Digitizer Activity Monitor-Is it necessary?
My ThinkPad W700 has some proprietary Lenovo software called the "Digitizer Activity Monitor." I'm trying to figure out what this program does and whether it is necessary or desireable to keep it. I'd like to remove it if it's not somtething I need because it hogs such a large percentage of CPU resources. It always uses at least 25% of my total CPU capacity and sometimes much more.
Solved!
Go to Solution.
Do you have the palmrest digitizer? If not, uninstall it. If so, make sure it's the latest version. If you don't plan on using it, you might consider uninstalling it as well.
I don't think it using 25% CPU is proper in any case.
W520: i7-2720QM, Q2000M at 1080/688/1376, 21GB RAM, 500GB + 750GB HDD, FHD screen
X61T: L7500, 3GB RAM, 500GB HDD, XGA screen, Ultrabase
Y3P: 5Y70, 8GB RAM, 256GB SSD, QHD+ screen
Similar Messages
-
I spent all night trying to fix this. It seems to me that someone has been trying to hack into my system with all of the random codes/lines in my terminal and i have all of his foreign IP addresses. And now i get this strange message that popped up in my terminal. Idk what it entirely means? I would very appreciate if someone could just walk me through this. Thank you very much.
First time poster. I have Macbook Pro. OSX. Just downloaded the new mavericks. I'm i have my firewall on. I stay secure. I run Netbarrier, Virusbarrier, IdentityScrubber.
I know something is a little odd or just doesn't make since about my activity monitor. Then my WiFi was hacked last night and this person was writing tons lines of commands/codes that i found in my terminal and my activity monitor doesn't look normal, and I've only been a mac owner for about a year now and i'm learning more and more but while trying to figure out what was going on this message popped up which concerned me the most. Any help would be most appreciated, thanks guys. I have my terminal full of his foreign ip addresses i noticed, and a lot of other commands and lines he wrote out that i definitely did not type myself. Can anyone give me a hand on this? Thanks
--- 192.168.1.103 ping statistics ---
10 packets transmitted, 0 packets received, 100.0% packet loss
Extol:~ FBI$ who
FBI console Nov 7 02:14
FBI ttys000 Nov 7 04:33
Extol:~ FBI$ whois
usage: whois [-aAbdgiIlmQrR6] [-c country-code | -h hostname] [-p port] name ...
Extol:~ FBI$ whois 192.168.1.103
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
# Query terms are ambiguous. The query is assumed to be:
# "n 192.168.1.103"
# Use "?" to get help.
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=192.168.1.103?showDetails=true&showARIN=false& ext=netref2
NetRange: 192.168.0.0 - 192.168.255.255
CIDR: 192.168.0.0/16
OriginAS:
NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED
NetHandle: NET-192-168-0-0-1
Parent: NET-192-0-0-0-0
NetType: IANA Special Use
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
RegDate: 1994-03-15
Updated: 2013-08-30
Ref: http://whois.arin.net/rest/net/NET-192-168-0-0-1
OrgName: Internet Assigned Numbers Authority
RegDate:
Updated: 2012-08-31
Ref: http://whois.arin.net/rest/org/IANA
OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone:
OrgTechEmail:
OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone
OrgAbuseEmail:
OrgAbuseRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
Extol:~ FBI$
Extol:~ FBI$ hosts
-bash: hosts: command not found
Extol:~ FBI$ who
FBI console Nov 7 02:14
FBI ttys000 Nov 7 04:33
Extol:~ FBI$ whois
usage: whois [-aAbdgiIlmQrR6] [-c country-code | -h hostname] [-p port] name ...
Extol:~ FBI$ whois 192.168.0.0 - 192.168.255.255
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
# Query terms are ambiguous. The query is assumed to be:
# "n 192.168.0.0"
# Use "?" to get help.
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=192.168.0.0?showDetails=true&showARIN=false&ex t=netref2
NetRange: 192.168.0.0 - 192.168.255.255
CIDR: 192.168.0.0/16
OriginAS:
NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED
NetHandle: NET-192-168-0-0-1
Parent: NET-192-0-0-0-0
NetType: IANA Special Use
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
RegDate: 1994-03-15
Updated: 2013-08-30
Ref: http://whois.arin.net/rest/net/NET-192-168-0-0-1
OrgName: Internet Assigned Numbers Authority
OrgId: IANA
Updated: 2012-08-31
Ref: http://whois.arin.net/rest/org/IANA
OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone:
OrgTechEmail
OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone:
OrgAbuseEmail:
OrgAbuseRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
No match for "-".
>>> Last update of whois database: Thu, 07 Nov 2013 13:19:14 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
# Query terms are ambiguous. The query is assumed to be:
# "n 192.168.255.255"
# Use "?" to get help.
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=192.168.255.255?showDetails=true&showARIN=fals e&ext=netref2
NetRange: 192.168.0.0 - 192.168.255.255
CIDR: 192.168.0.0/16
OriginAS:
NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED
NetHandle: NET-192-168-0-0-1
Parent: NET-192-0-0-0-0
NetType: IANA Special Use
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
RegDate: 1994-03-15
Updated: 2013-08-30
Ref: http://whois.arin.net/rest/net/NET-192-168-0-0-1
OrgName: Internet Assigned Numbers Authority
OrgId: IANA
RegDate:
Updated: 2012-08-31
Ref: http://whois.arin.net/rest/org/IANA
OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone:
OrgTechEmail
OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone:
OrgAbuseEmail:
OrgAbuseRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
<Personal Information Edited by Host>haha, so now i'm thinking. I'm learning the terminal as fast as i can but there are several lines of codes and commands in there that throws up red flags to me that i don't fully understand. It just looks fishy too me. It would be highly appreciated if someone could just check this out just to tell me that i don't need to worry about it. Or point me in the right direction. I just feel un easy about this. ha.
-
I'm running a Macbook Pro circa 2007 with OSX 10.6.8 and Firefox 27.0.1, and just had a circumstance that really puzzled me. I have a Hughesnet satellite modem with wireless router that I connect to via the airport, and I use Little Snitch software in the demo mode so I know and have to approve which software can send info through the internet connection., but the demo mode had just timed out and terminated and within a half hour of that the computer fans started speeding up to max and the CPU got blazing hot (+200 degF).
Worried, I looked at the activity monitor and it was showing lots of internet activity even though I wasn't doing anything on the internet at the time, and I have all my software updates set to manual because otherwise they would use up my allotted daytime bandwidth and leave none for me. I'd already completed manual software updates during the nightly free time recently. Fearing my computer was hijacked & out of my control, I turned the airport off to terminate the internet connection, BUT IT DIDN'T TURN OFF, and though the indicator in the top right of the screen said it was off, packets were still streaming back & forth like crazy on the activity monitor, and the poor thing was still overheating. So I rebooted the computer, and when it came back up there was no internet activity, and things started cooling down, back to normal again.
Though I'm no techie, this seems to me like my computer has been hijacked by some virus that has taken control of the airport and is feeding me lies about the internet connection status, so that it can use my computer for sending out its own messages. Has anyone heard of a virus that prevents the airport from being turned off, and what should I do about it? I'm afraid to back up my data with my time machine, though its been months since that was done, for fear I'd overwrite a virus-free state of the time machine files with a virus laden one, but I also hate to do something to clean up the machine without backing up my files, and lose a bunch of data. Is there virus protection software that could surgically search out and remove only the virus from my machine and leave most everything else untouched?
Any advice is welcome,
ChristinaHI and Welcome to Apple Discussions...
Try Changing the Airport Channel
Open AirPort Utility, located in the Utilities folder in the Applications folder on a computer using Mac OS X.
Select the device you’re setting up, and then click Manual Setup. Enter the base station password if necessary
Click AirPort in the toolbar, and then click Wireless.
Choose a new channel from the Channel pop-up menu.
Carolyn -
After using my computer for some time, CPU usage climbs to about 90% (ca. 65% user / 26% system) and fans run at high speed, but there is no processes that seem to use CPU (other than Activity Monitor itself ~1%).
This has happened a few times recently. It happens when I've used my computer for some time, hours or a couple of days (I usually put my computer to sleep when not using it but rarely shut it down). I've tried to quit all running apps incl. Growl, Dropbox, and anything that could be responsible to this but with no results. Putting computer to sleep for a long time doesn't help, cpu usage will climb instantly after wake up. Restarting system is the only thing that helps.
Most of the time I use my laptop with external monitor, lid closed and connected to power supply. When experiencing this, opening the lid causes fans to slow down, but CPU usage remains high and battery drains quick.
Any ideas what might cause this?
My MBP is 15" model with Core 2 Duo 2,66 GHz (MacBookPro 5,3), OS X version is 10.6.8, all available updates are installed.Perform a SMU reset.
https://support.apple.com/kb/HT3964
Remove the anti-virus, it's running a root level process all the time that's taking your CPU and it's not necessary as there are no Mac viruses, Apple has the trojan angle covered already.
Always on anti-virus on a Mac is always a source of problems, also is MacKeeper, uninstall that here if you have it.
http://applehelpwriter.com/2011/09/21/how-to-uninstall-mackeeper-malware/
If you need to clean the Windows filth off PC files, then use the free, run as you need, ClamXav.
http://www.clamxav.com/
It seems your machine is used in a corporate enviroment, thus likely a rule that anti-virus must be used, you can avoid high CPU usuage by using the ClamXav instead. -
Activity Monitor no longer works, but icon is there
Recently, my Activity Monitor App in the Utilities folder stoped working. You try to load it up , but it won't start up.
Is there a way to relaod this app without having to reload the OS X Panther, and do all the updates again?Open the Terminal in the /Applications/Utilities/ folder and run the following commands:
sudo chmod 4775 "/Applications/Utilities/Activity Monitor.app/Contents/Resources/pmTool"
sudo chown root:admin "/Applications/Utilities/Activity Monitor.app/Contents/Resources/pmTool"
Press Enter and type in your administrator password as necessary; when done, the Activity Monitor should open properly. Additionally, if you deleted some or all of the receipts from the /Library/Receipts/ folder, the ability of the Disk Utility to repair your permissions will be affected; you may need to reinstall Mac OS X to get the receipts back.
(10893) -
Can someone give me an Activity Monitor checkup?
I'd love to send a screenshot of all the info in Activity Monitor to someone who really knows what their doing, so they can give it a look over and let me know if there are any weird processes or memory hogs and how I can remove them permanently if necessary or advisable. Any ideas?
some more good info here and [here|http://discussions.apple.com/thread.jspa?threadID=2488963&tstart=0].
-
Activity monitor freezes and shows no processes
I've been having a recurring problem lately. I have two large Numbers files with lots of cell references. When working with these files, my MacBook's brain seems to be melting: operations as simple as changing worksheets can take a few minutes, editing cell contents can take several minutes more. Copying and pasting is a "set it up, make some lunch, come back and check" kind of operation.
The performance was so remarkably bad that I thought I should open up the Activity monitor and see how much of the CPU Numbers was using. However, I found that whenever I try to open the Activity Monitor, no processes are listed and the monitor hangs indefinitely with the swirling "waiting" pointer. No processes ever show up, no matter how long I wait, and the monitor is frozen with the "waiting" pointer. If I try to force quit the process, it is listed as "Not Responding".
Any suggestions for what might be going on here and how to fix it? Could the Activity Monitor and Numbers issue be related? I'd like to troubleshoot the Activity Monitor first and then move over to the Numbers forum if necessary to figure out the problem there.
Thanks very much,
AdrianHad to do a disk repair from the Mac OS X install disk.
-
Activity Monitor -- Memory. Details Needed.
Could anyone point out what exactly the "Free" and "Inactive" memory spaces are??
I'm running on a 2GB RAM MacBook Pro. I don't run too many mem intensive programs. But quite often the "Free" mem would drop to 100-150 MB. But at that point, the "Inactive" mem would be around 500-600 MB. So what exactly a I looking at? Am I facing a mem crunch?
I'm new to OSX. from my previous experience with Windows OSes, how much ever RAM you give it, the OS will take a huge chunk and then free up as necessary. Is it something like that that I'm looking at over here? Or am I supposed to go for a mem upgrade?
And I know the next question is might be out of place, but, after quite wome time of browsing on Firefox, it seems to take 500+ MB of RAM. Is that normal??
Thanks in advance for your replies & suggestions.About OS X Memory Management and Usage
Reading system memory usage in Activity Monitor
Memory Management in Mac OS X
Performance Guidelines- Memory Management in Mac OS X
A detailed look at memory usage in OS X
Understanding top output in the Terminal
The amount of available RAM for applications is the sum of Free RAM and Inactive RAM. This will change as applications are opened and closed or change from active to inactive status. The Swap figure represents an estimate of the total amount of swap space required for VM if used, but does not necessarily indicate the actual size of the existing swap file. If you are really in need of more RAM that would be indicated by how frequently the system uses VM. If you open the Terminal and run the top command at the prompt you will find information reported on Pageins () and Pageouts (). Pageouts () is the important figure. If the value in the parentheses is 0 (zero) then OS X is not making instantaneous use of VM which means you have adequate physical RAM for the system with the applications you have loaded. If the figure in parentheses is running positive and your hard drive is constantly being used (thrashing) then you need more physical RAM.
It's not abnormal for browsers to eventually use a huge amount of RAM. Use the latest version of your browser that's available. Emptying some of the browsers caches like the History cache will help somewhat, but the best way to recover the memory is to quit then relaunch the browser - or just don't worry about it and put more RAM in your computer. -
RE: activity monitor How do I decide which process to delete?
The directions state to choose the process that uses the highest percentage of CPU to help determine which process to delete. How can I know what is necessary and what is not?
The article on runaway applications and battery power did not help me at all.
Thank you!What directions?
Don't kill any process unless you know what the effect will be when you do or you don't care if it happens to crash or hang when you do (because in that case you would know why).
What exactly is the goal here or the reason to be trying this?
Maybe you need more ram. Check your Activity Monitor and read the folowing to help you determine that:
Using Activity Monitor to read System Memory and determine how much RAM is being used
Maybe you are having disk errors and need boot from your installer dvd to run Disk Utility to repair/verify your drive (not repair permissions). -
I've installed CS6 and web Premium on a Mac running 10.9.5, and Dreamweaver,Flash and Illustrator wont launch. All other components work normally. In Activity monitor it says Adobe switchboard failed to respond. Can anyone help solve this issue?
Release: 4/25/2012
http://support.amd.com/us/gpudownload/windows/Pages/radeonmob_win7-64.aspx -
Can not find my Program in Lion Activity Monitor until reboot again
Hi,
I have tried to installed the datacard driver and user interface program in Lion and reboot; however, the resident program to detect the device of datacard does not exist in Activity Monitor. I need to reboot again, then I can find it exits in Activity Monitor of Lion. This issue does not happen in Mac Snow/Snow Leopard(32-bit/64-bit). I use the Metapackage or terminal command line to install and both need to reboot one more time. My script is
sudo defaults write /Library/Preferences/loginwindow AutoLaunchedApplicationDictionary -array-add '{"Path" = "/opt/data/Monitor.app";"Hide" = "0";}'
Is it a side effect of finder known issue in Lion ? Or I need to use another way like "Launch Daemon" or "Launch Agent" to do?
Many thanks for your comment.
JasonI suspect it's Photoshop Express, the Adobe Touch App from the App Store
http://www.photoshop.com/tools/expresseditor
http://itunes.apple.com/us/app/adobe-photoshop-express/id331975235?mt=8&ls=1
Express forum
http://forums.adobe.com/community/psexpress -
Activity Monitor and Network Usage??
I'd like to get an idea of my network usage per month prior to signing up for a service plan, and I notice that the Network tab of Activity Monitor will track Data received. When or how does the number shown there get reset to zero? What would be the best way to track the network usage over a period of a week or so?
I believe the number is from your last login, but it shouldn't be too hard to test whether that is the starting point or the last restart.
Neither will help you track network usage over a specific period. For that, you will have to hunt down a utility on macupdate.com or versiontracker.com. I'm pretty sure I've seen some go by. You might search using terms like "ISP", "bandwidth", "network", and "meter". -
No data in the activity monitor
All of a sudden I don't have any data in the activity monitor. Here's what happened. I was using safari viewing online pictures. I kept getting the rolling ball between pictures and noticed that safari was using 100%+ in processor usage and safari seemed slow. So I rebooted and opened the activity monitor and no data shows up. I run a quick hardware test and all pass. I havn't gone back to the pictures yet but normal browsing seems to be fine. I watch a few 1080P trailers and they work fine too.
All ideas on why the monitor doesn't show data?
RayHmm...let's try this:
Go to User/Library/Preferences and drag the com.apple.ActivityMonitor.plist file to your Desktop. Then try launching Activity Monitor again to see if that makes anything show up. If so, then it was a corrupted preferences file, and you can then trash the one on your Desktop.
If that doesn't solve the problem, the only thing I can suggest is to Trash the application and the preferences file, then reinstall it from your 10.4 DVDs.
Mulder -
Application Sudo listed in Activity Monitor - Is this a default app that should be running?
First Question: Do other MBP users have an application Sudo listed in Activity Monitor from start up of their mac or with typical use?
Second Question: If you have Sudo process listed in your Activity Monitor, do you also use an Huawei USB wireless modem?
Third Question: For those experienced in relevant coding domains and given the more technical details below - your thoughts?
(Technical)
Using MBP Retina, mid 2012, OSX 10.8.4
I understand sudo is a unix root level access command.
I have used Terminal and become familiar with some basic unix commands, including using the sudo command in very limited single action command circumstances. I have not used Terminal for many weeks, and the sudo command probably twice several months ago.
Sudo showing in Activity Monitor as an active process is to my understanding an entirely different situation to it being used in Terminal. It appears the sudo process is being activated by some other application or process not of my direct use or actions.
I remain a little concerned about this in view of the purchase of this particular MBP. It has a story to it. I was told this MBP was available as new on discount as it had been purchased by a man for his wife, the wife then left him, and subsequently he returned it unused to the store. I was aware that there was a slim risk the laptop had been used for some other activities, and returned so any come back comes back to the new owner.
I noted later with use that the MBP lower keys were sticky as if something has been spilt on them, so I do wonder if the laptop was previously used, then wiped, in which case the story presented to the retailer is likely not true and a more concerning scenario becomes possible.
All the same, I felt a clean install should remove any risk. The MBP arrived in standard ready to set up and go mode, so OS loaded but no activation. So it seemed a clean install to me. I did not wipe the HD and do a fresh OS install from scratch. A decision I now regret.
Some months after using this new MBP, my concerns were raised when I had one day of inexplicable internet usage on a wireless internet connection. Not only did the level of data upload and data load, about 4 GB out of 20 GB for the month not make sense with actual usage, but also the MBP system logs did not tally with the internet providers accounting of usage on that day. There have been two or three other anomalies in usage since. The internet service provider reimbursed me on my evidence of OSX system logs. Not sure if the service provider has people joy riding other users accounts or something suss this end was going on. Never resolved. The ISP was not exactly forthcoming, and I had to press hard to get some collaboration on resolve the anomaly of unexplained data usage.
On the less suspicious side, the existence of this sudo program tracked down as in part coming from the install software from a Huawei modem provided by my internet provider. However, while widely used and therefore likely not a security risk, I still feel need for some better explanation and resolution of the persistent sudo process.
I have inquired to Apple Support about this sudo app running, and it apparently was not seen as an issue of concern by the front line support staff. I took up some further concerns with them but checks indicate no issues of concern with the MBP from their assessment. I trusted that as fairly likely a definitive view, and so left the questions and anomalies as unexplained but harmless.
It is now several months later and I still find the existence of sudo as a running application or process in Activity Monitor troubling, and decided to try and resolve once again how typical and for what reason it is active on my MBP. Which brings us to this post.
I have again spent a few hours searching on Google and Apple Support Forums. All search results I find relate to the use of sudo as a unix command in Terminal to resolve a problem. I can not find any indication of sudo as an app being open routinely in Activity Monitor with or without Terminal being opened or used.
The only way I can think of to resolve if this is unusal or not is to get on this forum and ask the first two questions at the top of this post.
More technical details follow.
For some more technically minded the details may be of interest, hence below here I have added details for further comment. I am hoping some MBP users on this forum may also be coders, and hence have some idea of the internal mac coding environment. Enough to shed some light on this situation.
As mentioned, I think the sudo Activity Monitor may originate from the running of the Internet Providers USB Wireless Modem and software (Huawei E 169? modem). The USB modem has the install software on it. You install that software on your HD as an application.
On this USB Wireless Modem front I have done some checking.
Killing sudo in Activity Monitor does not stop an internet connection mid session.
When the USB modem is removed, the sudo process remains running and listed in Activity Monitor.
If I remove the Modem icon, unplug modem, close all apps, restart without the modem connected, the sudo process is still loaded and running in Activity Monitor.
Months ago on a previous check if I deleted (uninstalled) the modem software, removed associated start up files installed by the modem installation, took out the USB Modem and did a restart, there was no return of the sudo process in Activity Monitor. When the modem software was reinstalled or the start up files restored directly, the sudo process returns to Activity Monitor. One of the software bits installed in start up files calls sudo (or so it appears having a peak in BBedit at the files.)
This seems to fairly much establish the source of the sudo application. However it does not resolve why it needs to be open all the time, and if this is unique to this modem, my modem, modems in general, or if permanent running sudo processes are fairly 'normal' in general. Since sudo is a root level access process, I do feel a little concerned of the situation. Let's say the sudo process is needed to initiate the modem under some justification. Does the sudo process in remaining running permanently from there on, with or without the USB modem connected leave an open access way and vulnerability that can or is used later? i do not know enough of the coding level architecture to form a view. Still, seeing a permanent sudo process operating does niggle by sense of suspicion. Hence, I continue to raise this issue and ask the questions I do.
In Activity Monitor:
sudo as a process when running is not very active.
Real Mem 8 KB, Virtual Mem 9.4 MB, Sent Msgs 75, Rcved Mesgs 26, Ports 25, Intel (64 bit).
The sudo process:
Using Sample Process in Activity Monitor: sudo appears to be a running of the actual sudo command from within the unix command files.
Path: /usr/bin/sudo (Master Library, not the one in the User files)
Load Address: (removed)
Identifier: sudo
Version: ??? (???)
Code Type: X86-64 (Native)
Parent Process: launchd [1]
Call graph
2nd line is 2656 start (in libdyld.dylib) + 1 [(removed)]
Binary Images:
Includes reference to lots of .dylib files. eg libcache.dylib, libquarantine.dylib, libremovefile.dylib, libcompiler_rt.dylib, libcorecrypto.dylib
The parent process is launchd[1]
Process: launchd [1]
Path: /sbin/launchd
Load Address: (removed)
Identifier: launchd
Version: ??? (???)
Code Type: X86-64 (Native)
Parent Process: ??? [Unknown]
It seems all of the activity of launchd[1] is from the sudo process.
Again reference to .dylib files as captured in call graph and Binary images.
I hope the details are valued by someone with an interest to assist with resolving concerns.Thanks,
I usually use the OS connection option. So as you suggest, connect without the ISP connection software. Doing so does not by-pass the sudo command being active in Activity Monitor however.
On reading my post I see my failure to link the concerns of the laptop purchase with the sudo and modem. My thought here is of an intersection of known vulnerability with this widely used modem/software (via permanent sudo process activated) and that vulnerability then being known and utilised by another party(s).
I am pursuing the issue in part with consideration to a broader possible issue of vulnerability.
Thanks again for your thoughts and suggestions. Valued. -
So I am really unsure where to start but I def need a little help getting to where I want to be or feel I should be. I understand that I am pretty much filled when it comes to the RAM on this machine but I need to figure out how to lower it. I back up my machine about once a week which is longer than I would prefer but due to the way Mavericks has been acting I cant deal with the long backup process.... WHY?!?? may be your response to that and I will fill you in. My external Hard Drive is a 1tb Lacie and its about 2 years old. In that time I have dropped, lost, threw and slept ontop of it. Causeing minor damage (each time) to the casing. So now becomes rather hot and I kinda dont want it to burn out. When I first updated to Mavericks the backups were fast and went along mb by mb...now though, the updates drag out for 3-5 hours and update kb by kb. Tried some of the "solutions" posted on here but none seem to work any more than me consistantly purging my system while the backup happens...kinda why I dont have time to do it everyday like I'd like.
ANYWAY can someone please fill me in on a way, program, application, anything that will help me lower my RAM? Because in the spirit of honesty I just dont have the extra funds to snag some new RAM or another HD. I am almost at the point of saying "F**K IT" and wiping everything off the computer so its as close to empty as can be and manually, one by one redownloading what I want/need. But I dont have the time to accomplish that either. PLEASE lend me your ear and help a brudda out with some information from that exceptional brain of yours.
Below is a copy of my machines "report" from EtreCHECK and I am including screen shots of what the (Mavericks) Activity Monitor currently looks like in ALL PROCESSES. PLUS it kinda seems that I have WAY TOOO MANY processes going on in the ACTIVITY MONITOR and have NO clue how to lower the amount. Will truly appreciate any help anyone can toss my way.
THANK YOU
TommyTheTuna
Hardware Information:
MacBook Pro (15-inch, Mid 2010)
MacBook Pro - model: MacBookPro6,2
1 2.4 GHz Intel Core i5 CPU: 2 cores
4 GB RAM
Video Information:
Intel HD Graphics - VRAM: 288 MB
NVIDIA GeForce GT 330M - VRAM: 256 MB
Audio Plug-ins:
BluetoothAudioPlugIn: Version: 1.0
AirPlay: Version: 1.9
AppleAVBAudio: Version: 2.0.0
iSightAudio: Version: 7.7.3
System Software:
OS X 10.9 (13A603) - Uptime: 0 days 0:12:4
Disk Information:
TOSHIBA MK3255GSXF disk0 : (320.07 GB)
EFI (disk0s1) <not mounted>: 209.7 MB
Macintosh HD (disk0s2) /: 319.21 GB (194.65 GB free)
Recovery HD (disk0s3) <not mounted>: 650 MB
MATSHITADVD-R UJ-898
USB Information:
Apple Internal Memory Card Reader
Apple Inc. BRCM2070 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. Built-in iSight
Apple Computer, Inc. IR Receiver
FireWire Information:
Thunderbolt Information:
Kernel Extensions:
Problem System Launch Daemons:
Problem System Launch Agents:
Launch Daemons:
[loaded] com.adobe.fpsaud.plist
[not loaded] com.adobe.SwitchBoard.plist
[not loaded] com.google.keystone.daemon.plist
[not loaded] com.livescribe.PenCommService.plist
[not loaded] com.luthresearch.scservice.plist
[not loaded] com.microsoft.office.licensing.helper.plist
[not loaded] com.paceap.eden.licensed.plist
[not loaded] PACESupport.plist
Launch Agents:
[not loaded] com.adobe.AAM.Updater-1.0.plist
[not loaded] com.google.keystone.agent.plist
[not loaded] com.luthresearch.savvyconnectmenu.plist
[not loaded] com.wacom.pentablet.plist
User Launch Agents:
[not loaded] com.adobe.ARM.[...].plist
[not loaded] com.facebook.videochat.[redacted].plist
[not loaded] com.google.keystone.agent.plist
[not loaded] com.Livestation.plist
[not loaded] com.spotify.webhelper.plist
User Login Items:
iTunesHelper
3rd Party Preference Panes:
Flash Player
Internet Plug-ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Default Browser.plugin
Flash Player.plugin
FlashPlayer-10.6.plugin
Google Earth Web Plug-in.plugin
googletalkbrowserplugin.plugin
iPhotoPhotocast.plugin
JavaAppletPlugin.plugin
npgtpo3dautoplugin.plugin
o1dbrowserplugin.plugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
WacomNetscape.plugin
User Internet Plug-ins:
Unity Web Player.plugin
Bad Fonts:
None
Time Machine:
Skip System Files: NO
Mobile backups: OFF
Auto backup: NO
Volumes being backed up:
Macintosh HD: Disk size: 319.21 GB Disk used: 124.57 GB
Destinations:
Tuna's MacBook Pro Hard Drive [Local] (Last used)
Total size: 999.86 GB
Total number of backups: 2
Oldest backup: 2013-11-07 13:34:08 +0000
Last backup: 2013-11-26 05:08:40 +0000
Size of backup disk: Excellent
Backup size 999.86 GB > (Disk size 319.21 GB X 3)
Time Machine details may not be accurate.
All volumes being backed up may not be listed.
Top Processes by CPU:
2% WindowServer
1% EtreCheck
0% SystemUIServer
0% fontd
0% Finder
0% Microsoft Word
0% aosnotifyd
Top Processes by Memory:
156 MB com.apple.WebKit.WebContent
111 MB Finder
106 MB Microsoft Word
94 MB Safari
82 MB Preview
74 MB WindowServer
61 MB CalendarAgent
57 MB com.apple.IconServicesAgent
57 MB com.apple.internetaccounts
53 MB SystemUIServer
Virtual Memory Statistics:
1.07 GB Free RAM
1.92 GB Active RAM
237 MB Inactive RAM
662 MB Wired RAM
223 MB Page-ins
0 B Page-outsMavericks is designed to use as much RAM as possible. Free RAM is wasted RAM... it's RAM that's not working for you, not doing anything helpful. Seeing your RAM full is not an indication that there is a problem. Seeing your memory pressure graph spike would be.
As for the performance issues, see my Mac Performance Guide.
Note that you've got a lot of third-party software loaded:
Launch Daemons:
[loaded] com.adobe.fpsaud.plist
[not loaded] com.adobe.SwitchBoard.plist
[not loaded] com.google.keystone.daemon.plist
[not loaded] com.livescribe.PenCommService.plist
[not loaded] com.luthresearch.scservice.plist
[not loaded] com.microsoft.office.licensing.helper.plist
[not loaded] com.paceap.eden.licensed.plist
[not loaded] PACESupport.plist
Launch Agents:
[not loaded] com.adobe.AAM.Updater-1.0.plist
[not loaded] com.google.keystone.agent.plist
[not loaded] com.luthresearch.savvyconnectmenu.plist
[not loaded] com.wacom.pentablet.plist
User Launch Agents:
[not loaded] com.adobe.ARM.[...].plist
[not loaded] com.facebook.videochat.[redacted].plist
[not loaded] com.google.keystone.agent.plist
[not loaded] com.Livestation.plist
[not loaded] com.spotify.webhelper.plist
You should probably try to weed some of that out, if possible, or at least make sure it's all updated and compatible with Mavericks.
Maybe you are looking for
-
Ideacenter K330B One Key Recovery External Hard Drive
Hello, a few months back I made a full backup of my system to an external hard drive. I reached a point where it was just easiest to start my computer over using the One Key Recovery. I had to go with the factory settings at least temporarily. Is the
-
How does iTunes volume control affect digital output?
I'm using iTunes on a Mini with an external USB DAC. The volume control and equalizer inside iTunes affects the volume so it must be processing the digital data in some fashion. It doesn't appear you can disable the volume control so how do I know wh
-
Hi, When iam taking backup through Transaction code : DB13 on maxdb database,iam getting error as below. Name and Server : LBI - lgsbi DBMRFC Function : DBM_EXECUTE Command : medium_put "comp_bkp" "/extra_64/LBI_BKP" FILE DATA
-
Problem with s/w upgrade to 1.0.3 on 3G Nano 8GB
I recently bought 3 Nanos for my children for Christmas. Connected the first to iTunes, which asked if I wanted to upgrade the Nano software to version 1.0.3. I clicked install, and after a couple of optimistic-sounding messages, the Nano got now stu
-
Screen Brightness in HP pavilion g6-2230tx
i recently installed windows8.1 in my HP PAVILION g6-2230tx laptop,and after installing to windows 8.1 my screen is too bright that i am unable to see my screen for more than 5 minutes.i tried uninstalling the driver and then updating it...but nothin