Unknown Process ??? and Interface Unknown making lots of connections in Instruments

Question

Level 1

101 points

Unknown Process ??? and Interface Unknown making lots of connections in Instruments

I was wondering if anyone knows how I could investigate this further in Instruments since I don't have much experience with the software and the manual seems a little dated/complicated.

There's an unknown process called "???" with all of the info listed as zero not n/a like other processes and an "unknown interface" making thousands of connections as well that are active on my network. What's weird is there are other interfaces active but those aren't listed with the 3 that Instruments included in this report.

Does anyone know what may be happening? I've noticed a lot of unusual traffic of port 137 (SMB) but I don't use Samba or NetBIOS at all. Considering all the SMB related exploits making headlines recently I wonder if this is related also I've downloaded a trojan horse program called EtreCheck which may be responsible but I'm not sure. I could of course reinstall the OS at any time but would rather find out what this is about.

Posted on Jan 23, 2018 2:25 PM

Reply

Answer 1

Jan 23, 2018 4:25 PM in response to Lawrence Finch

Lawrence Finch wrote:

Remember you are responding to a troll who has been posting similar trafe in the past.

Indeed. But, I have trouble letting that sort of libelous trafe stand unchallenged. Etrecheck is such a useful tool for helping people on these forums. Making people suspicious of it doesn't help anyone.

Reply

Answer 2

Jan 23, 2018 4:22 PM in response to IdrisSeabright

Remember you are responding to a troll who has been posting similar trafe in the past.

Reply

Answer 3

Jan 23, 2018 4:10 PM in response to chase_daniel

chase_daniel wrote:

Considering all the SMB related exploits making headlines recently I wonder if this is related also I've downloaded a trojan horse program called EtreCheck which may be responsible but I'm not sure.

EtreCheck is not a Trojan horse program. It's a respected program by a respected forum member. It is not responsible for your problems.

Reply