A strange file in home directory

Hi
Something is creating a strange file in my home direcotry:
http://s2.postimg.org/drgqt0c3t/shot.png
Can anyone tell me that? how can I track that which app is creating that file?
And, how can I prevent creation of this file in the future?
Regards
Last edited by zetrotrack000 (2013-09-02 15:42:11)

kaszak696 Here is the COMMAND PID startkde 308 zetro cwd startkde 308 zetro startkde 308 zetro kdeinit4 366 zetro cwd kdeinit4 366 zetro kdeinit4 366 zetro klauncher 367 zetro cwd klauncher 367 zetro klauncher 367 zetro kded4 369 zetro cwd kded4 369 zetro kded4 369 zetro kglobalac 380 zetro cwd kglobalac 380 zetro kglobalac 380 zetro kactivity 385 zetro cwd kactivity 385 zetro kactivity 385 zetro kwrapper4 394 zetro cwd kwrapper4 394 zetro kwrapper4 394 zetro ksmserver 396 zetro cwd ksmserver 396 zetro ksmserver 396 zetro kwin 461 zetro cwd kwin 461 zetro kwin 461 zetro knotify4 463 zetro cwd knotify4 463 zetro knotify4 463 zetro plasma-de 468 zetro cwd plasma-de 468 zetro plasma-de 468 zetro ksysguard 498 zetro cwd kio_deskt 503 zetro cwd kio_deskt 503 zetro kio_deskt 503 zetro kio_trash 504 zetro cwd kio_trash 504 zetro kio_trash 504 zetro kio_file 507 zetro cwd kio_file 507 zetro kio_file 507 zetro krunner 515 zetro cwd krunner 515 zetro krunner 515 zetro nepomukse 517 zetro cwd nepomukse 517 zetro nepomukse 517 zetro nepomukst 520 zetro cwd nepomukst 520 zetro nepomukst 520 zetro thunderbi 525 zetro cwd thunderbi 525 zetro thunderbi 525 zetro CopyAgent 528 zetro cwd CopyAgent 528 zetro CopyAgent 528 zetro polkit-kd 537 zetro cwd polkit-kd 537 zetro polkit-kd 537 zetro kmix 539 zetro cwd kmix 539 zetro kmix 539 zetro konsole 541 zetro cwd konsole 541 zetro konsole 541 zetro bash 558 zetro cwd kio_trash 613 zetro cwd kio_trash 613 zetro kio_trash 613 zetro nepomukfi 616 zetro cwd nepomukfi 616 zetro nepomukfi 616 zetro nepomukfi 617 zetro cwd nepomukfi 617 zetro nepomukfi 617 zetro lsof 627 zetro cwd lsof 627 zetro lsof 628 zetro cwd wrote:Does that file have any contents that would help identify it? Also, could you provide more info about your setup? What processes and services you have running etc. If you can, upload the entire output of lsof +d $HOME or lsof +D $HOME , don't remember which one is non-recursive.
output of 'lsof +d $HOME':
USER FD TYPE DEVICE SIZE/OFF NODE NAME
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
2w REG 8,6 13974 14942277 /home/zetro/.xsession-errors
DIR 8,6 4096 14942209 /home/zetro
1w REG 8,6 0 14950316 /home/zetro/lsof_output
DIR 8,6 4096 14942209 /home/zetro

Similar Messages

Conf file in home directory

No idea what section to post this in, I'm using kde4.1.1 if thats got any relevance. Something keeps creating a file called config in home directory, I keep deleting it and it keeps coming back, its annoying! I've no idea whats doing it, the file contains only
0.0

omg this is driving me mad... anyone any ideas? The file is created whenever I log in so god knows what prog is creating it

Macbinary file in home directory

Hello, I have noted lately that there is a mac binary file in my home directory, does anyone know what is this for? I did not notice this file a month and half ago. Everything else is ok with my mac but I am very curious about this file. I tried opening it and it did nothing. Any ideas? The name of the file is profiles.bin. Although I have used Mac for a while I do not know some details associated to Unix and Mac System. Appreciate any help, thanks.

Hi, vitoman.
You wrote: "I googled it and did not find anything. "
This Google search turns up a couple of threads concerning this file on forums in Germany and Italy. The "Translate this Page" links yield some rough translations, at least one of which seems to imply it may be related to installing the latest Office update.
Another user seemed to indicate that he deleted the file but it later reappeared, implying it might be caused by a Startup or Login Item. If that's the case, ee my "Troubleshooting Startup and Login Items" FAQ for steps that might help you with this problem.
If you speak/read German or Italian, perhaps you can get more from those Google results than the translations yielded.
Good luck!
Dr. Smoke
Author: Troubleshooting Mac® OS X
Note: The information provided in the link(s) above is freely available. However, because I own The X Lab™, a commercial Web site to which some of these links point, the Apple Discussions Terms of Use require I include the following disclosure statement with this post:
I may receive some form of compensation, financial or otherwise, from my recommendation or link.

MacOS keep open file in home directory

I don't know if I've changed anything but my Mac keeps open every files written in the HOME directory with the default editor. Any idea to modify this behavior? I'm using Mac OS X 10.6
Thank you in advance.

Never mind. I was able to fix it. Just delete every thing from ~/Library/Preferences (or move all files to another location and then move them back if you don't want to lose your settings).

Strange wine behavior, home directory permission change!!

hi all, archers.
i'm an arch user since early 2007 and this is my first post. Since now i've always found every information needed and enjoyed this great distribution.
btw, now i have a strange behavior with last version of wine in extra repository (0.9.61).
situation:
clean wine install, w/o .wine prefix from previous version creation (i always redo prefix creation every new version).
the fact:
after wineprefixcreate, as usual, i execute winecfg for the last personalization and sound interface selection.
fortunately and surprisingly, i notice that my home directory AND my desktop directory have completely screwed up permission. they was set to 777!!! aargh!
my home desktop is not so critical mission but i think this is not good!!!
after some test, i can say, in this my strange personal experience, that it's winecfg fault. wineprefixcreate don't change any permission. this happen only after the first winecfg execution AND only the first time. following execution of winecfg does not trigger the fault.
googled anywhere but it seems that i'm the only one in the world with this wine strange behavior. Is it true? any else?
a little report of my config:
(multi device are all raid5)
/dev/sda2 ext2 /boot
/dev/md0 ext3 /
/dev/md1 ext3 /home
... other devices in irrelevant mount point.
not so strange rc.conf
untouched /etc/skel
not so strange gnome DE on top of GDM
not so strange any else
thanks in advance and good arching

Solved in another Thread

Suspicious .nyiyeverc file in home directory

I found a hidden file called ".nyiyeverc" sitting in my home (~/) directory and I can't find any info on what it is, or if it could be something malicious or unwanted. I searched Google, as well as other search engines, and got absolutely nothing.
I opened it with TextEdit and it appears to be a single line of text reading "awcnsawcnsawcnsawcnsawoolwascully wa". Very weird! I googled that too, but still nothing.
It's 8 KB, listed as a UNIX executable, created 2/19/12, modified 9/26/12 (two days ago). I am perplexed!

More than suspicious I'd say, & the fact that it isn't searchable would indicate very sophisticated Malware.
Installed anything lately?
ClamXAV, free Virus scanner...
http://www.clamxav.com/
Free Sophos...
http://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-mac-home-ed ition/features.aspx
ClamXAV, free Virus scanner...
http://www.clamxav.com/
Free Sophos...
http://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-mac-home-ed ition/features.aspx
Get MacScan...
http://www.apple.com/downloads/macosx/networking_security/macscan.html
See these for a list of some key loggers...
http://forums.macosxhints.com/archive/index.php/t-41204.html
http://www.keylogger-mac.com/mac-keylogger-perfect-keylogger-for-mac-os-x.html
http://uglypufferfish.com/2008/10/31/mac-keyloggers/

Lots of 0kB text files in home directory

I am using a MacBook Pro with Mac OS X 10.7.2. Last week, I had a hard drive corruption and restored my MB Pro from a Time machine backup and the Lion Startup partition. While I was fortunate that only a days worth of data was lost, all has not been completely smooth.
1) There are a lot of text files of 0 kB with either no name or non-sensical names beginning with a percent sign and other non-sensical characters (e.g. %E1%DB %F6ޝo^%EF%FEۆ%83%A7wkx8) in my home directory /Users/isaac.
2) The 500 GB partition that I have been using for Time Machine to back up the internal 320 GB hard disk is now not large enough to back up the volume. There is only one backup on the drive (the one I used to restore), but Time Machine won't complete the backup although there is 197.5 GB available. I thought that time machine didn't make complete backups and wondered why this has become a problem after the recent re-install.
There have been some runaway processes that I can't isolate that heat up the computer (72 F) and start the fan a whirring 4400 rpm.
I don't know if these are related to previous kernel panics that would intermittenly freeze and crash my Mac (the ciscovpn agent seemed to be the process that was always the final process before the crash), but I thought I'd mention them anyway.
Are these issues foreshadowing future doom?
Your thoughts are welcome. Thank you.
Aric

Aric Newton wrote:
2) The 500 GB partition that I have been using for Time Machine to back up the internal 320 GB hard disk is now not large enough to back up the volume. There is only one backup on the drive (the one I used to restore), but Time Machine won't complete the backup although there is 197.5 GB available. I thought that time machine didn't make complete backups and wondered why this has become a problem after the recent re-install.
Sounds like TM wasn't able to figure out what happened. When you did the restore, the disk got a new UUID (Universally Unique IDentifier), that OSX uses to keep track of drives (rather than the name). So it's treated as a different drive. Ordinarily, when you do a restore, it leaves a "trail" so Time Machine can automatically connect the "new" drive to the old backups. Sometimes, though, it doesn't.
You may be able to get it to "associate" the "new" disk with the backups, per #B6 in Time Machine - Troubleshooting.

Strange files in root directory

Yesterday I noticed that some strange files (directories, actually) had appeared in the root directory on my MacBook Pro, that is, the directory that contains the standard Finder-viewable Applications and System directories and the Unix bin and usr directories.
The new directory was named 5ffffffcb00, and it contained two other hex-named directories, which were empty. Perhaps foolishly, I trashed them yesterday. Nothing bad seems to have happened, but this morning they have all reappeared. Here's the output of "ls -alR /5ffffffcb00/":
total 16
drwxr-xr-x 2 however admin 68 Oct 29 22:36 -03ffffffd4ffffff-4e81010000
drwxr-xr-x 2 however admin 68 Oct 29 22:36 -03ffffffd4ffffff-c1b1a1d3c1
drwxr-xr-x 5 however admin 170 Oct 31 09:02 .
drwxrwxr-t 37 root admin 1326 Oct 29 22:36 ..
-rw-r--r--@ 1 however admin 6148 Oct 31 09:02 .DS_Store
/5ffffffcb00//-03ffffffd4ffffff-4e81010000:
total 0
drwxr-xr-x 2 however admin 68 Oct 29 22:36 .
drwxr-xr-x 5 however admin 170 Oct 31 09:02 ..
/5ffffffcb00//-03ffffffd4ffffff-c1b1a1d3c1:
total 0
drwxr-xr-x 2 however admin 68 Oct 29 22:36 .
drwxr-xr-x 5 however admin 170 Oct 31 09:02 ..
Does anyone have any idea about these? They're visible in the Finder.

If your child pages are open when you update the Template, you need to save them again (after you have saved the Template).
You can update "all pages based on your template" at Modify > Templates > Update pages: Files that use... [choose the name of your template]
I'm also assuming that the changes that you are making are within the Ineditable Regions of your Template. Changes made in the Editable Regions will not, by design, change when you change that part of the Template.
Beth
Message was edited by: Zabeth69

Why can't create file under /home directory?

I user solaris10, and login as root,I find I can't create any file or directory under /home directory! It say "operation not applicable" ,Why? I am puzzled it for a long time. Anyone could tell how to do it?
Thanks

For Solaris,
/home is not an on-disk file system, it is a file system under the
control of the automounter, and only the automounter can create
directories/files in it.
If you don't want the automounter to manage /home, then remove the
"/home" entry from /etc/auto_master
(and issue the command "automount -v" to force the file
to be reread, or reboot).
However, the typical setup for Solaris is to locate user's home directories
in /export/home.
Kapil Khanna

I have to give password to file changes in my home directory

From yesterday, when I try to change files in my home directory, a dialog box pops up to ask the password.
That happens even after make the file permission to 644. I tried to change the whole /Users/myplace permisson, but it doesn't work.
The owner of the file is set as myself, but there might be something broken with this.
This actually made everything not working, dropbox takes for ever to delete a file, evernote can't even start and on and on.
I just happen to add New Person with the same user name that I use now in Sharing, but I'm not sure this is the cause of the problem.
How can I solve this issue? How can I delete/move files in home directory without giving passwords?
Thanks,
smcho

Your username is "smcho"? So your home folder is named "smcho"?
Yeah for the System Folders "Movies", "Music", "Pictures", "Library", "Public" and "Desktop" there is an ACL, so you can't rename or delte them.
It's just for your safety because these folders are used by the system and should be not renamed or removed!
Additionally you made something wrong by chmodding your home folder to 644 - or as it showing here to 730!?!
Normally the user home folder and the included folders should be at 700 and the Public folder at 755. Additionally the folders have an acl for "everyone deny delete". so something get messed up!

AES-256 user home directory sparse image bundle in Lion?

Snow Leopard and previous had file vault to protect users' home directories as, I believe, AES-128-encrypted sparse image bundles. As I understand it now, under Lion, the options are to enable AES-128 whole disk encryption, or, if upgrading an existing snow leopard machine with a legacy file vault user account, to maintain that legacy file vault user home directory. However, under this second approach, additional users' home directories cannot be individually "file-vaulted" and instead, would require that legacy file vault be decrytped and then the entire disk be encrypted.
I am thinking that it would be advantageous from a security standpoint if an individual user home directory could remain encrypted, if that user were not actively logged in. Then, all contents would be inaccessible to other users, including administratively privileged users, and also that user's home directory would remain encrypted when the computer was turned on and booted up because as I understand it, file vault 2's real strength lies in protecting "data at rest" versus "data on a powered up and mounted file vault 2 volume".
To that end, I am wondering, regardless of whether file vault 2 is enabled or not, whether an existing user home directory and all of its contents be converted to an AES-256-encrypted sparse image bundle, using Disk Utility, and exist at the /Users directory space, mounting and decrypting "on the fly" from the login window at user login just like how a legacy file vault home directory is treated under snow leopard, independently of whether file vault 2 was enabled on the whole disk or not. This would also permit later addition/conversion of another "file vaulted" user account whether fle vault 2 were enabled or not.
To recap, an AES-256-encrypted sparse image bundle that would mount upon user login just like a legacy file vault user home directory does. Does anyone know if something like that is doable, and has that road already been travelled successfully? If so, I'd love to read a step-by-step, play-by-play, set of instructions on how to do just that.

I think I got a solution worked out. I don't mind if things get installed in /opt as long as pacman tracks it, and I found ruby-enterprise-rmagick in the AUR as an orphan. I adopted it, updated it, installed it, and it's working great with my code.

Strange file created in my home directory!

I just recently noticed a zero byte size file created at the root level of my home directory (see below). It's an ip address (from Belize) with what I assume to be a high port at the end of the ip address. It was created back on December 6'th and I have no idea how it got there. I have scanned my desktop with ClamxAV and the free version of Sophos for mac but all comes back clean. Has anyone seen something like this before, should I be concerned? I did not create it and no one but me uses this profile.

How do I enable opening firefox from two different computers sharing the same home directory without having to delete a lock file (linux).

I just don't want to have to delete a lock file - which has a purpose - in order to use firefox simultaneously from two locations on the network - where the home directory, i.e. .mozilla directory - is located

You need to use two separate profiles if you want to have two Firefox instances open at the same time.
See also http://www.mozilla.org/unix/remote.html

Need to write/delete a file (token) to/from user's home directory

I want to build a class that runs on Windows/Unix clients. It needs to get to users' home directories (both environments) and write the token on login, delete it on logout.
What method (or code snipet) would get a user's home directory?
What method (or code snipet) would write/delete a file from it?
Thanks much

Even if you are not writing an Applet, this is applicable. But I thot if you were, you might need this.
See 'SignedAppletDemo.java'
http://developer.java.sun.com/developer/technicalArticles/Security/Signed/

Is there a file in which OSX stores the home directory path, where to find it and how to edit it in Windows 7?

Hi everyone,
I have a SSD with the System and Apps on it, and another HDD containing the home directory.
I made the mistake to rename the Volume the home directory is on whilst being logged in, the system reacted accordingly and prompted some Password requests,
and I then tried to choose the newly named Volume in the Advanced options dialogue in Users & Groups (example seen below).
I tried to change the name back to what it was in the hope of it all being back to normal again, but instead it's completely messed up now and I cannot login anymore (prompt: "You are unable to log in to the user account "xxxx" at this time. Logging in to the account failed because an error occurred")
All I can do now is boot my Windows 7 and try to fix this from there, I can read/write the OSX Volumes thanks to MacDrive.
So now the big question is:
IS THERE A FILE containing the path to the home directory (red arrow)?
IF SO, WHERE can I find it?
And is there a way to edit it in Windows?
My guess is that if I rename the Volume, AND change this path to something identical again, it might solve the issue.
Thanks!

Download THIS
 Cheers, Tom

A strange file in home directory

Similar Messages

Maybe you are looking for