macOS Monterey Version 12.6.2 iMAc(24", M1, 2021)
When is Apple's security application MRT active?
MRT is not displayed in the Activity Monitor CPU (All Processes).
Nor from the command line using "ps -ax"
Are the setups for MRT preset or is it necessary to perform additional setups?
iMac 21.5″, macOS 10.12
I'm most obliged that you looked on your system for any active MRT processes. I am beginning to suspect MRT is only active upon request e.g. when new software or an upgrade is being installed.
I did use Etrecheck but removed it from my system.
Since no MRT processes are displayed on any of your systems that sufficiently answers my question that the process is not generally active & therefore not displayed.
MRT can be run from the command line :
# cd /System/Library/CoreServices/MRT.app/Contents/MacOS
# ./MRT -a
But I have not done so yet.
Thank you for your support.
NB :
Just to be clear, there was no contradiction. I specifically noted :
This is just a general sample from an Apple user forum showing in this instance Memory for an active processes. I.E. it was not from my system.
martin_hb wrote:
I'm most obliged that you looked on your system for any active MRT processes. I am beginning to suspect MRT is only active upon request e.g. when new software or an upgrade is being installed.
MRT is the Malware Removal Tool. Therefore, it only needs to run if XProtect finds something to be removed. I think it is really only used for after-the-fact removals. That is, when Apple finds some new malware strain, they add it to MRT so that it will remove any existing installations that may have been missed. I think MRT only runs after system upgrades. Of course, all of this is a guess since Apple doesn't document any of this.
The Malware Removal Tool (MRT. app) is an application that lives in the CoreServices folder located in /System/Library, rather than the Applications or Utilities folders where user level programs are typically located.
Despite taking the form of an application bundle, MRT is not supposed to be launched by users.
Add on - to see MRT in Activity Monitor is, IMHO, not Normal at all
Download the Application Etrecheck directly from the Developer.
This is a Diagnostic Tool that makes no changes to the computer.
It makes a coherent and readable inventory of both the Hardware and Software used on the computer
The application is free or paid from added features.
The Report will Not Reveal Any Personal Information.
Sorry but user wrote " I do not see any MRT process in the Activity Monitor (All processes: Memory / CPU display ) on my system. ?
And yet, the image you suppled contradicts your statement above
On the 3 Computers I have and run, the MRT does not appear in Activity Monitor >> View >> View ALL Processes
Thank you for replying. I have read on Apple community forums of users stating that MRT is consuming a high percentage of CPU time. This can be viewed using Apple's 'Activity Monitor' :
This is just a general sample from an Apple user forum showing in this instance Memory for an active processes.
I do not see any MRT process in the Activity Monitor (All processes: Memory / CPU display ) on my system.
Nor from the command line "ps -ax" which lists all active processes.
Regarding MRT installed software. Since the system is new only one MRTConfigData line displayed in the system report for installed software & is the most up-to-date for Monterey :
I do see, for example : 'Xprotect' activity which is to be expected as it is supposed to be actively protecting the system :
So the question is: If XProtect is displayed as being active in the Activity Monitor & is protecting the system why isn't MRT also displayed in the Activity Monitor?
Shouldn't the MRT process also be actively protecting the system?
Do you see the MRT process displayed in your Activity Monitor?
Thanks in advance,
martin_hb
martin_hb wrote:
Your help is most appreciated. One small additional question, other than Best Answer, where do I click for you to receive additional points?
You are welcome and thank you too. 🇨🇦
Do come back to the Apple Support Communities ( ASC ) in the future, if / or when additional questions may arise
The awarding of points, IMHO, is only a secondary benefit to participating on here forums and attempting to offer sound advise to computer issues related to Apple Services and / or Apple Devices.
To better understand the Award System on these Apple Support Community Forums
refer to link below
Share what you know and get recognized - Apple Support
A " Bigger Picture " of the ASC Forums in below link
How to use Apple Support Communities
I would like to thank you too for your reply. I have to admit I presumed all replies to be from the same person. Looking closer I realise this was a mistake.
You made an excellent guess & therefore the most viable answer. I do wish Apple were more transparent with their documentation.
My old system running Sierra 10.12 ran with very few problems but after 11 years of good service it failed.
On Monterey all the fun has been removed with so many access restrictions & lack of good documentation.
I had the other day a very strange Apple Mail.app failure that somehow got totally mixed up with google gmail?? which I do not use on this system.
I shall have to start a new support request but its so odd I will have problems defining what the failure was.
All the best & thank you for your support,
martin_hb
Not sure what is meant by Active.
I do know that Apple does issue MRT updates from time to time and when Apple decides it is required.
Refer to image below
It is good to help other friends with their computer issue.
Though, unless the Issue or Problem to the Posters' Specific Computer ( yours ) is under discussion, everything else become hypothetical
Your help is most appreciated. One small additional question, other than Best Answer, where do I click for you to receive additional points?
👍
MRT security application tool
