Pagina scansione antivirus su safari

[oscar62]

Buongiorno e buona domenica a tutti voi, vorrei esporre un problema che mi infastidisce da qualche tempo.

Sul mio MB Pro 15 con El Capitan da qualche tempo Safari (11.0.2) fa i capricci, nel senso che ogni tanto/spesso, all'apertura di nuove schede, si apre una scheda che avvisa della presenza di virus e chiede la scansione!! Ho cercato di eliminare tutti i possibili file, ove presenti, tipo il famoso mackeeper, ma nulla. continua imperterrito ad aprirmi queste schede indesiderate.

Grazie della vostra attenzione 

 

[167-761]

molto probabilmente hai del malware, file malevoli che prendono il comando di Safari quando vogliono.

 

Ce ne sono di diversi tipi. Più o meno facili da individuare ed eventualmente rimuovere.

 

Per un primo esame, bisognerebbe esaminare alcune cartelle specifiche (es.: ~/Library/  ~/Library/LaunchDaemons/ ) e notare se c'è qualcosa di anomalo. Per intervenire a distanza sul tuo caso, la soluzione più efficace è che tu scarichi e lanci Etrecheck, ottenendo un report di quel che c'è nelle cartelle specifiche. Scorri il report, e se vedi scritte [Remove/Report] cliccaci sopra. Cliccando su "condividi" copi quel report e lo incolli qui nel forum che ci diamo un'occhiata. Così da imparare qual è il problema, anche per il futuro, e risolvere. Serve a tutti.

 

Come intervento immediato, hai naturalmente cancellato la cronologia di Safari? Vuotato la cache? Preferenze>Privacy>Gestisci dati siti web...>rimuovi tutto?

Hai rimosso qualsiasi "antivirus" e "ottimizzatore"?

[oscar62]

Grazie 167-761. si ho fatto tutto. Ora scarico Etrecheck e riporto il report (scusate il gioco di parole...)

[oscar62]

EtreCheck version: 3.4.6 (460) Report generated 2017-12-17 10:45:08 Download EtreCheck from https://etrecheck.com Runtime: 4:02 Performance: Good Click the [Lookup] links for more information from Apple Support Communities. Click the [Details] links for more information about that line. Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software. Click the [Clean up] link to delete unused files. Problem: Other problem Description: Probable malware on Safari Hardware Information: ?     MacBook Pro (15-inch, Late 2008)     [Technical Specifications] - [User Guide] - [Warranty & Service]     MacBook Pro - model: MacBookPro5,1     1 2,4 GHz Intel Core 2 Duo (Duo) CPU: 2-core     6 GB RAM Upgradeable - [Instructions]         BANK 0/DIMM0             4 GB DDR3 1067 MHz ok         BANK 0/DIMM1             2 GB DDR3 1067 MHz ok     Handoff/Airdrop2: not supported     Wireless:  en1: 802.11 a/b/g/n     Battery: Health = Replace Soon - Cycle count = 925 Video Information: ?     NVIDIA GeForce 9400M - VRAM: 256 MB         Color LCD 1440 x 900     NVIDIA GeForce 9600M GT - VRAM: 256 MB Disk Information: ?     Crucial_CT525MX300SSD1 disk0: (525,11 GB) (Solid State - TRIM: Yes)     [Show SMART report]         (disk0s1) <not mounted>  [EFI]: 210 MB         Macintosh HDD (disk0s2 - Journaled HFS+) /  [Startup]: 524.25 GB (478.12 GB free)         (disk0s3) <not mounted>  [Recovery]: 650 MB     MATSHITADVD-R   UJ-868  () USB Information: ?      USBBus         Apple, Inc. Apple Internal Keyboard / Trackpad         Apple Computer, Inc. IR Receiver      USBBus         Apple Inc. BRCM2046 Hub             Apple Inc. Bluetooth USB Host Controller      USB20Bus      USB20Bus         Apple Inc. Built-in iSight System Software: ?     OS X El Capitan 10.11.6 (15G18013) - Time since boot: about one hour Configuration files: ?     System Integrity Protection status: disabled Gatekeeper: ?     Mac App Store and identified developers Possible adware: ?     Unknown file: /Library/LaunchAgents/com.aisleless.plist     Unknown file: /Library/LaunchAgents/com.undon.ms.plist         /Library/undon.ms/undon.ms.app/Contents/MacOS/undon.ms     Unknown file: /Library/LaunchDaemons/com.XHykLmvh.plist     Adware: /Library/LaunchDaemons/com.apple.milobe.plist     Adware: /Library/LaunchDaemons/com.apple.panur.plist     Adware: /Library/LaunchDaemons/com.apple.yerrack.plist     Unknown file: /Library/LaunchDaemons/com.eudbjxhqefxc.plist     Unknown file: /Library/LaunchDaemons/com.qavhncvyqcmd.plist     Unknown file: /Library/LaunchDaemons/com.xozazbwqzwou.plist     Adware: ~/Library/LaunchAgents/com.acceptedly.plist     10 possible adware files found. [Remove/Report] Clean up: ?     /Library/LaunchAgents/com.paragon-software.NTFS.fsnotify.agent.plist         /Library/PreferencePanes/ParagonNTFS.prefPane/Contents/Resources/com.paragon-software.NTFS.fsnotify.agent.app/Contents/MacOS/com.paragon-software.NTFS.fsnotify.agent         Executable not found!     /Library/LaunchAgents/com.paragon-software.ntfs.automount.plist         /Library/PreferencePanes/ParagonNTFS.prefPane/Contents/Resources/NTFSAutomountAgent         Executable not found!     /Library/LaunchDaemons/com.paragon-software.NTFS.fsnotify.daemon.plist         /Library/PreferencePanes/ParagonNTFS.prefPane/Contents/Resources/com.paragon-software.NTFS.fsnotify.daemon         Executable not found!     com.adobe.ARM.[...].plist         /Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper semi-auto         Executable not found!     com.apple.CSConfigDotMacCert-@me.com-SharedServices.Agent.plist         /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framework/Versions/A/Support/CSConfigDotMacCert -l ~/Library/Logs/CSConfigDotMacCert-@me.com-SharedServices.log -u [redacted]@me.com -t SharedServices -s         Executable not found!     ~/Library/LaunchAgents/com.bittorrent.uTorrent.plist         /usr/bin/open -n /Applications/uTorrent.app         Executable not found!     ~/Library/LaunchAgents/com.nero.HSMMonitor.plist         /Applications/HTC Sync Manager.app/Contents/Resources/HSMMonitor.app/Contents/MacOS/HSMMonitor -runMode autoLaunched         Executable not found!     7 orphan files found. [Clean up] Kernel Extensions: ?         /Library/Extensions     [loaded]    com.paragon-software.filesystems.ntfs (14.1.83 - SDK 10.5) [Lookup]         /System/Library/Extensions     [not loaded]    com.devguru.driver.SamsungComposite (1.4.31 - SDK 10.6) [Lookup]         /System/Library/Extensions/ssuddrv.kext/Contents/PlugIns     [not loaded]    com.devguru.driver.SamsungACMControl (1.4.31 - SDK 10.6) [Lookup]     [not loaded]    com.devguru.driver.SamsungACMData (1.4.31 - SDK 10.6) [Lookup]     [not loaded]    com.devguru.driver.SamsungMTP (1.4.31 - SDK 10.5) [Lookup]     [not loaded]    com.devguru.driver.SamsungSerial (1.4.31 - SDK 10.6) [Lookup] System Launch Agents: ?     [not loaded]    8 Apple tasks     [loaded]    162 Apple tasks     [running]    70 Apple tasks System Launch Daemons: ?     [failed]    org.postfix.master.plist (Apple, Inc. - installed 2017-11-15)     [not loaded]    45 Apple tasks     [loaded]    160 Apple tasks     [running]    85 Apple tasks Launch Agents: ?     [not loaded]    com.aisleless.plist (? 0 ? - installed 2017-04-27) [Lookup]     [loaded]    com.oracle.java.Java-Updater.plist (? 5a7c35ee be93c7fb - installed 2017-04-29) [Lookup]     [failed]    com.paragon-software.NTFS.fsnotify.agent.plist (? dcda45f4 0 - installed 2016-11-29) [Lookup] - /Library/PreferencePanes/ParagonNTFS.prefPane/Contents/Resources/com.paragon-software.NTFS.fsnotify.agent.app/Contents/MacOS/com.paragon-software.NTFS.fsnotify.agent: Executable not found!     [running]    com.paragon-software.NTFS.fsnotifyagent.plist (? 9bb873bc c5be221f - installed 2016-12-04) [Lookup]     [loaded]    com.paragon-software.facebook.agent.plist (? 95fb0bd4 e9648c48 - installed 2016-11-30) [Lookup]     [failed]    com.paragon-software.ntfs.automount.plist (? 23af1e7e 0 - installed 2016-11-29) [Lookup] - /Library/PreferencePanes/ParagonNTFS.prefPane/Contents/Resources/NTFSAutomountAgent: Executable not found!     [loaded]    com.paragon.updater.plist (Paragon Software GmbH - installed 2016-11-30) [Lookup]     [loaded]    com.undon.ms.plist (? 251a8be0 41109ad0 - installed 2017-10-24) [Lookup]     [running]    net.culater.SIMBL.Agent.plist (? 4a576751 1fea012b - installed 2016-11-24) [Lookup] Launch Daemons: ?     [not loaded]    com.XHykLmvh.plist (? 0 ? - installed 2017-04-23) [Lookup]     [loaded]    com.adobe.fpsaud.plist (? 2afb3af7 defea098 - installed 2017-10-26) [Lookup]     [running]    com.apple.milobe.plist (? c79e076a 38879ecb - installed 2017-04-23) Adware!  [Remove/Report]         /Library/milobe     [running]    com.apple.panur.plist (? 1b2da7c4 38879ecb - installed 2017-04-29) Adware!  [Remove/Report]         /Library/panur     [running]    com.apple.yerrack.plist (? 67718351 4020a718 - installed 2017-04-25) Adware!  [Remove/Report]         /Library/yerrack     [not loaded]    com.eudbjxhqefxc.plist (? 0 ? - installed 2017-04-29) [Lookup]     [loaded]    com.microsoft.office.licensingV2.helper.plist (? 689758eb 56e8a673 - installed 2015-07-01) [Lookup]     [loaded]    com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-03-15) [Lookup]     [failed]    com.paragon-software.NTFS.fsnotify.daemon.plist (? 66744841 0 - installed 2016-11-29) [Lookup] - /Library/PreferencePanes/ParagonNTFS.prefPane/Contents/Resources/com.paragon-software.NTFS.fsnotify.daemon: Executable not found!     [loaded]    com.paragon-software.installer.plist (Paragon Software GmbH - installed 2016-11-30) [Lookup]     [loaded]    com.paragon.NTFS.launch.plist (Apple, Inc. - installed 2017-11-15)     [not loaded]    com.qavhncvyqcmd.plist (? 0 ? - installed 2017-04-23) [Lookup]     [not loaded]    com.xozazbwqzwou.plist (? 0 ? - installed 2017-04-25) [Lookup]     [loaded]    net.freemacsoft.LiteIcon.LIHelperTool.plist (Julien Ramseier - installed 2016-11-24) [Lookup] User Launch Agents: ?     [running]    com.acceptedly.plist (? 69c3e0f4 b342a111 - installed 2017-09-24) Adware!  [Remove/Report]         /Library/acceptedly/acceptedly     [failed]    com.adobe.ARM.[...].plist (? 881a4a1c 0 - installed 2016-11-24) [Lookup] - /Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro.app/Contents/MacOS/Updater/Adobe Acrobat Updater Helper.app/Contents/MacOS/Adobe Acrobat Updater Helper: Executable not found!     [failed]    com.apple.CSConfigDotMacCert-@me.com-SharedServices.Agent.plist (? ? ? - installed 2010-09-11) - /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framework/Versions/A/Support/CSConfigDotMacCert: Executable not found!     [loaded]    com.bittorrent.uTorrent.plist (? b8be3d86 0 - installed 2016-11-24) [Lookup] - /Applications/uTorrent.app: Executable not found!     [failed]    com.facebook.videochat.[redacted].plist (Apple, Inc. - installed 2016-02-01)     [running]    com.nds.pcshow.plist (Shell Script 48e39481 - installed 2016-07-09)     [loaded]    com.nds.pcshow.uninstall.plist (Shell Script f46ae283 - installed 2016-07-09)     [failed]    com.nero.HSMMonitor.plist (? 625a221d 0 - installed 2014-03-22) [Lookup] - /Applications/HTC Sync Manager.app/Contents/Resources/HSMMonitor.app/Contents/MacOS/HSMMonitor: Executable not found! User Login Items: ?     AppTrap    Applicazione         (~/Library/PreferencePanes/AppTrap.prefPane/Contents/Resources/AppTrap.app)     iTunesHelper    Applicazione (Apple, Inc. - installed 2017-12-08)         (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)     cDockHelper    Applicazione         (/Applications/cDock.app/Contents/Resources/cDockHelper.app)     fuspredownloader    Applicazione - Hidden         (~/Library/Application Support/.FUS/fuspredownloader.app) Internet Plug-ins: ?     Default Browser: 601 (installed 2016-07-09)     Flip4Mac WMV Plugin: 2.3.8.1 (installed 2011-01-14) [Lookup]     AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (installed 2016-11-24) [Lookup]     FlashPlayer-10.6: 27.0.0.187 (installed 2017-12-09) [Lookup]     AdobePDFViewerNPAPI: 11.0.0 (installed 2012-09-24) [Lookup]     Silverlight: 5.1.50901.0 (installed 2017-10-13) [Lookup]     QuickTime Plugin: 7.7.3 (installed 2017-12-08)     Flash Player: 27.0.0.187 (installed 2017-12-09) Outdated! Update     PDF Browser Plugin: 2.4.4 (installed 2012-03-18) [Lookup]     iPhotoPhotocast: 7.0 (installed 2010-09-11)     AdobePDFViewer: 11.0.0 (installed 2012-09-24) [Lookup]     JavaAppletPlugin: Java 8 Update 131 build 11 (installed 2017-04-29) Check version User internet Plug-ins: ?     BlueStacks Install Detector: Unknown     PSPlugin: Unknown (installed 2013-07-31) [Lookup] Safari Extensions: ?     [enabled]    convert2mp3.net Online Video Converter - convert2mp3.net - http://convert2mp3.net/ (installed 2017-01-08)     [not loaded]    FastestTube - Kwizzu - http://fastesttube.kwizzu.com/ (installed 2016-04-10)     [not loaded]    GoPhoto.it V9.0 - installdaddy (installed 2014-04-20)     [not loaded]    Stop/Reload Button - Marc Hoyois - http://hoyois.github.com/safariextensions/stopreloadbutton/ (installed 2012-08-27)     [not loaded]    HoverSee - SideTree.com - Apps for Mac - http://SideTree.com/extensions.html#HoverSee (installed 2016-02-28)     [not loaded]    Print Plus - slicefactory (installed 2012-06-16)     [not loaded]    AutoPagerize - swdyh - http://autopagerize.net/ (installed 2013-08-21) 3rd Party Preference Panes: ?     AppTrap (installed 2016-12-30) [Lookup]     Flash Player (installed 2017-10-26) [Lookup]     Flip4Mac WMV (installed 2011-01-13) [Lookup]     Java (installed 2017-04-29) [Lookup]     MacFUSE (installed 2011-01-29) [Lookup]     Paragon NTFS for Mac ® OS X (installed 2016-12-04) [Lookup]     Perian (installed 2011-08-23) [Lookup] Time Machine: ?     Skip System Files: NO     Auto backup: YES     Volumes being backed up:         Macintosh HDD: Disk size: 524.25 GB Disk used: 46.13 GB     Destinations:         Time [Local]         Total size: 79.68 GB         Total number of backups: 6         Oldest backup: 18/06/16, 14:43         Last backup: 23/07/17, 10:25         Size of backup disk: Too small             Backup size 79.68 GB < (Disk used 46.13 GB X 3) Top Processes by CPU: ?         19%       launchservicesd         19%       osascript         17%       osascript         17%       (osascript)         14%       loginwindow Top Processes by Memory: ?     641 MB        kernel_task     480 MB        com.apple.WebKit.WebContent     355 MB        com.apple.WebKit.WebContent     198 MB        com.apple.WebKit.WebContent     140 MB        Safari Top Processes by Energy Use: ?      18.30    launchservicesd      13.14    loginwindow       7.58    WindowServer       4.46    launchd Virtual Memory Information: ?     2.55 GB       Available RAM     1.21 GB       Free RAM     3.45 GB       Used RAM     1.34 GB       Cached files     0 B           Swap Used Software installs (last 30 days): ?     Dr. Cleaner: 3.3.2 (installed 2017-12-02)     Adobe Flash Player:  (installed 2017-12-09)     Install information may not be complete.

[oscar62]

Posto anche il report in formato PDF in modo che sia più leggibile...

Ops i file pdf non sono postabili

 

[oscar62]

Possible adware: ⓘ
    Unknown file: /Library/LaunchAgents/com.aisleless.plist
    Unknown file: /Library/LaunchAgents/com.undon.ms.plist
        /Library/undon.ms/undon.ms.app/Contents/MacOS/undon.ms
    Unknown file: /Library/LaunchDaemons/com.XHykLmvh.plist
    Adware: /Library/LaunchDaemons/com.apple.milobe.plist
    Adware: /Library/LaunchDaemons/com.apple.panur.plist
    Adware: /Library/LaunchDaemons/com.apple.yerrack.plist
    Unknown file: /Library/LaunchDaemons/com.eudbjxhqefxc.plist
    Unknown file: /Library/LaunchDaemons/com.qavhncvyqcmd.plist
    Unknown file: /Library/LaunchDaemons/com.xozazbwqzwou.plist
    Adware: ~/Library/LaunchAgents/com.acceptedly.plist
    10 possible adware files found. [Remove/Report]
Potrebbero essere questi la causa?

 

[167-761]

Hai il Mac mooolto infettato. C'è da lavorarci su. Di sicuro, servirebbe un report, in formato testo, ma più leggibile. NON UN PDF.

 

Poi, io sto uscendo e lascio la palla a qualcun altro. Se non hai fretta ci leggiamo stasera.

 

[167-761]

Adesso, oscar62 dice:

Potrebbero essere questi la causa?

Certamente.

 

All'ignorante, tu clicca su [Remove/Report] e vedrai che va a posto. Pero' mi sarebbe piaciuto approfondire, come ti scrissi stanno girando nuovi malware che vorrei studiarmi.

 

Comunque sono schifezze che ci si prende -sempre- alla stessa maniera: un programma gratis, un sito poco serio, un'autorizzazione di esecuzione concessa.

 

Ciao!

[167-761]

Rimuovi accuratamente Dr. Cleaner

[oscar62]

Grazie. Buona giornata