File Sharing Enabling Itself/ Possible Malware Infection?

Greetings to all,
I'm posting this out of sheer desperation because no one else seems to have reported such an issue (or so Google would have me believe).
A bit of background info:
I'm running 10.8.5 and Firefox 24.0, no frills, no extra customisations apart from one add-on; pretty much everything left to the default settings (homepage, theme, etc.).
I noticed two weeks ago that my first tab in Firefox kept shivering every time a new tab was opened or an existing one was closed.  The only thing that had been installed was AdBlock Plus and that was running flawlessly for a month.
I researched the problem on my own and found that previous versions of Firefox had similar shaking issues but none were related to AdBlock.
I reset my browser and the shaking stopped.  I re-installed AdBlock and the issue returned in ten minutes.  I reported this to AdBlock Plus but have yet to hear back from them.
Now moving onto the crux of the issue:
I noticed in the last week that File Sharing has been turning itself on.  I have another Mac on the network but I have only used this feature a handful of times and always make sure to disable it as soon as I'm done.  This is combination with e-mails that I did not send that appear to be sent from my account despite having changed my password several times in the last year.  None of my contacts have reported that they received spam from me.
I had been mildly suspicious of some such malware due to Netflix/ Hulu magically playing videos on their own well after they had already timed out.
I checked Activity Monitor and there were no suspicious processes but I figured if a keylogger, for instance, were sophisticated enough, I still might not be able to see it.
Enter MacScan 2.9.4.  I downloaded it directly from their website and ran a full-system scan which ultimately yielded nothing.
I re-open Firefox and what do I see?  Yahoo! has been made my new homepage and a bunch of Spigot searchbars have been added, namely that for Amazon and eBay.
When I Googled the company name, almost all the of articles referred to it as malware.
I have since reset my browser and I'm starting to freak out more than just a little.
A well-known and recommended AV hijacks my browser, spam is being sent to me by 'me', File Sharing is enabling itself, and of course, the phantom video playing.
Has anyone seen this conglomeration of symptoms before and if so, what can I do about it?
If not, am I going to have to wipe both Macs?
Please some kind soul out there, help!

I'm not following your description well enough to know exactly what happened. What site were you viewing when this happened, and did it happen immediately on clicking a link or did it just happen spontaneously? What is a "corrupted install window"? And what is "the corrupt file" you found in your download folder? Without more information, it's difficult to say, but it doesn't sound like malware to me. Of course, if you wish to set your mind at ease, get a copy of [ClamXav|http://www.clamxav.com> and scan your hard drive. Also, I would point you to my [Mac Virus guide|http://www.reedcorner.net/thomas/guides/macvirus>, but as I've received private communications from you already, I see you've found it!
Note that files ending in .part are temp files... they are the beginnings of files that your browser started downloading. When you cancel a download, whatever had been downloaded to that point is left in a .part file, I believe to allow for resumption of the download later (if the server in question supports that). Whatever's in there is not complete and could not possibly be opened, so it is not a threat.

Similar Messages

  • Is it safe to leave file sharing enabled?

    I have a wireless network (Belkin Essentials wireless router, a Buffalo Tech PCMCIA card in my TiBook (which emulates an Airport Extreme card), and an Asus USB wireless adapter in both my G5 iMac and my old Blue&White G3), OS 10.4.10 with the firewall enabled in each computer and WPA/WPA2-Personal(PSK) security enabled on the router. That being said, is it safe to leave file sharing enabled on each of the computers on my home network or should I disable file sharing when I'm not transfering files between my computers?
    Thank you.
    iMac G5   Mac OS X (10.4.10)  

    Thanks for the reply. It is handy to have file sharing enabled all the time.

  • Possible Malware infection?

    I was surfing a website with firefox, and my download window popped open with the list cleared. I never clear my list. Then a corrupted install window opened asking me to install a dmg that was like a clean file i had downloaded earlier. i didn't install and i shut down the computer. On reopening i found in my download folder the corrupt file and a file with random letters ending in a ".part" file name.
    Any clarification would be helpful?
    Thanks

    I'm not following your description well enough to know exactly what happened. What site were you viewing when this happened, and did it happen immediately on clicking a link or did it just happen spontaneously? What is a "corrupted install window"? And what is "the corrupt file" you found in your download folder? Without more information, it's difficult to say, but it doesn't sound like malware to me. Of course, if you wish to set your mind at ease, get a copy of [ClamXav|http://www.clamxav.com> and scan your hard drive. Also, I would point you to my [Mac Virus guide|http://www.reedcorner.net/thomas/guides/macvirus>, but as I've received private communications from you already, I see you've found it!
    Note that files ending in .part are temp files... they are the beginnings of files that your browser started downloading. When you cancel a download, whatever had been downloaded to that point is left in a .part file, I believe to allow for resumption of the download later (if the server in question supports that). Whatever's in there is not complete and could not possibly be opened, so it is not a threat.

  • Connecting to shared machines (either via Share Screen or file sharing)

    I have a MobileMe account and four computers in separate locations which I regularly need to connect between. Some are on static IP's and others are on dynamic IP's. So all of them have file sharing enabled as well as screen sharing enabled. They're also all registered in my MobileMe account. Anytime I'm in a Finder window, in the sidebar, I see Shared > (computer name) and see all the computers there. If I click on it, I'm offered two buttons, one to "Connect As" if I want to file share, and "Share Screen" if I want to VNC.
    I would say 60-70% of the time I click on either of those buttons, it doesn't work. It takes about a minute to try and connect, then says, "Connection failed to (computer name). Please make sure screensharing is enabled...blah blah blah..." (it is)
    However, 40-60% of the time if I click the same button again, it DOES work!
    Sometimes it takes several tries.
    It's really frustrating that I can't reliably connect to the other computers in the MobileMe list.
    Does anyone else see this and are there any suggestions? There doesn't seem to be any rhyme or reason to it. Trying to connect to a computer that has a static IP vs. dynamic fails with about the same regularity. So I don't think that's it.
    I also get about the same failure rate when trying to use Connect As to fileshare. So I don't think it's a VNC/screenshare-specific problem.
    I've tried using DynDNS as an alternate way to reliably locate another of my computers. It fails with approx. the same failure rate, and sometimes works upon re-attempt.
    HELP!

    Goto your System Preferences->Sharing, Then select the Internet tab.
    From the drop down menu select 'Share your connection from: Kyrocera card.'
    And in the 'To computers using' box tick built in ethernet and connect a network cable to your powerbook and the other end to your network.
    Or if you have an airport card installed share the connection using your airport.Then other wireless devices can connect to your powerbook.

  • File sharing network problem

    I have an Airport Extreme (G) base station with an Airport Express acting as a WDS extender. I have two client Macs - a 24" iMac (Intel Dual Core) and an iBook (G4). There are a variety of other clients as well - 2 wireless-G tivos, a Win XP laptop, a wireless ethernet bridge serving a slingbox.
    My problem is with the two Macs. Using Network browser, from the iMac, I can connect to the iBook just fine via AFP. However, when I try to connect to the iMac from the iBook, it tries to use FTP, then I get the error "unable to find alias." Both macs have AppleTalk enabled and both have File Sharing enabled.
    I suspect that the root of the problem may be from the fact that the iMac was set up by copying everything over from an older iMac FP (I've learned my lesson and will not use the Migration Assistant again!). But, I can't figure out how to correct this.
    Thanks!

    Hi franki, I'm glad those web sites were useful.
    Unfortunately I can't advise about your remaining problem because I don't have a suitable Windows computer to try things out on. Maybe somebody else here can.
    I'd suggest you give a few more details about exactly how far you get and at which point things get stuck.
    Also, if nobody on this board can help then you could try another one. There are several boards here related to networking, of which the Tiger Forums Getting Online & Networking one seems to be the most lively.
    MacBook (OS 10.4.8)     iMac G4 (OS 10.3.9)

  • File Sharing on a Network and it only works one way

    I recently configured a new wireless network, and want to fileshare between my Mac and old PC. I have followed several tutorials, and I can read/write to the Mac from the PC. However, when I try to connect to the PC from the Mac, it asks for username and password. I type in the only user name and password setup on the PC, and it says I do not have access to that server. Any ideas?

    There is a "Server" service, and it is running on the laptop. The file I needed to move was ~150GB - wifi would be faster than OneDrive. You can appreciate my desire for full gigabit speed :)
    I can connect to the laptop from the desktop over wifi. So the functionality of sharing is all there for me. But I am completely unable to set the wired network's location to "Private", which essentially enables Windows Firewall rules under the hood that
    block any file sharing connections.
    I can manually edit the firewall rules, but these apply only to network location profiles, i.e. "Domain", "Public", "Private", or "All".
    I'll post a few screenshots to try and make this more clear.
    Here is my wifi connection. Highlighted in red you can see the option to enable file sharing. Prett slick.
    Here is a screenshot of my wired connection. As you can see, the option to enable sharing is completely missing. 
    The only explanation I can come up with for this is that it is an "Unidentified network", however on the other end of the cable is a desktop with the same connection settings running the same OS with the same updates and on that machine the network is set
    to "Private" and has file sharing enabled. The option to enable or disable file sharing does not appear on the desktop either. The only difference between the two is that the network was enabled on the desktop prior to updating to Windows 8.1 (from Windows
    8), the laptop had Windows 8.1 clean installed.

  • How do I correct File Sharing problems between 2 Lion installs?

    I have having a strange problem with file sharing between 2 mac's that have Lion Installed. One is a MacPro with a clean install of Lion and the other is a MacBook that was upgraded with Lion. Both systems have file sharing enabled (just public folders for now) and I cannot connect from the MacPro to the MacBook. The other direction works fine (MacBook to MacPro).
    The MacBook shows up in the finder of the MacPro, but when I click on it, it says "Connection Failed". It does then even when I "Connect As" and explicitly put in the user and password of a user on the MacBook.
    The only way to connect is to use the "Connnect to Server" optin in the finder window and use the IP address of the MacBook and explicitly use a valid user and password (guest will not connect from this method either)
    I have rebooted both machines and the router and have "repaired permissions" on the MacBook HDD.
    Any ideas?
    (I'm sure I can do a clean Lion install, but this is a real pain to get all of my wife's data backed up properly)
    Thanks!

    I get the same thing  -- this post makes me feel a bit better, actually .
    Please see my post here: Idiosyncratic File Sharing Failure with Lion

  • File sharing with 10.2.8 and 10.5.4

    im running 10.2.8 on my iBook G3 Clamshell, and i want to share files with my MacBook running 10.5.4. I can access my iBook through my MacBook, but i can't figure out how to access my MacBook through my iBook. How do i do this?

    I don't run 10.2, but I experienced the same problem with 10.3, able to connect the G4 to the Intel but not the other way around.
    After trying various things, this technique worked for me.
    Obviously you have file sharing enabled on the Intel.
    Then go to its System Preferences > Security > Firewall, and select Allow all Incoming connections which essentially turns Leopard's Application Firewall off.
    Close Sys. Prefs.
    Now on the G3 Connect to Server, choosing the correct name for the Intel, and you should be able to connect. Open a file on the MacBook just to confirm it.
    Then on the MacBook, open Sys. Prefs again and then change your firewall setting to the third setting, Set Access ....
    Close Sys. Prefs.
    Back on the G3, select the mounted MacBook network and eject it.
    Once again Connect to Server, and it should do so, this time with the MacBook's firewall active.

  • Help with file sharing

    I am unable to find the "apps" selection under device in itunes (windows) now and thus no longer have access to file sharing . I do have an app on my ipod touch 5 that requires file sharing to copy files from/to. That app is "my disk". I presume that this app is no longer recognized by IOS as a file sharing app. Can you shed any light on this. The App works fine otherwise. can anyone shed light on this?

    Even if you have printer and file sharing enabled, you still might not be able to perform those operations if your firewall is blocking those requests.
    I ran into this exact issue the other day while setting up a wireless for someone. 
    They have Norton Security.  I went in to the firewall and indeed found that file sharing and printer sharing was blocked.  I unblocked it, and everything worked fine.
    Much to my dismay, the Norton Firewall seemed to keep on changing its mind every time I rebooted.  I eventually turned off Norton and turned on the Windows firewall AND ENABLED file and print sharing (it's not enabled by default).
    The person that I have set this up for is happy with that configuration, but I really want to figure out what the deal is with Norton.
    So, bottom line, check your firewall.

  • Automatically reset file sharing in Server

    Hi everyone.
    I have a Mac mini with Server (Mountain Lion) and file sharing enables. When I turn tehe unit on, computers on the same network can't find the shared folders until I turn file sharing off and on again.
    Does anyone knows what's happening?
    Is there a way to automatically do this (turn off and on)?
    Thanks

    Everything you can do in the Server.app you can do via the command line.  For example, you can setup a launchd script to execute the following commands:
         serveradmin stop afp
         serveradmin start afp
    You can find out more about serveradmin via terminal, with the command
         man serveradmin
    The problem you describe sounds unfamiliar to me.  You should look at the server logs to see why afp is not working.

  • Need help setting up a file sharing with VISTA

    Hi,
    Can somebody help me with setting up a connection to a Windows Vista computer. I followed all the instructions from this forum but still it doesn't work.
    Here is what I'm doing:
    1) Sharing -> File Sharing -> enabled
    2) Sharing -> Options -> activating SMB
    3) Network -> Options -> WINS -> "WORKGROUP"
    4) Network -> Options -> 802.1X -> activating 802.1X
    Under Sharing I see a lable which tells me that Windows user can access my computer via the address smb://x.x.x.x
    In Windows this address doesn't work and I cannot see my Mac computer nor can I see the windows computer on the mac.
    It worked so well with TIGER.
    Do you have set the DHCP to automatic address on both, Mac and windows or do you use a static ip address?

    In windows when you do "map network drive" you need to enter "\\server\share" (without quotes).
    In Vista, go to the Windows Button > Computer. The "map network drive" option is in the bar in the top of the window. You may need to enlarge the window or click on the little expand arrow to see it.
    smb://server is used when you're connecting to a windows share from the MacOS.

  • File sharing timing out

    Hi,
    I have file sharing enabled on my older powerbook and newer macbook to share files back and forth.  But often my powerbook will disappear after a few minutes from the shared list in finder.  If I will close the lid and reopen it will come back and this behavior repeats.  Anyone know what I can do to troubleshoot this?  Thanks!
    rc

    Several restarts later and it is still doing it. I can connect to others, but this one machine doesn't want to go. Anybody?

  • Must File Sharing Always Be Off To Let HAL Sleep?

    Hi All!
    I just found out after a family networking experiment that our eMac and iBook won't go to sleep by themselves anymore so long as File Sharing is on. Is this supposed to be this way and can this be fixed? Both machines are running 10.4.10.
    Thanks for any advice!
    Trudi

    I never put my Macs or PCs to Sleep, but just tried it with File Sharing enabled... no problem!
    Just asking, are others connected when this is attempted?
    Any 3rd party USB, PCI, or other things connected?

  • SMB file-sharing only works if Firewall is Disabled

    On my Mac, I've turned on File Sharing, enabled SMB sharing, and set the firewall to "selected services and applications" (SMB is listed as a service in the firewall application list). I cannot connect to the Mac from a Windows XP machine.
    If I turn the firewall off, however, I can create a connection and transfer files from the PC client side. In addition, once I have established a connection I can then re-enable the firewall and continue transferring files.
    Has anyone else seen this?
    Jeff

    file sharing seems to be working... you will probably have to authenticate prior to beginning the file transfer though, so that is likely what is failing in the first instance.

  • File sharing between rMBP and iMac massive bugs.

    I recieved my new rMBP this week to replace my Macbook Air and join my iMac and Mac mini and immediately came across a problem.
    Ive always had file sharing enabled on all computers and sent and recieved files to the iMac from the Macbook Air with ease.
    However I tried to copy a file from the iMac to my rMBP and was provided with an error code (-8000 something) and was forced to relaunch finder.
    I brought the Macbook Air back up (incidently I used migration assistant to copy files and settings over from MBA) and it was able to send and recieve files from iMac with no problems.
    The first thing I notice is that the rMBP asks for an admin password to write to the iMac - the MBA doesn't. If I check permission settings on folders from the iMac from both machines they both have the same permissions set so I can't understand this.
    Now the error code when trying to copy from rMBP to iMac doesn't appear - instead I send a file and Finder goes crazy and copies a 0 byte file with the same file name onto the iMac thousands of times until I force Finder to relaunch again.
    Incidently I can send files to and from the Mac Mini without any issues - and I can as of now recieve files from the iMac ok, but not send to.
    Its a very odd bug, ive tried repairing permissions on both machines and restarting both but ot no avail. Can anyone think of anything to delete/reset/try to fix this odd behavour?

    Back up all data. Don't continue unless you're sure you can restore from a backup, even if you're unable to log in.
    This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.
    Step 1
    If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. To do that, unlock the preference pane using the credentials of an administrator, check the box marked Allow user to administer this computer, then reboot. You can demote the problem account back to standard status when this step has been completed.
    Triple-click the following line to select it. Copy the selected text to the Clipboard (command-C):
    { sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -R $UID:staff ~ $_ ; sudo chmod -R u+rwX ~ $_ ; chmod -R -N ~ $_ ; } 2> /dev/null
    Paste into the Terminal window (command-V). You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
    The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
    Step 2 (optional)
    Step 1 should give you usable permissions in your home folder. This step will restore special attributes set by OS X on some user folders to protect them from unintended deletion or renaming. You can skip this step if you don't consider that protection to be necessary, and if everything is working as expected after step 1.
    Boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
    When the OS X Utilities screen appears, select
    Utilities ▹ Terminal
    from the menu bar. A Terminal window will open.
    In the Terminal window, type this:
    res
    Press the tab key. The partial command you typed will automatically be completed to this:
    resetpassword
    Press return. A Reset Password window will open. You’re not  going to reset a password.
    Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
    Select your username from the menu labeled Select the user account if not already selected.
    Under Reset Home Directory Permissions and ACLs, click the Reset button.
    Select
     ▹ Restart
    from the menu bar.

Maybe you are looking for

  • Flash Player does not work in my blog

    Flash Player does not work in my blog This is my blog : <a href="http://la-fitness-hours.blogspot.com">la fitness hours</a> http://la-fitness-hours.blogspot.com

  • Shudder on playback

    Hi everyone, i am at my wits end, Ive bought the I mac to do some domestic video editing and spent the last month learning the package, ive imported a HD video from my camcorder and split it up added transistions and audio, im now ready to export it

  • Calendar off by one day

    Just noticed today that my Palm Desktop has shifted all of my recurring dates between April and November back one day. Most things, like birthdays, are all off one day during this time frame (every year). It also shifted some non-recurring events bac

  • HT1338 My Mac says updates were installed for Keynote, Pages & Numbers but when I check the versions they are still the old versions.

    My Mac says updates were installed for Keynote, Pages & Numbers, however, the version number shows to be the old version...   If check for updates, it's telling me no updates are available...

  • Yahoo Messages Not Pushing Through.

    I have a Droid Razr M and have been having an issue with my Yahoo app not pushing my emails through since Tuesday afternoon. If I open the app it'll update and my emails will be there but they're not coming through on their own. Two came through this