Have I been hacked?

Question

Yesterday Sourcetree app turned off by itself and it was gone from my applications, spotlight search, launch pad- everywhere.

I've downloaded latest version from https://www.sourcetreeapp.com/  extracted the archive and placed it under /Applications folder (there was no overwrite warning). After this I've launched it and got source tree window with all bookmarked repositories, yet I'm getting error "k3diff not found" (see image).

Except that, the sourcetree app has wrong logo in the dock (whereas it displays ok in spotlight and when changing windows with cmd+tab).

Is it normal? What caused the app to uninstall (?).

Piotr Poźniak · Answer

Hi Justa,

Thank you for your answer and pointing the resource to "icon" problem.

I had K3Diff configured properly.  As per my initial message. The SourceTree has been turned off (or silently crashed) and gone (uninstalled). After "re-installation" (not sure if unzipping the .app file and moving it to the Applications directory is "installation") of the SourceTree the K3Diff error appears. I do not know where the K3Diff was stored before the incident as I cannot recall how did I install it (whether brew or something else).

I've reinstalled kdiff3 and now is working fine. I'll monitor the behaviour of SourceTree whether it uninstall itself and post here if it happen.

Does SourceTree has any log file? Where I can find it?

JustaResource · Answer

KDiff3 is a file diff and merge tool

http://kdiff3.sourceforge.net/

Soucetree seems to be looking for it - maybe it's what you had setup in the past as an external tool to resolve conflicted files?

The program is either missing, has moved, or is not compatible with your version of OS X for some reason - did you recently install OS X updates? It's possible OS X doesn't want to run the program anymore because Apple doesn't deem it compatible.

I'd recommend searching your computer for the program if you expect it should be there, and then edit your Sourcetree preferences to use the application you want.

This answer can help you change the icon back to the default icon if you wish

https://community.atlassian.com/t5/Sourcetree-questions/Is-there-a-way-to-change-the-SourceTree-icon-on-MacOS/qaq-p/1111831

Piotr Poźniak · Answer

Hi Nic,

Thank you for your prompt reply.

Indeed, the "uninstall" behaviour was akward and I cannot explain it, yet I'm a developer myself. It was just gone after closing one repository. By the K3Diff error on SC launch it's obvious that something really happened and it was not my imagination. Is there anything I could check to provide more info (logs in my ~/ directory or anything usable)?

I got confused/scared by this logo as there were two incidents which occur within a short time window so my first impression was that these two are connected.