MacBookPro startet ungewollt neu - wie finde ich die Ursache?

mausfang · 24.05.2019

Habe denn Fall, dass mein MBP (Mojave 10.14.4) bereits mehrmals wenn ich zurück an den Arbeitsplatz einen Neustart durchgeführt hatte.
Dann kann ich mich nicht mehr mit Fingerprint authentifizieren, sondern muss mich komplett neu mit Passwort anmelden.

Wie finde ich die Ursache? Hatte so etwas noch nie und weiß nicht so recht wo ich anfangen soll.

Ich habe einen Etrecheck-Report (in Hinblick auf ungewollte Neustarts) gemacht:

Teil1:

Code:

EtreCheck version: 5.2 (5029)
Report generated: 2019-05-24 11:15:31
Download EtreCheck from https://etrecheck.com
Runtime: 1:30
Performance: Excellent
Sandbox: Enabled
Full drive access: Enabled

Problem: Computer is restarting

Major Issues:
  Anything that appears on this list needs immediate attention.
  Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
  Apps crashing - There have been numerous app crashes.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.

Hardware Information:
  MacBookPro15,3
  MacBook Pro Model: MacBookPro15,3
  1 2,9 GHz Intel Core i9 (i9-8950HK) CPU: 6-core
  32 RAM - Not upgradeable
    BANK 0/ChannelA-DIMM0 - 16 GB DDR4 2400  ok
    BANK 2/ChannelB-DIMM0 - 16 GB DDR4 2400  ok
  Battery: Health = Normal - Cycle count = 48

Video Information:
  Intel UHD Graphics 630 - VRAM: 1536 MB
  Radeon Pro Vega 20 - VRAM: 4 GB
    Color LCD 3360 x 2100

Drives:
  disk0 - APPLE SSD AP1024M 1.00 TB (Solid State - TRIM: Yes)
  Internal PCI-Express 8.0 GT/s x4 NVM Express
    disk0s1 - EFI [EFI] 315 MB
    disk0s2 [APFS Container] 1.00 TB
      disk1 [APFS Virtual drive] 1.00 TB (Shared by 4 volumes)
        disk1s1 - Macintosh HD (APFS) (Shared - 741.14 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)
        disk1s3 - Recovery (APFS) [Recovery] (Shared)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 1.07 GB used)

Mounted Volumes:
  disk1s1 - Macintosh HD 1.00 TB (257.25 GB free)
    APFS
    Mount point: /
    Encrypted

  disk1s4 - VM [APFS VM] (Shared - 1.07 GB used)
    APFS
    Mount point: /private/var/vm
    Encrypted

  disk2s2 - D********8 3.66 GB (3.17 GB free)
    Journaled HFS+
    Disk Image
    Mount point: /Volumes/D********8
    Owners enabled: No

Network:
  Interface en7: Thunderbolt Ethernet Slot 1
  Interface en9: iPad
  Interface fw0: Thunderbolt FireWire
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en8: iPhone
  Interface en6: Bluetooth PAN
  Interface bridge0: Thunderbolt Bridge

mausfang · 24.05.2019

EtreCheck Teil2:

Code:

System Software:
  macOS Mojave 10.14.4 (18E226)
  Time since boot: About 5 hours

Notifications:
  /Applications/EtreCheck.app
    one notification

  /Applications/DriveDx.app
    5 notifications

  /Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app
    7 notifications

  /Applications/NeoFinder.app
    one notification

  /Applications/DEVONthink Pro.app
    2 notifications

  ~/Library/Application Support/Setapp/LaunchAgents/Setapp.app
    one notification

Security:
  System Status
  Gatekeeper: Enabled
  System Integrity Protection: Enabled

Unsigned Files:
  Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.BlueStacks.AppPlayer.Service.plist
    Executable: /Applications/BlueStacks.app/Contents/MacOS/bstservice Android
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/homebrew.mxcl.sleepwatcher.plist
    Executable: /usr/local/sbin/sleepwatcher -V '-s ~/.sleep' '-w ~/.wakeup' -t 1200 '-i ~/.idle'
    Details: Domain name invalid - possibly adware

  Launchd: ~/Library/LaunchAgents/com.amazon.music.plist
    Executable: /Applications/Amazon Music.app/Contents/MacOS/Amazon Music Helper
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the whitelist - probably OK

  Launchd: /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist
    Executable: /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF
    Details: Exact match found in the whitelist - probably OK

  Launchd: ~/Library/LaunchAgents/com.hopf.neofinder.script.plist
    Executable: /usr/bin/osascript ~/Desktop/Test_UpdateCatalog.scpt

Kernel Extensions:
  /Library/Extensions
    EnergyDriver.kext (3.5.5 - SDK 10.14)
    DuetDisplay.kext (2.1.4 - SDK 10.9)

  /System/Library/Extensions
    daspi.kext (1.5)
    SATSMARTDriver.kext (0.8.1 - SDK 10.6)

System Launch Agents:
  [Not Loaded]  17 Apple tasks
  [Loaded]  161 Apple tasks
  [Running]  123 Apple tasks

System Launch Daemons:
  [Not Loaded]  36 Apple tasks
  [Loaded]  170 Apple tasks
  [Running]  129 Apple tasks

Launch Agents:
  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-05-22)
  [Not Loaded] com.oracle.java.Java-Updater.plist (? 3774d46b  - installed 2019-05-07)
  [Other] com.staticz.soundsiphon.inputagent.plist (? 2301be46  - installed 2019-02-25)
  [Running] com.staticz.soundsiphon.playeragent.plist (Dominic Feira - installed 2019-04-03)

Launch Daemons:
  [Loaded] com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - installed 2019-03-28)
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-03-21)
  [Loaded] com.bjango.istatmenus-setapp.installerhelper.plist (Bjango Pty Ltd - installed 2019-04-21)
  [Running] com.bjango.istatmenus.daemon.plist (Bjango Pty Ltd - installed 2019-04-21)
  [Running] com.bjango.istatmenus.fans.plist (? 9a713d46  - installed 2019-04-21)
  [Running] com.bombich.ccchelper.plist (Bombich Software, Inc. - installed 2019-02-26)
  [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2019-02-08)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-05-22)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-08-04)
  [Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2  - installed 2019-05-07)
  [Loaded] com.soma-zone.LaunchControl.Helper.plist (Robby Pahlig - installed 2019-04-11)
  [Running] com.staticz.soundsiphon.bridgedaemon.plist (Dominic Feira - installed 2019-04-03)
  [Loaded] org.wireshark.ChmodBPF.plist (? d4207e05  - installed 2019-03-04)

User Launch Agents:
  [Loaded] com.BlueStacks.AppPlayer.Service.plist (? 0  - installed 2019-03-28)
  [Loaded] com.BlueStacks.AppPlayer.UninstallWatcher.plist (BlueStack Systems, Inc. - installed 2019-03-28)
  [Other] com.BlueStacks.AppPlayer.Updater.plist (BlueStack Systems, Inc. - installed 2019-03-28)
  [Running] com.amazon.music.plist (? 0  - installed 2019-05-06)
  [Not Loaded] com.amazon.music.startup.plist (? 0  - installed 2019-03-12)
  [Running] com.bjango.istatmenus.agent.plist (Bjango Pty Ltd - installed 2019-04-21)
  [Running] com.bjango.istatmenus.status.plist (Bjango Pty Ltd - installed 2019-04-21)
  [Running] com.coconut-flavour.coconutBattery-Menu.plist (Christoph Sinai - installed 2019-03-28)
  [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-05-10)
  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-05-10)
  [Other] com.hopf.neofinder.script.plist (? 0  - installed 2019-04-11)
  [Running] com.setapp.DesktopClient.SetappAgent.plist (Setapp Limited - installed 2019-05-13)
  [Loaded] com.setapp.DesktopClient.SetappUpdater.plist (Setapp Limited - installed 2019-05-13)
  [Running] homebrew.mxcl.sleepwatcher.plist (? 0  - installed 2019-05-04)

User Login Items:
  2Do Helper (Beehive Innovations Services - installed 2019-05-22)
    (Modern Login Item - /Applications/Setapp/2Do.app/Contents/Library/LoginItems/EKT6323JY3.com.guidedways.TodoMac.Helper.app)

  AppCleaner SmartDelete (Julien Ramseier - installed 2019-04-11)
    (Modern Login Item - /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app)

  Background Scheduler Launcher (App Store - installed 2019-02-15)
    (Modern Login Item - /Applications/ChronoSync Express.app/Contents/Library/LoginItems/Background Scheduler Launcher.app)

  CCC User Agent.app (Bombich Software, Inc. - installed 2019-02-26)
    (Application - /Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app)

  DEVONthink Sorter.app (DEVONtechnologies, LLC - installed 2019-04-04)
    (Application - /Applications/DEVONthink Pro.app/Contents/PlugIns/SorterPlugin.bundle/Contents/MacOS/DEVONthink Sorter.app)

  DriveDxLoginItemHelper (Kirill Luzanov - installed 2019-02-03)
    (Modern Login Item - /Applications/DriveDx.app/Contents/Library/LoginItems/DriveDxLoginItemHelper.app)

  LauncherApp (App Store - installed 2019-02-03)
    (Modern Login Item - /Applications/uBlock.app/Contents/Library/LoginItems/LauncherApp.app)

  Macs Fan Control.app (Ilya Parniuk - installed 2019-02-06)
    (Application - /Applications/Macs Fan Control.app)

  Magnet.app (App Store - installed 2019-05-03)
    (Application - /Applications/Magnet.app)

  NeoFinder Global QuickFind.app (NORBERT M. DOERNER - installed 2019-05-06)
    (Application - /Applications/NeoFinder.app/Contents/Resources/NeoFinder Global QuickFind.app)

  Parallels Toolbox.app (Parallels International GmbH - installed 2019-02-08)
    (Application - /Applications/Parallels Toolbox.app)

  Resilio Sync.app (Resilio, Inc. - installed 2019-01-11)
    (Application - /Applications/Resilio Sync.app)

  duet.app (Duet, Inc. - installed 2019-03-16)
    (Application - /Applications/duet.app)

  nextcloud.app (Nextcloud GmbH - installed 2019-03-08)
    (Application - /Applications/nextcloud.app)

Internet Plug-ins:
  JavaAppletPlugin: Java 8 Update 212 build 10 (? - installed 2019-05-07)

mausfang · 24.05.2019

EtreCheck Teil3:

Code:

Audio Plug-ins:
  AirPlay: 2.0 (Apple - installed 2019-04-02)
  ZSoundSiphon: 3.1.3 (Dominic Feira - installed 2019-04-13)
  BridgeAudioSP: 5.39 (Apple - installed 2019-04-02)
  iSightAudio: 7.7.3 (Apple - installed 2019-04-02)
  AppleAVBAudio: 740.1 (Apple - installed 2019-04-02)
  _SoundSiphon: 3.1.3 (Dominic Feira - installed 2019-04-03)
  BluetoothAudioPlugIn: 6.0.11 (Apple - installed 2019-04-02)
  AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-04-02)

Safari Extensions:
  Download Video - App Store (installed 2019-02-07)
  Inboard - App Store (installed 2019-02-05)
  Keeeb.safariextz - Keeeb Deutschland GmbH - https://www.keeeb.com/ (installed 2019-04-05)
  Open in Internet Explorer - App Store (installed 2019-03-12)
  Screenshot Page - App Store (installed 2019-02-07)
  Send to MarsEdit - App Store (installed 2019-05-21)
  uBlock - App Store (installed 2018-07-23)
  uBlock Safari Icon - App Store (installed 2018-07-23)

3rd Party Preference Panes:
  FUSE (installed 2019-05-03)
  Java (installed 2019-04-02)

Time Machine:
  Skip System Files: No
  Auto backup: Yes
  Volumes being backed up: 
    Macintosh HD: Disk size: 1.00 TB - Disk used: 742.99 GB 
  Destinations: 
    T***************p [Network]
      Total size: 1.03 TB
      Total number of backups: 15
      Oldest backup: 2019-05-03 07:03:48
      Last backup: 2019-05-20 23:39:19
    T***************p [Network] (Last used)
      Total size: 980.06 GB
      Total number of backups: 6
      Oldest backup: 2019-05-22 00:33:47
      Last backup: 2019-05-24 06:11:03
    D**a [Network]
      Total size: 2.85 TB
      Total number of backups: 27
      Oldest backup: 2019-02-06 21:47:25
      Last backup: 2019-05-24 04:58:48
  10 local snapshots
  Oldest local snapshot: 2019-05-20 23:33:11
  Last local snapshot: 2019-05-24 06:05:34
  9 other local snapshots

Performance:
  System Load: 2.01 (1 min ago) 1.74 (5 min ago) 1.75 (15 min ago)
  Nominal I/O speed: 0.59 MB/s
  File system: 17.97 seconds
  Write speed: 2925 MB/s
  Read speed: 3094 MB/s

CPU Usage Snapshot:
  Type Overall
  System 2 %
  User 4 %
  Idle 94 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  EtreCheck 26.86 % (App Store)
  Other processes 24.67 % (?)
  Safari 3.68 % (Apple)
  com.apple.WebKit.WebContent (8) 2.65 % (Apple)
  Dock 2.16 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheck 935 MB (App Store)
  DEVONthink Pro 318 MB (DEVONtechnologies, LLC)
  MarsEdit 271 MB (Red Sweater Software)
  Safari 231 MB (Apple)
  2Do 226 MB (Beehive Innovations Services)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  SubmitDiagInfo 1 MB / 309 B (Apple)
  mDNSResponder 503 KB / 236 KB (Apple)
  biometrickitd 245 KB / 140 KB (Apple)
  com.apple.WebKit.Networking 316 KB / 39 KB (Apple)
  netbiosd 53 KB / 12 KB (Apple)

Virtual Memory Information:
  Physical RAM: 32 GB

  Free RAM: 16.17 GB
  Used RAM: 11.04 GB
  Cached files: 4.79 GB

  Available RAM: 20.96 GB
  Swap Used: 0 B

Software Installs (past 30 days):
  Install Date Name (Version)
  2019-04-28 Qfinder Pro (1.0)
  2019-05-01 WhatsApp (0.3.2848)
  2019-05-03 Microsoft Remote Desktop (10.2.13)
  2019-05-03 LanScan (6.2.0)
  2019-05-03 Magnet (2.4.3)
  2019-05-04 JDK 12.0.1 (12.0.1.0.)
  2019-05-04 EPSON Printer (9.33)
  2019-05-04 EPSON Scan (4.0.1.1)
  2019-05-04 Epson Scanner ICA Driver (5.8.6)
  2019-05-04 EPSON Scan Patch for El Capitan (1.0)
  2019-05-04 Epson Print Layout (1.0.0)
  2019-05-04 EpsonNet Config (4.9.6)
  2019-05-04 Epson Easy Photo Print (1.10)
  2019-05-07 NetBeans 8.2 (0)
  2019-05-07 JDK 8 Update 212 (1.1)
  2019-05-09 PicGIF Lite (2.0.8)
  2019-05-13 FUSE for macOS (3.9.0)
  2019-05-17 Microsoft Outlook (16.25.19051201)
  2019-05-19 Microsoft Word (16.25.19051201)
  2019-05-19 Microsoft Excel (16.25.19051201)
  2019-05-21 Microsoft PowerPoint (16.25.19051201)
  2019-05-22 Microsoft AutoUpdate (4.11.19051201)

Clean up:
  /Library/LaunchAgents/com.staticz.soundsiphon.inputagent.plist
    /Applications/Sound Siphon.app/Contents/XPCServices/Sound Siphon Microphone Input.app/Contents/MacOS/Sound Siphon Microphone Input
    Executable not found


Diagnostics Information (past 7 days):
  2019-05-24 11:07:24 iStatMenusDaemon Crash
    Executable: /Library/Application Support/iStat Menus 6/iStatMenusDaemon

  2019-05-24 06:07:21 backupd CPU
    Executable: /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd

  2019-05-23 21:00:07 Resilio Sync.app CPU
    Executable: /Applications/Resilio Sync.app

  2019-05-23 20:00:31 iStat Menus Status.app Crash
    Executable: /Applications/Setapp/iStat Menus.app/Contents/Resources/InstallerBundle.bundle/Contents/Resources/iStat Menus Status.app
    Details:
      *** Terminating app due to uncaught exception 'NSInvalidArgumentExcept
      ion', reason: '*** -[__NSPlaceholderDictionary initWithObjects:forKeys
      :count:]: attempt to insert nil object from objects[0]'
      terminating with uncaught exception of type NSException
      abort() called

  2019-05-22 21:05:37 signpost_reporter CPU
    Executable: /usr/libexec/signpost_reporter

  2019-05-19 12:19:40 Visual Studio Code.app Crash
    Executable: /Applications/Visual Studio Code.app


End of report

YoungApple · 24.05.2019

mausfang schrieb:
Launchd: ~/Library/LaunchAgents/homebrew.mxcl.sleepwatcher.plist Executable: /usr/local/sbin/sleepwatcher -V '-s ~/.sleep' '-w ~/.wakeup' -t 1200 '-i ~/.idle' Details: Domain name invalid - possibly adware

Vielleicht hat es ja damit etwas zu tun!

mausfang · 24.05.2019

YoungApple schrieb:
Vielleicht hat es ja damit etwas zu tun!

Vielen Dank für Deine Nachricht.

Sleepwatcher ist ein Tool, das beim Sleep, Wakeup und Idle benutzerdefinierte Aktionen über ein Shellscript auslösen kann.
Habe ich selbst installiert und hatte schon Kontakt mit dem Entwickler.

Ich beziehe es aber mal in den Kreis der Verdächtigen ein. Wenn ich es deaktiviere und der Fehler tritt weiter auf, dann kann ich es ausschließen. (Das Tool läuft auch schon sehr viel länger installiert als der Fehler auftritt.)

YoungApple · 24.05.2019

Ich würde auch in der Konsole nachsehen, was dort als Grund für den Shutdown angegeben ist.

mausfang · 24.05.2019

Ja, würde ich auch (wenn ich wüsste wie das geht.)

dg2rbf · 24.05.2019

Hi,
Geh mal zu Programme/Dienstprogramme dort findest du das Programm Konsole.

Franz

mausfang · 24.05.2019

dg2rbf schrieb:
Geh mal zu Programme/Dienstprogramme dort findest du das Programm Konsole.

Danke für den Tipp. Das weiß ich ja. Aber wie findet man dort die Ursache.

oneOeight · 24.05.2019

mausfang schrieb:
Danke für den Tipp. Das weiß ich ja. Aber wie findet man dort die Ursache.

guck dir halt die einträge um die ungefähre uhrzeit des neustarts an.
meist steht da was von reason for shutdown o.ä.

sonst miste doch mal etwas aus.
oder nutzt du den ganzen kram noch?
speziell die selbst installierten kext.
/System/Library/Extensions
daspi.kext (1.5)
SATSMARTDriver.kext (0.8.1 - SDK 10.6)
die gehören da eigentlich wegen der SIP gar nicht mehr in den ordner, sondern nach /Library/Extensions.

mausfang · 24.05.2019

oneOeight schrieb:
sonst miste doch mal etwas aus.
oder nutzt du den ganzen kram noch?
speziell die selbst installierten kext.
/System/Library/Extensions
daspi.kext (1.5)
SATSMARTDriver.kext (0.8.1 - SDK 10.6)
die gehören da eigentlich wegen der SIP gar nicht mehr in den ordner, sondern nach /Library/Extensions.

Das hat DriveDX für die S.M.A.R.T-Auswertung von externen Datenträgern installiert.

Edit: Falls das da besser aufgehoben ist, dann hat der Installer das vermurkst.

oneOeight · 24.05.2019

mausfang schrieb:
Das hat DriveDX für die S.M.A.R.T-Auswertung von externen Datenträgern installiert.

ja, aber noch auf einem pre-SIP system

mausfang · 24.05.2019

oneOeight schrieb:
ja, aber noch auf einem pre-SIP system

Die Installation war schon unter Mojave.

Edit: Bin mir nicht mehr sicher ob ich SIP zeitweise deaktivieren musste.

MacBookPro startet ungewollt neu - wie finde ich die Ursache?

mausfang

Aktives Mitglied

mausfang

Aktives Mitglied

mausfang

Aktives Mitglied

YoungApple

Aktives Mitglied

mausfang

Aktives Mitglied

YoungApple

Aktives Mitglied

mausfang

Aktives Mitglied

dg2rbf

Aktives Mitglied

mausfang

Aktives Mitglied

oneOeight

unregistriert

mausfang

Aktives Mitglied

oneOeight

unregistriert

mausfang

Aktives Mitglied