What is this mystery process: “-i”?











up vote
3
down vote

favorite












I have a mystery process visible in Activity Monitor, simply called "-i" - don't remember ever seeing this before. Its parent process is launchd, and belongs to root.




  • Persists between reboots;

  • Sometimes high CPU use.


Can't find any reference to it online anywhere either!



enter image description here



Macos 10.13.6










share|improve this question
























  • And when you press "quit"...?
    – Mateus Ribeiro
    3 hours ago










  • what does it say when you run Sample process on it ?
    – Buscar웃
    3 hours ago






  • 3




    In Terminal run sudo /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor to launch Activity Monitor with more privileges, then get info on the process and look at the "Open Files and Ports" for a hint.
    – Redarm
    3 hours ago










  • The 'open files and ports' option is not something I've tried, works as well as the lsof command.
    – Simbamangu
    2 hours ago















up vote
3
down vote

favorite












I have a mystery process visible in Activity Monitor, simply called "-i" - don't remember ever seeing this before. Its parent process is launchd, and belongs to root.




  • Persists between reboots;

  • Sometimes high CPU use.


Can't find any reference to it online anywhere either!



enter image description here



Macos 10.13.6










share|improve this question
























  • And when you press "quit"...?
    – Mateus Ribeiro
    3 hours ago










  • what does it say when you run Sample process on it ?
    – Buscar웃
    3 hours ago






  • 3




    In Terminal run sudo /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor to launch Activity Monitor with more privileges, then get info on the process and look at the "Open Files and Ports" for a hint.
    – Redarm
    3 hours ago










  • The 'open files and ports' option is not something I've tried, works as well as the lsof command.
    – Simbamangu
    2 hours ago













up vote
3
down vote

favorite









up vote
3
down vote

favorite











I have a mystery process visible in Activity Monitor, simply called "-i" - don't remember ever seeing this before. Its parent process is launchd, and belongs to root.




  • Persists between reboots;

  • Sometimes high CPU use.


Can't find any reference to it online anywhere either!



enter image description here



Macos 10.13.6










share|improve this question















I have a mystery process visible in Activity Monitor, simply called "-i" - don't remember ever seeing this before. Its parent process is launchd, and belongs to root.




  • Persists between reboots;

  • Sometimes high CPU use.


Can't find any reference to it online anywhere either!



enter image description here



Macos 10.13.6







macos activity-monitor






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited 3 hours ago









Monomeeth

43.9k793134




43.9k793134










asked 4 hours ago









Simbamangu

18529




18529












  • And when you press "quit"...?
    – Mateus Ribeiro
    3 hours ago










  • what does it say when you run Sample process on it ?
    – Buscar웃
    3 hours ago






  • 3




    In Terminal run sudo /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor to launch Activity Monitor with more privileges, then get info on the process and look at the "Open Files and Ports" for a hint.
    – Redarm
    3 hours ago










  • The 'open files and ports' option is not something I've tried, works as well as the lsof command.
    – Simbamangu
    2 hours ago


















  • And when you press "quit"...?
    – Mateus Ribeiro
    3 hours ago










  • what does it say when you run Sample process on it ?
    – Buscar웃
    3 hours ago






  • 3




    In Terminal run sudo /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor to launch Activity Monitor with more privileges, then get info on the process and look at the "Open Files and Ports" for a hint.
    – Redarm
    3 hours ago










  • The 'open files and ports' option is not something I've tried, works as well as the lsof command.
    – Simbamangu
    2 hours ago
















And when you press "quit"...?
– Mateus Ribeiro
3 hours ago




And when you press "quit"...?
– Mateus Ribeiro
3 hours ago












what does it say when you run Sample process on it ?
– Buscar웃
3 hours ago




what does it say when you run Sample process on it ?
– Buscar웃
3 hours ago




3




3




In Terminal run sudo /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor to launch Activity Monitor with more privileges, then get info on the process and look at the "Open Files and Ports" for a hint.
– Redarm
3 hours ago




In Terminal run sudo /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor to launch Activity Monitor with more privileges, then get info on the process and look at the "Open Files and Ports" for a hint.
– Redarm
3 hours ago












The 'open files and ports' option is not something I've tried, works as well as the lsof command.
– Simbamangu
2 hours ago




The 'open files and ports' option is not something I've tried, works as well as the lsof command.
– Simbamangu
2 hours ago










2 Answers
2






active

oldest

votes

















up vote
3
down vote



accepted










The best way to find out is to note the Process ID (PID) listed in Activity Monitor for the mysterious "-i" process.



Then open Terminal.app and execute the following command:



sudo lsof -p 1234


where 1234 should be replaced with the PID number you've found in Activity Monitor.



The lsof command will give you a list of files that are opened by the mysterious process. The first line of output will tell you the "cwd", which is the current working directory of the process. It is probably not going to tell you much.



The second line of output is usually a "txt" file descriptor that will tell you the name of the executable (i.e. the program) that is running in the program.



This should tell you which program is running as "-i".






share|improve this answer





















  • This worked - turns out it's Malwarebytes RTProtectionDaemon, which must have changed in recent update as I've not seen that before. lsof is a great tool, thanks for the tip.
    – Simbamangu
    2 hours ago










  • Wow. You'd really think that malware prevention software—of all things—would give their processes intelligent names. Hopefully this is a bug of some sort.
    – Wowfunhappy
    1 hour ago


















up vote
0
down vote













Enter the following command in Terminal:



/usr/bin/sudo launchctl list


to get the complete list of processes managed by launchd.



If the strange process doesn’t seem easy to find, insert the output within your original question to get a more accurate answer.






share|improve this answer





















    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "118"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fapple.stackexchange.com%2fquestions%2f344392%2fwhat-is-this-mystery-process-i%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    2 Answers
    2






    active

    oldest

    votes








    2 Answers
    2






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    3
    down vote



    accepted










    The best way to find out is to note the Process ID (PID) listed in Activity Monitor for the mysterious "-i" process.



    Then open Terminal.app and execute the following command:



    sudo lsof -p 1234


    where 1234 should be replaced with the PID number you've found in Activity Monitor.



    The lsof command will give you a list of files that are opened by the mysterious process. The first line of output will tell you the "cwd", which is the current working directory of the process. It is probably not going to tell you much.



    The second line of output is usually a "txt" file descriptor that will tell you the name of the executable (i.e. the program) that is running in the program.



    This should tell you which program is running as "-i".






    share|improve this answer





















    • This worked - turns out it's Malwarebytes RTProtectionDaemon, which must have changed in recent update as I've not seen that before. lsof is a great tool, thanks for the tip.
      – Simbamangu
      2 hours ago










    • Wow. You'd really think that malware prevention software—of all things—would give their processes intelligent names. Hopefully this is a bug of some sort.
      – Wowfunhappy
      1 hour ago















    up vote
    3
    down vote



    accepted










    The best way to find out is to note the Process ID (PID) listed in Activity Monitor for the mysterious "-i" process.



    Then open Terminal.app and execute the following command:



    sudo lsof -p 1234


    where 1234 should be replaced with the PID number you've found in Activity Monitor.



    The lsof command will give you a list of files that are opened by the mysterious process. The first line of output will tell you the "cwd", which is the current working directory of the process. It is probably not going to tell you much.



    The second line of output is usually a "txt" file descriptor that will tell you the name of the executable (i.e. the program) that is running in the program.



    This should tell you which program is running as "-i".






    share|improve this answer





















    • This worked - turns out it's Malwarebytes RTProtectionDaemon, which must have changed in recent update as I've not seen that before. lsof is a great tool, thanks for the tip.
      – Simbamangu
      2 hours ago










    • Wow. You'd really think that malware prevention software—of all things—would give their processes intelligent names. Hopefully this is a bug of some sort.
      – Wowfunhappy
      1 hour ago













    up vote
    3
    down vote



    accepted







    up vote
    3
    down vote



    accepted






    The best way to find out is to note the Process ID (PID) listed in Activity Monitor for the mysterious "-i" process.



    Then open Terminal.app and execute the following command:



    sudo lsof -p 1234


    where 1234 should be replaced with the PID number you've found in Activity Monitor.



    The lsof command will give you a list of files that are opened by the mysterious process. The first line of output will tell you the "cwd", which is the current working directory of the process. It is probably not going to tell you much.



    The second line of output is usually a "txt" file descriptor that will tell you the name of the executable (i.e. the program) that is running in the program.



    This should tell you which program is running as "-i".






    share|improve this answer












    The best way to find out is to note the Process ID (PID) listed in Activity Monitor for the mysterious "-i" process.



    Then open Terminal.app and execute the following command:



    sudo lsof -p 1234


    where 1234 should be replaced with the PID number you've found in Activity Monitor.



    The lsof command will give you a list of files that are opened by the mysterious process. The first line of output will tell you the "cwd", which is the current working directory of the process. It is probably not going to tell you much.



    The second line of output is usually a "txt" file descriptor that will tell you the name of the executable (i.e. the program) that is running in the program.



    This should tell you which program is running as "-i".







    share|improve this answer












    share|improve this answer



    share|improve this answer










    answered 3 hours ago









    jksoegaard

    14k1640




    14k1640












    • This worked - turns out it's Malwarebytes RTProtectionDaemon, which must have changed in recent update as I've not seen that before. lsof is a great tool, thanks for the tip.
      – Simbamangu
      2 hours ago










    • Wow. You'd really think that malware prevention software—of all things—would give their processes intelligent names. Hopefully this is a bug of some sort.
      – Wowfunhappy
      1 hour ago


















    • This worked - turns out it's Malwarebytes RTProtectionDaemon, which must have changed in recent update as I've not seen that before. lsof is a great tool, thanks for the tip.
      – Simbamangu
      2 hours ago










    • Wow. You'd really think that malware prevention software—of all things—would give their processes intelligent names. Hopefully this is a bug of some sort.
      – Wowfunhappy
      1 hour ago
















    This worked - turns out it's Malwarebytes RTProtectionDaemon, which must have changed in recent update as I've not seen that before. lsof is a great tool, thanks for the tip.
    – Simbamangu
    2 hours ago




    This worked - turns out it's Malwarebytes RTProtectionDaemon, which must have changed in recent update as I've not seen that before. lsof is a great tool, thanks for the tip.
    – Simbamangu
    2 hours ago












    Wow. You'd really think that malware prevention software—of all things—would give their processes intelligent names. Hopefully this is a bug of some sort.
    – Wowfunhappy
    1 hour ago




    Wow. You'd really think that malware prevention software—of all things—would give their processes intelligent names. Hopefully this is a bug of some sort.
    – Wowfunhappy
    1 hour ago












    up vote
    0
    down vote













    Enter the following command in Terminal:



    /usr/bin/sudo launchctl list


    to get the complete list of processes managed by launchd.



    If the strange process doesn’t seem easy to find, insert the output within your original question to get a more accurate answer.






    share|improve this answer

























      up vote
      0
      down vote













      Enter the following command in Terminal:



      /usr/bin/sudo launchctl list


      to get the complete list of processes managed by launchd.



      If the strange process doesn’t seem easy to find, insert the output within your original question to get a more accurate answer.






      share|improve this answer























        up vote
        0
        down vote










        up vote
        0
        down vote









        Enter the following command in Terminal:



        /usr/bin/sudo launchctl list


        to get the complete list of processes managed by launchd.



        If the strange process doesn’t seem easy to find, insert the output within your original question to get a more accurate answer.






        share|improve this answer












        Enter the following command in Terminal:



        /usr/bin/sudo launchctl list


        to get the complete list of processes managed by launchd.



        If the strange process doesn’t seem easy to find, insert the output within your original question to get a more accurate answer.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered 3 hours ago









        daniel Azuelos

        7,47023190




        7,47023190






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Ask Different!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fapple.stackexchange.com%2fquestions%2f344392%2fwhat-is-this-mystery-process-i%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            數位音樂下載

            When can things happen in Etherscan, such as the picture below?

            格利澤436b