A couple months ago there was a major security problem in Apple's
Safari browser, where it would automatically decompress a gzip file
and somehow fool the system into executing a shell script. Secunia
posted a proof-of-concept here:
http://secunia.com/mac_os_x_command_execution_vulnerability_test/
Which I clicked on and sure enough, Terminal.app executed the
calculator application.
The problem is, now my Terminal.app is broken. When ever I try to open
a console window, it says:
Last login: Thu Apr 20 23:26:38 on console
/Users/porter/Desktop/Secunia.mov; exit
Welcome to Darwin!
mini:~ porter$ /Users/porter/Desktop/Secunia.mov; exit
-bash: /Users/porter/Desktop/Secunia.mov: No such file or directory
logout
[Process completed]
The same result occurs even if the secunia.mov file is present, it
executes it then immediately exits.
Right now my workaround was to download another terminal app (iTerm)
which works fine. But I'd really like to get Terminal.app working
again. I e-mailed secunia but never heard back from them.
Some clues:
* When I login as a different user, there is no longer a problem. So
it's specific to this one user account.
* None of the hidden files in my home directory contain the unwanted script
* The same thing happens even if I launch Terminal.app from the
command line (in this case by using iTerm) such as "open
Terminal.app".
* Spotlight returns no reference to "secunia.mov". That string must be
somewhere on the hard drive, but maybe it's in a non-Spotlight indexed
folder. |