Q: Remote Desktop Client Update

Just what app/service is using the memory?

Run this and post the results here so we know more about your system

EtreCheck

This is the Mac Pro desktop forum. I requested your post be moved to the MacBook Pro laptop forum.

The Remote Desktop Client Update Version 3.8.4 that is being distributed by the Apple App Store has been modified and is not the same version that is included in the Yosemite OS X 10.10.5 installer. Upon running 'Verify Disk Permissions' from Disk Utility, I receive this; "Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired." This "Update" has been distributed by the Apple App Store since March, 2015.

The full installer of Yosemite OS X 10.10.5, released August 14, 2015 installs Remote Desktop Client version 3.8.3, and this file has not been modified. This led me to the question, if the Remote Desktop Client version 3.8.4 is the newest version released by Apple in March, then why is this version not the same version that is included in the Yosemite OS X 10.10.5 released on August 14, 2015? Why do I have to install this version from the App Store after a clean install of Yosemite OS X 10.10.5?

After opening both versions in Console and comparing these files, it is obvious that version 3.8.4 has definitely been very modified and appears to be a hacked file. How did this version get into the Apple App Store? Was this version really released by Apple?

If you have installed version 3.8.4 from the App Store at any time since March 2015 and have only updated your Yosemite OS through the App Store updates then this modified file is in your system.

To uninstall Remote Desktop Client completely from your system follow this path: System/Library/CoreServices/RemoteManagement, select this folder, right click and select "Move to Trash", you will then be asked for your Password.

To remove only the modified file, follow the same path and then continue to /ARDAgent.app, right click on the app and select "Show Package Contents" then continue this path, /Contents/MacOS/ARDAgent, right click on this ARDAgent file, select "Move to Trash" and authorize with your Password.

Then go to Finder > Empty Trash... or better yet, Secure Empty Trash....

What does this have to do with the question (it's wrong by the way) stop posting it unless it is relevant.

Apple Remote Desktop client is not actively used used by most Mac Users. It is provided and casually updated automatically to avoid a catch-22 situation in large Networks (that suddenly adopt centralized management using Apple Remote Desktop Server). Having the exact correct version is not crucial, as long as you have a fairly-current version

This is extremely unlikely to be the source of your troubles.

-------

The possible troublesome situation would occur in a large network when Apple Remote Desktop Server is activated for the first time, and attempts to communicate with hundreds of Macs that should have Apple Remote Desktop client available. Unless a fairly-recent version of Apple Remote Desktop client is already deployed, the System Admin would have to Physically visit each Mac and manually install Apple Remote Desktop client.

Instead, Apple Remote Desktop client is included in routine software updates for all Macs. In most Networks, it is not active. One-version-back is of no concern. 12 versions back or not present at all is the potential problem situation.

There is no advantage to removing this software. Even the very paranoid need not be concerned about it.

Finn7772 asked how to uninstall the Remote Desktop Client, the instructions are there!

There is no apparent limit to what the very paranoid may concern themselves with.

You haven't seen what I have seen!

Well obviously.

Be certain that your tinfoil hat is connected to a good Earth Ground at all times.

Have you tried searching for the error that sent you down this rabbit hole?

Mac OS X: Disk Utility's Repair Disk Permissions messages that you can safely ignore - Apple Support

Apple clearly state that the error message is normal and can be ignored.

I suggest you rethink why you assume the file is a 'hacked file'. Apple don't always bundle every update into subsequent OS updates again it is normal to have updates after a clean install of minor pieces of the OS.

It was not a clean install of minor pieces of the OS, It was a clean install of the Full 10.10.5 Yosemite installer, everything current should have been there!

Seriously, Open the ARDAgent file in Console and read it, compare it to an older version.

<Edited by Host>

JWDemon wrote:

 

It was not a clean install of minor pieces of the OS, It was a clean install of the Full 10.10.5 Yosemite installer, everything current should have been there!

 

Seriously, Open the ARDAgent file in Console and read it, compare it to an older version.

 

<Edited by Host>

You will need to be more specific about the error messages, what did they say in Console.

You can also inspect the installer packages for 10.10.5 if you desire, that will tell you if ARD 3.8.3 or 3.8.4 is included.

ARD is the minor piece of the OS, not the other way around.

Drew, I have been running the Yosemite Public Beta since the 10.10.2 update due to the Automatic graphics switching problem, the 3.8.4 ARD update was installed in March, I didn't know that there was a difference until I just did a clean install on a different volume.

I recently purchased a Transcend JetDrive Lite 350, 256GB! It's actually an SDXC card that installs flush in the SD card slot of my MBP Retina (mid 2012). It reads at up to 90MB/sec. and writes at up to 60MB/sec., so I figured I would try installing an OS on it to see how well it would run. I made a fresh install of OS X 10.10.5 on it and it loads slower than my SSD but faster than a USB 3 external drive. Once loaded it runs great! After installing the OS I ran the disk permissions on it and noticed I did not get the warning that I always get running disk permissions on the SSD, so I began comparing the files. That's when I found out that 3.8.4 was installed by the App Store Updates so I had to question the Warnings, that led me to open the files in Console and the differences are drastic. I have deleted the 3.8.4 version from my SSD and allowed the App Store update to reinstall 3 times now just for testing. I just deleted version 3.8.4 for the last time and I will not be installing it again.

BTW, I also partitioned the JetDrive, reformatted the second partition to NTFS and copied my Boot Camp install of Windows 7 to the other partition and it runs great from the SDXC card as well!