"fSRbunXI" blockiert den kompletten Arbeitsspeicher

B

bengo11

Mitglied
Thread Starter
Dabei seit
10.11.2018
Beiträge
4
Reaktionspunkte
0
Hallo zusammen,
mein MacBook Pro (13 Zoll Mid 2012) ist seit geraumer Zeit immer langsamer, sodass sich kaum noch damit arbeiten lässt.
Arbeitsspeicher ist komplett ausgelastet und zwar mit einem Prozess namens "fSRbunXI". Dieser ist "launchd" untergeordnet und dieser wiederum dem kernel task.
fSRbunXI benötigt teilweise absurde Speicher >10GB und lastet die CPU komplett aus.
Wenn man den Prozess beendet läuft alles wieder rund, der Prozess startet jedoch erneut und benötigt wieder viel Speicher.
Irgendwer Ideen, was das Problem ist?
Vielen Dank im Voraus
 
Hi,
das kann auch Malware sein die da ihr Unwesen treibt, Malwarebytes für Mac downloaden und das System damit Scannen.

Gruß Franz
 
  • Gefällt mir
Reaktionen: Mac_i_messer
EtreCheck version: 5.0.2 (5015)

Report generated: 2018-11-10 15:19:56

Download EtreCheck from https://etrecheck.com

Runtime: 6:54

Performance: Below Average

Sandbox: Enabled

Full drive access: Disabled


Problem: Computer is too slow


Major Issues:

Anything that appears on this list needs immediate attention.


No Time Machine backup - Time Machine backup not found.

Adware - Adware detected.

Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Upgradeable hard drive - This machine’s hard drive could be replaced with an SSD. This would dramatically improve your machine’s performance.

Out of RAM - This machine is running short on RAM and has a mechanical hard drive, reducing the speed of the virtual memory system.

High battery cycle count - Your battery may be losing capacity.

Low performance - EtreCheck report took over 5 minutes to run. This is unusual.


Hardware Information:

MacBook Pro (13-inch, Mid 2012)

MacBook Pro Model: MacBookPro9,2

1 2,5 GHz Intel Core i5 (i5-3210M) CPU: 2-core

8 GB RAM - At maximum

BANK 0/DIMM0 - 4 GB DDR3 1600 ok

BANK 1/DIMM0 - 4 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 906


Video Information:

Intel HD Graphics 4000 - VRAM: 1536 MB

Color LCD 1280 x 800


Drives:

disk0 - APPLE HDD HTS545050A7E362 500.11 GB (Mechanical - 5400 RPM)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 250.90 GB

disk1 [APFS Virtual drive] 250.90 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 61.89 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 5.55 GB used)

disk0s3 - B******P (MS-DOS FAT12) 249.00 GB (63.30 GB used)


Mounted Volumes:

disk0s3 - B******P 249.00 GB (185.70 GB free)

MS-DOS FAT12

Mount point: /Volumes/B******P


disk1s1 - Macintosh HD 250.90 GB (182.78 GB free)

APFS

Mount point: /

Encrypted


disk1s4 - VM [APFS VM] (Shared - 5.55 GB used)

APFS

Mount point: /private/var/vm


Network:

Interface en0: Ethernet

Interface fw0: FireWire

Interface en1: Wi-Fi

802.11 a/b/g/n

Interface en4: iPhone

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge


System Software:

macOS Mojave 10.14.1 (18B75)

Time since boot: About 4 hours


Security:

System Status
Gatekeeper Enabled
System Integrity Protection Enabled

Adware:

Launchd: /Library/LaunchDaemons/com.apple.crybur.plist

Reason: Adware pattern match

Executable: /Library/crybur


Unsigned Files:

Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.plist

Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard10/VideoGuard10.bundle/Contents/Resources/setupServer.sh

Details: Restrictive config permissions - possibly adware

Launchd: ~/Library/LaunchAgents/com.cisco.videoguardmonitor.plist

Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuardMonitor/VideoGuardMonitor.bundle/Contents/Resources/launch.sh

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.FkfKF.plist

Executable: /Library/CeOOc/enCiD

Details: Restrictive app permissions - possibly adware

Launchd: /Library/LaunchAgents/com.dBQgA.plist

Executable: /Library/search.amp/WihuS

Details: Domain name invalid - possibly adware

Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist

Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.fi5h8.plist

Executable: /Library/uqFnh/QR2yG

Details: Domain name invalid - possibly adware

Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.uninstall.plist

Executable: /bin/sh ~/.cisco/VideoGuard/uninstall/cisco_videoguard10/condUninstall.sh

Details: Restrictive config permissions - possibly adware


System Launch Agents:

[Not Loaded] 16 Apple tasks
[Loaded] 186 Apple tasks
[Running] 96 Apple tasks
[Other] One Apple task

System Launch Daemons:

[Not Loaded] 36 Apple tasks
[Loaded] 206 Apple tasks
[Running] 92 Apple tasks
[Other] One Apple task

Launch Agents:

[Not Loaded] com.howkit_Bluenoser.plist (? 0 - installed 2017-08-17)
[Other] com.dBQgA.plist (? eb5aec12 - installed 2018-07-30)
[Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2018-10-20)
[Loaded] com.birdcatching.kj.plist (Apple - installed 2017-10-23)
[Loaded] com.fi5h8.plist (? 834588c5 - installed 2018-08-21)

Launch Daemons:

[Loaded] com.FkfKF.plist (? 86a75fe3 - installed 2018-07-30)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-09-21)
[Other] com.apple.crybur.plist (Adware - installed 2017-08-12)
[Not Loaded] com.wmtqiglhfvpm.plist (? 0 - installed 2017-08-12)
[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2018-10-20)
[Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2018-10-24)
[Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-07-02)
[Loaded] com.fSRbunIX.plist (Apple - installed 2017-08-12)

User Launch Agents:

[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-10-24)
[Running] com.spotify.webhelper.plist (? 0 - installed 2017-12-27)
[Loaded] com.cisco.videoguard10.uninstall.plist (? 0 - installed 2018-10-24)
[Running] com.cisco.videoguardmonitor.plist (? 0 - installed 2018-10-24)
[Loaded] com.cisco.videoguard10.plist (? 0 - installed 2018-10-24)

Internet Plug-ins:

Silverlight: 5.1.50901.0 (installed 2017-08-11)

FlashPlayer-10.6: 31.0.0.122 (installed 2018-10-20)

Flash Player: 31.0.0.122 (installed 2018-10-20)

QuickTime Plugin: 7.7.3 (installed 2018-11-09)


3rd Party Preference Panes:

Flash Player (installed 2018-09-21)


Time Machine:

Time Machine Not Configured!


Performance:

System Load: 2.44 (1 min ago) 2.23 (5 min ago) 2.45 (15 min ago)

Nominal I/O speed: 5.91 MB/s

File system: 96.65 seconds

Write speed: 51 MB/s

Read speed: 50 MB/s


CPU Usage:

Type Overall Individual cores
System 21 % 29 % 9 % 38 % 9 %
User 12 % 15 % 6 % 20 % 5 %
Idle 67 % 55 % 84 % 42 % 86 %

Top Processes by CPU:

Process (count) Source CPU Location
Other processes ? 127.97 %
EtreCheck App Store 3.28 %
corespotlightd Apple 0.21 %
MacsFanControl ? 0.18 % ~/Applications/Macs Fan Control.app
sharingd Apple 0.11 %

Top Processes by Memory:

Process (count) Source RAM usage Location
EtreCheck App Store 417 MB
Safari Apple 168 MB
App Store Apple 131 MB
Microsoft Word Microsoft Corporation 89 MB
Finder Apple 88 MB

Top Processes by Network Use:

Process Source Input Output Location
mDNSResponder Apple 447 KB 171 KB
python ? 0 B 114 KB
apsd Apple 9 KB 13 KB
netbiosd Apple 10 KB 7 KB
CalendarAgent Apple 4 KB 5 KB

Virtual Memory Information:

Available RAM 1.83 GB
Free RAM 394 MB
Used RAM 6.17 GB
Cached files 1.45 GB
Swap Used 172 MB

Software Installs (past 30 days):

Name Version Install Date
Microsoft Outlook for Mac 2018-10-20
Microsoft OneNote for Mac 2018-10-20
Microsoft Excel for Mac 2018-10-20
Adobe Flash Player 2018-10-20
Microsoft AutoUpdate 2018-10-20
Microsoft PowerPoint for Mac 2018-10-20
Microsoft Word for Mac 2018-10-20
Gatekeeper Configuration Data 156 2018-10-31
EtreCheck 5.0.2 2018-11-10

Diagnostics Information (past 7 days):

Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.


End of report
 
Malwarebytes hat die Datei tatsächlich als Malware identifiziert.
Danke für die Tips.
 
Hi,
du hast dir einiges an Malware/Adware eingefangen, Malwarebytes downloaden, aber von der Orginal Page, und damit das System entwanzen :)), dann nochmal mit Etrecheck das System scannen, eventuell sind noch Reste manuell zu entfernen.

Gruß Franz
 
Gesagt getan. Man merkt bereits den Unterschied.
Danke!
 
Zurück
Oben Unten