New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

Security breach or back door in File Sharing?


Post Reply New Thread Subscribe

 
Thread Tools
Sam777

 
Member Since: Jan 20, 2012
Posts: 5
Sam777 is on a distinguished road

Sam777 is offline


Hi guys,

My 1st time posting here. Just got my 1st mac Mac Mini Server 2012 last December. Mac OSX Lion seems OK when compared with Windows 7.

But today I noticed something fishy in File Sharing. If I go from 'Apple Icon'(top left menu item) --> System Preferences --> Sharing, then
choose 'File Sharing', click the Option button (available from attached image),

now this is when things got a bit fishy, I can see 2 other accounts that have no name beside my Sam account

And I have no way to remove those account since they don't exit and if I deselect the invisible account checkbox, it asked me for a password I have no idea of. See attached image.

Mac OSX Lion backdoor or virus to monitor user? Lucky me ahaha...

Seriously, has anyone see this before and know how I can remove it? It's making me kind of want to go back to win7.


Thanks

Sam
Attached Images
File Type: png Screen Shot 2012-01-21 at 4.22.04 PM.png (218.3 KB, 55 views)
QUOTE Thanks
Shikarnov

 
Shikarnov's Avatar
 
Member Since: Feb 26, 2008
Posts: 542
Shikarnov is a jewel in the roughShikarnov is a jewel in the roughShikarnov is a jewel in the rough

Shikarnov is offline
Do these accounts show up in System Preferences > Users & Groups? If yes, you'll be able to remove them there.
QUOTE Thanks
Sam777

 
Member Since: Jan 20, 2012
Posts: 5
Sam777 is on a distinguished road

Sam777 is offline
No, these accounts do not show up in System Preferences > Users & Groups. That's the scary part.

Just a guess: Either this is a genuine bug or a GENUINE backdoor apple left for law enforcement officers to catch whatever . Too bad I don't have anything controversial on my HD ahahaha

Either way, THANKS Apple. I will use Boot Camp to run Windows 7 now.
QUOTE Thanks
McBie

 
McBie's Avatar
 
Member Since: Apr 26, 2008
Location: Belgium
Posts: 2,301
McBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to all
Mac Specs: 2013 MBA 13" - 10.9.5 & iPad - iOS 5.1

McBie is online now
I think you are cutting corners mate and jumping to conclusions without understanding the subject.
My suggestion is to search a bit more and read up on the " server " version of OS X.

Cheers ... McBie

A computer lets you make more mistakes faster than any invention in human history - with the possible exceptions of handguns and tequila.
The problem is not the problem. The problem is your attitude towards the problem. You understand ?
QUOTE Thanks
Lifeisabeach

 
Lifeisabeach's Avatar
 
Member Since: Sep 30, 2007
Location: Wilmington, NC
Posts: 6,933
Lifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond repute
Mac Specs: iMac i3 (mid-2010) + OS 10.9; TV 3; iPhone 5S; iPad 4

Lifeisabeach is offline
Quote:
Originally Posted by Sam777 View Post
No, these accounts do not show up in System Preferences > Users & Groups. That's the scary part.

Just a guess: Either this is a genuine bug or a GENUINE backdoor apple left for law enforcement officers to catch whatever . Too bad I don't have anything controversial on my HD ahahaha

Either way, THANKS Apple. I will use Boot Camp to run Windows 7 now.
Uh, yeah. Apple and they feds are out to get YOU. The rest of us, having never seen anything like that, must have been cleared without wiretapping measures.

*rollseyes*

We can probably help you figure this out. I haven't dealt with file sharing scenarios in a long time, so I'll muddle my way through this. First off… what's BEHIND that window in the master Sharing preference pane, in the list of shared folders? What happens if you disable SMB sharing? Reboot after doing so, then recheck that list. Are there other Windows computers on your network? If so, turn them off and see if, by chance, those are Windows user accounts logged into your Mac. Or just take the Mac off the network (unplug the network cable and turn the Wi-Fi off). I'm winging it here, so a couple ideas I have may be way off the mark. Only one computer in my home these days so I can't double check myself.


Please verify and include the exact model/year of your Mac and OS X version number (available from "About This Mac", then "More Info" on the Apple menu).
------
Links: Onyx | EasyFind | Apple Hardware Test | How to test your hard drive | The Safe Mac Adware Removal Guide | Uninstall MacKeeper
------
Lifeisabeach - Mac-Forums Member of the Month June 2009, Feb 2012, and March 2013.
QUOTE Thanks
Sam777

 
Member Since: Jan 20, 2012
Posts: 5
Sam777 is on a distinguished road

Sam777 is offline
Thanks for the suggestions. There is nothing behind Preference Pane, just a desktop image and browser in lower right corner.

I tried disable SMB sharing, turn WIFI off, delete all shared folders, then reboot, PROBLEM solved... just kidding, same problem. Will try to uninstall some rubbish mac osx app I installed next ...

Also installed Onyx yesterday, did some maintenance and cleaning run, didn't seem to help. I wonder if this is sign of some Mac OSX virus ...
QUOTE Thanks
Lifeisabeach

 
Lifeisabeach's Avatar
 
Member Since: Sep 30, 2007
Location: Wilmington, NC
Posts: 6,933
Lifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond repute
Mac Specs: iMac i3 (mid-2010) + OS 10.9; TV 3; iPhone 5S; iPad 4

Lifeisabeach is offline
Quote:
Originally Posted by Sam777 View Post
Thanks for the suggestions. There is nothing behind Preference Pane, just a desktop image and browser in lower right corner.
Not behind the Preference Pane… behind the advanced options popup.

Quote:
I tried disable SMB sharing, turn WIFI off, delete all shared folders, then reboot, PROBLEM solved... just kidding, same problem. Will try to uninstall some rubbish mac osx app I installed next ...
What rubbish would that be?

Quote:
Also installed Onyx yesterday, did some maintenance and cleaning run, didn't seem to help. I wonder if this is sign of some Mac OSX virus ...
Highly unlikely. To be pedantic, there are no viruses for OS X and only a handful of trojans. And for a trojan to be installed, it would have explicitly required your authorization with an admin name/password, and surely you haven't blank authorized just any old pop-up, surely…

As a troubleshooting step, create a new user, log out of the current and into that one. Does the problem continue?


Please verify and include the exact model/year of your Mac and OS X version number (available from "About This Mac", then "More Info" on the Apple menu).
------
Links: Onyx | EasyFind | Apple Hardware Test | How to test your hard drive | The Safe Mac Adware Removal Guide | Uninstall MacKeeper
------
Lifeisabeach - Mac-Forums Member of the Month June 2009, Feb 2012, and March 2013.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,640
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is online now
Run from OSX and install Windows 7? I have friends with Windows 7 who's systems are compromised weekly. Makes me $$$ fixing them but still, I sure don't want my computer doing that on me. Ditching OSX is not the answer.

Lifeisabeach has told you a few things to do and he is right, you do have a SERVER with a SERVER OS.

Also what RUBBISH apps did you install? Tell us as that might be the key to helping you. Did you install any Pirated versions of OSX applications or any Video codecs from Porn sites? Not trying to trap you, but trying to help.
QUOTE Thanks
Sam777

 
Member Since: Jan 20, 2012
Posts: 5
Sam777 is on a distinguished road

Sam777 is offline
Thanks for the suggestion. The rubbish app are those utilities like PlayOnMac, WineBottlerCombo, Tunnelblick, Viscosity, .... They may not be truely rubbish, so don't take my word for it, but to be safe, I will simply uninstall them. And no, I dont have pirated version of OSX app or codec

Quote:
As a troubleshooting step, create a new user, log out of the current and into that one. Does the problem continue?
Yes the problem continued.

I have tried to create a new user, assign admin right to it, and was able to deselect the On checkbox of that user by providing the right password in the screen shot page, then delete that test user account, everything works as expected except for the 2 outstanding mystery accounts. In my 'Users & Group' window, I only have 1 admin user account left, 2 mystery accounts still stayed.

I have decided to park this problem for now by: disable 'File Share' and 'Remote Connection to my PC', change password, also enable firewall and move on.

Thanks
QUOTE Thanks
McBie

 
McBie's Avatar
 
Member Since: Apr 26, 2008
Location: Belgium
Posts: 2,301
McBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to all
Mac Specs: 2013 MBA 13" - 10.9.5 & iPad - iOS 5.1

McBie is online now
Are you running BOINC on your OSX Server ?

Cheers ... McBie

A computer lets you make more mistakes faster than any invention in human history - with the possible exceptions of handguns and tequila.
The problem is not the problem. The problem is your attitude towards the problem. You understand ?
QUOTE Thanks
Sam777

 
Member Since: Jan 20, 2012
Posts: 5
Sam777 is on a distinguished road

Sam777 is offline
Was running Boinc. But uninstalled it before the problem.

It only makes Mac Mini super hot and make u feel like achieving something but ... pointless
QUOTE Thanks
Lifeisabeach

 
Lifeisabeach's Avatar
 
Member Since: Sep 30, 2007
Location: Wilmington, NC
Posts: 6,933
Lifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond repute
Mac Specs: iMac i3 (mid-2010) + OS 10.9; TV 3; iPhone 5S; iPad 4

Lifeisabeach is offline
Are you using the server version of Lion? Are you even using it as a server? If the answer is yes, then no, then why not just install the regular desktop version of Lion and call it a day?


Please verify and include the exact model/year of your Mac and OS X version number (available from "About This Mac", then "More Info" on the Apple menu).
------
Links: Onyx | EasyFind | Apple Hardware Test | How to test your hard drive | The Safe Mac Adware Removal Guide | Uninstall MacKeeper
------
Lifeisabeach - Mac-Forums Member of the Month June 2009, Feb 2012, and March 2013.
QUOTE Thanks

Post Reply New Thread Subscribe


« iMac very slow to boot up - console messages | Seeking Applescript pro for a file search operation »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
file sharing dilemma kitfer Internet, Networking, and Wireless 4 09-30-2011 12:06 AM
File Sharing - "Snow Leopard" and Win 7 Tomel Internet, Networking, and Wireless 10 09-20-2011 01:53 PM
File Sharing + Printer Sharing (Changed Network Name and File Sharing Was Lost) killertofu Internet, Networking, and Wireless 1 05-05-2011 11:46 PM
File Sharing Problem marktpg Apple Notebooks 2 02-17-2011 04:00 PM
Can you guys open this site? Desolate One OS X - Apps and Games 13 04-29-2005 01:23 PM

All times are GMT -4. The time now is 07:48 AM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?