eddi80

Q: Malware on Safari with cloudfornt.net message in console?

#1

Hi all,

 

i found a very strange message in the console - which makes me very nervous.
I am using a MBP Retina 15"; End-2013; All Sec-Updates by apple installed;

 

i found this message in the console:


MESSAGE 1:
20.03.16 10:52:07,188 SpotlightNetHelper[328]: [SLSUGGESTIONS] could not load URL https://dalk4zrp4jp3q.cloudfront.net/images/mac_YFVkNF/dust.png: Error Domain=NSURLErrorDomain Code=-1009 "Es besteht anscheinend keine Verbindung zum Internet. German for seems there is no internet connection" UserInfo={NSUnderlyingError=0x7fb14ab75fd0 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "(null)" UserInfo={_kCFStreamErrorCodeKey=8, _kCFStreamErrorDomainKey=12}}, NSErrorFailingURLStringKey=https://dalk4zrp4jp3q.cloudfront.net/images/mac_YFVkNF/dust.png, NSErrorFailingURLKey=https://dalk4zrp4jp3q.cloudfront.net/images/mac_YFVkNF/dust.png, _kCFStreamErrorDomainKey=12, _kCFStreamErrorCodeKey=8, NSLocalizedDescription=Es besteht anscheinend keine Verbindung zum Internet.}

also i am getting this message:
MESSAGE 2 in rotation with Message1:

20.03.16 10:52:07,184 SpotlightNetHelper[328]: tcp_connection_get_statistics called with null connection, dumping backtrace:
[x86_64] libnetcore-583.20.10
0 libsystem_network.dylib 0x00007fff94be2ba5 __nw_create_backtrace_string + 123
1 libsystem_network.dylib 0x00007fff94bc9158 tcp_connection_get_statistics + 175
2 CFNetwork 0x00007fff8d710ee5 _ZN15TCPIOConnection28_signalConnectionEstablishedEv + 111
3 libdispatch.dylib 0x00007fff92599871 _dispatch_call_block_and_release + 12
4 libdispatch.dylib 0x00007fff9258e33f _dispatch_client_callout + 8
5 libdispatch.dylib 0x00007fff92592f6f _dispatch_queue_drain + 754
6 libdispatch.dylib 0x00007fff9259963b _dispatch_queue_invoke + 549
7 libdispatch.dylib 0x00007fff92591c87 _dispatch_root_queue_drain + 538
8 libdispatch.dylib 0x00007fff92591a34 _dispatch_worker_thread3 + 91
9 libsystem_pthread.dylib 0x00007fff8b62e68f _pthread_wqthread + 1129
10 libsystem_pthread.dylib 0x00007fff8b62c365 start_wqthread + 13


 

Can anybody please help me what this means?

 

Why is using spotlight "cloudfront.net" (service by amazon, right)?
Spotlight is not allowed to search via internet. Only "pictures, movies, documents, music, pdfs, directories, presentations, programs, calculate, system-settings, charts/tables). In Safari all Search-Options in "Settings" are disabled. So i am confused why this message comes.

Is it a virus or is it a bug?

 

I checked with Avira, ClamX and MalwareBytes - nothing found. But i want to understand why SPotlightnetHelper is using Cloudfront.net.

 

Thanks a lot for your help
Best regards
Eddi

MacBook Pro with Retina display, OS X El Capitan (10.11.3)

Posted on Mar 20, 2016 11:35 PM

Close

Q: Malware on Safari with cloudfornt.net message in console?

  • All replies
  • Helpful answers