-
Notifications
You must be signed in to change notification settings - Fork 243
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
security issues? #324
Comments
Can you please post the complete syslog/ASL entry (that includes sender etc)? It seems you might have some sort of malicious software installed, and it definitely didn't come from Messenger.app (it's code-signed and any alterations to its binary image would cause macOS to terminate the app, and not allow executing it.) It's possible you have a malicious webkit plug-in installed on your system. This app uses a webkit WebView to load messenger.com, so any webkit plugins installed will be able to run inside Messenger.app. |
A complete message looks like this (copied from "All Messages" in Console.app)
|
This has been generated in the last minute:
|
These messages doesn't look like they are from Console.app? (missing PID after message name) Anyhow, you computer is almost certainly infected with some form of malicious software. I can guarantee you by 99.9999% that it's not from this app (or everyone would have this issue, or it wouldn't even start.) I strongly suggest that you install antivirus software, disconnect from the internet as soon as you've installed it and don't reconnect until you've got this figured out. You don't want someone to grab your keychain files (encrypted, but still not a great thing.) I've been using Sophos and it seems to work for me, but I'm sure any of the major players works. |
Your machine is not infected. Open up Keychain Access and look for any Keychains that are missing (ghosted). Delete the references to these non-existent keychains and you'll see the messages disappear. |
What is a missing (ghosted) keychain? |
Thanks josh! I had 2, one called System, and apsd that were empty. I still have a regular system keychain available. Deleted them. ::crossingmyfingers:: edit: darn- still getting tons of cssm exception errors. not specific to this app though. |
I had one called Adobe.APS which wasn't ghosted and resided at |
Hi there, I noticed strange behaviour when I opened system console.
I see constant reports about Messenger trying to open some keychain files which don't exist, for example:
"open /Library/Sophos Anti-Virus/Sophos.keychain: No such file or directory"
"CSSM Exception: -2147413737 CSSMERR_DL_DATASTORE_DOESNOT_EXIST"
"dbBlobVersion() failed for a non-existent database"
I'd like to know what are these processes, and if this behaviour is normal.
Thanks
The text was updated successfully, but these errors were encountered: