Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: pggood
pggood Author
User level: Level 1
11 points

Have I been hacked?

I've been having serious problems with my Mac. Safari is unusable and now if I open Finder my computer comes to a halt. Running Disk Utility several times I always have the following at the end of the repair disk permissions. I dont know why ruby, gem and tmail would be installed on my machine. I do use Unix for some basic unix connections and run Matlab but don't think I should have tmail or gem on there. Does anyone know how to remove these programs if I should? Will an anti-virus like Sophos check for this?

Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MailFlags/cdesc-MailFlags.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MailFlags/flagged%3d-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MailFlags/flagged%3f-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MailFlags/replied%3d-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MailFlags/replied%3f-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MailFlags/seen%3d-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MailFlags/seen%3f-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/each_port-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/inspect-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/new-c.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/new_mail-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/new_port-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/reverse_each-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/reverse eachport-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/Maildir/unique_number-c.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MaildirPort/cdesc-MaildirPort.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MaildirPort/move tocur-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MaildirPort/move tonew-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MessageIdHeader/cdesc-MessageIdHeader.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MessageIdHeader/id%3d-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MessageIdHeader/id-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/cdesc-MhMailbox.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/close-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/directory-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/dirname-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/each-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/each_mail-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/each newport-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/each_newmail-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/each_port-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/inspect-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/new-c.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/new_mail-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/new_port-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/reverse_each-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhMailbox/reverse eachport-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MhPort/cdesc-MhPort.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeAuto/cdesc-MimeEncodeAuto.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeAuto/exec-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeAuto/new-c.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeMulti/cdesc-MimeEncodeMulti.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeMulti/exec-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeSingle/cdesc-MimeEncodeSingle.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeSingle/exec-i.yaml
Open error 5: "Input/output error" on System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/doc /actionmailer-1.3.6/ri/TMail/MimeEncodeSingle/on_binary-i.yaml

Macbook Pro, Mac OS X (10.6.6)

Posted on Feb 14, 2011 11:20 AM

Reply
6 replies
User profile for user: WZZZ
WZZZ
User level: Level 6
13,220 points

Feb 14, 2011 12:53 PM in response to pggood

You could try repairing the Drive with Disk Utility. You will need to boot from the install disc. See "Try Disk Utility"
http://support.apple.com/kb/TS1417

If you are able to repair the drive, then boot back normally and try repairing Permissions from DU.

Could be the drive is failing. See if it says SMART Status verified in DU.

Run the demo of Smart Utility

http://www.volitans-software.com/smart_utility.php
Reply
User profile for user: Linc Davis
Linc Davis
User level: Level 10
209,541 points

Feb 19, 2011 8:17 AM in response to pggood

I'm glad you were able to recover from your problem. Just a comment: Repairing permissions is by far the most often recommended troubleshooting step in these forums, and by far the least likely to be correct. Under most circumstances it does no harm apart from wasting time, but when you have a damaged storage device, any write operation may make the damage worse and data recovery less likely. Permission repair can potentially cause many thousands of writes.

When there's a possibility that your boot device is malfunctioning, the first thing you should do is NOT to repair permissions, but to make a complete backup, without overwriting any previous backup.

The typical situation in which repairing permissions might be the right thing to do is where you start having trouble right after running an installer, especially a third-party installer, that asks for root privileges.
Reply
User profile for user: WZZZ
WZZZ
User level: Level 6
13,220 points

Feb 19, 2011 9:32 AM in response to Linc Davis

Repairing permissions is by far the most often recommended troubleshooting step in these forums


Where are you getting this from? No one here told him to repair Permissions as a first troubleshooting step. I said repair the drive with DU and then repair Permissions, but only if drive repairs were successful. I also told him the drive might be failing and to see if SMART Status was verified or not and also run SMART Utility to test the drive health. I don't agree at all that Permissions repair is the most often recommended troubleshooting step here. That is simply not the case. In fact, I would have to say it is one of the least often recommended steps. Of the regular helpers here, I can't think of anyone who sees it as a panacea or anything to be done for regular maintenance. You grossly underestimate the skills of the people helping out here. Most know that global Permissions repair from DU, except when appropriate, is rarely needed or helpful.



pggood: glad to hear you were able to get it sorted out. BTW, File Vault, as you discovered, can be a risky business.

Message was edited by: WZZZ
Reply
User profile for user: baltwo
baltwo
User level: Level 9
62,362 points

Feb 19, 2011 11:47 AM in response to pggood

Thanks for the feedback. Get a bootable, external HD (preferably FireWire, since it's 40-50% faster than USB 2 and designed for data transfers), make a bootable backup/clone before updating/upgrading, using something like Carbon Copy Cloner or SuperDuper!, and ensure that it's bootable and works like the original. Then, keep it up to date. That allows you to restore the previous good state without having to reinstall, manually copy, or reset anything. See these for details:

http://www.macmaps.com/backup.html
http://www.thexlab.com/faqs/backuprecovery.html

If you only have a Time Machine backup, ensure that you can reliably restore it to another disk/volume/partition on a regular basis.

Finally, routinely turn off file vault to ensure that you can.
Reply

Have I been hacked?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.
Learn more Sign up