Re: trojan horse for Mac os x - Of course it Microsoft related
Re: trojan horse for Mac os x - Of course it Microsoft related
- Subject: Re: trojan horse for Mac os x - Of course it Microsoft related
- From: roncross <email@hidden>
- Date: Wed, 12 May 2004 18:14:38 -0700
It is too late for the stupid person who opened this file and erased
the files in his user directory. This is information for the other
stupid people that might do something like this in the future.
thx
RLC
On May 12, 2004, at 2:13 PM, Joseph Weaks wrote:
On May 12, 2004, at 2:23 PM, roncross wrote:
Subject: trojan horse for Mac os x - Of course it Microsoft related
A warning on a new destructive 'trojan horse'
Wed, May 12 '04 at 01:10PM from: robg
[demime 0.98b removed an attachment of type image/gif which had a
name of rg-system.gif]
From robg website macosxhints:
... the trojan horse is a script that
has been neatly saved as a clickable application, complete with a
custom Microsoft Office icon. Double-click it, and your user's folder
contents are history. Note that this is not a virus; it cannot email
itself to others, nor replicate over a network, etc.
...
For those that don't know Unix, rm is "move to and empty trash," -r
is "do this for all items and folders within this folder," the f
means
"force removal without confirmation," and the ~ means "the user's
directory." Spelled out, this means that the script will, without
warning or user intervention, delete everything in the user's folder.
Permanently.
Ok, setting aside the whole "it's your own 6@5^ fault for trying to
download a pirated copy of software" issue (no I don't believe he was
just looking for a demo), it wouldn't have to be done using Unix rm...
it can be accomplished in vanilla as well.
Regardles, isn't the home folder contents about as bad as this avenue
could get? Wouldn't anything further "upstream" in the file system
require authentication?
Am I really supposed to feel sorry for the guy who lost his Home
directory? Did he really think the Word installer was that small?
Maybe Billy got a copy of Matt's book and wrote the applet and
uploaded it himself. hehe
Ok, then I feel bad for him,
Joe
(well, not really)
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.
thanks
Ronald Cross
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.