Can someone tell me what this means?

[Firestormnx04]

Hi everyone,

I came back to my iMac to find someone had run the attached command in terminal. Can someone tell me what it means?

Much appreciated.

 

[Apple_Robert]

Looks like someone attempted to format a particular portion of your drive.

You need to change your Mac password and not share it with anyone outside your wife (If applicable).

 

[revmacian]

Looks like someone attempted to format a particular portion of your drive.

You need to change your Mac password and not share it with anyone outside your wife (If applicable).

I'm wondering if "__local_device" was a script - looks like it was hastily written because the format command couldn't be found/referenced in line 1. I would definitely be looking into the contents of /Volumes/Untitled to see what else has been placed there. I don't see that in /Volumes on my Mac.

At any rate it doesn't look like any damage was done other than logging out of the session.

 

[Apple_Robert]

I'm wondering if "__local_device" was a script - looks like it was hastily written because the format command couldn't be found/referenced in line 1. I would definitely be looking into the contents of /Volumes/Untitled to see what else has been placed there. I don't see that in /Volumes on my Mac.

Depending on his setup, he could have multiple volumes listed in Disk Utility. And certain terminal volume commands will show the individual volumes (partitions) as line 0, line 1 etc.

Whomever accessed his computer did not enter the command correctly. Either he freely gave his Mac password to other people in his house, it was guessed, or he was seen entering it with someone present. He has a potential security issue at hand that may need to be dealt with, if he did not authorize this access.