Finding strange files on my Macbook

[mrogers]

I just turned on my macbook after it was shut down (for about an hour) and it opened up and Finder was open. Finder is not usually open when I turn on macbook. And inside it there was a weird file that immediately caught my attention, called isclientrunning.sh

Does anybody know what that is or why that would happen? Ive never even heard of a .sh file. Did I download a virus or have I been hacked or whats going on? It was just sitting there next to all my main folders.

Also recently whenever I browse random websites, or am on Firefox, sometimes a window always pops up asking me to open a file, called activity.php and things like that. It claims its from facebook.com, but am not on facebook. It is just weird because the window that opens is the same kind that pops up when I want to download an attachment from the internet or my email, as if I had already made a request to download something. But I just click cancel instead of open. It doesnt appear to be like a pop-up or anything like that. It has happened three times over the last few weeks

If anybody can help me figure out why there have been so many weird things happening, I would appreciate it. Thanks

 

[k43l]

did someone else use your macbook? maybe someone tried to prank you, lol

but don't worry, you can't really do anything "bad" to a mac without the password.

maybe you should try to use a different browser like chrome or safari, or install a pop-up blocker addon in firefox...

 

[mrogers]

thanks for the reply.

and no, as far as I know nobody has been on my laptop in the last few days. Im not sure what kind of a prank that would be though? Is stuff like that normal?

 

[k43l]

I don't know, my friends and I used to prank eachother with script files ( .sh / .bat / etc...) that open the CD drive every five seconds or shutdown the computer after 10 minutes and stuff like that...

but I've never heard of a file named isclienrunning.sh, can you open it with TextEdit and then post it here?

 

[mrogers]

Yeah, sure thing. But if this is something that someone makes, then I don't understand how it wound up on my computer if nobody has been on it. Is it something I downloaded?

Also, when I look at the file info, it says it was created on March 16th. I feel like I definitely would have noticed it had it been there for almost an entire month.. I'm really confused.

#!/bin/sh
SERVICE='Statistics17'
CHECKFILE=~/.statistics_running
if [ -f ${CHECKFILE} ];
then
rm -f ${CHECKFILE}
fi
if ps ax | grep -v grep | grep $SERVICE > /dev/null
then
touch ${CHECKFILE}
fi
#!/bin/sh
SERVICE='Statistics17'
CHECKFILE=~/.statistics_running
if [ -f ${CHECKFILE} ];
then
rm -f ${CHECKFILE}
fi
if ps ax | grep -v grep | grep $SERVICE > /dev/null
then
touch ${CHECKFILE}
fi
#!/bin/sh
SERVICE='Statistics17'
CHECKFILE=~/.statistics_running
if [ -f ${CHECKFILE} ];
then
rm -f ${CHECKFILE}
fi
if ps ax | grep -v grep | grep $SERVICE > /dev/null
then
touch ${CHECKFILE}
fi

 

[k43l]

that's weird...
maybe it came with a program you installed... but a script file itself doesn't do anything, it needs to be executed by a user or another program...

 

[mrogers]

yeah, youre probably right. Strange. I'm probably just being paranoid I guess. lol But thanks for your help!

Anyway, Im sure this isnt related to that first thing, but any idea about the activity.php windows that open up? Im kind of curious to open one just to see what it is, but if it is a virus or something, I dont want to take that chance and I just always hit cancel and the window disappears.

 

[k43l]

Don't really know why that happens... sometimes if you "right click > Save as..." on a download link it tries to download a .php file...

but it never happened to me without clicking anything on a website

 

[GGJstudios]

Im kind of curious to open one just to see what it is, but if it is a virus or something, I dont want to take that chance and I just always hit cancel and the window disappears.

Your Mac cannot be infected by a virus. There has never been a virus in the wild that runs on Mac OS X. The handful of trojans that exist can be easily avoided with some education and common sense and care in what software you install:

Mac Virus/Malware Info​

 

[blevins321]

That file is an assistant for IBM's SPSS Statistics suite. Do you have it installed?

 

[mrogers]

Interesting, No I do not have that program installed. I guess its just weird that it just showed up all of a sudden.

So what does it mean to be getting those windows to open an activity.php . it says its from facebook.com but Im never on that site when it happens :s

 

[wlkehrkwehrlweh]

Me Too

I have had allot of problems with hackers corrupting my preferences and knocking down my quicktime server which is only for personal use. I had to switch to mac because I could not even use a PC it was always hacked I could not even install the operating system before it was crashed. Nice right. I have no idea who is doing it but seems like they are using the same stuff on your system they are using on mine. Or it could be part of dropbox which I have if you do too that is a possibility. It just appeared today after I removed some outdated software form my control panel which was how they were getting into my preferences it was no longer supported by it's developer and had been replaced with flip for mac. It allowed quicktime to play other formats.