Google Chrome Mac SmartSuche entfernen "deals-online.us"

don-benni · 10.09.2018, 04:29

Von solchen Portalen eigentlich nicht.

Code:

ATTFilter

/Library/Application Support:
total 0
drwxr-xr-x  26 root  admin   832  6 Sep 05:40 .
drwxr-xr-x+ 65 root  wheel  2080  5 Sep 16:06 ..
drwxrwxr-x  52 root  admin  1664  7 Sep 14:46 Adobe
drwxr-xr-x   3 root  admin    96 24 Jul 11:01 App Store
drwxr-xr-x  13 root  wheel   416 24 Jul 11:02 Apple
drwxrwxr-x   3 root  admin    96 24 Jul 10:44 Apple Qmaster
drwx------   5 root  admin   160 23 Jul 17:45 ApplePushService
drwxr-xr-x   5 root  wheel   160  3 Sep 09:36 Avira
drwxrwxr-x  21 root  admin   672 24 Jul 11:08 CrashReporter
drwxr-xr-x   9 root  admin   288 24 Jul 10:58 FLYERALARM
drwxrwxr-x   3 root  admin    96 24 Jul 10:57 Final Cut Pro System Support
drwxrwxr-x   6 root  wheel   192 24 Jul 10:52 GarageBand
drwxrwxr-x  10 root  admin   320 24 Jul 10:57 Logic
drwxr-xr-x   3 root  admin    96  6 Aug 09:20 Malwarebytes
drwxr-xr-x   3 root  admin    96  3 Sep 07:00 Mozilla
drwxr-xr-x   3 root  admin    96 24 Jul 10:51 Oracle
drwxrwxr-t   3 root  admin    96 24 Jul 10:59 ProApps
drwxr-xr-x   3 root  wheel    96  7 Okt  2017 Script Editor
drwxr-xr-x   3 root  admin    96 24 Jul 10:46 Synology
drwxrwxr-x   4 root  wheel   128 24 Jul 10:55 Tablet
drwxrwxrwx@  5 501   wheel   160 24 Jul 10:52 WD SmartWare Services
drwxr-xr-x@  4 501   wheel   128 24 Jul 10:52 WDSmartWare
drwxr-xr-x   3 root  admin    96 24 Jul 10:46 WesternDigital
drwxr-xr-x   3 root  wheel    96 15 Dez  2017 iLifeMediaBrowser
drwxrwxrwx  10 root  admin   320 25 Jul 15:04 regid.1986-12.com.adobe

/Library/LaunchAgents/:
total 64
drwxr-xr-x  11 root  wheel   352  4 Sep 17:53 .
drwxr-xr-x+ 65 root  wheel  2080  5 Sep 16:06 ..
-rw-r--r--   1 root  wheel   612 20 Jan  2017 com.adobe.AAM.Updater-1.0.plist
-rw-r--r--   1 root  wheel   667 20 Feb  2018 com.adobe.AdobeCreativeCloud.plist
-rw-r--r--   1 root  wheel   612 29 Jan  2018 com.adobe.GC.Invoker-1.0.plist
-rw-r--r--   1 root  wheel   698  6 Aug 09:20 com.malwarebytes.mbam.frontend.agent.plist
lrwxr-xr-x   1 root  wheel   104  8 Dez  2014 com.oracle.java.Java-Updater.plist -> /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist
-rw-r--r--   1 root  wheel   668 30 Sep  2015 com.teamviewer.teamviewer.plist
-rw-r--r--   1 root  wheel   779 30 Sep  2015 com.teamviewer.teamviewer_desktop.plist
-rw-r--r--   1 root  wheel   708 23 Dez  2014 com.wacom.pentablet.plist
-rw-r--r--   1 root  wheel   721 11 Aug  2014 org.macosforge.xquartz.startx.plist

/Library/LaunchDaemons/:
total 80
drwxr-xr-x  13 root  wheel   416  6 Sep 05:40 .
drwxr-xr-x+ 65 root  wheel  2080  5 Sep 16:06 ..
-rw-r--r--   1 root  wheel   552 24 Jul 12:00 com.adobe.acc.installer.plist
-rw-r--r--   1 root  wheel   564 12 Jul 11:00 com.adobe.acc.installer.v2.plist
-rw-r--r--   1 root  wheel   634  1 Jun 05:19 com.adobe.agmservice.plist
-rw-r--r--   1 root  wheel   634  1 Jun 05:19 com.adobe.agsservice.plist
-rw-r--r--   1 root  wheel   913  6 Aug 09:20 com.malwarebytes.mbam.rtprotection.daemon.plist
-rw-r--r--   1 root  wheel   562  6 Aug 09:20 com.malwarebytes.mbam.settings.daemon.plist
lrwxr-xr-x   1 root  wheel   103  8 Dez  2014 com.oracle.java.Helper-Tool.plist -> /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist
-rw-r--r--   1 root  wheel   564 30 Sep  2015 com.teamviewer.Helper.plist
-rw-r--r--   1 root  wheel   611 30 Sep  2015 com.teamviewer.teamviewer_service.plist
-rw-r--r--   1 root  wheel   670 11 Aug  2014 org.macosforge.xquartz.privileged_startx.plist

/System/Library/LaunchAgents/:
total 0
drwxr-xr-x  296 root  wheel  9472 14 Aug 05:57 .
drwxr-xr-x  102 root  wheel  3264 14 Aug 05:59 ..
-rw-r--r--    1 root  wheel   541 23 Jan  2018 com.openssh.ssh-agent.plist

/System/Library/LaunchDaemons/:
total 48
drwxr-xr-x  338 root  wheel  10816  5 Sep 16:06 .
drwxr-xr-x  102 root  wheel   3264 14 Aug 05:59 ..
-rw-r--r--    1 root  wheel    678 12 Jan  2018 bootps.plist
-rw-r--r--    1 root  wheel    574  7 Okt  2017 com.vix.cron.plist
-rw-r--r--    1 root  wheel    627  7 Okt  2017 ntalk.plist
-rw-r--r--    1 root  wheel    554  4 Apr 03:04 org.apache.httpd.plist
-rw-r--r--    1 root  wheel    903 23 Apr 01:41 org.cups.cups-lpd.plist
-rw-r--r--    1 root  wheel   1190 23 Apr 01:41 org.cups.cupsd.plist
-rw-r--r--    1 root  wheel    515 13 Okt  2017 org.net-snmp.snmpd.plist
-rw-r--r--    1 root  wheel    535  7 Okt  2017 org.ntp.ntpd-legacy.plist
-rw-r--r--    1 root  wheel    980  7 Okt  2017 org.openldap.slapd.plist
-rw-r--r--    1 root  wheel    988 23 Jan  2018 ssh.plist
-rw-r--r--    1 root  wheel    715  7 Okt  2017 tftp.plist
/Users/benjaminseifert/Library/Application Support/:
total 16
drwxr-xr-x  45 benjaminseifert  staff  1440  9 Sep 18:19 .
drwx------@ 51 benjaminseifert  staff  1632  5 Sep 16:09 ..
-rw-r--r--   1 benjaminseifert  staff     0 24 Jul 11:03 .ACCC_Lock
-rw-r--r--   1 benjaminseifert  staff     0 24 Jul 11:03 .ADCS_Lock
drwx------  13 benjaminseifert  staff   416 24 Jul 11:49 AddressBook
drwxr-xr-x  33 benjaminseifert  staff  1056  4 Sep 05:26 Adobe
drwxr-xr-x   3 benjaminseifert  staff    96  2 Sep 17:33 Adobe.CC.XD
-rw-r--r--@  1 benjaminseifert  staff    33  8 Sep 10:42 AdobeWLCMCache.dat
drwxr-xr-x   3 benjaminseifert  staff    96 14 Aug 15:02 App Store
drwxr-xr-x   2 benjaminseifert  staff    64  2 Sep 10:51 CCleaner
drwx------   3 benjaminseifert  staff    96 24 Jul 11:03 CEF
drwxr-xr-x   6 benjaminseifert  staff   192 24 Jul 11:03 CallHistoryDB
drwxr-xr-x   3 benjaminseifert  staff    96 24 Jul 11:03 CallHistoryTransactions
drwxr-xr-x   2 benjaminseifert  staff    64 24 Jul 11:03 CloudDocs
drwx------  24 benjaminseifert  staff   768 10 Sep 05:19 CrashReporter
drwxr-xr-x   5 benjaminseifert  staff   160  5 Sep 05:08 DetectX Swift
drwx------   3 benjaminseifert  staff    96 24 Jul 11:05 DiskImages
drwxr-xr-x   3 benjaminseifert  staff    96 14 Aug 06:07 Dock
drwxr-xr-x   5 benjaminseifert  staff   160 24 Jul 12:41 Dropbox
drwx------   6 benjaminseifert  staff   192 21 Aug 17:42 Firefox
drwx------   5 benjaminseifert  staff   160 23 Aug 16:17 Google
drwxr-xr-x   3 benjaminseifert  staff    96 13 Aug 13:57 HP
drwx------   6 benjaminseifert  staff   192 24 Jul 11:04 Knowledge
drwxr-xr-x   3 benjaminseifert  staff    96 20 Aug 09:49 Microsoft
drwx------@  4 benjaminseifert  staff   128 27 Aug 05:17 Mozilla
drwxr-xr-x   3 benjaminseifert  staff    96 25 Jul 16:07 Oracle
drwxr-xr-x   5 benjaminseifert  staff   160 24 Jul 11:03 Quick Look
drwxr-xr-x   3 benjaminseifert  staff    96 20 Aug 09:49 Skype Helper
drwx------   6 benjaminseifert  staff   192 10 Sep 05:19 Spotify
drwxr-xr-x   7 benjaminseifert  staff   224 26 Jul 09:59 TextMate
drwxr-xr-x   2 benjaminseifert  staff    64 24 Jul 11:49 accountsd
drwxr-xr-x   3 benjaminseifert  staff    96  2 Sep 11:36 com.adobe.xd
drwxr-xr-x  13 benjaminseifert  staff   416  6 Sep 05:13 com.bohemiancoding.sketch3
drwxr-xr-x   3 benjaminseifert  staff    96  2 Sep 10:52 com.malwarebytes.mbam.frontend.agent
drwxr-xr-x   3 benjaminseifert  staff    96  2 Sep 10:52 com.malwarebytes.mbam.frontend.application
drwxr-xr-x   6 benjaminseifert  staff   192  6 Sep 05:42 com.sqwarq.DetectX-Swift
drwx------   3 benjaminseifert  staff    96 24 Jul 11:03 icdd
drwxr-xr-x   5 benjaminseifert  staff   160 24 Jul 11:03 videosubscriptionsd

/Users/benjaminseifert/Library/LaunchAgents/:
total 48
drwxr-xr-x@  8 benjaminseifert  staff   256  5 Sep 05:08 .
drwx------@ 51 benjaminseifert  staff  1632  5 Sep 16:09 ..
-rw-r--r--   1 benjaminseifert  staff   697 24 Jul 11:54 com.adobe.AAM.Updater-1.0.plist
-rw-r--r--   1 benjaminseifert  staff   688 24 Jul 11:54 com.adobe.GC.Invoker-1.0.plist
-rw-r--r--   1 benjaminseifert  staff   695 22 Aug 05:06 com.dropbox.DropboxMacUpdate.agent.plist
-rw-r--r--@  1 benjaminseifert  staff   812 24 Jul 11:08 com.google.keystone.agent.plist
-rw-r--r--@  1 benjaminseifert  staff   596  5 Sep 05:08 com.sqwarq.DetectX-Swift.observer.plist
-rw-r--r--   1 benjaminseifert  staff   427  8 Sep 10:44 com.synology.CloudStationDrive.plist

/Users/benjaminseifert/Library/Saved Application State/:
total 0
drwx------@ 36 benjaminseifert  staff  1152  9 Sep 18:34 .
drwx------@ 51 benjaminseifert  staff  1632  5 Sep 16:09 ..
lrwxr-xr-x   1 benjaminseifert  staff   135 26 Jul 09:53 com-clickbits-clockodo.savedState -> /Users/benjaminseifert/Library/Containers/com-clickbits-clockodo/Data/Library/Saved Application State/com-clickbits-clockodo.savedState
drwx------   4 benjaminseifert  staff   128  6 Sep 12:18 com.adobe.InDesign.savedState
drwx------   4 benjaminseifert  staff   128  8 Sep 10:43 com.adobe.Photoshop.savedState
drwx------   4 benjaminseifert  staff   128  8 Sep 10:43 com.adobe.bridge8.savedState
drwx------   5 benjaminseifert  staff   160  7 Sep 14:39 com.adobe.dreamweaver-18.0.savedState
drwx------   5 benjaminseifert  staff   160  8 Sep 15:41 com.adobe.illustrator.savedState
drwx------   4 benjaminseifert  staff   128  8 Sep 15:06 com.adobe.xd.savedState
drwx------   4 benjaminseifert  staff   128  8 Sep 15:06 com.avira.controlcenter.savedState
drwx------   6 benjaminseifert  staff   192  6 Sep 05:40 com.cleverfiles.Disk_Drill.savedState
drwx------   4 benjaminseifert  staff   128  8 Sep 15:06 com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf.savedState
drwx------@  5 benjaminseifert  staff   160  8 Sep 10:42 com.google.Chrome.savedState
lrwxr-xr-x   1 benjaminseifert  staff   157 26 Jul 09:53 com.safeincloud.Safe-In-Cloud.OSX.savedState -> /Users/benjaminseifert/Library/Containers/com.safeincloud.Safe-In-Cloud.OSX/Data/Library/Saved Application State/com.safeincloud.Safe-In-Cloud.OSX.savedState
drwx------   4 benjaminseifert  staff   128  5 Sep 11:03 com.skype.skype.savedState
drwx------   5 benjaminseifert  staff   160  9 Sep 18:23 com.spotify.client.savedState
drwx------   4 benjaminseifert  staff   128 31 Jul 07:44 de.filezilla.savedState
lrwxr-xr-x   1 benjaminseifert  staff   137 19 Aug 10:01 in.sinew.Enpass-Desktop.savedState -> /Users/benjaminseifert/Library/Containers/in.sinew.Enpass-Desktop/Data/Library/Saved Application State/in.sinew.Enpass-Desktop.savedState
drwx------   4 benjaminseifert  staff   128 16 Aug 05:52 net.poedit.Poedit.savedState
drwx------   4 benjaminseifert  staff   128  8 Sep 15:06 org.filezilla-project.filezilla.savedState
drwx------@  5 benjaminseifert  staff   160  9 Sep 13:01 org.mozilla.firefox.savedState
drwx------   4 benjaminseifert  staff   128  5 Sep 11:03 org.playonmac.playonmac.savedState
com.malwarebytes.mbam
com.taptileapps.timetracking.3.macos
com.github.osxfuse.pkg.Core
com.avast.pkg.Cleanup
com.trendmicro.DrCleaner
com.hp.EasyScanMac
com.avast.AAFM
in.sinew.Enpass-Desktop
com.microsoft.rdc.mac
com.yelab.adware-removal
com-clickbits-clockodo
com.synology.CloudStation

Dante12 · 11.09.2018, 07:57

Schritt 1

Klicke auf den Finder und drücke die Taste CMD + Shift + A
Starte das Programm TextEdit.app und wähle neues Dokument
Drücke die Tasten CMD + Shift + T und füge anschliessend den Inhalt aus der Codebox in das Dokument ein.
Wichtig: Speichere es auf dein Desktop unter den Namen trashPaths.txt

Code:

ATTFilter

/Library/Application Support/Avira,
/Library/Application Support/WD SmartWare Services,
/Library/Application Support/WDSmartWare,
~/Library/Saved Application State/com.avira.controlcenter.savedState

Hinweis: Das nachfolgede AppleScript-Programm löscht die Daten in der Liste. Aufgrund von Beschränkungen im System,
muss jedoch beim Löschen in Systemordnern immer das Admin-Passwort eingegeben werden. In diesem Fall musst du es drei mal eingeben.

Bitte lade dir das script MoveToTrash von Server herunter und speichere es auf dein Desktop
Entpacke das Archiv und Starte es mit einem Doppelklick
Solltest du die Meldung erhalten von einem "nicht Verifizierten Entwickler", dann klicke mit der rechten Maus drauf und wähle öffnen.
Die Dateien in der Liste trashPaths.txt werden in den Papierkorb verschoben.
Sollte es mit dem löschen probleme geben, dann musst du diese Dateien "von Hand" löschen.

Schritt 2

Öffne bitte dein Terminal und gebe einzeln folgende Befehle ein. Beim ersten Mal muss du dein Admin-Passwort eingeben.

Code:

ATTFilter

sudo pkgutil --forget com.avast.pkg.Cleanup

Code:

ATTFilter

sudo pkgutil --forget com.avast.AAFM

Code:

ATTFilter

sudo pkgutil --forget com.yelab.adware-removal

Hast du DrCleaner von TrendMicro auf deinen Rechner (Schaue in deinem Programm-Ordner) ? Wenn ja, dann bitte den nachfolgenden Befehl noch nicht Anwenden !.

Die app DrCleaner bitte zuerst bei Virustotal hochladen. Poste dann bitte den Link mit den Ergebnissen. Danach diese in den Papierkorb verschieben und den nachfolgenden Befehl ausführen.

Code:

ATTFilter

sudo pkgutil --forget com.trendmicro.DrCleaner

Schritt 3

Starte den Rechner neu und gehe in den sicheren Systemstart siehe Lesestoff

Sicherer Systemstart

Lies dir bitte die nachfolgende Anleitung genau durch: Was ist der sichere Systemstart?
Halte während des Startvorgangs und bevor / während der Startton erfolgt die Shift-Taste gedrückt.
Der Startvorgang dauert in diesem Modus etwas länger. Auch ein Flackern des Bildschirms ist normal. Als Bestätigung wird oben rechts am Bildschirm der Sichere Systemstart angezeigt.
Hinweis: Bei Bluetooth-Tastaturen drücke die Shift-Taste während der Ton zu hören ist, da die Erkennung von Bluetooth nicht direkt beim Einschalten erfolgt.
Wenn der Startvorgang abgeschlossen ist, kannst du den Rechner neu starten.

Sierra: Für gewöhnlich steht oben rechts in roter Schrift der Hinweis für den sicheren Systemstart.
Bei Sierra kann es vorkommen das dieser Hinweis nicht angezeigt wird. Wird bei dir der Text angezeigt, dann brauchst du die Zeilen 1 - 3 nicht beachten. Sonst bitte prüfen wie folgt:
Log dich bitte ein und prüfe das in dem du folgende Schritte ausführst.

Wähle aus dem Apfelmenü über diesen Mac...
Klicke auf Systembericht und dann in der linken Spalte auf Software
Im rechten Fenster sollte folgendes stehen: Startmodus: Sicher
Ist das nicht der Fall, dann Neustart und versuche es nochmal.
Mache anschliessend einen Neustart.

Teste danach ob es noch Probleme mit Google Chrome gibt. Wenn ja, müssen wir Chrome komplett entfernen und neu installieren.

Schritt 4

Erstelle abschließend ein neues Log mit DetectX Swift wie weiter oben beschrieben.

don-benni · 11.09.2018, 08:29

Schritt 1 & 3 hat funktioniert

Ich denke Schritt 2 auch. Hatte folgende Meldungen wie z.B
Forgot package 'com.avast.AAFM' on '/'.

Detect X:

Code:

ATTFilter

Timestamp (7): Di. Sep. 11 09:27:07 2018
DetectX Swift v1.076

macOS: Version 10.13.6 (Build 17G65)
File System: apfs
Temp: The thermal state is within normal limits.

Boot time: Tue Sep 11 09:25:04 2018
Uptime: up 2 mins, 1 user

Spotlight status for /:
	Indexing enabled. 
System Integrity Protection status: enabled.
Gatekeeper status: enabled for App Store and identified developers.
FileVault is Off.

Internet:	Reachable


    Hardware Overview:

      Model Name: iMac
      Model Identifier: iMac14,1
      Processor Name: Intel Core i5
      Processor Speed: 2,7 GHz
      Number of Processors: 1
      Total Number of Cores: 4
      L2 Cache (per Core): 256 KB
      L3 Cache: 4 MB
      Memory: 8 GB
      Boot ROM Version: IM141.0130.B00
      SMC Version (system): 2.14f24



  Sharing Preferences:

	File Sharing:  On
	Screen Sharing:  On
	Remote Management:  Off
	Back To My Mac:  Off
	Remote Login:  Off
	Remote Apple Events:  Off


3rd Party Kexts (loaded):



 $PATH:

PATH=/usr/bin:/bin:/usr/sbin:/sbin


/etc/paths:
	/usr/local/bin
	/usr/bin
	/bin
	/usr/sbin
	/sbin

/etc/paths.d/:
	/opt/X11/bin

~/.bash_profile:
	
~/.bashrc:

~/.bash_login:

~/.profile:

~/.bash_logout:


PID	Status	Label
469	0	com.wacom.TabletDriver.4228
391	0	com.malwarebytes.mbam.frontend.agent
545	0	com.google.Chrome.12484
400	0	com.adobe.AdobeCreativeCloud
-	0	com.openssh.ssh-agent
-	78	com.sqwarq.DetectX-Swift.observer
-	0	org.macosforge.xquartz.startx
-	0	com.synology.CloudStationDrive
612	0	com.adobe.CCXProcess.8600
-	0	com.spotify.client.startuphelper
329	0	com.getdropbox.dropbox.11024
-	0	com.adobe.AAM.Scheduler-1.0
392	0	com.teamviewer.desktop
-	0	com.oracle.java.Java-Updater
-	0	in.sinew.Enpass-Launcher
-	0	com.google.keystone.user.agent
388	0	com.teamviewer.teamviewer
611	0	com.adobe.accmac.12264
601	0	com.adobe.acc.AdobeDesktopService.8636.65261846-0701-4806-91B9-30B30DA6315E
421	0	com.wacom.ConsumerTouchDriver.3844
-	0	com.dropbox.DropboxMacUpdate.agent
398	0	com.wacom.pentablet
431	0	com.synology.CloudStationUI.15104


 System Launchd processes:

54      - 	com.malwarebytes.mbam.rtprotection.daemon
0      - 	com.adobe.acc.installer.v2
0      - 	com.vix.cron
0      - 	org.macosforge.xquartz.privileged_startx
67      - 	com.teamviewer.service
0      - 	com.teamviewer.Helper
82      - 	Adobe_Genuine_Software_Integrity_Monitor
86      - 	Adobe_Genuine_Software_Integrity_Service
203      - 	org.cups.cupsd
525      - 	com.malwarebytes.mbam.settings.daemon
0      - 	com.oracle.java.Helper-Tool
0      - 	com.adobe.acc.installer



 User Login Items:

nil



 /Library/LaunchDaemons:

	com.malwarebytes.mbam.settings.daemon.plist
		-> Program: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon
	
	com.adobe.agsservice.plist
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/AGSService
	
	com.malwarebytes.mbam.rtprotection.daemon.plist
		-> Program: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon
	
	com.adobe.agmservice.plist
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/AGMService
	
	org.macosforge.xquartz.privileged_startx.plist
		--> Program Arguments: /opt/X11/lib/X11/xinit/privileged_startx
		--> Program Arguments: -d
		--> Program Arguments: /opt/X11/lib/X11/xinit/privileged_startx.d
	
	com.apple.installer.osmessagetracing.plist
		--> Program Arguments: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer
	
	com.teamviewer.Helper.plist
		-> Program: /Library/PrivilegedHelperTools/com.teamviewer.Helper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.teamviewer.Helper
	
	com.adobe.acc.installer.v2.plist
		-> Program: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2
		--> Program Arguments: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2
	
	com.teamviewer.teamviewer_service.plist
		--> Program Arguments: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service
		--> Program Arguments: -Module
		--> Program Arguments: Full
	
	com.oracle.java.Helper-Tool.plist
		--> Program Arguments: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
	
	com.adobe.acc.installer.plist
		-> Program: /Library/PrivilegedHelperTools/com.adobe.acc.installer
		--> Program Arguments: /Library/PrivilegedHelperTools/com.adobe.acc.installer
	



 /Library/LaunchAgents:

	com.adobe.AdobeCreativeCloud.plist
		-> Program: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud
		--> Program Arguments: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud
		--> Program Arguments: --showwindow=false
		--> Program Arguments: --onOSstartup=true
	
	com.teamviewer.teamviewer_desktop.plist
		--> Program Arguments: /Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop
		--> Program Arguments: -RunAsAgent
		--> Program Arguments: YES
		--> Program Arguments: -Module
		--> Program Arguments: Full
	
	org.macosforge.xquartz.startx.plist
		--> Program Arguments: /opt/X11/lib/X11/xinit/launchd_startx
		--> Program Arguments: /opt/X11/bin/startx
		--> Program Arguments: --
		--> Program Arguments: /opt/X11/bin/Xquartz
	
	com.teamviewer.teamviewer.plist
		--> Program Arguments: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer
		--> Program Arguments: -RunAsAgent
		--> Program Arguments: YES
	
	com.malwarebytes.mbam.frontend.agent.plist
		-> Program: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent
	
	com.oracle.java.Java-Updater.plist
		--> Program Arguments: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater
		--> Program Arguments: -bgcheck
	
	com.adobe.AAM.Updater-1.0.plist
		-> Program: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: -mode=logon
	
	com.wacom.pentablet.plist
		-> Program: /Library/Application Support/Tablet/PenTabletSpringboard
	
	com.adobe.GC.Invoker-1.0.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: -mode=logon
	



 ~/Library/LaunchAgents:

	com.google.keystone.agent.plist
		--> Program Arguments: /Users/[U502]/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
		--> Program Arguments: -runMode
		--> Program Arguments: ifneeded
	
	com.adobe.AAM.Updater-1.0.plist
		-> Program: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: -mode=scheduled
	
	com.adobe.GC.Invoker-1.0.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: -mode=scheduled
	
	com.dropbox.DropboxMacUpdate.agent.plist
		--> Program Arguments: /Users/[U502]/Library/Dropbox/DropboxMacUpdate.app/Contents/MacOS/DropboxMacUpdate
		--> Program Arguments: -check
		--> Program Arguments: periodic
	
	com.sqwarq.DetectX-Swift.observer.plist
		--> Program Arguments: /Volumes/DetectX Swift/DetectX Swift.app/Contents/MacOS/DetectX Swift
		--> Program Arguments: -observer
	
	com.synology.CloudStationDrive.plist
		--> Program Arguments: /usr/bin/open
		--> Program Arguments: /Applications/Synology Cloud Station.app
	

 User Crontab:

	No cron jobs



 /etc:

	kcpassword
	rc.common
	php.ini.default-5.2-previous~orig
	bashrc_Apple_Terminal
	bashrc
	hosts.txt
	krb5.keytab~orig
	zshrc
	ssh_config~orig
	moduli~previous
	rc.netboot
	localtime~orig
	efax.rc~previous
	ntp.conf~orig
	php.ini.default-previous~orig
	php.ini.default-5.2-previous
	sshd_config~previous
	aliases
	zprofile

 / $Root:

	.HFS+ Private Directory Data
 / .. children: 0
	installer.failurerequests
	.file
	.cleverfiles / .. children: 8
	Benutzerinformationen
	.OSInstallerMessages
	opt / .. children: 1
	AdobeGCData / .. children: 0
	.dbfseventsd

 ~/ $Home:

	Daten / .. children: 116
	.config / .. children: 2
	Music / .. children: 1
	.CloudStation / .. children: 7
	.CFUserTextEncoding
	.stCommitMsg
	.hgignore_global
	.adobe / .. children: 1
	.local / .. children: 1
	ssh-key
	Creative Cloud Files / .. children: 1
	Pictures / .. children: 1
	.fontconfig / .. children: 4
	.rnd
	Desktop / .. children: 6
	Library / .. children: 49
	.oracle_jre_usage / .. children: 1
	.android / .. children: 3
	.uuid
	.gitignore_global
	.cups / .. children: 1
	Creative Cloud Files (archived) (2) / .. children: 1
	Sites / .. children: 1
	.bash_sessions / .. children: 30
	.DDPreview / .. children: 0
	Work-Cloud / .. children: 4
	beck69@freenet.de Creative Cloud Files / .. children: 1
	.mplayer / .. children: 1
	.dropbox / .. children: 11
	Creative Cloud Files (archived) (1) / .. children: 1
	ssh-key.pub
	.Synology / .. children: 1
	.mediathek3 / .. children: 2
	.ssh / .. children: 3
	Movies / .. children: 1
	Applications / .. children: 2
	.bxd / .. children: 10
	Dropbox / .. children: 8
	.Trash / .. children: 6
	CloudStation / .. children: 88
	Documents / .. children: 5
	.Xauthority
	Bitrix24 / .. children: 6
	benni@pulverundblei.com Creative Cloud Files / .. children: 1
	Downloads / .. children: 209
	.cache / .. children: 2
	.gitconfig
	.putty / .. children: 1
	.bash_history
	PlayOnMac's virtual drives



 ~/Library:

	Google / .. children: 3
	Family / .. children: 1
	Personas / .. children: 3
	PhotoshopCrashes / .. children: 0
	PlayOnMac / .. children: 11
	Dropbox / .. children: 1



 ~/Library/Application Support:

	Firefox / .. children: 4
	com.bohemiancoding.sketch3 / .. children: 11
	Mozilla / .. children: 2
	Adobe.CC.XD / .. children: 1
	com.apple.touristd / .. children: 10
	DiskImages / .. children: 1
	HP / .. children: 1
	CCleaner / .. children: 0
	Skype Helper / .. children: 1
	Google / .. children: 3
	Microsoft / .. children: 1
	Spotify / .. children: 4
	Oracle / .. children: 1
	TextMate / .. children: 5
	com.adobe.xd / .. children: 1
	com.malwarebytes.mbam.frontend.application / .. children: 1
	CEF / .. children: 1
	Adobe / .. children: 31
	.ACCC_Lock
	TeamViewer / .. children: 1
	com.sqwarq.DetectX-Swift / .. children: 4
	Dropbox / .. children: 3
	AdobeWLCMCache.dat
	com.malwarebytes.mbam.frontend.agent / .. children: 1
	DetectX Swift / .. children: 3
	.ADCS_Lock



 ~/Library/Safari/Extensions:

	*-- Folder doesn't exist --*



 ~/Library/Internet Plug-Ins:

	*-- Folder doesn't exist --*



 /Users/Shared:

	adi / .. children: 0
	SC Info / .. children: 0
	CCleaner / .. children: 1
	Adobe / .. children: 2
	.Wondershare_benjaminseifert.dat



 /Applications:

	Poedit 2.app
	Brother / .. children: 1
	Adobe Photoshop CC 2018 / .. children: 8
	Adium.app
	TeamViewer.app
	Google Chrome.app
	Adobe Illustrator CC 2018 / .. children: 12
	Dropbox.app
	Adobe Experience Design CC (Preview) / .. children: 4
	Adobe InDesign CC 2018 / .. children: 13
	Cyberduck.app
	Spotify.app
	VueScan.app
	Adobe Bridge CC 2018 / .. children: 7
	Adobe Dreamweaver CC 2018 / .. children: 9
	Synology Cloud Station.app
	SafeInCloud Password Manager.app
	HP Easy Scan.app
	Zeplin.app
	Bitrix24.app
	vavideo.app.app
	Any Video Converter.app
	Poedit.app
	Malwarebytes.app
	Enpass.app
	OpenOffice.app
	Billings Pro.app
	The Unarchiver.app
	FileZilla.app
	Skype.app
	Firefox.app
	Freework.app
	Balsamiq Mockups 3.app
	iPhoto.app
	Adobe XD CC / .. children: 3
	clockodo.app



 /Library:

	DropboxHelperTools / .. children: 3
	Managed Preferences / .. children: 0



 /Library/Application Support:

	Synology / .. children: 1
	WesternDigital / .. children: 1
	Tablet / .. children: 2
	Mozilla / .. children: 1
	Apple Qmaster / .. children: 1
	Oracle / .. children: 1
	Adobe / .. children: 50
	Final Cut Pro System Support / .. children: 1
	Malwarebytes / .. children: 1
	TeamViewer / .. children: 1
	regid.1986-12.com.adobe / .. children: 8
	FLYERALARM / .. children: 7



 /Library/Extensions:

	hp_io_enabler_compound.kext



 /Library/Internet Plug-Ins:

	AdobeAAMDetect.plugin
	Disabled Plug-Ins / .. children: 2
	JavaAppletPlugin.plugin



 /Library/Managed Preferences:

	



 /Library/PrivilegedHelperTools:

	com.teamviewer.Helper
	com.adobe.acc.installer
	com.adobe.acc.installer.v2



 /Library/ScriptingAdditions:

	SynologySIMBL.osax
	Adobe Unit Types.osax



 /Library/StartupItems:

	



 /Library/Updates:

	ProductMetadata.plist
	PPDVersions.plist
	index.plist



Top Processes: 

%CPU	PID	COMMAND	
107.5 	77		mds 
63.7 	209		mds_stores 
36.7 	650		mdworker 
35.1 	651		mdworker 
31.7 	646		mdworker 
16.6 	583		mdworker 
15.9 	0		kernel_task 
15.3 	581		mdworker 
7.2		206 WindowServer 
4.2		675 DetectX Swift 


Running Processes: 

PPID	PID	%CPU	USER	COMMAND	
0		1		0.3		root		/sbin/launchd 
1		51		0.0		root		/usr/sbin/syslogd 
1		52		0.0		root		/usr/libexec/UserEventAgent (System) 
1		54		0.6		root		/Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon 
1		55		0.0		root		/usr/libexec/wifiFirmwareLoader 
1		56		0.0		root		/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld 
1		57		0.0		root		/usr/libexec/kextd 
1		58		0.0		root		/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd 
1		60		0.0		root		/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted 
1		62		0.0		_appleevents		/System/Library/CoreServices/appleeventsd --server 
1		63		0.0		root		/usr/sbin/systemstats --daemon 
1		65		0.0		root		/usr/libexec/configd 
1		66		0.0		root		/System/Library/CoreServices/powerd.bundle/powerd 
1		67		0.0		root		/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service -Module Full 
1		70		0.0		root		/usr/libexec/logd 
1		71		0.0		root		/usr/libexec/keybagd -t 15 
1		74		0.0		root		firmwaresyncd		
1		76		0.0		root		/usr/libexec/warmd 
1		77		114.4		root		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds 
1		78		0.0		_iconservices		/System/Library/CoreServices/iconservicesd 
1		79		0.0		root		/System/Library/CoreServices/iconservicesagent 
1		80		0.0		root		/usr/libexec/diskarbitrationd 
1		82		0.0		root		/Library/Application Support/Adobe/AdobeGCClient/AGMService 
1		84		0.0		root		/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd-helper -launchd 
1		85		0.0		root		/usr/libexec/coreduetd 
1		86		0.0		root		/Library/Application Support/Adobe/AdobeGCClient/AGSService 
1		89		0.0		root		/usr/libexec/opendirectoryd 
1		90		0.0		root		/System/Library/PrivateFrameworks/ApplePushService.framework/apsd 
1		91		0.0		root		/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated 
1		92		0.0		root		/System/Library/CoreServices/launchservicesd 
1		93		0.0		_timed		/usr/libexec/timed 
1		94		0.4		root		/usr/sbin/securityd -i 
1		95		0.0		_usbmuxd		/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd 
1		97		0.0		_locationd		/usr/libexec/locationd 
1		98		0.0		root		autofsd		
1		99		0.0		_displaypolicyd		/usr/libexec/displaypolicyd -k 1 
1		100		0.0		root		/usr/libexec/dasd 
1		101		0.0		root		/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc 
1		104		0.0		[U502]		/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console 
1		105		0.0		root		/System/Library/CoreServices/logind 
1		106		0.0		root		/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond 
1		107		0.0		root		/usr/sbin/KernelEventAgent 
1		109		0.0		root		/usr/sbin/bluetoothd 
1		110		1.0		_hidd		/usr/libexec/hidd 
1		111		0.0		root		/usr/libexec/corebrightnessd --launchd 
1		112		0.0		root		/usr/libexec/AirPlayXPCHelper 
1		113		0.0		root		/usr/sbin/notifyd 
1		114		0.0		_distnote		/usr/sbin/distnoted daemon 
1		115		0.0		root		/usr/libexec/amfid 
1		116		0.0		root		/usr/sbin/cfprefsd daemon 
1		118		0.0		root		/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd 
1		119		1.3		root		/System/Library/CoreServices/coreservicesd 
1		122		0.0		root		aslmanager		
1		124		0.0		root		/usr/libexec/nehelper 
1		131		0.0		root		/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd 
1		132		0.0		root		/usr/libexec/trustd 
1		133		0.0		root		/usr/libexec/airportd 
1		134		0.0		_ctkd		/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s 
1		135		0.0		_coreaudiod		/usr/sbin/coreaudiod 
1		136		0.0		root		/usr/sbin/ocspd 
1		142		0.0		_coreaudiod		/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper 
1		157		0.0		root		/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd 
1		158		0.0		_analyticsd		/System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd 
1		159		0.0		_mdnsresponder		/usr/sbin/mDNSResponder 
1		160		0.0		root		/usr/sbin/mDNSResponderHelper 
1		162		0.0		_nsurlsessiond		/usr/libexec/nsurlsessiond --privileged 
1		170		0.0		_networkd		/usr/libexec/symptomsd 
1		172		0.0		root		/usr/libexec/mobileassetd 
1		195		0.0		root		/usr/libexec/apfsd 
1		196		0.0		root		/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-daemon 
1		197		0.0		root		/usr/libexec/usbd 
1		198		0.0		root		/usr/libexec/dpd 
1		200		0.0		root		/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader 
1		201		0.0		_cmiodalassistants		/System/Library/Frameworks/CoreMediaIO.framework/Resources/VDC.plugin/Contents/Resources/VDCAssistant 
1		202		0.0		root		/usr/libexec/syspolicyd 
1		203		0.0		root		/usr/sbin/cupsd -l 
1		205		0.0		root		/usr/libexec/lsd runAsRoot 
1		206		7.4		_windowserver		/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon 
1		207		0.0		root		/usr/libexec/watchdogd 
1		208		0.0		root		/usr/libexec/thermald 
1		209		68.9		root		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores 
1		210		0.0		root		/usr/libexec/rpcsvchost -launchd netlogon.bundle 
1		212		0.0		_nsurlstoraged		/usr/libexec/nsurlstoraged --privileged 
1		213		0.0		root		/usr/libexec/sandboxd 
1		214		0.0		root		/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd 
1		219		0.0		root		/usr/libexec/secinitd 
1		221		0.0		root		/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd 
1		222		0.0		root		/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer 
1		223		0.0		root		/usr/libexec/colorsync.displayservices 
1		224		0.0		root		/usr/libexec/colorsyncd 
1		232		0.0		root		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		235		0.0		root		/System/Library/PrivateFrameworks/SignpostNotification.framework/Versions/A/XPCServices/signpost_notificationd.xpc/Contents/MacOS/signpost_notificationd 
1		236		0.0		root		/usr/libexec/sysmond 
1		237		0.0		root		/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper 
63		238		0.0		root		/usr/sbin/systemstats --logger-helper /private/var/db/systemstats 
1		239		0.0		root		/usr/libexec/bootinstalld 
1		240		0.0		root		/System/Library/CoreServices/sharedfilelistd 
1		245		0.0		_locationd		/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod 
1		247		0.0		root		/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d 
1		250		0.0		root		/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper 
1		252		0.0		_locationd		/usr/libexec/secinitd 
1		253		0.0		root		/usr/libexec/diskmanagementd 
1		256		0.0		_locationd		/usr/sbin/cfprefsd agent 
1		257		0.0		root		/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd 
1		258		0.0		root		/System/Library/Frameworks/CoreMediaIO.framework/Versions/A/XPCServices/com.apple.cmio.registerassistantservice.xpc/Contents/MacOS/com.apple.cmio.registerassistantservice 
1		264		0.0		root		/System/Library/Frameworks/GSS.framework/Helpers/GSSCred 
1		266		0.0		_locationd		/usr/libexec/trustd --agent 
1		269		0.0		root		/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd 
1		270		0.0		root		/usr/libexec/securityd_service 
1		271		0.0		root		/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon 
1		272		0.0		_coreaudiod		/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper 
1		273		0.0		_captiveagent		/usr/libexec/captiveagent 
1		274		0.0		root		/usr/libexec/findmydeviced 
1		275		0.0		[U502]		/usr/sbin/cfprefsd agent 
1		276		0.0		root		/System/Library/CoreServices/ReportCrash daemon 
1		277		0.0		root		/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd 
1		278		0.0		_netbios		/usr/sbin/netbiosd 
1		279		0.0		[U502]		/usr/libexec/UserEventAgent (Aqua) 
1		281		0.0		[U502]		/usr/sbin/distnoted agent 
1		282		0.0		[U502]		/usr/sbin/universalaccessd launchd -s 
1		283		0.0		[U502]		/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter -L 
1		284		0.0		[U502]		/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock 
1		285		0.0		[U502]		/System/Library/CoreServices/talagent 
1		286		0.0		[U502]		/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer 
1		287		0.0		[U502]		/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder 
1		288		0.0		[U502]		/usr/libexec/lsd 
1		289		0.0		[U502]		/usr/libexec/secd 
1		290		0.0		[U502]		/usr/libexec/trustd --agent 
1		293		0.0		[U502]		/usr/libexec/pboard 
1		294		0.0		[U502]		/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd 
1		295		0.0		[U502]		/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird 
1		296		0.0		root		automountd		
1		297		0.0		[U502]		/System/Library/CoreServices/sharedfilelistd 
1		298		0.0		[U502]		/usr/libexec/pkd 
1		300		0.0		[U502]		/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd 
1		301		0.0		[U502]		/System/Library/CoreServices/iconservicesagent 
1		302		0.0		[U502]		/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd 
1		307		0.0		[U502]		/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd 
1		308		0.0		[U502]		/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra 
1		309		0.0		[U502]		/usr/sbin/usernoted 
1		310		0.0		[U502]		/usr/libexec/sharingd 
1		311		0.0		[U502]		/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp 
1		312		0.0		[U502]		/System/Library/CoreServices/backgroundtaskmanagementagent 
1		314		0.0		[U502]		/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter 
1		315		0.0		root		/usr/sbin/filecoordinationd 
1		316		0.0		[U502]		/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw 
1		317		0.0		[U502]		/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd 
1		318		0.0		[U502]		/usr/libexec/fmfd 
1		319		0.0		[U502]		/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd 
1		320		0.0		[U502]		/usr/libexec/keyboardservicesd 
1		321		0.0		[U502]		/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd 
1		322		0.0		[U502]		/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent 
1		323		0.0		[U502]		/System/Library/PrivateFrameworks/PassKitCore.framework/passd 
1		325		0.0		[U502]		/usr/libexec/nsurlsessiond 
1		326		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		327		0.0		[U502]		/usr/libexec/nsurlstoraged 
1		328		0.0		[U502]		/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd 
1		329		0.0		[U502]		/Applications/Dropbox.app/Contents/MacOS/Dropbox 
1		330		0.0		[U502]		/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight 
1		331		0.0		[U502]		/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent 
1		333		0.0		[U502]		/Applications/Dropbox.app/Contents/MacOS/Dropbox -type:crashpad-handler --no-upload-gzip --no-rate-limit --capture-python --no-identify-client-via-url --database=/Users/[U502]/.dropbox/Crashpad --metrics-dir=0 --url=https://d.dropbox.com/report_crashpad_minidump --https-pin=0x23,0xf2,0xed,0xff,0x3e,0xde,0x90,0x25,0x9a,0x9e,0x30,0xf4,0xa,0xf8,0xf9,0x12,0xa5,0xe5,0xb3,0x69,0x4e,0x69,0x38,0x44,0x3,0x41,0xf6,0x6,0xe,0x1,0x4f,0xfa --https-pin=0xaf,0xf9,0x88,0x90,0x6d,0xde,0x12,0x95,0x5d,0x9b,0xeb,0xbf,0x92,0x8f,0xdc,0xc3,0x1c,0xce,0x32,0x8d,0x5b,0x93,0x84,0xf2,0x1c,0x89,0x41,0xca,0x26,0xe2,0x3,0x91 --https-pin=0x5a,0x88,0x96,0x47,0x22,0xe,0x54,0xd6,0xbd,0x8a,0x16,0x81,0x72,0x24,0x52,0xb,0xb5,0xc7,0x8e,0x58,0x98,0x4b,0xd5,0x70,0x50,0x63,0x88,0xb9,0xde,0xf,0x7,0x5f --https-pin=0xfe,0xa2,0xb7,0xd6,0x45,0xfb,0xa7,0x3d,0x75,0x3c,0x1e,0xc9,0xa7,0x87,0xc,0x40,0xe1,0xf7,0xb0,0xc5,0x61,0xe9,0x27,0xb9,0x85,0xbf,0x71,0x18,0x66,0xe3,0x6f,0x22 --https-pin=0x76,0xee,0x85,0x90,0x37,0x4c,0x71,0x54,0x37,0xbb,0xca,0x6b,0xba,0x60,0x28,0xea,0xdd,0xe2,0xdc,0x6d,0xbb,0xb8,0xc3,0xf6,0x10,0xe8,0x51,0xf1,0x1d,0x1a,0xb7,0xf5 --https-pin=0x6d,0xbf,0xae,0x0,0xd3,0x7b,0x9c,0xd7,0x3f,0x8f,0xb4,0x7d,0xe6,0x59,0x17,0xaf,0x0,0xe0,0xdd,0xdf,0x42,0xdb,0xce,0xac,0x20,0xc1,0x7c,0x2,0x75,0xee,0x20,0x95 --https-pin=0x1e,0xa3,0xc5,0xe4,0x3e,0xd6,0x6c,0x2d,0xa2,0x98,0x3a,0x42,0xa4,0xa7,0x9b,0x1e,0x90,0x67,0x86,0xce,0x9f,0x1b,0x58,0x62,0x14,0x19,0xa0,0x4,0x63,0xa8,0x7d,0x38 --https-pin=0x87,0xaf,0x34,0xd6,0x6f,0xb3,0xf2,0xfd,0xf3,0x6e,0x9,0x11,0x1e,0x9a,0xba,0x2f,0x6f,0x44,0xb2,0x7,0xf3,0x86,0x3f,0x3d,0xb,0x54,0xb2,0x50,0x23,0x90,0x9a,0xa5 --https-pin=0xbc,0xfb,0x44,0xaa,0xb9,0xad,0x2,0x10,0x15,0x70,0x6b,0x41,0x21,0xea,0x76,0x1c,0x81,0xc9,0xe8,0x89,0x67,0x59,0xf,0x6f,0x94,0xae,0x74,0x4d,0xc8,0x8b,0x78,0xfb --https-pin=0xab,0x98,0x49,0x52,0x76,0xad,0xf1,0xec,0xaf,0xf2,0x8f,0x35,0xc5,0x30,0x48,0x78,0x1e,0x5c,0x17,0x18,0xda,0xb9,0xc8,0xe6,0x7a,0x50,0x4f,0x4f,0x6a,0x51,0x32,0x8f --https-pin=0x49,0x5,0x46,0x66,0x23,0xab,0x41,0x78,0xbe,0x92,0xac,0x5c,0xbd,0x65,0x84,0xf7,0xa1,0xe1,0x7f,0x27,0x65,0x2d,0x5a,0x85,0xaf,0x89,0x50,0x4e,0xa2,0x39,0xaa,0xaa --https-pin=0x56,0x32,0xd9,0x7b,0xfa,0x77,0x5b,0xf3,0xc9,0x9d,0xde,0xa5,0x2f,0xc2,0x55,0x34,0x10,0x86,0x40,0x16,0x72,0x9c,0x52,0xdd,0x65,0x24,0xc8,0xa9,0xc3,0xb4,0x48,0x9f --https-pin=0x2a,0x8f,0x2d,0x8a,0xf0,0xeb,0x12,0x38,0x98,0xf7,0x4c,0x86,0x6a,0xc3,0xfa,0x66,0x90,0x54,0xe2,0x3c,0x17,0xbc,0x7a,0x95,0xbd,0x2,0x34,0x19,0x2d,0xc6,0x35,0xd0 --https-pin=0x32,0xb6,0x4b,0x66,0x72,0x7a,0x20,0x63,0xe4,0x6,0x6f,0x3b,0x95,0x8c,0xb0,0xaa,0xee,0x57,0x6a,0x5e,0xce,0xfd,0x95,0x33,0x99,0xbb,0x88,0x74,0x73,0x1d,0x95,0x87 --https-pin=0xf5,0x3c,0x22,0x5,0x98,0x17,0xdd,0x96,0xf4,0x0,0x65,0x16,0x39,0xd2,0xf8,0x57,0xe2,0x10,0x70,0xa5,0x9a,0xbe,0xd9,0x7,0x94,0x0,0xd9,0xf6,0x95,0x50,0x69,0x0 --https-pin=0x67,0xdc,0x4f,0x32,0xfa,0x10,0xe7,0xd0,0x1a,0x79,0xa0,0x73,0xaa,0xc,0x9e,0x2,0x12,0xec,0x2f,0xfc,0x3d,0x77,0x9e,0xa,0xa7,0xf9,0xc0,0xf0,0xe1,0xc2,0xc8,0x93 --https-pin=0x19,0x6,0xc6,0x12,0x4d,0xbb,0x43,0x85,0x78,0xd0,0xe,0x6,0x6d,0x50,0x54,0xc6,0xc3,0x7f,0xf,0xa6,0x2,0x8c,0x5,0x54,0x5e,0x9,0x94,0xed,0xda,0xec,0x86,0x29 --https-pin=0x1d,0x75,0xd0,0x83,0x1b,0x9e,0x8,0x85,0x39,0x4d,0x32,0xc7,0xa1,0xbf,0xdb,0x3d,0xbc,0x1c,0x28,0xe2,0xb0,0xe8,0x39,0x1f,0xb1,0x35,0x98,0x1d,0xbc,0x5b,0xa9,0x36 --annotation=buildno=Dropbox-mac-56.4.94 --annotation=client_session_id=3132e3fd-0093-46ad-94f9-a6fdda960c59 --annotation=host_int_account1_boot=41864731088 --annotation=machine_id=f430ebf5-5189-5391-b23f-c50ac6b0c907 --annotation=platform=mac --annotation=platform_version=10.13.6 --handshake-fd=4 
1		334		0.0		[U502]		/usr/libexec/secinitd 
1		335		0.0		root		/usr/sbin/wirelessproxd 
329		336		0.0		[U502]		/Applications/Dropbox.app/Contents/MacOS/Dropbox -type:exit-monitor -python-version:3.5.4 -method:collectupload -session-token:3132e3fd-0093-46ad-94f9-a6fdda960c59 -target-handle:329 -target-shutdown-event:4 -target-command-line:/Applications/Dropbox.app/Contents/MacOS/Dropbox 
1		337		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		338		0.0		[U502]		/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd 
1		339		0.0		[U502]		/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd 
1		340		0.0		[U502]		/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent 
1		341		0.0		[U502]		/System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com.apple.iCloudHelper.xpc/Contents/MacOS/com.apple.iCloudHelper 
1		342		0.0		[U502]		/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd 
1		343		0.0		[U502]		/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd 
1		344		0.0		_applepay		/usr/libexec/nfcd 
1		345		0.0		root		/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system 
1		346		0.0		[U502]		/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent 
1		347		0.0		[U502]		/Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app/Contents/PlugIns/ACCFinderSync.appex/Contents/MacOS/ACCFinderSync 
1		349		0.0		[U502]		/Applications/Dropbox.app/Contents/PlugIns/garcon.appex/Contents/MacOS/garcon 
1		350		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		351		0.0		[U502]		/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy 
1		352		0.0		[U502]		/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy 
1		353		0.0		[U502]		/System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd 
1		354		0.0		[U502]		/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService 
1		355		0.0		[U502]		/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod 
1		356		0.0		[U502]		/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/commerce 
1		357		0.0		[U502]		/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper 
1		358		0.0		[U502]		/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService 
1		359		0.0		[U502]		/usr/libexec/knowledge-agent 
1		360		0.0		root		/usr/sbin/WirelessRadioManagerd 
1		361		0.0		[U502]		/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd 
1		362		0.0		root		/usr/sbin/spindump 
1		363		0.0		[U502]		/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent 
1		364		0.0		root		/System/Library/CoreServices/SubmitDiagInfo server-init 
1		365		0.0		[U502]		/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent 
1		367		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		368		0.0		[U502]		/System/Library/CoreServices/NotificationCenter.app/Contents/XPCServices/com.apple.notificationcenterui.WeatherSummary.xpc/Contents/MacOS/com.apple.notificationcenterui.WeatherSummary 
1		372		0.0		[U502]		/System/Library/Input Methods/PressAndHold.app/Contents/PlugIns/PAH_Extension.appex/Contents/MacOS/PAH_Extension 
1		373		0.0		[U502]		/System/Library/PrivateFrameworks/CoreCDP.framework/Versions/A/Resources/cdpd 
1		374		0.0		[U502]		/usr/libexec/rapportd 
1		375		0.0		[U502]		/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing 
1		376		0.0		_fpsd		/System/Library/PrivateFrameworks/CoreADI.framework/adid 
1		377		0.0		[U502]		/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent 
1		380		0.0		[U502]		/System/Library/PrivateFrameworks/FileProvider.framework/Support/fileproviderd 
1		382		0.0		[U502]		/usr/libexec/routined LAUNCHED_BY_LAUNCHD 
1		383		0.0		[U502]		/usr/sbin/ckkeyrolld 
1		385		0.0		[U502]		/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent 
1		388		0.0		[U502]		/Applications/TeamViewer.app/Contents/MacOS/TeamViewer -RunAsAgent YES 
1		389		0.0		[U502]		/usr/libexec/dmd 
1		390		0.0		[U502]		/System/Library/Image Capture/Support/icdd 
1		391		0.0		[U502]		/Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent 
1		392		0.0		[U502]		/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop -RunAsAgent YES -Module Full 
1		395		0.0		[U502]		/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd 
1		397		0.0		[U502]		/System/Library/CoreServices/cloudpaird 
1		398		0.0		[U502]		/Library/Application Support/Tablet/PenTabletDriver.app/Contents/MacOS/PenTabletDriver 
1		400		0.0		[U502]		/Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud --showwindow=false --onOSstartup=true 
1		401		0.0		[U502]		/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent 
1		402		0.0		[U502]		/System/Library/CoreServices/diagnostics_agent 
1		406		0.0		root		/usr/sbin/systemsoundserverd 
1		407		0.0		[U502]		/usr/libexec/networkserviceproxy 
1		408		0.0		root		/System/Library/CoreServices/CrashReporterSupportHelper server-init 
1		409		0.0		[U502]		/System/Library/CoreServices/APFSUserAgent 
1		410		0.0		[U502]		SafeEjectGPUAgent		
1		411		0.0		[U502]		/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent 
1		412		0.0		[U502]		/System/Library/CoreServices/Menu Extras/SafeEjectGPUExtra.menu/Contents/XPCServices/SafeEjectGPUService.xpc/Contents/MacOS/SafeEjectGPUService 
1		414		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/corespotlightd 
1		415		0.0		[U502]		/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd 
1		416		0.0		[U502]		/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd 
1		417		0.0		[U502]		/System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd 
1		420		0.7		[U502]		/System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/CoreServicesUIAgent 
1		421		0.0		[U502]		/Library/Application Support/Tablet/PenTabletDriver.app/Contents/Resources/ConsumerTouchDriver.app/Contents/MacOS/ConsumerTouchDriver 
1		422		0.0		[U502]		/System/Library/PrivateFrameworks/PrintingPrivate.framework/Versions/A/PrintUITool 
1		423		0.0		[U502]		/Applications/Spotify.app/Contents/MacOS/Spotify --autostart 
1		424		0.0		[U502]		/Applications/Enpass.app/Contents/MacOS/Enpass -psn_0_159783 
1		426		0.0		_gamecontrollerd		/usr/libexec/gamecontrollerd 
1		428		0.0		[U502]		/Applications/Spotify.app/Contents/Frameworks/Spotify Helper.app/Contents/MacOS/Spotify Helper --monitor-self-annotation=ptype=crashpad-handler --type=crashpad-handler --max-uploads=5 --max-db-size=20 --max-db-age=5 --database=/Users/[U502]/Library/Application Support/Spotify/User Data --url=https://crashdump.spotify.com:443/ --annotation=platform=macos --annotation=product=spotify --annotation=version=1.0.88.353 --handshake-fd=8 
1		430		0.0		[U502]		/usr/libexec/swcd 
1		431		0.0		[U502]		/Users/[U502]/.CloudStation/CloudStation.app/Contents/MacOS/cloud-drive-ui 
1		432		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
423		433		0.0		[U502]		/Applications/Spotify.app/Contents/Frameworks/Spotify Helper.app/Contents/MacOS/Spotify Helper --type=gpu-process --disable-features=ExtendedMouseButtons --log-file=/Users/[U502]/Library/Logs/Spotify_debug.log --log-severity=disable --product-version=Spotify/1.0.88.353 --lang=de --gpu-preferences=KAAAAAAAAACAAAAAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAADgBAAAmAAAAMAEAAAAAAAA4AQAAAAAAAEABAAAAAAAASAEAAAAAAABQAQAAAAAAAFgBAAAAAAAAYAEAAAAAAABoAQAAAAAAAHABAAAAAAAAeAEAAAAAAACAAQAAAAAAAIgBAAAAAAAAkAEAAAAAAACYAQAAAAAAAKABAAAAAAAAqAEAAAAAAACwAQAAAAAAALgBAAAAAAAAwAEAAAAAAADIAQAAAAAAANABAAAAAAAA2AEAAAAAAADgAQAAAAAAAOgBAAAAAAAA8AEAAAAAAAD4AQAAAAAAAAACAAAAAAAACAIAAAAAAAAQAgAAAAAAABgCAAAAAAAAIAIAAAAAAAAoAgAAAAAAADACAAAAAAAAOAIAAAAAAABAAgAAAAAAAEgCAAAAAAAAUAIAAAAAAABYAgAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAALAAAAEAAAAAAAAAAAAAAADAAAABAAAAAAAAAAAAAAAA0AAAAQAAAAAAAAAAAAAAAPAAAAEAAAAAAAAAAAAAAAEAAAABAAAAAAAAAAAAAAABIAAAAQAAAAAAAAAAAAAAATAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAAMAAAAEAAAAAAAAAABAAAADQAAABAAAAAAAAAAAQAAAA8AAAAQAAAAAAAAAAEAAAAQAAAAEAAAAAAAAAABAAAAEgAAABAAAAAAAAAAAQAAABMAAAAQAAAAAAAAAAMAAAAFAAAAEAAAAAAAAAADAAAACwAAABAAAAAAAAAAAwAAAAwAAAAQAAAAAAAAAAMAAAANAAAAEAAAAAAAAAADAAAADwAAABAAAAAAAAAAAwAAABAAAAAQAAAAAAAAAAMAAAASAAAAEAAAAAAAAAADAAAAEwAAABAAAAAAAAAABQAAAAUAAAAQAAAAAAAAAAUAAAALAAAAEAAAAAAAAAAFAAAADQAAABAAAAAAAAAABQAAAA8AAAAQAAAAAAAAAAUAAAAQAAAAEAAAAAAAAAAFAAAAEgAAABAAAAAAAAAABQAAABMAAAAQAAAAAAAAAAYAAAAFAAAAEAAAAAAAAAAGAAAACwAAABAAAAAAAAAABgAAAA0AAAAQAAAAAAAAAAYAAAAPAAAAEAAAAAAAAAAGAAAAEAAAABAAAAAAAAAABgAAABIAAAAQAAAAAAAAAAYAAAATAAAA --log-file=/Users/[U502]/Library/Logs/Spotify_debug.log --log-severity=disable --product-version=Spotify/1.0.88.353 --lang=de --service-request-channel-token=22F10A9E2467E210CADAE4535FBCDB3F 
1		434		0.0		[U502]		/usr/libexec/loginitemregisterd 
1		435		0.0		root		/usr/libexec/smd 
1		436		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		437		0.0		[U502]		/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService 
423		438		0.0		[U502]		/Applications/Spotify.app/Contents/Frameworks/Spotify Helper.app/Contents/MacOS/Spotify Helper --type=renderer --disable-features=ExtendedMouseButtons --service-pipe-token=C3C009FA4E5D0A2F24E4688953EEDF7B --lang=de --log-file=/Users/[U502]/Library/Logs/Spotify_debug.log --log-severity=disable --product-version=Spotify/1.0.88.353 --disable-scroll-bounce --disable-spell-checking --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=C3C009FA4E5D0A2F24E4688953EEDF7B --renderer-client-id=3 
1		439		0.0		root		/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent 
1		440		0.0		[U502]		/System/Library/PrivateFrameworks/ContactsAgent.framework/Executables/ContactsAgent 
1		442		0.0		root		/Applications/Synology Cloud Station.app/Contents/MacOS/cloud-drive-eventd 
431		443		0.0		[U502]		/Users/[U502]/.CloudStation/CloudStation.app/Contents/MacOS/cloud-drive-connect --log_folder log --info_folder . --log_level CloudStation.app/Contents/Resources/log_template/syncfolder_c.debug 
424		449		0.0		[U502]		/Applications/Enpass.app/Contents/Helpers/EnpassHelper.app/Contents/MacOS/EnpassHelper 10391 
1		450		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		452		0.0		[U502]		/System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher 
1		460		0.0		[U502]		/Applications/Dropbox.app/Contents/XPCServices/DropboxActivityProvider.xpc/Contents/MacOS/DropboxActivityProvider 
1		462		0.0		root		/usr/libexec/taskgated -s 
1		469		0.0		[U502]		/Library/Application Support/Tablet/PenTabletDriver.app/Contents/Resources/TabletDriver.app/Contents/MacOS/TabletDriver 
1		471		0.0		[U502]		/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent 
1		472		0.0		_softwareupdate		/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated 
1		473		0.0		root		/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd 
1		477		0.0		[U502]		/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy 
431		481		0.2		[U502]		/Users/[U502]/.CloudStation/CloudStation.app/Contents/MacOS/cloud-drive-daemon /Users/[U502]/.CloudStation/data/config/client.conf 1024 
329		485		0.0		root		/Library/DropboxHelperTools/Dropbox_u502/dbfseventsd 
485		486		0.0		root		/Library/DropboxHelperTools/Dropbox_u502/dbfseventsd 
486		487		0.0		[U502]		/Library/DropboxHelperTools/Dropbox_u502/dbfseventsd 
1		488		0.0		[U502]		/Applications/Dropbox.app/Contents/XPCServices/DropboxFolderTagger.xpc/Contents/MacOS/DropboxFolderTagger 
1		489		0.0		[U502]		/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice 
1		491		0.0		[U502]		/Users/[U502]/.CloudStation/CloudStation.app/Contents/PlugIns/FinderSync.appex/Contents/MacOS/FinderSync 
1		511		0.0		[U502]		/usr/libexec/videosubscriptionsd 
1		515		0.0		[U502]		/System/Library/PrivateFrameworks/UniversalAccess.framework/Versions/A/Resources/universalAccessAuthWarn.app/Contents/MacOS/universalAccessAuthWarn launchd -s 
1		519		0.0		[U502]		/System/Library/PrivateFrameworks/CacheDelete.framework/deleted 
1		525		0.0		root		/Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon 
1		526		0.0		[U502]		/System/Library/CoreServices/pbs 
1		533		0.0		[U502]		/usr/libexec/spindump_agent 
1		534		0.0		root		/usr/libexec/dmd 
1		535		0.0		[U502]		/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd 
1		536		0.0		[U502]		/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration 
1		537		0.0		[U502]		/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd 
1		539		0.0		[U502]		/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent 
1		545		0.0		[U502]		/Applications/Google Chrome.app/Contents/MacOS/Google Chrome 
1		547		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Framework.framework/Helpers/crashpad_handler --monitor-self-annotation=ptype=crashpad-handler --database=/Users/[U502]/Library/Application Support/Google/Chrome/Crashpad --metrics-dir=/Users/[U502]/Library/Application Support/Google/Chrome --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=OS X --annotation=prod=Chrome_Mac --annotation=ver=68.0.3440.106 --handshake-fd=9 
545		551		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=gpu-process --field-trial-handle=340636347197357149,12971053979067928302,131072 --gpu-preferences=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 --service-request-channel-token=304AFEE2EF25C4542C223BA87A2FC0A3 
1		552		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Framework.framework/Versions/A/XPCServices/AlertNotificationService.xpc/Contents/MacOS/AlertNotificationService 
1		553		0.0		[U502]		/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService 
1		555		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
545		558		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=renderer --field-trial-handle=340636347197357149,12971053979067928302,131072 --service-pipe-token=97C75A9E3A0951C4FEA8FCD16F8E9E97 --lang=de --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=97C75A9E3A0951C4FEA8FCD16F8E9E97 --renderer-client-id=3 --v2-sandbox --fd_mapping=113 
1		563		0.0		[U502]		/Applications/Utilities/Adobe Application Manager/IPC/AdobeIPCBroker.app/Contents/MacOS/AdobeIPCBroker -launchedbyvulcan /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud 
545		564		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=renderer --field-trial-handle=340636347197357149,12971053979067928302,131072 --service-pipe-token=DCE0AE660A3DB48C13C9784C7CBA0DC3 --lang=de --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=DCE0AE660A3DB48C13C9784C7CBA0DC3 --renderer-client-id=8 --v2-sandbox --fd_mapping=131 
1		566		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing 
1		567		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		568		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 
1		569		0.0		[U502]		/System/Library/CoreServices/ReportCrash agent 
400		570		0.1		[U502]		/Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/Frameworks/AdobeCrashReporter.framework/Versions/A/AdobeCRDaemon.app/Contents/MacOS/AdobeCRDaemon 400 Creative Cloud 4.6 /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/Resources/CreativeCloud.icns /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/Frameworks/AdobeCrashReporter.framework/Versions/A/Adobe Crash Reporter.app/Contents/MacOS/Adobe Crash Reporter 1 
1		574		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared 
1		575		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-mail -c MDSImporterWorker -m com.apple.mdworker.mail 
1		580		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared 
1		581		19.5		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared 
1		582		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared 
1		583		19.5		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared 
545		584		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=renderer --field-trial-handle=340636347197357149,12971053979067928302,131072 --service-pipe-token=5CA5EF9C8D577E6ED64E6C38BCA8EC44 --lang=de --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=5CA5EF9C8D577E6ED64E6C38BCA8EC44 --renderer-client-id=18 --v2-sandbox --fd_mapping=273 
1		589		0.0		_spotlight		/usr/libexec/trustd --agent 
545		591		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=ppapi-broker --field-trial-handle=340636347197357149,12971053979067928302,131072 --lang=de --service-request-channel-token=8C96B64A65CADC88DD661B42B8B73184 
1		592		0.0		[U502]		/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell 
400		596		0.0		[U502]		/Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper.app/Contents/MacOS/Adobe CEF Helper --type=gpu-process --log-file=/Users/[U502]/Library/Logs/CreativeCloud/ACC/CEF.log --log-severity=warning --user-agent=Mozilla/5.0 (Macintosh) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36 CreativeCloud/4.6.0.384 --lang=en-US --gpu-preferences=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 --gpu-vendor-id=0x8086 --gpu-device-id=0x0d22 --gpu-driver-vendor --gpu-driver-version --gpu-driver-date --gpu-active-vendor-id=0x8086 --gpu-active-device-id=0x0d22 --log-file=/Users/[U502]/Library/Logs/CreativeCloud/ACC/CEF.log --log-severity=warning --user-agent=Mozilla/5.0 (Macintosh) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36 CreativeCloud/4.6.0.384 --lang=en-US --service-request-channel-token=2C2F4D3E8EF0AD40F11B0E583DCCDB23 
1		597		0.0		[U502]		/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService 
1		598		0.0		[U502]		/Library/Application Support/Adobe/AdobeGCClient/AdobeGCClient.app/Contents/MacOS/AdobeGCClient --xmlFilePath=/tmp/adobegc_JO5LEN --workflowInitiator=GCInvokerUtility 
1		601		0.0		[U502]		/Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app/Contents/MacOS/Adobe Desktop Service --onOSstartup=true --showwindow=false --waitForRegistration=true 
1		602		0.0		root		/usr/libexec/taskgated-helper 
400		604		0.0		[U502]		/Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper.app/Contents/MacOS/Adobe CEF Helper --type=renderer --service-pipe-token=BC2023E22D5D1F8449105BE95ED9DA7C --lang=en-US --log-file=/Users/[U502]/Library/Logs/CreativeCloud/ACC/CEF.log --log-severity=warning --user-agent=Mozilla/5.0 (Macintosh) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36 CreativeCloud/4.6.0.384 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=BC2023E22D5D1F8449105BE95ED9DA7C --renderer-client-id=3 
601		605		0.0		[U502]		/Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app/Contents/Frameworks/AdobeCrashReporter.framework/Versions/A/AdobeCRDaemon.app/Contents/MacOS/AdobeCRDaemon 601 Adobe Desktop Service 4.6 /Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app/Contents/Resources/AdobeDesktopService.icns /Library/Application Support/Adobe/Adobe Desktop Common/ADS/Adobe Desktop Service.app/Contents/Frameworks/AdobeCrashReporter.framework/Versions/A/Adobe Crash Reporter.app/Contents/MacOS/Adobe Crash Reporter 1 
1		611		0.0		[U502]		/Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app/Contents/MacOS/Core Sync 
1		612		0.0		[U502]		/Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess.app/Contents/MacOS/../libs/node /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess.app/Contents/MacOS/../js/main.js 
611		615		0.1		[U502]		/Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app/Contents/Frameworks/AdobeCrashReporter.framework/Versions/A/AdobeCRDaemon.app/Contents/MacOS/AdobeCRDaemon 611 Core Sync 3.1.0.8 /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app/Contents/Resources/CreativeCloudIcons.icns /Applications/Utilities/Adobe Sync/CoreSync/Core Sync.app/Contents/Frameworks/AdobeCrashReporter.framework/Versions/A/Adobe Crash Reporter.app/Contents/MacOS/Adobe Crash Reporter 0 Adobe Sync 
400		619		0.0		[U502]		/Library/Application Support/Adobe/Adobe Desktop Common/HEX/Adobe CEF Helper.app/Contents/MacOS/Adobe CEF Helper --type=renderer --service-pipe-token=99334C1E8971E73E1191610127F0E939 --lang=en-US --log-file=/Users/[U502]/Library/Logs/CreativeCloud/ACC/CEF.log --log-severity=warning --user-agent=Mozilla/5.0 (Macintosh) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36 CreativeCloud/4.6.0.384 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=99334C1E8971E73E1191610127F0E939 --renderer-client-id=4 
1		621		0.0		[U502]		/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/reversetemplated 
1		622		0.0		[U502]		/System/Library/PrivateFrameworks/CoreRecents.framework/Versions/A/Support/recentsd 
545		637		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=renderer --field-trial-handle=340636347197357149,12971053979067928302,131072 --service-pipe-token=FD499C24B8D2EA454A8068C2E7357FC1 --lang=de --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=FD499C24B8D2EA454A8068C2E7357FC1 --renderer-client-id=28 --v2-sandbox --fd_mapping=299 
1		638		0.0		_spotlight		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared 
1		639		0.0		_spotlight		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared 
1		640		0.0		_spotlight		/usr/sbin/distnoted agent 
1		641		0.0		[U502]		/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper 
1		642		0.0		[U502]		/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper 
1		643		0.0		[U502]		/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper 
545		644		0.0		[U502]		/Applications/Google Chrome.app/Contents/Versions/68.0.3440.106/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=renderer --field-trial-handle=340636347197357149,12971053979067928302,131072 --service-pipe-token=C5B73BF263B5412C4BCE1BAB871E0682 --lang=de --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=C5B73BF263B5412C4BCE1BAB871E0682 --renderer-client-id=29 --v2-sandbox --fd_mapping=302 
1		645		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		646		34.1		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		647		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		648		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		650		38.9		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		651		35.4		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		652		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		653		0.0		[U502]		/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper 
1		654		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.single 
1		658		1.4		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdwrite 
1		661		0.0		[U502]		/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService 
1		662		0.0		root		/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd 
1		664		0.0		[U502]		/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 3858566E-C7E8-4A28-ABA7-DECF32669575 -post-exec 4 
1		675		5.5		[U502]		/Volumes/DetectX Swift/DetectX Swift.app/Contents/MacOS/DetectX Swift -psn_0_274499 
1		676		0.0		[U502]		/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar 
1		702		0.0		[U502]		/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler 2 
1		758		0.0		root		/usr/sbin/gssd 
1		759		0.0		_netbios		/usr/sbin/gssd 
1		929		0.0		[U502]		/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-lsb -c MDSImporterWorker -m com.apple.mdworker.lsb 
1		930		0.0		[U502]		/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService 

«»EOF»«

Code:

ATTFilter

RECENT HISTORY:

DetectX Swift v1.076 
Report printed at 2018-09-11 07:29:48 +0000

Added: 
On or before Di., 11, Sep., 2018 09:26:55 +0200 
~/Library/Application Support/TeamViewer
 

Added: 
On or before Di., 11, Sep., 2018 09:26:55 +0200 
/Library/Application Support/TeamViewer
 

Deleted: 
On or before Di., 11, Sep., 2018 09:26:55 +0200 
/Library/Application Support/Avira
 

Deleted: 
On or before Di., 11, Sep., 2018 09:26:55 +0200 
/Library/Application Support/WD SmartWare Services
 

Deleted: 
On or before Di., 11, Sep., 2018 09:26:55 +0200 
/Library/Application Support/WDSmartWare

Dante12 · 11.09.2018, 11:05

Das Forgot ist schon richtig damit werden Systemdatenbanken von entsprechender Software bereinigt um eine Neuinstallation zu ermöglichen ohne das auf bestehende Konfigurationen zurückgegriffen wird.

Dein System ist jetzt von Altlasten so weit sauber und auch keine Daten mehr die zu deinem Google Problem führen. Wenn es jetzt noch da ist würde ich zunächst vorschlagen Google nochmal komplett zurück zu setzten .

Schreib mir bitte ob es was geholfen hat.

don-benni · 11.09.2018, 12:23

Hab ich jetzt gemacht aber ich werd das einfach nicht los.
Nachdem die Einstellungen zurückgesetzt habe war es auch wieder bei den Standard-Suchmaschinen drin.

Dante12 · 11.09.2018, 21:20

Was ist den dieses weknow hast du das selbst hinzugefügt?
Wenn du z.B. yahoo als Standardsuchmaschine wählst ist danach immer noch smart search zu sehen?

don-benni · 12.09.2018, 07:04

Nein, ich denke das wird durch dies "Smart Search" eingefügt.

Wenn ich andere Suchmaschinen wähle, ändert sich auch nichts.

Dante12 · 13.09.2018, 08:59

Ich habe mich jetzt mit meinem Kollegen beraten. Das scheint tatsächlich ein grösseres Problem mit den Sicherheits-Apps aus dem AppStore zu sein. Mittlerweile tummeln sich einige Fake-Apps dort und dein installiertes Komros scheint auch in dieser Kategorie zu fallen. Siehe am Beispiel Adware Doctor

Lange rede kurze Sinn, bitte öffne nochmal detextx swift klicke nach der Prüfung auf ok
Oben im Menü unter Help wähle bitte Report a problem to sqwark support
Gib dein Admin-Passwort ein. Auf deinem Desktop wird ein Ordner Sqwarq_Support erstellt.
Anschliessend öffnet sich dein E-Mail Programm. Bitte nicht Senden ich mache das hier direkt über eine app.
Packe den Ordner als .zip und schicke es bitte an meine E-Mail Adresse ich schicke dir eine PN.

Zip Erhalten

Danke für deine Hilfe ich melde später bei dir

============ S N I P ================= Ab hier geht's weiter ===>

Hallo @don-benni,

wir haben uns das alles noch mal angeschaut und sämtliche Malware wurde bereits von mir entfernt. Leider können wir uns dennoch nicht erklären warum bei dir noch diese auftaucht. Wir vermuten das in den Konfigurationsdaten von Chrome ein JavaScript oder eine Datei verändert wurde die Smart Search aufruft.

Der letzte Schritt besteht jetzt darin, Google Chrome vollständig zu entfernen und anschliessend erneut zu installieren. Ich hoffe das dadurch das Problem endgültig erledigt ist.

Bevor ich das mache, möchte ich dich bitten zwei Ordner zu packen und an meine E-Mail-Adresse zu senden.

Erstelle einen Ordner mit den Namen ggc auf deinem Desktop
Kopiere bitte den Pfad aus der Code-Box in Spotlight und drücke Enter
Die Fett dargestellten Ordner bitte in den ggc Ordner kopieren
(zum kopieren die Alt-Taste gedrückt halten dann erscheint ein Plus-Zeichen somit wird der ursprüngliche Ordner nicht verschoben).
Es kann sein das der Web Applications Ordner bei dir nicht vorhanden ist. Das ist OK dann muss der eine Ordner genügen.
Packe dann den ggc-Ordner als .zip-Archiv und schicke es an meine E-Mail-Adresse.

In Spotlight Einfügen:

Code:

ATTFilter

~/Library/Application Support/Google/Chrome/Default/

Kopiere in ggc:
Extensions
Web Applications

Vorbereitung zum vollständigen löschen von Chrome

Speichere bitte deine Lesezeichen auf deinem Rechner Menü -> Lesezeichen -> Lesezeichen-Manager.
Rechts auf die drei Punkte klicken und Lesezeichen exportieren wählen.
Prüfe ob bei dir Google Chrome Sync aktiviert ist. Was ist Google Chrome Sync? Menü -> Chrome -> Einstellungen...
Unter Personen schau bitte ob du angemeldet bis. Dort steht dann dein Google-Name oder wenn nicht, steht dort Anmelden dann brauchst du die Anweisungen für den Sync nicht beachten.

Google Chrome Sync Daten löschen (nur wenn angemeldet)

Entferne zunächst alle deine Erweiterung Menü -> Einstellungen...

Links auf die drei Striche (Einstellungen) klicken -> Erweiterungen

In den Einstellungen unter Personen klicke bitte auf Synchronisierung dann bitte auf Synchronisierte Daten im Google Dashboard verwalten

Auf der Seite scrolle ganz nach unten und klicke auf den Button Synchronisierung zurücksetzen.

Google Chrome entfernen

Kopiere bitte den Inhalt aus der Code-Box und füge es in TextEdit als reinen Text ein (hast du schon gemacht
Speichere es als trashPaths.txt auf deinem Desktop
Starte nun das Tool MoveToTrash wenn du es noch hast sonst lade es dir bitte nochmal vom Server herunter.
Wie gehabt benötigst du für jede Löschaktion in den Systemordnern dein Admin-Passwort
Nach Abschluss prüfe bitte ob im Papierkorb ob alle Dateien die in der Code-Box sind dort abgelegt wurden. Sonst musst du den Rest manuell löschen.
Es ist auch möglich, dass einige Dateien bei dir nicht vorhanden sind.
Lade dir jetzt die aktuelle Version von Google Chrome herunter (noch nicht installieren)

Code:

ATTFilter

/Applications/Google Chrome.app,
/private/var/folders/s5/zggb59tx0j9bs9zmqp6dm2m00000gn/C/com.google.Chrome,
/private/var/db/BootCaches/C97EF7AC-A9D7-4114-AF29-FD2F633682A0/app.com.google.Chrome.playlist,
~/Library/Google,
~/Library/Application Support/Google/Chrome,
~/Library/Application Support/Google/Chrome Cloud Enrollment,
~/Library/Application Support/CrashReporter/Google Chrome_16D0184E-0C26-5EA7-9F53-9BD5F0516BC8.plist,
~/Library/Preferences/com.google.Chrome.plist,
~/Library/Preferences/com.google.Keystone.Agent.plist,
~/Library/Caches/Google/Chrome,
~/Library/Caches/com.google.Keystone,
~/Library/Caches/com.google.Keystone.Agent,
~/Library/Caches/com.google.SoftwareUpdate,
~/Library/Saved Application State/com.google.Chrome.savedState,
~/Library/LaunchAgents/com.google.keystone.agent.plist

Reset Sytemcache, SMC, NVRAM

Bitte befolge die Anweisungen im Lesestoff in der Reihenfolge wie ich sie dir eingefügt habe.

Systemmanagement zurücksetzen
Setze das SMC nach dieser Anleitung bitte zurück.

NVRAM zurücksetzen
Setze den Computerspeicher (NVRAM) nach dieser Anleitung zurück.

Sicherer Systemstart

Lies dir bitte die nachfolgende Anleitung genau durch: Was ist der sichere Systemstart?
Halte während des Startvorgangs und bevor / während der Startton erfolgt die Shift-Taste gedrückt.
Der Startvorgang dauert in diesem Modus etwas länger. Auch ein Flackern des Bildschirms ist normal. Als Bestätigung wird oben rechts am Bildschirm der Sichere Systemstart angezeigt.
Hinweis: Bei Bluetooth-Tastaturen drücke die Shift-Taste während der Ton zu hören ist, da die Erkennung von Bluetooth nicht direkt beim Einschalten erfolgt.
Wenn der Startvorgang abgeschlossen ist, kannst du den Rechner neu starten.

Sierra: Für gewöhnlich steht oben rechts in roter Schrift der Hinweis für den sicheren Systemstart.
Bei Sierra kann es vorkommen das dieser Hinweis nicht angezeigt wird. Wird bei dir der Text angezeigt, dann brauchst du die Zeilen 1 - 3 nicht beachten. Sonst bitte prüfen wie folgt:
Log dich bitte ein und prüfe das in dem du folgende Schritte ausführst.

Wähle aus dem Apfelmenü über diesen Mac...
Klicke auf Systembericht und dann in der linken Spalte auf Software
Im rechten Fenster sollte folgendes stehen: Startmodus: Sicher
Ist das nicht der Fall, dann Neustart und versuche es nochmal.
Mache anschliessend einen Neustart.

Installiere jetzt bitte die neuste Version von Google Chrome und Teste
Ich empfehle für einen Blocker uBlock Origin aus dem Chrome Store.
Melde dich jetzt in Google Chrome Sync an (falls du es vorher auch schon warst)

Bitte schreibe mir ob es jetzt weg ist.

don-benni · 13.09.2018, 11:03

Hallo dante,

du hast geschafft und dafür bin ich dir sehr dankbar,
vorallem da es ja doch eine ganze Weile gedauert hat.
Wirklich eine tolle Sache.

Danke danke.

Falls du mal einen Webdesigner benötigst,
helfe ich dir gerne auch einmal aus

Gruß Benjamin

Dante12 · 13.09.2018, 11:06

Nachtrag:

Ich habe gesehen das du eingestellt hast dich automatisch Anzumelden. Dazu möchte ich sagen das diese Idee nicht gut ist. Das Passwort wird in diesem Fall unverschlüsselt abgelegt was die Möglichkeit ergeben könnte das Malware an die Systemordnern Zugriff haben könnte. Deshalb empfehle ich dir das so einzustellen das du dich wieder durch Eingabe des Passwortes einloggen kannst.

Nachtrag 2:
Ändere bitte deine Zugangspasswörter da es aus den Logs nicht ersichtlich ist seit wann die Malware (möglich das es nur ein Browser Hijacker war) auf deinem Rechner aktiv war.

Freut mich das es jetzt geholfen hat. Bitte melde dich falls es wieder Probleme gibt.

Das es so lange gedauert hat tut mir Leid. Ich war ständig am Grübeln was es noch sein könnte weil ja der Rechner an sich schon nach dem dritten Themeneintrag sauber war.

don-benni · 13.09.2018, 14:46

Danke für die Infos. Werde ich gleich mal in Angriff nehmen.

War kein Problem das es solange gedauert hat,
fand es eher toll das du solange am Ball geblieben bist.

Hoffe aber das ich mich nicht nochmal melden muss ;D

Danke nochmal

Gruß Benjamin

11.09.2018, 21:20	#36
Dante12 /// Mac Expert	Google Chrome Mac SmartSuche entfernen "deals-online.us" Was ist den dieses weknow hast du das selbst hinzugefügt? Wenn du z.B. yahoo als Standardsuchmaschine wählst ist danach immer noch smart search zu sehen? __________________ --> Google Chrome Mac SmartSuche entfernen "deals-online.us"

Google Chrome Mac SmartSuche entfernen "deals-online.us"

Alles rund um Mac OSX & Linux: Google Chrome Mac SmartSuche entfernen "deals-online.us"