Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

0x6368

macrumors newbie
Original poster
Feb 8, 2015
1
0
In /private/var/folders/lg/xyw6hvz93178qr4ztd2ql09m0000gn/T/ (I think everything except the "/private/var/folders/" is random) are some pretty weird temporary .db files. They are called "tmp-0AF5312B-A1EB-4FE7-8FA3-14B1454A0998.db" or something similar, whereas "tmp-" and ".db" does not change. All these files have a size of 39.149.568 Byte and exactly the same md5 hash. So they are absolutely equal. My problem is, that my system creates a new of them every couple of seconds. Before I deleted them, they took up 40GB on my SSD.

To get more information out of these files (hopefully which program creates them), I opened them with a SQLite Browser. In every file are four tables named "metadata", "history_visits", "history_tombstones" and "history_items".
The tables are filled with my browsing history.

I modified one of these files (deleted all my personal data) and attached it to my post. Maybe you can find out more about it than I did.

Does anyone know where these files come from or how to prevent them from appearing?


EDIT: I think I found the bad boy. Looks like it was a key logger :mad:
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.