kkhaike
V2EX  ›  macOS

系统根目录下有个名为 1 的文件,是恶意程序产生的吗

  •  
  •   kkhaike · Apr 18, 2021 · 3547 views
    This topic created in 1851 days ago, the information mentioned may be changed or developed.

    内容是

    Extra arguments starting at 2....
    usage: kextstat [-a] [-k] [-l] [-b bundle_id] ...
    
    Use kextstat -help (-h) for a list of options.
    usage: kextstat [-a] [-k] [-l] [-b bundle_id] ...
    
    Use kextstat -help (-h) for a list of options.
    

    删除了后还会再自动出现

    谷歌了下只发现有个同命相连的 https://www.applex.net/threads/mojave1.94581/

    Supplement 1  ·  Apr 25, 2021
    launchctl list | grep -v "com.apple"

    PID Status Label
    535 0 com.google.keystone.user.xpcservice
    478 0 com.bjango.istatmenus.agent
    - 0 com.docker.helper
    - 0 com.qiuyuzhou.shadowsocksX-NG.http
    486 0 com.bjango.istatmenus.status
    - 0 com.openssh.ssh-agent
    - 0 com.microsoft.update.agent
    - 0 com.valvesoftware.steamclean
    467 0 com.google.android.mtpagent.98308
    476 0 com.xunlei.Thunder.ThunderHelper
    - 105 com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d
    - 0 com.oracle.java.Java-Updater
    - 0 com.qiuyuzhou.shadowsocksX-NG.local
    474 0 com.google.keystone.user.agent
    465 0 cenmrev.V2RayX.98312
    530 0 v2rayproject.v2rayx.v2ray-core
    7 replies    2021-08-01 20:53:39 +08:00
    nalzok
        1
    nalzok  
       Apr 18, 2021   ❤️ 2
    我觉得没必要太担心,估计是之前有什么命令打错了,比如把 kextstat >&1 或者 kextstat >$1 打成了 kextstat >/1
    FurN1
        2
    FurN1  
       Apr 18, 2021 via iPhone
    一楼对头
    32uKHwVJ179qCmPj
        3
    32uKHwVJ179qCmPj  
       Apr 18, 2021
    +1,楼主可以发下有什么开机启动软件,对比我的排查下
    domodomo
        4
    domodomo  
       Apr 19, 2021
    同意一楼的看法
    jiayong2793
        5
    jiayong2793  
       Apr 19, 2021
    @nalzok 删除之后还会再出现
    nalzok
        6
    nalzok  
       Apr 20, 2021
    @jiayong2793 那可能是某个 daemon 或者 crontab 或者服务器进程搞的鬼?
    kkhaike
        7
    kkhaike  
    OP
       Aug 1, 2021
    是网易 mumu 的驱动
    kextstat -l 可以查到
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   1055 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 54ms · UTC 18:42 · PVG 02:42 · LAX 11:42 · JFK 14:42
    ♥ Do have faith in what you're doing.