macOS High Sierra Beachball seit Softwaredownload

S

scholjo

Neues Mitglied
Thread Starter
Dabei seit
03.01.2020
Beiträge
14
Reaktionspunkte
0
Hallo Zusammen,

ich habe ein macbook Pro Retina 2015.
Mit Mac OS High Sierra 10.13.6 mit 2,7 kHz und 8 Gb Arbeitsspeicher.
Ich habe kürzlich ein Programm heruntergeladen (Chip) habe das Gefühl seitdem ist das Macbook langsam.
Beachballing tritt häufig auf.

Könnt ihr mir bei dem Problem helfen?

Als Anhaltspunkt habe ich mal ein Etrecheck Protokoll hinzugefügt.

Vielen Dank
 
EtreCheck version: 5.4.8 (5091)

Report generated: 2020-01-03 15:12:24

Download EtreCheck from https://etrecheck.com

Runtime: 2:10

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled


Problem: Beachballing


Major Issues: None


Minor Issues:

These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.


Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware.

Low disk space - This machine is running low on free hard drive space.

Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.

System modifications - There are a large number of system modifications running in the background.

32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 “Catalina”.

Limited drive access - More information may be available with Full Drive Access.


Hardware Information:

MacBook Pro (Retina, 13-inch, Early 2015)

MacBook Pro Model: MacBookPro12,1

1 2,7 GHz Intel Core i5 (i5-5257U) CPU: 2-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1867

BANK 1/DIMM0 - 4 GB DDR3 1867

Battery: Health = Normal - Cycle count = 285


Video Information:

Intel Iris Graphics 6100 - VRAM: 1536 MB

Color LCD (built-in) 2560 x 1600


Drives:

disk0 - APPLE SSD SM0256G 251.00 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x4 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 250.79 GB

disk1 [APFS Virtual drive] 250.79 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 221.20 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used)


Mounted Volumes:

disk1s1 - Macintosh HD

250.79 GB (Shared - 221.20 GB used, 51.52 GB available, 26.77 GB free)

APFS

Mount point: /

Encrypted


disk1s4 - VM [APFS VM]

250.79 GB (Shared - 2.15 GB used, 26.77 GB free)

APFS

Mount point: /private/var/vm


Network:

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

Interface en4: iPhone

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge


System Software:

macOS High Sierra 10.13.6 (17G10021)

Time since boot: About 9 days


Configuration Files:

/etc/hosts - Count: 2


Configuration Profiles:

This computer has configuration profiles installed.


Notifications:

Notifications not available without Full Drive Access.


Security:

Gatekeeper: Enabled

System Integrity Protection: Enabled


Antivirus software: Apple
 
Unsigned Files:

Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist

Executable: /Library/Application Support/Citrix Receiver/ctxusbd

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

Details: Exact match found in the whitelist - probably OK


Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.plist

Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard10/VideoGuard10.bundle/Contents/Resources/setupServer.sh

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.paragon-software.facebook.agent.plist

Executable: /Library/Application Support/Paragon Software/Paragon Software Facebook Agent.app/Contents/MacOS/Paragon Software Facebook Agent

Details: Exact match found in the whitelist - probably OK


Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist

Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.uninstall.plist

Executable: /bin/sh ~/.cisco/VideoGuard/uninstall/cisco_videoguard10/condUninstall.sh

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.fileopen.Broker.plist

Executable: /Library/Application Support/FileOpen/Services/FileOpenBroker.app/Contents/MacOS/FileOpenBroker

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist

Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist

Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist

Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper

Details: Exact match found in the whitelist - probably OK


32-bit Applications:

35 32-bit apps


Kernel Extensions:

/Applications/Tunnelblick.app

tap-notarized.kext (Jonathan Bullard, 20141104 (Tunnelblick build 5300))

tun-notarized.kext (Jonathan Bullard, 20141104 (Tunnelblick build 5300))


/Library/Application Support/Citrix Receiver

CitrixGUSB.kext (Citrix Systems, Inc., 12.3.0 - SDK 10.9)


/Library/Extensions

ufsd_NTFS.kext (Paragon Software GmbH, 15.5.53 - SDK 10.10)


/System/Library/Extensions

CiscoVPN.kext (2.0.1)


System Launch Agents:

[Not Loaded] 15 Apple tasks

[Loaded] 162 Apple tasks

[Running] 117 Apple tasks


System Launch Daemons:

[Not Loaded] 38 Apple tasks

[Loaded] 182 Apple tasks

[Running] 115 Apple tasks

[Other] One Apple task


Launch Agents:

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2015-12-19)

[Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2019-08-10)

[Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-10-26)

[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-10-26)

[Loaded] com.citrix.AuthManager_Mac.plist (? 1ce99fae - installed 2016-09-15)

[Running] com.citrix.ReceiverHelper.plist (? bbfad3f1 - installed 2016-09-15)

[Running] com.citrix.ServiceRecords.plist (? 8e6543d - installed 2016-09-15)

[Running] com.fileopen.Broker.plist (? 25c026d4 - installed 2015-11-13)

[Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-12-04)

[Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-12-04)

[Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-11-25)

[Not Loaded] com.oracle.java.Java-Updater.plist (? fd368982 - installed 2019-04-02)

[Loaded] com.paragon-software.facebook.agent.plist (? 95fb0bd4 - installed 2016-11-29)

[Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2019-06-07)

[Loaded] com.paragon.updater.plist (Paragon Software GmbH - installed 2016-11-29)


Launch Daemons:

[Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2019-08-10)

[Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2019-08-10)

[Loaded] com.adobe.SwitchBoard.plist (? 856489a3 - installed 2015-12-15)

[Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-10-26)

[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2019-11-23)

[Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-12-04)

[Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2016-09-15)

[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2019-12-04)

[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-11-25)

[Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-06-10)

[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2019-04-02)

[Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2019-08-26)

[Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2019-12-04)

[Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2019-06-07)

[Loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (Jonathan Bullard - installed 2019-12-15)


User Launch Agents:

[Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2015-12-15)

[Loaded] com.adobe.ARM.***.plist (? 0 - installed 2015-12-19)

[Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-04-05)

[Loaded] com.cisco.videoguard10.plist (? 0 - installed 2018-12-11)

[Loaded] com.cisco.videoguard10.uninstall.plist (? 0 - installed 2018-12-11)

[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-08-22)

[Running] com.spotify.webhelper.plist (? 0 - installed 2016-10-23)

[Loaded] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (? 0 - installed 2019-09-11)


User Login Items:

[Loaded] FSMenuAppLoginItemHelper (Paragon Software GmbH - installed 2019-08-26)

Modern Login Item

/Applications/NTFS for Mac.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app


[Not Loaded] PhotoStreamAgent (App Store - installed 2038-01-19)

Modern Login Item

/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app


Internet Plug-ins:

o1dbrowserplugin: 5.41.3.0 (? - installed 2019-11-12)

Unity Web Player: UnityPlayer version 5.3.6f1 (? - installed 2016-08-02)

AdobeExManDetect: AdobeExManDetect 1.1.0.0 (? - installed 2015-12-18)

AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (? - installed 2015-12-18)

FlashPlayer-10.6: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-10)

AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-12-21)

Silverlight: 5.1.50901.0 (? - installed 2016-11-29)

Flash Player: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-10)

CitrixICAClientPlugIn: 12.3.0 (? - installed 2016-11-23)

googletalkbrowserplugin: 5.41.3.0 (? - installed 2015-12-11)

AdobePDFViewer: 19.021.20061 (Adobe Systems, Inc. - installed 2019-12-21)

JavaAppletPlugin: Java 8 Update 211 build 12 (? - installed 2019-07-05)


Audio Plug-ins:

AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-12-22)

BluetoothAudioPlugIn: 6.0.7 (Apple - installed 2019-12-22)

AirPlay: 2.0 (Apple - installed 2019-12-22)

AppleAVBAudio: 683.1 (Apple - installed 2019-12-22)

BridgeAudioSP: 4.69.2 (Apple - installed 2019-12-22)

iSightAudio: 7.7.3 (Apple - installed 2019-12-22)
 
benutz bitte code tags, kannst du mit dem plus symbol/einfügen aufrufen.

und erstell den report bitte noch mal mit full drive access.
 
  • Gefällt mir
Reaktionen: ekki161
Safari Extensions:

ABP - App Store (installed 2019-12-02)

ABP Control Panel - App Store (installed 2019-12-02)


3rd Party Preference Panes:

Flash Player (installed 2019-11-23)

Java (installed 2019-04-25)

NTFS (installed 2019-06-07)


Time Machine:

Time Machine information not available without Full Drive Access.


Performance:

System Load: 0.99 (1 min ago) 1.16 (5 min ago) 1.70 (15 min ago)

Nominal I/O speed: 0.03 MB/s

File system: 29.88 seconds

Write speed: 512 MB/s

Read speed: 1222 MB/s


CPU Usage Snapshot:

Type Overall

System 2 %

User 3 %

Idle 95 %


Top Processes Snapshot by CPU:

Process (count) CPU (Source - Location)

Other processes 12.59 % (?)

EtreCheck 8.15 % (App Store)

Dock 0.08 % (Apple)

ReceiverHelper 0.06 % (? - /usr/local/libexec/ReceiverHelper.app)

com.apple.WebKit.WebContent (11) 0.05 % (Apple)


Top Processes Snapshot by Memory:

Process (count) RAM usage (Source - Location)

EtreCheck 513 MB (App Store)

Mail 187 MB (Apple)

Safari 116 MB (Apple)

AppleSpell 81 MB (Apple)

App Store 66 MB (Apple)


Top Processes Snapshot by Network Use:

Process Input / Output (Source - Location)

Other processes 304 KB / 188 KB (?)

Mail 289 KB / 29 KB (Apple)

com.apple.WebKit.Networking 650 B / 3 KB (Apple)

SystemUIServer 0 B / 480 B (Apple)

routined 0 B / 0 B (Apple)


Virtual Memory Information:

Physical RAM: 8 GB


Free RAM: 19 MB

Used RAM: 5.83 GB

Cached files: 2.15 GB


Available RAM: 2.17 GB

Swap Used: 21 MB


Software Installs (past 30 days):

Install Date Name (Version)

2019-12-06 Avira Security (1.19.11)

2019-12-07 Malwarebytes for Mac Deinstallationsprogramm

2019-12-10 Adobe Flash Player

2019-12-14 XProtectPlistConfigData (2110)

2019-12-14 MRTConfigData (1.51)

2019-12-14 Adobe Acrobat Reader DC (19.021.20058)

2019-12-21 Adobe Acrobat Reader DC (19.021.20061)

2019-12-21 Microsoft Outlook for Mac

2019-12-21 Microsoft Excel for Mac

2019-12-21 Microsoft Word for Mac

2019-12-21 Microsoft PowerPoint for Mac

2019-12-22 Safari (13.0.4)

2019-12-23 Microsoft OneNote for Mac

2020-01-03 EtreCheck (5.4.8)


Diagnostics Information (past 7-30 days):

Directory /Library/Logs/DiagnosticReports is not accessible.

Enable Full Drive Access to see more information.


End of report
 
Wie mache ich denn Full drive access?
 
Da hast du dir noch was dazu geladen, bei Chip Softtonic etc. niemals was runterladen. Die haben immer was in ihrem Download begepackt und das installiert sich ohne zu fragen.
Versuche mal mit Etrecheck denn Übertäter zu finden. Oder mit Malwarebytes. Beides ist für einige Nutzungen kostenlos.
 
systemeinstellungen/sicherheit/datenschutz
dort halt etrecheck unter festplattenvollzugriff hinzufügen.

also so ist in dem report nichts an malware zu sehen.
aber die configuration profile deuten darauf hin, dass sich eventuell irgendwas in safari als startseite gemogelt hat.
 
Benutzer und Gruppen in der Systemeinstellung aufrufen. Anmeldeobjekte auswählen Schloss entsperren unten auf das Pluszeichen klicken und in den Programmen Etrecheck auswählen.
Dann hat die App vollen Zugriff und du hast ein vollständiges Ergebnis.
 
So hier nochmal der vollständige Bericht:

Code:
EtreCheck version: 5.4.8 (5091)
Report generated: 2020-01-03 15:30:10
Download EtreCheck from https://etrecheck.com
Runtime: 1:56
Performance: Excellent
Sandbox: Enabled
Full drive access: Disabled

Problem: Beachballing

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
  Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware.
  Low disk space - This machine is running low on free hard drive space.
  Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.
  System modifications - There are a large number of system modifications running in the background.
  32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 “Catalina”.
  Limited drive access - More information may be available with Full Drive Access.

Hardware Information:
  MacBook Pro (Retina, 13-inch, Early 2015)
  MacBook Pro Model: MacBookPro12,1
  1 2,7 GHz Intel Core i5 (i5-5257U) CPU: 2-core
  8 RAM - Not upgradeable
    BANK 0/DIMM0 - 4 GB DDR3 1867 
    BANK 1/DIMM0 - 4 GB DDR3 1867 
  Battery: Health = Normal - Cycle count = 285

Video Information:
  Intel Iris Graphics 6100 - VRAM: 1536 MB
    Color LCD (built-in) 2560 x 1600

Drives:
  disk0 - APPLE SSD SM0256G 251.00 GB (Solid State - TRIM: Yes)
  Internal PCI 5.0 GT/s x4 Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 250.79 GB
      disk1 [APFS Virtual drive] 250.79 GB (Shared by 4 volumes)
        disk1s1 - Macintosh HD (APFS) (Shared - 223.95 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)
        disk1s3 - Recovery (APFS) [Recovery] (Shared)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 2.15 GB used)

Mounted Volumes:
  disk1s1 - Macintosh HD
    250.79 GB (Shared - 223.95 GB used, 48.77 GB available, 24.01 GB free)
    APFS
    Mount point: /
    Encrypted

  disk1s4 - VM [APFS VM]
    250.79 GB (Shared - 2.15 GB used, 24.01 GB free)
    APFS
    Mount point: /private/var/vm

Network:
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en4: iPhone
  Interface en3: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS High Sierra 10.13.6 (17G10021)
  Time since boot: About 9 days

Configuration Files:
  /etc/hosts - Count: 2

Configuration Profiles:
  This computer has configuration profiles installed.

Notifications:
  Notifications not available without Full Drive Access.

Security:
  System Status
  Gatekeeper: Enabled
  System Integrity Protection: Enabled

  Antivirus software: Apple

Unsigned Files:
  Launchd: /Library/LaunchDaemons/com.citrix.ctxusbd.plist
    Executable: /Library/Application Support/Citrix Receiver/ctxusbd
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist
    Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchAgents/com.citrix.ServiceRecords.plist
    Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchAgents/com.paragon-software.facebook.agent.plist
    Executable: /Library/Application Support/Paragon Software/Paragon Software Facebook Agent.app/Contents/MacOS/Paragon Software Facebook Agent
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchAgents/com.fileopen.Broker.plist
    Executable: /Library/Application Support/FileOpen/Services/FileOpenBroker.app/Contents/MacOS/FileOpenBroker
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.plist
    Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard10/VideoGuard10.bundle/Contents/Resources/setupServer.sh
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.uninstall.plist
    Executable: /bin/sh ~/.cisco/VideoGuard/uninstall/cisco_videoguard10/condUninstall.sh
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchAgents/com.citrix.AuthManager_Mac.plist
    Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchAgents/com.citrix.ReceiverHelper.plist
    Executable: /usr/local/libexec/ReceiverHelper.app/Contents/MacOS/ReceiverHelper
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist
    Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard
    Details: Exact match found in the whitelist - probably OK

32-bit Applications:
  35 32-bit apps

Kernel Extensions:
  /Applications/Tunnelblick.app
    tap-notarized.kext (20141104 (Tunnelblick build 5300))
    tun-notarized.kext (20141104 (Tunnelblick build 5300))

  /Library/Application Support/Citrix Receiver
    CitrixGUSB.kext (12.3.0 - SDK 10.9)

  /Library/Extensions
    ufsd_NTFS.kext (15.5.53 - SDK 10.10)

  /System/Library/Extensions
    CiscoVPN.kext (2.0.1)

System Launch Agents:
  [Not Loaded]  15 Apple tasks
  [Loaded]  163 Apple tasks
  [Running]  116 Apple tasks
 
System Launch Daemons:
[Not Loaded] 38 Apple tasks
[Loaded] 180 Apple tasks
[Running] 117 Apple tasks
[Other] One Apple task

Launch Agents:
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2015-12-19)
[Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2019-08-10)
[Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2019-10-26)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2019-10-26)
[Loaded] com.citrix.AuthManager_Mac.plist (? 1ce99fae - installed 2016-09-15)
[Running] com.citrix.ReceiverHelper.plist (? bbfad3f1 - installed 2016-09-15)
[Running] com.citrix.ServiceRecords.plist (? 8e6543d - installed 2016-09-15)
[Running] com.fileopen.Broker.plist (? 25c026d4 - installed 2015-11-13)
[Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-12-04)
[Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-12-04)
[Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-11-25)
[Not Loaded] com.oracle.java.Java-Updater.plist (? fd368982 - installed 2019-04-02)
[Loaded] com.paragon-software.facebook.agent.plist (? 95fb0bd4 - installed 2016-11-29)
[Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2019-06-07)
[Loaded] com.paragon.updater.plist (Paragon Software GmbH - installed 2016-11-29)

Launch Daemons:
[Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2019-08-10)
[Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2019-08-10)
[Loaded] com.adobe.SwitchBoard.plist (? 856489a3 - installed 2015-12-15)
[Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2019-10-26)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2019-11-23)
[Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-12-04)
[Loaded] com.citrix.ctxusbd.plist (? 44dc9c9f - installed 2016-09-15)
[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2019-12-04)
[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-11-25)
[Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-06-10)
[Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2019-04-02)
[Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2019-08-26)
[Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2019-12-04)
[Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2019-06-07)
[Loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (Jonathan Bullard - installed 2019-12-15)

User Launch Agents:
[Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2015-12-15)
[Loaded] com.adobe.ARM.***.plist (? 0 - installed 2015-12-19)
[Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-04-05)
[Loaded] com.cisco.videoguard10.plist (? 0 - installed 2018-12-11)
[Loaded] com.cisco.videoguard10.uninstall.plist (? 0 - installed 2018-12-11)
[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-08-22)
[Running] com.spotify.webhelper.plist (? 0 - installed 2016-10-23)
[Loaded] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (? 0 - installed 2019-09-11)

User Login Items:
[Loaded] FSMenuAppLoginItemHelper (Paragon Software GmbH - installed 2019-08-26)
Modern Login Item
/Applications/NTFS for Mac.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app

[Not Loaded] PhotoStreamAgent (App Store - installed 2038-01-19)
Modern Login Item
/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app

Internet Plug-ins:
o1dbrowserplugin: 5.41.3.0 (? - installed 2019-11-12)
Unity Web Player: UnityPlayer version 5.3.6f1 (? - installed 2016-08-02)
AdobeExManDetect: AdobeExManDetect 1.1.0.0 (? - installed 2015-12-18)
AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (? - installed 2015-12-18)
FlashPlayer-10.6: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-10)
AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-12-21)
Silverlight: 5.1.50901.0 (? - installed 2016-11-29)
Flash Player: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-10)
CitrixICAClientPlugIn: 12.3.0 (? - installed 2016-11-23)
googletalkbrowserplugin: 5.41.3.0 (? - installed 2015-12-11)
AdobePDFViewer: 19.021.20061 (Adobe Systems, Inc. - installed 2019-12-21)
JavaAppletPlugin: Java 8 Update 211 build 12 (? - installed 2019-07-05)

Audio Plug-ins:
AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-12-22)
BluetoothAudioPlugIn: 6.0.7 (Apple - installed 2019-12-22)
AirPlay: 2.0 (Apple - installed 2019-12-22)
AppleAVBAudio: 683.1 (Apple - installed 2019-12-22)
BridgeAudioSP: 4.69.2 (Apple - installed 2019-12-22)
iSightAudio: 7.7.3 (Apple - installed 2019-12-22)

Safari Extensions:
ABP - App Store (installed 2019-12-02)
ABP Control Panel - App Store (installed 2019-12-02)

3rd Party Preference Panes:
Flash Player (installed 2019-11-23)
Java (installed 2019-04-25)
NTFS (installed 2019-06-07)

Time Machine:
Time Machine information not available without Full Drive Access.

Performance:
System Load: 2.63 (1 min ago) 1.87 (5 min ago) 1.70 (15 min ago)
Nominal I/O speed: 0.05 MB/s
File system: 29.24 seconds
Write speed: 923 MB/s
Read speed: 1244 MB/s

CPU Usage Snapshot:
Type Overall
System 5 %
User 5 %
Idle 90 %

Top Processes Snapshot by CPU:
Process (count) CPU (Source - Location)
Other processes 22.72 % (?)
com.apple.WebKit.WebContent (7) 8.50 % (Apple)
EtreCheck 4.88 % (App Store)
Safari 4.38 % (Apple)
MTLCompilerService (12) 0.15 % (Apple)

Top Processes Snapshot by Memory:
Process (count) RAM usage (Source - Location)
EtreCheck 671 MB (App Store)
Mail 174 MB (Apple)
Safari 120 MB (Apple)
AppleSpell 89 MB (Apple)
App Store 66 MB (Apple)

Top Processes Snapshot by Network Use:
Process (count) Input / Output (Source - Location)
Other processes 320 KB / 192 KB (?)
Mail 59 KB / 15 KB (Apple)
com.apple.WebKit.Networking 29 KB / 6 KB (Apple)
SystemUIServer 0 B / 480 B (Apple)
routined 0 B / 0 B (Apple)

Virtual Memory Information:
Physical RAM: 8 GB

Free RAM: 560 MB
Used RAM: 5.40 GB
Cached files: 2.05 GB

Available RAM: 2.60 GB
Swap Used: 25 MB

Software Installs (past 30 days):
Install Date Name (Version)
2019-12-06 Avira Security (1.19.11)
2019-12-07 Malwarebytes for Mac Deinstallationsprogramm
2019-12-10 Adobe Flash Player
2019-12-14 XProtectPlistConfigData (2110)
2019-12-14 MRTConfigData (1.51)
2019-12-14 Adobe Acrobat Reader DC (19.021.20058)
2019-12-21 Adobe Acrobat Reader DC (19.021.20061)
2019-12-21 Microsoft Outlook for Mac
2019-12-21 Microsoft Excel for Mac
2019-12-21 Microsoft Word for Mac
2019-12-21 Microsoft PowerPoint for Mac
2019-12-22 Safari (13.0.4)
2019-12-23 Microsoft OneNote for Mac
2020-01-03 EtreCheck (5.4.8)

Diagnostics Information (past 7-30 days):
Directory /Library/Logs/DiagnosticReports is not accessible.
Enable Full Drive Access to see more information.

End of report
[/CODE]
 
festplattenvollzugriff ist immer noch nicht aktiv.
aber wie gesagt, da ist keine malware zu sehen.
etrecheck bemängelt den low disk space, also vielleicht mal etwas aufräumen.
hattest du avira mit deren uninstaller deinstalliert, so dass da nicht noch was verstellt ist?
 
Der Full Drive Acess ist immer noch ausgeschaltet.
Aber ich muss sagen du hast da ganz schön viel Zeugs drauf, brauchst das denn alles?
 
Was kann ich denn runterschmeißen? Das meiste sind Bilder denke ich. Liegt vor allem daran, dass die iPhone Bilder direkt in Fotos gehen.
Kann es denn ein Problem geben, dass es so langsam macht? Ich habe gemerkt, dass es vor allem in Safari Probleme gibt.
 
irgendwas hat da profile angelegt, meist macht das irgendeine adware, damit du nicht mehr in safari die startseite und die suchmachine umstellen kannst.
wenn du nur in safari probleme hast, dann miste doch mal die ganzen internet plugins aus.
die werden wohl eh nicht mehr alle geladen, aber weniger ist da ja mehr.
 
irgendwas hat da profile angelegt, meist macht das irgendeine adware, damit du nicht mehr in safari die startseite und die suchmachine umstellen kannst.
wenn du nur in safari probleme hast, dann miste doch mal die ganzen internet plugins aus.
die werden wohl eh nicht mehr alle geladen, aber weniger ist da ja mehr.
Und wie lösche ich diese Profile wieder bzw. die Maleware?
 
Und wie lösche ich diese Profile wieder bzw. die Maleware?

guck mal in den systemeinstellungen, ob sich da ein neuerdings ein profile befindet.
ist das eigentlich ein arbeitsrechner, der von der firma administriert wird?
vielleicht haben die auch die profile angelegt.
notwendig ist das löschen auch nur, wenn in safari die startseite oder die suchmachine verdreht ist und sich nicht ändern lässt.
 
  • Gefällt mir
Reaktionen: dg2rbf
Also Profil habe ich entfernt. War allerdings nur eins von meiner Uni. Also das war schon immer drauf. Brauch ich aber nun nicht mehr. Bei Safari sieht alles wie gewohnt aus.
Anfänglich gingen mal Werbefenster auf nach Softwaredownload. Diese habe ich aber mit Abblocken und Malwarebites hinbekommen.

Nun denke ich liegt das problem irgendwie etwas versteckter.
 
Hi,
da hilft nur noch ein Scan mit Etrecheck, Etrecheck den vollen Diskzugriff in den Systemeinstellungen erlauben, das Ergebnis hier nach diese Anleitung Posten.
upload_2020-1-3_18-39-13.png
 
Zurück
Oben Unten