Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

mikezang

macrumors 6502a
Original poster
May 22, 2010
924
36
Tokyo, Japan
I just found there are some files on my root folder, I want to know if they are normal files? the file above 6001.rar is "FUCK*" in normal alphabet.
Code:
-rwxr-xr-x   1 root      wheel   625707  7 12 01:31 6003.rar*
-rwxr-xr-x   1 root      wheel   625707  7 15 00:32 6000.rar*
-rwxr-xr-x   1 root      wheel   625707  7 18 00:57 6002.rar*
drwxrwxr-x+ 71 root      admin     2414  7 18 08:16 Applications/
-rwx------   1 root      wheel   625707  7 19 00:44 *****
-rwxr-xr-x   1 root      wheel   625707  7 19 00:46 6001.rar*
 
No that is not normal. Sequential RAR files like that are usually used to download (often pirated) files over the Internet in small chunks. Then you use a RAR app to combine the files into the final file.
 
No that is not normal. Sequential RAR files like that are usually used to download (often pirated) files over the Internet in small chunks. Then you use a RAR app to combine the files into the final file.


I am having this same issue. the 6001.rar and "****" files keep re-appearing after a few days. I'm assuming it has to be a virus or malware. I've run Sophos which picks it up as a Trojan Horse. It says it cannot automatically remove it and I have to do a manual remove. I did that, but the files keep re-appearing.

Any advice?
 
I am having this same issue. the 6001.rar and "****" files keep re-appearing after a few days. I'm assuming it has to be a virus or malware. I've run Sophos which picks it up as a Trojan Horse. It says it cannot automatically remove it and I have to do a manual remove. I did that, but the files keep re-appearing.

Any advice?
That is odd that it is reappearing. Have you been downloading anything from torrent or file sharing sites that would use RAR files like this?
 
I do my share of downloading movies from pirate bay etc. I just don't know why these files keep re-appearing. It concerns me particularly since Sophos identified them as a linux trojan horse. Again, I deleted the files, but they keep re-appearing. Wondering if anyone has this same issue or knows what to do about it.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.