Bitdefender and Time Machine Protection

Hi all,


about two months ago I bought a new MacBook Pro and I installed everything from scratch (that is, I did not restore a Time Machine backup). I have Bitdefender Antivirus for Mac installed and since a few weeks a notification from Bitdefender saying that it blocked an attempted Time Machine access pops up about once or twice a week.


Since that made me feel quite paranoid about being hacked I deleted my hard drive and completely reinstalled macOS (again, I did not restore the Time Machine backup afterwards). However, the notifications are still there and I feel really bad about them every single time they pop up. This really makes me anxious.


By the way: Whenever I run a virus scan using Bitdefender on my Mac, it cannot find anything.


To give you a better picture of what I am talking about, the notifications look as follows:


Antivirus for Mac

Time Machine Protection

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.app kit.xpc.openAndSavePanelService.xpc attempted to make changes to a time machine backup (or similar as the text is too long to be displayed completely in the notification).


The same notification is sometimes displayed for /System/Library/PrivateFrameworks/SystemMigration.framework/Versions/A/Resources/ systemmigrationd instead of /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.app kit.xpc.openAndSavePanelService.xpc.


Looking up the latter one in my console gives me the following information:


Jan 26 09:39:20 MacBook-Pro com.apple.appkit.xpc.openAndSavePanelService[25734]: assertion failed: 17D47: libxpc.dylib + 72637 [F7E5F1BC-614B-39CB-B6CE-92A9C7B7EC0B]: 0x89

Jan 26 10:19:11 MacBook-Pro com.apple.appkit.xpc.openAndSavePanelService[26397]: assertion failed: 17D47: libxpc.dylib + 72637 [F7E5F1BC-614B-39CB-B6CE-92A9C7B7EC0B]: 0x89

Jan 26 10:20:35 MacBook-Pro com.apple.appkit.xpc.openAndSavePanelService[26397]: BUG in libdispatch client: kevent[mach_recv] monitored resource vanished before the source cancel handler was invoked

Jan 26 11:04:59 MacBook-Pro com.apple.appkit.xpc.openAndSavePanelService[27027]: assertion failed: 17D47: libxpc.dylib + 72637 [F7E5F1BC-614B-39CB-B6CE-92A9C7B7EC0B]: 0x89


So, my questions are:

i) Is it normal that these applications (which seem to be from Apple) attempt to access my Time Machine backups, meaning Bitdefender is blocking them unjustified? If not, what could cause them and what can I do about it?

ii) Are the messages about "com.apple.appkit.xpc.openAndSavePanelService" in the console normal or is there anything wrong with them?


Of course, I contacted Bitdefender Support and they said that no application, not even ones from Apple, should make changes to old backups. So, according to them, something is wrong and I must have some kind of virus or have been hacked, which really upsets me. Strangely, their virus scan cannot find a thing. So, what should I do? Reinstalling macOS doesn't seem to be of help apparently. I am really, really desperate.


I would so highly appreciate any and all kind of help on this issue. This is driving me crazy.


Kind regards,

John

MacBook Pro TouchBar and Touch ID, macOS High Sierra (10.13.3)

Posted on Jan 26, 2018 5:44 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 26, 2018 7:58 AM

i) Is it normal that these applications (which seem to be from Apple) attempt to access my Time Machine backups, meaning Bitdefender is blocking them unjustified?


Yes.


ii) Are the messages about "com.apple.appkit.xpc.openAndSavePanelService" in the console normal or is there anything wrong with them?


They are normal. com.apple.appkit.xpc.openAndSavePanelService.xpc is a required macOS component. Make no attempt to delete it.


Of course, I contacted Bitdefender Support and they said that no application, not even ones from Apple, should make changes to old backups. So, according to them, something is wrong and I must have some kind of virus or have been hacked, which really upsets me.


That is so over the top utterly untrue it's laughable. Time Machine has to make changes to its old backups. It has to overwrite them, delete them, and change their attributes. That's how it works. Furthermore, Apple implements changes in Time Machine with practically every macOS update. I have never known them to describe those changes in any detail whatsoever, and they only rarely even reveal a change has taken place.


Strangely, their virus scan cannot find a thing.


Strange? There are no macOS viruses. The closest thing to a virus on a Mac is the "anti-virus" garbage people insist upon installing on them.


Rule 1 of Macs is don't install junk. "Bitdefender" is a threat to your Mac's security and its backups.

Similar questions

16 replies

Jan 29, 2018 7:15 AM in response to johnmcdenver

johnmcdenver wrote:


I get your point not to install untrustworthy software but what if I already did? I once installed an email certificate from StartCom and because it felt strange afterwards I deleted it again and installed antivirus software on my Mac (this is the very reason I did it in the first place), which actually found and removed a Trojan. Ever since I feel like I have been hacked and I feel so exposed.


So, if I really have been hacked and am currently being spied on, what can I do to stop it? I am really desperate.

Hello johnmcdenver,

There is nothing wrong with a StartCom email certificate.


It is difficult to diagnose these things after-the-fact, but I'm quite confident that you never had any trojan to begin with.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Bitdefender and Time Machine Protection

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.