You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

safe processes?

what is this ?


/private/var/run/com.apple.xpcproxy.RoleAccount.staging/com.apple.activititymoni tor.helper.16777218.735039.xpc/Contents/MacOS/com.apple.activititymonitor.helper


its a process running as a root process but doesn't have a name. Seems odd?

MacBook Pro with Retina display, OS X Mavericks (10.9.1), Malware

Posted on Mar 7, 2014 7:47 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 8, 2014 1:59 PM

Kappy;


You must be very knowledgable to respond so quickly with such a "determined" answer. Thank you. It's nice to have some way to communicate with people that can help explain some of these concerns.


Alan

6 replies

Sep 25, 2014 4:24 AM in response to Alan 648

[root:/] $ find / -name com.apple.activi*

/Applications/Utilities/Activity Monitor.app/Contents/XPCServices/com.apple.activititymonitor.helper.xpc

/Applications/Utilities/Activity Monitor.app/Contents/XPCServices/com.apple.activititymonitor.helper.xpc/Content s/MacOS/com.apple.activititymonitor.helper

/private/var/run/com.apple.xpcproxy.RoleAccount.staging/com.apple.activititymoni tor.helper.16777218.7792553.xpc

/private/var/run/com.apple.xpcproxy.RoleAccount.staging/com.apple.activititymoni tor.helper.16777218.7792553.xpc/Contents/MacOS/com.apple.activititymonitor.helpe r

when looking at the app:

drwxr-xr-x 3 root wheel 102 May 19 19:23 Activity Monitor.app

drwxr-xr-x 9 root wheel 306 May 19 19:21 Contents

In Contents:

-rw-r--r-- 1 root wheel 1877 May 19 19:18 Info.plist

drwxr-xr-x 3 root wheel 102 May 19 19:21 MacOS

-rw-r--r-- 1 root wheel 8 Oct 22 2013 PkgInfo

drwxr-xr-x 34 root wheel 1156 Jun 2 21:32 Resources

drwxr-xr-x 3 root wheel 102 Sep 9 2013 XPCServices

drwxr-xr-x 3 root wheel 102 May 19 19:21 _CodeSignature

-rw-r--r-- 1 root wheel 467 May 19 19:18 version.plist


In XPCServices:

drwxr-xr-x 3 root wheel 102 Sep 9 2013 com.apple.activititymonitor.helper.xpc


Look at the dates, only the last line and the host folder (XPCServices) have much older dates.


I checked on my other computer and the files are there with the same dates.


Not sure what to think of this.

safe processes?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.