Re: Applescript Worm Virus on the loose?
Re: Applescript Worm Virus on the loose?
- Subject: Re: Applescript Worm Virus on the loose?
- From: JJ <email@hidden>
- Date: Sat, 16 Jun 2001 12:08:16 +0200
>
Date: Thu, 14 Jun 2001 11:05:32 -0400
>
Subject: Re: Applescript Worm Virus on the loose?
>
From: "Stephen Swift (aka Burnum)" <email@hidden>
>
To: AppleScript <email@hidden>
>
>
At 6/13/01 9:35 AM, Arthur J Knapp (email@hidden) Wrote:
>
>
> If it did try to "mutate", it would probably throw up that dialog:
>
>
>
> "Where is application 'Eudora'?"
>
>
>
> which one would have to assume would be bad "virus design".
>
>
Now, if I was designing the virus, I would figure out what the default mail
>
client was and open it.
>
+event GURLMAIL; with +class errr;
>
>
Then my script would have different parts for each mail client so it could
>
incorporate more applications.
>
>
Here's the problems I see with using AppleScript as a virus:
>
You have to activate it manually. There isn't a way that I know of to have
>
it open just by reading the message.
>
AppleScript can be turned off very easily.
>
Scripts can be stopped in mid action if the user sees it doing something odd
>
Also, we all together will do a good virus:
I remember (but not sure), an Akua Sweets Command:
"send me user events"
(theorically, this command sends mouseclicks and keystrokes directly to the
script).
So, this virus we are designing, can't be stopped.
Or:
edit menu x controlled by (path to me)
Of course, the original virus name (we'll thought about it) will be "very
fun.jpg". It installs without user interaction akua sweets or our preferred
osax, and then starts:
tell me
try
+event ascrgdut; -- "load osax"
on error
end try
end tell
& ...
JJ