<< Solved >> Is this a virus?

[oger]

Hi all,
don't know if this is the right place for this,
but I noticed strange connections since installing a program I downloaded.
I seems to upload and download data all the time to different hosts...
I use Lulu but it doesn't seem to be able to filter this out.
I was able to filter it with "Radio Silence" though.
I could not locate the service on the drive...
I this suspicious?

 

[Feartech]

Hi all,
don't know if this is the right place for this,
but I noticed strange connections since installing a program I downloaded.
I seems to upload and download data all the time to different hosts...
I use Lulu but it doesn't seem to be able to filter this out.
I was able to filter it with "Radio Silence" though.
I could not locate the service on the drive...
I this suspicious?
View attachment 560160

what program did you download and install? and where did you get it from?

 

[pastrychef]

Hi all,
don't know if this is the right place for this,
but I noticed strange connections since installing a program I downloaded.
I seems to upload and download data all the time to different hosts...
I use Lulu but it doesn't seem to be able to filter this out.
I was able to filter it with "Radio Silence" though.
I could not locate the service on the drive...
I this suspicious?
View attachment 560160

There's no way to tell from the info provided by that screenshot...

Find out what PID 4467 is and what files are associated with it.

 

[oger]

There's no way to tell from the info provided by that screenshot...

Find out what PID 4467 is and what files are associated with it.

Found out this:
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/N/Support/mdworker_shared

after I typed ps -aef in Terminal I found this list that has all PID listed.

 

[Feartech]

Found out this:
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/N/Support/mdworker_shared

after I typed ps -aef in Terminal I found this list that has all PID listed.

and the software you installed? and where you got it from?

 

[oger]

and the software you installed? and where you got it from?

I downloaded several tools that day, so I don't know which one is causing this.
freeware like Lulu blockblock, EAGLE (Layout editor), virtual box, Capo and others.
I noticed these connections a few days later with Lulu.

 

[Feartech]

I downloaded several tools that day, so I don't know which one is causing this.
freeware like Lulu blockblock, EAGLE (Layout editor), virtual box, Capo and others.
I noticed these connections a few days later with Lulu.

then you need to find out which software is causing you issues

 

[oger]

then you need to find out which software is causing you issues

That's what I'm trying to do. But I can't uninstall everything...

 

[Feartech]

But I can't uninstall everything...

not sure why but ok...

 

[oger]

I actually found the file mdworker_shared.
Since it's in the system library I can't delete or move or rename it.
Might have to boot with another system an access the file that way...