iMac hard drive spins up every 5 minutes while asleep

The issue is pretty self explanatory. When I put the mac to sleep, the hard drive will spin up on its own volition for a minute, every 5-15 minutes, while the display is off. Not a big fan, considering I like to sleep my mac specifically to quiet it, and not needlessly waste power / hard drive cycles while not in use.


Through some troubleshooting, I've trial-and-errored my way to the console messages that are logged related to this event.


iMac com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.user.501): Service "com.apple.xpc.launchd.unmanaged.loginwindow.106" tried to register for endpoint "com.apple.tsm.uiserver" already registered by owner: com.apple.SystemUIServer.agent
--- last message repeated 1 time ---
iMac syslogd[56]: ASL Sender Statistics
iMac timed[2654]: settimeofday({0x5cafa85f,0x61088}) == 0
iMac com.apple.xpc.launchd[1] (com.apple.imfoundation.IMRemoteURLConnectionAgent): Unknown key for integer: _DirtyJetsamMemoryLimit
iMac com.apple.xpc.launchd[1] (com.apple.quicklook[2666]): Endpoint has been activated through legacy launch(3) APIs. Please switch to XPC or bootstrap_check_in(): com.apple.quicklook
iMac Google Chrome[453]: notify name "com.apple.system.powersources.timeremaining" has been registered 20 times - this may be a leak


The suspicious lines to me, seem to be


iMac com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.user.501): Service "com.apple.xpc.launchd.unmanaged.loginwindow.106" tried to register for endpoint "com.apple.tsm.uiserver" already registered by owner: com.apple.SystemUIServer.agent


Which, to my untrained eye, immediately looks like someone trying to hack my computer remotely.

And;


iMac com.apple.xpc.launchd[1] (com.apple.imfoundation.IMRemoteURLConnectionAgent): Unknown key for integer: _DirtyJetsamMemoryLimit


From my research Jetsam is related to RAM management. Why is my 'JetsamMemoryLimit' integer missing? Obviously, a hacker who's circumventing the RAM manager to run malicious software unhindered.


iMac Google Chrome[453]: notify name "com.apple.system.powersources.timeremaining" has been registered 20 times - this may be a leak


Is the hacker.. Google?!

iMac 21.5", macOS 10.13

Posted on Apr 11, 2019 2:29 PM

Reply
Question marked as Top-ranking reply

Posted on Apr 16, 2019 6:39 PM

I did not get a chance to troubleshoot this before finding a solution.


I performed a NVRAM/PRAM reset ( https://support.apple.com/en-us/HT204063 ) and the issue is no more, which would make sense in the context of the previous Jetsam errors.


Thanks for helping me troubleshoot this, BDAqua!

Similar questions

13 replies

Apr 16, 2019 6:20 PM in response to Insomi-mac

In Terminal, what does pmset -g report?


im21:~ bd1$ pmset -g

System-wide power settings:

Currently in use:

hibernatemode 0

halfdim 1

womp 1

networkoversleep 0

sleep 0 (sleep prevented by coreaudiod, mds_stores)

Sleep On Power Button 1

ttyskeepawake 1

hibernatefile /var/vm/sleepimage

autorestart 0

disksleep 0

displaysleep 4 (display sleep prevented by AppBundleExe, AppBundleExe)


https://www.dssw.co.uk/reference/pmset.html



Apr 11, 2019 7:07 PM in response to BDAqua

Concurrently, no devices are plugged in- I only plug the iphone in rarely to update my music library.


I have a partition of my file system syncing with Google Drive, whose sync management program is called "Backup and Sync" ... while I've had Google Drive syncing with no problems since I've owned this machine, maybe the most recent iOS update knocked something important loose in its code.. I'll give that a fresh install tomorrow and report back if there's any luck!


Apr 11, 2019 2:57 PM in response to Insomi-mac

Just wondering, is this a Bus powered drive?


Any syncing with iDevices?


Post a report from this please...


EtreCheck is a simple little app to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac.


http://www.etresoft.com/etrecheck


Apr 11, 2019 5:21 PM in response to BDAqua

The hard drive in question is the internal disk; I do have an external drive configured for Time Machine, but it's never interrupted Sleep mode before. This has begun about a month ago? At least thats when I noticed it.

I sync photos and music to and from my iPhone.

Major Issues: None

Minor Issues:

    These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 

    Upgradeable RAM - This machine has upgradeable RAM that would help its performance.

    Out of RAM - This machine is running short on RAM and has a mechanical hard drive, reducing the speed of the virtual memory system.

    Unsigned files - There are unsigned software files installed. They appear to be legitimate but should be reviewed.

    32-bit Apps - This machine has 32-bits apps will not work after macOS 10.14 “Mojave”.

Hardware Information:

    iMac (21.5-inch, Mid 2011)

    iMac Model: iMac12,1

    1 2.5 GHz Intel Core i5 (i5-2400S) CPU: 4-core

    4 GB RAM - Upgradeable

        BANK 0/DIMM0 - 2 GB DDR3 1333 ok

        BANK 1/DIMM0 - 2 GB DDR3 1333 ok

        BANK 0/DIMM1 - Empty 

        BANK 1/DIMM1 - Empty 

Video Information:

    AMD Radeon HD 6750M - VRAM: 512 MB

        iMac 1920 x 1080

Drives:

    disk0 - ST3500418AS 500.11 GB (Mechanical - 7200 RPM)

    Internal SATA 3 Gigabit Serial ATA

        disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

        disk0s2 - m*****d (Journaled HFS+) 282.25 GB (257.12 GB used)

        disk0s3 - Recovery HD [Recovery] 650 MB

        disk0s4 - B******P (MS-DOS FAT12) 217.00 GB (190.18 GB used)

    disk1 - G-DRIVE mobile 4.00 TB

    External USB 480 Mbit/s USB

        disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

        disk1s2 - G************e (Journaled HFS+) 4.00 TB (492.99 GB used)

Mounted Volumes:

    disk0s2 - m*****d 282.25 GB (24.86 GB free)

        Journaled HFS+

        Mount point: /

    disk0s4 - B******P 217.00 GB (26.82 GB free)

        MS-DOS FAT12

        Mount point: /Volumes/B******P

    disk1s2 - G************e 4.00 TB (3.51 TB free)

        Journaled HFS+

        Mount point: /Volumes/G************e

Network:

    Interface en0: Ethernet

    Interface en4: iPhone

    Interface fw0: FireWire

    Interface en1: Wi-Fi

        802.11 a/b/g/n

    Interface en3: Bluetooth PAN

    Interface bridge0: Thunderbolt Bridge

    iCloud Quota: 4.94 GB available

System Software:

    macOS High Sierra 10.13.6 (17G6030) 

    Time since boot: About an hour

Security:

    Gatekeeper: Enabled

    System Integrity Protection: Enabled

Unsigned Files:

    Launchd: /Library/LaunchAgents/com.wacom.wacomtablet.plist

        Executable: /Library/Application Support/Tablet/WacomTabletSpringboard

        Details: Exact match found in the whitelist - probably OK

    Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist

        Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart

        Details: Exact match found in the whitelist - probably OK

    Launchd: /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

        Executable: /Library/Application Support/Adobe/SwitchBoard/SwitchBoard.app/Contents/MacOS/launch.switchboard

        Details: Exact match found in the whitelist - probably OK

I've since removed SwitchBoard, after reading about its uselessness. The waking problem still occurs with it gone.


32-bit Applications:

    12 32-bit apps


Kernel Extensions:

    /Library/Application Support/VirtualBox

        [Loaded] VBoxDrv.kext (Oracle America, Inc., 5.1.28)

        [Loaded] VBoxNetAdp.kext (Oracle America, Inc., 5.1.28)

        [Loaded] VBoxNetFlt.kext (Oracle America, Inc., 5.1.28)

        [Loaded] VBoxUSB.kext (Oracle America, Inc., 5.1.28)

    /System/Library/Extensions

        [Not Loaded] Wacom Tablet.kext (Wacom Tablet 6.2.0w4)


Apr 11, 2019 5:22 PM in response to Insomi-mac

System Launch Agents:

    [Not Loaded] 17 Apple tasks

    [Loaded] 167 Apple tasks

    [Running] 79 Apple tasks

    [Killed] 31 Apple tasks


System Launch Daemons:

    [Not Loaded] 37 Apple tasks

    [Loaded] 193 Apple tasks

    [Running] 72 Apple tasks

    [Killed] 35 Apple tasks


Launch Agents:

    [Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2017-07-13)

    [Running] com.wacom.wacomtablet.plist (? 9e9edb5e - installed 2012-01-20)


Launch Daemons:

    [Loaded] com.adobe.SwitchBoard.plist (? 68cad67 - installed 2017-07-13)

    [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-03-27)

    [Not Loaded] org.virtualbox.startup.plist (? 700b9385 - installed 2017-09-17)

User Launch Agents:

    [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-04-01)

    [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-04-01)

    [Not Loaded] org.virtualbox.vboxwebsrv.plist (Oracle America, Inc. - installed 2017-09-17)

User Login Items:

    Backup and Sync.app (Google, Inc. - installed 2018-12-07)

        (Application - /Applications/Backup and Sync.app)

    Flux.app (? - installed 2017-07-12)

        (Application - /Applications/Flux.app)

    com.adobe.SwitchBoard.monitor.plist (?)

        (MachInit - /etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist)

Internet Plug-ins:

    WacomNetscape: 1.1.1-1 (? - installed 2012-01-20)

    WacomTabletPlugin: WacomTabletPlugin 2.0.0.4 (? - installed 2012-01-20)

Audio Plug-ins:

    BluetoothAudioPlugIn: 6.0.7 (Apple - installed 2019-04-06)

    iSightAudio: 7.7.3 (Apple - installed 2019-04-06)

    AirPlay: 2.0 (Apple - installed 2019-04-06)

    AppleAVBAudio: 683.1 (Apple - installed 2019-04-06)

    BridgeAudioSP: 4.69.2 (Apple - installed 2019-04-06)

    AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-04-06)

3rd Party Preference Panes:

    WacomTablet (installed 2012-01-20)

Time Machine:

    Skip System Files: No

    Auto backup: Yes

    Volumes being backed up: 

        m*****d: Disk size: 282.25 GB - Disk used: 257.39 GB 

    Destinations: 

        G************e [Local] (Last used)

            Total size: 4.00 TB

            Total number of backups: 54

            Oldest backup: 2018-06-09 22:10:34

            Last backup: 2019-04-11 13:32:52

Sorry I have to spread this across 3 posts, 5k character limit

Apr 11, 2019 5:24 PM in response to Insomi-mac

Performance:

    System Load: 1.78 (1 min ago) 1.56 (5 min ago) 1.47 (15 min ago)

    Nominal I/O speed: 1.59 MB/s

    File system: 49.97 seconds

    Write speed: 73 MB/s

    Read speed: 108 MB/s


CPU Usage Snapshot:

    Type Overall

    System 2 %

    User 3 %

    Idle 95 %

Top Processes Snapshot by CPU:

    Process (count) CPU (Source - Location)

    Google Chrome Helper (27) 8.14 % (Google, Inc.)

    Google Chrome 4.20 % (Google, Inc.)

    EtreCheckPro 2.92 % (Etresoft, Inc.)

    diagnosticd 2.72 % (Apple)

    Console 2.18 % (Apple)

Top Processes Snapshot by Memory:

    Process (count) RAM usage (Source - Location)

    Google Chrome Helper (27) 1.21 GB (Google, Inc.)

    kernel_task 528 MB (Apple)

    EtreCheckPro 380 MB (Etresoft, Inc.)

    Google Chrome 142 MB (Google, Inc.)

    Console 120 MB (Apple)

Top Processes Snapshot by Network Use:

    Process Input / Output (Source - Location)

    mDNSResponder 752 KB / 179 KB (Apple)

    netbiosd 39 KB / 9 KB (Apple)

    apsd 11 KB / 15 KB (Apple)

    rapportd 471 B / 644 B (Apple)

    SystemUIServer 0 B / 376 B (Apple)

Top Processes Snapshot by Energy Use:

    Process (count) Energy (0-100) (Source - Location)

    Google Chrome Helper (27) 4 (Google, Inc.)

    Google Chrome 2 (Google, Inc.)

    WindowServer 1 (Apple)

    CalendarAgent 1 (Apple)

    Backup and Sync 1 (Google, Inc.)

Virtual Memory Information:

    Physical RAM: 4 GB


    Free RAM: 18 MB

    Used RAM: 3.46 GB

    Cached files: 535 MB

    Available RAM: 553 MB

    Swap Used: 23 MB

Software Installs (past 30 days):

    Install Date Name (Version)

    2019-03-26 Gatekeeper Configuration Data (164)

    2019-03-26 Safari (12.1)

    2019-04-06 Security Update 2019-002 (10.13.6)

Diagnostics Information (past 7 days):

    2019-04-10 16:22:52 Software Update.app Memory

        Executable: /System/Library/CoreServices/Software Update.app

    2019-04-07 14:15:17 Backup and Sync.app Crash (3 times)

        Executable: /Applications/Backup and Sync.app

        Details: 

            objc_msgSend() selector name: updatePath:withStatus:

    2019-04-06 16:09:54 installd Memory

        Executable: /System/Library/PrivateFrameworks/PackageKit.framework/Versions/A/Resources/installd

    2019-04-05 17:32:44 Adobe Photoshop CS6.app CPU (2 times)

        Executable: /Applications/Adobe Photoshop CS6/Adobe Photoshop CS6.app

Apr 11, 2019 6:31 PM in response to Insomi-mac

Any syncing with iDevices?


What are you using to backup?

2019-04-07 14:15:17 Backup and Sync.app Crash (3 times)

        Executable: /Applications/Backup and Sync.app

        Details: 

            objc_msgSend() selector name: updatePath:withStatus:


Not that this is the cause, but 4GB is barely enough to run the OS itself anymore...

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

iMac hard drive spins up every 5 minutes while asleep

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.