Archive. This is an archive of the Apple Support Community. Discussions are being restored and soon you will be able to read and post here again.

Has computer been compromised

bplist00‘ I discovered that seems concerning on my Desktop iMac in the form of a "request" I didn't make and need an opinion. I'm concerned someone else has access to my computer, only me am admin, any help would be appreciated. Here is the beginning portion of it - bplist00‘

X$versionY$archiverT$topX$objects܆_NSKeyedArchiver— TrootÄØU

_ijklrsy|ÑÖÜáàçü†°¢£§•7ß®©¨¬√ƒ≈B«ÀÖ—“”‘’›fifl‡Ïˆ˜¯˘

#%)•©™ÆØ≥¥∏πΩæ¬√«»ÃÕ—“÷◊€‹‡·ÂÊÍÎÔÙı˘˙˛ˇ

!"&'+,0156:;?@DEIJNOSTXY]^bcghlmqrvw{|ÄÅÖÜäãèêîïôöûü£§®©≠Æ≤≥∑∏ºΩ¡¬Δ«ÀÖ—’÷⁄€fl‡‰ÂÈÍÓÔÛÙ¯˘˝˛

!%&*+/0459:>?CDHIMNRSWX\]abfgklpquvz{ÄÑÖâäéèìîòôùû¢£ß®¨≠±≤∂∑ªº¿¡≈Δ Àœ–‘’Ÿ⁄fifl„‰ËÈÌÓÚÛ˜¯¸˝

"#123456;@RSTUVWXY_`efgjpqrU$nullfl)

!"#$%&'()*+,-./

0123456777:;7=>?;ABB77FG=BJKLMNO7;;7BU;;XY7B\;7 _incompatibleAppsZguestWasOn_$isCombinedSoftwareUp

dateAndMigration_copiesPrinterSettingsZfaultFiles_failureRequests[copiesUsersUstateXmessages_quarantineSeen

Reasons[sandboxPath_

mostRecentlySavedBootTime.tv_

sec

_predeterminedUIDs_copiesNetworkSettings_copiesHomeDirectories_

activateF

ilevault

_uidgidTranslatorTuuidTtype_copiesMachineSettings\stepProgress_originatingApplication_targetSystemLong

TermIdentifier

homeDirectoriesInfoV$class

!

_

_

mostRecentlySavedBootTime.tv_usec]hasFatalError_managedTargetUsername[pathingInfo_

shouldEnableFastUserS

witching_copiesTimeZoneSettings_

usersToTransfer

_applicationsInfo_overallMigrationInfo^completedPaths_

fileGrou

pingPaths_systemDefenseTriggered_shouldMigrateGuest_sourceSystemLongTermIdentifier]autoLoginUser_copiesS

ecuritySettingsÅ3ÅPÄÄ%Å2Ä,ÄÄ' Ä.Ä)Ä% Å4Ä&Ä

ÅQÅTÄ(ÄÄ ÄÄÄÄ>Ä* ÄÄ”`a%behWNS.keysZNS.objects¢cdÄÄ¢fgÄÄÄ

YclassName

_primaryIdentifier_SMSystem_Daemon”m%n;pqWNS.base[NS.relativeÄÄÄ_<file:///Volumes/

Macintosh%20HD%20-%20Data/Previous%20System/

5 replies

Erroneously displaying a binary plist file as text will look like this, yes.


To display the plist as text:

plutil -p yourplistfilenamehere.plist


macOS has lots of plist files.

Exactly where did you "discover" this?

What are you looking at?


If you're trying to interpret a plist file, don't.

You'll only make yourself crazy.


The chances your Mac has been "compromised" are near zero unless you're the type who likes to BitTorrent bootlegged software.

While searching using Spotlight for Migration Assistant extension which found nothing so I delete one letter at a time from right to left and a window turned up with just Request and that text. But it's much more than that longer. Ok, that's good and no, I don't BitTorrent anything.

Thank you for replying!

Is that to be entered in terminal window?

SeanCeltiad wrote:
Is that to be entered in terminal window?

That’s the level of detail you’re asking about here, so yes.