iMac is consuming Monstrous Data

Discussion in 'macOS Sierra (10.12)' started by lordmj, Dec 24, 2016.

  1. lordmj, Dec 24, 2016
    Last edited: Dec 25, 2016

    lordmj macrumors newbie

    Dec 23, 2016
    Hi everyone!

    My home data consumption have went thru the roof for the past 2 months, and I have finally tracked down (using the Traffic Analyser from the Router) the culprit to be the additional iMac which was introduced to my home at about the same time. Its my first Mac OS - which I absolutely loved, minus the excessive data consuming bit. Its literally consuming hundreds of GB per day without me using the internet (for streaming, downloading, etc), mail or being on the iMac!

    Did a clean installation when macSierra was launch. Reinstall everything from ground up, instead of upgrading it to the new version.

    I have tried the following so far:
    1. Disable iCloud Drive
    2. Disable iCloud Photo Library/My Photo Stream/ iCloud Photo Sharing
    3. Disable Automatically check for update/Background upgrade downloading under System Pref > App Store.
    4. Turned on Firewall
    5. Turned off Spotlight Suggestion & Mail/Message under SpotLight Preferences
    6. Unchecked "automatically download all attachments" options under Mail.
    7. DropBox is under observation and I have switch it to Manual Sync. I have also tried to disable it completely.
    8. Used WPA2 with a complex password setting with Cap, Hypen, Small Letter, Numbers. (I can also verified via my router that I don't have
    9. Ran MalwareBytes & system appear to be clean.
    10. Disable iCloud completely. Same result
    11. Removed my networks in System Preferences/ Network. Then add ethernet and wifi again. Profile user account is new.
    12. Disable OCSP & CRL Service under KeyChain Access Preference
    I have found a couple of suggestions pointing the data usage to Mail being the culprit. Its attempt to download every single emails and attachment to store them on the iMac to make them accessible entirely offline and to allow spotlight to index them for easy search. I am hoping turning off Mail under Spotlight Preference will stop this.

    Is there a way for us to control the size of email cache? This option was removed in OS X Mavericks. Im currently on Mac Sierra 10.12.2. The only thing I have been able to do for now is to tell Mail not to automatically download my attachment. I fear the consumption will continue until all of my email has been cached. (I have taken the liberty to purge my emails via backend, & controlling the amount of message Mail downloads via server settings on my email server)

    Having said that, my current email folder is only using 312MB (via ~/Library on Finder > Go > Mail) So it doesn't explain where does the hundreds of GB went to? So it doesn't

    Currently, the only solution is to turn off Wifi on iMac when I am not using it. Would ideally like to fix this problem in a more permanent manner.

    Any help or feedback would be much appreciated.

    P/S: Data consumption on my Activity Monitor > Network image below is lower than usual today as I have reached my limit for my bandwidth usage and its currently being throttled by my ISP. I left the iMac running over night and it chocked up 4GB, and between then it has gone up to 5.13GB. I am expecting it to be much higher this evening even without being on the iMac. If I topped up my data, it will usually deplete the data very quickly.


    Screen Shot 2016-12-24 at 2.56.56 PM.png Screen Shot 2016-12-24 at 3.23.45 PM.png Screen Shot 2016-12-24 at 11.26.02 AM.png
  2. iMacDragon macrumors 68000


    Oct 18, 2008
    Check activity monitor all processes to start, as nothing seems to be showing any kind of major usage in your processes.

    does sound very odd though.
  3. WarHeadz macrumors 6502a


    Aug 30, 2015
    Long Beach, California
  4. lordmj thread starter macrumors newbie

    Dec 23, 2016
    Yes. I have limited data limit with the ISP. Broadband is kinda pricey over this end (kinda also why I changed my password every now and then have complex crazy ones to ensure I don't have leechers)

    --- Post Merged, Dec 24, 2016 ---
    I know right? I just came seem to find out what's taking up all the data. Activity monitor is telling me that is consuming so much data, well receiving... but the maths doesn't add up.

  5. Zazoh macrumors 6502a


    Jan 4, 2009
    San Antonio, Texas
    Is iTunes syncing? Sounds like it is downloading or uploading iTunes music. I don't think it is your mail. Mail usually syncs fairly quickly.
  6. lordmj thread starter macrumors newbie

    Dec 23, 2016
    Hi! I'm not using iTunes.

  7. Fishrrman macrumors G5


    Feb 20, 2009
    Have you tried turning DropBox all the way off? Deleting it, if necessary?
    Have you tried completely signing out from iCloud? In effect, disabling it?
  8. bcave098 macrumors 6502a


    Sep 6, 2015
    Northern British Columbia
    I think he means to have Activity Monitor show "All Processes" instead of the ones run by your user account. Use View > All Processes in Activity Monitor.
  9. allan.nyholm, Dec 25, 2016
    Last edited: Dec 25, 2016

    allan.nyholm macrumors 6502a


    Nov 22, 2007
    Aalborg, Denmark
    could you try removing your networks in System Preferences/ Network. Then add ethernet and wifi again. Or create a new profile in addition to it all
  10. dsemf macrumors 6502

    Jul 26, 2014
    I would try running EtraCheck. There may be some unusual add-ons or malware that is generating the excess data activity.

    If you do so, post the output in a code block and we can review it.

    You may also want to download and run MalwareBytes just to be sure.

  11. lordmj, Dec 25, 2016
    Last edited: Dec 25, 2016

    lordmj thread starter macrumors newbie

    Dec 23, 2016
    Yes I have tried that. Same result.

    --- Post Merged, Dec 25, 2016 ---
    That make perfect sense now.
    I have adjusted it now to ALL PROCESSES. Ha ha ha ha.
    Thank you.

    --- Post Merged, Dec 25, 2016 ---
    Thank you for the suggestion. I will give that a go

    --- Post Merged, Dec 25, 2016 ---
    Thank you for the suggestion.
    I will run EtraCheck and post the output here shortly.
    A copy of the MalwareBytes was downloaded 2 days ago - someone was saying there is no need to install a virus scanner for macOS, but a MalwareBytes will suffice. I have Sophos Anti Virus installed, but will give MalwareBytes a go to see if there is any Malware detected.

    MalwareBytes just complete the scanning. Everything is clean.
    I have recently did a clean installation for MacSierra. Reformatted the HD and reinstalled everything from ground up instead of upgrading.

    EtraCheck report is out. Just posted a copy of the result below. TQ

    --- Post Merged, Dec 25, 2016 ---
    EtreCheck version: 3.1.5 (343)

    Report generated 2016-12-26 10:51:40

    Download EtreCheck from

    Runtime 3:36

    Performance: Good

    Click the [Support] links for help with non-Apple products.

    Click the [Details] links for more information about that line.

    Click the [Remove] links to remove adware.

    Problem: Other problem


    macOS is consuming a lot of data even when I am not using the system.

    Hardware Information:

    iMac (27-inch, Mid 2011)

    [Technical Specifications] - [User Guide] - [Warranty & Service]

    iMac - model: iMac12,2

    1 3.1 GHz Intel Core i5 (i5-2400) CPU: 4-core

    16 GB RAM Upgradeable - [Instructions]

    BANK 0/DIMM0


    BANK 1/DIMM0


    BANK 0/DIMM1

    8 GB DDR3 1333 MHz ok

    BANK 1/DIMM1

    8 GB DDR3 1333 MHz ok

    Bluetooth: Old - Handoff/Airdrop2 not supported

    Wireless: en1: 802.11 a/b/g/n

    Video Information:

    AMD Radeon HD 6970M - VRAM: 1024 MB

    iMac 2560 x 1440

    System Software:

    macOS Sierra 10.12.2 (16C67) - Time since boot: about one day

    Disk Information:

    WDC WD1001FALS-403AA0 disk0 : (1 TB) (Rotational)

    [Show SMART report]

    EFI (disk0s1) <not mounted> : 210 MB

    Macintosh HD (disk0s2) / [Startup]: 999.35 GB (881.44 GB free)

    Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


    USB Information:

    Apple Computer, Inc. IR Receiver

    Apple Card Reader

    Apple Inc. FaceTime HD Camera (Built-in)

    Hewlett-Packard HP Color LaserJet MFP M277dw

    Apple Inc. BRCM2046 Hub

    Apple Inc. Bluetooth USB Host Controller

    Thunderbolt Information:

    Apple Inc. thunderbolt_bus

    Configuration files:

    System Integrity Protection status: disabled


    Mac App Store and identified developers



    One adware file found. [Remove]

    Kernel Extensions:


    [loaded] at.obdev.nke.LittleSnitch (3.7.1 - SDK 10.11 - 2016-12-25) [Support]

    [loaded] com.sophos.kext.oas (9.5.54 - SDK 10.11 - 2016-12-25) [Support]

    [loaded] com.sophos.nke.swi (9.5.52 - SDK 10.11 - 2016-12-25) [Support]

    System Launch Agents:

    [not loaded] 8 Apple tasks

    [loaded] 175 Apple tasks

    [running] 97 Apple tasks

    System Launch Daemons:

    [not loaded] 42 Apple tasks

    [loaded] 167 Apple tasks

    [running] 101 Apple tasks

    Launch Agents:

    [running] at.obdev.LittleSnitchUIAgent.plist (2016-12-25) [Support]

    [not loaded] com.adobe.AAM.Updater-1.0.plist (2016-11-19) [Support]

    [running] com.sophos.uiserver.plist (2016-11-20) [Support]

    Launch Daemons:

    [running] at.obdev.littlesnitchd.plist (2016-12-25) [Support]

    [loaded] com.adobe.SwitchBoard.plist (2016-11-19) [Support]

    [running] com.malwarebytes.HelperTool.plist (2016-12-26) [Support]

    [loaded] (2015-08-15) [Support]

    [running] com.sophos.common.servicemanager.plist (2016-11-19) [Support]

    User Launch Agents:

    [loaded] com.bittorrent.BitTorrent.plist (2016-12-10) Adware! [Remove]


    [loaded] (2016-11-19) [Support]

    User Login Items:

    Magnet Application


    iTunesHelper Application (2016-12-23)


    Dropbox Application


    BitTorrent Application


    com.adobe.SwitchBoard.monitor.plist MachInit


    Mach Init items are deprecated

    Internet Plug-ins:

    JavaAppletPlugin: 15.0.1 - SDK 10.7 (2016-11-19) Check version

    AdobePDFViewer: 10.1.1 (2016-11-19) [Support]

    QuickTime Plugin: 7.7.3 (2016-12-23)

    3rd Party Preference Panes:


    Time Machine:

    Time Machine not configured!

    Top Processes by CPU:

    24% syncdefaultsd

    8% SophosScanD

    8% kernel_task

    6% mdworker(10)

    6% WindowServer

    Top Processes by Memory:

    1.65 GB

    970 MB kernel_task

    410 MB mdworker(10)

    262 MB SophosScanD

    213 MB Dropbox

    Virtual Memory Information:

    10.39 GB Available RAM

    5.96 GB Free RAM

    5.61 GB Used RAM

    4.44 GB Cached files

    0 B Swap Used

    Diagnostics Information:

    Dec 25, 2016, 01:39:13 PM Self test - passed

    Dec 25, 2016, 10:25:37 AM /Library/Logs/DiagnosticReports/Little Snitch Daemon_2016-12-25-102537_[redacted].crash

    /Library/Little Snitch/Little Snitch Daemon.bundle/Contents/MacOS/Little Snitch Daemon

    Dec 23, 2016, 06:57:46 PM /Library/Logs/DiagnosticReports/mtmd_2016-12-23-185746_[redacted].crash


    Dec 23, 2016, 06:57:38 PM /Library/Logs/DiagnosticReports/mtmd_2016-12-23-185738_[redacted].crash

    Dec 23, 2016, 06:57:32 PM /Library/Logs/DiagnosticReports/ReportCrash_2016-12-23-185732_[redacted].crash

  12. Fishrrman macrumors G5


    Feb 20, 2009
  13. dianeoforegon macrumors 6502a


    Apr 26, 2011
    Do you have BitTorrent set to share files?

    I would turn SIP back on.

    System Integrity Protection status: disabled
  14. JohnDS macrumors 65816

    Oct 25, 2015
  15. lordmj thread starter macrumors newbie

    Dec 23, 2016
    Hi. How do I turn back SIP?
    Let me know? Thanks.

    Happy New Year!
  16. Weaselboy Moderator


    Staff Member

    Jan 23, 2005

Share This Page