Voor eerst: ik ben altijd de eerste om te verkondigen dat ik niet echt geloof in virusjes en dergelijke op de Mac. Wat niet wil zeggen dat ik niet geloof dat er hier en daar wat vuiligheid rondzwerft.
Nu ik ben zelf altijd voorzichtig met dingen te installeren (betrouwbare bron, installeer het hoogstnodige, dubbel voorzichtig met installers die om je wachtwoord vragen...). Bij twijfel of iets wat ik eenmalig nodig heb installeer ik het in een virtual machine die ik in Parallels heb draaien.
Toch merk ik hier nu toch iets vreemd op: in de homefolder zag ik folders met een rare of geen naam (zie bijlage). Iemand die een idee heeft van waar die komen ? Wat ze gemeen hebben is dat ze allemaal zero bytes innemen, ze leeg zijn (ook gekeken in de Terminal).
Rare folders in de FinderIk kan ze wissen (zonder extra ww te moeten ingeven) maar vind het toch maar vreemd...
DFA levert een clean bill of health af : The volume /dev/rdisk1s1 appears to be OK.
Etrecheck ziet er (voor zover ik dat kan beoordelen) best wel ok uit. De meldingen die het geeft zijn niet erg, en verklaarbaar :
- Time machine ouder dan 10 dagen -> net terug van 14 dagen vakantie
- veel RAM voor webkit -> staan tig vensters met tig tabs open in Safari (I Know shouldn't do that)
- high battery cycle count -> deze machine is 8 jaar oud en intensief gebruikt dus dat lijkt mij normaal
- corrupt file system -> DFA zegt van niet

- Heavy CPU usage -> was net bezig met iets in iPhoto
Etre Check:
EtreCheck version: 4.2.1 (4C020)
Report generated: 2018-04-16 19:40:33 Download EtreCheck from
https://etrecheck.com Runtime: 3:47
Performance: Good
Problem: No problem - just checking Major Issues:
Anything that appears on this list needs immediate attention.
Time Machine backup out-of-date - The last Time Machine backup is over 10 days old.
Heavy CPU usage - Some processes are using an unusually high amount of CPU. Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Heavy RAM usage - This machine is using a large amount of RAM.
High battery cycle count - Your battery may be losing capacity.
Corrupt filesystem - This machine shut down due to a corrupt filesystem. Clean up - There are orphan files that could be removed.
Unsigned files - There is unsigned software installed. They appear to be legitimate but shoul 32-bit Apps - This machine has 32-bits apps that may have problems in the future.
Hardware Information:
MacBook Pro (17-inch, Late 2011)
MacBook Pro Model: MacBookPro8,3
1 2,4 GHz Intel Core i7 (i7-2760QM) CPU: 4-core 16 GB RAM At maximum
BANK 0/DIMM0 - 8 GB DDR3 1333 ok
BANK 1/DIMM0 - 8 GB DDR3 1333 ok Battery: Health = Normal - Cycle count = 1542
Video Information:
Intel HD Graphics 3000 - VRAM: 512 MB AMD Radeon HD 6770M - VRAM: 1 GB
Color LCD 1680 x 1050
HP ENVY 32 2560 x 1440 @ 59 Hz
Drives:
disk0 - Samsung SSD 850 EVO 1TB 1.00 TB (Solid State - TRIM: No) Internal SATA 6 Gigabit Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB disk0s2 () 1000.00 GB
disk1s1 - V*****r (APFS) 1000.00 GB (948.87 GB used)
disk1s2 - Preboot (APFS) [APFS Preboot] 1000.00 GB (18 MB used) disk1s3 - Recovery (APFS) [Recovery] 1000.00 GB (518 MB used)
d
disk1s4 - VM (APFS) [APFS VM] 1000.00 GB (12.89 GB used)
disk2 - SanDisk Ultra Fit 30.75 GB External USB 480 Mbit/s
disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk2s2 - U******d (Journaled HFS+) 29.89 GB
disk2s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB
Mounted Volumes:
disk1s1 - V*****r 1000.00 GB (37.52 GB free) APFS
Mount point: /
disk1s4 - VM [APFS VM] 1000.00 GB (37.52 GB free) APFS
Mount point: /private/var/vm
disk2s2 - U******d 29.89 GB (15.67 GB free) Journaled HFS+
Mount point: /Volumes/U******d
disk5s2 - T******************s 2.91 TB (302.10 GB free) Case-Sensitive Journaled HFS+
Mount point: /Volumes/T******************s
Network:
Interface en0: Ethernet
Interface en5: Thunderbolt Ethernet Interface en6: iPad
Interface fw0: FireWire
Interface en1: Wi-Fi
802.11 a/b/g/n
One IPv4 address
Interface en4: iPhone 3gs
Interface en3: Bluetooth PAN Interface bridge0: Thunderbolt Bridge iCloud Quota: 40.20 GB available
System Software:
macOS High Sierra 10.13.1 (17B1003)
Time since boot: About 6 days
System Load: 2.76 (1 min ago) 2.40 (5 min ago) 2.07 (15 min ago)
Configuration Files:
/etc/hosts - Count: 2
Security:
System
Gatekeeper
System Integrity Protection
Unsigned Files:
Status
Mac App Store and identified developers Enabled
Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/org.pqrs.Karabiner.load.plist
Executable: /Library/Application Support/org.pqrs/Karabiner/startup.sh start Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist
Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh r Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/homebrew.mxcl.mysql.plist
Executable: /usr/local/opt/mysql/bin/mysqld_safe --***dir=/usr/local/var/mysql Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/LauncherDetect.plist Executable: /Users/***/Library/Preferences/LauncherDetect Details: Domain name invalid - possibly adware
Launchd: /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist Executable: /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF Details: Exact match found in the whitelist - probably OK
32-bit Applications:
66 32-bit apps
Kernel Extensions:
/Applications/DiskWarrior.app
[Not Loaded] DiskWarriorPreview.kext (4.4)
/Applications/Faceless.app
[Not Loaded] tun.kext (20111101)
/Applications/Parallels Desktop.app
[Not Loaded] prl_hypervisor.kext (Parallels, Inc., 11.2.3 32663 - SDK 10.9) [Not Loaded] prl_netbridge.kext (Parallels, Inc., 11.2.3 32663 - SDK 10.9) [Not Loaded] prl_usb_connect.kext (Parallels, Inc., 11.2.3 32663 - SDK 10.9) [Not Loaded] prl_vnic.kext (Parallels, Inc., 11.2.3 32663 - SDK 10.9)
/Applications/Viscosity.app
[Not Loaded] tap.kext (SparkLabs Pty Ltd, 1.2) [Not Loaded] tun10.7.kext (SparkLabs Pty Ltd, 1.2)
/Applications/spotflux.app
[Not Loaded] tap.kext (20111101)
e
[Loaded] tun.kext (20111101)
/Applications/zoom.us.app
[Not Loaded] ZoomAudioDevice.kext (1.1 - SDK 10.8)
/Library/Application Support/Hotspot Shield
[Not Loaded] tun10.9.kext (AnchorFree Inc., 1.1.1 - SDK 10.8)
/Library/Application Support/VirtualBox
[Loaded] VBoxDrv.kext (Oracle America, Inc., 5.0.0) [Loaded] VBoxNetAdp.kext (Oracle America, Inc., 5.0.0) [Loaded] VBoxNetFlt.kext (Oracle America, Inc., 5.0.0) [Loaded] VBoxUSB.kext (Oracle America, Inc., 5.0.0)
/Library/Application Support/org.pqrs/Karabiner
[Loaded] Karabiner.signed.kext (Fumihiko Takayama, 10.21.0 - SDK 10.11)
/Library/Application Support/org.pqrs/Karabiner-VirtualHIDDevice/Extensions
[Loaded] org.pqrs.driver.Karabiner.VirtualHIDDevice.v041100.kext (Fumihiko Takayama, 4.
/Library/Extensions
[Loaded] LogitechHIDDevices.kext (Logitech Inc., 3.9.1 - SDK 10.8)
[Loaded] AVFrameBuffer.kext (Avatron Software, Inc., 3.0.1 - SDK 10.10)
[Loaded] AVVideoCard.kext (Avatron Software, Inc., 3.0.1 - SDK 10.10)
[Loaded] DisplayLinkDriver.kext (DisplayLink Corp, 2.6.0 (75598) - SDK 10.9) [Loaded] Boom2Device.kext (Global Delight Technologies Pvt. Ltd, 1.2 - SDK 10.10) [Loaded] EnergyDriver.kext (Intel Corporation Apps, 2.0 - SDK 10.11)
[Not Loaded] klif.kext (Kaspersky Lab UK Limited, 3.0.4a41)
[Not Loaded] klnke.kext (Kaspersky Lab UK Limited, 1.6)
[Not Loaded] tap.kext (20090**3)
[Not Loaded] tun.kext (20090**3)
/System/Library/Extensions
[Not Loaded] FTDIUSBSerialDriver.kext (2.2.18 - SDK 10.6) [Not Loaded] LogitechUnifying.kext (1.3.0 - SDK 10.8)
[Not Loaded] NECUSBXHCI.kext (Chiu Shung wai, 2.3.0)
/Users/***/Downloads/BlockBlock_Installer.app
[Not Loaded] BlockBlock.kext (Objective-See, LLC, 0.9.7 - SDK 10.12)
Startup Items:
tun Path: /Library/StartupItems/tun tap Path: /Library/StartupItems/tap
System Launch Agents:
[Not Loaded] [Loaded] [Running]
8 Apple tasks 151 Apple tasks 129 Apple tasks
1
[Not Loaded] [Loaded] [Running]
8 Apple tasks 151 Apple tasks 129 Apple tasks
System Launch Daemons:
[Not Loaded] [Loaded] [Running]
Launch Agents:
[Running]
[Other] [Other] [Running] [Running] [Other] [Loaded] [Not Loaded]
Launch Daemons:
[Loaded] [Other] [Loaded] [Running] [Not Loaded] [Other] [Other] [Loaded] [Loaded] [Other] [Loaded] [Loaded] [Loaded]
[Loaded]
[Running] [Not Loaded] [Running] [Loaded] [Loaded] [Not Loaded] [Loaded] [Loaded]
35 Apple tasks 168 Apple tasks 129 Apple tasks
org.pqrs.karabiner.karabiner_console_user_server.plist (Fumihiko Takayama 2017-11-12)
com.teamviewer.teamviewer_desktop.plist (? efecefe3 - installed 2018-02-06) com.teamviewer.teamviewer.plist (? 9223e856 - installed 2018-02-06) com.Logitech.Control Center.Daemon.plist (? 5b5e4f6b - installed 2015-09-19 com.displaylink.useragent.plist (? 634b9508 - installed 2016-12-06) com.parallels.mobile.prl_deskctl_agent.launchagent.plist (? 97bd107 - installe com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-04) com.displaylink.useragent-prelogin.plist (? fd7d3eb2 - installed 2016-12-06)
com.tunnelbear.mac.tbeard.plist (? a1f7621a - installed 2016-05-26)
com.parallels.mobile.dispatcher.launchdaemon.plist (? 528af579 - installed 20
com.bombich.ccchelper.plist (Bombich Software, Inc. - installed 2017-05-20)
me.hide.osxhelper.plist (EVENTURE LTD. - installed 2017-04-10)
org.virtualbox.startup.plist (? 700b9385 - installed 2015-08-10)
com.teamviewer.teamviewer_service.plist (? 52d5a08d - installed 2018-02-06
com.parallels.mobile.kextloader.launchdaemon.plist (Apple - installed 2017-10
com.teamviewer.Helper.plist (? 7f4bf3e7 - installed 2017-02-03)
com.malwarebytes.HelperT ool.plist (Malwarebytes Corporation - installed 201
pcloudd.plist (? 37acd5b3 - installed 2016-01-17)
com.sparklabs.ViscosityHelper.plist (SparkLabs Pty Ltd - installed 2016-05-27
com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-03-27)
com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-09-28)
com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - 2015-09-15)
org.pqrs.karabiner.karabiner_grabber.plist (Fumihiko Takayama - installed 20 com.apple.installer.cleanupinstaller.plist (Apple - installed 2018-02-22) com.displaylink.displaylinkmanager.plist (? a65a6fcd - installed 2016-12-06) com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-06) org.wireshark.ChmodBPF.plist (? d4207e05 - installed 2016-10-03) org.pqrs.Karabiner.load.plist (? 44439558 - installed 2016-07-05) com.anchorfree.ajaxserver.plist (? b7821fb8 - installed 2016-02-19) com.spotflux.Spotflux.tun.plist (Apple - installed 2017-10-25)
-
) d
1
)
6 )
1
[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-09-28)
1
4
[Loaded]
[Running] [Not Loaded] [Running] [Loaded] [Loaded] [Not Loaded] [Loaded] [Loaded]
com.BlueStacks.AppPlayer.bstservice_helper.plist (BlueStack Systems, Inc. - 2015-09-15)
org.pqrs.karabiner.karabiner_grabber.plist (Fumihiko Takayama - installed 20 com.apple.installer.cleanupinstaller.plist (Apple - installed 2018-02-22) com.displaylink.displaylinkmanager.plist (? a65a6fcd - installed 2016-12-06) com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-06) org.wireshark.ChmodBPF.plist (? d4207e05 - installed 2016-10-03) org.pqrs.Karabiner.load.plist (? 44439558 - installed 2016-07-05) com.anchorfree.ajaxserver.plist (? b7821fb8 - installed 2016-02-19) com.spotflux.Spotflux.tun.plist (Apple - installed 2017-10-25)
User Launch Agents:
[Other] [Running] [Running] [Loaded] [Not Loaded]
[Loaded]
[Running] [Loaded]
User Login Items:
com.parallels.mobile.startgui.launchagent.plist (? 0 - installed 2016-03-28)
homebrew.mxcl.mysql.plist (? 0 - installed 2017-05-22)
com.spotify.webhelper.plist (Spotify - installed 2017-12-15)
com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-0
org.virtualbox.vboxwebsrv.plist (Oracle America, Inc. - installed 2015-07-15)
com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2017-11-19)
LauncherDetect.plist (? 0 - installed 2017-10-30)
com.bittorrent.uT orrent.plist (BitT orrent, Inc - installed 2016-03-17)
Dropbox Application (Dropbox, Inc. (/Applications/Dropbox.app)
Internet Plug-ins:
FlashPlayer-10.6: 29.0.0.140 (installed 2018-04-11) QuickTime Plugin: 7.7.3 (installed 2017-10-25)
Flash Player: 29.0.0.140 (installed 2018-04-11) o1dbrowserplugin: 5.41.3.0 (installed 2017-01-17) SharePointBrowserPlugin: 14.2.4 (installed 2014-12-22) PepperFlashPlayer: 29.0.0.140 (installed 2018-04-11) googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-11) Silverlight: 5.1.41212.0 (installed 2016-02-17)
User Internet Plug-ins:
CitrixOnlineWebDeploymentPlugin: 1.0.105 (installed 2013-04-26) ZoomUsPlugIn: 4.1.11049.1024 (installed 2017-12-09)
ActiveGS: 3.7.1019 (installed 2014-01-27)
Safari Extensions:
AdBlock.safariextz - BetaFish, Inc. -
https://getadblock.com (installed 2017-11-19) Ghostery.safariextz - GHOSTERY, Inc. -
https://www.ghostery.com/ (installed
2018-04-03)
DirectLinks.safariextz - Canisbos Computing -
http://canisbos.com/ (installed 2016-11-10) OpenIE.safariextz - Parallels -
http://www.parallels.com (installed 2017-04-19)
Adblock Plus.safariextz - Eyeo GmbH -
https://adblockplus.org/ (installed 2016-07-28)
AdBlock.safariextz - BetaFish, Inc. -
https://getadblock.com (installed 2017-11-19) Ghostery.safariextz - GHOSTERY, Inc. -
https://www.ghostery.com/ (installed
2018-04-03)
DirectLinks.safariextz - Canisbos Computing -
http://canisbos.com/ (installed 2016-11-10) OpenIE.safariextz - Parallels -
http://www.parallels.com (installed 2017-04-19)
Adblock Plus.safariextz - Eyeo GmbH -
https://adblockplus.org/ (installed 2016-07-28)
3rd Party Preference Panes:
Flash Player (installed 2018-03-27)
Time Machine:
Skip System Files: No Mobile backups: Yes
Auto backup: Yes Volumes being backed up:
V*****r: Disk size: 1000.00 GB - Disk used: 962.47 GB Destinations:
T*****************r [Network] (Last used) Total size: 2.91 TB
Total number of backups: 60
Oldest backup: 2017-07-09 14:38:50 Last backup: 2018-03-30 10:35:21
Top Processes by CPU: Process (count)
iPhoto
Finder
sandboxd
WindowServer
com.apple.iTunesLibraryService (3)
Top Processes by Memory: Process (count)
com.apple.WebKit.WebContent (132) kernel_task
Vivaldi Helper (12)
Google Chrome Helper (15) Safari
Top Processes by Network Use: Process
kernel_task
Vivaldi
Mail
mDNSResponder com.apple.WebKit.Networking
Source
Mac App Store Apple
Apple
Apple
Apple
Source
Apple Apple
% of CPU
81 27 16 15
13
Vivaldi T echnologies AS
Google, Inc. Apple
Source
RAM usage
6.62 GB 2.03 GB
964 MB
891 MB 720 MB
Apple 2.80 GB
566 MB
10 MB
996 KB 637 KB 91 KB
Vivaldi T echnologies AS
Apple Apple Apple
2 MB
8 MB 6 MB 6 MB
Input Output
Process
Source Input Output
kernel_task
Vivaldi
Mail
mDNSResponder com.apple.WebKit.Networking
Top Processes by Energy Use:
Apple 2.80 GB
566 MB
10 MB
996 KB 637 KB 91 KB
Process (count)
Finder WindowServer lsd (5)
Vivaldi Helper (12) backupd
Source
Energy usage (0-100)
Virtual Memory Information:
Available RAM Free RAM Used RAM Cached files Swap Used
Clean up:
3.26 GB 21 MB 12.74 GB 3.24 GB 3.47 GB
Vivaldi T echnologies AS
2 MB
8 MB 6 MB 6 MB
Apple Apple Apple
Apple 14
Apple 12
Apple 3
Vivaldi T echnologies 3 AS
Apple
1
/Library/LaunchAgents/com.teamviewer.teamviewer.plist /Applications/TeamViewer.app/Contents/MacOS/TeamViewer Executable not found
~/Library/LaunchAgents/com.parallels.mobile.startgui.launchagent.plist /Applications/Parallels Access.app/Contents/MacOS/prl_deskctl_wizard Executable not found
/Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist /Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service Executable not found
/Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist /Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop Executable not found
/Library/LaunchDaemons/pcloudd.plist
/Applications/LenovoEMC Storage Manager.app/Contents/Resources/pcloudd Executable not found
/Library/LaunchDaemons/com.parallels.mobile.dispatcher.launchdaemon.plist /Applications/Parallels Access.app/Contents/MacOS/Parallels Access Dispatcher Service.
prl_pm_service
Executable not found
/Library/LaunchAgents/com.parallels.mobile.prl_deskctl_agent.launchagent.plist /Applications/Parallels Access.app/Contents/MacOS/Parallels Access Agent.app/Contents
prl_deskctl_agent
a
Executable not found
Diagnostics Information (past 7 days):
2018-04-10 16:12:34 Last Shutdown Cause: -60 - Corrupt filesystem (once)
End of report