Anyone With Catalina Can Run This Test Please?

gentisle · 02-14-2021, 06:22 PM

Hi,
I am trying to rid my brand new MacBook Pro of malware, and I wondered if anyone could run a process command and see if they are getting the results I am. This is the command:
ps -ax |grep mackeeperI am just testing for the presence of the mackeeper. Please post results here, thanks.

HappyTux · 02-14-2021, 06:26 PM

Nothing there.

Code:

MacUser2525:~$ ps -ax |grep mackeeper
27342 ttys004    0:00.00 grep mackeeper
MacUser2525:~$ sw_vers -productVersion
10.15.7

Emerson · 02-14-2021, 06:26 PM

So you want us to install mackeeper and then test if it shows up in ps output?

gentisle · 02-16-2021, 05:01 AM

@Stephen C. - thanks.
@Emerson - No. Just run the command, I'm comparing outputs to see what happens. Maybe you already know the answer? Does ps list what you typed on the command line as a process? In other words, does it appear to show a process that is really not running? Thanks

HappyTux · 02-16-2021, 09:14 AM

Quote:

Originally Posted by gentisle

@Stephen C. - thanks.
@Emerson - No. Just run the command, I'm comparing outputs to see what happens. Maybe you already know the answer? Does ps list what you typed on the command line as a process? In other words, does it appear to show a process that is really not running? Thanks

Yes that is it, it shows the process you just ran in its output, you are grepping all instances of that, so it shows the grep command doing it.

shruggy · 02-16-2021, 10:00 AM

The usual way to grep the output of ps is

Code:

ps -ax|grep [m]ackeeper

HappyTux · 02-16-2021, 10:37 AM

Quote:

Originally Posted by shruggy

The usual way to grep the output of ps is

Code:

ps -ax|grep [m]ackeeper

Yes, hard to believe it is the first time in 23 years of use I have seen this really handy one, thanks for the posting.

shruggy · 02-16-2021, 10:51 AM

Alas, this works in Bash, Fish and Yash, but not in Zsh or Tcsh. You'll have to type one character more there:

Code:

ps -ax|grep \[m]ackeeper

Pagonis · 03-02-2021, 05:04 PM

disregard, misunderstood

gentisle · 08-30-2021, 10:30 PM

Thanks all. Closing this one.

MadeInGermany · 09-05-2021, 11:31 AM

Correct is

Code:

ps -ax|grep \[m]ackeeper

or

Code:

ps -ax|grep "[m]ackeeper"

in all shells.

A quick alternative:

Code:

pgrep -lf mackeeper

gentisle · 09-05-2021, 06:40 PM

Thanks MadeInGermany. Those worked perfectly. It was amazing to find the command on the Internet, and bring it back to the forefront of someone's mind. I had just found it as a Linux command, and figured it might work the same on MacOS, even though I knew it doesn't always work that way between Linux and BSD. Anyway, problem solved.