4

enter image description here

Anyone knows why this happens and how to resolve it? they show up out of nowhere and stay until I kill each manually. some of these names change to something new too. I thought this might be because I left the root access open so I closed it later..

  • 2
    Immediately disconnect from the Internet! Then from a known good clean system, download an appropriate malware/antivirus app and move it to the infected system via a USB drive and install from there. Then scan the system. Keep the system off line until you're sure it's no longer infected! – user3439894 Jun 5 at 15:31
  • 1
    Thank you. cleaning it with Avast now :) – J L Jun 7 at 3:17
  • @JL After clean up could you incorporate an update for future readers telling how this might have happened? Not trying to sound mean after this incident but safety is the key. – ankiiiiiii Jun 18 at 16:04
  • Never "leave root access open". MacOS does have significant security features, but if you leave the door wide open, anything can come in. – benwiggy Jun 18 at 16:54
3
  1. Immediately disconnect from the Internet!

    A possibly compromised system should not remain connected to a network or the Internet so as to stop any possible data breach! Even if a data breach has already occurred, the first step is to disconnect as a step to mitigate damages.

  2. Power down the system and boot it from an external source that is outfitted with the tools to examine the infected disk and take appropriate action.

  3. Run a malware scanner on your computer as malware process names are often randomised from a list. One of these should give you some indication of whether anything is wrong from a malware point of view:

  • Pete, I've included the feedback from the comment into your answer and undeleted it. Flag for mod attention if you feel the answer shouldn't be associated with your account any longer. – nohillside Jun 18 at 14:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .