Every day, it automatically starts and scans my computer, causing my iMac to become extremely slow. I understand that this is a system protection feature. Now I just want to know how to disable it. It's a terrible experience.
[Re-Titled by Moderator]
iMac 27″, macOS 12.7
Old Toad wrote:
I don't remember setting this in the app's settings but is this enough to do or is it on by default?
I'll change my user tip it that's all is needed.
EtreCheck can still use Full Disk access. All it does for the reports that are posted here is include a little bit more information about Time Machine. I just wanted to reduce some of the potential barriers for use.
Full Disk Access is required in order to use EtreCheck's Storage display. It has to search through the entire hard drive to calculate and display storage. But that information isn't for posting here.
Old Toad wrote:
I don't remember setting this in the app's settings but is this enough to do or is it on by default?
I'll change my user tip it that's all is needed.
EtreCheck can still use Full Disk access. All it does for the reports that are posted here is include a little bit more information about Time Machine. I just wanted to reduce some of the potential barriers for use.
Full Disk Access is required in order to use EtreCheck's Storage display. It has to search through the entire hard drive to calculate and display storage. But that information isn't for posting here.
As PRP_53 asked earlier please download and run Etrecheck. Be sure to give it Full Disk access before running.
Copy and paste the results into your reply. Etrecheck is a diagnostic tool that was developed by one of the most respected users here in the ASC and recommended by Apple Support to provide a snapshot of the system and help identify the more obvious culprits that can adversely affect a Mac's performance.
Copy the report
and use the Additional Text button to paste the report in your reply.
Then we can evaluate the report to see if we can determine the cause of the problem.
The only XProtect I can find in macOS 14.3.1 Sonoma ( M2 Machine ) are those listed in below Full View of ALL XProtect processes
As for Killing the Process, I would not and look elsewhere
To avoid the question / answer and question answer scenario
Download the Application Etrecheck ( External Link ) directly from the Developer.
The Application is Not a " Silver Bullet " and is only a tool to examine the Hardware / Software used on this computer
This is a Diagnostic Tool that makes no changes to the computer Hardware / Software used on this computer
The application is free or paid from added features.
The Report will Not Reveal Any Personal Information.
Post back the Full Report - copy and paste - >>>> using the Additional Text Icon ( 3rd Icon to last ) <<<<
How long does this phenomenon last for? If it's only a few minutes I'd be tempted to just let it run, especially as it's checking out your malware vulnerability. To be fair, as I'm using a fast M* series Mac, I'm not seeing this issue.
From what I've gathered time varies machine to machine. For me, it's around 10 to 15 minutes. During that time I do need to shut down memory intensive apps (such as browsers) to prevent a full on crash.
The issue might be related to out of date files and preferences left over from earlier installations. A clean install (without any of the user's applications and preferences) may potentially solve the problem.
If you want to use this opportunity to upgrade to Sonoma, take care that your Mac is compatible. There have been reports of older Intel Macs with Fusion Drives slowing down significantly using the latest OS. It's probably safest to just do a clean install of your current OS.
XProtectRemediatorSheepSwap using ridiculous amount of memory
Refer to posting from my Learned Colleague @ Luis Sequeira1
CanvaStudio wrote:
Thank you for your response. I can confirm that it is indeed a protection program on the macOS system that is starting automatically.
Any of the below should be removed as per Developers Instructions
Third Party Security Software
Below is only a partial list of such supposed protection programs
This will included Norton Antivirus
Webroot ,
ESET ,
Avira ,
The Built in Security is all that is required.
Mac app security enhancements - Apple Support (CA)
Good work 👍
I am facing the exact same problem, as do many others judging by recent threads on the topic. By PRP_53's recommendation I did the EtreCheck to get a better insight and I suggest you do the same. Since this thread is about your system primarily, I will not share the entire report but highlight some initial findings.
1. There was no Antivirus software present.
2. Among recent installs were XProtectPayloads (125) on February 5th 2024, and XProtectPlistConfigData (2185) on February 12th 2024.
3. Besides familiar apps that have always functioned, and haven't updated for at least a year, there were two reports of high CPU usage that stood out. The latter may be related to Time Machine which I only activated two days ago, well after the issues began:
2024-02-17 15:37:01 ArchiveService - High CPU Use
First occurrence: 2024-02-17 15:42:58
Executable: /System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
2024-02-17 10:05:42 mdsync - High CPU Use (2 times)
First occurrence: 2024-02-16 13:26:37
Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdsync
It's happening again. It secretly starts up every day.
This kind of terrible service! Did they design it without considering older devices?
I don't remember setting this in the app's settings but is this enough to do or is it on by default?
I'll change my user tip it that's all is needed.
Thank you for your response. I can confirm that it is indeed a protection program on the macOS system that is starting automatically.
Old Toad wrote:
Be sure to give it Full Disk access before running.
That is not necessary.
How to disable XProtect Remediator on iMac?
