5 votos

com.apple.pc.launchd sigue reapareciendo cada 10 segundos -- ¿problema con MRT, MRTd?

Estoy ejecutando OS X El Capitan, en un iMac (27 pulgadas, mediados de 2010). Usando "top", me di cuenta de que mis sistemas siempre se estaba ejecutando "ReportCrash"; Miré en los registros, y encontré:

1/25/18 12:32:51.464 PM com.apple.xpc.launchd[1]: (com.apple.MRTd) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
1/25/18 12:32:51.667 PM ReportCrash[3627]: Saved crash report for MRT[3630] version ??? to /Library/Logs/DiagnosticReports/MRT_2018-01-25-123251_ (truncated)
1/25/18 12:33:01.475 PM com.apple.xpc.launchd[1]: (com.apple.MRTd[3631]) Service exited due to signal: Trace/BPT trap: 5
1/25/18 12:33:01.475 PM com.apple.xpc.launchd[1]: (com.apple.MRTd) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
1/25/18 12:33:01.675 PM ReportCrash[3627]: Saved crash report for MRT[3631] version ??? to /Library/Logs/DiagnosticReports/MRT_2018-01-25-123301_ (truncated)
1/25/18 12:33:11.487 PM com.apple.xpc.launchd[1]: (com.apple.MRTd[3632]) Service exited due to signal: Trace/BPT trap: 5
1/25/18 12:33:11.487 PM com.apple.xpc.launchd[1]: (com.apple.MRTd) Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
1/25/18 12:33:11.688 PM ReportCrash[3627]: Saved crash report for MRT[3632] version ??? to /Library/Logs/DiagnosticReports/MRT_2018-01-25-123311_ (truncated)

Parece que hay un problema con MRT, MRTd. ¿Son esas cosas de seguridad? Sé muy poco

Informe de diagnóstico del usuario:

Process:               MRT [435]
Path:                  /System/Library/CoreServices/MRT.app/Contents/MacOS/MRT
Identifier:            MRT
Version:               ???
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
Responsible:           MRT [435]
User ID:               501

Date/Time:             2018-01-18 10:55:33.061 -0500
OS Version:            Mac OS X 10.11.3 (15D21)
Report Version:        11
Anonymous UUID:        6F795E88-C579-6AF0-FE2D-8AB327D87AF0

Time Awake Since Boot: 60 seconds

System Integrity Protection: enabled

Crashed Thread:        0

Exception Type:        EXC_BREAKPOINT (SIGTRAP)
Exception Codes:       0x0000000000000002, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Application Specific Information:
dyld: launch, loading dependent libraries

Dyld Error Message:
  Symbol not found: _kSecCodeInfoCdHashes
  Referenced from: /System/Library/CoreServices/MRT.app/Contents/MacOS/MRT
  Expected in: /System/Library/Frameworks/Security.framework/Versions/A/Security
 in /System/Library/CoreServices/MRT.app/Contents/MacOS/MRT

Informe de diagnóstico del sistema:

Process:               MRT [10146]
Path:                  /System/Library/CoreServices/MRT.app/Contents/MacOS/MRT
Identifier:            MRT
Version:               ???
Code Type:             X86-64 (Native)
Parent Process:        launchd [1]
Responsible:           MRT [10146]
User ID:               0

Date/Time:             2018-01-28 08:29:59.001 -0500
OS Version:            Mac OS X 10.11.3 (15D21)
Report Version:        11
Anonymous UUID:        6F795E88-C579-6AF0-FE2D-8AB327D87AF0

Sleep/Wake UUID:       3A9407C1-4B2F-491E-A604-1DDFC61032DF

Time Awake Since Boot: 72000 seconds
Time Since Wake:       2000 seconds

System Integrity Protection: enabled

Crashed Thread:        0

Exception Type:        EXC_BREAKPOINT (SIGTRAP)
Exception Codes:       0x0000000000000002, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Application Specific Information:
dyld: launch, loading dependent libraries

Dyld Error Message:
  Symbol not found: _kSecCodeInfoCdHashes
  Referenced from: /System/Library/CoreServices/MRT.app/Contents/MacOS/MRT
  Expected in: /System/Library/Frameworks/Security.framework/Versions/A/Security
 in /System/Library/CoreServices/MRT.app/Contents/MacOS/MRT

Bien. He jugado un poco más. . . .

cd /Sistema/Biblioteca/CoreServices/MRT.app/Contenidos/MacOS/

./MRT

dyld: Symbol not found: _kSecCodeInfoCdHashes
  Referenced from: /System/Library/CoreServices/MRT.app/Contents/MacOS/./MRT
  Expected in: /System/Library/Frameworks/Security.framework/Versions/A/Security
 in /System/Library/CoreServices/MRT.app/Contents/MacOS/./MRT
Trace/BPT trap: 5

cd /Sistema/Biblioteca/Frameworks/Seguridad.framework/Versiones/A/

ls

Cabeceras PlugIns Seguridad _CodeSignature MachServices Recursos XPCServices

Muy bien. Ahora esto es realmente inquietante. . . . .

codesign --verbose --verify --deep Security

Security: a sealed resource is missing or invalid
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/Authorization.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/AuthorizationDB.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/AuthorizationPlugin.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/AuthorizationTags.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/AuthSession.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/certextensions.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/CipherSuite.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/CMSDecoder.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/CMSEncoder.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/CodeSigning.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/CSCommon.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssm.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmaci.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmapi.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmapple.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmcli.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmconfig.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmcspi.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmdli.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmerr.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmkrapi.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmkrspi.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmspi.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmtpi.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/cssmtype.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/eisl.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/emmspi.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/emmtype.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/mds.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/mds_schema.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/oids.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/oidsalg.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/oidsattr.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/oidsbase.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/oidscert.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/oidscrl.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecAccess.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecAccessControl.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecACL.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecAsn1Coder.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecAsn1Templates.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecAsn1Types.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecBase.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecCertificate.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecCertificateOIDs.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecCode.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecCodeHost.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecCustomTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecDecodeTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecDigestTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecEncodeTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecEncryptTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecIdentity.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecIdentitySearch.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecImportExport.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecItem.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecKey.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecKeychain.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecKeychainItem.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecKeychainSearch.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecPolicy.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecPolicySearch.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecRandom.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecReadTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecRequirement.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecSignVerifyTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecStaticCode.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecTask.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecTransformReadTransform.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecTrust.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecTrustedApplication.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecTrustSettings.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecureDownload.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/SecureTransport.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/Security.h
file added: /System/Library/Frameworks/Security.framework/Versions/A/Headers/x509defs.h

También estoy teniendo algunos problemas extraños: El navegador (Safari) sigue cargando continuamente nuevas páginas, en YouTube "you might be interested in-thingie" (las individuales, funcionan bien). Además, la "nueva interfaz" de Google Mail, a veces me obliga a iniciar sesión, varias veces. De lo contrario, vuelve a mi página original, cuando inicio el navegador.

Me interesa no sólo arreglar mi problema, sino la integridad de mi sistema.

0voto

philb Puntos 11

Una situación similar me ocurrió este mes después de una actualización silenciosa de MRT a la versión 1.68 (ver esta entrada del blog para otras personas que reportan el mismo problema . Estoy en MacOS 10.11.6.

Después de reiniciar a la partición de recuperación y deshabilitar el SIP, había eliminado MRT.app, pero eso no fue suficiente; después de dos semanas se volvió a descargar silenciosamente y entró de nuevo en este loco ciclo de cuelgues y respawning. El truco parece ser desmarcar "Instalar archivos de datos del sistema y actualizaciones de seguridad" en el panel de la App Store de las Preferencias del Sistema para evitar que se vuelva a descargar.

Así que pude resolver este problema con estos pasos:

  1. Reinicie la partición de recuperación y desactive el SIP ( csrutil disable ), luego reinicie el sistema afectado
  2. Si tiene una copia de seguridad del sistema anterior a la actualización silenciosa de MRT, copie /System/Library/CoreServices/MRT.app de esta copia de seguridad a su escritorio

3a. Borre el /System/Library/CoreServices/MRT.app de su sistema afectado, y luego coloque la copia de seguridad en su lugar. Es importante hacerlo en dos pasos separados aparentemente.

3b. Si no tienes una copia de seguridad con una versión anterior de MRT, puedes eliminar la aplicación (o renombrarla, parece que impide que se lance.)

  1. En el panel App Store de las Preferencias del Sistema, desmarque la opción "Instalar archivos de datos del sistema y actualizaciones de seguridad"
  2. Reinicie la partición de recuperación y vuelva a habilitar el SIP ( csrutil enable )

Nota: eventualmente Apple debería lanzar una nueva versión corregida de MRT, que es en realidad un escáner de malware, por lo que eventualmente deberías volver a marcar esa casilla en Preferencias del Sistema, para que la nueva versión pueda ser descargada e instalada. Sin embargo, es difícil saber cuándo Apple lanza la nueva versión, ya que no anuncia las actualizaciones de MRT. El blog enlazado arriba es un buen recurso para estar al tanto.

Ten en cuenta también que si quieres evitar reiniciar dos veces y hacer todo desde la Terminal root cuando se arranca desde la partición de recuperación, la ruta a MRT.app sería /Volumes/<your boot drive>/System/Library/CoreServices/MRT.app (ya que en ese caso /System/Library/CoreServices/ el de la partición de recuperación, que de hecho no contiene MRT.app en absoluto).

AppleAyuda.com

AppleAyuda es una comunidad de usuarios de los productos de Apple en la que puedes resolver tus problemas y dudas.
Puedes consultar las preguntas de otros usuarios, hacer tus propias preguntas o resolver las de los demás.

Powered by:

X