Lass Etrecheck bitte mal unter dem Admin-Konto laufen...
Ich habe das gefühl da fehlt die hälfte.
Das habe ich erste gesehen, als ich schon mit APPLE einen Termin vereinbart hatte. Hier also Etrecheck vom Admin:
EtreCheck version: 5.0 (5008)
Report generated: 2018-09-24 16:54:58
Download EtreCheck from
https://etrecheck.com
Runtime: 3:34
Performance: Good
Sandbox: Enabled
Full drive access: Disabled
Problem: Other problem
Description:
Intel-iMac is reporting incoming mail when starting programs in Dock.
Major Issues: None
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.
Hardware Information:
iMac (21.5-inch, Mid 2011)
iMac Model: iMac12,1
1 2,5 GHz Intel Core i5 (i5-2400S) CPU: 4-core
8 GB RAM - Upgradeable
BANK 0/DIMM0 - 2 GB DDR3 1333 ok
BANK 1/DIMM0 - 2 GB DDR3 1333 ok
BANK 0/DIMM1 - 2 GB DDR3 1333 ok
BANK 1/DIMM1 - 2 GB DDR3 1333 ok
Video Information:
AMD Radeon HD 6750M - VRAM: 512 MB
iMac 1920 x 1080
Drives:
disk0 - ST3500418AS 500.11 GB (Mechanical - 7200 RPM)
Internal SATA 3 Gigabit Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 - A***************n (Journaled HFS+) 463.25 GB (148.28 GB used)
disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB
disk0s4 - B******P (MS-DOS FAT12) 36.00 GB (34.21 GB used)
Mounted Volumes:
disk0s2 - A***************n 463.25 GB (314.70 GB free)
Journaled HFS+
Mount point: /
disk0s4 - B******P 36.00 GB (1.79 GB free)
MS-DOS FAT12
Mount point: /Volumes/B******P
Network:
Interface en0: Ethernet
Interface en4: iPhone
Interface fw0: FireWire
Interface en1: Wi-Fi
802.11 a/b/g/n
Interface bridge0: Thunderbolt Bridge
Interface en3: Bluetooth PAN
System Software:
macOS High Sierra 10.13.6 (17G65)
Time since boot: About 2 days
Configuration Profiles:
Information not available
Security:
Unsigned Files:
Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist
Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist
Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
Details: Exact match found in the whitelist - probably OK
Kernel Extensions:
/Library/Application Support/VirtualBox
VBoxDrv.kext (Oracle America, Inc., 4.3.18)
VBoxNetAdp.kext (Oracle America, Inc., 4.3.18)
VBoxNetFlt.kext (Oracle America, Inc., 4.3.18)
VBoxUSB.kext (Oracle America, Inc., 4.3.18)
/System/Library/Extensions
EyeTVAfaTechHidBlock.kext (1.1)
EyeTVCinergy450AudioBlock.kext (1.1)
EyeTVCinergyXSAudioBlock.kext (1.1)
EyeTVEmpiaAudioBlock.kext (1.1)
EyeTVVoyagerAudioBlock.kext (1.1)
JabraUSB.kext (Kim Jensen, 1.0.0 - SDK 10.11)
System Launch Agents:
System Launch Daemons:
Launch Agents:
Launch Daemons:
User Launch Agents:
User Login Items:
PhotoStreamAgent (App Store - installed 2038-01-19)
(/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app)
Calendar (Apple - installed 2018-06-21)
(/Applications/Calendar.app/Contents/MacOS/Calendar)
TomTomHOMERunner (? - installed 2015-07-13)
(~/Library/Application Support/TomTom HOME/TomTomHOMERunner.app/Contents/MacOS/TomTomHOMERunner)
Mail (Apple - installed 2018-07-19)
(/Applications/Mail.app/Contents/MacOS/Mail)
EyeTV Helper (Elgato Systems GmbH - installed 2014-11-07)
(/Library/Application Support/EyeTV/EyeTV Helper.app/Contents/MacOS/EyeTV Helper)
iTunesHelper (Apple - installed 2018-07-11)
(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper)
Internet Plug-ins:
JavaAppletPlugin: Java 8 Update 171 build 11 (installed 2018-07-04)
FlashPlayer-10.6: 31.0.0.108 (installed 2018-09-11)
QuickTime Plugin: 7.7.3 (installed 2018-07-19)
AdobePDFViewerNPAPI: 11.0.23 (installed 2017-11-15)
AdobePDFViewer: 11.0.23 (installed 2017-11-15)
Flash Player: 31.0.0.108 (installed 2018-09-11)
Silverlight: 5.1.30514.0 (installed 2015-01-27)
iPhotoPhotocast: 7.0 (installed 2014-11-04)
3rd Party Preference Panes:
Flash Player (installed 2018-08-27)
Jabra Suite for Mac (installed 2015-09-28)
Java (installed 2018-07-04)
Time Machine:
Time Machine information not available
Performance:
System Load: 1.13 (1 min ago) 1.17 (5 min ago) 1.42 (15 min ago)
Nominal I/O speed: 0.18 MB/s
File system: 43.74 seconds
Write speed: 107 MB/s
Read speed: 105 MB/s
CPU Usage:
Top Processes by CPU:
Top Processes by Memory:
Top Processes by Network Use:
Virtual Memory Information:
Software Installs (past 30 days):
End of report
Security
Your machine’s security settings. Click the About buttons to learn more about Apple’s security features and built-in malware protection.
Gatekeeper status should always be set to Enabled.
System Integrity Protection status should always be set to Enabled.
Configuration profiles can be used to override user preferences. Configuration profiles are normally used only in enterprise or education environments. They are also commonly used by adware and malware. This App Store version of EtreCheck cannot detect configuration profiles. Click on the Review Profiles button to open the Profiles pane in System Preferences. If you have any profiles that appear to be adware or malware, you can delete them.
Click the About Profiles button to learn more from Apple about Configuration profiles.
Unsigned Files
These files are software that runs in the background and lacks a valid Developer ID signature from Apple. Malicious software like adware will usually be shown here. Unfortunately, legitimate software is sometimes unsigned too. Without a Developer ID signature, EtreCheck cannot tell the difference between legitimate and malicious software. EtreCheck may provide more information in a Details to help you determine if a file is legitimate or malicious.
You can use the Lookup button to research the software on Apple Support Communities. If you have any questions about any unsigned files, ask about them on Apple Support Communities and include your EtreCheck report.
If you are absolutely sure that the file is malicious, click the Remove button to remove it. This App Store version of EtreCheck may be unable to remove some files. You can use the Reveal Config File and Reveal Executable buttons to manually remove them. Make sure to restart your machine if you remove any files. If you are unsure, please ask for help.
If a file has been incorrectly categorized, click the Report a problem button to have Etresoft review the file.
