0

Last week I downloaded a zipfile from a website on my mac. When it finished downloading the file automatically opened (which it normally doesn’t; I would normally have to double click it first). This was already strange but I didn’t think too much of it.

It asked me for a password, which I did not know. When I clicked “cancel” the archive utility just quit.

After that, when I looked in my downloads folder the file was no longer there. So I looked in my trash folder to be shocked to see that the file wasn’t there either. So basically, the file was behaving very strangely and had just deleted itself.

What does this mean? Is this just something archive utility can do? Or can it be that the file might have been malicious?

1

The zip file cannot “self delete”.

There is a setting for “Archive Utility” in most versions of Mac OS X / OSX / macOS where you can specify you’d like to delete Zip files after extraction.

See:

Check if you have this feature turned on:

screen shot

If you have this feature turned on already:

I believe this is intended to work only after a successful extraction. It shouldn’t work if the extraction fails.

One possibility is that only some of the zipped files in the zip were password protected. (Yes, you can create a zip file with a mix of password protected and “unprotected” files.)

If the zip had even just one non-password protected file (like README.TXT) that unzipped correctly, it may be present and Archive Utility might have deleted the zip. This seems doubtful.

If you do not:

  1. Perform a spotlight search or command-line search for the file name.
  2. Scan your hard drive for errors using a Disk Utility.
  3. Re-download the file (look for a link in your browser history, if needed and available.)
  • Hi, thank you for your quick response. I checked if I had turned on the feature which moves files to trash. I had not. Also, the file was not moved to trash. It was just gone. It could not be found using a Spotlight search. It also didn't show up in the "Recent files" tab using Finder. There don't seem to be any errors. I don't want to re-download the file because I'm afraid it was malicious. I might be a little too careful because I don't know if a zip file (even though when I tried to open it I hadn't filled in any password yet) can do something like that. That's mainly why I'm asking. – Developer Jul 14 at 23:59
  • What browser are you using — Does your web browser have a setting to delete downloads once they are opened? – whiskeychief Jul 15 at 9:47
  • I’m using Safari. And to my knowledge it does not have a setting to delete downloads once they are opened. I’ve download zipfiles before and it just stayed in the downloads folder. Also, I didn’t open it using Safari. Safari was closed when I tried to open the zipfile. – Developer Jul 15 at 14:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .