How to optimize memory usage when dealing with XProtectRemediatorSheepSwap on Mac

CleanMyMac is a problem. It should be removed by the uninstaller provided by MacPaw. These types of apps will conflict with the normal operation of your OS:

• Cleaners
• Optimizers
• Anti-Virus
• VPN

Any third party process that runs at startup on your system has the potential to conflict with the scans that XProtect does for Malware detection. A more useful tool to determine what is being launched on startup and Kernel Extensions that could be causing a conflict is EtreCheck. You can post the free report here using the Additional Text option when posting. This should be done after removing any of the apps in the above list.

Using EtreCheck - Apple Community

Doing a Clean Install is ideal to resolve the problem once and for all. When installing the apps, verify the operation to isolate any particular app that may be causing the problem. Some apps noted in the EtreCheck report that are launching files on launch may be suspect:

• AdBlockVPNMacOSProvider
• ExpressVPN
• 1Password 7 - This version is not longer supported by AgileBits. Not sure if you have updated, but version 7 is showing as launching on startup. It was also noted in that it crashed at the end of the EtreCheck.

If you are able to identify an app that causes the problem, please reply with your findings as this is an issue that has affected other users as well.

tobwise wrote:

Already did that but unfortunately the same problem reared its ugly head within a couple of hours.

When you say you did that, did you by any chance migrate everything after the clean install? Lots of people do that, not realizing that once you migrate everything, you get back to where you started.

The report that you posted certainly does not look anything like a clean install.

To actually do a clean install, you should ONLY migrate the user accounts, nothing else; then see how things go while gradually installing only the applications that you do need and use.

tobwise wrote:

I reinstalled the operating system with no change and then did a complete clean reinstall the other day and made no difference.

After the clean install, did you verify the XProtect process was still consuming resources, or did you check it after restoring from a backup?

You can also run the free EtreCheck report and compare to the report provided by the OP to see if there are any common files that could be causing the problem.

Using EtreCheck - Apple Community

Computer is running extremely low on RAM now so the report attached was when it was in this state (around 3GB left out of 32GB). Just to confirm, it is like this with or without apps running, it makes no difference at all. All apps running are the time are legit and fully licensed etc. Everything that is noted as needing high attention isn't unusual for what I am running at any one time and are not suspicious apps etc.

cuervo7 wrote:

Just found out someone posted a workaround here XProtect Remediator taking 120% RAM freez… - Apple Community

I think that confirms it's a bug in XProtect.

It's possible.

This of course is a very serious problem, but it affects only a small minority of users, so there must be some conjugation of factors at play. FWIW, I have version 126, as do most users. Just imagine the outcry if everybody (or, say, even 10% of users) were having this very nasty problem.

So, if reverting to a previous version helps, good, but it is only a temporary fix (and may leave you open to possile vulnerabilities fixed in the subsequent versions).

Glad you are back in working order. Not sure why the first clean install did not work. You are correct that restoring your files from a backup or just installing them back on your computer will just put you in the same situation. While you are gradually installing files make sure you do not install the group of apps that have been known to cause problems. Even after uninstalling, they may still leave files in your system folder:

• Cleaners
• Optimizers
• Anti-Virus
• VPN

If you are able to track it to a specific app, please update with your results.

I too have been having this problem except mine peaks out to above 105GB, yes you read that correctly. I have 32GB of RAM and it drops to under 1GB. I even closed every app so no apps were open at all and my memory usage was still red lining to a point my computer was unusable. It then magically goes back to normal levels for about an hour or 2 but goes straight back to bogging down my machine for about an hour. I do not have CleanMyMac or any other app that cleans anything. I did a deep malware/virus scan which came up empty. All apps are up to date. I have introduced reopening apps one at a time and made no difference. Rebooted in Safe Mode but the problem still persisted. I restricted Login Items which again made no difference. I reinstalled the operating system with no change and then did a complete clean reinstall the other day and made no difference. I would also like to point out that this started instantly as of last week. I am trying to work out if this is an Apple thing or my computer is time to be replaced even though it is only 5 years old. It did coincide with a Software Update for macOS. I have searched all over the internet and the only peoples advice I am reading is either saying 'that this is normal' or do a clean install. Trust me, there is nothing normal about this and it ain't any old apps.

I too have been having this problem except mine peaks out to above 109GB, yes you read that correctly...GB, not MB. I have 32GB of RAM and it drops to under 1GB. I even closed every app so no apps were open at all and my memory usage was still red lining to a point my computer was unusable. It then magically goes back to normal levels for about an hour or 2 but goes straight back to bogging down my machine for about an hour. I do not have CleanMyMac or any other app that cleans anything. I did a deep malware/virus scan which came up empty. All apps are up to date. I have introduced reopening apps one at a time and made no difference. Rebooted in Safe Mode but the problem still persisted. I restricted Login Items which again made no difference. I reinstalled the operating system with no change and then did a complete clean reinstall the other day and you guessed it, made no difference. I would also like to point out that this started instantly as of last week. I am trying to work out if this is an Apple thing or my computer is time to be replaced even though it is only 5 years old. It did coincide with a Software Update for macOS. I have searched all over the internet and the only peoples advice I am reading is either saying 'that this is normal' or do a clean install. Trust me, there is nothing normal about this and it ain't any old apps.

Definitely, noticed it before and didn't go away after clean install. As stated before it was even very high when booted in Safe Mode prior to clean install, again with no apps open which prompted me to try the clean install. I did do the free EtreCheck yesterday and didn't find anything out of the ordinary. All I know it is very annoying since I use CAD which uses a lot of RAM but nothing like this and have to wait for my computer to calm down, and myself for that matter. 😆

tobwise wrote:

Definitely, noticed it before and didn't go away after clean install. As stated before it was even very high when booted in Safe Mode prior to clean install, again with no apps open which prompted me to try the clean install. I did do the free EtreCheck yesterday and didn't find anything out of the ordinary. All I know it is very annoying since I use CAD which uses a lot of RAM but nothing like this and have to wait for my computer to calm down, and myself for that matter. 😆

You did not share any of the apps with the OP in the EtreCheck report they provided in this thread?

I'd start by uninstalling AVG. There is absolutely no need to use any third party "antivirus", and in fact they hinder performance and conflict with system security - which is quite possibly what is happening here...

Unfortunately yes. I am starting to think it is a bug also since I have been trying to find out if anyone has been having the same problem but haven't seen anything that remotely relates to it until now. This leads me to believe that it may be too new for it to be a recognised problem if you catch my meaning. When I finally saw your post I was thinking 'Finally, somebody with the same problem!' I started having the issue as soon as there was an update or thereafter, either that or a coincidence. I also had a look at 'Installations' in the Software section (System Settings/General/System Report/Software/Installations) and noticed in here that there were a couple of XProtectPlistConfigData updates after my computer started going haywire. I literally started getting the issue late on Feb 7 (Australian time) after a macOS update and the problem has been there ever since. Regardless the 2 XProtectPlistConfigData updates were on 11th and 12th Feb. It does make me wonder if this is relating to something that they recognise as being a problem with an update to hopefully fix the real issue. I may be grasping at straws here but maybe somebody with a bit more knowledge can shed some light on this. I have been trying to resolve it for days now with no luck. I am going to do a clean install again but reluctant to do simply because it involves too much downtime for wiping hard drive, install etc only for it to not work. Then again trying to work with my computer when it fires up on all cylinders exhausting every ounce of RAM isn't working either. Good luck if you get the chance to give the clean install a go. Who knows, we may both be in luck after going through the motions of a hard days work, a clean install 😄.

Hey cuervo7, not sure if you got around to doing your clean install but if you haven't, check to see if you are still getting the issue. I backed everything up before I went to bed last night ready to do the clean install today. I left my computer on all night whilst it backed up and was fully expecting for my computer to have a complete melt down when I woke it up, but to my surprise it opened up immediately but wasn't holding my breath. Usually my computer shuts down and restarts because the memory runs out completely and it can't handle the wake up. So basically I thought I would do some work until the first signs of any slow down. That was going to be my green light to start the install. My computer had a wobble for about 5 minutes this morning but only once instead of 10x plus. So far it has been functioning the way it used to all day so I was reluctant to do the clean install until I it happened again. So far so good with no issues which is weird considering the issues I have been having. I checked the 'Installations' section in System Report and noticed there was an update for XProtectRemediatorSheepSwap on Feb 13th (yesterday for me as it is the 14th here) so not sure if that could be an update that was needed. As of writing this post I still have not had any issues. I just hope I haven't jinxed it now. 😄

cuervo7 wrote:

Thanks for the update Tobwise. I'm happy to report I have not been troubled by XProtectMediaSheepSwap in over a month (last time was March 6 I think). Never did a second clean install. I hope we've seen the last of it.

Awesome! Glad to hear you have not had any more ongoing issues. Unfortunately I have gone too far with the clean install it seems pointless going back to a Time Machine backup so will never know if it may have resolved itself via an update. I couldn't wait for that so it was a necessary evil since I run my own business, so no extra iMacs lying around that I could use until it got fixed 😁. Anyways, I hope everybody else that has had this issue has also been freed of the dreaded XProtectMediaSheepSwap. One thing I do know, I will never forget that title and never want to see it again. Happy computing.