Finding strange files on my Macbook

Discussion in 'MacBook Pro' started by mrogers, Apr 11, 2011.

  1. mrogers, Apr 11, 2011
    Last edited: Apr 11, 2011

    mrogers macrumors member

    Joined:
    Apr 11, 2011
    #1
    I just turned on my macbook after it was shut down (for about an hour) and it opened up and Finder was open. Finder is not usually open when I turn on macbook. And inside it there was a weird file that immediately caught my attention, called isclientrunning.sh

    Does anybody know what that is or why that would happen? Ive never even heard of a .sh file. Did I download a virus or have I been hacked or whats going on? It was just sitting there next to all my main folders.

    Also recently whenever I browse random websites, or am on Firefox, sometimes a window always pops up asking me to open a file, called activity.php and things like that. It claims its from facebook.com, but am not on facebook. It is just weird because the window that opens is the same kind that pops up when I want to download an attachment from the internet or my email, as if I had already made a request to download something. But I just click cancel instead of open. It doesnt appear to be like a pop-up or anything like that. It has happened three times over the last few weeks

    If anybody can help me figure out why there have been so many weird things happening, I would appreciate it. Thanks
     
  2. k43l macrumors member

    Joined:
    Jul 8, 2010
    #2
    did someone else use your macbook? maybe someone tried to prank you, lol

    but don't worry, you can't really do anything "bad" to a mac without the password.

    maybe you should try to use a different browser like chrome or safari, or install a pop-up blocker addon in firefox...
     
  3. mrogers thread starter macrumors member

    Joined:
    Apr 11, 2011
    #3
    thanks for the reply.

    and no, as far as I know nobody has been on my laptop in the last few days. Im not sure what kind of a prank that would be though? Is stuff like that normal?
     
  4. k43l macrumors member

    Joined:
    Jul 8, 2010
    #4
    I don't know, my friends and I used to prank eachother with script files ( .sh / .bat / etc...) that open the CD drive every five seconds or shutdown the computer after 10 minutes and stuff like that...

    but I've never heard of a file named isclienrunning.sh, can you open it with TextEdit and then post it here?
     
  5. mrogers, Apr 11, 2011
    Last edited: Apr 11, 2011

    mrogers thread starter macrumors member

    Joined:
    Apr 11, 2011
    #5
    Yeah, sure thing. But if this is something that someone makes, then I don't understand how it wound up on my computer if nobody has been on it. Is it something I downloaded?

    Also, when I look at the file info, it says it was created on March 16th. I feel like I definitely would have noticed it had it been there for almost an entire month.. I'm really confused.

    #!/bin/sh
    SERVICE='Statistics17'
    CHECKFILE=~/.statistics_running
    if [ -f ${CHECKFILE} ];
    then
    rm -f ${CHECKFILE}
    fi
    if ps ax | grep -v grep | grep $SERVICE > /dev/null
    then
    touch ${CHECKFILE}
    fi
    #!/bin/sh
    SERVICE='Statistics17'
    CHECKFILE=~/.statistics_running
    if [ -f ${CHECKFILE} ];
    then
    rm -f ${CHECKFILE}
    fi
    if ps ax | grep -v grep | grep $SERVICE > /dev/null
    then
    touch ${CHECKFILE}
    fi
    #!/bin/sh
    SERVICE='Statistics17'
    CHECKFILE=~/.statistics_running
    if [ -f ${CHECKFILE} ];
    then
    rm -f ${CHECKFILE}
    fi
    if ps ax | grep -v grep | grep $SERVICE > /dev/null
    then
    touch ${CHECKFILE}
    fi
     
  6. k43l macrumors member

    Joined:
    Jul 8, 2010
    #6
    that's weird...
    maybe it came with a program you installed... but a script file itself doesn't do anything, it needs to be executed by a user or another program...
     
  7. mrogers thread starter macrumors member

    Joined:
    Apr 11, 2011
    #7
    yeah, youre probably right. Strange. I'm probably just being paranoid I guess. lol But thanks for your help!

    Anyway, Im sure this isnt related to that first thing, but any idea about the activity.php windows that open up? Im kind of curious to open one just to see what it is, but if it is a virus or something, I dont want to take that chance and I just always hit cancel and the window disappears.
     
  8. k43l macrumors member

    Joined:
    Jul 8, 2010
    #8
    Don't really know why that happens... sometimes if you "right click > Save as..." on a download link it tries to download a .php file...

    but it never happened to me without clicking anything on a website
     
  9. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #9
    Your Mac cannot be infected by a virus. There has never been a virus in the wild that runs on Mac OS X. The handful of trojans that exist can be easily avoided with some education and common sense and care in what software you install:
     
  10. blevins321 macrumors 68030

    Joined:
    Dec 24, 2010
    Location:
    Winnipeg, MB
    #10
    That file is an assistant for IBM's SPSS Statistics suite. Do you have it installed?
     
  11. mrogers thread starter macrumors member

    Joined:
    Apr 11, 2011
    #11
    Interesting, No I do not have that program installed. I guess its just weird that it just showed up all of a sudden.

    So what does it mean to be getting those windows to open an activity.php . it says its from facebook.com but Im never on that site when it happens :s
     
  12. wlkehrkwehrlweh macrumors newbie

    Joined:
    Nov 20, 2013
    #12
    Me Too

    I have had allot of problems with hackers corrupting my preferences and knocking down my quicktime server which is only for personal use. I had to switch to mac because I could not even use a PC it was always hacked I could not even install the operating system before it was crashed. Nice right. I have no idea who is doing it but seems like they are using the same stuff on your system they are using on mine. Or it could be part of dropbox which I have if you do too that is a possibility. It just appeared today after I removed some outdated software form my control panel which was how they were getting into my preferences it was no longer supported by it's developer and had been replaced with flip for mac. It allowed quicktime to play other formats.
     

Share This Page