Path: csiph.com!goblin1!goblin3!goblin.stu.neva.ru!panix!not-for-mail From: briang@panix.com (Brian Gordon) Newsgroups: comp.sys.mac.system Subject: Re: Recover root/wheel password? Date: Tue, 8 Jan 2019 05:01:37 +0000 (UTC) Organization: Public Access Networks Corp. Lines: 25 Message-ID: References: <070120192342023892%nospam@nospam.invalid> NNTP-Posting-Host: panix2.panix.com X-Trace: reader2.panix.com 1546923697 1740 166.84.1.2 (8 Jan 2019 05:01:37 GMT) X-Complaints-To: abuse@panix.com NNTP-Posting-Date: Tue, 8 Jan 2019 05:01:37 +0000 (UTC) X-Newsreader: trn 4.0-test77 (Sep 1, 2010) Originator: briang@panix.com (Brian Gordon) Xref: csiph.com comp.sys.mac.system:120297 In article <070120192342023892%nospam@nospam.invalid>, nospam wrote: >In article , Brian Gordon > wrote: > >> My mac's environment was created eons ago, but my personal login has most >> superpowers. I need to delete a file owned by root/wheel and I am not being >> allowed to do it. Is there some way a privileged user can recover the needed >> password? > >what file is it and why do you want to delete it? > >there's probably a very good reason why it's not letting you do that. The file has been identified by CyberByte as being infected. It is /Library/Preferences/.3FAD0F65-FC6E-4889-B975-B96CBF807B78, and is the only file in that directory with a name in that format. It was created late at nignt on 10/24/18. I have a saved copy, so it can be restored if its removal causes problems. -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | Brian Gordon -->briang@panix.com<-- brian dot gordon at cox dot net | + bgordon@aol.com Bass: NSC Frank Thorne + -------------------------------------------------------------------------------