What process is auto-mounting network volume?

Question

For the past few weeks, my iMac running macOS 10.11.5 has been auto-mounting the Home folder of my MacBook Pro across the LAN. It appears on my Desktop taunting me! If I eject it, it re-mounts itself again shortly afterwards.I have deleted all relevant items from my iMac keychain; checked my Login Items; checked my LaunchAgents, LaunchDaemons and StartupItems.For the life of me I can&#x27;t find out what Application or process is causing this to happen.Can anyone offer any suggestions? I would be extremely grateful.Kind regards,Greg

leroydouglas · Answer

Finder&gt;Go&gt;Connect to servercheck to see if this list contains more than your http://localhost/highlite and remove

Greg Andresen · Answer

Thanks, but this didn&#x27;t work

leroydouglas · Answer

&gt;System Preferences&gt;Sharing  ?

Greg Andresen · Answer

I&#x27;m not sure what you&#x27;re asking me to do

cdhw · Answer

Assuming you are not in the habit of setting up mounts and then forgetting you&#x27;ve done it some quick and easy things to try are:If the volume name is &#x27;foo&#x27; you might get lucky using these Terminal commands:     mount -vand     sudo lsof | grep fooThe former will tell you which user owns the mount, the latter will give you the processe(s) that have files open on foo.You can also search, using Finder or find, for the most recently modified file on foo in the hope that will give you a clue.Try denying access from your Pro, e.g. by unplugging it and seeing whether the process that is remounting it puts error messages in the system logs.C.

leroydouglas · Answer

Do you have any sharing services turned on that might be causing the behavior.&gt;System Preferences&gt;Sharing

Greg Andresen · Answer

Thank you cdhw!The &#x27;mount -v&#x27; command gave me the following://Greg@Silver%20Bullet%20V._afpovertcp._tcp.local/Greg on /Volumes/Greg (afpfs, nodev, nosuid, mounted by Greg)So now I know which user owns the mount (me).I tried &#x27;sudo lsof | grep Greg&#x27; but this gave me so many pages of data that Terminal had to truncate it! Was this the right command to use?Can you tell me where in the System Logs I might find error messages if the iMac unsuccessfully tries to mount the volume when it is switched off?Thanks again!

Greg Andresen · Answer

No I don&#x27;t

Greg Andresen · Answer

I tried running this Terminal command instead:sudo lsof | grep /Volumes/GregIt produced this result:mds         83            root   38r      DIR              45,22       1418        2 /Volumes/GregThis appears to be normal behaviour (I imagine mds is indexing the remote volume for search purposes).I&#x27;m still stumped!

cdhw · Answer

losf lists processes with open files. You&#x27;re correct, mds is behaving normally and wouldn&#x27;t have been responsible for mounting the volume.Can you run EtreCheck and post its report here, please?    https://etrecheck.com/It gives a quick snapshot of what&#x27;s installed on your system.C.

Greg Andresen · Answer

Here is the Etrecheck report.By the way, I even tried changing the administrator password on the laptop (the remote volume that is being mounted) which should have locked the iMac out, but it still auto-mounts!EtreCheck version: 2.9.12 (265)Report generated 2016-06-23 09:08:07Download EtreCheck from https://etrecheck.comRuntime 4:29Performance: GoodClick the [Support] links for help with non-Apple products.Click the [Details] links for more information about that line.Problem: Other problemDescription:Mac auto-mounts remote volumeHardware Information: ⓘ    iMac (27-inch, Mid 2011)     [Technical Specifications] - [User Guide] - [Warranty &amp; Service]    iMac - model: iMac12,2    1 3.1 GHz Intel Core i5 CPU: 4-core    8 GB RAM Upgradeable - [Instructions]        BANK 0/DIMM0            4 GB DDR3 1333 MHz ok        BANK 1/DIMM0            4 GB DDR3 1333 MHz ok        BANK 0/DIMM1            Empty           BANK 1/DIMM1            Empty       Bluetooth: Old - Handoff/Airdrop2 not supported    Wireless:  en1: 802.11 a/b/g/nVideo Information: ⓘ    AMD Radeon HD 6970M - VRAM: 1024 MB        iMac 2560 x 1440System Software: ⓘ    OS X El Capitan 10.11.5 (15F34) - Time since boot: less than an hourDisk Information: ⓘ    OWC Mercury Electra 6G SSD disk0 : (480.1 GB) (Solid State - TRIM: No)        EFI (disk0s1) &lt;not mounted&gt; : 210 MB         Snow Leopard HD (disk0s2) /Volumes/Snow Leopard HD : 20.00 GB (9.33 GB free)        Lion HD (disk0s3) /Volumes/Lion HD : 20.00 GB (3.95 GB free)        Mountain Lion HD (disk0s4) /Volumes/Mountain Lion HD : 30.00 GB (17.38 GB free)        Mavericks HD (disk0s5) /Volumes/Mavericks HD : 30.00 GB (14.72 GB free)        Yosemite HD (disk0s6) /Volumes/Yosemite HD : 29.48 GB (19.87 GB free)        Recovery HD (disk0s7) &lt;not mounted&gt;  [Recovery]: 650 MB         Macintosh HD (disk0s8) / : 348.57 GB (198.61 GB free)        Recovery HD (disk0s9) &lt;not mounted&gt;  [Recovery]: 650 MB     OPTIARC DVD RW AD-5680H   ()    ST3000DM001-1ER166 disk1 : (3 TB) (Rotational)        EFI (disk1s1) &lt;not mounted&gt; : 210 MB         3TB LaCie HD (disk1s2) /Volumes/3TB LaCie HD : 3.00 TB (43.19 GB free)USB Information: ⓘ    Apple, Inc. Keyboard Hub         Apple, Inc Apple Keyboard     Apple Computer, Inc. IR Receiver     Apple Card Reader     Apple Inc. FaceTime HD Camera (Built-in)     Apple Inc. BRCM2046 Hub         Apple Inc. Bluetooth USB Host Controller     OEM USB3-to-SATA Bridge Device 2 TB        EFI (disk5s1) &lt;not mounted&gt; : 210 MB     Burr-Brown from TI USB audio CODEC     VIA Labs, Inc.          USB2.0 Hub              2 TB        Western Digital  My Book          1 TB        EFI (disk4s1) &lt;not mounted&gt; : 210 MB         760GB Partition (disk4s2) /Volumes/760GB Partition : 759.80 GB (99.97 GB free)        Macintosh Backup HD (disk4s3) /Volumes/Macintosh Backup HD : 239.41 GB (98.31 GB free)        ASMedia AS2105 3 TB        EFI (disk2s1) &lt;not mounted&gt; : 210 MB         3TB Backup HD (disk2s2) /Volumes/3TB Backup HD : 3.00 TB (43.73 GB free)        VIA Labs, Inc.          USB2.0 Hub              2 TB            ASMedia AS2105 2 TB        EFI (disk3s1) &lt;not mounted&gt; : 210 MB Thunderbolt Information: ⓘ    Apple Inc. thunderbolt_bus        LaCie d2 TBT2 USB3        Elgato Systems Thunderbolt DockGatekeeper: ⓘ    Mac App Store and identified developersKernel Extensions: ⓘ        /Library/Extensions    [loaded]    at.obdev.nke.LittleSnitch (3.6.3 - SDK 10.8 - 2016-06-04) [Support]        /System/Library/Extensions    [not loaded]    com.Cycling74.driver.Soundflower (1.6.6 - SDK 10.6 - 2016-06-04) [Support]    [not loaded]    com.Huawei.driver.HuaweiDataCardDriver (4.0.6 - 2016-06-04) [Support]    [not loaded]    com.TrustedData.driver.VendorSpecificType00 (1.7.0 - SDK 10.7 - 2016-06-04) [Support]    [not loaded]    com.attotech.driver.ATTOiSCSI (3.4.1b1 - SDK 10.6 - 2016-06-04) [Support]    [not loaded]    com.drobo.SCSI.ThunderBolt (1.1 - SDK 10.8 - 2016-06-04) [Support]    [not loaded]    com.ecamm.driver.BT1AudioDriver (1.0.12 - 2016-06-04) [Support]    [not loaded]    com.ecamm.driver.BT1VideoDriver (1.0.12 - 2016-06-04) [Support]    [not loaded]    com.elgato.driver.DontMatchAfaTech (1.1 - 2016-06-04) [Support]    [not loaded]    com.elgato.driver.DontMatchCinergy450 (1.1 - 2016-06-04) [Support]    [not loaded]    com.elgato.driver.DontMatchCinergyXS (1.1 - 2016-06-04) [Support]    [not loaded]    com.elgato.driver.DontMatchEmpia (1.1 - 2016-06-04) [Support]    [not loaded]    com.elgato.driver.DontMatchVoyager (1.1 - 2016-06-04) [Support]    [not loaded]    com.iospirit.driver.rbiokithelper (1.7.2 - 2016-06-04) [Support]    [not loaded]    com.rogueamoeba.InstantOn (6.0.1 - SDK 10.6 - 2016-06-04) [Support]    [not loaded]    com.roxio.BluRaySupport (1.1.6 - 2016-06-04) [Support]    [not loaded]    com.wdc.driver.1394HP (1.0.5 - 2016-06-04) [Support]    [not loaded]    com.wdc.driver.USBHP (1.0.2 - 2016-06-04) [Support]        /System/Library/Extensions/InstantOn.kext/Contents/PlugIns    [not loaded]    com.rogueamoeba.InstantOnCore (6.0.1 - SDK 10.6 - 2012-07-31) [Support]        /Volumes/Macintosh Backup HD/Applications/Hotspot Shield.app    [not loaded]    foo.tun (1.0 - 2009-08-16) [Support]        /Volumes/Macintosh Backup HD/Applications/Popcorn 3/Popcorn.app    [not loaded]    com.roxio.TDIXController (1.7 - 2015-12-24) [Support]        /Volumes/Macintosh Backup HD/Applications/Toast 11 Titanium/Spin Doctor.app    [not loaded]    com.hzsystems.terminus.driver (4 - 2015-12-24) [Support]        /Volumes/Macintosh Backup HD/Applications/Utilities/DiskWarrior.app    [not loaded]    com.alsoft.Preview (5.0 - SDK 10.5 - 2014-12-03) [Support]        /Volumes/Macintosh Backup HD/Applications/VMware Fusion.app    [not loaded]    com.vmware.kext.vmci (7.1.2 - 2015-12-24) [Support]    [not loaded]    com.vmware.kext.vmioplug.14.1.4 (7.1.2 - 2015-12-24) [Support]    [not loaded]    com.vmware.kext.vmnet (7.1.2 - 2015-12-24) [Support]    [not loaded]    com.vmware.kext.vmx86 (7.1.2 - 2015-12-24) [Support]    [not loaded]    com.vmware.kext.vsockets (7.1.2 - 2015-12-24) [Support]        /Volumes/Macintosh Backup HD/Users/[redacted]/Library/Application Support/Sparkle/Transmit/Transmit 4.1.6 Update/Transmit.app    [not loaded]    com.panic.TransmitDisk.transmitdiskfs (3.0.0 - SDK 10.5 - 2015-12-24) [Support]Startup Items: ⓘ    TuxeraNTFSUnmountHelper: Path: /Library/StartupItems/TuxeraNTFSUnmountHelper    Startup items are obsolete in OS X YosemiteSystem Launch Agents: ⓘ    [not loaded]    8 Apple tasks    [loaded]    157 Apple tasks    [running]    73 Apple tasksSystem Launch Daemons: ⓘ    [not loaded]    42 Apple tasks    [loaded]    158 Apple tasks    [running]    90 Apple tasksLaunch Agents: ⓘ    [running]    at.obdev.LittleSnitchUIAgent.plist (2016-02-06) [Support]    [not loaded]    com.adobe.AAM.Updater-1.0.plist (2012-06-20) [Support]    [loaded]    com.divx.dms.agent.plist (2016-05-31) [Support]    [loaded]    com.divx.update.agent.plist (2016-04-14) [Support]    [loaded]    com.google.keystone.agent.plist (2016-03-03) [Support]    [not loaded]    com.oracle.java.Java-Updater.plist [Support]    [not loaded]    com.teamviewer.teamviewer.plist (2015-06-08) [Support]    [not loaded]    com.teamviewer.teamviewer_desktop.plist (2015-06-08) [Support]Launch Daemons: ⓘ    [running]    at.obdev.littlesnitchd.plist (2016-02-06) [Support]    [loaded]    com.adobe.SwitchBoard.plist (2012-06-20) [Support]    [loaded]    com.adobe.fpsaud.plist (2016-06-14) [Support]    [loaded]    com.apple.aelwriter.plist    [running]    com.apple.qmaster.qmasterd.plist    [not loaded]    com.attotech.iscsid.plist (2013-08-13) [Support]    [running]    com.bombich.ccchelper.plist (2015-01-21) [Support]    [running]    com.crashplan.engine.plist (2016-05-18) [Support]    [running]    com.edovia.screensconnect.daemon.plist (2013-09-05) [Support]    [loaded]    com.google.keystone.daemon.plist (2016-03-03) [Support]    [loaded]    com.microsoft.office.licensing.helper.plist (2010-08-25) [Support]    [not loaded]    com.oracle.java.Helper-Tool.plist [Support]    [loaded]    com.oracle.java.JavaUpdateHelper.plist (2014-01-31) [Support]    [loaded]    com.prosofteng.DriveGenius.locum.plist (2015-07-14) [Support]    [not loaded]    com.teamviewer.Helper.plist (2015-03-03) [Support]    [not loaded]    com.teamviewer.teamviewer_service.plist (2015-06-08) [Support]User Launch Agents: ⓘ    [loaded]    com.adobe.ARM.[...].plist (2011-04-04) [Support]    [loaded]    com.adobe.ARM.[...].plist (2015-11-16) [Support]    [running]    ws.agile.1PasswordAgent.plist (2013-05-04) [Support]User Login Items: ⓘ    Screens Connect    Application  (/Library/PreferencePanes/Screens Connect.prefPane/Contents/MacOS/Screens Connect.app)    ScreenSharingMenulet    Application  (/Applications/ScreenSharingMenulet.app)    Cinch    Application  (/Applications/Cinch.app)    CleanAgent    Application  (/Applications/Clean.app/Contents/Resources/CleanAgent.app)    ScanSnap Manager    Application Hidden (/Applications/ScanSnap/ScanSnap Manager.app)    TextExpander    Application Hidden (/Applications/TextExpander.app)    Air Video Server    Application  (/Applications/Air Video Server.app)    Rogue Amoeba Schedule Helper    Application  (/Library/Application Support/Audio Hijack Pro/Rogue Amoeba Schedule Helper.app)    Dropbox    Application  (/Applications/Dropbox.app)    CrashPlan menu bar    Application  (/Applications/CrashPlan.app/Contents/Helpers/CrashPlan menu bar.app)    CCC User Agent    Application  (/Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app)    DropCopy Pro    Application  (/Applications/DropCopy Pro.app)    Flycut    Application  (/Applications/Flycut.app)    BusyCal    Application Hidden (/Applications/BusyCal.app)    Messages    Application Hidden (/Applications/Messages.app)    iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)    Notes    Application Hidden (/Applications/Notes.app)Other Apps: ⓘ    [running]    2BUA8C4S2C.com.agilebits.onepassword4-helper    [running]    com.10baseT.DropCopyProMac.80032    [running]    com.bombich.cccuseragent.69472    [loaded]    com.busymac.busycal2.65312    [running]    com.code42.b42menuextra.213472    [running]    com.codingwithlove.cleanagent.212832    [running]    com.edovia.Screens-Connect.214752    [running]    com.etresoft.EtreCheck.1263712    [running]    com.generalarcade.flycut.89952    [running]    com.getdropbox.dropbox.79392    [running]    com.inmethod.AirVideoServer.136352    [running]    com.irradiatedsoftware.Cinch.71072    [running]    com.klieme.ScreenSharingMenulet.137952    [running]    com.rogueamoeba.ScheduleHelper.213152    [running]    com.smileonmymac.textexpander.147872    [loaded]    jp.co.pfu.ScanSnap.V10L10.212512    [loaded]    406 Apple tasks    [running]    209 Apple tasksInternet Plug-ins: ⓘ    OVSHelper: 1.1 (2016-06-13) [Support]    Default Browser: 601 - SDK 10.11 (2016-05-05)    Flip4Mac WMV Plugin: 3.2.0.16   - SDK 10.8 (2013-10-22) [Support]    OfficeLiveBrowserPlugin: 12.3.6 (2013-06-03) [Support]    RealPlayer Plugin: Unknown    Silverlight: 5.1.10411.0 - SDK 10.6 (2015-12-24) [Support]    FlashPlayer-10.6: 22.0.0.192 - SDK 10.9 (2016-06-22) [Support]    DivX Web Player: 3.6.0.4 - SDK 10.10 (2016-05-31) [Support]    LogMeIn: 1.0.449 (2010-02-10) [Support]    QuickTime Plugin: 7.7.3 (2016-05-05)    Flash Player: 22.0.0.192 - SDK 10.9 (2016-06-22) [Support]    iPhotoPhotocast: 7.0 - SDK 10.8 (2015-12-24)    SharePointBrowserPlugin: 14.6.5 - SDK 10.6 (2016-06-16) [Support]    AdobePDFViewer: 9.5.5 (2013-05-20) [Support]    EPPEX Plugin: 3.0.5.0 (2009-07-30) [Support]    JavaAppletPlugin: 15.0.1 - SDK 10.7 (2015-12-24) Check versionUser internet Plug-ins: ⓘ    iGetter Plugin: 2.9.4 (2016-06-23) [Support]    iGetterScriptablePlugin: 2.9.4 (2016-03-09) [Support]    RealPlayer Plugin: Unknown (2015-12-24) [Support]Safari Extensions: ⓘ    1Password - AgileBits - https://agilebits.com/onepassword (2016-04-08)    Ghostery - GHOSTERY, Inc. - https://www.ghostery.com/ (2016-04-08)    iGetter Extension - Presenta Ltd. - http://www.igetter.net/ (2014-11-15)Audio Plug-ins: ⓘ    DVCPROHDAudio: 1.3.2 (2015-12-24)    EcammAudioLoader: 1.0.4 - SDK 10.11 (2016-06-16) [Support]    CallRecorder: v2.6 - SDK 10.11 (2016-06-16) [Support]3rd Party Preference Panes: ⓘ    Flash Player (2016-06-14) [Support]    Flip4Mac WMV (2013-03-30) [Support]    MacFUSE (2009-09-10) [Support]    Perian (2011-07-24) [Support]    Printopia (2015-12-24) [Support]    Screens Connect (2015-12-24) [Support]    Tuxera NTFS (2015-05-10) [Support]Time Machine: ⓘ    Skip System Files: NO    Auto backup: YES    Volumes being backed up:        Macintosh HD: Disk size: 348.57 GB Disk used: 149.96 GB    Destinations:        Data [Network]         Total size: 3.00 TB         Total number of backups: 63         Oldest backup: 2/01/2016, 12:21 AM         Last backup: 23/06/2016, 7:44 AM         Size of backup disk: Excellent            Backup size 3.00 TB &gt; (Disk size 348.57 GB X 3)Top Processes by CPU: ⓘ         3%    launchd         3%    WindowServer         1%    kernel_task         1%    mds         1%    fontdTop Processes by Memory: ⓘ    852 MB    CrashPlanService    794 MB    kernel_task    254 MB    sharingd    238 MB    sharedfilelistd(2)    221 MB    mds_storesVirtual Memory Information: ⓘ    1.73 GB    Free RAM     6.26 GB    Used RAM (1.89 GB Cached)    0 B    Swap Used Diagnostics Information: ⓘ    Jun 23, 2016, 08:59:09 AM    Self test - passed    Jun 22, 2016, 08:37:10 PM    /Library/Logs/DiagnosticReports/HandBrake_2016-06-22-203710_[redacted].cpu_reso urce.diag [Details]        /Applications/HandBrake.app/Contents/MacOS/HandBrake    Jun 22, 2016, 12:23:34 PM    /Library/Logs/DiagnosticReports/CrashPlanService_2016-06-22-122334_[redacted].c pu_resource.diag [Details]        /Applications/CrashPlan.app/Contents/MacOS/CrashPlanService    Jun 22, 2016, 11:28:03 AM    /Library/Logs/DiagnosticReports/HandBrake_2016-06-22-112803_[redacted].cpu_reso urce.diag [Details]    Jun 21, 2016, 06:42:45 PM    ~/Library/Logs/DiagnosticReports/VLC_2016-06-21-184245_[redacted].crash        org.videolan.vlc - /Applications/VLC.app/Contents/MacOS/VLC    Jun 21, 2016, 11:47:20 AM    /Library/Logs/DiagnosticReports/HandBrake_2016-06-21-114720_[redacted].cpu_reso urce.diag [Details]    Jun 20, 2016, 11:26:03 PM    /Library/Logs/DiagnosticReports/HandBrake_2016-06-20-232603_[redacted].cpu_reso urce.diag [Details]    Jun 20, 2016, 05:29:12 PM    /Library/Logs/DiagnosticReports/HandBrake_2016-06-20-172912_[redacted].cpu_reso urce.diag [Details]    Jun 20, 2016, 12:54:37 PM    ~/Library/Logs/DiagnosticReports/com.apple.preferences.sharing.remoteservice_20 16-06-20-125437_[redacted].crash        /System/Library/PreferencePanes/SharingPref.prefPane/Contents/XPCServices/com.a pple.preferences.sharing.remoteservice.xpc/Contents/MacOS/com.apple.preferences. sharing.remoteservice

cdhw · Answer

You&#x27;ve got a relatively large number of applications and utilities running. I&#x27;d start by deleting all of the 15 or so current entries in your login items (unchecking them does not disable them it just hides their dock icon). If the problem goes away identify the culprit using a divide-and-conquer strategy.C.

Greg Andresen · Answer

OK I&#x27;ll do that and report back. Thanks for your help.

Greg Andresen · Answer

I have deleted all my login items but the problem persists 😟Where to now?Do you think reinstalling the OS would help?

etresoft · Answer

Hello Greg,Reinstalling the OS will not help.Do you remember if you turned on the automounting system by editing files in /etc?If not, the most likely explanation is that you had file sharing turn on at the other machine and some 3rd party software is referencing some file via the old sharing path, which will still be valid on this machine. You might be able to diagnose the problem by turning file sharing off on the old machine and see if any of the software on this machine starts to complain.

Quick Links

What process is auto-mounting network volume?