist
com.apple.quicklook.plist
com.apple.quicklook.ThumbnailsAgent.plist
com.apple.quicklook.ui.helper.plist
com.apple.rcd.plist
com.apple.recentsd.plist
com.apple.RemoteDesktop.plist
com.apple.ReportCrash.plist
com.apple.ReportCrash.Self.plist
com.apple.ReportGPURestart.plist
com.apple.ReportPanic.plist
com.apple.reversetemplated.plist
com.apple.Safari.SafeBrowsing.Service.plist
com.apple.SafariCloudHistoryPushAgent.plist
com.apple.safaridavclient.plist
com.apple.SafariNotificationAgent.plist
com.apple.SafariPlugInUpdateNotifier.plist
com.apple.scopedbookmarkagent.xpc.plist
com.apple.ScreenReaderUIServer.plist
com.apple.screensharing.agent.plist
com.apple.screensharing.MessagesAgent.plist
com.apple.scrod.plist
com.apple.secd.plist
com.apple.secinitd.plist
com.apple.security.agent.plist
com.apple.security.cloudkeychainproxy3.plist
com.apple.security.DiskUnmountWatcher.plist
com.apple.security.idskeychainsyncingproxy.plist
com.apple.security.keychain-circle-notification.plist
com.apple.sharingd.plist
com.apple.Siri.plist
com.apple.soagent.plist
com.apple.SocialPushAgent.plist
com.apple.softwareupdate_notify_agent.plist
com.apple.speech.speechdatainstallerd.plist
com.apple.speech.speechsynthesisd.plist
com.apple.speech.synthesisserver.plist
com.apple.spindump_agent.plist
com.apple.spotlight.IndexAgent.plist
com.apple.Spotlight.plist
com.apple.SSInvitationAgent.plist
com.apple.StorageManagementUIHelper.plist
com.apple.storeaccountd.plist
com.apple.storeassetd.plist
com.apple.storedownloadd.plist
com.apple.storeinappd.plist
com.apple.storeinstallagent.plist
com.apple.storelegacy.plist
com.apple.storeuid.plist
com.apple.suggestd.plist
com.apple.sulogoutmonitor.plist
com.apple.swcd.plist
com.apple.syncdefaultsd.plist
com.apple.syncservices.SyncServer.plist
com.apple.syncservices.uihandler.plist
com.apple.sysdiagnose_agent.plist
com.apple.systemprofiler.plist
com.apple.SystemUIServer.plist
com.apple.talagent.plist
com.apple.tccd.plist
com.apple.telephonyutilities.callservicesd.plist
com.apple.thermaltrap.plist
com.apple.tiswitcher.plist
com.apple.TMHelperAgent.plist
com.apple.TMHelperAgent.SetupOffer.plist
com.apple.touristd.plist
com.apple.trustd.agent.plist
com.apple.TrustEvaluationAgent.plist
com.apple.universalaccessAuthWarn.plist
com.apple.universalaccesscontrol.plist
com.apple.universalaccessd.plist
com.apple.universalaccessHUD.plist
com.apple.unmountassistant.useragent.plist
com.apple.USBAgent.plist
com.apple.UserEventAgent-Aqua.plist
com.apple.UserEventAgent-LoginWindow.plist
com.apple.usernoted.plist
com.apple.UserNotificationCenterAgent-LoginWindow.plist
com.apple.UserNotificationCenterAgent.plist
com.apple.VoiceOver.plist
com.apple.warmd_agent.plist
com.apple.webdriverd.plist
com.apple.webinspectord.plist
com.apple.WebKit.PluginAgent.plist
com.apple.wifi.WiFiAgent.plist
com.apple.WiFiVelocityAgent.plist
com.apple.xpc.loginitemregisterd.plist
com.apple.xpc.otherbsd.plist
com.apple.ZoomWindow.plist
com.openssh.ssh-agent.plist



System Launch Daemons:
(path:/System/Library/LaunchDaemons/)

bootps.plist
com.apple.afpfs_afpLoad.plist
com.apple.afpfs_checkafp.plist
com.apple.airplaydiagnostics.server.mac.plist
com.apple.AirPlayXPCHelper.plist
com.apple.airport.wps.plist
com.apple.airportd.plist
com.apple.akd.plist
com.apple.alf.agent.plist
com.apple.AppleFileServer.plist
com.apple.appleseed.fbahelperd.plist
com.apple.applessdstatistics.plist
com.apple.apsd.plist
com.apple.aslmanager.plist
com.apple.AssetCacheLocatorService.plist
com.apple.atrun.plist
com.apple.audio.coreaudiod.plist
com.apple.audio.systemsoundserverd.plist
com.apple.auditd.plist
com.apple.autofsd.plist
com.apple.automountd.plist
com.apple.avbdeviced.plist
com.apple.awacsd.plist
com.apple.awdd.plist
com.apple.backupd-auto.plist
com.apple.backupd.plist
com.apple.blued.plist
com.apple.bluetoothaudiod.plist
com.apple.bluetoothReporter.plist
com.apple.bnepd.plist
com.apple.bsd.dirhelper.plist
com.apple.captiveagent.plist
com.apple.cfprefsd.xpc.daemon.plist
com.apple.cloudfamilyrestrictionsd-mac.plist
com.apple.cmio.AppleCameraAssistant.plist
com.apple.cmio.AVCAssistant.plist
com.apple.cmio.IIDCVideoAssistant.plist
com.apple.cmio.iOSScreenCaptureAssistant.plist
com.apple.cmio.VDCAssistant.plist
com.apple.colorsyncd.plist
com.apple.CommCenterRootHelper.plist
com.apple.comsat.plist
com.apple.configd.plist
com.apple.configureLocalKDC.plist
com.apple.CoreAuthentication.daemon.plist
com.apple.corecaptured.plist
com.apple.coreduetd.osx.plist
com.apple.CoreRAID.plist
com.apple.coreservices.appleevents.plist
com.apple.coreservices.appleid.passwordcheck.plist
com.apple.coreservices.launchservicesd.plist
com.apple.coreservices.sharedfilelistd.plist
com.apple.coreservicesd.plist
com.apple.corestorage.corestoraged.plist
com.apple.corestorage.corestoragehelperd.plist
com.apple.coresymbolicationd.plist
com.apple.CrashReporterSupportHelper.plist
com.apple.CryptoTokenKit.ahp.plist
com.apple.csrutil.report.plist
com.apple.ctkd.plist
com.apple.cvmsServ.plist
com.apple.DataDetectorsSourceAccess.plist
com.apple.defragx.plist
com.apple.DesktopServicesHelper.plist
com.apple.diagnosticd.plist
com.apple.diagnosticextensions.osx.bluetooth.helper.plist
com.apple.diagnosticextensions.osx.getmobilityinfo.helper.plist
com.apple.diagnosticextensions.osx.spotlight.helper.plist
com.apple.diagnosticextensions.osx.timemachine.helper.plist
com.apple.diagnosticextensions.osx.wifi.helper.plist
com.apple.diskarbitrationd.plist
com.apple.diskmanagementd.plist
com.apple.diskmanagementstartup.plist
com.apple.displaypolicyd.plist
com.apple.distnoted.xpc.daemon.plist
com.apple.dnsextd.plist
com.apple.dpaudiothru.plist
com.apple.dpd.plist
com.apple.dprivacyd.plist
com.apple.dspluginhelperd.plist
com.apple.DuetHeuristic-BM-OSX.plist
com.apple.DumpGPURestart.plist
com.apple.DumpPanic.plist
com.apple.dvdplayback.setregion.plist
com.apple.dynamic_pager.plist
com.apple.dz.dznd.plist
com.apple.eapolcfg_auth.plist
com.apple.efilogin-helper.plist
com.apple.emlog.plist
com.apple.emond.aslmanager.plist
com.apple.emond.plist
com.apple.eppc.plist
com.apple.familycontrols.plist
com.apple.FileCoordination.plist
com.apple.findmymac.plist
com.apple.findmymacmessenger.plist
com.apple.firmwaresyncd.plist
com.apple.fontd.plist
com.apple.fontmover.plist
com.apple.FontWorker.plist
com.apple.fseventsd.plist
com.apple.ftp-proxy.plist
com.apple.GameController.gamecontrollerd.plist
com.apple.getty.plist
com.apple.gkreport.plist
com.apple.GSSCred.plist
com.apple.gssd.plist
com.apple.hdiejectd.plist
com.apple.hidd.plist
com.apple.hidfud.plist
com.apple.icloud.findmydeviced.plist
com.apple.iconservices.iconservicesagent.plist
com.apple.iconservices.iconservicesd.plist
com.apple.IFCStart.plist
com.apple.ifdreader.plist
com.apple.installandsetup.systemmigrationd.plist
com.apple.installd.plist
com.apple.InstallerDiagnostics.installerdiagd.plist
com.apple.InstallerDiagnostics.installerdiagwatcher.plist
com.apple.InstallerProgress.plist
com.apple.IOAccelMemoryInfoCollector.plist
com.apple.IOBluetoothUSBDFU.plist
com.apple.ionodecache.plist
com.apple.jetsamproperties.Mac.plist
com.apple.kcproxy.plist
com.apple.kdumpd.plist
com.apple.Kerberos.digest-service.plist
com.apple.Kerberos.kadmind.plist
com.apple.Kerberos.kcm.plist
com.apple.Kerberos.kdc.plist
com.apple.Kerberos.kpasswdd.plist
com.apple.KernelEventAgent.plist
com.apple.kextd.plist
com.apple.kuncd.plist
com.apple.locate.plist
com.apple.locationd.plist
com.apple.lockd.plist
com.apple.logd.plist
com.apple.logind.plist
com.apple.loginwindow.LFVTracer.plist
com.apple.loginwindow.plist
com.apple.logkextloadsd.plist
com.apple.lsd.plist
com.apple.ManagedClient.cloudconfigurationd.plist
com.apple.ManagedClient.enroll.plist
com.apple.ManagedClient.plist
com.apple.ManagedClient.startup.plist
com.apple.mbsystemadministration.plist
com.apple.mbusertrampoline.plist
com.apple.mdmclient.daemon.plist
com.apple.mdmclient.daemon.runatboot.plist
com.apple.mDNSResponder.plist
com.apple.mDNSResponderHelper.plist
com.apple.mediaremoted.plist
com.apple.metadata.mds.index.plist
com.apple.metadata.mds.plist
com.apple.metadata.mds.scan.plist
com.apple.metadata.mds.spindump.plist
com.apple.mobile.fud.plist
com.apple.mobile.keybagd.plist
com.apple.mobileassetd.plist
com.apple.MobileFileIntegrity.plist
com.apple.MRTd.plist
com.apple.msrpc.echosvc.plist
com.apple.msrpc.lsarpc.plist
com.apple.msrpc.mdssvc.plist
com.apple.msrpc.netlogon.plist
com.apple.msrpc.srvsvc.plist
com.apple.msrpc.wkssvc.plist
com.apple.mtmd.plist
com.apple.mtmfs.plist
com.apple.mtmhelper.plist
com.apple.nehelper.plist
com.apple.nesessionmanager.plist
com.apple.netauth.sys.auth.plist
com.apple.netauth.sys.gui.plist
com.apple.netbiosd.plist
com.apple.NetBootClientStatus.plist
com.apple.NetworkDiagnostics.plist
com.apple.NetworkLinkConditioner.plist
com.apple.NetworkSharing.plist
com.apple.newsyslog.plist
com.apple.nfsconf.plist
com.apple.nfsd.plist
com.apple.nis.ypbind.plist
com.apple.noticeboard.state.plist
com.apple.notifyd.plist
com.apple.nsurlsessiond.plist
com.apple.nsurlstoraged.plist
com.apple.ocspd.plist
com.apple.odproxyd.plist
com.apple.ODSAgent.plist
com.apple.opendirectoryd.plist
com.apple.PasswordService.plist
com.apple.PCIELaneConfigTool.plist
com.apple.periodic-daily.plist
com.apple.periodic-monthly.plist
com.apple.periodic-weekly.plist
com.apple.pfctl.plist
com.apple.pfd.plist
com.apple.platform.ptmd.plist
com.apple.postfix.master.plist
com.apple.postfix.newaliases.plist
com.apple.powerd.plist
com.apple.powerd.swd.plist
com.apple.preferences.timezone.admintool.plist
com.apple.preferences.timezone.auto.plist
com.apple.printtool.daemon.plist
com.apple.racoon.plist
com.apple.RemoteDesktop.PrivilegeProxy.plist
com.apple.remotepairtool.plist
com.apple.ReportCrash.Root.plist
com.apple.ReportPanicService.plist
com.apple.revisiond.plist
com.apple.RFBEventHelper.plist
com.apple.rootless.init.plist
com.apple.rpcbind.plist
com.apple.rtcreportingd.plist
com.apple.sandboxd.plist
com.apple.SCHelper.plist
com.apple.screensharing.plist
com.apple.scsid.plist
com.apple.secinitd.plist
com.apple.security.agent.login.plist
com.apple.security.authhost.plist
com.apple.security.FDERecoveryAgent.plist
com.apple.security.syspolicy.plist
com.apple.securityd.plist
com.apple.securityd_service.plist
com.apple.sessionlogoutd.plist
com.apple.smb.preferences.plist
com.apple.smbd.plist
com.apple.softwareupdate_download_service.plist
com.apple.softwareupdate_firstrun_tasks.plist
com.apple.softwareupdated.plist
com.apple.speech.speechsynthesisd.plist
com.apple.spindump.plist
com.apple.startupdiskhelper.plist
com.apple.statd.notify.plist
com.apple.storagekitd.plist
com.apple.storeaccountd.daemon.plist
com.apple.storeagent.daemon.plist
com.apple.storeassetd.daemon.plist
com.apple.storedownloadd.daemon.plist
com.apple.storeinstalld.plist
com.apple.storereceiptinstaller.plist
com.apple.SubmitDiagInfo.plist
com.apple.suhelperd.plist
com.apple.symptomsd.plist
com.apple.sysdiagnose.plist
com.apple.syslogd.plist
com.apple.sysmond.plist
com.apple.system_installd.plist
com.apple.systemkeychain.plist
com.apple.systemstats.analysis.plist
com.apple.systemstats.daily.plist
com.apple.tailspind.plist
com.apple.taskgated-helper.plist
com.apple.taskgated.plist
com.apple.tccd.system.plist
com.apple.thermald.plist
com.apple.TMCacheDelete.plist
com.apple.trustd.plist
com.apple.TrustEvaluationAgent.system.plist
com.apple.ucupdate.plist
com.apple.uninstalld.plist
com.apple.unmountassistant.sysagent.plist
com.apple.updateEFIDesktopPicture.plist
com.apple.usbd.plist
com.apple.usbmuxd.plist
com.apple.UserEventAgent-System.plist
com.apple.UserNotificationCenter.plist
com.apple.uucp.plist
com.apple.var-db-dslocal-backup.plist
com.apple.vsdbutil.plist
com.apple.warmd.plist
com.apple.watchdogd.plist
com.apple.wdhelper.plist
com.apple.wifid.plist
com.apple.wifivelocityd.plist
com.apple.WindowServer.plist
com.apple.wirelessproxd.plist
com.apple.WirelessRadioManagerd-osx.plist
com.apple.wwand.plist
com.apple.xpc.smd.plist
com.apple.xpc.uscwoap.plist
com.apple.xsan.plist
com.apple.xsandaily.plist
com.apple.xscertadmin.plist
com.apple.xscertd-helper.plist
com.apple.xscertd.plist
com.vix.cron.plist
finger.plist
ftp.plist
ntalk.plist
org.apache.httpd.plist
org.cups.cups-lpd.plist
org.cups.cupsd.plist
org.net-snmp.snmpd.plist
org.ntp.ntpd.plist
org.openldap.slapd.plist
org.postfix.master.plist
ssh.plist
telnet.plist
tftp.plist




------------------------- ▼ -------------------------



Bluetooth Hardware Info:

Bluetooth Low Energy Supported: Yes
          Handoff Supported: Yes
          Instant Hot Spot Supported: Yes
         
Bluetooth Power: Off
          Auto Seek Pointing: On
          Remote wake: On
         


Network Info:

/etc/hosts -count: 10

Network:

    Bluetooth DUN:

      Type: PPP (PPPSerial)
      Hardware: Modem
      BSD Device Name: Bluetooth-Modem
      IPv4:
          Configuration Method: PPP
      IPv6:
          Configuration Method: Automatic
      Proxies:
          FTP Passive Mode: Yes
      Service Order: 0

    Ethernet:

      Type: Ethernet
      Hardware: Ethernet
      BSD Device Name: en0
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Ethernet:
          MAC Address: 10:dd:b1:a7:3f:01
          Media Options:
          Media Subtype: none
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 1

    FireWire:

      Type: FireWire
      Hardware: FireWire
      BSD Device Name: fw0
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Ethernet:
          MAC Address: 10:dd:b1:ff:fe:7d:c4:20
          Media Options: Full Duplex
          Media Subtype: Auto Select
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 2

    Wi-Fi:

      Type: AirPort
      Hardware: AirPort
      BSD Device Name: en1
      IPv4 Addresses: 192.168.2.106
      IPv4:
          AdditionalRoutes:
              DestinationAddress: 192.168.2.106
              SubnetMask: 255.255.255.255
          Addresses: 192.168.2.106
          ARPResolvedHardwareAddress: 00:1a:2a:0f:b8:20
          ARPResolvedIPAddress: 192.168.2.1
          Configuration Method: DHCP
          ConfirmedInterfaceName: en1
          Interface Name: en1
          Network Signature: IPv4.Router=192.168.2.1;IPv4.RouterHardwareAddress=00:1a:2a:0f:b8:20
          Router: 192.168.2.1
          Subnet Masks: 255.255.255.0
      IPv6:
          Configuration Method: Automatic
      DNS:
          Domain Name: Speedport_W_700V
          Server Addresses: 192.168.2.1
      DHCP Server Responses:
          Domain Name: Speedport_W_700V
          Domain Name Servers: 192.168.2.1
          Lease Duration (seconds): 0
          DHCP Message Type: 0x05
          Routers: 192.168.2.1
          Server Identifier: 192.168.2.1
          Subnet Mask: 255.255.255.0
      Ethernet:
          MAC Address: 4c:8d:79:e6:c7:9c
          Media Options:
          Media Subtype: Auto Select
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 3

    Bluetooth PAN:

      Type: Ethernet
      Hardware: Ethernet
      BSD Device Name: en2
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 4

    Thunderbolt 1:

      Type: Ethernet
      Hardware: Ethernet
      BSD Device Name: en3
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Ethernet:
          MAC Address: d2:00:17:dc:42:00
          Media Options: Full Duplex
          Media Subtype: Auto Select
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 5

    iPhone:

      Type: Ethernet
      Hardware: Ethernet
      BSD Device Name: en4
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 6





------------------------- ▼ -------------------------



Disk Information:

Storage:

    Macintosh HD:

      Available: 150,83 GB (150.827.024.384 bytes)
      Capacity: 498,88 GB (498.876.809.216 bytes)
      Mount Point: /
      File System: Journaled HFS+
      Writable: Yes
      Ignore Ownership: No
      BSD Name: disk1
      Volume UUID: 5F917158-9EDA-3EDC-B7FC-FC826577D32C
      Logical Volume:
          Revertible: Yes (no decryption required)
          Encrypted: No
          LV UUID: D578AEC0-DD89-45BB-9E59-496183A7ACD3
      Logical Volume Group:
          Name: Macintosh HD
          Size: 499,25 GB (499.248.103.424 bytes)
          Free Space: 19 MB (18.972.672 bytes)
          LVG UUID: 1DDCBA93-B35D-4EA9-A951-018F308405A6
      Physical Volumes:
        disk0s2:
          Device Name: APPLE HDD HTS547550A9E384
          Media Name: APPLE HDD HTS547550A9E384 Media
          Size: 499,25 GB (499.248.103.424 bytes)
          Medium Type: Rotational
          Protocol: SATA
          Internal: Yes
          Partition Map Type: GPT (GUID Partition Table)
          Status: Online
          S.M.A.R.T. Status: Verified
          PV UUID: 5AC236B2-93DA-4FD6-B4CC-F4BA9B4B6AD7

    Malwarebytes Anti-Malware:

      Available: 14,4 MB (14.397.440 bytes)
      Capacity: 33,5 MB (33.513.472 bytes)
      Mount Point: /Volumes/Malwarebytes Anti-Malware
      File System: HFS+
      Writable: No
      Ignore Ownership: Yes
      BSD Name: disk2s1
      Volume UUID: 06196351-CD4D-3EE7-A48D-04F2F328A088
      Physical Drive:
          Device Name: Disk Image
          Media Name: Apple UDIF, nur Lesen, komprimiert (zlib) Media
          Protocol: Disk Image
          Internal: No
          Partition Map Type: GPT (GUID Partition Table)

Dante12 26.11.2016 12:02
Schritt 4:
  • Klicke auf den Finder und drücke die Tasten CMD + Shift + G
  • Füge folgendes in das kleine Fenster ein: /Library/Application Support/
  • Drücke Enter und lösche in diesem Ordner folgende Einträge (du benötigst dein Passwort).

Antivirus for Mac
Avira

Bei GDATA bin ich mir nicht sicher - war es eine vorherige Antivirus Installation? - wenn ja, kannst du diesen Ordner auch löschen.

Wichtig: Bitte nicht den Order "Application Support" oder "Library" löschen nur das was in ROT markiert ist.

Wie läuft der Rechner jetzt?

Anette 26.11.2016 15:36
Super, vielen Dank. Läuft auf jeden Fall schneller.
Ist es nicht etwas ungewöhnlich, dass ich auf einem Mac gleich 2 Trojaner bekomme?
Und woher kommen die denn?
Welche Programme könnte ich gegen Viren & Trojaner installieren?
Kann das irgendwas angerichtet haben? Muss ich Passwörter ändern, Konten kontrollieren usw?
Tausend Dank schon mal für deine Hilfe! Werde anschließend gleich spenden :-)

Bin doch noch auf etwas gestoßen: wenn ich surfe (Safari) kommt hin und wieder folgender Fehler:

Safari-Webinhalt wurde unerwartet beendet.

Kann das was mit den Trojanern zu tun haben?

Danke für deine Hilfe!

Dante12 26.11.2016 16:34
Du hattest irgendwann mal Mackeeper installiert bzw. eine Software die Mackeeper quasi "huckepack" mitinstalliert hatte. Mackeeper seinerseits installiert noch zusätzlich Software die mit seiner Funktion keinerlei Bezug hat. Dies sind keine Trojaner sondern Adware (also Software die ohne dein Wissen) installiert wird.

https://www.ifun.de/mackeeper-fragwu...tertuer-79814/

Der Mac ist in den meisten Fällen gegen Malware durch Gatekeeper und XProtect geschützt. Bring also von Haus aus eigene Sicherheitsmechanismen.

Natürlich versuchen solche Programme diese Mechanismen zu umgehen in den meisten Fällen funktioniert das nicht aber es gibt ausnahmen, da hilft auch keine zusätzliche AV-Software.

Zu Safari:

Lösche bitte mal den Cache, gehe zum Menu -> Safari und Verlauf löschen... wähle dort gesamten Verlauf und test ob es geholfen hat.

Kannst du bitte den Link posten mit welchen das Problem auftritt? - Danke.


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:59 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131