Existing users, log in.  New users, create a free account.  Lost password?

Mac OS X  |  Security / Privacy  |  Other Security / Privacy  |  MisMatch

MisMatch

MisMatch - 1.2.1

Folder action script to detect Trojan MP3s plus more

All Time: (2.0)
This Version: Not rated (0.0)
Current Version: 1.2.1
Release Date: 2004-04-14
License: Freeware
Downloads (this version): 738
Downloads (all versions): 738

Information Related to Version:

Broken Link? Newer Version? Tell us!

Product Description:

Mismatch is a folder action that will search files to see if they contain the MAC.Amphimix [Symantec] virus - Also known as MP3Virus.Gen [Intego], MAC_MP3CONCEPT.A [Trend]. Mismatch will check any files, or files contained inside folders, to see if a file's name-extension corresponds to the file's file type and kind. If it does not meet this criteria, the script asks the user what they want to do - Either quarantine the file or trash the file.

What's new in this version:

Addressed a problem which occurred during initial file transfer of v1.2 that caused all applications (.app) to be seen as Trojans.

Operating System Requirements:

This product is designed to run on the following operating systems:

  • Mac OS X 10.3
  • Mac OS X 10.2

Additional Requirements:

  • Mac OS X 10.2 or higher

Screenshots:

Download Links:

Your Installed Versions:


 

Feedback Summary:

This Version:
Overall Rating: Not rated (0.0) Features: Not rated (0.0) Support: Not rated (0.0)
Ease of Use: Not rated (0.0) Quality / Stability: Not rated (0.0) Price: Not rated (0.0)
Add Your Feedback

Key to Types of Feedback:

ReviewsReviews   TroubleshootingTroubleshooting   Usage TipsUsage Tips   Developer NotesDeveloper Notes   CommentaryCommentary   Featured ReviewsFeatured Reviews

MisMatch Commentarychoices when bad file found - Version: 1.2, 4/15/2004 09:19AM PST

heynnema
1.2 only gives a choice of trash, or quarantine. I'm missing the "do nothing" or cancel choice.
Post a commentAlert Admin

Most Recent Replies: View All 1 Replies

MisMatch Review'Mismatch' Versions 1.x is limited and can be circumvented. - Version: 1.2, 4/14/2004 07:24PM PST

(2 of 4 users found this comment useful)

barhar
01. Drag a Folder containing the 'virus.mp3' File onto the 'Mismatch' assigned Folder and select whether to quarantine or trash the detected 'virus' File.
02. Drag a duplicate Copy of the same Folder dragged in Step 01 above. A 'Copy' Alert Box will appear asking if you want to 'Cancel' or 'Replace' the existing Folder. If one selects 'Replace', the originally dragged Folder in the 'Mismatch' assigned Folder is replaced - including the enclosed 'virus.mp3' File.

The 'Mismatch' Code only detects the 'virus.mp3' File, not the other 'Proof of Concept' Files of 'PhotoshopMECrack.zip', 'iTunesUpdater421.pkg', and 'Jenny.jpg'.

See few examples applscripts pretending to be other files:
'<http://forums.ort.org.il/files/307/1970653/8208371.zip>' ['iTunesUpdater421.pkg'],
'<http://forums.ort.org.il/files/307/1970675/9181348.zip>' ['Jenny.jpg'],
'<http://forums.ort.org.il/files/307/1970679/1587186.zip>' ['PhotoshopMECrack.zip'].

Nor were any Files I would embed Code into, including an Extension other than 'app' or none at all, were detected.
Post a commentAlert Admin

Most Recent Replies: View All 2 Replies