Avanti, senza vergogna, con DetectX/Profile

[faxus]

https://d.pr/f/dBxEBL

Sembra tutto a posto.

Cancella quella schifezza di Malwarebytes.
E EtrecheckPro, che non è una schifezza ma non serve a granché

[PeT]

Si, grazie faxus. Malwarebytes l'ho già disinstallato. probabilmente sono file orfani da eliminare e provvedo.
Nemmeno Etrecheck ce l'ho più installato.. quindi idem.
Saluti.

[esco]

Brutte notizie per te, Esco... Si chiama Slayer
viewtopic.php?f=9&t=45219

...Per cui non mi resta che consigliare una reinstallazione da zero del sistema E poi la sola importazione dei puri dati utente senza null'altro.

Dopo l'inizializzazione dell'HD e la re-installazione del sistema operativo, l'importazione dei "puri dati utente" senza importare file indesiderati, devo prepararla in qualche modo oppure posso importare l'utente via TimeMachine? Grazie per il supporto.

[faxus]

... Dopo l'inizializzazione dell'HD e la re-installazione del sistema operativo, l'importazione dei "puri dati utente" senza importare file indesiderati, devo prepararla in qualche modo oppure posso importare l'utente via TimeMachine? Grazie per il supporto.

Assolutamente a mano.

Per puri dati utente si intendono i soli file dati.
Nessuna libreria nessun file invisibile

[esco]

Assolutamente a mano. Per puri dati utente si intendono i soli file dati. Nessuna libreria nessun file invisibile

Dalla Libreria prenderei solo due cartelle: "Mail" e "Mail Download"... o no?

[Zacksit]

È la prima vola che uso DetectX. Ho usato la versione MacOS 10.7 e più. Si tratta del vecchio (inizio 2008) macbook pro di mio nipote che ormai usa raramente solo come muletto e che io uso per lavoro quando vengo da queste parti. L'ha usato come dj e bistrattato abbastanza scaricando in modo incosciente tanta roba da Internet, vedo traccia di Cleanmymac. Andrebbe inizializzato e risistemato, ma per il momento non mi pare interessato. Nel frattempo mi servirebbe qualche dritta per sistemarlo alla meglio se possibile. Non so se è lento perché ha solo 4 GB ram oppure per via di tutte le schifezza che avrà accumulato nel tempo.

Grazie!

Codice: Seleziona tutto

DetectX Inspector:

Timestamp (6):

28 giu, 2019  4:34:35 PM
Ora legale dell'Europa centrale


MODEL:		MacBookPro4,1
RAM:		4.096  GB
DISK SPACE:	40.32%

OS X:		10.10.5
BUILD:		14F2511


Login Items:

"WDSmartWareStatusMenu"
 

Home folder: hidden & invisibles
(path: ~/)

.bash_history
.Bome
.CFUserTextEncoding
.cups
.DS_Store
.Trash
Library


User Library:
(path: ~/Library/)

.DS_Store
.localized
Accounts
Address Book Plug-Ins
Application Scripts
Application Support
Assistants
Audio
Autosave Information
Caches
Calendars
ColorPickers
Colors
ColorSync
com.apple.nsurlsessiond
Compositions
Containers
Contextual Menu Items
Cookies
Dictionaries
Documentation
Favorites
FontCollections
Fonts
GameKit
Google
Group Containers
IdentityServices
Images
iMovie
Input Methods
Internet Plug-Ins
iTunes
Keyboard Layouts
Keychains
LanguageModeling
LaunchAgents
Logs
Mail
Mail Downloads
Messages
Metadata
Mobile Documents
PreferencePanes
Preferences
Printers
PubSub
Safari
Saved Application State
Screen Savers
Services
Sounds
Spelling
StickiesDatabase
SyncedPreferences
Voices
WebKit


User Launch Agents:
(path: ~/Library/LaunchAgents/)

.DS_Store
com.apple.FolderActions.enabled.plist
com.apple.FolderActions.folders.plist
com.google.keystone.agent.plist
com.google.keystone.xpcservice.plist
com.macpaw.CleanMyMac.helperTool.plist
com.skype.skype.shareagent.plist
com.spotify.webhelper.plist



User Internet Plug-Ins:
(path: ~/Library/Internet Plug-Ins/)

Google Earth Web Plug-in.plugin



User Application Support:
(path: ~/Library/Application Support/)

.607BCD1351590E5D
.DS_Store
.localized
Ableton
Ableton Live Engine
AddressBook
App Store
Audio Damage
BigTick
CallHistoryDB
CallHistoryTransactions
CEF
CleanMyMac
CloudDocs
com.apple.QuickLook
com.apple.spotlight
com.apple.spotlight.Shortcuts
com.apple.TCC
com.sqwarq.DetectX
Console
CrashReporter
Dashcode
Dock
DVD Player
eSellerate
EtreCheck
Firefox
Focusrite
Google
HP
iCloud
iLifeMediaBrowser
iZotope
Librarian
Logic
Loomer
Mail
Malwarebytes
Microsoft
MobileSync
Native Instruments
NotificationCenter
Preview
Propellerhead Software
Quick Look
Roxio
Skype
Sonalksis
Spotify
Synapse Audio
SyncServices
T
TeamViewer
u-he
uTorrent
Vodafone Mobile Broadband
µTorrent



Safari Extensions:
(path: ~/Library/Safari/Extensions/)

 



Applications folder:

.DS_Store
.localized
Alfred.app
Apogee Maestro 2.app
App Store.app
Apple Qadministrator.app
Apple Qmaster.app
Arturia ARP2600 V
Arturia CS-80V
Arturia minimoog V
Arturia Moog Modular V 2
Audio 2 DJ Driver
Audio 4 DJ Driver
Audio 8 DJ Driver
Automator.app
Battery 3
Bose SoundLink Air Wi-Fi SetUp Application.app
cacaoweb.app
Cadence BPM Tapper.app
Calculator.app
Calendar.app
Chess.app
Compressor.app
Contacts.app
Dashboard.app
Dictionary.app
DVD Player.app
FaceTime.app
ffmpegX.app
Firefox.app
Font Book.app
Game Center.app
Google Chrome.app
Graphics Tools
iBooks.app
Image Capture.app
impOSCar.app
iTunes.app
KResearch
Launchpad.app
Live 8.1 OS X
Live 8.2 OS X
Loomer
M-Audio FireWire.app
Mail.app
MainStage 2.0.0.app
MainStage.app
Malwarebytes Anti-Malware.app
Mandolane
Maps.app
Melodyne plugin
Messages.app
Microsoft Excel.app
Microsoft OneNote.app
Microsoft Outlook.app
Microsoft PowerPoint.app
Microsoft Word.app
Minimonsta.app
Mission Control.app
Native Instruments
Notes.app
Numark OMNICONTROL USB Audio Panel.app
Oddity.app
Photo Booth.app
Photos.app
Preview.app
Prosoniq Plug-In Support
QuickTime Player.app
Reminders.app
Rob Papen
Safari.app
Scarlett MixControl.app
SCS.3 DaRouter.app
Skype.app
Skype_old.app
Soundtrack Pro.app
Spotify.app
Stickies.app
StuffIt Archive Manager.app
StuffIt Destinations.app
System Preferences.app
TeamViewer.app
TextEdit.app
Time Machine.app
Toast Titanium.app
Traktor
Universal Audio
UnRarX.app
Utilities
uTorrent.app
VLC.app
Vodafone Mobile Broadband.app
Vodafone Utilities
Wave Arts
WaveBurner.app
Waves
Wiki.app



Users Shared Folder:
(path: /Users/Shared:)

.localized
adi
SC Info
Waves


Local Domain Library Folder
(path: /Library/)

.DS_Store
.localized
.MySCMServerInfo
Application Support
Audio
Caches
ColorPickers
ColorSync
Components
Compositions
Contextual Menu Items
CoreMediaIO
Desktop Pictures
Developer
Dictionaries
DirectoryServices
Documentation
Extensions
Filesystems
Fonts
Frameworks
GForce
Graphics
Image Capture
Input Methods
Internet Plug-Ins
Internet Plug-Ins (Disabled)
iTunes
Java
Keyboard Layouts
Keychains
LaunchAgents
LaunchDaemons
Logs
Messages
Modem Scripts
Mozilla
OpenDirectory
PDF Services
Perl
PreferencePanes
Preferences
Printers
PrivilegedHelperTools
Python
QuickLook
QuickTime
Receipts
Ruby
Sandbox
Screen Savers
ScriptingAdditions
Scripts
Security
Server
Speech
Spelling
Spotlight
StartupItems
SystemMigration
SystemProfiler
Updates
User Pictures
Video
WebObjects
WebServer
Widgets



Local Domain Library Application Support
(path: /Library/Application Support/)

.DS_Store
.MySCMServerInfo
.prvdat
.prvdat0a
.prvdat0b
.prvdat0c
.prvdat0d
.prvdat1
.prvdat2
.prvdat3
.prvdat4
.prvdat5
.prvdat6
.prvdat7
.prvdat8
.prvdat9
.prvdata
Ableton Live Engine
Aperture
Apogee
App Store
Apple
Apple Qmaster
ApplePushService
Avid
com.apple.TCC
com.audiodamage.ratverb
CrashReporter
D16 Group
Digidesign
Final Cut Studio
GarageBand
GForce
IK Multimedia
iLifeMediaBrowser
iPhoto
iZotope
Logic
Loomer
M-Audio
Microsoft
Native Instruments
PACE Anti-Piracy
ProApps
ProMediaIO
Propellerhead Software
Roxio
Script Editor
Sonnox
SoundToys
Soundtrack Pro
u-he
UAFWAudio
Universal Audio
Vodafone
Wave Arts
WaveBurner
WDSmartWare



Local Domain Library Extensions
(path: /Library/Extensions/)

ACS6x.kext
ArcMSR.kext
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
CalDigitHDProDrv.kext
DuetFWOverideDriver.kext
HighPointIOP.kext
HighPointRR.kext
hp_io_enabler_compound.kext
PromiseSTEX.kext
SoftRAID.kext



Local Domain Library Launch Agents
(path: /Library/LaunchAgents/)

com.ApogeePopup.plist
com.teamviewer.teamviewer.plist
com.teamviewer.teamviewer_desktop.plist
de.novamedia.VodafoneDeviceObserver.plist



Local Domain Library Launch Daemons
(path: /Library/LaunchDaemons/)

com.apple.aelwriter.plist
com.apple.qmaster.qmasterd.plist
com.DuetDaemon.plist
com.m-audio.firewire.helper.plist
com.malwarebytes.HelperTool.plist
com.microsoft.office.licensingV2.helper.plist
com.teamviewer.Helper.plist
com.teamviewer.teamviewer_service.plist
com.uaudio.UAFWAudio.plist
com.waves.daemon.SoundGridProtocolService.plist
PACESupport.plist



Local Domain Library Internet Plug-Ins
(path: /Library/Internet Plug-Ins/)

Default Browser.plugin
Disabled Plug-Ins
flashplayer.xpt
Quartz Composer.webplugin



Local Domain Library PrivilegedHelperTools
(path: /Library/PrivilegedHelperTools/)

com.malwarebytes.HelperTool
com.microsoft.office.licensingV2.helper
com.teamviewer.Helper


Local Domain Library Scripting Additions
(path: /Library/ScriptingAdditions)

 
 


Local Domain Library StartupItems
(path: /Library/StartupItems)

M-Audio FireWire Audio Helper
PACESupport


Sudo Permissions File:
(path: /etc/sudoers)

/etc/sudoers was created on 2014-09-10 01:13:39 +0200 and does not appear to have been modified since.



------------------------- ▼ ------------------------- 



Installer History
(path: /Library/Receipts/InstallHistory.plist)
Recent items:

Gatekeeper Configuration Data installed on 2017-06-23 16:51:32 +0000
Gatekeeper Configuration Data installed on 2017-07-15 14:32:16 +0000
Gatekeeper Configuration Data installed on 2017-09-09 13:20:10 +0000
XProtectPlistConfigData installed on 2017-09-09 13:25:10 +0000
XProtectPlistConfigData installed on 2018-05-12 13:27:02 +0000
Gatekeeper Configuration Data installed on 2018-05-12 13:27:10 +0000
Aggiornamento di sicurezza 2017-003 installed on 2018-05-15 15:04:51 +0000
Aggiornamento client Remote Desktop installed on 2018-05-15 15:04:51 +0000
Safari installed on 2018-05-15 15:04:51 +0000
Aggiornamento Software Stampante HP installed on 2018-05-16 07:48:51 +0000
iTunes installed on 2018-05-16 07:48:51 +0000
Gatekeeper Configuration Data installed on 2018-09-26 18:38:56 +0000
XProtectPlistConfigData installed on 2018-12-22 16:34:11 +0000
Gatekeeper Configuration Data installed on 2018-12-22 16:34:20 +0000
XProtectPlistConfigData installed on 2019-06-27 16:28:54 +0000


System Launch Agents:
(path:/System/Library/LaunchAgents/)

com.apple.accountsd.plist
com.apple.AddressBook.abd.plist
com.apple.AddressBook.AssistantService.plist
com.apple.AddressBook.SourceSync.plist
com.apple.AirPlayUIAgent.plist
com.apple.AirPortBaseStationAgent.plist
com.apple.alf.useragent.plist
com.apple.aos.migrate.plist
com.apple.AOSHeartbeat.plist
com.apple.AOSPushRelay.plist
com.apple.AppleGraphicsWarning.plist
com.apple.appleseed.seedusaged.plist
com.apple.appsleepd.plist
com.apple.appstoreupdateagent.plist
com.apple.apsctl.plist
com.apple.askpermissiond.plist
com.apple.AskPermissionUI.plist
com.apple.assistant_service.plist
com.apple.assistantd.plist
com.apple.AssistiveControl.plist
com.apple.BezelUI.plist
com.apple.bird.plist
com.apple.bluetoothUIServer.plist
com.apple.btsa.plist
com.apple.CalendarAgent.plist
com.apple.CallHistoryPluginHelper.plist
com.apple.CallHistorySyncHelper.plist
com.apple.cfnetwork.AuthBrokerAgent.plist
com.apple.cfnetwork.cfnetworkagent.plist
com.apple.cfprefsd.xpc.agent.plist
com.apple.cloudd.plist
com.apple.cloudfamilyrestrictionsd-mac.plist
com.apple.cloudpaird.plist
com.apple.cloudphotosd.plist
com.apple.cmfsyncagent.plist
com.apple.ContainerRepairAgent.plist
com.apple.CoreAuthentication.daemon.plist
com.apple.coredata.externalrecordswriter.plist
com.apple.CoreLocationAgent.plist
com.apple.CoreRAIDAgent.plist
com.apple.coreservices.appleid.authentication.plist
com.apple.coreservices.lsactivity.plist
com.apple.coreservices.uiagent.plist
com.apple.csuseragent.plist
com.apple.cvmsCompAgent_i386.plist
com.apple.cvmsCompAgent_i386_1.plist
com.apple.cvmsCompAgent_x86_64.plist
com.apple.cvmsCompAgent_x86_64_1.plist
com.apple.cvmsCompAgentLegacy_i386.plist
com.apple.cvmsCompAgentLegacy_i386_1.plist
com.apple.cvmsCompAgentLegacy_x86_64.plist
com.apple.cvmsCompAgentLegacy_x86_64_1.plist
com.apple.DiagnosticReportCleanup.plist
com.apple.diagnostics_agent.plist
com.apple.DictationIM.plist
com.apple.DiskArbitrationAgent.plist
com.apple.distnoted.xpc.agent.plist
com.apple.Dock.plist
com.apple.dt.CommandLineTools.installondemand.plist
com.apple.EscrowSecurityAlert.plist
com.apple.familycircled.plist
com.apple.familycontrols.useragent.plist
com.apple.familynotificationd.plist
com.apple.FileStatsAgent.plist
com.apple.FileSyncAgent.PHD.plist
com.apple.FilesystemUI.plist
com.apple.Finder.plist
com.apple.findmymacmessenger.plist
com.apple.fontd.useragent.plist
com.apple.FontRegistryUIAgent.plist
com.apple.FontValidator.plist
com.apple.FontValidatorConduit.plist
com.apple.FontWorker.plist
com.apple.FTCleanup.plist
com.apple.gamed.plist
com.apple.helpd.plist
com.apple.icbaccountsd.plist
com.apple.icloud.fmfd.plist
com.apple.iCloudUserNotifications.plist
com.apple.iconservices.iconservicesagent.plist
com.apple.identityservicesd.plist
com.apple.idsremoteurlconnectionagent.plist
com.apple.imagent.plist
com.apple.imklaunchagent.plist
com.apple.IMLoggingAgent.plist
com.apple.imtransferagent.plist
com.apple.installd.user.plist
com.apple.isst.plist
com.apple.java.InstallOnDemand.plist
com.apple.java.updateSharing.plist
com.apple.lateragent.plist
com.apple.locationmenu.plist
com.apple.lookupd.plist
com.apple.ManagedClientAgent.agent.plist
com.apple.Maps.pushdaemon.plist
com.apple.maspushagent.plist
com.apple.mbloginhelper.user.plist
com.apple.mbpluginhost.user.plist
com.apple.mdmclient.agent.plist
com.apple.mdmclient.cloudconfig.agent.plist
com.apple.mdworker.32bit.plist
com.apple.mdworker.bundles.plist
com.apple.mdworker.isolation.plist
com.apple.mdworker.lsb.plist
com.apple.mdworker.mail.plist
com.apple.mdworker.shared.plist
com.apple.mdworker.single.plist
com.apple.mdworker.sizing.plist
com.apple.metadata.mdflagwriter.plist
com.apple.metadata.mdwrite.plist
com.apple.metadata.SpotlightNetHelper.plist
com.apple.midiserver.plist
com.apple.neagent.plist
com.apple.netauth.user.auth.plist
com.apple.netauth.user.gui.plist
com.apple.NetworkDiagnostics.plist
com.apple.noticeboard.agent.plist
com.apple.notificationcenterui.plist
com.apple.nsurlsessiond.plist
com.apple.nsurlstoraged.plist
com.apple.PackageKit.InstallStatus.plist
com.apple.parentalcontrols.check.plist
com.apple.pboard.plist
com.apple.pbs.plist
com.apple.PCIESlotCheck.plist
com.apple.photolibraryd.plist
com.apple.PhotoLibraryMigrationUtility.XPC.plist
com.apple.pictd.plist
com.apple.pluginkit.pkd.plist
com.apple.pluginkit.pkreporter.plist
com.apple.powerchime.plist
com.apple.printtool.agent.plist
com.apple.printuitool.agent.plist
com.apple.PubSub.Agent.plist
com.apple.quicklook.32bit.plist
com.apple.quicklook.config.plist
com.apple.quicklook.plist
com.apple.quicklook.ui.helper.plist
com.apple.rcd.plist
com.apple.recentsd.plist
com.apple.ReclaimSpaceAgent.plist
com.apple.RemoteDesktop.plist
com.apple.ReportCrash.plist
com.apple.ReportCrash.Self.plist
com.apple.ReportGPURestart.plist
com.apple.ReportPanic.plist
com.apple.rtcreportingd.plist
com.apple.SafariCloudHistoryPushAgent.plist
com.apple.safaridavclient.plist
com.apple.SafariNotificationAgent.plist
com.apple.SafariPlugInUpdateNotifier.plist
com.apple.sbd.plist
com.apple.scopedbookmarkagent.xpc.plist
com.apple.ScreenReaderUIServer.plist
com.apple.screensharing.agent.plist
com.apple.screensharing.MessagesAgent.plist
com.apple.scrod.plist
com.apple.secd.plist
com.apple.secinitd.plist
com.apple.security.agentStub.plist
com.apple.security.cloudkeychainproxy.plist
com.apple.security.DiskUnmountWatcher.plist
com.apple.security.keychain-circle-notification.plist
com.apple.sharingd.plist
com.apple.soagent.plist
com.apple.SocialPushAgent.plist
com.apple.softwareupdate_notify_agent.plist
com.apple.speech.speechdatainstallerd.plist
com.apple.speech.speechsynthesisd.plist
com.apple.speech.synthesisserver.plist
com.apple.spindump_agent.plist
com.apple.Spotlight.plist
com.apple.SSInvitationAgent.plist
com.apple.storeaccountd.plist
com.apple.storeassetd.plist
com.apple.storedownloadd.plist
com.apple.storeinappd.plist
com.apple.storelegacy.plist
com.apple.storeuid.plist
com.apple.syncdefaultsd.plist
com.apple.syncservices.SyncServer.plist
com.apple.syncservices.uihandler.plist
com.apple.systemprofiler.plist
com.apple.SystemUIServer.plist
com.apple.talagent.plist
com.apple.tccd.plist
com.apple.telephonyutilities.callservicesd.plist
com.apple.thermaltrap.plist
com.apple.tiswitcher.plist
com.apple.TMHelperAgent.plist
com.apple.TMHelperAgent.SetupOffer.plist
com.apple.TrustEvaluationAgent.plist
com.apple.universalaccessAuthWarn.plist
com.apple.universalaccesscontrol.plist
com.apple.universalaccessd.plist
com.apple.unmountassistant.useragent.plist
com.apple.USBAgent.plist
com.apple.UserEventAgent-Aqua.plist
com.apple.UserEventAgent-LoginWindow.plist
com.apple.usernoted.plist
com.apple.UserNotificationCenterAgent-LoginWindow.plist
com.apple.UserNotificationCenterAgent.plist
com.apple.VoiceOver.plist
com.apple.warmd_agent.plist
com.apple.webinspectord.plist
com.apple.WebKit.PluginAgent.plist
com.apple.wifi.WiFiAgent.plist
com.apple.xmigrationhelper.user.plist
com.apple.xpc.loginitemregisterd.plist
com.apple.xpc.otherbsd.plist
com.apple.ZoomWindow.plist
org.openbsd.ssh-agent.plist



System Launch Daemons:
(path:/System/Library/LaunchDaemons/)

bootps.plist
com.apple.afpfs_afpLoad.plist
com.apple.afpfs_checkafp.plist
com.apple.AirPlayXPCHelper.plist
com.apple.airport.wps.plist
com.apple.airportd.plist
com.apple.alf.agent.plist
com.apple.AppleFileServer.plist
com.apple.appleseed.fbahelperd.plist
com.apple.applessdstatistics.plist
com.apple.apsd.plist
com.apple.aslmanager.plist
com.apple.AssetCacheLocatorService.plist
com.apple.atrun.plist
com.apple.audio.coreaudiod.plist
com.apple.auditd.plist
com.apple.autofsd.plist
com.apple.automountd.plist
com.apple.awacsd.plist
com.apple.awdd.plist
com.apple.backupd-auto.plist
com.apple.backupd.plist
com.apple.blued.plist
com.apple.bluetoothaudiod.plist
com.apple.bluetoothReporter.plist
com.apple.bnepd.plist
com.apple.bsd.dirhelper.plist
com.apple.cache_delete.plist
com.apple.cfprefsd.xpc.daemon.plist
com.apple.cloudfamilyrestrictionsd-mac.plist
com.apple.cmio.AppleCameraAssistant.plist
com.apple.cmio.AVCAssistant.plist
com.apple.cmio.IIDCVideoAssistant.plist
com.apple.cmio.iOSScreenCaptureAssistant.plist
com.apple.cmio.VDCAssistant.plist
com.apple.comsat.plist
com.apple.configd.plist
com.apple.configureLocalKDC.plist
com.apple.coreduetd.osx.plist
com.apple.CoreRAID.plist
com.apple.coreservices.appleevents.plist
com.apple.coreservices.appleid.passwordcheck.plist
com.apple.coreservices.launchservicesd.plist
com.apple.coreservicesd.plist
com.apple.corestorage.corestoraged.plist
com.apple.corestorage.corestoragehelperd.plist
com.apple.coresymbolicationd.plist
com.apple.CrashReporterSupportHelper.plist
com.apple.ctkd.plist
com.apple.cvmsServ.plist
com.apple.DesktopServicesHelper.plist
com.apple.diagnosticd.plist
com.apple.diskarbitrationd.plist
com.apple.diskmanagementd.plist
com.apple.displaypolicyd.plist
com.apple.distnoted.xpc.daemon.plist
com.apple.dnsextd.plist
com.apple.dpaudiothru.plist
com.apple.dpd.plist
com.apple.dspluginhelperd.plist
com.apple.DumpGPURestart.plist
com.apple.DumpPanic.plist
com.apple.dvdplayback.setregion.plist
com.apple.dynamic_pager.plist
com.apple.eapolcfg_auth.plist
com.apple.efax.plist
com.apple.efilogin-helper.plist
com.apple.emlog.plist
com.apple.emond.aslmanager.plist
com.apple.emond.plist
com.apple.eppc.plist
com.apple.familycontrols.plist
com.apple.FileCoordination.plist
com.apple.FileSyncAgent.sshd.plist
com.apple.findmymac.plist
com.apple.findmymacmessenger.plist
com.apple.firmwaresyncd.plist
com.apple.fontd.plist
com.apple.fontmover.plist
com.apple.FontWorker.plist
com.apple.fpsd.plist
com.apple.fseventsd.plist
com.apple.ftp-proxy.plist
com.apple.GameController.gamecontrollerd.plist
com.apple.getty.plist
com.apple.gkreport.plist
com.apple.GSSCred.plist
com.apple.gssd.plist
com.apple.hdiejectd.plist
com.apple.hidd.plist
com.apple.icloud.findmydeviced.plist
com.apple.iconservices.iconservicesagent.plist
com.apple.iconservices.iconservicesd.plist
com.apple.IFCStart.plist
com.apple.ifdreader.plist
com.apple.installandsetup.systemmigrationd.plist
com.apple.installd.plist
com.apple.installer.osmessagetracing.plist
com.apple.IOAccelMemoryInfoCollector.plist
com.apple.IOBluetoothUSBDFU.plist
com.apple.kcproxy.plist
com.apple.kdumpd.plist
com.apple.Kerberos.digest-service.plist
com.apple.Kerberos.kadmind.plist
com.apple.Kerberos.kcm.plist
com.apple.Kerberos.kdc.plist
com.apple.Kerberos.kpasswdd.plist
com.apple.KernelEventAgent.plist
com.apple.kextd.plist
com.apple.kuncd.plist
com.apple.locate.plist
com.apple.locationd.plist
com.apple.lockd.plist
com.apple.logind.plist
com.apple.loginwindow.LFVTracer.plist
com.apple.loginwindow.plist
com.apple.logkextloadsd.plist
com.apple.ManagedClient.cloudconfigurationd.plist
com.apple.ManagedClient.enroll.plist
com.apple.ManagedClient.plist
com.apple.ManagedClient.startup.plist
com.apple.mbicloudsetupd.plist
com.apple.mdmclient.daemon.plist
com.apple.mDNSResponder.plist
com.apple.mDNSResponderHelper.plist
com.apple.metadata.mds.index.plist
com.apple.metadata.mds.plist
com.apple.metadata.mds.scan.plist
com.apple.metadata.mds.spindump.plist
com.apple.MobileFileIntegrity.plist
com.apple.msrpc.echosvc.plist
com.apple.msrpc.lsarpc.plist
com.apple.msrpc.mdssvc.plist
com.apple.msrpc.netlogon.plist
com.apple.msrpc.srvsvc.plist
com.apple.msrpc.wkssvc.plist
com.apple.mtmd.plist
com.apple.mtmfs.plist
com.apple.nehelper.plist
com.apple.nesessionmanager.plist
com.apple.netauth.sys.auth.plist
com.apple.netauth.sys.gui.plist
com.apple.netbiosd.plist
com.apple.NetBootClientStatus.plist
com.apple.networkd.plist
com.apple.networkd_privileged.plist
com.apple.NetworkDiagnostics.plist
com.apple.NetworkLinkConditioner.plist
com.apple.NetworkSharing.plist
com.apple.newsyslog.plist
com.apple.nfsconf.plist
com.apple.nfsd.plist
com.apple.nis.ypbind.plist
com.apple.noticeboard.state.plist
com.apple.notifyd.plist
com.apple.nsurlsessiond.plist
com.apple.nsurlstoraged.plist
com.apple.ocspd.plist
com.apple.odproxyd.plist
com.apple.ODSAgent.plist
com.apple.opendirectoryd.plist
com.apple.pacemaker.plist
com.apple.PasswordService.plist
com.apple.PCIELaneConfigTool.plist
com.apple.periodic-daily.plist
com.apple.periodic-monthly.plist
com.apple.periodic-weekly.plist
com.apple.pfctl.plist
com.apple.pfd.plist
com.apple.platform.ptmd.plist
com.apple.postgres.plist
com.apple.powerd.plist
com.apple.powerd.swd.plist
com.apple.preferences.timezone.admintool.plist
com.apple.preferences.timezone.auto.plist
com.apple.printtool.daemon.plist
com.apple.racoon.plist
com.apple.RemoteDesktop.PrivilegeProxy.plist
com.apple.remotepairtool.plist
com.apple.ReportCrash.Root.plist
com.apple.ReportPanicService.plist
com.apple.revisiond.plist
com.apple.RFBEventHelper.plist
com.apple.rpcbind.plist
com.apple.sandboxd.plist
com.apple.SCHelper.plist
com.apple.screensharing.plist
com.apple.scsid.plist
com.apple.secinitd.plist
com.apple.security.agentMain.plist
com.apple.security.authhost.plist
com.apple.security.FDERecoveryAgent.plist
com.apple.security.syspolicy.plist
com.apple.securityd.plist
com.apple.securityd_service.plist
com.apple.sessionlogoutd.plist
com.apple.smb.preferences.plist
com.apple.smbd.plist
com.apple.softwareupdate_download_service.plist
com.apple.softwareupdate_firstrun_tasks.plist
com.apple.softwareupdated.plist
com.apple.speech.speechsynthesisd.plist
com.apple.spindump.plist
com.apple.stackshot.plist
com.apple.statd.notify.plist
com.apple.storagekitd.plist
com.apple.storereceiptinstaller.plist
com.apple.SubmitDiagInfo.plist
com.apple.suhelperd.plist
com.apple.syslogd.plist
com.apple.sysmond.plist
com.apple.systemkeychain.plist
com.apple.systempreferences.installer.plist
com.apple.systemstats.analysis.plist
com.apple.systemstats.daily.plist
com.apple.systemstatsd.plist
com.apple.taskgated-helper.plist
com.apple.taskgated.plist
com.apple.tccd.system.plist
com.apple.thermald.plist
com.apple.TMCacheDelete.plist
com.apple.TrustEvaluationAgent.system.plist
com.apple.ucupdate.plist
com.apple.uninstalld.plist
com.apple.unmountassistant.sysagent.plist
com.apple.updateEFIDesktopPicture.plist
com.apple.usbd.plist
com.apple.usbmuxd.plist
com.apple.UserEventAgent-System.plist
com.apple.UserNotificationCenter.plist
com.apple.uucp.plist
com.apple.var-db-dslocal-backup.plist
com.apple.vsdbutil.plist
com.apple.warmd.plist
com.apple.watchdogd.plist
com.apple.wdhelper.plist
com.apple.wifid.plist
com.apple.WindowServer.plist
com.apple.wirelessproxd.plist
com.apple.wwand.plist
com.apple.xpc.smd.plist
com.apple.xsan.plist
com.apple.xsandaily.plist
com.apple.xscertadmin.plist
com.apple.xscertd-helper.plist
com.apple.xscertd.plist
com.vix.cron.plist
exec.plist
finger.plist
ftp.plist
login.plist
ntalk.plist
org.apache.httpd.plist
org.cups.cups-lpd.plist
org.cups.cupsd.plist
org.net-snmp.snmpd.plist
org.ntp.ntpd.plist
org.openldap.slapd.plist
org.postfix.master.plist
shell.plist
ssh.plist
telnet.plist
tftp.plist




------------------------- ▼ ------------------------- 



Bluetooth Hardware Info:

Bluetooth Low Energy Supported: No
          Handoff Supported: No
          Instant Hotspot Supported: No
          
Bluetooth Power: On
          Discoverable: On
          Connectable: Yes
          Auto Seek Pointing: On
          Remote wake: On
          


Network Info:

/etc/hosts -count: 9

Network:

    Ethernet:

      Type: Ethernet
      Hardware: Ethernet
      BSD Device Name: en0
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Ethernet:
          MAC Address: 00:1f:5b:ec:33:70
          Media Options: 
          Media Subtype: Auto Select
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 0

    AirPort:

      Type: AirPort
      Hardware: AirPort
      BSD Device Name: en1
      IPv4 Addresses: 192.168.1.72
      IPv4:
          AdditionalRoutes:
              DestinationAddress: 192.168.1.72
              SubnetMask: 255.255.255.255
              DestinationAddress: 169.254.0.0
              SubnetMask: 255.255.0.0
          Addresses: 192.168.1.72
          ARPResolvedHardwareAddress: a4:91:b1:a8:9c:24
          ARPResolvedIPAddress: 192.168.1.1
          Configuration Method: DHCP
          ConfirmedInterfaceName: en1
          Interface Name: en1
          Network Signature: IPv4.Router=192.168.1.1;IPv4.RouterHardwareAddress=a4:91:b1:a8:9c:24
          Router: 192.168.1.1
          Subnet Masks: 255.255.255.0
      IPv6:
          Configuration Method: Automatic
      DNS:
          Domain Name: homenet.telecomitalia.it
          Search Domains: 
          Server Addresses: 192.168.1.1
      DHCP Server Responses:
          Domain Name: homenet.telecomitalia.it
          Domain Name Servers: 192.168.1.1
          Lease Duration (seconds): 0
          DHCP Message Type: 0x05
          Routers: 192.168.1.1
          Server Identifier: 192.168.1.1
          Subnet Mask: 255.255.255.0
      Ethernet:
          MAC Address: 00:1e:c2:ba:1a:af
          Media Options: 
          Media Subtype: Auto Select
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 1

    FireWire:

      Type: FireWire
      Hardware: FireWire
      BSD Device Name: fw0
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Ethernet:
          MAC Address: 00:1f:f3:ff:fe:0e:2e:86
          Media Options: Full Duplex
          Media Subtype: Auto Select
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 2

    Bluetooth:

      Type: PPP (PPPSerial)
      Hardware: Modem
      BSD Device Name: Bluetooth-Modem
      IPv4:
          Configuration Method: PPP
      IPv6:
          Configuration Method: Automatic
      Proxies:
          FTP Passive Mode: Yes
      Service Order: 3

    Bluetooth PAN:

      Type: Ethernet
      Hardware: Ethernet
      BSD Device Name: en2
      IPv4:
          Configuration Method: DHCP
      IPv6:
          Configuration Method: Automatic
      Proxies:
          Exceptions List: *.local, 169.254/16
          FTP Passive Mode: Yes
      Service Order: 4





------------------------- ▼ ------------------------- 



Disk Information:

Storage:

    HD Mac:

      Available: 100,48 GB (100.475.596.800 bytes)
      Capacity: 249,2 GB (249.199.591.424 bytes)
      Mount Point: /
      File System: Journaled HFS+
      Writable: Yes
      Ignore Ownership: No
      BSD Name: disk0s2
      Volume UUID: FED578B5-D077-3538-B42C-BC8DAE34FD4A
      Physical Drive:
          Media Name: Hitachi HTS542525K9SA00 Media
          Medium Type: Rotational
          Protocol: SATA
          Internal: Yes
          Partition Map Type: GPT (GUID Partition Table)
          S.M.A.R.T. Status: Verified

[MircoT]

buongiorno a tutti.
dato che a volte mi capita che safari venga reindirizzato sul solito sito che afferma che il mac ha 3 virus, ho fatto una scansione con detectx ma non ha trovato problemi.
allego il profilo generato: qualche anima pia può dirmi se c'è qualche adware o virus?

nota: i siti dai quali vengo redirezionato sul sito farlocco sono vari (cnn, 3bmeteo, corriere, repubblica).
spesso lo fa le prime due volte che visito il sito, alla terza non lo fa più.
ho l'impressione che capiti a seconda della pubblicità visualizzata sul sito.

problema: non mi fa postare perchè incollando il report arrivo a 87000 caratteri e il limite è 60000...
che faccio, separo in 2 post?

per altro non mi permette di allegare i txt... boh.

[Paolofast]

ho l'impressione che capiti a seconda della pubblicità visualizzata sul sito.

Quando il sito non è complice o infettato, è sempre la pubblicità.

Se ce l'hai ancora, prova a disinstallare Flash, che tanto non serve più a nulla.
Questo dovrebbe "disarmare" alcune di quelle pubblicità farlocche.
Per le altre direi un buon ADBock.

Io uso UBlock Origin abbinato a Ghostery.
Qualche pagina fastidiosa compare ancora, ma si sono molto ridotte.

[Alberto.G]

....
problema: non mi fa postare perchè incollando il report arrivo a 87000 caratteri e il limite è 60000...
che faccio, separo in 2 post?

per altro non mi permette di allegare i txt... boh.

Segui esempio :


Entra in Profile di DetectX Swift
Clicca sul 2° elemento in alto
Clicca su Copy report to clipboard
Clicca sul 4° elemento in alto (da sinistra) quello delle [ " ] quote
Questo è come esempio (solo poche righe del mio report); nel tuo caso va inviato tutto

Timestamp (154): Thu Sep 19 18:43:09 2019
DetectX Swift v1.093

macOS: Version 10.14.6 (Build 18G95)
File System: apfs
Temp: The thermal state is within normal limits.

Boot time: Thu Sep 19 18:14:11 2019
Uptime: 29 mins, 1 user

Spotlight status for /:
Indexing enabled.
System Integrity Protection status: enabled.
Gatekeeper status: enabled for App Store and identified developers.
FileVault is Off.

Internet: Reachable

«»EOF»«

Incolla, in mezzo alle quote, il report dalla clipboard
Invia il messaggio

[MircoT]

niet.
nè con la quotazione, nè con il modo codice.
c'è una limitazione. forse perchè mi sono registrato da poco:

[MircoT]

ho l'impressione che capiti a seconda della pubblicità visualizzata sul sito.

Quando il sito non è complice o infettato, è sempre la pubblicità.

Se ce l'hai ancora, prova a disinstallare Flash, che tanto non serve più a nulla.
Questo dovrebbe "disarmare" alcune di quelle pubblicità farlocche.
Per le altre direi un buon ADBock.

Io uso UBlock Origin abbinato a Ghostery.
Qualche pagina fastidiosa compare ancora, ma si sono molto ridotte.

sono siti teoricamente sicuri.
però mi pare strano che una pubblicità in un riquadro possa redirezionare l'intera pagina. è un buco non da poco.
ho messo ublock. vediamo come va.
grazie.

[faxus]

niet. ...

Posta solo i primi due terzi del resoconto.

Il resto è (nella quasi totalità dei casi) inutile

[MircoT]

ci provo:

Codice: Seleziona tutto

Timestamp (3): Thu Sep 19 16:46:23 2019
DetectX Swift v1.093

macOS: Version 10.14.6 (Build 18G95)
File System: apfs
Temp: The thermal state is within normal limits.

Boot time: Wed Sep 4 05:46:09 2019
Uptime: 15 days, 11 hrs

Spotlight status for /:
	Indexing enabled. 
System Integrity Protection status: enabled.
Gatekeeper status: enabled for App Store and identified developers.
FileVault is Off.

Internet:	Reachable


    Hardware Overview:

      Model Name: iMac
      Model Identifier: iMac17,1
      Processor Name: Intel Core i7
      Processor Speed: 4 GHz
      Number of Processors: 1
      Total Number of Cores: 4
      L2 Cache (per Core): 256 KB
      L3 Cache: 8 MB
      Hyper-Threading Technology: Enabled
      Memory: 32 GB
      Boot ROM Version: 170.0.0.0.0
      SMC Version (system): 2.34f2



  Sharing Preferences:

	File Sharing:  On
	Screen Sharing:  On
	Remote Management:  Off
	Back To My Mac:  Off
	Remote Login:  On
	Remote Apple Events:  Off


3rd Party Kexts (loaded):

	com.vmware.kext.vmci
	com.vmware.kext.vmnet
	com.vmware.kext.vmx86
	com.vmware.kext.vmioplug.18.1.2


 $PATH:

PATH=/usr/bin:/bin:/usr/sbin:/sbin


/etc/paths:
	/usr/local/bin
	/usr/bin
	/bin
	/usr/sbin
	/sbin

/etc/paths.d/:
	/Applications/VMware Fusion.app/Contents/Public

~/.bash_profile:
	
~/.bashrc:

~/.bash_login:

~/.profile:

~/.bash_logout:


PID	Status	Label
662	0	com.fileopen.Client.Broker
680	0	com.bjango.istatmenus.agent
683	0	com.adobe.GC.AGM
-	0	com.skype.skype.shareagent
781	0	com.fortinet.FctMiscAgent.21408
-	0	com.ookla.speedtest-macos-speedtesthelper
654	0	jp.co.canon.ij.CNSSelectorAgent.20844
689	0	com.bjango.istatmenus.status
-	0	com.bittorrent.uTorrent
-	0	com.openssh.ssh-agent
-	78	com.microsoft.update.agent
670	0	2BUA8C4S2C.com.agilebits.onepassword7-helper
-	0	com.binaryfruit.DriveDxLoginItemHelper.MAS
-	0	com.sqwarq.DetectX-Swift.observer
43127	0	com.vmware.fusion.33812
-	1	com.synology.CloudStationDrive
-	0	com.microsoft.OneDriveLauncher
-	0	com.adobe.GC.Scheduler-1.0
8491	0	com.teamviewer.TeamViewer.35600
-	0	com.fortinet.credential_store
-	0	com.adobe.AAM.Scheduler-1.0
-	78	com.infocert.dike
-	0	com.oracle.java.Java-Updater
-	0	com.microsoft.autoupdate.fba.31108
-	0	com.fortinet.forticlient.vpn.vpn_control
2664	0	org.mozilla.firefox.33716
711	0	com.ookla.speedtest-macos.33772
-	0	com.fortinet.fct_launcher
-	0	com.agilebits.onepassword7-launcher
710	0	com.fortinet.FortiClientAgent.21404
-	0	com.microsoft.autoupdate.fba.36100
-	78	mega.mac.megaupdater
-	0	com.dropbox.DropboxMacUpdate.agent


 System Launchd processes:

(dp)      0 	com.bombich.ccchelper
0      - 	com.malwarebytes.HelperTool
0      - 	com.vmware.DiskHelper
0      - 	com.vix.cron
0      - 	com.vmware.MountHelper
43276      - 	com.vmware.KextControlHelper
77      - 	com.bjango.istatmenus.daemon
0      - 	com.bjango.istatmenus.installerhelper
0      - 	org.postfix.master
84      - 	fans
0      - 	com.teamviewer.Helper
43275      - 	com.vmware.VMMonHelper
0      - 	com.microsoft.office.licensingV2.helper
0      0 	com.microsoft.autoupdate.helper
(dp)      0 	Adobe_Genuine_Software_Integrity_Service
774      0 	com.fortinet.fctservctl
78728      0 	org.cups.cupsd
0      0 	com.adobe.fpsaud
0      - 	com.daisydiskapp.DaisyDiskAdminHelper
0      - 	com.oracle.java.Helper-Tool
0      - 	com.fortinet.fctctl
0      - 	com.fortinet.config
0      - 	com.openssh.sshd



 User Login Items:
 
	/Applications/OneDrive.app
	/Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app
	/Applications/DriveDx.app
	/Applications/DriveDx.app/Contents/Library/LoginItems/DriveDxLoginItemHelper.app
	/Applications/Speedtest.app
	/Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app
	/Applications/Canon Utilities/IJ Network Scanner Selector EX/Canon IJ Network Scanner Selector EX.app
	/Applications/1Password 7.app
	/Applications/1Password 7.app/Contents/Library/LoginItems/1Password Launcher.app
	/Applications/1Password 7.app/Contents/Library/LoginItems/1Password Extension Helper.app
	/Applications/Dropbox.app



 /Library/LaunchDaemons:

	com.vmware.DiskHelper.plist
		-> Program: /Library/PrivilegedHelperTools/com.vmware.DiskHelper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.vmware.DiskHelper
	
	com.vmware.KextControlHelper.plist
		-> Program: /Library/PrivilegedHelperTools/com.vmware.KextControlHelper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.vmware.KextControlHelper
	
	com.adobe.agsservice.plist
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/AGSService
	
	com.daisydiskapp.DaisyDiskAdminHelper.plist
		-> Program: /Library/PrivilegedHelperTools/com.daisydiskapp.DaisyDiskAdminHelper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.daisydiskapp.DaisyDiskAdminHelper
	
	com.bjango.istatmenus.daemon.plist
		-> Program: /Library/Application Support/iStat Menus 6/iStatMenusDaemon
	
	com.vmware.VMMonHelper.plist
		-> Program: /Library/PrivilegedHelperTools/com.vmware.VMMonHelper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.vmware.VMMonHelper
	
	com.bjango.istatmenus.installerhelper.plist
		-> Program: /Library/PrivilegedHelperTools/com.bjango.istatmenus.installerhelper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.bjango.istatmenus.installerhelper
	
	com.vmware.MountHelper.plist
		-> Program: /Library/PrivilegedHelperTools/com.vmware.MountHelper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.vmware.MountHelper
	
	com.fortinet.forticlient.config.plist
		-> Program: /Library/Application Support/Fortinet/FortiClient/bin/fcconfig
	
	com.apple.installer.osmessagetracing.plist
		--> Program Arguments: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer
	
	com.teamviewer.Helper.plist
		-> Program: /Library/PrivilegedHelperTools/com.teamviewer.Helper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.teamviewer.Helper
	
	com.bjango.istatmenus.fans.plist
		-> Program: /Library/Application Support/iStat Menus 6/iStatMenusFans
	
	com.fortinet.forticlient.servctl.plist
		-> Program: /Library/Application Support/Fortinet/FortiClient/bin/fctservctl
	
	com.malwarebytes.HelperTool.plist
		-> Program: /Library/PrivilegedHelperTools/com.malwarebytes.HelperTool
		--> Program Arguments: /Library/PrivilegedHelperTools/com.malwarebytes.HelperTool
	
	com.fortinet.forticlient.vpn.plist
		-> Program: /Library/Application Support/Fortinet/FortiClient/bin/fctctld
	
	com.teamviewer.teamviewer_service.plist
		--> Program Arguments: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service
		--> Program Arguments: -Module
		--> Program Arguments: Full
	
	com.adobe.fpsaud.plist
		--> Program Arguments: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud
	
	com.microsoft.office.licensingV2.helper.plist
		-> Program: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper
	
	com.oracle.java.Helper-Tool.plist
		--> Program Arguments: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
	
	com.bombich.ccchelper.plist
		-> Program: /Library/PrivilegedHelperTools/com.bombich.ccchelper
		--> Program Arguments: /Library/PrivilegedHelperTools/com.bombich.ccchelper
	
	com.microsoft.autoupdate.helper.plist
		-> Program: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
	



 /Library/LaunchAgents:

	com.teamviewer.teamviewer_desktop.plist
		--> Program Arguments: /Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop
		--> Program Arguments: -RunAsAgent
		--> Program Arguments: YES
		--> Program Arguments: -Module
		--> Program Arguments: Full
	
	com.fileopen.Broker.plist
		--> Program Arguments: /Library/Application Support/FileOpen/Services/FileOpenBroker.app/Contents/MacOS/FileOpenBroker
	
	com.fortinet.forticlient.vpn.vpn_control.plist
		-> Program: /Library/Application Support/Fortinet/FortiClient/bin/VPNControl
	
	com.adobe.GC.AGM.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/AGMService
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/AGMService
		--> Program Arguments: -mode=logon
	
	com.teamviewer.teamviewer.plist
		--> Program Arguments: /Applications/TeamViewer.app/Contents/MacOS/TeamViewer
		--> Program Arguments: -RunAsAgent
		--> Program Arguments: YES
	
	com.oracle.java.Java-Updater.plist
		--> Program Arguments: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater
		--> Program Arguments: -bgcheck
	
	com.adobe.AAM.Updater-1.0.plist
		-> Program: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: -mode=logon
	
	com.adobe.GC.Invoker-1.0.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: -mode=logon
	
	com.bjango.istatmenus.status.plist
		-> Program: /Library/Application Support/iStat Menus 6/iStat Menus Status.app/Contents/MacOS/iStat Menus Status
	
	com.fortinet.forticlient.credential_store.plist
		-> Program: /Library/Application Support/Fortinet/FortiClient/bin/CredentialStore
	
	com.fortinet.forticlient.fct_launcher.plist
		-> Program: /Library/Application Support/Fortinet/FortiClient/bin/FCTLauncher
	
	com.cybrook.trackview.plist
		-> Program: /Applications/TrackView.app/Contents/MacOS/TrackView
	
	com.bjango.istatmenus.agent.plist
		-> Program: /Library/Application Support/iStat Menus 6/iStatMenusAgent.app/Contents/MacOS/iStatMenusAgent
	
	com.microsoft.update.agent.plist
		--> Program Arguments: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant
		--> Program Arguments: -checkForUpdates
	



 ~/Library/LaunchAgents:

	com.adobe.AAM.Updater-1.0.plist
		-> Program: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: -mode=scheduled
	
	com.adobe.GC.Invoker-1.0.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: -mode=scheduled
	
	com.skype.skype.shareagent.plist
		-> Program: /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent
	
	com.dropbox.DropboxMacUpdate.agent.plist
		--> Program Arguments: /Users/[U501]/Library/Dropbox/DropboxMacUpdate.app/Contents/MacOS/DropboxMacUpdate
		--> Program Arguments: -check
		--> Program Arguments: periodic
	
	com.infocert.dike.plist
		--> Program Arguments: /Applications/Dike.app/Contents/MacOS/Dike
		--> Program Arguments: -o
		--> Program Arguments: NO_SHELL
		--> Program Arguments: -f
		--> Program Arguments: NO_MAIN_WIN
	
	com.sqwarq.DetectX-Swift.observer.plist
		--> Program Arguments: /Applications/DetectX Swift.app/Contents/MacOS/DetectX Swift
		--> Program Arguments: -observer
	
	com.synology.CloudStationDrive.plist
		--> Program Arguments: /usr/bin/open
		--> Program Arguments: /Applications/Synology Cloud Station.app
	

 User Crontab:

	No cron jobs



 /etc:

	rc.common
	bashrc_Apple_Terminal
	thnuclnt / .. children: 2
	bashrc
	ibm / .. children: 1
	zshrc
	rc.netboot
	efax.rc~previous
	php.ini.default-previous~orig
	aliases
	zprofile

 / $Root:

	.HFS+ Private Directory Data
 / .. children: 0
	.PKInstallSandboxManager / .. children: 0
	installer.failurerequests
	.file
	.Trashes / .. children: 0
	.OSInstallerMessages
	.VolumeIcon.icns
	.dbfseventsd

 ~/ $Home:

	.config / .. children: 4
	Music / .. children: 5
	.hsvc_0501 / .. children: 1
	.CloudStation / .. children: 4
	.CFUserTextEncoding
	OneDrive / .. children: 6
	Pictures / .. children: 121
	.rnd
	Desktop / .. children: 22
	Library / .. children: 82
	.oracle_jre_usage / .. children: 2
	software / .. children: 6
	.Postecert / .. children: 1
	.uuid
	.cups / .. children: 1
	.bash_sessions / .. children: 240
	Public / .. children: 3
	.dropbox / .. children: 11
	.cisco / .. children: 1
	Movies / .. children: 17
	Applications / .. children: 2
	.501956.padl
	Dropbox / .. children: 79
	.Trash / .. children: 6
	Documents / .. children: 276
	.mono / .. children: 1
	Downloads / .. children: 32
	.dike / .. children: 7
	.bash_history



 ~/Library:

	Receipts / .. children: 8
	Address Book Plug-Ins / .. children: 4
	studentd / .. children: 4
	BBEdit / .. children: 2
	PDF Services / .. children: 0
	HomeKit / .. children: 9
	QuickLook / .. children: 0
	Google / .. children: 1
	Family / .. children: 1
	Zoiper5 / .. children: 9
	TextWrangler / .. children: 2
	Personas / .. children: 3
	FrontBoard / .. children: 3
	News / .. children: 1
	Icons / .. children: 1
	Dropbox / .. children: 1
	PersonalizationPortrait / .. children: 1
	VoiceTrigger / .. children: 1



 ~/Library/Application Support:

	com.malwarebytes.antimalware / .. children: 1
	Apple / .. children: 1
	.gdmID
	Firefox / .. children: 5
	com.apple.sbd / .. children: 1
	SoundTouch / .. children: 1
	com.apple.voicememos / .. children: 1
	GoToOpener / .. children: 2
	SyncServices / .. children: 1
	CitrixOnline / .. children: 2
	Mozilla / .. children: 2
	iStat Menus / .. children: 1
	com.apple.touristd / .. children: 20
	BBEdit / .. children: 10
	DiskImages / .. children: 1
	Microsoft AU Daemon / .. children: 2
	com.globaldelight.CaptoHelper / .. children: 1
	CoreParsec / .. children: 0
	Mega Limited / .. children: 1
	com.globaldelight.Capto / .. children: 1
	Digiarty / .. children: 1
	LogMeInInc / .. children: 1
	Skype Helper / .. children: 0
	MobileSync / .. children: 1
	OpenVR / .. children: 0
	Dejal / .. children: 1
	uTorrent / .. children: 15
	Google / .. children: 3
	Microsoft / .. children: 3
	Plex Media Server / .. children: 10
	Oracle / .. children: 1
	FortiClient / .. children: 1
	ForkLift / .. children: 1
	dmd / .. children: 0
	com.malwarebytes.mbam.frontend.application / .. children: 1
	Java / .. children: 0
	SkyDM / .. children: 2
	Simon / .. children: 1
	Canon IJ Easy-PhotoPrint EX / .. children: 0
	T / .. children: 1
	CEF / .. children: 1
	VMware Fusion Applications Menu / .. children: 0
	aja / .. children: 1
	VLC / .. children: 1
	TextWrangler / .. children: 8
	.Dejal / .. children: 1
	com.crashlytics / .. children: 2
	EtreCheck / .. children: 1
	Adobe / .. children: 21
	Malwarebytes / .. children: 2
	org.videolan.vlc / .. children: 1
	.ACCC_Lock
	TeamViewer / .. children: 2
	GeekTool Plugins / .. children: 0
	com.sqwarq.DetectX-Swift / .. children: 4
	Aperture / .. children: 2
	Sky Go / .. children: 39
	Volkswagen AG / .. children: 1
	voicememod / .. children: 0
	VMware Fusion / .. children: 1
	WhatsApp.ShipIt / .. children: 0
	IBM Notes Data / .. children: 29
	Dropbox / .. children: 4
	NOW TV Player / .. children: 6
	AdobeWLCMCache.dat
	Canon_Inc_IC / .. children: 1
	Transmission / .. children: 6
	Preview / .. children: 0
	LibreOffice / .. children: 1
	Skype / .. children: 9
	Amazon Cloud Drive / .. children: 15
	WebEx Folder / .. children: 6
	Microsoft Update Assistant / .. children: 2
	Trimble Connect for SketchUp / .. children: 1
	Microsoft AutoUpdate / .. children: 2
	DaisyDisk / .. children: 2
	.LBS_Lock
	WiFi Explorer / .. children: 4
	Net Monitor / .. children: 3
	com.malwarebytes.mbam.frontend.agent / .. children: 1
	com.bombich.ccc / .. children: 7
	SketchUp 2016 / .. children: 6
	DetectX Swift / .. children: 3
	DriveDx / .. children: 3
	Alfred 3 / .. children: 4
	Fortinet / .. children: 1
	JREInstaller / .. children: 1
	SketchUp 2017 / .. children: 5
	LogMeIn Client / .. children: 2
	.ADCS_Lock



 ~/Library/Safari/Extensions:

	*-- Could not read Folder --*



 ~/Library/Internet Plug-Ins:

	WebEx64.plugin



 /Users/Shared:

	adi / .. children: 4
	SC Info / .. children: 2
	.iStatMenus / .. children: 2
	Library / .. children: 2
	Adobe / .. children: 0
	Canon_Inc_IC / .. children: 2



 /Applications:

	SoundTouch / .. children: 13
	Pixelmator.app
	VLC.app
	Download Shuttle.app
	BBEdit.app
	KnockKnock.app
	IBM Application Support / .. children: 2
	Books.app
	TeamViewer.app
	Parcel.app
	Telegram Desktop.app
	Blackmagic Disk Speed Test.app
	Composure.app
	Speedtest.app
	TextWrangler.app
	Home.app
	SketchBook.app
	Dropbox.app
	DxOOpticsProForPhotos.app
	VMware Fusion.app
	IBM Notes.app
	AJA System Test Lite.app
	Microsoft Remote Desktop.app
	OneDrive.app
	News.app
	Adobe Lightroom / .. children: 3
	FortiClientUninstaller.app
	CleanMyDrive 2.app
	Twitterrific.app
	DetectX Swift.app
	1Password.app.zip
	DaisyDisk.app
	Carbon Copy Cloner.app
	Microsoft Word.app
	Aperture.app
	Transmission.app
	Microsoft Remote Desktop.localized / .. children: 2
	ForkLift.app
	DiscoverCare.app
	Stocks.app
	LibreOffice Vanilla.app
	FortiClient.app
	Microsoft Excel.app
	Microsoft Silverlight
	Adobe / .. children: 2
	Canon Utilities / .. children: 8
	WhatsApp.app
	Microsoft Outlook.app
	DiskMaker X 8 for macOS Mojave.app
	iStat Menus.app
	BitdefenderVirusScanner.app
	DaisyDisk full.app
	1Password 7.app
	Plex Media Server.app
	Sky Go.app
	EtreCheck.app
	The Unarchiver.app
	Microsoft OneNote.app
	Blizz.app
	DriveDx.app
	FileZilla.app
	Skype.app
	VoiceMemos.app
	Firefox.app
	Simon.app
	Microsoft PowerPoint.app
	Slack.app
	firmaOK.app
	Twitter.app
	SketchUp 2017 / .. children: 5



 /Library:

	DropboxHelperTools / .. children: 2



 /Library/Application Support:

	Synology / .. children: 1
	iStat Menus 6 / .. children: 9
	Macromedia / .. children: 1
	Microsoft / .. children: 4
	Oracle / .. children: 1
	Canon / .. children: 5
	Adobe / .. children: 22
	Canon_Inc_IC / .. children: 1
	FileOpen / .. children: 4
	regid.1986-12.com.adobe / .. children: 1
	com.bombich.ccc / .. children: 14
	Fortinet / .. children: 1
	VMware / .. children: 2



 /Library/Extensions:

	BJUSBLoad.kext
	CIJUSBLoad.kext



 /Library/Internet Plug-Ins:

	EPPEX Plugin.plugin
	FortiClient_SSLVPN_Plugin.bundle
	Disabled Plug-Ins / .. children: 2
	Silverlight.plugin
	Flash Player.plugin
	flashplayer.xpt
	JavaAppletPlugin.plugin



 /Library/Managed Preferences:

	*-- Folder doesn't exist or is inaccessible --*



 /Library/PrivilegedHelperTools:

	com.vmware.VMMonHelper
	com.vmware.DiskHelper
	com.vmware.KextControlHelper
	com.teamviewer.Helper
	com.bombich.ccchelper
	com.vmware.MountHelper
	com.malwarebytes.HelperTool
	com.daisydiskapp.DaisyDiskAdminHelper
	com.microsoft.autoupdate.helper
	com.microsoft.office.licensingV2.helper
	com.bjango.istatmenus.installerhelper



 /Library/ScriptingAdditions:

	SynologySIMBL.osax



 /Library/StartupItems:

	



 /Library/Updates:

	ProductMetadata.plist
	PPDVersions.plist
	index.plist



Top Processes: 

%CPU	PID	COMMAND	
17.2 	43219 	vmware-vmx 
9.9		0		kernel_task 
5.9		73257		backupd 
5.0		250		WindowServer 
3.4		43127		VMware Fusion 
3.3		74112		diskimages-helpe 
3.2		43280		vmware-vmx 
1.2		78346		DetectX Swift 
0.4		78261		com.apple.WebKit 
0.3		77		iStatMenusDaemon 

[faxus]

ci provo...

Da un'occhiata superficiale, non hai nulla.

Sono le pagine che visiti.
Anzi, per l'esattezza, sono componenti della pagina su cui clicchi

[MircoT]

la cosa strana è che la redirezione avviene senza cliccare nulla: vado sulla pagina iniziale della cnn e dopo averla caricata parte la ridirezione sulla pagina farlocca.
altre volte capita su una pagina secondaria, ad esempio leggendo un articolo di repubblica o del corriere o controllando le previsioni del tempo di una località.. non clicco mai sulle pubblicità, ma forse basta passarci sopra con il mouse. boh.
grazie per l'analisi.

comunque dopo aver messo Ublock la redirezione pare non avvenire più.
anzi, le pagine vengono caricate più velocemente e senza saltare su e giù durante il caricamento della dannata pubblicità invasiva.
l'effetto collaterale di ublock è che certi siti (gazzettino) non ti lasciano leggere gli articoli se non lo disattivi per il loro sito, che però è uno di quelli che redireziona sul sito farlocco