Finestra "inconsueta" all' avvio dell' OS

[gotto]

Buongiorno a tutti,

 

da qualche giorno, quando mi capita di riaccendere il computer, dopo il log-in mi compare questa finestra di cui allego foto. L' unico modo per farla scomparire e cliccare su apri...

Sapreste dirmi di che si tratta e soprattutto come fare per eliminarla?

 

Grazie in anticipo.

gotto

[Rangam]

15 minuti fa, gotto dice:

Buongiorno a tutti,

 

da qualche giorno, quando mi capita di riaccendere il computer, dopo il log-in mi compare questa finestra di cui allego foto. L' unico modo per farla scomparire e cliccare su apri...

Sapreste dirmi di che si tratta e soprattutto come fare per eliminarla?

 

Grazie in anticipo.

gotto

 

 

Fai un giro con questo e vedi se ti trova qualcosa da cancellare: https://it.malwarebytes.com

 

Poi usa questo: https://etrecheck.com e posta qui il report

[gotto]

Ciao Rangam, preferisco non scaricare sw da internet. Se esistesse un' altra strada preferirei. Grazie comunque 👋

[Rangam]

Sono software certificati che servono per risolvere il problema, ma poi che vuol

dire? Quindi non installi nulla sul

mac? Dai su

 

https://www.aranzulla.it/anti-malware-gratis-64058.html

 

così magari ti tranquillizzi

 

e Etrecheck lo trovi anche sull’app store

[gotto]

Grazie Rangam domani provo, anche se non sono molto pratico. Ti faccio sapere. Ciao

P.S. Scusa ma è a pagamento?

[Glacy]

Va bene anche la versione di prova, ma anche se fosse vale ogni cent. speso.

 

 

.

[gotto]

Grazie Glacy, domani vi aggiorno 👋

[gotto]

Penso (spero) di aver fatto tutto bene....questo mi pare sia il report (copiato da una email in quanto non mi permetteva il melacmelav :

 

EtreCheckPro version: 6.2.5 (6C016)

Report generated: 2020-05-03 14:05:13

Download EtreCheckPro from https://etrecheck.com

Runtime: 2:37

Performance: Excellent

 

Problem: No problem - just checking

 

Major Issues:

  Anything that appears on this list needs immediate attention. 

  No Time Machine backup - Time Machine backup not found.

  Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

  Gatekeeper disabled - Gatekeeper security protection is disabled. This computer is at risk of malware infection.

  Stuck iCloud - This machine has a large number of pending iCloud transfers.

  Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection.

 

Minor Issues:

  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 

  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

  Clean up - There are orphan files that could be removed.

  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.

  32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 "Catalina".

  Limited drive access - More information may be available with Full Drive Access.

  Kernel extensions present - This machine has kernel extensions that may not work in the future.

 

Hardware Information:

  MacBook Pro (13-inch, 2017, Two Thunderbolt 3 ports)

  MacBook Pro Model: MacBookPro14,1

  2,3 GHz Dual-Core Intel Core i5 (i5-7360U) CPU: 2-core

  8 RAM - Not upgradeable

    BANK 0/DIMM0 - 4 GB LPDDR3 2133  

    BANK 1/DIMM0 - 4 GB LPDDR3 2133  

  Battery: Health = Normal - Cycle count = 454

 

Video Information:

  Intel Iris Plus Graphics 640 - VRAM: 1536 MB

    Color LCD (built-in) 2880 x 1800

 

Drives:

  disk0 - APPLE SSD AP0256J 251.00 GB (Solid State - TRIM: Yes) 

  Internal PCI-Express 8.0 GT/s x4 NVM Express

    disk0s1 - EFI [EFI] 315 MB

    disk0s2 [APFS Container] 250.69 GB

      disk1 [APFS Virtual drive] 250.69 GB (Shared by 5 volumes)

        disk1s1 - H*******i (APFS) [APFS Virtual drive] (Shared - 189.50 GB used)

        disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 82 MB used)

        disk1s3 - Recovery (APFS) [Recovery] (Shared - 528 MB used)

        disk1s4 - VM (APFS) [APFS VM] (Shared - 1.07 GB used)

        disk1s5 - HD (APFS) (Shared - 10.96 GB used)

 

Mounted Volumes:

  disk1s1 - H*******i [APFS Virtual drive]

    250.69 GB (Shared - 189.50 GB used, 50.12 GB available, 48.41 GB free)

    APFS

    Mount point: /System/Volumes/Data

 

  disk1s4 - VM [APFS VM]

    250.69 GB (Shared - 1.07 GB used, 48.41 GB free)

    APFS

    Mount point: /private/var/vm

 

  disk1s5 - HD

    250.69 GB (Shared - 10.96 GB used, 50.12 GB available, 48.41 GB free)

    APFS

    Mount point: /

    Read-only: Yes

 

Network:

  Interface en4: USB 10/100/1000 LAN

  Interface en0: Wi-Fi

    802.11 a/b/g/n/ac

  Interface en3: Bluetooth PAN

  Interface bridge0: Thunderbolt Bridge

  iCloud Quota: 0 B available

  iCloud Status: 3286 pending files

 

System Software:

  macOS Catalina 10.15.4 (19E287) 

  Time since boot: Less than an hour

 

Security:

  System Status

  Gatekeeper: Anywhere

  System Integrity Protection: Enabled

 

  Antivirus software: Malwarebytes

 

Unsigned Files:

  Launchd: /Library/LaunchAgents/com.rater-splinty.plist

    Executable: /Library/muckna_beprose/roVkenvP/DijLKztW/lqNxLLHR/GDTXxUoJ/rater-splinty

    Details: Domain name invalid - possibly adware

 

  Launchd: ~/Library/LaunchAgents/com.adobe.ARM.***.plist

    Executable: /Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

    Details: Close match found in the whitelist - probably OK

 

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist

    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

    Details: Exact match found in the whitelist - probably OK

 

  Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

    Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

    Details: Exact match found in the whitelist - probably OK

 

  Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

    Details: Exact match found in the whitelist - probably OK

 

  Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

    Details: Exact match found in the whitelist - probably OK

 

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist

    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

    Details: Exact match found in the whitelist - probably OK

 

  Plugin: /Library/Internet Plug-Ins/Unity Web Player.plugin

  Plugin: /Library/Internet Plug-Ins/RealPlayer Plugin.plugin

  Plugin: /Library/Internet Plug-Ins/Silverlight.plugin

  Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

  Plugin: /Library/Internet Plug-Ins/GarminGpsControl.plugin

  Plugin: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

 

  Preference Pane: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/deploy/JavaControlPanel.prefPane

 

  Apps: 9

 

32-bit Applications:

  19 32-bit apps

 

Kernel Extensions:

  /Applications/FlowSync.app

    [Not Loaded] HoRNDIS.kext (8 - SDK 10.6)

 

System Launch Agents:

  [Not Loaded]  16 Apple tasks

  [Loaded]  186 Apple tasks

  [Running]  111 Apple tasks

 

System Launch Daemons:

  [Not Loaded]  35 Apple tasks

  [Loaded]  186 Apple tasks

  [Running]  115 Apple tasks

  [Other]  One Apple task

 

Launch Agents:

  [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2020-02-10)

  [Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2020-04-21)

  [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2020-04-07)

  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2020-04-21)

  [Not Loaded] com.oracle.java.Java-Updater.plist (? 7eee7906  - installed 2020-03-12)

  [Loaded] com.rater-splinty.plist (? 510f06c7  - installed 2017-07-19)

 

Launch Daemons:

  [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2020-02-07)

  [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2020-02-07)

  [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2020-03-27)

  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2020-01-28)

  [Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2020-05-03)

  [Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2020-04-21)

  [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2020-04-07)

  [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2019-05-11)

  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-04-21)

  [Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e  - installed 2010-09-23)

  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-08-04)

  [Not Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2  - installed 2020-03-12)

 

User Launch Agents:

  [Other] com.adobe.ARM.***.plist (? 0  - installed 2012-03-09)

  [Loaded] com.facebook.videochat.***.plist (Apple - installed 2020-04-19)

  [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-03-12)

  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-03-12)

 

User Login Items:

  [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2020-04-07)

    Modern Login Item

    /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

 

  [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2020-04-07)

    Modern Login Item

    /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

 

  [Not Loaded] WhatsApp Login Helper (WhatsApp Inc. - installed 2020-04-29)

    Modern Login Item

    /Applications/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app

 

Internet Plug-ins:

  Unity Web Player: UnityPlayer version 5.0.3f2 (? - installed 2015-06-23)

  RealPlayer Plugin:  (?)

  AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-04-20)

  FlashPlayer-10.6: 32.0.0.363 (Adobe Systems, Inc. - installed 2020-04-21)

  ZoomUsPlugIn: 4.6.10 (20041.0408) (Zoom Video Communications, Inc. - installed 2020-04-08)

  Silverlight: 5.1.10411.0 (? - installed 2015-04-17)

  Flash Player: 32.0.0.363 (Adobe Systems, Inc. - installed 2020-04-21)

  iPhotoPhotocast: 7.0 (Apple - installed 2015-04-17)

  SharePointBrowserPlugin: 14.0.0 (? - installed 2010-09-23)

  AdobePDFViewer: 19.010.20099 (Adobe Systems, Inc. - installed 2019-04-20)

  GarminGpsControl: 3.0.1.0 Release (? - installed 2012-01-14)

  JavaAppletPlugin: Java 8 Update 251 build 08 (? - installed 2020-04-21)

 

3rd Party Preference Panes:

  Flash Player (Adobe Systems, Inc. - installed 2020-03-27)

  Java (? - installed 2020-04-21)

 

Time Machine:

  Time Machine Not Configured!

 

Performance:

  System Load: 1.61 (1 min ago) 2.85 (5 min ago) 1.75 (15 min ago)

  Nominal I/O speed: 7.32 MB/s

  File system: 28.49 seconds

  Write speed: 1239 MB/s

  Read speed: 2916 MB/s

 

CPU Usage Snapshot:

  Type Overall

  System: 2 %

  User: 4 %

  Idle: 94 %

 

Top Processes Snapshot by CPU:

  Process (count) CPU (Source - Location)

  EtreCheckPro 10.80 % (Etresoft, Inc.)

  WindowServer 9.58 % (Apple)

  kernel_task 2.82 % (Apple)

  mdworker_shared (17) 1.35 % (Apple)

  firefox 0.36 % (Mozilla Corporation)

 

Top Processes Snapshot by Memory:

  Process (count) RAM usage (Source - Location)

  EtreCheckPro 517 MB (Etresoft, Inc.)

  firefox 358 MB (Mozilla Corporation)

  mdworker_shared (17) 199 MB (Apple)

  plugin-container (2) 140 MB (Mozilla Corporation)

  mds_stores 117 MB (Apple)

 

Top Processes Snapshot by Network Use:

  Process (count) Input / Output (Source - Location)

  Mail 19 KB / 9 KB (Apple)

  mDNSResponder 14 KB / 10 KB (Apple)

  cloudd 12 KB / 5 KB (Apple)

  apsd 5 KB / 13 KB (Apple)

  firefox 12 KB / 4 KB (Mozilla Corporation)

 

Top Processes Snapshot by Energy Use:

  Process (count) Energy (0-100) (Source - Location)

  WindowServer 6 (Apple)

  AXVisualSupportAgent 0 (Apple)

  storagekitd 0 (Apple)

  nsurlsessiond (2) 0 (Apple)

  systemstats (2) 0 (Apple)

 

Virtual Memory Information:

  Physical RAM: 8 GB

 

  Free RAM: 2.19 GB

  Used RAM: 3.43 GB

  Cached files: 2.39 GB

 

  Available RAM: 4.57 GB

  Swap Used: 0 B

 

Software Installs (past 30 days):

  Install Date Name (Version)

  2020-04-08 Zoom (4.6.20041.0408)

  2020-04-09 macOS Catalina (10.15.4)

  2020-04-16 Aggiornamento di sicurezza 2020-002 (10.14.6)

  2020-04-19 Voice Update - Francesca (1.3.13)

  2020-04-21 Adobe Flash Player (32.0.0.363)

  2020-04-21 ZipCloud (3.0)

  2020-04-21 Microsoft Remote Desktop v10.3.8 (10.3.8)

  2020-04-21 Garmin MapInstall (4.2.0)

  2020-04-21 Java 8 Update 251 (1.1)

  2020-04-21 JDK 8 Update 251 (1.1)

  2020-04-21 Numbers (10.0)

  2020-04-21 Pages (10.0)

  2020-04-21 Keynote (10.0)

  2020-04-21 GarageBand (10.3.2)

  2020-04-25 Friendly Streaming (4.5.1)

  2020-05-02 XProtectPlistConfigData (2120)

  2020-05-02 MRTConfigData (1.59)

  2020-05-03 Malwarebytes for Mac (1.0)

 

Clean up:

  ~/Library/LaunchAgents/com.adobe.ARM.***.plist

    /Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

    Executable not found

 

Diagnostics Information (past 7-30 days):

  2020-05-03 13:35:39 SubmitDiagInfo High CPU Use

    Executable: /System/Library/CoreServices/SubmitDiagInfo

 

  2020-05-03 10:22:41 SystemExtr.app High CPU Use

    Executable: /Users/***/SystemExtr/SystemExtr.app

 

  2020-04-28 13:50:55 ctapp.app Crash

    Executable: /private/var/tmp/ctapp.app

 

  2020-04-28 11:22:42 UtilityParze Crash

    Executable: /Users/***/Library/UpdatesMac/*/UtilityParze

 

 

End of report

 

Aggiungo anche degli screen...

 

Che ne pensate?...e comunque grazie per gli aiuti. gotto

 

 

[Rangam]

1 ora fa, gotto dice:

 

 

  Plugin: /Library/Internet Plug-Ins/Unity Web Player.plugin

  Plugin: /Library/Internet Plug-Ins/RealPlayer Plugin.plugin

  Plugin: /Library/Internet Plug-Ins/Silverlight.plugin

  Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

  Plugin: /Library/Internet Plug-Ins/GarminGpsControl.plugin

  Plugin: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

 

Internet Plug-ins:

  Unity Web Player: UnityPlayer version 5.0.3f2 (? - installed 2015-06-23)

  RealPlayer Plugin:  (?)

  AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2019-04-20)

  FlashPlayer-10.6: 32.0.0.363 (Adobe Systems, Inc. - installed 2020-04-21)

  ZoomUsPlugIn: 4.6.10 (20041.0408) (Zoom Video Communications, Inc. - installed 2020-04-08)

  Silverlight: 5.1.10411.0 (? - installed 2015-04-17)

  Flash Player: 32.0.0.363 (Adobe Systems, Inc. - installed 2020-04-21)

  iPhotoPhotocast: 7.0 (Apple - installed 2015-04-17)

  SharePointBrowserPlugin: 14.0.0 (? - installed 2010-09-23)

  AdobePDFViewer: 19.010.20099 (Adobe Systems, Inc. - installed 2019-04-20)

  GarminGpsControl: 3.0.1.0 Release (? - installed 2012-01-14)

  JavaAppletPlugin: Java 8 Update 251 build 08 (? - installed 2020-04-21)

 

3rd Party Preference Panes:

  Flash Player (Adobe Systems, Inc. - installed 2020-03-27)

  Java (? - installed 2020-04-21)

 

 

 

Hai un sacco di porcate nel Mac, alla faccio del non scarico file da internet...

 

Cancella tutto quello che ti trova malwarebytes e pulisci tutti i plugin dell'elocon qui sopra, decidi quali usare e quali conosci e cancella il resto

[gotto]

Intanto ho cancellato tutti i files che malwarebytes aveva messo in quarantena, per il passo successivo come devo procedere?...scusa l' ignoranza in materia..e comunque grazie per l' aiuto

[gotto]

Ok. forse ci sono..intanto devo andare in questa cartella:

 

 

e cestinare tutto il contenuto?..

 

Mantenendo la cartella al suo posto (vuota?).

[gotto]

Salve, sapreste dirmi se procedendo come detto sopra, vado bene? Grazie

[Rangam]

No, non devi cancellare tutto ma solo quello che non riconosci / non risulta associato a qualche programma che tu hai installato

[gotto]

Perfetto, grazie. Saluti👋