Did your iOS 17 Simulators get deleted recently?

The macOS anti-malware system XProtect got an update a couple of days ago, XProtectPayload 132, it found a false positive in the simulator runtime disk image and so would try and eliminate it. An updated 133 is out, check for updates and it should download the security update.

Some further info that’s been shared:

@huwr confirmed a restart will fix Xcode, I was careful to say XProtect would “try” to eliminate it earlier, turns out it unmounts a disk image and fails to delete it. You don’t need to download the runtime again, but that works too.

@gfontenot shared this command to get the update immediately
$ softwareupdate --install --include-config-data XProtectPayloads_10_15-133

@AshtonDev Wow. I wondered what was up with that. Thought it was just some Xcode shenanigans as usual and just installed 14.4.1 in the process, rebooted, and then it worked again.
@AshtonDev omg?! I wondered where it had gone?! 😂

@AshtonDev It didn't seem like there was any way to actively download an update, but I checked via this method: https://discussions.apple.com/thread/254793873?answerId=258939159022&sortBy=best#258939159022

and found that it had been silently updated to 133.

XProtect not updated? - Apple Community

@designatednerd oh thanks for sharing that. I think we got lucky that we got the update pushed to us as we scrambled around trying to update all the macs 😂 I think these updates progressively rollout.

@designatednerd no idea if this actually works or was just a coincidence

sudo softwareupdate --background --include-config

@AshtonDev lol I was certain it was something I had brought upon myself
@drewolbrich @AshtonDev I restarted Xcode and that fixed it for me.
@AshtonDev I thought it unmounted drives as a side effect (which is where the sims are). A restart fixed it for many of us
@huwr I think it would unmount and try to delete, on my machine the delete failed and appeared in XProtect logs. I didn’t try restart but heard that worked. I reinstalled the iOS 17 platform in Xcode, an unnecessary download 😅
@AshtonDev where’d you find the XProtect logs. I’m trying to dig deeper

@huwr

sudo log show -info -backtrace -debug -loss -signpost -predicate 'subsystem == "com.apple.XProtectFramework.PluginAPI" && category == "XPEvent.structured"'

@AshtonDev oh wow. I re-downloaded the simulator and then had to reboot before things worked again.
@AshtonDev I got this and re-downloaded all the runtimes. :(

@AshtonDev Thank you!

I ran a virus scan when mine suddenly got deleted... so this is a bit ironic news.😂