Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Persistent macOS CPU Hog accessoryupdaterd


  • Please log in to reply
4 replies to this topic

#1 TNTE

TNTE

  •  Avatar image
  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:21 AM

Posted 24 May 2024 - 02:26 PM

I updated from Ventura to Sonoma and, as expected, experienced a problem. My expertise is very limited, but If anyone has suggestions, I'll be grateful.

I found this process consistently hogging 35% CPU. accessoryupdaterd

The user owner is listed as _accessoryupc

It's persistent. Activity Monitor kills it but it's a daemon and returns in seconds.

I've tried everything I know with no luck, including days of searches, online terminal unload suggestions, multiple calls to Apple, uninstalling a reinstalling apps that might be associated, and as some have suggested it's associated with Bluetooth, forgot all Bluetooth accessories and restarted, checked if it might be malware, all with no luck. It seems to be a protected process.

It launches in Safe mode, BUT ONLY LAUNCHES IN ANY MODE WHEN LOGGED IN TO MY USER ACCOUNT.

Via Apple support, I created a second user account where the process does NOT launch. While neither myself or Apple could find a way to stop the process, Apple suggested a full OS reinstall but warned that the problem might simply reoccur from Time Machine user records.  Not a very promising task. And I desperately don't want to manually rebuild the entire system around a new user account.

So I'm hoping that I can find the triggering culprit in my user data and stop it there, but any suggestions would be appreciated.

The protected process is called by an alias located here:

/System/Library/PrivateFrameworks/MobileAssetUpdater.framework/MobileAssetUpdater

It calls a protected plist script here:

/System/Library/LaunchDaemons/com.apple.accessoryupdaterd.plist

Which launches the protected exec process located here:

/System/Library/PrivateFrameworks/MobileAccessoryUpdater.framework/Support/accessoryupdaterd

Here's the plist and associated files launched:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>EnablePressuredExit</key>
    <true/>
    <key>GroupName</key>
    <string>_accessoryupdater</string>
    <key>Label</key>
    <string>com.apple.accessoryupdaterd</string>
    <key>MachServices</key>
    <dict>
        <key>com.apple.MobileAccessoryUpdater</key>
        <true/>
        <key>com.apple.MobileAccessoryUpdater.defaultClient</key>
        <true/>
        <key>com.apple.accessoryupdater.launchauhelper</key>
        <true/>
        <key>com.apple.accessoryupdater.observer</key>
        <true/>
        <key>com.apple.accessoryupdater.uarp</key>
        <true/>
        <key>com.apple.accessoryupdater.uarp.launchagentlistener</key>
        <true/>
        <key>com.apple.accessoryupdater.uarp.standaloneCommandListener</key>
        <true/>
    </dict>
    <key>ProcessType</key>
    <string>Adaptive</string>
    <key>ProgramArguments</key>
    <array>
        <string>/System/Library/PrivateFrameworks/MobileAccessoryUpdater.framework/Support/accessoryupdaterd</string>
        <string>120</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>UserName</key>
    <string>_accessoryupdater</string>
</dict>
</plist>

 



BC AdBot (Login to Remove)

 


#2 greg18

greg18

  •  Avatar image
  • Members
  • 1,743 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Los Angeles, CA
  • Local time:09:21 AM

Posted 24 May 2024 - 03:21 PM

https://www.reddit.com/r/MacOS/comments/18bgp6n/constant_30_cpu_use_from_accessoryupdaterd/

https://discussions.apple.com/thread/254013446?sortBy=best

https://apple.stackexchange.com/questions/309329/what-is-mobileaccessoryupdater-and-why-it-runs-on-my-macbook


Edited by greg18, 24 May 2024 - 03:23 PM.


#3 TNTE

TNTE
  • Topic Starter

  •  Avatar image
  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:21 AM

Posted 24 May 2024 - 03:49 PM

Thanks for the kind reply.

 

Sigh.

 

This problem has not only been exhausting, it's getting compulsive.

 

So I already found those references. The only one with an actionable answer was the stack exchange suggestion to unload the process using Terminal. But after dozens of efforts, I get consistent errors. It will NOT unload on command. It's stubborn, apparently system locked, and persistent. That's why I'm scrounging from forum to forum hoping for a solution.

 

But sincere thanks for the links.



#4 greg18

greg18

  •  Avatar image
  • Members
  • 1,743 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Los Angeles, CA
  • Local time:09:21 AM

Posted 26 May 2024 - 10:55 AM

35% is not that much in use. It is not a normal running process unless you have some kind of mobile device connected to it via USB, or BT

#5 TNTE

TNTE
  • Topic Starter

  •  Avatar image
  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:21 AM

Posted 28 May 2024 - 01:12 PM

35% is not that much in use. It is not a normal running process unless you have some kind of mobile device connected to it via USB, or BT

Thanks for the reply. The problem is that after studying this with the Console app, it launches, then encounteres an error, terminates, and relaunches every two seconds, adinfinitum. It's just doesn't seem like a smart thing to let it run on. It was right after an update to Sonoma that caused this, so I contacted Apple twice. The best they could offer was to setup a new account or reinstall the OS.






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users