[10.10 Yosemite] Adware Shoppy-Up nervt....

[HenryO]

<div class="bbWrapper">Hallo! <br /> Hat hier keiner Probleme mit der Adware Shoppy-Up? Oder hat jemand einen Tipp, wie ich mich davon befreien kann? Ich nutze meist Chrome als Browser, und auf verschiedenen Webseiten tauchen permanent die Shoppy-Up-Anzeigen auf. <br /> <br /> Oder auch dieses Phänomen, dass - wenn ich auf einen Link klicken will - der Maus-Zeiger leicht zittert und dann nach dem Klick nicht der gewünschte Link geöffnet wird, sondern zu einer anderen Website verlinkt wird, auf der z.B. MacKeeper oder anderer AntiViren-Dreck angeboten wird. Das passiert zweimal hintereinander, erst dann öffnet sich auf Klick der angesteuerte Link...<br /> <br /> Danke für einen Hinweis!<br /> Henry<br /> <br /> P.S.: Ich habe ein MacBook Pro von Mitte 2012</div>

 

[raven]

<div class="bbWrapper"><blockquote data-attributes="member: 26752" data-quote="HenryO" data-source="post: 4852905" class="bbCodeBlock bbCodeBlock--expandable bbCodeBlock--quote js-expandWatch"> <div class="bbCodeBlock-title"> <a href="/community/goto/post?id=4852905" class="bbCodeBlock-sourceJump" rel="nofollow" data-xf-click="attribution" data-content-selector="#post-4852905">HenryO schrieb:</a> </div> <div class="bbCodeBlock-content"> <div class="bbCodeBlock-expandContent js-expandContent "> Danke für einen Hinweis! </div> <div class="bbCodeBlock-expandLink js-expandLink"><a role="button" tabindex="0">Zum Vergrößern anklicken....</a></div> </div> </blockquote>Bitte einmal <a href="http://www.etresoft.com" target="_blank" class="link link--external" rel="nofollow ugc noopener">Etrecheck</a> laden und nach mit den Code-Tags posten.<br /> Malware entfernen mit dem <a href="http://www.adwaremedic.com/index.php" target="_blank" class="link link--external" rel="nofollow ugc noopener">http://www.adwaremedic.com/index.php</a><br /> <br /> Bitte sehr gerne geschehen.</div>

 

[echo.park]

<div class="bbWrapper">Runterladen und ausführen. Das Tool ist seriös und hat keinen negativen Einfluss auf dein System. Admin-Kennwort wird benötigt.<br /> <br /> <a href="https://www.malwarebytes.org/antimalware/mac/" target="_blank" class="link link--external" rel="nofollow ugc noopener">https://www.malwarebytes.org/antimalware/mac/</a><br /> <br /> Edit:<br /> Was hast du denn für Extension für Chrome installiert?</div>

 

[u0679]

<div class="bbWrapper">ModInfo: <a href="https://test.apfeltalk.de/community/members/26752/" class="username" data-xf-init="member-tooltip" data-user-id="26752" data-username="@HenryO">@HenryO</a>, auch wenn ich verstehen kann, dass Du Dich ärgerst. Kraftausdrücke sind hier nicht gern gesehen. Von daher bitte ich Dich, Deinen Post dahingehend zu korrigieren. Danke.</div>

 

[HenryO]

<div class="bbWrapper"><blockquote data-attributes="member: 168512" data-quote="u0679" data-source="post: 4852916" class="bbCodeBlock bbCodeBlock--expandable bbCodeBlock--quote js-expandWatch"> <div class="bbCodeBlock-title"> <a href="/community/goto/post?id=4852916" class="bbCodeBlock-sourceJump" rel="nofollow" data-xf-click="attribution" data-content-selector="#post-4852916">u0679 schrieb:</a> </div> <div class="bbCodeBlock-content"> <div class="bbCodeBlock-expandContent js-expandContent "> Kraftausdrücke sind hier nicht gern gesehen. Von daher bitte ich Dich, Deinen Post dahingehend zu korrigieren. Danke. </div> <div class="bbCodeBlock-expandLink js-expandLink"><a role="button" tabindex="0">Zum Vergrößern anklicken....</a></div> </div> </blockquote><br /> Ok, sorry... jetzt versuche ich, die Möglichkeit zu finden, die Betreffzeile zu ändern...<br /> <br /> <blockquote data-attributes="" data-quote="" data-source="" class="bbCodeBlock bbCodeBlock--expandable bbCodeBlock--quote js-expandWatch"> <div class="bbCodeBlock-content"> <div class="bbCodeBlock-expandContent js-expandContent "> Bitte einmal <a href="http://www.etresoft.com" target="_blank" class="link link--external" rel="nofollow ugc noopener">Etrecheck</a> laden und nach mit den Code-Tags posten.. </div> <div class="bbCodeBlock-expandLink js-expandLink"><a role="button" tabindex="0">Zum Vergrößern anklicken....</a></div> </div> </blockquote><br /> Danke sehr! Hier die in rot gefärbten Meldung von Etrecheck:<br /> <br /> <a href="http://www.apfeltalk.de/community/etrecheck://help/startupitems" target="_blank" class="link link--external" rel="nofollow ugc noopener"><b>Startup Items: </b><img class="smilie smilie--emoji" loading="lazy" alt="ℹ️" title="Information :information_source:" src="https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/2139.png" data-shortname=":information_source:" /></a><br /> <br /> HWNetMgr: Path: /Library/StartupItems/HWNetMgr<br /> <br /> HWPortDetect: Path: /Library/StartupItems/HWPortDetect<br /> <br /> Startup items are obsolete in OS X Yosemite<br /> <br /> <br /> <a href="http://www.apfeltalk.de/community/etrecheck://help/systemlaunchdaemons" target="_blank" class="link link--external" rel="nofollow ugc noopener"><b>Problem System Launch Daemons: </b><img class="smilie smilie--emoji" loading="lazy" alt="ℹ️" title="Information :information_source:" src="https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/2139.png" data-shortname=":information_source:" /></a><br /> <br /> [failed] com.apple.security.syspolicy.plist</div>

 

[raven]

<div class="bbWrapper"><blockquote data-attributes="member: 26752" data-quote="HenryO" data-source="post: 4852991" class="bbCodeBlock bbCodeBlock--expandable bbCodeBlock--quote js-expandWatch"> <div class="bbCodeBlock-title"> <a href="/community/goto/post?id=4852991" class="bbCodeBlock-sourceJump" rel="nofollow" data-xf-click="attribution" data-content-selector="#post-4852991">HenryO schrieb:</a> </div> <div class="bbCodeBlock-content"> <div class="bbCodeBlock-expandContent js-expandContent "> Danke sehr! Hier die in rot gefärbten Meldung von Etrecheck:<br /> <br /> <a href="http://www.apfeltalk.de/community/etrecheck://help/startupitems" target="_blank" class="link link--external" rel="nofollow ugc noopener"><b>Startup Items: </b><img class="smilie smilie--emoji" loading="lazy" alt="ℹ️" title="Information :information_source:" src="https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/2139.png" data-shortname=":information_source:" /></a><br /> <br /> HWNetMgr: Path: /Library/StartupItems/HWNetMgr<br /> <br /> HWPortDetect: Path: /Library/StartupItems/HWPortDetect<br /> <br /> Startup items are obsolete in OS X Yosemite<br /> <br /> <br /> <a href="http://www.apfeltalk.de/community/etrecheck://help/systemlaunchdaemons" target="_blank" class="link link--external" rel="nofollow ugc noopener"><b>Problem System Launch Daemons: </b><img class="smilie smilie--emoji" loading="lazy" alt="ℹ️" title="Information :information_source:" src="https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/2139.png" data-shortname=":information_source:" /></a> </div> <div class="bbCodeBlock-expandLink js-expandLink"><a role="button" tabindex="0">Zum Vergrößern anklicken....</a></div> </div> </blockquote>Bite setz das ganze Logfile ein.Mit den wenigen Zeilen kann man nichts erkennen. <a href="http://www.apfeltalk.de/community/threads/tutorial-richtiges-posten-von-konsoleneintraegen-und-etrecheck-logs.428442/" target="_blank" class="link link--external" rel="nofollow ugc noopener">Anleitung so</a>:<br /> <br /> Edit: Beitrag überarbeitet, Formatierung wurde verissen.</div>

 

[HenryO]

<div class="bbWrapper">Hallo raven und die anderen: Vielen Dank - die vorgeschlagene App hat das Problem erstmal beseitigt. Deshlab spare ich mir das Senden des Logfiles erstmal.<br /> Also nochmal: DANKE!</div>

 

[raven]

<div class="bbWrapper"><blockquote data-attributes="member: 26752" data-quote="HenryO" data-source="post: 4852997" class="bbCodeBlock bbCodeBlock--expandable bbCodeBlock--quote js-expandWatch"> <div class="bbCodeBlock-title"> <a href="/community/goto/post?id=4852997" class="bbCodeBlock-sourceJump" rel="nofollow" data-xf-click="attribution" data-content-selector="#post-4852997">HenryO schrieb:</a> </div> <div class="bbCodeBlock-content"> <div class="bbCodeBlock-expandContent js-expandContent "> Deshlab spare ich mir das Senden des Logfiles erstmal. </div> <div class="bbCodeBlock-expandLink js-expandLink"><a role="button" tabindex="0">Zum Vergrößern anklicken....</a></div> </div> </blockquote><br /> Naja auch gut. Im Log hätte man sehen könne ob noch was im Argen liegt.<br /> <br /> Edit: bitte sehr gerne geschehen.<br /> <br /> Gute N8</div>

 

[HenryO]

<div class="bbWrapper">Hier das Logfile...<br /> <br /> <div class="bbCodeBlock bbCodeBlock--screenLimited bbCodeBlock--code"> <div class="bbCodeBlock-title"> Code: </div> <div class="bbCodeBlock-content" dir="ltr"> <pre class="bbCodeCode" dir="ltr" data-xf-init="code-block" data-lang=""><code>EtreCheck version: 2.2 (132) Report generated 3/21/16, 10:26 AM Download EtreCheck from http://etresoft.com/etrecheck Click the [Click for support] links for help with non-Apple products. Click the [Click for details] links for more information about that line. Hardware Information: ℹ️ MacBook Pro (13-inch, Mid 2012) (Technical Specifications) MacBook Pro - model: MacBookPro9,2 1 2.5 GHz Intel Core i5 CPU: 2-core 8 GB RAM Upgradeable BANK 0/DIMM0 4 GB DDR3 1600 MHz ok BANK 1/DIMM0 4 GB DDR3 1600 MHz ok Bluetooth: Good - Handoff/Airdrop2 supported Wireless: en1: 802.11 a/b/g/n Battery: Health = Normal - Cycle count = 148 - SN = W02474G1JD3BB Video Information: ℹ️ Intel HD Graphics 4000 Color LCD 1280 x 800 System Software: ℹ️ OS X 10.10.5 (14F1605) - Time since boot: 0:58:43 Disk Information: ℹ️ KINGSTON SVP200S37A120G disk0 : (120,03 GB) EFI (disk0s1) &lt;not mounted&gt; : 210 MB Recovery HD (disk0s3) &lt;not mounted&gt; [Recovery]: 650 MB Macintosh SSD (disk1) / : 118.82 GB (36.21 GB free) Encrypted AES-XTS Unlocked Core Storage: disk0s2 119.17 GB Online APPLE HDD TOSHIBA MK5065GSXF disk2 : (500,11 GB) EFI (disk2s1) &lt;not mounted&gt; : 210 MB Macintosh HD (disk2s2) /Volumes/Macintosh HD : 499.25 GB (419.19 GB free) Recovery HD (disk2s3) &lt;not mounted&gt; [Recovery]: 650 MB USB Information: ℹ️ Apple Inc. FaceTime HD Camera (Built-in) Apple Computer, Inc. IR Receiver Apple Inc. BRCM20702 Hub Apple Inc. Bluetooth USB Host Controller Apple Inc. Apple Internal Keyboard / Trackpad Thunderbolt Information: ℹ️ Apple Inc. thunderbolt_bus Gatekeeper: ℹ️ Mac App Store and identified developers Kernel Extensions: ℹ️ /System/Library/Extensions [not loaded] com.FTDI.driver.FTDIUSBSerialDriver (2.2.14) [Click for support] [not loaded] com.Logitech.Control Center.HID Driver (3.3.0) [Click for support] [not loaded] com.Logitech.Unifying.HID Driver (1.2.0) [Click for support] [loaded] com.digidesign.iokit.DigiDal (8.0.3d1) [Click for support] [loaded] com.digidesign.iokit.DigiIO (8.0.3d1) [Click for support] [not loaded] com.elgato.driver.DontMatchAfaTech (1.1) [Click for support] [not loaded] com.elgato.driver.DontMatchCinergy450 (1.1) [Click for support] [not loaded] com.elgato.driver.DontMatchCinergyXS (1.1) [Click for support] [not loaded] com.elgato.driver.DontMatchEmpia (1.1) [Click for support] [not loaded] com.elgato.driver.DontMatchVoyager (1.1) [Click for support] [not loaded] com.elgato.eyetv.ClassicNotSeizeDriver (1.1.2) [Click for support] [not loaded] com.maudio.usb.fasttrack.driver (1.8.2) [Click for support] [not loaded] com.paceap.kext.pacesupport.master (5.7.2) [Click for support] [not loaded] com.tascam.usb2audio.driver (2.0.4) [Click for support] /System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns [not loaded] com.paceap.kext.pacesupport.leopard (5.7.2) [Click for support] [not loaded] com.paceap.kext.pacesupport.panther (5.7.2) [Click for support] [loaded] com.paceap.kext.pacesupport.snowleopard (5.7.2) [Click for support] [not loaded] com.paceap.kext.pacesupport.tiger (5.7.2) [Click for support] /System/Library/Extensions/TASCAM_US1xx.kext/Contents/PlugIns [not loaded] com.tascam.usb2audio.driver_TIGER (2.0.4) [Click for support] Startup Items: ℹ️ HWNetMgr: Path: /Library/StartupItems/HWNetMgr HWPortDetect: Path: /Library/StartupItems/HWPortDetect Startup items are obsolete in OS X Yosemite Launch Agents: ℹ️ [running] com.brother.LOGINserver.plist [Click for support] [loaded] com.google.keystone.agent.plist [Click for support] Launch Daemons: ℹ️ [loaded] com.adobe.fpsaud.plist [Click for support] [loaded] com.google.keystone.daemon.plist [Click for support] [loaded] com.malwarebytes.MBAMHelperTool.plist [Click for support] [loaded] PACESupport.plist [Click for support] User Launch Agents: ℹ️ [running] com.google.Chrome.framework.plist [Click for support] [running] com.spotify.webhelper.plist [Click for support] User Login Items: ℹ️ Dropbox Programm Hidden (/Applications/Dropbox.app) Internet Plug-ins: ℹ️ Flip4Mac WMV Plugin: Version: 3.2.0.16 - SDK 10.8 [Click for support] FlashPlayer-10.6: Version: 21.0.0.182 - SDK 10.6 [Click for support] QuickTime Plugin: Version: 7.7.3 Flash Player: Version: 21.0.0.182 - SDK 10.6 [Click for support] Default Browser: Version: 600 - SDK 10.10 JavaAppletPlugin: Version: 15.0.0 - SDK 10.10 Check version OfficeLiveBrowserPlugin: Version: 12.3.6 [Click for support] Google Earth Web Plug-in: Version: 7.1 [Click for support] iPhotoPhotocast: Version: 7.0 - SDK 10.7 User internet Plug-ins: ℹ️ RealPlayer Plugin: Version: Unknown Audio Plug-ins: ℹ️ TASCAM_US1xx: Version: Unknown [Click for support] 3rd Party Preference Panes: ℹ️ Flash Player [Click for support] Flip4Mac WMV [Click for support] Growl [Click for support] Time Machine: ℹ️ Skip System Files: NO Mobile backups: OFF Auto backup: NO - Auto backup turned off Volumes being backed up: Macintosh SSD: Disk size: 118.82 GB Disk used: 82.61 GB Destinations: 1 TB RAID [Local] Total size: 1.00 TB Total number of backups: 99 Oldest backup: 2011-08-25 13:19:32 +0000 Last backup: 2014-08-25 10:44:46 +0000 Size of backup disk: Excellent Backup size 1.00 TB &gt; (Disk size 118.82 GB X 3) Top Processes by CPU: ℹ️ 10% mdworker(8) 2% WindowServer 2% fontd 0% taskgated 0% Dropbox Top Processes by Memory: ℹ️ 1.28 GB Google Chrome Helper(10) 653 MB kernel_task 311 MB com.apple.WebKit.WebContent(2) 254 MB mdworker(8) 254 MB Mail Virtual Memory Information: ℹ️ 145 MB Free RAM 7.86 GB Used RAM 0 B Swap Used Diagnostics Information: ℹ️ Mar 21, 2016, 09:27:19 AM Self test - passed</code></pre> </div> </div></div>

 

[HenryO]

<div class="bbWrapper">Hmm - das Logfile kommt nicht so rüber, wie in der Anleitung beschrieben...</div>