Recycle bin filling up with random .ini & .txt files

[Jerryrmack]

Recently, I've encountered a peculiar issue with my 2024 MacBook Air where the recycle bin keeps getting filled with random .ini and .txt files. This started happening within the last day. It caught my attention when I attempted to empty the recycle bin and was surprised to see a message indicating there were over 24,000 files ready for deletion. After clearing the bin, these files begin to reappear, yet, interestingly, they cease when I disconnect from Wi-Fi. Reconnecting to Wi-Fi triggers the files to return. The files follow a specific format, like "46948e6aaa223f42.ini," "14-39-16-821.ini," "downloads3.txt," and "14-38-34-909.txt." I'm currently on macOS version 14.4.1 and have scoured through Activity Monitor without finding anything abnormal. Does anyone have any insights or suggestions on what might be causing this?

 

[EugenDoga]

Hey

It sounds like you're dealing with an unusual and potentially concerning issue. The fact that these .ini and .txt files stop appearing when you disconnect from Wi-Fi suggests the issue might be linked to a network-based process or application. Here are a few possibilities and steps you could consider to troubleshoot this issue further:

1. Check for Malware: The pattern you're describing—random files being generated and deleted—could potentially be related to malware activity. MacOS is less prone to viruses than other operating systems, but it's not immune. You should run a thorough scan using a trusted antivirus program. If you don’t already have one, look for reputable software like Malwarebytes, which has a version for Mac.
2. Review Installed Applications: Consider if you recently installed any new applications or granted permissions to a service that might be creating these files. Sometimes applications or scripts running in the background might generate such files for logging or temporary data handling, especially those that sync data over the internet.
3. Monitor Network Activity: Since the issue is linked to your Wi-Fi connectivity, monitoring network activity might give you more clues. You can use built-in tools like netstat in the Terminal to see active connections and which apps are using your network. Command to use in Terminal: netstat -anp tcp | grep ESTABLISHED
4. Inspect Launch Agents and Daemons: Malicious software or buggy applications might have installed a launch agent or daemon that starts automatically. Check your /Library/LaunchAgents, /Library/LaunchDaemons, and ~/Library/LaunchAgents folders for any files that were recently added or look suspicious.
5. Check Scheduled Tasks: Use the Terminal to check for any scheduled tasks that might be creating these files. You can check crontab entries with crontab -l and see if anything unusual is scheduled.
6. Safe Mode and Test User: Boot your Mac into Safe Mode (hold down Shift during boot) to see if the issue persists. This mode loads only essential macOS components. If the problem stops, it’s likely related to third-party software. Alternatively, create a new user account and see if the problem occurs there. If it doesn’t, the issue might be isolated to your user profile.

It’s good that you’re cautious and monitoring through Activity Monitor. Keeping an eye on any unusual system behavior following your findings is wise. Be sure to back up important data regularly as you troubleshoot this issue.

 

[MacsBug]

This sounds like an issue with a sync service.. Since there are .ini files my best guess is that this has something to do with Microsoft OneDrive app.

If you have OneDrive installed, you may want to turn off syncing and then uninstall the app, This should stop your trash from filling up.