iMac is consuming Monstrous Data

Discussion in 'macOS Sierra (10.12)' started by lordmj, Dec 24, 2016.

  1. lordmj, Dec 24, 2016
    Last edited: Dec 25, 2016

    lordmj macrumors newbie

    Joined:
    Dec 23, 2016
    #1
    Hi everyone!

    My home data consumption have went thru the roof for the past 2 months, and I have finally tracked down (using the Traffic Analyser from the Router) the culprit to be the additional iMac which was introduced to my home at about the same time. Its my first Mac OS - which I absolutely loved, minus the excessive data consuming bit. Its literally consuming hundreds of GB per day without me using the internet (for streaming, downloading, etc), mail or being on the iMac!

    Did a clean installation when macSierra was launch. Reinstall everything from ground up, instead of upgrading it to the new version.

    I have tried the following so far:
    1. Disable iCloud Drive
    2. Disable iCloud Photo Library/My Photo Stream/ iCloud Photo Sharing
    3. Disable Automatically check for update/Background upgrade downloading under System Pref > App Store.
    4. Turned on Firewall
    5. Turned off Spotlight Suggestion & Mail/Message under SpotLight Preferences
    6. Unchecked "automatically download all attachments" options under Mail.
    7. DropBox is under observation and I have switch it to Manual Sync. I have also tried to disable it completely.
    8. Used WPA2 with a complex password setting with Cap, Hypen, Small Letter, Numbers. (I can also verified via my router that I don't have
    9. Ran MalwareBytes & system appear to be clean.
    10. Disable iCloud completely. Same result
    11. Removed my networks in System Preferences/ Network. Then add ethernet and wifi again. Profile user account is new.
    12. Disable OCSP & CRL Service under KeyChain Access Preference
    I have found a couple of suggestions pointing the data usage to Mail being the culprit. Its attempt to download every single emails and attachment to store them on the iMac to make them accessible entirely offline and to allow spotlight to index them for easy search. I am hoping turning off Mail under Spotlight Preference will stop this.

    Is there a way for us to control the size of email cache? This option was removed in OS X Mavericks. Im currently on Mac Sierra 10.12.2. The only thing I have been able to do for now is to tell Mail not to automatically download my attachment. I fear the consumption will continue until all of my email has been cached. (I have taken the liberty to purge my emails via backend, & controlling the amount of message Mail downloads via server settings on my email server)

    Having said that, my current email folder is only using 312MB (via ~/Library on Finder > Go > Mail) So it doesn't explain where does the hundreds of GB went to? So it doesn't

    Currently, the only solution is to turn off Wifi on iMac when I am not using it. Would ideally like to fix this problem in a more permanent manner.

    Any help or feedback would be much appreciated.

    P/S: Data consumption on my Activity Monitor > Network image below is lower than usual today as I have reached my limit for my bandwidth usage and its currently being throttled by my ISP. I left the iMac running over night and it chocked up 4GB, and between then it has gone up to 5.13GB. I am expecting it to be much higher this evening even without being on the iMac. If I topped up my data, it will usually deplete the data very quickly.

    Regards,
    J


    Screen Shot 2016-12-24 at 2.56.56 PM.png Screen Shot 2016-12-24 at 3.23.45 PM.png Screen Shot 2016-12-24 at 11.26.02 AM.png
     
  2. iMacDragon macrumors 65816

    iMacDragon

    Joined:
    Oct 18, 2008
    Location:
    UK
    #2
    Check activity monitor all processes to start, as nothing seems to be showing any kind of major usage in your processes.

    does sound very odd though.
     
  3. WarHeadz macrumors 6502a

    WarHeadz

    Joined:
    Aug 30, 2015
    Location:
    Los Angeles
  4. lordmj thread starter macrumors newbie

    Joined:
    Dec 23, 2016
    #4
    Yes. I have limited data limit with the ISP. Broadband is kinda pricey over this end (kinda also why I changed my password every now and then have complex crazy ones to ensure I don't have leechers)

    --- Post Merged, Dec 24, 2016 ---
    I know right? I just came seem to find out what's taking up all the data. Activity monitor is telling me that is consuming so much data, well receiving... but the maths doesn't add up.


     
  5. Zazoh macrumors 6502a

    Zazoh

    Joined:
    Jan 4, 2009
    Location:
    Mico, Texas
    #5
    Is iTunes syncing? Sounds like it is downloading or uploading iTunes music. I don't think it is your mail. Mail usually syncs fairly quickly.
     
  6. lordmj thread starter macrumors newbie

    Joined:
    Dec 23, 2016
    #6
    Hi! I'm not using iTunes.


     
  7. Fishrrman macrumors G4

    Joined:
    Feb 20, 2009
    #7
    Have you tried turning DropBox all the way off? Deleting it, if necessary?
    Have you tried completely signing out from iCloud? In effect, disabling it?
     
  8. bcave098 macrumors 6502

    bcave098

    Joined:
    Sep 6, 2015
    Location:
    Northern British Columbia
    #8
    I think he means to have Activity Monitor show "All Processes" instead of the ones run by your user account. Use View > All Processes in Activity Monitor.
     
  9. allan.nyholm, Dec 25, 2016
    Last edited: Dec 25, 2016

    allan.nyholm macrumors 6502a

    allan.nyholm

    Joined:
    Nov 22, 2007
    Location:
    Aalborg, Denmark
    #9
    could you try removing your networks in System Preferences/ Network. Then add ethernet and wifi again. Or create a new profile in addition to it all
     
  10. dsemf macrumors regular

    Joined:
    Jul 26, 2014
    #10
    I would try running EtraCheck. There may be some unusual add-ons or malware that is generating the excess data activity.

    If you do so, post the output in a code block and we can review it.

    You may also want to download and run MalwareBytes just to be sure.


    DS
     
  11. lordmj, Dec 25, 2016
    Last edited: Dec 25, 2016

    lordmj thread starter macrumors newbie

    Joined:
    Dec 23, 2016
    #11
    Yes I have tried that. Same result.

    --- Post Merged, Dec 25, 2016 ---
    That make perfect sense now.
    I have adjusted it now to ALL PROCESSES. Ha ha ha ha.
    Thank you.

    --- Post Merged, Dec 25, 2016 ---
    Thank you for the suggestion. I will give that a go

    --- Post Merged, Dec 25, 2016 ---
    Thank you for the suggestion.
    I will run EtraCheck and post the output here shortly.
    A copy of the MalwareBytes was downloaded 2 days ago - someone was saying there is no need to install a virus scanner for macOS, but a MalwareBytes will suffice. I have Sophos Anti Virus installed, but will give MalwareBytes a go to see if there is any Malware detected.

    UPDATE:
    MalwareBytes just complete the scanning. Everything is clean.
    I have recently did a clean installation for MacSierra. Reformatted the HD and reinstalled everything from ground up instead of upgrading.

    EtraCheck report is out. Just posted a copy of the result below. TQ

    --- Post Merged, Dec 25, 2016 ---
    EtreCheck version: 3.1.5 (343)

    Report generated 2016-12-26 10:51:40

    Download EtreCheck from https://etrecheck.com

    Runtime 3:36

    Performance: Good



    Click the [Support] links for help with non-Apple products.

    Click the [Details] links for more information about that line.

    Click the [Remove] links to remove adware.



    Problem: Other problem

    Description:

    macOS is consuming a lot of data even when I am not using the system.



    Hardware Information:

    iMac (27-inch, Mid 2011)

    [Technical Specifications] - [User Guide] - [Warranty & Service]

    iMac - model: iMac12,2

    1 3.1 GHz Intel Core i5 (i5-2400) CPU: 4-core

    16 GB RAM Upgradeable - [Instructions]

    BANK 0/DIMM0

    Empty

    BANK 1/DIMM0

    Empty

    BANK 0/DIMM1

    8 GB DDR3 1333 MHz ok

    BANK 1/DIMM1

    8 GB DDR3 1333 MHz ok

    Bluetooth: Old - Handoff/Airdrop2 not supported

    Wireless: en1: 802.11 a/b/g/n


    Video Information:

    AMD Radeon HD 6970M - VRAM: 1024 MB

    iMac 2560 x 1440


    System Software:

    macOS Sierra 10.12.2 (16C67) - Time since boot: about one day


    Disk Information:

    WDC WD1001FALS-403AA0 disk0 : (1 TB) (Rotational)

    [Show SMART report]

    EFI (disk0s1) <not mounted> : 210 MB

    Macintosh HD (disk0s2) / [Startup]: 999.35 GB (881.44 GB free)

    Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


    HL-DT-STDVDRW GA32N ()


    USB Information:

    Apple Computer, Inc. IR Receiver

    Apple Card Reader

    Apple Inc. FaceTime HD Camera (Built-in)

    Hewlett-Packard HP Color LaserJet MFP M277dw

    Apple Inc. BRCM2046 Hub

    Apple Inc. Bluetooth USB Host Controller


    Thunderbolt Information:

    Apple Inc. thunderbolt_bus


    Configuration files:

    System Integrity Protection status: disabled


    Gatekeeper:

    Mac App Store and identified developers


    Adware:

    ~/Library/LaunchAgents/com.bittorrent.BitTorrent.plist

    One adware file found. [Remove]


    Kernel Extensions:

    /Library/Extensions

    [loaded] at.obdev.nke.LittleSnitch (3.7.1 - SDK 10.11 - 2016-12-25) [Support]

    [loaded] com.sophos.kext.oas (9.5.54 - SDK 10.11 - 2016-12-25) [Support]

    [loaded] com.sophos.nke.swi (9.5.52 - SDK 10.11 - 2016-12-25) [Support]



    System Launch Agents:

    [not loaded] 8 Apple tasks

    [loaded] 175 Apple tasks

    [running] 97 Apple tasks


    System Launch Daemons:

    [not loaded] 42 Apple tasks

    [loaded] 167 Apple tasks

    [running] 101 Apple tasks


    Launch Agents:

    [running] at.obdev.LittleSnitchUIAgent.plist (2016-12-25) [Support]

    [not loaded] com.adobe.AAM.Updater-1.0.plist (2016-11-19) [Support]

    [running] com.sophos.uiserver.plist (2016-11-20) [Support]


    Launch Daemons:

    [running] at.obdev.littlesnitchd.plist (2016-12-25) [Support]

    [loaded] com.adobe.SwitchBoard.plist (2016-11-19) [Support]

    [running] com.malwarebytes.HelperTool.plist (2016-12-26) [Support]

    [loaded] com.microsoft.office.licensingV2.helper.plist (2015-08-15) [Support]

    [running] com.sophos.common.servicemanager.plist (2016-11-19) [Support]


    User Launch Agents:

    [loaded] com.bittorrent.BitTorrent.plist (2016-12-10) Adware! [Remove]

    /usr/bin/open

    [loaded] com.google.keystone.agent.plist (2016-11-19) [Support]


    User Login Items:

    Magnet Application

    (/Applications/Magnet.app)

    iTunesHelper Application (2016-12-23)

    (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

    Dropbox Application

    (/Applications/Dropbox.app)

    BitTorrent Application

    (/Applications/BitTorrent.app)

    com.adobe.SwitchBoard.monitor.plist MachInit

    (/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist)

    Mach Init items are deprecated


    Internet Plug-ins:

    JavaAppletPlugin: 15.0.1 - SDK 10.7 (2016-11-19) Check version

    AdobePDFViewer: 10.1.1 (2016-11-19) [Support]

    QuickTime Plugin: 7.7.3 (2016-12-23)



    3rd Party Preference Panes:

    None


    Time Machine:

    Time Machine not configured!



    Top Processes by CPU:

    24% syncdefaultsd

    8% SophosScanD

    8% kernel_task

    6% mdworker(10)

    6% WindowServer


    Top Processes by Memory:

    1.65 GB com.apple.WebKit.WebContent(7)

    970 MB kernel_task

    410 MB mdworker(10)

    262 MB SophosScanD

    213 MB Dropbox


    Virtual Memory Information:

    10.39 GB Available RAM

    5.96 GB Free RAM

    5.61 GB Used RAM

    4.44 GB Cached files

    0 B Swap Used


    Diagnostics Information:

    Dec 25, 2016, 01:39:13 PM Self test - passed

    Dec 25, 2016, 10:25:37 AM /Library/Logs/DiagnosticReports/Little Snitch Daemon_2016-12-25-102537_[redacted].crash

    /Library/Little Snitch/Little Snitch Daemon.bundle/Contents/MacOS/Little Snitch Daemon

    Dec 23, 2016, 06:57:46 PM /Library/Logs/DiagnosticReports/mtmd_2016-12-23-185746_[redacted].crash

    /System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmd

    Dec 23, 2016, 06:57:38 PM /Library/Logs/DiagnosticReports/mtmd_2016-12-23-185738_[redacted].crash

    Dec 23, 2016, 06:57:32 PM /Library/Logs/DiagnosticReports/ReportCrash_2016-12-23-185732_[redacted].crash

    /System/Library/CoreServices/ReportCrash
     
  12. Fishrrman macrumors G4

    Joined:
    Feb 20, 2009
  13. dianeoforegon macrumors 6502a

    dianeoforegon

    Joined:
    Apr 26, 2011
    Location:
    Oregon
    #13
    Do you have BitTorrent set to share files?

    I would turn SIP back on.

    System Integrity Protection status: disabled
     
  14. JohnDS macrumors 65816

    Joined:
    Oct 25, 2015
  15. lordmj thread starter macrumors newbie

    Joined:
    Dec 23, 2016
    #15
    Hi. How do I turn back SIP?
    Let me know? Thanks.

    Happy New Year!
     
  16. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #16

Share This Page