Are those files normal?

Discussion in 'OS X Mavericks (10.9)' started by mikezang, Jul 19, 2015.

  1. mikezang macrumors 6502a

    Joined:
    May 22, 2010
    Location:
    Tokyo, Japan
    #1
    I just found there are some files on my root folder, I want to know if they are normal files? the file above 6001.rar is "FUCK*" in normal alphabet.
    Code:
    -rwxr-xr-x   1 root      wheel   625707  7 12 01:31 6003.rar*
    -rwxr-xr-x   1 root      wheel   625707  7 15 00:32 6000.rar*
    -rwxr-xr-x   1 root      wheel   625707  7 18 00:57 6002.rar*
    drwxrwxr-x+ 71 root      admin     2414  7 18 08:16 Applications/
    -rwx------   1 root      wheel   625707  7 19 00:44 *****
    -rwxr-xr-x   1 root      wheel   625707  7 19 00:46 6001.rar*
    
     
  2. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #2
    No that is not normal. Sequential RAR files like that are usually used to download (often pirated) files over the Internet in small chunks. Then you use a RAR app to combine the files into the final file.
     
  3. templetongroup macrumors newbie

    templetongroup

    Joined:
    Sep 24, 2015
    Location:
    New York, NY
    #3

    I am having this same issue. the 6001.rar and "****" files keep re-appearing after a few days. I'm assuming it has to be a virus or malware. I've run Sophos which picks it up as a Trojan Horse. It says it cannot automatically remove it and I have to do a manual remove. I did that, but the files keep re-appearing.

    Any advice?
     
  4. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #4
    That is odd that it is reappearing. Have you been downloading anything from torrent or file sharing sites that would use RAR files like this?
     
  5. templetongroup macrumors newbie

    templetongroup

    Joined:
    Sep 24, 2015
    Location:
    New York, NY
    #5
    I do my share of downloading movies from pirate bay etc. I just don't know why these files keep re-appearing. It concerns me particularly since Sophos identified them as a linux trojan horse. Again, I deleted the files, but they keep re-appearing. Wondering if anyone has this same issue or knows what to do about it.
     

Share This Page