Is my Mac being hacked….?

Discussion in 'OS X Mountain Lion (10.8)' started by e93to, Jan 23, 2015.

  1. e93to macrumors 6502a


    Jan 23, 2015
    Hello. I have registered in a hurry to ask a question about my Mac's bizarre behavior.

    I was watching a movie on Quicktime in fullscreen mode last night, and suddenly, the the screen moved to show me a desktop. My hands were not anywhere near the track pad, but somehow the desktop was shown on the screen on its own. Quicktime player was still in fullscreen mode.

    After examining console, I saw these messages:

    1/22/15 10:48:38.317 PM authexec[4548]: executing /bin/sleep
    1/22/15 10:48:38.322 PM authexec[4549]: executing /usr/sbin/chown
    1/22/15 10:48:38.428 PM authexec[4550]: executing /bin/chmod
    1/22/15 10:48:38.535 PM authexec[4552]: executing /bin/chmod
    1/22/15 10:48:49.892 PM authexec[4576]: executing /bin/chmod
    1/22/15 10:48:49.998 PM authexec[4577]: executing /bin/rm

    I have no idea what these are…

    Also this morning, I noticed that my Mac woke up on its own:

    1/23/15 11:17:45.000 AM kernel[0]: Wake reason: XHC1

    The only things that were plugged into my iMac are external Super DVD Drive, Apple numeric keyboard and APC back-up. There was no power outage this morning.

    Usually, I press a space bar to wake up my iMac, hence getting EHC2 message.

    Should I be worried?

    I have late 2012 iMac with 10.8.5.

    Thanks in advance.
  2. GGJstudios macrumors Westmere


    May 16, 2008
    No, your Mac was not hacked. When something happens on OS X that you don't expect or understand, hacking and malware should be the last things you consider, not the first. In over 6 years of reading "my Mac got hacked!" threads in this forum and elsewhere, not a single one ever was. When you have a problem, you will do well to proceed with normal troubleshooting and skip the assumption that a hacker or malware is to blame.

    XHC1 refers to bluetooth devices waking the computer, like a keyboard, mouse, or remote
  3. e93to thread starter macrumors 6502a


    Jan 23, 2015
    Thank you for very quick response. Now that I'm relieved, I am looking forward to contributing to the website. I've been lurking on the website for quite awhile now.

    Again, thank you very much!

Share This Page