You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

mach_kernel document appeared

This morning a file appeared in my documents titled, "mach_kernel". The file says it was created and edited on Sept. 29, 2013, at 2:34 pm , yet the first time it appeared in the documents file is this morning, When I went to trash it, because it had no info, Finder asked for my password before I could move the file to the trash, this is not usual and I am afraid it is some type of virus, because my computer has been slow lately. Help!

MacBook Air, OS X Mountain Lion (10.8.5)

Posted on Oct 8, 2013 7:19 AM

Reply
74 replies

Oct 18, 2013 5:05 PM in response to dgra

It could be that you are working from the backup file without incident (as I was reminded from another computer group). These files are the blackened ones you can find on your computer, usually in the hidden folders, but are also your backup homemade python files for eg. You can look around hidden files by opening up a terminal and listing your home directory by typing ls / . There are ones listed now which aren't listed in your finder. Opening the finder and using go -> go to folder you can type in the hidden folders and then see the hidden files. Amongst these down the paths are more of the black backup files.

Oct 24, 2013 2:23 PM in response to thomas_r.

Hi folks,

I had the same issue where the mach_kernel file showed up, and my OCD brought me here to find a way to remove it from sight. Followed the directions to 'hide' it through Terminal "sudo chflags hidden /mach_kernel" (and probably should have read around a bit further) and now I can't click on my hard drive name in the devices list on my sidebar. It's there but gray and inactive. I can see the contents of my hard drive if I double-click on the HD icon and open from there, but I'm concerned I 'broke' something. Is there a way to 'undo' what I did when I tried to hide the file through Terminal line command?


Any advice greatly appreciated. Thanks.

Oct 24, 2013 2:38 PM in response to looooooooch

Is there any chance you ran that command with a space between the "/" and the "mach_kernel"? If so, you hid your hard drive, basically. Try reversing that using the following:


sudo chflags nohidden /


When running these commands, always copy and paste from the source rather than trying to re-type them. Typos, like adding extra spaces, can be disastrous!

Oct 24, 2013 2:47 PM in response to thomas_r.

Sadly, that's exactly what I did; but thankfully the panic in my voice is gone thanks to your assistance. I ran the command to reverse the previous, restarted, and seem to be back to normal. Thank you KINDLY! I will not be poking around again for such trivial matters any time soon – since I want to avoid "disastrous" at all costs 🙂 Thanks again!

Oct 24, 2013 5:37 PM in response to thomas_r.

It amazes me such a simple bug remains open considering the damage deleting/modifying the mach_kernel file can do to the users' operating system. How can Apple roll out a new OSX with remarkable programming feats (new memory compression management & allocation, power consumption improvements, namely), and fail to address, possibly, the easiest bug in the world to address....sigh...


Unrelated to this post, but just want to say I reread your Malware Guide, the AV testing, the Malware database on your site. Kudos to you, Mr. Reed, for not following the ASC status quo regarding this issue, providing excellent insight that allows one to objectively disect myth vs fact (backing it up with self-conducted scientific research). You taught me a lot. Cheers.


Everyone, follow Mr. Reed's blog!


The Safe Mac



Nov 22, 2013 5:44 PM in response to LivFli

I want to add here for anyone who might be having these other problems that eventually led me here, which the mach_kernel not where it issupposed to be causes:


One-- is that the latest office update i trid to install doesn't install, it thinks I have something prior to 10.5.x rather than 10.8.5 running...



Two-- is that because of that problem I tried a safe boot for the first time, and it wouldn't do it...


Both problemss totally corrected, and thank you much to all of you here who clarified things so well. I'd actually tossed it in the trash after finding it in the Documents folder a few days ago, thankfully I hadn't emptied yet. I simply moved it to the root folder and made it invisible... That is all it took.

Dec 24, 2013 5:22 AM in response to Aurora1967

How stupid I am...

After 10.8.5 supplemental update I saw that mach_kernel file in Mac HD root, and for some i-dunno-what-the-**** reason I moved it to trash.


now after restart all I have is some options to reinstall, repair and such... file still in the trash...



Precious people, is there some way to undo my stupid act using Terminal ?

Hope for a miracle !

mach_kernel document appeared

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.