Skip to content

Instantly share code, notes, and snippets.

@kentliau

kentliau/quick-osx-keydnap-check

Created September 6, 2016 11:43
Show Gist options
  • Save kentliau/73c89eeba19275037119b1b11d74b307 to your computer and use it in GitHub Desktop.
Save kentliau/73c89eeba19275037119b1b11d74b307 to your computer and use it in GitHub Desktop.
Download ZIP
Does a quick check for OS X malware OSX/Keydnap.
Raw
quick-osx-keydnap-check
if [ -f "/Applications/Transmission.app/Contents/Resources/License.rtf" ] || [ -f "/Volumes/Transmission/Transmission.app/Contents/Resources/License.rtf" ] || [ -f "$HOME/Library/Application Support/com.apple.iCloud.sync.daemon/icloudsyncd" ] || [ -f "$HOME/Library/Application Support/com.apple.iCloud.sync.daemon/process.id" ] || [ -f "$HOME/Library/LaunchAgents/com.apple.iCloud.sync.daemon.plist" ] || [ -d "/Library/Application Support/com.apple.iCloud.sync.daemon/" ] || [ -f "$HOME/Library/LaunchAgents/com.geticloud.icloud.photo.plist" ]; then echo "OSX/Keydnap detected."; else echo "You're good."; fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment