Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Could not setup Mach task special port 9: (os/kern) no access

I'm getting a LOT of these messages in my Console log. Anyone know what they mean and if they are of concern and I should do something?

7/26/09 10:39:00 AM com.apple.launchd[1] (0x10bb20.cron[19450]) Could not setup Mach task special port 9: (os/kern) no access

Thanks,
Steven

Mac Pro 2 x 3.0 GHz Quad-Core, 4GB RAM, Mac OS X (10.5.7), 30" HP LP3065 Monitor & 22" Cinema Display

Posted on Jul 26, 2009 11:10 AM

Reply
25 replies

Aug 2, 2009 10:07 PM in response to V.K.

They are still there, so in addition to ClamXav, I bought MacScan 2.6.1 and ran it. All it found was 73 tracking cookies, but no trojans or viruses. I deleted the 73. So I'm wondering what to do/try next. Could there be something living inside Parallels/XP even when I'm not running them? I just checked the Console and see it's been quiet for about 18 minutes. Hmmm. Could the problem have been with the tracking cookies?

Aug 3, 2009 7:52 PM in response to nptacek

nptacek wrote:
Could you link to some evidence there?

I've seen a number of threads where such messages indicated a presence of a trojan installed scrontab.

see these links for example
http://discussions.apple.com/thread.jspa?messageID=7543410
http://discussions.apple.com/thread.jspa?messageID=7627972
http://discussions.apple.com/thread.jspa?messageID=8325231&#8325231

I only mentioned DNS changer because it's the most common trojan. there is certainly nothing in that console message indicating anything about DNS.

I'm fairly certain you are confused as to how the DNSChanger trojan horse operates.

Message was edited by: V.K.

Aug 4, 2009 7:53 AM in response to nptacek

nptacek. I'm not confused on this issue. It's worse than that. I don't have a clue how DNSChanger works or what the Mach Task notices mean or how to stop them. I'm reading the web I see some people say it is the result of Apple deprecating chron and you have to convert over to launchd on your chron jobs, whatever that is. If this is the issue, it is more technical than the average user knows what to do with, so I'm wondering how Apple expects us to deal with it. If it's a trojan, then that could be easier going as you can get/run ClamXav as I did. It found 4 which I deleted. But the issue started again, so I bought MacScan as one of the replies in this thread says it's the DNSChanger trojan issue. I ran MacScan twice and find no other trojans. So now I'm wondering if it's the chron/launchd thing and what to do about it. I found one guy who said his was related to a chron job for Mailmain and he wrote a custom script to convert from chron to launchd. Well.. I don't have Mailman on my Mac and dealing with scripts like this seems strange that Apple wouldn't have dealt with this if they are the ones that deprecated chron jobs and IF this is the reason for all the Console entries. Whew... I still don't have a clue what to do and there are a lot of folks out there with the same problem and not knowing what to do about it 😟 Oh... btw you mention a request for evidence. Again clueless. What evidence can I provide that will help and where would it be found? Console? Thanks so much for your time and assistance!

Message was edited by: Steven Shmerler

Aug 4, 2009 7:56 AM in response to V.K.

Hi V.K. I opened Terminal and put in your text and got:

WARNING: Improper use of the sudo command could lead to data loss
or the deletion of important system files. Please double-check your
typing when using sudo. Type "man sudo" for more information.

Which scared the heck out of me so I stopped since I have no idea what I'm doing. Can this command really destroy so much?

Aug 4, 2009 8:00 AM in response to V.K.

VK, btw I contacted MacScan and they wrote back:

"Steven, That does not sound like the behavior of any known spyware. What version of OS X are you running? Have you tried Repairing Permissions on your Hard Drive with Disk Utility? Disk Utility is located in your Utilities folder."

So...I'll try that. There are so many reporting this issue, I'm surprised there isn't more top line obvious info and a fix for it. The answer seems quite obscured, but I haven't gotten to your links yet. That's next. Thanks VK.

Aug 4, 2009 8:39 AM in response to Steven Shmerler

Steven Shmerler wrote:
VK, btw I contacted MacScan and they wrote back:

"Steven, That does not sound like the behavior of any known spyware. What version of OS X are you running? Have you tried Repairing Permissions on your Hard Drive with Disk Utility? Disk Utility is located in your Utilities folder."


well, as I said I have seen a LOT of posts (here and elsewhere on the web) where this was definitely caused by trojans. at the very least that console message says that SOMETHING runs a cron job which generates a lot of security response messages from the kernel. also, you said you see a lot of these messages. do they repeat every minute? that would again be indicative of a trojan. at the very least you should find out WHAT those cron jobs are. that's what the command I gave you will do. nothing more.

So...I'll try that. There are so many reporting this issue, I'm surprised there isn't more top line obvious info and a fix for it. The answer seems quite obscured, but I haven't gotten to your links yet. That's next. Thanks VK.

Aug 4, 2009 8:50 AM in response to V.K.

I don't have a pw defined (never have), so maybe this won't work? or maybe I'm doing something wrong? I launch Terminal and see:

Last login: Tue Aug 4 08:43:28 on ttys000
steven-shmerlers-mac-pro:~ shmerls$

(...then I paste: sudo crontab -l and get:)

Last login: Tue Aug 4 08:43:28 on ttys000
steven-shmerlers-mac-pro:~ shmerls$ sudo crontab -l

(Then click RETURN)

Last login: Tue Aug 4 08:43:28 on ttys000
steven-shmerlers-mac-pro:~ shmerls$ sudo crontab -l

WARNING: Improper use of the sudo command could lead to data loss
or the deletion of important system files. Please double-check your
typing when using sudo. Type "man sudo" for more information.

To proceed, enter your password, or type Ctrl-C to abort.

Password:

(Then click RETURN - with no password entered)

and just get:

steven-shmerlers-mac-pro:~ shmerls$

Could not setup Mach task special port 9: (os/kern) no access

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.