Find the processes making a window

[xproot]

Exhaustive System Information

System:
  Kernel: 5.10.84-1-MANJARO x86_64 bits: 64 compiler: gcc v: 11.1.0
    parameters: BOOT_IMAGE=/boot/vmlinuz-5.10-x86_64
    root=UUID=9233c369-278a-4a71-902a-847c12b1df08 rw text apparmor=1
    security=apparmor udev.log_priority=3
  Desktop: Cinnamon 5.0.7 tk: GTK 3.24.30 vt: 7 dm: LightDM 1.30.0
    Distro: Manjaro Linux base: Arch Linux
Machine:
  Type: Laptop System: COMPUMAX S.A.S. product: RAPID v: 0.1
    serial: <superuser required> Chassis: type: 9 v: 0.1
    serial: <superuser required>
  Mobo: COMPUMAX S.A.S. model: RAPID v: FAB1 serial: <superuser required>
    UEFI-[Legacy]: Phoenix v: 1.03.CX date: 10/16/2012
Battery:
  ID-1: BAT0 charge: 41.6 Wh (96.1%) condition: 43.3/48.8 Wh (88.6%)
    volts: 12.7 min: 11.1 model: ODM MB45II type: Li-ion serial: <filter>
    status: Charging
Memory:
  RAM: total: 4.68 GiB used: 2.9 GiB (62.1%)
  RAM Report:
    permissions: Unable to run dmidecode. Root privileges required.
CPU:
  Info: model: Intel Celeron B800 bits: 64 type: MCP arch: Sandy Bridge
    family: 6 model-id: 0x2A (42) stepping: 7 microcode: 0x2F
  Topology: cpus: 1x cores: 2 smt: <unsupported> cache: L1: 128 KiB
    desc: d-2x32 KiB; i-2x32 KiB L2: 512 KiB desc: 2x256 KiB L3: 2 MiB
    desc: 1x2 MiB
  Speed (MHz): avg: 981 high: 1163 min/max: 800/1500 scaling:
    driver: intel_cpufreq governor: schedutil cores: 1: 1163 2: 799
    bogomips: 5988
  Flags: acpi aperfmperf apic arat arch_perfmon bts clflush cmov
    constant_tsc cpuid cx16 cx8 de ds_cpl dtes64 dtherm dts epb ept est
    flexpriority flush_l1d fpu fxsr ht ibpb ibrs lahf_lm lm mca mce md_clear
    mmx monitor msr mtrr nonstop_tsc nopl nx pae pat pbe pcid pclmulqdq pdcm
    pebs pge pln pni popcnt pse pse36 pti pts rdtscp rep_good sep ssbd sse
    sse2 sse4_1 sse4_2 ssse3 stibp syscall tm tm2 tpr_shadow tsc
    tsc_deadline_timer vme vmx vnmi vpid x2apic xsave xsaveopt xtopology xtpr
  Vulnerabilities:
  Type: itlb_multihit status: KVM: VMX disabled
  Type: l1tf
    mitigation: PTE Inversion; VMX: conditional cache flushes, SMT disabled
  Type: mds mitigation: Clear CPU buffers; SMT disabled
  Type: meltdown mitigation: PTI
  Type: spec_store_bypass
    mitigation: Speculative Store Bypass disabled via prctl and seccomp
  Type: spectre_v1
    mitigation: usercopy/swapgs barriers and __user pointer sanitization
  Type: spectre_v2 mitigation: Full generic retpoline, IBPB: conditional,
    IBRS_FW, STIBP: disabled, RSB filling
  Type: srbds status: Not affected
  Type: tsx_async_abort status: Not affected
Graphics:
  Device-1: Intel 2nd Generation Core Processor Family Integrated Graphics
    vendor: Elite Systems driver: i915 v: kernel bus-ID: 00:02.0
    chip-ID: 8086:0106 class-ID: 0300
  Device-2: Acer HD Webcam type: USB driver: uvcvideo bus-ID: 1-1.3:3
    chip-ID: 5986:014d class-ID: 0e02
  Display: x11 server: X.Org 1.21.1.2 driver: loaded: modesetting
    alternate: fbdev,vesa display-ID: :0 screens: 1
  Screen-1: 0 s-res: 1366x768 s-dpi: 96 s-size: 361x203mm (14.2x8.0")
    s-diag: 414mm (16.3")
  Monitor-1: LVDS-1 res: 1366x768 hz: 60 dpi: 112
    size: 309x174mm (12.2x6.9") diag: 355mm (14")
  OpenGL: renderer: Mesa DRI Intel HD Graphics 2000 (SNB GT1)
    v: 3.3 Mesa 21.2.5 compat-v: 3.0 direct render: Yes
Audio:
  Device-1: Intel 7 Series/C216 Family High Definition Audio
    vendor: Elite Systems driver: snd_hda_intel v: kernel bus-ID: 00:1b.0
    chip-ID: 8086:1e20 class-ID: 0403
  Sound Server-1: ALSA v: k5.10.84-1-MANJARO running: yes
  Sound Server-2: JACK v: 1.9.19 running: no
  Sound Server-3: PulseAudio v: 15.0 running: yes
  Sound Server-4: PipeWire v: 0.3.40 running: yes
Network:
  Device-1: Realtek RTL8188CE 802.11b/g/n WiFi Adapter driver: rtl8192ce
    v: kernel port: 3000 bus-ID: 01:00.0 chip-ID: 10ec:8176 class-ID: 0280
  IF: wlp1s0 state: down mac: <filter>
  Device-2: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet
    vendor: Elite Systems driver: r8169 v: kernel port: 2000 bus-ID: 02:00.0
    chip-ID: 10ec:8168 class-ID: 0200
  IF: enp2s0 state: up speed: 100 Mbps duplex: full mac: <filter>
  IP v4: <filter> type: noprefixroute scope: global broadcast: <filter>
  IP v6: <filter> type: noprefixroute scope: link
  WAN IP: <filter>
Bluetooth:
  Message: No bluetooth data found.
Logical:
  Message: No logical block device data found.
RAID:
  Message: No RAID data found.
Drives:
  Local Storage: total: 149.05 GiB used: 52.71 GiB (35.4%)
  SMART Message: Unable to run smartctl. Root privileges required.
  ID-1: /dev/sda maj-min: 8:0 vendor: Hitachi model: HTS545016B9A300
    size: 149.05 GiB block-size: physical: 512 B logical: 512 B speed: 3.0 Gb/s
    type: HDD rpm: 5400 serial: <filter> rev: C60F scheme: MBR
  Message: No optical or floppy data found.
Partition:
  ID-1: / raw-size: 98.58 GiB size: 96.53 GiB (97.92%) used: 52.71 GiB (54.6%)
    fs: ext4 dev: /dev/sda1 maj-min: 8:1 label: Manjaro
    uuid: 9233c369-278a-4a71-902a-847c12b1df08
Swap:
  Kernel: swappiness: 60 (default) cache-pressure: 100 (default)
  ID-1: swap-1 type: file size: 8 GiB used: 780 KiB (0.0%) priority: -2
    file: /swapfile
Unmounted:
  ID-1: /dev/sda2 maj-min: 8:2 size: 50.47 GiB fs: ntfs label: Doors 8.1
    uuid: 01D7F101AB73BFF0
USB:
  Hub-1: 1-0:1 info: Full speed or root hub ports: 3 rev: 2.0 speed: 480 Mb/s
    chip-ID: 1d6b:0002 class-ID: 0900
  Hub-2: 1-1:2 info: Intel Integrated Rate Matching Hub ports: 4 rev: 2.0
    speed: 480 Mb/s chip-ID: 8087:0024 class-ID: 0900
  Device-1: 1-1.3:3 info: Acer HD Webcam type: Video driver: uvcvideo
    interfaces: 2 rev: 2.0 speed: 480 Mb/s power: 500mA chip-ID: 5986:014d
    class-ID: 0e02
  Device-2: 1-1.4:4 info: Realtek USB 2.0 multicard reader
    type: Mass Storage driver: ums-realtek interfaces: 1 rev: 2.0
    speed: 480 Mb/s power: 500mA chip-ID: 0bda:0158 class-ID: 0806
    serial: <filter>
  Hub-3: 2-0:1 info: Full speed or root hub ports: 3 rev: 2.0
    speed: 480 Mb/s chip-ID: 1d6b:0002 class-ID: 0900
  Hub-4: 2-1:2 info: Intel Integrated Rate Matching Hub ports: 4 rev: 2.0
    speed: 480 Mb/s chip-ID: 8087:0024 class-ID: 0900
  Hub-5: 3-0:1 info: Hi-speed hub with single TT ports: 4 rev: 2.0
    speed: 480 Mb/s chip-ID: 1d6b:0002 class-ID: 0900
  Device-1: 3-1:2 info: Silicon Labs USB OPTICAL MOUSE type: Mouse
    driver: hid-generic,usbhid interfaces: 1 rev: 2.0 speed: 1.5 Mb/s
    power: 100mA chip-ID: 10c4:8108 class-ID: 0301
  Device-2: 3-2:3 info: CASUE USB Keyboard type: Keyboard,HID
    driver: hid-generic,usbhid interfaces: 2 rev: 1.1 speed: 1.5 Mb/s
    power: 100mA chip-ID: 2a7a:6a18 class-ID: 0300
  Hub-6: 4-0:1 info: Super-speed hub ports: 4 rev: 3.0 speed: 5 Gb/s
    chip-ID: 1d6b:0003 class-ID: 0900
Sensors:
  System Temperatures: cpu: 65.0 C mobo: N/A
  Fan Speeds (RPM): N/A
Info:
  Processes: 221 Uptime: 1h 7m wakeups: 1 Init: systemd v: 249 tool: systemctl
  Compilers: gcc: 11.1.0 Packages: pacman: 1463 lib: 399 pkg: 0 flatpak: 0
  Shell: Bash v: 5.1.12 running-in: gnome-terminal inxi: 3.3.11

Everytime I start my computer and log in, there is a 1x1 unnamed window with a settings cog icon, at first I ignored it, but now I’m getting suspicious of this window (as in, malicious kind of suspicious).

I’ve tried identifying what PID it has using xdotool getwindowpid which returns

[xproot@xproot-lappy ~]$ xdotool getwindowpid 65011715
window 65011715 has no pid associated with it.

I also tried xprop _NET_WM_PID | sed 's/_NET_WM_PID(CARDINAL) = //' which returns

_NET_WM_PID:  not found.

now both of these commands work with regular windows, yet it doesn’t work with this? just adds more suspicion to me.
Anyone could bring up a solution? How to find what is making this window? I originally thought it was kde-connect-indicator since it started appearing as soon I added that to startup applications but removing it from it doesn’t help.

[andreas85]

Increase your chances of solving your issue:

[HowTo] Increase your chances of solving your issue

Difficulty: ★☆☆☆☆ Strong of its many members, the Manjaro support forum can provide you help whenever you have an issue with your Manjaro installation. But in order to work efficiently, we shall also ask you to follow three major steps. Keep calm and read First some basics: whenever you need to troubleshoot, chances are the solution is already under your nose. Find error messages Very often when an applications crashes, and sometimes when it misbehaves, it prints an error message somewhere. …

Provide Information:

[HowTo] Provide System Information

Welcome to Manjaro! To allow all of us helpful people on this forum TO HELP YOU, we need some basic information about your system. This probably means you described the symptoms of your problem, but now we need some more information to know where the origin of your issue is exactly. Someone else probably linked you to this tutorial, so if you’re reading this in response to a question, please click the link above this text to bring you to the full and unabridged text of the tutorial…

[xproot]

I’ve added a ► Hide Details section adding inxi’s output, and my bad for not checking the system journal before but I have now and I don’t see any relevant logs.

[ishaan2479]

@xproot

_NET_WM_PID: not found.

https://unix.stackexchange.com/questions/46621/what-process-created-this-window-with-no-pid-associated

[xproot]

The parent window has also no PID attached, neither do it’s children. (BTW i have resized and moved the window so ignore the dimentions and position.)

xwininfo -children -id 0x3200096

[xproot@xproot-lappy ~]$ xwininfo -children -id 0x3200096

xwininfo: Window id: 0x3200096 (has no name)

  Root window id: 0x137 (the root window) (has no name)
  Parent window id: 0x137 (the root window) (has no name)
     1 child:
     0x3e00003 (has no name): ()  434x71+10+38  +383+240

xwininfo -id 0x137

[xproot@xproot-lappy Documents]$ xwininfo -id 0x137

xwininfo: Window id: 0x137 (the root window) (has no name)

  Absolute upper-left X:  0
  Absolute upper-left Y:  0
  Relative upper-left X:  0
  Relative upper-left Y:  0
  Width: 1366
  Height: 768
  Depth: 24
  Visual: 0x21
  Visual Class: TrueColor
  Border width: 0
  Class: InputOutput
  Colormap: 0x20 (not installed)
  Bit Gravity State: ForgetGravity
  Window Gravity State: NorthWestGravity
  Backing Store State: NotUseful
  Save Under State: no
  Map State: IsViewable
  Override Redirect State: no
  Corners:  +0+0  -0+0  -0-0  +0-0
  -geometry 1366x768+0+0

xwininfo -id 0x3200096

[xproot@xproot-lappy Documents]$ xwininfo -id 0x3200096

xwininfo: Window id: 0x3200096 (has no name)

  Absolute upper-left X:  373
  Absolute upper-left Y:  202
  Relative upper-left X:  373
  Relative upper-left Y:  202
  Width: 21
  Height: 49
  Depth: 24
  Visual: 0xfa
  Visual Class: TrueColor
  Border width: 0
  Class: InputOutput
  Colormap: 0x320001a (not installed)
  Bit Gravity State: NorthWestGravity
  Window Gravity State: NorthWestGravity
  Backing Store State: NotUseful
  Save Under State: no
  Map State: IsViewable
  Override Redirect State: no
  Corners:  +373+202  -972+202  -972-517  +373-517
  -geometry 21x49+373+202

xwininfo -id 0x3e00003

[xproot@xproot-lappy Documents]$ xwininfo -id 0x3e00003

xwininfo: Window id: 0x3e00003 (has no name)

  Absolute upper-left X:  383
  Absolute upper-left Y:  240
  Relative upper-left X:  10
  Relative upper-left Y:  38
  Width: 1
  Height: 1
  Depth: 0
  Visual: 0x12d
  Visual Class: TrueColor
  Border width: 0
  Class: InputOnly
  Colormap: 0x0 (not installed)
  Bit Gravity State: ForgetGravity
  Window Gravity State: NorthWestGravity
  Backing Store State: NotUseful
  Save Under State: no
  Map State: IsViewable
  Override Redirect State: no
  Corners:  +383+240  -982+240  -982-527  +383-527
  -geometry 1x1+373+202

xprop -id 0x137

[xproot@xproot-lappy Documents]$ xprop -id 0x137
_NET_SHOWING_DESKTOP(CARDINAL) = 0
_MUFFIN_SENTINEL(CARDINAL) = 0
_NET_WORKAREA(CARDINAL) = 0, 0, 1366, 728
_NET_ACTIVE_WINDOW(WINDOW): window id # 0x7c00c85
_NET_CLIENT_LIST_STACKING(WINDOW): window id # 0x3800003, 0x6e00007, 0x3e00003, 0x5600008, 0x6a00003, 0x7c00c85
_NET_CLIENT_LIST(WINDOW): window id # 0x3e00003, 0x3800003, 0x5600008, 0x6a00003, 0x7c00c85, 0x6e00007
_XROOTPMAP_ID(PIXMAP): pixmap id # 0x4c00001
ESETROOT_PMAP_ID(PIXMAP): pixmap id # 0x4c00001
_NET_DESKTOP_NAMES(UTF8_STRING) = "Workspace 1"
_NET_CURRENT_DESKTOP(CARDINAL) = 0
_NET_DESKTOP_GEOMETRY(CARDINAL) = 1366, 768
_NET_DESKTOP_VIEWPORT(CARDINAL) = 0, 0
_NET_SUPPORTING_WM_CHECK(WINDOW): window id # 0x3200010
_NET_SUPPORTED(ATOM) = _NET_WM_NAME, _NET_CLOSE_WINDOW, _NET_WM_STATE, _NET_WM_STATE_SHADED, _NET_WM_STATE_MAXIMIZED_HORZ, _NET_WM_STATE_MAXIMIZED_VERT, _NET_WM_STATE_TILED, _NET_WM_DESKTOP, _NET_NUMBER_OF_DESKTOPS, _NET_CURRENT_DESKTOP, _NET_WM_WINDOW_TYPE, _NET_WM_WINDOW_TYPE_DESKTOP, _NET_WM_WINDOW_TYPE_DOCK, _NET_WM_WINDOW_TYPE_TOOLBAR, _NET_WM_WINDOW_TYPE_MENU, _NET_WM_WINDOW_TYPE_UTILITY, _NET_WM_WINDOW_TYPE_SPLASH, _NET_WM_WINDOW_TYPE_DIALOG, _NET_WM_WINDOW_TYPE_DROPDOWN_MENU, _NET_WM_WINDOW_TYPE_POPUP_MENU, _NET_WM_WINDOW_TYPE_TOOLTIP, _NET_WM_WINDOW_TYPE_NOTIFICATION, _NET_WM_WINDOW_TYPE_COMBO, _NET_WM_WINDOW_TYPE_DND, _NET_WM_WINDOW_TYPE_NORMAL, _NET_WM_STATE_MODAL, _NET_CLIENT_LIST, _NET_CLIENT_LIST_STACKING, _NET_WM_STATE_SKIP_TASKBAR, _NET_WM_STATE_SKIP_PAGER, _NET_WM_WINDOW_TILE_INFO, _NET_WM_ICON_NAME, _NET_WM_ICON, _NET_WM_ICON_GEOMETRY, _NET_WM_MOVERESIZE, _NET_ACTIVE_WINDOW, _NET_WM_STRUT, _NET_WM_STATE_HIDDEN, _NET_WM_STATE_FULLSCREEN, _NET_WM_PING, _NET_WM_PID, _NET_WORKAREA, _NET_SHOWING_DESKTOP, _NET_DESKTOP_LAYOUT, _NET_DESKTOP_NAMES, _NET_WM_ALLOWED_ACTIONS, _NET_WM_ACTION_MOVE, _NET_WM_ACTION_RESIZE, _NET_WM_ACTION_SHADE, _NET_WM_ACTION_STICK, _NET_WM_ACTION_MAXIMIZE_HORZ, _NET_WM_ACTION_MAXIMIZE_VERT, _NET_WM_ACTION_CHANGE_DESKTOP, _NET_WM_ACTION_CLOSE, _NET_WM_STATE_ABOVE, _NET_WM_STATE_BELOW, _NET_STARTUP_ID, _NET_WM_STRUT_PARTIAL, _NET_WM_ACTION_FULLSCREEN, _NET_WM_ACTION_MINIMIZE, _NET_FRAME_EXTENTS, _NET_REQUEST_FRAME_EXTENTS, _NET_WM_USER_TIME, _NET_WM_STATE_DEMANDS_ATTENTION, _NET_MOVERESIZE_WINDOW, _NET_DESKTOP_GEOMETRY, _NET_DESKTOP_VIEWPORT, _NET_WM_USER_TIME_WINDOW, _NET_WM_ACTION_ABOVE, _NET_WM_ACTION_BELOW, _NET_WM_STATE_STICKY, _NET_WM_FULLSCREEN_MONITORS, _NET_WM_STATE_FOCUSED, _NET_WM_BYPASS_COMPOSITOR, _NET_WM_OPAQUE_REGION, _NET_WM_FRAME_DRAWN, _NET_WM_FRAME_TIMINGS, _NET_RESTACK_WINDOW, _GTK_FRAME_EXTENTS, _GTK_SHOW_WINDOW_MENU, _GTK_EDGE_CONSTRAINTS
PULSE_COOKIE(STRING) = "<hidden since i don't know if i should be showing this.>"
PULSE_SERVER(STRING) = "{<hidden since i don't know if i should be showing this.>}unix:/run/user/1000/pulse/native"
PULSE_ID(STRING) = "1000@<hidden since i don't know if i should be showing this.>/27364"
RESOURCE_MANAGER(STRING) = "Xft.dpi:\t96\nXft.antialias:\t1\nXft.hinting:\t1\nXft.hintstyle:\thintslight\nXft.rgba:\trgb\n"
_XKB_RULES_NAMES_BACKUP(STRING) = "evdev", "pc105", "latam", "", ""
XFree86_DDC_EDID1_RAWDATA(INTEGER) = 0, -1, -1, -1, -1, -1, -1, 0, 48, -28, -23, 2, 0, 0, 0, 0, 0, 21, 1, 4, -112, 31, 17, 120, 10, -86, -75, -107, 88, 86, -115, 40, 31, 80, 84, 0, 0, 0, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, -50, 29, 86, -12, 80, 0, 22, 48, 36, 40, 53, 0, 53, -82, 16, 0, 0, 25, -33, 19, 86, -12, 80, 0, 22, 48, 36, 40, 53, 0, 53, -82, 16, 0, 0, 25, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 12, 76, -1, 10, 60, 100, 25, 20, 34, 100, 0, 0, 0, 0, 20
AT_SPI_BUS(STRING) = "unix:path=/tmp/dbus-<hidden since i don't know if i should be showing this.>"
_GNOME_BACKGROUND_REPRESENTATIVE_COLORS(STRING) = "rgb(144,130,79)"
XKLAVIER_ALLOW_SECONDARY(INTEGER) = 0
GDK_VISUALS(INTEGER) = 250, 301
_XKB_RULES_NAMES(STRING) = "evdev", "pc105", "latam", "", ""
XFree86_has_VT(INTEGER) = 1
XFree86_VT(INTEGER) = 7
Xorg_Seat(STRING) = "seat0"

(xprop -id 0x3200096 gives an empty result.)

xprop -id 0x3e00003

[xproot@xproot-lappy Documents]$ xprop -id 0x3e00003
_NET_WM_USER_TIME(CARDINAL) = 4583059
_NET_WM_ALLOWED_ACTIONS(ATOM) = _NET_WM_ACTION_MOVE, _NET_WM_ACTION_RESIZE, _NET_WM_ACTION_FULLSCREEN, _NET_WM_ACTION_MINIMIZE, _NET_WM_ACTION_SHADE, _NET_WM_ACTION_MAXIMIZE_HORZ, _NET_WM_ACTION_MAXIMIZE_VERT, _NET_WM_ACTION_CHANGE_DESKTOP, _NET_WM_ACTION_CLOSE, _NET_WM_ACTION_ABOVE, _NET_WM_ACTION_BELOW
_GTK_EDGE_CONSTRAINTS(CARDINAL) = 170
_NET_WM_STATE(ATOM) = 
WM_STATE(WM_STATE):
		window state: Normal
		icon window: 0x0
_NET_FRAME_EXTENTS(CARDINAL) = 1, 1, 30, 1
_NET_WM_DESKTOP(CARDINAL) = 0