Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

"useractivityd" constantly uses more and more memory

So starting yesterday all of a sudden my iMac has gotten really, really slow and laggy. Then when looking in Activity Monitor I noticed that a Process called useractivityd, a subprocess of launchd which is a subprocess of the kernal_task constantly uses up more and more virtual memory (I'm hovering at 6.8–7.5 of physical memory used). And I mean it'll keep growing well up to 75 GB+ and just keeps going. Though I also noticed that, even if I force quit and before it has a chance to get that high again, my iMac is still really laggy (switching desktops is slow, dock and menubar are laggy, etc.).


Anyone know what's going on?

Late-2012 iMac, 8 GB RAM, 1 TB HD 3.2 GHz i5

Posted on Feb 6, 2016 2:51 PM

Reply
19 replies

Feb 6, 2016 3:21 PM in response to asgertler

That type of problem may occur in the presence of unneeded and ill-advised third-party programs and/or utilities. Do any of the following questions apply yo your iMac?


1) Are you running any anti-virus/internet security applications?

2) Are you running any "cleaning/tune-up/optimization" applications?

3) Any peer-to-peer or torrent downloading software?

4) Any third-party disk backup software that came bundled with an external hard drive?

5) Any online backup scheme other than iCloud or Dropbox (Carbonite; GoogleDrive; MS One Drive)?

6) Did your financial institution ask you to install Trusteer EndPoint Protection (also known as Trusteer Rapport)?

Feb 6, 2016 4:36 PM in response to asgertler

Please read this whole message before doing anything.

This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.

Step 1

The purpose of this step is to determine whether the problem is localized to your user account.

Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”

While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.

Test while logged in as Guest. Same problem?

After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.

*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.

Step 2

The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Please take this step regardless of the results of Step 1.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Feb 6, 2016 7:12 PM in response to asgertler

I ran EtreCheck per suggestions in other articles:


EtreCheck version: 2.9.3 (253)

Report generated 2016-02-06 21:03:45

Download EtreCheck from http://etrecheck.com

Runtime 6:31

Performance: Below Average


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Problem: Computer is too slow


Hardware Information:

iMac (27-inch, Late 2012)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac13,2

1 3.2 GHz Intel Core i5 CPU: 4-core

8 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en1: 802.11 a/b/g/n


Video Information:

NVIDIA GeForce GTX 675MX - VRAM: 1024 MB

iMac 2560 x 1440


System Software:

OS X El Capitan 10.11.4 (15E33e) - Time since boot: about 5 hours


Disk Information:

APPLE HDD WDC WD10EALX-408EA0 disk0 : (1 TB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

MAC (disk0s2) / : 999.35 GB (624.18 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


USB Information:

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Razer Razer DeathAdder Chroma

Western Digital My Book 111D 2 TB

disk1s1 (disk1s1) <not mounted> : 32 KB

My Time Capsule (disk1s3) /Volumes/My Time Capsule : 2.00 TB (732.06 GB free)

Logitech USB Receiver


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Gatekeeper:

Mac App Store and identified developers


Kernel Extensions:

/Library/Extensions

[loaded] com.razer.common.razerhid (14.16 - SDK 10.9) [Support]


/System/Library/Extensions

[not loaded] com.Cycling74.driver.Soundflower (1.5.1) [Support]

[not loaded] com.Logitech.Control Center.HID Driver (3.6.0 - SDK 10.6) [Support]

[not loaded] com.Logitech.Unifying.HID Driver (1.2.0 - SDK 10.6) [Support]

[not loaded] com.mice.driver.Wireless360Controller (1.0.0d12 - SDK 10.8) [Support]

[not loaded] com.mice.driver.WirelessGamingReceiver (1.0.0d12 - SDK 10.8) [Support]

[not loaded] com.mice.driver.Xbox360Controller (1.0.0d12 - SDK 10.8) [Support]

[not loaded] com.wacom.kext.wacomtablet (6.3.2) [Support]


/Volumes/My Time Capsule/Extras/WD +TURBO Installer 64.app

[not loaded] com.wdc.driver.1394_64HP (1.0.1 - SDK 10.6) [Support]

[not loaded] com.wdc.driver.USB_64HP (1.0.0 - SDK 10.6) [Support]


/Volumes/My Time Capsule/Extras/WD +TURBO Installer.app

[not loaded] com.wdc.driver.1394HP (1.0.9) [Support]

[not loaded] com.wdc.driver.USBHP (1.0.11) [Support]


System Launch Agents:

[killed] com.apple.AssetCacheLocatorService.plist

[killed] com.apple.CallHistoryPluginHelper.plist

[killed] com.apple.CallHistorySyncHelper.plist

[killed] com.apple.FolderActionsDispatcher.plist

[killed] com.apple.Maps.pushdaemon.plist

[killed] com.apple.SafariCloudHistoryPushAgent.plist

[killed] com.apple.SafariNotificationAgent.plist

[killed] com.apple.cloudphotosd.plist

[killed] com.apple.cmfsyncagent.plist

[killed] com.apple.gamed.plist

[killed] com.apple.icloud.fmfd.plist

[killed] com.apple.photolibraryd.plist

[killed] com.apple.recentsd.plist

[killed] com.apple.reversetemplated.plist

[killed] com.apple.scopedbookmarkagent.xpc.plist

[killed] com.apple.telephonyutilities.callservicesd.plist

[loaded] 157 Apple tasks

[running] 64 Apple tasks

16 processes killed due to insufficient RAM


System Launch Daemons:

[killed] com.apple.AssetCacheLocatorService.plist

[killed] com.apple.audio.systemsoundserverd.plist

[killed] com.apple.ifdreader.plist

[killed] com.apple.softwareupdated.plist

[killed] com.apple.tccd.system.plist

[killed] com.apple.wdhelper.plist

[killed] com.apple.xpc.smd.plist

[loaded] 202 Apple tasks

[running] 79 Apple tasks

7 processes killed due to insufficient RAM


Launch Agents:

[running] com.Logitech.Control Center.Daemon.plist [Support]

[loaded] com.adobe.AAM.Updater-1.0.plist [Support]

[loaded] com.adobe.CS4ServiceManager.plist [Support]

[loaded] com.divx.dms.agent.plist [Support]

[loaded] com.divx.update.agent.plist [Support]

[running] com.flipvideo.FlipShare.AutoRun.plist [Support]

[loaded] com.google.keystone.agent.plist [Support]

[loaded] com.hp.productresearch.plist [Support]

[running] com.razer.rzupdater.plist [Support]

[running] com.razerzone.rzdeviceengine.plist [Support]

[running] com.wacom.wacomtablet.plist [Support]

[loaded] org.macosforge.xquartz.startx.plist [Support]


Launch Daemons:

[loaded] com.adobe.SwitchBoard.plist [Support]

[failed] com.adobe.fpsaud.plist [Support]

[loaded] com.adobe.versioncueCS4.plist [Support]

[loaded] com.ea.origin.ESHelper.plist [Support]

[running] com.fitbit.galileod.plist [Support]

[running] com.flipvideo.FlipShareServer.launchd.plist [Support]

[loaded] com.google.keystone.daemon.plist [Support]

[running] com.mice.360Daemon.plist [Support]

[loaded] com.microsoft.office.licensing.helper.plist [Support]

[loaded] org.macosforge.xquartz.privileged_startx.plist [Support]


User Launch Agents:

[loaded] com.adobe.AAM.Updater-1.0.plist [Support]

[loaded] com.adobe.ARM.[...].plist [Support]

[running] com.amazon.music.plist [Support]

[failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist

[running] com.plexapp.helper.plist [Support]

[running] com.spotify.webhelper.plist [Support]

[loaded] com.valvesoftware.steamclean.plist [Support]


User Login Items:

Dropbox Application Hidden (/Applications/Dropbox.app)

Calendar Application (/Applications/Calendar.app)

Mail Application (/Applications/Mail.app)

Messages Application (/Applications/Messages.app)

Safari Application (/Applications/Safari.app)

StatusMenu UNKNOWN (missing value)


Other Apps:

[running] 2BUA8C4S2C.com.agilebits.onepassword4-helper

[running] QA2G25RMZ4.com.wunderkinder.wunderlist-helper

[running] com.apple.xpc.launchd.oneshot.0x10000008.EtreCheck

[running] com.dayoneapp.dayone-agent

[running] com.getdropbox.dropbox.57632

[running] com.valvesoftware.steam.71712

[running] com.valvesoftware.steam.ipctool

[running] com.wacom.TabletDriver.120032

[running] com.wacom.Wacom_TouchDriver.61152


Internet Plug-ins:

WacomNetscape: Version: 1.1.1-1 [Support]

Flash Player: Version: 20.0.0.294 - SDK 10.6 [Support]

OnLiveGameClientDetector: Version: OnLiveGameClientDetector 1.0.0 [Support]

DivX Web Player: Version: 3.2.4.1250 - SDK 10.6 [Support]

AdobePDFViewer: Version: 10.1.1 [Support]

GameFacePlugin: Version: GameFacePlugin 1.5.3.0 - SDK 10.5 [Support]

LogMeInSafari32: Version: 1.0.935 - SDK 10.7 [Support]

googletalkbrowserplugin: Version: 5.41.3.0 - SDK 10.8 [Support]

Scorch: Version: 6.1.0 [Support]

AdobeExManDetect: Version: AdobeExManDetect 1.1.0.0 - SDK 10.7 [Support]

iPhotoPhotocast: Version: 7.0

Unity Web Player: Version: UnityPlayer version 4.5.4f2 - SDK 10.6 [Support]

QuickTime Plugin: Version: 7.7.3

FlashPlayer-10.6: Version: 20.0.0.294 - SDK 10.6 [Support]

Yahoo! Installer 3: Version: 1.0.128 [Support]

Musicnotes: Version: 1.18.6 [Support]

OVSHelper: Version: 1.1 [Support]

LogMeIn: Version: 1.0.935 - SDK 10.7 [Support]

Silverlight: Version: 5.1.30317.0 - SDK 10.6 [Support]

LogitechHarmony: Version: 2.0 - SDK 10.7 [Support]

Default Browser: Version: 601 - SDK 10.11

Flip4Mac WMV Plugin: Version: 3.2.0.16 - SDK 10.8 [Support]

o1dbrowserplugin: Version: 5.41.3.0 - SDK 10.8 [Support]

SharePointBrowserPlugin: Version: 14.3.8 - SDK 10.6 [Support]

WacomTabletPlugin: Version: WacomTabletPlugin 2.1.0.1 [Support]

JavaAppletPlugin: Version: 15.0.1 - SDK 10.7 Check version

OfficeLiveBrowserPlugin: Version: 12.3.2 [Support]


User internet Plug-ins:

WebEx64: Version: 1.0 - SDK 10.6 [Support]

CitrixOnlineWebDeploymentPlugin: Version: 1.0.39 [Support]

npNASAEyes: Version: NASAEyes_x86_64 1.0.0.0 - SDK 10.6 [Support]

Google Earth Web Plug-in: Version: 7.1 [Support]


Safari Extensions:

1Password

Turn Off the Lights

Adblock Plus

Save to Pocket

Evernote Web Clipper

Pin It Button


3rd Party Preference Panes:

Adobe Version Cue CS4 [Support]

AirServer [Support]

Connect360 [Support]

Flash Player [Support]

Flip4Mac WMV [Support]

Logitech Control Center [Support]

Perian [Support]

XBox 360 Controllers [Support]


Time Machine:

Skip System Files: NO

Auto backup: YES

Volumes being backed up:

MAC: Disk size: 999.35 GB Disk used: 375.16 GB

Destinations:

My Time Capsule [Local]

Total size: 2.00 TB

Total number of backups: 61

Oldest backup: 7/29/12, 12:59 AM

Last backup: 2/6/16, 8:49 PM

Size of backup disk: Adequate

Backup size 2.00 TB > (Disk used 375.16 GB X 3)


Top Processes by CPU:

106% useractivityd

52% Dock

15% kernel_task

2% WindowServer

0% steam_osx(2)


Top Processes by Memory:

2.66 GB useractivityd

1.25 GB com.apple.WebKit.WebContent(6)

866 MB kernel_task

254 MB Safari

229 MB mdworker(16)


Virtual Memory Information:

754 MB Free RAM

7.26 GB Used RAM (1.15 GB Cached)

20.19 GB Swap Used


Diagnostics Information:

Feb 6, 2016, 03:10:45 PM Self test - passed

Feb 6, 2016, 02:55:41 PM /Library/Logs/DiagnosticReports/Evernote_2016-02-06-145541_[redacted].crash

/Applications/Evernote.app/Contents/MacOS/Evernote

Feb 6, 2016, 02:55:41 PM /Library/Logs/DiagnosticReports/EvernoteHelper_2016-02-06-145541_[redacted].cra sh

/Applications/Evernote.app/Contents/Library/LoginItems/EvernoteHelper.app/Conte nts/MacOS/EvernoteHelper

Feb 6, 2016, 02:37:28 PM /Library/Logs/DiagnosticReports/Installer_2016-02-06-143728_[redacted].hang

/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight

Feb 5, 2016, 10:47:20 PM ~/Library/Logs/DiagnosticReports/WunderlistHelper_2016-02-05-224720_[redacted]. crash

/Applications/Wunderlist.app/Contents/Library/LoginItems/WunderlistHelper.app/C ontents/MacOS/WunderlistHelper

Feb 5, 2016, 10:20:15 PM /Library/Logs/DiagnosticReports/gutenprint.5.2_2016-02-05-222015_[redacted].cra sh

/usr/libexec/cups/driver/gutenprint.5.2

Feb 5, 2016, 10:20:13 PM /Library/Logs/DiagnosticReports/gutenprint.5.2_2016-02-05-222013_[redacted].cra sh

Feb 5, 2016, 10:14:58 PM /Library/Logs/DiagnosticReports/EvernoteHelper_2016-02-05-221458_[redacted].cra sh

Feb 7, 2016 11:36 AM in response to etresoft

So I ran "

sudo opensnoop -n Dock
" in Terminal and, when I clicked anywhere on the dock, this is what returned:


UID PID COMM FD PATH

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 6 (ID 938: syscall::open_nocancel:return): invalid user access in action #11 at DIF offset 24

dtrace: error on enabled probe ID 5 (ID 152: syscall::open:return): invalid user access in action #11 at DIF offset 24

Feb 7, 2016 12:21 PM in response to asgertler

Have you tried Linc's simple suggestion to use a guest account?

It will indicate if the issue lies within your user account or within the system as a whole.

Safe mode will also disable the ancient third party apps you have installed too.


Looking at your report you appear to have lots of old software installed -

Soundflower is from 2009

Logitech control center is old (pre 10.8 I think).

Many of them are unloaded, so you may not need them, they may not even work with this OS.

These were never designed to run on this OS, try updating them all.

asgertler wrote:

I should mention, I also have a mid-2012 MBP that I was planning to sell that I restored this iMac to to basically transfer my stuff to so that this is my main computer and I can comfortably sell it. The MBP runs flawlessly.

I may be misunderstanding you but if you are saying you used the Macbook Pro to create this installation that could be where you issues come from. One OS installed on one model is not always compatible with other models. How did you move the data to this iMac? The best way in my opinion is to clean install the iMac, (ensure you erase the disk) apply updates to it then use migration assistant to copy over the user data. Third party apps can be manually reinstalled - that way you leave all the old stuff behind & only install what you use.

Feb 7, 2016 12:47 PM in response to asgertler

That's the correct way to migrate but it has also brought over lots of old stuff. Migration Assistant is pretty good if you avoid the 'Applications & other data' checkboxes. Your user home folder is where all your important files live. It's tempting to bring the apps too, but they are usually out of date & contain lots of baggage.


Your user account may be running some of the old apps on login, check them in 'System Preferences > Users & groups, Login items' for your user account. Disable any you don't need & retest by logging out.

Feb 7, 2016 1:50 PM in response to asgertler

asgertler wrote:


Ah, I wasn't aware of that. Any hunting I've done for "useractivityd" fixes on here or Stack Exchange or just Google comes up empty.

As your EtreCheck report shows, you are also having issues with the "Dock" process. Searching for that led me to the thread I referenced above. My suggestion was to try changing your desktop. That was the solution that using opensnoop revealed. While you could turn off SIP via csrutil and run opensnoop, you might also try using lsof, another solution to a very similar problem as found in this thread: Dock using 100% CPU and lot of VM after El Capitan update

Feb 7, 2016 1:58 PM in response to Linc Davis

So I made a "Test" user and logged in and noticed that, for the thirty-or-so minutes I was using it, I didn't run into any slowdowns or lags when opening dialog boxes, bringing in the dock/menubar, etc. However, I ran Activity Monitor and did noticed that useractivityd was at 100%+ for CPU% and dock was ~50%, though it didn't say at the bottom I was spiking too hard for CPU usage? As for memory, it was green, and useractivityd only got up to ~3 GB but it was doing the steady climb thing it was doing before.

"useractivityd" constantly uses more and more memory

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.