MisMatch - 1.2Folder action script to detect Trojan MP3s plus more |
|
||||||||||||||
|
|||||||||||||||
Feedback Summary:
| This Version: | |||||
| Overall Rating: | Features: | Support: | |||
| Ease of Use: | Not rated (0.0) | Quality / Stability: | Price: | Not rated (0.0) | |
Key to Types of Feedback:
Reviews
Troubleshooting
Usage Tips
Developer Notes
Commentary
Featured Reviews
choices when bad file found - Version: 1.2, 4/15/2004 09:19AM PST
heynnema
1.2 only gives a choice of trash, or quarantine. I'm missing the "do nothing" or cancel choice.
Most Recent Replies: View All 1 Replies
- choices when bad file found
'Mismatch' Versions 1.x is limited and can be circumvented. 



- Version: 1.2, 4/14/2004 07:24PM PST
(2 of 4 users found this comment useful)
barhar
01. Drag a Folder containing the 'virus.mp3' File onto the 'Mismatch' assigned Folder and select whether to quarantine or trash the detected 'virus' File.
02. Drag a duplicate Copy of the same Folder dragged in Step 01 above. A 'Copy' Alert Box will appear asking if you want to 'Cancel' or 'Replace' the existing Folder. If one selects 'Replace', the originally dragged Folder in the 'Mismatch' assigned Folder is replaced - including the enclosed 'virus.mp3' File.
The 'Mismatch' Code only detects the 'virus.mp3' File, not the other 'Proof of Concept' Files of 'PhotoshopMECrack.zip', 'iTunesUpdater421.pkg', and 'Jenny.jpg'.
See few examples applscripts pretending to be other files:
'<http://forums.ort.org.il/files/307/1970653/8208371.zip>' ['iTunesUpdater421.pkg'],
'<http://forums.ort.org.il/files/307/1970675/9181348.zip>' ['Jenny.jpg'],
'<http://forums.ort.org.il/files/307/1970679/1587186.zip>' ['PhotoshopMECrack.zip'].
Nor were any Files I would embed Code into, including an Extension other than 'app' or none at all, were detected.
02. Drag a duplicate Copy of the same Folder dragged in Step 01 above. A 'Copy' Alert Box will appear asking if you want to 'Cancel' or 'Replace' the existing Folder. If one selects 'Replace', the originally dragged Folder in the 'Mismatch' assigned Folder is replaced - including the enclosed 'virus.mp3' File.
The 'Mismatch' Code only detects the 'virus.mp3' File, not the other 'Proof of Concept' Files of 'PhotoshopMECrack.zip', 'iTunesUpdater421.pkg', and 'Jenny.jpg'.
See few examples applscripts pretending to be other files:
'<http://forums.ort.org.il/files/307/1970653/8208371.zip>' ['iTunesUpdater421.pkg'],
'<http://forums.ort.org.il/files/307/1970675/9181348.zip>' ['Jenny.jpg'],
'<http://forums.ort.org.il/files/307/1970679/1587186.zip>' ['PhotoshopMECrack.zip'].
Nor were any Files I would embed Code into, including an Extension other than 'app' or none at all, were detected.
Most Recent Replies: View All 2 Replies