Re: Can iTunes run AppleScript as well as Trojan code?
Re: Can iTunes run AppleScript as well as Trojan code?
- Subject: Re: Can iTunes run AppleScript as well as Trojan code?
- From: Rob Jorgensen <email@hidden>
- Date: Tue, 13 Apr 2004 13:46:00 -0400
At 1:26 PM -0400 4/13/04, Hudson Barton wrote:
At 10:27 PM -0400 4/8/04, Rob Jorgensen wrote:
I downloaded and decompressed the file. Here's the skeleton of a
poor man's trojan detector to address this particular type of
silliness. The script has plenty of room for improvement (reveal
the file, move to trash, etc.). :-)
--
property extensions_ : {"gif", "jpg", "mp3"}
on adding folder items to this_folder after receiving added_items
repeat with item_ in added_items
set info_ to (info for item_)
if file type of info_ is "APPL" and name extension of info_ is
in extensions_ then
display dialog "Trojan Alert! A file named " & name of info_ &
" appears to be a trojan. Use extreme caution when opening this
file."
end if
end repeat
end adding folder items to
--
Why take the risk that you don't have a complete list of extensions
that a Trojan writer might use? Just flag all applications that go
into your downloads folder so that it forces you to double-check.
--
on adding folder items to this_folder after receiving added_items
repeat with item_ in added_items
set info_ to (info for item_)
if file type of info_ is "APPL" then
display dialog "Trojan Alert! A file named "
& name of info_ & " was just added to the downloads folder. It is
an application. Use extreme caution when opening, especially if its
icon is not that of an application."
end if
end repeat
end adding folder items to
--
I didn't get too carried away with the script because the trojan is
simply proof of concept and, I guess, so is the script. The main
point is that this particular trojan can be easily detected without
spending 50-100 bucks on anti-virus software.
-- Rob
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.