Q: mach_kernel document appeared

I chimed in here because after tossing the mach_kernel file, I googled simply to find out why it appeared in my hard drive after the 10.8.5 update in the first place. I was led to this discussion and after reading these posts, I have no clue what you guys are going on about. My mach_kernal file was tossed without issue whatsoever. 48 hours later my mac works as always. I tested every little thing after reading your posts... no problems. Did I miss something?

It could be that you are working from the backup file without incident (as I was reminded from another computer group). These files are the blackened ones you can find on your computer, usually in the hidden folders, but are also your backup homemade python files for eg. You can look around hidden files by opening up a terminal and listing your home directory by typing ls /  . There are ones listed now which aren't listed in your finder. Opening the finder and using go -> go to folder you can type in the hidden folders and then see the hidden files. Amongst these down the paths are more of the black backup files.

I subscribe to the age old saying; 'if it ain't broke, don't fix it'. But, I now know where to go should my computer suddenly explode as a result. I certainly won't be tossing out system files again without posting to this site first. Thanks!

And compare suggestions before you go typing potent code into the terminal. Cross-check and and learn what the code is saying before adding it.

success: applied the 10.8.5 combo update and the mach_kernel file is gone (was at HD top level).

derekww wrote:

 

success: applied the 10.8.5 combo update and the mach_kernel file is gone (was at HD top level).

Still there.....just hidden

Hi folks,

I had the same issue where the mach_kernel file showed up, and my OCD brought me here to find a way to remove it from sight. Followed the directions to 'hide' it through Terminal "sudo chflags hidden /mach_kernel" (and probably should have read around a bit further) and now I can't click on my hard drive name in the devices list on my sidebar. It's there but gray and inactive. I can see the contents of my hard drive if I double-click on the HD icon and open from there, but I'm concerned I 'broke' something. Is there a way to 'undo' what I did when I tried to hide the file through Terminal line command?

Any advice greatly appreciated. Thanks.

Is there any chance you ran that command with a space between the "/" and the "mach_kernel"? If so, you hid your hard drive, basically. Try reversing that using the following:

sudo chflags nohidden /

When running these commands, always copy and paste from the source rather than trying to re-type them. Typos, like adding extra spaces, can be disastrous!

Sadly, that's exactly what I did; but thankfully the panic in my voice is gone thanks to your assistance. I ran the command to reverse the previous, restarted, and seem to be back to normal. Thank you KINDLY! I will not be poking around again for such trivial matters any time soon – since I want to avoid "disastrous" at all costs Thanks again!

It amazes me such a simple bug remains open considering the damage deleting/modifying the mach_kernel file can do to the users' operating system. How can Apple roll out a new OSX with remarkable programming feats (new memory compression management & allocation, power consumption improvements, namely), and fail to address, possibly, the easiest bug in the world to address....sigh...

Unrelated to this post, but just want to say I reread your Malware Guide, the AV testing, the Malware database on your site. Kudos to you, Mr. Reed, for not following the ASC status quo regarding this issue, providing excellent insight that allows one to objectively disect myth vs fact (backing it up with self-conducted scientific research). You taught me a lot. Cheers.

Everyone, follow Mr. Reed's blog!

The Safe Mac

Thanks for every who posted the sudo chflags hidden /mach_kernel fix.

Kurt, when I enter your above info for the mach kernel in Terminal it asks for a password but will not take it. Any thoughts about what I should be doing that I'm not? Thanks.

Tom

It's the same admin password you use to login to your Mac, or install software that pops up the admin box. Since nothing is returned on screen as you type, you have to be careful to enter it correctly. If you know you typed it correctly, check to make sure the caps lock key isn't on.

Open Terminal

1. make sure youre the Admin user.
2. Open Terminal (located in /Applications/Utilities).
3. Enter the following command, then press the return key:
   sudo chflags hidden /mach_kernel
4. Enter an Admin password at the "Password:" prompt. Hit Return
5. Quit Terminal. Terminal > Quit Terminal

I want to add here for anyone who might be having these other problems that eventually led me here, which the mach_kernel not where it issupposed to be causes:

One--  is that the latest office update i trid to install doesn't install, it thinks I have something prior to 10.5.x rather than 10.8.5 running...

Two-- is that because of that problem I tried a safe boot for the first time, and it wouldn't do it...

Both problemss totally corrected, and thank you much to all of you here who clarified things so well.  I'd actually tossed it in the trash after finding it in the Documents folder a few days ago, thankfully I hadn't emptied yet.  I simply moved it to the root folder and made it invisible...  That is all it took.