"deleted" process high CPU usage

LukeSeall wrote:

I was temporarily storing a bunch of large files on my mac but I've now removed these and have about 40gb free.

Free up another 60 GB and you should be good to go.

I don't think the space thing relates to the deleted process issue though does it?

The deleted process is directly related to storage. This is the process that actually deletes files after you have asked the operating system to delete them, hence the name. It is the "delete" daemon, or "deleted". It also removes various temporary files, caches, and anything else it can find when free storage space runs low.

Since I've only been low on space for a few days and the deleted issue has been going on a lot longer

You have probably been low on free storage space for a long time. The deleted issue is direct evidence of this. The operating system hides storage use by using the word "available". In most cases, your "available" storage is totally fake. This is storage that could be make "free" if you really needed it, as determined by the operating system, not you. But first, you have to actually run out of storage. Then you will get error messages about lack of storage space. You will try to delete files, but you won't actually be able to fix it. This is because it is actually the deleted process that is really doing the actual deletions, on its own schedule.

Normally, deleted runs periodically in the background and you don't notice it. But when you run really, really low on free storage space, then it will be kicked into high gear to prevent catastrophic system failure, which you were really close to when you ran your EtreCheck report.

So, what this all means is that the operating system has been running correctly, as designed. You simply need to delete more files. I recommend an external drive to archive the files that you don't need every day. Don't use Time Machine for this. Time Machine is a great backup, but it is not an archive. Eventually, files will be deleted from Time Machine.

Thank you for the information

Understand, we are all working Remotely from all around the world. 

Therefore, we do not have the On-Hands experience the User ( you ) have with this computer.

The next best thing for us to having a semi - actual On-Hand experience  with this computer is to follow the steps below

Download the Application Etrecheck directly from the Developer. 

The application is free or paid from added features. 

It will take a Snap Shot -  both the hardware and software.

 The Report will Not Reveal Any Personal Information. 

Post back the Full Report - copy and paste - using the Additional Text Icon ( 3rd Icon to last )

We can have a look at the report for possible issues and may have possible suggestions to resolve the issues.

Again, thank you for the report and below is what has been presented / specific to the " deleted " issue

Problem: Other problem

Description: deleted  process continually running and using 80% cpu 

Major Issues:

Q - Low disk space - This computer is running critically low on free hard drive space.

A - Will cover later in this reply. Generally when this is reported - this means the Drive is running out of Empty Space

Minor Issues:

Q - SSD too slow - SSD is showing poor performance.

A - The Slow SSD can be attributed( in part ) to the Lack Of Empty Space on the drive.

Meaning, each time an  file is added or changed,  the drive is constantly searching for Empty Space to save the file.Thusly, the “ deleted “ process is struggling all the time to find that Empty Space and Delete that which it can

Q -   More than one antivirus app - This computer has multiple antivirus apps installed.

A - Also cover later in this reply

Q -  Clean up - There are orphan files that could be removed.

A - Self explanatory and needs the Users attention 

Q -  System modifications - There are a large number of system modifications running in the background.

A - Running with many system modifications even if not intended has consequences and some of hose including what the computer is experiencing now.

Hardware Information:

MacBook Pro (13-inch, 2019, Four Thunderbolt 3 ports)

MacBook Pro Model: MacBookPro15,2

Drives:

Q - disk0 - APPLE SSD AP0512M 500.28 GB (Solid State - TRIM: Yes) 

Internal PCI-Express 8.0 GT/s x4 NVM Express

Q - disk1s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (478.64 GB used)

A - This is a Dangerous Condition and does need immediate attention before the Warning Message is presented by the Operating System. If left not dealt with, the computer may eventually Cease to Boot Up At All.

A - Will provide a Separate reply Posting on remedial actions the user can perform on their own

System Software:

Q -  macOS Monterey 12.3.1 (21E258) 

A - Current version of Monterey is now version 12.5.1 and brings Security Updates for the Flaw in Monterey in the News and Internet.

A - The lack of Empty Space at this time needs to be remedied Before attempting the update to Monterey 12.5.1

Q -  Antivirus software: Apple, Trusteer, and Malwarebytes

A - Trusteer may have been suggested by your Financial Institution or Bank but is really totally not needed and brings on Other Issues. Suggest contacting the Developers of this Application for Their Specific Instructions to remove this software 

There are no known Windows-like Viruses in the wild that self replicate and affect macOS, because of the underling UNIX  Foundation and Permission Limitation. 

Additionally, and specific to Big Sur macOS 11 and Monterey macOS 12, the Operating System resides in a Sealed and Read Only Volume that can not be opened by the User and protects against from “ Bad Actor “ Software.

The Only thing this Antivirus software is protecting is the Bank Account of the Developers and for zero return to the User aside from the problems this software creates.

AntiVirus Developers purposefully Market their product to create a “ Fear Factor “. In so doing, creating a False Need for their Product.

The The Built in Security  is all that is required to protect the computer.

As you’ve already tried a few non-specific things here’s a few more to try.

• reset the SMC three times in a row.

Reset the SMC of your Mac - Apple Support

• look at you login items in System Preferences to see if you recognise a potential culprit and disable it before restarting.
• relaunch Finder

In my " deleted " the below is the full text

cwd

/

txt

/System/Library/PrivateFrameworks/CacheDelete.framework/deleted

txt

/Library/Preferences/Logging/.plist-cache.cVypk4Am

txt

/System/Library/Frameworks/CFNetwork.framework/Versions/A/Resources/builtinTLDDafsaData.bin

txt

/usr/lib/dyld

txt

/private/var/folders/x2/zr7yhzq10pg03lr2p63hqwvm0000gn/0/com.apple.LaunchServices.dv/com.apple.LaunchServices-3027-v2.csstore

txt

/private/var/db/analyticsd/events.allowlist

txt

/usr/share/icu/icudt70l.dat

txt

/private/var/db/timezone/tz/2022c.1.0/icutz/icutz44l.dat

txt

/Library/Application Support/CrashReporter/SubmitDiagInfo.domains

0

/dev/null

1

/dev/null

2

/dev/null

3

4

/Library/Application Support/CrashReporter/SubmitDiagInfo.domains

Has your computer had some Crashes or Unexpected Restart with a message about Unexpected Error etc. ?

The first thing I'd suggest is to move up to OS version 12.5.1. That may solve your problem.

The " deleted" process is a normal and native Apple Process.

In Activity Monitor >> View >> View ALL process and refer to image below

This may give the user more insights exactly what it is doing and report back

Below is the Separate Reply regarding Remedial Action to possible fix the Lack of Empty Space on this Drive

Manage Storage

Rebuild the Spotlight index on your Mac

What is “Other” storage on a Mac, and how can I clean it out?

Free up storage space on your Mac

OmniDiskSweeper Safe to use

GrandPerspective 

How to delete Time Machine snapshots on your Mac

See used and available storage space on your Mac

Locate backups of your iPhone, iPad, and iPod touch

Notation - If the user is using a cloning software like Carbon Copy Cloner - suggest tweaking the Safety Net Feature in this software. It may be making addition Snap Shots that are not being Cloned to the Eternal Drive. If this should be the case, these Snap Shot could be using additional space on the drive 

The final word from Apple on Managing the " Other/ System Data “ Category

Other / System Data: Contains files that don’t fall into the categories listed here. This category primarily includes files and data used by the system, such as log files, caches, VM files, and other runtime system resources. Also included are temporary files, fonts, app support files, and plug-ins. You can't manage the contents of this category. The contents are managed by macOS, and the category varies in size depending on the current state of your Mac.

The reset three times (or more) is something which has been learned as a way of resolving some hardware issues. I presume it is like a domino effect.

With regards to Finder, unlike other apps in the Dock you can’t force quit from the right click menu but you can restart Finder.

Well, I can only speak to what is presented from the Supplied Report and it definitely Alerts to the Present Condition.

Should a similar condition occur previously, it may have been a pre-warning of what was to come.

Which it does appear to have landed with a Thud

I could, but is somewhat pointless until the Empty Space Issue is addressed.

If you look at the report yourself, there is software which has Altered or Modified aspects of the Operating System to the extent that the Operating System is Compromised