Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

sashavegas

macrumors regular
Original poster
Jul 11, 2018
122
86
I just updated to Ventura 13.5 from Monterey. Mac Studio M1. When i look as resources, i found one resource that provide PID but not name. Is that a virus ? Using ps -ef | grep PID, it show some related framefowk to FollowUp
 

Attachments

  • Screenshot 2023-07-26 at 6.25.45 PM.png
    Screenshot 2023-07-26 at 6.25.45 PM.png
    53.5 KB · Views: 208
  • Screenshot 2023-07-26 at 6.28.48 PM.png
    Screenshot 2023-07-26 at 6.28.48 PM.png
    116.3 KB · Views: 84
As you have discovered (from your ps screenshot) the app running is part of macOS. I can't find a simple explanation of what it does - some communication with Apple involving lots of Apple services and notifications.

On my Mac I have the followupd process, but not the followupui process. I don't know why.

But have a read of all of this Concerned about spyware and drive-by downloads on my Macbook Pro which sounds like your worry. But from 5 years ago. One of the comments suggests that the blank process name can be the result of a language mismatch. What are your language settings?

Having said that there may have been a vulnerability related to CoreFollowUp and the followupd process in Catalina and earlier. https://rambo.codes/posts/2022-03-1...d-for-a-serious-phishing-attack-against-users But I have no idea about the accuracy of this. And the underlying structures of macOS have changed drastically since Catalina, so I doubt this could an issue now.

I am "reasonably" confident that there is nothing to worry about except perhaps sorting out the blank name.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.