Suspicious .ini file keeps regenerating on my MacBook - can't delete it

Discussion in 'MacBook Pro' started by schedo, Apr 19, 2011.

  1. schedo macrumors newbie

    Joined:
    Apr 19, 2011
    #1
    I noticed a weird .ini file called secure.ini keeps appearing under 'today' in my finder. Each time I drag it to the trash and do a secure empty of trash it reappears when I reboot the MacBook. I'm really worried that some sort of invisible malicious application is using it, as have used the MacBook for a year and a half and have only become aware of the .ini file very recently. I've also had to repair my hard drive recently after running a disk check when I was trying to figure out where the .ini files are coming from. I still don't know why the HD was damaged and am linking it to the appearance of the .ini files at the moment as have little else to go on.

    Help with any of the following questions would be greatly appreciated:

    1. Is there a way to find out what application is generating the .ini files?

    2. I've not used terminal before, but is this the best way to delete the files, or will they just continue to be reproduced until I can work out what application is using them?

    3. Should I delete them?

    4. Should I be seriously worried? I have Applecare Pro Plan and could probably take my machine to be wiped or something but am reluctant to do that if there is a better way to delete the files myself or if anyone can shed any light on the matter.
     
  2. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #2
    .ini files are Windows files and have zero effect on Mac OS X. Do you use Boot Camp?
    Just drag them to the Trash.
    Yes.
    No, they're harmless to Mac OS X.

    As for any "invisible malicious application", There has never been a virus in the wild that affects Mac OS X since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some education and common sense and care in what software you install:
     
  3. schedo thread starter macrumors newbie

    Joined:
    Apr 19, 2011
    #3
    When I drag them to the trash and empty the trash (incl. secure empty) they delete but then reappear again seconds later...

    Appreciate the reassurance that they are of no concern, but am confused as to how they keep reappearing after being deleted.
     
  4. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #4
    What is the file path? Where are they located?
     
  5. schedo thread starter macrumors newbie

    Joined:
    Apr 19, 2011
    #5
    I'm using the Mac on a predominantly PC/Windows intranet at work. Could the work intranet be the source of the secure.ini files? ie. Might their various Windows security software be creating .ini files on my Mac? (I know that sounds unlikely, but can't think where else the files are coming from)...
     
  6. schedo thread starter macrumors newbie

    Joined:
    Apr 19, 2011
    #6
    They appear in the "today" section of the finder but not aware of them appearing anywhere else
     
  7. schedo thread starter macrumors newbie

    Joined:
    Apr 19, 2011
    #7
    Hang on, sorry, have just found a filepath: forescourt/SecureConnector/secure.ini
     
  8. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #8
    That file isn't even on your Mac. It's on a network device called "forescourt".
     
  9. schedo thread starter macrumors newbie

    Joined:
    Apr 19, 2011
    #9
    Sorry to not understand this very well, really appreciate your help - does that mean the Forescourt is part of the company intranet system? My name appears before forescourt in the filepath, and I don't quite understand why there are files appearing on the Mac at all. What is the purpose of forescourt? Are they using it to vet my machine or something?
     
  10. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #10
    Ask your network administrator, who can explain it all to you in detail. For now, don't worry about the presence of any .ini file on your Mac. It poses no threat, just like any .txt file.
     
  11. schedo thread starter macrumors newbie

    Joined:
    Apr 19, 2011
    #11
    Thank you so much - your time and patience both really appreciated!
     
  12. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #12
    Be sure to read the Virus/Malware link I posted. It really will go a long way toward giving you a balanced understanding of how to best protect your Mac from malware.
     
  13. schedo thread starter macrumors newbie

    Joined:
    Apr 19, 2011

Share This Page