redirect Safari

Ruggy-1 · Messaggio da **Ruggy-1** » ven, 09 lug 2021 18:54

ultimo

Ruggy-1 · Messaggio da **Ruggy-1** » ven, 09 lug 2021 18:56

ultimo ...se lo prende

Alberto.G · Messaggio da **Alberto.G** » ven, 09 lug 2021 18:58

Mannaggia Ruggy, hai addirittura una infezione in rosso!!
Ora analizzo e poi ti scrivo

Ruggy-1 · Messaggio da **Ruggy-1** » ven, 09 lug 2021 19:01

Ok grazie mille....non ho mai fatto scansioni e in effetti c'è un sacco di schifezze!!!

Alberto.G · Messaggio da **Alberto.G** » ven, 09 lug 2021 19:09

Ruggy, armati di tanta pazienza certosina perché il percorso sarà lungo.
Tutti gli elementi evidenziati da DetectX sono malware, quindi pericolosi, quindi da eliminare subito.
Puoi farlo direttamente da lì con DetectX.
Parti ovviamente dall’inizio, clicchi sul quadratino piccolo sul margine sx della lista, viene evidenziato l’elemento, poi vai in alto e trovi una (X), clicchi sopra quel simbolo che vuol dire cancellare (eliminare) l’elemento.
Ti consiglio, anche se il lavoro è lungo, di eseguire l’operazione uno alla volta.
E’ sempre meglio che la fase di cancellazione (sempre importante) venga fatta singolarmente.
Buon lavoro e fammi sapere se hai problemi

Ruggy-1 · Messaggio da **Ruggy-1** » ven, 09 lug 2021 19:15

ok io lo faccio tranquillamente....spero di non aver casini nel sistema....nel caso ti faccio sapere.
Per ora grazie mille

Alberto.G · Messaggio da **Alberto.G** » ven, 09 lug 2021 19:25

Nessun ringraziamento, siamo qui per questo.
Procedi con calma nel fare quella operazione perché al momento è l'unico intervento da farsi.
Mi auguro anch'io che il sistema non abbia risentito di quell'ammasso di porcheria che ti sei tirato dentro.
DetectX è un ottimo prodotto, vivamente consigliato nel nostro Forum.
Non sbaglia e dobbiamo per forza appoggiarsi a questa app.
Ancora buon lavoro e tienimi al corrente di eventuali imprevisti.

EDIT:
per non appesantire troppo con tanti post, ti scrivo il seguito del lavoro.
Quando sei arrivato alla fine della lista, è necessario riavviare il Mac.
Poi devi eseguire ancora DetectX per verificare che tutto sia stato cancellato o eliminato.
Se non troverà più nulla ti verrà fuori questa finestra che indica che tutto è OK

: Schermata 2021-07-08 alle 14.07.14.png (97.45 KiB) Visto 915 volte

Ma questo sarà stato solo il primo step.
Dovremo poi passare al secondo step.

Ruggy-1 · Messaggio da **Ruggy-1** » ven, 09 lug 2021 19:43

Ciao visto che sei ancora online volevo chiederti se questo si può cancellare tranquillamente.

/Library/ApplicationSupport

Mi cancella tutta la cartella???

Ruggy-1 · Messaggio da **Ruggy-1** » ven, 09 lug 2021 19:49

ok, ora sto finendo poi devo uscire. Continuo domani se magari sei ancora disponibile. Per ora ..very very thanks

Alberto.G · Messaggio da **Alberto.G** » ven, 09 lug 2021 19:51

Ruggy-1 ha scritto: ↑
ven, 09 lug 2021 19:43
Ciao visto che sei ancora online volevo chiederti se questo si può cancellare tranquillamente.

/Library/ApplicationSupport

Mi cancella tutta la cartella???

SI' vai tranquillo, è una cartella "falsa" che è stata creata da uno o più programmi pirati.
Quella vera di Sistema è scritta così
/Library/Application Support (con uno spazio in mezzo)

Ruggy-1 · Messaggio da **Ruggy-1** » ven, 09 lug 2021 19:55

fatto tutto, all'avvio mi sembra anche più reattivo !!!!

Se domani giri da queste parti e vuoi dirmi il secondo step io ci sono.
Grazie Buona serata

Alberto.G · Messaggio da **Alberto.G** » ven, 09 lug 2021 20:06

Ruggy-1 ha scritto: ↑
ven, 09 lug 2021 19:55
fatto tutto, all'avvio mi sembra anche più reattivo !!!!

Se domani giri da queste parti e vuoi dirmi il secondo step io ci sono.
Grazie Buona serata

Ottima notizia, penso che siamo su una buona strada!
Domani mattina dovrò andare a fare la spesa... purtroppo dobbiamo, noi mortali, anche mangiare!
A parte la battuta, credo al pomeriggio o forse prima.
Io entro qui e ti invio il messaggio.

Alberto.G · Messaggio da **Alberto.G** » sab, 10 lug 2021 10:04

Ruggy-1 ha scritto: ↑
ven, 09 lug 2021 19:55
fatto tutto, all'avvio mi sembra anche più reattivo !!!!

Dopo il riavvio, hai lanciato ancora DetectX?
Se sì, è venuta fuori la finestra con l’OK?
Se sì, siamo già alla fine del 1° step.

Posso già ora dire cosa intendevo per il 2° step.
Si tratta di analizzare il contenuto del report di PROFILE.
Quello che ti dava problemi di trasmissione.
Rileggi bene le indicazioni che ti ho dato nel mio primo post.
Sono tutte da seguire alla lettera.
Dove sbagliavi?
Una volta copiato (o portato il report, che è lunghissimo, dentro il tuo messaggio), devi cancellare tutte le righe scritte dopo il Paragrafo RUNNING PROCESSES.
Sono ininfluenti in questa fase di analisi e valutazione del Mac!
Facendo così, accorci quasi di 2/3 il report e la trasmissione del messaggio non si blocca.

Ruggy-1 · Messaggio da **Ruggy-1** » sab, 10 lug 2021 14:08

Ciao ecco i dati:

Codice: Seleziona tutto

Timestamp (59): Sat Jul 10 14:04:10 2021
DetectX Swift v1.0971

macOS: Version 10.16 (Build 20F71)
File System: apfs
Temp: The thermal state is within normal limits.

Boot time: Sat Jul 10 14:03:27 2021
Uptime: 43 secs, 1 user

Spotlight status for /:
	Indexing enabled. 
System Integrity Protection status: enabled.
Gatekeeper status: enabled for App Store and identified developers.
FileVault is Off.

Internet:	Not Reachable


    Hardware Overview:

      Model Name: iMac
      Model Identifier: iMac17,1
      Processor Name: Quad-Core Intel Core i5
      Processor Speed: 3,2 GHz
      Number of Processors: 1
      Total Number of Cores: 4
      L2 Cache (per Core): 256 KB
      L3 Cache: 6 MB
      Memory: 24 GB
      System Firmware Version: 429.120.4.0.0
      SMC Version (system): 2.33f12
      Provisioning UDID: EB42F4D8-05BA-5EED-BD75-138D1435E357



  Sharing Preferences:

	File Sharing:  Off
	Screen Sharing:  Off
	Remote Management:  Off
	Back To My Mac:  Off
	Remote Login:  Off
	Remote Apple Events:  Off


3rd Party Kexts (loaded):

	com.waves.driver.soundgrid


 $PATH:

PATH=/usr/bin:/bin:/usr/sbin:/sbin


/etc/paths:
	/usr/local/bin
	/usr/bin
	/bin
	/usr/sbin
	/sbin

/etc/paths.d/:

~/.bash_profile:
		~/bin
	$PATH

~/.bashrc:

~/.bash_login:

~/.profile:

~/.bash_logout:


 User Launchd processes:

PID	Status	Label
-	0	com.google.keystone.user.xpcservice
474	0	com.adobe.GC.AGM
-	78	PEHgN
-	0	com.uncombated.xy.app
-	78	com.predonate.app
-	0	com.openssh.ssh-agent
547	0	application.com.adobe.CCXProcess.12900142308.12900142314
466	0	com.motu.MOTULauncher
489	0	/Library/tagilite-pathology/aqtIWMye/VtikyeWP/vermorel
-	78	com.hp.printerAgent
-	78	kD8hj
477	0	QuicklookPI
-	0	com.adobe.AAM.Scheduler-1.0
567	0	application.com.sqwarq.DetectX-Swift.12901352376.12901352629
-	0	rp2
-	0	com.oracle.java.Java-Updater
-	0	com.sociocultural.app
-	78	dpR5r
468	0	com.orderedbytes.ControllerMateHelper
-	0	com.desmidiologist
-	0	com.adobe.ccxprocess
-	78	com.google.keystone.user.agent
-	0	tguWy
-	0	fDRXX


 System Launchd processes:

0      - 	com.adobe.acc.installer.v2
0     78 	/Library/kGmNazGt/kGmNazGt.app/Contents/MacOS/kGmNazGt
280      - 	com.vix.cron
0      0 	com.solmizate.app
100      - 	Adobe_Genuine_Software_Integrity_Service
0      0 	/Library/iqxukgppfaas/iqxukgppfaas
0      - 	org.cups.cupsd
861      0 	xw2Sc
0      - 	com.pomeridian.app
0      - 	com.oracle.java.Helper-Tool
0      0 	/Library/ilukplcynaly/ilukplcynaly
0     78 	com.TechnicalDaemon.app



 User Login Items:
 



 /Library/LaunchDaemons:

	com.TechnicalDaemon.plist
		-> Program: /Library/TechnicalDaemon/TechnicalDaemon.app/Contents/MacOS/TechnicalDaemon
	
	com.adobe.agsservice.plist
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/AGSService
	
	com.kGmNazGt.plist
	
	com.ilukplcynaly.plist
	
	com.adobe.adobeupdatedaemon.plist
		-> Program: /Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon
	
	com.solmizate.plist
		--> Program Arguments: /Library/solmizate/solmizate.app/Contents/MacOS/solmizate
	
	com.xw2Sc.plist
		-> Program: /Library/iNt7c/CFHiT
	
	com.apple.installer.osmessagetracing.plist
		--> Program Arguments: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer
	
	com.adobe.acc.installer.v2.plist
		-> Program: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2
		--> Program Arguments: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2
	
	com.iqxukgppfaas.plist
	
	com.oracle.java.Helper-Tool.plist
		--> Program Arguments: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
	
	com.pomeridian.plist
		-> Program: /Library/pomeridian/pomeridian.app/Contents/MacOS/pomeridian
	



 /Library/LaunchAgents:

	com.uncombated.xy.plist
		-> Program: /Library/uncombated.xy/uncombated.xy.app/Contents/MacOS/uncombated.xy
	
	com.PEHgN.plist
		-> Program: /Library/search.amp/HRnqV
	
	com.orderedbytes.ControllerMateHelper.plist
		-> Program: /Library/Application Support/ControllerMate/ControllerMateHelper.app/Contents/MacOS/ControllerMateHelper
	
	com.adobe.AdobeCreativeCloud.plist
		-> Program: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud
		--> Program Arguments: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud
		--> Program Arguments: --showwindow=false
		--> Program Arguments: --onOSstartup=true
	
	com.rp2.plist
		-> Program: /Library/rp2/rp2
	
	com.adobe.ccxprocess.plist
		--> Program Arguments: /usr/bin/open
		--> Program Arguments: -a
		--> Program Arguments: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app
	
	com.kD8hj.plist
		-> Program: /Library/search.amp/3jgWi
	
	com.adobe.GC.AGM.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/AGMService
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/AGMService
		--> Program Arguments: -mode=logon
	
	com.motu.MOTULauncher.plist
		--> Program Arguments: /Library/Application Support/MOTU/MOTUFireWireConsoleLauncher.app/Contents/MacOs/MOTUFireWireConsoleLauncher
	
	com.oracle.java.Java-Updater.plist
		--> Program Arguments: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater
		--> Program Arguments: -bgcheck
	
	com.adobe.AAM.Updater-1.0.plist
		-> Program: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: -mode=logon
	
	com.adobe.GC.Invoker-1.0.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: -mode=logon
	
	com.vermorel.plist
	



 ~/Library/LaunchAgents:

	com.QuicklookPI.plist
		-> Program: /Users/rujs/Library/FileFinder/QuicklookPI/QuicklookPI
	
	com.google.keystone.xpcservice.plist
		--> Program Arguments: /Users/rujs/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
		--> Program Arguments: -runMode
		--> Program Arguments: xpchost
	
	com.fDRXX.plist
		-> Program: /Users/rujs/Library/rNBzW/kYWFK
	
	com.adobe.AAM.Updater-1.0.plist.save
	
	com.google.keystone.agent.plist
		--> Program Arguments: /Users/rujs/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
		--> Program Arguments: -runMode
		--> Program Arguments: ifneeded
	
	com.rp2.plist
		-> Program: /Users/rujs/Library/rp2/rp2
	
	com.sociocultural.plist
		--> Program Arguments: /Users/rujs/Library/sociocultural/sociocultural.app/Contents/MacOS/sociocultural
	
	com.predonate.plist
		--> Program Arguments: /Users/rujs/Library/predonate/predonate.app/Contents/MacOS/predonate
	
	com.apple.FolderActions.folders.plist
		-> Program: /usr/bin/osascript
		--> Program Arguments: osascript
		--> Program Arguments: -e
		--> Program Arguments: tell application "Folder Actions Dispatcher" to tick
	
	com.adobe.AAM.Updater-1.0.plist
		-> Program: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
		--> Program Arguments: -mode=scheduled
	
	com.desmidiologist.plist
		--> Program Arguments: /Users/rujs/Library/Application Support/com.desmidiologist/desmidiologist
	
	com.apple.FolderActions.enabled.plist
		-> Program: /System/Library/CoreServices/Folder Actions Dispatcher.app/Contents/MacOS/Folder Actions Dispatcher
	
	com.adobe.GC.Invoker-1.0.plist
		-> Program: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
		--> Program Arguments: -mode=scheduled
	
	com.tguWy.plist
		-> Program: /Users/rujs/Library/GXnN2/WhScT
	
	com.dpR5r.plist
		-> Program: /Users/rujs/Library/search.amp/mO2mH
	
	com.hp.printerAgent.plist
		-> Program: /Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent
		--> Program Arguments: /Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent
	
	com.freenet.startup.plist
		--> Program Arguments: /Applications/Freenet/run.sh
		--> Program Arguments: start
	

 User Crontab:

	6 * * * * /Users/rujs/Library/acrosarcum.at/acrosarcum.at cr



 /etc:

	rc.common
	php.ini.default-5.2-previous~orig
	bashrc_Apple_Terminal
	zshrc_Apple_Terminal
	pear.conf-previous
	hosts_bkup
	php-NOTICE-PLANNED-REMOVAL.txt
	certificates / .. children: 0
	bashrc
	krb5.keytab~orig
	zshrc
	authorization.deprecated
	rc.netboot
	localtime~orig
	efax.rc~previous
	php.ini.default-5.2-previous
	aliases
	uucp / .. children: 3
	zprofile

 / $Root:

	.file
	.VolumeIcon.icns
	opt / .. children: 0

 ~/ $Home:

	.Pavtube / .. children: 1
	.config / .. children: 6
	Music / .. children: 12
	.kodi / .. children: 1
	.jmf-resource
	.SFCore / .. children: 2
	.DownloadManager / .. children: 3
	.90EC09GC-EECG-3753-87C1-75ECBC87DC6C
	.CFUserTextEncoding
	bin / .. children: 3
	.vnc / .. children: 1
	iCloud Drive (Archivio) / .. children: 2
	.adobe / .. children: 1
	.mime.types
	.local / .. children: 1
	Creative Cloud Files / .. children: 2
	Pictures / .. children: 13
	.d5w1rc
	Desktop / .. children: 99
	Library / .. children: 123
	.oracle_jre_usage / .. children: 3
	.android / .. children: 3
	.cups / .. children: 1
	Sites / .. children: 5
	.bash_sessions / .. children: 44
	.mplayer / .. children: 1
	Public / .. children: 4
	Users / .. children: 1
	.aspera / .. children: 1
	Movies / .. children: 20
	Applications / .. children: 2
	.Trash / .. children: 15
	Documents / .. children: 67
	.mailcap
	.HFSExtensions
	dwhelper / .. children: 1
	.swt / .. children: 1
	WarThunderLauncherLogs / .. children: 4
	.mono / .. children: 1
	.bash_profile
	.dvdcss / .. children: 58
	Downloads / .. children: 15
	.bash_history
	.viminfo



 ~/Library:

	Receipts / .. children: 2
	Daneflower / .. children: 1
	Address Book Plug-Ins / .. children: 4
	Mozilla / .. children: 1
	Documentation / .. children: 1
	.clappy
	studentd / .. children: 3
	bc20 / .. children: 2
	PDF Services / .. children: 1
	Staging / .. children: 0
	HomeKit / .. children: 12
	flopwing_inaffable / .. children: 1
	ApplicationSupport / .. children: 1
	TuneUpMedia / .. children: 2
	Translation / .. children: 1
	Images / .. children: 1
	Trial / .. children: 4
	Extensis / .. children: 1
	UIKitSystem / .. children: 1
	Google / .. children: 1
	.c3sh4R
	Recent Servers / .. children: 2
	FileFinder / .. children: 11
	.f29011ea
	Family / .. children: 1
	.pper
	.c4R
	com.apple.icloud.searchpartyd / .. children: 5
	Phones / .. children: 0
	SysTest / .. children: 1
	TestDate / .. children: 1
	HTTPStorages / .. children: 7
	sociocultural / .. children: 1
	InputManagers / .. children: 1
	DataDeliveryServices / .. children: 1
	PhotoshopCrashes / .. children: 0
	FrontBoard / .. children: 3
	rNBzW / .. children: 5
	Icons / .. children: 0
	GL / .. children: 145
	instance
	utilityData / .. children: 0
	FileSync / .. children: 1
	rp2 / .. children: 5
	ContainerManager / .. children: 4
	ScreenRecordings / .. children: 3
	Fonts Disabled / .. children: 0
	Contextual Menu Items / .. children: 1
	Frameworks / .. children: 0
	PersonalizationPortrait / .. children: 7
	.unreal
	GXnN2 / .. children: 2
	Reminders / .. children: 2
	GL3 / .. children: 273
	Technical / .. children: 1
	Widgets / .. children: 1
	Thunderbird / .. children: 6
	acrosarcum.at / .. children: 0
	.focGw3
	SavedDataFiles / .. children: 2



 ~/Library/Application Support:

	Firefox / .. children: 5
	Antares / .. children: 1
	BackupTrans / .. children: 1
	Librarian / .. children: 0
	com.apple.sbd / .. children: 1
	Logitech / .. children: 1
	com.apple.replayd / .. children: 0
	Native Instruments / .. children: 1
	SyncServices / .. children: 1
	com.apple.kvs / .. children: 1
	RealNetworks / .. children: 3
	com.iskysoft.PDFEditor6.Professional / .. children: 6
	Mozilla / .. children: 1
	com.apple.transparencyd / .. children: 5
	Senuti / .. children: 1
	Disc Cover 3 RE / .. children: 3
	com.apple.touristd / .. children: 33
	DiskImages / .. children: 1
	EasyFind / .. children: 0
	iLifePageLayout / .. children: 1
	.CCH_NGLW_Lock
	CoreParsec / .. children: 0
	HP / .. children: 1
	BeLight Software / .. children: 3
	Sonalksis / .. children: 19
	CDSpinDoctor / .. children: 1
	ClipGrab / .. children: 1
	Wondershare Filmora / .. children: 1
	Aiseesoft Studio / .. children: 1
	com.apple.exchangesync / .. children: 0
	Cyberduck / .. children: 3
	Animoji / .. children: 3
	com.apple.akd / .. children: 1
	Digiarty / .. children: 1
	qBittorrent / .. children: 5
	redsn0w / .. children: 0
	MobileSync / .. children: 2
	AppStore / .. children: 0
	Roxio / .. children: 2
	OpenVR / .. children: 0
	com.apple.QuickLook / .. children: 1
	ProApps / .. children: 4
	.affiliate_id
	IK Multimedia / .. children: 1
	Apple Qmaster / .. children: 1
	uTorrent / .. children: 29
	Google / .. children: 4
	Microsoft / .. children: 2
	SPL Plug-Ins / .. children: 1
	com.predonate / .. children: 1
	com.sociocultural / .. children: 1
	Oracle / .. children: 1
	com.wondershare.Installer / .. children: 1
	.CCH_UPI_Lock
	dmd / .. children: 0
	com.SysTest / .. children: 1
	Rogue Amoeba / .. children: 1
	com.ReplayInfo / .. children: 0
	Samsung / .. children: 1
	iMovie / .. children: 3
	iGetter / .. children: 2
	Java / .. children: 3
	World of Warships / .. children: 4
	Soundtrack Pro / .. children: 2
	Motion / .. children: 1
	com.apple.NewDeviceOutreach / .. children: 1
	Inkscape / .. children: 2
	MOTU / .. children: 1
	CEF / .. children: 1
	Pixelmator / .. children: 3
	.89294EC721B25AD6.lib
	VLC / .. children: 1
	TrustedPeersHelper / .. children: 0
	Spectrasonics / .. children: 3
	Adobe / .. children: 28
	MediaHuman / .. children: 1
	Canon Utilities / .. children: 1
	org.videolan.vlc / .. children: 3
	.89294EC721B25AD5.lib
	TuneUp_Support / .. children: 1
	.ACCC_Lock
	Final Cut Pro / .. children: 1
	com.operasoftware.Opera / .. children: 71
	Garmin / .. children: 1
	com.syncservice / .. children: 1
	NotificationCenter / .. children: 1
	CrossOver / .. children: 7
	Aspera / .. children: 3
	com.sqwarq.DetectX-Swift / .. children: 4
	System Preferences / .. children: 0
	.89294EC721B25AD4.lib
	Aperture / .. children: 0
	com.apple.ContextStoreAgent / .. children: 1
	com.Daneflower / .. children: 1
	com.nordln / .. children: 1
	FileProvider / .. children: 3
	ZOOM Guitar Lab.settings
	com.wondershare.filmora / .. children: 1
	VMware Fusion / .. children: 2
	.89294EC721B25AD3.lib
	ControllerMate / .. children: 1
	eTeks / .. children: 1
	Blops / .. children: 8
	u-he / .. children: 1
	PPHelper / .. children: 5
	WAF / .. children: 4
	com.apple.AMPLibraryAgent / .. children: 2
	.89294EC721B25AD2.lib
	Preview / .. children: 0
	Lexicon / .. children: 1
	iskysoft / .. children: 3
	com.desmidiologist / .. children: 1
	Soundtrack Pro.old / .. children: 3
	DVD Player / .. children: 1
	com.mactrackerapp.Mactracker / .. children: 1
	iDVD / .. children: 1
	Mac2TiVo / .. children: 1
	ZOOM GuitarLab.settings
	com.TestDate / .. children: 1
	fxpansion / .. children: 3
	OpenOffice.org / .. children: 1
	com.syncserviced / .. children: 1
	Vuze / .. children: 54
	iSerial Reader / .. children: 3
	com.apple.avfoundation / .. children: 1
	transparencyd / .. children: 0
	WaveBurner / .. children: 1
	Seas0nPass / .. children: 0
	Helper / .. children: 0
	Addictive Drums / .. children: 7
	.LBS_Lock
	Plugin Alliance / .. children: 1
	syncdefaultsd / .. children: 0
	Wondershare Filmora9 / .. children: 25
	.89294EC706385595.lib
	eSellerate / .. children: 0
	JREInstaller / .. children: 1
	GarageBand / .. children: 3
	MindVision / .. children: 1
	TuneUpMedia_Gecko / .. children: 11
	iWeb / .. children: 1
	Eltima Software / .. children: 2
	.ADCS_Lock



 ~/Library/Safari/Extensions:

	*-- Could not read Folder --*



 ~/Library/Internet Plug-Ins:

	Aspera Web 3.5.2.95060.plugin
	iGetter Plugin.plugin
	Picasa.plugin
	RealPlayer Plugin.plugin



 /Users/Shared:

	.iSkysoftiMedia Converter
	Previously Relocated Items 8 / .. children: 3
	Previously Relocated Items 1 / .. children: 3
	Previously Relocated Items 6 / .. children: 3
	adi / .. children: 3
	Previously Relocated Items 7 / .. children: 3
	SC Info / .. children: 1
	Previously Relocated Items 9 / .. children: 3
	Previously Relocated Items 15 / .. children: 3
	Previously Relocated Items 12 / .. children: 3
	Previously Relocated Items 13 / .. children: 3
	Previously Relocated Items 14 / .. children: 3
	Office Mac 2011 / .. children: 1
	Library / .. children: 1
	Relocated Items / .. children: 3
	Previously Relocated Items 5 / .. children: 3
	Previously Relocated Items 2 / .. children: 3
	VCBACK
	Adobe / .. children: 1
	Previously Relocated Items 3 / .. children: 3
	Previously Relocated Items 4 / .. children: 3
	.snap.bmp
	FILE CONDIVISI / .. children: 1
	Previously Relocated Items 11 / .. children: 3
	.YouTubeDownloader
	.AimerDVDRipper
	Waves / .. children: 1
	Previously Relocated Items 10 / .. children: 3
	Previously Relocated Items / .. children: 4
	Canon_Inc_IC / .. children: 2
	.DD071DB1-0DFF-4846-98B2-86BBABB8CBB9
	.HFSExtensions
	AdobeGCData / .. children: 2
	.iSkysoftVideoConverter
	.com.hp.Installer.plist



 /Applications:

	Spark.app
	World of Tanks Blitz.app
	Adblock Plus.app
	VLC.app
	HandBrake.app
	Adobe XD / .. children: 3
	SoundToys / .. children: 4
	.install4j / .. children: 53
	qbittorrent.app
	EasyFind.app
	Sky Gamblers - Storm Raiders 2.app
	Extractor.app
	Android File Transfer.app
	Adobe Photoshop 2020 / .. children: 8
	OnyX.app
	ClipGrab.app
	Adobe Creative Cloud / .. children: 4
	PDF to Text Converter Expert.app
	DetectX Swift.app
	Joystick Doctor.app
	Samsung / .. children: 1
	PPHelper.app
	iZotope / .. children: 5
	Thunderbird.app
	CueMix FX.app
	MOTU Audio Setup.app
	Final Cut Pro 2.app
	Ampero Editor.app
	RAR Extractor - WinRAR ZIP 7Z.app
	Adobe Lightroom Classic / .. children: 3
	iReal Pro.app
	Elmedia Video Player.app
	TankWarfare.app
	Toast 17 Titanium / .. children: 8
	Firefox.app
	Plugin Alliance / .. children: 36
	MOTU SMPTE Setup.app
	Sweet Home 3D.app
	PDF Expert.app
	Logic Pro X.app
	YouTube to MP3.app
	.MySCMServerInfo
	Wondershare Filmora.app



 /Library:

	Apple / .. children: 3
	settings.dat
	Mozilla / .. children: 1
	OSAnalytics / .. children: 2
	iNt7c / .. children: 2
	StagedDriverExtensions / .. children: 0
	.Dc3r
	Google / .. children: 1
	FileFinder / .. children: 0
	InstallerSandboxes / .. children: 2
	.c4R
	KernelCollections / .. children: 2
	uncombated.xy / .. children: 0
	cycadaceous.zt / .. children: 1
	DriverExtensions / .. children: 0
	backup.zip
	ApplicationContents / .. children: 2
	InputManagers / .. children: 1
	ApplicationMor / .. children: 0
	Automator / .. children: 95
	solmizate / .. children: 1
	User Template / .. children: 41
	pomeridian / .. children: 1
	UpdatesMac / .. children: 0
	tagilite-pathology / .. children: 1
	rp2 / .. children: 5
	iqxukgppfaas / .. children: 1
	Fonts Disabled / .. children: 11
	ApplicationaContents / .. children: 2
	.unreal
	SystemExtensions / .. children: 1
	ilukplcynaly / .. children: 1
	.focGw3
	SavedDataFiles / .. children: 2
	pfutil



 /Library/Application Support:

	.prvdat0c
	Propellerhead Software / .. children: 1
	Native Instruments / .. children: 16
	.prvdat0d
	Developer / .. children: 1
	Soundtoys / .. children: 12
	Mozilla / .. children: 1
	com.pomeridian / .. children: 1
	MelodyneRewireDevice
	Hewlett-Packard / .. children: 14
	.prvdat0b
	Avid / .. children: 1
	ReWire
	Hotone / .. children: 2
	.prvdat4
	.prvdat3
	hp / .. children: 1
	Celemony / .. children: 1
	BeLight Software / .. children: 1
	.Macrovision11.03.005.uct2
	Electroacoustics Toolbox / .. children: 1
	iLife / .. children: 1
	.prvdat2
	.prvdat5
	Roxio / .. children: 3
	Macromedia / .. children: 4
	IK Multimedia / .. children: 6
	Apple Qmaster / .. children: 15
	Microsoft / .. children: 5
	Oracle / .. children: 1
	FLEXnet Publisher / .. children: 1
	Samsung / .. children: 1
	Soundtrack Pro / .. children: 1
	CleanApp / .. children: 1
	com.solmizate / .. children: 1
	Digidesign / .. children: 2
	MOTU / .. children: 1
	Fitbit Connect / .. children: 7
	ProMediaIO / .. children: 1
	Adobe / .. children: 29
	iZotope / .. children: 4
	Final Cut Studio / .. children: 1
	.prvdat0a
	PACE Anti-Piracy / .. children: 7
	iPhoto / .. children: 6
	.prvdat7
	.prvdat9
	.prvdat8
	VMware Fusion / .. children: 1
	.631E99FF
	ControllerMate / .. children: 1
	.prvdat6
	.prvdat1
	.prvdata
	Canon_Inc_IC / .. children: 2
	Lexicon / .. children: 1
	EyeTV / .. children: 1
	Wave Arts / .. children: 5
	iDVD / .. children: 1
	iLifeSlideshow / .. children: 1
	WaveBurner / .. children: 3
	Addictive Drums / .. children: 10
	regid.1986-12.com.adobe / .. children: 1
	.Macrovision11.5.0.1 build 57427.uct2
	SpectrasonicsP / .. children: 1
	.prvdat
	VMware / .. children: 2



 /Library/Extensions:

	SoundGrid.kext
	SoundflowerSigned.kext
	IKStealthPedalDriver.kext
	AppleMobileDevice.kext
	RoxioBluRaySupport.kext
	MOTUMicroBookAudio.kext
	ControllerMate.kext
	UsbEthernetGadget.kext
	ApowersoftAudioDevice.kext
	PACESupportFamily.kext
	MOTUPCIAudio.kext
	USBGenericPrinterClass.kext
	hp_io_enabler_compound.kext
	IKStompIO1Driver.kext
	MOTUFireWireAudio.kext



 /Library/Internet Plug-Ins:

	Flip4Mac WMV Plugin.webplugin
	AdobeAAMDetect.plugin
	AmazonMP3DownloaderPlugin101749.plugin
	SharePointBrowserPlugin.plugin
	Silverlight.plugin
	Flip4Mac WMV Plugin.plugin
	Google Earth Web Plug-in.plugin
	SharePointWebKitPlugin.webplugin
	FolxNetscapePlugIn.plugin
	JavaAppletPlugin.plugin
	iPhotoPhotocast.plugin



 /Library/Managed Preferences:

	*-- Folder doesn't exist or is inaccessible --*



 /Library/PrivilegedHelperTools:

	com.microsoft.office.licensing.helper
	com.freemacsoft.appcleanerd
	com.adobe.acc.installer.v2



 /Library/ScriptingAdditions:

	Adobe Unit Types.osax



 /Library/StartupItems:

	



 /Library/Updates:

	ProductMetadata.plist



Top Processes: 

%CPU	PID	COMMAND	
22.1 	0		kernel_task 
19.4 	72		MRT 
18.5 	561		mdsync 
13.2 	490		MRT 
12.5 	664		suggestd 
8.9		469		CalendarAgent 
8.9		201		trustd 
6.5		144		syspolicyd 
6.0		142		WindowServer 
4.1		235		airportd

amoeba · Messaggio da **amoeba** » sab, 10 lug 2021 14:29

Serve una mano?

Immagino che il tuo user si chiami rujs...

User Launchd processes:

PID Status Label
- 0 com.google.keystone.user.xpcservice
474 0 com.adobe.GC.AGM
- 78 PEHgN
- 0 com.uncombated.xy.app
- 78 com.predonate.app
- 0 com.openssh.ssh-agent
547 0 application.com.adobe.CCXProcess.12900142308.12900142314
466 0 com.motu.MOTULauncher
489 0 /Library/tagilite-pathology/aqtIWMye/VtikyeWP/vermorel
- 78 com.hp.printerAgent
- 78 kD8hj
477 0 QuicklookPI
- 0 com.adobe.AAM.Scheduler-1.0
567 0 application.com.sqwarq.DetectX-Swift.12901352376.12901352629
- 0 rp2
- 0 com.oracle.java.Java-Updater
- 0 com.sociocultural.app
- 78 dpR5r
468 0 com.orderedbytes.ControllerMateHelper
- 0 com.desmidiologist
- 0 com.adobe.ccxprocess
- 78 com.google.keystone.user.agent
- 0 tguWy
- 0 fDRXX

System Launchd processes:

0 - com.adobe.acc.installer.v2
0 78 /Library/kGmNazGt/kGmNazGt.app/Contents/MacOS/kGmNazGt
280 - com.vix.cron
0 0 com.solmizate.app
100 - Adobe_Genuine_Software_Integrity_Service
0 0 /Library/iqxukgppfaas/iqxukgppfaas
0 - org.cups.cupsd
861 0 xw2Sc
0 - com.pomeridian.app
0 - com.oracle.java.Helper-Tool
0 0 /Library/ilukplcynaly/ilukplcynaly
0 78 com.TechnicalDaemon.app

User Login Items:

/Library/LaunchDaemons:

com.TechnicalDaemon.plist
-> Program: /Library/TechnicalDaemon/TechnicalDaemon.app/Contents/MacOS/TechnicalDaemon

com.adobe.agsservice.plist
--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/AGSService

com.kGmNazGt.plist

com.ilukplcynaly.plist

com.adobe.adobeupdatedaemon.plist
-> Program: /Library/Application Support/Adobe/Adobe Desktop Common/ElevationManager/AdobeUpdateDaemon

com.solmizate.plist
--> Program Arguments: /Library/solmizate/solmizate.app/Contents/MacOS/solmizate

com.xw2Sc.plist
-> Program: /Library/iNt7c/CFHiT

com.apple.installer.osmessagetracing.plist
--> Program Arguments: /System/Library/PrivateFrameworks/OSInstaller.framework/Resources/OSMessageTracer

com.adobe.acc.installer.v2.plist
-> Program: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2
--> Program Arguments: /Library/PrivilegedHelperTools/com.adobe.acc.installer.v2

com.iqxukgppfaas.plist

com.pomeridian.plist
-> Program: /Library/pomeridian/pomeridian.app/Contents/MacOS/pomeridian

/Library/LaunchAgents:

com.uncombated.xy.plist
-> Program: /Library/uncombated.xy/uncombated.xy.app/Contents/MacOS/uncombated.xy

com.PEHgN.plist
-> Program: /Library/search.amp/HRnqV

com.orderedbytes.ControllerMateHelper.plist
-> Program: /Library/Application Support/ControllerMate/ControllerMateHelper.app/Contents/MacOS/ControllerMateHelper

com.adobe.AdobeCreativeCloud.plist
-> Program: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud
--> Program Arguments: /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud
--> Program Arguments: --showwindow=false
--> Program Arguments: --onOSstartup=true

com.rp2.plist
-> Program: /Library/rp2/rp2

com.adobe.ccxprocess.plist
--> Program Arguments: /usr/bin/open
--> Program Arguments: -a
--> Program Arguments: /Applications/Utilities/Adobe Creative Cloud Experience/CCXProcess/CCXProcess.app

com.kD8hj.plist
-> Program: /Library/search.amp/3jgWi

com.vermorel.plist

~/Library/LaunchAgents:

com.fDRXX.plist
-> Program: /Users/rujs/Library/rNBzW/kYWFK

com.rp2.plist
-> Program: /Users/rujs/Library/rp2/rp2

com.sociocultural.plist
--> Program Arguments: /Users/rujs/Library/sociocultural/sociocultural.app/Contents/MacOS/sociocultural

com.predonate.plist
--> Program Arguments: /Users/rujs/Library/predonate/predonate.app/Contents/MacOS/predonate

com.apple.FolderActions.folders.plist
-> Program: /usr/bin/osascript
--> Program Arguments: osascript
--> Program Arguments: -e
--> Program Arguments: tell application "Folder Actions Dispatcher" to tick

com.adobe.AAM.Updater-1.0.plist
-> Program: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
--> Program Arguments: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility
--> Program Arguments: -mode=scheduled

com.desmidiologist.plist
--> Program Arguments: /Users/rujs/Library/Application Support/com.desmidiologist/desmidiologist

com.apple.FolderActions.enabled.plist
-> Program: /System/Library/CoreServices/Folder Actions Dispatcher.app/Contents/MacOS/Folder Actions Dispatcher

com.adobe.GC.Invoker-1.0.plist
-> Program: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
--> Program Arguments: /Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility
--> Program Arguments: -mode=scheduled

com.tguWy.plist
-> Program: /Users/rujs/Library/GXnN2/WhScT

com.dpR5r.plist
-> Program: /Users/rujs/Library/search.amp/mO2mH

com.hp.printerAgent.plist
-> Program: /Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent
--> Program Arguments: /Library/Printers/hp/laserjet/P1100_1560_1600Series/printerAgent

com.freenet.startup.plist
--> Program Arguments: /Applications/Freenet/run.sh
--> Program Arguments: start

User Crontab:

6 * * * * /Users/rujs/Library/acrosarcum.at/acrosarcum.at cr

/Applications:

Spark.app
World of Tanks Blitz.app
Adblock Plus.app
VLC.app
HandBrake.app
Adobe XD / .. children: 3
SoundToys / .. children: 4
.install4j / .. children: 53
qbittorrent.app
EasyFind.app

/Library:

Apple / .. children: 3
settings.dat
Mozilla / .. children: 1
OSAnalytics / .. children: 2
iNt7c / .. children: 2
StagedDriverExtensions / .. children: 0
.Dc3r
Google / .. children: 1
FileFinder / .. children: 0
InstallerSandboxes / .. children: 2
.c4R
KernelCollections / .. children: 2
uncombated.xy / .. children: 0
cycadaceous.zt / .. children: 1
DriverExtensions / .. children: 0
backup.zip
ApplicationContents / .. children: 2
InputManagers / .. children: 1
ApplicationMor / .. children: 0
Automator / .. children: 95
solmizate / .. children: 1
User Template / .. children: 41
pomeridian / .. children: 1
UpdatesMac / .. children: 0
tagilite-pathology / .. children: 1
rp2 / .. children: 5
iqxukgppfaas / .. children: 1
Fonts Disabled / .. children: 11
ApplicationaContents / .. children: 2
.unreal
SystemExtensions / .. children: 1
ilukplcynaly / .. children: 1
.focGw3
SavedDataFiles / .. children: 2
pfutil

redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Oggetto del messaggio: Re: redirect Safari

Chi c’è in linea