Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

schedo

macrumors newbie
Original poster
Apr 19, 2011
8
0
I noticed a weird .ini file called secure.ini keeps appearing under 'today' in my finder. Each time I drag it to the trash and do a secure empty of trash it reappears when I reboot the MacBook. I'm really worried that some sort of invisible malicious application is using it, as have used the MacBook for a year and a half and have only become aware of the .ini file very recently. I've also had to repair my hard drive recently after running a disk check when I was trying to figure out where the .ini files are coming from. I still don't know why the HD was damaged and am linking it to the appearance of the .ini files at the moment as have little else to go on.

Help with any of the following questions would be greatly appreciated:

1. Is there a way to find out what application is generating the .ini files?

2. I've not used terminal before, but is this the best way to delete the files, or will they just continue to be reproduced until I can work out what application is using them?

3. Should I delete them?

4. Should I be seriously worried? I have Applecare Pro Plan and could probably take my machine to be wiped or something but am reluctant to do that if there is a better way to delete the files myself or if anyone can shed any light on the matter.
 
1. Is there a way to find out what application is generating the .ini files?
.ini files are Windows files and have zero effect on Mac OS X. Do you use Boot Camp?
2. I've not used terminal before, but is this the best way to delete the files, or will they just continue to be reproduced until I can work out what application is using them?
Just drag them to the Trash.
3. Should I delete them?
Yes.
4. Should I be seriously worried?
No, they're harmless to Mac OS X.

As for any "invisible malicious application", There has never been a virus in the wild that affects Mac OS X since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some education and common sense and care in what software you install:
 
Just drag them to the Trash.

When I drag them to the trash and empty the trash (incl. secure empty) they delete but then reappear again seconds later...

Appreciate the reassurance that they are of no concern, but am confused as to how they keep reappearing after being deleted.
 
When I drag them to the trash and empty the trash (incl. secure empty) they delete but then reappear again seconds later...

Appreciate the reassurance that they are of no concern, but am confused as to how they keep reappearing after being deleted.
What is the file path? Where are they located?
 
I'm using the Mac on a predominantly PC/Windows intranet at work. Could the work intranet be the source of the secure.ini files? ie. Might their various Windows security software be creating .ini files on my Mac? (I know that sounds unlikely, but can't think where else the files are coming from)...
 
They appear in the "today" section of the finder but not aware of them appearing anywhere else
 
Hang on, sorry, have just found a filepath: forescourt/SecureConnector/secure.ini
 
Sorry to not understand this very well, really appreciate your help - does that mean the Forescourt is part of the company intranet system? My name appears before forescourt in the filepath, and I don't quite understand why there are files appearing on the Mac at all. What is the purpose of forescourt? Are they using it to vet my machine or something?
 
Sorry to not understand this very well, really appreciate your help - does that mean the Forescourt is part of the company intranet system?
Ask your network administrator, who can explain it all to you in detail. For now, don't worry about the presence of any .ini file on your Mac. It poses no threat, just like any .txt file.
 
Thank you so much - your time and patience both really appreciated!
 
Thank you so much - your time and patience both really appreciated!
Be sure to read the Virus/Malware link I posted. It really will go a long way toward giving you a balanced understanding of how to best protect your Mac from malware.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.