User profile for user: ChaseDaniel
ChaseDaniel Author
User level: Level 1
19 points

Is this a normal list of disks and partitions?

Is this all normal? I have a 2016 Macbook Pro with a 512 gb SSD drive and no other drives or devices attached. I'm wondering why there are 17 disks and why there are all of these tiny partitions. I can't unmount the "OS X Base System" volume (under the disk) in Disk Utility which sort of would make sense except there's an eject arrow right there.


-bash-3.2# diskutil list

/dev/disk0 (internal):

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme 500.3 GB disk0

1: EFI EFI 314.6 MB disk0s1

2: APPLE_HFS U 500.0 GB disk0s2


/dev/disk1 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme +2.1 GB disk1

1: Apple_HFS OS X Base System 2.0 GB disk1s1


/dev/disk2 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +5.2 MB disk2


/dev/disk3 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk3


/dev/disk4 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk4


/dev/disk5 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk5


/dev/disk6 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk6


/dev/disk7 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk7


/dev/disk8 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +6.3 MB disk8


/dev/disk9 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +2.1 MB disk9


/dev/disk10 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +1.0 MB disk10


/dev/disk11 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +2.1 MB disk11


/dev/disk12 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk12


/dev/disk13 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk13


/dev/disk14 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +1.0 MB disk14


/dev/disk15 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +6.3 MB disk15


/dev/disk16 (disk image):

#: TYPE NAME SIZE IDENTIFIER

0: untitled +524.3 KB disk16


-bash-3.2#

MacBook Pro with Retina display, macOS Sierra (10.12.3), null

Posted on Jan 28, 2017 11:51 PM

Reply
6 replies
User profile for user: S.U.
S.U.
User level: Level 6
9,601 points

Feb 3, 2017 1:12 PM in response to ChaseDaniel

No fun at all really. It sounds like the disk images are being synced.


If you go to Disk Utility and click on the disk by brand name, and then on the Partition tab, does it show all of these disk images there?


If you do a Spotlight search for disk images, do you see them? Can you look at them individually, see what they are, reveal them in Finder, and possibly delete them?


No idea where to go from here, but it might be worth taking this into an Apple Store for them to look at.


Good luck!

Reply
User profile for user: ChaseDaniel
ChaseDaniel Author
User level: Level 1
19 points

Feb 8, 2017 6:11 AM in response to S.U.

Hey thanks for the reply. No it didn't show any of them anywhere they were well concealed. I still don't know 100% what any of them were but I'm assuming metadata. My 6 Macs ALL have been infected with a rootkit (virus) via ssh access to my computer thanks to the preinstalled ssh, and many other forms of remote access, included with every computer.


The guy at the Apple Store was seriously clueless and thought I was like some kind computer programmer for knowing any of this. He said they don't even learn the Terminal anymore when being trained. I swear the last time I took a computer in for service at an Apple retail store they actually opened the thing up right there in the store and fixed it. I guess this is no longer the practice and was told it'd be shipped off for 5 days. I still don't want to do this and am pretty disappointed/shocked that I was told not one person who worked there had any clue how to use the Terminal. Support over the phone has been similar.


While I love their friendly attitude, I'm worried about future issues considering I was told how wrong I am by a number of people who all had minimal knowledge of the inner workings of the devices they troubleshoot on a daily basis.


I had an Aaris router (super common) from Time Warner Cable which is also extremely easy to hack thanks to a well publicized exploit where Aaris lists their passwords on a website for technicians to use...the same password is used for every single Aaris (Motorola's brand) router for technician/installer access just changed daily. Wonder what genius thought of that idea?


The password ("word of the day") is super easy to get a hold of and with it hackers are one step away from a computer which isn't a huge leap considering that the default firewall is protecting Apps only and only on incoming traffic..even in "Stealth" mode, and passwords can be entered infinite times (brute force attacked).

Reply
User profile for user: S.U.
S.U.
User level: Level 6
9,601 points

Feb 8, 2017 2:54 PM in response to ChaseDaniel

There are geniuses and then there are geniuses. I guess that with Apple's growth, there are more of them with less training. AppleCare by phone can be just as bad, but there is at least the possibility of being able to talk to someone more senior and knowledgeable. If you have AppleCare, it might be better to try calling them up and see if you can get tranferred to somebody who actually knows something. The upper tiers do have some very knowledgeable people.


Not sure what they have in mind for shipping it off for 5 days. That doesn't make much sense. If it's just for troubleshooting, you could probably do that on your own. My guess is that they would run an extensive hardware test and then erase the drive and install a bare bones version of the OS and declare it fixed. But it would only be fixed until you reinstalled your system and everything got synced again.


You might try downloading and running Etrecheck and take a close look at the report and see if anything jumps out.


https://etrecheck.com/#download


Good luck!

Reply
User profile for user: ChaseDaniel
ChaseDaniel Author
User level: Level 1
19 points

Feb 12, 2017 2:33 PM in response to S.U.

Yeah I've definetely been using Etre Check and it seems very necessary but I end up with more questions than when I started. I have lots of shell scripts attached to agents/daemons, MRT is broken, and unsigned certificiates.I have tried to get support for this over the phone and at the store but its like I'm speaking Japanese.


I was really hoping they'd be able to do what you suggested too but no such luck. I wish they had one certified Steven Hawking on duty at all times bc the geniuses at my Apple store seem like they all have a particular skill but arent very technical and changing a cracked screen is not exactly rocket science.


I've been resolving this sort of on my own but I may actually turn to some government resources as paranoid as that sounds because I've uncovered quite a papetrail of evidence as to what/who may be responsible. What's funny too is that so many of the critical files to allow this to happen are included with Mac, it's just about how they are configured. I've been learning a lot about hardening Linux terminals and got say pretty dissapointed in the default configuration and how vulnerable it leaves everyone.

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Is this a normal list of disks and partitions?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up