Jump to content

cdrv

Members
  • Content Count

    1
  • Joined

  • Last visited

About cdrv

  • Rank
    New Member
  1. I'm not using RansomWhere, but I am still seeing RTProtectionDaemon chewing up my CPU (basically stuck at ~90% CPU usage). Evidently it _is_ part of the new Malwarebytes release (or, at least, is a plugin; however, I don't recall explicitly asking Malwarebytes to install this plugin for me): $ locate RTProtectionDaemon /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/Info.plist /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/PkgInfo /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/Resources /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/Resources/libswiftRemoteMirror.dylib /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/Resources/logConfig.plist /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/Resources/signatures.ref /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/_CodeSignature /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/_CodeSignature/CodeResources /Library/Application Support/Malwarebytes/MBAM/Logs/RTProtectionDaemon.log 'dtruss' seems to suggest the daemon is busy scanning a whole bunch of files in my Python site-packages folder, currently. tl;dr: RTProtectionDaemon is an MBAM plugin and appears to chew up CPU time scanning files on the filesystem.
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.