Networking | Hardware | Software | Multimedia | System | Unix&Linux | MBA

Home>>Unix&Linux>>My User folder was eaten by a platypus

My User folder was eaten by a platypus

lunkman
02-22-2006, 02:43 PM
I am a Unix novice and was nosing around in Terminal. I first did a cd to /volumes, then an ls. My regular hard drive names showed up, but there was also one called "hexley" which I have no knowledge of. The volume does not appear in the Finder or in Disk Utility. An ls of this hexley in Terminal revealed that it contains my Users folder and only my Users folder. Googling hexley I found that it is the name of the Darwin OpenSource Project mascot, a platypus of some kind. This has me worried. Why is my Users folder residing inside a platypus? How did this volume get onto my computer and is it dangerous? I should mention sheepishly that I had also been messing around with ssh connections, not really knowing what I was doing.

hayne
02-22-2006, 02:56 PM
I presume that what you mean is that there is a copy of your home folder under /Volumes/hexley - but that your actual home folder is still in its usual place under /Users

I have no idea how that "hexley" folder would get created.
Maybe you want to tell us more details about just what sort of ssh connections you were doing?

Note that if you think that your system has been compromised, then there is no alternative to making a backup of the files you care about and then erasing the disk completely and then reinstalling OS X from the Apple Install CD/DVD.

But unless you have more indications that your system has been taken over, I wouldn't jump to that conclusion.

The first thing to do is to restart your Mac and see if that hexley folder is still there. If it is, then please show us the results of the following commands (in a Terminal window):

id
ls -l /Volumes
df -h


And you might want to read this Unix FAQ (http://forums.macosxhints.com/showthread.php?t=40648)

giskard22
02-22-2006, 04:39 PM
Irrelevant side note: this has to be the thread with the best title in the history of these forums. :D

lunkman
02-22-2006, 10:33 PM
Thank you for your interest in my marsupial problem. It turns out that the sinister-seeming hexley was just some sort of old mount point artifact. I was able to finally just trash it in the Finder. This was, however, a good lesson in the dangers of Terminal ignorance and paranoia. But it still doesn't explain why the unofficial Darwin mascot chose to nest in my computer in the first place.

schwartze
02-23-2006, 12:55 AM
Interesting thread. It made me check something and here is what I got:

monkey:~ eric$ ls -al /Volumes/
total 122896
drwxrwxrwt 6 root admin 204 Feb 23 01:11 .
drwxrwxr-t 34 root admin 1258 Feb 23 01:01 ..
-rw-rw-rw- 1 eric admin 6148 Oct 27 18:07 .DS_Store
-rwxrwxrwx 1 eric eric 82 Oct 27 17:51 ._SUSAN'S IPO
lrwxr-xr-x 1 root admin 1 Feb 23 01:02 Basement -> /
-rw-r--r-- 1 eric admin 62906283 Jan 20 20:54 Cabinet.tgz


I know what each of the things are.

Susan's iPod hasn't been plugged into my computer for weeks and is still there after a good 4 or 5 restarts.

Cabinet.tgz was plugged into my computer this evening - but as a full volume, not compressed, so what's the deal with that? If it was actually there and that size on my HD it would exceed the amount of space I have.

I'm not as concerned about why they are there as I am as interested as to why they are. As a paranoid person who has had my laptop stolen I try to keep as little sensitive data as possible on the machine but if it is still remembering these things after multiple restarts - what else is the computer remembering? I have spotlight shut off for the plug in volumes - so why is it still remembering what is there?

Clues, articles, info would be greatly appreciated.

Hal Itosis
02-23-2006, 01:16 AM
-rwxrwxrwx 1 eric eric 82 Oct 27 17:51 ._SUSAN'S IPO
-rw-r--r-- 1 eric admin 62906283 Jan 20 20:54 Cabinet.tgz
Susan's iPod hasn't been plugged into my computer for weeks and is still there after a good 4 or 5 restarts.
Cabinet.tgz was plugged into my computer this evening - but as a full volume, not compressed, so what's the deal with that?
Is it possible there was a crash while any of those were connected?
Or perhaps either was unplugged/disconnected before choosing Eject?
The compressed item... is there some backup software associated with it?

-HI-

hayne
02-23-2006, 04:07 AM
Yeah - these look like detritus left over from volumes improperly unmounted.

Screengem0531
02-23-2006, 08:23 AM
I recently learned how bad it is to unmount a volume imporperly. (Accidentally unpluged my external HD doing back up with CCC) It made an invisible back up volume of almost 15GB and I only had like 15.something GB left on my drive.

It was scary when my computer told me I had no space left.


 

TOP

Windows Server Outsell
Unix Signals And C++ E

For more info

Unix Signals And C++ E
Windows Server Outsell
bash not using my .bas
Applescript: Hide Proc
help with installing p
Mozilla install from d
ssh - don't want to us
Escaping quotes in Tig
Terminal Keybindings 
JAVA help, please! 

News Archive

Displaying Images on t
Install Office from th
Terminal Problem...? 
cc1plus not executable
desktop icons.. 
at & growlnotify 
unknown terminal type 
scp arbitrary files 
What and why is a 'Dis
permissions already me

Related stories:

Installing Gnome and/or KDE
Startup causes Console in full screen mode
What goes in a .bashrc file?
Searching the "man bash"
Customizing Terminal
su: Sorry?
large file copying broken in 10.4.5?

Copyright@2004-2005 www.zzcoke.com All Right Reserved

advanced web statistics