Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Unknown Process brpLelYq

A process named brpLelYq in my macbook pro 2015 is running since i have upgraded it to mojave, it is taking apporx upto 98% of cpu usage, i tried to force stop it but it starts again after some time, i have removed all my adobe products and some other 3rd party apps but could not find the thing which is the reason of its running, due to this process my mac is too hot as its fan is running in full speed all the time.

MacBook Pro

Posted on Jun 5, 2019 6:25 AM

Reply
Question marked as Best reply

Posted on Jun 5, 2019 9:22 PM

Thanks.


First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step is optional, but will preclude any related inability to use your Mac due to the adware's excessive demands imposed upon it. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish.


In the first screenshot (~/Library/LaunchAgents) select the files shown below:



Drag those files to the Trash. You will be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.


Repeat for these files in your second screenshot (/Library/LaunchDaemons):



Drag those files to the Trash.


Repeat for these files in your third screenshot (/Library/LaunchAgents):




Drag those files to the Trash.


Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use.


There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any Extensions that may have been installed without your knowledge. Ask if you're uncertain. While you're there, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but are also being leveraged by adware creators for nefarious purposes.


Next: Click the Finder's Go menu, but this time hold an option key when you select it. A normally hidden Library will appear as a selection for as long as the option key is held. Select it to open the User Library. Look for a folder named SystemExtr. It is not related to the other files and may or may not be present, but if you find it, drag it to the Trash.


You can then restart your Mac. Confirm the rogue process no longer appears in Activity Monitor and that its operation generally returns to normal.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware will bear identical names ("unmutation" etc). Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Finally: if any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

11 replies
Question marked as Best reply

Jun 5, 2019 9:22 PM in response to Good4963

Thanks.


First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step is optional, but will preclude any related inability to use your Mac due to the adware's excessive demands imposed upon it. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish.


In the first screenshot (~/Library/LaunchAgents) select the files shown below:



Drag those files to the Trash. You will be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.


Repeat for these files in your second screenshot (/Library/LaunchDaemons):



Drag those files to the Trash.


Repeat for these files in your third screenshot (/Library/LaunchAgents):




Drag those files to the Trash.


Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use.


There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any Extensions that may have been installed without your knowledge. Ask if you're uncertain. While you're there, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but are also being leveraged by adware creators for nefarious purposes.


Next: Click the Finder's Go menu, but this time hold an option key when you select it. A normally hidden Library will appear as a selection for as long as the option key is held. Select it to open the User Library. Look for a folder named SystemExtr. It is not related to the other files and may or may not be present, but if you find it, drag it to the Trash.


You can then restart your Mac. Confirm the rogue process no longer appears in Activity Monitor and that its operation generally returns to normal.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware will bear identical names ("unmutation" etc). Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Finally: if any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Jun 5, 2019 10:27 AM in response to Good4963

You inadvertently installed adware. You do not need to download or install anything to fix it.


Navigate to the following folder, and post its contents in a screenshot.


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:





... and click the Go button.


A Finder window will open. Take a screenshot showing all that folder's contents, and post it in a reply. To take a screenshot read the Appendix in the following User Tip: Writing an effective Apple Support Communities question.


Usually, there is nothing in that folder so don't be surprised to find it empty. The reason for starting with that folder is to eliminate other potential causes before proceeding with steps that will identify and eradicate whatever is affecting that Mac.


There will be additional instructions to follow and this is just the first step.


For a description of how this may have occurred, how to avoid it in the future, and for Apple's recommended actions read How to install adware.


Review your Gatekeeper settings: OS X : About Gatekeeper - Apple Support. Gatekeeper is designed to help prevent you from inadvertently installing garbage software.


If you get impatient and want to "read ahead" the remedy will follow the format of this Discussion: "root" process has high energy impact which drains my battery fast.


..., i have removed all my adobe products


The problem is unrelated to Adobe, so if you need those products you may reinstall them from their original sources.

Jun 5, 2019 11:59 AM in response to Good4963

Thanks. In the same manner as the above, open the following folder:


/Library/LaunchDaemons


To open that folder, copy and paste it in the Finder's Go menu > Go to Folder... field. It should look like this:



..and click the Go button.


A different Finder window will open. Once again ensure all its files and their names are readable, take a screenshot, and post it.

Jun 7, 2019 5:58 AM in response to Good4963

First, confirm that you removed the SystemExtr file in your first screenshot (repeated here for reference):



Make sure it's not there any more.


Then, confirm you did the following:


Click the Finder's Go menu, but this time hold an option key when you select it. A normally hidden Library will appear as a selection for as long as the option key is held. Select it to open the User Library. Look for a folder named SystemExtr. It is not related to the other files and may or may not be present, but if you find it, drag it to the Trash.


You may need to boot Safe Mode before doing any of the above, as you did initially.

Unknown Process brpLelYq

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.