MacbookPro,Yosemite10.10.5, safari, appstore, itunestroe don't connect to Inernet

Question

Level 1

8 points

MacbookPro,Yosemite10.10.5, safari, appstore, itunestroe don't connect to Inernet

I have Yosemite 10.10.5. Safari doesn't load any page. Itunestore and App Store don't connect to internet. Firefox doesn't open some pages too.

*can i upgrade in safe mode?

I have started in safe mode.

Everything works.

but in normal mode it didn't work again.

In addition I have checked time, date, serial number, DNS setting, Proxy settings, keychains... everything is ok. I have deleted cookies, cache, history nothing worked!

I have search in applications for mackeeper, found nothing.

from your another post (https://discussions.apple.com/thread/5408109?tstart=0)I have ran this command in Terminal in safe mode:

step 1&2: empty

step 3:

/Library/Components:

/Library/Extensions:

ACS6x.kext

ATTOCelerityFC8.kext

ATTOExpressSASHBA2.kext

ATTOExpressSASRAID2.kext

ArcMSR.kext

CalDigitHDProDrv.kext

HighPointIOP.kext

HighPointRR.kext

PromiseSTEX.kext

SoftRAID.kext

/Library/Frameworks:

AEProfiling.framework

AERegistration.framework

AudioMixEngine.framework

NyxAudioAnalysis.framework

PluginManager.framework

iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:

Default Browser.plugin

Disabled Plug-Ins

Flash Player.plugin

JavaAppletPlugin.plugin

Quartz Composer.webplugin

Silverlight.plugin

Unity Web Player.plugin

Unused

flashplayer.xpt

nsIQTScriptablePlugin.xpt

/Library/Keyboard Layouts:

/Library/LaunchAgents:

com.oracle.java.Java-Updater.plist

/Library/LaunchDaemons:

com.Triangulum.net-preferences.plist

com.adobe.fpsaud.plist

com.oracle.java.Helper-Tool.plist

com.perion.searchprotectd.plist

com.qualtaghUpd.plist

com.retrue.net-preferences.plist

/Library/PreferencePanes:

Flash Player.prefPane

JavaControlPanel.prefPane

/Library/PrivilegedHelperTools:

/Library/QuickLook:

iBooksAuthor.qlgenerator

iWork.qlgenerator

/Library/QuickTime:

AppleIntermediateCodec.component

AppleMPEG2Codec.component

CanonMJPEGAVI.component

CanonMJPEGAVIDec.component

CanonText.component

/Library/ScriptingAdditions:

/Library/Spotlight:

Microsoft Office.mdimporter

iBooksAuthor.mdimporter

iWork.mdimporter

/Library/StartupItems:

/etc/mach_init.d:

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

Library/Address Book Plug-Ins:

SkypeABCaller.bundle

SkypeABChatter.bundle

SkypeABDialer.bundle

SkypeABSMS.bundle

Library/Fonts:

Library/Input Methods:

.localized

Library/Internet Plug-Ins:

.DS_Store

Library/Keyboard Layouts:

Library/LanguageModeling:

da-dynamic.lm

de-dynamic.lm

en-dynamic.lm

es-dynamic.lm

fr-dynamic.lm

it-dynamic.lm

nb-dynamic.lm

nl-dynamic.lm

pt-dynamic.lm

sv-dynamic.lm

tr-dynamic.lm

Library/LaunchAgents:

com.google.keystone.agent.plist

com.jdibackup.ZipCloud.autostart.plist

com.jdibackup.ZipCloud.notify.plist

com.spotify.webhelper.plist

Library/PreferencePanes:

Library/Services:

step4:

iTunesHelper, Spotify

Also

it is what i get from console when i try to open goole in safari:

05/02/16 14:30:44,584 secd[253]: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

05/02/16 14:30:44,585 CloudKeychainProxy[302]: __39-[UbiqitousKVSProxy doSyncWithAllPeers]_block_invoke_2 <UB--s--C---> syncWithAllPeers (null), rescheduling timer

05/02/16 14:30:46,588 sudo[2786]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/pfctl -evf /etc/pf_proxy.conf

05/02/16 14:30:46,611 sudo[2788]: root : TTY=unknown ; PWD=/ ; USER=geomoroi ; COMMAND=/Library/retrue/Contents/MacOS/retrue

05/02/16 14:30:46,779 sudo[2791]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/defaults read /Library/Preferences/com.common.plist name

05/02/16 14:30:46,803 sudo[2793]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/defaults read /Library/Preferences/com.common.plist user_id

05/02/16 14:30:49,149 com.apple.xpc.launchd[1]: (com.apple.WebKit.WebContent.5CBACF4A-F094-468A-B2C8-FAA02C33D476[2785]) Service exited with abnormal code: 1

05/02/16 14:30:50,084 locationd[85]: NETWORK: requery, 0, 0, 0, 0, 2, items, fQueryRetries, 0, fLastRetryTimestamp, 476367133.8

and when I want to upgrade in appstrore:

05/02/16 14:34:01,047 secd[253]: __SOSCCProcessSyncWithAllPeers_Server_block_invoke sync with all peers failed: (null)

05/02/16 14:34:01,048 CloudKeychainProxy[302]: __39-[UbiqitousKVSProxy doSyncWithAllPeers]_block_invoke_2 <UB--s--C---> syncWithAllPeers (null), rescheduling timer

05/02/16 14:34:01,361 App Store[2970]: addOperation <ISFetchIconOperation: 0x60000019f3b0>{name = '(null)'}

05/02/16 14:34:01,362 storedownloadd[396]: DownloadServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fd7db0378a0> connection from pid 2972 with interface <DownloadServiceInterface: 0x7fd7db00aeb0> (PID 2972)

05/02/16 14:34:01,364 storedownloadd[396]: DownloadServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fd7daf86690> connection from pid 2970 with interface <DownloadServiceInterface: 0x7fd7daf8bff0> (PID 2970)

05/02/16 14:34:01,365 storedownloadd[396]: addOperation <CheckPreflightOperation: 0x7fd7daf58910>{name = '(null)'}

05/02/16 14:34:01,369 storedownloadd[396]: addOperation <FetchIconOperation: 0x7fd7dae18b10>{name = '(null)'}

05/02/16 14:34:01,370 storeaccountd[280]: AccountServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fce46523190> connection from pid 396 with interface <AccountServiceInterface: 0x7fce46540f90> (PID 396)

05/02/16 14:34:01,372 storeaccountd[280]: AccountServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fce4653dc60> connection from pid 396 with interface <AccountServiceInterface: 0x7fce46523490> (PID 396)

05/02/16 14:34:01,470 com.apple.CommerceKit.TransactionService[2988]: TransactionServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fa3eac0c160> connection from pid 2972 with interface <TransactionServiceInterface: 0x7fa3eac0e770> (PID 2972)

05/02/16 14:34:01,473 storeuid[426]: UIServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fbfa0f2b260> connection from pid 2972 with interface <UIServiceInterface: 0x7fbfa0f2b800> (PID 2972)

05/02/16 14:34:01,495 storeaccountd[280]: AccountServiceDelegate: Accepting new connection <NSXPCConnection: 0x7fce4651a380> connection from pid 2970 with interface <AccountServiceInterface: 0x7fce46545e30> (PID 2970)

05/02/16 14:34:02,172 sudo[2989]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/pfctl -evf /etc/pf_proxy.conf

05/02/16 14:34:02,192 sudo[2991]: root : TTY=unknown ; PWD=/ ; USER=geomoroi ; COMMAND=/Library/retrue/Contents/MacOS/retrue

05/02/16 14:34:02,208 com.apple.xpc.launchd[1]: (com.apple.ReportCrash.Root[2993]) Endpoint has been activated through legacy launch(3) APIs. Please switch to XPC or bootstrap_check_in(): com.apple.ReportCrash.DirectoryService

05/02/16 14:34:02,391 sudo[2995]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/defaults read /Library/Preferences/com.common.plist name

05/02/16 14:34:02,416 sudo[2997]: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/defaults read /Library/Preferences/com.common.plist user_id

So I really want to know what the problem is 😟😟

MacBook Pro (Retina, 13-inch, Mid 2014), OS X Yosemite (10.10.5), null

Posted on Feb 5, 2016 5:36 AM

Reply

Answer 1

Eric Root

Level 10

684,069 points

Feb 5, 2016 6:45 AM in response to leila.E

While booted normally, try running this program and then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read.

Etrecheck – System Information

Reply

Answer 2

leila.E Author

Level 1

8 points

Feb 5, 2016 7:07 AM in response to Eric Root

well, I can't open this page in firefox too!

I can google etresoft in firefox open the main page but when I click on check I get the same error: can't connect to the server 😟

Reply

Answer 3

Linc Davis

Level 10

209,547 points

Feb 5, 2016 1:34 PM in response to leila.E

A

You installed one or more variants of the "VSearch" trojan, as well as some other kinds of malware. Please inactivate them as follows.

This malware has many variants. Anyone else finding this comment should not expect it to be applicable.

Back up all data before proceeding.

Triple-click anywhere in the first line below on this page to select it:

/Library/LaunchDaemons/com.perion.searchprotectd.plist

/Library/LaunchDaemons/com.retrue.net-preferences.plist

/Library/LaunchDaemons/com.Triangulum.net-preferences.plist

/Library/LaunchDaemons/com.qualtaghUpd.plist

Right-click or control-click the line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with an item selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.

Repeat with each of the other lines.

Restart the computer and empty the Trash.

The trouble may have started when you downloaded and ran an application called "MPlayerX." If there is an item with that name in the Applications folder, delete it.

This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Then, still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

B

"ZipCloud," sometimes named "JustCloud," is a cloud-storage service with a doubtful reputation. The OS X client is sometimes distributed along with malware. Although ZipCloud may not be malicious itself, it should be suspected by virtue of the company it keeps.

To remove ZipCloud, please start by backing up all data (not with ZipCloud itself, of course.)

Quit the "ZipCloud" or "JustCloud" application, if it's running, and drag it from the Applications folder to the Trash. Don't try to empty yet.

Triple-click anywhere in the line below on this page to select it:

~/Library/LaunchAgents

Right-click or control-click the highlighted line and select

Services ▹ Open

from the contextual menu.* A folder named "LaunchAgents" should open.

In the folder, there may be one or more files with a name beginning as follows:

com.jdibackup.

Move all such files to the Trash.

Log out or restart the computer and empty the Trash.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

Reply

Answer 4

leila.E Author

Level 1

8 points

Feb 5, 2016 1:35 PM in response to Linc Davis

Oh, thank you very much! it was so helpful. It worked and saved me!

Reply