"The connection to service named com.apple.lsd.modifydb was invalidated"

Question

"The connection to service named com.apple.lsd.modifydb was invalidated"

I have a MacPro Mid 2010 5,1 running 10.13.4, Boot ROM version MP51.0089.B00. I noticed the problem about a month ago when I would be in normal mode and the computer would crash after attempting to do two things at once, like have the internet open, then open a random app...the pizza wheel would spin and I'd have to press the power button to bring it back up. The problem got quickly worse so that every time it would come back up, it would crash after a few minutes. Going into Safe mode however and the Mac seemed to be fine. I checked in Activity Monitor and 'secd' and 'lsd' both took up over 120% of the CPU. In Console I kept getting the continual message "The connection to service named com.apple.lsd.modifydb was invalidated". I noticed that the Security Update 2019-002 10.13.6 was available so I tried to do the update thinking that this might help, and although it would go through the motions of downloading and restarting, the Mac was still in 10.13.4 with the update still in the 'Updates Available' area of the app store. I then booted into Recovery Mode and ran Disk Utility and ran First Aid on all my volumes and everything came back ok. I also used my original start up disk and ran the extended Apple Hardware Test, and after an hour and half, it came back as okay as well. I also tried to install the Combo version of the High Sierra, but this also either did not help or update the computer. Finally tried a PRAM and SMC reset, in addition to a virus scan, which also came back as clean. Now run out of ideas I thought I'd do a clean install of High Sierra so I wiped my SSD (which I use for the OS and apps) and my HDD (to store everything else) and reinstalled it using a USB backup. With just High Sierra installed, and nothing else, the computer would work fine, no issues at all. So I decided to bring back everything from a Time Machine backup from over a month ago (when I believed my system was running okay), but it's back to the same constant "The connection to service named com.apple.lsd.modifydb was invalidated" message in Console with Activity Monitor Showing CPU usage at over 120% for 'secd', basically right where I started again. A call into Apple offered no help since they said I've done pretty much everything that they would have suggested. Is there anything else that I can do?? Please help!!

Mac Pro, macOS 10.13

Posted on May 22, 2019 7:28 AM

Reply

Answer 1

Top-ranking reply

BDAqua

Level 10

250,253 points

May 23, 2019 8:57 AM in response to NeedMacHelpPls

Safe Boot from the HD, (holding Shift key down at bootup), does the problem occur in Safe Mode?

You may have better luck doing all this in Safe Mode.

Avast has been known to cause big problems in OSX. Remove per their instructions.

Get rid of any Symantec/Norton items.

Unistall Trusteer.

Do you really need WD drivers? Dealing with NTFS volumes maybe?

I'd remove all those Startup Items: except the FXLicense Manager.

Whew, f-secure also??? more than 1 Anti-virus app is plenty of problems, no idea on f-secure itself.

Oh wait... fsavd (10) 626.04 % (? - /usr/local/f-secure/fssp/sbin)... uninstall it.

I'd remove the very old...

com.micromat.TechToolProDaemon.plist

com.prosofteng.DriveGenius.locum.plist

xxx.qnation.PeerGuardian.locum.plist

OH NO, get rid of MacKeeper!

o1dbrowserplugin is a fake plugin a disguised replacement for oldbrowserplugin

Delete all those plists under Executable not found.

To get rid of Spigot Searchme, try Malwarebytes…

https://www.malwarebytes.com/mac/ m

Reply

Answer 2

BDAqua

Level 10

250,253 points

Jun 2, 2019 10:47 PM in response to NeedMacHelpPls

Well, some progress! :)

On Secd, are you using any iCloud, like iCloud Keychain, secd is the "security daemon".

Looking at the Info in Activity Monitor it almost exclusively deals with Keychain.

I was able to fix this by going to the iCloud settings panel and beginning the process to enable iCloud Keychain (entered a password, but cancelled before completing).

https://www.reddit.com/r/hackintosh/comments/54gpmo/process_secd_always_at_95100_cpu_usage_sierra/d88v542/

Reply

Answer 3

BDAqua

Level 10

250,253 points

May 22, 2019 8:24 AM in response to NeedMacHelpPls

Yes, likely in Login Items, Launch Daemons, or Launch Agents.

Reply

Answer 4

BDAqua

Level 10

250,253 points

May 22, 2019 8:17 AM in response to NeedMacHelpPls

Hello,

˜What all 3rd party extensions are you running?

EtreCheck is a simple little app to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac.

http://www.etresoft.com/etrecheck

Use the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck.

Reply

Answer 5

greg sahli

Level 7

25,508 points

Jun 5, 2019 5:00 PM in response to BDAqua

So, NeedMacHelpPls, please show us the file contents of /etc/hosts and /etc/sysctl.conf.

Reply

Answer 6

BDAqua

Level 10

250,253 points

May 25, 2019 10:12 PM in response to NeedMacHelpPls

Hi again, good work so far! :)

secd is the "security daemon", so not a problem exactly, why it takes so long might be.

Are you using the Appstore version to update or the standalone Combo & Security updates?

It can throw me for a good loop too...

https://x704.net/bbs/viewtopic.php?f=12&t=8429&p=112236#p112236

Well 2 tools that are safe & do not interfere with you or the OS...

EtreCheck is a simple little app to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac.

http://www.etresoft.com/etrecheck

There is also Malwarebytes…

https://www.malwarebytes.com/mac/

Reply

Answer 7

greg sahli

Level 7

25,508 points

Jun 5, 2019 9:14 AM in response to Mojo27

Back to the etrecheck report:

Configuration Files:

File /etc/sysctl.conf exists but not expected

  /etc/hosts - Count: 40

The hosts file has been modified. This "may" be the result of some malware modifying it in order to prevent security updates, or redirecting you to some advertiser's web page instead of where you wanted to go.

The added sysctl.conf may be from malware, too.

Reply

Answer 8

BDAqua

Level 10

250,253 points

Jul 22, 2019 11:56 AM in response to NeedMacHelpPls

How hot is it where you are... yesterday my iMac froze & couldn't restart, external drives were like frying hot, let everything cool with extra box fan going, triedc starting & had symptoms much the same as yours, I suspected Video card went out due to heat.. it's a weak point with Apple's Laptops & iMacs.

After more cooling the iMac started in Safe Mode but with video anomalies, got MacFansControl running, yikes... Ambient temp was 108° F., CPU & GPU were in high 160° F., was only 86° F. outside?

It's cooler today & repair drives right now.

Safe Boot from the HD, (holding Shift key down at bootup), does the problem occur in Safe Mode?

Reply

Answer 9

BDAqua

Level 10

250,253 points

Jun 5, 2019 8:19 AM in response to Mojo27

No, sorry for any confusion, we just want to stop iCloud from doing whatever with secd... I believe that might be the problem, restart after hitting the ‘Keep on this Mac’ & pausing a minute.

Reply

Answer 10

BDAqua

Level 10

250,253 points

Jun 3, 2019 8:52 PM in response to NeedMacHelpPls

Whew that's crazy... deleting all keychain info by turning it off!!!

I wonder if that means if all those were imported from iCloud Keychain in the 1st place?

I'll have to do a clone & try it I guess.

On the 10.13.6 update, just checking, are you trying to install it to the internal drive?

Reply

Answer 11

greg sahli

Level 7

25,508 points

Jun 6, 2019 10:25 AM in response to Mojo27

"checked out as I recognize them all"....

The hosts file has priority over normal DNS server access to web addresses. Having it listed in the hosts file to me means:

1) you put the entry in there because you want to refer to some site that isn't normally found in a DNS server. or 2) some malware is actually directing your browser to the wrong sites.

Example - I have in the past put entries in the host file because I wanted to connect to computers in my own network by name instead of IP address.

Most of us don't need more than the standard 10 lines in the hosts file. I don't use a VPN, so that may be the difference -- I'm just checking.

Reply

Answer 12

BDAqua

Level 10

250,253 points

Jun 4, 2019 12:10 PM in response to Mojo27

Well, with a TM backup I'd think you could restore Keychains if it did trash them, updating my TM backup to give a try to turning it on then off.

Reply

Answer 13

May 28, 2019 9:20 PM in response to BDAqua

So I tried the 10.13.6 Combo update from Apple, but after going through the motions, still no luck to change from 10.13.4.

Also, before I did this, my Time Machine was back on the desktop, and it successfully did a backup, but after attempting the update and rebooting, it disappeared again! One final issue, in Activity Monitor, after about 5 minutes when 'secd' finally disappears, my CPU is now being taken up by 'safaribookmarkssyncagent'. One problem for another! :/

I read through your own troubles of trying to update through the link you sent me, but I'm kinda at a loss as to exactly what you did to finally get it to work....would you be able to repeat those steps here, for myself and for anyone else who might be having the same trouble?

Also, any idea on who to get my Time Machine to stay on my desktop, and how to get rid of that annoying 'safaribookmarkssyncagent' high cpu usage bug?

Thanks so much for your assistance!!

Reply

Answer 14

Jun 2, 2019 9:06 PM in response to BDAqua

Sorry for the delay...

I don't really use Safari, only Firefox, so it's not open, and even though I didn't knowingly set up iCloud, when I went in into System Preferences to uncheck the box to turn it off (after finding out how to do that!), it seemed to have maxed out at the 5GB that Apple gives you. I turned it off, and still have SafariBooksSyncAgent at the top of my Activity Monitor while in Safe Mode. Diagnosticd, Windowserver, and Secd were also above 100% after boot up, but eventually went away after about 10 minutes. Now I'm left with the 'Safari...' message still at the top with just under 100% usage.

Time Machine did come back on my desktop in Safe Boot though, and actively went into backing up right away.

Yes I do have an external drive that I can use.

Thanks again.

Reply

Answer 15

Jun 3, 2019 8:16 PM in response to BDAqua

According to the instructions, I need to begin the process to enable iCloud keychain. Is this done by going into Preferences>iCloud, then clicking on the checkmark beside Keychain? Mine already had a check beside it, and when I went to uncheck it, it said if I did it that it would delete all passwords and credit card info from my computer, which I don't really want to do as this would remove the autofill on sites that I need it. Is there perhaps another way of accomplishing this? As I mentioned before, the 'secd' seems to go away on it's own now after about 5 minutes, so I guess it's not causing too much trouble anyways?

Just wondering though about unenabling iCloud altogether, as I did the other day to get rid of the 'SafariBooksSyncAgent' issue. Isn't this only a temporary measure? Does that mean if I actually wanted to use iCloud then I'd be stuck with that problem? There must be a more permanent solution?

However, I'm still unable to update to 10.13.6.... are you able to list the procedure to enable this?

Thanks!

Reply

"The connection to service named com.apple.lsd.modifydb was invalidated"

Similar questions