Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

"Updates" shows application not purchased

The nbame of the app is: Angry Bird. I never purchased or installed it, but when I click on update a windows shows up telling me: "You have updates available for other accounts Sign in to asdfff23011@mail.ru to update applications for thgat account." I never saw this emailaddress...

Has my account been hacked? I'm a bit in a panic...


User uploaded file

MacBook Pro, Mac OS X (10.7)

Posted on Aug 2, 2011 2:45 AM

Reply
8 replies

Aug 3, 2011 10:25 AM in response to Hartmut Hillmann

PS - I was brain storming this morning about how to locate these pirated apps more easily and came up with this idea. So if this occurs in the future you can try to locate it yourself, especially if the students are less forthcoming about their downloading capers.


All MAS apps have a MAS receipt in their app bundle. Check any app acquired from the MAS. Right click on the app's icon in your Apps folder and choose Show package contents. In the Contents folder is a _MASReceipt folder and in that folder is the coded MAS receipt. It has the Apple ID of the MAS account that bought/acquired the app from the MAS. It is that receipt that the MAS uses to alert you that an app has an update. There would not be a notice of an update with someone else's Apple ID showing in the MAS on your Mac, if there was not an app with a receipt from this person's account somewhere on your Mac.


Download the free app FindAnyFile (FAF);

http://apps.tempel.org/FindAnyFile/


This app is easier to use and seems to be more powerful than Spotlight. Open FAF and in the box type _MASReceipt and press Find. It should come up with a list of every app on the Mac with a MAS receipt. The odd app out should be the pirated app.

Feb 18, 2012 4:54 AM in response to Hartmut Hillmann

Hi,


I'm having a similar problem- however, as a home user, it looks like I've downloaded something not to my liking. :/


My MAS states that I have an update of Lion waiting... but I've never purchased Lion. I've purchased a total of 10 apps from the MAS, from what I can see they're all legitimate. When searching my HD for rogue _MASReceipt folders, all that come up (even on a root search using FAF) are the correct 10 apps.


When I go into the MAS and pull up each app, it is showing as being installed (so, I don't have one app spoofing itself as Lion this way).


A google of the foreign Apple ID gives no hits.


A text search of every file in my Application folder gives no hits on this Apple ID.


The receipt file inside of _MASReceipt is encrypted- there are no Apple IDs in plain text form. So, examination of this file yields nothing as well.


How do I identify the pirated app so that I can get rid of it?!? I would like to actually upgrade to Lion; and I'm prevented due to this thing.


Thanks.


<Email Edited by Host>

Feb 18, 2012 2:20 AM in response to Gallamor

Issue resolved. *sigh*.


I had loaned my recovery disk to a friend to repair his hard drive so that *he* could upgrade to Lion. He had placed the Lion installer on *this* disk in the course of his recovery (so he wouldn't have to re-download). Of course, I had this disk attached and had forgotten about this (I loaned him the disk in mid-2011, and have not really looked at it since).


I keep the disk mounted,therefore MAS found his installer file and thought I needed an upgrade, not a purchase.


Mystery solved.


I can go buy Lion now. 🙂

"Updates" shows application not purchased

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.