Stopping MRT

I read several complex ways to stop MRT from excessive CPU usage. (macOS 10.13.6) My quick stop method:


-If you suspect MRT is active go to Applications and launch Activity Monitor. I keep the little CPU History graph in a corner of my monitor since some websites will also eat up the CPU with push ads. If CPU is at 100% look at the Activity Monitor All Processes window and click CPU to verify the problem is MRT.


  • In that window double click on an MRT process. A small window opens, click Quit and confirm it by clicking Force Quit.
  • Repeat for the second MRT process. Now the CPU History window should show reduced usage.
  • I then minimize the Activity Monitor window to the Dock but leave the small CPU History window open to monitor website overloads as well as MRT.


This doesn't solve recurrence; I get it about once ever few months, 4 times so far. I'm hoping MRT does something useful beyond my Malwarebytes A/V.

iMac, macOS 10.13

Posted on Mar 6, 2020 8:06 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 6, 2020 10:08 AM

For the most part MalwareBytes is not really needed. MRT or Malware Removal Tool is part of the built-in anti-malware software of macOS. That said, there should be a reason why MRT is spiking CPU usage given that it is a background process. You might consider removing MalwareBytes temporarily to see if that has any effect on MRT. You can also try running the computer in Safe Mode to see if that affects MRT's spiking usage.


About Using Safe Mode



Boot Into Safe Mode


  1. If your Mac isn’t already shut down, then shut it down and wait at least 30 seconds before rebooting.
  2. Immediately, at or before the chime, press and hold down the SHIFT key. 
  3. Release the key after the Apple logo and progress bar appear.
  4. Safe mode startup is much slower than normal startup, so be patient.
  5. When the Login Screen appears enter your admin password. If you use automatic login, then this means you are in safe mode.


4 replies
Question marked as Top-ranking reply

Mar 6, 2020 10:08 AM in response to Venicejim

For the most part MalwareBytes is not really needed. MRT or Malware Removal Tool is part of the built-in anti-malware software of macOS. That said, there should be a reason why MRT is spiking CPU usage given that it is a background process. You might consider removing MalwareBytes temporarily to see if that has any effect on MRT. You can also try running the computer in Safe Mode to see if that affects MRT's spiking usage.


About Using Safe Mode



Boot Into Safe Mode


  1. If your Mac isn’t already shut down, then shut it down and wait at least 30 seconds before rebooting.
  2. Immediately, at or before the chime, press and hold down the SHIFT key. 
  3. Release the key after the Apple logo and progress bar appear.
  4. Safe mode startup is much slower than normal startup, so be patient.
  5. When the Login Screen appears enter your admin password. If you use automatic login, then this means you are in safe mode.


Mar 22, 2020 11:54 AM in response to Community User

MRT is the built-in Malware Removal Tool. You don't want to remove it nor any of the files it creates. The ones you listed are needed parts of the MRT package. They are kept in Receipts because they used to keep track of upgrades to MRT.


Please do not remove any of these files or your computer will become completely open to security risks from malicious malware. I realize it appears that the tool sometimes uses a lot of CPU time but sometimes this may be normal (I don't have any idea about what normal is for the MRT.) I sometimes see all the cores on my iMac using a lot of processing time when Spotlight is indexing.


Now, that said it's possible for some files to become corrupted, thus, causing serious problems for the CPU. The most frequent culprit is caches that become corrupted. There are Caches folders in all the Library folders use by macOS. Most can be removed (but not all) because they will rebuild automatically when called for. One way to get some essential caches remove and rebuilt is to boot the computer into Safe Mode, then reboot normally. This clears some caches.


Another group of files that get corrupted is preference (usually, .plist files) files.


If you do a Google search using "what is mrt in macOS" for the search term, then you will find lots of informative material about MRT.

Mar 22, 2020 10:03 AM in response to Kappy

Thank you for your response. I ran in Safe Mode for a couple of days - MRT did not go haywire in that time. But the 100% CPU looping did recur 15 days later.


Does anyone know if these files created by MRT are important? They are paired, and created once or twice a month. Some months are skipped. I can't imagine three-year old files are useful.

In any event you can't send them to Trash.


Maybe the question is can I be rid of MRT altogether?? It lives in /Library/CoreServices which seems "important". I certainly don't want to break my dear iMac.

Mar 22, 2020 12:20 PM in response to Kappy

Thanks for your helpful response. I would now assume MRT is really doing something when it runs both cores at 100%. I'll let it run next time to see if it completes. I can still get work done in this state. Bottom line for me is "let it be".

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Stopping MRT

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.