Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Mac OSX & Linux (https://www.trojaner-board.de/alles-rund-um-mac-osx-linux/)
-   -   Virus googleads auf Macbook (https://www.trojaner-board.de/183841-virus-googleads-macbook.html)

Dante12 09.01.2017 22:18

Hast du geprüft ob bei Safari Java aktiviert ist? Einstellungen -> Sicherheit -> Plub-In Einstellungen. Läuft es mit anderen Browsern?

Prüfe bitte auch ob unter Systemeinstellungen -> Java das Browser-Plugin aktiviert ist.

runkeldulz 10.01.2017 07:41

Hallo
Ja, ist aktiviert. Ich meine, dieser Client ist auch installiert, aber er öffnet sich nicht. Ich hab ihn in den Dock geschoben und wenn ich ihn anklicke, "springt" das Icon auch ein wenig nach oben, nur kommt kein Punkt darunter als Zeichen dafür, dass die Anwendung geöffnet hat.

Gruss,
runkeldulz

Dante12 10.01.2017 15:20

Bittel lade dir die Anwendung noch mal herunter und installier diese erneut.

runkeldulz 10.01.2017 16:23

Same Same, es läuft nicht.
Kann es sein, dass das alles was mit dem Mac Update vom 2.1.2017 zu tun hat. Danach meine ich hatte ich den Virus/Trojaner und letztendlich auch das Problem mit dem Client (Problem mit dem Client kam nach dem Virus). Könnte es auch sein, dass der Virus oder Trojaner noch nicht komplett beseitigt ist auf dem Mac?

Gruss, runkeldulz

Mir fällt noch ein, dass ich den Adobe Flash Player installiert habe und diesen MacKeeper. Vielleicht hilft das zur Aufklärung. Der Client der brettspielwelt.de war seit November 2016 installiert und lief.

Dante12 10.01.2017 20:01

EtreCheck installieren
  1. Lade dir bitte EtreCheck herunter.
  2. Entpacken und Ausführen.
  3. Klicke auf das Pull-Down Menü und wähle No Problem - Just Checking, anschliessend auf Start Etrecheck
  4. Nach Abschluss erscheint das Fenster mit dem Log. Klicke oben links auf den Button Share Report und anschließend Copy Report.
  5. Das Log befindet sich nun in der Zwischenablage (Clipboard). Füge den Inhalt mit Command-V hier in dein Thema ein. Bitte in Code-Tags siehe Lesestoff.

Öffne bitte dein Terminal und gebe folgendes ein:

Code:

cd /Applications/
ls
open <Anwendung>

Ersetze <Anwendung> mit den Namen den du für Brettspielwelt startest ohne <> Klammern.

Wenn eine Ausgabe (Fehlermeldung) erscheint bitte diese Kopieren und hier zusammen mit den EtreCheck-Log einfügen.

Mit Mac Update meinst du, du hast dein System erstkürzlich auf macOS Sierra aktualisiert und lief es bereits unter Sierra.

runkeldulz 10.01.2017 20:38

Ja, es gab am 2.1.2017 ein Update, woher hatte ich auch Sierra, alles hat funktioniert.

EtreCheck Logfile

Code:

EtreCheck version: 3.1.5 (343)
Report generated 2017-01-10 20:31:12
Download EtreCheck from https://etrecheck.com
Runtime 1:43
Performance: Excellent

Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.

Problem: No problem - just checking

Hardware Information: ⓘ
    MacBook Pro (Retina, 13-inch, Early 2015)
    [Technical Specifications] - [User Guide] - [Warranty & Service]
    MacBook Pro - model: MacBookPro12,1
    1 2,7 GHz Intel Core i5 (i5-5257U) CPU: 2-core
    8 GB RAM Not upgradeable
        BANK 0/DIMM0
            4 GB DDR3 1867 MHz ok
        BANK 1/DIMM0
            4 GB DDR3 1867 MHz ok
    Bluetooth: Good - Handoff/Airdrop2 supported
    Wireless:  en0: 802.11 a/b/g/n/ac
    Battery: Health = Normal - Cycle count = 16

Video Information: ⓘ
    Intel Iris Graphics 6100
        Color LCD 2560 x 1600

System Software: ⓘ
    macOS Sierra  10.12.2 (16C67) - Time since boot: less than an hour

Disk Information: ⓘ
    APPLE SSD SM0256G disk0 : (251 GB) (Solid State - TRIM: Yes)
    [Show SMART report]
        EFI (disk0s1) <not mounted> : 210 MB
        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
        Macintosh HD (disk1) /  [Startup]: 249.78 GB (214.45 GB free)
            Encrypted AES-XTS Unlocked
            Core Storage: disk0s2 250.14 GB Online

USB Information: ⓘ
    Broadcom Corp. Bluetooth USB Host Controller

Thunderbolt Information: ⓘ
    Apple Inc. thunderbolt_bus

Gatekeeper: ⓘ
    Mac App Store and identified developers

Kernel Extensions: ⓘ
        /Library/Extensions
    [loaded]    com.kaspersky.kext.klif (3.4.2a30 - 2017-01-08) [Support]
    [loaded]    com.kaspersky.nke (2.1.0 - 2017-01-08) [Support]

System Launch Agents: ⓘ
    [not loaded]    7 Apple tasks
    [loaded]    183 Apple tasks
    [running]    90 Apple tasks

System Launch Daemons: ⓘ
    [not loaded]    42 Apple tasks
    [loaded]    169 Apple tasks
    [running]    100 Apple tasks

Launch Agents: ⓘ
    [loaded]    com.oracle.java.Java-Updater.plist (2017-01-09) [Support]

Launch Daemons: ⓘ
    [loaded]    com.malwarebytes.HelperTool.plist (2017-01-07) [Support]
    [loaded]    com.microsoft.autoupdate.helper.plist (2016-12-16) [Support]
    [loaded]    com.microsoft.office.licensingV2.helper.plist (2016-10-10) [Support]
    [loaded]    com.oracle.java.Helper-Tool.plist (2016-11-09) [Support]

User Login Items: ⓘ
    iTunesHelper    Programm  (2016-12-16)
        (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
    Garmin Express Service    Programm  (2016-12-27)
        (/Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app)

Internet Plug-ins: ⓘ
    QuickTime Plugin: 7.7.3 (2017-01-02)
    JavaAppletPlugin: Java 8 Update 111 build 14 (2017-01-09) Check version

3rd Party Preference Panes: ⓘ
    Java (2017-01-09) [Support]

Time Machine: ⓘ
    Time Machine not configured!

Top Processes by CPU: ⓘ
        6%          WindowServer
        6%          kernel_task
        3%          Mail
        2%          SystemUIServer
        2%          fontd

Top Processes by Memory: ⓘ
    659 MB            kernel_task
    451 MB            com.apple.WebKit.WebContent(3)
    401 MB            mdworker(17)
    287 MB            Mail
    131 MB            WindowServer

Virtual Memory Information: ⓘ
    4.94 GB          Available RAM
    3.13 GB          Free RAM
    3.06 GB          Used RAM
    1.81 GB          Cached files
    0 B              Swap Used

Diagnostics Information: ⓘ
    Jan 10, 2017, 08:20:15 PM    Self test - passed
    Jan 7, 2017, 10:16:48 PM    /Library/Logs/DiagnosticReports/AirPlayXPCHelper_2017-01-07-221648_[redacted].crash
        /usr/libexec/AirPlayXPCHelper

Im Terminal

Code:

Last login: Tue Jan 10 20:20:20 on console
Susannes-MBP:~ susannestampf$ cd /Applications/
Susannes-MBP:Applications susannestampf$ ls
App Store.app                        Microsoft Outlook.app
Automator.app                        Microsoft PowerPoint.app
BrettspielWelt                        Microsoft Word.app
Calculator.app                        Mission Control.app
Calendar.app                        Notes.app
Chess.app                        Numbers.app
Contacts.app                        Pages.app
DVD Player.app                        Photo Booth.app
Dashboard.app                        Photos.app
Dictionary.app                        Preview.app
FaceTime.app                        QuickTime Player.app
Font Book.app                        Reminders.app
GarageBand.app                        Safari.app
Garmin Express.app                Siri.app
Image Capture.app                Skype.app
Keynote.app                        Stickies.app
Launchpad.app                        System Preferences.app
Mail.app                        TextEdit.app
Malwarebytes Anti-Malware.app        Time Machine.app
Maps.app                        Utilities
Messages.app                        iBooks.app
Microsoft Excel.app                iMovie.app
Microsoft OneNote.app                iTunes.app
Susannes-MBP:Applications susannestampf$ cd Brettspielwelt
Susannes-MBP:Brettspielwelt susannestampf$ ls
BrettspielWelt.app        back.gif                mg32x32.gif
Brettspielwelt.prop        de                        starterPics
Icon?                        localized                update.info
Susannes-MBP:Brettspielwelt susannestampf$ open BrettspielWelt.app
LSOpenURLsWithRole() failed with error -10810 for the file /Applications/BrettspielWelt/BrettspielWelt.app.
Susannes-MBP:Brettspielwelt susannestampf$


Dante12 10.01.2017 20:48

Hast du Kaspersky deinstalliert?

runkeldulz 10.01.2017 20:57

Ja. Braucht man den überhaupt ein Anti-Viren-Programm auf dem Mac?

Gruss!

Dante12 10.01.2017 21:10

Da sind nämlich noch zwei kernel-Treiber die gestartet werden...

Öffne bitte Spotlight (CMD + Space), füge folgenden Pfad ein und drücke Enter:
Code:

/Library/Extensions/
Lösche folgende Einträge:
com.kaspersky.kext.klif
com.kaspersky.nke


Wichtig:
  • Neustart des Rechners
  • Shift-Taste gedrückt halte um in den Safe Mode zu kommen (siehst du oben rechts auf den Bildschirm in roter Schrift.
  • Danach den Rechner bitte herunterfahren (Ausschalten)
  • Rechner Starten und während der Ton zu hören ist, sofort die Tasten CMD + ALT + P + R gleichzeitig gedrückt halten - halte diese so lange gedrückt bis ein zweiter Ton zu hören ist.
  • Dann normal Starten

Teste bitte ob es jetzt läuft....

runkeldulz 11.01.2017 08:01

Hallo Dante,

mit CMD+Space und /Library/Extensions/ sehe ich nur Dateien mit .kext, aber nicht die beiden, die du genannt hast. Muss ich noch was machen, um diese Dateien zu sehen?

Gruss!

Dante12 11.01.2017 16:41

Lief das Programm unter Sierra auch?

Lade bitte von meinem Server sysDiag.sh herunter und verschiebe es auf deinen Desktop.
Öffne dein Terminal und gebe bitte folgendes ein (kopieren und einfügen):

Code:

cd ~/Desktop/;sh sysDiag.sh
Gebe dein Admin-Passwort ein. Nach kurzer Zeit öffnet sich ein Fenster mit dem Log. Kopiere den Inhalt und füge es bitte hier ein.

runkeldulz 11.01.2017 17:01

Hallo Dante12,
ich bin ehrlich gesagt nicht sicher, ob Sierra von Anfang drauf war. Sieht man das noch irgendwo? Kaspersky hatte ich von Anfang drauf, ebenso den Client von der Brettspielwelt, was auch funktionierte.

Anbei das Logfile

Code:

Systemlog
--------
ProductName:        Mac OS X
ProductVersion:        10.12.2
BuildVersion:        16C67
Mi 11 Jan 2017 16:59

-------------------------------------------
== Show all thirdparty kernel extensions ==
-------------------------------------------
com.kaspersky.kext.klif(3.4.2a30)
com.kaspersky.nke(2.3.1a8)

----------------------------------------------
== Show all thirdparty launch services USER ==
----------------------------------------------
com.openssh.ssh-agent
com.oracle.java.Java-Updater
com.garmin.renu.service.5772

----------------------------------------------
== Show all thirdparty launch services ROOT ==
----------------------------------------------
org.postfix.master
com.malwarebytes.HelperTool
org.cups.cupsd
com.oracle.java.Helper-Tool
com.vix.cron
com.microsoft.office.licensingV2.helper
org.ntp.ntpd
com.microsoft.autoupdate.helper

----------------------------------
== Show all thirdparty packages ==
----------------------------------
com.garmin.renu.client
com.mackeeper.MacKeeper.affid.pkg
com.mackeeper.MacKeeper.pkg
com.macoptimizer.Root.pkg
com.microsoft.package.component
com.microsoft.package.Fonts
com.microsoft.package.Frameworks
com.microsoft.package.Microsoft_AutoUpdate.app
com.microsoft.package.Microsoft_Excel.app
com.microsoft.package.Microsoft_OneNote.app
com.microsoft.package.Microsoft_Outlook.app
com.microsoft.package.Microsoft_PowerPoint.app
com.microsoft.package.Microsoft_Word.app
com.microsoft.package.Proofing_Tools
com.microsoft.pkg.licensing
com.oracle.jre
de.pixel-paws.desktopchat

------------------------------------------------
== Show all extensions in the library folders ==
------------------------------------------------
/Library/Components:

/Library/Extensions:
ACS6x.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
BJUSBLoad.kext
CIJUSBLoad.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
PromiseSTEX.kext
SoftRAID.kext
klif.kext
klnke.kext

/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:
Disabled Plug-Ins
JavaAppletPlugin.plugin
Quartz Composer.webplugin

/Library/Keyboard Layouts:

/Library/LaunchAgents:
com.oracle.java.Java-Updater.plist

/Library/LaunchDaemons:
com.malwarebytes.HelperTool.plist
com.microsoft.autoupdate.helper.plist
com.microsoft.office.licensingV2.helper.plist
com.oracle.java.Helper-Tool.plist

/Library/PreferencePanes:
JavaControlPanel.prefPane

/Library/PrivilegedHelperTools:
com.malwarebytes.HelperTool
com.microsoft.autoupdate.helper
com.microsoft.office.licensingV2.helper

/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator

/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component

/Library/ScriptingAdditions:

/Library/Services:
KAVService.service

/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter

/Library/StartupItems:

/etc/mach_init.d:

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

--------------------------
== Show all login items ==
--------------------------
 
iTunesHelper, Garmin Express Service
------------------------
== Additional Content ==
------------------------
 
Library/Application Scripts
 
com.apple.AddressBook
com.apple.AddressBook.ABPersonViewService
com.apple.AddressBook.ContactsAccountsService
com.apple.AddressBook.FaceTimeService
com.apple.AddressBook.MapLauncher
com.apple.AddressBook.UrlForwarder
com.apple.AirPlayUIAgent
com.apple.BKAgentService
com.apple.CalendarAgent
com.apple.CalendarFileHandler
com.apple.CalendarNotification.CalNCService
com.apple.CaptiveNetworkAssistant
com.apple.Chess
com.apple.CloudDocsDaemon.StorageManagement
com.apple.CloudPhotosConfiguration
com.apple.ContactsAgent
com.apple.ContactsUI.ContactPickerService
com.apple.CryptoTokenKit.pivtoken
com.apple.CryptoTokenKit.setoken
com.apple.DataDetectors.DataDetectorsActionService
com.apple.DataDetectorsLocalSources
com.apple.Dictionary
com.apple.FaceTime
com.apple.ImageKit.RecentPictureService
com.apple.IntlTexts.KeyboardServicesHelper
com.apple.Localization.SetDefaultsService
com.apple.MailCacheDelete
com.apple.MailServiceAgent
com.apple.Maps
com.apple.MarkupUI.Markup
com.apple.MarkupUI.MarkupPhotoExtension
com.apple.MediaLibraryService
com.apple.NetworkExtension.IKEv2Provider
com.apple.Notes
com.apple.OSDUIHelper
com.apple.Pass-Viewer
com.apple.PassKit.PaymentAuthorizationUIExtension
com.apple.PassXPCService
com.apple.PhotoBooth
com.apple.PhotoIngestService
com.apple.PhotoLibraryMigrationUtility
com.apple.PhotoThemeService
com.apple.Photos
com.apple.Photos.StorageManagementExtension
com.apple.PressAndHold
com.apple.Preview
com.apple.QuickTimePlayerX
com.apple.STMExtension.Applications
com.apple.STMExtension.GarageBand
com.apple.STMExtension.Mail
com.apple.STMExtension.OtherUsers
com.apple.STMExtension.Trash
com.apple.STMExtension.iOSFiles
com.apple.STMFramework.UIHelper
com.apple.Safari.CacheDeleteExtension
com.apple.ScreenSharing
com.apple.Siri
com.apple.SocialPushAgent
com.apple.TextEdit
com.apple.WeatherKitService
com.apple.accessibility.heard
com.apple.accessibility.mediaaccessibilityd
com.apple.appstore
com.apple.appstore.PluginXPCService
com.apple.calculator
com.apple.cloudphotosd
com.apple.coremedia.pluginformatreader
com.apple.corerecents.recentsd
com.apple.ctkahp
com.apple.diagnosticextensions.osx.bluetooth
com.apple.diagnosticextensions.osx.filevault
com.apple.diagnosticextensions.osx.getmobilityinfo
com.apple.diagnosticextensions.osx.installlog
com.apple.diagnosticextensions.osx.maillogs
com.apple.diagnosticextensions.osx.safari
com.apple.diagnosticextensions.osx.spotlight
com.apple.diagnosticextensions.osx.syslog
com.apple.diagnosticextensions.osx.systemprofile
com.apple.diagnosticextensions.osx.timemachine
com.apple.diagnosticextensions.osx.wifi
com.apple.garageband10
com.apple.geod
com.apple.grapher
com.apple.iBooks.CacheDelete
com.apple.iBooksX
com.apple.iBooksX-SecureUserDefaults
com.apple.iBooksX.DiskSpaceEfficiency
com.apple.iCal
com.apple.iCal.CalendarNC
com.apple.iChat
com.apple.iMovieApp
com.apple.iTunesCacheExtension
com.apple.iTunesStorageExtension
com.apple.iWork.Keynote
com.apple.iWork.Numbers
com.apple.iWork.Pages
com.apple.languageassetd
com.apple.lateragent
com.apple.mail
com.apple.mediaanalysisd
com.apple.messages.MapRenderingService
com.apple.ncplugin.FindMyFriends
com.apple.ncplugin.WorldClock
com.apple.ncplugin.calculator
com.apple.ncplugin.weather
com.apple.photoanalysisd
com.apple.photolibraryd
com.apple.photomodel
com.apple.photomoments
com.apple.photos.ImageConversionService
com.apple.photos.VideoConversionService
com.apple.print.PKBrowserService
com.apple.quicklook.ui.helper
com.apple.reminders
com.apple.reminders.RemindersNC
com.apple.share.AirDrop.send
com.apple.share.CloudSharing.invite
com.apple.share.Facebook.post
com.apple.share.Facebook.set-profile-image
com.apple.share.LinkedIn.post
com.apple.share.LinkedIn.set-profile-image
com.apple.share.Mail.compose
com.apple.share.Mail.compose-back-to-sender
com.apple.share.SinaWeibo.post
com.apple.share.SocialWidget
com.apple.share.System.add-to-aperture
com.apple.share.System.add-to-iphoto
com.apple.share.System.add-to-safari-reading-list
com.apple.share.System.set-account-picture
com.apple.share.System.set-buddy-picture
com.apple.share.System.set-desktop-image
com.apple.share.TencentWeibo.post
com.apple.share.Twitter.post
com.apple.share.Twitter.set-profile-image
com.apple.share.Video.upload-Facebook
com.apple.share.Video.upload-Tudou
com.apple.share.Video.upload-Vimeo
com.apple.share.Video.upload-Youku
com.apple.share.Video.upload-image-Flickr
com.apple.share.Video.upload-video-Flickr
com.apple.sharekit.EntitlementsHelper
com.apple.siri.media-indexer
com.apple.soagent
com.apple.stocks
com.apple.systempreferences.cacheAssistant
com.apple.tonelibraryd
com.apple.weather
com.microsoft.Excel
com.microsoft.Office365ServiceV2
com.microsoft.Outlook
com.microsoft.Powerpoint
com.microsoft.Word
com.microsoft.errorreporting
com.microsoft.onenote.mac
de.pixel-paws.desktopchat
jp.co.canon.bj.print.app.canonijprinterutility
 
Library/Application Support
 
AddressBook
App Store
CallHistoryDB
CallHistoryTransactions
CloudDocs
CrashReporter
DiskImages
Dock
EtreCheck
Garmin
JREInstaller
Kaspersky Lab
Malwarebytes
Oracle
Preview
Quick Look
Skype
SyncServices
com.apple.TCC
com.apple.sbd
com.apple.sharedfilelist
com.apple.spotlight
com.apple.spotlight.Shortcuts
com.microsoft.ApplicationInsights
com.sqwarq.DetectX
iCloud
iLifeMediaBrowser
icdd
 
Library/Caches
 
$(CFBundleIdentifier)
CloudKit
GameKit
Garmin
GeoServices
Maps
Metadata
Microsoft
Oracle.MacJREInstaller
PassKit
QCCompositionRepository-com.apple.iTunes.cache
com.apple.AddressBookSourceSync
com.apple.CommerceKit.TransactionService
com.apple.DictionaryServices
com.apple.QuickLookDaemon
com.apple.Safari
com.apple.SystemProfiler
com.apple.akd
com.apple.appstore
com.apple.bird
com.apple.cache_delete
com.apple.commerce
com.apple.commerce.safari
com.apple.commerce.spotlight
com.apple.dashboard.client
com.apple.gamed
com.apple.helpd
com.apple.helpviewer
com.apple.iCloudHelper
com.apple.iTunes
com.apple.icloud.fmfd
com.apple.imfoundation.IMRemoteURLConnectionAgent
com.apple.keyboardservicesd
com.apple.mail
com.apple.mobilenotes.persistentstoreopen.lock
com.apple.nbagent
com.apple.nsservicescache.plist
com.apple.nsurlsessiond
com.apple.parsecd
com.apple.passd
com.apple.preferencepanes.searchindexcache
com.apple.preferencepanes.usercache
com.apple.spotlight
com.apple.systempreferences
com.etresoft.EtreCheck
com.garmin.renu.service
com.kaspersky.kpm.downloader
com.malwarebytes.Malwarebytes-XPC-Service
com.malwarebytes.antimalware
com.microsoft.autoupdate.fba
com.mopt.hmopt
com.oracle.java.Java-Updater
com.plausiblelabs.crashreporter.data
com.skype.skype
net.java.openjdk.cmd
storeaccountd
storeassetd
storeinappd
 
Library/Containers
 
com.apple.AddressBook
com.apple.AddressBook.ABPersonViewService
com.apple.AddressBook.ContactsAccountsService
com.apple.AddressBook.FaceTimeService
com.apple.AddressBook.InternetAccountsBridge
com.apple.AddressBook.MapLauncher
com.apple.AddressBook.UrlForwarder
com.apple.AirPlayUIAgent
com.apple.BKAgentService
com.apple.CalendarAgent
com.apple.CalendarAgent.CalNCService
com.apple.CalendarFileHandler
com.apple.CalendarNotification.CalNCService
com.apple.CaptiveNetworkAssistant
com.apple.Chess
com.apple.CloudDocsDaemon.StorageManagement
com.apple.CloudPhotosConfiguration
com.apple.ContactsAgent
com.apple.ContactsUI.ContactPickerService
com.apple.CryptoTokenKit.pivtoken
com.apple.CryptoTokenKit.setoken
com.apple.DataDetectors.DataDetectorsActionService
com.apple.DataDetectorsDynamicData
com.apple.DataDetectorsLocalSources
com.apple.Dictionary
com.apple.FaceTime
com.apple.ICPPhotoStreamLibraryService
com.apple.ImageKit.RecentPictureService
com.apple.InputMethodKit.TextReplacementService
com.apple.IntlTexts.KeyboardServicesHelper
com.apple.Localization.SetDefaultsService
com.apple.MailCacheDelete
com.apple.MailServiceAgent
com.apple.Maps
com.apple.MarkupUI.Markup
com.apple.MarkupUI.MarkupPhotoExtension
com.apple.MediaLibraryService
com.apple.NetworkExtension.IKEv2Provider
com.apple.Notes
com.apple.OSDUIHelper
com.apple.Pass-Viewer
com.apple.PassKit.PaymentAuthorizationUIExtension
com.apple.PassXPCService
com.apple.PhotoBooth
com.apple.PhotoIngestService
com.apple.PhotoLibraryMigrationUtility
com.apple.PhotoThemeService
com.apple.Photos
com.apple.Photos.StorageManagementExtension
com.apple.PressAndHold
com.apple.Preview
com.apple.QuickTimePlayerX
com.apple.RemindersNC
com.apple.STMExtension.Applications
com.apple.STMExtension.GarageBand
com.apple.STMExtension.Mail
com.apple.STMExtension.OtherUsers
com.apple.STMExtension.Trash
com.apple.STMExtension.iOSFiles
com.apple.STMFramework.UIHelper
com.apple.Safari.CacheDeleteExtension
com.apple.ScreenSharing
com.apple.Siri
com.apple.Siri.SiriTodayExtension
com.apple.SiriNCService
com.apple.SocialPushAgent
com.apple.TextEdit
com.apple.WeatherKitService
com.apple.accessibility.heard
com.apple.accessibility.mediaaccessibilityd
com.apple.appstore
com.apple.appstore.PluginXPCService
com.apple.calculator
com.apple.cloudphotosd
com.apple.coremedia.pluginformatreader
com.apple.corerecents.recentsd
com.apple.ctkahp
com.apple.diagnosticextensions.osx.bluetooth
com.apple.diagnosticextensions.osx.filevault
com.apple.diagnosticextensions.osx.getmobilityinfo
com.apple.diagnosticextensions.osx.installlog
com.apple.diagnosticextensions.osx.maillogs
com.apple.diagnosticextensions.osx.safari
com.apple.diagnosticextensions.osx.spotlight
com.apple.diagnosticextensions.osx.syslog
com.apple.diagnosticextensions.osx.systemprofile
com.apple.diagnosticextensions.osx.timemachine
com.apple.diagnosticextensions.osx.wifi
com.apple.garageband10
com.apple.geod
com.apple.grapher
com.apple.iBooks.CacheDelete
com.apple.iBooksX
com.apple.iBooksX-SecureUserDefaults
com.apple.iBooksX.DiskSpaceEfficiency
com.apple.iCal
com.apple.iCal.CalendarNC
com.apple.iChat
com.apple.iMovieApp
com.apple.iTunesCacheExtension
com.apple.iTunesStorageExtension
com.apple.iWork.Keynote
com.apple.iWork.Numbers
com.apple.iWork.Pages
com.apple.languageassetd
com.apple.lateragent
com.apple.mail
com.apple.mediaanalysisd
com.apple.messages.MapRenderingService
com.apple.ncplugin.FindMyFriends
com.apple.ncplugin.WorldClock
com.apple.ncplugin.calculator
com.apple.ncplugin.stocks
com.apple.ncplugin.weather
com.apple.photoanalysisd
com.apple.photolibraryd
com.apple.photomodel
com.apple.photomoments
com.apple.photos.ImageConversionService
com.apple.photos.VideoConversionService
com.apple.print.PKBrowserService
com.apple.quicklook.ui.helper
com.apple.reminders
com.apple.reminders.RemindersNC
com.apple.share.AirDrop.send
com.apple.share.CloudSharing.invite
com.apple.share.Facebook.post
com.apple.share.Facebook.set-profile-image
com.apple.share.LinkedIn.post
com.apple.share.LinkedIn.set-profile-image
com.apple.share.Mail.compose
com.apple.share.Mail.compose-back-to-sender
com.apple.share.SinaWeibo.post
com.apple.share.SocialWidget
com.apple.share.System.add-to-aperture
com.apple.share.System.add-to-iphoto
com.apple.share.System.add-to-safari-reading-list
com.apple.share.System.set-account-picture
com.apple.share.System.set-buddy-picture
com.apple.share.System.set-desktop-image
com.apple.share.TencentWeibo.post
com.apple.share.Twitter.post
com.apple.share.Twitter.set-profile-image
com.apple.share.Video.upload-Facebook
com.apple.share.Video.upload-Tudou
com.apple.share.Video.upload-Vimeo
com.apple.share.Video.upload-Youku
com.apple.share.Video.upload-image-Flickr
com.apple.share.Video.upload-video-Flickr
com.apple.sharekit.EntitlementsHelper
com.apple.siri.media-indexer
com.apple.soagent
com.apple.stocks
com.apple.systempreferences.cacheAssistant
com.apple.tonelibraryd
com.apple.weather
com.microsoft.Excel
com.microsoft.Office365ServiceV2
com.microsoft.Outlook
com.microsoft.Powerpoint
com.microsoft.Word
com.microsoft.errorreporting
com.microsoft.onenote.mac
de.pixel-paws.desktopchat
jp.co.canon.bj.print.app.canonijprinterutility
 
Library/Frameworks
 
 
Library/Group Containers
 
.SiriTodayViewExtension
2Y8XE5CQ94.com.kaspersky.mac
UBF8T346G9.Office
UBF8T346G9.OfficeOsfWebHost
UBF8T346G9.ms
com.apple.InputMethodKit.TextReplacementService
com.apple.MessagesLegacyTransferArchive
com.apple.PreviewLegacySignaturesConversion
group.com.apple.notes
 
Library/Preferences
 
.DS_Store
.GlobalPreferences.plist
ByHost
Macromedia
MobileMeAccounts.plist
com.MacOptimizer.MacOptimizer.plist
com.apple.AddressBook.plist
com.apple.AppleMultitouchMouse.plist
com.apple.AppleMultitouchTrackpad.plist
com.apple.BezelServices.plist
com.apple.CallHistorySyncHelper.plist
com.apple.CharacterPaletteIM.plist
com.apple.CharacterPicker.plist
com.apple.CommCenter.counts.plist
com.apple.CoreGraphics.plist
com.apple.DictionaryServices.plist
com.apple.FaceTime.plist
com.apple.FileStatsAgent.plist
com.apple.FolderActionsDispatcher.plist
com.apple.FollowUpUI.plist
com.apple.FontRegistry.user.plist
com.apple.GEO.plist
com.apple.HIToolbox.plist
com.apple.LaunchServices
com.apple.LaunchServices.QuarantineEventsV2
com.apple.Maps.plist
com.apple.Preferences.plist
com.apple.PubSubAgent.plist
com.apple.QuickLookDaemon.plist
com.apple.Safari.Extensions.plist
com.apple.Safari.plist
com.apple.Safari.plist.Axmaun1
com.apple.SafariCloudHistoryPushAgent.plist
com.apple.ServicesMenu.Services.plist
com.apple.SetupAssistant.plist
com.apple.SharedWebCredentials.plist
com.apple.SpeechRecognitionCore.plist
com.apple.Spotlight.plist
com.apple.SystemProfiler.plist
com.apple.TMHelperAgent.plist
com.apple.TelephonyUtilities.plist
com.apple.Terminal.plist
com.apple.TextEdit.plist
com.apple.UserAccountUpdater.plist
com.apple.WebKit.WebContent.plist
com.apple.accounts.plist
com.apple.accountsd.plist
com.apple.akd.plist
com.apple.appstore.plist
com.apple.assistant.backedup.plist
com.apple.assistant.plist
com.apple.assistant.support.plist
com.apple.bird.plist
com.apple.bookstoreagent.plist
com.apple.calculateframework.plist
com.apple.cloudpaird.plist
com.apple.cmfsyncagent.plist
com.apple.commcenter.callservices.plist
com.apple.commcenter.carrier_bundle.plist
com.apple.commcenter.device_specific_nobackup.plist
com.apple.commerce.knownclients.plist
com.apple.commerce.plist
com.apple.commerce.safari.plist
com.apple.commerce.spotlight.plist
com.apple.coreauthd.plist
com.apple.coreservices.uiagent.plist
com.apple.coreservices.useractivityd.dynamicuseractivites.plist
com.apple.coreservices.useractivityd.plist
com.apple.dashboard.client.plist
com.apple.dashboard.plist
com.apple.dock.plist
com.apple.driver.AppleBluetoothMultitouch.mouse.plist
com.apple.driver.AppleBluetoothMultitouch.trackpad.plist
com.apple.driver.AppleHIDMouse.plist
com.apple.facetime.bag.plist
com.apple.finder.plist
com.apple.finder.plist.ompWl3R
com.apple.frameworks.diskimages.diuiagent.plist
com.apple.gamecenter.plist
com.apple.gamed.plist
com.apple.help.plist
com.apple.helpd.plist
com.apple.helpviewer.plist
com.apple.iApps.plist
com.apple.iCal.plist
com.apple.iChat.AIM.plist
com.apple.iChat.Jabber.plist
com.apple.iChat.StatusMessages.plist
com.apple.iChat.Yahoo.plist
com.apple.iChat.plist
com.apple.iTunes.eq.plist
com.apple.iTunes.plist
com.apple.iTunesHelper.plist
com.apple.ibooks.plist
com.apple.icloud.fmfd.notbackedup.plist
com.apple.icloud.fmfd.plist
com.apple.identityservicesd.plist
com.apple.ids.deviceproperties.plist
com.apple.ids.service.com.apple.ess.plist
com.apple.ids.service.com.apple.madrid.plist
com.apple.ids.service.com.apple.private.ac.plist
com.apple.ids.service.com.apple.private.alloy.accessibility.switchcontrol.plist
com.apple.ids.service.com.apple.private.alloy.applepay.plist
com.apple.ids.service.com.apple.private.alloy.avconference.avctester.plist
com.apple.ids.service.com.apple.private.alloy.avconference.icloud.plist
com.apple.ids.service.com.apple.private.alloy.continuity.activity.plist
com.apple.ids.service.com.apple.private.alloy.continuity.encryption.plist
com.apple.ids.service.com.apple.private.alloy.continuity.tethering.plist
com.apple.ids.service.com.apple.private.alloy.continuity.unlock.plist
com.apple.ids.service.com.apple.private.alloy.electrictouch.plist
com.apple.ids.service.com.apple.private.alloy.facetime.audio.plist
com.apple.ids.service.com.apple.private.alloy.facetime.video.plist
com.apple.ids.service.com.apple.private.alloy.fmf.plist
com.apple.ids.service.com.apple.private.alloy.gamecenter.plist
com.apple.ids.service.com.apple.private.alloy.icloudpairing.plist
com.apple.ids.service.com.apple.private.alloy.ids.cloudmessaging.plist
com.apple.ids.service.com.apple.private.alloy.keychainsync.plist
com.apple.ids.service.com.apple.private.alloy.location.auth.plist
com.apple.ids.service.com.apple.private.alloy.location.motion.plist
com.apple.ids.service.com.apple.private.alloy.location.stream.plist
com.apple.ids.service.com.apple.private.alloy.location.usage.plist
com.apple.ids.service.com.apple.private.alloy.location.wifitilesync.plist
com.apple.ids.service.com.apple.private.alloy.maps.plist
com.apple.ids.service.com.apple.private.alloy.multiplex1.plist
com.apple.ids.service.com.apple.private.alloy.nearby.plist
com.apple.ids.service.com.apple.private.alloy.nsurlsessionproxy.plist
com.apple.ids.service.com.apple.private.alloy.phone.auth.plist
com.apple.ids.service.com.apple.private.alloy.phonecontinuity.plist
com.apple.ids.service.com.apple.private.alloy.photostream.plist
com.apple.ids.service.com.apple.private.alloy.safeview.plist
com.apple.ids.service.com.apple.private.alloy.screensharing.plist
com.apple.ids.service.com.apple.private.alloy.sms.plist
com.apple.ids.service.com.apple.private.alloy.sysdiagnose.plist
com.apple.ids.service.com.apple.private.alloy.thumper.keys.plist
com.apple.ids.service.com.apple.private.alloy.wifivelocity.plist
com.apple.ids.subservices.plist
com.apple.imagent.plist
com.apple.imdpersistence.IMDPersistenceAgent.plist
com.apple.imdsmsrecordstore.plist
com.apple.imessage.bag.plist
com.apple.imessage.plist
com.apple.imservice.ids.FaceTime.plist
com.apple.imservice.ids.iMessage.plist
com.apple.installer.plist
com.apple.ipTelephony.plist
com.apple.java.util.prefs.plist
com.apple.keyboardservicesd.plist
com.apple.loginitems.plist
com.apple.loginwindow.plist
com.apple.mail-shared.plist
com.apple.mail.plist
com.apple.menuextra.battery.plist
com.apple.menuextra.clock.plist
com.apple.metadata.SpotlightNetHelper.plist
com.apple.mmcs.plist
com.apple.ncprefs.plist
com.apple.notificationcenterui.plist
com.apple.parsecd.plist
com.apple.parsecd.plist.gZZ1Aln
com.apple.passd.plist
com.apple.preference.general.plist
com.apple.preference.trackpad.plist
com.apple.preferences.extensions.FinderSync.plist
com.apple.preferences.extensions.PhotoEditing.plist
com.apple.preferences.extensions.ServicesWithUI.plist
com.apple.preferences.extensions.ShareMenu.plist
com.apple.preferences.extensions.SharedLinks.plist
com.apple.preferences.extensions.XcodeSourceEditor.plist
com.apple.print.PrinterProxy.plist
com.apple.print.add.plist
com.apple.print.custompresets.forprinter.Canon_MG5200_series.plist
com.apple.print.makequeuesagent.plist
com.apple.registration.plist
com.apple.scheduler.plist
com.apple.screensaver.plist
com.apple.security.KCN.plist
com.apple.security.cloudkeychainproxy3.keysToRegister.plist
com.apple.sharingd.plist
com.apple.sidebarlists.plist
com.apple.sms.plist
com.apple.socialpushagent.plist
com.apple.spaces.plist
com.apple.speech.recognition.AppleSpeechRecognition.prefs.plist
com.apple.speech.voice.prefs.plist
com.apple.stockholm.plist
com.apple.suggestd.plist
com.apple.suggestions.plist
com.apple.symbolichotkeys.plist
com.apple.syncserver.plist
com.apple.systempreferences.plist
com.apple.systemsound.plist
com.apple.systemuiserver.plist
com.apple.talagent.plist
com.apple.textInput.keyboardServices.textReplacement.plist
com.apple.touristd.plist
com.apple.universalaccess.plist
com.apple.wifi.keychain-format.plist
com.apple.xpc.activity2.plist
com.etresoft.EtreCheck.plist
com.garmin.renu.client.plist
com.garmin.renu.service.plist
com.kaspersky.kav.uninstaller.plist
com.malwarebytes.antimalware.plist
com.microsoft.Excel.plist
com.microsoft.Word.plist
com.microsoft.autoupdate.fba.plist
com.microsoft.autoupdate2.plist
com.mopt.hmopt.plist
com.oracle.java.JavaAppletPlugin.plist
com.oracle.javadeployment.plist
com.skype.skype.plist
com.sqwarq.DetectX.plist
jp.co.canon.ijscanner1.scanner.ica.plist
loginwindow.plist
mbfloagent.plist
mdworker.plist
net.freemacsoft.AppCleaner.plist
org.cups.PrintingPrefs.plist
rtcpal_registry.reg
system_profiler.plist
widget-com.apple.widget.calendar.plist
widget-com.apple.widget.weather.plist
widget-com.apple.widget.weather.plist.r8CukP8
 
Library/PreferencePanes
 
 
Library/Saved Application State
 
com.apple.InstallAssistant.Sierra.savedState
com.apple.Safari.savedState
com.apple.Terminal.savedState
com.apple.appstore.savedState
com.apple.finder.savedState
com.apple.mail.savedState
net.java.openjdk.cmd.savedState
 
Library/Services
 
 
Library/WebKit
 
Databases
LocalStorage
MediaKeys
com.apple.Safari
com.apple.Spotlight
com.apple.finder
com.apple.iTunes
com.apple.mail
com.apple.systempreferences


Dante12 11.01.2017 18:28

  • Öffne bitte TextEdit z.B. über Spotlight
  • Erstelle ein neues Dokument und wähle aus dem Menü Format -> In reinen Text Umwandeln
  • Kopiere den Inhalt aus der Code-Box in TextEdit und speichere es auf dein Desktop als script.sh, beende anschliessend TextEdit und öffne dein Terminal.
In TextEdit einfügen:
Code:

#!/bin/bash

#  Script.sh
touch ~/Desktop/del.txt
cd ~/Desktop
mkdir revomedItems
p="del.txt"
sudo kextunload -b com.kaspersky.kext.klif > $p
sudo kextunload -b com.kaspersky.nke >> $p
sudo pkgutil --forget com.mackeeper.MacKeeper.affid.pkg >> $p
sudo pkgutil --forget com.mackeeper.MacKeeper.pkg >> $p
sudo pkgutil --forget com.macoptimizer.Root.pkg >> $p
mv -fv ~/Library/Application\ Support/Kaspersky\ Lab ~/Desktop/removedItems
mv -fv ~/Library/Caches/com.kaspersky.kpm.downloader ~/Desktop/removedItems
mv -fv ~/Library/Preferences/com.MacOptimizer.MacOptimizer.plist ~/Dekstop/removedItems
mv -fv ~/Library/Preferences/com.kaspersky.kav.uninstaller.plist ~/Dekstop/removedItems

open -e $p

  • Gebe im Terminal bitte folgendes ein (kopieren und einfügen):
Code:

cd ~/Desktop/;sh script.sh
  • Im neuen Fenster kopiere den Inhalt und füge es hier ein. Erstelle mit sysDiag.sh ein neues Log und füge es bitte auch hier ein.
  • Danach mache bitte einen Neustart

runkeldulz 11.01.2017 20:07

sript.sh Log

Code:

Forgot package 'com.mackeeper.MacKeeper.affid.pkg' on '/'.
Forgot package 'com.mackeeper.MacKeeper.pkg' on '/'.
Forgot package 'com.macoptimizer.Root.pkg' on '/'.

sysDiag.sh Log

Code:

Systemlog
--------
ProductName:        Mac OS X
ProductVersion:        10.12.2
BuildVersion:        16C67
Mi 11 Jan 2017 20:07

-------------------------------------------
== Show all thirdparty kernel extensions ==
-------------------------------------------

----------------------------------------------
== Show all thirdparty launch services USER ==
----------------------------------------------
com.openssh.ssh-agent
com.garmin.renu.service.5780
com.oracle.java.Java-Updater

----------------------------------------------
== Show all thirdparty launch services ROOT ==
----------------------------------------------
org.postfix.master
com.malwarebytes.HelperTool
org.cups.cupsd
com.oracle.java.Helper-Tool
com.vix.cron
com.microsoft.office.licensingV2.helper
org.ntp.ntpd
com.microsoft.autoupdate.helper

----------------------------------
== Show all thirdparty packages ==
----------------------------------
com.garmin.renu.client
com.microsoft.package.component
com.microsoft.package.Fonts
com.microsoft.package.Frameworks
com.microsoft.package.Microsoft_AutoUpdate.app
com.microsoft.package.Microsoft_Excel.app
com.microsoft.package.Microsoft_OneNote.app
com.microsoft.package.Microsoft_Outlook.app
com.microsoft.package.Microsoft_PowerPoint.app
com.microsoft.package.Microsoft_Word.app
com.microsoft.package.Proofing_Tools
com.microsoft.pkg.licensing
com.oracle.jre
de.pixel-paws.desktopchat

------------------------------------------------
== Show all extensions in the library folders ==
------------------------------------------------
/Library/Components:

/Library/Extensions:
ACS6x.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
BJUSBLoad.kext
CIJUSBLoad.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
PromiseSTEX.kext
SoftRAID.kext
klif.kext
klnke.kext

/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:
Disabled Plug-Ins
JavaAppletPlugin.plugin
Quartz Composer.webplugin

/Library/Keyboard Layouts:

/Library/LaunchAgents:
com.oracle.java.Java-Updater.plist

/Library/LaunchDaemons:
com.malwarebytes.HelperTool.plist
com.microsoft.autoupdate.helper.plist
com.microsoft.office.licensingV2.helper.plist
com.oracle.java.Helper-Tool.plist

/Library/PreferencePanes:
JavaControlPanel.prefPane

/Library/PrivilegedHelperTools:
com.malwarebytes.HelperTool
com.microsoft.autoupdate.helper
com.microsoft.office.licensingV2.helper

/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator

/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component

/Library/ScriptingAdditions:

/Library/Services:
KAVService.service

/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter

/Library/StartupItems:

/etc/mach_init.d:

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

--------------------------
== Show all login items ==
--------------------------
 
iTunesHelper, Garmin Express Service
------------------------
== Additional Content ==
------------------------
 
Library/Application Scripts
 
com.apple.AddressBook
com.apple.AddressBook.ABPersonViewService
com.apple.AddressBook.ContactsAccountsService
com.apple.AddressBook.FaceTimeService
com.apple.AddressBook.MapLauncher
com.apple.AddressBook.UrlForwarder
com.apple.AirPlayUIAgent
com.apple.BKAgentService
com.apple.CalendarAgent
com.apple.CalendarFileHandler
com.apple.CalendarNotification.CalNCService
com.apple.CaptiveNetworkAssistant
com.apple.Chess
com.apple.CloudDocsDaemon.StorageManagement
com.apple.CloudPhotosConfiguration
com.apple.ContactsAgent
com.apple.ContactsUI.ContactPickerService
com.apple.CryptoTokenKit.pivtoken
com.apple.CryptoTokenKit.setoken
com.apple.DataDetectors.DataDetectorsActionService
com.apple.DataDetectorsLocalSources
com.apple.Dictionary
com.apple.FaceTime
com.apple.ImageKit.RecentPictureService
com.apple.IntlTexts.KeyboardServicesHelper
com.apple.Localization.SetDefaultsService
com.apple.MailCacheDelete
com.apple.MailServiceAgent
com.apple.Maps
com.apple.MarkupUI.Markup
com.apple.MarkupUI.MarkupPhotoExtension
com.apple.MediaLibraryService
com.apple.NetworkExtension.IKEv2Provider
com.apple.Notes
com.apple.OSDUIHelper
com.apple.Pass-Viewer
com.apple.PassKit.PaymentAuthorizationUIExtension
com.apple.PassXPCService
com.apple.PhotoBooth
com.apple.PhotoIngestService
com.apple.PhotoLibraryMigrationUtility
com.apple.PhotoThemeService
com.apple.Photos
com.apple.Photos.StorageManagementExtension
com.apple.PressAndHold
com.apple.Preview
com.apple.QuickTimePlayerX
com.apple.STMExtension.Applications
com.apple.STMExtension.GarageBand
com.apple.STMExtension.Mail
com.apple.STMExtension.OtherUsers
com.apple.STMExtension.Trash
com.apple.STMExtension.iOSFiles
com.apple.STMFramework.UIHelper
com.apple.Safari.CacheDeleteExtension
com.apple.ScreenSharing
com.apple.Siri
com.apple.SocialPushAgent
com.apple.TextEdit
com.apple.WeatherKitService
com.apple.accessibility.heard
com.apple.accessibility.mediaaccessibilityd
com.apple.appstore
com.apple.appstore.PluginXPCService
com.apple.calculator
com.apple.cloudphotosd
com.apple.coremedia.pluginformatreader
com.apple.corerecents.recentsd
com.apple.ctkahp
com.apple.diagnosticextensions.osx.bluetooth
com.apple.diagnosticextensions.osx.filevault
com.apple.diagnosticextensions.osx.getmobilityinfo
com.apple.diagnosticextensions.osx.installlog
com.apple.diagnosticextensions.osx.maillogs
com.apple.diagnosticextensions.osx.safari
com.apple.diagnosticextensions.osx.spotlight
com.apple.diagnosticextensions.osx.syslog
com.apple.diagnosticextensions.osx.systemprofile
com.apple.diagnosticextensions.osx.timemachine
com.apple.diagnosticextensions.osx.wifi
com.apple.garageband10
com.apple.geod
com.apple.grapher
com.apple.iBooks.CacheDelete
com.apple.iBooksX
com.apple.iBooksX-SecureUserDefaults
com.apple.iBooksX.DiskSpaceEfficiency
com.apple.iCal
com.apple.iCal.CalendarNC
com.apple.iChat
com.apple.iMovieApp
com.apple.iTunesCacheExtension
com.apple.iTunesStorageExtension
com.apple.iWork.Keynote
com.apple.iWork.Numbers
com.apple.iWork.Pages
com.apple.languageassetd
com.apple.lateragent
com.apple.mail
com.apple.mediaanalysisd
com.apple.messages.MapRenderingService
com.apple.ncplugin.FindMyFriends
com.apple.ncplugin.WorldClock
com.apple.ncplugin.calculator
com.apple.ncplugin.weather
com.apple.photoanalysisd
com.apple.photolibraryd
com.apple.photomodel
com.apple.photomoments
com.apple.photos.ImageConversionService
com.apple.photos.VideoConversionService
com.apple.print.PKBrowserService
com.apple.quicklook.ui.helper
com.apple.reminders
com.apple.reminders.RemindersNC
com.apple.share.AirDrop.send
com.apple.share.CloudSharing.invite
com.apple.share.Facebook.post
com.apple.share.Facebook.set-profile-image
com.apple.share.LinkedIn.post
com.apple.share.LinkedIn.set-profile-image
com.apple.share.Mail.compose
com.apple.share.Mail.compose-back-to-sender
com.apple.share.SinaWeibo.post
com.apple.share.SocialWidget
com.apple.share.System.add-to-aperture
com.apple.share.System.add-to-iphoto
com.apple.share.System.add-to-safari-reading-list
com.apple.share.System.set-account-picture
com.apple.share.System.set-buddy-picture
com.apple.share.System.set-desktop-image
com.apple.share.TencentWeibo.post
com.apple.share.Twitter.post
com.apple.share.Twitter.set-profile-image
com.apple.share.Video.upload-Facebook
com.apple.share.Video.upload-Tudou
com.apple.share.Video.upload-Vimeo
com.apple.share.Video.upload-Youku
com.apple.share.Video.upload-image-Flickr
com.apple.share.Video.upload-video-Flickr
com.apple.sharekit.EntitlementsHelper
com.apple.siri.media-indexer
com.apple.soagent
com.apple.stocks
com.apple.systempreferences.cacheAssistant
com.apple.tonelibraryd
com.apple.weather
com.microsoft.Excel
com.microsoft.Office365ServiceV2
com.microsoft.Outlook
com.microsoft.Powerpoint
com.microsoft.Word
com.microsoft.errorreporting
com.microsoft.onenote.mac
de.pixel-paws.desktopchat
jp.co.canon.bj.print.app.canonijprinterutility
 
Library/Application Support
 
AddressBook
App Store
CallHistoryDB
CallHistoryTransactions
CloudDocs
CrashReporter
DiskImages
Dock
EtreCheck
Garmin
JREInstaller
Kaspersky Lab
Malwarebytes
Oracle
Preview
Quick Look
Skype
SyncServices
com.apple.TCC
com.apple.sbd
com.apple.sharedfilelist
com.apple.spotlight
com.apple.spotlight.Shortcuts
com.microsoft.ApplicationInsights
com.sqwarq.DetectX
iCloud
iLifeMediaBrowser
icdd
 
Library/Caches
 
$(CFBundleIdentifier)
CloudKit
GameKit
Garmin
GeoServices
Maps
Metadata
Microsoft
Oracle.MacJREInstaller
PassKit
QCCompositionRepository-com.apple.iTunes.cache
com.apple.AddressBookSourceSync
com.apple.CommerceKit.TransactionService
com.apple.DictionaryServices
com.apple.QuickLookDaemon
com.apple.Safari
com.apple.SystemProfiler
com.apple.akd
com.apple.appstore
com.apple.bird
com.apple.cache_delete
com.apple.commerce
com.apple.commerce.safari
com.apple.commerce.spotlight
com.apple.dashboard.client
com.apple.gamed
com.apple.helpd
com.apple.helpviewer
com.apple.iCloudHelper
com.apple.iTunes
com.apple.icloud.fmfd
com.apple.imfoundation.IMRemoteURLConnectionAgent
com.apple.keyboardservicesd
com.apple.mail
com.apple.mobilenotes.persistentstoreopen.lock
com.apple.nbagent
com.apple.nsservicescache.plist
com.apple.nsurlsessiond
com.apple.parsecd
com.apple.passd
com.apple.preferencepanes.searchindexcache
com.apple.preferencepanes.usercache
com.apple.spotlight
com.apple.systempreferences
com.etresoft.EtreCheck
com.garmin.renu.service
com.malwarebytes.Malwarebytes-XPC-Service
com.malwarebytes.antimalware
com.microsoft.autoupdate.fba
com.mopt.hmopt
com.oracle.java.Java-Updater
com.plausiblelabs.crashreporter.data
com.skype.skype
net.java.openjdk.cmd
storeaccountd
storeassetd
storeinappd
 
Library/Containers
 
com.apple.AddressBook
com.apple.AddressBook.ABPersonViewService
com.apple.AddressBook.ContactsAccountsService
com.apple.AddressBook.FaceTimeService
com.apple.AddressBook.InternetAccountsBridge
com.apple.AddressBook.MapLauncher
com.apple.AddressBook.UrlForwarder
com.apple.AirPlayUIAgent
com.apple.BKAgentService
com.apple.CalendarAgent
com.apple.CalendarAgent.CalNCService
com.apple.CalendarFileHandler
com.apple.CalendarNotification.CalNCService
com.apple.CaptiveNetworkAssistant
com.apple.Chess
com.apple.CloudDocsDaemon.StorageManagement
com.apple.CloudPhotosConfiguration
com.apple.ContactsAgent
com.apple.ContactsUI.ContactPickerService
com.apple.CryptoTokenKit.pivtoken
com.apple.CryptoTokenKit.setoken
com.apple.DataDetectors.DataDetectorsActionService
com.apple.DataDetectorsDynamicData
com.apple.DataDetectorsLocalSources
com.apple.Dictionary
com.apple.FaceTime
com.apple.ICPPhotoStreamLibraryService
com.apple.ImageKit.RecentPictureService
com.apple.InputMethodKit.TextReplacementService
com.apple.IntlTexts.KeyboardServicesHelper
com.apple.Localization.SetDefaultsService
com.apple.MailCacheDelete
com.apple.MailServiceAgent
com.apple.Maps
com.apple.MarkupUI.Markup
com.apple.MarkupUI.MarkupPhotoExtension
com.apple.MediaLibraryService
com.apple.NetworkExtension.IKEv2Provider
com.apple.Notes
com.apple.OSDUIHelper
com.apple.Pass-Viewer
com.apple.PassKit.PaymentAuthorizationUIExtension
com.apple.PassXPCService
com.apple.PhotoBooth
com.apple.PhotoIngestService
com.apple.PhotoLibraryMigrationUtility
com.apple.PhotoThemeService
com.apple.Photos
com.apple.Photos.StorageManagementExtension
com.apple.PressAndHold
com.apple.Preview
com.apple.QuickTimePlayerX
com.apple.RemindersNC
com.apple.STMExtension.Applications
com.apple.STMExtension.GarageBand
com.apple.STMExtension.Mail
com.apple.STMExtension.OtherUsers
com.apple.STMExtension.Trash
com.apple.STMExtension.iOSFiles
com.apple.STMFramework.UIHelper
com.apple.Safari.CacheDeleteExtension
com.apple.ScreenSharing
com.apple.Siri
com.apple.Siri.SiriTodayExtension
com.apple.SiriNCService
com.apple.SocialPushAgent
com.apple.TextEdit
com.apple.WeatherKitService
com.apple.accessibility.heard
com.apple.accessibility.mediaaccessibilityd
com.apple.appstore
com.apple.appstore.PluginXPCService
com.apple.calculator
com.apple.cloudphotosd
com.apple.coremedia.pluginformatreader
com.apple.corerecents.recentsd
com.apple.ctkahp
com.apple.diagnosticextensions.osx.bluetooth
com.apple.diagnosticextensions.osx.filevault
com.apple.diagnosticextensions.osx.getmobilityinfo
com.apple.diagnosticextensions.osx.installlog
com.apple.diagnosticextensions.osx.maillogs
com.apple.diagnosticextensions.osx.safari
com.apple.diagnosticextensions.osx.spotlight
com.apple.diagnosticextensions.osx.syslog
com.apple.diagnosticextensions.osx.systemprofile
com.apple.diagnosticextensions.osx.timemachine
com.apple.diagnosticextensions.osx.wifi
com.apple.garageband10
com.apple.geod
com.apple.grapher
com.apple.iBooks.CacheDelete
com.apple.iBooksX
com.apple.iBooksX-SecureUserDefaults
com.apple.iBooksX.DiskSpaceEfficiency
com.apple.iCal
com.apple.iCal.CalendarNC
com.apple.iChat
com.apple.iMovieApp
com.apple.iTunesCacheExtension
com.apple.iTunesStorageExtension
com.apple.iWork.Keynote
com.apple.iWork.Numbers
com.apple.iWork.Pages
com.apple.languageassetd
com.apple.lateragent
com.apple.mail
com.apple.mediaanalysisd
com.apple.messages.MapRenderingService
com.apple.ncplugin.FindMyFriends
com.apple.ncplugin.WorldClock
com.apple.ncplugin.calculator
com.apple.ncplugin.stocks
com.apple.ncplugin.weather
com.apple.photoanalysisd
com.apple.photolibraryd
com.apple.photomodel
com.apple.photomoments
com.apple.photos.ImageConversionService
com.apple.photos.VideoConversionService
com.apple.print.PKBrowserService
com.apple.quicklook.ui.helper
com.apple.reminders
com.apple.reminders.RemindersNC
com.apple.share.AirDrop.send
com.apple.share.CloudSharing.invite
com.apple.share.Facebook.post
com.apple.share.Facebook.set-profile-image
com.apple.share.LinkedIn.post
com.apple.share.LinkedIn.set-profile-image
com.apple.share.Mail.compose
com.apple.share.Mail.compose-back-to-sender
com.apple.share.SinaWeibo.post
com.apple.share.SocialWidget
com.apple.share.System.add-to-aperture
com.apple.share.System.add-to-iphoto
com.apple.share.System.add-to-safari-reading-list
com.apple.share.System.set-account-picture
com.apple.share.System.set-buddy-picture
com.apple.share.System.set-desktop-image
com.apple.share.TencentWeibo.post
com.apple.share.Twitter.post
com.apple.share.Twitter.set-profile-image
com.apple.share.Video.upload-Facebook
com.apple.share.Video.upload-Tudou
com.apple.share.Video.upload-Vimeo
com.apple.share.Video.upload-Youku
com.apple.share.Video.upload-image-Flickr
com.apple.share.Video.upload-video-Flickr
com.apple.sharekit.EntitlementsHelper
com.apple.siri.media-indexer
com.apple.soagent
com.apple.stocks
com.apple.systempreferences.cacheAssistant
com.apple.tonelibraryd
com.apple.weather
com.microsoft.Excel
com.microsoft.Office365ServiceV2
com.microsoft.Outlook
com.microsoft.Powerpoint
com.microsoft.Word
com.microsoft.errorreporting
com.microsoft.onenote.mac
de.pixel-paws.desktopchat
jp.co.canon.bj.print.app.canonijprinterutility
 
Library/Frameworks
 
 
Library/Group Containers
 
.SiriTodayViewExtension
2Y8XE5CQ94.com.kaspersky.mac
UBF8T346G9.Office
UBF8T346G9.OfficeOsfWebHost
UBF8T346G9.ms
com.apple.InputMethodKit.TextReplacementService
com.apple.MessagesLegacyTransferArchive
com.apple.PreviewLegacySignaturesConversion
group.com.apple.notes
 
Library/Preferences
 
.DS_Store
.GlobalPreferences.plist
ByHost
Macromedia
MobileMeAccounts.plist
com.MacOptimizer.MacOptimizer.plist
com.apple.AddressBook.plist
com.apple.AppleMultitouchMouse.plist
com.apple.AppleMultitouchTrackpad.plist
com.apple.BezelServices.plist
com.apple.CallHistorySyncHelper.plist
com.apple.CharacterPaletteIM.plist
com.apple.CharacterPicker.plist
com.apple.CommCenter.counts.plist
com.apple.CoreGraphics.plist
com.apple.DictionaryServices.plist
com.apple.FaceTime.plist
com.apple.FileStatsAgent.plist
com.apple.FolderActionsDispatcher.plist
com.apple.FollowUpUI.plist
com.apple.FontRegistry.user.plist
com.apple.GEO.plist
com.apple.HIToolbox.plist
com.apple.LaunchServices
com.apple.LaunchServices.QuarantineEventsV2
com.apple.Maps.plist
com.apple.Preferences.plist
com.apple.PubSubAgent.plist
com.apple.QuickLookDaemon.plist
com.apple.Safari.Extensions.plist
com.apple.Safari.plist
com.apple.Safari.plist.Axmaun1
com.apple.SafariCloudHistoryPushAgent.plist
com.apple.ServicesMenu.Services.plist
com.apple.SetupAssistant.plist
com.apple.SharedWebCredentials.plist
com.apple.SpeechRecognitionCore.plist
com.apple.Spotlight.plist
com.apple.SystemProfiler.plist
com.apple.TMHelperAgent.plist
com.apple.TelephonyUtilities.plist
com.apple.Terminal.plist
com.apple.TextEdit.plist
com.apple.UserAccountUpdater.plist
com.apple.WebKit.WebContent.plist
com.apple.accounts.plist
com.apple.accountsd.plist
com.apple.akd.plist
com.apple.appstore.plist
com.apple.assistant.backedup.plist
com.apple.assistant.plist
com.apple.assistant.support.plist
com.apple.bird.plist
com.apple.bookstoreagent.plist
com.apple.calculateframework.plist
com.apple.cloudpaird.plist
com.apple.cmfsyncagent.plist
com.apple.commcenter.callservices.plist
com.apple.commcenter.carrier_bundle.plist
com.apple.commcenter.device_specific_nobackup.plist
com.apple.commerce.knownclients.plist
com.apple.commerce.plist
com.apple.commerce.safari.plist
com.apple.commerce.spotlight.plist
com.apple.coreauthd.plist
com.apple.coreservices.uiagent.plist
com.apple.coreservices.useractivityd.dynamicuseractivites.plist
com.apple.coreservices.useractivityd.plist
com.apple.dashboard.client.plist
com.apple.dashboard.plist
com.apple.dock.plist
com.apple.driver.AppleBluetoothMultitouch.mouse.plist
com.apple.driver.AppleBluetoothMultitouch.trackpad.plist
com.apple.driver.AppleHIDMouse.plist
com.apple.facetime.bag.plist
com.apple.finder.plist
com.apple.finder.plist.ompWl3R
com.apple.frameworks.diskimages.diuiagent.plist
com.apple.gamecenter.plist
com.apple.gamed.plist
com.apple.help.plist
com.apple.helpd.plist
com.apple.helpviewer.plist
com.apple.iApps.plist
com.apple.iCal.plist
com.apple.iChat.AIM.plist
com.apple.iChat.Jabber.plist
com.apple.iChat.StatusMessages.plist
com.apple.iChat.Yahoo.plist
com.apple.iChat.plist
com.apple.iTunes.eq.plist
com.apple.iTunes.plist
com.apple.iTunesHelper.plist
com.apple.ibooks.plist
com.apple.icloud.fmfd.notbackedup.plist
com.apple.icloud.fmfd.plist
com.apple.identityservicesd.plist
com.apple.ids.deviceproperties.plist
com.apple.ids.service.com.apple.ess.plist
com.apple.ids.service.com.apple.madrid.plist
com.apple.ids.service.com.apple.private.ac.plist
com.apple.ids.service.com.apple.private.alloy.accessibility.switchcontrol.plist
com.apple.ids.service.com.apple.private.alloy.applepay.plist
com.apple.ids.service.com.apple.private.alloy.avconference.avctester.plist
com.apple.ids.service.com.apple.private.alloy.avconference.icloud.plist
com.apple.ids.service.com.apple.private.alloy.continuity.activity.plist
com.apple.ids.service.com.apple.private.alloy.continuity.encryption.plist
com.apple.ids.service.com.apple.private.alloy.continuity.tethering.plist
com.apple.ids.service.com.apple.private.alloy.continuity.unlock.plist
com.apple.ids.service.com.apple.private.alloy.electrictouch.plist
com.apple.ids.service.com.apple.private.alloy.facetime.audio.plist
com.apple.ids.service.com.apple.private.alloy.facetime.video.plist
com.apple.ids.service.com.apple.private.alloy.fmf.plist
com.apple.ids.service.com.apple.private.alloy.gamecenter.plist
com.apple.ids.service.com.apple.private.alloy.icloudpairing.plist
com.apple.ids.service.com.apple.private.alloy.ids.cloudmessaging.plist
com.apple.ids.service.com.apple.private.alloy.keychainsync.plist
com.apple.ids.service.com.apple.private.alloy.location.auth.plist
com.apple.ids.service.com.apple.private.alloy.location.motion.plist
com.apple.ids.service.com.apple.private.alloy.location.stream.plist
com.apple.ids.service.com.apple.private.alloy.location.usage.plist
com.apple.ids.service.com.apple.private.alloy.location.wifitilesync.plist
com.apple.ids.service.com.apple.private.alloy.maps.plist
com.apple.ids.service.com.apple.private.alloy.multiplex1.plist
com.apple.ids.service.com.apple.private.alloy.nearby.plist
com.apple.ids.service.com.apple.private.alloy.nsurlsessionproxy.plist
com.apple.ids.service.com.apple.private.alloy.phone.auth.plist
com.apple.ids.service.com.apple.private.alloy.phonecontinuity.plist
com.apple.ids.service.com.apple.private.alloy.photostream.plist
com.apple.ids.service.com.apple.private.alloy.safeview.plist
com.apple.ids.service.com.apple.private.alloy.screensharing.plist
com.apple.ids.service.com.apple.private.alloy.sms.plist
com.apple.ids.service.com.apple.private.alloy.sysdiagnose.plist
com.apple.ids.service.com.apple.private.alloy.thumper.keys.plist
com.apple.ids.service.com.apple.private.alloy.wifivelocity.plist
com.apple.ids.subservices.plist
com.apple.imagent.plist
com.apple.imdpersistence.IMDPersistenceAgent.plist
com.apple.imdsmsrecordstore.plist
com.apple.imessage.bag.plist
com.apple.imessage.plist
com.apple.imservice.ids.FaceTime.plist
com.apple.imservice.ids.iMessage.plist
com.apple.installer.plist
com.apple.ipTelephony.plist
com.apple.java.util.prefs.plist
com.apple.keyboardservicesd.plist
com.apple.loginitems.plist
com.apple.loginwindow.plist
com.apple.mail-shared.plist
com.apple.mail.plist
com.apple.menuextra.battery.plist
com.apple.menuextra.clock.plist
com.apple.metadata.SpotlightNetHelper.plist
com.apple.mmcs.plist
com.apple.ncprefs.plist
com.apple.notificationcenterui.plist
com.apple.parsecd.plist
com.apple.parsecd.plist.gZZ1Aln
com.apple.passd.plist
com.apple.preference.general.plist
com.apple.preference.trackpad.plist
com.apple.preferences.extensions.FinderSync.plist
com.apple.preferences.extensions.PhotoEditing.plist
com.apple.preferences.extensions.ServicesWithUI.plist
com.apple.preferences.extensions.ShareMenu.plist
com.apple.preferences.extensions.SharedLinks.plist
com.apple.preferences.extensions.XcodeSourceEditor.plist
com.apple.print.PrinterProxy.plist
com.apple.print.add.plist
com.apple.print.custompresets.forprinter.Canon_MG5200_series.plist
com.apple.print.makequeuesagent.plist
com.apple.registration.plist
com.apple.scheduler.plist
com.apple.screensaver.plist
com.apple.security.KCN.plist
com.apple.security.cloudkeychainproxy3.keysToRegister.plist
com.apple.sharingd.plist
com.apple.sidebarlists.plist
com.apple.sms.plist
com.apple.socialpushagent.plist
com.apple.spaces.plist
com.apple.speech.recognition.AppleSpeechRecognition.prefs.plist
com.apple.speech.voice.prefs.plist
com.apple.stockholm.plist
com.apple.suggestd.plist
com.apple.suggestions.plist
com.apple.symbolichotkeys.plist
com.apple.syncserver.plist
com.apple.systempreferences.plist
com.apple.systemsound.plist
com.apple.systemuiserver.plist
com.apple.talagent.plist
com.apple.textInput.keyboardServices.textReplacement.plist
com.apple.touristd.plist
com.apple.universalaccess.plist
com.apple.wifi.keychain-format.plist
com.apple.xpc.activity2.plist
com.etresoft.EtreCheck.plist
com.garmin.renu.client.plist
com.garmin.renu.service.plist
com.kaspersky.kav.uninstaller.plist
com.malwarebytes.antimalware.plist
com.microsoft.Excel.plist
com.microsoft.Word.plist
com.microsoft.autoupdate.fba.plist
com.microsoft.autoupdate2.plist
com.mopt.hmopt.plist
com.oracle.java.JavaAppletPlugin.plist
com.oracle.javadeployment.plist
com.skype.skype.plist
com.sqwarq.DetectX.plist
jp.co.canon.ijscanner1.scanner.ica.plist
loginwindow.plist
mbfloagent.plist
mdworker.plist
net.freemacsoft.AppCleaner.plist
org.cups.PrintingPrefs.plist
rtcpal_registry.reg
system_profiler.plist
widget-com.apple.widget.calendar.plist
widget-com.apple.widget.weather.plist
widget-com.apple.widget.weather.plist.r8CukP8
 
Library/PreferencePanes
 
 
Library/Saved Application State
 
com.apple.InstallAssistant.Sierra.savedState
com.apple.Safari.savedState
com.apple.Terminal.savedState
com.apple.appstore.savedState
com.apple.finder.savedState
com.apple.mail.savedState
net.java.openjdk.cmd.savedState
 
Library/Services
 
 
Library/WebKit
 
Databases
LocalStorage
MediaKeys
com.apple.Safari
com.apple.Spotlight
com.apple.finder
com.apple.iTunes
com.apple.mail
com.apple.systempreferences


Dante12 12.01.2017 04:10

Sieht schon besser aus noch die Reste entfernen:
  1. Klicke auf den Finder und dann die Tasten CMD + Shift + G
  2. Kopiere den Pfad aus der Code-Box in das Fenster und drücke Enter
  3. Lösche (falls vorhanden) die in Rot markierten Einträge. Eventuell benötigst du dein Admin-Passwort.
  4. Verfahre mit weiteren Einträgen genauso.

Code:

/Library/Extensions
klif.kext
klnke.kext


Code:

/Library/Services
KAVService.service

Code:

~/Library/Application Support
Kaspersky Lab

Code:

~/Library/Group Containers
2Y8XE5CQ94.com.kaspersky.mac

Code:

~/Library/Preferences
com.MacOptimizer.MacOptimizer.plist
com.kaspersky.kav.uninstaller.plist

  1. Neustart des Rechners, während des Starts Shift-Taste gedrückt halten um in den Safe Mode zu gelangen.
  2. Dieser Vorgang dauert etwas länger und ein Flackern des Bildschirms ist normal.
  3. Log dich ein und starte das Festplattendienstprogramm.
  4. Klicke auf der linken Seite auf dein Systemlaufwerk und anschliessend auf Erste Hilfe.
  5. Ist alles erledigt, kannst du wieder in den normalen Modus starten.
  6. Bitte noch mal ein Log mit sysDiag.sh

Seit Sierra gibt es Probleme mit java du solltest die Version 112 installiert haben und noch mal testen. Lese dazu auch diesen Artikel.


Alle Zeitangaben in WEZ +1. Es ist jetzt 17:13 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131