Re: trojan horse for Mac os x - Of course it Microsoft related
Re: trojan horse for Mac os x - Of course it Microsoft related
- Subject: Re: trojan horse for Mac os x - Of course it Microsoft related
- From: Joseph Weaks <email@hidden>
- Date: Wed, 12 May 2004 16:13:44 -0500
On May 12, 2004, at 2:23 PM, roncross wrote:
Subject: trojan horse for Mac os x - Of course it Microsoft related
A warning on a new destructive 'trojan horse'
Wed, May 12 '04 at 01:10PM from: robg
[demime 0.98b removed an attachment of type image/gif which had a name
of rg-system.gif]
From robg website macosxhints:
... the trojan horse is a script that
has been neatly saved as a clickable application, complete with a
custom Microsoft Office icon. Double-click it, and your user's folder
contents are history. Note that this is not a virus; it cannot email
itself to others, nor replicate over a network, etc.
...
For those that don't know Unix, rm is "move to and empty trash," -r
is "do this for all items and folders within this folder," the f means
"force removal without confirmation," and the ~ means "the user's
directory." Spelled out, this means that the script will, without
warning or user intervention, delete everything in the user's folder.
Permanently.
Ok, setting aside the whole "it's your own 6@5^ fault for trying to
download a pirated copy of software" issue (no I don't believe he was
just looking for a demo), it wouldn't have to be done using Unix rm...
it can be accomplished in vanilla as well.
Regardles, isn't the home folder contents about as bad as this avenue
could get? Wouldn't anything further "upstream" in the file system
require authentication?
Am I really supposed to feel sorry for the guy who lost his Home
directory? Did he really think the Word installer was that small? Maybe
Billy got a copy of Matt's book and wrote the applet and uploaded it
himself. hehe
Ok, then I feel bad for him,
Joe
(well, not really)
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.