AppOm

[carl0ne]

salve, ho bisogno di aiuto .
qualcuno sa cos è AppOm che mi usa tutta la memoria del macbook pro e me lo inchioda? lo si vede da monitoraggio attività e lo devo chiudere con l uscita forzata per poter fare qualsiasi operazione .
Se lo cerco nel mac non trovo niente con quel nome e quindi non so come eliminarlo definitivamente .
ho usato Etrecheck per una scansione , qui sotto trascrivo la sua diagnosi:
EtreCheck version: 3.4.6 (460)
Report generated 2017-12-06 16:10:10
Download EtreCheck from https://etrecheck.com" onclick="window.open(this.href);return false;
Runtime: 4:19
Performance: Good

Click the [Lookup] links for more information from Apple Support Communities.
Click the [Details] links for more information about that line.
Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.
Click the [Clean up] link to delete unused files.

Problem: No problem - just checking

Hardware Information: ⓘ
MacBook Pro (13-inch, Mid 2010)
[Technical Specifications] - [User Guide] - [Warranty & Service]
MacBook Pro - model: MacBookPro7,1
1 2.4 GHz Intel Core 2 Duo (Duo) CPU: 2-core
4 GB RAM Upgradeable - [Instructions]
BANK 0/DIMM0
2 GB DDR3 1067 MHz ok
BANK 1/DIMM0
2 GB DDR3 1067 MHz ok
Handoff/Airdrop2: not supported
Wireless: en1: 802.11 a/b/g/n
Battery: Health = Normal - Cycle count = 491

Video Information: ⓘ
NVIDIA GeForce 320M - VRAM: 256 MB
Color LCD 1280 x 800

Disk Information: ⓘ
Hitachi HTS545025B9SA02 disk0: (250,06 GB) (Rotational)
[Show SMART report]
(disk0s1) <not mounted> [EFI]: 210 MB
(disk0s2) <not mounted> [CoreStorage Container]: 249.20 GB
(disk0s3) <not mounted> [Recovery]: 650 MB

HL-DT-ST DVDRW GS23N ()

USB Information: ⓘ
EHCI Root Hub Simulation
Apple Inc. Built-in iSight
EHCI Root Hub Simulation
Apple Internal Memory Card Reader
OHCI Root Hub Simulation
OHCI Root Hub Simulation
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Computer, Inc. IR Receiver
Apple Inc. Apple Internal Keyboard / Trackpad

Virtual disks: ⓘ
Macintosh HD (disk1 - Journaled HFS+) / [Startup]: 248.83 GB (30.99 GB free)
Encrypted AES-XTS (Unlocked)
Physical disk: disk0s2 249.20 GB Online
Installer (disk2 - HFS+) /Volumes/Installer : 41 MB (38 MB free)
Physical disk: (null) 41 MB (38 MB free)
Installer (disk3 - HFS+) /Volumes/Installer 1 : 41 MB (38 MB free)
Physical disk: (null) 41 MB (38 MB free)

System Software: ⓘ
OS X Yosemite 10.10.5 (14F2511) - Time since boot: about 4 hours

Gatekeeper: ⓘ
Mac App Store and identified developers

Possible adware: ⓘ
Unknown file: ~/Library/LaunchAgents/Safari Security
Adware: ~/Library/LaunchAgents/Trustnokogiri.AppVemoral.plist
Adware: ~/Library/LaunchAgents/Trustnokogiri.btvlit.plist
Adware: ~/Library/LaunchAgents/Trustnokogiri.dolnwoad.plist
Adware: ~/Library/LaunchAgents/Trustnokogiri.uadpte.plist
Adware: ~/Library/LaunchAgents/cinema-+-pro1-1.ver
Adware: ~/Library/LaunchAgents/cinema-+-pro1-1_updater.plist
Adware: ~/Library/LaunchAgents/cinema-+-pro1-1_updater.sh
Adware: ~/Library/LaunchAgents/com.pcv.hlpramcn.plist
Adware: ~/Library/Safari/Extensions/Trustnokogiri.safariextz
10 possible adware files found. [Remove/Report]

Clean up: ⓘ
/Library/LaunchAgents/org.macosforge.xquartz.startx.plist
/opt/X11/lib/X11/xinit/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz
Executable not found!
/Library/LaunchDaemons/org.macosforge.xquartz.privileged_startx.plist
/opt/X11/lib/X11/xinit/privileged_startx -d /opt/X11/lib/X11/xinit/privileged_startx.d
Executable not found!
~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
open /Applications/ZipCloud.app/Contents/Resources/Utility.app -n --args 9 -l
Executable not found!
~/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
open /Applications/ZipCloud.app/Contents/Resources/Utility.app --args 7 1
Executable not found!
~/Library/LaunchAgents/com.plexapp.helper.plist
~/Downloads/Plex.app/Contents/Resources/Plex/tools/osx/PlexHelper -x
Executable not found!
5 orphan files found. [Clean up]

Startup Items: ⓘ
HWNetMgr: Path: /Library/StartupItems/HWNetMgr
HWPortDetect: Path: /Library/StartupItems/HWPortDetect
Startup items no longer function in OS X Yosemite or later

System Launch Agents: ⓘ
[not loaded] 6 Apple tasks
[loaded] 139 Apple tasks
[running] 67 Apple tasks

System Launch Daemons: ⓘ
[not loaded] 44 Apple tasks
[loaded] 129 Apple tasks
[running] 90 Apple tasks

Launch Agents: ⓘ
[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2013-09-18) [Lookup]
[loaded] org.macosforge.xquartz.startx.plist (? d225a7da 0 - installed 2013-11-11) [Lookup] - /opt/X11/lib/X11/xinit/launchd_startx: Executable not found!

Launch Daemons: ⓘ
[loaded] com.adobe.fpsaud.plist (? 2afb3af7 defea098 - installed 2017-10-26) [Lookup]
[running] com.regularrateandrhythm.rowmotehelperaide.plist (Evan Schoenberg, M.D. - installed 2015-07-17) [Lookup]
[loaded] org.macosforge.xquartz.privileged_startx.plist (? 65395f14 0 - installed 2013-11-11) [Lookup] - /opt/X11/lib/X11/xinit/privileged_startx: Executable not found!

User Launch Agents: ⓘ
[not loaded] Safari Security (? b5c5869e ? - installed 2014-10-28) [Lookup]
[loaded] Trustnokogiri.AppVemoral.plist (Oded Malin - installed 2016-11-27) Adware! [Remove/Report]
~/Library/Application Support/Trustnokogiri/Trustnokogiri.app/Contents/MacOS/AppOM
[loaded] Trustnokogiri.btvlit.plist (Oded Malin - installed 2016-11-27) Adware! [Remove/Report]
~/Library/Application Support/Trustnokogiri/Trustnokogiri.app/Contents/MacOS/AppOM
[loaded] Trustnokogiri.dolnwoad.plist (Oded Malin - installed 2016-11-27) Adware! [Remove/Report]
~/Library/Application Support/Trustnokogiri/Trustnokogiri.app/Contents/MacOS/AppOM
[loaded] Trustnokogiri.uadpte.plist (Oded Malin - installed 2016-11-27) Adware! [Remove/Report]
~/Library/Application Support/Trustnokogiri/Trustnokogiri.app/Contents/MacOS/AppOM
[not loaded] cinema-+-pro1-1.ver (? 83dcefb7 ? - installed 2014-10-28) Adware! [Remove/Report]
[loaded] cinema-+-pro1-1_updater.plist (Shell Script 5c39b58f - installed 2014-11-12) Adware! [Remove/Report]
/bin/bash
[not loaded] cinema-+-pro1-1_updater.sh (? ecac50fa ? - installed 2014-10-28) Adware! [Remove/Report]
[loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2013-09-14) [Lookup]
[loaded] com.adobe.ARM.[...].plist (Adobe Systems, Inc. - installed 2017-02-01) [Lookup]
[loaded] com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.59930A11-D207-4BA0-A36C-C9870B8CC7F1.plist (Apple, Inc. - installed 2015-07-16)
[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-11) [Lookup]
[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-12-02) [Lookup]
[running] com.hp.devicemonitor.plist (HP Inc. - installed 2017-12-06) [Lookup]
[running] com.hp.productresearch.plist (HP Inc. - installed 2017-12-06) [Lookup]
[failed] com.jdibackup.ZipCloud.autostart.plist (? 709e258e 0 - installed 2016-11-27) [Lookup] - /Applications/ZipCloud.app/Contents/Resources/Utility.app: Executable not found!
[failed] com.jdibackup.ZipCloud.notify.plist (? 26d10037 0 - installed 2016-11-27) [Lookup] - /Applications/ZipCloud.app/Contents/Resources/Utility.app: Executable not found!
[running] com.nds.pcshow.plist (Shell Script 48e39481 - installed 2014-10-27)
[loaded] com.nds.pcshow.uninstall.plist (Shell Script 326f034b - installed 2014-10-27)
[running] com.pcv.hlpramcn.plist (Techyutils Software Private Limited - installed 2017-11-22) Adware! [Remove/Report]
~/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc
[failed] com.plexapp.helper.plist (? bd72ad13 0 - installed 2012-11-16) [Lookup] - ~/Downloads/Plex.app/Contents/Resources/Plex/tools/osx/PlexHelper: Executable not found!
[running] com.spotify.webhelper.plist (Spotify - installed 2017-03-29) [Lookup]

User Login Items: ⓘ
Dropbox Applicazione
(/Applications/Dropbox.app)
TomTomHOMERunner Applicazione - Hidden
(~/Library/Application Support/TomTom HOME/TomTomHOMERunner.app)
AdobeResourceSynchronizer Applicazione - Hidden
(/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app)
Rowmote Helper Applicazione
(/Applications/Rowmote Helper.app)
HP Device Monitor SMLoginItem - Hidden (HP Inc. - installed 2017-11-13)
(/Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app)
HP Product Research SMLoginItem - Hidden (HP Inc. - installed 2017-11-13)
(/Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app)

Internet Plug-ins: ⓘ
Flip4Mac WMV Plugin: 3.2.0.16 (installed 2013-12-21) [Lookup]
FlashPlayer-10.6: 27.0.0.187 (installed 2017-11-16) [Lookup]
QuickTime Plugin: 7.7.3 (installed 2017-11-13)
AdobePDFViewerNPAPI: 11.0.19 (installed 2017-02-01) [Lookup]
AdobePDFViewer: 11.0.19 (installed 2017-02-01) [Lookup]
Flash Player: 27.0.0.187 (installed 2017-11-16) [Lookup]
Default Browser: 600 (installed 2015-09-08)
NP_2020Player_IKEA: 5.0.7.0 (installed 2011-04-02) [Lookup]
Silverlight: 5.1.41212.0 (installed 2016-02-09) [Lookup]
iPhotoPhotocast: 7.0 (installed 2010-09-11)

Safari Extensions: ⓘ
Trustnokogiri - Trustnokogiri - http://www.trustnokogiri.com/faq#trustnokogiri" onclick="window.open(this.href);return false; (installed 2016-11-27) Adware! [Remove/Report]
Open in Internet Explorer - Parallels - http://www.parallels.com" onclick="window.open(this.href);return false; (installed 2016-02-17)

3rd Party Preference Panes: ⓘ
Application Enhancer (installed 2011-01-23) [Lookup]
Flash Player (installed 2017-10-26) [Lookup]
Flip4Mac WMV (installed 2013-03-29) [Lookup]
Growl (installed 2011-04-04) [Lookup]

Time Machine: ⓘ
Skip System Files: NO
Mobile backups: ON
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 248.83 GB Disk used: 217.84 GB
Destinations:
Backup di Time Machine [Local]
Total size: 749.81 GB
Total number of backups: 22
Oldest backup: 10/10/11 21:09
Last backup: 06/11/16 13:51
Size of backup disk: Excellent
Backup size 749.81 GB > (Disk size 248.83 GB X 3)

Top Processes by CPU: ⓘ
18% kernel_task
8% WindowServer
1% sysmond
0% Dropbox
0% fontd

Top Processes by Memory: ⓘ
476 MB kernel_task
181 MB com.apple.WebKit.WebContent
126 MB Safari
125 MB com.apple.WebKit.WebContent
97 MB mds_stores

Top Processes by Energy Use: ⓘ
17.94 WindowServer
0.70 launchd
0.38 Dropbox
0.08 AppleSpell

Virtual Memory Information: ⓘ
1.34 GB Available RAM
84 MB Free RAM
2.66 GB Used RAM
1.26 GB Cached files
0 B Swap Used

Software installs (last 30 days): ⓘ
The Unarchiver: 3.11.3 (installed 2017-11-13)
Free Video Converter: 6.2.19 (installed 2017-11-13)
Adobe Flash Player: (installed 2017-11-16)
HP Easy Scan: 1.9.1 (installed 2017-12-06)
HP Easy Scan: 1.9.1 (installed 2017-12-06)
HP Easy Scan: 1.9.1 (installed 2017-12-06)

Install information may not be complete.

Diagnostics Events (last 3 days for minor events): ⓘ
2017-12-06 12:31:40 HP Easy Scan.app Crash [Open]
Cause: objc_msgSend() selector name: removeObserver:forKeyPath:
2017-12-06 11:21:28 Trustnokogiri.app Crash [Open]


grazie e se per caso qualcuno leggendo la diagnosi trova qualcos'altro che non va mi farebbe un favore immenso

[Kernel Panic]

Trattasi di malware, del resto già individuato da EtreCheck.

Sono diversi files, dislocati un po' dappertutto.

Non devi fare altro che cliccare su "Remove" per liberartene.

[faxus]

Clicca su



Per rimuovere la collezione di malware.
Probabilmente l'hai installata aggiungendo un truffaware che si chiama AdvancedMacCleaner.
È una sorta di Mackeeper che ti installa tutte quelle porcherie.

Quindi provvedi a documentarti e disinstallarlo accuratamente.
Scarica ed installa EasyFind
http://www.devontechnologies.com/products/freeware/" onclick="window.open(this.href);return false;
Poi cerca e distruggi tutti i documenti collegati, come Advanced MacCleaner, pcv, hlpramcn, techyutils e i nomi associati che trovi in giro.
Lo stesso fai con l'estensione di Safari Trustnokogiri.
Ed anche Safari Security.

Elimina tutto (puoi lasciare SOLO DroBox in preferenze di Sistema > Utenti e gruppi > Elementi del login.
Non nascondere, elimina.

Elimina:
Growl (obsoleto)
Flip4Mac WMV (obsoleto)
Adobe Viewer (inutile, c'è Anteprima)
Application Enhancer (abbastanza inutile su Yosemite)

/Library/Internet Plug-ins/Flip4Mac WMV Plugin
/Library/Internet Plug-ins/AdobePDFViewerNPAPI
/Library/Internet Plug-ins/AdobePDFViewer
/Library/Internet Plug-ins/NP_2020Player_IKEA

Aggiorna Silverlight

Poi scarica OnyX
http://www.titanium.free.fr/onyx.html" onclick="window.open(this.href);return false;
Ed esegui solo quanto vedi spuntato nell’immagine

e riavvia

[carl0ne]

grazie mille per l'aiuto

[faxus]

PregA...

Fai sapere se hai risolto.
O se c'è qualche problema residuo

[carl0ne]

ho fatto tutto a parte eliminare Growl Flip4Mac WMV Application Enhancer perché non riesco a trovarli per eliminarli , in applicazioni non ci sono e anche cercandoli con cerca non li trova .
comunque il mio problema l ho risolto , questa AppOm non esiste più

[Kernel Panic]

Scarica EasyFind o Find Any File e cerca di nuovo quei files in tutto l'hard disk.

Flip4Mac WMV in particolare dovrebbe essere visibile come pannello di terze parti in Preferenze di Sistema, e per una corretta e completa disinstallazione richiede il suo uninstaller.

[Kundalini]

Scarica EasyFind o Find Any File e cerca di nuovo quei files in tutto l'hard disk.

Oltre a quel che ha suggerito KP apri Preferenze di Sistema e...



Edit: ah ecco, KP ne ha aggiunto un pezzo. Stessa indicazione sull'ubicazione.

[carl0ne]

niente , anche usando easyfind non li trova .bhoooo
in preferenze di sistema ci sono sempre e quando le apro loro funziona quindi da qualche parte sono
grazie mille