Ciang Brides 黃金城 it:mac:os:bugs
http://ciangbrides.myds.me/dw/
2026-05-14T20:57:24+00:00
Ciang Brides 黃金城
http://ciangbrides.myds.me/dw/
http://ciangbrides.myds.me/dw/lib/tpl/bootstrap3/images/favicon.ico
-
text/html
2020-10-27T17:54:03+00:00
Anonymous (anonymous@undisclosed.example.com)
MRT 問題
http://ciangbrides.myds.me/dw/it/mac/os/bugs/mrt
<h1 class="sectionedit1" id="mrt_問題">MRT 問題</h1>
<p>
本來好像是 macOS 正常的 Malware Removal Tool？但 2020/10 月下旬（這一週），我的 <abbr title="MacBook Air，通常指 GHSRobert 隨身筆電">MBA</abbr> 突然開始一直跑 MRT 不停，持續耗用破 100% CPU（還好還有另 300% 可以用），耗電又讓電腦不順暢，而且還無法強制停止（總是會重新開始），這樣就變成問題了。
</p>
<!-- EDIT{"target":"section","name":"MRT \u554f\u984c","hid":"mrt_\u554f\u984c","codeblockOffset":0,"secid":1,"range":"1-344"} -->
<h2 class="sectionedit2" id="本質">本質</h2>
<p>
<code>/System/Library/CoreServices/MRT.app</code>
</p>
<ul>
<li class="level1"><div class="li"> 是好的？</div>
</li>
<li class="level1 node"><div class="li"> 是因為下載了重大更新所以才一直跑掃描？</div>
<ul>
<li class="level2"><div class="li"> 經查，我目前的 MRT.app 是 1.68 版，2020/10/9 建立、10/20 修改</div>
</li>
</ul>
</li>
</ul>
<!-- EDIT{"target":"section","name":"\u672c\u8cea","hid":"\u672c\u8cea","codeblockOffset":0,"secid":2,"range":"345-567"} -->
<h2 class="sectionedit3" id="解法">解法</h2>
<ul>
<li class="level1"><div class="li"> 整個移除？</div>
</li>
<li class="level1 node"><div class="li"> ❎ <a href="https://apple.stackexchange.com/questions/336774/how-to-disable-or-remove-the-yarascanservice-mrt-app#answer-382042" class="urlextern" title="https://apple.stackexchange.com/questions/336774/how-to-disable-or-remove-the-yarascanservice-mrt-app#answer-382042" rel="ugc nofollow">這裡</a>說，把 ~/Download 裡面的檔案都先移走，然後重開機，這樣 MRT 就不會一直跑，然後再把檔案移回來就好？</div>
<ul>
<li class="level2"><div class="li"> ↑沒什麼用</div>
</li>
</ul>
</li>
<li class="level1 node"><div class="li"> Recover mode 動檔案</div>
<ol>
<li class="level2"><div class="li"> 重新開機同時一直按著 ``⌘R``，直到看到 ``macOS 工具``畫面（= 已進 recovery mode）↓<pre class="code">csrutil disable</pre>
<p>
停用 SIP
</p>
</div>
</li>
<li class="level2 node"><div class="li"> 重新正常開機，然後：</div>
<ol>
<li class="level3"><div class="li"> 拿掉 MRT 的執行權限 + 強制關閉 MRT 執行程序 → 似乎還是無效</div>
</li>
<li class="level3"><div class="li"> 把 MRT.app bundle 整個改名 + 強制關閉 MRT 執行程序 → 好像才有效 ✅</div>
</li>
</ol>
</li>
<li class="level2"><div class="li"> 再進 recovery mode 啟用 SIP 回來</div>
</li>
</ol>
</li>
</ul>
<!-- EDIT{"target":"section","name":"\u89e3\u6cd5","hid":"\u89e3\u6cd5","codeblockOffset":0,"secid":3,"range":"568-1349"} -->
<h2 class="sectionedit4" id="參考">參考</h2>
<ul>
<li class="level1"><div class="li"> <a href="https://www.reddit.com/r/osx/comments/6w1jux/mrt_sits_at_100_cpu_will_it_ever_finish/" class="urlextern" title="https://www.reddit.com/r/osx/comments/6w1jux/mrt_sits_at_100_cpu_will_it_ever_finish/" rel="ugc nofollow">MRT sits at 100% cpu. Will it ever finish? : osx</a></div>
</li>
<li class="level1"><div class="li"> <a href="https://discussions.apple.com/thread/8049344" class="urlextern" title="https://discussions.apple.com/thread/8049344" rel="ugc nofollow">, How do I get rid of "MRT"? - Apple Community</a></div>
</li>
<li class="level1"><div class="li"> <a href="https://apple.stackexchange.com/questions/336774/how-to-disable-or-remove-the-yarascanservice-mrt-app" class="urlextern" title="https://apple.stackexchange.com/questions/336774/how-to-disable-or-remove-the-yarascanservice-mrt-app" rel="ugc nofollow">macos - How to disable or remove the YaraScanService (MRT.app)? - Ask Different</a></div>
</li>
</ul>
<!-- EDIT{"target":"section","name":"\u53c3\u8003","hid":"\u53c3\u8003","codeblockOffset":1,"secid":4,"range":"1350-"} -->