Sign up ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

.putty/randomseed and .putty/sshhostkeys were found in my home directory of my MacBook Pro this morning.

I'm running OS X Snow Leopard. I've never installed PuTTY on my machine.

Does this mean my machine has been compromised, and by a Windows computer?

share|improve this question

2 Answers 2

up vote 2 down vote accepted

According to this page, it's a sign of a Windows trojan only (?).

On Unix, PuTTY actually stores its data under ~/.putty, so that's normal too. So, no harm done – but just to be safe, and if you don't actually use PuTTY, delete the whole directory.

As always, make sure you don't have any Sharing options enabled under System Preferences that you don't want. You can also check open internet connections with sudo lsof -i for anything suspicious.

share|improve this answer

Noticed the same thing today, found ~/.putty/sshhostkeys containing keys for some DB servers I use frequently. I was pretty concerned.. turns out that it was created after using a SQL GUI client. It had a feature to connect to your DB via SSH Tunnel. instead of using ~/.ssh directory it creates a .putty directory and stores its host keys there.

Answering a really old question, but I noticed this today as well. As this was 4th Google hit for ".putty osx" and the accepted answer not being very helpful

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.