Rogue OSX Processes

Updated 28-Jun-2024

By rogue I mean those processes which are not beneficial (at least for my configuration). To start with there are those processes which actual communicate over the network.

View Processes on OSX with nettop

nettop

Nettop is a built in process communication display utility, useful, especially with seeing what network interfaces are being used (for example, if requests are tunneled or not when using a vpn).

CIJScannerRegis

Unbelievable that a canon scanner registeration process is always running, especially since I've never owned a Canon scanner, nor installed this software.

sudo rm -rf "/Library/Image Capture/Support/LegacyDeviceDiscoveryHelpers/CIJScannerRegister.app"

AddressBookSourceSync, aka AddressBookSour

launchctl unload -w /System/Library/LaunchAgents/com.apple.AddressBook.SourceSync.plist

To undo, use:

launchctl load -w /System/Library/LaunchAgents/com.apple.AddressBook.SourceSync.plist

Source: Apple Stackexchange

apsd - Apple push notification

Disable:

sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.apsd.plist

Enable:

sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.apsd.plist

simbl Agent

See: Apple Stackexchange

rm -rf /Library/Application\ Support/SIMBL

netbiosd

If you don't do file and print sharing or accessing named resources over the local internet, then you don't need NetBIOS

sudo launchctl disable system/netbiosd

kdc

Kerberos 5 server, mostly not needed. Disable:

sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.Kerberos.kdc.plist

Enable:

sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.Kerberos.kdc.plist

ardagent

Remote desktop agent

sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -configure -access -off

calendaragent

Remove:

launchctl unload -w /System/Library/LaunchAgents/com.apple.CalendarAgent.plist

Re-enable:

launchctl load -w /System/Library/LaunchAgents/com.apple.CalendarAgent.plist