Strange file

[Peter James]

Every time I switch my iMac I get a warning about this file,
24A6CD75-73F9-4152-A1AD-69061B84C841” a file that is said to be a danger to my
computer, and the file should be deleted. Every time I bin it and empty the
bin the next morning the file is back and the same warning issued.
Any guesses by anyone what it is?
Peter
--
The email shown is false. If you need to contact me then try peterATpfjamesDOTcoDOTuk

Addresses are given to us to conceal our whereabouts.
Saki (H.H.Munro) 1870 - 1916

[Peter James]

On 15 May 2022 at 08:48:08 BST, "Alan B"
<alanrich...@nospamgmail.com.here> wrote:

> Peter James <pfjam...@gmail.com> wrote:
>> Every time I switch my iMac I get a warning about this file,
>> 24A6CD75-73F9-4152-A1AD-69061B84C841” a file that is said to be a danger to my
>> computer, and the file should be deleted. Every time I bin it and empty the
>> bin the next morning the file is back and the same warning issued.
>> Any guesses by anyone what it is?
>> Peter
>

> Some for. Of malware probably. Download and run Malwarebytes (free version)
> and see if they gets rid of it. Are you running any antivirus software?

No I'm not. I always was told by people on this NG that antivirus software is
not needed on a Mac. Have things changed? I am non-technical and ignorant in
things pertaining to anti-virus etc.

[J. J. Lodder]

Peter James <pfjam...@gmail.com> wrote:

> Every time I switch my iMac I get a warning about this file,
> 24A6CD75-73F9-4152-A1AD-69061B84C841" a file that is said to be a danger to my
> computer, and the file should be deleted. Every time I bin it and empty the
> bin the next morning the file is back and the same warning issued.
> Any guesses by anyone what it is?

To begin with, where is it?
What does get info say?

Jan

[Bruce Horrocks]

Also what version of macOS are you using?

If you are running a reasonably recent version then there is no need to
install any 3rd party anti-virus products because macOS already includes
built-in anti-virus.

<https://support.apple.com/en-gb/guide/security/sec469d47bd8/web>
(See the "XProtect" sub-heading)

--
Bruce Horrocks
Surrey, England

[Jaimie Vandenbergh]

On 15 May 2022 at 10:57:08 BST, "Peter James" <pfjam...@gmail.com>
wrote:

> On 15 May 2022 at 08:48:08 BST, "Alan B"
> <alanrich...@nospamgmail.com.here> wrote:
>
>> Peter James <pfjam...@gmail.com> wrote:
>>> Every time I switch my iMac I get a warning about this file,
>>> 24A6CD75-73F9-4152-A1AD-69061B84C841” a file that is said to be a danger to my
>>> computer, and the file should be deleted. Every time I bin it and empty the
>>> bin the next morning the file is back and the same warning issued.
>>> Any guesses by anyone what it is?
>>> Peter
>>
>> Some for. Of malware probably. Download and run Malwarebytes (free version)
>> and see if they gets rid of it. Are you running any antivirus software?
>
> No I'm not. I always was told by people on this NG that antivirus software is
> not needed on a Mac. Have things changed? I am non-technical and ignorant in
> things pertaining to anti-virus etc.
> Peter

macOS has had builtin AV-type functionality (Gatekeeper, Xprotect,
System Integrity Protection and more recently a read-only operating
system volume) for years, so third-party AV certainly isn't generally
necessary.

However, when you have something that *definitely* looks dubious like a
GUID-named file throwing a warning (from the Xprotect database) then
it's totally worth downloading Malwarebytes (free, very good, on-demand
scanner - ignore its pleading to become paid) and running a scan just to
check.

Cheers - Jaimie
--
"History repeats itself. Has to. No one listens."
-- Steve Turner

[David Brooks]

IAWTP 🙂

[Peter James]

On 15 May 2022 at 22:18:11 BST, "Alan B"
<alanrich...@nospamgmail.com.here> wrote:

> From posts a few weeks ago I think Peter runs Monterey but only he can
> confirm that.

I am running macOS Monterey v 12.3.1. I always, as a non-techie keep the OS up
to date. That's the limit of my know-how.
I shall try MalWare Bites.

[Andy Hewitt]

On 15/05/2022 08:10, Peter James wrote:
> Every time I switch my iMac I get a warning about this file,
> 24A6CD75-73F9-4152-A1AD-69061B84C841” a file that is said to be a danger to my
> computer, and the file should be deleted. Every time I bin it and empty the
> bin the next morning the file is back and the same warning issued.
> Any guesses by anyone what it is?
> Peter

That filename looks very much like a photo file from WhatsAapp, which
has a very similar naming format. If you use WhatsApp, try a search for
some of the characters in that filename.

It could also be a legacy application registration code as a thought.

--
Andy H

[Andy Hewitt]

On 15/05/2022 10:57, Peter James wrote:
> On 15 May 2022 at 08:48:08 BST, "Alan B"
> <alanrich...@nospamgmail.com.here> wrote:
>
>> Peter James <pfjam...@gmail.com> wrote:
>>> Every time I switch my iMac I get a warning about this file,
>>> 24A6CD75-73F9-4152-A1AD-69061B84C841” a file that is said to be a danger to my
>>> computer, and the file should be deleted. Every time I bin it and empty the
>>> bin the next morning the file is back and the same warning issued.
>>> Any guesses by anyone what it is?
>>> Peter
>>
>> Some for. Of malware probably. Download and run Malwarebytes (free version)
>> and see if they gets rid of it. Are you running any antivirus software?
>
> No I'm not. I always was told by people on this NG that antivirus software is
> not needed on a Mac. Have things changed? I am non-technical and ignorant in
> things pertaining to anti-virus etc.
> Peter

As advice, it's really a matter of personal preference, IMHO. And will
open a large can of worms.

Personally I don't run permanent AV software (misnamed of course), but I
do have a couple of checking tools for any time I'm having trouble, and
just want to be sure. Although since I've been using a Mac for 28 years,
I've never found one - yet.

I use the free BitDefender app off the App Store, and otherwise let the
OS do it's job in the background, along with being a vigilant as
possible on clicking things.

I also install some of the Objectve-See stuff, which is very low on
system resources, and is well regarded.

https://objective-see.com

It's worth installing BlockBlock, LuLu, and Ransomewhere.

You could try running MalWareBytes, but for me, it invades the system
far too much for my liking in the last few years (they seem to keep
reminding you to upgrade to the subscribed version).

--
Andy H

[Chris Ridd]

On 16/05/2022 17:36, Andy Hewitt wrote:
> On 15/05/2022 08:10, Peter James wrote:
>> Every time I switch my iMac I get a warning about this file,
>> 24A6CD75-73F9-4152-A1AD-69061B84C841” a file that is said to be a
>> danger to my
>> computer, and the file should be deleted. Every time I bin it and
>> empty the
>> bin the next morning the file is back and the same warning issued.
>> Any guesses by anyone what it is?
>> Peter
>
> That filename looks very much like a photo file from WhatsAapp, which
> has a very similar naming format. If you use WhatsApp, try a search for
> some of the characters in that filename.

That's a good thought. However it is just the way that UUIDs are
formatted, and they are used extremely widely to produce unique filenames.

--
Chris

[Peter James]

I downloaded and ran MWB. It brought up six suspect files that it
"quarantined" somewhere. All now seems OK with no repititon of the warning
message.
Thanks for the advice, I shall try and run MWB once a week as someone
suggested here on the NG.

[David Brooks]

On 17/05/2022 08:18, Alan B wrote:
[....]
> Not directly related to your malware problem but if your Mac is “playing
> up”, you might be interested in a tool called Etrecheck which can perform
> all sorts of system checks and produce reports for analysis by experts such
> as the app’s developer. Once again there is a free version if you just want
> to try it out should you feel the need.
>
> <https://etrecheck.com>

What readers ought to know, too, is that one of the company directors of
Etresoft.Inc - the parent company - appears to have lied on her LinkedIn
page. I have no idea WHY she would do that. This is what she had claimed:-

https://imgur.com/gallery/ef4x8ke

Board Member, Cultural & Creative App Development
Etresoft, Inc
2013 - Present • 9 yrs 4 mos
Ontario, Canada
Etresoft, Inc. is software development and consulting corporation that
has been in business, in both the
USA and Canada, since 1997. We have developed and shipped a number of
consumer software tools for
both Macintosh and Windows systems. Our products are used by major
corporations, governments,
educational institutions, and over half a million people. Read more
about our products here:
https://www.etresoft.com/#products
Etresoft, Inc. personnel have consulted with and worked for major
government agencies, militaries, and
educational institutions. Etresoft, Inc./'s work has evolved from
databases, to satellite command and
control systems, to real-time simulators, to information science.

=

I cannot be /sure/ that THIS is the same person:-

https://ontariotechu.ca/experts/fssh/teresa-pierce.php

Etresoft.Inc was not formed until 2015, as substantiated here:-

https://www.ic.gc.ca/app/scr/cc/CorporationsCanada/fdrlCrpDtls.html?corpId=9212671&V_TOKEN=null&crpNm=Etresoft%20Inc&crpNmbr=&bsNmbr=

You can clearly see the names of both Directors of the company.

So - why the lies?

Comments invited!

--
Sincerely,
David

[Jaimie Vandenbergh]

On 17 May 2022 at 08:18:51 BST, "Alan B"

<alanrich...@nospamgmail.com.here> wrote:

> Not directly related to your malware problem but if your Mac is “playing
> up”, you might be interested in a tool called Etrecheck which can perform
> all sorts of system checks and produce reports for analysis by experts such
> as the app’s developer. Once again there is a free version if you just want
> to try it out should you feel the need.
>
> <https://etrecheck.com>

And unlike almost all the £30+ commercial tools that promise the same,
it's not a placebo or snake oil or likely to damage your install.

Cheers - Jaimie
--
Sent from my Sinclair ZX-81

[David Brooks]

How sure are you about that?

When, and how, did you check that nothing untoward is being put ON to
one's computer when one downloads EtreCheck?

[whisky-dave]

On Tuesday, 17 May 2022 at 09:42:22 UTC+1, David Brooks wrote:

>
> So - why the lies?

Well Jesus said he could turn water in to wine and heal the sick, Boris said he wasn't at any parties they were work meetings.

[David Brooks]

On 17/05/2022 13:38, whisky-dave wrote:
> On Tuesday, 17 May 2022 at 09:42:22 UTC+1, David Brooks wrote:
>
>>
>> So - why the lies?
>
> Well Jesus said he could turn water in to wine and heal the sick,

I believe Jesus did exactly that.

> Boris said he wasn't at any parties they were work meetings.

I believe such 'so called' parties WERE work meetings.

HTH

--
David

[whisky-dave]

You see that's why people lie, there's always someone around stupid enough to believe whatever you say.

Tell people Jesus whas white skinned with blue eyes ....

My ex flatmate even believes we know what Jesus looked like because of the paintings like the last supper.

And of course Mary was a virgin, but at least that coincides with what Kirk said, so I guess that is true.



>
> HTH
>
> --
> David

[David Brooks]

On 19/05/2022 13:31, whisky-dave wrote:
> On Tuesday, 17 May 2022 at 13:48:29 UTC+1, David Brooks wrote:
>> On 17/05/2022 13:38, whisky-dave wrote:
>>> On Tuesday, 17 May 2022 at 09:42:22 UTC+1, David Brooks wrote:
>>>
>>>>
>>>> So - why the lies?
>>>
>>> Well Jesus said he could turn water in to wine and heal the sick,
>> I believe Jesus did exactly that.
>>> Boris said he wasn't at any parties they were work meetings.
>> I believe such 'so called' parties WERE work meetings.
>
> You see that's why people lie, there's always someone around stupid enough to believe whatever you say.

I prefer the truth.

> Tell people Jesus was white skinned with blue eyes ....

No. I don't know the truth of the matter. In this painting by my sister
he has his eyes closed, so I cannot see the colour.

> My ex flatmate even believes we know what Jesus looked like because of the paintings like the last supper.

Must have been a female flatmate! Blonde, probably!

> And of course Mary was a virgin, but at least that coincides with what Kirk said, so I guess that is true.

Have you got a reference for that? It doesn't feature here:-
https://www.cbr.com/star-trek-best-captain-kirk-quotes-original-series-spock/

==

This is what was claimed by Teresa (Tess) Pierce:-

Etresoft, Inc. is software development and consulting corporation that
has been in business, in both the
USA and Canada, since 1997. We have developed and shipped a number of
consumer software tools for
both Macintosh and Windows systems. Our products are used by major
corporations, governments,
educational institutions, and over half a million people. Read more
about our products here:
https://www.etresoft.com/#products
Etresoft, Inc. personnel have consulted with and worked for major
government agencies, militaries, and
educational institutions. Etresoft, Inc./'s work has evolved from
databases, to satellite command and
control systems, to real-time simulators, to information science.

=

Have you found/can you find ANY evidence to substantiate those claims?

[David Brooks]

On 19/05/2022 20:31, David Brooks wrote:
> In this painting by my sister
> he has his eyes closed, so I cannot see the colour.

Oops! I forgot the link! https://imgur.com/gallery/K1zXOIl

I've always like the picture. 😇

[David Brooks]

> I've always liked the picture. 😇


David tosses in the missing 'd'!

[David Brooks]

On 17/05/2022 12:53, Jaimie Vandenbergh wrote:

Did ANYONE read here?

https://x704.net/bbs/viewtopic.php?f=6&t=9373

Please let me know.

--
David

[whisky-dave]

On Thursday, 19 May 2022 at 20:31:57 UTC+1, David Brooks wrote:
> On 19/05/2022 13:31, whisky-dave wrote:
> > On Tuesday, 17 May 2022 at 13:48:29 UTC+1, David Brooks wrote:
> >> On 17/05/2022 13:38, whisky-dave wrote:
> >>> On Tuesday, 17 May 2022 at 09:42:22 UTC+1, David Brooks wrote:
> >>>
> >>>>
> >>>> So - why the lies?
> >>>
> >>> Well Jesus said he could turn water in to wine and heal the sick,
> >> I believe Jesus did exactly that.
> >>> Boris said he wasn't at any parties they were work meetings.
> >> I believe such 'so called' parties WERE work meetings.
> >
> > You see that's why people lie, there's always someone around stupid enough to believe whatever you say.
> I prefer the truth.

The truth can change depending on perspective, that is part of the problem.

>
> > Tell people Jesus was white skinned with blue eyes ....
>
> No. I don't know the truth of the matter. In this painting by my sister
> he has his eyes closed, so I cannot see the colour.

When did your sister see Jesus ?

> > My ex flatmate even believes we know what Jesus looked like because of the paintings like the last supper.
> Must have been a female flatmate! Blonde, probably!

No black hair but French, so same differnce ;-)

> > And of course Mary was a virgin, but at least that coincides with what Kirk said, so I guess that is true.
> Have you got a reference for that? It doesn't feature here:-
> https://www.cbr.com/star-trek-best-captain-kirk-quotes-original-series-spock/

It was at the start of every episode.

"To boldly go where no man has gone before"
A reference to having sex with someone that hadn't had sex before seems obvious to me.
She may have been a bit of a minger, but she still could have been a nice person.
But then again there's never beena picture of her or her hubby.
Hardly any refernce to them at the time not even by the romans who were very good at recording such important things.

>
> ==
>
> This is what was claimed by Teresa (Tess) Pierce:-
> Etresoft, Inc. is software development and consulting corporation that
> has been in business, in both the
> USA and Canada, since 1997. We have developed and shipped a number of
> consumer software tools for
> both Macintosh and Windows systems. Our products are used by major
> corporations, governments,
> educational institutions, and over half a million people. Read more
> about our products here:
> https://www.etresoft.com/#products
> Etresoft, Inc. personnel have consulted with and worked for major
> government agencies, militaries, and
> educational institutions. Etresoft, Inc./'s work has evolved from
> databases, to satellite command and
> control systems, to real-time simulators, to information science.
>
> =
> Have you found/can you find ANY evidence to substantiate those claims?

Why would I bother. She or Etresoft has no influence on my life that I know of.

[whisky-dave]

I can't really judge as I don't know much about how to judge whether a picture is good or bad.

What stands out is how white he appears when the people that lived in bethlelhem were quite dark skined even up until 20th century
https://sussex.figshare.com/articles/figure/Local_men_and_boy_in_Bethlehem_c_1890-1900/7252199.

Since then I guess with travel and mixed marriages people of that area may be more white, just like in east london today people
seem to be more dark skinned, further east they become orange.

But when I was young I painted a picture of what I think was donald duck and it was put on the classroom wall.
So donald duck must have been a real duck called donald, I reckon there is/was such a duck called donald
whether he did all the things I was told he did was another matter.

[whisky-dave]

Something about legal cookise which I rejected so I got a blank page.

[David Brooks]

I thought you were a braver man than that Gunga Din! ;-)

Here's a screenshot instead. Can you read what was said?

https://imgur.com/a/7MzQvpf?third_party=1#_=_

That's just the beginning of the thread.

[whisky-dave]

On Tuesday, 24 May 2022 at 14:52:56 UTC+1, David Brooks wrote:
> On 24/05/2022 13:41, whisky-dave wrote:
> > On Saturday, 21 May 2022 at 17:18:59 UTC+1, David Brooks wrote:
> >> On 17/05/2022 12:53, Jaimie Vandenbergh wrote:
> >>> On 17 May 2022 at 08:18:51 BST, "Alan B"
> >>> <alanrich...@nospamgmail.com.here> wrote:
> >>>
> >>>> Not directly related to your malware problem but if your Mac is “playing
> >>>> up”, you might be interested in a tool called Etrecheck which can perform
> >>>> all sorts of system checks and produce reports for analysis by experts such
> >>>> as the app’s developer. Once again there is a free version if you just want
> >>>> to try it out should you feel the need.
> >>>>
> >>>> <https://etrecheck.com>
> >>>
> >>> And unlike almost all the £30+ commercial tools that promise the same,
> >>> it's not a placebo or snake oil or likely to damage your install.
> >>>
> >>> Cheers - Jaimie
> >> Did ANYONE read here?
> >>
> >> https://x704.net/bbs/viewtopic.php?f=6&t=9373
> >>
> >> Please let me know.
> >>
> >> --
> >> David
> >
> > Something about legal cookise which I rejected so I got a blank page.
> I thought you were a braver man than that Gunga Din! ;-)

I am but there's a distinct differnce between bravery and stupidity.

>
> Here's a screenshot instead. Can you read what was said?
>
> https://imgur.com/a/7MzQvpf?third_party=1#_=_

All seems pretty boring to me.
Why did you feel the need to ask someone else if you can purchase a pro version of anything.