Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

15 points

ksfetch ( nobody ) how do I get rid of it

I am going crazy with ksfetch ( nobody ) its only been going a few days .... could someone please explain what this is ?. KSoutof processor fetcher .It wont be silenced by my snitch firewall ...its tantamount to spam I deny it access but it keeps coming back... Im getting it about 10 times a day ... Ive searched it ..cant find out much other than its Google and might have something to do with chrome ..I dont have chrome.... I de be grateful if anyone could tell me what it is ..and how I turn it off . many thanks

MacBook Pro, Mac OS X (10.6.8), Macbook Pro , Me.com & 2 OTHER MACS

Posted on Jun 21, 2012 6:13 AM

Best reply

ds store

Level 7

30,735 points

Posted on Jun 21, 2012 6:55 AM

You must have installed some sort of Google software, because it installed a background updater that changes ports.

Even if uninstalled all Google software, this background process continues.

You can choose to uninstall all Google software and the background updater here

https://support.google.com/installer/bin/answer.py?hl=en&answer=100386

Or you can set that ksfetch process to allow no outbound connection forever in Little Snitch.

However it might be if any Google software your using detects the Google background updater isn't working may go and reinstall it, I don't know how if this will affect LittleSntich or not and if it will continue blocking it or Google will fill up your boot drive with copies of Google background updater.

Google is a purely evil company, they use Mac's there and know Mac users like to use LittleSnitch, so they screw around and cause people problems.

Google doesn't even provide a uninstaller for their Software updater, this is basically malware.

http://productforums.google.com/forum/#!topic/chrome/yVump44eeOc

View in context

58 replies

Jul 28, 2012 4:07 AM in response to ds store

Hi !

Thanks for the link to uninstall Google & Background Updater.

It looks to have solved my issue with Ksfetch making my Virus Barrier Firewall beep all all day long !

Best regards,

Jean.

Jul 28, 2012 10:07 AM in response to Rodko

After KSURL a couple of weeks ago, I'm now continuously HARRASSED by KSFETCH. I deleted google chrome, removed the google software update directory from the library directory, and denied outgoing communications to google earth in my internet security software. Anyone who can tell me where the bloody thing resides, please inform. Thanks.

Jul 28, 2012 11:24 AM in response to Mitchell Tren-ton

Hi !

Personally I used this link to Google to uninstall Google software and related

background update and I seems to work fine.

See previous post by "ds store".

https://support.google.com/installer/bin/answer.py?hl=en&answer=100386

and use the console command line they give for single user remove.

Hope it works fine for you to.

Best regards,

Jean.

Jul 28, 2012 11:39 AM in response to montcley.jean

Thanks Jean. I followed your suggestion. When I pasted the command in Terminal, I was told: "command not found", probably on account I deleted the library/google/googlesoftwareupdate library? So now what? Why can't I kill this thing?

Jul 28, 2012 11:47 AM in response to Mitchell Tren-ton

Sorry to read that !

I don't see how to help you further ...

Just one suggestion : were you logged on your mac with the account you are having Ksfetch issue when

you typed the command on the terminal ?

Jean.

Jul 28, 2012 12:17 PM in response to montcley.jean

Thanks Jean.

Well, I'd have to check that. But in the meantime, I realized that directory

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resour ces/GoogleSoftwareUpdateAgent.app/Contents/Resources/install.py --uninstall

never was on my system. So it's logical that the command would not be found.

All that was there was:

/Library/Google/GoogleSoftwareUpdate/Ticketstore/

this directory contained two files: Keystone.ticketstore and Keystone.ticketstore.lock

these files were responsible for that dreadful KSURL earlier on.

So now they've spun around and came back with KSFETCH.

But WHERE IS the bloody thing?

Greetings, Mitch

Lo2

Level 1

0 points

Jul 28, 2012 12:17 PM in response to Mitchell Tren-ton

Hello

There is 2 libraries : One for the system, another for each user. you have to kill all google folders to get rid off that.

Loïc

Jul 28, 2012 12:34 PM in response to Lo2

Hello Loïc.

Thanks for replying.

I found the macintosh HD/Library/Google/Googlesoftwareupdate/Ticketstore/

directory, which holds those two files Keystone.ticketstore and Keystone.ticketstore.lock

However, there's no library directory in

macintosh HD/Users/Mitchel Trenton/ (the directory with the house icon)?

Greetings, Mitch

Jul 28, 2012 2:10 PM in response to Mitchell Tren-ton

There is another Library - Macintosh HD > System > Library

I don't know if you'll find anything in there, but please be careful in that one; delete the wrong file and you could be re-installing.

Jul 29, 2012 10:07 AM in response to noondaywitch

Thanks for your input, everyone.

To sum things up: in spite of having removed both Google Earth AND Google Chrome and the Library/Google/Googlesoftwareupdate directory, ksfetch kept on attempting to establish contact with the home front.

When there's no physical remnants of Google software left on the computer, this would seem to indicate that IP addresses of computers that at one given time run Google software, are stored by Google and they're attempting to establish incoming connections into those systems? If anybody's got an explanation for this, I'd be happy to learn it.

It now looks as if I've succeeded in disabling ksfetch through entering "defaults write com.google.Keystone.Agent checkInterval 0", in terminal. At least, I hope so.

Greetings, Mitch.

SupportM

Level 1

9 points

Jul 30, 2012 2:51 PM in response to Mitchell Tren-ton

Okay, so I'm a very visual person. I tried several times, and what worked best for me was to go to: Library > Google > GoogleSoftwareUpdate folder, then Command-I, which brought up the info. I unlocked the bottom right, having to enter my admin pw, then LOCKED both the folder itself and then the bottom right lock as well. Haven't had a problem since!

Lo2

Level 1

0 points

Jul 31, 2012 12:42 PM in response to SupportM

No more problems for me to

🙂

ns194

Level 1

0 points

Jul 31, 2012 7:22 PM in response to Lo2

Thanks for the solution, Lo. Pretty simple to just change the permissions; didn't think of that!

Aug 8, 2012 6:10 AM in response to SupportM

SupportM, for some reason I cannot lock the folder as shown in your screen shot. The lower right locks fine but how how did you do it so that the locking icon appears on the folder itself?

SupportM

Level 1

9 points

Aug 9, 2012 1:37 AM in response to RandypTulsa

Maybe it was the order I did it in:

Change "Everyone" Priviledge to "No Access" by highlighting it and using the tool dropdown
Unlock lower right lock icon
Lock folder in "Preview" by just clicking on it
Lock the lower right icon last

I think that's right, or maybe 1 and 2 are reversed. Hope that helps!

ksfetch ( nobody ) how do I get rid of it