Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mac Filled with Viruses and Malware


  • Please log in to reply
9 replies to this topic

#1 ash2276

ash2276

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 21 June 2015 - 11:11 AM

I have a Mac Book Air (Late 2010) and it's being slowed down by viruses and malware.  My anti virus software won't remove all of it.  Can someone please help?  Also, my search engine has been hijacked to ask.com and I can't seem to remove it.  Could someone also help with this issue?


Edited by hamluis, 01 July 2015 - 02:02 PM.
Moved from Mac OS to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


m

#2 dante12

dante12

  • Members
  • 193 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:37 PM

Posted 21 June 2015 - 12:33 PM

Scan with Adware Medic

 

  • Please download Adware Medic
  • Open the DMG-File and move the app to your Desktop or Applications - Folder
  • Start the app and click on Scan for Adware. Adware found will move to the trash
  • If you need to restart, then do it first before the next step
  • Open Adware Medic again an go to the menu bar to then menu Scanner. Choose from there Take System Snapshot
  • If the scan done, click on the button Copy to Clipboard.
  • Paste the results with press the keys CMD + V here in the thread.

 

 



#3 ash2276

ash2276
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 21 June 2015 - 03:34 PM

Thank You:

 

AdwareMedic 2.2.5 system report - Sunday, June 21, 2015 @ 4:27:40 PM

Mac OS X version 10.10.2

 

16:27  up 10 mins, 1 user, load averages: 1.45 4.93 3.85

     

Safari extensions

 

---------------

   

None

         

Chrome extensions

 

---------------

   

None

         

Firefox extensions

 

---------------

   

/Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/9tffxtbr@free.internetspeedtracker.com

     Name: Internet Speed Tracker

     Modified: Sunday, June 7, 2015 @ 8:26:16 PM

/Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/{677a8f98-fd64-40b0-a883-b8c95d0cbf17}.xpi

     Name: Pinterest Pin Button

     Modified: Sunday, June 7, 2015 @ 6:27:52 PM

     

Login items

   

---------------

   

iTunesHelper, uTorrent, Dropbox, Fitbit Connect Menubar Helper, Flickr Uploadr

     

Startup items

 

---------------

   

None

         

System startup items

 

---------------

   

None

         

User launch agents

 

---------------

   

total 48

   

-rw-r--r--  1 ash  staff  517 Jun 13 18:33 com.apple.FolderActions.folders.plist

-rw-r--r--@ 1 ash  staff  511 May 16 23:43 com.bittorrent.uTorrent.plist

-rw-r--r--  1 ash  staff  818 Jun 13 21:17 com.jdibackup.JustCloud.autostart.plist

-rw-r--r--  1 ash  staff  985 Jun 13 21:17 com.jdibackup.JustCloud.backupstart.plist

-rw-r--r--  1 ash  staff  839 Jun 13 21:17 com.jdibackup.JustCloud.notify.plist

-rw-r--r--  1 ash  staff  621 Jun 17 19:59 com.mackeeper.MacKeeper.Helper.plist

     

System launch agents

 

---------------

   

None

         

System launch daemons

 

---------------

   

total 32

   

-rw-r--r--  1 root  wheel   462 Apr 25 10:46 com.adobe.fpsaud.plist

-rw-r--r--  1 root  wheel  1161 Oct 22  2013 com.fitbit.galileod.plist

-rw-r--r--  1 root  wheel   446 Jun 17 20:16 com.mackeeper.MacKeeper.plugin.AntiTheft.daemon.plist

-rw-r--r--  1 root  wheel   568 Aug 25  2010 com.microsoft.office.licensing.helper.plist

     

Third-party kernel extensions

---------------

   

None

         

User cron tasks

 

---------------

   

None

         

Root cron tasks

 

---------------

   

None

         

launchd.conf contents

 

---------------

   

None

         

DNS settings

 

---------------

   

Server:

 

192.168.0.1

     

Hosts file

   

---------------

   

##

   

# Host Database

 

#

   

# localhost is used to configure the loopback interface

# when the system is booting.  Do not change this entry.

##

   

127.0.0.1

localhost

 

255.255.255.255

broadcasthost

::1             localhost

       

Scan log

   

---------------

   

2015-06-21 16:15:41: ----- Scan Started -----

2015-06-21 16:15:41: Scanning with signatures version 76

2015-06-21 16:15:42: Spigot : /Users/ash/Library/Safari/Extensions/Searchme.safariextz , /Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/searchme@mybrowserbar.com.xpi , /Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/{84977DE9-1026-4508-B9A7-9116BDAAB098}.xpi , /Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/{A92BC493-FA5B-40a5-AFC8-6672926C9544}.xpi

2015-06-21 16:15:42: Spigot : /Users/ash/Library/LaunchAgents/com.spigot.ApplicationManager.plist

2015-06-21 16:15:42: Spigot : /Users/ash/Library/Application Support/Spigot

2015-06-21 16:15:43: VSearch : /Library/Application Support/5278f4c1b0dd9e89

2015-06-21 16:15:43: VSearch : /Library/LaunchAgents/com.5278f4c1b0dd9e89.agent.plist

2015-06-21 16:15:43: VSearch : /Library/LaunchDaemons/com.5278f4c1b0dd9e89.daemon.plist

/Library/LaunchDaemons/com.5278f4c1b0dd9e89.helper.plist

2015-06-21 16:15:43: VSearch : /System/Library/Frameworks/v.framework

2015-06-21 16:15:44: ----- Scan Ended -----

2015-06-21 16:16:53: +++++ Attempting to remove adware +++++

2015-06-21 16:16:53: /Users/ash/Library/Safari/Extensions/Searchme.safariextz

2015-06-21 16:16:53: /Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/searchme@mybrowserbar.com.xpi

2015-06-21 16:16:53: /Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/{84977DE9-1026-4508-B9A7-9116BDAAB098}.xpi

2015-06-21 16:16:53: /Users/ash/Library/Application Support/Firefox/Profiles/ukzosnd0.default/extensions/{A92BC493-FA5B-40a5-AFC8-6672926C9544}.xpi

2015-06-21 16:16:53: /Users/ash/Library/LaunchAgents/com.spigot.ApplicationManager.plist

2015-06-21 16:16:53: /Users/ash/Library/Application Support/Spigot

2015-06-21 16:16:53: /Library/Application Support/5278f4c1b0dd9e89

2015-06-21 16:16:53: /Library/LaunchAgents/com.5278f4c1b0dd9e89.agent.plist

2015-06-21 16:16:53: /Library/LaunchDaemons/com.5278f4c1b0dd9e89.daemon.plist

2015-06-21 16:16:53: /Library/LaunchDaemons/com.5278f4c1b0dd9e89.helper.plist

2015-06-21 16:16:53: /System/Library/Frameworks/v.framework

2015-06-21 16:16:53: +++++ Adware removal complete +++++

2015-06-21 16:17:40: ===== Attempting restart =====

2015-06-21 16:19:39: ----- Scan Started -----

2015-06-21 16:19:39: Scanning with signatures version 76

2015-06-21 16:19:46: No adware found

2015-06-21 16:19:46: ----- Scan Ended -----



#4 dante12

dante12

  • Members
  • 193 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:37 PM

Posted 21 June 2015 - 05:33 PM

You're walking on a way that you get earlier or later Malware again. Torrent sites are illegally and most of that files are infected. If you need safer surf you should remove these apps.

 

Important: Before Remove MacKeeper and if you are using the encryption feature, please decrypt all you files before remove the app.

 

Download DetectX

 

  • Please download DetectX and move it to your Desktop
  • Unpack the zip file and start the app.
  • Choose from the Pop-Up menu above All Searches. Click on Search.
  • If any Items found click on the show button and paste the log here.

 

Restart your mac and Take a new System Snapshot with Adware Medic. Instructions see above.


Edited by dante12, 21 June 2015 - 05:49 PM.


#5 ash2276

ash2276
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 22 June 2015 - 09:32 PM

Thanks again.  Nothing showed up on DetectX.

 

Are there any good free anti-virus/malware programs that could help?



#6 dante12

dante12

  • Members
  • 193 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:37 PM

Posted 23 June 2015 - 01:20 AM

How does your mac running now, if you still have problems with ask.com or other similar? You had an Infection by a Variant of Genio Adware, AdwareMedic has removed it. 

 

MacKeeper is a scam you should remove it. As I see it is still on your System. I'm not sure why DetectX not remove it. 

 

If you still have MacKeeper in your Applications Folder, Quit the MacKeeper and drag it to the trash.  Confirm do you want to remove it.

 

Again Important: If you using the encryption feature of MacKeeper decrypt the files first because you cannot do it later!

 

Scan with EtreCheck

 

  1. Please download EtreCheck move the zip file to your desktop and unpack it.
  2. Start the app let the first window empty. Click on Start EtreCheck
  3. If the scan done, click on Copy Report to Clipboard
  4. Paste the result here.

 

Your Question about Antivirus

 

Read this Article please and take your choice: Mac Malware Guide : Do I need anti-virus software?

 

I cannot recommend any AV-Solution because every Solution has it's advantages and disadvantages. The mac has innately protection solutions with Gatekeeper and XProtect (also known as File Quarantine).

Every protection solution take system resources and sometimes the system slow down because every action do you do on your system (copy, move, download, open and so on..) the av solution scans in the background. I have doing good experiences with Eset Cybersecurity, ClamXAV and Sophos Antivirus Free for mac.


Edited by dante12, 23 June 2015 - 01:28 AM.


#7 ash2276

ash2276
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 23 June 2015 - 10:32 PM

EtreCheck version: 2.2 (132)
Report generated 6/23/15, 11:30 PM
Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.

Hardware Information: ℹ️
    MacBook Air (11-inch, Late 2010) (Technical Specifications)
    MacBook Air - model: MacBookAir3,1
    1 1.4 GHz Intel Core 2 Duo CPU: 2-core
    4 GB RAM Not upgradeable
        BANK 0/DIMM0
            2 GB DDR3 1067 MHz ok
        BANK 1/DIMM0
            2 GB DDR3 1067 MHz ok
    Bluetooth: Old - Handoff/Airdrop2 not supported
    Wireless:  en0: 802.11 a/b/g/n
    Battery: Health = Normal - Cycle count = 281 - SN = C011055045GDCMGA7

Video Information: ℹ️
    NVIDIA GeForce 320M - VRAM: 256 MB
        Color LCD 1366 x 768

System Software: ℹ️
    OS X 10.10.2 (14C109) - Time since boot: 2 days 4:6:42

Disk Information: ℹ️
    APPLE SSD TS128C disk0 : (121.33 GB)
        EFI (disk0s1) <not mounted> : 210 MB
        Macintosh HD (disk0s2) /  [Startup]: 120.47 GB (541 MB free) (Low!)
        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB

USB Information: ℹ️
    Apple Inc. FaceTime Camera (Built-in)
    Apple Inc. BRCM2070 Hub
        Apple Inc. Bluetooth USB Host Controller
    Apple Inc. Apple Internal Keyboard / Trackpad

Gatekeeper: ℹ️
    Mac App Store and identified developers

Problem System Launch Agents: ℹ️
    [killed]    com.apple.AirPlayUIAgent.plist
    [killed]    com.apple.CallHistoryPluginHelper.plist
    [killed]    com.apple.CallHistorySyncHelper.plist
    [killed]    com.apple.cmfsyncagent.plist
    [killed]    com.apple.coreservices.appleid.authentication.plist
    [killed]    com.apple.EscrowSecurityAlert.plist
    [killed]    com.apple.gamed.plist
    [killed]    com.apple.icloud.fmfd.plist
    [killed]    com.apple.Maps.pushdaemon.plist
    [killed]    com.apple.printtool.agent.plist
    [killed]    com.apple.security.cloudkeychainproxy.plist
    [killed]    com.apple.telephonyutilities.callservicesd.plist
    12 processes killed due to memory pressure

Problem System Launch Daemons: ℹ️
    [killed]    com.apple.awdd.plist
    [killed]    com.apple.ctkd.plist
    [killed]    com.apple.GSSCred.plist
    [killed]    com.apple.icloud.findmydeviced.plist
    [killed]    com.apple.ifdreader.plist
    [killed]    com.apple.nehelper.plist
    [killed]    com.apple.periodic-daily.plist
    [killed]    com.apple.periodic-weekly.plist
    [killed]    com.apple.tccd.system.plist
    [killed]    com.apple.wdhelper.plist
    [killed]    org.cups.cupsd.plist
    11 processes killed due to memory pressure

Launch Daemons: ℹ️
    [loaded]    com.adobe.fpsaud.plist [Click for support]
    [running]    com.fitbit.galileod.plist [Click for support]
    [loaded]    com.microsoft.office.licensing.helper.plist [Click for support]

User Launch Agents: ℹ️
    [loaded]    com.bittorrent.uTorrent.plist [Click for support]
    [failed]    com.jdibackup.JustCloud.autostart.plist [Click for support] [Click for details]
    [loaded]    com.jdibackup.JustCloud.backupstart.plist [Click for support]
    [failed]    com.jdibackup.JustCloud.notify.plist [Click for support] [Click for details]

User Login Items: ℹ️
    iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
    uTorrent    Application  (/Applications/uTorrent.app)
    Dropbox    Application  (/Applications/Dropbox.app)
    Fitbit Connect Menubar Helper    Application  (/Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app)
    Flickr Uploadr    Application  (/Applications/Flickr Uploadr.app)

Internet Plug-ins: ℹ️
    SharePointBrowserPlugin: Version: 14.0.0 [Click for support]
    FlashPlayer-10.6: Version: 18.0.0.194 - SDK 10.6 [Click for support]
    Flash Player: Version: 18.0.0.194 - SDK 10.6 [Click for support]
    QuickTime Plugin: Version: 7.7.3
    Default Browser: Version: 600 - SDK 10.10

3rd Party Preference Panes: ℹ️
    Flash Player  [Click for support]

Time Machine: ℹ️
    Auto backup: YES
    Volumes being backed up:
        Macintosh HD: Disk size: 120.47 GB Disk used: 119.93 GB
    Destinations:
        Seagate Backup Plus Drive [Local]
        Total size: 999.86 GB
        Total number of backups: 24
        Oldest backup: 2015-02-05 03:59:18 +0000
        Last backup: 2015-06-20 05:28:34 +0000
        Size of backup disk: Excellent
            Backup size 999.86 GB > (Disk size 120.47 GB X 3)

Top Processes by CPU: ℹ️
        16%    WindowServer
         6%    firefox
         1%    plugin-container(2)
         1%    Fitbit Connect Menubar Helper
         1%    UserEventAgent(2)

Top Processes by Memory: ℹ️
    696 MB    firefox
    538 MB    kernel_task
    78 MB    mdworker(9)
    66 MB    Adobe Photoshop Lightroom 5
    57 MB    plugin-container(2)

Virtual Memory Information: ℹ️
    57 MB    Free RAM
    3.94 GB    Used RAM
    483 MB    Swap Used

Diagnostics Information: ℹ️
    Jun 21, 2015, 07:21:24 PM    Self test - passed
 



#8 dante12

dante12

  • Members
  • 193 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:37 PM

Posted 24 June 2015 - 12:57 AM

 
processes killed due to memory pressure

 

57 MB    Free Ram

 

 

 

 

 

 

To remove all this startup items (and applications)  you need to spent more time as a new installation. Backup all your personally Data and make a fresh install. I recommended to upgrade your RAM because 4 GB are very low.

Please tell me if you do so (fresh install) or want to remove specific items. 


Edited by dante12, 24 June 2015 - 01:00 AM.


#9 andeez

andeez

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 23 October 2016 - 10:03 AM

How does your mac running now, if you still have problems with ask.com or other similar? You had an Infection by a Variant of Genio Adware, AdwareMedic has removed it. 

 

MacKeeper is a scam you should remove it. As I see it is still on your System. I'm not sure why DetectX not remove it. 

 

If you still have MacKeeper in your Applications Folder, Quit the MacKeeper and drag it to the trash.  Confirm do you want to remove it.

 

Again Important: If you using the encryption feature of MacKeeper decrypt the files first because you cannot do it later!

 

Scan with EtreCheck

 

  1. Please download EtreCheck move the zip file to your desktop and unpack it.
  2. Start the app let the first window empty. Click on Start EtreCheck
  3. If the scan done, click on Copy Report to Clipboard
  4. Paste the result here.

 

Your Question about Antivirus

 

Read this Article please and take your choice: Mac Malware Guide : Do I need anti-virus software?

 

I cannot recommend any AV-Solution because every Solution has it's advantages and disadvantages. The mac has innately protection solutions with Gatekeeper and XProtect (also known as File Quarantine).

Every protection solution take system resources and sometimes the system slow down because every action do you do on your system (copy, move, download, open and so on..) the av solution scans in the background. I have doing good experiences with Eset Cybersecurity, ClamXAV and Sophos Antivirus Free for mac.

 

EtreCheck version: 3.0.6 (315)

Report generated 2016-10-23 09:58:13

Download EtreCheck from https://etrecheck.com

Runtime 1:34

Performance: Excellent

 

Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Click the [Remove] links to remove adware.

 

Problem: Other problem

Description:

want to remove mackeeper popup adds

 

Hardware Information:

    MacBook Pro (Retina, 13-inch, Early 2015) 

    [Technical Specifications] - [User Guide] - [Warranty & Service]

    MacBook Pro - model: MacBookPro12,1

    1 2.7 GHz Intel Core i5 CPU: 2-core

    8 GB RAM Not upgradeable

        BANK 0/DIMM0

            4 GB DDR3 1867 MHz ok

        BANK 1/DIMM0

            4 GB DDR3 1867 MHz ok

    Bluetooth: Good - Handoff/Airdrop2 supported

    Wireless:  en0: 802.11 a/b/g/n/ac

    Battery: Health = Normal - Cycle count = 27

 

Video Information:

    Intel Iris Graphics 6100

        Color LCD 2560 x 1600

 

System Software:

    macOS Sierra  10.12 (16A323) - Time since boot: about one day 

 

Disk Information:

    APPLE SSD SM0256G disk0 : (251 GB) (Solid State - TRIM: Yes)

        EFI (disk0s1) <not mounted> : 210 MB 

        Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB 

        Macintosh HD (disk1) /  [Startup]: 249.78 GB (217.04 GB free)

            Encrypted AES-XTS Unlocked

            Core Storage: disk0s2 250.14 GB Online

 

USB Information:

    Broadcom Corp. Bluetooth USB Host Controller 

 

Thunderbolt Information:

    Apple Inc. thunderbolt_bus

 

Gatekeeper:

    Mac App Store and identified developers

 

Adware:

    ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

    ~/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

    ~/Library/LaunchAgents/com.updater.mcy.plist

    ~/Library/LaunchAgents/com.updater.watch.mcy.plist

    4 adware files found. [Remove]

 

Unknown Files:

    ~/Library/LaunchAgents/com.bookingcominstaller.utility.runner.plist

        /bin/sh -c open "/Applications/booking.app"

    ~/Library/LaunchAgents/com.bookingcominstaller.utility.uninstaller.plist

        /bin/sh -c python "/Users/ANDREA/Library/Application Support/com.bookingcominstaller.utility/uninstall.py"

    ~/Library/LaunchAgents/com.pcv.amcuninstall.plist

        ~/Library/Application Support/amc/amcuninstall.app/Contents/MacOS/amcuninstall

    ~/Library/LaunchAgents/com.pcv.hlpramcn.plist

        ~/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

    4 unknown files found. [Check files]

 

System Launch Agents:

    [not loaded]    7 Apple tasks

    [loaded]    157 Apple tasks

    [running]    107 Apple tasks

 

System Launch Daemons:

    [not loaded]    42 Apple tasks

    [loaded]    155 Apple tasks

    [running]    106 Apple tasks

 

Launch Daemons:

    [loaded]    com.adobe.fpsaud.plist (2016-09-23) [Support]

 

User Launch Agents:

    [loaded]    com.bookingcominstaller.utility.runner.plist (2016-10-17)

    [loaded]    com.bookingcominstaller.utility.uninstaller.plist (2016-10-17)

    [loaded]    com.jdibackup.ZipCloud.autostart.plist (2016-10-21) Adware!  [Remove]

        /usr/bin/open

    [failed]    com.jdibackup.ZipCloud.notify.plist (2016-10-21) Adware!  [Remove]

        /usr/bin/open

    [running]    com.mackeeper.MacKeeper.Helper.plist (2016-10-16) [Support]

    [loaded]    com.pcv.amcuninstall.plist (2016-10-17) [Support]

    [running]    com.pcv.hlpramcn.plist (2016-10-17) [Support]

    [loaded]    com.updater.mcy.plist (2016-10-16) Adware!  [Remove]

        ~/Library/Application Support/updater_mcy/updater_mcy

    [loaded]    com.updater.watch.mcy.plist (2016-10-16) Adware!  [Remove]

        ~/Library/Application Support/updater_mcy/updater_mcy

 

User Login Items:

    iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

    Advanced Mac Cleaner    Application  (/Applications/Advanced Mac Cleaner.app)

 

Internet Plug-ins:

    FlashPlayer-10.6: 23.0.0.185 - SDK 10.9 (2016-10-11) [Support]

    QuickTime Plugin: 7.7.3 (2016-09-13)

    Flash Player: 23.0.0.185 - SDK 10.9 (2016-10-11) [Support]

 

Safari Extensions:

    Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (2016-10-23)

    Pin It Button - Pinterest, Inc. - http://www.pinterest.com/ (2016-08-14)

    Ka-Block! - David Graham & Josh Peek - http://kablock.com (2016-10-23)

 

3rd Party Preference Panes:

    Flash Player (2016-09-23) [Support]

 

Time Machine:

    Time Machine not configured!

 

Top Processes by CPU:

         7%    com.apple.WebKit.Plugin.64

         6%    kernel_task

         6%    WindowServer

         3%    Mail

         3%    coreaudiod

 

Top Processes by Memory:

    1.00 GB    com.apple.WebKit.WebContent(6)

    803 MB    kernel_task

    500 MB    Safari

    172 MB    cfprefsd(2)

    156 MB    MacKeeper

 

Virtual Memory Information:

    55 MB    Free RAM 

    7.94 GB    Used RAM (2.02 GB Cached)

    161 MB    Swap Used 

 

Diagnostics Information:

    Oct 23, 2016, 09:36:01 AM    ~/Library/Logs/DiagnosticReports/cloudd_2016-10-23-093601_[redacted].crash

        /System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd

    Oct 21, 2016, 04:47:20 PM    Self test - passed



#10 dante12

dante12

  • Members
  • 193 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:37 PM

Posted 23 October 2016 - 10:21 AM

Hello @andeez,

 

usually I recommend to make your own thread for better assistance. Remember this for next time ;)

 

1. Please download Malwarybytes for Mac, open the DMG file and move the app to your programs folder.

2. Start the app and choose scan. If any Malware found, will move automatically to your trash. If you need to restart by MBAM do it first before next step.

3. If you still have open MBAM go on the top of your screen and choose from the menu Scanner -> Take System Snapshot.

4. Copy the Content and post it here - please use Code Tags for better reading just by click at the <> - code selector.

5. Scan again with EtreCheck and post the results here too.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users