29      iPhone_iPad_Mac_apple

Is my Mac hacked?

Hi Mac users,

I received an alert from Drive Genius 4 that certain login files were changed and that this could be done by malware/spyware.  When I selected the option to view those files, they were:

- com.apple.RemoteDesktop.PrivilegeProxy.plist

- com.apple.RFBEventHelper.plist

- com.apple.screensharing.plist

The path of these files is: My Macbook Pro/System/Library/LaunchDaemons/

The file names were scary.  My Screen Sharing and Remote Desktop preference files were changed without my approval in the LaunchDaemons folder.

- Is my Mac hacked?

- What can I do to make sure?

- What can I do to stop this "hack session" from proceeding?

- Is it safe to just delete the plist files to be sure?

- Any other steps I can take?

Please help.

Thanks!

Here's  a screenshot of the file path:

As such, we can't clearly see who modified the files, but there are chances the Mac may have been hacked. The files/services can be disabled for safety. Open Terminal and type the following command:

sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.RemoteDesktop.PrivilegeProxy.plist

Repeat the above step for each of the plist files. This will prevent modification of the files in future.

Thanks bajjibala! 

Are there any apps that may stop working if I deactivate these files?

If I want to reactivate these files what would be the command then?  (Or I needn't worry about that).

Thanks again!

Remove the useless, time-wasting "Drive Genius" according to its developer's instructions. Back up all data before making any changes. Then enjoy life.

Thanks!

Don't thank people for giving you incorrect advice.

This thread hasn't been updated in over two years and is horribly out-of-date.

I strongly suggest you start a new thread for your specific question and hopefully you will get a better answer.

最後更新：2017-08-23 19:56:10

  上一篇： My external drive indicates  "owner enable...

  下一篇： iOS devices internet connection problem