I noticed some eda_scan process, which runs all the time and consumes CPU. I am not big specialist in Mac OS so I don't know how to identify the purpose of it. I took couple screenshots:
I tried to Force Quit on it but it restarted again.
Does anybody know what eda_scan does and if there any way to make it less demanding for CPU?
Try using
Applications -> Utilities -> Terminal
sudo lsof | grep eda_scan
Password: [enter your account password here, then <return>; It will not echo, but it will be seen]
and see if it find any file paths that point to the owner of the process.
Try using
Applications -> Utilities -> Terminal
sudo lsof | grep eda_scan
Password: [enter your account password here, then <return>; It will not echo, but it will be seen]
and see if it find any file paths that point to the owner of the process.
Are you running any third party apps that claim to protect, clean, manage, boost performance, etc.? McAfee would be an example of such an app. If so uninstall the app.
Post an etrecheck report so that we can better see what is running on your computer.
I didn't have anything that I installed myself for that purpose. This Mac is from my employer and the corporate admins could install something like that. After I posted this question I did installed CleanMyMac X and it found and removed some old broken things in auto-start. Since then the eda_scan is running without such insane CPU usage, although it is still there. Maybe there were some combination of things that caused my issue.
I just installed the etrecheck and got the report:
Please let me know if you see anything suspicious.
Thank you, BobHarris.
That command helped me to find the folder where eda_scan is located while the Finder failed to find it.
eda_scan 647 root cwd DIR 1,4 2400 36861893 /usr/local/dgagent
eda_scan 647 root txt REG 1,4 60496 36862551 /usr/local/dgagent/eda_scan
eda_scan 647 root txt REG 1,4 10335580 36862464 /usr/local/dgagent/ACI/edk/libedk.so
eda_scan 647 root txt REG 1,4 28640 36861906 /usr/local/dgagent/libverify.so
eda_scan 647 root txt REG 1,4 149524 36862377 /usr/local/dgagent/ACI/kv/kvxtract.so
eda_scan 647 root txt REG 1,4 257516 36862380 /usr/local/dgagent/ACI/kv/kvfilter.so
eda_scan 647 root txt REG 1,4 716624 36862277 /usr/local/dgagent/ACI/kv/kvutil.so
eda_scan 647 root txt REG 1,4 655440 36862271 /usr/local/dgagent/ACI/kv/kwad.so
Seems like this is Data Loss Protection tool. Inside the /usr/local/dgagent folder among other things I found the configfiles that has the following:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.verdasys.dgagent</string>
<key>RunAtLoad</key>
<true/>
...
verdasys.com resolves to https://digitalguardian.com.
The mystery is solved.
What "eda_scan" does?