Mögliches Security Problem nach Installation gecrackter Software

jonnyberlin

Aktives Mitglied
Thread Starter
Dabei seit
22.12.2012
Beiträge
194
Reaktionspunkte
36
Meine Freundin hat gerade versucht ein gecracktes Programm zu installieren und mir dann davon erzählt weil ihr Macbook Lüfter auf einmal hochdreht sobald er am Netz hängt.
Mit Wlan aus ist alles ok.

Sie hat folgendes Skript ausgeführt:
Code:
#!/bin/bash
printf '\e[1;40;92m'
clear
printf "All TNT releases are provided\n\tfree of charge for educational and uncommercial reasons.\n"
printf "Все релизы TNT предоставляются\n\tбезвозмездно для образовательных и некоммерческих целей.\n"
echo ""
echo "Press ENTER if you agree or close this window!"
echo "Нажмите ENTER, если вы согласны, или закройте окно!"
read ok
echo "Please wait..."
echo "Пожалуйста, подождите..."
echo ""
DMG=$(dirname "$0")
DIR=/tmp/tnt$RANDOM
rm -rf $DIR
mkdir -p $DIR
cp "$DMG/Manual install"/*.dmg $DIR
xattr -r -d com.apple.quarantine $DIR/*.dmg  &>/dev/null
#if [ $? -ne 0 ]; then
# echo "Failed to add a Gatekeep exception, please try manual installation!"
# echo "Ошибка добавления исключения Gatekeep, установите программу вручную!"
# printf '\e[39m'
# exit 1
#fi
mkdir -p $DIR/mount
hdiutil attach -owners on -quiet -noverify -mountpoint $DIR/mount $DIR/*.dmg -shadow $DIR/shadow
find $DIR/mount -maxdepth 1 \! -type l \! -path $DIR/mount -exec xattr -r -d com.apple.quarantine {} \; &>/dev/null
echo ""
echo "If the application fails to open wait a bit and try again!"
echo "Если программа не открывается, подождите немного и попробуйте снова!"
echo ""
echo "Have a nice day/night!"
echo "Приятного дня/вечера!"
(sleep 5 && hdiutil detach -force "$DMG") &
printf '\e[39m'
exit 0

Erkennt ihr darin was? Ich hab keine Ahnung davon. Habe erstmal Internet ausgemacht und einen Virenscanner installiert. Avira hat nichts gefunden. Ich finde es aber sehr verdächtig, dass ihr Lüfter hochdreht sobald das Internet angeht.
Ich frage mich gerade ob ich die Kiste komplett killen sollte und neu aufsetze oder ob das nicht nötig ist und man es entsprechend absichern kann.
Killen würde ich gern vermeiden weil es an mir hängen bleiben wird und echt viel Arbeit sein wird...
 
Zuletzt bearbeitet von einem Moderator:
Habe erstmal Internet ausgemacht und einen Virenscanner installiert. Avira hat nichts gefunden.
Ganz blöde Idee. https://walfreihe.it/antivirensoftware/

Grundsätzlich kann es hier nur einen Tipp geben: Software kaufen. Wir unterstützen hier diese Raubkopiererei nicht.
Wie kann man ein solches Skript ausführen, was unleserliche Zeichen enthält? Spätestens da hätte man die Finger davon lassen sollen. Das Skript will die Systemsicherheitsfunktionen ausschalten. Lasst den Scheiß sein!

Lass uns mal schauen wie versaut das System jetzt ist: Erstelle doch bitte ein Systemprotokoll, damit wir alle wesentlichen Informationen auf einen Blick haben: https://walfreihe.it/tipps-tricks/etrecheck/
 
Zuletzt bearbeitet von einem Moderator:
Aus meiner persönlichen Erfahrung heraus glaube ich nicht, daß es da einen Zusammenhang gibt.
 
Ganz blöde Idee. https://walfreihe.it/antivirensoftware/

Grundsätzlich kann es hier nur einen Tipp geben: Software kaufen. Wir unterstützen hier diese Raubkopiererei nicht.
Wie kann man ein solches Skript ausführen, was unleserliche Zeichen enthält? Spätestens da hätte man die Finger davon lassen sollen. Das Skript will die Systemsicherheitsfunktionen ausschalten. Lasst den Scheiß sein!

Lass uns mal schauen wie versaut das System jetzt ist: Erstelle doch bitte ein Systemprotokoll, damit wir alle wesentlichen Informationen auf einen Blick haben: https://walfreihe.it/tipps-tricks/etrecheck/
Ich hab die besagte Software legal...sie wollte nicht warten bis ich da bin und es ihr installiere. Ich sehe das wie du aber das Kind liegt ja bereits im Brunnen...und jetzt muss ich schauen, dass da nichts weiteres im argen ist.
 
Zuletzt bearbeitet von einem Moderator:
Vielleicht betreibt der Rechner jetzt Mining, wenn der Lüfter angeht!? 🥴
 
Das Skript macht nix außer das com.apple.quarantine-Attribut zu löschen, damit Gatekeeper seine Finger davon lässt (aus offensichtlichen Gründen, Code-Signing ist bei einem gecrackten Programm hinfällig).

Was das eigentliche Programm (wurde es schon mal gestartet?) macht siehst du hier nicht. Kann grundsätzlich alles mögliche sein, würde ohne weiteren Anhaltspunkt aber nichts schlimmes vermuten.

Welcher Prozess erzeugt denn die Last die zu den laufenden Lüftern führt?
 
EtreCheckPro version: 6.5.1 (6F003)
Report generated: 2021-08-17 12:33:08
Code:
Download EtreCheckPro from https://etrecheck.com
Runtime: 5:42
Performance: Below Average

Problem: No problem - just checking

Major Issues:
  Anything that appears on this list needs immediate attention.
  Battery failure - Your battery is reporting that it needs to be serviced.
  Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.
  No Time Machine backup - Time Machine backup not found.
  Low disk space - This computer is running low on free hard drive space.
  Heavy RAM usage - Apps are using a large amount of RAM.
  Apps crashing - There have been numerous app crashes.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.
  System modifications - There are a large number of system modifications running in the background.
  Low performance - EtreCheck report took an unusually long time to run.
  Vintage hardware - This computer may be considered vintage.
  x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system.
  Limited drive access - More information may be available with Full Drive Access.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.
  Sharing enabled - This computer has sharing services enabled that could be a security risk.

Hardware Information:
  MacBook Pro (Retina, 15-inch, Late 2013) - Vintage!
  MacBook Pro Model: MacBookPro11,3
  2,6 GHz Quad-Core Intel Core i7 (i7-4960HQ) CPU: 4-core
  16 GB RAM - Not upgradeable
    BANK 0/DIMM0 - 8 GB DDR3 1600 
    BANK 1/DIMM0 - 8 GB DDR3 1600 
  Battery: Health = Service Battery - Cycle count = 257

Video Information:
  Intel Iris Pro - VRAM: 1536 MB
  NVIDIA GeForce GT 750M - VRAM: 2 GB
    Color LCD (built-in) 2880 x 1800

Drives:
  disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)
  Internal PCI 5.0 GT/s x2 Serial ATA
    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
    disk0s2 [APFS Container] 500.07 GB
      disk1 [APFS Virtual drive] 500.07 GB (Shared by 5 volumes)
        disk1s1 - M******************n (APFS) [APFS Virtual drive] (Shared - 453.39 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 82 MB used)
        disk1s3 - Recovery (APFS) [Recovery] (Shared - 529 MB used)
        disk1s4 - VM (APFS) [APFS VM] (Shared - 7.52 GB used)
        disk1s5 - Macintosh HD (APFS) (Shared - 11.33 GB used)

  disk3 - Samsung PSSD T7 1.00 TB
  External USB 480 Mbit/s USB
    disk3s1 - K************E (Journaled HFS+) 1.00 TB (673.05 GB used)

Mounted Volumes:
  disk1s1 - M******************n [APFS Virtual drive]
    500.07 GB (Shared - 453.39 GB used, 42.89 GB available, 27.05 GB free)
    APFS
    Mount point: /System/Volumes/Data
    Encrypted

  disk1s4 - VM [APFS VM]
    500.07 GB (Shared - 7.52 GB used, 27.05 GB free)
    APFS
    Mount point: /private/var/vm

  disk1s5 - Macintosh HD
    500.07 GB (Shared - 11.33 GB used, 42.89 GB available, 27.05 GB free)
    APFS
    Mount point: /
    Encrypted
    Read-only: Yes

  disk3s1 - K************E
    1.00 TB (673.05 GB used, 327.23 GB available, 327.15 GB free)
    Journaled HFS+
    Mount point: /Volumes/K************E
    Owners enabled: No

  disk4s1 - C***********************0
    938 MB (648 MB used, 291 MB free)
    Mac OS Extended
    Disk Image
    Mount point: /Volumes/C***********************0
    Owners enabled: No
    Read-only: Yes

Network:
  Interface en0: Wi-Fi
   
  Interface en4: iPhone
  Interface en3: Bluetooth PAN

  File sharing: Enabled

System Software:
  macOS Catalina 10.15.7 (19H524)
  Time since boot: About 15 days

Notifications:
  MagicPrefs.app
    45 notifications

  Signal.app
    one notification

  Safari.app
    30 notifications

  Creative Cloud.app
    29 notifications

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple and Avira

  File sharing: Enabled

Unsigned Files:
  Launchd: ~/Library/LaunchAgents/com.vladalexa.MagicPrefs.plist
    Executable: /Applications/MagicPrefs.app/Contents/MacOS/MagicPrefs
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
    Executable: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=scheduled
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.plist
    Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard10/VideoGuard10.bundle/Contents/Resources/setupServer.sh
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.prosofteng.KXInstaller.plist
    Executable: /Library/PrivilegedHelperTools/com.prosofteng.KXInstaller
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.protech.NoSleep.plist
    Executable: /Applications/Utilities/NoSleep.app/Contents/MacOS/NoSleepDaemon
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/org.macosforge.xquartz.startx.plist
    Executable: /opt/X11/lib/X11/xinit/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist
    Executable: /opt/X11/lib/X11/xinit/privileged_startx -d /opt/X11/lib/X11/xinit/privileged_startx.d
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.avira.security.uninstalld.plist
    Executable: /Library/Application Support/Avira Security/uninstaller.sh

  Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.uninstall.plist
    Executable: /bin/sh ~/.cisco/VideoGuard/uninstall/cisco_videoguard10/condUninstall.sh
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.wdc.WDPrivilegedHelper.plist
    Executable: /Library/PrivilegedHelperTools/com.wdc.WDPrivilegedHelper
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/Caches/com.captureone.captureone14/com.captureone.COOpenWithPluginPluginHost.plist
    Executable: /Applications/Capture One 21.app/Contents/XPCServices/COPluginHost.xpc/Contents/MacOS/COPluginHost -serviceName com.captureone.COOpenWithPluginPluginHost -copid 95791

  Launchd: /Library/LaunchDaemons/com.oracle.java.JavaUpdateHelper.plist
    Executable: /Library/PrivilegedHelperTools/com.oracle.java.JavaUpdateHelper
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist
    Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist
    Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.avira.security.migratord.plist
    Executable: /Library/Application Support/Avira/MigratorUIAgent.app/Contents/XPCServices/migratord.xpc/Contents/MacOS/migratord

  Launchd: /Library/LaunchDaemons/com.xrite.device.xrdd.plist
    Executable: /Library/Application Support/X-Rite/Frameworks/XRiteDevice.framework/Versions/B/Resources/xrdd
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
    Executable: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=logon
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.xrite.device.softwareupdate.plist
    Executable: /Library/Application Support/X-Rite/Frameworks/XRiteDevice.framework/Versions/B/Resources/XRD Software Update.app/Contents/MacOS/XRD Software Update
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/com.cisco.videoguardmonitor.plist
    Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuardMonitor/VideoGuardMonitor.bundle/Contents/Resources/launch.sh
    Details: Exact match found in the legitimate list - probably OK

  Running app: /Applications/Capture One 21.app/Contents/MacOS/Capture One 21

  Plugin: /Library/Internet Plug-Ins/NP_2020Player_IKEA.plugin
  Plugin: /Library/Internet Plug-Ins/Silverlight.plugin
  Plugin: /Library/Internet Plug-Ins/WacomTabletPlugin.plugin
  Plugin: ~/Library/Internet Plug-Ins/CWSAssistantPlugin.plugin
  Plugin: ~/Library/Internet Plug-Ins/WebEx64.plugin

  Preference Pane: ~/Library/PreferencePanes/MagicPrefs.prefPane
  Preference Pane: /Library/PreferencePanes/NoSleep.prefPane
  Preference Pane: /Library/PreferencePanes/WacomTablet.prefPane

  Apps: 40
 
Zuletzt bearbeitet von einem Moderator:
Code:
Old Applications:
  238 x86-only apps

System Extensions:
  [Running] Avira Scan Service - version 6.1.2 (Avira Operations GmbH & Co. KG - 2021-07-14)
    Application: /Applications/Avira Security.app - version 6.1.2 (Avira Operations GmbH & Co. KG - 2021-07-14)
    Description: Provides the Antivirus Scans and Protections

Kernel Extensions:
  /Applications/Capture One 12.app
    [Not Loaded] LeafFwXDriverMatcher.kext - com.Leaf.driver.LeafFwXDriverMatcher (1.2.0d1)

  /Applications/FlowSync.app
    [Not Loaded] HoRNDIS.kext - com.joshuawise.kexts.HoRNDIS (8 - SDK 10.6)

  /Library/Application Support/HASP/kexts
    [Not Loaded] aksfridge.kext - com.aladdin.kext.aksfridge (1.0.16332)

  /Library/Extensions
    [Not Loaded] Soundflower.kext - com.Cycling74.driver.Soundflower (1.6.6 - SDK 10.6)
    [Not Loaded] FTDIUSBSerialDriver.kext - com.FTDI.driver.FTDIUSBSerialDriver (2.2.10)
    [Not Loaded] EPSONUSBPrintClass.kext - com.epson.print.kext.USBPrintClass (2.2.7)
    [Loaded] Boom2Device.kext - com.globaldelight.driver.Boom2Device (1.2 - SDK 10.10)
    [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.2.0)
    [Not Loaded] JMicronATA.kext - com.jmicron.JMicronATA (1.1.6)
    [Not Loaded] NoSleep.kext - com.protech.NoSleep (1.3.3 - SDK 10.8)
    [Not Loaded] SamsungPortableSSDDriver.kext - com.samsung.portablessd.driver (1.5.05 - SDK 10.10)
    [Not Loaded] Wacom Tablet.kext - com.wacom.kext.wacomtablet (Wacom Tablet 6.3.8-2 - SDK 10.9)
    [Not Loaded] BJUSBLoad.kext - jp.co.canon.bj.print.BJUSBLoad (10.75.21 - SDK 10.8)
    [Not Loaded] CIJUSBLoad.kext - jp.co.canon.ij.print.CIJUSBLoad (13.0.0 - SDK 10.9)

System Launch Daemons:
  [Not Loaded]  33 Apple tasks
  [Loaded]  186 Apple tasks
  [Running]  117 Apple tasks
  [Other]  One Apple task

System Launch Agents:
  [Not Loaded]  16 Apple tasks
  [Loaded]  158 Apple tasks
  [Running]  138 Apple tasks
  [Other]  One Apple task

Launch Daemons:
  [Not Loaded] PPPMonitord.plist (? a94c92f4  - installed 2011-04-11)
  [Running] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2021-07-20)
  [Loaded] com.adobe.agsservice.plist (Adobe Inc. - installed 2021-08-16)
  [Other] com.aladdin.aksusbd.plist (? 882ffbab  - installed 2015-04-06)
  [Other] com.aladdin.hasplmd.plist (? c5d97ee2  - installed 2015-04-06)
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-08-21)
  [Loaded] com.avira.security.installd.plist (Avira Operations GmbH & Co. KG - installed 2021-07-01)
  [Loaded] com.avira.security.migratord.plist (? 799cf53e  - installed 2021-04-23)
  [Running] com.avira.security.privd.plist (Avira Operations GmbH & Co. KG - installed 2021-07-01)
  [Loaded] com.avira.security.uninstalld.plist (? 7bc7771e  - installed 2021-07-01)
  [Running] com.backblaze.bzserv.plist (Backblaze - installed 2020-11-13)
  [Loaded] com.bresink.system.privilegedtool-ts5.plist (Marcel Bresink - installed 2018-11-23)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-08-06)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-07-02)
  [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2021-07-27)
  [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0  - installed )
  [Loaded] com.oracle.java.JavaUpdateHelper.plist (? 95986cc6  - installed 2015-04-30)
  [Loaded] com.prosofteng.KXInstaller.plist (? bf6f74c  - installed 2014-03-31)
  [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2019-09-11)
  [Not Loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2019-09-11)
  [Loaded] com.wdc.WDPrivilegedHelper.plist (? 9f7f4405  - installed 2015-09-01)
  [Other] com.xrite.device.xrdd.plist (? 28f4ae75  - installed 2014-06-23)
  [Loaded] org.macosforge.xquartz.privileged_startx.plist (? 65395f14  - installed 2015-10-16)

Launch Agents:
  [Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062  - installed 2016-08-17)
  [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2021-07-20)
  [Running] com.adobe.GC.AGM.plist (Adobe Inc. - installed 2021-08-16)
  [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-08-16)
  [Loaded] com.adobe.ccxprocess.plist (Adobe Systems, Inc. - installed 2021-06-10)
  [Running] com.avira.security.UIAgent.plist (Avira Operations GmbH & Co. KG - installed 2021-07-01)
  [Other] com.avira.security.migrator.plist (? 8a398062  - installed 2021-04-23)
  [Running] com.avira.security.statusmenu.plist (Avira Operations GmbH & Co. KG - installed 2021-07-01)
  [Other] com.avira.security.updater.plist (Avira Operations GmbH & Co. KG - installed 2021-07-01)
  [Other] com.brother.LOGINserver.plist (? a1772de2  - installed 2016-10-26)
  [Loaded] com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2020-12-10)
  [Other] com.protech.NoSleep.plist (? bb232386  - installed 2013-03-27)
  [Not Loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2019-09-11)
  [Not Loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2019-09-11)
  [Other] com.wacom.wacomtablet.plist (? 9e9edb5e  - installed 2014-03-31)
  [Loaded] com.xrite.device.softwareupdate.plist (? 2f2d6b43  - installed 2014-06-23)
  [Loaded] org.macosforge.xquartz.startx.plist (? d225a7da  - installed 2015-10-16)

User Launch Agents:
  [Other] com.adobe.AAM.Updater-1.0.plist (? 0  - installed 2016-08-17)
  [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-08-16)
  [Running] com.backblaze.bzbmenu.plist (Backblaze - installed 2021-08-02)
  [Loaded] com.cisco.videoguard10.plist (? 0  - installed 2020-09-22)
  [Loaded] com.cisco.videoguard10.uninstall.plist (? 0  - installed 2020-09-22)
  [Other] com.cisco.videoguardmonitor.plist (? 0  - installed 2020-09-22)
  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2021-06-23)
  [Other] com.google.keystone.agent.plist (Google, Inc. - installed 2021-03-04)
  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-03-04)
  [Running] com.samsung.portablessdplus.mon.plist (Samsung Electronics - installed 2020-12-21)
  [Loaded] com.skype.skype.shareagent.plist (? 0  - installed 2017-11-11)
  [Other] com.valvesoftware.steamclean.plist (? 0  - installed 2020-12-29)
  [Running] com.vladalexa.MagicPrefs.plist (? 0  - installed 2021-08-02)

User Login Items:
  [Running] 2BUA8C4S2C.com.agilebits.onepassword-osx-helper (App Store - installed 2021-07-07)
    Modern Login Item
    /Applications/1Password.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebits.onepassword-osx-helper.app

  [Not Loaded] LaunchHelper (App Store - installed 2021-02-20)
    Modern Login Item
    /Applications/Battery Monitor.app/Contents/Library/LoginItems/LaunchHelper.app

  [Not Loaded] Boom2Daemon (App Store - installed 2021-05-29)
    Modern Login Item
    /Applications/Boom 2.app/Contents/Library/LoginItems/Boom2Daemon.app

  [Running] ChronoSync Scheduler (Econ Technologies, Inc. - installed 2021-05-07)
    Modern Login Item
    /Applications/ChronoSync.app/Contents/Library/LoginItems/ChronoSync Scheduler.app

  [Loaded] Cisco Webex Meetings (Cisco - installed 2021-05-05)
    Application
    /Applications/Cisco Webex Meetings.app

  [Loaded] DeepL Launcher (Linguee GmbH - installed 2021-07-29)
    Modern Login Item
    /Applications/DeepL.app/Contents/Library/LoginItems/DeepL Launcher.app

  [Running] Dropbox (Dropbox, Inc. - installed 2021-08-07)
    Application
    /Applications/Dropbox.app

  [Not Loaded] Evernote Login Helper (App Store - installed 2021-08-06)
    Modern Login Item
    /Applications/Evernote.app/Contents/Library/LoginItems/Evernote Login Helper.app

  [Loaded] StartUpHelper (Spotify - installed 2021-07-31)
    Modern Login Item
    /Applications/Spotify (old 2).app/Contents/Library/LoginItems/StartUpHelper.app

  [Running] nextcloud (Nextcloud GmbH - installed 2021-01-10)
    Application
    /Applications/nextcloud.app

  [Not Loaded] HP Device Monitor (Hewlett Packard - installed 2015-06-20)
    Modern Login Item
    /Library/Printers/hp/Utilities/HP Utility.app/Contents/Library/LoginItems/HP Device Monitor.app

Internet Plug-ins:
  NP_2020Player_IKEA: 5.0.94.1 (? - installed 2012-09-28)
  Silverlight: 5.1.50901.0 (? - installed 2016-12-10)
  WacomTabletPlugin: WacomTabletPlugin 2.1.0.6 (? - installed 2014-03-31)
  AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2021-07-20)

Safari Extensions:
  Auto Reload (App Store - installed 2020-05-25)
  Webex (Cisco - installed 2021-06-30)

3rd Party Preference Panes:
  Backblaze Backup (Backblaze - installed 2020-11-13)
  MagicPrefs (? - installed 2016-01-20)
  NoSleep (? - installed 2017-01-09)
  WacomTablet (? - installed 2014-03-31)

Backup:
  Time Machine information not available without Full Drive Access.
  16 local snapshots
  Oldest local snapshot: 2021-08-16 20:52:09
  Last local snapshot: 2021-08-17 12:08:29

Performance:
  System Load: 2.80 (1 min ago) 3.03 (5 min ago) 3.35 (15 min ago)
  Nominal I/O speed: 8.43 MB/s
  File system: 19.12 seconds
  Write speed: 404 MB/s
  Read speed: 439 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 8 %
  User: 10 %
  Idle: 82 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  WindowServer 33.22 % (Apple)
  com.apple.WebKit.WebContent (24) 22.16 % (Apple)
  Spotify Helper (Renderer) 19.04 % (Spotify)
  com.avira.scanservice 14.96 % (?)
  kernel_task 12.30 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  com.apple.WebKit.WebContent (24) 3.24 GB (Apple)
  EtreCheckPro 627 MB (Etresoft, Inc.)
  kernel_task 460 MB (Apple)
  mds_stores 310 MB (Apple)
  Spotify Helper (Renderer) 270 MB (Spotify)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 61 MB / 30 MB (Apple)
  Adobe Creative Cloud 16 MB / 53 KB (? - /Applications/Utilities)
  Dropbox 6 MB / 5 MB (Dropbox, Inc.)
  launchd 4 MB / 888 KB (Apple)
  rapportd 18 KB / 12 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  com.avira.scanservice 9 (?)
  WindowServer 4 (Apple)
  Safari 3 (Apple)
  com.apple.WebKit.WebContent (24) 2 (Apple)
  MagicPrefs 1 (? - /Applications/MagicPrefs.app)

Virtual Memory Information:
  Physical RAM: 16 GB

  Free RAM: 884 MB
  Used RAM: 12.87 GB
  Cached files: 2.27 GB

  Available RAM: 3.13 GB
  Swap Used: 4.68 GB

Software Installs (past 60 days):
  Install Date Name (Version)
  2021-06-22 Microsoft Remote Desktop (10.6.7)
  2021-06-29 XProtectPlistConfigData (2149)
  2021-06-29 MRTConfigData (1.81)
  2021-07-07 1Password (6.8.9)
  2021-07-09 iMovie (10.2.5)
  2021-07-13 Compare & Sync Folders (1.4.7)
  2021-07-14 Avira Security Update (1.0)
  2021-07-17 ImageOptim (1.3.9)
  2021-07-20 Keka (1.2.16)
  2021-07-21 Mobilgerät (1.0.0.0)
  2021-07-27 Microsoft Teams (1.00.416567)
  2021-08-06 Evernote (10.18.3)

Clean up:
  /Library/LaunchAgents/com.wacom.wacomtablet.plist
    /Library/Application Support/Tablet/WacomTabletSpringboard
    Executable not found
  ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist
    ~/Library/Application Support/Steam/SteamApps/steamclean
    Executable not found
  /Library/LaunchDaemons/com.aladdin.hasplmd.plist
    /usr/libexec/hasplmd
    Executable not found
  /Library/LaunchAgents/com.avira.security.migrator.plist
    /Library/Application Support/Avira/MigratorUIAgent.app/Contents/MacOS/MigratorUIAgent
    Executable not found
  /Library/LaunchDaemons/com.aladdin.aksusbd.plist
    /usr/libexec/aksusbd
    Executable not found

Diagnostics Information (past 7-30 days):
  2021-08-17 11:37:12 CVMCompiler Crash
    Executable: /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler
    Details:
      dyld3 mode

  2021-08-17 11:35:20 Capture One 20.app Crash
    Executable: /Applications/Capture One 20.app
    Details:
      dyld: in dlopen_preflight()
      Caught a SIGTERM. Calling abort() to get a crash report from the syste
      m.
      abort() called

  2021-08-17 07:57:51 photoanalysisd High CPU Use (6 times)
    Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd

  2021-08-16 09:11:07 signpost_reporter High CPU Use (2 times)
    Executable: /usr/libexec/signpost_reporter

  2021-08-16 00:37:49 Adobe Photoshop 2021.app Crash (4 times)
    Executable: /Applications/Adobe Photoshop 2021/Adobe Photoshop 2021.app

  2021-08-16 00:36:34 com.apple.WebKit.WebContent High CPU Use
    Executable: /Library/Apple/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent


End of report
 
Zuletzt bearbeitet von einem Moderator:
Alter Verwalter … wo soll man da anfangen?

Akku im Arsch, dadurch taktet der Rechner erhelblich runter. Kein Wunder dass der nur Lüftet.
Festplatte voll, wozu man ja nichts sagen muss.
Avira-Müll drauf, macht es nur noch schlimmer.
Unheimlich viel Zeug drauf, was sich über die Jahre angesammelt hat …

Also: Neuen Akku rein, und ein frisches System kann da echt mal Wunder bewirken.
 
  • Gefällt mir
Reaktionen: win2mac, rogi und dg2rbf
Das Skript macht nix außer das com.apple.quarantine-Attribut zu löschen, damit Gatekeeper seine Finger davon lässt (aus offensichtlichen Gründen, Code-Signing ist bei einem gecrackten Programm hinfällig).

Was das eigentliche Programm (wurde es schon mal gestartet?) macht siehst du hier nicht. Kann grundsätzlich alles mögliche sein, würde ohne weiteren Anhaltspunkt aber nichts schlimmes vermuten.

Welcher Prozess erzeugt denn die Last die zu den laufenden Lüftern führt?
Das eigentliche Programm wurde bereits gestartet. Ja. Hat scheinbar auch so funktioniert wie es das sollte. Mittlerweile ist es deinstalliert. Nachdem ich das Backup der wichtigsten Sachen erledigt hab, hab ich das Internet jetzt mal laufen lassen. Lüfter dreht nicht mehr so hoch...scheint alles normal zu sein.

Avira werd ich dann erstmal wieder deinstallieren. Das war mir nicht bewusst! Danke für die Info.
 
Alter Verwalter … wo soll man da anfangen?

Akku im Arsch, dadurch taktet der Rechner erhelblich runter. Kein Wunder dass der nur Lüftet.
Festplatte voll, wozu man ja nichts sagen muss.
Avira-Müll drauf, macht es nur noch schlimmer.
Unheimlich viel Zeug drauf, was sich über die Jahre angesammelt hat …

Also: Neuen Akku rein, und ein frisches System kann da echt mal Wunder bewirken.
Akku wurde gewechselt. Sie hat mein altes Macbook...da gibt es ein Problem am Ladegerät des Rechnern im Macbook. Das zu reparieren würde Geld kosten und sobald der M1X da ist bekommt sie mein 16 Zoll Macbook Pro. Insofern...da geht kein Geld mehr rein in das Teil. Ich bereue schon die 100€ für den neuen Akku...der nutzlos ist.

Vollgemüllt...jap...mir gehts aber erstmal um den Virenkram.
 
Akku wurde gewechselt. Sie hat mein altes Macbook...da gibt es ein Problem am Ladegerät des Rechnern im Macbook. Das zu reparieren würde Geld kosten und sobald der M1X da ist bekommt sie mein 16 Zoll Macbook Pro. Insofern...da geht kein Geld mehr rein in das Teil.

Vollgemüllt...jap...mir gehts aber erstmal um den Virenkram.
Aber die Festplatte ist quasi Randvoll, und die anderen "Issues" solltest du mal angehen.
 
2021-08-17 07:57:51 photoanalysisd High CPU Use (6 times)
Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd

2021-08-16 09:11:07 signpost_reporter High CPU Use (2 times)
Executable: /usr/libexec/signpost_reporter

2021-08-16 00:37:49 Adobe Photoshop 2021.app Crash (4 times)
Executable: /Applications/Adobe Photoshop 2021/Adobe Photoshop 2021.app

2021-08-16 00:36:34 com.apple.WebKit.WebContent High CPU Use
Executable: /Library/Apple/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
Das sorgt für Lüfter Drehzahlen.
Läuft da auch irgendein Echtzeit Check bei Avira und auch Webseiten Intercept?
 
EtreCheckPro version: 6.5.1 (6F003)
Code:
Report generated: 2021-08-17 14:11:39

Download EtreCheckPro from https://etrecheck.com

Runtime: 4:06

Performance: Good



Problem: No problem - just checking



Major Issues:

  Anything that appears on this list needs immediate attention.

  Battery failure - Your battery is reporting that it needs to be serviced.

  Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.



Minor Issues:

  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement.

  No Time Machine backup - Time Machine backup not found.

  Low disk space - This computer is running low on free hard drive space.

  Heavy RAM usage - Apps are using a large amount of RAM.

  Apps crashing - There have been numerous app crashes.

  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

  Clean up - There are orphan files that could be removed.

  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.

  System modifications - There are a large number of system modifications running in the background.

  Vintage hardware - This computer may be considered vintage.

  x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system.

  Limited drive access - More information may be available with Full Drive Access.

  Kernel extensions present - This computer has kernel extensions that may not work in the future.

  Sharing enabled - This computer has sharing services enabled that could be a security risk.



Hardware Information:

  MacBook Pro (Retina, 15-inch, Late 2013) - Vintage!

  MacBook Pro Model: MacBookPro11,3

  2,6 GHz Quad-Core Intel Core i7 (i7-4960HQ) CPU: 4-core

  16 GB RAM - Not upgradeable

    BANK 0/DIMM0 - 8 GB DDR3 1600 

    BANK 1/DIMM0 - 8 GB DDR3 1600 

  Battery: Health = Service Battery - Cycle count = 257



Video Information:

  Intel Iris Pro - VRAM: 1536 MB

  NVIDIA GeForce GT 750M - VRAM: 2 GB

    Color LCD (built-in) 2880 x 1800



Drives:

  disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

  Internal PCI 5.0 GT/s x2 Serial ATA

    disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

    disk0s2 [APFS Container] 500.07 GB

      disk1 [APFS Virtual drive] 500.07 GB (Shared by 5 volumes)

        disk1s1 - M******************n (APFS) [APFS Virtual drive] (Shared - 454.56 GB used)

        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 82 MB used)

        disk1s3 - Recovery (APFS) [Recovery] (Shared - 529 MB used)

        disk1s4 - VM (APFS) [APFS VM] (Shared - 6.44 GB used)

        disk1s5 - Macintosh HD (APFS) (Shared - 11.33 GB used)



  disk3 - Samsung PSSD T7 1.00 TB

  External USB 480 Mbit/s USB

    disk3s1 - K************E (Journaled HFS+) 1.00 TB (680.46 GB used)



Mounted Volumes:

  disk1s1 - M******************n [APFS Virtual drive]

    500.07 GB (Shared - 454.56 GB used, 79.25 GB available, 26.96 GB free)

    APFS

    Mount point: /System/Volumes/Data

    Encrypted



  disk1s4 - VM [APFS VM]

    500.07 GB (Shared - 6.44 GB used, 26.96 GB free)

    APFS

    Mount point: /private/var/vm



  disk1s5 - Macintosh HD

    500.07 GB (Shared - 11.33 GB used, 79.25 GB available, 26.96 GB free)

    APFS

    Mount point: /

    Encrypted

    Read-only: Yes



  disk3s1 - K************E

    1.00 TB (680.46 GB used, 319.82 GB available, 319.74 GB free)

    Journaled HFS+

    Mount point: /Volumes/K************E

    Owners enabled: No



Network:

  Interface en0: Wi-Fi

    802.11 a/b/g/n/ac

  Interface en3: Bluetooth PAN

  iCloud Quota: 67.41 GB available



  File sharing: Enabled



System Software:

  macOS Catalina 10.15.7 (19H524)

  Time since boot: About 15 days



Notifications:

  MagicPrefs.app

    45 notifications



  EtreCheckPro.app

    2 notifications



  Safari.app

    30 notifications



  Creative Cloud.app

    29 notifications



Security:

  Gatekeeper: App Store and identified developers

  System Integrity Protection: Enabled



  Antivirus software: Apple and Avira



  File sharing: Enabled



Unsigned Files:

  Launchd: ~/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

    Executable: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=scheduled

    Details: Exact match found in the legitimate list - probably OK



  Launchd: ~/Library/LaunchAgents/com.cisco.videoguardmonitor.plist

    Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuardMonitor/VideoGuardMonitor.bundle/Contents/Resources/launch.sh

    Details: Exact match found in the legitimate list - probably OK



  Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.uninstall.plist

    Executable: /bin/sh ~/.cisco/VideoGuard/uninstall/cisco_videoguard10/condUninstall.sh

    Details: Exact match found in the legitimate list - probably OK



  Launchd: ~/Library/LaunchAgents/com.skype.skype.shareagent.plist

    Executable: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchDaemons/com.wdc.WDPrivilegedHelper.plist

    Executable: /Library/PrivilegedHelperTools/com.wdc.WDPrivilegedHelper

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchAgents/org.macosforge.xquartz.startx.plist

    Executable: /opt/X11/lib/X11/xinit/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchDaemons/com.oracle.java.JavaUpdateHelper.plist

    Executable: /Library/PrivilegedHelperTools/com.oracle.java.JavaUpdateHelper

    Details: Exact match found in the legitimate list - probably OK



  Launchd: ~/Library/LaunchAgents/com.cisco.videoguard10.plist

    Executable: /bin/sh -c $HOME/Library/Cisco/VideoGuardPlayer/VideoGuard10/VideoGuard10.bundle/Contents/Resources/setupServer.sh

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchDaemons/com.avira.security.migratord.plist

    Executable: /Library/Application Support/Avira/MigratorUIAgent.app/Contents/XPCServices/migratord.xpc/Contents/MacOS/migratord



  Launchd: /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

    Executable: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=logon

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchAgents/com.protech.NoSleep.plist

    Executable: /Applications/Utilities/NoSleep.app/Contents/MacOS/NoSleepDaemon

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchDaemons/com.xrite.device.xrdd.plist

    Executable: /Library/Application Support/X-Rite/Frameworks/XRiteDevice.framework/Versions/B/Resources/xrdd

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist

    Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGINserver

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist

    Executable: /opt/X11/lib/X11/xinit/privileged_startx -d /opt/X11/lib/X11/xinit/privileged_startx.d

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchAgents/com.xrite.device.softwareupdate.plist

    Executable: /Library/Application Support/X-Rite/Frameworks/XRiteDevice.framework/Versions/B/Resources/XRD Software Update.app/Contents/MacOS/XRD Software Update

    Details: Exact match found in the legitimate list - probably OK



  Launchd: /Library/LaunchDaemons/com.prosofteng.KXInstaller.plist

    Executable: /Library/PrivilegedHelperTools/com.prosofteng.KXInstaller

    Details: Exact match found in the legitimate list - probably OK



  Launchd: ~/Library/LaunchAgents/com.vladalexa.MagicPrefs.plist

    Executable: /Applications/MagicPrefs.app/Contents/MacOS/MagicPrefs

    Details: Exact match found in the legitimate list - probably OK



  Plugin: /Library/Internet Plug-Ins/NP_2020Player_IKEA.plugin

  Plugin: /Library/Internet Plug-Ins/Silverlight.plugin

  Plugin: /Library/Internet Plug-Ins/WacomTabletPlugin.plugin

  Plugin: ~/Library/Internet Plug-Ins/CWSAssistantPlugin.plugin

  Plugin: ~/Library/Internet Plug-Ins/WebEx64.plugin



  Preference Pane: ~/Library/PreferencePanes/MagicPrefs.prefPane

  Preference Pane: /Library/PreferencePanes/NoSleep.prefPane

  Preference Pane: /Library/PreferencePanes/WacomTablet.prefPane



  Apps: 34



Old Applications:

  214 x86-only apps
 
Zuletzt bearbeitet von einem Moderator:
Code:
System Extensions:
  [Removed after restart] Avira Scan Service - version 6.1.2 (Avira Operations GmbH & Co. KG - 2021-07-14)
    Application: /Applications/Avira Security.app - version 6.1.2
    Description: Provides the Antivirus Scans and Protections

Kernel Extensions:
  /Applications/FlowSync.app
    [Not Loaded] HoRNDIS.kext - com.joshuawise.kexts.HoRNDIS (8 - SDK 10.6)

  /Library/Application Support/HASP/kexts
    [Not Loaded] aksfridge.kext - com.aladdin.kext.aksfridge (1.0.16332)

  /Library/Extensions
    [Not Loaded] Soundflower.kext - com.Cycling74.driver.Soundflower (1.6.6 - SDK 10.6)
    [Not Loaded] FTDIUSBSerialDriver.kext - com.FTDI.driver.FTDIUSBSerialDriver (2.2.10)
    [Not Loaded] LeafFwXDriverMatcher64.kext - com.Leaf.driver.LeafFwXDriverMatcher (1.2.0d1)
    [Not Loaded] EPSONUSBPrintClass.kext - com.epson.print.kext.USBPrintClass (2.2.7)
    [Loaded] Boom2Device.kext - com.globaldelight.driver.Boom2Device (1.2 - SDK 10.10)
    [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.2.0)
    [Not Loaded] JMicronATA.kext - com.jmicron.JMicronATA (1.1.6)
    [Not Loaded] NoSleep.kext - com.protech.NoSleep (1.3.3 - SDK 10.8)
    [Not Loaded] SamsungPortableSSDDriver.kext - com.samsung.portablessd.driver (1.5.05 - SDK 10.10)
    [Not Loaded] Wacom Tablet.kext - com.wacom.kext.wacomtablet (Wacom Tablet 6.3.8-2 - SDK 10.9)
    [Not Loaded] BJUSBLoad.kext - jp.co.canon.bj.print.BJUSBLoad (10.75.21 - SDK 10.8)
    [Not Loaded] CIJUSBLoad.kext - jp.co.canon.ij.print.CIJUSBLoad (13.0.0 - SDK 10.9)

System Launch Daemons:
  [Not Loaded]  33 Apple tasks
  [Loaded]  182 Apple tasks
  [Running]  121 Apple tasks
  [Other]  One Apple task

System Launch Agents:
  [Not Loaded]  16 Apple tasks
  [Loaded]  155 Apple tasks
  [Running]  141 Apple tasks
  [Other]  One Apple task

Launch Daemons:
  [Not Loaded] PPPMonitord.plist (? a94c92f4  - installed 2011-04-11)
  [Running] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2021-07-20)
  [Loaded] com.adobe.agsservice.plist (Adobe Inc. - installed 2021-08-16)
  [Other] com.aladdin.aksusbd.plist (? 882ffbab  - installed 2015-04-06)
  [Other] com.aladdin.hasplmd.plist (? c5d97ee2  - installed 2015-04-06)
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-08-21)
  [Loaded] com.avira.security.migratord.plist (? 0  - installed )
  [Running] com.backblaze.bzserv.plist (Backblaze - installed 2020-11-13)
  [Loaded] com.bresink.system.privilegedtool-ts5.plist (Marcel Bresink - installed 2018-11-23)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-08-06)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2017-07-02)
  [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2021-07-27)
  [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0  - installed )
  [Loaded] com.oracle.java.JavaUpdateHelper.plist (? 95986cc6  - installed 2015-04-30)
  [Loaded] com.prosofteng.KXInstaller.plist (? bf6f74c  - installed 2014-03-31)
  [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2019-09-11)
  [Not Loaded] com.teamviewer.teamviewer_service.plist (? e6c7921e  - installed 2019-09-11)
  [Loaded] com.wdc.WDPrivilegedHelper.plist (? 9f7f4405  - installed 2015-09-01)
  [Other] com.xrite.device.xrdd.plist (? 28f4ae75  - installed 2014-06-23)
  [Loaded] org.macosforge.xquartz.privileged_startx.plist (? 65395f14  - installed 2015-10-16)

Launch Agents:
  [Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062  - installed 2016-08-17)
  [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2021-07-20)
  [Running] com.adobe.GC.AGM.plist (Adobe Inc. - installed 2021-08-16)
  [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-08-16)
  [Loaded] com.adobe.ccxprocess.plist (Adobe Systems, Inc. - installed 2021-06-10)
  [Other] com.avira.security.migrator.plist (? 0  - installed )
  [Other] com.brother.LOGINserver.plist (? a1772de2  - installed 2016-10-26)
  [Loaded] com.epson.esua.launcher.plist (Seiko Epson Corporation - installed 2020-12-10)
  [Other] com.protech.NoSleep.plist (? bb232386  - installed 2013-03-27)
  [Not Loaded] com.teamviewer.teamviewer.plist (? bb938493  - installed 2019-09-11)
  [Not Loaded] com.teamviewer.teamviewer_desktop.plist (? 5e992d23  - installed 2019-09-11)
  [Other] com.wacom.wacomtablet.plist (? 9e9edb5e  - installed 2014-03-31)
  [Loaded] com.xrite.device.softwareupdate.plist (? 2f2d6b43  - installed 2014-06-23)
  [Loaded] org.macosforge.xquartz.startx.plist (? d225a7da  - installed 2015-10-16)

User Launch Agents:
  [Other] com.adobe.AAM.Updater-1.0.plist (? 0  - installed 2016-08-17)
  [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-08-16)
  [Running] com.backblaze.bzbmenu.plist (Backblaze - installed 2021-08-02)
  [Loaded] com.cisco.videoguard10.plist (? 0  - installed 2020-09-22)
  [Loaded] com.cisco.videoguard10.uninstall.plist (? 0  - installed 2020-09-22)
  [Other] com.cisco.videoguardmonitor.plist (? 0  - installed 2020-09-22)
  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2021-06-23)
  [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2021-03-04)
  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-03-04)
  [Running] com.samsung.portablessdplus.mon.plist (Samsung Electronics - installed 2020-12-21)
  [Loaded] com.skype.skype.shareagent.plist (? 0  - installed 2017-11-11)
  [Other] com.valvesoftware.steamclean.plist (? 0  - installed 2020-12-29)
  [Running] com.vladalexa.MagicPrefs.plist (? 0  - installed 2021-08-02)

User Login Items:
  [Running] 2BUA8C4S2C.com.agilebits.onepassword-osx-helper (App Store - installed 2021-07-07)
    Modern Login Item
    /Applications/1Password.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebits.onepassword-osx-helper.app

  [Running] ChronoSync Scheduler (Econ Technologies, Inc. - installed 2021-05-07)
    Modern Login Item
    /Applications/ChronoSync.app/Contents/Library/LoginItems/ChronoSync Scheduler.app

  [Loaded] Cisco Webex Meetings (Cisco - installed 2021-05-05)
    Application
    /Applications/Cisco Webex Meetings.app

  [Loaded] DeepL Launcher (Linguee GmbH - installed 2021-07-29)
    Modern Login Item
    /Applications/DeepL.app/Contents/Library/LoginItems/DeepL Launcher.app

  [Running] Dropbox (Dropbox, Inc. - installed 2021-08-07)
    Application
    /Applications/Dropbox.app

  [Not Loaded] Evernote Login Helper (App Store - installed 2021-08-06)
    Modern Login Item
    /Applications/Evernote.app/Contents/Library/LoginItems/Evernote Login Helper.app

  [Loaded] StartUpHelper (Spotify - installed 2021-07-31)
    Modern Login Item
    /Applications/Spotify (old 2).app/Contents/Library/LoginItems/StartUpHelper.app

  [Running] nextcloud (Nextcloud GmbH - installed 2021-01-10)
    Application
    /Applications/nextcloud.app

  [Not Loaded] HP Device Monitor (Hewlett Packard - installed 2015-06-20)
    Modern Login Item
    /Library/Printers/hp/Utilities/HP Utility.app/Contents/Library/LoginItems/HP Device Monitor.app

Internet Plug-ins:
  NP_2020Player_IKEA: 5.0.94.1 (? - installed 2012-09-28)
  Silverlight: 5.1.50901.0 (? - installed 2016-12-10)
  WacomTabletPlugin: WacomTabletPlugin 2.1.0.6 (? - installed 2014-03-31)
  AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2021-07-20)

Safari Extensions:
  Auto Reload (App Store - installed 2020-05-25)
  Webex (Cisco - installed 2021-06-30)

3rd Party Preference Panes:
  Backblaze Backup (Backblaze - installed 2020-11-13)
  MagicPrefs (? - installed 2016-01-20)
  NoSleep (? - installed 2017-01-09)
  WacomTablet (? - installed 2014-03-31)

Backup:
  Time Machine information not available without Full Drive Access.
  18 local snapshots
  Oldest local snapshot: 2021-08-16 20:52:09
  Last local snapshot: 2021-08-17 14:07:11

Performance:
  System Load: 1.84 (1 min ago) 2.08 (5 min ago) 2.24 (15 min ago)
  Nominal I/O speed: 7.79 MB/s
  File system: 16.63 seconds
  Write speed: 417 MB/s
  Read speed: 414 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 4 %
  User: 4 %
  Idle: 92 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  WindowServer 14.92 % (Apple)
  EtreCheckPro 12.66 % (Etresoft, Inc.)
  kernel_task 8.12 % (Apple)
  com.apple.WebKit.WebContent (10) 6.64 % (Apple)
  Mail 5.32 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  com.apple.WebKit.WebContent (10) 3.50 GB (Apple)
  QuickLookUIService (3) 1.22 GB (Apple)
  EtreCheckPro 725 MB (Etresoft, Inc.)
  kernel_task 406 MB (Apple)
  Safari 281 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  com.apple.WebKit.Networking 92 MB / 530 KB (Apple)
  mDNSResponder 61 MB / 30 MB (Apple)
  Dropbox 6 MB / 6 MB (Dropbox, Inc.)
  netbiosd 4 MB / 902 KB (Apple)
  Mail 656 KB / 101 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  WindowServer 6 (Apple)
  Mail 4 (Apple)
  com.apple.WebKit.WebContent (10) 4 (Apple)
  coreduetd 1 (Apple)
  coreaudiod 1 (Apple)

Virtual Memory Information:
  Physical RAM: 16 GB

  Free RAM: 873 MB
  Used RAM: 11.42 GB
  Cached files: 3.72 GB

  Available RAM: 4.58 GB
  Swap Used: 3.32 GB

Software Installs (past 60 days):
  Install Date Name (Version)
  2021-06-22 Microsoft Remote Desktop (10.6.7)
  2021-06-29 XProtectPlistConfigData (2149)
  2021-06-29 MRTConfigData (1.81)
  2021-07-07 1Password (6.8.9)
  2021-07-09 iMovie (10.2.5)
  2021-07-13 Compare & Sync Folders (1.4.7)
  2021-07-14 Avira Security Update (1.0)
  2021-07-17 ImageOptim (1.3.9)
  2021-07-20 Keka (1.2.16)
  2021-07-21 Mobilgerät (1.0.0.0)
  2021-07-27 Microsoft Teams (1.00.416567)
  2021-08-06 Evernote (10.18.3)

Clean up:
  /Library/LaunchAgents/com.wacom.wacomtablet.plist
    /Library/Application Support/Tablet/WacomTabletSpringboard
    Executable not found
  /Library/LaunchDaemons/com.aladdin.hasplmd.plist
    /usr/libexec/hasplmd
    Executable not found
  ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist
    ~/Library/Application Support/Steam/SteamApps/steamclean
    Executable not found
  /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist
    /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service
    Executable not found
  /Library/LaunchAgents/com.teamviewer.teamviewer.plist
    /Applications/TeamViewer.app/Contents/MacOS/TeamViewer
    Executable not found
  /Library/LaunchDaemons/com.aladdin.aksusbd.plist
    /usr/libexec/aksusbd
    Executable not found
  /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist
    /Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop
    Executable not found
  /Library/LaunchAgents/com.avira.security.migrator.plist
    /Library/Application Support/Avira/MigratorUIAgent.app/Contents/MacOS/MigratorUIAgent
    Executable not found

Diagnostics Information (past 7-30 days):
  2021-08-17 11:37:12 CVMCompiler Crash
    Executable: /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler
    Details:
      dyld3 mode

  2021-08-17 11:35:20 Capture One 20.app Crash
    Executable: /Applications/Capture One 20.app
    Details:
      dyld: in dlopen_preflight()
      Caught a SIGTERM. Calling abort() to get a crash report from the syste
      m.
      abort() called

  2021-08-17 07:57:51 photoanalysisd High CPU Use (6 times)
    Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd

  2021-08-16 09:11:07 signpost_reporter High CPU Use (2 times)
    Executable: /usr/libexec/signpost_reporter

  2021-08-16 00:37:49 Adobe Photoshop 2021.app Crash (4 times)
    Executable: /Applications/Adobe Photoshop 2021/Adobe Photoshop 2021.app

  2021-08-16 00:36:34 com.apple.WebKit.WebContent High CPU Use
    Executable: /Library/Apple/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent


End of report
 
Zuletzt bearbeitet von einem Moderator:
Zurück
Oben Unten