How to block Pop up Tabs mac keeper?

What happened:

My son downloaded malware from facebook, called Animal Farm. It installed enormous amount of junk and adware such as bitcoin miner and some java applets and mackeeper. I managed to remove almost everything.

I use Ad blocker, ABP blocker Pro in Safari, I have Sophos Antivirus and Adware cleaner.


Solved troubles:

Safari was crashing 5x an hour without any reason so I deleted caches but it did not work and at the end I reinstall 10.13.3. -> Safari doesn't crash anymore.


Remaining problems.

I'm on normal news website and I'm getting occasionally New tabs, that is redirecting to multiple websites and at the end, I'm getting Mackeeper advertisement, Casino online game and some sort **** game. If I close the tab, and run adware cleaner (from app store) I get one High risk file. SparkleUpdateLog.log Infection detail MacKeeper and the file is stored in Library/Logs/ I delete it, restart computer. 10 minutes later same again.


How do I block this automatic tab pop up and redirections in Safari?

What is SparkleUpdateLog.log ?

How do I find virus if Sophos and adware cleaner can not find anything?


thank you for your help

MacBook Pro, Mac OS X (10.6.7), 1TB Time capsule, 2TB external HDD,

Posted on Feb 9, 2018 1:29 PM

Reply
Question marked as Top-ranking reply

Posted on Feb 9, 2018 5:40 PM

If you still have problems, try running this program in your normal user account, then copy and paste the output in a reply. The program was created by etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy Report” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

Similar questions

15 replies
Question marked as Top-ranking reply

Feb 9, 2018 5:40 PM in response to mikecorp

If you still have problems, try running this program in your normal user account, then copy and paste the output in a reply. The program was created by etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy Report” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

Feb 9, 2018 1:51 PM in response to mikecorp

Uninstall Sophos and Adware Cleaner as per the developer's instructions. No Anti-Virus software or so-called “cleaning” apps are needed or recommended for Mac OS. They can conflict with Mac's own built-in security. At best they will slow your Mac by using unnecessary resources and at worst will bork your entire system.


Force Quit Safari ( command + option + esc keys).Then restart Safari holding the Shift key. If you still have problems Empty Caches (Safari menu > Preferences > Privacy > Remove all website data. (This will also remove history if you do not want to remove History open Safari Preferences > Advanced and check mark “Show Develop Menu” then choose “Empty Caches” from Develop Menu ) If the problem persists download and run MalwareBytes. Malwarebytes was developed by one of our own colleagues here in ASC. It gets rave reviews and is about the most proven anti-malware software for Mac.

Feb 11, 2018 5:25 PM in response to mikecorp

Possible adware:

Unknown file: ~/Library/LaunchAgents/mega.mac.megaupdater.plist

/Applications/MEGAsync.app/Contents/MacOS/MEGAupdater

One possible adware file found. [Remove/Report]


Clean up:

~/Library/LaunchAgents/com.skype.skype.shareagent.plist

/Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareag ent.bundle/Contents/MacOS/com.skype.skype.shareagent

Executable not found!

One orphan file found. [Clean up]


Run the report again and click [Remove/Report] and [Clean up].


Safari/Preferences/Advanced - enable the Develop menu, then go there and Empty Caches. Quit/reopen Safari and test. Then try Safari/History/Show History and delete all history items. Quit/reopen Safari and test. You can also try try Safari/Clear History…. The down side is it clears all cookies. Doing this may cause some sites to no longer recognize your computer as one that has visited the web site. Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J. When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder. Select Library/Caches/com.apple.Safari/Cache.db and move it to the trash.


Go to Safari Preferences/Extensions and turn all extensions off. Test. If okay, turn the extensions on one by one until you figure out what extension is causing the problem.


Safari Corruption See post by Linc Davis

Feb 15, 2018 2:17 PM in response to mikecorp

Safari is using 100% of the CPU.


Safari/Preferences/Advanced - enable the Develop menu, then go there and Empty Caches. Quit/reopen Safari and test. Then try Safari/History/Show History and delete all history items. Quit/reopen Safari and test. You can also try try Safari/Clear History…. The down side is it clears all cookies. Doing this may cause some sites to no longer recognize your computer as one that has visited the web site. Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J. When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder. Select Library/Caches/com.apple.Safari/Cache.db and move it to the trash.


Go to Safari Preferences/Extensions and turn all extensions off. Test. If okay, turn the extensions on one by one until you figure out what extension is causing the problem.


Safari Corruption See post by Linc Davis

Feb 11, 2018 12:13 PM in response to Eric Root

EtreCheck version: 3.4.6 (460)

Report generated 2018-02-11 21:05:59

Download EtreCheck from https://etrecheck.com

Runtime: 2:21

Performance: Excellent


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.

Click the [Clean up] link to delete unused files.


Problem: Apps are crashing

Description:

Safari crash


Hardware Information:

MacBook Pro (Retina, 13-inch, Late 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro11,1

1 2,8 GHz Intel Core i7 (i7-4558U) CPU: 2-core

16 GB RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Replace Soon - Cycle count = 1270

iCloud Quota: 1.40 GB available


Video Information:

Intel Iris - VRAM: 1536 MB

Color LCD 2560 x 1600


Disk Information:

APPLE SSD SM0512F disk0: (500,28 GB) (Solid State - TRIM: Yes)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

(disk0s2) <not mounted> [APFS Container]: 500.07 GB


USB Information:

USB30Bus

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Virtual disks:

Macintosh HD (disk1s1 - APFS) / [Startup]: 500.07 GB (36.67 GB free)

Physical disk: disk0s2 500.07 GB (36.67 GB free)

(disk1s2) <not mounted> [Preboot]: 500.07 GB

Physical disk: disk0s2 500.07 GB

(disk1s3) <not mounted> [Recovery]: 500.07 GB

Physical disk: disk0s2 500.07 GB

(disk1s4) /private/var/vm [VM]: 500.07 GB

Physical disk: disk0s2 500.07 GB


System Software:

macOS High Sierra 10.13.3 (17D47) - Time since boot: about 2 days


Configuration files:

/etc/sysctl.conf - File exists but not expected

/etc/hosts - Count: 23


Gatekeeper:

Mac App Store and identified developers


Possible adware:

Unknown file: ~/Library/LaunchAgents/mega.mac.megaupdater.plist

/Applications/MEGAsync.app/Contents/MacOS/MEGAupdater

One possible adware file found. [Remove/Report]


Clean up:

~/Library/LaunchAgents/com.skype.skype.shareagent.plist

/Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareag ent.bundle/Contents/MacOS/com.skype.skype.shareagent

Executable not found!

One orphan file found. [Clean up]


Kernel Extensions:

/Library/Extensions

[loaded] at.obdev.nke.LittleSnitch (3.8.2 - SDK 10.11) [Lookup]

[loaded] com.malwarebytes.mbam.rtprotection (3.1 - SDK 10.12) [Lookup]

[not loaded] com.razer.common.razerhid (21.41 - SDK 10.9) [Lookup]


/System/Library/Extensions

[not loaded] com.paceap.kext.pacesupport.master (5.9.1 - SDK 10.6) [Lookup]

[not loaded] com.wdc.driver.1394.64.10.9 (1.0.1 - SDK 10.9) [Lookup]

[not loaded] com.wdc.driver.USB.64.10.9 (1.0.1 - SDK 10.9) [Lookup]


/System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns

[not loaded] com.paceap.kext.pacesupport.leopard (5.9.1 - SDK 10.4) [Lookup]

[not loaded] com.paceap.kext.pacesupport.panther (5.9.1 - SDK 10.-1) [Lookup]

[not loaded] com.paceap.kext.pacesupport.snowleopard (5.9.1 - SDK 10.6) [Lookup]

[not loaded] com.paceap.kext.pacesupport.tiger (5.9.1 - SDK 10.4) [Lookup]


System Launch Agents:

[not loaded] 8 Apple tasks

[loaded] 156 Apple tasks

[running] 126 Apple tasks


System Launch Daemons:

[not loaded] 34 Apple tasks

[loaded] 170 Apple tasks

[running] 126 Apple tasks


Launch Agents:

[running] at.obdev.LittleSnitchUIAgent.plist (Objective Development Software GmbH - installed 2017-12-06) [Lookup]

[running] com.brother.LOGINserver.plist (? a1772de2 41ad4933 - installed 2016-04-22) [Lookup]

[running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-02-09) [Lookup]

[not loaded] com.oracle.java.Java-Updater.plist (? 0 ? - installed (null)) [Lookup]

[running] com.razer.rzupdater.plist (? 2bbe2bd1 b32aa7ee - installed 2018-02-09) [Lookup]

[not loaded] com.razerzone.rzdeviceengine.plist (? 516e794c 65a43b66 - installed 2018-02-09) [Lookup]


Launch Daemons:

[running] at.obdev.littlesnitchd.plist (Objective Development Software GmbH - installed 2017-12-06) [Lookup]

[loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-02) [Lookup]

[loaded] com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2018-01-19)

[running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-02-09) [Lookup]

[running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-02-09) [Lookup]

[not loaded] com.oracle.java.Helper-Tool.plist (? 0 ? - installed (null)) [Lookup]

[failed] com.prey.agent.plist (Shell Script 714c4ad6 - installed 2016-09-02) [Lookup]


User Launch Agents:

[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-11) [Lookup]

[loaded] com.skype.skype.shareagent.plist (? 9e64636f 0 - installed 2017-11-26) [Lookup] - /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareag ent.bundle/Contents/MacOS/com.skype.skype.shareagent: Executable not found!

[loaded] com.valvesoftware.steamclean.plist (? de9825c7 9dc4717 - installed 2016-08-28) [Lookup]

[loaded] mega.mac.megaupdater.plist (? b02fc3f7 2941a568 - installed 2018-02-09) [Lookup]


User Login Items:

MEGAsync Application

(/Applications/MEGAsync.app)

ColorsHelpersApp SMLoginItem - Hidden (Apple, Inc. - installed 2017-04-17)

(/Applications/Colors.app/Contents/Library/LoginItems/ColorsHelpersApp.app)

(null) SMLoginItem - Hidden (Apple, Inc. - installed 2017-12-20)

(/Applications/Compressor.app/Contents/Library/LoginItems/CompressorHelper.app)


Internet Plug-ins:

AdobeExManDetect: Unknown (installed 2016-03-16)

AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (installed 2016-03-16) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2018-01-19)

AdobePDFViewerNPAPI: 15.020.20039 (installed 2016-10-01) [Lookup]

AdobePDFViewer: 15.020.20039 (installed 2016-10-01) [Lookup]

o1dbrowserplugin: 5.41.3.0 (installed 2016-01-23) [Lookup]

Flash Player: 28.0.0.161 (installed 2018-02-06) [Lookup]

FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-06) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2016-12-11) [Lookup]

Silverlight: 5.1.50428.0 (installed 2016-07-04) [Lookup]

iPhotoPhotocast: 7.0 (installed 2014-07-28)


Safari Extensions:

[disabled] AdBlock - BetaFish, Inc. - https://getadblock.com (installed 2017-11-16)

[disabled] Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (installed 2016-12-23)


3rd Party Preference Panes:

Flash Player (installed 2018-02-02) [Lookup]

Tuxera NTFS (installed 2014-04-02) [Lookup]


Time Machine:

Skip System Files: NO

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 500.07 GB Disk used: 463.40 GB

Destinations:

Data [Network]

Total size: 997.71 GB

Total number of backups: 155

Oldest backup: 07/11/2017, 02:12

Last backup: 11/12/2017, 11:53

Size of backup disk: Too small

Backup size 997.71 GB < (Disk used 463.40 GB X 3)


Top Processes by CPU:

8% WindowServer

2% kernel_task

0% fontd

0% Little Snitch Agent

0% Mail


Top Processes by Memory:

1.34 GB kernel_task

392 MB com.apple.WebKit.WebContent

269 MB com.apple.WebKit.WebContent

236 MB com.apple.WebKit.WebContent

205 MB Messages


Top Processes by Network Use:

Input Output Process name

9 MB 1 MB mDNSResponder

748 KB 113 KB com.apple.WebKit.Networking

124 KB 224 KB apsd

171 KB 84 KB netbiosd

31 KB 55 KB usbmuxd


Top Processes by Energy Use:

10.12 WindowServer

0.78 opendirectoryd

0.44 3

0.38 RTProtectionDaemon


Virtual Memory Information:

8.15 GB Available RAM

28 MB Free RAM

7.85 GB Used RAM

8.12 GB Cached files

691 MB Swap Used


Software installs (last 30 days):

OldDeviceUninstaller: (installed 2018-02-09)

RzUpdater: (installed 2018-02-09)

1517208704rzrmodRazerHid: (installed 2018-02-09)

RzCoreStorage: (installed 2018-02-09)

Razer Synapse: (installed 2018-02-09)

Uninstall Razer Synapse: (installed 2018-02-09)

Malwarebytes for Mac: (installed 2018-02-09)


Install information may not be complete.


Diagnostics Events (last 3 days for minor events):

2018-02-11 03:53:11 Safari.app High CPU use [Open] [Details]

2018-02-09 21:08:06 RzUpdater.app Crash [Open]

Cause: objc_msgSend() selector name: addObject:

2018-02-09 19:15:23 Last shutdown cause: 3 - Hard shutdown

2018-02-08 22:40:48 ConceptDraw PROJECT.app Crash [Open]



Date/Time: 2018-02-11 03:51:01.638347 +0100

OS Version: Mac OS X 10.13.3 (Build 17D47)

Architecture: x86_64

Report Version: 19



Command: Safari

Path: /Applications/Safari.app/Contents/MacOS/Safari

Version: 11.0.3 (13604.5.6)

Build Version: 3

Project Name: WebBrowser

Source Version: 7604005006000000

Parent: launchd [1]

PID: 1064



Event: cpu usage

CPU: 90s cpu time over 125 seconds (72% cpu average), exceeding limit of 50% cpu over 180 seconds

Action taken: none

Duration: 125.11s

Steps: 136

Feb 9, 2018 2:35 PM in response to JimmyCMPIT

thank you guys for fast response.


I removed Sophos, and adware removal tool.


I installed Malwarebytes but the scan was clean.


Will report later if the problems occur. Apparently it is related to java script Iframe on Facebook. I still see animal farm advertisement ;(


thank you guys for fast response.


I removed Sophos, and adware removal tool.


I installed Malwarebytes but the scan was clean.




-Update apparently I Had also something called app4.letslowbefast.today But I have also other names like app1.letslowbefast.today app2.letslowbefast.today

it looks like Safari keeps refreshing all the time. Will try to restart in safe mode!!

Feb 11, 2018 10:09 AM in response to mikecorp

malwarebytes does not detect any malware, but Safari keeps crashing.

any ideas. why?


Process: Safari [3088]

Path: /Applications/Safari.app/Contents/MacOS/Safari

Identifier: com.apple.Safari

Version: 11.0.3 (13604.5.6)

Build Info: WebBrowser-7604005006000000~3

Code Type: X86-64 (Native)

Parent Process: ??? [1]

Responsible: Safari [3088]

User ID: 501



Date/Time: 2018-02-11 18:46:24.666 +0100

OS Version: Mac OS X 10.13.3 (17D47)

Report Version: 12

Anonymous UUID: BDC30A23-6737-E779-E521-BCD8995EC563



Sleep/Wake UUID: 781CE000-10DC-4E56-80FE-05AC046D6E2F



Time Awake Since Boot: 72000 seconds

Time Since Wake: 10000 seconds



System Integrity Protection: enabled



Crashed Thread: 7 Dispatch queue: com.apple.SafariShared.WBSCloudHistoryMergeOperation



Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Codes: KERN_INVALID_ADDRESS at 0x0000000217562000

Exception Note: EXC_CORPSE_NOTIFY



Termination Signal: Segmentation fault: 11

Termination Reason: Namespace SIGNAL, Code 0xb

Terminating Process: exc handler [0]



VM Regions Near 0x217562000:

MALLOC_LARGE 0000000192f00000-0000000217562000 [ 2.1G] rw-/rwx SM=PRV

-->

MALLOC_LARGE 00000009ef753000-0000000f2d3de000 [ 21.0G] rw-/rwx SM=PRV



Application Specific Information:

Enabled Extensions:

com.betafish.adblockforsafari-UAMUU4S2D9 (102.66.0 - 2.66.0) AdBlock

org.adblockplus.adblockplussafari-GRYYZR985A (1.12.4 - 1.12.4) Adblock Plus




Thread 0:: Dispatch queue: com.apple.main-thread

0 libsystem_kernel.dylib 0x00007fff73f867c2 mach_msg_trap + 10

1 libsystem_kernel.dylib 0x00007fff73f85cdc mach_msg + 60

2 com.apple.CoreFoundation 0x00007fff4c532575 __CFRunLoopServiceMachPort + 341

3 com.apple.CoreFoundation 0x00007fff4c5318c7 __CFRunLoopRun + 1783

4 com.apple.CoreFoundation 0x00007fff4c530f43 CFRunLoopRunSpecific + 483

5 com.apple.HIToolbox 0x00007fff4b848e26 RunCurrentEventLoopInMode + 286

6 com.apple.HIToolbox 0x00007fff4b848b96 ReceiveNextEventCommon + 613

7 com.apple.HIToolbox 0x00007fff4b848914 _BlockUntilNextEventMatchingListInModeWithFilter + 64

8 com.apple.AppKit 0x00007fff49b13f5f _DPSNextEvent + 2085

9 com.apple.AppKit 0x00007fff4a2a9b4c -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044

10 com.apple.Safari.framework 0x00007fff6bc28ca8 -[BrowserApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 273

11 com.apple.AppKit 0x00007fff49b08d6d -[NSApplication run] + 764

12 com.apple.AppKit 0x00007fff49ad7f1a NSApplicationMain + 804

13 libdyld.dylib 0x00007fff73e40115 start + 1


Can not upload entire report, during the safe it states, there are characters that are not supported. ;(

Feb 12, 2018 8:54 AM in response to Eric Root

did everything what you said.

still getting a crash

Is there a way to reinstall Latest Safari? I have a suspicion it has something to do with the latest update 11.0.3


Apple Report

System Integrity Protection: enabled



Crashed Thread: 2 Dispatch queue: com.apple.SafariShared.WBSCloudHistoryMergeOperation



Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Codes: KERN_INVALID_ADDRESS at 0x000000014cd4a000

Exception Note: EXC_CORPSE_NOTIFY



Termination Signal: Segmentation fault: 11

Termination Reason: Namespace SIGNAL, Code 0xb

Terminating Process: exc handler [0]



VM Regions Near 0x14cd4a000:

MALLOC_LARGE 000000010d0c8000-000000014cd4a000 [ 1.0G] rw-/rwx SM=PRV

-->

MALLOC_LARGE 000000092ad50000-0000000e3e63d000 [ 20.3G] rw-/rwx SM=PRV



Thread 0:: Dispatch queue: com.apple.main-thread

0 libsystem_kernel.dylib 0x00007fff73f867c2 mach_msg_trap + 10

1 libsystem_kernel.dylib 0x00007fff73f85cdc mach_msg + 60

2 com.apple.CoreFoundation 0x00007fff4c532575 __CFRunLoopServiceMachPort + 341

3 com.apple.CoreFoundation 0x00007fff4c5318c7 __CFRunLoopRun + 1783

4 com.apple.CoreFoundation 0x00007fff4c530f43 CFRunLoopRunSpecific + 483

5 com.apple.HIToolbox 0x00007fff4b848e26 RunCurrentEventLoopInMode + 286

6 com.apple.HIToolbox 0x00007fff4b848b96 ReceiveNextEventCommon + 613

7 com.apple.HIToolbox 0x00007fff4b848914 _BlockUntilNextEventMatchingListInModeWithFilter + 64

8 com.apple.AppKit 0x00007fff49b13f5f _DPSNextEvent + 2085

9 com.apple.AppKit 0x00007fff4a2a9b4c -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044

10 com.apple.Safari.framework 0x00007fff6bc28ca8 -[BrowserApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 273

11 com.apple.AppKit 0x00007fff49b08d6d -[NSApplication run] + 764

12 com.apple.AppKit 0x00007fff49ad7f1a NSApplicationMain + 804

13 libdyld.dylib 0x00007fff73e40115 start + 1



Thread 1:

0 libsystem_kernel.dylib 0x00007fff73f8fcee __psynch_cvwait + 10

1 libsystem_pthread.dylib 0x00007fff740cc662 _pthread_cond_wait + 732

2 libc++.1.dylib 0x00007fff71e75cb0 std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) + 18

3 com.apple.JavaScriptCore 0x00007fff5006fb16 void std::__1::condition_variable_any::wait<std::__1::unique_lock<bmalloc::Mutex> >(std::__1::unique_lock<bmalloc::Mutex>&) + 86

4 com.apple.JavaScriptCore 0x00007fff5006fa4b bmalloc::AsyncTask<bmalloc::Heap, void (bmalloc::Heap::*)()>::threadRunLoop() + 139

5 com.apple.JavaScriptCore 0x00007fff5006fd78 void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__threa d_struct, std::__1::default_delete<std::__1::__thread_struct> >, void (*)(bmalloc::AsyncTask<bmalloc::Heap, void (bmalloc::Heap::*)()>*), bmalloc::AsyncTask<bmalloc::Heap, void (bmalloc::Heap::*)()>*> >(void*) + 40

6 libsystem_pthread.dylib 0x00007fff740cb6c1 _pthread_body + 340

7 libsystem_pthread.dylib 0x00007fff740cb56d _pthread_start + 377

8 libsystem_pthread.dylib 0x00007fff740cac5d thread_start + 13



Thread 2 Crashed:: Dispatch queue: com.apple.SafariShared.WBSCloudHistoryMergeOperation

0 libsystem_platform.dylib 0x00007fff740c4f49 _platform_memmove$VARIANT$Haswell + 41

1 com.apple.CoreFoundation 0x00007fff4c4d508f -[__NSArrayM insertObject:atIndex:] + 351

2 com.apple.Safari.Shared 0x00007fff6c4fc34e -[WBSCloudHistoryMergeOperation _filterVisitsByTombstones] + 1604

3 com.apple.Safari.Shared 0x00007fff6c4fb9b0 __53-[WBSCloudHistoryMergeOperation mergeWithCompletion:]_block_invoke_2 + 55

4 libdispatch.dylib 0x00007fff73e0e591 _dispatch_call_block_and_release + 12

5 libdispatch.dylib 0x00007fff73e06d50 _dispatch_client_callout + 8

6 libdispatch.dylib 0x00007fff73e1b20c _dispatch_queue_serial_drain + 635

7 libdispatch.dylib 0x00007fff73e0e0fd _dispatch_queue_invoke + 373

8 libdispatch.dylib 0x00007fff73e1bf02 _dispatch_root_queue_drain_deferred_wlh + 332

9 libdispatch.dylib 0x00007fff73e1fd16 _dispatch_workloop_worker_thread + 880

10 libsystem_pthread.dylib 0x00007fff740cb033 _pthread_wqthread + 980

11 libsystem_pthread.dylib 0x00007fff740cac4d start_wqthread + 13



Thread 3:: com.apple.coreanimation.render-server

0 libsystem_kernel.dylib 0x00007fff73f867c2 mach_msg_trap + 10

1 libsystem_kernel.dylib 0x00007fff73f85cdc mach_msg + 60

2 com.apple.QuartzCore 0x00007fff5764fce5 CA::Render::Server::server_thread(void*) + 481

3 com.apple.QuartzCore 0x00007fff5764faf6 thread_fun + 25

4 libsystem_pthread.dylib 0x00007fff740cb6c1 _pthread_body + 340

5 libsystem_pthread.dylib 0x00007fff740cb56d _pthread_start + 377

6 libsystem_pthread.dylib 0x00007fff740cac5d thread_start + 13



Thread 4:: com.apple.NSEventThread

0 libsystem_kernel.dylib 0x00007fff73f867c2 mach_msg_trap + 10

1 libsystem_kernel.dylib 0x00007fff73f85cdc mach_msg + 60

2 com.apple.CoreFoundation 0x00007fff4c532575 __CFRunLoopServiceMachPort + 341

3 com.apple.CoreFoundation 0x00007fff4c5318c7 __CFRunLoopRun + 1783

4 com.apple.CoreFoundation 0x00007fff4c530f43 CFRunLoopRunSpecific + 483

5 com.apple.AppKit 0x00007fff49c513c8 _NSEventThread + 184

6 libsystem_pthread.dylib 0x00007fff740cb6c1 _pthread_body + 340

7 libsystem_pthread.dylib 0x00007fff740cb56d _pthread_start + 377

8 libsystem_pthread.dylib 0x00007fff740cac5d thread_start + 13



Thread 5:: com.apple.CFSocket.private

0 libsystem_kernel.dylib 0x00007fff73f8ffca __select + 10

1 com.apple.CoreFoundation 0x00007fff4c56c59b __CFSocketManager + 635

2 libsystem_pthread.dylib 0x00007fff740cb6c1 _pthread_body + 340

3 libsystem_pthread.dylib 0x00007fff740cb56d _pthread_start + 377

4 libsystem_pthread.dylib 0x00007fff740cac5d thread_start + 13



Thread 6:

0 libsystem_kernel.dylib 0x00007fff73f90562 __workq_kernreturn + 10

1 libsystem_pthread.dylib 0x00007fff740cb06a _pthread_wqthread + 1035

2 libsystem_pthread.dylib 0x00007fff740cac4d start_wqthread + 13



Thread 2 crashed with X86 Thread State (64-bit):

rax: 0x000000010d0c8000 rbx: 0x00000000a271da00 rcx: 0x00000004d3c6b000 rdx: 0x00000005138ed000

rdi: 0x000000014cd4a000 rsi: 0x000000096a9d2000 rbp: 0x0000700005b583d0 rsp: 0x0000700005b583d0

r8: 0x0000000102b35d80 r9: 0x00000000000000a9 r10: 0x0000000102b35000 r11: 0xfffffff7e2378000

r12: 0x000000010d0c8000 r13: 0x000000003fc82000 r14: 0x00000000a271da00 r15: 0x00000000a271da00

rip: 0x00007fff740c4f49 rfl: 0x0000000000010206 cr2: 0x000000014cd4a000


Logical CPU: 0

Error Code: 0x00000006

Trap Number: 14


EtreCheck latest version


EtreCheck version: 3.4.7 (461)

Report generated 2018-02-12 17:53:35

Download EtreCheck from https://etrecheck.com

Runtime: 2:32

Performance: Excellent


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.


Problem: Apps are crashing


Hardware Information:

MacBook Pro (Retina, 13-inch, Late 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro11,1

1 2,8 GHz Intel Core i7 (i7-4558U) CPU: 2-core

16 GB RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Replace Soon - Cycle count = 1271

iCloud Quota: 1.38 GB available


Video Information:

Intel Iris - VRAM: 1536 MB

Color LCD 2560 x 1600


Disk Information:

APPLE SSD SM0512F disk0: (500,28 GB) (Solid State - TRIM: Yes)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

(disk0s2) <not mounted> [APFS Container]: 500.07 GB


USB Information:

USB30Bus

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Virtual disks:

Macintosh HD (disk1s1 - APFS) / [Startup]: 500.07 GB (35.15 GB free)

Physical disk: disk0s2 500.07 GB (35.15 GB free)

(disk1s2) <not mounted> [Preboot]: 500.07 GB

Physical disk: disk0s2 500.07 GB

(disk1s3) <not mounted> [Recovery]: 500.07 GB

Physical disk: disk0s2 500.07 GB

(disk1s4) /private/var/vm [VM]: 500.07 GB

Physical disk: disk0s2 500.07 GB


System Software:

macOS High Sierra 10.13.3 (17D47) - Time since boot: about 3 days


Configuration files:

/etc/sysctl.conf - File exists but not expected

/etc/hosts - Count: 23


Gatekeeper:

Mac App Store and identified developers


Kernel Extensions:

/Library/Extensions

[loaded] at.obdev.nke.LittleSnitch (3.8.2 - SDK 10.11) [Lookup]

[loaded] com.malwarebytes.mbam.rtprotection (3.1 - SDK 10.12) [Lookup]

[not loaded] com.razer.common.razerhid (21.41 - SDK 10.9) [Lookup]


/System/Library/Extensions

[not loaded] com.paceap.kext.pacesupport.master (5.9.1 - SDK 10.6) [Lookup]

[not loaded] com.wdc.driver.1394.64.10.9 (1.0.1 - SDK 10.9) [Lookup]

[not loaded] com.wdc.driver.USB.64.10.9 (1.0.1 - SDK 10.9) [Lookup]


/System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns

[not loaded] com.paceap.kext.pacesupport.leopard (5.9.1 - SDK 10.4) [Lookup]

[not loaded] com.paceap.kext.pacesupport.panther (5.9.1 - SDK 10.-1) [Lookup]

[not loaded] com.paceap.kext.pacesupport.snowleopard (5.9.1 - SDK 10.6) [Lookup]

[not loaded] com.paceap.kext.pacesupport.tiger (5.9.1 - SDK 10.4) [Lookup]


System Launch Agents:

[not loaded] 8 Apple tasks

[loaded] 152 Apple tasks

[running] 130 Apple tasks


System Launch Daemons:

[not loaded] 34 Apple tasks

[loaded] 164 Apple tasks

[running] 132 Apple tasks


Launch Agents:

[running] at.obdev.LittleSnitchUIAgent.plist (Objective Development Software GmbH - installed 2017-12-06) [Lookup]

[running] com.brother.LOGINserver.plist (? a1772de2 41ad4933 - installed 2016-04-22) [Lookup]

[running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-02-09) [Lookup]

[not loaded] com.oracle.java.Java-Updater.plist (? 0 ? - installed (null)) [Lookup]

[running] com.razer.rzupdater.plist (? 2bbe2bd1 b32aa7ee - installed 2018-02-09) [Lookup]

[not loaded] com.razerzone.rzdeviceengine.plist (? 516e794c 65a43b66 - installed 2018-02-09) [Lookup]


Launch Daemons:

[running] at.obdev.littlesnitchd.plist (Objective Development Software GmbH - installed 2017-12-06) [Lookup]

[loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-02) [Lookup]

[loaded] com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2018-01-19)

[running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-02-09) [Lookup]

[running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-02-09) [Lookup]

[not loaded] com.oracle.java.Helper-Tool.plist (? 0 ? - installed (null)) [Lookup]

[failed] com.prey.agent.plist (Shell Script 714c4ad6 - installed 2016-09-02) [Lookup]


User Launch Agents:

[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-11) [Lookup]

[loaded] com.valvesoftware.steamclean.plist (? de9825c7 9dc4717 - installed 2016-08-28) [Lookup]


User Login Items:

MEGAsync Application

(/Applications/MEGAsync.app)

ColorsHelpersApp SMLoginItem - Hidden (Apple, Inc. - installed 2017-04-17)

(/Applications/Colors.app/Contents/Library/LoginItems/ColorsHelpersApp.app)

(null) SMLoginItem - Hidden (Apple, Inc. - installed 2017-12-20)

(/Applications/Compressor.app/Contents/Library/LoginItems/CompressorHelper.app)


Internet Plug-ins:

AdobeExManDetect: Unknown (installed 2016-03-16)

AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (installed 2016-03-16) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2018-01-19)

AdobePDFViewerNPAPI: 15.020.20039 (installed 2016-10-01) [Lookup]

AdobePDFViewer: 15.020.20039 (installed 2016-10-01) [Lookup]

o1dbrowserplugin: 5.41.3.0 (installed 2016-01-23) [Lookup]

Flash Player: 28.0.0.161 (installed 2018-02-06) [Lookup]

FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-06) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2016-12-11) [Lookup]

Silverlight: 5.1.50428.0 (installed 2016-07-04) [Lookup]

iPhotoPhotocast: 7.0 (installed 2014-07-28)


Safari Extensions:

[disabled] AdBlock - BetaFish, Inc. - https://getadblock.com (installed 2017-11-16)

[disabled] Adblock Plus - Eyeo GmbH - https://adblockplus.org/ (installed 2016-12-23)


3rd Party Preference Panes:

Flash Player (installed 2018-02-02) [Lookup]

Tuxera NTFS (installed 2014-04-02) [Lookup]


Time Machine:

Skip System Files: NO

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 500.07 GB Disk used: 464.92 GB

Destinations:

Data [Network]

Total size: 997.71 GB

Total number of backups: 156

Oldest backup: 07/11/2017, 02:12

Last backup: 12/02/2018, 17:04

Size of backup disk: Too small

Backup size 997.71 GB < (Disk used 464.92 GB X 3)


Top Processes by CPU:

155% kernel_task

82% Safari

24% RTProtectionDaemon

8% WindowServer

3% fud


Top Processes by Memory:

3.32 GB Safari

1.33 GB kernel_task

117 MB com.apple.WebKit.WebContent

113 MB mds_stores

91 MB WindowServer


Top Processes by Network Use:

Input Output Process name

19 MB 2 MB mDNSResponder

307 KB 135 KB netbiosd

181 KB 174 KB com.apple.WebKit.Networking

21 KB 8 KB Mail

9 KB 8 KB apsd


Top Processes by Energy Use:

82.68 Safari

17.50 RTProtectionDaemon

14.80 WindowServer

4.50 com.apple.WebKit.WebContent

1.06 hidd


Virtual Memory Information:

6.85 GB Available RAM

4.19 GB Free RAM

9.15 GB Used RAM

2.66 GB Cached files

2.62 GB Swap Used


Software installs (last 30 days):

OldDeviceUninstaller: (installed 2018-02-09)

RzUpdater: (installed 2018-02-09)

1517208704rzrmodRazerHid: (installed 2018-02-09)

RzCoreStorage: (installed 2018-02-09)

Razer Synapse: (installed 2018-02-09)

Uninstall Razer Synapse: (installed 2018-02-09)

Malwarebytes for Mac: (installed 2018-02-09)


Install information may not be complete.


Diagnostics Events (last 3 days for minor events):

2018-02-12 15:40:28 Safari.app High CPU use [Open] [Details]

2018-02-12 12:58:09 backupd High CPU use [Open] [Details]

2018-02-12 10:43:00 ReportCrash Crash [Open]

Cause: Analyzing process: EtreCheck[6203], path: ???; parent process: [1], path: /sbin/launchd

2018-02-09 21:08:06 RzUpdater.app Crash [Open]

Cause: objc_msgSend() selector name: addObject:

2018-02-09 19:15:16 Last shutdown cause: 3 - Hard shutdown


Files deleted by EtreCheck:

2018-02-11 23:25:16 - ~/Library/LaunchAgents/com.skype.skype.shareagent.plist - Unknown

2018-02-12 11:28:50 - ~/Library/LaunchAgents/mega.mac.megaupdater.plist - Unknown

Feb 15, 2018 12:30 PM in response to Eric Root

Hello Eric

Thank you for your help. I reinstalled 10.13.3, I removed all plugins, I do not have Java installed, and Flash is in latest version. But crashes every 5 min.


Etrecheck

EtreCheck version: 4.0 (4A128)

Report generated: 2018-02-15 21:29:24

Download EtreCheck from https://etrecheck.com

Runtime: 2:50

Performance: Excellent


Problem: Other problem


Major Issues:

Anything that appears on this list needs immediate attention.


Missing security updates - This machine is missing security updates from Apple. This computer is at risk of malware infection.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Heavy RAM usage - This machine is using a large amount of RAM.

High battery cycle count - Your battery may be losing capacity.

Small backup drive - Time Machine backup drive is too small.

Unsigned files - There is unsigned software installed. It appears to be legitimate but should be reviewed.

Corrupt hosts file - Hosts file is corrupt.


Hardware Information:

MacBook Pro (Retina, 13-inch, Late 2013)

MacBook Pro Model: MacBookPro11,1

1 2,8 GHz Intel Core i7 (i7-4558U) CPU: 2-core

16 RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 ok

BANK 1/DIMM0

8 GB DDR3 1600 ok

Battery: Health = Replace Soon - Cycle count = 1275


Video Information:

Intel Iris - VRAM: 1536 MB

Color LCD 2560 x 1600


Drives:

disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)

Internal PCI 5.0 GT/s x2 Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 500.07 GB

disk1s1 - Macintosh HD (APFS) 500.07 GB 464.90 GB

disk1s2 - Preboot (APFS) [APFS Preboot] 500.07 GB 20 MB

disk1s3 - Recovery (APFS) [Recovery] 500.07 GB 510 MB

disk1s4 - VM (APFS) [APFS VM] 500.07 GB 2.15 GB


Mounted Volumes:

disk1s1 - Macintosh HD 500.07 GB (32.34 GB free)

APFS

Mount point: /


disk1s4 - VM [APFS VM] 500.07 GB (32.34 GB free)

APFS

Mount point: /private/var/vm


Network:

Interface en4: Thunderbolt Ethernet

Interface en6: iPad

Interface en5: iPhone

Interface en0: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

2 IPv6 addresses

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 1.37 GB available


System Software:

macOS High Sierra 10.13.3 (17D47)

Time since boot: Less than an hour

System Load: 2.72 (1 min ago) 3.59 (5 min ago) 3.47 (15 min ago)


Configuration Files:

File /etc/sysctl.conf exists but not expected

/etc/hosts - Count: 23 - Corrupt!


Security:

Versions
SystemLatestInstalledStatus
Gatekeeper13594Mac App Store and identified developers">Adware pattern match
XProtect20982097
Malware Removal Tool1.291.27
System Integrity ProtectionEnabled


Unsigned Files:

Launchd: /Library/LaunchAgents/com.razer.rzupdater.plist

Executable: /Library/Application Support/Razer/RzUpdater.app/Contents/MacOS/RzUpdater

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.brother.LOGINserver.plist

Executable: /Library/Printers/Brother/Utilities/Server/LOGINserver.app/Contents/MacOS/LOGIN server

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/mega.mac.megaupdater.plist

Executable: /Applications/MEGAsync.app/Contents/MacOS/MEGAupdater

Details: Domain name invalid - possibly adware

Launchd: /Library/LaunchDaemons/com.prey.agent.plist

Executable: /usr/local/lib/prey/current/bin/prey

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.valvesoftware.steamclean.plist

Executable: ~/Library/Application Support/Steam/SteamApps/steamclean

Details: Exact match found in the whitelist - probably OK


Kernel Extensions:

/Library/Extensions

[Loaded] LittleSnitch.kext (3.8.2 - SDK 10.11)

[Loaded] com.malwarebytes.mbam.rtprotection.kext (3.1 - SDK 10.12)

[Not Loaded] RazerHid.kext (21.41 - SDK 10.9)

/System/Library/Extensions

[Not Loaded] PACESupportFamily.kext (5.9.1 - SDK 10.6)

[Not Loaded] WD1394_64_109HPDriver.kext (1.0.1 - SDK 10.9)

[Not Loaded] WDUSB_64_109HPDriver.kext (1.0.1 - SDK 10.9)

/System/Library/Extensions/PACESupportFamily.kext/Contents/PlugIns

[Not Loaded] PACESupportLeopard.kext (5.9.1 - SDK 10.4)

[Not Loaded] PACESupportPanther.kext (5.9.1 - SDK 10.-1)

[Not Loaded] PACESupportSnowLeopard.kext (5.9.1 - SDK 10.6)

[Not Loaded] PACESupportTiger.kext (5.9.1 - SDK 10.4)


System Launch Agents:

[Not Loaded] 8 Apple tasks
[Loaded] 168 Apple tasks
[Running] 114 Apple tasks


System Launch Daemons:

[Not Loaded] 32 Apple tasks
[Loaded] 183 Apple tasks
[Running] 117 Apple tasks


Launch Agents:

[Running] at.obdev.LittleSnitchUIAgent.plist (Objective Development Software GmbH - installed 2017-12-06)
[Running] com.razerzone.rzdeviceengine.plist (Razer USA Ltd. - installed 2018-02-09)
[Running] com.razer.rzupdater.plist (? 2bbe2bd1 - installed 2018-02-09)
[Not Loaded] com.oracle.java.Java-Updater.plist (? 0 - installed )
[Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2017-10-24)
[Running] com.brother.LOGINserver.plist (? a1772de2 - installed 2015-10-13)


Launch Daemons:

[Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2017-10-24)
[Running] at.obdev.littlesnitchd.plist (Objective Development Software GmbH - installed 2017-12-06)
[Loaded] com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2018-01-19)
[Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2017-10-24)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-02)
[Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed )
[Other] com.prey.agent.plist (? 714c4ad6 - installed 2016-09-02)


User Launch Agents:

[Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-10)
[Not Loaded] mega.mac.megaupdater.plist (? 0 - installed 2018-01-21)
[Loaded] com.valvesoftware.steamclean.plist (? 0 - installed 2016-01-02)


User Login Items:

MEGAsync Application

(/Applications/MEGAsync.app)

CompressorHelper SMLoginItem (Mac App Store - installed 2017-12-20)

(/Applications/Compressor.app/Contents/Library/LoginItems/CompressorHelper.app)


Internet Plug-ins:

AdobeExManDetect: Unknown (installed 2016-03-16)

AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (installed 2016-03-16)

QuickTime Plugin: 7.7.3 (installed 2018-02-14)

AdobePDFViewerNPAPI: 15.020.20039 (installed 2016-10-01)

AdobePDFViewer: 15.020.20039 (installed 2016-10-01)

o1dbrowserplugin: 5.41.3.0 (installed 2016-01-23)

Flash Player: 28.0.0.161 (installed 2018-02-06)

FlashPlayer-10.6: 28.0.0.161 (installed 2018-02-06)

Google Earth Web Plug-in: 7.1 (installed 2016-12-11)

Silverlight: 5.1.50428.0 (installed 2016-07-04)

iPhotoPhotocast: 7.0 (installed 2014-07-28)


Safari Extensions:

Adblock Plus.safariextz - Eyeo GmbH - https://adblockplus.org/ (installed 2014-09-11)


3rd Party Preference Panes:

Flash Player (installed 2018-02-02)

Tuxera NTFS (installed 2014-04-02)


Time Machine:

Skip System Files: No

Mobile backups: Yes

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 500.07 GB - Disk used: 467.73 GB

Destinations:

D**a [Network] (Last used)

Total size: 997.71 GB

Total number of backups: 179

Oldest backup: 2017-11-07 02:12:06

Last backup: 2018-02-15 15:59:30


Top Processes by CPU:

Process (count)Source% of CPU
SafariApple100
WindowServerApple6
kernel_taskApple2
opendirectorydApple1
RTProtectionDaemonMalwarebytes Corporation1


Top Processes by Memory:

Process (count)SourceRAM usage
SafariApple10.00 GB
kernel_taskApple1.00 GB
com.apple.WebKit.WebContent (9)Apple432 MB
mdworker (19)Apple264 MB
MailApple68 MB


Top Processes by Network Use:

ProcessSourceInputOutput
MailApple355 KB9 KB
mDNSResponderApple196 KB95 KB
apsdApple27 KB28 KB
com.apple.WebKit.NetworkingApple10 KB18 KB
netbiosdApple14 KB9 KB


Top Processes by Energy Use:

Process (count)SourceEnergy usage (0-100)
SafariApple13
RTProtectionDaemonMalwarebytes Corporation2
WindowServerApple1
mdsApple0
Little Snitch AgentObjective Development Software GmbH0


Virtual Memory Information:

Available RAM1.12 GB
Free RAM14 MB
Used RAM14.88 GB
Cached files1.11 GB
Swap Used1.66 GB


Diagnostics Information (past 7 days):

2018-02-15 21:02:17 Last Shutdown Cause: 3 - Hard shutdown

2018-02-15 16:07:51 RzDeviceEngine.app Crash

2018-02-12 10:43:00 ReportCrash Crash

Analyzing process: EtreCheck[6203], path: ???; parent process: [1], path: /sbin/launchd

2018-02-09 21:08:06 RzUpdater.app Crash

objc_msgSend() selector name: addObject:

2018-02-08 22:40:48 ConceptDraw PROJECT.app Crash


End of report





from apple report

Process: Safari [663]

Path: /Applications/Safari.app/Contents/MacOS/Safari

Identifier: com.apple.Safari

Version: 11.0.3 (13604.5.6)

Build Info: WebBrowser-7604005006000000~3

Code Type: X86-64 (Native)

Parent Process: ??? [1]

Responsible: Safari [663]

User ID: 501



Date/Time: 2018-02-15 21:23:21.275 +0100

OS Version: Mac OS X 10.13.3 (17D47)

Report Version: 12

Anonymous UUID: BDC30A23-6737-E779-E521-BCD8995EC563





Time Awake Since Boot: 1200 seconds



System Integrity Protection: enabled



Crashed Thread: 2 Dispatch queue: com.apple.SafariShared.WBSCloudHistoryMergeOperation



Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Codes: KERN_INVALID_ADDRESS at 0x000000031c4a9000

Exception Note: EXC_CORPSE_NOTIFY



Termination Signal: Segmentation fault: 11

Termination Reason: Namespace SIGNAL, Code 0xb

Terminating Process: exc handler [0]



VM Regions Near 0x31c4a9000:

MALLOC_LARGE 0000000169700000-000000031c4a9000 [ 6.8G] rw-/rwx SM=PRV

-->

MALLOC_LARGE 0000000aa4278000-000000109c107000 [ 23.9G] rw-/rwx SM=PRV

Feb 9, 2018 1:50 PM in response to mikecorp

mikecorp wrote:


What happened:

My son downloaded malware from facebook, called Animal Farm. It installed enormous amount of junk and adware such as bitcoin miner and some java applets and mackeeper. I managed to remove almost everything.

I use Ad blocker, ABP blocker Pro in Safari, I have Sophos Antivirus and Adware cleaner.

uninstall Sophos and Adware cleaner immediately.

Sophos Anti-Virus for Mac: How to uninstall - Sophos Communit

http://macsecurity.net/view/109/


mikecorp wrote:

Safari was crashing 5x an hour without any reason so I deleted caches but it did not work and at the end I reinstall 10.13.3. -> Safari doesn't crash anymore.


Quit out of Safari and relaunch it while holding down the SHIFT key


mikecorp wrote:


How do I find virus if Sophos and adware cleaner can not find anything?


thank you for your help

Sophos wont find anything because AV products for Mac cause far more harm than good and protect against PC threats, not mac ones - and thats when they don't throw false positives that direct you to make problems that they failed to do.

For futher analysis you may post an Etrecheck report. The link is http://www.etrecheck.com

in the mean time you can try malwarebytes for mac, www.malwarebytes.com

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to block Pop up Tabs mac keeper?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.