Apple Event: May 7th at 7 am PT
In my cache folder (myname/Library/Caches), I see a file called org.python.python.app.
I have noticed it there for awhile, but it does not have an icon, but a generic icon with a crossed circle on it.
I assume this is some leftover thing from somwhere??
MBP 15-inch 2.66 GHz Intel Core i7 / 4GB SDRAM / AG Screen (Mid 2010), Mac OS X (10.6.7), iPhone 3GS (32GB), AEBS DB II (Late 2009), Apple Wired Keyboard/
Python is a software language. It is provided as part of the OS installatio (along with Perl, Ruby etc)
The cache is harmless; leave it be.
Well, with today's update via Apple, they have laid the groundwork for future behind the scenes updates to SL's built in malware detection tool.
But, as with all things regarding Mac OS Security, commen sense is still the top reason on the list that will help you stay safe. That may be common sense making sure you install the latest updates from Apple, use ClamXav to scan files (more so you don't pass along windows threats to your windows using friends), or just use caution when opening email and other downloads.
I say this because AV "software" is only as good as the definitions built into it. Threats can come out for Mac that Apple has not had enought time to update it's own defenses (same for other A/V apps).
I do, however, keep the Safari "open safe files" off just to provide one more obstacle for a threat to get by. Since I keep my downloads folder clean and visible in the dock, it's very easy to keep a watchful eye on it and get to it quickly.
I can't say enought positive things about ClamXav. Besides being free, it provides passive (on-demand) support with regular updates and has the ability to be more if you so desire. It has a good support forum as well. Be sure to goto http://www.clamxav.com/ to get it, as I think there is someone out there trying to spoof that app.
For now, I just have my one account, but depending on your usage (and how much you tinker with the system), a standard account can be another line of defense.
I am really happy to see Apple being more proactive about this, and combined with ClamXav, I feel more confident going forward that Apple is making sure their users are protected.
Hey powerbook1701 and noondaywitch,
I'm still on this python thing.... I just went into "System Profiler" and under applications, and it lists that org.python.python.app was modified yesterday (5/31) at 5:08PM. Now, the only thing I was doing at that time yesterday was surfing the internet (trusted sites), iTunes and Yahoo! email. So, how can a file that is in my Library Cache get modified, like that? I went to finder and did "Get Info" on the file and it has the "hide extension" tab selected but it is greyed out and I can't deselect it.
Just ran ClamXav and it doesn't show anything but...
I'm sorry to keep on this python thing but it is starting to really freak me out. Should I just drag it to trash and get rid of it? And how can it update itself? I was using Safari and iTunes at the time, could that be it?
I've got to download the latest security update. But, this python thing is really bugging me.
@powerbook1701 - since you first identified the python app, does it show up at all as being modified?
Sorry guys for being a pain but this is really bugging me. And I really appreciate the valuable information you have provided and taking the time and effort to do that for a Mac newbie!
Look forward to your replies!
As I said before, Python is a software language. If that file has updated, something you've been using has been written with Python.
@noondaywitch,
I agree but I'm a newbie so am not doing anything intensive at all.
Here's what I do on a daily basis:
Safari: surf internet mainly to read news on trusted news sites (no downloads) and I have a Tumblr blog which I log into and update daily (upload stuff to Tumblr servers but don't download anything).
iTunes: organize my music library and purchase music from iTunes store. Again, no "external" downloads etc.
iPhoto: not everyday, more like once a week. Import photos into iPhoto.
Yahoo! mail: daily basis but never open spam and never open anything suspicious. I'm a miserable, lonely old "git" who doesn't get any emails anyways.
Now, to backtrack and correct myself...
I have a Flickr account, where I upload photos using iPhoto. I also, occasionally download photos from Flickr. Everything goes to my download folder. On rare occasions, have downloaded photos from Google search. But, again to download folder and I use "Get Info" to see if there is anything weird prior to opening them. Plus, I've never noticed anything weird happen after opening them.
That's really it. Pretty lame usage actually for a fairly powerful machine as the MacBook Pro is.
Another thing to mention. When I first setup my Airport Extreme network, I used lousy passwords etc. I always used WPA2 personal though. I've since gone and changed the AE passwords to long, random passwords. And checked other settings. I "think" I'm fairly secure now.
The one thing though that I don't understand is the keychain stuff. I've read up on it but not sure if I have it setup right (access wise etc.).
So, again that's it. I don't go to those P***n sites or do anything weird. All I do is pretty basic and safe. I once got redirected to another site but didn't do anything and used Force Quit to shutdown Safari.
Anyways having said that, can any of what I do explain the use of Python and that app getting modified?
I'm going to run ClamXav again. Would it hurt just to trash that python app from my cache folder?
Please let me know your thought and I really do appreciate the kind help!
There are thousands of Python scripts on your computer. I just ran FindAllFiles on ".py" and it hit 11,200. I would guess that the system is running them almost constantly to do a myriad of background housekeeping processes, but they should not be modifying the user cache. That would more likely come from one of the applications you are running that also uses Python to do common tasks.
My understanding of User Cache files is that no harm can come from deleting them as they will just be re-created when needed. This could slow things down the first time task is run, but again, it will not hurt anything.
If you are curious to learn more about Python, see http://www.python.org/.
If it worries you, by all means delete it. If you visit the site or application that uses Python, the OS will regenerate another one!
I understand how when you don't understand something that it can by worriesome. But, in this case, I think you are ok. For one, ClamXav does not recognize it as dangerous (and it does a pretty good job of it), two, I visited an Apple Retail store and checked multiple computers and they all had it in the System Profiler. The Apple Retail stores systems start fresh overnight by pulling a disk image from a secure instore server (to fix anything customers played with during the open time). It got there in the am, so I am confident that whatever this is (and someone mentioned earlier what it was used for), it must be needed.
While I don't understand it, my research and opinions read here make sense that this is not malware. Yes, I started this thread because it was something I didn't recongnize. But, after a mission of research, feel that things are fine..
Hello MadMacs0, noondaywitch and powerbook1701,
Thanks for having patience with me and for all the great replies! From everything you all said, I feel safe. I also ran ClamXav twice yesterday and everything is clean on my home directory. So, I will carry on and feel much better now.
Also, the ClamXav has been a fantastic suggestion to use. I was very impressed on the ease of setup and use. Amazing too, that's it's free. When I was in the Windoze world, I spent a fortune on Norton and still had problems.
You all have been wonderful and the kind help has been greatly appreciated. I've been on other forums about other things (non Apple related) and have gotten condescending comments since I was a newbie. I haven't ever experienced that here and it is very refreshing!
Going to pick up those Pogue books that powerbook suggested.
Thanks again folks and again, much appreciated!
david
Glad to be of help. Be sure to stop by the ClamXav forum and let them know that you like ClamXav as well (as it helps others when they are thinking about using ClamXav). There is a topic for it here:
http://www.markallan.co.uk/BB/viewtopic.php?t=2304
If you have any specific question about using ClamXav (before you try something new), be sure to stop by there and take a look.
Many questions are already answered here:
http://www.clamxav.com/documentation.php
One day you won't be a newbie and you'll be helping others with what you have learned.
org.python.python.app
