FolderActionsMalware

Description: Automatic Folder Actions to check LaunchAgents and LaunchDaemons to avoid malware.

Installation

1. Download files here

2. Copy all (5) files to ~/Library/Workflows/Applications/Folder Actions.

3. When a new file is added into one of the targeted directories, you'll be notified.

FAQ

• Where is my Home folder?

Home folder can be found by clicking Finder in your Dock, clicking Go in your menu bar, then selecting Home.

• Where is my Library folder?

Library folder can be found by clicking Finder in your Dock, hold down option/alt, clicking Go in your menu bar, then selecting Library.

• There is no "Workflows" folder located in Library?

If folders do not exist, you must create them. Ensure correct spelling and capitalisations are used.

Home Folder > Library > Workflows > Applications > Folder Actions > files go here

• What folders are being watched for if new files are created?

Each file is named the directory of the Folder Action

/Library/LaunchAgents/

/Library/LaunchDaemons/

/System/Library/LaunchAgents/

/System/Library/LaunchDaemons/

~/Library/LaunchAgents/

• What is the script used to detect if new files are created in these directories?

See here

Read more:

Reddit thread made by: /u/jpeeri

Script to notify user when a new file is added created by Apple.

Everything else was compiled by me.

Short link: https://goo.gl/AEwOX6