Existing users, log in.  New users, create a free account.  Lost password?

Mac OS X  |  Security / Privacy  |  Other Security / Privacy  |  MisMatch

MisMatch

MisMatch - 1.2

Folder action script to detect Trojan MP3s plus more

Download Now Download Now

(File Size: 97k)

Free Product Alerts!

Register for free to receive alerts when MisMatch is updated.
All Time: (2.0)
This Version: (2.0)
Current Version: 1.2
Release Date: 2004-04-14
License: Freeware
Downloads (this version): 352
Downloads (all versions): 845

Information Related to Version:

Broken Link? Newer Version? Tell us!

Product Description:

Mismatch is a folder action that will search files to see if they contain the MAC.Amphimix [Symantec] virus - Also known as MP3Virus.Gen [Intego], MAC_MP3CONCEPT.A [Trend]. Mismatch will check any files, or files contained inside folders, to see if a file's name-extension corresponds to the file's file type and kind. If it does not meet this criteria, the script asks the user what they want to do - Either quarantine the file or Trash the file.
Note to Jaguar users : The "Kind" attribute is not given by AppleScript when called for, therefore Mismatch can only test to see if the name-extension corresponds with the file's File Type.

What's new in this version:

  • Addressed and fixed a problem where Mismatch failed to trigger on Jaguar installed Systems.
  • User now has the ability to trash the file when a suspicious file is found - Thanks to Robert L. for this suggestion.
  • Files now are renamed to reflect that they are Suspicious.
  • Rephrased some of the dialog that is triggered when a suspicious file is found.
  • Quarantined files now are kept on the user's Desktop.
  • Code Optimizations

Operating System Requirements:

This product is designed to run on the following operating systems:

  • Mac OS X 10.3
  • Mac OS X 10.2

Additional Requirements:

  • Mac OS X 10.2 or higher

Screenshots:

Developer: Submit screenshots for MisMatch

Download Links:

Download MisMatch Now (File Size: 97k)

Your Installed Versions:


 
Show All Feedback (2)Search FeedbackSearch Feedback

Feedback Summary:

This Version:
Overall Rating: (2.0) Features: (3.0) Support: (3.0)
Ease of Use: Not rated (0.0) Quality / Stability: (1.0) Price: Not rated (0.0)
Add Your Feedback

Key to Types of Feedback:

ReviewsReviews   TroubleshootingTroubleshooting   Usage TipsUsage Tips   Developer NotesDeveloper Notes   CommentaryCommentary   Featured ReviewsFeatured Reviews

MisMatch Commentarychoices when bad file found - Version: 1.2, 4/15/2004 09:19AM PST

heynnema
1.2 only gives a choice of trash, or quarantine. I'm missing the "do nothing" or cancel choice.
Post a commentAlert Admin

Most Recent Replies: View All 1 Replies

MisMatch Review'Mismatch' Versions 1.x is limited and can be circumvented. - Version: 1.2, 4/14/2004 07:24PM PST

(2 of 4 users found this comment useful)

barhar
01. Drag a Folder containing the 'virus.mp3' File onto the 'Mismatch' assigned Folder and select whether to quarantine or trash the detected 'virus' File.
02. Drag a duplicate Copy of the same Folder dragged in Step 01 above. A 'Copy' Alert Box will appear asking if you want to 'Cancel' or 'Replace' the existing Folder. If one selects 'Replace', the originally dragged Folder in the 'Mismatch' assigned Folder is replaced - including the enclosed 'virus.mp3' File.

The 'Mismatch' Code only detects the 'virus.mp3' File, not the other 'Proof of Concept' Files of 'PhotoshopMECrack.zip', 'iTunesUpdater421.pkg', and 'Jenny.jpg'.

See few examples applscripts pretending to be other files:
'<http://forums.ort.org.il/files/307/1970653/8208371.zip>' ['iTunesUpdater421.pkg'],
'<http://forums.ort.org.il/files/307/1970675/9181348.zip>' ['Jenny.jpg'],
'<http://forums.ort.org.il/files/307/1970679/1587186.zip>' ['PhotoshopMECrack.zip'].

Nor were any Files I would embed Code into, including an Extension other than 'app' or none at all, were detected.
Post a commentAlert Admin

Most Recent Replies: View All 2 Replies